Aurora

Name	Size	Permissions	Actions
..	-	-	-

[Wed Sep 30 00:54:25.375695 2026] [lsapi:notice] [pid 426443:tid 426443] mod_lsapi:  version 1.1-92
[Wed Sep 30 00:54:25.385724 2026] [:notice] [pid 177751:tid 177751] [host root@just2086.justhost.com] mod_lsapi:  Selfstarter 177751 started
[Wed Sep 30 00:54:25.411670 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gapteckconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.419044 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: crm.grupowebmex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.421352 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: allyquality.wmxone.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.445501 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-01e827cf.thermalite.ca:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.447455 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: thermalite.ca:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.463521 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: iplumbcanberra.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.472560 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.473897 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: trapfilters.designthesign.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.529036 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.545188 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: explora.orontes-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.599903 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: northpineschurch.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.646382 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: beprettydope.werlegends.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.669470 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bienesraices.hn.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.670473 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: zuavinversiones.com.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.702596 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: piox.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.706953 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticoms.pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.707919 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticoms-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.708788 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sydgps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.709641 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sydgps-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.715488 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lipimavida.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.717223 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.718092 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.720679 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avisogps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.721621 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: 5oceanos.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.722604 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ventasgps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.724406 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kutralmar.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.727034 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: todorestaurant-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.727988 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: retamalesdaza.com.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.728871 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: restore.threadloveapparel.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.740754 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jawsq.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.741728 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: msstch.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.742759 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avecs-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.743774 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avions-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.744869 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: inventumgs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.745855 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: azeemtechs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.746863 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: isoltrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.747932 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: krosscorp-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.748992 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ghamditrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.750229 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: go.avions-biddingestimates.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.752290 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avions-biddingestimates.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.755855 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: massum.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.756732 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sprdalo-tech.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.757579 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sminzenering.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.758558 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: central-fuerth.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.774862 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-858bb8d7.retalview-northcoast.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.780843 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: rayfamilyga.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.781859 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: popsandlolly.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.785444 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lollyandpopsfarm.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.788034 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lollyandpopsworkshop.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.859015 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: trustpages.org.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.863416 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-be57ef4a.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.869607 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: yoozu-fr.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.873935 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: cpfitness-eu.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.876457 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: estonreality-sk.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.903714 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: 100schools.100schoolsinburma.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.905758 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sendammo.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.908078 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mymindandbaby.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.940147 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hol.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.971177 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: transway.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.976024 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: premiopro.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.978030 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: memltd-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.981064 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: srchambers.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.984007 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hc-hungary.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.989922 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: arvanisocks.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.990916 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: artofliving.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.991934 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: slkgoldtaste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.993929 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: island-taste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.995942 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: fsimauritius.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:25.997947 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: peacemaker-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.001222 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: onehouseagency.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.005175 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: crayons-couleur.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.008142 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: parashakthipeetham.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.011209 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bulletin-rotaryd9220-info.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.019840 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: my2hotrods.com.jbkarate.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.022385 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-76b116a7.mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.035967 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jtmghana.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.037725 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: janiqueint.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.038658 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bayveritas.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.039919 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: speenergies.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.040785 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: nissicenter.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.041627 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: myticketbay.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.042521 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: linxconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.045045 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: wdc-ministries.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.051653 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gwbiohealth.com.medredisolutions.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.089115 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ncrally.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.090030 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ncsubaru.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.090898 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: limsport.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.105062 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lalifechina.ladazhe.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.106151 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: eklipza.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.107330 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: alvasonline.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.108657 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: weblabspanama.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.110800 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-4b4e771b.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.111987 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: evaccfoundation-org.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.136234 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: abenojar.xsodia.space:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.141575 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gsdf.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.145944 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: taascor.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.147094 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.150337 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: xsodia-space.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.151429 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: southxpresss.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.152531 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kapayaman-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.153655 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: afterfridays.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.154769 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hezekiah-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.155878 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: chsiphil-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.157098 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: staging-stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.158195 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mastertackles.com.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.159223 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mastertackles.online.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.168588 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mngroup.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.170464 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mnlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.171540 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: earthlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.255435 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: harmoneyentertainment.harmoneyent.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.268611 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jodaly.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.270207 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: djstardao.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.271279 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: serenacandiani.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.272342 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: graphicdesignmmd.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.436841 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: er8.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.437820 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: drebok.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.438704 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: azarrow.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.439637 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aplusprint.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.445278 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bowrattler.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.446476 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: falconproductsusa.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.470475 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: silverlakess.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.474632 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: iaolabs-website.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.475665 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-15265131.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.476703 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: novadental-clinic.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.477702 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: dentiststudygroup.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.478695 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: floridamultiservices.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.479731 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lindapulgardentalcare.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.487025 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: humanconstitution.copperpen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.496457 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: growwy-co.casadelmedia.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.497499 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: api.car4youpanama.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.498476 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: car4.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.499400 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: w-e-n.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.500288 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: worldsolarpro.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.501322 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: worldsolarprous.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.503154 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bay-movers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.504303 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: calexpressmovers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.516676 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: madagascar-foundation-org.adam-de-villiers-foundation-usa.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.522590 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: track.easytrack.af:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.713003 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: h2olifeandstyle.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.716037 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: vinason.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.716950 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: vikingrollers.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.781089 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tres60.com.co:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.796661 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tjmcgroup.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.799603 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.804223 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: thestandchurch.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.839490 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: steelkitz.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.849305 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sopritti.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.868179 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: securusconsultants.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.966746 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: premier-printer.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:26.982861 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: pilatesmith.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.008917 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.028194 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.097576 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.120281 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: michellemattar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.127776 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.187489 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.209389 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kierson.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.213902 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.248117 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kau.aan.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.288207 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: imagesarchitecture.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.325611 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hillcraftinc.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.365195 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gongkar.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.393084 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aljabrisweets.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.423423 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: offshoremultihull.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.503202 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: donskey.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.546980 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.555634 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: corinnaharrod.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.563094 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: clubaereolaserena.cl:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.585209 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.594528 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: buffaloprairiestorage.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.643097 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.666609 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: asaas.ly:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.668455 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: arabcgt.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.678941 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: andrewperfetti.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.691380 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aitess-sa.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.730314 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: co-opportunities-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.731497 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: beetreefolkschool-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.733739 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: admin.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.821280 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: codeproblem.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.822386 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hamaraquetta-net2015.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.828514 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: charlesedge.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.831368 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: canmorewhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.832455 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: scotsgoldwhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.835110 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: charlesedge-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.836886 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: londonsquarespirits.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.837926 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: scotsgoldwhisky-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.839858 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.840893 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ethimexcasksolutions-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.843826 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:54:27.869576 2026] [qos:notice] [pid 426443:tid 426443] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients)
[Wed Sep 30 00:54:28.227093 2026] [http2:info] [pid 426443:tid 426443] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.70.0), initializing...
[Wed Sep 30 00:54:28.236386 2026] [mpm_event:notice] [pid 426443:tid 426443] AH00489: Apache/2.4.68 (cPanel) OpenSSL/3.5.5 Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 mod_rbld2.0 configured -- resuming normal operations
[Wed Sep 30 00:54:28.236396 2026] [core:notice] [pid 426443:tid 426443] AH00094: Command line: '/usr/sbin/httpd'
[Wed Sep 30 00:54:29.328558 2026] [http2:info] [pid 178882:tid 178882] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 00:54:29.349605 2026] [security2:error] [pid 178882:tid 179187] [client 52.231.69.245:42240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/file18x.php"] [unique_id "aryyJdqTm83YguA33021KwAAAIc"]
[Wed Sep 30 00:54:29.351641 2026] [security2:error] [pid 178882:tid 179273] [client 4.240.25.22:21558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/new.php"] [unique_id "aryyJdqTm83YguA33021LQAAANg"]
[Wed Sep 30 00:54:29.352169 2026] [security2:error] [pid 178882:tid 179188] [client 74.7.242.1:58058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyJdqTm83YguA33021LgAAAIg"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:54:29.355488 2026] [security2:error] [pid 178882:tid 179200] [client 20.219.2.60:36764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/abc.php"] [unique_id "aryyJdqTm83YguA33021NAAAAJQ"]
[Wed Sep 30 00:54:29.356210 2026] [security2:error] [pid 178882:tid 179209] [client 20.58.177.98:34919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aryyJdqTm83YguA33021NwAAAJs"]
[Wed Sep 30 00:54:29.360282 2026] [security2:error] [pid 178882:tid 179218] [client 20.204.161.246:47235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/vpn.php"] [unique_id "aryyJdqTm83YguA33021OQAAAKQ"]
[Wed Sep 30 00:54:29.365349 2026] [security2:error] [pid 178882:tid 179235] [client 20.219.14.152:26388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyJdqTm83YguA33021PwAAALU"]
[Wed Sep 30 00:54:29.367003 2026] [security2:error] [pid 178882:tid 179243] [client 20.204.42.136:27945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/cns.php"] [unique_id "aryyJdqTm83YguA33021QQAAALs"]
[Wed Sep 30 00:54:29.368042 2026] [security2:error] [pid 178882:tid 179251] [client 20.219.2.60:10909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/155.php"] [unique_id "aryyJdqTm83YguA33021RgAAAMM"]
[Wed Sep 30 00:54:29.369632 2026] [security2:error] [pid 178882:tid 179252] [client 20.251.39.228:5511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/rzki.php"] [unique_id "aryyJdqTm83YguA33021SQAAAMQ"]
[Wed Sep 30 00:54:29.370630 2026] [security2:error] [pid 178882:tid 179260] [client 20.194.30.107:37667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/echkm.php"] [unique_id "aryyJdqTm83YguA33021SwAAAMw"]
[Wed Sep 30 00:54:29.372729 2026] [security2:error] [pid 178882:tid 179267] [client 20.194.30.107:8315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/biufile.php"] [unique_id "aryyJdqTm83YguA33021UAAAANM"]
[Wed Sep 30 00:54:29.373603 2026] [security2:error] [pid 178882:tid 179272] [client 20.198.74.230:23895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/xivoefjr.php"] [unique_id "aryyJdqTm83YguA33021UgAAANc"]
[Wed Sep 30 00:54:29.373632 2026] [security2:error] [pid 178882:tid 179269] [client 20.70.173.30:25091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/av.php"] [unique_id "aryyJdqTm83YguA33021UQAAANU"]
[Wed Sep 30 00:54:29.374608 2026] [security2:error] [pid 178882:tid 179277] [client 20.70.173.30:59975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/admin.php"] [unique_id "aryyJdqTm83YguA33021VAAAANs"]
[Wed Sep 30 00:54:29.375279 2026] [security2:error] [pid 178882:tid 179279] [client 20.219.2.60:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/44.php"] [unique_id "aryyJdqTm83YguA33021VQAAAN0"]
[Wed Sep 30 00:54:29.375650 2026] [security2:error] [pid 178882:tid 179283] [client 4.196.65.241:2103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/a22.php"] [unique_id "aryyJdqTm83YguA33021VgAAAOE"]
[Wed Sep 30 00:54:29.376014 2026] [security2:error] [pid 178882:tid 179284] [client 20.194.30.107:31597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/media.php"] [unique_id "aryyJdqTm83YguA33021VwAAAOI"]
[Wed Sep 30 00:54:29.376431 2026] [security2:error] [pid 178882:tid 179286] [client 20.28.180.172:34297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zoo1.php"] [unique_id "aryyJdqTm83YguA33021WAAAAOQ"]
[Wed Sep 30 00:54:29.378782 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:36380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.379305 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:36380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.385492 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:19234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.385945 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:19234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.389319 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:8594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.389683 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:8594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.392245 2026] [security2:error] [pid 178882:tid 179315] [client 4.240.25.22:10844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryyJdqTm83YguA33021cAAAAP8"]
[Wed Sep 30 00:54:29.392437 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:62551] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.392858 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:62551] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.394064 2026] [security2:error] [pid 178882:tid 179256] [client 173.212.198.43:44808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.198.212.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "aryyJdqTm83YguA33021SgAAAMg"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 00:54:29.397227 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:32944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.397665 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:32944] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.401589 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:48374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.401846 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:48374] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.406504 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:26123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.407033 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:26123] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.408486 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:39010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.408896 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:39010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.409590 2026] [security2:error] [pid 178882:tid 179305] [client 20.70.173.30:16258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/reop3.php"] [unique_id "aryyJdqTm83YguA33021cwAAAPc"]
[Wed Sep 30 00:54:29.415063 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:11547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.415511 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:11547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.419003 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:4070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.419494 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:4070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.421397 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:23838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.421934 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:23838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.425593 2026] [security2:error] [pid 178882:tid 179231] [client 82.158.193.165:59294] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "www.bradgoreski.co"] [uri "/"] [unique_id "aryyJdqTm83YguA33021gAAAALE"]
[Wed Sep 30 00:54:29.430813 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:61217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.431018 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:53288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.431231 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:61217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.431537 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:53288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.432688 2026] [access_compat:error] [pid 178882:tid 179076] [remote 57.141.24.28:23260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.433158 2026] [access_compat:error] [pid 178882:tid 179076] [remote 57.141.24.28:23260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.433768 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:22673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.434272 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:22673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.435207 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:22479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.435372 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:5530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.435633 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:22479] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.435793 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:5530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.452147 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:2706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.452583 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:2706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.452645 2026] [security2:error] [pid 178882:tid 179318] [client 4.240.25.22:21888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/ops.php"] [unique_id "aryyJdqTm83YguA33021cgAAAQI"]
[Wed Sep 30 00:54:29.452862 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:10433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.453228 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:10433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.454339 2026] [security2:error] [pid 178882:tid 179307] [client 216.73.216.46:48664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyJdqTm83YguA33021bQAAAPk"]
[Wed Sep 30 00:54:29.460925 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:8600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.461539 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:8600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.462085 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:64332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.462502 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:64332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.467671 2026] [access_compat:error] [pid 178882:tid 179226] [client 74.7.243.227:33272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:54:29.468106 2026] [access_compat:error] [pid 178882:tid 179226] [client 74.7.243.227:33272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:54:29.515046 2026] [security2:error] [pid 178882:tid 179245] [client 74.7.244.57:41078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.dss.yrw.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryyJdqTm83YguA33021uAAAvTE"]
[Wed Sep 30 00:54:29.520705 2026] [autoindex:error] [pid 178882:tid 179100] [remote 74.7.242.22:56834] AH01276: Cannot serve directory /home4/dssyrwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:54:29.559617 2026] [access_compat:error] [pid 178882:tid 179102] [remote 17.166.24.146:50858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.560209 2026] [access_compat:error] [pid 178882:tid 179102] [remote 17.166.24.146:50858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.562313 2026] [security2:error] [pid 178882:tid 179293] [client 194.104.11.57:60149] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "my2hotrods.com"] [uri "/wp-content/endurance-page-cache/_index.html"] [unique_id "aryyJdqTm83YguA33021ywAAAOs"]
[Wed Sep 30 00:54:29.587605 2026] [security2:error] [pid 178882:tid 179111] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyJdqTm83YguA33021zQAA6Ts"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D249619
[Wed Sep 30 00:54:29.587660 2026] [security2:error] [pid 178882:tid 179111] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyJdqTm83YguA33021zQAA6Ts"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D249619
[Wed Sep 30 00:54:29.599216 2026] [security2:error] [pid 178882:tid 179116] [remote 220.181.108.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayutd.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyJdqTm83YguA330212QAAkT8"]
[Wed Sep 30 00:54:29.601705 2026] [security2:error] [pid 178882:tid 179320] [client 103.168.66.101:24990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyJdqTm83YguA330215AAAAQQ"]
[Wed Sep 30 00:54:29.634515 2026] [access_compat:error] [pid 178882:tid 179196] [client 47.79.13.64:38406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:29.634994 2026] [access_compat:error] [pid 178882:tid 179196] [client 47.79.13.64:38406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:29.644710 2026] [security2:error] [pid 178882:tid 179256] [client 43.163.81.168:39742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.81.163.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/wp-login.php"] [unique_id "aryyJdqTm83YguA330216wAAAMg"], referer: https://scottcoy.com/wp-login.php
[Wed Sep 30 00:54:29.654084 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:44076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.654535 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:44076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.655965 2026] [access_compat:error] [pid 178882:tid 179216] [client 74.7.243.227:33278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbnM=
[Wed Sep 30 00:54:29.656670 2026] [access_compat:error] [pid 178882:tid 179216] [client 74.7.243.227:33278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbnM=
[Wed Sep 30 00:54:29.666908 2026] [security2:error] [pid 178882:tid 179250] [client 52.231.69.245:41985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/123viva.php"] [unique_id "aryyJdqTm83YguA33021-QAAAMI"]
[Wed Sep 30 00:54:29.695409 2026] [security2:error] [pid 178882:tid 179193] [client 123.63.248.21:58336] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA330218AAAAI0"]
[Wed Sep 30 00:54:29.695563 2026] [security2:error] [pid 178882:tid 179193] [client 123.63.248.21:58336] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA330218AAAAI0"]
[Wed Sep 30 00:54:29.713517 2026] [security2:error] [pid 178882:tid 179196] [client 207.45.0.9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/mercury/"] [unique_id "aryyJdqTm83YguA33022AwAAAJA"]
[Wed Sep 30 00:54:29.722094 2026] [security2:error] [pid 178882:tid 179246] [client 74.7.230.22:42750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.lotusfengshui.co.uk"] [uri "/index.php"] [unique_id "aryyJdqTm83YguA330210AAAvjw"]
[Wed Sep 30 00:54:29.724556 2026] [access_compat:error] [pid 178882:tid 179317] [client 47.79.13.176:36658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:29.729039 2026] [access_compat:error] [pid 178882:tid 179317] [client 47.79.13.176:36658] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:29.731650 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:28397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.732063 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:28397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.752003 2026] [security2:error] [pid 178882:tid 179279] [client 20.58.177.98:35965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/marijuana.php"] [unique_id "aryyJdqTm83YguA33022FAAAAN0"]
[Wed Sep 30 00:54:29.785689 2026] [security2:error] [pid 178882:tid 179212] [client 45.78.94.13:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyJdqTm83YguA33022GQAAAJ4"]
[Wed Sep 30 00:54:29.789208 2026] [security2:error] [pid 178882:tid 179311] [client 168.107.70.193:65084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.apowerfuldifference.com"] [uri "/"] [unique_id "aryyJdqTm83YguA33022EAAAAPw"]
[Wed Sep 30 00:54:29.791907 2026] [security2:error] [pid 178882:tid 179278] [client 45.156.62.96:54389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA33021xwAAANw"]
[Wed Sep 30 00:54:29.814981 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.815402 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.815571 2026] [security2:error] [pid 178882:tid 179278] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyJdqTm83YguA33022JQAAANw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.833406 2026] [security2:error] [pid 178882:tid 179231] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyJdqTm83YguA33022KQAAALE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.837068 2026] [security2:error] [pid 178882:tid 179208] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyJdqTm83YguA33022IgAAAJo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.845382 2026] [security2:error] [pid 178882:tid 179253] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyJdqTm83YguA33022LQAAAMU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.845702 2026] [security2:error] [pid 178882:tid 179228] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyJdqTm83YguA33022LgAAAK4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.852287 2026] [security2:error] [pid 178882:tid 179311] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyJdqTm83YguA33022KwAAAPw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.870005 2026] [security2:error] [pid 178882:tid 179128] [remote 40.77.167.157:18920] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.glorymfb.com"] [uri "/sitemap.xml.gz"] [unique_id "aryyJdqTm83YguA33022MQAAu0o"]
[Wed Sep 30 00:54:29.871816 2026] [security2:error] [pid 178882:tid 179273] [client 45.114.242.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyJdqTm83YguA33022MgAAANg"]
[Wed Sep 30 00:54:29.880071 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:21906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.880411 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:21906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:29.887280 2026] [security2:error] [pid 178882:tid 179196] [client 20.251.39.228:40949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/xsas.php"] [unique_id "aryyJdqTm83YguA33022NQAAAJA"]
[Wed Sep 30 00:54:29.891349 2026] [security2:error] [pid 178882:tid 179278] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyJdqTm83YguA33022NgAAANw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.908771 2026] [security2:error] [pid 178882:tid 179190] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyJdqTm83YguA33022NwAAAIo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:29.918361 2026] [security2:error] [pid 178882:tid 179185] [client 216.73.216.46:58820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyJdqTm83YguA33022OQAAAIU"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvbGltZTUvcGhwODI%3D
[Wed Sep 30 00:54:29.919086 2026] [security2:error] [pid 178882:tid 179272] [client 116.72.182.19:49435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA33022OgAAANc"]
[Wed Sep 30 00:54:29.919295 2026] [security2:error] [pid 178882:tid 179272] [client 116.72.182.19:49435] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA33022OgAAANc"]
[Wed Sep 30 00:54:29.927417 2026] [security2:error] [pid 178882:tid 179242] [client 216.73.216.46:64332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyJdqTm83YguA33022OwAAALo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk2MS9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:54:29.953506 2026] [security2:error] [pid 178882:tid 179132] [remote 47.128.34.126:39120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "central-fuerth.de"] [uri "/"] [unique_id "aryyJdqTm83YguA33022PQAAnk4"]
[Wed Sep 30 00:54:29.965546 2026] [security2:error] [pid 178882:tid 179307] [client 116.197.133.25:63843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA33022QQAAAPk"]
[Wed Sep 30 00:54:29.965701 2026] [security2:error] [pid 178882:tid 179307] [client 116.197.133.25:63843] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyJdqTm83YguA33022QQAAAPk"]
[Wed Sep 30 00:54:29.975001 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:29.975466 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.003325 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:21906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.003949 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:21906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.011030 2026] [security2:error] [pid 178882:tid 179188] [client 103.172.210.103:53192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022TAAAAIg"]
[Wed Sep 30 00:54:30.011159 2026] [security2:error] [pid 178882:tid 179188] [client 103.172.210.103:53192] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022TAAAAIg"]
[Wed Sep 30 00:54:30.011354 2026] [security2:error] [pid 178882:tid 179206] [client 116.193.128.26:63686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022TgAAAJk"]
[Wed Sep 30 00:54:30.011492 2026] [security2:error] [pid 178882:tid 179206] [client 116.193.128.26:63686] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022TgAAAJk"]
[Wed Sep 30 00:54:30.012456 2026] [security2:error] [pid 178882:tid 179316] [client 52.231.69.245:56259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/Components.update.php"] [unique_id "aryyJtqTm83YguA33022TwAAAQA"]
[Wed Sep 30 00:54:30.038355 2026] [security2:error] [pid 178882:tid 179272] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyJtqTm83YguA33022UwAAANc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:30.049344 2026] [security2:error] [pid 178882:tid 179269] [client 190.129.101.216:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyJtqTm83YguA33022VAAAANU"]
[Wed Sep 30 00:54:30.081356 2026] [ssl:error] [pid 178882:tid 179204] [client 216.25.124.25:41671] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcontacts.kqr.myw.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:54:30.084498 2026] [security2:error] [pid 178882:tid 179196] [client 20.219.14.152:26369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyJtqTm83YguA33022YQAAAJA"]
[Wed Sep 30 00:54:30.094566 2026] [security2:error] [pid 178882:tid 179220] [client 150.107.232.159:36227] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022YwAAAKY"]
[Wed Sep 30 00:54:30.094736 2026] [security2:error] [pid 178882:tid 179220] [client 150.107.232.159:36227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022YwAAAKY"]
[Wed Sep 30 00:54:30.104203 2026] [security2:error] [pid 178882:tid 179268] [client 152.59.169.65:59263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022ZwAAANQ"]
[Wed Sep 30 00:54:30.104421 2026] [security2:error] [pid 178882:tid 179268] [client 152.59.169.65:59263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022ZwAAANQ"]
[Wed Sep 30 00:54:30.113108 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.113536 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.125101 2026] [security2:error] [pid 178882:tid 179260] [client 223.235.102.107:20592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022agAAAMw"]
[Wed Sep 30 00:54:30.125234 2026] [security2:error] [pid 178882:tid 179260] [client 223.235.102.107:20592] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022agAAAMw"]
[Wed Sep 30 00:54:30.128487 2026] [security2:error] [pid 178882:tid 179301] [client 20.58.177.98:34940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aryyJtqTm83YguA33022bAAAAPM"]
[Wed Sep 30 00:54:30.129040 2026] [security2:error] [pid 178882:tid 179300] [client 152.59.165.7:56992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022bQAAAPI"]
[Wed Sep 30 00:54:30.129302 2026] [security2:error] [pid 178882:tid 179300] [client 152.59.165.7:56992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022bQAAAPI"]
[Wed Sep 30 00:54:30.141054 2026] [security2:error] [pid 178882:tid 179261] [client 103.166.103.39:57077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.103.166.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022bwAAAM0"]
[Wed Sep 30 00:54:30.141237 2026] [security2:error] [pid 178882:tid 179261] [client 103.166.103.39:57077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022bwAAAM0"]
[Wed Sep 30 00:54:30.145872 2026] [access_compat:error] [pid 178882:tid 179199] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:54:30.146296 2026] [access_compat:error] [pid 178882:tid 179199] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:54:30.150600 2026] [security2:error] [pid 178882:tid 179197] [client 202.179.95.79:63043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022cAAAAJE"]
[Wed Sep 30 00:54:30.150915 2026] [security2:error] [pid 178882:tid 179197] [client 202.179.95.79:63043] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022cAAAAJE"]
[Wed Sep 30 00:54:30.172086 2026] [security2:error] [pid 178882:tid 179234] [client 103.168.66.101:25008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyJtqTm83YguA33022cgAAALQ"]
[Wed Sep 30 00:54:30.180624 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.181268 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.211966 2026] [security2:error] [pid 178882:tid 179256] [client 223.181.30.165:5829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022eQAAAMg"]
[Wed Sep 30 00:54:30.212149 2026] [security2:error] [pid 178882:tid 179256] [client 223.181.30.165:5829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022eQAAAMg"]
[Wed Sep 30 00:54:30.244725 2026] [security2:error] [pid 178882:tid 179201] [client 72.255.10.32:51307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022fAAAAJU"]
[Wed Sep 30 00:54:30.244887 2026] [security2:error] [pid 178882:tid 179201] [client 72.255.10.32:51307] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022fAAAAJU"]
[Wed Sep 30 00:54:30.266057 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.266332 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.295625 2026] [security2:error] [pid 178882:tid 179293] [client 45.138.12.32:27372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rzm.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyJtqTm83YguA33022fwAAAOs"]
[Wed Sep 30 00:54:30.355532 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.356034 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.384020 2026] [security2:error] [pid 178882:tid 179279] [client 103.159.192.142:53044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022iAAAAN0"]
[Wed Sep 30 00:54:30.384166 2026] [security2:error] [pid 178882:tid 179279] [client 103.159.192.142:53044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022iAAAAN0"]
[Wed Sep 30 00:54:30.432224 2026] [security2:error] [pid 178882:tid 179161] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyJtqTm83YguA33022kQAA72s"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D78483
[Wed Sep 30 00:54:30.435972 2026] [security2:error] [pid 178882:tid 179255] [client 203.122.45.246:63631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022kgAAAMc"]
[Wed Sep 30 00:54:30.436102 2026] [security2:error] [pid 178882:tid 179255] [client 203.122.45.246:63631] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022kgAAAMc"]
[Wed Sep 30 00:54:30.440313 2026] [security2:error] [pid 178882:tid 179203] [client 20.251.39.228:40927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/d12.php"] [unique_id "aryyJtqTm83YguA33022kwAAAJY"]
[Wed Sep 30 00:54:30.440590 2026] [security2:error] [pid 178882:tid 179234] [client 216.73.216.46:21906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyJtqTm83YguA33022lAAAALQ"]
[Wed Sep 30 00:54:30.499760 2026] [security2:error] [pid 178882:tid 179230] [client 52.231.69.245:65205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/sm.php"] [unique_id "aryyJtqTm83YguA33022nAAAALA"]
[Wed Sep 30 00:54:30.545707 2026] [security2:error] [pid 178882:tid 179262] [client 20.58.177.98:34936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-content/403.php"] [unique_id "aryyJtqTm83YguA33022nwAAAM4"]
[Wed Sep 30 00:54:30.547927 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.548346 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.601070 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:54:30.601354 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:54:30.631251 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.631539 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.673559 2026] [security2:error] [pid 178882:tid 179194] [client 138.255.26.180:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyJtqTm83YguA33022pQAAAI4"]
[Wed Sep 30 00:54:30.679511 2026] [security2:error] [pid 178882:tid 179261] [client 173.212.198.43:58462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.198.212.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "aryyJtqTm83YguA33022pgAAAM0"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 00:54:30.692057 2026] [security2:error] [pid 178882:tid 179218] [client 20.219.14.152:26409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/aa.php"] [unique_id "aryyJtqTm83YguA33022pwAAAKQ"]
[Wed Sep 30 00:54:30.707387 2026] [security2:error] [pid 178882:tid 179297] [client 20.204.42.136:57202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/qnHOQSw8LXV.php"] [unique_id "aryyJtqTm83YguA33022qAAAAO8"]
[Wed Sep 30 00:54:30.722207 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.722796 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.745012 2026] [security2:error] [pid 178882:tid 179302] [client 20.219.2.60:18846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/a5e0a.php"] [unique_id "aryyJtqTm83YguA33022rAAAAPQ"]
[Wed Sep 30 00:54:30.804195 2026] [security2:error] [pid 178882:tid 179287] [client 43.227.131.37:40732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022rgAAAOU"]
[Wed Sep 30 00:54:30.804374 2026] [security2:error] [pid 178882:tid 179287] [client 43.227.131.37:40732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022rgAAAOU"]
[Wed Sep 30 00:54:30.816741 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.817186 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.857761 2026] [security2:error] [pid 178882:tid 179215] [client 52.231.69.245:42298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/mknobgkg.php"] [unique_id "aryyJtqTm83YguA33022swAAAKE"]
[Wed Sep 30 00:54:30.864727 2026] [security2:error] [pid 178882:tid 179190] [client 39.44.16.112:62264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022tQAAAIo"]
[Wed Sep 30 00:54:30.866076 2026] [security2:error] [pid 178882:tid 179190] [client 39.44.16.112:62264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyJtqTm83YguA33022tQAAAIo"]
[Wed Sep 30 00:54:30.872027 2026] [security2:error] [pid 178882:tid 179265] [client 20.251.39.228:16857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/okxh.php"] [unique_id "aryyJtqTm83YguA33022tgAAANE"]
[Wed Sep 30 00:54:30.876675 2026] [security2:error] [pid 178882:tid 179188] [client 20.194.30.107:30831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/ccc.php"] [unique_id "aryyJtqTm83YguA33022twAAAIg"]
[Wed Sep 30 00:54:30.901873 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:30.902200 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:30.915965 2026] [security2:error] [pid 178882:tid 179195] [client 31.43.60.130:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/mercury/"] [unique_id "aryyJtqTm83YguA33022vgAAAI8"]
[Wed Sep 30 00:54:30.993173 2026] [security2:error] [pid 178882:tid 179189] [client 20.58.177.98:35904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/css/colors/coffee/index.php"] [unique_id "aryyJtqTm83YguA33022xAAAAIk"]
[Wed Sep 30 00:54:31.059794 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.060165 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.087787 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.088221 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.089679 2026] [security2:error] [pid 178882:tid 179204] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyJ9qTm83YguA33022zQAAAJc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:31.095558 2026] [security2:error] [pid 178882:tid 179267] [client 103.148.43.14:52885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA330220AAAANM"]
[Wed Sep 30 00:54:31.095751 2026] [security2:error] [pid 178882:tid 179267] [client 103.148.43.14:52885] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA330220AAAANM"]
[Wed Sep 30 00:54:31.119171 2026] [access_compat:error] [pid 178882:tid 179255] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:54:31.119204 2026] [security2:error] [pid 178882:tid 179222] [client 49.36.41.37:55236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA330221AAAAKg"]
[Wed Sep 30 00:54:31.119386 2026] [security2:error] [pid 178882:tid 179222] [client 49.36.41.37:55236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA330221AAAAKg"]
[Wed Sep 30 00:54:31.119612 2026] [access_compat:error] [pid 178882:tid 179255] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:54:31.126070 2026] [security2:error] [pid 178882:tid 179258] [client 52.231.69.245:42255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/dairg.php"] [unique_id "aryyJ9qTm83YguA330221QAAAMo"]
[Wed Sep 30 00:54:31.129520 2026] [security2:error] [pid 178882:tid 179302] [client 43.163.81.168:40598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.81.163.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/wp-login.php"] [unique_id "aryyJ9qTm83YguA330221gAAAPQ"], referer: https://scottcoy.com/wp-login.php
[Wed Sep 30 00:54:31.179329 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.179733 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.212405 2026] [security2:error] [pid 178882:tid 179253] [client 20.219.14.152:26514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/z70.php"] [unique_id "aryyJ9qTm83YguA330222gAAAMU"]
[Wed Sep 30 00:54:31.241015 2026] [security2:error] [pid 178882:tid 179287] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyJ9qTm83YguA330223AAAAOU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:31.268939 2026] [security2:error] [pid 178882:tid 179233] [client 20.251.39.228:19198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/55b76.php"] [unique_id "aryyJ9qTm83YguA330223gAAALM"]
[Wed Sep 30 00:54:31.269328 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.269736 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.356198 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.356471 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.449540 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.449855 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.461749 2026] [security2:error] [pid 178882:tid 179231] [client 20.28.180.172:29585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/h86jb6g8.php"] [unique_id "aryyJ9qTm83YguA330226wAAALE"]
[Wed Sep 30 00:54:31.473560 2026] [security2:error] [pid 178882:tid 179232] [client 52.231.69.245:41728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/dronishness.php"] [unique_id "aryyJ9qTm83YguA330227QAAALI"]
[Wed Sep 30 00:54:31.477299 2026] [security2:error] [pid 178882:tid 179283] [client 20.58.177.98:34901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/css.php"] [unique_id "aryyJ9qTm83YguA330227gAAAOE"]
[Wed Sep 30 00:54:31.539222 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.539485 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.548246 2026] [security2:error] [pid 178882:tid 179194] [client 20.194.30.107:10011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/11.php"] [unique_id "aryyJ9qTm83YguA330228AAAAI4"]
[Wed Sep 30 00:54:31.573721 2026] [security2:error] [pid 178882:tid 179235] [client 103.189.178.93:48522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.178.189.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.3rdeyebuilder.com"] [uri "/index.php"] [unique_id "aryyJ9qTm83YguA330229AAAALU"]
[Wed Sep 30 00:54:31.591954 2026] [access_compat:error] [pid 178882:tid 179275] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:54:31.592221 2026] [access_compat:error] [pid 178882:tid 179275] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:54:31.595002 2026] [security2:error] [pid 178882:tid 179296] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyJ9qTm83YguA330229gAAAO4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:31.630339 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.630600 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:30836] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.646738 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:40903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tt.php"] [unique_id "aryyJ9qTm83YguA33022-QAAAKg"]
[Wed Sep 30 00:54:31.715334 2026] [security2:error] [pid 178882:tid 179258] [client 20.219.14.152:26516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/f35.php"] [unique_id "aryyJ9qTm83YguA33022_AAAAMo"]
[Wed Sep 30 00:54:31.722450 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.722884 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.745455 2026] [core:error] [pid 178882:tid 179304] [client 45.138.12.41:44206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:31.745477 2026] [core:error] [pid 178882:tid 179304] [client 45.138.12.41:44206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:31.762500 2026] [security2:error] [pid 178882:tid 179285] [client 20.219.2.60:18862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bo.php"] [unique_id "aryyJ9qTm83YguA33023AwAAAOM"]
[Wed Sep 30 00:54:31.776920 2026] [security2:error] [pid 178882:tid 179269] [client 20.219.2.60:36707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/motu.php"] [unique_id "aryyJ9qTm83YguA33023BgAAANU"]
[Wed Sep 30 00:54:31.804467 2026] [security2:error] [pid 178882:tid 179305] [client 52.231.69.245:56302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/Row_wsoo.php"] [unique_id "aryyJ9qTm83YguA33023CAAAAPc"]
[Wed Sep 30 00:54:31.817081 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.817537 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.822983 2026] [security2:error] [pid 178882:tid 179257] [client 4.240.25.22:10828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/222.php"] [unique_id "aryyJ9qTm83YguA33023CgAAAMk"]
[Wed Sep 30 00:54:31.826764 2026] [security2:error] [pid 178882:tid 179265] [client 49.205.105.16:14943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA33023CwAAANE"]
[Wed Sep 30 00:54:31.826907 2026] [security2:error] [pid 178882:tid 179265] [client 49.205.105.16:14943] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyJ9qTm83YguA33023CwAAANE"]
[Wed Sep 30 00:54:31.908011 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.908462 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:31.916934 2026] [security2:error] [pid 178882:tid 179209] [client 181.91.85.191:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyJ9qTm83YguA33023GgAAAJs"]
[Wed Sep 30 00:54:31.922536 2026] [security2:error] [pid 178882:tid 179288] [client 20.58.177.98:35918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-admin/user/about.php"] [unique_id "aryyJ9qTm83YguA33023HAAAAOY"]
[Wed Sep 30 00:54:31.958245 2026] [security2:error] [pid 178882:tid 179201] [client 20.219.2.60:10639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-the.php"] [unique_id "aryyJ9qTm83YguA33023HgAAAJU"]
[Wed Sep 30 00:54:31.993739 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:31.994020 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.060024 2026] [security2:error] [pid 178882:tid 179242] [client 151.75.206.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyKNqTm83YguA33023IgAAALo"]
[Wed Sep 30 00:54:32.062068 2026] [security2:error] [pid 178882:tid 179212] [client 216.73.216.46:30836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyKNqTm83YguA33023IwAAAJ4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvZG9jL2FsdC1waHA3Mi1nZA%3D%3D
[Wed Sep 30 00:54:32.078028 2026] [security2:error] [pid 178882:tid 179259] [client 52.231.69.245:65211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/x2.php"] [unique_id "aryyKNqTm83YguA33023JgAAAMs"]
[Wed Sep 30 00:54:32.080225 2026] [security2:error] [pid 178882:tid 179315] [client 20.251.39.228:40912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/maul.php"] [unique_id "aryyKNqTm83YguA33023JwAAAP8"]
[Wed Sep 30 00:54:32.085132 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.085400 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.085497 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:54:32.085759 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:54:32.107163 2026] [security2:error] [pid 178882:tid 179229] [client 20.204.42.136:57178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/resp.php"] [unique_id "aryyKNqTm83YguA33023KAAAAK8"]
[Wed Sep 30 00:54:32.111806 2026] [security2:error] [pid 178882:tid 179261] [client 20.70.173.30:16309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/CAE-2.5.php"] [unique_id "aryyKNqTm83YguA33023KgAAAM0"]
[Wed Sep 30 00:54:32.138389 2026] [security2:error] [pid 178882:tid 179262] [client 102.254.102.41:28300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023KwAAAM4"]
[Wed Sep 30 00:54:32.138556 2026] [security2:error] [pid 178882:tid 179262] [client 102.254.102.41:28300] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023KwAAAM4"]
[Wed Sep 30 00:54:32.153627 2026] [security2:error] [pid 178882:tid 179228] [client 45.138.12.43:6526] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.northsecuritysystems.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyKNqTm83YguA33023LAAAAK4"]
[Wed Sep 30 00:54:32.175844 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.176105 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.196968 2026] [security2:error] [pid 178882:tid 179309] [client 20.219.14.152:26415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/adminfuns.php"] [unique_id "aryyKNqTm83YguA33023LwAAAPo"]
[Wed Sep 30 00:54:32.204490 2026] [security2:error] [pid 178882:tid 179199] [client 103.24.86.56:63785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023MAAAAJM"]
[Wed Sep 30 00:54:32.204615 2026] [security2:error] [pid 178882:tid 179199] [client 103.24.86.56:63785] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023MAAAAJM"]
[Wed Sep 30 00:54:32.271718 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.272152 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.318832 2026] [security2:error] [pid 178882:tid 179301] [client 20.58.177.98:35964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/about.php"] [unique_id "aryyKNqTm83YguA33023MgAAAPM"]
[Wed Sep 30 00:54:32.357832 2026] [security2:error] [pid 178882:tid 179300] [client 20.70.173.30:60559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/css.php"] [unique_id "aryyKNqTm83YguA33023NAAAAPI"]
[Wed Sep 30 00:54:32.360024 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.360380 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.368556 2026] [security2:error] [pid 178882:tid 179297] [client 52.231.69.245:56278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/v4.php"] [unique_id "aryyKNqTm83YguA33023NQAAAO8"]
[Wed Sep 30 00:54:32.448530 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.448799 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.539748 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.540025 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:58011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.608495 2026] [access_compat:error] [pid 178882:tid 179224] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvbnM=
[Wed Sep 30 00:54:32.608758 2026] [access_compat:error] [pid 178882:tid 179224] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvbnM=
[Wed Sep 30 00:54:32.630676 2026] [access_compat:error] [pid 178882:tid 179310] [client 47.79.13.58:44618] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:32.630971 2026] [access_compat:error] [pid 178882:tid 179310] [client 47.79.13.58:44618] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:32.632372 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.632842 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.647925 2026] [security2:error] [pid 178882:tid 179209] [client 52.231.69.245:42247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/albin.php"] [unique_id "aryyKNqTm83YguA33023RwAAAJs"]
[Wed Sep 30 00:54:32.672171 2026] [security2:error] [pid 178882:tid 179288] [client 20.251.39.228:24050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/5b9ac.php"] [unique_id "aryyKNqTm83YguA33023SAAAAOY"]
[Wed Sep 30 00:54:32.705776 2026] [security2:error] [pid 178882:tid 179280] [client 20.219.14.152:26410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/av.php"] [unique_id "aryyKNqTm83YguA33023SQAAAN4"]
[Wed Sep 30 00:54:32.719514 2026] [security2:error] [pid 178882:tid 179223] [client 20.204.161.246:48126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/alfa.php"] [unique_id "aryyKNqTm83YguA33023SwAAAKk"]
[Wed Sep 30 00:54:32.724239 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.724427 2026] [security2:error] [pid 178882:tid 179246] [client 20.58.177.98:34932] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "esvarbon.gov.ng"] [uri "/1.php"] [unique_id "aryyKNqTm83YguA33023TAAAAL4"]
[Wed Sep 30 00:54:32.724496 2026] [security2:error] [pid 178882:tid 179246] [client 20.58.177.98:34932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/1.php"] [unique_id "aryyKNqTm83YguA33023TAAAAL4"]
[Wed Sep 30 00:54:32.724512 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.784703 2026] [access_compat:error] [pid 178882:tid 179196] [client 47.79.13.65:42864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:32.785121 2026] [access_compat:error] [pid 178882:tid 179196] [client 47.79.13.65:42864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:32.811915 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.812177 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.889921 2026] [security2:error] [pid 178882:tid 179109] [remote 74.7.227.56:43488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyKNqTm83YguA33023VgAAlTk"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:54:32.904597 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:32.904862 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:32.920055 2026] [security2:error] [pid 178882:tid 179291] [client 20.219.2.60:36760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/inputs.php"] [unique_id "aryyKNqTm83YguA33023WQAAAOk"]
[Wed Sep 30 00:54:32.928844 2026] [security2:error] [pid 178882:tid 179260] [client 52.231.69.245:42024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/atkno.php"] [unique_id "aryyKNqTm83YguA33023WwAAAMw"]
[Wed Sep 30 00:54:32.964056 2026] [security2:error] [pid 178882:tid 179303] [client 216.73.216.46:58011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyKNqTm83YguA33023XwAAAPU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjUvbm9kZTAvbWVtb3J5MTY2
[Wed Sep 30 00:54:32.991695 2026] [security2:error] [pid 178882:tid 179206] [client 102.244.197.104:26193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.197.244.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023XgAAAJk"]
[Wed Sep 30 00:54:32.991793 2026] [security2:error] [pid 178882:tid 179206] [client 102.244.197.104:26193] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyKNqTm83YguA33023XgAAAJk"]
[Wed Sep 30 00:54:33.028369 2026] [security2:error] [pid 178882:tid 179262] [client 20.251.39.228:32779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/hehe.php"] [unique_id "aryyKdqTm83YguA33023YQAAAM4"]
[Wed Sep 30 00:54:33.040558 2026] [security2:error] [pid 178882:tid 179053] [remote 2a03:2880:f814:7:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyKdqTm83YguA33023YgAA0gE"]
[Wed Sep 30 00:54:33.040590 2026] [security2:error] [pid 178882:tid 179053] [remote 2a03:2880:f814:7:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyKdqTm83YguA33023YgAA0gE"]
[Wed Sep 30 00:54:33.049637 2026] [security2:error] [pid 178882:tid 179199] [client 216.73.216.46:13767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyKdqTm83YguA33023ZAAAAJM"]
[Wed Sep 30 00:54:33.086556 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.086846 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.102745 2026] [security2:error] [pid 178882:tid 179267] [client 85.89.202.233:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyKdqTm83YguA33023awAAANM"]
[Wed Sep 30 00:54:33.116098 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:33.116360 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:33.198429 2026] [security2:error] [pid 178882:tid 179217] [client 52.231.69.245:42297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/gptsh.php"] [unique_id "aryyKdqTm83YguA33023bgAAAKM"]
[Wed Sep 30 00:54:33.231742 2026] [security2:error] [pid 178882:tid 179287] [client 20.58.177.98:35934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/marijuana.php"] [unique_id "aryyKdqTm83YguA33023cgAAAOU"]
[Wed Sep 30 00:54:33.231901 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.232324 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.263756 2026] [security2:error] [pid 178882:tid 179257] [client 20.219.14.152:26496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/dex.php"] [unique_id "aryyKdqTm83YguA33023dAAAAMk"]
[Wed Sep 30 00:54:33.269548 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.269825 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.360691 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.360989 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.365476 2026] [security2:error] [pid 178882:tid 179264] [client 92.71.9.90:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/laptop/"] [unique_id "aryyKdqTm83YguA33023ewAAANA"]
[Wed Sep 30 00:54:33.454213 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.454501 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.458956 2026] [autoindex:error] [pid 178882:tid 179219] [client 212.156.70.154:53276] AH01276: Cannot serve directory /home4/ilvvbdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:54:33.476972 2026] [security2:error] [pid 178882:tid 179215] [client 20.219.2.60:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/56c53.php"] [unique_id "aryyKdqTm83YguA33023igAAAKE"]
[Wed Sep 30 00:54:33.484417 2026] [security2:error] [pid 178882:tid 179304] [client 52.231.69.245:56284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/rithin.php"] [unique_id "aryyKdqTm83YguA33023iwAAAPY"]
[Wed Sep 30 00:54:33.500919 2026] [security2:error] [pid 178882:tid 179201] [client 20.70.173.30:16294] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.ienergyp.com"] [uri "/1.php"] [unique_id "aryyKdqTm83YguA33023jAAAAJU"]
[Wed Sep 30 00:54:33.501008 2026] [security2:error] [pid 178882:tid 179201] [client 20.70.173.30:16294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/1.php"] [unique_id "aryyKdqTm83YguA33023jAAAAJU"]
[Wed Sep 30 00:54:33.533338 2026] [security2:error] [pid 178882:tid 179316] [client 20.251.39.228:24022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryyKdqTm83YguA33023jQAAAQA"]
[Wed Sep 30 00:54:33.540879 2026] [security2:error] [pid 178882:tid 179191] [client 20.204.42.136:27422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "aryyKdqTm83YguA33023jwAAAIs"]
[Wed Sep 30 00:54:33.542517 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.542785 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.578773 2026] [access_compat:error] [pid 178882:tid 179277] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 00:54:33.579070 2026] [access_compat:error] [pid 178882:tid 179277] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 00:54:33.591047 2026] [security2:error] [pid 178882:tid 179216] [client 20.194.30.107:10159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/edit.php"] [unique_id "aryyKdqTm83YguA33023lAAAAKI"]
[Wed Sep 30 00:54:33.633518 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.633781 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.692565 2026] [security2:error] [pid 178882:tid 179315] [client 178.51.196.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "aryyKdqTm83YguA33023nAAAAP8"]
[Wed Sep 30 00:54:33.698270 2026] [security2:error] [pid 178882:tid 179205] [client 4.196.65.241:27271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ho.php"] [unique_id "aryyKdqTm83YguA33023nQAAAJg"]
[Wed Sep 30 00:54:33.706383 2026] [security2:error] [pid 178882:tid 179261] [client 84.39.229.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/laptop/"] [unique_id "aryyKdqTm83YguA33023ngAAAM0"]
[Wed Sep 30 00:54:33.727104 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.727513 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.738180 2026] [security2:error] [pid 178882:tid 179208] [client 20.58.177.98:35914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/about/function.php"] [unique_id "aryyKdqTm83YguA33023oQAAAJo"]
[Wed Sep 30 00:54:33.745410 2026] [security2:error] [pid 178882:tid 179262] [client 20.219.14.152:26505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/chosen.php"] [unique_id "aryyKdqTm83YguA33023owAAAM4"]
[Wed Sep 30 00:54:33.773282 2026] [security2:error] [pid 178882:tid 179293] [client 52.231.69.245:65214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/il.php"] [unique_id "aryyKdqTm83YguA33023pwAAAOs"]
[Wed Sep 30 00:54:33.815921 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.816277 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.824608 2026] [access_compat:error] [pid 178882:tid 179212] [client 47.79.13.175:57326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:33.825129 2026] [access_compat:error] [pid 178882:tid 179212] [client 47.79.13.175:57326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:33.829228 2026] [security2:error] [pid 178882:tid 179319] [client 20.194.30.107:17527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/js.php"] [unique_id "aryyKdqTm83YguA33023sAAAAQM"]
[Wed Sep 30 00:54:33.884111 2026] [security2:error] [pid 178882:tid 179317] [client 20.251.39.228:44455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/varb.php"] [unique_id "aryyKdqTm83YguA33023tAAAAQE"]
[Wed Sep 30 00:54:33.907735 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.908021 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:33.987737 2026] [security2:error] [pid 178882:tid 179227] [client 45.138.12.40:47938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cua.gfl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyKdqTm83YguA33023uwAAAK0"]
[Wed Sep 30 00:54:33.997232 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:33.997512 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.080688 2026] [security2:error] [pid 178882:tid 179310] [client 52.231.69.245:56297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/1klopedf.php"] [unique_id "aryyKtqTm83YguA33023vwAAAPs"]
[Wed Sep 30 00:54:34.088667 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.088976 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.095289 2026] [security2:error] [pid 178882:tid 179271] [client 20.219.2.60:36724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp9.php"] [unique_id "aryyKtqTm83YguA33023wgAAANY"]
[Wed Sep 30 00:54:34.117576 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 00:54:34.117858 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 00:54:34.198045 2026] [core:error] [pid 178882:tid 179248] [client 45.138.12.41:44370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:34.198072 2026] [core:error] [pid 178882:tid 179248] [client 45.138.12.41:44370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:34.220471 2026] [security2:error] [pid 178882:tid 179239] [client 20.219.14.152:26445] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.vinason.net"] [uri "/1.php"] [unique_id "aryyKtqTm83YguA330231QAAALg"]
[Wed Sep 30 00:54:34.220634 2026] [security2:error] [pid 178882:tid 179239] [client 20.219.14.152:26445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/1.php"] [unique_id "aryyKtqTm83YguA330231QAAALg"]
[Wed Sep 30 00:54:34.232219 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.232402 2026] [security2:error] [pid 178882:tid 179238] [client 20.251.39.228:19147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/lm15.php"] [unique_id "aryyKtqTm83YguA330231gAAALc"]
[Wed Sep 30 00:54:34.232662 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.343216 2026] [security2:error] [pid 178882:tid 179298] [client 20.58.177.98:35923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/simple.php"] [unique_id "aryyKtqTm83YguA330231wAAAPA"]
[Wed Sep 30 00:54:34.356173 2026] [security2:error] [pid 178882:tid 179208] [client 52.231.69.245:42257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/zv.php"] [unique_id "aryyKtqTm83YguA330232wAAAJo"]
[Wed Sep 30 00:54:34.360462 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.360813 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.362157 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.362401 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.448611 2026] [security2:error] [pid 178882:tid 179198] [client 20.28.180.172:29455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/chfjgjn.php"] [unique_id "aryyKtqTm83YguA330236AAAAJI"]
[Wed Sep 30 00:54:34.457338 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.457786 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.494942 2026] [security2:error] [pid 178882:tid 179255] [client 20.219.2.60:10848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp5.php"] [unique_id "aryyKtqTm83YguA330237gAAAMc"]
[Wed Sep 30 00:54:34.548235 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.548515 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.620036 2026] [access_compat:error] [pid 178882:tid 179236] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvYXR0cg==
[Wed Sep 30 00:54:34.620362 2026] [access_compat:error] [pid 178882:tid 179236] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvYXR0cg==
[Wed Sep 30 00:54:34.636806 2026] [security2:error] [pid 178882:tid 179233] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyKtqTm83YguA33023_AAAALM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:34.639852 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.640299 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.652976 2026] [security2:error] [pid 178882:tid 179246] [client 52.231.69.245:42260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/zv.update.php"] [unique_id "aryyKtqTm83YguA33023_QAAAL4"]
[Wed Sep 30 00:54:34.726095 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.726413 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.733596 2026] [security2:error] [pid 178882:tid 179305] [client 20.219.14.152:26425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/radio.php"] [unique_id "aryyKtqTm83YguA33024AQAAAPc"]
[Wed Sep 30 00:54:34.742514 2026] [security2:error] [pid 178882:tid 179252] [client 20.70.173.30:16273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/js.php"] [unique_id "aryyKtqTm83YguA33024AgAAAMQ"]
[Wed Sep 30 00:54:34.747097 2026] [security2:error] [pid 178882:tid 179272] [client 103.159.192.142:53317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyKtqTm83YguA33024AwAAANc"]
[Wed Sep 30 00:54:34.747251 2026] [security2:error] [pid 178882:tid 179272] [client 103.159.192.142:53317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyKtqTm83YguA33024AwAAANc"]
[Wed Sep 30 00:54:34.793461 2026] [security2:error] [pid 178882:tid 179230] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyKtqTm83YguA33024CQAAALA"]
[Wed Sep 30 00:54:34.798613 2026] [security2:error] [pid 178882:tid 179248] [client 20.251.39.228:32816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/clss.php"] [unique_id "aryyKtqTm83YguA33024CgAAAMA"]
[Wed Sep 30 00:54:34.805794 2026] [security2:error] [pid 178882:tid 179311] [client 213.136.69.135:49493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/abilities-api.php"] [unique_id "aryyKtqTm83YguA33024CAAAAPw"], referer: binance.com
[Wed Sep 30 00:54:34.818825 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.819066 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.828533 2026] [security2:error] [pid 178882:tid 179239] [client 20.58.177.98:35959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/goat1.php"] [unique_id "aryyKtqTm83YguA33024DAAAALg"]
[Wed Sep 30 00:54:34.849043 2026] [security2:error] [pid 178882:tid 179131] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyKtqTm83YguA33024DgAA3U0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=2fcd2711c7afd333dbc272b26271cdf0&start=30&t=22190
[Wed Sep 30 00:54:34.849081 2026] [security2:error] [pid 178882:tid 179131] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyKtqTm83YguA33024DgAA3U0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=2fcd2711c7afd333dbc272b26271cdf0&start=30&t=22190
[Wed Sep 30 00:54:34.876644 2026] [security2:error] [pid 178882:tid 179299] [client 45.138.12.32:13014] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.itb.pgp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyKtqTm83YguA33024EQAAAPE"]
[Wed Sep 30 00:54:34.902453 2026] [security2:error] [pid 178882:tid 179307] [client 20.70.173.30:59537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-login.php"] [unique_id "aryyKtqTm83YguA33024DwAAAPk"]
[Wed Sep 30 00:54:34.912731 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:34.913167 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:34.946287 2026] [security2:error] [pid 178882:tid 179194] [client 52.231.69.245:42252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/wquosqsi.php"] [unique_id "aryyKtqTm83YguA33024HwAAAI4"]
[Wed Sep 30 00:54:34.992745 2026] [security2:error] [pid 178882:tid 179261] [client 207.191.167.169:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyKtqTm83YguA33024JAAAAM0"]
[Wed Sep 30 00:54:35.003560 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.004005 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.069990 2026] [security2:error] [pid 178882:tid 179296] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyK9qTm83YguA33024KwAAAO4"]
[Wed Sep 30 00:54:35.094102 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.094495 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.123349 2026] [access_compat:error] [pid 178882:tid 179285] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:54:35.124085 2026] [access_compat:error] [pid 178882:tid 179285] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:54:35.149556 2026] [security2:error] [pid 178882:tid 179234] [client 20.251.39.228:44452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/44.php"] [unique_id "aryyK9qTm83YguA33024MgAAALQ"]
[Wed Sep 30 00:54:35.185615 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.186077 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.208217 2026] [security2:error] [pid 178882:tid 179253] [client 20.194.30.107:30409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/robots.php"] [unique_id "aryyK9qTm83YguA33024NQAAAMU"]
[Wed Sep 30 00:54:35.209799 2026] [security2:error] [pid 178882:tid 179227] [client 106.214.2.47:3838] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyK9qTm83YguA33024NAAAAK0"]
[Wed Sep 30 00:54:35.210032 2026] [security2:error] [pid 178882:tid 179227] [client 106.214.2.47:3838] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyK9qTm83YguA33024NAAAAK0"]
[Wed Sep 30 00:54:35.216455 2026] [security2:error] [pid 178882:tid 179287] [client 20.58.177.98:35910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/chosen.php"] [unique_id "aryyK9qTm83YguA33024NgAAAOU"]
[Wed Sep 30 00:54:35.219762 2026] [security2:error] [pid 178882:tid 179294] [client 52.231.69.245:42287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/asset.php"] [unique_id "aryyK9qTm83YguA33024OAAAAOw"]
[Wed Sep 30 00:54:35.243068 2026] [security2:error] [pid 178882:tid 179236] [client 20.70.173.30:25106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-content/index.php"] [unique_id "aryyK9qTm83YguA33024OQAAALY"]
[Wed Sep 30 00:54:35.277432 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.277873 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.345346 2026] [security2:error] [pid 178882:tid 179138] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyK9qTm83YguA33024PAAAm1Q"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=2fcd2711c7afd333dbc272b26271cdf0&start=630&t=31
[Wed Sep 30 00:54:35.345378 2026] [security2:error] [pid 178882:tid 179138] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyK9qTm83YguA33024PAAAm1Q"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=2fcd2711c7afd333dbc272b26271cdf0&start=630&t=31
[Wed Sep 30 00:54:35.366016 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.366469 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.389387 2026] [security2:error] [pid 178882:tid 179211] [client 49.43.163.212:50623] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyK9qTm83YguA33024OwAAAJ0"]
[Wed Sep 30 00:54:35.389573 2026] [security2:error] [pid 178882:tid 179211] [client 49.43.163.212:50623] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyK9qTm83YguA33024OwAAAJ0"]
[Wed Sep 30 00:54:35.431745 2026] [security2:error] [pid 178882:tid 179233] [client 45.138.12.32:13090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rxk.svd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyK9qTm83YguA33024RQAAALM"]
[Wed Sep 30 00:54:35.436391 2026] [security2:error] [pid 178882:tid 179224] [client 168.194.144.199:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/laptop/"] [unique_id "aryyK9qTm83YguA33024RgAAAKo"]
[Wed Sep 30 00:54:35.459586 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.460023 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.473048 2026] [autoindex:error] [pid 178882:tid 179276] [client 202.61.233.150:41386] AH01276: Cannot serve directory /home4/hqyjkymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:54:35.512623 2026] [access_compat:error] [pid 178882:tid 179242] [client 47.79.13.172:36874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:35.513000 2026] [access_compat:error] [pid 178882:tid 179242] [client 47.79.13.172:36874] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:35.515110 2026] [security2:error] [pid 178882:tid 179235] [client 52.231.69.245:42256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/cued.php"] [unique_id "aryyK9qTm83YguA33024TAAAALU"]
[Wed Sep 30 00:54:35.546791 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.547157 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.555700 2026] [security2:error] [pid 178882:tid 179261] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyK9qTm83YguA33024TwAAAM0"]
[Wed Sep 30 00:54:35.606559 2026] [access_compat:error] [pid 178882:tid 179313] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:35.606826 2026] [access_compat:error] [pid 178882:tid 179313] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:35.630678 2026] [security2:error] [pid 178882:tid 179293] [client 187.189.15.233:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryyK9qTm83YguA33024UwAAAOs"]
[Wed Sep 30 00:54:35.638453 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.638728 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.643412 2026] [security2:error] [pid 178882:tid 179262] [client 20.219.14.152:26551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/blacks.php"] [unique_id "aryyK9qTm83YguA33024VQAAAM4"]
[Wed Sep 30 00:54:35.666246 2026] [access_compat:error] [pid 178882:tid 179246] [client 47.79.13.175:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:35.666832 2026] [access_compat:error] [pid 178882:tid 179246] [client 47.79.13.175:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:35.704551 2026] [security2:error] [pid 178882:tid 179251] [client 20.219.2.60:18906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/tx78.php"] [unique_id "aryyK9qTm83YguA33024WAAAAMM"]
[Wed Sep 30 00:54:35.705813 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:49485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/a5e0a.php"] [unique_id "aryyK9qTm83YguA33024WQAAAKg"]
[Wed Sep 30 00:54:35.728607 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.728979 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.781803 2026] [security2:error] [pid 178882:tid 179255] [client 20.204.42.136:27438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/XrdbXydefault.php"] [unique_id "aryyK9qTm83YguA33024XgAAAMc"]
[Wed Sep 30 00:54:35.786053 2026] [security2:error] [pid 178882:tid 179285] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyK9qTm83YguA33024XwAAAOM"]
[Wed Sep 30 00:54:35.792962 2026] [security2:error] [pid 178882:tid 179278] [client 52.231.69.245:42289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/sd.php"] [unique_id "aryyK9qTm83YguA33024YAAAANw"]
[Wed Sep 30 00:54:35.822843 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.823274 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:35.884827 2026] [security2:error] [pid 178882:tid 179249] [client 20.58.177.98:35906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-cron.php"] [unique_id "aryyK9qTm83YguA33024YwAAAME"]
[Wed Sep 30 00:54:35.889434 2026] [security2:error] [pid 178882:tid 179214] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyK9qTm83YguA33024ZgAAAKA"]
[Wed Sep 30 00:54:35.914713 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:35.915114 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.004298 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.004741 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.006760 2026] [security2:error] [pid 178882:tid 179191] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyLNqTm83YguA33024bwAAAIs"]
[Wed Sep 30 00:54:36.062167 2026] [security2:error] [pid 178882:tid 179279] [client 20.251.39.228:32788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bo.php"] [unique_id "aryyLNqTm83YguA33024cgAAAN0"]
[Wed Sep 30 00:54:36.064204 2026] [security2:error] [pid 178882:tid 179164] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/app.php/post/233810/report"] [unique_id "aryyLNqTm83YguA33024cwAAvW4"]
[Wed Sep 30 00:54:36.064402 2026] [security2:error] [pid 178882:tid 179245] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/app.php/post/233810/report"] [unique_id "aryyLNqTm83YguA33024cwAAvW4"]
[Wed Sep 30 00:54:36.082463 2026] [access_compat:error] [pid 178882:tid 179304] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:36.082783 2026] [access_compat:error] [pid 178882:tid 179304] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:36.094095 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.094562 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.096630 2026] [security2:error] [pid 178882:tid 179316] [client 52.231.69.245:42283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/ans.php"] [unique_id "aryyLNqTm83YguA33024dgAAAQA"]
[Wed Sep 30 00:54:36.147228 2026] [security2:error] [pid 178882:tid 179190] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyLNqTm83YguA33024eAAAAIo"]
[Wed Sep 30 00:54:36.161388 2026] [security2:error] [pid 178882:tid 179233] [client 20.219.14.152:26401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/alfa.php"] [unique_id "aryyLNqTm83YguA33024eQAAALM"]
[Wed Sep 30 00:54:36.182957 2026] [security2:error] [pid 178882:tid 179205] [client 20.204.161.246:48605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/w.php"] [unique_id "aryyLNqTm83YguA33024ewAAAJg"]
[Wed Sep 30 00:54:36.187639 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.188055 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.278998 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.279431 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.280623 2026] [security2:error] [pid 178882:tid 179240] [client 20.58.177.98:35911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/yanz.php"] [unique_id "aryyLNqTm83YguA33024hgAAALk"]
[Wed Sep 30 00:54:36.303937 2026] [security2:error] [pid 178882:tid 179282] [client 20.219.2.60:10649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-access.php"] [unique_id "aryyLNqTm83YguA33024iQAAAOA"]
[Wed Sep 30 00:54:36.326531 2026] [security2:error] [pid 178882:tid 179258] [client 20.219.2.60:36762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/public/vx.php"] [unique_id "aryyLNqTm83YguA33024iwAAAMo"]
[Wed Sep 30 00:54:36.346237 2026] [security2:error] [pid 178882:tid 179206] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyLNqTm83YguA33024jAAAAJk"]
[Wed Sep 30 00:54:36.352713 2026] [security2:error] [pid 178882:tid 179194] [client 161.118.214.16:49448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.eyt.icg.mybluehost.me"] [uri "/"] [unique_id "aryyLNqTm83YguA33024jQAAAI4"]
[Wed Sep 30 00:54:36.358950 2026] [security2:error] [pid 178882:tid 179300] [client 173.254.29.157:59272] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyLNqTm83YguA33024jgAAAPI"]
[Wed Sep 30 00:54:36.368313 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.368739 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.379806 2026] [security2:error] [pid 178882:tid 179301] [client 173.254.29.157:59282] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryyLNqTm83YguA33024kQAAAPM"]
[Wed Sep 30 00:54:36.397515 2026] [security2:error] [pid 178882:tid 179243] [client 173.254.29.157:59290] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyLNqTm83YguA33024kwAAALs"]
[Wed Sep 30 00:54:36.414774 2026] [security2:error] [pid 178882:tid 179277] [client 173.254.29.157:59296] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyLNqTm83YguA33024lwAAANs"]
[Wed Sep 30 00:54:36.426526 2026] [security2:error] [pid 178882:tid 179251] [client 52.231.69.245:42288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/cns.php"] [unique_id "aryyLNqTm83YguA33024mAAAAMM"]
[Wed Sep 30 00:54:36.436476 2026] [security2:error] [pid 178882:tid 179256] [client 20.251.39.228:16891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/56c53.php"] [unique_id "aryyLNqTm83YguA33024mgAAAMg"]
[Wed Sep 30 00:54:36.458073 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.458354 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.553685 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.553942 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.586573 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:36.586928 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:36.637702 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:36.637970 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:36.659737 2026] [security2:error] [pid 178882:tid 179252] [client 20.58.177.98:36086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/config.php"] [unique_id "aryyLNqTm83YguA33024oQAAAMQ"]
[Wed Sep 30 00:54:36.674661 2026] [security2:error] [pid 178882:tid 179311] [client 20.219.14.152:26530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wp_blog_footer.php"] [unique_id "aryyLNqTm83YguA33024ogAAAPw"]
[Wed Sep 30 00:54:36.684006 2026] [security2:error] [pid 178882:tid 179162] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/search.php"] [unique_id "aryyLNqTm83YguA33024owAA4Ww"]
[Wed Sep 30 00:54:36.684200 2026] [security2:error] [pid 178882:tid 179283] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/search.php"] [unique_id "aryyLNqTm83YguA33024owAA4Ww"]
[Wed Sep 30 00:54:36.744869 2026] [security2:error] [pid 178882:tid 179307] [client 20.251.39.228:5678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tx78.php"] [unique_id "aryyLNqTm83YguA33024pQAAAPk"]
[Wed Sep 30 00:54:36.750927 2026] [security2:error] [pid 178882:tid 179248] [client 52.231.69.245:42016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/faiy.php"] [unique_id "aryyLNqTm83YguA33024pgAAAMA"]
[Wed Sep 30 00:54:36.827047 2026] [security2:error] [pid 178882:tid 179304] [client 20.204.42.136:57209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/84300819ebindex.php"] [unique_id "aryyLNqTm83YguA33024qAAAAPY"]
[Wed Sep 30 00:54:36.847566 2026] [security2:error] [pid 178882:tid 179284] [client 103.168.66.101:31770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyLNqTm83YguA33024rAAAAOI"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:36.928392 2026] [security2:error] [pid 178882:tid 179288] [client 20.198.74.230:23894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/a22.php"] [unique_id "aryyLNqTm83YguA33024swAAAOY"]
[Wed Sep 30 00:54:37.014130 2026] [security2:error] [pid 178882:tid 179186] [client 52.231.69.245:42005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/gecho.php"] [unique_id "aryyLdqTm83YguA33024uAAAAIY"]
[Wed Sep 30 00:54:37.022446 2026] [security2:error] [pid 178882:tid 179306] [client 20.58.177.98:35952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/network.php"] [unique_id "aryyLdqTm83YguA33024uQAAAPg"]
[Wed Sep 30 00:54:37.042689 2026] [security2:error] [pid 178882:tid 179247] [client 20.251.39.228:32300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws80.php"] [unique_id "aryyLdqTm83YguA33024uwAAAL8"]
[Wed Sep 30 00:54:37.174172 2026] [security2:error] [pid 178882:tid 179267] [client 45.138.12.32:13118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scx.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyLdqTm83YguA33024vgAAANM"]
[Wed Sep 30 00:54:37.224103 2026] [security2:error] [pid 178882:tid 179279] [client 116.72.182.19:50091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyLdqTm83YguA33024wAAAAN0"]
[Wed Sep 30 00:54:37.224199 2026] [security2:error] [pid 178882:tid 179279] [client 116.72.182.19:50091] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyLdqTm83YguA33024wAAAAN0"]
[Wed Sep 30 00:54:37.332245 2026] [security2:error] [pid 178882:tid 179257] [client 52.231.69.245:56319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/gu.php"] [unique_id "aryyLdqTm83YguA33024xgAAAMk"]
[Wed Sep 30 00:54:37.336824 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.337071 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.371444 2026] [security2:error] [pid 178882:tid 179275] [client 20.58.177.98:35942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-2019.php"] [unique_id "aryyLdqTm83YguA33024xwAAANk"]
[Wed Sep 30 00:54:37.413825 2026] [security2:error] [pid 178882:tid 179317] [client 20.219.2.60:10921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/hots.php"] [unique_id "aryyLdqTm83YguA33024zQAAAQE"]
[Wed Sep 30 00:54:37.438886 2026] [security2:error] [pid 178882:tid 179198] [client 20.251.39.228:5657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/jga.php"] [unique_id "aryyLdqTm83YguA330240AAAAJI"]
[Wed Sep 30 00:54:37.462968 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.463389 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.475867 2026] [core:error] [pid 178882:tid 179265] [client 35.187.36.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:37.475893 2026] [core:error] [pid 178882:tid 179265] [client 35.187.36.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:37.526153 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:19411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws80.php"] [unique_id "aryyLdqTm83YguA330242wAAANQ"]
[Wed Sep 30 00:54:37.544376 2026] [security2:error] [pid 178882:tid 179191] [client 20.219.14.152:26423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/b8.php"] [unique_id "aryyLdqTm83YguA330243gAAAIs"]
[Wed Sep 30 00:54:37.551910 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.552165 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.571792 2026] [core:error] [pid 178882:tid 179252] [client 35.187.36.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:37.571815 2026] [core:error] [pid 178882:tid 179252] [client 35.187.36.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:54:37.620533 2026] [security2:error] [pid 178882:tid 179232] [client 52.231.69.245:42274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/nck.php"] [unique_id "aryyLdqTm83YguA330245wAAALI"]
[Wed Sep 30 00:54:37.632485 2026] [security2:error] [pid 178882:tid 179080] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyLdqTm83YguA330246QAA_Bw"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D11610
[Wed Sep 30 00:54:37.665109 2026] [security2:error] [pid 178882:tid 179276] [client 20.194.30.107:37639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/wp-content/admin.php"] [unique_id "aryyLdqTm83YguA330247wAAANo"]
[Wed Sep 30 00:54:37.694053 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.694309 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.716359 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.716683 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.766462 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 00:54:37.766780 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 00:54:37.770076 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.770348 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.798041 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.798311 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.815321 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.815578 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.847721 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.847992 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.849235 2026] [security2:error] [pid 178882:tid 179300] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyLdqTm83YguA33025AAAAAPI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:37.863369 2026] [security2:error] [pid 178882:tid 179289] [client 20.58.177.98:34942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/bypass.php"] [unique_id "aryyLdqTm83YguA33025AwAAAOc"]
[Wed Sep 30 00:54:37.864364 2026] [security2:error] [pid 178882:tid 179279] [client 20.194.30.107:34071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wpxml.php"] [unique_id "aryyLdqTm83YguA33025BAAAAN0"]
[Wed Sep 30 00:54:37.866232 2026] [security2:error] [pid 178882:tid 179309] [client 20.219.2.60:36673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/inege.php"] [unique_id "aryyLdqTm83YguA33025BQAAAPo"]
[Wed Sep 30 00:54:37.875992 2026] [security2:error] [pid 178882:tid 179296] [client 20.70.173.30:16297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/echkm.php"] [unique_id "aryyLdqTm83YguA33025BwAAAO4"]
[Wed Sep 30 00:54:37.882056 2026] [security2:error] [pid 178882:tid 179203] [client 52.231.69.245:56311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/xtt.php"] [unique_id "aryyLdqTm83YguA33025DAAAAJY"]
[Wed Sep 30 00:54:37.883800 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.884067 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.886113 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.886531 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.888306 2026] [security2:error] [pid 178882:tid 179291] [client 20.251.39.228:44459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/fs.php"] [unique_id "aryyLdqTm83YguA33025DwAAAOk"]
[Wed Sep 30 00:54:37.892520 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.892820 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:22743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.897294 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:38582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.897560 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:38582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.920083 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:37.920486 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:32986] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:37.963904 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.169.65:54121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyLdqTm83YguA33025GAAAAMc"]
[Wed Sep 30 00:54:37.964053 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.169.65:54121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyLdqTm83YguA33025GAAAAMc"]
[Wed Sep 30 00:54:37.971736 2026] [security2:error] [pid 178882:tid 179297] [client 20.28.180.172:29620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/83a907c742index.php"] [unique_id "aryyLdqTm83YguA33025GQAAAO8"]
[Wed Sep 30 00:54:38.009735 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.010126 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.096696 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.096988 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:37964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.112851 2026] [security2:error] [pid 178882:tid 179215] [client 20.219.14.152:26506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/xex.php"] [unique_id "aryyLtqTm83YguA33025HgAAAKE"]
[Wed Sep 30 00:54:38.138337 2026] [security2:error] [pid 178882:tid 179259] [client 182.75.216.230:57323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025HwAAAMs"]
[Wed Sep 30 00:54:38.138487 2026] [security2:error] [pid 178882:tid 179259] [client 182.75.216.230:57323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025HwAAAMs"]
[Wed Sep 30 00:54:38.171124 2026] [security2:error] [pid 178882:tid 179234] [client 52.231.69.245:41995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hamaraquetta.com"] [uri "/go.php"] [unique_id "aryyLtqTm83YguA33025IAAAALQ"]
[Wed Sep 30 00:54:38.192244 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.192605 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.273273 2026] [access_compat:error] [pid 178882:tid 179276] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZA==
[Wed Sep 30 00:54:38.273530 2026] [access_compat:error] [pid 178882:tid 179276] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZA==
[Wed Sep 30 00:54:38.273545 2026] [security2:error] [pid 178882:tid 179209] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyLtqTm83YguA33025KAAAAJs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:38.274792 2026] [security2:error] [pid 178882:tid 179288] [client 20.251.39.228:43736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/byypas.php"] [unique_id "aryyLtqTm83YguA33025KgAAAOY"]
[Wed Sep 30 00:54:38.278874 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.279165 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.298446 2026] [security2:error] [pid 178882:tid 179239] [client 20.58.177.98:35955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aryyLtqTm83YguA33025KwAAALg"]
[Wed Sep 30 00:54:38.299957 2026] [security2:error] [pid 178882:tid 179231] [client 116.193.128.26:64331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025LAAAALE"]
[Wed Sep 30 00:54:38.300037 2026] [security2:error] [pid 178882:tid 179231] [client 116.193.128.26:64331] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025LAAAALE"]
[Wed Sep 30 00:54:38.317720 2026] [security2:error] [pid 178882:tid 179261] [client 216.73.216.46:38582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyLtqTm83YguA33025LwAAAM0"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtRGlnZXN0LU1ENS1GaWxl
[Wed Sep 30 00:54:38.373200 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.373666 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.397623 2026] [security2:error] [pid 178882:tid 179275] [client 116.197.133.25:64458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025NQAAANk"]
[Wed Sep 30 00:54:38.397756 2026] [security2:error] [pid 178882:tid 179275] [client 116.197.133.25:64458] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyLtqTm83YguA33025NQAAANk"]
[Wed Sep 30 00:54:38.465816 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.466238 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.487879 2026] [security2:error] [pid 178882:tid 179289] [client 20.204.42.136:27406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/hypo.php"] [unique_id "aryyLtqTm83YguA33025PgAAAOc"]
[Wed Sep 30 00:54:38.489169 2026] [security2:error] [pid 178882:tid 179281] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyLtqTm83YguA33025PQAAAN8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:38.554193 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.554467 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.614882 2026] [security2:error] [pid 178882:tid 179222] [client 20.219.14.152:26378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/ass.php"] [unique_id "aryyLtqTm83YguA33025QAAAAKg"]
[Wed Sep 30 00:54:38.644488 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.644756 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.679894 2026] [security2:error] [pid 178882:tid 179216] [client 20.219.2.60:18886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/jga.php"] [unique_id "aryyLtqTm83YguA33025RAAAAKI"]
[Wed Sep 30 00:54:38.717574 2026] [security2:error] [pid 178882:tid 179198] [client 20.251.39.228:44431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/b.php"] [unique_id "aryyLtqTm83YguA33025RgAAAJI"]
[Wed Sep 30 00:54:38.732585 2026] [security2:error] [pid 178882:tid 179285] [client 20.58.177.98:35920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aryyLtqTm83YguA33025QwAAAOM"]
[Wed Sep 30 00:54:38.735439 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.735707 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.825803 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.826100 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:38.844117 2026] [security2:error] [pid 178882:tid 179223] [client 20.219.2.60:10760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/admin-footer.php"] [unique_id "aryyLtqTm83YguA33025TQAAAKk"]
[Wed Sep 30 00:54:38.853764 2026] [security2:error] [pid 178882:tid 179217] [client 4.196.65.241:27282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/un.php"] [unique_id "aryyLtqTm83YguA33025TgAAAKM"]
[Wed Sep 30 00:54:38.917671 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:38.917970 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.009210 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.009618 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.050756 2026] [security2:error] [pid 178882:tid 179291] [client 103.172.210.103:51721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyL9qTm83YguA33025WwAAAOk"]
[Wed Sep 30 00:54:39.050929 2026] [security2:error] [pid 178882:tid 179291] [client 103.172.210.103:51721] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyL9qTm83YguA33025WwAAAOk"]
[Wed Sep 30 00:54:39.107997 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.108263 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.135530 2026] [access_compat:error] [pid 178882:tid 179288] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:54:39.135817 2026] [access_compat:error] [pid 178882:tid 179288] [client 74.7.243.227:33280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:54:39.157469 2026] [security2:error] [pid 178882:tid 179192] [client 20.219.14.152:26426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wsd.php"] [unique_id "aryyL9qTm83YguA33025YAAAAIw"]
[Wed Sep 30 00:54:39.202347 2026] [security2:error] [pid 178882:tid 179208] [client 20.251.39.228:40937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws49.php"] [unique_id "aryyL9qTm83YguA33025YwAAAJo"]
[Wed Sep 30 00:54:39.202498 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.202771 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.208976 2026] [security2:error] [pid 178882:tid 179242] [client 20.58.177.98:34920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/tiny.php"] [unique_id "aryyL9qTm83YguA33025ZAAAALo"]
[Wed Sep 30 00:54:39.221023 2026] [security2:error] [pid 178882:tid 179298] [client 20.219.2.60:36843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/nw.php"] [unique_id "aryyL9qTm83YguA33025ZQAAAPA"]
[Wed Sep 30 00:54:39.246971 2026] [security2:error] [pid 178882:tid 179283] [client 182.69.182.151:16430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyL9qTm83YguA33025YgAAAOE"]
[Wed Sep 30 00:54:39.247086 2026] [security2:error] [pid 178882:tid 179283] [client 182.69.182.151:16430] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyL9qTm83YguA33025YgAAAOE"]
[Wed Sep 30 00:54:39.256924 2026] [security2:error] [pid 178882:tid 179311] [client 152.232.244.115:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyL9qTm83YguA33025aAAAAPw"]
[Wed Sep 30 00:54:39.290572 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.290885 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.381472 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.381727 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.476802 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.477099 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.526845 2026] [security2:error] [pid 178882:tid 179318] [client 20.219.2.60:19395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/fs.php"] [unique_id "aryyL9qTm83YguA33025dQAAAQI"]
[Wed Sep 30 00:54:39.534988 2026] [security2:error] [pid 178882:tid 179280] [client 20.251.39.228:16834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-blog-header.php"] [unique_id "aryyL9qTm83YguA33025dgAAAN4"]
[Wed Sep 30 00:54:39.564885 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.565142 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.572322 2026] [security2:error] [pid 178882:tid 179279] [client 20.58.177.98:36063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/lock.php"] [unique_id "aryyL9qTm83YguA33025eAAAAN0"]
[Wed Sep 30 00:54:39.594043 2026] [security2:error] [pid 178882:tid 179293] [client 74.7.243.227:33280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyL9qTm83YguA33025eQAAAOs"], referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 00:54:39.655597 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.655900 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.746271 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.746534 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.771495 2026] [security2:error] [pid 178882:tid 179301] [client 69.57.172.119:37486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "aryyL9qTm83YguA33025gwAAAPM"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 00:54:39.775778 2026] [security2:error] [pid 178882:tid 179287] [client 20.219.14.152:26504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/BDKR28WP.php"] [unique_id "aryyL9qTm83YguA33025hAAAAOU"]
[Wed Sep 30 00:54:39.836220 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:39.836501 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:47984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:39.865641 2026] [security2:error] [pid 178882:tid 179257] [client 103.168.66.101:31796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyL9qTm83YguA33025hwAAAMk"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:39.868872 2026] [security2:error] [pid 178882:tid 179265] [client 20.251.39.228:30527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bgymj.php"] [unique_id "aryyL9qTm83YguA33025iAAAANE"]
[Wed Sep 30 00:54:39.921272 2026] [security2:error] [pid 178882:tid 179277] [client 216.73.216.46:47984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyL9qTm83YguA33025iwAAANs"]
[Wed Sep 30 00:54:39.990466 2026] [security2:error] [pid 178882:tid 179225] [client 20.58.177.98:35925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/mail.php"] [unique_id "aryyL9qTm83YguA33025jQAAAKs"]
[Wed Sep 30 00:54:40.017798 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.018069 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.099353 2026] [security2:error] [pid 178882:tid 179210] [client 20.194.30.107:57630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/simple.php"] [unique_id "aryyMNqTm83YguA33025kgAAAJw"]
[Wed Sep 30 00:54:40.110037 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.110306 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.134335 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:40.134595 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:40.174247 2026] [security2:error] [pid 178882:tid 179190] [client 20.194.30.107:30828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/biufile.php"] [unique_id "aryyMNqTm83YguA33025lgAAAIo"]
[Wed Sep 30 00:54:40.201525 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.201781 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.289056 2026] [security2:error] [pid 178882:tid 179185] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyMNqTm83YguA33025mQAAAIU"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:40.292902 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.293159 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.322783 2026] [security2:error] [pid 178882:tid 179248] [client 20.219.14.152:26407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wmore1.php"] [unique_id "aryyMNqTm83YguA33025mwAAAMA"]
[Wed Sep 30 00:54:40.344168 2026] [security2:error] [pid 178882:tid 179253] [client 150.107.232.159:35780] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025nAAAAMU"]
[Wed Sep 30 00:54:40.344376 2026] [security2:error] [pid 178882:tid 179253] [client 150.107.232.159:35780] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025nAAAAMU"]
[Wed Sep 30 00:54:40.362441 2026] [security2:error] [pid 178882:tid 179311] [client 20.251.39.228:44417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gfd.php"] [unique_id "aryyMNqTm83YguA33025ngAAAPw"]
[Wed Sep 30 00:54:40.384754 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.385199 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.399823 2026] [security2:error] [pid 178882:tid 179316] [client 103.166.103.39:57661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.103.166.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025oQAAAQA"]
[Wed Sep 30 00:54:40.400078 2026] [security2:error] [pid 178882:tid 179316] [client 103.166.103.39:57661] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025oQAAAQA"]
[Wed Sep 30 00:54:40.431863 2026] [security2:error] [pid 178882:tid 179231] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyMNqTm83YguA33025ogAAALE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:40.444164 2026] [security2:error] [pid 178882:tid 179205] [client 20.204.42.136:27404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/tvbxn.php"] [unique_id "aryyMNqTm83YguA33025pAAAAJg"]
[Wed Sep 30 00:54:40.451201 2026] [security2:error] [pid 178882:tid 179220] [client 223.235.102.107:30226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025pwAAAKY"]
[Wed Sep 30 00:54:40.451605 2026] [security2:error] [pid 178882:tid 179247] [client 20.194.30.107:17439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/echkm.php"] [unique_id "aryyMNqTm83YguA33025pgAAAL8"]
[Wed Sep 30 00:54:40.451849 2026] [security2:error] [pid 178882:tid 179220] [client 223.235.102.107:30226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025pwAAAKY"]
[Wed Sep 30 00:54:40.476459 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.476728 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.549732 2026] [security2:error] [pid 178882:tid 179223] [client 152.59.165.7:57571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025rQAAAKk"]
[Wed Sep 30 00:54:40.549866 2026] [security2:error] [pid 178882:tid 179223] [client 152.59.165.7:57571] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025rQAAAKk"]
[Wed Sep 30 00:54:40.567274 2026] [security2:error] [pid 178882:tid 179268] [client 223.181.30.165:14259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025rwAAANQ"]
[Wed Sep 30 00:54:40.567423 2026] [security2:error] [pid 178882:tid 179268] [client 223.181.30.165:14259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025rwAAANQ"]
[Wed Sep 30 00:54:40.568226 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.568493 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.579095 2026] [security2:error] [pid 178882:tid 179320] [client 20.58.177.98:36033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/system_log.php"] [unique_id "aryyMNqTm83YguA33025sAAAAQQ"]
[Wed Sep 30 00:54:40.584350 2026] [security2:error] [pid 178882:tid 179290] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyMNqTm83YguA33025sQAAAOg"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:40.643185 2026] [security2:error] [pid 178882:tid 179252] [client 202.179.95.79:63665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025tgAAAMQ"]
[Wed Sep 30 00:54:40.643312 2026] [security2:error] [pid 178882:tid 179252] [client 202.179.95.79:63665] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025tgAAAMQ"]
[Wed Sep 30 00:54:40.658016 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.658288 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.725065 2026] [security2:error] [pid 178882:tid 179250] [client 20.251.39.228:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/callback.php"] [unique_id "aryyMNqTm83YguA33025uQAAAMI"]
[Wed Sep 30 00:54:40.750130 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.750391 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.842000 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.842278 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:40.844576 2026] [security2:error] [pid 178882:tid 179287] [client 20.204.161.246:48087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyMNqTm83YguA33025vwAAAOU"]
[Wed Sep 30 00:54:40.878915 2026] [access_compat:error] [pid 178882:tid 179201] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:40.879169 2026] [access_compat:error] [pid 178882:tid 179201] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:40.902406 2026] [security2:error] [pid 178882:tid 179265] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyMNqTm83YguA33025wwAAANE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:40.908831 2026] [security2:error] [pid 178882:tid 179238] [client 20.219.2.60:18893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/byypas.php"] [unique_id "aryyMNqTm83YguA33025xQAAALc"]
[Wed Sep 30 00:54:40.910105 2026] [security2:error] [pid 178882:tid 179256] [client 20.219.14.152:26393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/z60.php"] [unique_id "aryyMNqTm83YguA33025xgAAAMg"]
[Wed Sep 30 00:54:40.933284 2026] [security2:error] [pid 178882:tid 179245] [client 72.255.10.32:51916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025ygAAAL0"]
[Wed Sep 30 00:54:40.933402 2026] [security2:error] [pid 178882:tid 179245] [client 72.255.10.32:51916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyMNqTm83YguA33025ygAAAL0"]
[Wed Sep 30 00:54:40.936770 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:40.937201 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.027197 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.027467 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.088031 2026] [security2:error] [pid 178882:tid 179261] [client 203.122.45.246:64246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330250wAAAM0"]
[Wed Sep 30 00:54:41.088137 2026] [security2:error] [pid 178882:tid 179261] [client 203.122.45.246:64246] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330250wAAAM0"]
[Wed Sep 30 00:54:41.120243 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.120515 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.122678 2026] [security2:error] [pid 178882:tid 179264] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyMdqTm83YguA330251gAAANA"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:41.195629 2026] [security2:error] [pid 178882:tid 179283] [client 185.210.43.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyMdqTm83YguA330253AAAAOE"]
[Wed Sep 30 00:54:41.208660 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.208931 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.213670 2026] [security2:error] [pid 178882:tid 179205] [client 20.58.177.98:34930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/file.php"] [unique_id "aryyMdqTm83YguA330253wAAAJg"]
[Wed Sep 30 00:54:41.281707 2026] [security2:error] [pid 178882:tid 179224] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyMdqTm83YguA330254wAAAKo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:41.301575 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.301883 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.349303 2026] [security2:error] [pid 178882:tid 179290] [client 20.251.39.228:5653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/file.php"] [unique_id "aryyMdqTm83YguA330255gAAAOg"]
[Wed Sep 30 00:54:41.364603 2026] [security2:error] [pid 178882:tid 179236] [client 20.194.30.107:9992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp-admin/js/index.php"] [unique_id "aryyMdqTm83YguA330255wAAALY"]
[Wed Sep 30 00:54:41.391978 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.392271 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.412966 2026] [security2:error] [pid 178882:tid 179209] [client 39.44.16.112:62824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330256wAAAJs"]
[Wed Sep 30 00:54:41.413537 2026] [security2:error] [pid 178882:tid 179209] [client 39.44.16.112:62824] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330256wAAAJs"]
[Wed Sep 30 00:54:41.448499 2026] [security2:error] [pid 178882:tid 179293] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyMdqTm83YguA330257QAAAOs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:41.460366 2026] [security2:error] [pid 178882:tid 179295] [client 20.219.2.60:36863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/t.php"] [unique_id "aryyMdqTm83YguA330257gAAAO0"]
[Wed Sep 30 00:54:41.463400 2026] [security2:error] [pid 178882:tid 179203] [client 20.219.14.152:26411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/24.php"] [unique_id "aryyMdqTm83YguA330257wAAAJY"]
[Wed Sep 30 00:54:41.468526 2026] [security2:error] [pid 178882:tid 179284] [client 43.227.131.37:44994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330258AAAAOI"]
[Wed Sep 30 00:54:41.468653 2026] [security2:error] [pid 178882:tid 179284] [client 43.227.131.37:44994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA330258AAAAOI"]
[Wed Sep 30 00:54:41.472732 2026] [security2:error] [pid 178882:tid 179250] [client 69.57.172.119:50350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "aryyMdqTm83YguA330258QAAAMI"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 00:54:41.485210 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.485543 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.574633 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.574922 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.610200 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:41.610460 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:41.611619 2026] [security2:error] [pid 178882:tid 179190] [client 49.36.41.37:55820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA33025-wAAAIo"]
[Wed Sep 30 00:54:41.611738 2026] [security2:error] [pid 178882:tid 179190] [client 49.36.41.37:55820] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA33025-wAAAIo"]
[Wed Sep 30 00:54:41.613889 2026] [security2:error] [pid 178882:tid 179303] [client 103.148.43.14:53415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA33025_QAAAPU"]
[Wed Sep 30 00:54:41.614039 2026] [security2:error] [pid 178882:tid 179303] [client 103.148.43.14:53415] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyMdqTm83YguA33025_QAAAPU"]
[Wed Sep 30 00:54:41.620335 2026] [access_compat:error] [pid 178882:tid 179281] [client 47.79.13.28:51694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:41.620584 2026] [access_compat:error] [pid 178882:tid 179281] [client 47.79.13.28:51694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:41.669717 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.670160 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.725163 2026] [security2:error] [pid 178882:tid 179226] [client 20.58.177.98:34892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aryyMdqTm83YguA33026BwAAAKw"]
[Wed Sep 30 00:54:41.756106 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.756380 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.771657 2026] [security2:error] [pid 178882:tid 179249] [client 158.94.204.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyMdqTm83YguA33026CwAAAME"]
[Wed Sep 30 00:54:41.784796 2026] [security2:error] [pid 178882:tid 179261] [client 20.219.2.60:11019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/ws84.php"] [unique_id "aryyMdqTm83YguA33026DgAAAM0"]
[Wed Sep 30 00:54:41.802054 2026] [autoindex:error] [pid 178882:tid 179212] [client 194.163.128.162:0] AH01276: Cannot serve directory /home2/kevinole/public_html/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Sep 30 00:54:41.828234 2026] [security2:error] [pid 178882:tid 179192] [client 4.240.25.22:63790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/admin.php"] [unique_id "aryyMdqTm83YguA33026EwAAAIw"]
[Wed Sep 30 00:54:41.844872 2026] [security2:error] [pid 178882:tid 179302] [client 20.251.39.228:43748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bolt.php"] [unique_id "aryyMdqTm83YguA33026FQAAAPQ"]
[Wed Sep 30 00:54:41.845587 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.845843 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.877739 2026] [security2:error] [pid 178882:tid 179217] [client 45.138.12.32:13208] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.iwl.buu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyMdqTm83YguA33026FwAAAKM"]
[Wed Sep 30 00:54:41.878744 2026] [security2:error] [pid 178882:tid 179097] [remote 220.181.108.102:63495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/audubon-naturalist-hour-nature-journaling/"] [unique_id "aryyMdqTm83YguA33026FgAAri0"]
[Wed Sep 30 00:54:41.910881 2026] [security2:error] [pid 178882:tid 179273] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyMdqTm83YguA33026GAAAANg"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:41.941882 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:41.942372 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:41.983169 2026] [security2:error] [pid 178882:tid 179247] [client 20.219.14.152:26499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/xxw.php"] [unique_id "aryyMdqTm83YguA33026HgAAAL8"]
[Wed Sep 30 00:54:42.001477 2026] [ssl:error] [pid 178882:tid 179286] [client 216.25.124.26:15576] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autoconfig.crm.grupowebmex.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:54:42.029745 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.030202 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.035717 2026] [access_compat:error] [pid 178882:tid 179263] [client 47.79.13.1:38916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:42.035968 2026] [access_compat:error] [pid 178882:tid 179263] [client 47.79.13.1:38916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:42.062437 2026] [security2:error] [pid 178882:tid 179236] [client 20.194.30.107:33935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/media.php"] [unique_id "aryyMtqTm83YguA33026JQAAALY"]
[Wed Sep 30 00:54:42.082912 2026] [security2:error] [pid 178882:tid 179311] [client 45.138.12.43:6774] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nrf.tfd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyMtqTm83YguA33026JgAAAPw"]
[Wed Sep 30 00:54:42.118968 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.119220 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.179671 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:18921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/b.php"] [unique_id "aryyMtqTm83YguA33026KwAAAOs"]
[Wed Sep 30 00:54:42.215112 2026] [security2:error] [pid 178882:tid 179280] [client 20.58.177.98:36035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aryyMtqTm83YguA33026LQAAAN4"]
[Wed Sep 30 00:54:42.217014 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.217452 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.283758 2026] [security2:error] [pid 178882:tid 179317] [client 20.251.39.228:49492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-blogs.php"] [unique_id "aryyMtqTm83YguA33026LwAAAQE"]
[Wed Sep 30 00:54:42.302419 2026] [security2:error] [pid 178882:tid 179283] [client 49.205.105.16:13773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyMtqTm83YguA33026MQAAAOE"]
[Wed Sep 30 00:54:42.302543 2026] [security2:error] [pid 178882:tid 179283] [client 49.205.105.16:13773] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyMtqTm83YguA33026MQAAAOE"]
[Wed Sep 30 00:54:42.309397 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.309672 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.400249 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.400520 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.490599 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.490884 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.496187 2026] [security2:error] [pid 178882:tid 179215] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyMtqTm83YguA33026PAAAAKE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:42.568171 2026] [security2:error] [pid 178882:tid 179226] [client 191.243.216.228:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyMtqTm83YguA33026QAAAAKw"]
[Wed Sep 30 00:54:42.580656 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.580910 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.616718 2026] [security2:error] [pid 178882:tid 179232] [client 20.58.177.98:34941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/manager.php"] [unique_id "aryyMtqTm83YguA33026RAAAALI"]
[Wed Sep 30 00:54:42.676719 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.677160 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.748938 2026] [security2:error] [pid 178882:tid 179195] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyMtqTm83YguA33026TQAAAI8"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:42.750191 2026] [access_compat:error] [pid 178882:tid 179212] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:42.750453 2026] [access_compat:error] [pid 178882:tid 179212] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:42.753212 2026] [security2:error] [pid 178882:tid 179302] [client 20.204.42.136:54164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wpxml.php"] [unique_id "aryyMtqTm83YguA33026TgAAAPQ"]
[Wed Sep 30 00:54:42.766423 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.766670 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.801326 2026] [security2:error] [pid 178882:tid 179228] [client 20.251.39.228:32293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/zlnckdxn.php"] [unique_id "aryyMtqTm83YguA33026UAAAAK4"]
[Wed Sep 30 00:54:42.815804 2026] [security2:error] [pid 178882:tid 179239] [client 20.219.14.152:26384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/bnmtp.php"] [unique_id "aryyMtqTm83YguA33026UQAAALg"]
[Wed Sep 30 00:54:42.826200 2026] [security2:error] [pid 178882:tid 179251] [client 103.24.86.56:64392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyMtqTm83YguA33026UgAAAMM"]
[Wed Sep 30 00:54:42.826299 2026] [security2:error] [pid 178882:tid 179251] [client 103.24.86.56:64392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyMtqTm83YguA33026UgAAAMM"]
[Wed Sep 30 00:54:42.860011 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.860431 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:42.926072 2026] [security2:error] [pid 178882:tid 179211] [client 103.168.66.101:48056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyMtqTm83YguA33026WQAAAJ0"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:42.948942 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:42.949233 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.001411 2026] [security2:error] [pid 178882:tid 179266] [client 61.183.86.2:60308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.86.183.61.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "aryyMtqTm83YguA33026XAAAANI"], referer: https://traderootsltd.com/wp-login.php
[Wed Sep 30 00:54:43.030983 2026] [security2:error] [pid 178882:tid 179290] [client 20.204.161.246:48517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/robot.php"] [unique_id "aryyM9qTm83YguA33026ZgAAAOg"]
[Wed Sep 30 00:54:43.042945 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.043205 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.048391 2026] [security2:error] [pid 178882:tid 179233] [client 123.63.248.21:58642] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyM9qTm83YguA33026aAAAALM"]
[Wed Sep 30 00:54:43.048511 2026] [security2:error] [pid 178882:tid 179233] [client 123.63.248.21:58642] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyM9qTm83YguA33026aAAAALM"]
[Wed Sep 30 00:54:43.122140 2026] [security2:error] [pid 178882:tid 179317] [client 20.251.39.228:43751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/fs6.php"] [unique_id "aryyM9qTm83YguA33026bAAAAQE"]
[Wed Sep 30 00:54:43.135320 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.135738 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.139496 2026] [security2:error] [pid 178882:tid 179221] [client 78.26.151.39:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyM9qTm83YguA33026bwAAAKc"]
[Wed Sep 30 00:54:43.179165 2026] [security2:error] [pid 178882:tid 179309] [client 20.58.177.98:35949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/plugins/pwnd/as.php"] [unique_id "aryyM9qTm83YguA33026cAAAAPo"]
[Wed Sep 30 00:54:43.219097 2026] [access_compat:error] [pid 178882:tid 179281] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:43.219375 2026] [access_compat:error] [pid 178882:tid 179281] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:43.227586 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.228006 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.321489 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.321916 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.409478 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.409734 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:26316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.445951 2026] [security2:error] [pid 178882:tid 179310] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyM9qTm83YguA33026fAAAAPs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:43.456022 2026] [security2:error] [pid 178882:tid 179226] [client 20.219.14.152:26546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/ebkid.php"] [unique_id "aryyM9qTm83YguA33026fgAAAKw"]
[Wed Sep 30 00:54:43.468314 2026] [security2:error] [pid 178882:tid 179229] [client 20.219.2.60:18821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws49.php"] [unique_id "aryyM9qTm83YguA33026ggAAAK8"]
[Wed Sep 30 00:54:43.504554 2026] [security2:error] [pid 178882:tid 179261] [client 20.251.39.228:15075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/xwzs.php"] [unique_id "aryyM9qTm83YguA33026hQAAAM0"]
[Wed Sep 30 00:54:43.564330 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.564617 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.568889 2026] [security2:error] [pid 178882:tid 179212] [client 20.58.177.98:34928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-configs.php"] [unique_id "aryyM9qTm83YguA33026hwAAAJ4"]
[Wed Sep 30 00:54:43.621638 2026] [security2:error] [pid 178882:tid 179248] [client 45.138.12.41:44562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bowrattler.com"] [uri "/wp-links-opml.php"] [unique_id "aryyM9qTm83YguA33026iwAAAMA"]
[Wed Sep 30 00:54:43.628879 2026] [security2:error] [pid 178882:tid 179272] [client 40.77.167.55:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/shop/"] [unique_id "aryyM9qTm83YguA33026jAAAANc"]
[Wed Sep 30 00:54:43.652201 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.652455 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.684149 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.684418 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.686063 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:43.686314 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:43.707552 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:10901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/bnm.php"] [unique_id "aryyM9qTm83YguA33026lAAAANQ"]
[Wed Sep 30 00:54:43.708569 2026] [security2:error] [pid 178882:tid 179285] [client 103.159.192.142:53649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyM9qTm83YguA33026lQAAAOM"]
[Wed Sep 30 00:54:43.708663 2026] [security2:error] [pid 178882:tid 179285] [client 103.159.192.142:53649] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyM9qTm83YguA33026lQAAAOM"]
[Wed Sep 30 00:54:43.768596 2026] [security2:error] [pid 178882:tid 179193] [client 20.194.30.107:14459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/simple.php"] [unique_id "aryyM9qTm83YguA33026mQAAAI0"]
[Wed Sep 30 00:54:43.773821 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.774080 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.789680 2026] [security2:error] [pid 178882:tid 179294] [client 4.240.25.22:10842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/samll.php"] [unique_id "aryyM9qTm83YguA33026mgAAAOw"]
[Wed Sep 30 00:54:43.828227 2026] [security2:error] [pid 178882:tid 179213] [client 216.73.216.46:26316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyM9qTm83YguA33026ngAAAJ8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1Mg%3D%3D
[Wed Sep 30 00:54:43.845574 2026] [security2:error] [pid 178882:tid 179264] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyM9qTm83YguA33026nwAAANA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:43.859793 2026] [security2:error] [pid 178882:tid 179209] [client 20.251.39.228:15102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryyM9qTm83YguA33026oQAAAJs"]
[Wed Sep 30 00:54:43.864710 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.864973 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:43.890402 2026] [security2:error] [pid 178882:tid 179316] [client 57.141.14.31:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/"] [unique_id "aryyM9qTm83YguA33026pAAAAQA"]
[Wed Sep 30 00:54:43.896491 2026] [security2:error] [pid 178882:tid 179231] [client 20.204.42.136:27431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wefile.php"] [unique_id "aryyM9qTm83YguA33026pgAAALE"]
[Wed Sep 30 00:54:43.959150 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:43.959451 2026] [security2:error] [pid 178882:tid 179250] [client 20.219.2.60:36772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryyM9qTm83YguA33026rgAAAMI"]
[Wed Sep 30 00:54:43.959486 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.058484 2026] [security2:error] [pid 178882:tid 179255] [client 20.58.177.98:35927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aryyNNqTm83YguA33026tAAAAMc"]
[Wed Sep 30 00:54:44.061676 2026] [security2:error] [pid 178882:tid 179298] [client 20.70.173.30:25098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/edit.php"] [unique_id "aryyNNqTm83YguA33026tQAAAPA"]
[Wed Sep 30 00:54:44.062335 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.062747 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.091491 2026] [security2:error] [pid 178882:tid 179238] [client 20.219.14.152:26370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/133.php"] [unique_id "aryyNNqTm83YguA33026twAAALc"]
[Wed Sep 30 00:54:44.149402 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.149679 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.190838 2026] [access_compat:error] [pid 178882:tid 179232] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:44.191091 2026] [access_compat:error] [pid 178882:tid 179232] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 00:54:44.281381 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:43727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws66.php"] [unique_id "aryyNNqTm83YguA33026yQAAAKg"]
[Wed Sep 30 00:54:44.310616 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.310907 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.346436 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.346707 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.353493 2026] [security2:error] [pid 178882:tid 179217] [client 20.28.180.172:34267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/r5t.php"] [unique_id "aryyNNqTm83YguA33026zQAAAKM"]
[Wed Sep 30 00:54:44.372495 2026] [security2:error] [pid 178882:tid 179251] [client 61.183.86.2:37078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.86.183.61.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traderootsltd.com"] [uri "/wp-login.php"] [unique_id "aryyNNqTm83YguA33026zgAAAMM"], referer: https://traderootsltd.com/wp-login.php
[Wed Sep 30 00:54:44.437684 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.437978 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.537185 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.537463 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.567507 2026] [security2:error] [pid 178882:tid 179210] [client 45.138.12.32:13244] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.izn.soq.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyNNqTm83YguA330262QAAAJw"]
[Wed Sep 30 00:54:44.594773 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.14.152:26372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/x33.php"] [unique_id "aryyNNqTm83YguA330262gAAAOc"]
[Wed Sep 30 00:54:44.625507 2026] [security2:error] [pid 178882:tid 179319] [client 74.7.230.3:53544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "website-cde9831c.todadata.com"] [uri "/robots.txt"] [unique_id "aryyNNqTm83YguA330263wABA2M"]
[Wed Sep 30 00:54:44.628682 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.628953 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.637369 2026] [security2:error] [pid 178882:tid 179316] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyNNqTm83YguA330264gAAAQA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:44.657596 2026] [security2:error] [pid 178882:tid 179236] [client 20.219.2.60:18816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-blog-header.php"] [unique_id "aryyNNqTm83YguA330264wAAALY"]
[Wed Sep 30 00:54:44.669592 2026] [security2:error] [pid 178882:tid 179292] [client 45.138.12.40:59902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cua.gfl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyNNqTm83YguA330265AAAAOo"]
[Wed Sep 30 00:54:44.698365 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:44.698646 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:44.723607 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.724011 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.748207 2026] [security2:error] [pid 178882:tid 179194] [client 20.204.161.246:48611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/sss.php"] [unique_id "aryyNNqTm83YguA330266AAAAI4"]
[Wed Sep 30 00:54:44.795780 2026] [security2:error] [pid 178882:tid 179283] [client 20.251.39.228:40950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ewe.php"] [unique_id "aryyNNqTm83YguA330267AAAAOE"]
[Wed Sep 30 00:54:44.810513 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.810766 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.838871 2026] [security2:error] [pid 178882:tid 179260] [client 20.58.177.98:35951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aryyNNqTm83YguA330267gAAAMw"]
[Wed Sep 30 00:54:44.906823 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.907279 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:44.992998 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:44.993263 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.087566 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.087835 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.167526 2026] [security2:error] [pid 178882:tid 179259] [client 20.204.42.136:27906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/ebkid.php"] [unique_id "aryyNdqTm83YguA33026-gAAAMs"]
[Wed Sep 30 00:54:45.188943 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.189200 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.192918 2026] [security2:error] [pid 178882:tid 179271] [client 20.58.177.98:34904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aryyNdqTm83YguA33026_AAAANY"]
[Wed Sep 30 00:54:45.278670 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.278961 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.299306 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:49490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/aboute.php"] [unique_id "aryyNdqTm83YguA33027AAAAAKg"]
[Wed Sep 30 00:54:45.367838 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.368105 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.451397 2026] [security2:error] [pid 178882:tid 179192] [client 20.219.14.152:26428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/cae.php"] [unique_id "aryyNdqTm83YguA33027CQAAAIw"]
[Wed Sep 30 00:54:45.461115 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.461381 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.472934 2026] [security2:error] [pid 178882:tid 179195] [client 200.10.47.89:40293] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.clenbuterol-for-sale.com"] [uri "/xmlrpc.php"] [unique_id "aryyNdqTm83YguA33027AQAAAI8"], referer: https://www.clenbuterol-for-sale.com/xmlrpc.php
[Wed Sep 30 00:54:45.509037 2026] [security2:error] [pid 178882:tid 179320] [client 93.152.76.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "aryyNdqTm83YguA33027EQAAAQQ"]
[Wed Sep 30 00:54:45.519643 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:36686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/public/ws49.php"] [unique_id "aryyNdqTm83YguA33027EgAAANQ"]
[Wed Sep 30 00:54:45.542904 2026] [security2:error] [pid 178882:tid 179314] [client 20.58.177.98:36054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/index/fucku.php"] [unique_id "aryyNdqTm83YguA33027EwAAAP4"]
[Wed Sep 30 00:54:45.552492 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.552923 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.641993 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.642245 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.681095 2026] [security2:error] [pid 178882:tid 179213] [client 20.214.145.90:43428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyNdqTm83YguA33027GgAAAJ8"]
[Wed Sep 30 00:54:45.692361 2026] [security2:error] [pid 178882:tid 179278] [client 4.240.25.22:11264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/ohct.php"] [unique_id "aryyNdqTm83YguA33027GwAAANw"]
[Wed Sep 30 00:54:45.709214 2026] [security2:error] [pid 178882:tid 179264] [client 20.251.39.228:49507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/x9.php"] [unique_id "aryyNdqTm83YguA33027HAAAANA"]
[Wed Sep 30 00:54:45.734078 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.734371 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.765838 2026] [access_compat:error] [pid 178882:tid 179235] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 00:54:45.766260 2026] [access_compat:error] [pid 178882:tid 179235] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 00:54:45.824774 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.825069 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.889408 2026] [security2:error] [pid 178882:tid 179226] [client 106.214.2.47:28359] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyNdqTm83YguA33027MQAAAKw"]
[Wed Sep 30 00:54:45.889593 2026] [security2:error] [pid 178882:tid 179226] [client 106.214.2.47:28359] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyNdqTm83YguA33027MQAAAKw"]
[Wed Sep 30 00:54:45.925152 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:45.925725 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:45.954722 2026] [security2:error] [pid 178882:tid 179309] [client 4.196.65.241:27310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/asax.php"] [unique_id "aryyNdqTm83YguA33027NAAAAPo"]
[Wed Sep 30 00:54:45.997935 2026] [security2:error] [pid 178882:tid 179267] [client 103.168.66.101:48060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyNdqTm83YguA33027OwAAANM"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:46.009267 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.009566 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.024476 2026] [security2:error] [pid 178882:tid 179190] [client 20.214.145.90:38355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyNtqTm83YguA33027PwAAAIo"]
[Wed Sep 30 00:54:46.037525 2026] [security2:error] [pid 178882:tid 179258] [client 200.10.47.89:58121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.clenbuterol-for-sale.com"] [uri "/xmlrpc.php"] [unique_id "aryyNdqTm83YguA33027MgAAAMo"], referer: https://www.clenbuterol-for-sale.com/xmlrpc.php
[Wed Sep 30 00:54:46.077367 2026] [security2:error] [pid 178882:tid 179299] [client 20.251.39.228:5691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/an.php"] [unique_id "aryyNtqTm83YguA33027QQAAAPE"]
[Wed Sep 30 00:54:46.099453 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.099713 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.193965 2026] [security2:error] [pid 178882:tid 179301] [client 20.204.161.246:48584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/or.php"] [unique_id "aryyNtqTm83YguA33027RgAAAPM"]
[Wed Sep 30 00:54:46.196671 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.197105 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.202638 2026] [security2:error] [pid 178882:tid 179272] [client 43.157.43.147:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.afrilech.org"] [uri "/"] [unique_id "aryyNtqTm83YguA33027SAAAANc"]
[Wed Sep 30 00:54:46.210362 2026] [security2:error] [pid 178882:tid 179273] [client 20.219.2.60:18828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bgymj.php"] [unique_id "aryyNtqTm83YguA33027SwAAANg"]
[Wed Sep 30 00:54:46.232539 2026] [security2:error] [pid 178882:tid 179204] [client 69.94.12.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "aryyNtqTm83YguA33027TAAAAJc"]
[Wed Sep 30 00:54:46.259325 2026] [access_compat:error] [pid 178882:tid 179199] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:54:46.259691 2026] [access_compat:error] [pid 178882:tid 179199] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:54:46.270980 2026] [security2:error] [pid 178882:tid 179219] [client 20.219.2.60:10916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/amax.php"] [unique_id "aryyNtqTm83YguA33027UAAAAKU"]
[Wed Sep 30 00:54:46.289142 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.289420 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.295106 2026] [security2:error] [pid 178882:tid 179251] [client 20.214.145.90:43398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/atomlib.php"] [unique_id "aryyNtqTm83YguA33027UgAAAMM"]
[Wed Sep 30 00:54:46.379787 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.380063 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.382344 2026] [security2:error] [pid 178882:tid 179314] [client 20.198.74.230:23901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ho.php"] [unique_id "aryyNtqTm83YguA33027VQAAAP4"]
[Wed Sep 30 00:54:46.413886 2026] [security2:error] [pid 178882:tid 179269] [client 20.251.39.228:16844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/aboutc.php"] [unique_id "aryyNtqTm83YguA33027VwAAANU"]
[Wed Sep 30 00:54:46.431961 2026] [security2:error] [pid 178882:tid 179285] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyNtqTm83YguA33027WAAAAOM"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:46.467074 2026] [security2:error] [pid 178882:tid 179264] [client 213.136.69.135:53341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/abilities.php"] [unique_id "aryyNtqTm83YguA33027WwAAANA"], referer: binance.com
[Wed Sep 30 00:54:46.475339 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.475585 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.536628 2026] [security2:error] [pid 178882:tid 179306] [client 20.194.30.107:51699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/simple.php"] [unique_id "aryyNtqTm83YguA33027ZAAAAPg"]
[Wed Sep 30 00:54:46.560981 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.561250 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.601604 2026] [security2:error] [pid 178882:tid 179209] [client 20.214.145.90:38399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/a.php"] [unique_id "aryyNtqTm83YguA33027ZgAAAJs"]
[Wed Sep 30 00:54:46.627512 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.14.152:26523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/txets.php"] [unique_id "aryyNtqTm83YguA33027aAAAAKo"]
[Wed Sep 30 00:54:46.652324 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.652593 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.722207 2026] [security2:error] [pid 178882:tid 179249] [client 46.28.196.22:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyNtqTm83YguA33027bQAAAME"]
[Wed Sep 30 00:54:46.744132 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.744387 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.787336 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:46.787600 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:46.792140 2026] [security2:error] [pid 178882:tid 179250] [client 20.251.39.228:49517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gdn.php"] [unique_id "aryyNtqTm83YguA33027cgAAAMI"]
[Wed Sep 30 00:54:46.835277 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.835555 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.840919 2026] [security2:error] [pid 178882:tid 179266] [client 20.219.2.60:10932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/66.php"] [unique_id "aryyNtqTm83YguA33027dAAAANI"]
[Wed Sep 30 00:54:46.896301 2026] [access_compat:error] [pid 178882:tid 179260] [client 47.79.13.64:39770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:46.896566 2026] [access_compat:error] [pid 178882:tid 179260] [client 47.79.13.64:39770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:46.899970 2026] [security2:error] [pid 178882:tid 179253] [client 20.204.42.136:57183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/edorxrr.php"] [unique_id "aryyNtqTm83YguA33027dgAAAMU"]
[Wed Sep 30 00:54:46.914818 2026] [security2:error] [pid 178882:tid 179279] [client 20.214.145.90:38379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/v.php"] [unique_id "aryyNtqTm83YguA33027dwAAAN0"]
[Wed Sep 30 00:54:46.931235 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:46.931680 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:46.936454 2026] [security2:error] [pid 178882:tid 179196] [client 20.58.177.98:36056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/upload/wp-info.php"] [unique_id "aryyNtqTm83YguA33027fAAAAJA"]
[Wed Sep 30 00:54:47.018131 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.018407 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.108749 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.109010 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.163132 2026] [security2:error] [pid 178882:tid 179256] [client 20.219.14.152:26534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wp-update.php"] [unique_id "aryyN9qTm83YguA33027hQAAAMg"]
[Wed Sep 30 00:54:47.199992 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.200295 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.202771 2026] [security2:error] [pid 178882:tid 179195] [client 20.214.145.90:43429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/d2.php"] [unique_id "aryyN9qTm83YguA33027iQAAAI8"]
[Wed Sep 30 00:54:47.240798 2026] [access_compat:error] [pid 178882:tid 179257] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL25ldA==
[Wed Sep 30 00:54:47.241067 2026] [access_compat:error] [pid 178882:tid 179257] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL25ldA==
[Wed Sep 30 00:54:47.295718 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.296153 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.344297 2026] [security2:error] [pid 178882:tid 179297] [client 69.57.172.96:54486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "aryyN9qTm83YguA33027jwAAAO8"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 00:54:47.359085 2026] [security2:error] [pid 178882:tid 179248] [client 20.58.177.98:35909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/post.php"] [unique_id "aryyN9qTm83YguA33027kwAAAMA"]
[Wed Sep 30 00:54:47.362440 2026] [security2:error] [pid 178882:tid 179268] [client 20.251.39.228:15018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/first.php"] [unique_id "aryyN9qTm83YguA33027lAAAANQ"]
[Wed Sep 30 00:54:47.382613 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.382877 2026] [access_compat:error] [pid 178882:tid 179223] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.427996 2026] [security2:error] [pid 178882:tid 179211] [client 20.219.2.60:19447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gfd.php"] [unique_id "aryyN9qTm83YguA33027mgAAAJ0"]
[Wed Sep 30 00:54:47.437697 2026] [security2:error] [pid 178882:tid 179281] [client 157.48.249.6:58733] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "301"] [hostname "collinsonhall.com"] [uri "/xmlrpc.php"] [unique_id "aryyN9qTm83YguA33027kQAAAN8"]
[Wed Sep 30 00:54:47.476327 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.476588 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.513705 2026] [security2:error] [pid 178882:tid 179294] [client 20.219.2.60:36773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/gifclass.php"] [unique_id "aryyN9qTm83YguA33027oAAAAOw"]
[Wed Sep 30 00:54:47.514146 2026] [security2:error] [pid 178882:tid 179198] [client 20.214.145.90:43399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/xc.php"] [unique_id "aryyN9qTm83YguA33027oQAAAJI"]
[Wed Sep 30 00:54:47.569712 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.570131 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.580537 2026] [security2:error] [pid 178882:tid 179284] [client 83.25.17.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "aryyN9qTm83YguA33027pwAAAOI"]
[Wed Sep 30 00:54:47.582222 2026] [security2:error] [pid 178882:tid 179209] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyN9qTm83YguA33027qAAAAJs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:47.623776 2026] [security2:error] [pid 178882:tid 179233] [client 4.240.25.22:18698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/log.php"] [unique_id "aryyN9qTm83YguA33027qgAAALM"]
[Wed Sep 30 00:54:47.659861 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.660134 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.730957 2026] [security2:error] [pid 178882:tid 179231] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyN9qTm83YguA33027rAAAALE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:47.732609 2026] [security2:error] [pid 178882:tid 179275] [client 20.251.39.228:5690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/redixsx.php"] [unique_id "aryyN9qTm83YguA33027rgAAANk"]
[Wed Sep 30 00:54:47.736009 2026] [access_compat:error] [pid 178882:tid 179317] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzExL25ldA==
[Wed Sep 30 00:54:47.736275 2026] [access_compat:error] [pid 178882:tid 179317] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzExL25ldA==
[Wed Sep 30 00:54:47.760228 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.760498 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.770780 2026] [security2:error] [pid 178882:tid 179304] [client 116.72.182.19:50742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyN9qTm83YguA33027sQAAAPY"]
[Wed Sep 30 00:54:47.770905 2026] [security2:error] [pid 178882:tid 179304] [client 116.72.182.19:50742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyN9qTm83YguA33027sQAAAPY"]
[Wed Sep 30 00:54:47.803823 2026] [security2:error] [pid 178882:tid 179309] [client 20.214.145.90:43446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/g.php"] [unique_id "aryyN9qTm83YguA33027sgAAAPo"]
[Wed Sep 30 00:54:47.844473 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.844730 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:61675] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:47.940024 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:47.940478 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.021601 2026] [security2:error] [pid 178882:tid 179258] [client 20.219.14.152:26380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/177.php"] [unique_id "aryyONqTm83YguA33027wQAAAMo"]
[Wed Sep 30 00:54:48.030944 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.031382 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.083269 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:15031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/cpp2.php"] [unique_id "aryyONqTm83YguA33027xAAAAKg"]
[Wed Sep 30 00:54:48.098627 2026] [security2:error] [pid 178882:tid 179220] [client 49.43.163.212:51293] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33027yAAAAKY"]
[Wed Sep 30 00:54:48.098748 2026] [security2:error] [pid 178882:tid 179220] [client 49.43.163.212:51293] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33027yAAAAKY"]
[Wed Sep 30 00:54:48.123460 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.123867 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.145176 2026] [security2:error] [pid 178882:tid 179185] [client 20.214.145.90:38395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/gmo.php"] [unique_id "aryyONqTm83YguA33027zAAAAIU"]
[Wed Sep 30 00:54:48.155457 2026] [security2:error] [pid 178882:tid 179272] [client 20.58.177.98:34905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aryyONqTm83YguA33027zQAAANc"]
[Wed Sep 30 00:54:48.199347 2026] [security2:error] [pid 178882:tid 179303] [client 20.204.42.136:27450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/Q7iw6mOdefault.php"] [unique_id "aryyONqTm83YguA33027zgAAAPU"]
[Wed Sep 30 00:54:48.208215 2026] [security2:error] [pid 178882:tid 179300] [client 20.194.30.107:58820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/yawa.php"] [unique_id "aryyONqTm83YguA330270AAAAPI"]
[Wed Sep 30 00:54:48.211704 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.211989 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.280765 2026] [security2:error] [pid 178882:tid 179204] [client 216.73.216.46:61675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyONqTm83YguA330270QAAAJc"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9zaGFyZS9taW1lL2FwcGxpY2F0aW9u
[Wed Sep 30 00:54:48.299300 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.299562 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.300279 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:48.300550 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2Rldg==
[Wed Sep 30 00:54:48.337053 2026] [security2:error] [pid 178882:tid 179228] [client 20.219.2.60:10943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/public/file.php"] [unique_id "aryyONqTm83YguA330271QAAAK4"]
[Wed Sep 30 00:54:48.366525 2026] [security2:error] [pid 178882:tid 179188] [client 20.28.180.172:29588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/ab.php"] [unique_id "aryyONqTm83YguA330272AAAAIg"]
[Wed Sep 30 00:54:48.390661 2026] [security2:error] [pid 178882:tid 179211] [client 74.7.242.1:40240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyONqTm83YguA330272gAAAJ0"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:54:48.391045 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.391291 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.408289 2026] [security2:error] [pid 178882:tid 179311] [client 20.251.39.228:15060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/admlo.php"] [unique_id "aryyONqTm83YguA330273AAAAPw"]
[Wed Sep 30 00:54:48.491305 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.491551 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.539613 2026] [security2:error] [pid 178882:tid 179284] [client 20.214.145.90:38394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/11.php"] [unique_id "aryyONqTm83YguA330275wAAAOI"]
[Wed Sep 30 00:54:48.578531 2026] [security2:error] [pid 178882:tid 179256] [client 103.159.192.142:53947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA330276wAAAMg"]
[Wed Sep 30 00:54:48.578703 2026] [security2:error] [pid 178882:tid 179256] [client 103.159.192.142:53947] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA330276wAAAMg"]
[Wed Sep 30 00:54:48.628099 2026] [security2:error] [pid 178882:tid 179191] [client 20.219.14.152:26389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/ccc.php"] [unique_id "aryyONqTm83YguA330277gAAAIs"]
[Wed Sep 30 00:54:48.628732 2026] [security2:error] [pid 178882:tid 179233] [client 45.165.46.16:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyONqTm83YguA330277QAAALM"]
[Wed Sep 30 00:54:48.675353 2026] [security2:error] [pid 178882:tid 179231] [client 20.58.177.98:35966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/adminfuns.php"] [unique_id "aryyONqTm83YguA330278QAAALE"]
[Wed Sep 30 00:54:48.691054 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.691343 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.691623 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.691924 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:11549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.739871 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL25ldA==
[Wed Sep 30 00:54:48.740132 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL25ldA==
[Wed Sep 30 00:54:48.756413 2026] [security2:error] [pid 178882:tid 179215] [client 20.219.2.60:18829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/callback.php"] [unique_id "aryyONqTm83YguA33027-QAAAKE"]
[Wed Sep 30 00:54:48.765195 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.169.65:60530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33027-gAAAMc"]
[Wed Sep 30 00:54:48.765321 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.169.65:60530] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33027-gAAAMc"]
[Wed Sep 30 00:54:48.815541 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.815821 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.829490 2026] [security2:error] [pid 178882:tid 179299] [client 20.214.145.90:43392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/20.php"] [unique_id "aryyONqTm83YguA33027_gAAAPE"]
[Wed Sep 30 00:54:48.848743 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.849165 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:48.855241 2026] [security2:error] [pid 178882:tid 179286] [client 116.193.128.26:64990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33028AAAAAOQ"]
[Wed Sep 30 00:54:48.855388 2026] [security2:error] [pid 178882:tid 179286] [client 116.193.128.26:64990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33028AAAAAOQ"]
[Wed Sep 30 00:54:48.856294 2026] [security2:error] [pid 178882:tid 179287] [client 20.251.39.228:49529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/admin-ajax.php"] [unique_id "aryyONqTm83YguA33028AQAAAOU"]
[Wed Sep 30 00:54:48.869201 2026] [security2:error] [pid 178882:tid 179285] [client 116.197.133.25:65075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33028AgAAAOM"]
[Wed Sep 30 00:54:48.869344 2026] [security2:error] [pid 178882:tid 179285] [client 116.197.133.25:65075] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyONqTm83YguA33028AgAAAOM"]
[Wed Sep 30 00:54:48.936523 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:48.936777 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.028065 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.028404 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.053711 2026] [security2:error] [pid 178882:tid 179192] [client 20.58.177.98:36049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/about.php"] [unique_id "aryyOdqTm83YguA33028EQAAAIw"]
[Wed Sep 30 00:54:49.067645 2026] [security2:error] [pid 178882:tid 179188] [client 69.57.172.96:53796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "aryyOdqTm83YguA33028EgAAAIg"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 00:54:49.119652 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.119942 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.134709 2026] [security2:error] [pid 178882:tid 179201] [client 20.214.145.90:43422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/f35.php"] [unique_id "aryyOdqTm83YguA33028FQAAAJU"]
[Wed Sep 30 00:54:49.155004 2026] [security2:error] [pid 178882:tid 179230] [client 20.204.42.136:27407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/zoo2.php"] [unique_id "aryyOdqTm83YguA33028FgAAALA"]
[Wed Sep 30 00:54:49.165424 2026] [access_compat:error] [pid 178882:tid 179266] [client 47.82.11.32:39508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:49.165689 2026] [access_compat:error] [pid 178882:tid 179266] [client 47.82.11.32:39508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:49.178392 2026] [security2:error] [pid 178882:tid 179311] [client 20.219.14.152:26519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/0xD.php"] [unique_id "aryyOdqTm83YguA33028GAAAAPw"]
[Wed Sep 30 00:54:49.199588 2026] [security2:error] [pid 178882:tid 179246] [client 20.219.2.60:11022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/166.php"] [unique_id "aryyOdqTm83YguA33028GgAAAL4"]
[Wed Sep 30 00:54:49.209815 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.210066 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.260476 2026] [access_compat:error] [pid 178882:tid 179292] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:54:49.260750 2026] [access_compat:error] [pid 178882:tid 179292] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:54:49.301307 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.301578 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.394134 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.394451 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.406876 2026] [security2:error] [pid 178882:tid 179249] [client 20.58.177.98:35944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/BDKR28WP.php"] [unique_id "aryyOdqTm83YguA33028KwAAAME"]
[Wed Sep 30 00:54:49.484838 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.485128 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.536435 2026] [security2:error] [pid 178882:tid 179225] [client 20.214.145.90:43439] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.youth2026.org"] [uri "/1.php"] [unique_id "aryyOdqTm83YguA33028NAAAAKs"]
[Wed Sep 30 00:54:49.536586 2026] [security2:error] [pid 178882:tid 179225] [client 20.214.145.90:43439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/1.php"] [unique_id "aryyOdqTm83YguA33028NAAAAKs"]
[Wed Sep 30 00:54:49.574753 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.575020 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.651222 2026] [security2:error] [pid 178882:tid 179082] [remote 57.141.14.14:32230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/wp-includes/wlwmanifest.xml"] [unique_id "aryyOdqTm83YguA33028OgAA5B4"]
[Wed Sep 30 00:54:49.675743 2026] [security2:error] [pid 178882:tid 179244] [client 20.70.173.30:59553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wsd.php"] [unique_id "aryyOdqTm83YguA33028PgAAALw"]
[Wed Sep 30 00:54:49.675806 2026] [security2:error] [pid 178882:tid 179195] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyOdqTm83YguA33028PAAAAI8"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:49.678705 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.678985 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.693023 2026] [security2:error] [pid 178882:tid 179288] [client 20.219.14.152:26376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/sallu.php"] [unique_id "aryyOdqTm83YguA33028QAAAAOY"]
[Wed Sep 30 00:54:49.694538 2026] [security2:error] [pid 178882:tid 179191] [client 182.69.182.151:1822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyOdqTm83YguA33028QgAAAIs"]
[Wed Sep 30 00:54:49.695043 2026] [security2:error] [pid 178882:tid 179191] [client 182.69.182.151:1822] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyOdqTm83YguA33028QgAAAIs"]
[Wed Sep 30 00:54:49.718698 2026] [security2:error] [pid 178882:tid 179297] [client 91.238.67.159:39542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.238.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/index.php"] [unique_id "aryyOdqTm83YguA33028RgAAAO8"]
[Wed Sep 30 00:54:49.721636 2026] [security2:error] [pid 178882:tid 179199] [client 103.172.210.103:52280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyOdqTm83YguA33028RwAAAJM"]
[Wed Sep 30 00:54:49.721770 2026] [security2:error] [pid 178882:tid 179199] [client 103.172.210.103:52280] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyOdqTm83YguA33028RwAAAJM"]
[Wed Sep 30 00:54:49.747995 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:49.748451 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:49.749782 2026] [autoindex:error] [pid 178882:tid 179268] [client 212.156.70.154:0] AH01276: Cannot serve directory /home3/tutiend2/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:54:49.771187 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.771618 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.784683 2026] [security2:error] [pid 178882:tid 179192] [client 4.240.25.22:10818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/kj.php"] [unique_id "aryyOdqTm83YguA33028UAAAAIw"]
[Wed Sep 30 00:54:49.818327 2026] [security2:error] [pid 178882:tid 179262] [client 20.204.161.246:48579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/b8.php"] [unique_id "aryyOdqTm83YguA33028WAAAAM4"]
[Wed Sep 30 00:54:49.845210 2026] [security2:error] [pid 178882:tid 179311] [client 20.58.177.98:34908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/file5.php"] [unique_id "aryyOdqTm83YguA33028WwAAAPw"]
[Wed Sep 30 00:54:49.862432 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.862874 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:49.863623 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.2.60:36698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/sa.php7"] [unique_id "aryyOdqTm83YguA33028YAAAAOc"]
[Wed Sep 30 00:54:49.872711 2026] [security2:error] [pid 178882:tid 179238] [client 20.214.145.90:43409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/c.php"] [unique_id "aryyOdqTm83YguA33028YgAAALc"]
[Wed Sep 30 00:54:49.932940 2026] [security2:error] [pid 178882:tid 179293] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyOdqTm83YguA33028aAAAAOs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:49.951619 2026] [security2:error] [pid 178882:tid 179290] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyOdqTm83YguA33028awAAAOg"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:49.952619 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:49.952886 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.040806 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.041068 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.122280 2026] [security2:error] [pid 178882:tid 179190] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyOtqTm83YguA33028dgAAAIo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:50.136413 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.136831 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.176879 2026] [security2:error] [pid 178882:tid 179310] [client 20.219.2.60:18858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/file.php"] [unique_id "aryyOtqTm83YguA33028ewAAAPs"]
[Wed Sep 30 00:54:50.225521 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.225820 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.252000 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.145.90:43417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/build.php"] [unique_id "aryyOtqTm83YguA33028fQAAAPU"]
[Wed Sep 30 00:54:50.255340 2026] [security2:error] [pid 178882:tid 179264] [client 20.194.30.107:14356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/yawa.php"] [unique_id "aryyOtqTm83YguA33028fgAAANA"]
[Wed Sep 30 00:54:50.259418 2026] [security2:error] [pid 178882:tid 179244] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyOtqTm83YguA33028fwAAALw"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:50.303601 2026] [security2:error] [pid 178882:tid 179257] [client 20.219.14.152:26515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/xwpg.php"] [unique_id "aryyOtqTm83YguA33028hAAAAMk"]
[Wed Sep 30 00:54:50.307021 2026] [access_compat:error] [pid 178882:tid 179288] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:54:50.307281 2026] [access_compat:error] [pid 178882:tid 179288] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:54:50.317943 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.318195 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.408299 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.408565 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.419176 2026] [security2:error] [pid 178882:tid 179143] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyOtqTm83YguA33028jAAAzlk"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D13086
[Wed Sep 30 00:54:50.440425 2026] [security2:error] [pid 178882:tid 179238] [client 20.58.177.98:36088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/b8.php"] [unique_id "aryyOtqTm83YguA33028jgAAALc"]
[Wed Sep 30 00:54:50.514654 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.514988 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.516272 2026] [security2:error] [pid 178882:tid 179230] [client 91.238.67.159:39554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "afrilech.org"] [uri "/wp-json/wp/v2/plugins"] [unique_id "aryyOtqTm83YguA33028mAAAALA"], referer: http://afrilech.org/index.php?rest_route=/wp/v2/plugins
[Wed Sep 30 00:54:50.591468 2026] [access_compat:error] [pid 178882:tid 179218] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.591734 2026] [access_compat:error] [pid 178882:tid 179218] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.642943 2026] [security2:error] [pid 178882:tid 179200] [client 57.141.14.13:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyOtqTm83YguA33028pAAAAJQ"]
[Wed Sep 30 00:54:50.647510 2026] [access_compat:error] [pid 178882:tid 179289] [client 47.79.13.168:35360] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:50.647900 2026] [access_compat:error] [pid 178882:tid 179289] [client 47.79.13.168:35360] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:50.655525 2026] [security2:error] [pid 178882:tid 179164] [remote 47.128.114.151:11036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/14499/"] [unique_id "aryyOtqTm83YguA33028pgAA-G4"]
[Wed Sep 30 00:54:50.662323 2026] [security2:error] [pid 178882:tid 179304] [client 20.214.145.90:43451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/bless.php"] [unique_id "aryyOtqTm83YguA33028pwAAAPY"]
[Wed Sep 30 00:54:50.682396 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.682630 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.736095 2026] [security2:error] [pid 178882:tid 179284] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyOtqTm83YguA33028qgAAAOI"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:50.756329 2026] [access_compat:error] [pid 178882:tid 179231] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:50.756586 2026] [access_compat:error] [pid 178882:tid 179231] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:50.769329 2026] [security2:error] [pid 178882:tid 179198] [client 106.214.3.140:9963] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryyOtqTm83YguA33028kwAAAJI"]
[Wed Sep 30 00:54:50.776327 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.776597 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.815341 2026] [security2:error] [pid 178882:tid 179277] [client 20.58.177.98:34912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/133.php"] [unique_id "aryyOtqTm83YguA33028sAAAANs"]
[Wed Sep 30 00:54:50.869037 2026] [security2:error] [pid 178882:tid 179239] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyOtqTm83YguA33028swAAALg"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:50.869420 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.869841 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.870056 2026] [security2:error] [pid 178882:tid 179225] [client 43.104.4.201:56745] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "aryyOtqTm83YguA33028sgAAAKs"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:54:50.880629 2026] [security2:error] [pid 178882:tid 179247] [client 20.219.2.60:18882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bolt.php"] [unique_id "aryyOtqTm83YguA33028tAAAAL8"]
[Wed Sep 30 00:54:50.899030 2026] [security2:error] [pid 178882:tid 179261] [client 150.107.232.159:36329] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyOtqTm83YguA33028tQAAAM0"]
[Wed Sep 30 00:54:50.899144 2026] [security2:error] [pid 178882:tid 179261] [client 150.107.232.159:36329] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyOtqTm83YguA33028tQAAAM0"]
[Wed Sep 30 00:54:50.960274 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:50.960650 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:50.960687 2026] [security2:error] [pid 178882:tid 179195] [client 20.214.145.90:43444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/admin/upload/css.php"] [unique_id "aryyOtqTm83YguA33028uQAAAI8"]
[Wed Sep 30 00:54:51.030833 2026] [security2:error] [pid 178882:tid 179257] [client 20.219.14.152:26368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/flamini.php"] [unique_id "aryyO9qTm83YguA33028wAAAAMk"]
[Wed Sep 30 00:54:51.034404 2026] [security2:error] [pid 178882:tid 179212] [client 103.168.66.101:48064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyO9qTm83YguA33028wQAAAJ4"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:51.053221 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.053488 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.094305 2026] [security2:error] [pid 178882:tid 179276] [client 103.166.103.39:58255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.103.166.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028xwAAANo"]
[Wed Sep 30 00:54:51.094418 2026] [security2:error] [pid 178882:tid 179276] [client 103.166.103.39:58255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028xwAAANo"]
[Wed Sep 30 00:54:51.118012 2026] [security2:error] [pid 178882:tid 179253] [client 20.219.2.60:10632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/ws77.php"] [unique_id "aryyO9qTm83YguA33028yQAAAMU"]
[Wed Sep 30 00:54:51.120801 2026] [security2:error] [pid 178882:tid 179203] [client 43.104.4.201:56745] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "aryyO9qTm83YguA33028yAAAAJY"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:54:51.126527 2026] [security2:error] [pid 178882:tid 179233] [client 152.59.165.7:58146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028ygAAALM"]
[Wed Sep 30 00:54:51.126649 2026] [security2:error] [pid 178882:tid 179233] [client 152.59.165.7:58146] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028ygAAALM"]
[Wed Sep 30 00:54:51.135774 2026] [security2:error] [pid 178882:tid 179226] [client 20.204.42.136:27449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/1b.php"] [unique_id "aryyO9qTm83YguA33028ywAAAKw"]
[Wed Sep 30 00:54:51.144148 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.144418 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.159072 2026] [security2:error] [pid 178882:tid 179246] [client 20.58.177.98:36075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/ano.php"] [unique_id "aryyO9qTm83YguA33028zgAAAL4"]
[Wed Sep 30 00:54:51.161025 2026] [security2:error] [pid 178882:tid 179255] [client 223.181.30.165:21921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028zwAAAMc"]
[Wed Sep 30 00:54:51.161174 2026] [security2:error] [pid 178882:tid 179255] [client 223.181.30.165:21921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA33028zwAAAMc"]
[Wed Sep 30 00:54:51.224613 2026] [security2:error] [pid 178882:tid 179243] [client 202.179.95.79:64287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330280gAAALs"]
[Wed Sep 30 00:54:51.225467 2026] [security2:error] [pid 178882:tid 179243] [client 202.179.95.79:64287] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330280gAAALs"]
[Wed Sep 30 00:54:51.240049 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.240502 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.260226 2026] [access_compat:error] [pid 178882:tid 179213] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:54:51.260485 2026] [access_compat:error] [pid 178882:tid 179213] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:54:51.279652 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.145.90:43454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/lock360.php"] [unique_id "aryyO9qTm83YguA330281QAAALA"]
[Wed Sep 30 00:54:51.325606 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.325871 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.406315 2026] [security2:error] [pid 178882:tid 179319] [client 39.44.16.112:63382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330281wAAAQM"]
[Wed Sep 30 00:54:51.407587 2026] [security2:error] [pid 178882:tid 179319] [client 39.44.16.112:63382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330281wAAAQM"]
[Wed Sep 30 00:54:51.416647 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.416908 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.493856 2026] [security2:error] [pid 178882:tid 179250] [client 72.255.10.32:52517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330283AAAAMI"]
[Wed Sep 30 00:54:51.493986 2026] [security2:error] [pid 178882:tid 179250] [client 72.255.10.32:52517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330283AAAAMI"]
[Wed Sep 30 00:54:51.506864 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.507116 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.510601 2026] [security2:error] [pid 178882:tid 179210] [client 20.219.14.152:26427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/themes.php"] [unique_id "aryyO9qTm83YguA330283wAAAJw"]
[Wed Sep 30 00:54:51.524348 2026] [security2:error] [pid 178882:tid 179296] [client 103.168.66.101:45540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyO9qTm83YguA330284gAAAO4"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:51.524421 2026] [security2:error] [pid 178882:tid 179249] [client 20.251.39.228:30507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/amthd.php"] [unique_id "aryyO9qTm83YguA330284QAAAME"]
[Wed Sep 30 00:54:51.545357 2026] [security2:error] [pid 178882:tid 179248] [client 20.214.145.90:38336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/4.php"] [unique_id "aryyO9qTm83YguA330285AAAAMA"]
[Wed Sep 30 00:54:51.580986 2026] [security2:error] [pid 178882:tid 179240] [client 223.235.102.107:1875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330286gAAALk"]
[Wed Sep 30 00:54:51.581704 2026] [security2:error] [pid 178882:tid 179240] [client 223.235.102.107:1875] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330286gAAALk"]
[Wed Sep 30 00:54:51.597156 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.597424 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.618912 2026] [access_compat:error] [pid 178882:tid 179282] [client 47.79.13.178:46280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:51.619171 2026] [access_compat:error] [pid 178882:tid 179282] [client 47.79.13.178:46280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:51.668734 2026] [security2:error] [pid 178882:tid 179314] [client 203.122.45.246:64871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330288wAAAP4"]
[Wed Sep 30 00:54:51.668884 2026] [security2:error] [pid 178882:tid 179314] [client 203.122.45.246:64871] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyO9qTm83YguA330288wAAAP4"]
[Wed Sep 30 00:54:51.683006 2026] [security2:error] [pid 178882:tid 179315] [client 20.58.177.98:35974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/sf.php"] [unique_id "aryyO9qTm83YguA330289AAAAP8"]
[Wed Sep 30 00:54:51.691055 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.691333 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.773750 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:51.774052 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:51.787648 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.787950 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.810639 2026] [security2:error] [pid 178882:tid 179273] [client 20.214.145.90:38370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/about.php"] [unique_id "aryyO9qTm83YguA33028_QAAANg"]
[Wed Sep 30 00:54:51.824325 2026] [security2:error] [pid 178882:tid 179262] [client 20.70.173.30:25100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/11.php"] [unique_id "aryyO9qTm83YguA33028_gAAAM4"]
[Wed Sep 30 00:54:51.883230 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.883666 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.973225 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:51.973670 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:51.996820 2026] [security2:error] [pid 178882:tid 179271] [client 20.251.39.228:16845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/8xyz.php"] [unique_id "aryyO9qTm83YguA33029EAAAANY"]
[Wed Sep 30 00:54:52.000950 2026] [security2:error] [pid 178882:tid 179236] [client 20.219.14.152:26395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/0.php"] [unique_id "aryyO9qTm83YguA33029EQAAALY"]
[Wed Sep 30 00:54:52.058620 2026] [security2:error] [pid 178882:tid 179267] [client 43.227.131.37:37010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029FAAAANM"]
[Wed Sep 30 00:54:52.058783 2026] [security2:error] [pid 178882:tid 179267] [client 43.227.131.37:37010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029FAAAANM"]
[Wed Sep 30 00:54:52.062576 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.062856 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.092655 2026] [access_compat:error] [pid 178882:tid 179191] [client 47.79.13.178:46296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:52.092938 2026] [access_compat:error] [pid 178882:tid 179191] [client 47.79.13.178:46296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:52.102083 2026] [security2:error] [pid 178882:tid 179245] [client 49.36.41.37:56424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029GgAAAL0"]
[Wed Sep 30 00:54:52.102193 2026] [security2:error] [pid 178882:tid 179245] [client 49.36.41.37:56424] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029GgAAAL0"]
[Wed Sep 30 00:54:52.136678 2026] [security2:error] [pid 178882:tid 179210] [client 20.58.177.98:35999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/xx.php"] [unique_id "aryyPNqTm83YguA33029HQAAAJw"]
[Wed Sep 30 00:54:52.151937 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.152311 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.173552 2026] [security2:error] [pid 178882:tid 179287] [client 20.214.145.90:43405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/r.php"] [unique_id "aryyPNqTm83YguA33029IgAAAOU"]
[Wed Sep 30 00:54:52.208553 2026] [security2:error] [pid 178882:tid 179235] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyPNqTm83YguA33029JgAAALU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:52.213769 2026] [security2:error] [pid 178882:tid 179190] [client 4.240.25.22:11313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/wp.php"] [unique_id "aryyPNqTm83YguA33029JwAAAIo"]
[Wed Sep 30 00:54:52.242666 2026] [security2:error] [pid 178882:tid 179282] [client 20.219.2.60:36798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/jp.php"] [unique_id "aryyPNqTm83YguA33029LAAAAOA"]
[Wed Sep 30 00:54:52.243337 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.243600 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.245282 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:52.245550 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:54:52.250229 2026] [security2:error] [pid 178882:tid 179288] [client 36.65.98.248:52890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.98.65.36.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "catalinamgmt.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029KQAAAOY"]
[Wed Sep 30 00:54:52.250416 2026] [security2:error] [pid 178882:tid 179288] [client 36.65.98.248:52890] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "catalinamgmt.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029KQAAAOY"]
[Wed Sep 30 00:54:52.334777 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.335075 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.343476 2026] [security2:error] [pid 178882:tid 179264] [client 103.148.43.14:53948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029MQAAANA"]
[Wed Sep 30 00:54:52.343561 2026] [security2:error] [pid 178882:tid 179264] [client 103.148.43.14:53948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029MQAAANA"]
[Wed Sep 30 00:54:52.430913 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.431371 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.439622 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyPNqTm83YguA33029OgAAk14"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22030
[Wed Sep 30 00:54:52.439657 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyPNqTm83YguA33029OgAAk14"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22030
[Wed Sep 30 00:54:52.471856 2026] [security2:error] [pid 178882:tid 179320] [client 45.156.62.96:58489] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyPNqTm83YguA33029MgAAAQQ"]
[Wed Sep 30 00:54:52.474088 2026] [security2:error] [pid 178882:tid 179188] [client 20.251.39.228:19619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/mini.php"] [unique_id "aryyPNqTm83YguA33029PwAAAIg"]
[Wed Sep 30 00:54:52.474317 2026] [security2:error] [pid 178882:tid 179203] [client 20.219.2.60:10656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/www.php"] [unique_id "aryyPNqTm83YguA33029QAAAAJY"]
[Wed Sep 30 00:54:52.488130 2026] [security2:error] [pid 178882:tid 179301] [client 20.214.145.90:38376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/v4.php"] [unique_id "aryyPNqTm83YguA33029RAAAAPM"]
[Wed Sep 30 00:54:52.515942 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.516210 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.542286 2026] [security2:error] [pid 178882:tid 179236] [client 84.8.102.109:56080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.102.8.84.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-links-opml.php"] [unique_id "aryyPNqTm83YguA33029SAAAALY"]
[Wed Sep 30 00:54:52.576462 2026] [security2:error] [pid 178882:tid 179191] [client 20.219.14.152:26421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/opsh.php"] [unique_id "aryyPNqTm83YguA33029TQAAAIs"]
[Wed Sep 30 00:54:52.609563 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.609840 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.672383 2026] [security2:error] [pid 178882:tid 179246] [client 185.249.237.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyPNqTm83YguA33029VwAAAL4"]
[Wed Sep 30 00:54:52.676340 2026] [security2:error] [pid 178882:tid 179317] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyPNqTm83YguA33029WAAAAQE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:52.699769 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.700049 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.731931 2026] [security2:error] [pid 178882:tid 179212] [client 62.197.45.211:50220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:hb_contact_message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "medredisolutions.com"] [uri "/"] [unique_id "aryyPNqTm83YguA33029XQAAAJ4"], referer: https://medredisolutions.com/
[Wed Sep 30 00:54:52.764462 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:52.764714 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:54:52.778467 2026] [security2:error] [pid 178882:tid 179288] [client 20.214.145.90:38391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-22.php"] [unique_id "aryyPNqTm83YguA33029YgAAAOY"]
[Wed Sep 30 00:54:52.789435 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.789695 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.795547 2026] [security2:error] [pid 178882:tid 179185] [client 20.204.161.246:48590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/xex.php"] [unique_id "aryyPNqTm83YguA33029ZAAAAIU"]
[Wed Sep 30 00:54:52.811098 2026] [security2:error] [pid 178882:tid 179261] [client 20.219.2.60:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-blogs.php"] [unique_id "aryyPNqTm83YguA33029ZgAAAM0"]
[Wed Sep 30 00:54:52.839340 2026] [security2:error] [pid 178882:tid 179187] [client 20.251.39.228:41859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws68.php"] [unique_id "aryyPNqTm83YguA33029aQAAAIc"]
[Wed Sep 30 00:54:52.872386 2026] [security2:error] [pid 178882:tid 179229] [client 20.204.42.136:27931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/curldect.php"] [unique_id "aryyPNqTm83YguA33029agAAAK8"]
[Wed Sep 30 00:54:52.880946 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.881206 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:52.898361 2026] [security2:error] [pid 178882:tid 179059] [remote 74.7.227.56:39604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyPNqTm83YguA33029bQAA0Ac"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?sid=2692a9528ad9b424897927ec28299c48&start=255&t=5556
[Wed Sep 30 00:54:52.899447 2026] [security2:error] [pid 178882:tid 179206] [client 20.194.30.107:62096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/sym.php"] [unique_id "aryyPNqTm83YguA33029bgAAAJk"]
[Wed Sep 30 00:54:52.910713 2026] [security2:error] [pid 178882:tid 179224] [client 114.119.154.113:58743] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cantrade.com.sg"] [uri "/portfolio-items/eutelsat-group-partnership/"] [unique_id "aryyPNqTm83YguA33029cAAAAKo"], referer: https://www.cantrade.com.sg/
[Wed Sep 30 00:54:52.966610 2026] [security2:error] [pid 178882:tid 179203] [client 45.138.12.32:27828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scx.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyPNqTm83YguA33029dQAAAJY"]
[Wed Sep 30 00:54:52.971595 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:52.971877 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.064345 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.064631 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.086616 2026] [security2:error] [pid 178882:tid 179218] [client 49.205.105.16:14449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029ewAAAKQ"]
[Wed Sep 30 00:54:53.086739 2026] [security2:error] [pid 178882:tid 179218] [client 49.205.105.16:14449] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029ewAAAKQ"]
[Wed Sep 30 00:54:53.086973 2026] [security2:error] [pid 178882:tid 179197] [client 20.219.14.152:26400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/pass4.php"] [unique_id "aryyPdqTm83YguA33029egAAAJE"]
[Wed Sep 30 00:54:53.087246 2026] [security2:error] [pid 178882:tid 179201] [client 20.214.145.90:43401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/makeasmtp.php"] [unique_id "aryyPdqTm83YguA33029fAAAAJU"]
[Wed Sep 30 00:54:53.154242 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.154516 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.245953 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.246216 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.268023 2026] [security2:error] [pid 178882:tid 179289] [client 20.194.30.107:30404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/k.php"] [unique_id "aryyPdqTm83YguA33029hgAAAOc"]
[Wed Sep 30 00:54:53.275381 2026] [access_compat:error] [pid 178882:tid 179306] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25ldA==
[Wed Sep 30 00:54:53.275663 2026] [access_compat:error] [pid 178882:tid 179306] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25ldA==
[Wed Sep 30 00:54:53.338863 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.339143 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.381991 2026] [security2:error] [pid 178882:tid 179250] [client 20.251.39.228:19591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/xxx.php"] [unique_id "aryyPdqTm83YguA33029jAAAAMI"]
[Wed Sep 30 00:54:53.397629 2026] [security2:error] [pid 178882:tid 179297] [client 62.197.45.211:50336] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:hb_contact_message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "medredisolutions.com"] [uri "/"] [unique_id "aryyPdqTm83YguA33029jQAAAO8"], referer: https://medredisolutions.com/
[Wed Sep 30 00:54:53.428858 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.429116 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.429284 2026] [security2:error] [pid 178882:tid 179221] [client 20.28.180.172:34300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/0x.php"] [unique_id "aryyPdqTm83YguA33029kAAAAKc"]
[Wed Sep 30 00:54:53.435428 2026] [security2:error] [pid 178882:tid 179281] [client 20.214.145.90:43400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/system_log.php"] [unique_id "aryyPdqTm83YguA33029kgAAAN8"]
[Wed Sep 30 00:54:53.476387 2026] [security2:error] [pid 178882:tid 179190] [client 20.58.177.98:34911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/file2.php"] [unique_id "aryyPdqTm83YguA33029mAAAAIo"]
[Wed Sep 30 00:54:53.481751 2026] [security2:error] [pid 178882:tid 179215] [client 45.138.12.32:27852] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.izn.soq.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyPdqTm83YguA33029mQAAAKE"]
[Wed Sep 30 00:54:53.489994 2026] [security2:error] [pid 178882:tid 179205] [client 103.24.86.56:64992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029mgAAAJg"]
[Wed Sep 30 00:54:53.490514 2026] [security2:error] [pid 178882:tid 179205] [client 103.24.86.56:64992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029mgAAAJg"]
[Wed Sep 30 00:54:53.522068 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.522519 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.574125 2026] [security2:error] [pid 178882:tid 179195] [client 20.194.30.107:57372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/mh.php"] [unique_id "aryyPdqTm83YguA33029nwAAAI8"]
[Wed Sep 30 00:54:53.581121 2026] [security2:error] [pid 178882:tid 179278] [client 20.219.14.152:26513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/drttewyh.php"] [unique_id "aryyPdqTm83YguA33029oAAAANw"]
[Wed Sep 30 00:54:53.606892 2026] [security2:error] [pid 178882:tid 179187] [client 4.240.25.22:11314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/users.php"] [unique_id "aryyPdqTm83YguA33029pAAAAIc"]
[Wed Sep 30 00:54:53.609710 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.609955 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.700772 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.701041 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.732574 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzaw==
[Wed Sep 30 00:54:53.732838 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzaw==
[Wed Sep 30 00:54:53.753357 2026] [security2:error] [pid 178882:tid 179253] [client 20.219.2.60:10640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/adoms.php"] [unique_id "aryyPdqTm83YguA33029rwAAAMU"]
[Wed Sep 30 00:54:53.766836 2026] [autoindex:error] [pid 178882:tid 179283] [client 212.156.70.154:0] AH01276: Cannot serve directory /home3/visumboa/public_html/motoincorporated/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:54:53.790687 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.790954 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:29207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.831149 2026] [security2:error] [pid 178882:tid 179225] [client 20.251.39.228:43729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/njxjtooj.php"] [unique_id "aryyPdqTm83YguA33029tgAAAKs"]
[Wed Sep 30 00:54:53.833529 2026] [security2:error] [pid 178882:tid 179314] [client 20.214.145.90:43415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/NewFile.php"] [unique_id "aryyPdqTm83YguA33029twAAAP4"]
[Wed Sep 30 00:54:53.882733 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.883015 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:53.949369 2026] [security2:error] [pid 178882:tid 179279] [client 102.253.38.25:35171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029ugAAAN0"]
[Wed Sep 30 00:54:53.949494 2026] [security2:error] [pid 178882:tid 179279] [client 102.253.38.25:35171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyPdqTm83YguA33029ugAAAN0"]
[Wed Sep 30 00:54:53.974138 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:53.974424 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.066446 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.066707 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.090422 2026] [security2:error] [pid 178882:tid 179231] [client 20.219.14.152:26374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/sh.php"] [unique_id "aryyPtqTm83YguA33029ygAAALE"]
[Wed Sep 30 00:54:54.123262 2026] [security2:error] [pid 178882:tid 179190] [client 20.214.145.90:43403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/t.php"] [unique_id "aryyPtqTm83YguA33029ywAAAIo"]
[Wed Sep 30 00:54:54.157077 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.157437 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:42306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.161408 2026] [security2:error] [pid 178882:tid 179205] [client 20.58.177.98:35963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/m.php"] [unique_id "aryyPtqTm83YguA33029zwAAAJg"]
[Wed Sep 30 00:54:54.209045 2026] [security2:error] [pid 178882:tid 179185] [client 216.73.216.46:29207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyPtqTm83YguA330290QAAAIU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjU5
[Wed Sep 30 00:54:54.240972 2026] [security2:error] [pid 178882:tid 179281] [client 92.222.128.188:56474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.128.222.92.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "aryyPtqTm83YguA330290gAAAN8"], referer: https://izubaplanners.com/wp-login.php
[Wed Sep 30 00:54:54.251740 2026] [security2:error] [pid 178882:tid 179187] [client 4.240.25.22:21515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/inputs.php"] [unique_id "aryyPtqTm83YguA330292QAAAIc"]
[Wed Sep 30 00:54:54.267137 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:54:54.267593 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:54:54.288936 2026] [security2:error] [pid 178882:tid 179220] [client 20.204.42.136:54167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/zwso.php"] [unique_id "aryyPtqTm83YguA330294gAAAKY"]
[Wed Sep 30 00:54:54.313546 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.314027 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.357144 2026] [security2:error] [pid 178882:tid 179188] [client 189.47.48.135:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyPtqTm83YguA330296gAAAIg"]
[Wed Sep 30 00:54:54.371422 2026] [security2:error] [pid 178882:tid 179301] [client 20.204.161.246:48513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/CAE-2.5.php"] [unique_id "aryyPtqTm83YguA330296wAAAPM"]
[Wed Sep 30 00:54:54.372625 2026] [security2:error] [pid 178882:tid 179209] [client 20.219.2.60:18838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/zlnckdxn.php"] [unique_id "aryyPtqTm83YguA330297AAAAJs"]
[Wed Sep 30 00:54:54.388472 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:36685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-good.php"] [unique_id "aryyPtqTm83YguA330297gAAAOs"]
[Wed Sep 30 00:54:54.395627 2026] [security2:error] [pid 178882:tid 179290] [client 20.251.39.228:5670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws85.php"] [unique_id "aryyPtqTm83YguA330298AAAAOg"]
[Wed Sep 30 00:54:54.398197 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:4396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.398455 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:4396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.428137 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.428398 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.433802 2026] [security2:error] [pid 178882:tid 179110] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyPtqTm83YguA330299AAArjo"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=2fae6a4a5571e86c00b2e6993040fbb3
[Wed Sep 30 00:54:54.433834 2026] [security2:error] [pid 178882:tid 179110] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyPtqTm83YguA330299AAArjo"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=2fae6a4a5571e86c00b2e6993040fbb3
[Wed Sep 30 00:54:54.509890 2026] [security2:error] [pid 178882:tid 179316] [client 20.214.145.90:28343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/ee.php"] [unique_id "aryyPtqTm83YguA33029-wAAAQA"]
[Wed Sep 30 00:54:54.512535 2026] [security2:error] [pid 178882:tid 179210] [client 20.58.177.98:35946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/33.php"] [unique_id "aryyPtqTm83YguA33029_AAAAJw"]
[Wed Sep 30 00:54:54.519622 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.519885 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.552491 2026] [security2:error] [pid 178882:tid 179221] [client 20.219.14.152:26406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/groud1.php"] [unique_id "aryyPtqTm83YguA33029_wAAAKc"]
[Wed Sep 30 00:54:54.568163 2026] [security2:error] [pid 178882:tid 179277] [client 20.194.30.107:25203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/wp-content/admin.php"] [unique_id "aryyPtqTm83YguA3302-AAAAANs"]
[Wed Sep 30 00:54:54.581711 2026] [security2:error] [pid 178882:tid 179306] [client 216.73.216.46:42306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyPtqTm83YguA3302-AgAAAPg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1OQ%3D%3D
[Wed Sep 30 00:54:54.606022 2026] [security2:error] [pid 178882:tid 179123] [remote 57.141.14.32:43178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/wp-json/xmlrpc.php"] [unique_id "aryyPtqTm83YguA33029_gAAs0U"]
[Wed Sep 30 00:54:54.611095 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.611350 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.678143 2026] [security2:error] [pid 178882:tid 179286] [client 45.138.12.32:27866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.izn.soq.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyPtqTm83YguA3302-CAAAAOQ"]
[Wed Sep 30 00:54:54.702038 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.702301 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.732102 2026] [access_compat:error] [pid 178882:tid 179269] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:54:54.732375 2026] [access_compat:error] [pid 178882:tid 179269] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:54:54.770017 2026] [security2:error] [pid 178882:tid 179200] [client 20.251.39.228:43719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws61.php"] [unique_id "aryyPtqTm83YguA3302-DAAAAJQ"]
[Wed Sep 30 00:54:54.791885 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.792140 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.792955 2026] [security2:error] [pid 178882:tid 179224] [client 20.214.145.90:28317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/2.php"] [unique_id "aryyPtqTm83YguA3302-DwAAAKo"]
[Wed Sep 30 00:54:54.882283 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:54.882537 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:54.902649 2026] [security2:error] [pid 178882:tid 179195] [client 20.58.177.98:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "esvarbon.gov.ng"] [uri "/wp-content/uploads/"] [unique_id "aryyPtqTm83YguA3302-FgAAAI8"]
[Wed Sep 30 00:54:54.925072 2026] [security2:error] [pid 178882:tid 179301] [client 20.70.173.30:18502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/wp-content/admin.php"] [unique_id "aryyPtqTm83YguA3302-FwAAAPM"]
[Wed Sep 30 00:54:55.079225 2026] [security2:error] [pid 178882:tid 179283] [client 20.214.145.90:38359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/gmo.php"] [unique_id "aryyP9qTm83YguA3302-IgAAAOE"]
[Wed Sep 30 00:54:55.130799 2026] [security2:error] [pid 178882:tid 179271] [client 20.58.177.98:34910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/ccc.php"] [unique_id "aryyP9qTm83YguA3302-IwAAANY"]
[Wed Sep 30 00:54:55.189435 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.189684 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.220869 2026] [security2:error] [pid 178882:tid 179186] [client 20.219.2.60:18847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/fs6.php"] [unique_id "aryyP9qTm83YguA3302-KAAAAIY"]
[Wed Sep 30 00:54:55.265422 2026] [access_compat:error] [pid 178882:tid 179213] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL25ldA==
[Wed Sep 30 00:54:55.265869 2026] [access_compat:error] [pid 178882:tid 179213] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL25ldA==
[Wed Sep 30 00:54:55.279126 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.279475 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.281070 2026] [security2:error] [pid 178882:tid 179299] [client 20.251.39.228:15066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/iyy.php"] [unique_id "aryyP9qTm83YguA3302-KwAAAPE"]
[Wed Sep 30 00:54:55.371995 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.372267 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.416430 2026] [security2:error] [pid 178882:tid 179306] [client 20.214.145.90:38378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/6.php"] [unique_id "aryyP9qTm83YguA3302-MwAAAPg"]
[Wed Sep 30 00:54:55.428531 2026] [security2:error] [pid 178882:tid 179252] [client 20.219.14.152:26429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/bro.php"] [unique_id "aryyP9qTm83YguA3302-NAAAAMQ"]
[Wed Sep 30 00:54:55.463589 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.463892 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.538240 2026] [security2:error] [pid 178882:tid 179292] [client 20.70.173.30:59970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/dronishness.php"] [unique_id "aryyP9qTm83YguA3302-OAAAAOo"]
[Wed Sep 30 00:54:55.555526 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.555849 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.602095 2026] [security2:error] [pid 178882:tid 179296] [client 4.196.65.241:2092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/esp.php"] [unique_id "aryyP9qTm83YguA3302-OwAAAO4"]
[Wed Sep 30 00:54:55.644156 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.644434 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.647921 2026] [security2:error] [pid 178882:tid 179075] [remote 122.14.227.62:47002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/wp-content/uploads/2013/05/ironman3-3.jpg"] [unique_id "aryyP9qTm83YguA3302-PgAAphc"]
[Wed Sep 30 00:54:55.652303 2026] [security2:error] [pid 178882:tid 179251] [client 20.204.161.246:48527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/ass.php"] [unique_id "aryyP9qTm83YguA3302-PwAAAMM"]
[Wed Sep 30 00:54:55.681003 2026] [security2:error] [pid 178882:tid 179245] [client 20.251.39.228:30524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/900.php"] [unique_id "aryyP9qTm83YguA3302-QgAAAL0"]
[Wed Sep 30 00:54:55.738312 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.738571 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.741712 2026] [security2:error] [pid 178882:tid 179224] [client 20.214.145.90:43434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/12.php"] [unique_id "aryyP9qTm83YguA3302-SgAAAKo"]
[Wed Sep 30 00:54:55.762651 2026] [security2:error] [pid 178882:tid 179129] [remote 220.181.108.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyP9qTm83YguA3302-TwAAzUs"]
[Wed Sep 30 00:54:55.827100 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.827379 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.831814 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:54:55.832097 2026] [access_compat:error] [pid 178882:tid 179305] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:54:55.878413 2026] [security2:error] [pid 178882:tid 179262] [client 20.58.177.98:36037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/file15.php"] [unique_id "aryyP9qTm83YguA3302-WAAAAM4"]
[Wed Sep 30 00:54:55.916846 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:4396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:55.917123 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:4396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:55.920790 2026] [security2:error] [pid 178882:tid 179265] [client 92.222.128.188:39996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.128.222.92.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "aryyP9qTm83YguA3302-WwAAANE"], referer: https://izubaplanners.com/wp-login.php
[Wed Sep 30 00:54:55.936380 2026] [security2:error] [pid 178882:tid 179139] [remote 220.181.108.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyP9qTm83YguA3302-XAAAm1U"]
[Wed Sep 30 00:54:55.943609 2026] [security2:error] [pid 178882:tid 179283] [client 20.219.2.60:11015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/tymn.php"] [unique_id "aryyP9qTm83YguA3302-XQAAAOE"]
[Wed Sep 30 00:54:56.056656 2026] [security2:error] [pid 178882:tid 179228] [client 20.251.39.228:49526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/blsvgeyaza.php"] [unique_id "aryyQNqTm83YguA3302-YgAAAK4"]
[Wed Sep 30 00:54:56.061226 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:24498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.061512 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:24498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.070341 2026] [security2:error] [pid 178882:tid 179279] [client 20.204.42.136:27956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/js.php"] [unique_id "aryyQNqTm83YguA3302-ZAAAAN0"]
[Wed Sep 30 00:54:56.076074 2026] [security2:error] [pid 178882:tid 179268] [client 20.214.145.90:43407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/0.php"] [unique_id "aryyQNqTm83YguA3302-ZQAAANQ"]
[Wed Sep 30 00:54:56.162680 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.162951 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.192581 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:24498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.192846 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:24498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.260698 2026] [access_compat:error] [pid 178882:tid 179306] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:54:56.260960 2026] [access_compat:error] [pid 178882:tid 179306] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:54:56.270985 2026] [security2:error] [pid 178882:tid 179252] [client 20.58.177.98:36077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/82.php"] [unique_id "aryyQNqTm83YguA3302-bwAAAMQ"]
[Wed Sep 30 00:54:56.286409 2026] [security2:error] [pid 178882:tid 179208] [client 20.219.14.152:26533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/class-wp-http-client.php"] [unique_id "aryyQNqTm83YguA3302-cgAAAJo"]
[Wed Sep 30 00:54:56.306855 2026] [security2:error] [pid 178882:tid 179248] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyQNqTm83YguA3302-dQAAAMA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:56.408765 2026] [security2:error] [pid 178882:tid 179286] [client 216.73.216.46:4396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyQNqTm83YguA3302-gAAAAOQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1NS9kcml2ZXIvY3B1MA%3D%3D
[Wed Sep 30 00:54:56.410893 2026] [security2:error] [pid 178882:tid 179309] [client 106.214.2.47:8205] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-gQAAAPo"]
[Wed Sep 30 00:54:56.413699 2026] [security2:error] [pid 178882:tid 179245] [client 216.73.216.46:24498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyQNqTm83YguA3302-ggAAAL0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MA%3D%3D
[Wed Sep 30 00:54:56.417631 2026] [security2:error] [pid 178882:tid 179309] [client 106.214.2.47:8205] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-gQAAAPo"]
[Wed Sep 30 00:54:56.420628 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.420914 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:57656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.424401 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.424743 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.462700 2026] [security2:error] [pid 178882:tid 179203] [client 20.251.39.228:30478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gqhyti.php"] [unique_id "aryyQNqTm83YguA3302-iAAAAJY"]
[Wed Sep 30 00:54:56.472011 2026] [security2:error] [pid 178882:tid 179235] [client 20.214.145.90:43423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aryyQNqTm83YguA3302-iwAAALU"]
[Wed Sep 30 00:54:56.518062 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.518337 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.532690 2026] [security2:error] [pid 178882:tid 179254] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyQNqTm83YguA3302-kAAAAMY"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:56.559127 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.559442 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.572015 2026] [security2:error] [pid 178882:tid 179249] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyQNqTm83YguA3302-kgAAAME"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:56.651587 2026] [security2:error] [pid 178882:tid 179257] [client 20.58.177.98:36019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/admin.php/nope.php"] [unique_id "aryyQNqTm83YguA3302-mQAAAMk"]
[Wed Sep 30 00:54:56.676994 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.677270 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.741408 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.741660 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.747090 2026] [security2:error] [pid 178882:tid 179211] [client 123.63.248.21:58896] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-nwAAAJ0"]
[Wed Sep 30 00:54:56.747230 2026] [security2:error] [pid 178882:tid 179211] [client 123.63.248.21:58896] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-nwAAAJ0"]
[Wed Sep 30 00:54:56.757292 2026] [security2:error] [pid 178882:tid 179313] [client 20.219.14.152:26456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/zoo2.php"] [unique_id "aryyQNqTm83YguA3302-oAAAAP0"]
[Wed Sep 30 00:54:56.774661 2026] [access_compat:error] [pid 178882:tid 179215] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:54:56.774925 2026] [access_compat:error] [pid 178882:tid 179215] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:54:56.811581 2026] [security2:error] [pid 178882:tid 179297] [client 20.219.2.60:19428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/xwzs.php"] [unique_id "aryyQNqTm83YguA3302-pgAAAO8"]
[Wed Sep 30 00:54:56.829193 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.829450 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.835735 2026] [security2:error] [pid 178882:tid 179247] [client 20.214.145.90:38365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aryyQNqTm83YguA3302-rQAAAL8"]
[Wed Sep 30 00:54:56.836836 2026] [security2:error] [pid 178882:tid 179149] [remote 220.181.108.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyQNqTm83YguA3302-pwAA2V8"]
[Wed Sep 30 00:54:56.841419 2026] [security2:error] [pid 178882:tid 179187] [client 103.159.192.142:54316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-rgAAAIc"]
[Wed Sep 30 00:54:56.841537 2026] [security2:error] [pid 178882:tid 179187] [client 103.159.192.142:54316] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyQNqTm83YguA3302-rgAAAIc"]
[Wed Sep 30 00:54:56.922460 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:56.922750 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:56.969834 2026] [security2:error] [pid 178882:tid 179186] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyQNqTm83YguA3302-tgAAAIY"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:57.011699 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.011986 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.081385 2026] [security2:error] [pid 178882:tid 179200] [client 20.194.30.107:26514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/cycfruf.php"] [unique_id "aryyQdqTm83YguA3302-uQAAAJQ"]
[Wed Sep 30 00:54:57.106478 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.106727 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.123667 2026] [security2:error] [pid 178882:tid 179311] [client 20.214.145.90:38371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/02.php"] [unique_id "aryyQdqTm83YguA3302-vAAAAPw"]
[Wed Sep 30 00:54:57.126036 2026] [security2:error] [pid 178882:tid 179226] [client 20.251.39.228:43766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/autoxxi.php"] [unique_id "aryyQdqTm83YguA3302-vQAAAKw"]
[Wed Sep 30 00:54:57.194693 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.194976 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.217216 2026] [security2:error] [pid 178882:tid 179305] [client 45.138.12.43:38832] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nve.qlp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyQdqTm83YguA3302-wQAAAPc"]
[Wed Sep 30 00:54:57.237665 2026] [security2:error] [pid 178882:tid 179264] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyQdqTm83YguA3302-wgAAANA"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:57.289838 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.290305 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.304718 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:54:57.304976 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:54:57.331217 2026] [security2:error] [pid 178882:tid 179243] [client 20.58.177.98:36003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/222.php"] [unique_id "aryyQdqTm83YguA3302-0QAAALs"]
[Wed Sep 30 00:54:57.344399 2026] [security2:error] [pid 178882:tid 179298] [client 20.219.14.152:26507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/zoo1.php"] [unique_id "aryyQdqTm83YguA3302-1AAAAPA"]
[Wed Sep 30 00:54:57.375360 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.375619 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.415623 2026] [security2:error] [pid 178882:tid 179279] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyQdqTm83YguA3302-3AAAAN0"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:57.464691 2026] [security2:error] [pid 178882:tid 179214] [client 20.219.2.60:36747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/a5.php"] [unique_id "aryyQdqTm83YguA3302-3gAAAKA"]
[Wed Sep 30 00:54:57.467092 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.467357 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.504639 2026] [security2:error] [pid 178882:tid 179231] [client 20.214.145.90:43450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/go.php"] [unique_id "aryyQdqTm83YguA3302-3wAAALE"]
[Wed Sep 30 00:54:57.561519 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.561798 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.569019 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:11034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/eetu.php"] [unique_id "aryyQdqTm83YguA3302-4wAAANQ"]
[Wed Sep 30 00:54:57.597913 2026] [security2:error] [pid 178882:tid 179266] [client 213.136.69.135:57037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/ai-client.php"] [unique_id "aryyQdqTm83YguA3302-5AAAANI"], referer: binance.com
[Wed Sep 30 00:54:57.626310 2026] [security2:error] [pid 178882:tid 179165] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyQdqTm83YguA3302-6QAAsG8"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D16199
[Wed Sep 30 00:54:57.634709 2026] [security2:error] [pid 178882:tid 179294] [client 20.251.39.228:40928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/1144452145_error_log.php"] [unique_id "aryyQdqTm83YguA3302-7AAAAOw"]
[Wed Sep 30 00:54:57.648153 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.648462 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.734113 2026] [security2:error] [pid 178882:tid 179272] [client 31.56.58.167:35954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.58.56.31.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tsr.llp.mybluehost.me"] [uri "/index.php"] [unique_id "aryyQdqTm83YguA3302-7wAAANc"]
[Wed Sep 30 00:54:57.740321 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.740761 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.752508 2026] [security2:error] [pid 178882:tid 179222] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyQdqTm83YguA3302-9gAAAKg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:54:57.753120 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25ldA==
[Wed Sep 30 00:54:57.753388 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25ldA==
[Wed Sep 30 00:54:57.829713 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.829979 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.830749 2026] [access_compat:error] [pid 178882:tid 179313] [client 47.79.13.71:39148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:57.831004 2026] [access_compat:error] [pid 178882:tid 179313] [client 47.79.13.71:39148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:57.863141 2026] [security2:error] [pid 178882:tid 179288] [client 20.214.145.90:38388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/ee.php"] [unique_id "aryyQdqTm83YguA3302_AQAAAOY"]
[Wed Sep 30 00:54:57.886078 2026] [security2:error] [pid 178882:tid 179234] [client 20.58.177.98:35943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/sallu.php"] [unique_id "aryyQdqTm83YguA3302_AwAAALQ"]
[Wed Sep 30 00:54:57.922737 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:57.923060 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:57.928782 2026] [security2:error] [pid 178882:tid 179206] [client 20.219.2.60:18895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryyQdqTm83YguA3302_CAAAAJk"]
[Wed Sep 30 00:54:57.989971 2026] [security2:error] [pid 178882:tid 179199] [client 45.138.12.43:7080] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nyk.tyy.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyQdqTm83YguA3302_CQAAAJM"]
[Wed Sep 30 00:54:58.014209 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.014478 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.030599 2026] [security2:error] [pid 178882:tid 179196] [client 45.138.12.47:31966] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.williamsflying.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyQtqTm83YguA3302_DAAAAJA"]
[Wed Sep 30 00:54:58.104555 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.104826 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.120860 2026] [security2:error] [pid 178882:tid 179299] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyQtqTm83YguA3302_EwAAAPE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:58.137614 2026] [security2:error] [pid 178882:tid 179263] [client 20.251.39.228:40943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws48.php"] [unique_id "aryyQtqTm83YguA3302_FQAAAM8"]
[Wed Sep 30 00:54:58.194776 2026] [security2:error] [pid 178882:tid 179215] [client 20.214.145.90:38380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/an.php"] [unique_id "aryyQtqTm83YguA3302_FwAAAKE"]
[Wed Sep 30 00:54:58.198992 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.199422 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.201227 2026] [security2:error] [pid 178882:tid 179285] [client 20.219.14.152:26527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/class-ajax.php"] [unique_id "aryyQtqTm83YguA3302_GAAAAOM"]
[Wed Sep 30 00:54:58.246665 2026] [security2:error] [pid 178882:tid 179317] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyQtqTm83YguA3302_GgAAAQE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:58.263443 2026] [access_compat:error] [pid 178882:tid 179256] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL25ldA==
[Wed Sep 30 00:54:58.263702 2026] [access_compat:error] [pid 178882:tid 179256] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL25ldA==
[Wed Sep 30 00:54:58.286733 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.286997 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.293628 2026] [security2:error] [pid 178882:tid 179226] [client 116.72.182.19:51399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyQtqTm83YguA3302_HQAAAKw"]
[Wed Sep 30 00:54:58.293719 2026] [security2:error] [pid 178882:tid 179226] [client 116.72.182.19:51399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyQtqTm83YguA3302_HQAAAKw"]
[Wed Sep 30 00:54:58.378172 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.378442 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.381727 2026] [security2:error] [pid 178882:tid 179282] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyQtqTm83YguA3302_JQAAAOA"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:58.433877 2026] [security2:error] [pid 178882:tid 179230] [client 4.240.25.22:11285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isesurveys.ca"] [uri "/cabs.php"] [unique_id "aryyQtqTm83YguA3302_JwAAALA"]
[Wed Sep 30 00:54:58.463562 2026] [security2:error] [pid 178882:tid 179197] [client 20.214.145.90:28234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp.php"] [unique_id "aryyQtqTm83YguA3302_KgAAAJE"]
[Wed Sep 30 00:54:58.469528 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.469789 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.496607 2026] [security2:error] [pid 178882:tid 179306] [client 20.70.173.30:59985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp.php"] [unique_id "aryyQtqTm83YguA3302_KwAAAPg"]
[Wed Sep 30 00:54:58.525078 2026] [security2:error] [pid 178882:tid 179277] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyQtqTm83YguA3302_LAAAANs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:58.561857 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.562244 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.586084 2026] [security2:error] [pid 178882:tid 179269] [client 20.204.161.246:48823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/felnggg.php"] [unique_id "aryyQtqTm83YguA3302_MwAAANU"]
[Wed Sep 30 00:54:58.633356 2026] [security2:error] [pid 178882:tid 179219] [client 20.251.39.228:19183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryyQtqTm83YguA3302_NgAAAKU"]
[Wed Sep 30 00:54:58.643374 2026] [security2:error] [pid 178882:tid 179200] [client 20.219.2.60:11024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/dx.php"] [unique_id "aryyQtqTm83YguA3302_OAAAAJQ"]
[Wed Sep 30 00:54:58.651883 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.652147 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.660933 2026] [security2:error] [pid 178882:tid 179208] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyQtqTm83YguA3302_OwAAAJo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:58.700180 2026] [security2:error] [pid 178882:tid 179286] [client 20.219.14.152:26532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gm.php"] [unique_id "aryyQtqTm83YguA3302_PQAAAOQ"]
[Wed Sep 30 00:54:58.715039 2026] [security2:error] [pid 178882:tid 179284] [client 20.204.42.136:54144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/zuk.php"] [unique_id "aryyQtqTm83YguA3302_PgAAAOI"]
[Wed Sep 30 00:54:58.740564 2026] [security2:error] [pid 178882:tid 179288] [client 20.214.145.90:43437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aryyQtqTm83YguA3302_QwAAAOY"]
[Wed Sep 30 00:54:58.743733 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.744013 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.767634 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:54:58.768099 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:54:58.796229 2026] [access_compat:error] [pid 178882:tid 179281] [client 47.79.13.64:43418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:58.796502 2026] [access_compat:error] [pid 178882:tid 179281] [client 47.79.13.64:43418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:58.833617 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.833890 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:58.923963 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:58.924216 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.016977 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.017259 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.036689 2026] [security2:error] [pid 178882:tid 179255] [client 20.214.145.90:38386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/admin.php"] [unique_id "aryyQ9qTm83YguA3302_UgAAAMc"]
[Wed Sep 30 00:54:59.098740 2026] [security2:error] [pid 178882:tid 179264] [client 20.251.39.228:40897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/schallfuns.php"] [unique_id "aryyQ9qTm83YguA3302_VQAAANA"]
[Wed Sep 30 00:54:59.111274 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.111711 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.179547 2026] [security2:error] [pid 178882:tid 179221] [client 20.58.177.98:36087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/k.php"] [unique_id "aryyQ9qTm83YguA3302_XQAAAKc"]
[Wed Sep 30 00:54:59.198426 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.198682 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.245021 2026] [security2:error] [pid 178882:tid 179189] [client 20.219.14.152:26469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/class-wp-site-list.php"] [unique_id "aryyQ9qTm83YguA3302_YAAAAIk"]
[Wed Sep 30 00:54:59.247127 2026] [security2:error] [pid 178882:tid 179249] [client 31.56.58.167:44550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.58.56.31.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tsr.llp.mybluehost.me"] [uri "/index.php"] [unique_id "aryyQ9qTm83YguA3302_YQAAAME"]
[Wed Sep 30 00:54:59.254540 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 00:54:59.254793 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 00:54:59.275070 2026] [security2:error] [pid 178882:tid 179226] [client 103.168.66.101:45548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyQ9qTm83YguA3302_YwAAAKw"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:59.289195 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.289449 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.325277 2026] [security2:error] [pid 178882:tid 179261] [client 116.197.133.25:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_aQAAAM0"]
[Wed Sep 30 00:54:59.325398 2026] [security2:error] [pid 178882:tid 179261] [client 116.197.133.25:49314] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_aQAAAM0"]
[Wed Sep 30 00:54:59.379015 2026] [security2:error] [pid 178882:tid 179235] [client 152.59.169.65:61109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_bAAAALU"]
[Wed Sep 30 00:54:59.379141 2026] [security2:error] [pid 178882:tid 179235] [client 152.59.169.65:61109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_bAAAALU"]
[Wed Sep 30 00:54:59.380179 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.380454 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.380539 2026] [security2:error] [pid 178882:tid 179266] [client 20.219.2.60:10837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-kikikoko.php"] [unique_id "aryyQ9qTm83YguA3302_bQAAANI"]
[Wed Sep 30 00:54:59.386052 2026] [security2:error] [pid 178882:tid 179070] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyQ9qTm83YguA3302_bgAA7BI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=bca333cf35154e50077efc17eb773d36
[Wed Sep 30 00:54:59.386080 2026] [security2:error] [pid 178882:tid 179070] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyQ9qTm83YguA3302_bgAA7BI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=bca333cf35154e50077efc17eb773d36
[Wed Sep 30 00:54:59.396471 2026] [security2:error] [pid 178882:tid 179191] [client 20.214.145.90:43436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/admin.php"] [unique_id "aryyQ9qTm83YguA3302_cAAAAIs"]
[Wed Sep 30 00:54:59.441160 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:18870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws66.php"] [unique_id "aryyQ9qTm83YguA3302_cwAAAOs"]
[Wed Sep 30 00:54:59.446341 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:36757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/amp.php"] [unique_id "aryyQ9qTm83YguA3302_dAAAAKo"]
[Wed Sep 30 00:54:59.459329 2026] [security2:error] [pid 178882:tid 179283] [client 116.193.128.26:49441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_dQAAAOE"]
[Wed Sep 30 00:54:59.459478 2026] [security2:error] [pid 178882:tid 179283] [client 116.193.128.26:49441] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyQ9qTm83YguA3302_dQAAAOE"]
[Wed Sep 30 00:54:59.470222 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.470488 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.476791 2026] [security2:error] [pid 178882:tid 179296] [client 20.251.39.228:24045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/CDX1.php"] [unique_id "aryyQ9qTm83YguA3302_eAAAAO4"]
[Wed Sep 30 00:54:59.563416 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.563697 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.652470 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.652744 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.684467 2026] [security2:error] [pid 178882:tid 179195] [client 20.214.145.90:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryyQ9qTm83YguA3302_gQAAAI8"]
[Wed Sep 30 00:54:59.740644 2026] [access_compat:error] [pid 178882:tid 179196] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:54:59.740936 2026] [access_compat:error] [pid 178882:tid 179196] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:54:59.743591 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.743865 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.751123 2026] [security2:error] [pid 178882:tid 179255] [client 20.58.177.98:36046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/24.php"] [unique_id "aryyQ9qTm83YguA3302_iwAAAMc"]
[Wed Sep 30 00:54:59.764840 2026] [access_compat:error] [pid 178882:tid 179301] [client 47.79.13.64:43430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:59.765278 2026] [access_compat:error] [pid 178882:tid 179301] [client 47.79.13.64:43430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:59.773608 2026] [access_compat:error] [pid 178882:tid 179256] [client 47.79.13.178:49784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:54:59.773891 2026] [access_compat:error] [pid 178882:tid 179256] [client 47.79.13.178:49784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:54:59.807178 2026] [security2:error] [pid 178882:tid 179320] [client 20.219.14.152:26385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/asd2.php"] [unique_id "aryyQ9qTm83YguA3302_jwAAAQQ"]
[Wed Sep 30 00:54:59.834421 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.834670 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.892205 2026] [security2:error] [pid 178882:tid 179315] [client 20.251.39.228:24044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/clasa99.php"] [unique_id "aryyQ9qTm83YguA3302_lwAAAP8"]
[Wed Sep 30 00:54:59.905882 2026] [security2:error] [pid 178882:tid 179220] [client 169.40.142.202:54428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sco.bqf.mybluehost.me"] [uri "/.env"] [unique_id "aryyQ9qTm83YguA3302_nQAAAKY"]
[Wed Sep 30 00:54:59.906242 2026] [security2:error] [pid 178882:tid 179262] [client 169.40.142.202:54460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.sco.bqf.mybluehost.me"] [uri "/.env.old"] [unique_id "aryyQ9qTm83YguA3302_owAAAM4"]
[Wed Sep 30 00:54:59.906242 2026] [security2:error] [pid 178882:tid 179271] [client 169.40.142.202:54444] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.sco.bqf.mybluehost.me"] [uri "/.env.bak"] [unique_id "aryyQ9qTm83YguA3302_nwAAANY"]
[Wed Sep 30 00:54:59.906276 2026] [security2:error] [pid 178882:tid 179302] [client 169.40.142.202:54480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.sco.bqf.mybluehost.me"] [uri "/.env.swp"] [unique_id "aryyQ9qTm83YguA3302_oAAAAPQ"]
[Wed Sep 30 00:54:59.906945 2026] [security2:error] [pid 178882:tid 179250] [client 169.40.142.202:54488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.sco.bqf.mybluehost.me"] [uri "/.env.backup"] [unique_id "aryyQ9qTm83YguA3302_pwAAAMI"]
[Wed Sep 30 00:54:59.925154 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:54:59.925525 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:54:59.934970 2026] [security2:error] [pid 178882:tid 179309] [client 103.168.66.101:45556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyQ9qTm83YguA3302_sgAAAPo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:54:59.987432 2026] [security2:error] [pid 178882:tid 179287] [client 20.214.145.90:38372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/index/function.php"] [unique_id "aryyQ9qTm83YguA3302_tQAAAOU"]
[Wed Sep 30 00:55:00.019745 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.020201 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.038795 2026] [security2:error] [pid 178882:tid 179238] [client 20.194.30.107:54648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/sym.php"] [unique_id "aryyRNqTm83YguA3302_uAAAALc"]
[Wed Sep 30 00:55:00.106623 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.106892 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.170208 2026] [security2:error] [pid 178882:tid 179219] [client 20.194.30.107:62112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/gecko.php"] [unique_id "aryyRNqTm83YguA3302_xAAAAKU"]
[Wed Sep 30 00:55:00.177799 2026] [autoindex:error] [pid 178882:tid 179212] [client 212.156.70.154:15916] AH01276: Cannot serve directory /home2/ruttlgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:00.180377 2026] [security2:error] [pid 178882:tid 179286] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyRNqTm83YguA3302_xgAAAOQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:00.199801 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.200079 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.204000 2026] [security2:error] [pid 178882:tid 179297] [client 20.251.39.228:16871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/myfilexxx.php"] [unique_id "aryyRNqTm83YguA3302_yAAAAO8"]
[Wed Sep 30 00:55:00.263463 2026] [security2:error] [pid 178882:tid 179201] [client 182.69.182.151:29538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3302_yQAAAJU"]
[Wed Sep 30 00:55:00.263919 2026] [security2:error] [pid 178882:tid 179201] [client 182.69.182.151:29538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3302_yQAAAJU"]
[Wed Sep 30 00:55:00.277950 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 00:55:00.278224 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 00:55:00.294885 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.295327 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.317873 2026] [security2:error] [pid 178882:tid 179320] [client 20.214.145.90:38362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aryyRNqTm83YguA3302_0QAAAQQ"]
[Wed Sep 30 00:55:00.335457 2026] [security2:error] [pid 178882:tid 179221] [client 20.219.14.152:26418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/cdc.php"] [unique_id "aryyRNqTm83YguA3302_1QAAAKc"]
[Wed Sep 30 00:55:00.352567 2026] [security2:error] [pid 178882:tid 179218] [client 20.58.177.98:36062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/blacks.php"] [unique_id "aryyRNqTm83YguA3302_1wAAAKQ"]
[Wed Sep 30 00:55:00.382299 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.382557 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.428717 2026] [security2:error] [pid 178882:tid 179214] [client 103.172.210.103:52839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3302_3gAAAKA"]
[Wed Sep 30 00:55:00.429164 2026] [security2:error] [pid 178882:tid 179214] [client 103.172.210.103:52839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3302_3gAAAKA"]
[Wed Sep 30 00:55:00.472911 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.473180 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.565216 2026] [security2:error] [pid 178882:tid 179226] [client 20.251.39.228:5559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/karma_144a.php"] [unique_id "aryyRNqTm83YguA3302_4wAAAKw"]
[Wed Sep 30 00:55:00.568682 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.569119 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.570218 2026] [security2:error] [pid 178882:tid 179185] [client 20.219.2.60:18823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ewe.php"] [unique_id "aryyRNqTm83YguA3302_5QAAAIU"]
[Wed Sep 30 00:55:00.633679 2026] [security2:error] [pid 178882:tid 179279] [client 20.214.145.90:43440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/license.php"] [unique_id "aryyRNqTm83YguA3302_6AAAAN0"]
[Wed Sep 30 00:55:00.655911 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.656214 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:36914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.694885 2026] [autoindex:error] [pid 178882:tid 179211] [client 43.157.22.109:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/CarMetals/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:00.717789 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:11040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/file61.php"] [unique_id "aryyRNqTm83YguA3302_7gAAAOs"]
[Wed Sep 30 00:55:00.734562 2026] [access_compat:error] [pid 178882:tid 179269] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:55:00.734836 2026] [access_compat:error] [pid 178882:tid 179269] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:55:00.746570 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.746828 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.798306 2026] [security2:error] [pid 178882:tid 179195] [client 20.58.177.98:35980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/anom.php"] [unique_id "aryyRNqTm83YguA3302__QAAAI8"]
[Wed Sep 30 00:55:00.838129 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.838394 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.869790 2026] [security2:error] [pid 178882:tid 179300] [client 20.204.42.136:27396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/faze.php"] [unique_id "aryyRNqTm83YguA3303AAgAAAPI"]
[Wed Sep 30 00:55:00.875594 2026] [security2:error] [pid 178882:tid 179262] [client 103.159.192.142:54557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3303ABgAAAM4"]
[Wed Sep 30 00:55:00.875722 2026] [security2:error] [pid 178882:tid 179262] [client 103.159.192.142:54557] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyRNqTm83YguA3303ABgAAAM4"]
[Wed Sep 30 00:55:00.881415 2026] [security2:error] [pid 178882:tid 179284] [client 20.219.14.152:26500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gulu.php"] [unique_id "aryyRNqTm83YguA3303ABwAAAOI"]
[Wed Sep 30 00:55:00.898622 2026] [security2:error] [pid 178882:tid 179282] [client 20.251.39.228:5646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/3586%20b64.php"] [unique_id "aryyRNqTm83YguA3303ACQAAAOA"]
[Wed Sep 30 00:55:00.935912 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:00.936347 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:00.956538 2026] [access_compat:error] [pid 178882:tid 179302] [client 47.79.13.175:34372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:00.956974 2026] [access_compat:error] [pid 178882:tid 179302] [client 47.79.13.175:34372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:00.986567 2026] [security2:error] [pid 178882:tid 179230] [client 216.73.216.46:36914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyRNqTm83YguA3303ADQAAALA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODkvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTI%3D
[Wed Sep 30 00:55:00.997804 2026] [security2:error] [pid 178882:tid 179235] [client 20.214.145.90:43416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/radio.php"] [unique_id "aryyRNqTm83YguA3303ADgAAALU"]
[Wed Sep 30 00:55:01.010258 2026] [security2:error] [pid 178882:tid 179252] [client 49.43.163.212:51960] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303ADwAAAMQ"]
[Wed Sep 30 00:55:01.010364 2026] [security2:error] [pid 178882:tid 179252] [client 49.43.163.212:51960] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303ADwAAAMQ"]
[Wed Sep 30 00:55:01.020118 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.020380 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.028149 2026] [security2:error] [pid 178882:tid 179319] [client 20.28.180.172:29593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/accesson.php"] [unique_id "aryyRdqTm83YguA3303AEQAAAQM"]
[Wed Sep 30 00:55:01.112297 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.112565 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.188349 2026] [security2:error] [pid 178882:tid 179234] [client 20.58.177.98:36070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/groud3.php"] [unique_id "aryyRdqTm83YguA3303AHQAAALQ"]
[Wed Sep 30 00:55:01.202296 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.202562 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.237405 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:55:01.237773 2026] [access_compat:error] [pid 178882:tid 179280] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:55:01.275883 2026] [access_compat:error] [pid 178882:tid 179290] [client 47.79.13.28:57470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:01.275909 2026] [security2:error] [pid 178882:tid 179240] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyRdqTm83YguA3303AJQAAALk"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:01.276328 2026] [access_compat:error] [pid 178882:tid 179290] [client 47.79.13.28:57470] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:01.293559 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.293837 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.295993 2026] [security2:error] [pid 178882:tid 179256] [client 20.251.39.228:5402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws.php"] [unique_id "aryyRdqTm83YguA3303AKgAAAMg"]
[Wed Sep 30 00:55:01.312897 2026] [security2:error] [pid 178882:tid 179219] [client 20.214.145.90:28336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/info.php"] [unique_id "aryyRdqTm83YguA3303ALwAAAKU"]
[Wed Sep 30 00:55:01.359384 2026] [security2:error] [pid 178882:tid 179229] [client 20.219.14.152:26453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/bala.php"] [unique_id "aryyRdqTm83YguA3303AMgAAAK8"]
[Wed Sep 30 00:55:01.384465 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.384713 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.386547 2026] [security2:error] [pid 178882:tid 179311] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyRdqTm83YguA3303ANgAAAPw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:01.401845 2026] [security2:error] [pid 178882:tid 179218] [client 150.107.232.159:36059] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303ANwAAAKQ"]
[Wed Sep 30 00:55:01.401990 2026] [security2:error] [pid 178882:tid 179218] [client 150.107.232.159:36059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303ANwAAAKQ"]
[Wed Sep 30 00:55:01.530973 2026] [security2:error] [pid 178882:tid 179209] [client 20.58.177.98:35932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/gaxby.php"] [unique_id "aryyRdqTm83YguA3303APgAAAJs"]
[Wed Sep 30 00:55:01.569979 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.570375 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.570404 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.570842 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.585470 2026] [security2:error] [pid 178882:tid 179238] [client 20.219.2.60:10772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/xx.php"] [unique_id "aryyRdqTm83YguA3303ARgAAALc"]
[Wed Sep 30 00:55:01.593493 2026] [security2:error] [pid 178882:tid 179185] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyRdqTm83YguA3303ARwAAAIU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:01.629153 2026] [security2:error] [pid 178882:tid 179199] [client 20.214.145.90:43443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/alfanew.php"] [unique_id "aryyRdqTm83YguA3303ASgAAAJM"]
[Wed Sep 30 00:55:01.635402 2026] [security2:error] [pid 178882:tid 179204] [client 114.119.136.150:51801] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thesevensranch.com"] [uri "/index.php"] [unique_id "aryyRdqTm83YguA3303ASwAAAJc"], referer: https://findstables.com/Maryland/The-Sevens-Ranch-92143675480/
[Wed Sep 30 00:55:01.732015 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.732259 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.746888 2026] [security2:error] [pid 178882:tid 179266] [client 20.251.39.228:18658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bmi.php"] [unique_id "aryyRdqTm83YguA3303AWQAAANI"]
[Wed Sep 30 00:55:01.757471 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:55:01.757942 2026] [access_compat:error] [pid 178882:tid 179186] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:55:01.766891 2026] [security2:error] [pid 178882:tid 179267] [client 223.181.30.165:12500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AXAAAANM"]
[Wed Sep 30 00:55:01.767011 2026] [security2:error] [pid 178882:tid 179267] [client 223.181.30.165:12500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AXAAAANM"]
[Wed Sep 30 00:55:01.801101 2026] [security2:error] [pid 178882:tid 179247] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyRdqTm83YguA3303AYQAAAL8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:01.824819 2026] [security2:error] [pid 178882:tid 179278] [client 202.179.95.79:64906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AZAAAANw"]
[Wed Sep 30 00:55:01.824987 2026] [security2:error] [pid 178882:tid 179278] [client 202.179.95.79:64906] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AZAAAANw"]
[Wed Sep 30 00:55:01.828798 2026] [security2:error] [pid 178882:tid 179089] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyRdqTm83YguA3303AZQAA_yU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=30&t=22130
[Wed Sep 30 00:55:01.828833 2026] [security2:error] [pid 178882:tid 179089] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyRdqTm83YguA3303AZQAA_yU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=30&t=22130
[Wed Sep 30 00:55:01.845357 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.845778 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.868098 2026] [security2:error] [pid 178882:tid 179305] [client 20.219.14.152:26464] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.vinason.net"] [uri "/c99.php"] [unique_id "aryyRdqTm83YguA3303AaQAAAPc"]
[Wed Sep 30 00:55:01.879409 2026] [security2:error] [pid 178882:tid 179272] [client 152.59.165.7:58519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AagAAANc"]
[Wed Sep 30 00:55:01.879567 2026] [security2:error] [pid 178882:tid 179272] [client 152.59.165.7:58519] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AagAAANc"]
[Wed Sep 30 00:55:01.880109 2026] [security2:error] [pid 178882:tid 179254] [client 103.166.103.39:58869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.103.166.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AawAAAMY"]
[Wed Sep 30 00:55:01.880370 2026] [security2:error] [pid 178882:tid 179254] [client 103.166.103.39:58869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyRdqTm83YguA3303AawAAAMY"]
[Wed Sep 30 00:55:01.932638 2026] [security2:error] [pid 178882:tid 179229] [client 20.214.145.90:38382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/inputs.php"] [unique_id "aryyRdqTm83YguA3303AcQAAAK8"]
[Wed Sep 30 00:55:01.936606 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:01.937035 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:01.948701 2026] [security2:error] [pid 178882:tid 179190] [client 20.58.177.98:36092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/dh9u7.php"] [unique_id "aryyRdqTm83YguA3303AcwAAAIo"]
[Wed Sep 30 00:55:02.070105 2026] [security2:error] [pid 178882:tid 179224] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyRtqTm83YguA3303AdgAAAKo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:02.083699 2026] [security2:error] [pid 178882:tid 179187] [client 20.251.39.228:19161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bypltspd.php"] [unique_id "aryyRtqTm83YguA3303AdwAAAIc"]
[Wed Sep 30 00:55:02.107685 2026] [security2:error] [pid 178882:tid 179206] [client 4.240.25.22:21894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/one.php"] [unique_id "aryyRtqTm83YguA3303AeQAAAJk"]
[Wed Sep 30 00:55:02.131611 2026] [security2:error] [pid 178882:tid 179185] [client 20.194.30.107:14402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/sym.php"] [unique_id "aryyRtqTm83YguA3303AfgAAAIU"]
[Wed Sep 30 00:55:02.184210 2026] [security2:error] [pid 178882:tid 179189] [client 72.255.10.32:53129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AggAAAIk"]
[Wed Sep 30 00:55:02.184387 2026] [security2:error] [pid 178882:tid 179189] [client 72.255.10.32:53129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AggAAAIk"]
[Wed Sep 30 00:55:02.249759 2026] [access_compat:error] [pid 178882:tid 179279] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:55:02.250096 2026] [access_compat:error] [pid 178882:tid 179279] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:55:02.263697 2026] [security2:error] [pid 178882:tid 179204] [client 20.214.145.90:43394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/admin/function.php"] [unique_id "aryyRtqTm83YguA3303AigAAAJc"]
[Wed Sep 30 00:55:02.268957 2026] [security2:error] [pid 178882:tid 179211] [client 20.204.161.246:48587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/felnggg.update.php"] [unique_id "aryyRtqTm83YguA3303AjAAAAJ0"]
[Wed Sep 30 00:55:02.299635 2026] [security2:error] [pid 178882:tid 179313] [client 20.204.42.136:27918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/mar.php"] [unique_id "aryyRtqTm83YguA3303AjQAAAP0"]
[Wed Sep 30 00:55:02.345689 2026] [security2:error] [pid 178882:tid 179267] [client 20.219.14.152:26437] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.vinason.net"] [uri "/c99.php"] [unique_id "aryyRtqTm83YguA3303AmwAAANM"]
[Wed Sep 30 00:55:02.350523 2026] [security2:error] [pid 178882:tid 179186] [client 20.219.2.60:10680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/Jcrop.php"] [unique_id "aryyRtqTm83YguA3303AnQAAAIY"]
[Wed Sep 30 00:55:02.356187 2026] [security2:error] [pid 178882:tid 179196] [client 203.122.45.246:65500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AngAAAJA"]
[Wed Sep 30 00:55:02.356381 2026] [security2:error] [pid 178882:tid 179196] [client 203.122.45.246:65500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AngAAAJA"]
[Wed Sep 30 00:55:02.384073 2026] [security2:error] [pid 178882:tid 179278] [client 4.196.65.241:2509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/UT6UJndefault.php"] [unique_id "aryyRtqTm83YguA3303AoQAAANw"]
[Wed Sep 30 00:55:02.393852 2026] [security2:error] [pid 178882:tid 179200] [client 39.44.16.112:63957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AogAAAJQ"]
[Wed Sep 30 00:55:02.394335 2026] [security2:error] [pid 178882:tid 179200] [client 39.44.16.112:63957] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AogAAAJQ"]
[Wed Sep 30 00:55:02.522863 2026] [security2:error] [pid 178882:tid 179208] [client 223.235.102.107:30142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303ArgAAAJo"]
[Wed Sep 30 00:55:02.523029 2026] [security2:error] [pid 178882:tid 179208] [client 223.235.102.107:30142] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303ArgAAAJo"]
[Wed Sep 30 00:55:02.553053 2026] [security2:error] [pid 178882:tid 179310] [client 49.36.41.37:57001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AsgAAAPs"]
[Wed Sep 30 00:55:02.555084 2026] [security2:error] [pid 178882:tid 179310] [client 49.36.41.37:57001] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AsgAAAPs"]
[Wed Sep 30 00:55:02.558135 2026] [security2:error] [pid 178882:tid 179288] [client 20.58.177.98:36094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/koiy.php"] [unique_id "aryyRtqTm83YguA3303AswAAAOY"]
[Wed Sep 30 00:55:02.580680 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.145.90:43421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aryyRtqTm83YguA3303AtAAAAPU"]
[Wed Sep 30 00:55:02.650556 2026] [security2:error] [pid 178882:tid 179204] [client 20.251.39.228:43673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/shell.php"] [unique_id "aryyRtqTm83YguA3303AwQAAAJc"]
[Wed Sep 30 00:55:02.660289 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.660836 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.691358 2026] [security2:error] [pid 178882:tid 179199] [client 43.227.131.37:59825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AwgAAAJM"]
[Wed Sep 30 00:55:02.691485 2026] [security2:error] [pid 178882:tid 179199] [client 43.227.131.37:59825] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303AwgAAAJM"]
[Wed Sep 30 00:55:02.730935 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.731209 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.748953 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.749398 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.753692 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.753965 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:39678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.778238 2026] [access_compat:error] [pid 178882:tid 179256] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 00:55:02.778684 2026] [access_compat:error] [pid 178882:tid 179256] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 00:55:02.815922 2026] [security2:error] [pid 178882:tid 179188] [client 20.219.14.152:26379] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.vinason.net"] [uri "/c99.php"] [unique_id "aryyRtqTm83YguA3303A0wAAAIg"]
[Wed Sep 30 00:55:02.817139 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.817458 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.826474 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:34555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.826922 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:34555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.831680 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.831982 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.843444 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.843734 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.857473 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.857747 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.869206 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.869566 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.907919 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.908174 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.915907 2026] [security2:error] [pid 178882:tid 179190] [client 20.214.145.90:38348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-admin/images/index.php"] [unique_id "aryyRtqTm83YguA3303A2wAAAIo"]
[Wed Sep 30 00:55:02.935284 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:02.935532 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:02.955737 2026] [security2:error] [pid 178882:tid 179214] [client 103.148.43.14:54479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303A3QAAAKA"]
[Wed Sep 30 00:55:02.955902 2026] [security2:error] [pid 178882:tid 179214] [client 103.148.43.14:54479] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyRtqTm83YguA3303A3QAAAKA"]
[Wed Sep 30 00:55:02.985298 2026] [security2:error] [pid 178882:tid 179296] [client 20.58.177.98:34895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wordfence-waf.php"] [unique_id "aryyRtqTm83YguA3303A3wAAAO4"]
[Wed Sep 30 00:55:02.995709 2026] [security2:error] [pid 178882:tid 179316] [client 20.219.2.60:36786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/abrand.php"] [unique_id "aryyRtqTm83YguA3303A4AAAAQA"]
[Wed Sep 30 00:55:03.023138 2026] [security2:error] [pid 178882:tid 179246] [client 20.251.39.228:43658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-links-opml.php"] [unique_id "aryyR9qTm83YguA3303A5AAAAL4"]
[Wed Sep 30 00:55:03.023711 2026] [security2:error] [pid 178882:tid 179281] [client 216.73.216.46:34555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyR9qTm83YguA3303A5QAAAN8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTEvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTM%3D
[Wed Sep 30 00:55:03.026375 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.026699 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:4435] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.121128 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.121393 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.184161 2026] [security2:error] [pid 178882:tid 179198] [client 20.70.173.30:59851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/sb.php"] [unique_id "aryyR9qTm83YguA3303A9gAAAJI"]
[Wed Sep 30 00:55:03.210505 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.210763 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.225011 2026] [security2:error] [pid 178882:tid 179295] [client 216.73.216.46:4435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyR9qTm83YguA3303A-QAAAO0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzIvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTc%3D
[Wed Sep 30 00:55:03.262005 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.145.90:38373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/default.php"] [unique_id "aryyR9qTm83YguA3303A_gAAALA"]
[Wed Sep 30 00:55:03.262210 2026] [access_compat:error] [pid 178882:tid 179250] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 00:55:03.262463 2026] [access_compat:error] [pid 178882:tid 179250] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 00:55:03.275896 2026] [security2:error] [pid 178882:tid 179234] [client 20.219.14.152:26466] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.vinason.net"] [uri "/c99.php"] [unique_id "aryyR9qTm83YguA3303BAAAAALQ"]
[Wed Sep 30 00:55:03.299820 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.300062 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.354649 2026] [security2:error] [pid 178882:tid 179314] [client 20.58.177.98:35995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/em.php"] [unique_id "aryyR9qTm83YguA3303BBAAAAP4"]
[Wed Sep 30 00:55:03.384515 2026] [security2:error] [pid 178882:tid 179306] [client 20.251.39.228:35565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryyR9qTm83YguA3303BBwAAAPg"]
[Wed Sep 30 00:55:03.391488 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.391740 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.454741 2026] [security2:error] [pid 178882:tid 179296] [client 45.138.12.47:32076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.williamsflying.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyR9qTm83YguA3303BCwAAAO4"]
[Wed Sep 30 00:55:03.484202 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.484679 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.544682 2026] [security2:error] [pid 178882:tid 179297] [client 20.214.145.90:28306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/lv.php"] [unique_id "aryyR9qTm83YguA3303BFgAAAO8"]
[Wed Sep 30 00:55:03.575700 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.576123 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.653628 2026] [security2:error] [pid 178882:tid 179286] [client 45.138.12.43:38982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nve.qlp.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyR9qTm83YguA3303BJQAAAOQ"]
[Wed Sep 30 00:55:03.662306 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.662578 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.749663 2026] [access_compat:error] [pid 178882:tid 179234] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:55:03.750142 2026] [access_compat:error] [pid 178882:tid 179234] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:55:03.755369 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.755675 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.796174 2026] [security2:error] [pid 178882:tid 179302] [client 20.251.39.228:20519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws82.php"] [unique_id "aryyR9qTm83YguA3303BNAAAAPQ"]
[Wed Sep 30 00:55:03.797692 2026] [security2:error] [pid 178882:tid 179266] [client 20.58.177.98:36057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/hp.php"] [unique_id "aryyR9qTm83YguA3303BNQAAANI"]
[Wed Sep 30 00:55:03.812939 2026] [security2:error] [pid 178882:tid 179190] [client 20.219.14.152:26424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/ttivnife.php"] [unique_id "aryyR9qTm83YguA3303BOAAAAIo"]
[Wed Sep 30 00:55:03.822083 2026] [security2:error] [pid 178882:tid 179257] [client 20.219.2.60:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/aboute.php"] [unique_id "aryyR9qTm83YguA3303BOgAAAMk"]
[Wed Sep 30 00:55:03.848754 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.849201 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:03.858868 2026] [security2:error] [pid 178882:tid 179307] [client 49.205.105.16:15257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyR9qTm83YguA3303BQAAAAPk"]
[Wed Sep 30 00:55:03.859046 2026] [security2:error] [pid 178882:tid 179307] [client 49.205.105.16:15257] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyR9qTm83YguA3303BQAAAAPk"]
[Wed Sep 30 00:55:03.861173 2026] [security2:error] [pid 178882:tid 179268] [client 20.214.145.90:43406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aryyR9qTm83YguA3303BQQAAANQ"]
[Wed Sep 30 00:55:03.881917 2026] [security2:error] [pid 178882:tid 179249] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyR9qTm83YguA3303BQwAAAME"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:03.940965 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:03.941423 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:58132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.010126 2026] [security2:error] [pid 178882:tid 179208] [client 20.194.30.107:62770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/8.php"] [unique_id "aryySNqTm83YguA3303BSQAAAJo"]
[Wed Sep 30 00:55:04.028232 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.028502 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.030488 2026] [security2:error] [pid 178882:tid 179311] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryySNqTm83YguA3303BTAAAAPw"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:04.116939 2026] [security2:error] [pid 178882:tid 179213] [client 103.24.86.56:49218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryySNqTm83YguA3303BTwAAAJ8"]
[Wed Sep 30 00:55:04.117984 2026] [security2:error] [pid 178882:tid 179213] [client 103.24.86.56:49218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryySNqTm83YguA3303BTwAAAJ8"]
[Wed Sep 30 00:55:04.121440 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.121719 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.129786 2026] [security2:error] [pid 178882:tid 179300] [client 216.73.216.46:58132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryySNqTm83YguA3303BUQAAAPI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvY3B1Ny9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:04.146027 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:10917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/rip.php"] [unique_id "aryySNqTm83YguA3303BUwAAAOs"]
[Wed Sep 30 00:55:04.150976 2026] [security2:error] [pid 178882:tid 179273] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryySNqTm83YguA3303BVAAAANg"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:04.171703 2026] [security2:error] [pid 178882:tid 179244] [client 20.214.145.90:38392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/marijuana.php"] [unique_id "aryySNqTm83YguA3303BVgAAALw"]
[Wed Sep 30 00:55:04.211989 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.212293 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.249060 2026] [access_compat:error] [pid 178882:tid 179194] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=sys&p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 00:55:04.249335 2026] [access_compat:error] [pid 178882:tid 179194] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=sys&p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 00:55:04.268772 2026] [autoindex:error] [pid 178882:tid 179185] [client 212.156.70.154:6010] AH01276: Cannot serve directory /home4/rkftfdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:04.306889 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.307333 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:10729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.310056 2026] [security2:error] [pid 178882:tid 179217] [client 20.58.177.98:36032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "esvarbon.gov.ng"] [uri "/wpuse.php"] [unique_id "aryySNqTm83YguA3303BYgAAAKM"]
[Wed Sep 30 00:55:04.332940 2026] [security2:error] [pid 178882:tid 179188] [client 20.251.39.228:13552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/new.php"] [unique_id "aryySNqTm83YguA3303BZAAAAIg"]
[Wed Sep 30 00:55:04.335552 2026] [security2:error] [pid 178882:tid 179252] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryySNqTm83YguA3303BYwAAAMQ"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:04.342173 2026] [security2:error] [pid 178882:tid 179266] [client 20.219.14.152:26430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/admin.php/2P.php"] [unique_id "aryySNqTm83YguA3303BZQAAANI"]
[Wed Sep 30 00:55:04.391720 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.392102 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.475743 2026] [security2:error] [pid 178882:tid 179268] [client 4.240.25.22:63796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/222.php"] [unique_id "aryySNqTm83YguA3303BcgAAANQ"]
[Wed Sep 30 00:55:04.483335 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.483596 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.503691 2026] [security2:error] [pid 178882:tid 179316] [client 216.73.216.46:10729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryySNqTm83YguA3303BdQAAAQA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC94ODY%3D
[Wed Sep 30 00:55:04.518026 2026] [security2:error] [pid 178882:tid 179265] [client 20.214.145.90:28323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aryySNqTm83YguA3303BdgAAANE"]
[Wed Sep 30 00:55:04.531265 2026] [security2:error] [pid 178882:tid 179220] [client 20.194.30.107:10009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/blurbs.php"] [unique_id "aryySNqTm83YguA3303BeAAAAKY"]
[Wed Sep 30 00:55:04.578868 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.579312 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.581857 2026] [security2:error] [pid 178882:tid 179294] [client 198.13.221.243:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryySNqTm83YguA3303BfAAAAOw"]
[Wed Sep 30 00:55:04.635499 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryySNqTm83YguA3303BgQAA8V4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22030
[Wed Sep 30 00:55:04.635544 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryySNqTm83YguA3303BgQAA8V4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22030
[Wed Sep 30 00:55:04.665918 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.666194 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.695195 2026] [security2:error] [pid 178882:tid 179297] [client 20.219.2.60:19449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/x9.php"] [unique_id "aryySNqTm83YguA3303BhwAAAO8"]
[Wed Sep 30 00:55:04.764137 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.764596 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.791464 2026] [security2:error] [pid 178882:tid 179295] [client 20.214.145.90:28301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-content/403.php"] [unique_id "aryySNqTm83YguA3303BjwAAAO0"]
[Wed Sep 30 00:55:04.803906 2026] [access_compat:error] [pid 178882:tid 179320] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:55:04.804331 2026] [access_compat:error] [pid 178882:tid 179320] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:55:04.821803 2026] [security2:error] [pid 178882:tid 179277] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryySNqTm83YguA3303BkgAAANs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:04.834123 2026] [security2:error] [pid 178882:tid 179200] [client 20.251.39.228:22933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/press.php"] [unique_id "aryySNqTm83YguA3303BkwAAAJQ"]
[Wed Sep 30 00:55:04.848365 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.848630 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.943388 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:04.943822 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:04.969006 2026] [security2:error] [pid 178882:tid 179259] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryySNqTm83YguA3303BmgAAAMs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:05.032350 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.032646 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.035308 2026] [security2:error] [pid 178882:tid 179230] [client 20.219.14.152:26419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/cord.php"] [unique_id "aryySdqTm83YguA3303BnQAAALA"]
[Wed Sep 30 00:55:05.096256 2026] [security2:error] [pid 178882:tid 179268] [client 20.214.145.90:38381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/css/colors/coffee/index.php"] [unique_id "aryySdqTm83YguA3303BoAAAANQ"]
[Wed Sep 30 00:55:05.118058 2026] [security2:error] [pid 178882:tid 179316] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryySdqTm83YguA3303BogAAAQA"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:05.125764 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.126202 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.133771 2026] [security2:error] [pid 178882:tid 179174] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryySdqTm83YguA3303BowAAmXg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=2304735290e7120c5e3b90e3d9d0b20b&start=225&t=3879
[Wed Sep 30 00:55:05.133792 2026] [security2:error] [pid 178882:tid 179174] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryySdqTm83YguA3303BowAAmXg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=2304735290e7120c5e3b90e3d9d0b20b&start=225&t=3879
[Wed Sep 30 00:55:05.213963 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.214234 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.256814 2026] [access_compat:error] [pid 178882:tid 179290] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL25ldA==
[Wed Sep 30 00:55:05.257058 2026] [access_compat:error] [pid 178882:tid 179290] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL25ldA==
[Wed Sep 30 00:55:05.261055 2026] [security2:error] [pid 178882:tid 179231] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryySdqTm83YguA3303BqgAAALE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:05.272897 2026] [security2:error] [pid 178882:tid 179205] [client 20.251.39.228:5420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryySdqTm83YguA3303BqwAAAJg"]
[Wed Sep 30 00:55:05.283486 2026] [security2:error] [pid 178882:tid 179284] [client 20.219.2.60:10657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/new4.php"] [unique_id "aryySdqTm83YguA3303BrAAAAOI"]
[Wed Sep 30 00:55:05.305604 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.305915 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.345614 2026] [security2:error] [pid 178882:tid 179285] [client 20.204.161.246:48083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/jybkxer.php"] [unique_id "aryySdqTm83YguA3303BsQAAAOM"]
[Wed Sep 30 00:55:05.397315 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.397839 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.408863 2026] [security2:error] [pid 178882:tid 179309] [client 20.214.145.90:38354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/css.php"] [unique_id "aryySdqTm83YguA3303BtwAAAPo"]
[Wed Sep 30 00:55:05.409238 2026] [security2:error] [pid 178882:tid 179287] [client 103.168.66.101:18278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryySdqTm83YguA3303BuAAAAOU"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:05.409708 2026] [access_compat:error] [pid 178882:tid 179220] [client 47.79.13.78:59264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:05.410137 2026] [access_compat:error] [pid 178882:tid 179220] [client 47.79.13.78:59264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:05.485880 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.486138 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.560566 2026] [security2:error] [pid 178882:tid 179226] [client 20.219.14.152:26454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/anom.php"] [unique_id "aryySdqTm83YguA3303BvwAAAKw"]
[Wed Sep 30 00:55:05.579225 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.579645 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.598114 2026] [security2:error] [pid 178882:tid 179195] [client 31.182.200.107:6491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.200.182.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clickmy.online"] [uri "/xmlrpc.php"] [unique_id "aryySdqTm83YguA3303BwAAAAI8"]
[Wed Sep 30 00:55:05.598290 2026] [security2:error] [pid 178882:tid 179195] [client 31.182.200.107:6491] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "clickmy.online"] [uri "/xmlrpc.php"] [unique_id "aryySdqTm83YguA3303BwAAAAI8"]
[Wed Sep 30 00:55:05.665141 2026] [security2:error] [pid 178882:tid 179232] [client 20.251.39.228:5509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryySdqTm83YguA3303ByQAAALI"]
[Wed Sep 30 00:55:05.669901 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.670317 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.714021 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.145.90:43438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-admin/user/about.php"] [unique_id "aryySdqTm83YguA3303BzgAAALA"]
[Wed Sep 30 00:55:05.741104 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:55:05.741371 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:55:05.760979 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.761244 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.788378 2026] [security2:error] [pid 178882:tid 179240] [client 45.138.12.47:35850] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.wqc.gqk.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryySdqTm83YguA3303B1QAAALk"]
[Wed Sep 30 00:55:05.852971 2026] [security2:error] [pid 178882:tid 179305] [client 20.219.2.60:19399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/an.php"] [unique_id "aryySdqTm83YguA3303B3QAAAPc"]
[Wed Sep 30 00:55:05.854051 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.854367 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:05.866685 2026] [security2:error] [pid 178882:tid 179193] [client 103.168.66.101:18290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryySdqTm83YguA3303B4AAAAI0"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:05.867072 2026] [security2:error] [pid 178882:tid 179278] [client 173.254.29.157:0] ModSecurity: Warning. Matched phrase "Evil" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "evilbiz.com"] [uri "/wp-cron.php"] [unique_id "aryySdqTm83YguA3303B3gAA3DA"]
[Wed Sep 30 00:55:05.869633 2026] [security2:error] [pid 178882:tid 179206] [client 201.183.71.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryySdqTm83YguA3303B3wAAAJk"]
[Wed Sep 30 00:55:05.896711 2026] [security2:error] [pid 178882:tid 179294] [client 4.240.25.22:21922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp_blog_footer.php"] [unique_id "aryySdqTm83YguA3303B4wAAAOw"]
[Wed Sep 30 00:55:05.942851 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:05.943235 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.005952 2026] [security2:error] [pid 178882:tid 179225] [client 20.214.145.90:43419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/about.php"] [unique_id "aryyStqTm83YguA3303B6QAAAKs"]
[Wed Sep 30 00:55:06.034771 2026] [security2:error] [pid 178882:tid 179281] [client 20.251.39.228:6037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws57.php"] [unique_id "aryyStqTm83YguA3303B6wAAAN8"]
[Wed Sep 30 00:55:06.038672 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.039116 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.039194 2026] [security2:error] [pid 178882:tid 179309] [client 20.28.180.172:34284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/bn.php"] [unique_id "aryyStqTm83YguA3303B7AAAAPo"]
[Wed Sep 30 00:55:06.082932 2026] [security2:error] [pid 178882:tid 179296] [client 20.219.14.152:26552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/plugins.php"] [unique_id "aryyStqTm83YguA3303B8AAAAO4"]
[Wed Sep 30 00:55:06.123650 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.123923 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.165465 2026] [access_compat:error] [pid 178882:tid 179265] [client 47.79.13.234:41914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:06.165935 2026] [access_compat:error] [pid 178882:tid 179265] [client 47.79.13.234:41914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:06.209589 2026] [security2:error] [pid 178882:tid 179194] [client 4.196.65.241:27315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ccou.php"] [unique_id "aryyStqTm83YguA3303CAAAAAI4"]
[Wed Sep 30 00:55:06.228418 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.228855 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.272910 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:55:06.273158 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:55:06.308244 2026] [security2:error] [pid 178882:tid 179213] [client 20.219.2.60:36631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/init.php"] [unique_id "aryyStqTm83YguA3303CCwAAAJ8"]
[Wed Sep 30 00:55:06.312146 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.145.90:38363] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.youth2026.org"] [uri "/1.php"] [unique_id "aryyStqTm83YguA3303CDAAAALA"]
[Wed Sep 30 00:55:06.312283 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.145.90:38363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/1.php"] [unique_id "aryyStqTm83YguA3303CDAAAALA"]
[Wed Sep 30 00:55:06.316715 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.317215 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.389381 2026] [security2:error] [pid 178882:tid 179219] [client 20.219.2.60:10905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/aa.php"] [unique_id "aryyStqTm83YguA3303CEAAAAKU"]
[Wed Sep 30 00:55:06.397222 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.397486 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.447623 2026] [security2:error] [pid 178882:tid 179124] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.aws/.env"] [unique_id "aryyStqTm83YguA3303CFAAAzEY"]
[Wed Sep 30 00:55:06.447720 2026] [security2:error] [pid 178882:tid 179112] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.aws/credentials.bak"] [unique_id "aryyStqTm83YguA3303CGQAAzDw"]
[Wed Sep 30 00:55:06.451366 2026] [security2:error] [pid 178882:tid 179109] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env"] [unique_id "aryyStqTm83YguA3303CHAAAzDk"]
[Wed Sep 30 00:55:06.453824 2026] [security2:error] [pid 178882:tid 179112] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.docker/laravel/app/.env"] [unique_id "aryyStqTm83YguA3303CJAAAzDw"]
[Wed Sep 30 00:55:06.454627 2026] [security2:error] [pid 178882:tid 179120] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.docker/.env"] [unique_id "aryyStqTm83YguA3303CJgAAzEM"]
[Wed Sep 30 00:55:06.488731 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.489017 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.535453 2026] [security2:error] [pid 178882:tid 179242] [client 20.251.39.228:5507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/.qiodetme.php"] [unique_id "aryyStqTm83YguA3303CMAAAALo"]
[Wed Sep 30 00:55:06.561828 2026] [security2:error] [pid 178882:tid 179244] [client 20.219.2.60:18818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/aboutc.php"] [unique_id "aryyStqTm83YguA3303CMQAAALw"]
[Wed Sep 30 00:55:06.580595 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.580992 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.590179 2026] [security2:error] [pid 178882:tid 179089] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env.bak"] [unique_id "aryyStqTm83YguA3303COgAAzCU"]
[Wed Sep 30 00:55:06.590487 2026] [security2:error] [pid 178882:tid 179097] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env.backup"] [unique_id "aryyStqTm83YguA3303COQAAzC0"]
[Wed Sep 30 00:55:06.642942 2026] [security2:error] [pid 178882:tid 179295] [client 20.214.145.90:38351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/marijuana.php"] [unique_id "aryyStqTm83YguA3303CRgAAAO0"]
[Wed Sep 30 00:55:06.649707 2026] [core:alert] [pid 178882:tid 179261] [client 67.205.178.88:0] /home4/geyserjz/public_html/grupodeina/.htaccess: </IfModule> without matching <IfModule> section
[Wed Sep 30 00:55:06.654199 2026] [access_compat:error] [pid 178882:tid 179249] [client 47.79.13.64:48928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:06.654482 2026] [access_compat:error] [pid 178882:tid 179249] [client 47.79.13.64:48928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:06.670493 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.670751 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.686376 2026] [security2:error] [pid 178882:tid 179195] [client 20.219.14.152:26404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/groud3.php"] [unique_id "aryyStqTm83YguA3303CTQAAAI8"]
[Wed Sep 30 00:55:06.727832 2026] [security2:error] [pid 178882:tid 179075] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env.old"] [unique_id "aryyStqTm83YguA3303CWwAAzBc"]
[Wed Sep 30 00:55:06.758173 2026] [access_compat:error] [pid 178882:tid 179210] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:55:06.758562 2026] [access_compat:error] [pid 178882:tid 179210] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:55:06.766905 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.767353 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.769234 2026] [security2:error] [pid 178882:tid 179302] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyStqTm83YguA3303CYgAAAPQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:06.852628 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.852700 2026] [security2:error] [pid 178882:tid 179292] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyStqTm83YguA3303CcgAAAOo"]
[Wed Sep 30 00:55:06.852935 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.861161 2026] [security2:error] [pid 178882:tid 179094] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.220.175.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vck.wao.mybluehost.me"] [uri "/.env.php"] [unique_id "aryyStqTm83YguA3303CdAAAzCo"]
[Wed Sep 30 00:55:06.904524 2026] [security2:error] [pid 178882:tid 179249] [client 20.204.161.246:48817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/edit-tags.php"] [unique_id "aryyStqTm83YguA3303CfwAAAME"]
[Wed Sep 30 00:55:06.945569 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:06.945839 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:06.948016 2026] [core:alert] [pid 178882:tid 179251] [client 67.205.178.88:0] /home4/geyserjz/public_html/grupodeina/.htaccess: </IfModule> without matching <IfModule> section, referer: http://www.grupodeina.geyserjz.com/
[Wed Sep 30 00:55:06.948997 2026] [security2:error] [pid 178882:tid 179212] [client 20.214.145.90:28263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/about/function.php"] [unique_id "aryyStqTm83YguA3303ChgAAAJ4"]
[Wed Sep 30 00:55:06.953733 2026] [security2:error] [pid 178882:tid 179186] [client 20.204.42.136:57167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/abde5e1996index.php"] [unique_id "aryyStqTm83YguA3303CiQAAAIY"]
[Wed Sep 30 00:55:06.987204 2026] [security2:error] [pid 178882:tid 179126] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env.swp"] [unique_id "aryyStqTm83YguA3303CkAAAzEg"]
[Wed Sep 30 00:55:07.011381 2026] [security2:error] [pid 178882:tid 179143] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/.env~"] [unique_id "aryyS9qTm83YguA3303ClgAAzFk"]
[Wed Sep 30 00:55:07.011663 2026] [security2:error] [pid 178882:tid 179309] [client 45.138.12.43:24216] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odw.nqt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyS9qTm83YguA3303CmAAAAPo"]
[Wed Sep 30 00:55:07.033476 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.033751 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.051980 2026] [security2:error] [pid 178882:tid 179280] [client 106.214.2.47:2724] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyS9qTm83YguA3303CowAAAN4"]
[Wed Sep 30 00:55:07.052122 2026] [security2:error] [pid 178882:tid 179280] [client 106.214.2.47:2724] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyS9qTm83YguA3303CowAAAN4"]
[Wed Sep 30 00:55:07.058639 2026] [security2:error] [pid 178882:tid 179292] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyS9qTm83YguA3303CpgAAAOo"]
[Wed Sep 30 00:55:07.071621 2026] [security2:error] [pid 178882:tid 179298] [client 20.194.30.107:65524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/b8.php"] [unique_id "aryyS9qTm83YguA3303CqQAAAPA"]
[Wed Sep 30 00:55:07.126124 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.126384 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.151328 2026] [security2:error] [pid 178882:tid 179161] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/api/.env"] [unique_id "aryyS9qTm83YguA3303CxAAAr2s"]
[Wed Sep 30 00:55:07.154492 2026] [security2:error] [pid 178882:tid 179145] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.220.175.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vck.wao.mybluehost.me"] [uri "/api/phpinfo.php"] [unique_id "aryyS9qTm83YguA3303CxgAAr1s"]
[Wed Sep 30 00:55:07.162288 2026] [security2:error] [pid 178882:tid 179155] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/app/.env"] [unique_id "aryyS9qTm83YguA3303CyAAAr2U"]
[Wed Sep 30 00:55:07.165580 2026] [security2:error] [pid 178882:tid 179288] [client 20.251.39.228:25557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/sodas.php"] [unique_id "aryyS9qTm83YguA3303CyQAAAOY"]
[Wed Sep 30 00:55:07.176646 2026] [security2:error] [pid 178882:tid 179159] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/application/.env"] [unique_id "aryyS9qTm83YguA3303CygAAr2k"]
[Wed Sep 30 00:55:07.215928 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.216192 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.228934 2026] [security2:error] [pid 178882:tid 179210] [client 20.219.14.152:26386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gaxby.php"] [unique_id "aryyS9qTm83YguA3303C0gAAAJw"]
[Wed Sep 30 00:55:07.245036 2026] [security2:error] [pid 178882:tid 179316] [client 20.214.145.90:38383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/simple.php"] [unique_id "aryyS9qTm83YguA3303C1gAAAQA"]
[Wed Sep 30 00:55:07.262709 2026] [security2:error] [pid 178882:tid 179304] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyS9qTm83YguA3303C2gAAAPY"]
[Wed Sep 30 00:55:07.266991 2026] [access_compat:error] [pid 178882:tid 179277] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 00:55:07.267255 2026] [access_compat:error] [pid 178882:tid 179277] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 00:55:07.278715 2026] [security2:error] [pid 178882:tid 179152] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/back/.env"] [unique_id "aryyS9qTm83YguA3303C3AAAi2I"]
[Wed Sep 30 00:55:07.288391 2026] [security2:error] [pid 178882:tid 179068] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/backend/.env"] [unique_id "aryyS9qTm83YguA3303C3gAAihA"]
[Wed Sep 30 00:55:07.288479 2026] [security2:error] [pid 178882:tid 179157] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/backup/.env"] [unique_id "aryyS9qTm83YguA3303C3wAAimc"]
[Wed Sep 30 00:55:07.289454 2026] [security2:error] [pid 178882:tid 179172] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/cms/.env"] [unique_id "aryyS9qTm83YguA3303C4AAAinY"]
[Wed Sep 30 00:55:07.297941 2026] [security2:error] [pid 178882:tid 179080] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.220.175.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vck.wao.mybluehost.me"] [uri "/config.php"] [unique_id "aryyS9qTm83YguA3303C5wAAihw"]
[Wed Sep 30 00:55:07.308087 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.308358 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.324948 2026] [security2:error] [pid 178882:tid 179148] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/config/.env"] [unique_id "aryyS9qTm83YguA3303C6wAAil4"]
[Wed Sep 30 00:55:07.380198 2026] [security2:error] [pid 178882:tid 179095] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/core/.env"] [unique_id "aryyS9qTm83YguA3303C7wAAiis"]
[Wed Sep 30 00:55:07.390894 2026] [core:alert] [pid 178882:tid 179193] [client 67.205.178.88:0] /home4/geyserjz/public_html/grupodeina/.htaccess: </IfModule> without matching <IfModule> section
[Wed Sep 30 00:55:07.401577 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.401877 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.425034 2026] [security2:error] [pid 178882:tid 179180] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/dev/.env"] [unique_id "aryyS9qTm83YguA3303C_AAAin4"]
[Wed Sep 30 00:55:07.425420 2026] [security2:error] [pid 178882:tid 179098] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/database.sql"] [unique_id "aryyS9qTm83YguA3303C-wAAii4"]
[Wed Sep 30 00:55:07.436909 2026] [autoindex:error] [pid 178882:tid 179230] [client 212.156.70.154:44676] AH01276: Cannot serve directory /home4/hlkvuimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:07.461354 2026] [security2:error] [pid 178882:tid 179181] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/frontend/.env"] [unique_id "aryyS9qTm83YguA3303DCAAAin8"]
[Wed Sep 30 00:55:07.467117 2026] [security2:error] [pid 178882:tid 179224] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyS9qTm83YguA3303DCwAAAKo"]
[Wed Sep 30 00:55:07.490315 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.490768 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.516220 2026] [security2:error] [pid 178882:tid 179136] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.220.175.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vck.wao.mybluehost.me"] [uri "/info.php"] [unique_id "aryyS9qTm83YguA3303DEAAAwFI"]
[Wed Sep 30 00:55:07.542185 2026] [security2:error] [pid 178882:tid 179134] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/laravel/.env"] [unique_id "aryyS9qTm83YguA3303DEQAAkVA"]
[Wed Sep 30 00:55:07.549506 2026] [security2:error] [pid 178882:tid 179100] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/media/.env"] [unique_id "aryyS9qTm83YguA3303DEgAAqDA"]
[Wed Sep 30 00:55:07.550336 2026] [security2:error] [pid 178882:tid 179090] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/new/.env"] [unique_id "aryyS9qTm83YguA3303DEwAAqCY"]
[Wed Sep 30 00:55:07.554423 2026] [security2:error] [pid 178882:tid 179105] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/old/.env"] [unique_id "aryyS9qTm83YguA3303DFAAAyTU"]
[Wed Sep 30 00:55:07.561148 2026] [security2:error] [pid 178882:tid 179096] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.220.175.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vck.wao.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "aryyS9qTm83YguA3303DFgAAlyw"]
[Wed Sep 30 00:55:07.566165 2026] [security2:error] [pid 178882:tid 179055] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/production/.env"] [unique_id "aryyS9qTm83YguA3303DFwAAlwM"]
[Wed Sep 30 00:55:07.566516 2026] [security2:error] [pid 178882:tid 179185] [client 20.214.145.90:28297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/goat1.php"] [unique_id "aryyS9qTm83YguA3303DGgAAAIU"]
[Wed Sep 30 00:55:07.571503 2026] [security2:error] [pid 178882:tid 179177] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/public/.env"] [unique_id "aryyS9qTm83YguA3303DGwAAl3s"]
[Wed Sep 30 00:55:07.581867 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.582241 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.601512 2026] [security2:error] [pid 178882:tid 179067] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/server/.env"] [unique_id "aryyS9qTm83YguA3303DIAAAlw8"]
[Wed Sep 30 00:55:07.608374 2026] [security2:error] [pid 178882:tid 179091] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/src/.env"] [unique_id "aryyS9qTm83YguA3303DIwAAlyc"]
[Wed Sep 30 00:55:07.620272 2026] [security2:error] [pid 178882:tid 179108] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/staging/.env"] [unique_id "aryyS9qTm83YguA3303DJwAAlzg"]
[Wed Sep 30 00:55:07.638285 2026] [security2:error] [pid 178882:tid 179093] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/test/.env"] [unique_id "aryyS9qTm83YguA3303DKQAAlyk"]
[Wed Sep 30 00:55:07.652684 2026] [security2:error] [pid 178882:tid 179079] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/v1/.env"] [unique_id "aryyS9qTm83YguA3303DKgAAlxs"]
[Wed Sep 30 00:55:07.670213 2026] [security2:error] [pid 178882:tid 179275] [client 20.251.39.228:13465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/yw5bi63u.php"] [unique_id "aryyS9qTm83YguA3303DLgAAANk"]
[Wed Sep 30 00:55:07.672753 2026] [security2:error] [pid 178882:tid 179288] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyS9qTm83YguA3303DLwAAAOY"]
[Wed Sep 30 00:55:07.673664 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.673957 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.678264 2026] [security2:error] [pid 178882:tid 179111] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/v2/.env"] [unique_id "aryyS9qTm83YguA3303DMAAA4Ts"]
[Wed Sep 30 00:55:07.686634 2026] [security2:error] [pid 178882:tid 179116] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vck.wao.mybluehost.me"] [uri "/web/.env"] [unique_id "aryyS9qTm83YguA3303DMgAAnD8"]
[Wed Sep 30 00:55:07.689588 2026] [security2:error] [pid 178882:tid 179062] [remote 207.175.220.59:48086] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "vck.wao.mybluehost.me"] [uri "/wp-config.php.bak"] [unique_id "aryyS9qTm83YguA3303DMwAAswo"]
[Wed Sep 30 00:55:07.696980 2026] [security2:error] [pid 178882:tid 179229] [client 20.219.14.152:26382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/dh9u7.php"] [unique_id "aryyS9qTm83YguA3303DNQAAAK8"]
[Wed Sep 30 00:55:07.721291 2026] [security2:error] [pid 178882:tid 179309] [client 20.194.30.107:17521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/wp-content/admin.php"] [unique_id "aryyS9qTm83YguA3303DPAAAAPo"]
[Wed Sep 30 00:55:07.749797 2026] [security2:error] [pid 178882:tid 179203] [client 20.219.2.60:19424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gdn.php"] [unique_id "aryyS9qTm83YguA3303DRQAAAJY"]
[Wed Sep 30 00:55:07.763609 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.763882 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.778462 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 00:55:07.778919 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 00:55:07.854219 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.854497 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:07.877924 2026] [security2:error] [pid 178882:tid 179247] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyS9qTm83YguA3303DWQAAAL8"]
[Wed Sep 30 00:55:07.922478 2026] [autoindex:error] [pid 178882:tid 179296] [client 148.72.211.211:54912] AH01276: Cannot serve directory /home4/accbxzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:07.940361 2026] [security2:error] [pid 178882:tid 179313] [client 20.214.145.90:28255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/chosen.php"] [unique_id "aryyS9qTm83YguA3303DYgAAAP0"]
[Wed Sep 30 00:55:07.945715 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:07.946159 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.045192 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.045462 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.064162 2026] [security2:error] [pid 178882:tid 179212] [client 20.251.39.228:25584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws81.php"] [unique_id "aryyTNqTm83YguA3303DZgAAAJ4"]
[Wed Sep 30 00:55:08.084598 2026] [security2:error] [pid 178882:tid 179235] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DZwAAALU"]
[Wed Sep 30 00:55:08.131545 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.132056 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.137230 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.2.60:10765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/jk.php"] [unique_id "aryyTNqTm83YguA3303DbQAAAOc"]
[Wed Sep 30 00:55:08.181098 2026] [security2:error] [pid 178882:tid 179288] [client 20.219.14.152:27809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/koiy.php"] [unique_id "aryyTNqTm83YguA3303DcgAAAOY"]
[Wed Sep 30 00:55:08.220868 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.221109 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.233351 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:55:08.233794 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:55:08.287397 2026] [security2:error] [pid 178882:tid 179287] [client 20.214.145.90:38342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-cron.php"] [unique_id "aryyTNqTm83YguA3303DgAAAAOU"]
[Wed Sep 30 00:55:08.289221 2026] [security2:error] [pid 178882:tid 179238] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DgQAAALc"]
[Wed Sep 30 00:55:08.319711 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.320217 2026] [access_compat:error] [pid 178882:tid 179269] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.381465 2026] [security2:error] [pid 178882:tid 179315] [client 74.7.242.1:43742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyTNqTm83YguA3303DhAAAAP8"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:55:08.409773 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.410296 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.421614 2026] [security2:error] [pid 178882:tid 179271] [client 45.138.12.43:39052] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nyk.tyy.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyTNqTm83YguA3303DiQAAANY"]
[Wed Sep 30 00:55:08.423209 2026] [security2:error] [pid 178882:tid 179217] [client 20.251.39.228:27323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/mh.php"] [unique_id "aryyTNqTm83YguA3303DigAAAKM"]
[Wed Sep 30 00:55:08.494859 2026] [security2:error] [pid 178882:tid 179220] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DjAAAAKY"]
[Wed Sep 30 00:55:08.495640 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.495922 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.585985 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.586262 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.600870 2026] [security2:error] [pid 178882:tid 179263] [client 20.214.145.90:28319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/yanz.php"] [unique_id "aryyTNqTm83YguA3303DkQAAAM8"]
[Wed Sep 30 00:55:08.602117 2026] [security2:error] [pid 178882:tid 179266] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyTNqTm83YguA3303DjwAAANI"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:08.666702 2026] [security2:error] [pid 178882:tid 179305] [client 20.219.14.152:26509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wordfence-waf.php"] [unique_id "aryyTNqTm83YguA3303DmgAAAPc"]
[Wed Sep 30 00:55:08.676108 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.676374 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.681195 2026] [security2:error] [pid 178882:tid 179224] [client 152.232.176.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "aryyTNqTm83YguA3303DnAAAAKo"]
[Wed Sep 30 00:55:08.681536 2026] [security2:error] [pid 178882:tid 179199] [client 20.194.30.107:8991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/mh.php"] [unique_id "aryyTNqTm83YguA3303DnQAAAJM"]
[Wed Sep 30 00:55:08.699479 2026] [security2:error] [pid 178882:tid 179197] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DnwAAAJE"]
[Wed Sep 30 00:55:08.764234 2026] [access_compat:error] [pid 178882:tid 179198] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:55:08.764557 2026] [access_compat:error] [pid 178882:tid 179198] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:55:08.772714 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.773010 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.780136 2026] [security2:error] [pid 178882:tid 179273] [client 116.72.182.19:52240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyTNqTm83YguA3303DpAAAANg"]
[Wed Sep 30 00:55:08.780916 2026] [security2:error] [pid 178882:tid 179273] [client 116.72.182.19:52240] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyTNqTm83YguA3303DpAAAANg"]
[Wed Sep 30 00:55:08.810947 2026] [security2:error] [pid 178882:tid 179260] [client 167.99.184.166:65500] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "davidtechnical.com"] [uri "/wp-json/batch/v1"] [unique_id "aryyTNqTm83YguA3303DpQAAAMw"]
[Wed Sep 30 00:55:08.816945 2026] [security2:error] [pid 178882:tid 179201] [client 20.251.39.228:28480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws88.php"] [unique_id "aryyTNqTm83YguA3303DpgAAAJU"]
[Wed Sep 30 00:55:08.864008 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.864457 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.878066 2026] [security2:error] [pid 178882:tid 179302] [client 20.214.145.90:38393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/config.php"] [unique_id "aryyTNqTm83YguA3303DsAAAAPQ"]
[Wed Sep 30 00:55:08.905309 2026] [security2:error] [pid 178882:tid 179300] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DswAAAPI"]
[Wed Sep 30 00:55:08.950535 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:08.950797 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:08.971021 2026] [security2:error] [pid 178882:tid 179238] [client 167.99.184.166:65505] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "davidtechnical.com"] [uri "/"] [unique_id "aryyTNqTm83YguA3303DtwAAALc"]
[Wed Sep 30 00:55:08.977167 2026] [security2:error] [pid 178882:tid 179319] [client 123.63.248.21:59127] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyTNqTm83YguA3303DuAAAAQM"]
[Wed Sep 30 00:55:08.977348 2026] [security2:error] [pid 178882:tid 179319] [client 123.63.248.21:59127] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyTNqTm83YguA3303DuAAAAQM"]
[Wed Sep 30 00:55:09.034134 2026] [security2:error] [pid 178882:tid 179229] [client 45.138.12.40:48908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dixonnapper.com.au"] [uri "/wp-links-opml.php"] [unique_id "aryyTdqTm83YguA3303DwAAAAK8"]
[Wed Sep 30 00:55:09.044903 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.045330 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.110597 2026] [security2:error] [pid 178882:tid 179278] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTdqTm83YguA3303DxgAAANw"]
[Wed Sep 30 00:55:09.117611 2026] [core:alert] [pid 178882:tid 179311] [client 67.205.178.88:0] /home4/geyserjz/public_html/grupodeina/.htaccess: </IfModule> without matching <IfModule> section, referer: https://www.grupodeina.geyserjz.com/
[Wed Sep 30 00:55:09.117902 2026] [security2:error] [pid 178882:tid 179280] [client 167.99.184.166:65510] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "davidtechnical.com"] [uri "/wp-json/batch/v1"] [unique_id "aryyTdqTm83YguA3303DyAAAAN4"]
[Wed Sep 30 00:55:09.131802 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.132081 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.152101 2026] [security2:error] [pid 178882:tid 179236] [client 20.219.14.152:26498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wp5.php"] [unique_id "aryyTdqTm83YguA3303DywAAALY"]
[Wed Sep 30 00:55:09.178020 2026] [security2:error] [pid 178882:tid 179226] [client 20.214.145.90:43455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/network.php"] [unique_id "aryyTdqTm83YguA3303DzAAAAKw"]
[Wed Sep 30 00:55:09.223178 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.223459 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.229963 2026] [security2:error] [pid 178882:tid 179268] [client 20.251.39.228:28500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws86.php"] [unique_id "aryyTdqTm83YguA3303D1gAAANQ"]
[Wed Sep 30 00:55:09.254300 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/first.php"] [unique_id "aryyTdqTm83YguA3303D2QAAAKo"]
[Wed Sep 30 00:55:09.291172 2026] [access_compat:error] [pid 178882:tid 179188] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:55:09.291450 2026] [access_compat:error] [pid 178882:tid 179188] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:55:09.291545 2026] [security2:error] [pid 178882:tid 179246] [client 20.28.180.172:29605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/dsfsa.php"] [unique_id "aryyTdqTm83YguA3303D3QAAAL4"]
[Wed Sep 30 00:55:09.314844 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.315119 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.315322 2026] [security2:error] [pid 178882:tid 179212] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTdqTm83YguA3303D4AAAAJ4"]
[Wed Sep 30 00:55:09.348462 2026] [security2:error] [pid 178882:tid 179198] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyTdqTm83YguA3303D4wAAAJI"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:09.408212 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.408644 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.432845 2026] [security2:error] [pid 178882:tid 179264] [client 124.70.179.238:44708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.179.70.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "aryyTdqTm83YguA3303D5QAAANA"], referer: https://hairdefinitions.co.uk/wp-login.php
[Wed Sep 30 00:55:09.460401 2026] [security2:error] [pid 178882:tid 179302] [client 20.214.145.90:43431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-2019.php"] [unique_id "aryyTdqTm83YguA3303D6AAAAPQ"]
[Wed Sep 30 00:55:09.496371 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.496646 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.511437 2026] [security2:error] [pid 178882:tid 179284] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyTdqTm83YguA3303D7AAAAOI"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:09.519919 2026] [security2:error] [pid 178882:tid 179205] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTdqTm83YguA3303D7wAAAJg"]
[Wed Sep 30 00:55:09.554408 2026] [security2:error] [pid 178882:tid 179229] [client 136.242.100.146:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "aryyTdqTm83YguA3303D8gAAAK8"]
[Wed Sep 30 00:55:09.591456 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.591883 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.655424 2026] [security2:error] [pid 178882:tid 179311] [client 20.219.2.60:10678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/gcqoa.php"] [unique_id "aryyTdqTm83YguA3303D_QAAAPw"]
[Wed Sep 30 00:55:09.681774 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.682213 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.687767 2026] [security2:error] [pid 178882:tid 179191] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyTdqTm83YguA3303D_wAAAIs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:09.698793 2026] [security2:error] [pid 178882:tid 179217] [client 20.194.30.107:14420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/mh.php"] [unique_id "aryyTdqTm83YguA3303EAQAAAKM"]
[Wed Sep 30 00:55:09.716488 2026] [security2:error] [pid 178882:tid 179226] [client 20.251.39.228:5998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/vx.php"] [unique_id "aryyTdqTm83YguA3303EBQAAAKw"]
[Wed Sep 30 00:55:09.725559 2026] [security2:error] [pid 178882:tid 179252] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTdqTm83YguA3303EBgAAAMQ"]
[Wed Sep 30 00:55:09.739534 2026] [security2:error] [pid 178882:tid 179263] [client 20.214.145.90:38358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/bypass.php"] [unique_id "aryyTdqTm83YguA3303ECAAAAM8"]
[Wed Sep 30 00:55:09.757910 2026] [access_compat:error] [pid 178882:tid 179211] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:55:09.758182 2026] [access_compat:error] [pid 178882:tid 179211] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:55:09.772682 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:09.772988 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:09.860837 2026] [security2:error] [pid 178882:tid 179305] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyTdqTm83YguA3303EDQAAAPc"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:09.882162 2026] [security2:error] [pid 178882:tid 179276] [client 20.219.2.60:36734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/gettest.php"] [unique_id "aryyTdqTm83YguA3303EDwAAANo"]
[Wed Sep 30 00:55:09.890012 2026] [security2:error] [pid 178882:tid 179228] [client 116.197.133.25:50013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyTdqTm83YguA3303EEAAAAK4"]
[Wed Sep 30 00:55:09.890157 2026] [security2:error] [pid 178882:tid 179228] [client 116.197.133.25:50013] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyTdqTm83YguA3303EEAAAAK4"]
[Wed Sep 30 00:55:09.905172 2026] [security2:error] [pid 178882:tid 179313] [client 20.219.14.152:26420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/em.php"] [unique_id "aryyTdqTm83YguA3303EEgAAAP0"]
[Wed Sep 30 00:55:09.930278 2026] [security2:error] [pid 178882:tid 179244] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTdqTm83YguA3303EFgAAALw"]
[Wed Sep 30 00:55:09.960175 2026] [security2:error] [pid 178882:tid 179188] [client 20.70.173.30:25111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/edit.php"] [unique_id "aryyTdqTm83YguA3303EGAAAAIg"]
[Wed Sep 30 00:55:09.989004 2026] [security2:error] [pid 178882:tid 179256] [client 4.196.65.241:27281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/kbqhb.php"] [unique_id "aryyTdqTm83YguA3303EGQAAAMg"]
[Wed Sep 30 00:55:10.026828 2026] [security2:error] [pid 178882:tid 179307] [client 20.214.145.90:28325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aryyTtqTm83YguA3303EGgAAAPk"]
[Wed Sep 30 00:55:10.038658 2026] [security2:error] [pid 178882:tid 179259] [client 20.204.42.136:28140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/000.php"] [unique_id "aryyTtqTm83YguA3303EHQAAAMs"]
[Wed Sep 30 00:55:10.068486 2026] [security2:error] [pid 178882:tid 179303] [client 116.193.128.26:50198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EIAAAAPU"]
[Wed Sep 30 00:55:10.068635 2026] [security2:error] [pid 178882:tid 179303] [client 116.193.128.26:50198] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EIAAAAPU"]
[Wed Sep 30 00:55:10.070007 2026] [access_compat:error] [pid 178882:tid 179216] [client 47.79.13.172:38462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:10.070257 2026] [access_compat:error] [pid 178882:tid 179216] [client 47.79.13.172:38462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:10.072753 2026] [security2:error] [pid 178882:tid 179260] [client 4.240.25.22:63774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/tool.php"] [unique_id "aryyTtqTm83YguA3303EIgAAAMw"]
[Wed Sep 30 00:55:10.118564 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.118823 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.125448 2026] [security2:error] [pid 178882:tid 179282] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyTtqTm83YguA3303EJgAAAOA"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:10.137534 2026] [security2:error] [pid 178882:tid 179265] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTtqTm83YguA3303EKwAAANE"]
[Wed Sep 30 00:55:10.140099 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.140382 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.171143 2026] [security2:error] [pid 178882:tid 179238] [client 152.59.169.65:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303ELAAAALc"]
[Wed Sep 30 00:55:10.171331 2026] [security2:error] [pid 178882:tid 179238] [client 152.59.169.65:61676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303ELAAAALc"]
[Wed Sep 30 00:55:10.181506 2026] [security2:error] [pid 178882:tid 179142] [remote 57.141.14.101:38770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EKAAAzlg"]
[Wed Sep 30 00:55:10.184599 2026] [security2:error] [pid 178882:tid 179187] [client 20.251.39.228:48458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/dass.php"] [unique_id "aryyTtqTm83YguA3303ELQAAAIc"]
[Wed Sep 30 00:55:10.227028 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.227316 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.227466 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.227737 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.247846 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.248105 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.271337 2026] [access_compat:error] [pid 178882:tid 179272] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:55:10.271608 2026] [access_compat:error] [pid 178882:tid 179272] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:55:10.319189 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.319709 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.343143 2026] [security2:error] [pid 178882:tid 179271] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTtqTm83YguA3303EQQAAANY"]
[Wed Sep 30 00:55:10.347405 2026] [security2:error] [pid 178882:tid 179317] [client 20.219.2.60:19392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/redixsx.php"] [unique_id "aryyTtqTm83YguA3303EQwAAAQE"]
[Wed Sep 30 00:55:10.395725 2026] [security2:error] [pid 178882:tid 179191] [client 20.214.145.90:28311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aryyTtqTm83YguA3303EQAAAAIs"]
[Wed Sep 30 00:55:10.407710 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.407967 2026] [security2:error] [pid 178882:tid 179298] [client 103.159.192.142:54950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303ETAAAAPA"]
[Wed Sep 30 00:55:10.408017 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.408116 2026] [security2:error] [pid 178882:tid 179298] [client 103.159.192.142:54950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303ETAAAAPA"]
[Wed Sep 30 00:55:10.424529 2026] [security2:error] [pid 178882:tid 179236] [client 20.219.14.152:26399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/hp.php"] [unique_id "aryyTtqTm83YguA3303EUQAAALY"]
[Wed Sep 30 00:55:10.424778 2026] [security2:error] [pid 178882:tid 179255] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyTtqTm83YguA3303ETgAAAMc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:10.442103 2026] [security2:error] [pid 178882:tid 179169] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyTtqTm83YguA3303EUgAA43M"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D54492
[Wed Sep 30 00:55:10.499133 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.499573 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:14681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.505868 2026] [security2:error] [pid 178882:tid 179246] [client 20.251.39.228:17642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/s.php"] [unique_id "aryyTtqTm83YguA3303EWQAAAL4"]
[Wed Sep 30 00:55:10.534143 2026] [access_compat:error] [pid 178882:tid 179226] [client 47.79.13.37:52608] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:10.534412 2026] [access_compat:error] [pid 178882:tid 179226] [client 47.79.13.37:52608] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:10.549653 2026] [security2:error] [pid 178882:tid 179289] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTtqTm83YguA3303EXQAAAOc"]
[Wed Sep 30 00:55:10.555130 2026] [security2:error] [pid 178882:tid 179188] [client 127.0.0.1:44854] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryyTtqTm83YguA3303EVgAAAIg"]
[Wed Sep 30 00:55:10.555393 2026] [security2:error] [pid 178882:tid 179224] [client 74.7.228.60:34814] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.saz.uiz.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryyTtqTm83YguA3303EVQAAqnA"]
[Wed Sep 30 00:55:10.558783 2026] [security2:error] [pid 178882:tid 179212] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyTtqTm83YguA3303EXgAAAJ4"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:10.560188 2026] [security2:error] [pid 178882:tid 179217] [client 168.107.70.193:59110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.motoincorporated.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "aryyTtqTm83YguA3303EXwAAAKM"]
[Wed Sep 30 00:55:10.588699 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.588983 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.679177 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.679448 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.695982 2026] [security2:error] [pid 178882:tid 179288] [client 216.73.216.46:14681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyTtqTm83YguA3303EawAAAOY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODEvbm9kZTAvY3B1OC9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:10.709387 2026] [security2:error] [pid 178882:tid 179315] [client 20.214.145.90:28624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/tiny.php"] [unique_id "aryyTtqTm83YguA3303EbgAAAP8"]
[Wed Sep 30 00:55:10.738341 2026] [security2:error] [pid 178882:tid 179190] [client 20.219.2.60:11053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/plugin-editor.php"] [unique_id "aryyTtqTm83YguA3303EcwAAAIo"]
[Wed Sep 30 00:55:10.753326 2026] [security2:error] [pid 178882:tid 179299] [client 182.69.182.151:17654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EdQAAAPE"]
[Wed Sep 30 00:55:10.753415 2026] [security2:error] [pid 178882:tid 179299] [client 182.69.182.151:17654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EdQAAAPE"]
[Wed Sep 30 00:55:10.755428 2026] [security2:error] [pid 178882:tid 179319] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTtqTm83YguA3303EdAAAAQM"]
[Wed Sep 30 00:55:10.770498 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.770772 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.790721 2026] [security2:error] [pid 178882:tid 179227] [client 138.3.211.255:58785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.211.3.138.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui.co.uk"] [uri "/wp-links-opml.php"] [unique_id "aryyTtqTm83YguA3303EdwAAAK0"]
[Wed Sep 30 00:55:10.827996 2026] [security2:error] [pid 178882:tid 179191] [client 20.251.39.228:28498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/kj.php"] [unique_id "aryyTtqTm83YguA3303EgAAAAIs"]
[Wed Sep 30 00:55:10.831382 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:55:10.831675 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:55:10.866116 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.866540 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.897674 2026] [security2:error] [pid 178882:tid 179263] [client 20.219.14.152:26377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wpuse.php"] [unique_id "aryyTtqTm83YguA3303EhQAAAM8"]
[Wed Sep 30 00:55:10.926371 2026] [security2:error] [pid 178882:tid 179194] [client 103.172.210.103:53403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EiQAAAI4"]
[Wed Sep 30 00:55:10.926509 2026] [security2:error] [pid 178882:tid 179194] [client 103.172.210.103:53403] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyTtqTm83YguA3303EiQAAAI4"]
[Wed Sep 30 00:55:10.936653 2026] [security2:error] [pid 178882:tid 179285] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyTtqTm83YguA3303EigAAAOM"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:10.950611 2026] [security2:error] [pid 178882:tid 179222] [client 20.198.74.230:24135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/asax.php"] [unique_id "aryyTtqTm83YguA3303EkAAAAKg"]
[Wed Sep 30 00:55:10.950693 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:10.951012 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:10.961206 2026] [security2:error] [pid 178882:tid 179290] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyTtqTm83YguA3303EkQAAAOg"]
[Wed Sep 30 00:55:10.969722 2026] [security2:error] [pid 178882:tid 179244] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyTtqTm83YguA3303EkgAAALw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:10.977873 2026] [security2:error] [pid 178882:tid 179259] [client 20.204.161.246:48822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/nauik.php"] [unique_id "aryyTtqTm83YguA3303ElAAAAMs"]
[Wed Sep 30 00:55:11.019307 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.145.90:43395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/lock.php"] [unique_id "aryyT9qTm83YguA3303ElgAAAPU"]
[Wed Sep 30 00:55:11.028784 2026] [access_compat:error] [pid 178882:tid 179311] [client 47.79.13.178:35830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:11.029073 2026] [access_compat:error] [pid 178882:tid 179311] [client 47.79.13.178:35830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:11.043682 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.044080 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.116457 2026] [security2:error] [pid 178882:tid 179100] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyT9qTm83YguA3303EogAAtDA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302212&sid=a444f632246f0ccf1192a1ff430c356c
[Wed Sep 30 00:55:11.116493 2026] [security2:error] [pid 178882:tid 179100] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyT9qTm83YguA3303EogAAtDA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302212&sid=a444f632246f0ccf1192a1ff430c356c
[Wed Sep 30 00:55:11.134940 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.135198 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:58296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.171357 2026] [security2:error] [pid 178882:tid 179288] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyT9qTm83YguA3303EqwAAAOY"]
[Wed Sep 30 00:55:11.193469 2026] [security2:error] [pid 178882:tid 179190] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyT9qTm83YguA3303ErQAAAIo"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:11.194549 2026] [security2:error] [pid 178882:tid 179299] [client 20.251.39.228:32834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws83.php"] [unique_id "aryyT9qTm83YguA3303ErwAAAPE"]
[Wed Sep 30 00:55:11.214243 2026] [security2:error] [pid 178882:tid 179227] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyT9qTm83YguA3303EswAAAK0"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:11.225194 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.225456 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.264568 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:55:11.264944 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:55:11.281548 2026] [security2:error] [pid 178882:tid 179254] [client 4.240.25.22:63791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/az.php"] [unique_id "aryyT9qTm83YguA3303EuAAAAMY"]
[Wed Sep 30 00:55:11.317247 2026] [security2:error] [pid 178882:tid 179301] [client 201.3.156.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "aryyT9qTm83YguA3303EvwAAAPM"]
[Wed Sep 30 00:55:11.317600 2026] [security2:error] [pid 178882:tid 179236] [client 20.214.145.90:28300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/mail.php"] [unique_id "aryyT9qTm83YguA3303EwQAAALY"]
[Wed Sep 30 00:55:11.319706 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.319998 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.332076 2026] [security2:error] [pid 178882:tid 179305] [client 216.73.216.46:58296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyT9qTm83YguA3303ExAAAAPc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxMy9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MA%3D%3D
[Wed Sep 30 00:55:11.363272 2026] [security2:error] [pid 178882:tid 179263] [client 103.168.66.101:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyT9qTm83YguA3303ExQAAAM8"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:11.379057 2026] [security2:error] [pid 178882:tid 179295] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyT9qTm83YguA3303ExgAAAO0"]
[Wed Sep 30 00:55:11.409518 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.409945 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.500851 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.501281 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.502109 2026] [security2:error] [pid 178882:tid 179302] [client 43.104.4.217:32875] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "aryyT9qTm83YguA3303EzgAAAPQ"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:55:11.503738 2026] [security2:error] [pid 178882:tid 179206] [client 20.219.14.152:26375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/file18x.php"] [unique_id "aryyT9qTm83YguA3303EzwAAAJk"]
[Wed Sep 30 00:55:11.540776 2026] [security2:error] [pid 178882:tid 179303] [client 20.219.2.60:18877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/cpp2.php"] [unique_id "aryyT9qTm83YguA3303E0AAAAPU"]
[Wed Sep 30 00:55:11.584997 2026] [security2:error] [pid 178882:tid 179311] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyT9qTm83YguA3303E1AAAAPw"]
[Wed Sep 30 00:55:11.590216 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.590500 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.590523 2026] [security2:error] [pid 178882:tid 179250] [client 43.104.4.188:27176] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aryyT9qTm83YguA3303E1QAAAMI"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:55:11.606715 2026] [security2:error] [pid 178882:tid 179217] [client 20.214.145.90:43435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/system_log.php"] [unique_id "aryyT9qTm83YguA3303E1wAAAKM"]
[Wed Sep 30 00:55:11.636314 2026] [security2:error] [pid 178882:tid 179210] [client 20.198.74.230:24138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/esp.php"] [unique_id "aryyT9qTm83YguA3303E3QAAAJw"]
[Wed Sep 30 00:55:11.673367 2026] [security2:error] [pid 178882:tid 179234] [client 20.251.39.228:32844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws75.php"] [unique_id "aryyT9qTm83YguA3303E3wAAALQ"]
[Wed Sep 30 00:55:11.680347 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.680642 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.692947 2026] [security2:error] [pid 178882:tid 179293] [client 213.136.69.135:60922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/block-bindings.php"] [unique_id "aryyT9qTm83YguA3303E4AAAAOs"], referer: binance.com
[Wed Sep 30 00:55:11.711893 2026] [security2:error] [pid 178882:tid 179091] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyT9qTm83YguA3303E4QAAtyc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0ca84cf55098e150b8b8ca7b0887a589&start=15&t=17668
[Wed Sep 30 00:55:11.711919 2026] [security2:error] [pid 178882:tid 179091] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyT9qTm83YguA3303E4QAAtyc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0ca84cf55098e150b8b8ca7b0887a589&start=15&t=17668
[Wed Sep 30 00:55:11.765985 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:55:11.766297 2026] [access_compat:error] [pid 178882:tid 179286] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:55:11.769563 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.769849 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.792539 2026] [security2:error] [pid 178882:tid 179232] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyT9qTm83YguA3303E6AAAALI"]
[Wed Sep 30 00:55:11.808666 2026] [ssl:error] [pid 178882:tid 179266] [client 216.25.124.25:26569] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcontacts.yqn.mly.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:55:11.830756 2026] [security2:error] [pid 178882:tid 179282] [client 43.104.4.227:59493] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "aryyT9qTm83YguA3303E6gAAAOA"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:55:11.862947 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.863215 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.895504 2026] [security2:error] [pid 178882:tid 179317] [client 124.70.179.238:37944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.179.70.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "aryyT9qTm83YguA3303E7wAAAQE"], referer: https://hairdefinitions.co.uk/wp-login.php
[Wed Sep 30 00:55:11.942792 2026] [security2:error] [pid 178882:tid 179309] [client 20.214.145.90:38366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/file.php"] [unique_id "aryyT9qTm83YguA3303E8gAAAPo"]
[Wed Sep 30 00:55:11.948255 2026] [security2:error] [pid 178882:tid 179158] [remote 220.181.108.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyT9qTm83YguA3303E8AAAnWg"]
[Wed Sep 30 00:55:11.953402 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:11.953657 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:11.958011 2026] [security2:error] [pid 178882:tid 179200] [client 20.219.14.152:26461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/123viva.php"] [unique_id "aryyT9qTm83YguA3303E9QAAAJQ"]
[Wed Sep 30 00:55:11.979105 2026] [security2:error] [pid 178882:tid 179294] [client 167.71.201.22:51786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.201.71.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "aryyT9qTm83YguA3303E9AAAAOw"], referer: https://spectastore.com.ng/wp-login.php
[Wed Sep 30 00:55:11.998215 2026] [security2:error] [pid 178882:tid 179203] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyT9qTm83YguA3303E9wAAAJY"]
[Wed Sep 30 00:55:12.017065 2026] [security2:error] [pid 178882:tid 179196] [client 150.107.232.159:35639] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303E-QAAAJA"]
[Wed Sep 30 00:55:12.017180 2026] [security2:error] [pid 178882:tid 179196] [client 150.107.232.159:35639] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303E-QAAAJA"]
[Wed Sep 30 00:55:12.034150 2026] [security2:error] [pid 178882:tid 179242] [client 20.28.180.172:29589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wdone1.php"] [unique_id "aryyUNqTm83YguA3303E-gAAALo"]
[Wed Sep 30 00:55:12.044936 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.045192 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.124401 2026] [access_compat:error] [pid 178882:tid 179264] [client 47.79.13.175:44236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:12.124653 2026] [access_compat:error] [pid 178882:tid 179264] [client 47.79.13.175:44236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:12.134156 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.134414 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.194165 2026] [security2:error] [pid 178882:tid 179306] [client 20.251.39.228:13284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ms-edit.php"] [unique_id "aryyUNqTm83YguA3303FDAAAAPg"]
[Wed Sep 30 00:55:12.203940 2026] [security2:error] [pid 178882:tid 179224] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUNqTm83YguA3303FDQAAAKo"]
[Wed Sep 30 00:55:12.227773 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.228068 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.230007 2026] [security2:error] [pid 178882:tid 179217] [client 20.204.42.136:27919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wp5.php"] [unique_id "aryyUNqTm83YguA3303FEQAAAKM"]
[Wed Sep 30 00:55:12.233168 2026] [access_compat:error] [pid 178882:tid 179188] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:55:12.233458 2026] [access_compat:error] [pid 178882:tid 179188] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:55:12.303765 2026] [security2:error] [pid 178882:tid 179293] [client 20.214.145.90:38385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aryyUNqTm83YguA3303FFAAAAOs"]
[Wed Sep 30 00:55:12.318790 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.319092 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.370173 2026] [security2:error] [pid 178882:tid 179213] [client 202.179.95.79:65462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FGAAAAJ8"]
[Wed Sep 30 00:55:12.370312 2026] [security2:error] [pid 178882:tid 179213] [client 202.179.95.79:65462] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FGAAAAJ8"]
[Wed Sep 30 00:55:12.383026 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:11009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/plugin-install.php"] [unique_id "aryyUNqTm83YguA3303FGgAAAP4"]
[Wed Sep 30 00:55:12.408599 2026] [security2:error] [pid 178882:tid 179257] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUNqTm83YguA3303FHQAAAMk"]
[Wed Sep 30 00:55:12.413270 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.413675 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.434676 2026] [security2:error] [pid 178882:tid 179299] [client 20.219.14.152:26444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/Components.update.php"] [unique_id "aryyUNqTm83YguA3303FHgAAAPE"]
[Wed Sep 30 00:55:12.498482 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.498740 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.552522 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.165.7:59291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FJQAAAMc"]
[Wed Sep 30 00:55:12.554103 2026] [security2:error] [pid 178882:tid 179255] [client 152.59.165.7:59291] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FJQAAAMc"]
[Wed Sep 30 00:55:12.582866 2026] [security2:error] [pid 178882:tid 179305] [client 103.166.103.39:59458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.103.166.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FJgAAAPc"]
[Wed Sep 30 00:55:12.582978 2026] [security2:error] [pid 178882:tid 179305] [client 103.166.103.39:59458] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FJgAAAPc"]
[Wed Sep 30 00:55:12.591432 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.591714 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.620683 2026] [security2:error] [pid 178882:tid 179200] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUNqTm83YguA3303FKQAAAJQ"]
[Wed Sep 30 00:55:12.632806 2026] [security2:error] [pid 178882:tid 179251] [client 20.198.74.230:23931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/UT6UJndefault.php"] [unique_id "aryyUNqTm83YguA3303FKgAAAMM"]
[Wed Sep 30 00:55:12.680867 2026] [security2:error] [pid 178882:tid 179277] [client 20.214.145.90:38390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aryyUNqTm83YguA3303FLQAAANs"]
[Wed Sep 30 00:55:12.682188 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.682578 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.708209 2026] [security2:error] [pid 178882:tid 179219] [client 20.219.2.60:18879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/admlo.php"] [unique_id "aryyUNqTm83YguA3303FLgAAAKU"]
[Wed Sep 30 00:55:12.727937 2026] [security2:error] [pid 178882:tid 179125] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyUNqTm83YguA3303FLwAA8kc"]
[Wed Sep 30 00:55:12.738399 2026] [access_compat:error] [pid 178882:tid 179242] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:55:12.738672 2026] [access_compat:error] [pid 178882:tid 179242] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:55:12.777089 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.777515 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.806780 2026] [security2:error] [pid 178882:tid 179316] [client 72.255.10.32:53747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FNgAAAQA"]
[Wed Sep 30 00:55:12.806918 2026] [security2:error] [pid 178882:tid 179316] [client 72.255.10.32:53747] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FNgAAAQA"]
[Wed Sep 30 00:55:12.826413 2026] [security2:error] [pid 178882:tid 179290] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUNqTm83YguA3303FNwAAAOg"]
[Wed Sep 30 00:55:12.863098 2026] [security2:error] [pid 178882:tid 179318] [client 20.251.39.228:23964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/abc.php"] [unique_id "aryyUNqTm83YguA3303FOgAAAQI"]
[Wed Sep 30 00:55:12.864683 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.864951 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:12.872423 2026] [security2:error] [pid 178882:tid 179069] [remote 220.181.108.177:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyUNqTm83YguA3303FOQAAlhE"]
[Wed Sep 30 00:55:12.908065 2026] [security2:error] [pid 178882:tid 179076] [remote 74.7.227.56:37640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyUNqTm83YguA3303FOwAA1hg"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:55:12.915933 2026] [security2:error] [pid 178882:tid 179247] [client 20.219.14.152:26520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/sm.php"] [unique_id "aryyUNqTm83YguA3303FPQAAAL8"]
[Wed Sep 30 00:55:12.948118 2026] [security2:error] [pid 178882:tid 179190] [client 203.122.45.246:49748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FQQAAAIo"]
[Wed Sep 30 00:55:12.948278 2026] [security2:error] [pid 178882:tid 179190] [client 203.122.45.246:49748] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyUNqTm83YguA3303FQQAAAIo"]
[Wed Sep 30 00:55:12.959342 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:12.959600 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.032169 2026] [security2:error] [pid 178882:tid 179197] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUdqTm83YguA3303FSQAAAJE"]
[Wed Sep 30 00:55:13.046922 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.047179 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.063960 2026] [security2:error] [pid 178882:tid 179220] [client 49.36.41.37:57609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FSwAAAKY"]
[Wed Sep 30 00:55:13.065834 2026] [security2:error] [pid 178882:tid 179220] [client 49.36.41.37:57609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FSwAAAKY"]
[Wed Sep 30 00:55:13.071564 2026] [security2:error] [pid 178882:tid 179249] [client 223.181.30.165:9808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FTAAAAME"]
[Wed Sep 30 00:55:13.071653 2026] [security2:error] [pid 178882:tid 179249] [client 223.181.30.165:9808] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FTAAAAME"]
[Wed Sep 30 00:55:13.118403 2026] [security2:error] [pid 178882:tid 179269] [client 20.214.145.90:28304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/manager.php"] [unique_id "aryyUdqTm83YguA3303FUAAAANU"]
[Wed Sep 30 00:55:13.136879 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.137141 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.189257 2026] [security2:error] [pid 178882:tid 179056] [remote 57.141.14.47:29462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FUgAArAQ"]
[Wed Sep 30 00:55:13.198884 2026] [security2:error] [pid 178882:tid 179211] [client 39.44.16.112:64520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FVwAAAJ0"]
[Wed Sep 30 00:55:13.199684 2026] [security2:error] [pid 178882:tid 179211] [client 39.44.16.112:64520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FVwAAAJ0"]
[Wed Sep 30 00:55:13.226286 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.226550 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.239035 2026] [security2:error] [pid 178882:tid 179266] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUdqTm83YguA3303FXAAAANI"]
[Wed Sep 30 00:55:13.252703 2026] [security2:error] [pid 178882:tid 179239] [client 20.251.39.228:5589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/motu.php"] [unique_id "aryyUdqTm83YguA3303FXgAAALg"]
[Wed Sep 30 00:55:13.276842 2026] [access_compat:error] [pid 178882:tid 179255] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:55:13.277209 2026] [access_compat:error] [pid 178882:tid 179255] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:55:13.304818 2026] [security2:error] [pid 178882:tid 179268] [client 20.194.30.107:57596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/cycfruf.php"] [unique_id "aryyUdqTm83YguA3303FYwAAANQ"]
[Wed Sep 30 00:55:13.319031 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.319297 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.392277 2026] [security2:error] [pid 178882:tid 179195] [client 223.235.102.107:11809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FaQAAAI8"]
[Wed Sep 30 00:55:13.392447 2026] [security2:error] [pid 178882:tid 179195] [client 223.235.102.107:11809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FaQAAAI8"]
[Wed Sep 30 00:55:13.401327 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.14.152:26490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/mknobgkg.php"] [unique_id "aryyUdqTm83YguA3303FbAAAAJ4"]
[Wed Sep 30 00:55:13.415230 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.415652 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.417082 2026] [security2:error] [pid 178882:tid 179315] [client 20.214.145.90:28338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/plugins/pwnd/as.php"] [unique_id "aryyUdqTm83YguA3303FbwAAAP8"]
[Wed Sep 30 00:55:13.438521 2026] [security2:error] [pid 178882:tid 179306] [client 43.227.131.37:12300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FcQAAAPg"]
[Wed Sep 30 00:55:13.438696 2026] [security2:error] [pid 178882:tid 179306] [client 43.227.131.37:12300] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FcQAAAPg"]
[Wed Sep 30 00:55:13.441425 2026] [security2:error] [pid 178882:tid 179109] [remote 223.19.254.61:35806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.254.19.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-login.php"] [unique_id "aryyUdqTm83YguA3303FawAA3jk"], referer: https://casanoelectric.com/wp-login.php
[Wed Sep 30 00:55:13.446222 2026] [security2:error] [pid 178882:tid 179265] [client 167.71.201.22:45684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.201.71.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "aryyUdqTm83YguA3303FdAAAANE"], referer: https://spectastore.com.ng/wp-login.php
[Wed Sep 30 00:55:13.446743 2026] [security2:error] [pid 178882:tid 179277] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUdqTm83YguA3303FcwAAANs"]
[Wed Sep 30 00:55:13.503064 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.503365 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.521742 2026] [security2:error] [pid 178882:tid 179290] [client 20.70.173.30:63724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/robots.php"] [unique_id "aryyUdqTm83YguA3303FewAAAOg"]
[Wed Sep 30 00:55:13.535611 2026] [security2:error] [pid 178882:tid 179243] [client 20.219.2.60:36807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/myfile.php"] [unique_id "aryyUdqTm83YguA3303FfAAAALs"]
[Wed Sep 30 00:55:13.546892 2026] [security2:error] [pid 178882:tid 179192] [client 103.168.66.101:24104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/wordpress/index.php"] [unique_id "aryyUdqTm83YguA3303FfQAAAIw"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:13.550001 2026] [security2:error] [pid 178882:tid 179186] [client 45.138.12.32:13670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sio.bzy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyUdqTm83YguA3303FfgAAAIY"]
[Wed Sep 30 00:55:13.599638 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.600068 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.611582 2026] [security2:error] [pid 178882:tid 179293] [client 103.148.43.14:55027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FgwAAAOs"]
[Wed Sep 30 00:55:13.611845 2026] [security2:error] [pid 178882:tid 179293] [client 103.148.43.14:55027] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FgwAAAOs"]
[Wed Sep 30 00:55:13.638283 2026] [access_compat:error] [pid 178882:tid 179275] [client 47.79.13.78:39812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:13.638551 2026] [access_compat:error] [pid 178882:tid 179275] [client 47.79.13.78:39812] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:13.645009 2026] [security2:error] [pid 178882:tid 179303] [client 20.219.2.60:10661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/profile.php"] [unique_id "aryyUdqTm83YguA3303FiQAAAPU"]
[Wed Sep 30 00:55:13.652593 2026] [security2:error] [pid 178882:tid 179272] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUdqTm83YguA3303FiwAAANc"]
[Wed Sep 30 00:55:13.656577 2026] [autoindex:error] [pid 178882:tid 179271] [client 172.195.104.24:39141] AH01276: Cannot serve directory /home4/muranoav/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:13.659119 2026] [security2:error] [pid 178882:tid 179215] [client 20.251.39.228:26783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/inputs.php"] [unique_id "aryyUdqTm83YguA3303FjAAAAKE"]
[Wed Sep 30 00:55:13.683368 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.683626 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.775030 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.775317 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.788775 2026] [access_compat:error] [pid 178882:tid 179226] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:55:13.789053 2026] [access_compat:error] [pid 178882:tid 179226] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:55:13.811510 2026] [security2:error] [pid 178882:tid 179218] [client 20.214.145.90:43430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-configs.php"] [unique_id "aryyUdqTm83YguA3303FmAAAAKQ"]
[Wed Sep 30 00:55:13.857438 2026] [security2:error] [pid 178882:tid 179267] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUdqTm83YguA3303FnAAAANM"]
[Wed Sep 30 00:55:13.865307 2026] [security2:error] [pid 178882:tid 179261] [client 45.156.62.96:56860] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FkgAAAM0"]
[Wed Sep 30 00:55:13.866876 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.867164 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:13.885866 2026] [security2:error] [pid 178882:tid 179227] [client 20.219.14.152:26526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/dairg.php"] [unique_id "aryyUdqTm83YguA3303FngAAAK0"]
[Wed Sep 30 00:55:13.942961 2026] [security2:error] [pid 178882:tid 179294] [client 103.159.192.142:55185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FnwAAAOw"]
[Wed Sep 30 00:55:13.943106 2026] [security2:error] [pid 178882:tid 179294] [client 103.159.192.142:55185] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyUdqTm83YguA3303FnwAAAOw"]
[Wed Sep 30 00:55:13.957017 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:13.957297 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.000727 2026] [access_compat:error] [pid 178882:tid 179199] [client 47.79.13.213:37700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.001174 2026] [access_compat:error] [pid 178882:tid 179199] [client 47.79.13.213:37700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.048225 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.048496 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.064063 2026] [security2:error] [pid 178882:tid 179225] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUtqTm83YguA3303FrAAAAKs"]
[Wed Sep 30 00:55:14.084618 2026] [security2:error] [pid 178882:tid 179264] [client 4.240.25.22:22207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/133.php"] [unique_id "aryyUtqTm83YguA3303FsQAAANA"]
[Wed Sep 30 00:55:14.138788 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.139078 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.169938 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.145.90:28310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aryyUtqTm83YguA3303FuQAAAPU"]
[Wed Sep 30 00:55:14.190281 2026] [security2:error] [pid 178882:tid 179210] [client 20.251.39.228:7886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp9.php"] [unique_id "aryyUtqTm83YguA3303FugAAAJw"]
[Wed Sep 30 00:55:14.230126 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.230389 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.233577 2026] [access_compat:error] [pid 178882:tid 179300] [client 47.79.13.158:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.233843 2026] [access_compat:error] [pid 178882:tid 179300] [client 47.79.13.158:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.260395 2026] [access_compat:error] [pid 178882:tid 179234] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:55:14.260652 2026] [access_compat:error] [pid 178882:tid 179234] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:55:14.269058 2026] [security2:error] [pid 178882:tid 179244] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUtqTm83YguA3303FwQAAALw"]
[Wed Sep 30 00:55:14.273346 2026] [security2:error] [pid 178882:tid 179310] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyUtqTm83YguA3303FwgAAAPs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:14.321612 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.321904 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.354541 2026] [security2:error] [pid 178882:tid 179250] [client 20.219.14.152:26459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/dronishness.php"] [unique_id "aryyUtqTm83YguA3303FxQAAAMI"]
[Wed Sep 30 00:55:14.412467 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.412891 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.472197 2026] [security2:error] [pid 178882:tid 179191] [client 20.194.30.107:37399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/amax.php"] [unique_id "aryyUtqTm83YguA3303FxwAAAIs"]
[Wed Sep 30 00:55:14.474888 2026] [security2:error] [pid 178882:tid 179299] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUtqTm83YguA3303FyAAAAPE"]
[Wed Sep 30 00:55:14.475023 2026] [security2:error] [pid 178882:tid 179208] [client 20.204.161.246:48102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wander.php"] [unique_id "aryyUtqTm83YguA3303FyQAAAJo"]
[Wed Sep 30 00:55:14.492286 2026] [security2:error] [pid 178882:tid 179282] [client 20.214.145.90:28288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aryyUtqTm83YguA3303FywAAAOA"]
[Wed Sep 30 00:55:14.502396 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.502672 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.529539 2026] [security2:error] [pid 178882:tid 179078] [remote 162.241.217.198:27380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.217.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "aryyUtqTm83YguA3303FzwAA1Bo"]
[Wed Sep 30 00:55:14.533629 2026] [security2:error] [pid 178882:tid 179287] [client 49.205.105.16:13988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F0wAAAOU"]
[Wed Sep 30 00:55:14.533777 2026] [security2:error] [pid 178882:tid 179287] [client 49.205.105.16:13988] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F0wAAAOU"]
[Wed Sep 30 00:55:14.534035 2026] [security2:error] [pid 178882:tid 179082] [remote 162.241.217.198:27380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.217.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "aryyUtqTm83YguA3303F0gAA0h4"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 00:55:14.552519 2026] [security2:error] [pid 178882:tid 179132] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyUtqTm83YguA3303F1QAA4k4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=98bb3495ff8a133b9a9b19837a303f38&start=15&t=14554
[Wed Sep 30 00:55:14.552543 2026] [security2:error] [pid 178882:tid 179132] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyUtqTm83YguA3303F1QAA4k4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=98bb3495ff8a133b9a9b19837a303f38&start=15&t=14554
[Wed Sep 30 00:55:14.556048 2026] [security2:error] [pid 178882:tid 179092] [remote 162.241.217.198:27380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.217.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F1AAAhyg"]
[Wed Sep 30 00:55:14.556215 2026] [security2:error] [pid 178882:tid 179187] [client 162.241.217.198:27380] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "japaneseclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F1AAAhyg"]
[Wed Sep 30 00:55:14.576852 2026] [security2:error] [pid 178882:tid 179309] [client 20.251.39.228:26778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/public/vx.php"] [unique_id "aryyUtqTm83YguA3303F2QAAAPo"]
[Wed Sep 30 00:55:14.598004 2026] [security2:error] [pid 178882:tid 179211] [client 20.194.30.107:17359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/w.php"] [unique_id "aryyUtqTm83YguA3303F2wAAAJ0"]
[Wed Sep 30 00:55:14.599403 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.599842 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.623379 2026] [security2:error] [pid 178882:tid 179200] [client 20.70.173.30:63705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-admin/js/index.php"] [unique_id "aryyUtqTm83YguA3303F3wAAAJQ"]
[Wed Sep 30 00:55:14.680953 2026] [security2:error] [pid 178882:tid 179278] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUtqTm83YguA3303F5QAAANw"]
[Wed Sep 30 00:55:14.686692 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.687124 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.712574 2026] [security2:error] [pid 178882:tid 179285] [client 103.24.86.56:49845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F5wAAAOM"]
[Wed Sep 30 00:55:14.712824 2026] [security2:error] [pid 178882:tid 179285] [client 103.24.86.56:49845] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyUtqTm83YguA3303F5wAAAOM"]
[Wed Sep 30 00:55:14.765744 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:55:14.766224 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:55:14.777376 2026] [access_compat:error] [pid 178882:tid 179286] [client 47.79.13.172:41810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.777627 2026] [access_compat:error] [pid 178882:tid 179286] [client 47.79.13.172:41810] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:14.779456 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.779885 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.790384 2026] [security2:error] [pid 178882:tid 179190] [client 20.214.145.90:38350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aryyUtqTm83YguA3303F8AAAAIo"]
[Wed Sep 30 00:55:14.802555 2026] [security2:error] [pid 178882:tid 179320] [client 20.194.30.107:34090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/file.php"] [unique_id "aryyUtqTm83YguA3303F8QAAAQQ"]
[Wed Sep 30 00:55:14.849269 2026] [security2:error] [pid 178882:tid 179271] [client 20.219.14.152:26531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/Row_wsoo.php"] [unique_id "aryyUtqTm83YguA3303F9AAAANY"]
[Wed Sep 30 00:55:14.871097 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.871531 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.886636 2026] [security2:error] [pid 178882:tid 179205] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyUtqTm83YguA3303F9gAAAJg"]
[Wed Sep 30 00:55:14.936584 2026] [security2:error] [pid 178882:tid 179185] [client 20.251.39.228:26794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/inege.php"] [unique_id "aryyUtqTm83YguA3303F-QAAAIU"]
[Wed Sep 30 00:55:14.960086 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:14.960518 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:14.975434 2026] [security2:error] [pid 178882:tid 179228] [client 4.240.25.22:30734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/new.php"] [unique_id "aryyUtqTm83YguA3303F_gAAAK4"]
[Wed Sep 30 00:55:14.985138 2026] [security2:error] [pid 178882:tid 179140] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyUtqTm83YguA3303GAQAAt1Y"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302262&sid=a444f632246f0ccf1192a1ff430c356c
[Wed Sep 30 00:55:14.985164 2026] [security2:error] [pid 178882:tid 179140] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyUtqTm83YguA3303GAQAAt1Y"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302262&sid=a444f632246f0ccf1192a1ff430c356c
[Wed Sep 30 00:55:14.995615 2026] [security2:error] [pid 178882:tid 179221] [client 45.138.12.43:1640] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odw.nqt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyUtqTm83YguA3303GAgAAAKc"]
[Wed Sep 30 00:55:15.051426 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.051796 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.060217 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:10933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/class-t.api.php"] [unique_id "aryyU9qTm83YguA3303GCQAAAJ4"]
[Wed Sep 30 00:55:15.084619 2026] [security2:error] [pid 178882:tid 179287] [client 20.214.145.90:38340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/index/fucku.php"] [unique_id "aryyU9qTm83YguA3303GDgAAAOU"]
[Wed Sep 30 00:55:15.093144 2026] [security2:error] [pid 178882:tid 179203] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyU9qTm83YguA3303GEgAAAJY"]
[Wed Sep 30 00:55:15.140090 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.140776 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.151421 2026] [access_compat:error] [pid 178882:tid 179295] [client 47.79.13.58:45960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:15.151681 2026] [access_compat:error] [pid 178882:tid 179295] [client 47.79.13.58:45960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:15.166166 2026] [access_compat:error] [pid 178882:tid 179300] [client 47.79.13.174:46906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:15.166463 2026] [access_compat:error] [pid 178882:tid 179300] [client 47.79.13.174:46906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:15.235779 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.236184 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.240387 2026] [security2:error] [pid 178882:tid 179281] [client 188.211.251.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyU9qTm83YguA3303GHwAAAN8"]
[Wed Sep 30 00:55:15.288518 2026] [access_compat:error] [pid 178882:tid 179315] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 00:55:15.288793 2026] [access_compat:error] [pid 178882:tid 179315] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 00:55:15.299184 2026] [security2:error] [pid 178882:tid 179195] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyU9qTm83YguA3303GIwAAAI8"]
[Wed Sep 30 00:55:15.303159 2026] [security2:error] [pid 178882:tid 179278] [client 4.196.65.241:27286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/goeu.php"] [unique_id "aryyU9qTm83YguA3303GJAAAANw"]
[Wed Sep 30 00:55:15.321846 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.322187 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.348422 2026] [security2:error] [pid 178882:tid 179243] [client 20.219.14.152:26508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/x2.php"] [unique_id "aryyU9qTm83YguA3303GJwAAALs"]
[Wed Sep 30 00:55:15.405915 2026] [security2:error] [pid 178882:tid 179214] [client 20.251.39.228:7900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/nw.php"] [unique_id "aryyU9qTm83YguA3303GKwAAAKA"]
[Wed Sep 30 00:55:15.415964 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.416382 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.498392 2026] [security2:error] [pid 178882:tid 179233] [client 20.214.145.90:43420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/upload/wp-info.php"] [unique_id "aryyU9qTm83YguA3303GNAAAALM"]
[Wed Sep 30 00:55:15.506650 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.507107 2026] [security2:error] [pid 178882:tid 179248] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyU9qTm83YguA3303GNwAAAMA"]
[Wed Sep 30 00:55:15.507176 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.604003 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.604555 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.662879 2026] [security2:error] [pid 178882:tid 179266] [client 20.194.30.107:26026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/dex.php"] [unique_id "aryyU9qTm83YguA3303GSAAAANI"]
[Wed Sep 30 00:55:15.691010 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.691454 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.713531 2026] [security2:error] [pid 178882:tid 179187] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyU9qTm83YguA3303GTwAAAIc"]
[Wed Sep 30 00:55:15.743612 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:55:15.743888 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:55:15.758472 2026] [security2:error] [pid 178882:tid 179281] [client 20.28.180.172:29574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/c3c427fa59.php"] [unique_id "aryyU9qTm83YguA3303GUgAAAN8"]
[Wed Sep 30 00:55:15.771708 2026] [security2:error] [pid 178882:tid 179160] [remote 103.154.177.135:33984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/wp-login.php"] [unique_id "aryyU9qTm83YguA3303GUQAAvWo"]
[Wed Sep 30 00:55:15.781740 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.782045 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.794784 2026] [security2:error] [pid 178882:tid 179265] [client 20.214.145.90:28292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/post.php"] [unique_id "aryyU9qTm83YguA3303GVwAAANE"]
[Wed Sep 30 00:55:15.806896 2026] [security2:error] [pid 178882:tid 179189] [client 20.219.2.60:19434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/admin-ajax.php"] [unique_id "aryyU9qTm83YguA3303GWgAAAIk"]
[Wed Sep 30 00:55:15.861215 2026] [security2:error] [pid 178882:tid 179317] [client 20.70.173.30:59994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/ops.php"] [unique_id "aryyU9qTm83YguA3303GXwAAAQE"]
[Wed Sep 30 00:55:15.868464 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.868722 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.869464 2026] [security2:error] [pid 178882:tid 179242] [client 20.219.14.152:26539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/v4.php"] [unique_id "aryyU9qTm83YguA3303GYAAAALo"]
[Wed Sep 30 00:55:15.872144 2026] [security2:error] [pid 178882:tid 179315] [client 20.251.39.228:35144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/t.php"] [unique_id "aryyU9qTm83YguA3303GYQAAAP8"]
[Wed Sep 30 00:55:15.891036 2026] [security2:error] [pid 178882:tid 179253] [client 4.240.25.22:63756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-filemannger.php"] [unique_id "aryyU9qTm83YguA3303GYwAAAMU"]
[Wed Sep 30 00:55:15.929205 2026] [security2:error] [pid 178882:tid 179243] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyU9qTm83YguA3303GZgAAALs"]
[Wed Sep 30 00:55:15.963869 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:15.964337 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:15.999592 2026] [security2:error] [pid 178882:tid 179156] [remote 103.154.177.135:33984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/wp-login.php"] [unique_id "aryyU9qTm83YguA3303GawAA5GY"], referer: https://mmccray.com/wp-login.php
[Wed Sep 30 00:55:16.006202 2026] [security2:error] [pid 178882:tid 179214] [client 20.198.74.230:23581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ccou.php"] [unique_id "aryyVNqTm83YguA3303GbQAAAKA"]
[Wed Sep 30 00:55:16.056057 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.056521 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.136156 2026] [security2:error] [pid 178882:tid 179192] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVNqTm83YguA3303GcwAAAIw"]
[Wed Sep 30 00:55:16.146328 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.146764 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.173486 2026] [security2:error] [pid 178882:tid 179302] [client 20.214.145.90:38398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aryyVNqTm83YguA3303GegAAAPQ"]
[Wed Sep 30 00:55:16.182260 2026] [security2:error] [pid 178882:tid 179221] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyVNqTm83YguA3303GewAAAKc"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:16.214677 2026] [security2:error] [pid 178882:tid 179080] [remote 103.154.177.135:33984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyVNqTm83YguA3303GfAAAoxw"]
[Wed Sep 30 00:55:16.214895 2026] [security2:error] [pid 178882:tid 179217] [client 103.154.177.135:33984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyVNqTm83YguA3303GfAAAoxw"]
[Wed Sep 30 00:55:16.216656 2026] [security2:error] [pid 178882:tid 179169] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyVNqTm83YguA3303GfQAA13M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=299000&sid=0471c855d90d1903d94deb490c92ef4d
[Wed Sep 30 00:55:16.216695 2026] [security2:error] [pid 178882:tid 179169] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyVNqTm83YguA3303GfQAA13M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=299000&sid=0471c855d90d1903d94deb490c92ef4d
[Wed Sep 30 00:55:16.233420 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.233774 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.243766 2026] [security2:error] [pid 178882:tid 179263] [client 4.240.25.22:30852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/ops.php"] [unique_id "aryyVNqTm83YguA3303GfwAAAM8"]
[Wed Sep 30 00:55:16.270587 2026] [security2:error] [pid 178882:tid 179231] [client 20.219.2.60:10824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-links-opml.php"] [unique_id "aryyVNqTm83YguA3303GgQAAALE"]
[Wed Sep 30 00:55:16.298125 2026] [security2:error] [pid 178882:tid 179264] [client 20.204.42.136:57159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/new.php"] [unique_id "aryyVNqTm83YguA3303GgwAAANA"]
[Wed Sep 30 00:55:16.324504 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.324915 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.332458 2026] [security2:error] [pid 178882:tid 179225] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyVNqTm83YguA3303GhgAAAKs"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:16.336175 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 00:55:16.336447 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 00:55:16.340629 2026] [security2:error] [pid 178882:tid 179191] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVNqTm83YguA3303GhwAAAIs"]
[Wed Sep 30 00:55:16.352966 2026] [security2:error] [pid 178882:tid 179284] [client 20.194.30.107:17385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/aaa.php"] [unique_id "aryyVNqTm83YguA3303GiAAAAOI"]
[Wed Sep 30 00:55:16.413902 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.414177 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.460370 2026] [security2:error] [pid 178882:tid 179230] [client 20.219.14.152:26416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/albin.php"] [unique_id "aryyVNqTm83YguA3303GjwAAALA"]
[Wed Sep 30 00:55:16.466086 2026] [security2:error] [pid 178882:tid 179287] [client 213.135.6.58:41560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.6.135.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol-for-sale.com"] [uri "/wp-login.php"] [unique_id "aryyVNqTm83YguA3303GjgAAAOU"]
[Wed Sep 30 00:55:16.505731 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.506044 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.524615 2026] [security2:error] [pid 178882:tid 179236] [client 20.251.39.228:35147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryyVNqTm83YguA3303GkQAAALY"]
[Wed Sep 30 00:55:16.546071 2026] [security2:error] [pid 178882:tid 179277] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVNqTm83YguA3303GlgAAANs"]
[Wed Sep 30 00:55:16.554033 2026] [security2:error] [pid 178882:tid 179206] [client 20.214.145.90:28348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/adminfuns.php"] [unique_id "aryyVNqTm83YguA3303GmAAAAJk"]
[Wed Sep 30 00:55:16.598184 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.598511 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.691310 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.691749 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.758173 2026] [security2:error] [pid 178882:tid 179279] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVNqTm83YguA3303GogAAAN0"]
[Wed Sep 30 00:55:16.760946 2026] [security2:error] [pid 178882:tid 179192] [client 20.219.2.60:36694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/sid3.php"] [unique_id "aryyVNqTm83YguA3303GowAAAIw"]
[Wed Sep 30 00:55:16.778300 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.778548 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.789542 2026] [access_compat:error] [pid 178882:tid 179303] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 00:55:16.789804 2026] [access_compat:error] [pid 178882:tid 179303] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 00:55:16.867779 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.868052 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.873395 2026] [security2:error] [pid 178882:tid 179267] [client 20.219.2.60:19445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/amthd.php"] [unique_id "aryyVNqTm83YguA3303GrQAAANM"]
[Wed Sep 30 00:55:16.964274 2026] [security2:error] [pid 178882:tid 179191] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVNqTm83YguA3303GuAAAAIs"]
[Wed Sep 30 00:55:16.967168 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:16.967611 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:16.969649 2026] [security2:error] [pid 178882:tid 179314] [client 20.214.145.90:43404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/about.php"] [unique_id "aryyVNqTm83YguA3303GuQAAAP4"]
[Wed Sep 30 00:55:16.979936 2026] [access_compat:error] [pid 178882:tid 179307] [client 47.79.13.75:58026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:16.980407 2026] [access_compat:error] [pid 178882:tid 179307] [client 47.79.13.75:58026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:17.010417 2026] [security2:error] [pid 178882:tid 179180] [remote 223.19.254.61:35806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.254.19.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-login.php"] [unique_id "aryyVdqTm83YguA3303GvQAAmH4"], referer: https://casanoelectric.com/wp-admin/
[Wed Sep 30 00:55:17.013878 2026] [security2:error] [pid 178882:tid 179269] [client 20.251.39.228:29236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/public/ws49.php"] [unique_id "aryyVdqTm83YguA3303GvgAAANU"]
[Wed Sep 30 00:55:17.059717 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.060236 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.141981 2026] [access_compat:error] [pid 178882:tid 179313] [client 47.79.13.75:58034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:17.142238 2026] [access_compat:error] [pid 178882:tid 179313] [client 47.79.13.75:58034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:17.146081 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.146345 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.156906 2026] [security2:error] [pid 178882:tid 179283] [client 20.219.14.152:26433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/atkno.php"] [unique_id "aryyVdqTm83YguA3303GxAAAAOE"]
[Wed Sep 30 00:55:17.168705 2026] [security2:error] [pid 178882:tid 179304] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVdqTm83YguA3303GxwAAAPY"]
[Wed Sep 30 00:55:17.183989 2026] [security2:error] [pid 178882:tid 179317] [client 20.70.173.30:60594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/k.php"] [unique_id "aryyVdqTm83YguA3303GyAAAAQE"]
[Wed Sep 30 00:55:17.227814 2026] [security2:error] [pid 178882:tid 179253] [client 20.204.161.246:48076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wsd.php"] [unique_id "aryyVdqTm83YguA3303GzQAAAMU"]
[Wed Sep 30 00:55:17.234993 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.235271 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.267704 2026] [access_compat:error] [pid 178882:tid 179200] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 00:55:17.268137 2026] [access_compat:error] [pid 178882:tid 179200] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 00:55:17.325485 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.325741 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.353687 2026] [security2:error] [pid 178882:tid 179243] [client 20.214.145.90:43425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/BDKR28WP.php"] [unique_id "aryyVdqTm83YguA3303G1QAAALs"]
[Wed Sep 30 00:55:17.375006 2026] [security2:error] [pid 178882:tid 179233] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVdqTm83YguA3303G2AAAALM"]
[Wed Sep 30 00:55:17.416195 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.416467 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.472354 2026] [security2:error] [pid 178882:tid 179302] [client 80.200.129.149:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyVdqTm83YguA3303G3gAAAPQ"]
[Wed Sep 30 00:55:17.487774 2026] [security2:error] [pid 178882:tid 179235] [client 20.219.2.60:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/8xyz.php"] [unique_id "aryyVdqTm83YguA3303G4gAAALU"]
[Wed Sep 30 00:55:17.504504 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.504770 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.526429 2026] [security2:error] [pid 178882:tid 179318] [client 20.251.39.228:26760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gifclass.php"] [unique_id "aryyVdqTm83YguA3303G5wAAAQI"]
[Wed Sep 30 00:55:17.561559 2026] [access_compat:error] [pid 178882:tid 179228] [client 47.79.13.174:46910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:17.561822 2026] [access_compat:error] [pid 178882:tid 179228] [client 47.79.13.174:46910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:17.579549 2026] [security2:error] [pid 178882:tid 179213] [client 84.8.102.109:61175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVdqTm83YguA3303G6wAAAJ8"]
[Wed Sep 30 00:55:17.597197 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.597469 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.617661 2026] [security2:error] [pid 178882:tid 179179] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyVdqTm83YguA3303G7gAAwn0"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D88772
[Wed Sep 30 00:55:17.642829 2026] [security2:error] [pid 178882:tid 179219] [client 20.219.14.152:26528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gptsh.php"] [unique_id "aryyVdqTm83YguA3303G7wAAAKU"]
[Wed Sep 30 00:55:17.648439 2026] [security2:error] [pid 178882:tid 179257] [client 106.214.2.47:9658] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyVdqTm83YguA3303G8AAAAMk"]
[Wed Sep 30 00:55:17.654782 2026] [security2:error] [pid 178882:tid 179257] [client 106.214.2.47:9658] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyVdqTm83YguA3303G8AAAAMk"]
[Wed Sep 30 00:55:17.688514 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.688781 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.738723 2026] [security2:error] [pid 178882:tid 179307] [client 20.214.145.90:28309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/file5.php"] [unique_id "aryyVdqTm83YguA3303G9AAAAPk"]
[Wed Sep 30 00:55:17.779144 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.779415 2026] [access_compat:error] [pid 178882:tid 179205] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.815291 2026] [security2:error] [pid 178882:tid 179187] [client 4.240.25.22:30726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/admin.php"] [unique_id "aryyVdqTm83YguA3303G_AAAAIc"]
[Wed Sep 30 00:55:17.824433 2026] [security2:error] [pid 178882:tid 179292] [client 20.219.2.60:48862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyVdqTm83YguA3303G_wAAAOo"]
[Wed Sep 30 00:55:17.831422 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 00:55:17.831666 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 00:55:17.871184 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.871470 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.911135 2026] [security2:error] [pid 178882:tid 179294] [client 20.251.39.228:14002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/sa.php7"] [unique_id "aryyVdqTm83YguA3303HBAAAAOw"]
[Wed Sep 30 00:55:17.963411 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:17.963685 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:17.983321 2026] [security2:error] [pid 178882:tid 179206] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyVdqTm83YguA3303HBwAAAJk"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.055199 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.055476 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.060553 2026] [security2:error] [pid 178882:tid 179295] [client 20.214.145.90:28231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/b8.php"] [unique_id "aryyVtqTm83YguA3303HCQAAAO0"]
[Wed Sep 30 00:55:18.131232 2026] [security2:error] [pid 178882:tid 179264] [client 20.219.14.152:26512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/rithin.php"] [unique_id "aryyVtqTm83YguA3303HDQAAANA"]
[Wed Sep 30 00:55:18.144952 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.145384 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.207583 2026] [access_compat:error] [pid 178882:tid 179211] [client 47.79.13.172:41820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:18.207892 2026] [access_compat:error] [pid 178882:tid 179211] [client 47.79.13.172:41820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:18.241101 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.241372 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.259463 2026] [security2:error] [pid 178882:tid 179282] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVtqTm83YguA3303HEwAAAOA"]
[Wed Sep 30 00:55:18.268792 2026] [security2:error] [pid 178882:tid 179200] [client 168.107.70.193:62008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.appludi.com"] [uri "/"] [unique_id "aryyVtqTm83YguA3303HEgAAAJQ"]
[Wed Sep 30 00:55:18.272394 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:55:18.272655 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:55:18.276993 2026] [security2:error] [pid 178882:tid 179197] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryyVtqTm83YguA3303HFQAAAJE"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.306612 2026] [security2:error] [pid 178882:tid 179229] [client 20.219.2.60:63253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyVtqTm83YguA3303HGAAAAK8"]
[Wed Sep 30 00:55:18.327632 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.327927 2026] [access_compat:error] [pid 178882:tid 179276] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.339496 2026] [security2:error] [pid 178882:tid 179320] [client 20.251.39.228:30193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/jp.php"] [unique_id "aryyVtqTm83YguA3303HHwAAAQQ"]
[Wed Sep 30 00:55:18.424214 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.424658 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.441059 2026] [security2:error] [pid 178882:tid 179195] [client 20.214.145.90:28249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/133.php"] [unique_id "aryyVtqTm83YguA3303HLAAAAI8"]
[Wed Sep 30 00:55:18.470074 2026] [security2:error] [pid 178882:tid 179250] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVtqTm83YguA3303HLgAAAMI"]
[Wed Sep 30 00:55:18.484661 2026] [security2:error] [pid 178882:tid 179221] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryyVtqTm83YguA3303HLwAAAKc"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.514228 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.514675 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.564455 2026] [autoindex:error] [pid 178882:tid 179222] [client 212.156.70.154:59099] AH01276: Cannot serve directory /home4/hxrcbemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:18.600702 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.601020 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.616446 2026] [security2:error] [pid 178882:tid 179309] [client 20.219.14.152:26553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/il.php"] [unique_id "aryyVtqTm83YguA3303HOgAAAPo"]
[Wed Sep 30 00:55:18.643464 2026] [security2:error] [pid 178882:tid 179281] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryyVtqTm83YguA3303HPQAAAN8"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.652039 2026] [security2:error] [pid 178882:tid 179287] [client 20.219.2.60:36822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/666.php"] [unique_id "aryyVtqTm83YguA3303HPgAAAOU"]
[Wed Sep 30 00:55:18.680628 2026] [security2:error] [pid 178882:tid 179283] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVtqTm83YguA3303HPwAAAOE"]
[Wed Sep 30 00:55:18.693559 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.693901 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.743863 2026] [security2:error] [pid 178882:tid 179194] [client 20.194.30.107:52086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/as.php"] [unique_id "aryyVtqTm83YguA3303HQQAAAI4"]
[Wed Sep 30 00:55:18.764545 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 00:55:18.764801 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 00:55:18.778474 2026] [security2:error] [pid 178882:tid 179261] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryyVtqTm83YguA3303HRAAAAM0"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.783194 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.783466 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.848272 2026] [security2:error] [pid 178882:tid 179311] [client 20.214.145.90:38367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/ano.php"] [unique_id "aryyVtqTm83YguA3303HRgAAAPw"]
[Wed Sep 30 00:55:18.872743 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.873017 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:18.891607 2026] [security2:error] [pid 178882:tid 179295] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyVtqTm83YguA3303HSwAAAO0"]
[Wed Sep 30 00:55:18.917325 2026] [security2:error] [pid 178882:tid 179210] [client 20.251.39.228:7910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-good.php"] [unique_id "aryyVtqTm83YguA3303HTgAAAJw"]
[Wed Sep 30 00:55:18.923561 2026] [security2:error] [pid 178882:tid 179285] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryyVtqTm83YguA3303HTwAAAOM"], referer: https://infraas.digital/wordpress/wp-admin/
[Wed Sep 30 00:55:18.924916 2026] [security2:error] [pid 178882:tid 179264] [client 20.204.161.246:47272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/media.php"] [unique_id "aryyVtqTm83YguA3303HUAAAANA"]
[Wed Sep 30 00:55:18.969817 2026] [security2:error] [pid 178882:tid 179186] [client 20.28.180.172:29587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/kgblegacy.php"] [unique_id "aryyVtqTm83YguA3303HUwAAAIY"]
[Wed Sep 30 00:55:18.970517 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:18.970966 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:19.007092 2026] [security2:error] [pid 178882:tid 179211] [client 20.219.2.60:63241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ccs.php"] [unique_id "aryyV9qTm83YguA3303HVQAAAJ0"]
[Wed Sep 30 00:55:19.056173 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:19.056449 2026] [access_compat:error] [pid 178882:tid 179229] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:19.061421 2026] [security2:error] [pid 178882:tid 179320] [client 20.219.2.60:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/mini.php"] [unique_id "aryyV9qTm83YguA3303HXAAAAQQ"]
[Wed Sep 30 00:55:19.075406 2026] [security2:error] [pid 178882:tid 179255] [client 20.70.173.30:59564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/or.php"] [unique_id "aryyV9qTm83YguA3303HXQAAAMc"]
[Wed Sep 30 00:55:19.112154 2026] [security2:error] [pid 178882:tid 179303] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyV9qTm83YguA3303HXwAAAPU"]
[Wed Sep 30 00:55:19.214193 2026] [security2:error] [pid 178882:tid 179260] [client 20.219.14.152:26517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/1klopedf.php"] [unique_id "aryyV9qTm83YguA3303HYQAAAMw"]
[Wed Sep 30 00:55:19.238066 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:19.238347 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:19.255025 2026] [security2:error] [pid 178882:tid 179199] [client 20.70.173.30:25114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/blurbs.php"] [unique_id "aryyV9qTm83YguA3303HYwAAAJM"]
[Wed Sep 30 00:55:19.270941 2026] [security2:error] [pid 178882:tid 179190] [client 116.72.182.19:52983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyV9qTm83YguA3303HZQAAAIo"]
[Wed Sep 30 00:55:19.271061 2026] [security2:error] [pid 178882:tid 179190] [client 116.72.182.19:52983] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyV9qTm83YguA3303HZQAAAIo"]
[Wed Sep 30 00:55:19.279410 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 00:55:19.279797 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:47964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 00:55:19.300578 2026] [security2:error] [pid 178882:tid 179217] [client 20.251.39.228:30166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/a5.php"] [unique_id "aryyV9qTm83YguA3303HZwAAAKM"]
[Wed Sep 30 00:55:19.316018 2026] [security2:error] [pid 178882:tid 179185] [client 20.214.145.90:28658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/sf.php"] [unique_id "aryyV9qTm83YguA3303HaAAAAIU"]
[Wed Sep 30 00:55:19.328424 2026] [security2:error] [pid 178882:tid 179220] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyV9qTm83YguA3303HaQAAAKY"]
[Wed Sep 30 00:55:19.340791 2026] [security2:error] [pid 178882:tid 179266] [client 82.102.18.126:32942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryyV9qTm83YguA3303HagAAANI"]
[Wed Sep 30 00:55:19.355340 2026] [security2:error] [pid 178882:tid 179079] [remote 223.19.254.61:35806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.254.19.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyV9qTm83YguA3303HawAAwRs"]
[Wed Sep 30 00:55:19.355537 2026] [security2:error] [pid 178882:tid 179249] [client 223.19.254.61:35806] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyV9qTm83YguA3303HawAAwRs"]
[Wed Sep 30 00:55:19.539108 2026] [security2:error] [pid 178882:tid 179309] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyV9qTm83YguA3303HdwAAAPo"]
[Wed Sep 30 00:55:19.637673 2026] [security2:error] [pid 178882:tid 179283] [client 20.214.145.90:28294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/xx.php"] [unique_id "aryyV9qTm83YguA3303HfwAAAOE"]
[Wed Sep 30 00:55:19.647686 2026] [security2:error] [pid 178882:tid 179193] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyV9qTm83YguA3303HgQAAAI0"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:19.666755 2026] [security2:error] [pid 178882:tid 179209] [client 20.219.2.60:58462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/set.php"] [unique_id "aryyV9qTm83YguA3303HhQAAAJs"]
[Wed Sep 30 00:55:19.666887 2026] [security2:error] [pid 178882:tid 179245] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/posts/999999"] [unique_id "aryyV9qTm83YguA3303HhAAAAL0"]
[Wed Sep 30 00:55:19.668435 2026] [security2:error] [pid 178882:tid 179251] [client 20.251.39.228:15498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/amp.php"] [unique_id "aryyV9qTm83YguA3303HhgAAAMM"]
[Wed Sep 30 00:55:19.698925 2026] [security2:error] [pid 178882:tid 179189] [client 82.102.18.126:32958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryyV9qTm83YguA3303HhwAAAIk"]
[Wed Sep 30 00:55:19.749259 2026] [security2:error] [pid 178882:tid 179280] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyV9qTm83YguA3303HjgAAAN4"]
[Wed Sep 30 00:55:19.796357 2026] [security2:error] [pid 178882:tid 179306] [client 20.219.14.152:26391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/zv.php"] [unique_id "aryyV9qTm83YguA3303HlQAAAPg"]
[Wed Sep 30 00:55:19.805175 2026] [access_compat:error] [pid 178882:tid 179259] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 00:55:19.805545 2026] [access_compat:error] [pid 178882:tid 179259] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 00:55:19.899861 2026] [security2:error] [pid 178882:tid 179192] [client 20.204.42.136:57201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/ava.php"] [unique_id "aryyV9qTm83YguA3303HqQAAAIw"]
[Wed Sep 30 00:55:19.958919 2026] [security2:error] [pid 178882:tid 179249] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyV9qTm83YguA3303HsQAAAME"]
[Wed Sep 30 00:55:19.976640 2026] [security2:error] [pid 178882:tid 179307] [client 20.214.145.90:28315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/file2.php"] [unique_id "aryyV9qTm83YguA3303HtAAAAPk"]
[Wed Sep 30 00:55:20.028361 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.028632 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.086657 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.086977 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.101369 2026] [security2:error] [pid 178882:tid 179191] [client 20.219.2.60:10659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-class-api.php"] [unique_id "aryyWNqTm83YguA3303HwQAAAIs"]
[Wed Sep 30 00:55:20.122606 2026] [security2:error] [pid 178882:tid 179273] [client 20.251.39.228:30871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/abrand.php"] [unique_id "aryyWNqTm83YguA3303HxAAAANg"]
[Wed Sep 30 00:55:20.147372 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.147679 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.156140 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.156411 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.169353 2026] [security2:error] [pid 178882:tid 179235] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWNqTm83YguA3303HyQAAALU"]
[Wed Sep 30 00:55:20.189385 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.189654 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.211139 2026] [security2:error] [pid 178882:tid 179252] [client 82.102.18.126:32966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryyWNqTm83YguA3303HzgAAAMQ"]
[Wed Sep 30 00:55:20.231120 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.231273 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:55:20.231384 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.231539 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:55:20.235866 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.236123 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.244112 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.244432 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.261156 2026] [security2:error] [pid 178882:tid 179265] [client 20.219.2.60:63238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/mode.php"] [unique_id "aryyWNqTm83YguA3303H0wAAANE"]
[Wed Sep 30 00:55:20.282204 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.282469 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.287704 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.287973 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.289310 2026] [security2:error] [pid 178882:tid 179122] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyWNqTm83YguA3303H1gAA3kQ"], referer: https://torquayfans.com/ucp.php?mode=login&p=69819&redirect=posting.php?mode=quote
[Wed Sep 30 00:55:20.289329 2026] [security2:error] [pid 178882:tid 179122] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyWNqTm83YguA3303H1gAA3kQ"], referer: https://torquayfans.com/ucp.php?mode=login&p=69819&redirect=posting.php?mode=quote
[Wed Sep 30 00:55:20.318847 2026] [security2:error] [pid 178882:tid 179264] [client 20.219.14.152:26484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/zv.update.php"] [unique_id "aryyWNqTm83YguA3303H2gAAANA"]
[Wed Sep 30 00:55:20.322204 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.322466 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.327479 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.327726 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.345870 2026] [security2:error] [pid 178882:tid 179238] [client 4.240.25.22:21940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/pfm.php"] [unique_id "aryyWNqTm83YguA3303H3AAAALc"]
[Wed Sep 30 00:55:20.369355 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.369614 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.416529 2026] [security2:error] [pid 178882:tid 179319] [client 58.69.117.138:60122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.117.69.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camping4eloah.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H3QAAAQM"]
[Wed Sep 30 00:55:20.416708 2026] [security2:error] [pid 178882:tid 179319] [client 58.69.117.138:60122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "camping4eloah.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H3QAAAQM"]
[Wed Sep 30 00:55:20.418655 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.418962 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.422547 2026] [security2:error] [pid 178882:tid 179240] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWNqTm83YguA3303H5AAAALk"]
[Wed Sep 30 00:55:20.444005 2026] [security2:error] [pid 178882:tid 179185] [client 116.197.133.25:50850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H5QAAAIU"]
[Wed Sep 30 00:55:20.444175 2026] [security2:error] [pid 178882:tid 179185] [client 116.197.133.25:50850] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H5QAAAIU"]
[Wed Sep 30 00:55:20.510190 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.510460 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.512726 2026] [security2:error] [pid 178882:tid 179190] [client 82.102.18.126:32976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryyWNqTm83YguA3303H7AAAAIo"]
[Wed Sep 30 00:55:20.516543 2026] [security2:error] [pid 178882:tid 179256] [client 20.219.2.60:18872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws68.php"] [unique_id "aryyWNqTm83YguA3303H7QAAAMg"]
[Wed Sep 30 00:55:20.522117 2026] [security2:error] [pid 178882:tid 179219] [client 20.214.145.90:28296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/m.php"] [unique_id "aryyWNqTm83YguA3303H7gAAAKU"]
[Wed Sep 30 00:55:20.536722 2026] [security2:error] [pid 178882:tid 179290] [client 20.204.161.246:48793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/images.php"] [unique_id "aryyWNqTm83YguA3303H7wAAAOg"]
[Wed Sep 30 00:55:20.590535 2026] [security2:error] [pid 178882:tid 179278] [client 116.193.128.26:50855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H9QAAANw"]
[Wed Sep 30 00:55:20.590713 2026] [security2:error] [pid 178882:tid 179278] [client 116.193.128.26:50855] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303H9QAAANw"]
[Wed Sep 30 00:55:20.602476 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.602735 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.633709 2026] [security2:error] [pid 178882:tid 179205] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWNqTm83YguA3303H-wAAAJg"]
[Wed Sep 30 00:55:20.692411 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.692670 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.707995 2026] [security2:error] [pid 178882:tid 179314] [client 20.251.39.228:41453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/init.php"] [unique_id "aryyWNqTm83YguA3303IBgAAAP4"]
[Wed Sep 30 00:55:20.774175 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 00:55:20.774607 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 00:55:20.786496 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.786753 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.820020 2026] [security2:error] [pid 178882:tid 179286] [client 20.214.145.90:43402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/33.php"] [unique_id "aryyWNqTm83YguA3303IDwAAAOQ"]
[Wed Sep 30 00:55:20.838894 2026] [security2:error] [pid 178882:tid 179294] [client 82.102.18.126:32990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryyWNqTm83YguA3303IEQAAAOw"]
[Wed Sep 30 00:55:20.845112 2026] [security2:error] [pid 178882:tid 179265] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWNqTm83YguA3303IEgAAANE"]
[Wed Sep 30 00:55:20.856203 2026] [security2:error] [pid 178882:tid 179246] [client 152.59.169.65:62261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303IFAAAAL4"]
[Wed Sep 30 00:55:20.856333 2026] [security2:error] [pid 178882:tid 179246] [client 152.59.169.65:62261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyWNqTm83YguA3303IFAAAAL4"]
[Wed Sep 30 00:55:20.877257 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.877568 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.922707 2026] [security2:error] [pid 178882:tid 179230] [client 20.219.14.152:27800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/wquosqsi.php"] [unique_id "aryyWNqTm83YguA3303IGgAAALA"]
[Wed Sep 30 00:55:20.941603 2026] [security2:error] [pid 178882:tid 179297] [client 20.219.2.60:48850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ok.php"] [unique_id "aryyWNqTm83YguA3303IHAAAAO8"]
[Wed Sep 30 00:55:20.968549 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:20.968820 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:20.997008 2026] [security2:error] [pid 178882:tid 179319] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWNqTm83YguA3303IIgAAAQM"]
[Wed Sep 30 00:55:21.013594 2026] [security2:error] [pid 178882:tid 179185] [client 20.251.39.228:30175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gettest.php"] [unique_id "aryyWdqTm83YguA3303IJgAAAIU"]
[Wed Sep 30 00:55:21.054544 2026] [security2:error] [pid 178882:tid 179260] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303ILAAAAMw"]
[Wed Sep 30 00:55:21.062382 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.062802 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.121887 2026] [security2:error] [pid 178882:tid 179303] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IMQAAAPU"]
[Wed Sep 30 00:55:21.149106 2026] [security2:error] [pid 178882:tid 179307] [client 82.102.18.126:33000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryyWdqTm83YguA3303INwAAAPk"]
[Wed Sep 30 00:55:21.152128 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.152563 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.246791 2026] [security2:error] [pid 178882:tid 179187] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IOwAAAIc"]
[Wed Sep 30 00:55:21.263229 2026] [security2:error] [pid 178882:tid 179276] [client 123.63.248.21:59326] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IPAAAANo"]
[Wed Sep 30 00:55:21.263349 2026] [security2:error] [pid 178882:tid 179276] [client 123.63.248.21:59326] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IPAAAANo"]
[Wed Sep 30 00:55:21.265618 2026] [security2:error] [pid 178882:tid 179194] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IPQAAAI4"]
[Wed Sep 30 00:55:21.274224 2026] [access_compat:error] [pid 178882:tid 179318] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 00:55:21.274485 2026] [access_compat:error] [pid 178882:tid 179318] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 00:55:21.285083 2026] [security2:error] [pid 178882:tid 179320] [client 182.69.182.151:6033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IPwAAAQQ"]
[Wed Sep 30 00:55:21.285211 2026] [security2:error] [pid 178882:tid 179320] [client 182.69.182.151:6033] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IPwAAAQQ"]
[Wed Sep 30 00:55:21.307395 2026] [lsapi:warn] [pid 178882:tid 179224] [client 45.225.220.9:0] [host www.arvanisocks.com] Backend log: PHP Warning:  Undefined array key 1 in /home2/nurveenc/public_html/arvanisocks/wp-content/plugins/real-time-find-and-replace/real-time-find-and-replace.php on line 263\n, referer: https://buyingbacklinksforseo.online/dir/niche-link-building-13562
[Wed Sep 30 00:55:21.339897 2026] [security2:error] [pid 178882:tid 179265] [client 20.214.145.90:28298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/ccc.php"] [unique_id "aryyWdqTm83YguA3303IQQAAANE"]
[Wed Sep 30 00:55:21.353197 2026] [security2:error] [pid 178882:tid 179226] [client 20.219.2.60:18901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/xxx.php"] [unique_id "aryyWdqTm83YguA3303IQwAAAKw"]
[Wed Sep 30 00:55:21.370982 2026] [security2:error] [pid 178882:tid 179316] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IRgAAAQA"]
[Wed Sep 30 00:55:21.377733 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.377998 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.390902 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.391169 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.421130 2026] [security2:error] [pid 178882:tid 179186] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyWdqTm83YguA3303ISgAAAIY"]
[Wed Sep 30 00:55:21.423928 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.424193 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.457558 2026] [security2:error] [pid 178882:tid 179315] [client 20.219.14.152:26522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/asset.php"] [unique_id "aryyWdqTm83YguA3303ITQAAAP8"]
[Wed Sep 30 00:55:21.460261 2026] [security2:error] [pid 178882:tid 179236] [client 82.102.18.126:33008] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryyWdqTm83YguA3303ITgAAALY"]
[Wed Sep 30 00:55:21.477140 2026] [security2:error] [pid 178882:tid 179218] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IUAAAAKQ"]
[Wed Sep 30 00:55:21.493097 2026] [security2:error] [pid 178882:tid 179250] [client 20.28.180.172:34269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/NzxXWLD25py.php"] [unique_id "aryyWdqTm83YguA3303IUQAAAMI"]
[Wed Sep 30 00:55:21.495284 2026] [security2:error] [pid 178882:tid 179319] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IUgAAAQM"]
[Wed Sep 30 00:55:21.515661 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.515976 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.577419 2026] [security2:error] [pid 178882:tid 179275] [client 20.219.2.60:58440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/zoo.php"] [unique_id "aryyWdqTm83YguA3303IVgAAANk"]
[Wed Sep 30 00:55:21.592674 2026] [security2:error] [pid 178882:tid 179201] [client 20.251.39.228:35179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/myfile.php"] [unique_id "aryyWdqTm83YguA3303IWAAAAJU"]
[Wed Sep 30 00:55:21.605073 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.605339 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.618080 2026] [security2:error] [pid 178882:tid 179260] [client 20.219.2.60:36701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/xxw.php"] [unique_id "aryyWdqTm83YguA3303IXAAAAMw"]
[Wed Sep 30 00:55:21.618992 2026] [security2:error] [pid 178882:tid 179290] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IXQAAAOg"]
[Wed Sep 30 00:55:21.632137 2026] [security2:error] [pid 178882:tid 179249] [client 20.214.145.90:38346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/file15.php"] [unique_id "aryyWdqTm83YguA3303IXwAAAME"]
[Wed Sep 30 00:55:21.668264 2026] [security2:error] [pid 178882:tid 179084] [remote 57.141.14.41:63698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IWwAAkyA"]
[Wed Sep 30 00:55:21.687675 2026] [security2:error] [pid 178882:tid 179267] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IYQAAANM"]
[Wed Sep 30 00:55:21.696479 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.696738 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.745253 2026] [security2:error] [pid 178882:tid 179195] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IYwAAAI8"]
[Wed Sep 30 00:55:21.769260 2026] [security2:error] [pid 178882:tid 179263] [client 103.172.210.103:51952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IZAAAAM8"]
[Wed Sep 30 00:55:21.769370 2026] [security2:error] [pid 178882:tid 179263] [client 103.172.210.103:51952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyWdqTm83YguA3303IZAAAAM8"]
[Wed Sep 30 00:55:21.769527 2026] [security2:error] [pid 178882:tid 179193] [client 20.204.42.136:27405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "aryyWdqTm83YguA3303IZQAAAI0"]
[Wed Sep 30 00:55:21.787678 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.787981 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.789755 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL25ldA==
[Wed Sep 30 00:55:21.790054 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL25ldA==
[Wed Sep 30 00:55:21.796158 2026] [security2:error] [pid 178882:tid 179269] [client 82.102.18.126:33016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryyWdqTm83YguA3303IaAAAANU"]
[Wed Sep 30 00:55:21.870383 2026] [security2:error] [pid 178882:tid 179227] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IbQAAAK0"]
[Wed Sep 30 00:55:21.877821 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.878084 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.897596 2026] [security2:error] [pid 178882:tid 179314] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IcAAAAP4"]
[Wed Sep 30 00:55:21.932216 2026] [security2:error] [pid 178882:tid 179231] [client 4.196.65.241:2528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/tinysd.php"] [unique_id "aryyWdqTm83YguA3303IcgAAALE"]
[Wed Sep 30 00:55:21.937564 2026] [security2:error] [pid 178882:tid 179229] [client 20.214.145.90:38356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/82.php"] [unique_id "aryyWdqTm83YguA3303IcwAAAK8"]
[Wed Sep 30 00:55:21.972770 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:21.973050 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:21.997548 2026] [security2:error] [pid 178882:tid 179281] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWdqTm83YguA3303IdQAAAN8"]
[Wed Sep 30 00:55:22.060556 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.060840 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.061718 2026] [security2:error] [pid 178882:tid 179252] [client 20.251.39.228:30904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/sid3.php"] [unique_id "aryyWtqTm83YguA3303IeQAAAMQ"]
[Wed Sep 30 00:55:22.102325 2026] [security2:error] [pid 178882:tid 179296] [client 82.102.18.126:33032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryyWtqTm83YguA3303IfQAAAO4"]
[Wed Sep 30 00:55:22.107460 2026] [security2:error] [pid 178882:tid 179302] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IfgAAAPQ"]
[Wed Sep 30 00:55:22.121696 2026] [security2:error] [pid 178882:tid 179299] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IgAAAAPE"]
[Wed Sep 30 00:55:22.150926 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.151179 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.166615 2026] [security2:error] [pid 178882:tid 179318] [client 20.219.14.152:26538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/cued.php"] [unique_id "aryyWtqTm83YguA3303IhQAAAQI"]
[Wed Sep 30 00:55:22.178966 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:48887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gaza.php"] [unique_id "aryyWtqTm83YguA3303IhgAAAKo"]
[Wed Sep 30 00:55:22.208022 2026] [security2:error] [pid 178882:tid 179316] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/pages"] [unique_id "aryyWtqTm83YguA3303IigAAAQA"]
[Wed Sep 30 00:55:22.234120 2026] [security2:error] [pid 178882:tid 179287] [client 20.204.161.246:48519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/ops.php"] [unique_id "aryyWtqTm83YguA3303IiwAAAOU"]
[Wed Sep 30 00:55:22.242433 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.242688 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.246589 2026] [security2:error] [pid 178882:tid 179186] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IjgAAAIY"]
[Wed Sep 30 00:55:22.260063 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:55:22.260490 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:55:22.314619 2026] [security2:error] [pid 178882:tid 179250] [client 20.214.145.90:38397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/admin.php/nope.php"] [unique_id "aryyWtqTm83YguA3303IkgAAAMI"]
[Wed Sep 30 00:55:22.323201 2026] [security2:error] [pid 178882:tid 179319] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IkwAAAQM"]
[Wed Sep 30 00:55:22.333372 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.333625 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:13815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.372328 2026] [security2:error] [pid 178882:tid 179185] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303ImAAAAIU"]
[Wed Sep 30 00:55:22.372687 2026] [security2:error] [pid 178882:tid 179246] [client 20.251.39.228:35173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/666.php"] [unique_id "aryyWtqTm83YguA3303ImQAAAL4"]
[Wed Sep 30 00:55:22.414886 2026] [security2:error] [pid 178882:tid 179268] [client 82.102.18.126:33044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryyWtqTm83YguA3303InAAAANQ"]
[Wed Sep 30 00:55:22.428253 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.428684 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.497015 2026] [security2:error] [pid 178882:tid 179282] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IpwAAAOA"]
[Wed Sep 30 00:55:22.498046 2026] [security2:error] [pid 178882:tid 179306] [client 4.240.25.22:21939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/well.php"] [unique_id "aryyWtqTm83YguA3303IqAAAAPg"]
[Wed Sep 30 00:55:22.515468 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.515821 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.534107 2026] [security2:error] [pid 178882:tid 179263] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IrwAAAM8"]
[Wed Sep 30 00:55:22.560021 2026] [security2:error] [pid 178882:tid 179191] [client 4.240.25.22:18694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/baba.php"] [unique_id "aryyWtqTm83YguA3303IsAAAAIs"]
[Wed Sep 30 00:55:22.614261 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.614701 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.621664 2026] [security2:error] [pid 178882:tid 179314] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303ItwAAAP4"]
[Wed Sep 30 00:55:22.628590 2026] [security2:error] [pid 178882:tid 179272] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyWtqTm83YguA3303IuAAAANc"]
[Wed Sep 30 00:55:22.642062 2026] [security2:error] [pid 178882:tid 179254] [client 20.214.145.90:43452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/222.php"] [unique_id "aryyWtqTm83YguA3303IuwAAAMY"]
[Wed Sep 30 00:55:22.698798 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.699061 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.717869 2026] [security2:error] [pid 178882:tid 179320] [client 82.102.18.126:33058] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryyWtqTm83YguA3303IwgAAAQQ"]
[Wed Sep 30 00:55:22.745094 2026] [security2:error] [pid 178882:tid 179298] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/media"] [unique_id "aryyWtqTm83YguA3303IxwAAAPA"]
[Wed Sep 30 00:55:22.745684 2026] [security2:error] [pid 178882:tid 179316] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IyAAAAQA"]
[Wed Sep 30 00:55:22.745792 2026] [security2:error] [pid 178882:tid 179216] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303IyQAAAKI"]
[Wed Sep 30 00:55:22.757654 2026] [access_compat:error] [pid 178882:tid 179284] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 00:55:22.757911 2026] [access_compat:error] [pid 178882:tid 179284] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 00:55:22.791533 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.791791 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.796447 2026] [security2:error] [pid 178882:tid 179222] [client 20.251.39.228:29924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/xxw.php"] [unique_id "aryyWtqTm83YguA3303IzAAAAKg"]
[Wed Sep 30 00:55:22.847107 2026] [security2:error] [pid 178882:tid 179218] [client 20.219.2.60:58486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/grsiuk.php"] [unique_id "aryyWtqTm83YguA3303IzQAAAKQ"]
[Wed Sep 30 00:55:22.867290 2026] [security2:error] [pid 178882:tid 179196] [client 223.181.30.165:28037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyWtqTm83YguA3303IzwAAAJA"]
[Wed Sep 30 00:55:22.867388 2026] [security2:error] [pid 178882:tid 179196] [client 223.181.30.165:28037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyWtqTm83YguA3303IzwAAAJA"]
[Wed Sep 30 00:55:22.871954 2026] [security2:error] [pid 178882:tid 179311] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303I0gAAAPw"]
[Wed Sep 30 00:55:22.881695 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.881987 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.900776 2026] [security2:error] [pid 178882:tid 179260] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyWtqTm83YguA3303I2AAAAMw"]
[Wed Sep 30 00:55:22.924990 2026] [security2:error] [pid 178882:tid 179228] [client 20.214.145.90:28289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/sallu.php"] [unique_id "aryyWtqTm83YguA3303I2wAAAK4"]
[Wed Sep 30 00:55:22.940145 2026] [security2:error] [pid 178882:tid 179210] [client 20.219.14.152:26558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/sd.php"] [unique_id "aryyWtqTm83YguA3303I3wAAAJw"]
[Wed Sep 30 00:55:22.955014 2026] [security2:error] [pid 178882:tid 179269] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303I4gAAANU"]
[Wed Sep 30 00:55:22.972015 2026] [security2:error] [pid 178882:tid 179243] [client 202.179.95.79:49635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyWtqTm83YguA3303I5AAAALs"]
[Wed Sep 30 00:55:22.972154 2026] [security2:error] [pid 178882:tid 179243] [client 202.179.95.79:49635] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyWtqTm83YguA3303I5AAAALs"]
[Wed Sep 30 00:55:22.973440 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:22.973681 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:22.999141 2026] [security2:error] [pid 178882:tid 179264] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyWtqTm83YguA3303I6gAAANA"]
[Wed Sep 30 00:55:23.018564 2026] [security2:error] [pid 178882:tid 179265] [client 105.112.178.79:38116] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fbd.ozt.mybluehost.me"] [uri "/__ss_probe_cf6c65fa08c356a3b3e4b47b53cb6b1e__"] [unique_id "aryyW9qTm83YguA3303I7gAAANE"]
[Wed Sep 30 00:55:23.031593 2026] [security2:error] [pid 178882:tid 179300] [client 20.28.180.172:29467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/ded.php"] [unique_id "aryyW9qTm83YguA3303I7wAAAPI"]
[Wed Sep 30 00:55:23.047987 2026] [security2:error] [pid 178882:tid 179267] [client 43.130.139.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryyW9qTm83YguA3303I8gAAANM"]
[Wed Sep 30 00:55:23.057544 2026] [security2:error] [pid 178882:tid 179281] [client 82.102.18.126:33064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryyW9qTm83YguA3303I9QAAAN8"]
[Wed Sep 30 00:55:23.069121 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.069564 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.083045 2026] [security2:error] [pid 178882:tid 179245] [client 20.219.2.60:36779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-png.php"] [unique_id "aryyW9qTm83YguA3303I_QAAAL0"]
[Wed Sep 30 00:55:23.106050 2026] [security2:error] [pid 178882:tid 179301] [client 150.107.232.159:35975] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303I7QAAAPM"]
[Wed Sep 30 00:55:23.106840 2026] [security2:error] [pid 178882:tid 179301] [client 150.107.232.159:35975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303I7QAAAPM"]
[Wed Sep 30 00:55:23.107869 2026] [security2:error] [pid 178882:tid 179234] [client 20.194.30.107:9991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/100.php"] [unique_id "aryyW9qTm83YguA3303JAQAAALQ"]
[Wed Sep 30 00:55:23.124567 2026] [security2:error] [pid 178882:tid 179316] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JAwAAAQA"]
[Wed Sep 30 00:55:23.135942 2026] [security2:error] [pid 178882:tid 179203] [client 20.219.2.60:18873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/njxjtooj.php"] [unique_id "aryyW9qTm83YguA3303JBQAAAJY"]
[Wed Sep 30 00:55:23.141485 2026] [security2:error] [pid 178882:tid 179194] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/categories"] [unique_id "aryyW9qTm83YguA3303JBgAAAI4"]
[Wed Sep 30 00:55:23.148967 2026] [security2:error] [pid 178882:tid 179217] [client 20.251.39.228:26791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-png.php"] [unique_id "aryyW9qTm83YguA3303JCAAAAKM"]
[Wed Sep 30 00:55:23.153760 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.154031 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.165850 2026] [security2:error] [pid 178882:tid 179315] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JCQAAAP8"]
[Wed Sep 30 00:55:23.231266 2026] [security2:error] [pid 178882:tid 179279] [client 20.214.145.90:28285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/k.php"] [unique_id "aryyW9qTm83YguA3303JDQAAAN0"]
[Wed Sep 30 00:55:23.245897 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.246169 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.249234 2026] [security2:error] [pid 178882:tid 179185] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JDwAAAIU"]
[Wed Sep 30 00:55:23.259416 2026] [access_compat:error] [pid 178882:tid 179214] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 00:55:23.259858 2026] [access_compat:error] [pid 178882:tid 179214] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 00:55:23.292717 2026] [security2:error] [pid 178882:tid 179310] [client 152.59.165.7:59865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JEQAAAPs"]
[Wed Sep 30 00:55:23.292868 2026] [security2:error] [pid 178882:tid 179310] [client 152.59.165.7:59865] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JEQAAAPs"]
[Wed Sep 30 00:55:23.338003 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.338359 2026] [access_compat:error] [pid 178882:tid 179193] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.362945 2026] [security2:error] [pid 178882:tid 179305] [client 82.102.18.126:33074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryyW9qTm83YguA3303JFgAAAPc"]
[Wed Sep 30 00:55:23.373129 2026] [security2:error] [pid 178882:tid 179299] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JFwAAAPE"]
[Wed Sep 30 00:55:23.375385 2026] [security2:error] [pid 178882:tid 179314] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JGAAAAP4"]
[Wed Sep 30 00:55:23.377229 2026] [security2:error] [pid 178882:tid 179273] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyW9qTm83YguA3303JGQAAANg"]
[Wed Sep 30 00:55:23.378632 2026] [security2:error] [pid 178882:tid 179319] [client 20.219.2.60:58434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-act.php"] [unique_id "aryyW9qTm83YguA3303JGgAAAQM"]
[Wed Sep 30 00:55:23.426935 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.427202 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.499434 2026] [security2:error] [pid 178882:tid 179231] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JIwAAALE"]
[Wed Sep 30 00:55:23.509369 2026] [security2:error] [pid 178882:tid 179306] [client 203.122.45.246:50370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JJAAAAPg"]
[Wed Sep 30 00:55:23.509490 2026] [security2:error] [pid 178882:tid 179306] [client 203.122.45.246:50370] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JJAAAAPg"]
[Wed Sep 30 00:55:23.516328 2026] [security2:error] [pid 178882:tid 179206] [client 20.251.39.228:35199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/222.php"] [unique_id "aryyW9qTm83YguA3303JJgAAAJk"]
[Wed Sep 30 00:55:23.518622 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.518886 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.547831 2026] [security2:error] [pid 178882:tid 179272] [client 72.255.10.32:54352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JKAAAANc"]
[Wed Sep 30 00:55:23.547982 2026] [security2:error] [pid 178882:tid 179272] [client 72.255.10.32:54352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JKAAAANc"]
[Wed Sep 30 00:55:23.568131 2026] [security2:error] [pid 178882:tid 179219] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/tags"] [unique_id "aryyW9qTm83YguA3303JLAAAAKU"]
[Wed Sep 30 00:55:23.586942 2026] [security2:error] [pid 178882:tid 179316] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JLgAAAQA"]
[Wed Sep 30 00:55:23.601080 2026] [security2:error] [pid 178882:tid 179187] [client 49.36.41.37:58203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JMAAAAIc"]
[Wed Sep 30 00:55:23.601172 2026] [security2:error] [pid 178882:tid 179187] [client 49.36.41.37:58203] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JMAAAAIc"]
[Wed Sep 30 00:55:23.607632 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.607897 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.624390 2026] [security2:error] [pid 178882:tid 179303] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JMgAAAPU"]
[Wed Sep 30 00:55:23.674271 2026] [security2:error] [pid 178882:tid 179278] [client 20.219.14.152:26431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/ans.php"] [unique_id "aryyW9qTm83YguA3303JNQAAANw"]
[Wed Sep 30 00:55:23.676465 2026] [security2:error] [pid 178882:tid 179287] [client 82.102.18.126:40100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zzg.rcn.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryyW9qTm83YguA3303JNgAAAOU"]
[Wed Sep 30 00:55:23.690755 2026] [security2:error] [pid 178882:tid 179298] [client 20.214.145.90:28615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/24.php"] [unique_id "aryyW9qTm83YguA3303JNwAAAPA"]
[Wed Sep 30 00:55:23.700228 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.700494 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.726382 2026] [security2:error] [pid 178882:tid 179186] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyW9qTm83YguA3303JPAAAAIY"]
[Wed Sep 30 00:55:23.748614 2026] [security2:error] [pid 178882:tid 179220] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JPgAAAKY"]
[Wed Sep 30 00:55:23.751802 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3QvcHJvYw==
[Wed Sep 30 00:55:23.752220 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3QvcHJvYw==
[Wed Sep 30 00:55:23.783860 2026] [security2:error] [pid 178882:tid 179239] [client 103.159.192.142:55596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JQAAAALg"]
[Wed Sep 30 00:55:23.783969 2026] [security2:error] [pid 178882:tid 179239] [client 103.159.192.142:55596] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JQAAAALg"]
[Wed Sep 30 00:55:23.791600 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.791865 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.796215 2026] [security2:error] [pid 178882:tid 179259] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JRAAAAMs"]
[Wed Sep 30 00:55:23.877093 2026] [security2:error] [pid 178882:tid 179310] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JUgAAAPs"]
[Wed Sep 30 00:55:23.880578 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.880863 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:55491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.888284 2026] [security2:error] [pid 178882:tid 179201] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/posts/999998"] [unique_id "aryyW9qTm83YguA3303JUwAAAJU"]
[Wed Sep 30 00:55:23.925319 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:48881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/cu.php"] [unique_id "aryyW9qTm83YguA3303JVQAAAKo"]
[Wed Sep 30 00:55:23.931667 2026] [security2:error] [pid 178882:tid 179211] [client 20.204.161.246:48783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/BDKR28WP.php"] [unique_id "aryyW9qTm83YguA3303JVgAAAJ0"]
[Wed Sep 30 00:55:23.977479 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:23.977924 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:23.989588 2026] [security2:error] [pid 178882:tid 179269] [client 20.214.145.90:28287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/blacks.php"] [unique_id "aryyW9qTm83YguA3303JWAAAANU"]
[Wed Sep 30 00:55:23.995872 2026] [security2:error] [pid 178882:tid 179233] [client 39.44.16.112:65093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JWgAAALM"]
[Wed Sep 30 00:55:23.996994 2026] [security2:error] [pid 178882:tid 179233] [client 39.44.16.112:65093] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyW9qTm83YguA3303JWgAAALM"]
[Wed Sep 30 00:55:24.001203 2026] [security2:error] [pid 178882:tid 179243] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyW9qTm83YguA3303JXAAAALs"]
[Wed Sep 30 00:55:24.006773 2026] [security2:error] [pid 178882:tid 179314] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JXQAAAP4"]
[Wed Sep 30 00:55:24.027420 2026] [security2:error] [pid 178882:tid 179264] [client 20.194.30.107:64308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/mac.php"] [unique_id "aryyXNqTm83YguA3303JYQAAANA"]
[Wed Sep 30 00:55:24.047390 2026] [security2:error] [pid 178882:tid 179230] [client 20.219.2.60:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws85.php"] [unique_id "aryyXNqTm83YguA3303JZQAAALA"]
[Wed Sep 30 00:55:24.065022 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.065469 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.067574 2026] [security2:error] [pid 178882:tid 179262] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyXNqTm83YguA3303JaQAAAM4"]
[Wed Sep 30 00:55:24.071510 2026] [security2:error] [pid 178882:tid 179283] [client 20.251.39.228:7889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-blog.php"] [unique_id "aryyXNqTm83YguA3303JawAAAOE"]
[Wed Sep 30 00:55:24.072883 2026] [security2:error] [pid 178882:tid 179206] [client 216.73.216.46:55491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyXNqTm83YguA3303JbAAAAJk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTQvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:24.125111 2026] [security2:error] [pid 178882:tid 179221] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JcgAAAKc"]
[Wed Sep 30 00:55:24.149021 2026] [security2:error] [pid 178882:tid 179252] [client 213.136.69.135:64820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/block-editor.php"] [unique_id "aryyXNqTm83YguA3303JdAAAAMQ"], referer: binance.com
[Wed Sep 30 00:55:24.150998 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:10880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-class-atom.php"] [unique_id "aryyXNqTm83YguA3303JdQAAAJ4"]
[Wed Sep 30 00:55:24.157415 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.157826 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.201473 2026] [security2:error] [pid 178882:tid 179278] [client 20.219.14.152:26529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/cns.php"] [unique_id "aryyXNqTm83YguA3303JdgAAANw"]
[Wed Sep 30 00:55:24.216486 2026] [security2:error] [pid 178882:tid 179287] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JdwAAAOU"]
[Wed Sep 30 00:55:24.249994 2026] [security2:error] [pid 178882:tid 179313] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JewAAAP0"]
[Wed Sep 30 00:55:24.267931 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L25ldA==
[Wed Sep 30 00:55:24.268186 2026] [access_compat:error] [pid 178882:tid 179302] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L25ldA==
[Wed Sep 30 00:55:24.296441 2026] [security2:error] [pid 178882:tid 179280] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/posts/99999"] [unique_id "aryyXNqTm83YguA3303JfgAAAN4"]
[Wed Sep 30 00:55:24.306275 2026] [security2:error] [pid 178882:tid 179217] [client 20.214.145.90:38338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/anom.php"] [unique_id "aryyXNqTm83YguA3303JfwAAAKM"]
[Wed Sep 30 00:55:24.315409 2026] [security2:error] [pid 178882:tid 179244] [client 103.148.43.14:55569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JgAAAALw"]
[Wed Sep 30 00:55:24.315529 2026] [security2:error] [pid 178882:tid 179244] [client 103.148.43.14:55569] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JgAAAALw"]
[Wed Sep 30 00:55:24.356316 2026] [security2:error] [pid 178882:tid 179227] [client 43.227.131.37:55451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JgQAAAK0"]
[Wed Sep 30 00:55:24.356426 2026] [security2:error] [pid 178882:tid 179227] [client 43.227.131.37:55451] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JgQAAAK0"]
[Wed Sep 30 00:55:24.357363 2026] [security2:error] [pid 178882:tid 179226] [client 223.235.102.107:23540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JggAAAKw"]
[Wed Sep 30 00:55:24.357541 2026] [security2:error] [pid 178882:tid 179226] [client 223.235.102.107:23540] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyXNqTm83YguA3303JggAAAKw"]
[Wed Sep 30 00:55:24.374297 2026] [security2:error] [pid 178882:tid 179232] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JhQAAALI"]
[Wed Sep 30 00:55:24.426115 2026] [security2:error] [pid 178882:tid 179190] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JiAAAAIo"]
[Wed Sep 30 00:55:24.483851 2026] [security2:error] [pid 178882:tid 179209] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyXNqTm83YguA3303JiwAAAJs"]
[Wed Sep 30 00:55:24.498323 2026] [security2:error] [pid 178882:tid 179305] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JjAAAAPc"]
[Wed Sep 30 00:55:24.622930 2026] [security2:error] [pid 178882:tid 179210] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JlgAAAJw"]
[Wed Sep 30 00:55:24.630457 2026] [security2:error] [pid 178882:tid 179266] [client 20.70.173.30:25144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/min.php"] [unique_id "aryyXNqTm83YguA3303JlwAAANI"]
[Wed Sep 30 00:55:24.635465 2026] [security2:error] [pid 178882:tid 179191] [client 84.8.102.109:57305] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JmQAAAIs"]
[Wed Sep 30 00:55:24.651185 2026] [security2:error] [pid 178882:tid 179229] [client 20.251.39.228:41419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryyXNqTm83YguA3303JnAAAAK8"]
[Wed Sep 30 00:55:24.663865 2026] [security2:error] [pid 178882:tid 179285] [client 20.214.145.90:38345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/groud3.php"] [unique_id "aryyXNqTm83YguA3303JnQAAAOM"]
[Wed Sep 30 00:55:24.676719 2026] [security2:error] [pid 178882:tid 179300] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/posts/9999999"] [unique_id "aryyXNqTm83YguA3303JnwAAAPI"]
[Wed Sep 30 00:55:24.704605 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.704862 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.747705 2026] [security2:error] [pid 178882:tid 179219] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JogAAAKU"]
[Wed Sep 30 00:55:24.770361 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.770628 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:46824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.774353 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25ldA==
[Wed Sep 30 00:55:24.774607 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25ldA==
[Wed Sep 30 00:55:24.793981 2026] [security2:error] [pid 178882:tid 179281] [client 20.219.2.60:58442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/8.php"] [unique_id "aryyXNqTm83YguA3303JpgAAAN8"]
[Wed Sep 30 00:55:24.795599 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.795867 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.811276 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.811522 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.822747 2026] [security2:error] [pid 178882:tid 179315] [client 20.219.14.152:26550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/faiy.php"] [unique_id "aryyXNqTm83YguA3303JqgAAAP8"]
[Wed Sep 30 00:55:24.826196 2026] [access_compat:error] [pid 178882:tid 179316] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.826463 2026] [access_compat:error] [pid 178882:tid 179316] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.842474 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.842742 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.872087 2026] [security2:error] [pid 178882:tid 179234] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JrwAAALQ"]
[Wed Sep 30 00:55:24.886800 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.887221 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.901193 2026] [security2:error] [pid 178882:tid 179293] [client 20.204.42.136:57177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/2fa307c31b.php"] [unique_id "aryyXNqTm83YguA3303JsgAAAOs"]
[Wed Sep 30 00:55:24.916789 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.917053 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.974362 2026] [security2:error] [pid 178882:tid 179313] [client 20.214.145.90:43433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/gaxby.php"] [unique_id "aryyXNqTm83YguA3303JtQAAAP0"]
[Wed Sep 30 00:55:24.974714 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:24.974994 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:24.997359 2026] [security2:error] [pid 178882:tid 179271] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXNqTm83YguA3303JtgAAANY"]
[Wed Sep 30 00:55:25.075669 2026] [security2:error] [pid 178882:tid 179100] [remote 47.128.34.1:44056] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.elearning.ephodgroup.com"] [uri "/"] [unique_id "aryyXdqTm83YguA3303JuQAA3jA"]
[Wed Sep 30 00:55:25.121145 2026] [security2:error] [pid 178882:tid 179239] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303JvgAAALg"]
[Wed Sep 30 00:55:25.129593 2026] [security2:error] [pid 178882:tid 179227] [client 20.219.2.60:36778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/222.php"] [unique_id "aryyXdqTm83YguA3303JvwAAAK0"]
[Wed Sep 30 00:55:25.145407 2026] [security2:error] [pid 178882:tid 179306] [client 49.205.105.16:14647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyXdqTm83YguA3303JwQAAAPg"]
[Wed Sep 30 00:55:25.145511 2026] [security2:error] [pid 178882:tid 179306] [client 49.205.105.16:14647] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyXdqTm83YguA3303JwQAAAPg"]
[Wed Sep 30 00:55:25.195505 2026] [security2:error] [pid 178882:tid 179134] [remote 47.128.114.152:35414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/22/stock-market-sheds-5417-points-on-week-end"] [unique_id "aryyXdqTm83YguA3303JwgAA3VA"]
[Wed Sep 30 00:55:25.211039 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.211299 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.225938 2026] [security2:error] [pid 178882:tid 179310] [client 20.251.39.228:17118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/lib.php"] [unique_id "aryyXdqTm83YguA3303JxAAAAPs"]
[Wed Sep 30 00:55:25.233581 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 00:55:25.233837 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 00:55:25.245166 2026] [security2:error] [pid 178882:tid 179196] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303JxgAAAJA"]
[Wed Sep 30 00:55:25.258225 2026] [security2:error] [pid 178882:tid 179309] [client 20.214.145.90:28227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/dh9u7.php"] [unique_id "aryyXdqTm83YguA3303JxwAAAPo"]
[Wed Sep 30 00:55:25.291351 2026] [security2:error] [pid 178882:tid 179257] [client 4.240.25.22:21525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryyXdqTm83YguA3303JygAAAMk"]
[Wed Sep 30 00:55:25.302499 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.302778 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.316771 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:48886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws60.php"] [unique_id "aryyXdqTm83YguA3303JzgAAAKo"]
[Wed Sep 30 00:55:25.321283 2026] [security2:error] [pid 178882:tid 179268] [client 104.28.254.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/"] [unique_id "aryyXdqTm83YguA3303JzwAAANQ"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:25.349697 2026] [security2:error] [pid 178882:tid 179275] [client 20.219.14.152:26394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gecho.php"] [unique_id "aryyXdqTm83YguA3303J0AAAANk"]
[Wed Sep 30 00:55:25.370764 2026] [security2:error] [pid 178882:tid 179233] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303J0QAAALM"]
[Wed Sep 30 00:55:25.392608 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.392923 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.405590 2026] [security2:error] [pid 178882:tid 179178] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyXdqTm83YguA3303J0wAA1Xw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=a81264183bc58a581254e1f64a89e522&start=15&t=21359
[Wed Sep 30 00:55:25.405612 2026] [security2:error] [pid 178882:tid 179178] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyXdqTm83YguA3303J0wAA1Xw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=a81264183bc58a581254e1f64a89e522&start=15&t=21359
[Wed Sep 30 00:55:25.409371 2026] [security2:error] [pid 178882:tid 179225] [client 103.24.86.56:50463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyXdqTm83YguA3303J1AAAAKs"]
[Wed Sep 30 00:55:25.409917 2026] [security2:error] [pid 178882:tid 179225] [client 103.24.86.56:50463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyXdqTm83YguA3303J1AAAAKs"]
[Wed Sep 30 00:55:25.442415 2026] [security2:error] [pid 178882:tid 179238] [client 20.198.74.230:23881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/kbqhb.php"] [unique_id "aryyXdqTm83YguA3303J1QAAALc"]
[Wed Sep 30 00:55:25.466614 2026] [security2:error] [pid 178882:tid 179301] [client 106.214.3.140:3076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryyXdqTm83YguA3303JzQAAAPM"]
[Wed Sep 30 00:55:25.483382 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.483644 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.497881 2026] [security2:error] [pid 178882:tid 179265] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303J2gAAANE"]
[Wed Sep 30 00:55:25.522750 2026] [security2:error] [pid 178882:tid 179185] [client 20.194.30.107:25165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/simple.php"] [unique_id "aryyXdqTm83YguA3303J3AAAAIU"]
[Wed Sep 30 00:55:25.544215 2026] [security2:error] [pid 178882:tid 179258] [client 20.214.145.90:28261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/koiy.php"] [unique_id "aryyXdqTm83YguA3303J3QAAAMo"]
[Wed Sep 30 00:55:25.557926 2026] [security2:error] [pid 178882:tid 179193] [client 169.40.142.133:46484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ewj.sxn.mybluehost.me"] [uri "/index.php"] [unique_id "aryyXdqTm83YguA3303J3wAAAI0"]
[Wed Sep 30 00:55:25.573401 2026] [security2:error] [pid 178882:tid 179261] [client 20.219.2.60:18826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws61.php"] [unique_id "aryyXdqTm83YguA3303J4gAAAM0"]
[Wed Sep 30 00:55:25.578100 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.578509 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.587959 2026] [security2:error] [pid 178882:tid 179254] [client 20.251.39.228:15542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/edit.php"] [unique_id "aryyXdqTm83YguA3303J4wAAAMY"]
[Wed Sep 30 00:55:25.622976 2026] [security2:error] [pid 178882:tid 179200] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303J5wAAAJQ"]
[Wed Sep 30 00:55:25.665656 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.665930 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.746582 2026] [security2:error] [pid 178882:tid 179313] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303J7AAAAP0"]
[Wed Sep 30 00:55:25.756144 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.756443 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.774636 2026] [access_compat:error] [pid 178882:tid 179236] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 00:55:25.774911 2026] [access_compat:error] [pid 178882:tid 179236] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 00:55:25.844455 2026] [security2:error] [pid 178882:tid 179277] [client 20.219.14.152:26414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/gu.php"] [unique_id "aryyXdqTm83YguA3303J8gAAANs"]
[Wed Sep 30 00:55:25.846847 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.847127 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.870710 2026] [security2:error] [pid 178882:tid 179302] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303J9AAAAPQ"]
[Wed Sep 30 00:55:25.870875 2026] [security2:error] [pid 178882:tid 179195] [client 20.219.2.60:48852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/vanda.php"] [unique_id "aryyXdqTm83YguA3303J9gAAAI8"]
[Wed Sep 30 00:55:25.897694 2026] [security2:error] [pid 178882:tid 179259] [client 20.214.145.90:28295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wordfence-waf.php"] [unique_id "aryyXdqTm83YguA3303J9wAAAMs"]
[Wed Sep 30 00:55:25.923658 2026] [autoindex:error] [pid 178882:tid 179212] [client 212.156.70.154:58822] AH01276: Cannot serve directory /home4/iajwarmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:25.938369 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:25.938686 2026] [access_compat:error] [pid 178882:tid 179297] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:25.944058 2026] [security2:error] [pid 178882:tid 179290] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyXdqTm83YguA3303KAQAAAOg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:25.977987 2026] [autoindex:error] [pid 178882:tid 179209] [client 43.157.95.131:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/CanacoAppWeb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:25.991827 2026] [security2:error] [pid 178882:tid 179263] [client 20.251.39.228:30174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ioxi-o.php"] [unique_id "aryyXdqTm83YguA3303KBwAAAM8"]
[Wed Sep 30 00:55:25.996021 2026] [security2:error] [pid 178882:tid 179211] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXdqTm83YguA3303KCAAAAJ0"]
[Wed Sep 30 00:55:26.016508 2026] [security2:error] [pid 178882:tid 179275] [client 74.7.175.174:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ferrari355spider.com"] [uri "/robots.txt"] [unique_id "aryyXtqTm83YguA3303KCQAAANk"]
[Wed Sep 30 00:55:26.018992 2026] [security2:error] [pid 178882:tid 179227] [client 74.7.175.174:34278] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ferrari355spider.com"] [uri "/robots.txt"] [unique_id "aryyXdqTm83YguA3303KAAAArTg"]
[Wed Sep 30 00:55:26.028978 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.029235 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.058673 2026] [security2:error] [pid 178882:tid 179269] [client 20.194.30.107:30406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/kir.php"] [unique_id "aryyXtqTm83YguA3303KDAAAANU"]
[Wed Sep 30 00:55:26.121086 2026] [security2:error] [pid 178882:tid 179185] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KGAAAAIU"]
[Wed Sep 30 00:55:26.121901 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.122149 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.161142 2026] [security2:error] [pid 178882:tid 179282] [client 20.219.2.60:10643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-block.php"] [unique_id "aryyXtqTm83YguA3303KHAAAAOA"]
[Wed Sep 30 00:55:26.188165 2026] [security2:error] [pid 178882:tid 179314] [client 20.214.145.90:28258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/em.php"] [unique_id "aryyXtqTm83YguA3303KHQAAAP4"]
[Wed Sep 30 00:55:26.213081 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.213344 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.234740 2026] [security2:error] [pid 178882:tid 179198] [client 20.194.30.107:51804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/gecko.php"] [unique_id "aryyXtqTm83YguA3303KHwAAAJI"]
[Wed Sep 30 00:55:26.246313 2026] [security2:error] [pid 178882:tid 179219] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KIQAAAKU"]
[Wed Sep 30 00:55:26.257605 2026] [security2:error] [pid 178882:tid 179213] [client 20.219.2.60:36850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-blog.php"] [unique_id "aryyXtqTm83YguA3303KIgAAAJ8"]
[Wed Sep 30 00:55:26.275624 2026] [access_compat:error] [pid 178882:tid 179315] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 00:55:26.275896 2026] [access_compat:error] [pid 178882:tid 179315] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 00:55:26.302724 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.303030 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:42704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.347218 2026] [security2:error] [pid 178882:tid 179320] [client 4.240.25.22:63750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/ccc.php"] [unique_id "aryyXtqTm83YguA3303KKAAAAQQ"]
[Wed Sep 30 00:55:26.357071 2026] [security2:error] [pid 178882:tid 179203] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyXtqTm83YguA3303KKQAAAJY"]
[Wed Sep 30 00:55:26.371419 2026] [security2:error] [pid 178882:tid 179316] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KLAAAAQA"]
[Wed Sep 30 00:55:26.379204 2026] [security2:error] [pid 178882:tid 179278] [client 20.219.2.60:55827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/domains.php"] [unique_id "aryyXtqTm83YguA3303KLQAAANw"]
[Wed Sep 30 00:55:26.384359 2026] [security2:error] [pid 178882:tid 179248] [client 20.219.14.152:26438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/nck.php"] [unique_id "aryyXtqTm83YguA3303KLgAAAMA"]
[Wed Sep 30 00:55:26.393325 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.393574 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.393628 2026] [security2:error] [pid 178882:tid 179206] [client 20.251.39.228:15529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ajax.php"] [unique_id "aryyXtqTm83YguA3303KMAAAAJk"]
[Wed Sep 30 00:55:26.421112 2026] [security2:error] [pid 178882:tid 179276] [client 20.204.42.136:57179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/aqotrjkg.php"] [unique_id "aryyXtqTm83YguA3303KMgAAANo"]
[Wed Sep 30 00:55:26.438639 2026] [security2:error] [pid 178882:tid 179253] [client 20.219.2.60:18913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/iyy.php"] [unique_id "aryyXtqTm83YguA3303KMwAAAMU"]
[Wed Sep 30 00:55:26.467959 2026] [security2:error] [pid 178882:tid 179277] [client 20.214.145.90:38364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/hp.php"] [unique_id "aryyXtqTm83YguA3303KNgAAANs"]
[Wed Sep 30 00:55:26.483605 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.483866 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.487635 2026] [security2:error] [pid 178882:tid 179255] [client 216.73.216.46:42704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyXtqTm83YguA3303KOwAAAMc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxOC9kcml2ZXIvY3B1MTQ%3D
[Wed Sep 30 00:55:26.496104 2026] [security2:error] [pid 178882:tid 179290] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KPAAAAOg"]
[Wed Sep 30 00:55:26.543629 2026] [security2:error] [pid 178882:tid 179244] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/wp/v2/users"] [unique_id "aryyXtqTm83YguA3303KRAAAALw"]
[Wed Sep 30 00:55:26.546661 2026] [security2:error] [pid 178882:tid 179077] [remote 57.141.14.31:42408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "aryyXtqTm83YguA3303KQQAA-Bk"]
[Wed Sep 30 00:55:26.571219 2026] [security2:error] [pid 178882:tid 179188] [client 49.43.163.212:53178] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyXtqTm83YguA3303KRQAAAIg"]
[Wed Sep 30 00:55:26.571404 2026] [security2:error] [pid 178882:tid 179188] [client 49.43.163.212:53178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyXtqTm83YguA3303KRQAAAIg"]
[Wed Sep 30 00:55:26.577906 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.578294 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.620138 2026] [security2:error] [pid 178882:tid 179238] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KSwAAALc"]
[Wed Sep 30 00:55:26.671700 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.672143 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.704526 2026] [security2:error] [pid 178882:tid 179296] [client 20.251.39.228:26808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/install.php"] [unique_id "aryyXtqTm83YguA3303KVQAAAO4"]
[Wed Sep 30 00:55:26.745054 2026] [security2:error] [pid 178882:tid 179292] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KVgAAAOo"]
[Wed Sep 30 00:55:26.757920 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.758175 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:21160] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.766988 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:55:26.767245 2026] [access_compat:error] [pid 178882:tid 179245] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:55:26.823986 2026] [security2:error] [pid 178882:tid 179247] [client 20.214.145.90:38353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.youth2026.org"] [uri "/wpuse.php"] [unique_id "aryyXtqTm83YguA3303KXQAAAL8"]
[Wed Sep 30 00:55:26.853906 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.854184 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.869643 2026] [security2:error] [pid 178882:tid 179264] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KYgAAANA"]
[Wed Sep 30 00:55:26.879264 2026] [security2:error] [pid 178882:tid 179294] [client 20.219.2.60:55817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/144.php"] [unique_id "aryyXtqTm83YguA3303KYwAAAOw"]
[Wed Sep 30 00:55:26.891722 2026] [security2:error] [pid 178882:tid 179216] [client 20.194.30.107:25164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/yawa.php"] [unique_id "aryyXtqTm83YguA3303KZAAAAKI"]
[Wed Sep 30 00:55:26.939727 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:26.939989 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:26.951349 2026] [security2:error] [pid 178882:tid 179271] [client 216.73.216.46:21160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyXtqTm83YguA3303KaAAAANY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxOC9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:26.969593 2026] [security2:error] [pid 178882:tid 179236] [client 20.28.180.172:34249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/dex.php"] [unique_id "aryyXtqTm83YguA3303KaQAAALY"]
[Wed Sep 30 00:55:26.995754 2026] [security2:error] [pid 178882:tid 179222] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyXtqTm83YguA3303KawAAAKg"]
[Wed Sep 30 00:55:27.024800 2026] [security2:error] [pid 178882:tid 179281] [client 74.7.230.32:47948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ferrari250.com"] [uri "/robots.txt"] [unique_id "aryyXtqTm83YguA3303KXwAA30c"]
[Wed Sep 30 00:55:27.033294 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.033730 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.070069 2026] [security2:error] [pid 178882:tid 179251] [client 4.196.65.241:27276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ded.php"] [unique_id "aryyX9qTm83YguA3303KcwAAAMM"]
[Wed Sep 30 00:55:27.120818 2026] [security2:error] [pid 178882:tid 179297] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KdgAAAO8"]
[Wed Sep 30 00:55:27.121377 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.121615 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.140360 2026] [security2:error] [pid 178882:tid 179273] [client 20.251.39.228:29196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/public/wp-blog.php"] [unique_id "aryyX9qTm83YguA3303KdwAAANg"]
[Wed Sep 30 00:55:27.164274 2026] [security2:error] [pid 178882:tid 179212] [client 103.168.66.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/wordpress/"] [unique_id "aryyX9qTm83YguA3303KeQAAAJ4"]
[Wed Sep 30 00:55:27.189606 2026] [security2:error] [pid 178882:tid 179186] [client 20.194.30.107:64318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/txets.php"] [unique_id "aryyX9qTm83YguA3303KegAAAIY"]
[Wed Sep 30 00:55:27.210079 2026] [security2:error] [pid 178882:tid 179205] [client 103.159.192.142:55811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyX9qTm83YguA3303KfAAAAJg"]
[Wed Sep 30 00:55:27.210182 2026] [security2:error] [pid 178882:tid 179205] [client 103.159.192.142:55811] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyX9qTm83YguA3303KfAAAAJg"]
[Wed Sep 30 00:55:27.217544 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.217970 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.245943 2026] [security2:error] [pid 178882:tid 179268] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KfQAAANQ"]
[Wed Sep 30 00:55:27.260380 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.14.152:26502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/xtt.php"] [unique_id "aryyX9qTm83YguA3303KfwAAAKo"]
[Wed Sep 30 00:55:27.283990 2026] [access_compat:error] [pid 178882:tid 179275] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL25ldA==
[Wed Sep 30 00:55:27.284403 2026] [access_compat:error] [pid 178882:tid 179275] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL25ldA==
[Wed Sep 30 00:55:27.298033 2026] [security2:error] [pid 178882:tid 179190] [client 20.219.2.60:36780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryyX9qTm83YguA3303KhwAAAIo"]
[Wed Sep 30 00:55:27.304348 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.304616 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.317079 2026] [security2:error] [pid 178882:tid 179272] [client 103.168.66.101:24114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyX9qTm83YguA3303KiAAAANc"]
[Wed Sep 30 00:55:27.364068 2026] [security2:error] [pid 178882:tid 179227] [client 4.240.25.22:63806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/memberfuns.php"] [unique_id "aryyX9qTm83YguA3303KigAAAK0"]
[Wed Sep 30 00:55:27.371626 2026] [security2:error] [pid 178882:tid 179199] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KiwAAAJM"]
[Wed Sep 30 00:55:27.395625 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.395929 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.427057 2026] [security2:error] [pid 178882:tid 179225] [client 20.219.2.60:55853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/asd.php"] [unique_id "aryyX9qTm83YguA3303KkAAAAKs"]
[Wed Sep 30 00:55:27.474693 2026] [security2:error] [pid 178882:tid 179210] [client 8.219.117.146:50141] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "nysas.org"] [uri "/wp-json/batch/v1"] [unique_id "aryyX9qTm83YguA3303KkQAAAJw"]
[Wed Sep 30 00:55:27.477685 2026] [security2:error] [pid 178882:tid 179291] [client 20.194.30.107:17369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/images.php"] [unique_id "aryyX9qTm83YguA3303KkgAAAOk"]
[Wed Sep 30 00:55:27.485588 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.485864 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.498407 2026] [security2:error] [pid 178882:tid 179299] [client 138.3.211.255:59779] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KlAAAAPE"]
[Wed Sep 30 00:55:27.503727 2026] [security2:error] [pid 178882:tid 179197] [client 20.251.39.228:29235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/nw.php"] [unique_id "aryyX9qTm83YguA3303KlQAAAJE"]
[Wed Sep 30 00:55:27.513533 2026] [security2:error] [pid 178882:tid 179282] [client 20.219.2.60:10891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-signup.php"] [unique_id "aryyX9qTm83YguA3303KlwAAAOA"]
[Wed Sep 30 00:55:27.542517 2026] [security2:error] [pid 178882:tid 179252] [client 20.219.2.60:18865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/900.php"] [unique_id "aryyX9qTm83YguA3303KmQAAAMQ"]
[Wed Sep 30 00:55:27.574477 2026] [security2:error] [pid 178882:tid 179217] [client 45.138.12.32:14078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.soi.uhw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyX9qTm83YguA3303KnAAAAKM"]
[Wed Sep 30 00:55:27.579012 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.579256 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.671280 2026] [security2:error] [pid 178882:tid 179320] [client 20.194.30.107:10127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/term.php"] [unique_id "aryyX9qTm83YguA3303KoAAAAQQ"]
[Wed Sep 30 00:55:27.672471 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.672920 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.758904 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.759159 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.826894 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=error_log&p=L3Byb2MvMzc1NDg0L2N3ZA==
[Wed Sep 30 00:55:27.827346 2026] [access_compat:error] [pid 178882:tid 179228] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=error_log&p=L3Byb2MvMzc1NDg0L2N3ZA==
[Wed Sep 30 00:55:27.849514 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.849778 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.873864 2026] [security2:error] [pid 178882:tid 179248] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KrAAAAMA"]
[Wed Sep 30 00:55:27.878014 2026] [security2:error] [pid 178882:tid 179284] [client 20.70.173.30:25150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/100.php"] [unique_id "aryyX9qTm83YguA3303KrQAAAOI"]
[Wed Sep 30 00:55:27.895767 2026] [security2:error] [pid 178882:tid 179191] [client 4.240.25.22:20302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/inputs.php"] [unique_id "aryyX9qTm83YguA3303KrgAAAIs"]
[Wed Sep 30 00:55:27.909109 2026] [security2:error] [pid 178882:tid 179255] [client 20.219.14.152:26470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vinason.net"] [uri "/go.php"] [unique_id "aryyX9qTm83YguA3303KrwAAAMc"]
[Wed Sep 30 00:55:27.920971 2026] [security2:error] [pid 178882:tid 179290] [client 20.219.2.60:58483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/zc-104.php"] [unique_id "aryyX9qTm83YguA3303KsAAAAOg"]
[Wed Sep 30 00:55:27.940831 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:27.941091 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:27.951238 2026] [security2:error] [pid 178882:tid 179218] [client 104.28.254.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KtAAAAKQ"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:28.002287 2026] [security2:error] [pid 178882:tid 179186] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyX9qTm83YguA3303KtgAAAIY"]
[Wed Sep 30 00:55:28.031312 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.031574 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.038751 2026] [security2:error] [pid 178882:tid 179257] [client 169.40.142.133:46156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ewj.sxn.mybluehost.me"] [uri "/index.php"] [unique_id "aryyYNqTm83YguA3303KugAAAMk"]
[Wed Sep 30 00:55:28.126162 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.126651 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.126994 2026] [security2:error] [pid 178882:tid 179304] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303KxQAAAPY"]
[Wed Sep 30 00:55:28.154240 2026] [security2:error] [pid 178882:tid 179227] [client 20.194.30.107:17492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/biufile.php"] [unique_id "aryyYNqTm83YguA3303KxwAAAK0"]
[Wed Sep 30 00:55:28.214881 2026] [security2:error] [pid 178882:tid 179196] [client 106.214.2.47:3361] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyYNqTm83YguA3303KywAAAJA"]
[Wed Sep 30 00:55:28.214993 2026] [security2:error] [pid 178882:tid 179196] [client 106.214.2.47:3361] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyYNqTm83YguA3303KywAAAJA"]
[Wed Sep 30 00:55:28.215504 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.215752 2026] [access_compat:error] [pid 178882:tid 179225] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.251130 2026] [security2:error] [pid 178882:tid 179201] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303KzwAAAJU"]
[Wed Sep 30 00:55:28.267636 2026] [security2:error] [pid 178882:tid 179211] [client 20.251.39.228:30207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tool.php"] [unique_id "aryyYNqTm83YguA3303K0AAAAJ0"]
[Wed Sep 30 00:55:28.305060 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.305355 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.319016 2026] [access_compat:error] [pid 178882:tid 179252] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 00:55:28.319290 2026] [access_compat:error] [pid 178882:tid 179252] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 00:55:28.377046 2026] [security2:error] [pid 178882:tid 179262] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303K2wAAAM4"]
[Wed Sep 30 00:55:28.386583 2026] [security2:error] [pid 178882:tid 179244] [client 74.7.242.1:43276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyYNqTm83YguA3303K3QAAALw"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:55:28.502316 2026] [security2:error] [pid 178882:tid 179247] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303K4QAAAL8"]
[Wed Sep 30 00:55:28.528467 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.528726 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.543047 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.543495 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.547228 2026] [security2:error] [pid 178882:tid 179206] [client 20.219.2.60:19435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/blsvgeyaza.php"] [unique_id "aryyYNqTm83YguA3303K6AAAAJk"]
[Wed Sep 30 00:55:28.577624 2026] [security2:error] [pid 178882:tid 179220] [client 20.219.2.60:58435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/rzki.php"] [unique_id "aryyYNqTm83YguA3303K6gAAAKY"]
[Wed Sep 30 00:55:28.580289 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.580556 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.627666 2026] [security2:error] [pid 178882:tid 179212] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303K8wAAAJ4"]
[Wed Sep 30 00:55:28.670543 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.670867 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.706636 2026] [security2:error] [pid 178882:tid 179205] [client 20.194.30.107:25028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/sym.php"] [unique_id "aryyYNqTm83YguA3303K-wAAAJg"]
[Wed Sep 30 00:55:28.738478 2026] [security2:error] [pid 178882:tid 179309] [client 20.251.39.228:28927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/drhunthq.php"] [unique_id "aryyYNqTm83YguA3303K_wAAAPo"]
[Wed Sep 30 00:55:28.752400 2026] [security2:error] [pid 178882:tid 179272] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303LBwAAANc"]
[Wed Sep 30 00:55:28.752859 2026] [security2:error] [pid 178882:tid 179261] [client 51.38.225.77:54618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.225.38.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adamwoodruff.net"] [uri "/wp-login.php"] [unique_id "aryyYNqTm83YguA3303K_gAAAM0"], referer: https://adamwoodruff.net/wp-login.php
[Wed Sep 30 00:55:28.760829 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.761090 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.815714 2026] [access_compat:error] [pid 178882:tid 179204] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:55:28.816018 2026] [access_compat:error] [pid 178882:tid 179204] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:55:28.838202 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxOC9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 00:55:28.838625 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxOC9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 00:55:28.854566 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.854963 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:28.875538 2026] [security2:error] [pid 178882:tid 179296] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyYNqTm83YguA3303LGwAAAO4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:28.877091 2026] [security2:error] [pid 178882:tid 179295] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303LHAAAAO0"]
[Wed Sep 30 00:55:28.942380 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:28.942632 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.001284 2026] [security2:error] [pid 178882:tid 179267] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYNqTm83YguA3303LIwAAANM"]
[Wed Sep 30 00:55:29.008755 2026] [security2:error] [pid 178882:tid 179317] [client 45.138.12.32:13974] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jft.tkn.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyYdqTm83YguA3303LJAAAAQE"]
[Wed Sep 30 00:55:29.030945 2026] [security2:error] [pid 178882:tid 179291] [client 4.240.25.22:20308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/one.php"] [unique_id "aryyYdqTm83YguA3303LKAAAAOk"]
[Wed Sep 30 00:55:29.034929 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.035193 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.074805 2026] [security2:error] [pid 178882:tid 179246] [client 20.219.2.60:36751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/lib.php"] [unique_id "aryyYdqTm83YguA3303LKQAAAL4"]
[Wed Sep 30 00:55:29.080107 2026] [security2:error] [pid 178882:tid 179299] [client 20.219.2.60:55854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/xsas.php"] [unique_id "aryyYdqTm83YguA3303LKgAAAPE"]
[Wed Sep 30 00:55:29.125985 2026] [security2:error] [pid 178882:tid 179221] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LLgAAAKc"]
[Wed Sep 30 00:55:29.126256 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.126673 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.217260 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.217518 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.229214 2026] [security2:error] [pid 178882:tid 179294] [client 20.204.42.136:61286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/632e19b36dindex.php"] [unique_id "aryyYdqTm83YguA3303LMwAAAOw"]
[Wed Sep 30 00:55:29.250943 2026] [security2:error] [pid 178882:tid 179203] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LNQAAAJY"]
[Wed Sep 30 00:55:29.307373 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.307651 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.314103 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 00:55:29.314361 2026] [access_compat:error] [pid 178882:tid 179222] [client 74.7.243.227:59074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 00:55:29.375127 2026] [security2:error] [pid 178882:tid 179298] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LOwAAAPA"]
[Wed Sep 30 00:55:29.385666 2026] [security2:error] [pid 178882:tid 179276] [client 20.251.39.228:15497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/admin/index.php"] [unique_id "aryyYdqTm83YguA3303LPAAAANo"]
[Wed Sep 30 00:55:29.404664 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.405048 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.481311 2026] [security2:error] [pid 178882:tid 179273] [client 104.28.222.47:30876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/wp-config.php"] [unique_id "aryyYdqTm83YguA3303LQQAAANg"]
[Wed Sep 30 00:55:29.493519 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.493769 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.503408 2026] [security2:error] [pid 178882:tid 179309] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LQwAAAPo"]
[Wed Sep 30 00:55:29.527741 2026] [security2:error] [pid 178882:tid 179313] [client 104.28.254.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.env.production"] [unique_id "aryyYdqTm83YguA3303LRwAAAP0"]
[Wed Sep 30 00:55:29.536996 2026] [security2:error] [pid 178882:tid 179288] [client 104.28.254.47:38179] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.env.backup"] [unique_id "aryyYdqTm83YguA3303LSAAAAOY"]
[Wed Sep 30 00:55:29.562933 2026] [security2:error] [pid 178882:tid 179191] [client 20.219.2.60:19403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gqhyti.php"] [unique_id "aryyYdqTm83YguA3303LUgAAAIs"]
[Wed Sep 30 00:55:29.569880 2026] [security2:error] [pid 178882:tid 179284] [client 104.28.254.47:30643] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.env"] [unique_id "aryyYdqTm83YguA3303LVQAAAOI"]
[Wed Sep 30 00:55:29.570973 2026] [security2:error] [pid 178882:tid 179271] [client 104.28.222.47:30882] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/config.json"] [unique_id "aryyYdqTm83YguA3303LVAAAANY"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:29.588405 2026] [security2:error] [pid 178882:tid 179199] [client 104.28.254.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.git/config"] [unique_id "aryyYdqTm83YguA3303LWQAAAJM"]
[Wed Sep 30 00:55:29.588432 2026] [security2:error] [pid 178882:tid 179285] [client 20.219.2.60:55856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/d12.php"] [unique_id "aryyYdqTm83YguA3303LWgAAAOM"]
[Wed Sep 30 00:55:29.588933 2026] [security2:error] [pid 178882:tid 179192] [client 104.28.222.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.git/HEAD"] [unique_id "aryyYdqTm83YguA3303LWAAAAIw"]
[Wed Sep 30 00:55:29.589230 2026] [security2:error] [pid 178882:tid 179187] [client 104.28.254.47:38194] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/wp-config.php.bak"] [unique_id "aryyYdqTm83YguA3303LXQAAAIc"]
[Wed Sep 30 00:55:29.591128 2026] [security2:error] [pid 178882:tid 179314] [client 104.28.254.47:43376] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/secrets.json"] [unique_id "aryyYdqTm83YguA3303LXgAAAP4"]
[Wed Sep 30 00:55:29.592138 2026] [security2:error] [pid 178882:tid 179297] [client 104.28.254.47:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.env.local"] [unique_id "aryyYdqTm83YguA3303LXwAAAO8"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:29.605109 2026] [security2:error] [pid 178882:tid 179188] [client 104.28.254.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.dev.vars"] [unique_id "aryyYdqTm83YguA3303LYAAAAIg"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:29.606650 2026] [security2:error] [pid 178882:tid 179290] [client 104.28.222.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.aws/credentials"] [unique_id "aryyYdqTm83YguA3303LYQAAAOg"], referer: https://www.google.com/search?q=website-7e419955.nucreativesolutions.com
[Wed Sep 30 00:55:29.627434 2026] [security2:error] [pid 178882:tid 179258] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LYgAAAMo"]
[Wed Sep 30 00:55:29.673585 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.673871 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.726354 2026] [security2:error] [pid 178882:tid 179236] [client 116.72.182.19:53634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyYdqTm83YguA3303LZgAAALY"]
[Wed Sep 30 00:55:29.726456 2026] [security2:error] [pid 178882:tid 179236] [client 116.72.182.19:53634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyYdqTm83YguA3303LZgAAALY"]
[Wed Sep 30 00:55:29.735760 2026] [security2:error] [pid 178882:tid 179245] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyYdqTm83YguA3303LZwAAAL0"]
[Wed Sep 30 00:55:29.752554 2026] [security2:error] [pid 178882:tid 179315] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LaQAAAP8"]
[Wed Sep 30 00:55:29.762467 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:29.762719 2026] [access_compat:error] [pid 178882:tid 179195] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:29.811662 2026] [security2:error] [pid 178882:tid 179200] [client 74.7.243.227:59074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LcwAAAJQ"], referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 00:55:29.877607 2026] [security2:error] [pid 178882:tid 179259] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYdqTm83YguA3303LdQAAAMs"]
[Wed Sep 30 00:55:29.915224 2026] [security2:error] [pid 178882:tid 179276] [client 20.219.2.60:11014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-xmlsia.php"] [unique_id "aryyYdqTm83YguA3303LeQAAANo"]
[Wed Sep 30 00:55:29.960990 2026] [security2:error] [pid 178882:tid 179313] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyYdqTm83YguA3303LfgAAAP0"]
[Wed Sep 30 00:55:29.967706 2026] [security2:error] [pid 178882:tid 179304] [client 20.204.161.246:48602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/mac.php"] [unique_id "aryyYdqTm83YguA3303LggAAAPY"]
[Wed Sep 30 00:55:29.992547 2026] [security2:error] [pid 178882:tid 179284] [client 177.21.151.108:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyYdqTm83YguA3303LgwAAAOI"]
[Wed Sep 30 00:55:29.993993 2026] [security2:error] [pid 178882:tid 179106] [remote 57.141.14.64:65448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "aryyYdqTm83YguA3303LegAApDY"]
[Wed Sep 30 00:55:30.003474 2026] [security2:error] [pid 178882:tid 179287] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LhAAAAOU"]
[Wed Sep 30 00:55:30.034838 2026] [security2:error] [pid 178882:tid 179187] [client 20.251.39.228:28898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tfm.php"] [unique_id "aryyYtqTm83YguA3303LhgAAAIc"]
[Wed Sep 30 00:55:30.129492 2026] [security2:error] [pid 178882:tid 179256] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LjAAAAMg"]
[Wed Sep 30 00:55:30.165580 2026] [security2:error] [pid 178882:tid 179307] [client 20.219.2.60:55835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/okxh.php"] [unique_id "aryyYtqTm83YguA3303LkAAAAPk"]
[Wed Sep 30 00:55:30.225880 2026] [security2:error] [pid 178882:tid 179124] [remote 64.23.166.180:11332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.dzv.hsu.mybluehost.me"] [uri "/.env"] [unique_id "aryyYtqTm83YguA3303LkgAAq0Y"]
[Wed Sep 30 00:55:30.254706 2026] [security2:error] [pid 178882:tid 179301] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LkwAAAPM"]
[Wed Sep 30 00:55:30.325963 2026] [access_compat:error] [pid 178882:tid 179262] [client 74.7.243.227:56052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 00:55:30.326229 2026] [access_compat:error] [pid 178882:tid 179262] [client 74.7.243.227:56052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 00:55:30.333572 2026] [access_compat:error] [pid 178882:tid 179292] [client 17.166.150.33:55672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.333837 2026] [access_compat:error] [pid 178882:tid 179292] [client 17.166.150.33:55672] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.371273 2026] [security2:error] [pid 178882:tid 179194] [client 20.219.2.60:19398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/autoxxi.php"] [unique_id "aryyYtqTm83YguA3303LmQAAAI4"]
[Wed Sep 30 00:55:30.379001 2026] [security2:error] [pid 178882:tid 179267] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LmgAAANM"]
[Wed Sep 30 00:55:30.409279 2026] [security2:error] [pid 178882:tid 179185] [client 20.28.180.172:29610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/php.php"] [unique_id "aryyYtqTm83YguA3303LnQAAAIU"]
[Wed Sep 30 00:55:30.419948 2026] [security2:error] [pid 178882:tid 179277] [client 20.194.30.107:8388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/8.php"] [unique_id "aryyYtqTm83YguA3303LnwAAANs"]
[Wed Sep 30 00:55:30.442682 2026] [security2:error] [pid 178882:tid 179169] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyYtqTm83YguA3303LoQAAtnM"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D24285
[Wed Sep 30 00:55:30.504224 2026] [security2:error] [pid 178882:tid 179234] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LowAAALQ"]
[Wed Sep 30 00:55:30.523257 2026] [security2:error] [pid 178882:tid 179200] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyYtqTm83YguA3303LpAAAAJQ"]
[Wed Sep 30 00:55:30.528712 2026] [security2:error] [pid 178882:tid 179320] [client 51.38.225.77:48750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.225.38.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adamwoodruff.net"] [uri "/wp-login.php"] [unique_id "aryyYtqTm83YguA3303LpQAAAQQ"], referer: https://adamwoodruff.net/wp-login.php
[Wed Sep 30 00:55:30.549892 2026] [security2:error] [pid 178882:tid 179198] [client 20.251.39.228:28916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/a4.php"] [unique_id "aryyYtqTm83YguA3303LpgAAAJI"]
[Wed Sep 30 00:55:30.567705 2026] [security2:error] [pid 178882:tid 179294] [client 20.194.30.107:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/cilus.php"] [unique_id "aryyYtqTm83YguA3303LqQAAAOw"]
[Wed Sep 30 00:55:30.573359 2026] [security2:error] [pid 178882:tid 179281] [client 20.214.191.94:61440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyYtqTm83YguA3303LqgAAAN8"]
[Wed Sep 30 00:55:30.628917 2026] [security2:error] [pid 178882:tid 179214] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LrQAAAKA"]
[Wed Sep 30 00:55:30.663961 2026] [security2:error] [pid 178882:tid 179259] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyYtqTm83YguA3303LrgAAAMs"]
[Wed Sep 30 00:55:30.709896 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:55860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/55b76.php"] [unique_id "aryyYtqTm83YguA3303LsAAAAJ4"]
[Wed Sep 30 00:55:30.730835 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.731099 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.754135 2026] [security2:error] [pid 178882:tid 179229] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LtwAAAK8"]
[Wed Sep 30 00:55:30.762479 2026] [security2:error] [pid 178882:tid 179284] [client 20.204.161.246:48099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wmore1.php"] [unique_id "aryyYtqTm83YguA3303LuAAAAOI"]
[Wed Sep 30 00:55:30.807645 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.808078 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.817422 2026] [security2:error] [pid 178882:tid 179209] [client 4.240.25.22:21541] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "captpeacock.com"] [uri "/1.php"] [unique_id "aryyYtqTm83YguA3303LwAAAAJs"]
[Wed Sep 30 00:55:30.817545 2026] [security2:error] [pid 178882:tid 179209] [client 4.240.25.22:21541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/1.php"] [unique_id "aryyYtqTm83YguA3303LwAAAAJs"]
[Wed Sep 30 00:55:30.820618 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.820881 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.846184 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.846646 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.878478 2026] [security2:error] [pid 178882:tid 179293] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyYtqTm83YguA3303LygAAAOs"]
[Wed Sep 30 00:55:30.892040 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.892329 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:24100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.903200 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.903592 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:61321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.904946 2026] [access_compat:error] [pid 178882:tid 179250] [client 47.79.13.53:49222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:30.905227 2026] [access_compat:error] [pid 178882:tid 179250] [client 47.79.13.53:49222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:30.918295 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:61234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.918556 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:61234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.928693 2026] [security2:error] [pid 178882:tid 179231] [client 20.214.191.94:61488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyYtqTm83YguA3303L0QAAALE"]
[Wed Sep 30 00:55:30.930520 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:52972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.930750 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:52972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.937335 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.937584 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.963681 2026] [security2:error] [pid 178882:tid 179254] [client 116.197.133.25:51533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyYtqTm83YguA3303L1AAAAMY"]
[Wed Sep 30 00:55:30.963781 2026] [security2:error] [pid 178882:tid 179254] [client 116.197.133.25:51533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyYtqTm83YguA3303L1AAAAMY"]
[Wed Sep 30 00:55:30.977755 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:11437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.978029 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:11437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:30.993965 2026] [security2:error] [pid 178882:tid 179192] [client 74.7.243.227:56052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyYtqTm83YguA3303L2QAAAIw"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 00:55:30.999412 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:9820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:30.999672 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:9820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.003301 2026] [security2:error] [pid 178882:tid 179194] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303L2gAAAI4"]
[Wed Sep 30 00:55:31.010815 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.011087 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.041368 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.041633 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.045135 2026] [security2:error] [pid 178882:tid 179230] [client 116.193.128.26:51506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303L3gAAALA"]
[Wed Sep 30 00:55:31.045664 2026] [security2:error] [pid 178882:tid 179230] [client 116.193.128.26:51506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303L3gAAALA"]
[Wed Sep 30 00:55:31.083360 2026] [security2:error] [pid 178882:tid 179195] [client 20.28.180.172:34253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/xl9.php"] [unique_id "aryyY9qTm83YguA3303L4AAAAI8"]
[Wed Sep 30 00:55:31.128259 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.128514 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.129102 2026] [security2:error] [pid 178882:tid 179200] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303L5AAAAJQ"]
[Wed Sep 30 00:55:31.181564 2026] [security2:error] [pid 178882:tid 179281] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/Batch/v1"] [unique_id "aryyY9qTm83YguA3303L5gAAAN8"]
[Wed Sep 30 00:55:31.208346 2026] [security2:error] [pid 178882:tid 179186] [client 20.214.191.94:58820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyY9qTm83YguA3303L6QAAAIY"]
[Wed Sep 30 00:55:31.220588 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.220871 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.229000 2026] [security2:error] [pid 178882:tid 179212] [client 4.240.25.22:20306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/222.php"] [unique_id "aryyY9qTm83YguA3303L7QAAAJ4"]
[Wed Sep 30 00:55:31.230572 2026] [security2:error] [pid 178882:tid 179261] [client 20.251.39.228:5813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wen.php"] [unique_id "aryyY9qTm83YguA3303L7gAAAM0"]
[Wed Sep 30 00:55:31.254698 2026] [security2:error] [pid 178882:tid 179257] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303L8AAAAMk"]
[Wed Sep 30 00:55:31.272143 2026] [security2:error] [pid 178882:tid 179209] [client 20.219.2.60:55858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tt.php"] [unique_id "aryyY9qTm83YguA3303L8gAAAJs"]
[Wed Sep 30 00:55:31.311370 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.311837 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.313834 2026] [security2:error] [pid 178882:tid 179243] [client 20.219.2.60:36754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/edit.php"] [unique_id "aryyY9qTm83YguA3303L9gAAALs"]
[Wed Sep 30 00:55:31.323148 2026] [security2:error] [pid 178882:tid 179269] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyY9qTm83YguA3303L9wAAANU"]
[Wed Sep 30 00:55:31.379688 2026] [security2:error] [pid 178882:tid 179302] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303MAQAAAPQ"]
[Wed Sep 30 00:55:31.389626 2026] [security2:error] [pid 178882:tid 179297] [client 104.28.254.47:31352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "website-7e419955.nucreativesolutions.com"] [uri "/.env.old"] [unique_id "aryyY9qTm83YguA3303MBAAAAO8"]
[Wed Sep 30 00:55:31.399379 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.399634 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.439655 2026] [security2:error] [pid 178882:tid 179188] [client 152.59.169.65:62826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303MDAAAAIg"]
[Wed Sep 30 00:55:31.439771 2026] [security2:error] [pid 178882:tid 179188] [client 152.59.169.65:62826] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303MDAAAAIg"]
[Wed Sep 30 00:55:31.470757 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:18827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/1144452145_error_log.php"] [unique_id "aryyY9qTm83YguA3303MEwAAAKo"]
[Wed Sep 30 00:55:31.477028 2026] [security2:error] [pid 178882:tid 179287] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1/"] [unique_id "aryyY9qTm83YguA3303MFQAAAOU"]
[Wed Sep 30 00:55:31.494077 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.494509 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.504339 2026] [security2:error] [pid 178882:tid 179247] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303MGgAAAL8"]
[Wed Sep 30 00:55:31.583013 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.583273 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.595996 2026] [security2:error] [pid 178882:tid 179235] [client 20.214.191.94:58838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/aa.php"] [unique_id "aryyY9qTm83YguA3303MIQAAALU"]
[Wed Sep 30 00:55:31.624137 2026] [security2:error] [pid 178882:tid 179203] [client 74.7.243.227:40132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyY9qTm83YguA3303MJQAAAJY"], referer: http://www.homs.co.ke/?del=error_log&p=L3Byb2MvMzc1NDg0L2N3ZA==
[Wed Sep 30 00:55:31.625986 2026] [security2:error] [pid 178882:tid 179246] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "aryyY9qTm83YguA3303MJAAAAL4"]
[Wed Sep 30 00:55:31.629424 2026] [security2:error] [pid 178882:tid 179286] [client 138.3.211.255:54296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui.co.uk"] [uri "/"] [unique_id "aryyY9qTm83YguA3303MJgAAAOQ"]
[Wed Sep 30 00:55:31.654646 2026] [security2:error] [pid 178882:tid 179311] [client 20.251.39.228:41454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ms.php"] [unique_id "aryyY9qTm83YguA3303MJwAAAPw"]
[Wed Sep 30 00:55:31.674718 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.675155 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.732738 2026] [security2:error] [pid 178882:tid 179257] [client 20.204.161.246:48811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryyY9qTm83YguA3303MLAAAAMk"]
[Wed Sep 30 00:55:31.741072 2026] [security2:error] [pid 178882:tid 179218] [client 20.219.2.60:58443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/maul.php"] [unique_id "aryyY9qTm83YguA3303MLQAAAKQ"]
[Wed Sep 30 00:55:31.763914 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.764171 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.820701 2026] [security2:error] [pid 178882:tid 179288] [client 185.46.141.166:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/backup-ups"] [unique_id "aryyY9qTm83YguA3303MNgAAAOY"]
[Wed Sep 30 00:55:31.856894 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.857204 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:31.917379 2026] [security2:error] [pid 178882:tid 179228] [client 20.214.191.94:61467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/z70.php"] [unique_id "aryyY9qTm83YguA3303MQAAAAK4"]
[Wed Sep 30 00:55:31.924893 2026] [security2:error] [pid 178882:tid 179186] [client 182.69.182.151:12262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303MQwAAAIY"]
[Wed Sep 30 00:55:31.925006 2026] [security2:error] [pid 178882:tid 179186] [client 182.69.182.151:12262] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyY9qTm83YguA3303MQwAAAIY"]
[Wed Sep 30 00:55:31.951556 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:31.951972 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.013040 2026] [ssl:error] [pid 178882:tid 179193] [client 216.25.124.24:37315] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpanel.dvo.qjd.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:55:32.041021 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.041423 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.120155 2026] [security2:error] [pid 178882:tid 179196] [client 20.251.39.228:5780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/hplfuns.php"] [unique_id "aryyZNqTm83YguA3303MSwAAAJA"]
[Wed Sep 30 00:55:32.128391 2026] [security2:error] [pid 178882:tid 179197] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "aryyZNqTm83YguA3303MTwAAAJE"]
[Wed Sep 30 00:55:32.129180 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.129440 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.134006 2026] [security2:error] [pid 178882:tid 179292] [client 20.70.173.30:60008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/baru.php"] [unique_id "aryyZNqTm83YguA3303MUQAAAOo"]
[Wed Sep 30 00:55:32.210553 2026] [security2:error] [pid 178882:tid 179236] [client 20.214.191.94:61447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/f35.php"] [unique_id "aryyZNqTm83YguA3303MVQAAALY"]
[Wed Sep 30 00:55:32.219710 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.219971 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.279495 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:10636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.quieromifactura.biz"] [uri "/wp-inic3.php"] [unique_id "aryyZNqTm83YguA3303MYQAAAP4"]
[Wed Sep 30 00:55:32.283700 2026] [security2:error] [pid 178882:tid 179206] [client 116.71.11.229:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/backup-ups"] [unique_id "aryyZNqTm83YguA3303MYAAAAJk"]
[Wed Sep 30 00:55:32.312837 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.313104 2026] [access_compat:error] [pid 178882:tid 179278] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.402408 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.402665 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.414091 2026] [security2:error] [pid 178882:tid 179252] [client 20.219.2.60:18861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws48.php"] [unique_id "aryyZNqTm83YguA3303MZAAAAMQ"]
[Wed Sep 30 00:55:32.420662 2026] [security2:error] [pid 178882:tid 179313] [client 103.172.210.103:52497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyZNqTm83YguA3303MZQAAAP0"]
[Wed Sep 30 00:55:32.420833 2026] [security2:error] [pid 178882:tid 179313] [client 103.172.210.103:52497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyZNqTm83YguA3303MZQAAAP0"]
[Wed Sep 30 00:55:32.450339 2026] [security2:error] [pid 178882:tid 179209] [client 4.240.25.22:21512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyZNqTm83YguA3303MZgAAAJs"]
[Wed Sep 30 00:55:32.474312 2026] [security2:error] [pid 178882:tid 179269] [client 20.214.191.94:61457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/adminfuns.php"] [unique_id "aryyZNqTm83YguA3303MaQAAANU"]
[Wed Sep 30 00:55:32.492751 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.493071 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.530685 2026] [security2:error] [pid 178882:tid 179105] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aryyZNqTm83YguA3303McQAAhTU"]
[Wed Sep 30 00:55:32.530772 2026] [security2:error] [pid 178882:tid 179135] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.aws/.env"] [unique_id "aryyZNqTm83YguA3303McwAAhVE"]
[Wed Sep 30 00:55:32.531495 2026] [security2:error] [pid 178882:tid 179105] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env"] [unique_id "aryyZNqTm83YguA3303MdQAAhTU"]
[Wed Sep 30 00:55:32.531854 2026] [security2:error] [pid 178882:tid 179135] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.aws/credentials.bak"] [unique_id "aryyZNqTm83YguA3303MdgAAhVE"]
[Wed Sep 30 00:55:32.532779 2026] [security2:error] [pid 178882:tid 179076] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.docker/.env"] [unique_id "aryyZNqTm83YguA3303MfgAAhRg"]
[Wed Sep 30 00:55:32.564562 2026] [access_compat:error] [pid 178882:tid 179283] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 00:55:32.564866 2026] [access_compat:error] [pid 178882:tid 179283] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 00:55:32.570276 2026] [security2:error] [pid 178882:tid 179248] [client 173.254.29.157:25652] ModSecurity: Warning. Matched phrase "Ninja" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yod.ninja"] [uri "/wp-cron.php"] [unique_id "aryyZNqTm83YguA3303MggAAAMA"]
[Wed Sep 30 00:55:32.591959 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.592446 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.605326 2026] [ssl:error] [pid 178882:tid 179289] [client 216.25.124.24:19574] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.vkp.zdx.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:55:32.635412 2026] [security2:error] [pid 178882:tid 179188] [client 20.251.39.228:28897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tfm.php"] [unique_id "aryyZNqTm83YguA3303MiwAAAIg"]
[Wed Sep 30 00:55:32.643717 2026] [security2:error] [pid 178882:tid 179309] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyZNqTm83YguA3303MjAAAAPo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:32.668345 2026] [security2:error] [pid 178882:tid 179120] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env.bak"] [unique_id "aryyZNqTm83YguA3303MkAAAq0M"]
[Wed Sep 30 00:55:32.668625 2026] [security2:error] [pid 178882:tid 179087] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env.backup"] [unique_id "aryyZNqTm83YguA3303MkwAAqyM"]
[Wed Sep 30 00:55:32.675214 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.675493 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.769195 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.769485 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.779082 2026] [security2:error] [pid 178882:tid 179253] [client 20.204.161.246:48580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/ab.php"] [unique_id "aryyZNqTm83YguA3303MmgAAAMU"]
[Wed Sep 30 00:55:32.786372 2026] [security2:error] [pid 178882:tid 179291] [client 20.214.191.94:61461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/av.php"] [unique_id "aryyZNqTm83YguA3303MnAAAAOk"]
[Wed Sep 30 00:55:32.802181 2026] [security2:error] [pid 178882:tid 179061] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env.old"] [unique_id "aryyZNqTm83YguA3303MpAAAjAk"]
[Wed Sep 30 00:55:32.803896 2026] [security2:error] [pid 178882:tid 179082] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.133.52.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thetreespirit.com"] [uri "/.env.php"] [unique_id "aryyZNqTm83YguA3303MowAAjB4"]
[Wed Sep 30 00:55:32.806568 2026] [security2:error] [pid 178882:tid 179140] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env.swp"] [unique_id "aryyZNqTm83YguA3303MqwAAjFY"]
[Wed Sep 30 00:55:32.858277 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.858532 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:32.870788 2026] [security2:error] [pid 178882:tid 179210] [client 20.204.42.136:27395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/82.php"] [unique_id "aryyZNqTm83YguA3303MsQAAAJw"]
[Wed Sep 30 00:55:32.906597 2026] [security2:error] [pid 178882:tid 179143] [remote 74.7.227.56:35880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyZNqTm83YguA3303MtAAA91k"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:55:32.933404 2026] [security2:error] [pid 178882:tid 179251] [client 123.63.248.21:59517] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyZNqTm83YguA3303MtwAAAMM"]
[Wed Sep 30 00:55:32.933536 2026] [security2:error] [pid 178882:tid 179251] [client 123.63.248.21:59517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryyZNqTm83YguA3303MtwAAAMM"]
[Wed Sep 30 00:55:32.938639 2026] [security2:error] [pid 178882:tid 179133] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/.env~"] [unique_id "aryyZNqTm83YguA3303MuQAAqk8"]
[Wed Sep 30 00:55:32.941802 2026] [security2:error] [pid 178882:tid 179161] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.133.52.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thetreespirit.com"] [uri "/api/phpinfo.php"] [unique_id "aryyZNqTm83YguA3303MxgAAqms"]
[Wed Sep 30 00:55:32.941874 2026] [security2:error] [pid 178882:tid 179106] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/api/.env"] [unique_id "aryyZNqTm83YguA3303MxQAAqjY"]
[Wed Sep 30 00:55:32.947158 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:32.947407 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.039387 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.039645 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.075460 2026] [security2:error] [pid 178882:tid 179142] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/app/.env"] [unique_id "aryyZdqTm83YguA3303M1wAA8Fg"]
[Wed Sep 30 00:55:33.075485 2026] [security2:error] [pid 178882:tid 179172] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/application/.env"] [unique_id "aryyZdqTm83YguA3303M1gAA8HY"]
[Wed Sep 30 00:55:33.075535 2026] [security2:error] [pid 178882:tid 179157] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/back/.env"] [unique_id "aryyZdqTm83YguA3303M3gAA8Gc"]
[Wed Sep 30 00:55:33.075984 2026] [security2:error] [pid 178882:tid 179068] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/backend/.env"] [unique_id "aryyZdqTm83YguA3303M3wAA8BA"]
[Wed Sep 30 00:55:33.076674 2026] [security2:error] [pid 178882:tid 179152] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/backup/.env"] [unique_id "aryyZdqTm83YguA3303M4AAA8GI"]
[Wed Sep 30 00:55:33.077102 2026] [security2:error] [pid 178882:tid 179104] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/cms/.env"] [unique_id "aryyZdqTm83YguA3303M4QAA8DQ"]
[Wed Sep 30 00:55:33.079149 2026] [security2:error] [pid 178882:tid 179147] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.133.52.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thetreespirit.com"] [uri "/config.php"] [unique_id "aryyZdqTm83YguA3303M5gAA8F0"]
[Wed Sep 30 00:55:33.081266 2026] [security2:error] [pid 178882:tid 179278] [client 20.214.191.94:58833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/dex.php"] [unique_id "aryyZdqTm83YguA3303M5wAAANw"]
[Wed Sep 30 00:55:33.082663 2026] [security2:error] [pid 178882:tid 179276] [client 20.251.39.228:30900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/8573.php"] [unique_id "aryyZdqTm83YguA3303M6AAAANo"]
[Wed Sep 30 00:55:33.089801 2026] [security2:error] [pid 178882:tid 179167] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyZdqTm83YguA3303M6QAApHE"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D13202
[Wed Sep 30 00:55:33.089827 2026] [security2:error] [pid 178882:tid 179167] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyZdqTm83YguA3303M6QAApHE"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D13202
[Wed Sep 30 00:55:33.132043 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.132305 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.191043 2026] [security2:error] [pid 178882:tid 179245] [client 20.219.2.60:18849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryyZdqTm83YguA3303M9wAAAL0"]
[Wed Sep 30 00:55:33.212160 2026] [security2:error] [pid 178882:tid 179115] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/config/.env"] [unique_id "aryyZdqTm83YguA3303M_AAAoz4"]
[Wed Sep 30 00:55:33.212733 2026] [security2:error] [pid 178882:tid 179070] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/dev/.env"] [unique_id "aryyZdqTm83YguA3303NAwAAoxI"]
[Wed Sep 30 00:55:33.212860 2026] [security2:error] [pid 178882:tid 179108] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/database.sql"] [unique_id "aryyZdqTm83YguA3303NAgAAozg"]
[Wed Sep 30 00:55:33.212954 2026] [security2:error] [pid 178882:tid 179136] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/core/.env"] [unique_id "aryyZdqTm83YguA3303NAQAAo1I"]
[Wed Sep 30 00:55:33.215289 2026] [security2:error] [pid 178882:tid 179085] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/frontend/.env"] [unique_id "aryyZdqTm83YguA3303NCQAAoyE"]
[Wed Sep 30 00:55:33.221124 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.221430 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.272659 2026] [security2:error] [pid 178882:tid 179233] [client 20.219.2.60:48836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/5b9ac.php"] [unique_id "aryyZdqTm83YguA3303NEQAAALM"]
[Wed Sep 30 00:55:33.290151 2026] [security2:error] [pid 178882:tid 179080] [remote 74.220.219.180:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryyZdqTm83YguA3303NEAABAxw"]
[Wed Sep 30 00:55:33.295614 2026] [security2:error] [pid 178882:tid 179178] [remote 74.220.219.180:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryyZdqTm83YguA3303NEgAAyHw"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 00:55:33.314463 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.314717 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.315974 2026] [security2:error] [pid 178882:tid 179230] [client 223.181.30.165:10823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NGAAAALA"]
[Wed Sep 30 00:55:33.316406 2026] [security2:error] [pid 178882:tid 179230] [client 223.181.30.165:10823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NGAAAALA"]
[Wed Sep 30 00:55:33.318327 2026] [security2:error] [pid 178882:tid 179091] [remote 74.220.219.180:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NEwAA9Cc"]
[Wed Sep 30 00:55:33.318486 2026] [security2:error] [pid 178882:tid 179302] [client 74.220.219.180:17894] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NEwAA9Cc"]
[Wed Sep 30 00:55:33.321403 2026] [autoindex:error] [pid 178882:tid 179212] [client 172.195.104.24:58210] AH01276: Cannot serve directory /home2/xonelogi/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:33.349125 2026] [security2:error] [pid 178882:tid 179171] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.133.52.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thetreespirit.com"] [uri "/info.php"] [unique_id "aryyZdqTm83YguA3303NHAAAp3U"]
[Wed Sep 30 00:55:33.349703 2026] [security2:error] [pid 178882:tid 179103] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/media/.env"] [unique_id "aryyZdqTm83YguA3303NGwAApzM"]
[Wed Sep 30 00:55:33.349732 2026] [security2:error] [pid 178882:tid 179177] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/laravel/.env"] [unique_id "aryyZdqTm83YguA3303NHQAAp3s"]
[Wed Sep 30 00:55:33.349761 2026] [security2:error] [pid 178882:tid 179060] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/old/.env"] [unique_id "aryyZdqTm83YguA3303NHgAApwg"]
[Wed Sep 30 00:55:33.350105 2026] [security2:error] [pid 178882:tid 179062] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.133.52.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thetreespirit.com"] [uri "/phpinfo.php"] [unique_id "aryyZdqTm83YguA3303NIgAApwo"]
[Wed Sep 30 00:55:33.350213 2026] [security2:error] [pid 178882:tid 179107] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/production/.env"] [unique_id "aryyZdqTm83YguA3303NIAAApzc"]
[Wed Sep 30 00:55:33.350464 2026] [security2:error] [pid 178882:tid 179069] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/new/.env"] [unique_id "aryyZdqTm83YguA3303NIQAApxE"]
[Wed Sep 30 00:55:33.350599 2026] [security2:error] [pid 178882:tid 179105] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/server/.env"] [unique_id "aryyZdqTm83YguA3303NJgAApzU"]
[Wed Sep 30 00:55:33.350869 2026] [security2:error] [pid 178882:tid 179135] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/src/.env"] [unique_id "aryyZdqTm83YguA3303NKAAAp1E"]
[Wed Sep 30 00:55:33.351238 2026] [security2:error] [pid 178882:tid 179125] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/staging/.env"] [unique_id "aryyZdqTm83YguA3303NKQAAp0c"]
[Wed Sep 30 00:55:33.351330 2026] [security2:error] [pid 178882:tid 179102] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/public/.env"] [unique_id "aryyZdqTm83YguA3303NIwAApzI"]
[Wed Sep 30 00:55:33.386801 2026] [security2:error] [pid 178882:tid 179290] [client 150.107.232.159:36479] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NKgAAAOg"]
[Wed Sep 30 00:55:33.386965 2026] [security2:error] [pid 178882:tid 179290] [client 150.107.232.159:36479] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NKgAAAOg"]
[Wed Sep 30 00:55:33.406426 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.406755 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.418704 2026] [security2:error] [pid 178882:tid 179301] [client 20.214.191.94:58853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/chosen.php"] [unique_id "aryyZdqTm83YguA3303NMAAAAPM"]
[Wed Sep 30 00:55:33.443895 2026] [security2:error] [pid 178882:tid 179240] [client 202.179.95.79:52734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NMQAAALk"]
[Wed Sep 30 00:55:33.443997 2026] [security2:error] [pid 178882:tid 179240] [client 202.179.95.79:52734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NMQAAALk"]
[Wed Sep 30 00:55:33.452854 2026] [security2:error] [pid 178882:tid 179253] [client 20.251.39.228:30177] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/1.php"] [unique_id "aryyZdqTm83YguA3303NMgAAAMU"]
[Wed Sep 30 00:55:33.452981 2026] [security2:error] [pid 178882:tid 179253] [client 20.251.39.228:30177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/1.php"] [unique_id "aryyZdqTm83YguA3303NMgAAAMU"]
[Wed Sep 30 00:55:33.485291 2026] [security2:error] [pid 178882:tid 179075] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "thetreespirit.com"] [uri "/wp-config.php.bak"] [unique_id "aryyZdqTm83YguA3303NPQAA3Rc"]
[Wed Sep 30 00:55:33.485856 2026] [security2:error] [pid 178882:tid 179056] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/v1/.env"] [unique_id "aryyZdqTm83YguA3303NOQAA3QQ"]
[Wed Sep 30 00:55:33.485873 2026] [security2:error] [pid 178882:tid 179120] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/v2/.env"] [unique_id "aryyZdqTm83YguA3303NOgAA3UM"]
[Wed Sep 30 00:55:33.485900 2026] [security2:error] [pid 178882:tid 179081] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/web/.env"] [unique_id "aryyZdqTm83YguA3303NOwAA3R0"]
[Wed Sep 30 00:55:33.486205 2026] [security2:error] [pid 178882:tid 179109] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/test/.env"] [unique_id "aryyZdqTm83YguA3303NOAAA3Tk"]
[Wed Sep 30 00:55:33.486399 2026] [security2:error] [pid 178882:tid 179097] [remote 34.52.133.111:47000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "thetreespirit.com"] [uri "/client/.env"] [unique_id "aryyZdqTm83YguA3303NPwAA3S0"]
[Wed Sep 30 00:55:33.498688 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.499111 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.557373 2026] [security2:error] [pid 178882:tid 179267] [client 20.219.2.60:36830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/ioxi-o.php"] [unique_id "aryyZdqTm83YguA3303NSgAAANM"]
[Wed Sep 30 00:55:33.589986 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.590273 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.635443 2026] [security2:error] [pid 178882:tid 179206] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyZdqTm83YguA3303NVwAAAJk"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:33.681320 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.681579 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.757134 2026] [security2:error] [pid 178882:tid 179205] [client 20.214.191.94:58817] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.nmarl.com"] [uri "/1.php"] [unique_id "aryyZdqTm83YguA3303NYgAAAJg"]
[Wed Sep 30 00:55:33.757302 2026] [security2:error] [pid 178882:tid 179205] [client 20.214.191.94:58817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/1.php"] [unique_id "aryyZdqTm83YguA3303NYgAAAJg"]
[Wed Sep 30 00:55:33.758961 2026] [security2:error] [pid 178882:tid 179306] [client 20.219.2.60:63242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/hehe.php"] [unique_id "aryyZdqTm83YguA3303NYwAAAPg"]
[Wed Sep 30 00:55:33.774299 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.774729 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.829969 2026] [security2:error] [pid 178882:tid 179271] [client 103.168.66.101:3706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyZdqTm83YguA3303NbQAAANY"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:33.849914 2026] [security2:error] [pid 178882:tid 179317] [client 152.59.165.7:60399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NbgAAAQE"]
[Wed Sep 30 00:55:33.854874 2026] [security2:error] [pid 178882:tid 179247] [client 20.251.39.228:17137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/term.php"] [unique_id "aryyZdqTm83YguA3303NcQAAAL8"]
[Wed Sep 30 00:55:33.857491 2026] [access_compat:error] [pid 178882:tid 179316] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 00:55:33.857777 2026] [access_compat:error] [pid 178882:tid 179316] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 00:55:33.859051 2026] [security2:error] [pid 178882:tid 179317] [client 152.59.165.7:60399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NbgAAAQE"]
[Wed Sep 30 00:55:33.859432 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.859678 2026] [access_compat:error] [pid 178882:tid 179287] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.860759 2026] [security2:error] [pid 178882:tid 179225] [client 158.94.195.195:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryyZdqTm83YguA3303NcgAAAKs"]
[Wed Sep 30 00:55:33.943774 2026] [security2:error] [pid 178882:tid 179264] [client 45.156.62.96:58803] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyZdqTm83YguA3303NcwAAANA"]
[Wed Sep 30 00:55:33.951236 2026] [security2:error] [pid 178882:tid 179216] [client 4.196.65.241:27289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/qDAFu1Swzxyd4JIdefault.php"] [unique_id "aryyZdqTm83YguA3303NdwAAAKI"]
[Wed Sep 30 00:55:33.951551 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:33.951785 2026] [access_compat:error] [pid 178882:tid 179305] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:33.960452 2026] [security2:error] [pid 178882:tid 179303] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyZdqTm83YguA3303NeAAAAPU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:34.043708 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.044072 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.071799 2026] [security2:error] [pid 178882:tid 179248] [client 20.194.30.107:17510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/simple.php"] [unique_id "aryyZtqTm83YguA3303NgAAAAMA"]
[Wed Sep 30 00:55:34.097231 2026] [security2:error] [pid 178882:tid 179295] [client 49.36.41.37:58797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NgwAAAO0"]
[Wed Sep 30 00:55:34.097400 2026] [security2:error] [pid 178882:tid 179295] [client 49.36.41.37:58797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NgwAAAO0"]
[Wed Sep 30 00:55:34.107110 2026] [access_compat:error] [pid 178882:tid 179291] [client 47.79.13.234:35316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:34.107527 2026] [access_compat:error] [pid 178882:tid 179291] [client 47.79.13.234:35316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:34.134878 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.135134 2026] [access_compat:error] [pid 178882:tid 179231] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.172487 2026] [security2:error] [pid 178882:tid 179271] [client 20.214.191.94:61476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/radio.php"] [unique_id "aryyZtqTm83YguA3303NjQAAANY"]
[Wed Sep 30 00:55:34.204313 2026] [security2:error] [pid 178882:tid 179218] [client 72.255.10.32:54966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NkgAAAKQ"]
[Wed Sep 30 00:55:34.204463 2026] [security2:error] [pid 178882:tid 179218] [client 72.255.10.32:54966] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NkgAAAKQ"]
[Wed Sep 30 00:55:34.225630 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.225916 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.238875 2026] [security2:error] [pid 178882:tid 179283] [client 20.251.39.228:14986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-content/radio.php"] [unique_id "aryyZtqTm83YguA3303NmAAAAOE"]
[Wed Sep 30 00:55:34.254494 2026] [security2:error] [pid 178882:tid 179290] [client 20.219.2.60:58458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryyZtqTm83YguA3303NmQAAAOg"]
[Wed Sep 30 00:55:34.304966 2026] [security2:error] [pid 178882:tid 179259] [client 203.122.45.246:50988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NnAAAAMs"]
[Wed Sep 30 00:55:34.305126 2026] [security2:error] [pid 178882:tid 179259] [client 203.122.45.246:50988] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303NnAAAAMs"]
[Wed Sep 30 00:55:34.318691 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.319125 2026] [access_compat:error] [pid 178882:tid 179257] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.369939 2026] [security2:error] [pid 178882:tid 179192] [client 4.240.25.22:21544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/cdc.php"] [unique_id "aryyZtqTm83YguA3303NoAAAAIw"]
[Wed Sep 30 00:55:34.407743 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.408040 2026] [access_compat:error] [pid 178882:tid 179227] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.417280 2026] [security2:error] [pid 178882:tid 179225] [client 103.168.66.101:8602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyZtqTm83YguA3303NowAAAKs"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:34.428263 2026] [security2:error] [pid 178882:tid 179160] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.aws/.env"] [unique_id "aryyZtqTm83YguA3303NpwAAwmo"]
[Wed Sep 30 00:55:34.430162 2026] [security2:error] [pid 178882:tid 179195] [client 45.138.12.40:36224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eii.dao.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyZtqTm83YguA3303NqwAAAI8"]
[Wed Sep 30 00:55:34.450937 2026] [security2:error] [pid 178882:tid 179251] [client 173.254.29.157:34224] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "aryyZtqTm83YguA3303NrwAAAMM"]
[Wed Sep 30 00:55:34.496694 2026] [security2:error] [pid 178882:tid 179298] [client 20.214.191.94:58852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/blacks.php"] [unique_id "aryyZtqTm83YguA3303NtAAAAPA"]
[Wed Sep 30 00:55:34.501926 2026] [security2:error] [pid 178882:tid 179281] [client 20.194.30.107:8320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/b8.php"] [unique_id "aryyZtqTm83YguA3303NtQAAAN8"]
[Wed Sep 30 00:55:34.503842 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.504183 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.576216 2026] [security2:error] [pid 178882:tid 179156] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyZtqTm83YguA3303NtgAA5mY"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=23010b5c6deb56b9dc83721448fd29e6
[Wed Sep 30 00:55:34.576264 2026] [security2:error] [pid 178882:tid 179156] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyZtqTm83YguA3303NtgAA5mY"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=23010b5c6deb56b9dc83721448fd29e6
[Wed Sep 30 00:55:34.594829 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.595264 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.631916 2026] [security2:error] [pid 178882:tid 179157] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env"] [unique_id "aryyZtqTm83YguA3303NwAAAwmc"]
[Wed Sep 30 00:55:34.631986 2026] [security2:error] [pid 178882:tid 179145] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.docker/.env"] [unique_id "aryyZtqTm83YguA3303NuwAAwls"]
[Wed Sep 30 00:55:34.632239 2026] [security2:error] [pid 178882:tid 179172] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.aws/credentials.bak"] [unique_id "aryyZtqTm83YguA3303NvwAAwnY"]
[Wed Sep 30 00:55:34.633542 2026] [security2:error] [pid 178882:tid 179117] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "aryyZtqTm83YguA3303NwgAAwkA"]
[Wed Sep 30 00:55:34.640332 2026] [security2:error] [pid 178882:tid 179248] [client 20.219.2.60:18843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/schallfuns.php"] [unique_id "aryyZtqTm83YguA3303NyAAAAMA"]
[Wed Sep 30 00:55:34.684735 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.685174 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.781699 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.782169 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.784722 2026] [security2:error] [pid 178882:tid 179271] [client 20.219.2.60:45371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/varb.php"] [unique_id "aryyZtqTm83YguA3303N1wAAANY"]
[Wed Sep 30 00:55:34.789316 2026] [security2:error] [pid 178882:tid 179200] [client 20.214.191.94:58844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/alfa.php"] [unique_id "aryyZtqTm83YguA3303N2AAAAJQ"]
[Wed Sep 30 00:55:34.795678 2026] [security2:error] [pid 178882:tid 179266] [client 39.44.16.112:49290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N2QAAANI"]
[Wed Sep 30 00:55:34.795862 2026] [security2:error] [pid 178882:tid 179266] [client 39.44.16.112:49290] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N2QAAANI"]
[Wed Sep 30 00:55:34.828489 2026] [security2:error] [pid 178882:tid 179286] [client 43.227.131.37:47477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N3gAAAOQ"]
[Wed Sep 30 00:55:34.828676 2026] [security2:error] [pid 178882:tid 179286] [client 43.227.131.37:47477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N3gAAAOQ"]
[Wed Sep 30 00:55:34.858904 2026] [security2:error] [pid 178882:tid 179221] [client 20.251.39.228:28921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/155.php"] [unique_id "aryyZtqTm83YguA3303N4AAAAKc"]
[Wed Sep 30 00:55:34.870749 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.871156 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:34.919065 2026] [security2:error] [pid 178882:tid 179282] [client 103.148.43.14:56112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.43.148.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N5wAAAOA"]
[Wed Sep 30 00:55:34.919224 2026] [security2:error] [pid 178882:tid 179282] [client 103.148.43.14:56112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "2dena.com"] [uri "/xmlrpc.php"] [unique_id "aryyZtqTm83YguA3303N5wAAAOA"]
[Wed Sep 30 00:55:34.924761 2026] [access_compat:error] [pid 178882:tid 179287] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 00:55:34.925096 2026] [access_compat:error] [pid 178882:tid 179287] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 00:55:34.961076 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:34.961336 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.054472 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.054749 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.068349 2026] [security2:error] [pid 178882:tid 179298] [client 20.214.191.94:61463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyZ9qTm83YguA3303N-QAAAPA"]
[Wed Sep 30 00:55:35.142940 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.143218 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.162180 2026] [security2:error] [pid 178882:tid 179137] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env.bak"] [unique_id "aryyZ9qTm83YguA3303OAAAAwlM"]
[Wed Sep 30 00:55:35.162189 2026] [security2:error] [pid 178882:tid 179100] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env.backup"] [unique_id "aryyZ9qTm83YguA3303OAQAAwjA"]
[Wed Sep 30 00:55:35.208148 2026] [security2:error] [pid 178882:tid 179246] [client 223.235.102.107:27621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyZ9qTm83YguA3303OCwAAAL4"]
[Wed Sep 30 00:55:35.208299 2026] [security2:error] [pid 178882:tid 179246] [client 223.235.102.107:27621] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyZ9qTm83YguA3303OCwAAAL4"]
[Wed Sep 30 00:55:35.232937 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.233185 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.246785 2026] [security2:error] [pid 178882:tid 179220] [client 20.251.39.228:41442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-the.php"] [unique_id "aryyZ9qTm83YguA3303OFQAAAKY"]
[Wed Sep 30 00:55:35.282949 2026] [security2:error] [pid 178882:tid 179238] [client 213.136.69.135:52230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/block-template-utils.php"] [unique_id "aryyZ9qTm83YguA3303OGgAAALc"], referer: binance.com
[Wed Sep 30 00:55:35.285389 2026] [security2:error] [pid 178882:tid 179290] [client 20.194.30.107:25196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/mh.php"] [unique_id "aryyZ9qTm83YguA3303OGwAAAOg"]
[Wed Sep 30 00:55:35.324990 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.325261 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.338105 2026] [security2:error] [pid 178882:tid 179067] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env.old"] [unique_id "aryyZ9qTm83YguA3303OIwAAwg8"]
[Wed Sep 30 00:55:35.366967 2026] [security2:error] [pid 178882:tid 179235] [client 20.214.191.94:61471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/b8.php"] [unique_id "aryyZ9qTm83YguA3303OKAAAALU"]
[Wed Sep 30 00:55:35.421534 2026] [security2:error] [pid 178882:tid 179188] [client 20.219.2.60:63252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/lm15.php"] [unique_id "aryyZ9qTm83YguA3303OMAAAAIg"]
[Wed Sep 30 00:55:35.423001 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.423603 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.438656 2026] [security2:error] [pid 178882:tid 179209] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyZ9qTm83YguA3303OMQAAAJs"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:35.453447 2026] [security2:error] [pid 178882:tid 179210] [client 20.28.180.172:34276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/584062352875874akp.php"] [unique_id "aryyZ9qTm83YguA3303OMgAAAJw"]
[Wed Sep 30 00:55:35.508080 2026] [security2:error] [pid 178882:tid 179265] [client 20.219.2.60:36551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/ajax.php"] [unique_id "aryyZ9qTm83YguA3303ONAAAANE"]
[Wed Sep 30 00:55:35.514242 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.514707 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.518783 2026] [security2:error] [pid 178882:tid 179096] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/.env.php"] [unique_id "aryyZ9qTm83YguA3303ONgAAwiw"]
[Wed Sep 30 00:55:35.598843 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.599103 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.631982 2026] [security2:error] [pid 178882:tid 179262] [client 20.70.173.30:25093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/kir.php"] [unique_id "aryyZ9qTm83YguA3303OQgAAAM4"]
[Wed Sep 30 00:55:35.633068 2026] [security2:error] [pid 178882:tid 179229] [client 20.214.191.94:61449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/xex.php"] [unique_id "aryyZ9qTm83YguA3303ORAAAAK8"]
[Wed Sep 30 00:55:35.687999 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.688268 2026] [access_compat:error] [pid 178882:tid 179232] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.692601 2026] [security2:error] [pid 178882:tid 179264] [client 20.251.39.228:41416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp5.php"] [unique_id "aryyZ9qTm83YguA3303OSQAAANA"]
[Wed Sep 30 00:55:35.744895 2026] [security2:error] [pid 178882:tid 179178] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env.swp"] [unique_id "aryyZ9qTm83YguA3303OSwAAwnw"]
[Wed Sep 30 00:55:35.776386 2026] [security2:error] [pid 178882:tid 179238] [client 20.204.42.136:57175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/yyjBRcdefault.php"] [unique_id "aryyZ9qTm83YguA3303OUgAAALc"]
[Wed Sep 30 00:55:35.781910 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.782345 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.854647 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 00:55:35.854917 2026] [access_compat:error] [pid 178882:tid 179205] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 00:55:35.871225 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.871491 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:35.905468 2026] [security2:error] [pid 178882:tid 179273] [client 20.214.191.94:58835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ass.php"] [unique_id "aryyZ9qTm83YguA3303OXgAAANg"]
[Wed Sep 30 00:55:35.946581 2026] [security2:error] [pid 178882:tid 179236] [client 49.205.105.16:13607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyZ9qTm83YguA3303OZAAAALY"]
[Wed Sep 30 00:55:35.946722 2026] [security2:error] [pid 178882:tid 179236] [client 49.205.105.16:13607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyZ9qTm83YguA3303OZAAAALY"]
[Wed Sep 30 00:55:35.961558 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:35.961842 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.029556 2026] [security2:error] [pid 178882:tid 179268] [client 103.24.86.56:51067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyaNqTm83YguA3303OaQAAANQ"]
[Wed Sep 30 00:55:36.029663 2026] [security2:error] [pid 178882:tid 179268] [client 103.24.86.56:51067] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyaNqTm83YguA3303OaQAAANQ"]
[Wed Sep 30 00:55:36.046642 2026] [security2:error] [pid 178882:tid 179267] [client 20.204.161.246:48092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/dairg.php"] [unique_id "aryyaNqTm83YguA3303ObAAAANM"]
[Wed Sep 30 00:55:36.054605 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.055042 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.144889 2026] [access_compat:error] [pid 178882:tid 179234] [client 47.79.13.176:60556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:36.145142 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.145160 2026] [access_compat:error] [pid 178882:tid 179234] [client 47.79.13.176:60556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:36.145447 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.159728 2026] [security2:error] [pid 178882:tid 179229] [client 20.251.39.228:41436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-access.php"] [unique_id "aryyaNqTm83YguA3303OcgAAAK8"]
[Wed Sep 30 00:55:36.182059 2026] [security2:error] [pid 178882:tid 179189] [client 20.219.2.60:63275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/clss.php"] [unique_id "aryyaNqTm83YguA3303OcwAAAIk"]
[Wed Sep 30 00:55:36.232488 2026] [security2:error] [pid 178882:tid 179212] [client 20.214.191.94:58847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wsd.php"] [unique_id "aryyaNqTm83YguA3303OdgAAAJ4"]
[Wed Sep 30 00:55:36.234498 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.234751 2026] [access_compat:error] [pid 178882:tid 179266] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.235538 2026] [security2:error] [pid 178882:tid 179286] [client 103.159.192.142:56188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyaNqTm83YguA3303OdwAAAOQ"]
[Wed Sep 30 00:55:36.235669 2026] [security2:error] [pid 178882:tid 179286] [client 103.159.192.142:56188] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyaNqTm83YguA3303OdwAAAOQ"]
[Wed Sep 30 00:55:36.305198 2026] [security2:error] [pid 178882:tid 179227] [client 4.240.25.22:30769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp_blog_footer.php"] [unique_id "aryyaNqTm83YguA3303OfwAAAK0"]
[Wed Sep 30 00:55:36.324383 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.324633 2026] [access_compat:error] [pid 178882:tid 179188] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.335082 2026] [security2:error] [pid 178882:tid 179292] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyaNqTm83YguA3303OhgAAAOo"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:36.338896 2026] [security2:error] [pid 178882:tid 179210] [client 20.219.2.60:18819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/CDX1.php"] [unique_id "aryyaNqTm83YguA3303OhwAAAJw"]
[Wed Sep 30 00:55:36.378425 2026] [security2:error] [pid 178882:tid 179203] [client 173.254.29.157:34240] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyaNqTm83YguA3303OiwAAAJY"]
[Wed Sep 30 00:55:36.412157 2026] [security2:error] [pid 178882:tid 179218] [client 173.254.29.157:34242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryyaNqTm83YguA3303OjgAAAKQ"]
[Wed Sep 30 00:55:36.429276 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.429714 2026] [access_compat:error] [pid 178882:tid 179259] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.437615 2026] [security2:error] [pid 178882:tid 179268] [client 173.254.29.157:34250] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyaNqTm83YguA3303OkQAAANQ"]
[Wed Sep 30 00:55:36.461026 2026] [security2:error] [pid 178882:tid 179262] [client 173.254.29.157:34266] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyaNqTm83YguA3303OkgAAAM4"]
[Wed Sep 30 00:55:36.473683 2026] [access_compat:error] [pid 178882:tid 179291] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 00:55:36.474132 2026] [access_compat:error] [pid 178882:tid 179291] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 00:55:36.514634 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.515097 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.515121 2026] [security2:error] [pid 178882:tid 179185] [client 20.251.39.228:5777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/hots.php"] [unique_id "aryyaNqTm83YguA3303OlQAAAIU"]
[Wed Sep 30 00:55:36.558224 2026] [security2:error] [pid 178882:tid 179201] [client 20.214.191.94:61479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/BDKR28WP.php"] [unique_id "aryyaNqTm83YguA3303OlwAAAJU"]
[Wed Sep 30 00:55:36.565169 2026] [security2:error] [pid 178882:tid 179194] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyaNqTm83YguA3303OmQAAAI4"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:36.584805 2026] [security2:error] [pid 178882:tid 179052] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/.env~"] [unique_id "aryyaNqTm83YguA3303OmgAAwgA"]
[Wed Sep 30 00:55:36.599648 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.599978 2026] [access_compat:error] [pid 178882:tid 179298] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.663874 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:63258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/44.php"] [unique_id "aryyaNqTm83YguA3303OqQAAANQ"]
[Wed Sep 30 00:55:36.688251 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.688507 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.710559 2026] [security2:error] [pid 178882:tid 179279] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyaNqTm83YguA3303OsAAAAN0"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:36.715945 2026] [security2:error] [pid 178882:tid 179192] [client 43.104.4.225:22178] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryyaNqTm83YguA3303OsQAAAIw"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Cconsumer-lifestyle%2Cinteractive-smart-panels%2Csoftware
[Wed Sep 30 00:55:36.727606 2026] [security2:error] [pid 178882:tid 179291] [client 186.22.18.86:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryyaNqTm83YguA3303OtQAAAOk"]
[Wed Sep 30 00:55:36.779371 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.779647 2026] [access_compat:error] [pid 178882:tid 179254] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.799255 2026] [security2:error] [pid 178882:tid 179301] [client 20.28.180.172:29445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/909.php"] [unique_id "aryyaNqTm83YguA3303O0AAAAPM"]
[Wed Sep 30 00:55:36.823662 2026] [security2:error] [pid 178882:tid 179129] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/api/.env"] [unique_id "aryyaNqTm83YguA3303O1QAAwks"]
[Wed Sep 30 00:55:36.826543 2026] [security2:error] [pid 178882:tid 179094] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/api/phpinfo.php"] [unique_id "aryyaNqTm83YguA3303O2AAAwio"]
[Wed Sep 30 00:55:36.838016 2026] [security2:error] [pid 178882:tid 179210] [client 4.196.65.241:2074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/e219b53abbindex.php"] [unique_id "aryyaNqTm83YguA3303O2QAAAJw"]
[Wed Sep 30 00:55:36.870047 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.870308 2026] [access_compat:error] [pid 178882:tid 179303] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:36.891272 2026] [security2:error] [pid 178882:tid 179252] [client 20.214.191.94:58851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wmore1.php"] [unique_id "aryyaNqTm83YguA3303O3gAAAMQ"]
[Wed Sep 30 00:55:36.963158 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:36.963417 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.003069 2026] [security2:error] [pid 178882:tid 179061] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/app/.env"] [unique_id "aryyadqTm83YguA3303O4QAAwgk"]
[Wed Sep 30 00:55:37.005281 2026] [security2:error] [pid 178882:tid 179074] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/application/.env"] [unique_id "aryyadqTm83YguA3303O4gAAwhY"]
[Wed Sep 30 00:55:37.020042 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L2N3ZA==
[Wed Sep 30 00:55:37.020311 2026] [access_compat:error] [pid 178882:tid 179298] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L2N3ZA==
[Wed Sep 30 00:55:37.055656 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.055923 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.131152 2026] [security2:error] [pid 178882:tid 179288] [client 20.251.39.228:14979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/admin-footer.php"] [unique_id "aryyadqTm83YguA3303O6QAAAOY"]
[Wed Sep 30 00:55:37.145781 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.146040 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.153635 2026] [security2:error] [pid 178882:tid 179300] [client 45.138.12.40:46130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eii.dao.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyadqTm83YguA3303O7QAAAPI"]
[Wed Sep 30 00:55:37.165773 2026] [security2:error] [pid 178882:tid 179275] [client 20.219.2.60:55810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/a5e0a.php"] [unique_id "aryyadqTm83YguA3303O7gAAANk"]
[Wed Sep 30 00:55:37.175206 2026] [security2:error] [pid 178882:tid 179272] [client 20.219.2.60:18897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/clasa99.php"] [unique_id "aryyadqTm83YguA3303O8AAAANc"]
[Wed Sep 30 00:55:37.200262 2026] [security2:error] [pid 178882:tid 179247] [client 20.214.191.94:61485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/z60.php"] [unique_id "aryyadqTm83YguA3303O9AAAAL8"]
[Wed Sep 30 00:55:37.226159 2026] [security2:error] [pid 178882:tid 179187] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/Batch/v1"] [unique_id "aryyadqTm83YguA3303O9gAAAIc"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:37.239288 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.239717 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.249534 2026] [security2:error] [pid 178882:tid 179317] [client 20.194.30.107:25878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/new.php"] [unique_id "aryyadqTm83YguA3303O-QAAAQE"]
[Wed Sep 30 00:55:37.277224 2026] [security2:error] [pid 178882:tid 179304] [client 180.190.123.186:18853] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "301"] [hostname "collinsonhall.com"] [uri "/xmlrpc.php"] [unique_id "aryyadqTm83YguA3303O7wAAAPY"]
[Wed Sep 30 00:55:37.327001 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.327281 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.344583 2026] [security2:error] [pid 178882:tid 179140] [remote 64.23.166.180:58188] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.vvs.rug.mybluehost.me"] [uri "/.env"] [unique_id "aryyadqTm83YguA3303PBAAAkFY"]
[Wed Sep 30 00:55:37.380223 2026] [security2:error] [pid 178882:tid 179185] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyadqTm83YguA3303PBQAAAIU"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:37.425559 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.426020 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.452144 2026] [access_compat:error] [pid 178882:tid 179249] [client 47.79.13.27:38652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:37.452593 2026] [access_compat:error] [pid 178882:tid 179249] [client 47.79.13.27:38652] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:37.514757 2026] [security2:error] [pid 178882:tid 179224] [client 20.251.39.228:17133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws84.php"] [unique_id "aryyadqTm83YguA3303PDAAAAKo"]
[Wed Sep 30 00:55:37.517313 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.517737 2026] [access_compat:error] [pid 178882:tid 179191] [client 216.73.216.46:49407] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.528050 2026] [security2:error] [pid 178882:tid 179284] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1/"] [unique_id "aryyadqTm83YguA3303PDQAAAOI"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:37.550554 2026] [access_compat:error] [pid 178882:tid 179293] [client 47.79.13.172:51228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:37.550998 2026] [access_compat:error] [pid 178882:tid 179293] [client 47.79.13.172:51228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:37.556305 2026] [access_compat:error] [pid 178882:tid 179301] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTE4NzI5L2N3ZA==
[Wed Sep 30 00:55:37.556561 2026] [access_compat:error] [pid 178882:tid 179301] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTE4NzI5L2N3ZA==
[Wed Sep 30 00:55:37.594034 2026] [security2:error] [pid 178882:tid 179210] [client 216.73.216.46:49407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyadqTm83YguA3303PEAAAAJw"]
[Wed Sep 30 00:55:37.605865 2026] [security2:error] [pid 178882:tid 179110] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyadqTm83YguA3303PEQAAxjo"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D98819
[Wed Sep 30 00:55:37.670999 2026] [security2:error] [pid 178882:tid 179217] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "aryyadqTm83YguA3303PFAAAAKM"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:37.692084 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.692348 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.719153 2026] [security2:error] [pid 178882:tid 179205] [client 20.214.191.94:61450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/pJPoKA.php"] [unique_id "aryyadqTm83YguA3303PGAAAAJg"]
[Wed Sep 30 00:55:37.726234 2026] [security2:error] [pid 178882:tid 179269] [client 20.219.2.60:55861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bo.php"] [unique_id "aryyadqTm83YguA3303PGgAAANU"]
[Wed Sep 30 00:55:37.764584 2026] [security2:error] [pid 178882:tid 179127] [remote 64.23.166.180:25252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eai.ceg.mybluehost.me"] [uri "/.env"] [unique_id "aryyadqTm83YguA3303PHgAA0Uk"]
[Wed Sep 30 00:55:37.781540 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:37.781801 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:37.807159 2026] [security2:error] [pid 178882:tid 179272] [client 20.194.30.107:17548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/yawa.php"] [unique_id "aryyadqTm83YguA3303PIwAAANc"]
[Wed Sep 30 00:55:37.815940 2026] [security2:error] [pid 178882:tid 179276] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "aryyadqTm83YguA3303PJQAAANo"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:37.820299 2026] [security2:error] [pid 178882:tid 179282] [client 20.70.173.30:25139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/term.php"] [unique_id "aryyadqTm83YguA3303PJwAAAOA"]
[Wed Sep 30 00:55:37.920838 2026] [security2:error] [pid 178882:tid 179229] [client 20.251.39.228:26756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/bnm.php"] [unique_id "aryyadqTm83YguA3303PLwAAAK8"]
[Wed Sep 30 00:55:38.041126 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:55:38.041516 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:55:38.058763 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.059031 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.084526 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.084778 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.085341 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.085700 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.139784 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.191.94:61441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/24.php"] [unique_id "aryyatqTm83YguA3303POQAAAPU"]
[Wed Sep 30 00:55:38.147902 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.148152 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.228137 2026] [security2:error] [pid 178882:tid 179138] [remote 57.141.14.31:41014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/feed/wp-includes/wlwmanifest.xml"] [unique_id "aryyatqTm83YguA3303PPwABA1Q"]
[Wed Sep 30 00:55:38.232145 2026] [security2:error] [pid 178882:tid 179267] [client 20.219.2.60:55815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/56c53.php"] [unique_id "aryyatqTm83YguA3303PQQAAANM"]
[Wed Sep 30 00:55:38.240182 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.240492 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.285659 2026] [security2:error] [pid 178882:tid 179199] [client 4.240.25.22:21891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/f35.php"] [unique_id "aryyatqTm83YguA3303PRAAAAJM"]
[Wed Sep 30 00:55:38.309795 2026] [security2:error] [pid 178882:tid 179305] [client 103.168.66.101:8612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyatqTm83YguA3303PRgAAAPc"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:38.329706 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.330037 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.402007 2026] [security2:error] [pid 178882:tid 179229] [client 20.251.39.228:28865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/amax.php"] [unique_id "aryyatqTm83YguA3303PSwAAAK8"]
[Wed Sep 30 00:55:38.425240 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.425694 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.434768 2026] [security2:error] [pid 178882:tid 179196] [client 20.214.191.94:61477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/xxw.php"] [unique_id "aryyatqTm83YguA3303PTgAAAJA"]
[Wed Sep 30 00:55:38.511748 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.512023 2026] [access_compat:error] [pid 178882:tid 179186] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.525573 2026] [access_compat:error] [pid 178882:tid 179212] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:55:38.525829 2026] [access_compat:error] [pid 178882:tid 179212] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:55:38.546640 2026] [security2:error] [pid 178882:tid 179258] [client 172.232.180.134:50885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reasonablerenovations.ca"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "aryyatqTm83YguA3303PUgAAAMo"]
[Wed Sep 30 00:55:38.569132 2026] [security2:error] [pid 178882:tid 179254] [client 20.219.2.60:19351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/myfilexxx.php"] [unique_id "aryyatqTm83YguA3303PUwAAAMY"]
[Wed Sep 30 00:55:38.602768 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.603061 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.654273 2026] [security2:error] [pid 178882:tid 179153] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/backend/.env"] [unique_id "aryyatqTm83YguA3303PXgAAtmM"]
[Wed Sep 30 00:55:38.654410 2026] [security2:error] [pid 178882:tid 179162] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/cms/.env"] [unique_id "aryyatqTm83YguA3303PWwAAtmw"]
[Wed Sep 30 00:55:38.655057 2026] [security2:error] [pid 178882:tid 179068] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/back/.env"] [unique_id "aryyatqTm83YguA3303PYAAAthA"]
[Wed Sep 30 00:55:38.655057 2026] [security2:error] [pid 178882:tid 179172] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/backup/.env"] [unique_id "aryyatqTm83YguA3303PYQAAtnY"]
[Wed Sep 30 00:55:38.657677 2026] [security2:error] [pid 178882:tid 179124] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/config.php"] [unique_id "aryyatqTm83YguA3303PZAAAtkY"]
[Wed Sep 30 00:55:38.698048 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.698500 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.707066 2026] [security2:error] [pid 178882:tid 179079] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/config/.env"] [unique_id "aryyatqTm83YguA3303PawAAths"]
[Wed Sep 30 00:55:38.769553 2026] [security2:error] [pid 178882:tid 179262] [client 20.219.2.60:55821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tx78.php"] [unique_id "aryyatqTm83YguA3303PeQAAAM4"]
[Wed Sep 30 00:55:38.782852 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.783107 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.798098 2026] [security2:error] [pid 178882:tid 179196] [client 20.214.191.94:61452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/bnmtp.php"] [unique_id "aryyatqTm83YguA3303PfAAAAJA"]
[Wed Sep 30 00:55:38.833794 2026] [security2:error] [pid 178882:tid 179159] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/core/.env"] [unique_id "aryyatqTm83YguA3303PfQAAtmk"]
[Wed Sep 30 00:55:38.837280 2026] [security2:error] [pid 178882:tid 179176] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/database.sql"] [unique_id "aryyatqTm83YguA3303PgQAAtno"]
[Wed Sep 30 00:55:38.846473 2026] [access_compat:error] [pid 178882:tid 179304] [client 47.79.13.174:50982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:38.846823 2026] [access_compat:error] [pid 178882:tid 179304] [client 47.79.13.174:50982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:38.873367 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.873620 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:38.887970 2026] [security2:error] [pid 178882:tid 179166] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/dev/.env"] [unique_id "aryyatqTm83YguA3303PjgAAtnA"]
[Wed Sep 30 00:55:38.951371 2026] [security2:error] [pid 178882:tid 179297] [client 106.214.2.47:19960] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyatqTm83YguA3303PhgAAAO8"]
[Wed Sep 30 00:55:38.951515 2026] [security2:error] [pid 178882:tid 179297] [client 106.214.2.47:19960] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyatqTm83YguA3303PhgAAAO8"]
[Wed Sep 30 00:55:38.965331 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:38.965584 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.017364 2026] [security2:error] [pid 178882:tid 179239] [client 20.251.39.228:17123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/66.php"] [unique_id "aryya9qTm83YguA3303PmQAAALg"]
[Wed Sep 30 00:55:39.027677 2026] [security2:error] [pid 178882:tid 179264] [client 20.204.42.136:27398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/gix.php"] [unique_id "aryya9qTm83YguA3303PmwAAANA"]
[Wed Sep 30 00:55:39.058103 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.058371 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.062161 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:39.062425 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:39.098327 2026] [security2:error] [pid 178882:tid 179224] [client 20.204.161.246:47243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/z60.php"] [unique_id "aryya9qTm83YguA3303PpQAAAKo"]
[Wed Sep 30 00:55:39.100308 2026] [security2:error] [pid 178882:tid 179317] [client 4.240.25.22:20293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/tool.php"] [unique_id "aryya9qTm83YguA3303PpgAAAQE"]
[Wed Sep 30 00:55:39.108979 2026] [security2:error] [pid 178882:tid 179194] [client 20.194.30.107:64229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryya9qTm83YguA3303PpwAAAI4"]
[Wed Sep 30 00:55:39.148290 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.148584 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.158597 2026] [security2:error] [pid 178882:tid 179209] [client 20.214.191.94:61494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ebkid.php"] [unique_id "aryya9qTm83YguA3303PrwAAAJs"]
[Wed Sep 30 00:55:39.239772 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.240055 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.264678 2026] [autoindex:error] [pid 178882:tid 179220] [client 212.156.70.154:51090] AH01276: Cannot serve directory /home2/netkitsa/public_html/networkbuildkits/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:39.329862 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.330126 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.350275 2026] [security2:error] [pid 178882:tid 179198] [client 20.219.2.60:55816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws80.php"] [unique_id "aryya9qTm83YguA3303PvgAAAJI"]
[Wed Sep 30 00:55:39.428242 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.428697 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.432490 2026] [security2:error] [pid 178882:tid 179295] [client 20.198.74.230:23895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/goeu.php"] [unique_id "aryya9qTm83YguA3303PwwAAAO0"]
[Wed Sep 30 00:55:39.447360 2026] [security2:error] [pid 178882:tid 179304] [client 20.214.191.94:61455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/133.php"] [unique_id "aryya9qTm83YguA3303PxAAAAPY"]
[Wed Sep 30 00:55:39.449991 2026] [security2:error] [pid 178882:tid 179213] [client 20.194.30.107:10116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/f35.update.php"] [unique_id "aryya9qTm83YguA3303PxQAAAJ8"]
[Wed Sep 30 00:55:39.511283 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.511545 2026] [access_compat:error] [pid 178882:tid 179299] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.526387 2026] [access_compat:error] [pid 178882:tid 179243] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:55:39.526662 2026] [access_compat:error] [pid 178882:tid 179243] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:55:39.537906 2026] [security2:error] [pid 178882:tid 179216] [client 222.167.104.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryya9qTm83YguA3303PzQAAAKI"]
[Wed Sep 30 00:55:39.551385 2026] [security2:error] [pid 178882:tid 179261] [client 20.251.39.228:26761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/public/file.php"] [unique_id "aryya9qTm83YguA3303PzgAAAM0"]
[Wed Sep 30 00:55:39.603738 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.604099 2026] [access_compat:error] [pid 178882:tid 179264] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.656963 2026] [security2:error] [pid 178882:tid 179148] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/frontend/.env"] [unique_id "aryya9qTm83YguA3303P3gAAtl4"]
[Wed Sep 30 00:55:39.662630 2026] [security2:error] [pid 178882:tid 179054] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/info.php"] [unique_id "aryya9qTm83YguA3303P4gAAtgI"]
[Wed Sep 30 00:55:39.694921 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.695184 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.717172 2026] [security2:error] [pid 178882:tid 179252] [client 20.214.191.94:58826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/x33.php"] [unique_id "aryya9qTm83YguA3303P6wAAAMQ"]
[Wed Sep 30 00:55:39.784124 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.784382 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.804644 2026] [security2:error] [pid 178882:tid 179076] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/laravel/.env"] [unique_id "aryya9qTm83YguA3303P8QAAthg"]
[Wed Sep 30 00:55:39.835506 2026] [security2:error] [pid 178882:tid 179052] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/media/.env"] [unique_id "aryya9qTm83YguA3303P8wAAtgA"]
[Wed Sep 30 00:55:39.836178 2026] [security2:error] [pid 178882:tid 179284] [client 49.43.163.212:53799] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryya9qTm83YguA3303P8gAAAOI"]
[Wed Sep 30 00:55:39.836344 2026] [security2:error] [pid 178882:tid 179284] [client 49.43.163.212:53799] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryya9qTm83YguA3303P8gAAAOI"]
[Wed Sep 30 00:55:39.840599 2026] [security2:error] [pid 178882:tid 179134] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/new/.env"] [unique_id "aryya9qTm83YguA3303P9QAAtlA"]
[Wed Sep 30 00:55:39.870757 2026] [security2:error] [pid 178882:tid 179275] [client 20.219.2.60:63233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/jga.php"] [unique_id "aryya9qTm83YguA3303P9wAAANk"]
[Wed Sep 30 00:55:39.875351 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.875606 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.897426 2026] [security2:error] [pid 178882:tid 179263] [client 194.50.16.198:57068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "mail.spellboundtheshow.com"] [uri "/phpversions.php"] [unique_id "aryya9qTm83YguA3303P_AAAAM8"]
[Wed Sep 30 00:55:39.904421 2026] [access_compat:error] [pid 178882:tid 179295] [client 116.179.32.143:27366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.904846 2026] [access_compat:error] [pid 178882:tid 179295] [client 116.179.32.143:27366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.933117 2026] [security2:error] [pid 178882:tid 179200] [client 20.251.39.228:5763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/166.php"] [unique_id "aryya9qTm83YguA3303P_wAAAJQ"]
[Wed Sep 30 00:55:39.968725 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:39.969029 2026] [access_compat:error] [pid 178882:tid 179294] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:39.983064 2026] [security2:error] [pid 178882:tid 179085] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/old/.env"] [unique_id "aryya9qTm83YguA3303QAwAAtiE"]
[Wed Sep 30 00:55:39.984339 2026] [security2:error] [pid 178882:tid 179251] [client 4.240.25.22:21534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/about.php"] [unique_id "aryya9qTm83YguA3303QBAAAAMM"]
[Wed Sep 30 00:55:40.018326 2026] [security2:error] [pid 178882:tid 179158] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/phpinfo.php"] [unique_id "aryybNqTm83YguA3303QBwAAtmg"]
[Wed Sep 30 00:55:40.058068 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.058343 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.072373 2026] [access_compat:error] [pid 178882:tid 179243] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 00:55:40.072709 2026] [access_compat:error] [pid 178882:tid 179243] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 00:55:40.078724 2026] [security2:error] [pid 178882:tid 179310] [client 20.214.191.94:61448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/cae.php"] [unique_id "aryybNqTm83YguA3303QDgAAAPs"]
[Wed Sep 30 00:55:40.108725 2026] [security2:error] [pid 178882:tid 179226] [client 20.194.30.107:28076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/amax.php"] [unique_id "aryybNqTm83YguA3303QDwAAAKw"]
[Wed Sep 30 00:55:40.151037 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.151344 2026] [access_compat:error] [pid 178882:tid 179277] [client 216.73.216.46:39379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.196615 2026] [security2:error] [pid 178882:tid 179075] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/production/.env"] [unique_id "aryybNqTm83YguA3303QFQAAthc"]
[Wed Sep 30 00:55:40.197319 2026] [security2:error] [pid 178882:tid 179056] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/public/.env"] [unique_id "aryybNqTm83YguA3303QFgAAtgQ"]
[Wed Sep 30 00:55:40.198388 2026] [security2:error] [pid 178882:tid 179201] [client 116.72.182.19:54286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryybNqTm83YguA3303QFwAAAJU"]
[Wed Sep 30 00:55:40.198467 2026] [security2:error] [pid 178882:tid 179201] [client 116.72.182.19:54286] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryybNqTm83YguA3303QFwAAAJU"]
[Wed Sep 30 00:55:40.240056 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.240322 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.331386 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.331647 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.340421 2026] [security2:error] [pid 178882:tid 179247] [client 216.73.216.46:39379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryybNqTm83YguA3303QHgAAAL8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NC9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:40.368169 2026] [security2:error] [pid 178882:tid 179252] [client 20.219.2.60:48839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/fs.php"] [unique_id "aryybNqTm83YguA3303QIQAAAMQ"]
[Wed Sep 30 00:55:40.387305 2026] [security2:error] [pid 178882:tid 179248] [client 20.219.2.60:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/karma_144a.php"] [unique_id "aryybNqTm83YguA3303QJgAAAMA"]
[Wed Sep 30 00:55:40.399174 2026] [security2:error] [pid 178882:tid 179256] [client 4.196.65.241:2049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/jj.php"] [unique_id "aryybNqTm83YguA3303QKAAAAMg"]
[Wed Sep 30 00:55:40.420668 2026] [security2:error] [pid 178882:tid 179262] [client 20.251.39.228:35168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/ws77.php"] [unique_id "aryybNqTm83YguA3303QKwAAAM4"]
[Wed Sep 30 00:55:40.425285 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.425717 2026] [access_compat:error] [pid 178882:tid 179315] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.484096 2026] [security2:error] [pid 178882:tid 179199] [client 20.214.191.94:61453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/txets.php"] [unique_id "aryybNqTm83YguA3303QMQAAAJM"]
[Wed Sep 30 00:55:40.486682 2026] [security2:error] [pid 178882:tid 179200] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryybNqTm83YguA3303QMAAAAJQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:40.513907 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.514191 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.555881 2026] [security2:error] [pid 178882:tid 179140] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/server/.env"] [unique_id "aryybNqTm83YguA3303QOAAAtlY"]
[Wed Sep 30 00:55:40.557016 2026] [access_compat:error] [pid 178882:tid 179313] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:40.557396 2026] [access_compat:error] [pid 178882:tid 179313] [client 74.7.243.227:40142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:40.575408 2026] [security2:error] [pid 178882:tid 179234] [client 20.194.30.107:64290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/reviall.php"] [unique_id "aryybNqTm83YguA3303QOwAAALQ"]
[Wed Sep 30 00:55:40.602650 2026] [security2:error] [pid 178882:tid 179130] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/src/.env"] [unique_id "aryybNqTm83YguA3303QQAAAtkw"]
[Wed Sep 30 00:55:40.605307 2026] [security2:error] [pid 178882:tid 179110] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/staging/.env"] [unique_id "aryybNqTm83YguA3303QQQAAtjo"]
[Wed Sep 30 00:55:40.606226 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.606487 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.610113 2026] [security2:error] [pid 178882:tid 179114] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/test/.env"] [unique_id "aryybNqTm83YguA3303QQgAAtj0"]
[Wed Sep 30 00:55:40.610780 2026] [security2:error] [pid 178882:tid 179119] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/v1/.env"] [unique_id "aryybNqTm83YguA3303QQwAAtkI"]
[Wed Sep 30 00:55:40.649354 2026] [security2:error] [pid 178882:tid 179127] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/v2/.env"] [unique_id "aryybNqTm83YguA3303QRQAAtkk"]
[Wed Sep 30 00:55:40.651548 2026] [security2:error] [pid 178882:tid 179072] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/web/.env"] [unique_id "aryybNqTm83YguA3303QSAAAthQ"]
[Wed Sep 30 00:55:40.652383 2026] [security2:error] [pid 178882:tid 179086] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "shortstaygem.co.uk"] [uri "/wp-config.php.bak"] [unique_id "aryybNqTm83YguA3303QSQAAtiI"]
[Wed Sep 30 00:55:40.694601 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.694881 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.718324 2026] [security2:error] [pid 178882:tid 179248] [client 194.50.16.198:49690] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "mail.spellboundtheshow.com"] [uri "/phpversions.php"] [unique_id "aryybNqTm83YguA3303QUAAAAMA"]
[Wed Sep 30 00:55:40.733512 2026] [security2:error] [pid 178882:tid 179112] [remote 45.138.12.22:45810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "shortstaygem.co.uk"] [uri "/mysql.sql"] [unique_id "aryybNqTm83YguA3303QVgAAtjw"]
[Wed Sep 30 00:55:40.780452 2026] [security2:error] [pid 178882:tid 179123] [remote 57.141.14.28:34222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "aryybNqTm83YguA3303QWQAAzUU"]
[Wed Sep 30 00:55:40.789662 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.790036 2026] [access_compat:error] [pid 178882:tid 179279] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.861090 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.2.60:48835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/byypas.php"] [unique_id "aryybNqTm83YguA3303QZwAAAOc"]
[Wed Sep 30 00:55:40.873856 2026] [security2:error] [pid 178882:tid 179262] [client 20.251.39.228:30859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/www.php"] [unique_id "aryybNqTm83YguA3303QbAAAAM4"]
[Wed Sep 30 00:55:40.875894 2026] [security2:error] [pid 178882:tid 179185] [client 4.240.25.22:20325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/az.php"] [unique_id "aryybNqTm83YguA3303QbQAAAIU"]
[Wed Sep 30 00:55:40.877063 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.877322 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.897260 2026] [security2:error] [pid 178882:tid 179220] [client 103.159.192.142:56503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryybNqTm83YguA3303QcAAAAKY"]
[Wed Sep 30 00:55:40.897440 2026] [security2:error] [pid 178882:tid 179220] [client 103.159.192.142:56503] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryybNqTm83YguA3303QcAAAAKY"]
[Wed Sep 30 00:55:40.933515 2026] [security2:error] [pid 178882:tid 179254] [client 20.214.191.94:61490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wp-update.php"] [unique_id "aryybNqTm83YguA3303QcgAAAMY"]
[Wed Sep 30 00:55:40.958188 2026] [security2:error] [pid 178882:tid 179229] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryybNqTm83YguA3303QdAAAAK8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:40.968079 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:40.968338 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:40.985779 2026] [security2:error] [pid 178882:tid 179255] [client 20.204.42.136:54196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/dot.php"] [unique_id "aryybNqTm83YguA3303QdgAAAMc"]
[Wed Sep 30 00:55:40.988125 2026] [security2:error] [pid 178882:tid 179280] [client 52.172.226.14:20539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryybNqTm83YguA3303QdwAAAN4"]
[Wed Sep 30 00:55:41.060145 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.060429 2026] [access_compat:error] [pid 178882:tid 179238] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.061045 2026] [security2:error] [pid 178882:tid 179228] [client 74.7.243.227:40142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryybdqTm83YguA3303QeQAAAK4"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvNDg1MzI1L2N3ZA==
[Wed Sep 30 00:55:41.093384 2026] [security2:error] [pid 178882:tid 179199] [client 20.194.30.107:59505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/666.php"] [unique_id "aryybdqTm83YguA3303QfAAAAJM"]
[Wed Sep 30 00:55:41.133675 2026] [security2:error] [pid 178882:tid 179294] [client 155.190.6.18:33122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QegAAAOw"]
[Wed Sep 30 00:55:41.133784 2026] [security2:error] [pid 178882:tid 179294] [client 155.190.6.18:33122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QegAAAOw"]
[Wed Sep 30 00:55:41.149867 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.150118 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.208442 2026] [security2:error] [pid 178882:tid 179232] [client 204.157.105.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryybdqTm83YguA3303QgQAAALI"]
[Wed Sep 30 00:55:41.223723 2026] [security2:error] [pid 178882:tid 179299] [client 20.214.191.94:61483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/177.php"] [unique_id "aryybdqTm83YguA3303QggAAAPE"]
[Wed Sep 30 00:55:41.241535 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.241796 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.333480 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.333783 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.341913 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:48860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/b.php"] [unique_id "aryybdqTm83YguA3303QiQAAAJ4"]
[Wed Sep 30 00:55:41.388587 2026] [security2:error] [pid 178882:tid 179087] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryybdqTm83YguA3303QigAApyM"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=12b721f46a3e655a834a7bb958ba1d03
[Wed Sep 30 00:55:41.388640 2026] [security2:error] [pid 178882:tid 179087] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryybdqTm83YguA3303QigAApyM"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=12b721f46a3e655a834a7bb958ba1d03
[Wed Sep 30 00:55:41.427969 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.428414 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.434707 2026] [security2:error] [pid 178882:tid 179315] [client 116.197.133.25:52155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QjwAAAP8"]
[Wed Sep 30 00:55:41.434894 2026] [security2:error] [pid 178882:tid 179315] [client 116.197.133.25:52155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QjwAAAP8"]
[Wed Sep 30 00:55:41.443288 2026] [security2:error] [pid 178882:tid 179277] [client 20.251.39.228:29911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/adoms.php"] [unique_id "aryybdqTm83YguA3303QkAAAANs"]
[Wed Sep 30 00:55:41.487324 2026] [security2:error] [pid 178882:tid 179120] [remote 47.128.120.58:14972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nels.pikarthouse.com"] [uri "/main-rtl/product/linen-shirt/"] [unique_id "aryybdqTm83YguA3303QlQAA5UM"]
[Wed Sep 30 00:55:41.523000 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.523587 2026] [access_compat:error] [pid 178882:tid 179261] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.568206 2026] [security2:error] [pid 178882:tid 179279] [client 20.214.191.94:58823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ccc.php"] [unique_id "aryybdqTm83YguA3303QlwAAAN0"]
[Wed Sep 30 00:55:41.591096 2026] [access_compat:error] [pid 178882:tid 179289] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 00:55:41.591559 2026] [access_compat:error] [pid 178882:tid 179289] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 00:55:41.602216 2026] [security2:error] [pid 178882:tid 179245] [client 116.193.128.26:52155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QmwAAAL0"]
[Wed Sep 30 00:55:41.603071 2026] [security2:error] [pid 178882:tid 179245] [client 116.193.128.26:52155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QmwAAAL0"]
[Wed Sep 30 00:55:41.610407 2026] [security2:error] [pid 178882:tid 179291] [client 4.240.25.22:63777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/dex.php"] [unique_id "aryybdqTm83YguA3303QnQAAAOk"]
[Wed Sep 30 00:55:41.647071 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.647519 2026] [access_compat:error] [pid 178882:tid 179265] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.649380 2026] [security2:error] [pid 178882:tid 179192] [client 182.75.216.230:58624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QoQAAAIw"]
[Wed Sep 30 00:55:41.649539 2026] [security2:error] [pid 178882:tid 179192] [client 182.75.216.230:58624] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryybdqTm83YguA3303QoQAAAIw"]
[Wed Sep 30 00:55:41.696842 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.697106 2026] [access_compat:error] [pid 178882:tid 179275] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.713281 2026] [security2:error] [pid 178882:tid 179203] [client 52.172.226.14:20177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryybdqTm83YguA3303QpgAAAJY"]
[Wed Sep 30 00:55:41.755622 2026] [security2:error] [pid 178882:tid 179172] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryybdqTm83YguA3303QqAAAl3Y"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=d525e04cad5c2492949d98b90c59416c&t=21666
[Wed Sep 30 00:55:41.755670 2026] [security2:error] [pid 178882:tid 179172] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryybdqTm83YguA3303QqAAAl3Y"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=d525e04cad5c2492949d98b90c59416c&t=21666
[Wed Sep 30 00:55:41.788105 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.788371 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.843886 2026] [security2:error] [pid 178882:tid 179242] [client 115.191.1.205:50916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.1.191.115.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryybdqTm83YguA3303QrAAAALo"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 00:55:41.867541 2026] [security2:error] [pid 178882:tid 179210] [client 20.214.191.94:58855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/0xD.php"] [unique_id "aryybdqTm83YguA3303QrQAAAJw"]
[Wed Sep 30 00:55:41.873535 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:48865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws49.php"] [unique_id "aryybdqTm83YguA3303QrwAAAP4"]
[Wed Sep 30 00:55:41.878981 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.879233 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:41.924563 2026] [security2:error] [pid 178882:tid 179263] [client 20.251.39.228:5785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/tymn.php"] [unique_id "aryybdqTm83YguA3303QsgAAAM8"]
[Wed Sep 30 00:55:41.970492 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:41.970753 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.018287 2026] [security2:error] [pid 178882:tid 179209] [client 20.28.180.172:34265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/BtOCXH4W1V5.php"] [unique_id "aryybtqTm83YguA3303QuAAAAJs"]
[Wed Sep 30 00:55:42.065128 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.065433 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.123290 2026] [security2:error] [pid 178882:tid 179296] [client 152.59.169.65:63398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303QvgAAAO4"]
[Wed Sep 30 00:55:42.123396 2026] [security2:error] [pid 178882:tid 179296] [client 152.59.169.65:63398] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303QvgAAAO4"]
[Wed Sep 30 00:55:42.131522 2026] [security2:error] [pid 178882:tid 179277] [client 20.204.42.136:57208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wp-9p3vdgw.php"] [unique_id "aryybtqTm83YguA3303QvwAAANs"]
[Wed Sep 30 00:55:42.153433 2026] [access_compat:error] [pid 178882:tid 179224] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.153695 2026] [access_compat:error] [pid 178882:tid 179224] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.208322 2026] [security2:error] [pid 178882:tid 179215] [client 52.172.226.14:20500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/b.php"] [unique_id "aryybtqTm83YguA3303QwgAAAKE"]
[Wed Sep 30 00:55:42.208445 2026] [security2:error] [pid 178882:tid 179303] [client 20.214.191.94:58824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/sallu.php"] [unique_id "aryybtqTm83YguA3303QwwAAAPU"]
[Wed Sep 30 00:55:42.244172 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.244500 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.285311 2026] [access_compat:error] [pid 178882:tid 179250] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:55:42.285563 2026] [access_compat:error] [pid 178882:tid 179250] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:55:42.334643 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.334925 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.357850 2026] [security2:error] [pid 178882:tid 179256] [client 20.219.2.60:45317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-blog-header.php"] [unique_id "aryybtqTm83YguA3303Q0wAAAMg"]
[Wed Sep 30 00:55:42.386792 2026] [access_compat:error] [pid 178882:tid 179239] [client 47.82.11.32:39520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:42.387239 2026] [access_compat:error] [pid 178882:tid 179239] [client 47.82.11.32:39520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:42.394117 2026] [security2:error] [pid 178882:tid 179192] [client 20.204.161.246:48551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/imageskir.php"] [unique_id "aryybtqTm83YguA3303Q1gAAAIw"]
[Wed Sep 30 00:55:42.429385 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.429780 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.499334 2026] [security2:error] [pid 178882:tid 179267] [client 20.251.39.228:15019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/eetu.php"] [unique_id "aryybtqTm83YguA3303Q2QAAANM"]
[Wed Sep 30 00:55:42.506025 2026] [security2:error] [pid 178882:tid 179159] [remote 57.141.14.59:63414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/wp-json/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303Q2AAAs2k"]
[Wed Sep 30 00:55:42.522548 2026] [security2:error] [pid 178882:tid 179284] [client 102.254.102.41:42156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303Q2gAAAOI"]
[Wed Sep 30 00:55:42.532272 2026] [security2:error] [pid 178882:tid 179284] [client 102.254.102.41:42156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303Q2gAAAOI"]
[Wed Sep 30 00:55:42.548235 2026] [security2:error] [pid 178882:tid 179275] [client 20.70.173.30:60580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/f35.update.php"] [unique_id "aryybtqTm83YguA3303Q2wAAANk"]
[Wed Sep 30 00:55:42.571345 2026] [security2:error] [pid 178882:tid 179200] [client 20.214.191.94:61501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/01.php"] [unique_id "aryybtqTm83YguA3303Q3AAAAJQ"]
[Wed Sep 30 00:55:42.587508 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.587596 2026] [security2:error] [pid 178882:tid 179320] [client 182.69.182.151:28701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303Q3gAAAQQ"]
[Wed Sep 30 00:55:42.587687 2026] [security2:error] [pid 178882:tid 179320] [client 182.69.182.151:28701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryybtqTm83YguA3303Q3gAAAQQ"]
[Wed Sep 30 00:55:42.587797 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.677192 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.677453 2026] [access_compat:error] [pid 178882:tid 179253] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.697662 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.697919 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.719179 2026] [security2:error] [pid 178882:tid 179251] [client 52.172.226.14:20484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/admin.php"] [unique_id "aryybtqTm83YguA3303Q7AAAAMM"]
[Wed Sep 30 00:55:42.793842 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.794282 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.823997 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:49579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bgymj.php"] [unique_id "aryybtqTm83YguA3303Q-gAAAOs"]
[Wed Sep 30 00:55:42.838266 2026] [security2:error] [pid 178882:tid 179215] [client 20.219.2.60:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/3586%20b64.php"] [unique_id "aryybtqTm83YguA3303Q-wAAAKE"]
[Wed Sep 30 00:55:42.870381 2026] [security2:error] [pid 178882:tid 179201] [client 20.214.191.94:47009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ab.php"] [unique_id "aryybtqTm83YguA3303Q_AAAAJU"]
[Wed Sep 30 00:55:42.880561 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.880820 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:42.910822 2026] [access_compat:error] [pid 178882:tid 179288] [client 47.79.13.53:33950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:42.911094 2026] [access_compat:error] [pid 178882:tid 179288] [client 47.79.13.53:33950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:42.914434 2026] [access_compat:error] [pid 178882:tid 179252] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:55:42.914846 2026] [access_compat:error] [pid 178882:tid 179252] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:55:42.957585 2026] [security2:error] [pid 178882:tid 179173] [remote 47.128.114.159:14116] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/city/190/ncat/13/pg/27"] [unique_id "aryybtqTm83YguA3303RBAAAnXc"]
[Wed Sep 30 00:55:42.971402 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:42.971663 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.023603 2026] [security2:error] [pid 178882:tid 179136] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyb9qTm83YguA3303RCwAA6VI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=4b305c258a93932e8c023b32c1b28291&t=22217
[Wed Sep 30 00:55:43.023643 2026] [security2:error] [pid 178882:tid 179136] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyb9qTm83YguA3303RCwAA6VI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=4b305c258a93932e8c023b32c1b28291&t=22217
[Wed Sep 30 00:55:43.064328 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.064586 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.065930 2026] [security2:error] [pid 178882:tid 179238] [client 103.172.210.103:53065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyb9qTm83YguA3303REAAAALc"]
[Wed Sep 30 00:55:43.066051 2026] [security2:error] [pid 178882:tid 179238] [client 103.172.210.103:53065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyb9qTm83YguA3303REAAAALc"]
[Wed Sep 30 00:55:43.084995 2026] [security2:error] [pid 178882:tid 179311] [client 4.196.65.241:27309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wp-trackback.php"] [unique_id "aryyb9qTm83YguA3303REQAAAPw"]
[Wed Sep 30 00:55:43.105018 2026] [security2:error] [pid 178882:tid 179186] [client 20.251.39.228:17129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/dx.php"] [unique_id "aryyb9qTm83YguA3303RFAAAAIY"]
[Wed Sep 30 00:55:43.154530 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.154775 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.158784 2026] [security2:error] [pid 178882:tid 179199] [client 173.254.29.157:42696] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyb9qTm83YguA3303RFgAAAJM"]
[Wed Sep 30 00:55:43.164297 2026] [security2:error] [pid 178882:tid 179210] [client 20.214.191.94:61472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/xwpg.php"] [unique_id "aryyb9qTm83YguA3303RGAAAAJw"]
[Wed Sep 30 00:55:43.176416 2026] [security2:error] [pid 178882:tid 179216] [client 173.254.29.157:42698] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryyb9qTm83YguA3303RGgAAAKI"]
[Wed Sep 30 00:55:43.193346 2026] [security2:error] [pid 178882:tid 179294] [client 173.254.29.157:42704] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyb9qTm83YguA3303RGwAAAOw"]
[Wed Sep 30 00:55:43.208825 2026] [security2:error] [pid 178882:tid 179272] [client 173.254.29.157:42706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyb9qTm83YguA3303RHQAAANc"]
[Wed Sep 30 00:55:43.235305 2026] [security2:error] [pid 178882:tid 179319] [client 52.172.226.14:20540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/fling.php"] [unique_id "aryyb9qTm83YguA3303RHgAAAQM"]
[Wed Sep 30 00:55:43.249497 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.249743 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.318614 2026] [security2:error] [pid 178882:tid 179224] [client 20.219.2.60:63263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gfd.php"] [unique_id "aryyb9qTm83YguA3303RJwAAAKo"]
[Wed Sep 30 00:55:43.321422 2026] [security2:error] [pid 178882:tid 179273] [client 20.219.2.60:36765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/install.php"] [unique_id "aryyb9qTm83YguA3303RKAAAANg"]
[Wed Sep 30 00:55:43.335889 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.336145 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.387041 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=cdn2&p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 00:55:43.387318 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=cdn2&p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 00:55:43.403504 2026] [security2:error] [pid 178882:tid 179252] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyb9qTm83YguA3303RLgAAAMQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:43.428373 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.428626 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.444081 2026] [security2:error] [pid 178882:tid 179211] [client 20.214.191.94:58827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/flamini.php"] [unique_id "aryyb9qTm83YguA3303RMAAAAJ0"]
[Wed Sep 30 00:55:43.519298 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.519570 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.606615 2026] [security2:error] [pid 178882:tid 179303] [client 20.251.39.228:30206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-kikikoko.php"] [unique_id "aryyb9qTm83YguA3303RNwAAAPU"]
[Wed Sep 30 00:55:43.610037 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.610308 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.701645 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.701930 2026] [access_compat:error] [pid 178882:tid 179311] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.773492 2026] [security2:error] [pid 178882:tid 179285] [client 20.214.191.94:61454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/themes.php"] [unique_id "aryyb9qTm83YguA3303RQgAAAOM"]
[Wed Sep 30 00:55:43.792080 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.792329 2026] [access_compat:error] [pid 178882:tid 179210] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.794313 2026] [access_compat:error] [pid 178882:tid 179208] [client 47.79.13.73:56154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:43.794572 2026] [access_compat:error] [pid 178882:tid 179208] [client 47.79.13.73:56154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:43.839966 2026] [security2:error] [pid 178882:tid 179258] [client 20.219.2.60:58471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/callback.php"] [unique_id "aryyb9qTm83YguA3303RRgAAAMo"]
[Wed Sep 30 00:55:43.870353 2026] [security2:error] [pid 178882:tid 179190] [client 157.90.155.240:27512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "aryybdqTm83YguA3303QnAAAAIo"], referer: https://cityofmarional.com
[Wed Sep 30 00:55:43.882341 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.882626 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:43.924674 2026] [access_compat:error] [pid 178882:tid 179253] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 00:55:43.924943 2026] [access_compat:error] [pid 178882:tid 179253] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 00:55:43.958071 2026] [security2:error] [pid 178882:tid 179282] [client 20.251.39.228:41411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/file61.php"] [unique_id "aryyb9qTm83YguA3303RTQAAAOA"]
[Wed Sep 30 00:55:43.962675 2026] [security2:error] [pid 178882:tid 179259] [client 223.181.30.165:7106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyb9qTm83YguA3303RTgAAAMs"]
[Wed Sep 30 00:55:43.962850 2026] [security2:error] [pid 178882:tid 179259] [client 223.181.30.165:7106] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyb9qTm83YguA3303RTgAAAMs"]
[Wed Sep 30 00:55:43.974184 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:43.974462 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.034250 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 00:55:44.034515 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 00:55:44.042552 2026] [security2:error] [pid 178882:tid 179319] [client 52.172.226.14:20528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/themes/index.php"] [unique_id "aryycNqTm83YguA3303RUQAAAQM"]
[Wed Sep 30 00:55:44.059065 2026] [security2:error] [pid 178882:tid 179188] [client 20.204.161.246:48516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/backup-helper.php"] [unique_id "aryycNqTm83YguA3303RUwAAAIg"]
[Wed Sep 30 00:55:44.065204 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.065509 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.106933 2026] [security2:error] [pid 178882:tid 179189] [client 20.214.191.94:61442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/0.php"] [unique_id "aryycNqTm83YguA3303RVAAAAIk"]
[Wed Sep 30 00:55:44.150429 2026] [security2:error] [pid 178882:tid 179273] [client 20.194.30.107:14352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/8.php"] [unique_id "aryycNqTm83YguA3303RWwAAANg"]
[Wed Sep 30 00:55:44.153915 2026] [security2:error] [pid 178882:tid 179293] [client 20.219.2.60:36860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/public/wp-blog.php"] [unique_id "aryycNqTm83YguA3303RXQAAAOs"]
[Wed Sep 30 00:55:44.157623 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.157998 2026] [access_compat:error] [pid 178882:tid 179249] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.216895 2026] [security2:error] [pid 178882:tid 179299] [client 123.63.248.21:59740] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RXAAAAPE"]
[Wed Sep 30 00:55:44.217956 2026] [security2:error] [pid 178882:tid 179299] [client 123.63.248.21:59740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RXAAAAPE"]
[Wed Sep 30 00:55:44.233038 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryycNqTm83YguA3303RYgAAxl4"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=091e1626890a3cd55e7f374aa572ebb6
[Wed Sep 30 00:55:44.233058 2026] [security2:error] [pid 178882:tid 179148] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryycNqTm83YguA3303RYgAAxl4"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=091e1626890a3cd55e7f374aa572ebb6
[Wed Sep 30 00:55:44.244455 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.244706 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.279434 2026] [security2:error] [pid 178882:tid 179305] [client 103.168.66.101:36280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryycNqTm83YguA3303RZQAAAPc"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:44.337086 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.337637 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.341511 2026] [security2:error] [pid 178882:tid 179256] [client 20.219.2.60:55852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/file.php"] [unique_id "aryycNqTm83YguA3303RaQAAAMg"]
[Wed Sep 30 00:55:44.361368 2026] [security2:error] [pid 178882:tid 179216] [client 150.107.232.159:36010] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RagAAAKI"]
[Wed Sep 30 00:55:44.361501 2026] [security2:error] [pid 178882:tid 179216] [client 150.107.232.159:36010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RagAAAKI"]
[Wed Sep 30 00:55:44.377003 2026] [access_compat:error] [pid 178882:tid 179291] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:55:44.377276 2026] [access_compat:error] [pid 178882:tid 179291] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:55:44.431946 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.432316 2026] [access_compat:error] [pid 178882:tid 179307] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.436761 2026] [security2:error] [pid 178882:tid 179187] [client 20.214.191.94:46996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/opsh.php"] [unique_id "aryycNqTm83YguA3303RdwAAAIc"]
[Wed Sep 30 00:55:44.446960 2026] [security2:error] [pid 178882:tid 179267] [client 45.138.12.47:32800] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.xwf.hia.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryycNqTm83YguA3303ReAAAANM"]
[Wed Sep 30 00:55:44.519259 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.519525 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.529457 2026] [security2:error] [pid 178882:tid 179272] [client 152.59.165.7:14277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RfAAAANc"]
[Wed Sep 30 00:55:44.529568 2026] [security2:error] [pid 178882:tid 179272] [client 152.59.165.7:14277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RfAAAANc"]
[Wed Sep 30 00:55:44.560292 2026] [security2:error] [pid 178882:tid 179253] [client 20.219.2.60:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws.php"] [unique_id "aryycNqTm83YguA3303RfgAAAMU"]
[Wed Sep 30 00:55:44.572315 2026] [security2:error] [pid 178882:tid 179279] [client 202.179.95.79:53282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RfwAAAN0"]
[Wed Sep 30 00:55:44.572407 2026] [security2:error] [pid 178882:tid 179279] [client 202.179.95.79:53282] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RfwAAAN0"]
[Wed Sep 30 00:55:44.582001 2026] [security2:error] [pid 178882:tid 179269] [client 49.36.41.37:59392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RgQAAANU"]
[Wed Sep 30 00:55:44.582063 2026] [security2:error] [pid 178882:tid 179269] [client 49.36.41.37:59392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RgQAAANU"]
[Wed Sep 30 00:55:44.594343 2026] [security2:error] [pid 178882:tid 179271] [client 20.251.39.228:30197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/xx.php"] [unique_id "aryycNqTm83YguA3303RggAAANY"]
[Wed Sep 30 00:55:44.610458 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.610717 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.656418 2026] [security2:error] [pid 178882:tid 179276] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryycNqTm83YguA3303RhgAAANo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:44.700142 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.700403 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.782261 2026] [security2:error] [pid 178882:tid 179243] [client 20.70.173.30:60597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "aryycNqTm83YguA3303RkAAAALs"]
[Wed Sep 30 00:55:44.792121 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.792387 2026] [access_compat:error] [pid 178882:tid 179295] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.813415 2026] [security2:error] [pid 178882:tid 179257] [client 203.122.45.246:51605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RlQAAAMk"]
[Wed Sep 30 00:55:44.813603 2026] [security2:error] [pid 178882:tid 179257] [client 203.122.45.246:51605] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryycNqTm83YguA3303RlQAAAMk"]
[Wed Sep 30 00:55:44.825354 2026] [security2:error] [pid 178882:tid 179186] [client 20.214.191.94:61464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/media.php"] [unique_id "aryycNqTm83YguA3303RlgAAAIY"]
[Wed Sep 30 00:55:44.851019 2026] [security2:error] [pid 178882:tid 179254] [client 20.219.2.60:63270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bolt.php"] [unique_id "aryycNqTm83YguA3303RlwAAAMY"]
[Wed Sep 30 00:55:44.884031 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.884294 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:44.927042 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 00:55:44.927302 2026] [access_compat:error] [pid 178882:tid 179260] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 00:55:44.973790 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:44.974056 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.011487 2026] [security2:error] [pid 178882:tid 179285] [client 72.255.10.32:55576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RogAAAOM"]
[Wed Sep 30 00:55:45.011589 2026] [security2:error] [pid 178882:tid 179285] [client 72.255.10.32:55576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RogAAAOM"]
[Wed Sep 30 00:55:45.052438 2026] [access_compat:error] [pid 178882:tid 179318] [client 47.79.13.58:43166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:45.052685 2026] [access_compat:error] [pid 178882:tid 179318] [client 47.79.13.58:43166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:45.066961 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.067239 2026] [access_compat:error] [pid 178882:tid 179247] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.142304 2026] [security2:error] [pid 178882:tid 179211] [client 20.251.39.228:30165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/Jcrop.php"] [unique_id "aryycdqTm83YguA3303RpwAAAJ0"]
[Wed Sep 30 00:55:45.156508 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.156761 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.179730 2026] [security2:error] [pid 178882:tid 179262] [client 52.172.226.14:20527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/adminfuns.php"] [unique_id "aryycdqTm83YguA3303RqQAAAM4"]
[Wed Sep 30 00:55:45.195616 2026] [security2:error] [pid 178882:tid 179307] [client 20.214.191.94:58822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/images.php"] [unique_id "aryycdqTm83YguA3303RrAAAAPk"]
[Wed Sep 30 00:55:45.245201 2026] [security2:error] [pid 178882:tid 179272] [client 20.28.180.172:34290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/jlex.php"] [unique_id "aryycdqTm83YguA3303RsAAAANc"]
[Wed Sep 30 00:55:45.247563 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.247862 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.251543 2026] [security2:error] [pid 178882:tid 179205] [client 20.204.42.136:61249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/UuAFIYGYKdefault.php"] [unique_id "aryycdqTm83YguA3303RsgAAAJg"]
[Wed Sep 30 00:55:45.310084 2026] [security2:error] [pid 178882:tid 179315] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryycdqTm83YguA3303RswAAAP8"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:45.313328 2026] [security2:error] [pid 178882:tid 179279] [client 4.240.25.22:30742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/133.php"] [unique_id "aryycdqTm83YguA3303RtAAAAN0"]
[Wed Sep 30 00:55:45.322835 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.2.60:63250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-blogs.php"] [unique_id "aryycdqTm83YguA3303RtQAAAOc"]
[Wed Sep 30 00:55:45.339340 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.339599 2026] [access_compat:error] [pid 178882:tid 179292] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.396125 2026] [access_compat:error] [pid 178882:tid 179210] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 00:55:45.396479 2026] [access_compat:error] [pid 178882:tid 179210] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 00:55:45.430857 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.431424 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.453070 2026] [security2:error] [pid 178882:tid 179231] [client 20.194.30.107:14362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/b8.php"] [unique_id "aryycdqTm83YguA3303RuQAAALE"]
[Wed Sep 30 00:55:45.524275 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.524679 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.541449 2026] [security2:error] [pid 178882:tid 179268] [client 20.214.191.94:61499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ops.php"] [unique_id "aryycdqTm83YguA3303RwAAAANQ"]
[Wed Sep 30 00:55:45.541532 2026] [security2:error] [pid 178882:tid 179275] [client 20.251.39.228:30908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/rip.php"] [unique_id "aryycdqTm83YguA3303RvwAAANk"]
[Wed Sep 30 00:55:45.541753 2026] [security2:error] [pid 178882:tid 179243] [client 115.191.1.205:59404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.1.191.115.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryycdqTm83YguA3303RwQAAALs"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 00:55:45.575641 2026] [security2:error] [pid 178882:tid 179256] [client 43.227.131.37:48007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RwwAAAMg"]
[Wed Sep 30 00:55:45.575786 2026] [security2:error] [pid 178882:tid 179256] [client 43.227.131.37:48007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RwwAAAMg"]
[Wed Sep 30 00:55:45.594109 2026] [security2:error] [pid 178882:tid 179250] [client 39.44.16.112:49848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RxQAAAMI"]
[Wed Sep 30 00:55:45.594762 2026] [security2:error] [pid 178882:tid 179250] [client 39.44.16.112:49848] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303RxQAAAMI"]
[Wed Sep 30 00:55:45.612845 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.613122 2026] [access_compat:error] [pid 178882:tid 179284] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.663983 2026] [security2:error] [pid 178882:tid 179249] [client 20.194.30.107:64313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/xkSudf.php"] [unique_id "aryycdqTm83YguA3303RygAAAME"]
[Wed Sep 30 00:55:45.704192 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.704463 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.768338 2026] [security2:error] [pid 178882:tid 179199] [client 213.136.69.135:55546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/block-template.php"] [unique_id "aryycdqTm83YguA3303R0AAAAJM"], referer: binance.com
[Wed Sep 30 00:55:45.773767 2026] [security2:error] [pid 178882:tid 179080] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryycdqTm83YguA3303R0QAA4xw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=4c449d020c7225e5088235184ed5c600&start=75&t=7482
[Wed Sep 30 00:55:45.773807 2026] [security2:error] [pid 178882:tid 179080] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryycdqTm83YguA3303R0QAA4xw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=4c449d020c7225e5088235184ed5c600&start=75&t=7482
[Wed Sep 30 00:55:45.795065 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.795337 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:12597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.798838 2026] [security2:error] [pid 178882:tid 179236] [client 20.219.2.60:55836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/zlnckdxn.php"] [unique_id "aryycdqTm83YguA3303R0wAAALY"]
[Wed Sep 30 00:55:45.809471 2026] [security2:error] [pid 178882:tid 179318] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryycdqTm83YguA3303R1AAAAQI"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:45.814106 2026] [security2:error] [pid 178882:tid 179220] [client 20.219.2.60:36716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/nw.php"] [unique_id "aryycdqTm83YguA3303R1QAAAKY"]
[Wed Sep 30 00:55:45.818712 2026] [core:error] [pid 178882:tid 179186] [client 45.138.12.32:14450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:45.818726 2026] [core:error] [pid 178882:tid 179186] [client 45.138.12.32:14450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:45.863521 2026] [security2:error] [pid 178882:tid 179192] [client 20.214.191.94:46985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/mac.php"] [unique_id "aryycdqTm83YguA3303R1wAAAIw"]
[Wed Sep 30 00:55:45.884460 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.884776 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.919854 2026] [access_compat:error] [pid 178882:tid 179307] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 00:55:45.920108 2026] [access_compat:error] [pid 178882:tid 179307] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 00:55:45.981835 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:45.982287 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:45.983504 2026] [security2:error] [pid 178882:tid 179298] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryycdqTm83YguA3303R5gAAAPA"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:45.983535 2026] [security2:error] [pid 178882:tid 179206] [client 216.73.216.46:12597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryycdqTm83YguA3303R5wAAAJk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1OS9maXJtd2FyZV9ub2Rl
[Wed Sep 30 00:55:45.986166 2026] [security2:error] [pid 178882:tid 179286] [client 182.181.183.180:62477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.183.181.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303R5QAAAOQ"]
[Wed Sep 30 00:55:45.986329 2026] [security2:error] [pid 178882:tid 179286] [client 182.181.183.180:62477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryycdqTm83YguA3303R5QAAAOQ"]
[Wed Sep 30 00:55:46.027194 2026] [security2:error] [pid 178882:tid 179319] [client 223.235.102.107:29119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303R6QAAAQM"]
[Wed Sep 30 00:55:46.027298 2026] [security2:error] [pid 178882:tid 179319] [client 223.235.102.107:29119] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303R6QAAAQM"]
[Wed Sep 30 00:55:46.067977 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.068255 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.072651 2026] [security2:error] [pid 178882:tid 179226] [client 45.138.12.47:32828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.xwf.hia.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyctqTm83YguA3303R8QAAAKw"]
[Wed Sep 30 00:55:46.121515 2026] [security2:error] [pid 178882:tid 179227] [client 20.251.39.228:41424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/new4.php"] [unique_id "aryyctqTm83YguA3303R9wAAAK0"]
[Wed Sep 30 00:55:46.136837 2026] [access_compat:error] [pid 178882:tid 179290] [client 47.79.13.78:32816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:46.137136 2026] [access_compat:error] [pid 178882:tid 179290] [client 47.79.13.78:32816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:46.156476 2026] [security2:error] [pid 178882:tid 179214] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyctqTm83YguA3303R-gAAAKA"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:46.159740 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.160015 2026] [access_compat:error] [pid 178882:tid 179309] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.175427 2026] [security2:error] [pid 178882:tid 179189] [client 20.214.191.94:46980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/pass4.php"] [unique_id "aryyctqTm83YguA3303R-wAAAIk"]
[Wed Sep 30 00:55:46.250958 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.251207 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.283079 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:45325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/fs6.php"] [unique_id "aryyctqTm83YguA3303R_QAAAP4"]
[Wed Sep 30 00:55:46.337817 2026] [security2:error] [pid 178882:tid 179196] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/Batch/v1"] [unique_id "aryyctqTm83YguA3303R_gAAAJA"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:46.382092 2026] [access_compat:error] [pid 178882:tid 179295] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:46.382362 2026] [access_compat:error] [pid 178882:tid 179295] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:55:46.398101 2026] [security2:error] [pid 178882:tid 179250] [client 52.172.226.14:20166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/alfa.php"] [unique_id "aryyctqTm83YguA3303SAQAAAMI"]
[Wed Sep 30 00:55:46.438557 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.438824 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.467665 2026] [security2:error] [pid 178882:tid 179265] [client 20.214.191.94:58836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/drttewyh.php"] [unique_id "aryyctqTm83YguA3303SBQAAANE"]
[Wed Sep 30 00:55:46.515539 2026] [security2:error] [pid 178882:tid 179244] [client 20.204.161.246:48537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/1xmomo.php"] [unique_id "aryyctqTm83YguA3303SBgAAALw"]
[Wed Sep 30 00:55:46.518394 2026] [security2:error] [pid 178882:tid 179294] [client 49.205.105.16:14319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303SBwAAAOw"]
[Wed Sep 30 00:55:46.518492 2026] [security2:error] [pid 178882:tid 179294] [client 49.205.105.16:14319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303SBwAAAOw"]
[Wed Sep 30 00:55:46.526192 2026] [security2:error] [pid 178882:tid 179185] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyctqTm83YguA3303SCQAAAIU"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:46.530149 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.530412 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.575684 2026] [security2:error] [pid 178882:tid 179239] [client 103.24.86.56:51673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303SDAAAALg"]
[Wed Sep 30 00:55:46.575792 2026] [security2:error] [pid 178882:tid 179239] [client 103.24.86.56:51673] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyctqTm83YguA3303SDAAAALg"]
[Wed Sep 30 00:55:46.616470 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.616730 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.628599 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.629015 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.647660 2026] [security2:error] [pid 178882:tid 179095] [remote 47.128.34.10:46852] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.elearning.ephodgroup.com"] [uri "/"] [unique_id "aryyctqTm83YguA3303SGgAAjCs"]
[Wed Sep 30 00:55:46.676478 2026] [security2:error] [pid 178882:tid 179262] [client 20.251.39.228:15003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/aa.php"] [unique_id "aryyctqTm83YguA3303SHAAAAM4"]
[Wed Sep 30 00:55:46.701297 2026] [security2:error] [pid 178882:tid 179204] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1/"] [unique_id "aryyctqTm83YguA3303SHwAAAJc"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:46.720950 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.721390 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.723178 2026] [security2:error] [pid 178882:tid 179306] [client 198.55.117.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryyctqTm83YguA3303SJAAAAPg"]
[Wed Sep 30 00:55:46.753175 2026] [security2:error] [pid 178882:tid 179319] [client 20.219.2.60:55843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/xwzs.php"] [unique_id "aryyctqTm83YguA3303SJQAAAQM"]
[Wed Sep 30 00:55:46.808980 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.809264 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.858461 2026] [security2:error] [pid 178882:tid 179229] [client 20.219.2.60:18842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bmi.php"] [unique_id "aryyctqTm83YguA3303SKQAAAK8"]
[Wed Sep 30 00:55:46.873111 2026] [security2:error] [pid 178882:tid 179251] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "aryyctqTm83YguA3303SKgAAAMM"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:46.889765 2026] [security2:error] [pid 178882:tid 179258] [client 52.172.226.14:20481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/222.php"] [unique_id "aryyctqTm83YguA3303SKwAAAMo"]
[Wed Sep 30 00:55:46.900804 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.901079 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:46.907981 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:55:46.908236 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:55:46.939442 2026] [security2:error] [pid 178882:tid 179235] [client 20.194.30.107:30403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "aryyctqTm83YguA3303SMAAAALU"]
[Wed Sep 30 00:55:46.989901 2026] [security2:error] [pid 178882:tid 179189] [client 20.214.191.94:58849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/sh.php"] [unique_id "aryyctqTm83YguA3303SMwAAAIk"]
[Wed Sep 30 00:55:46.990839 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:46.991183 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.057117 2026] [security2:error] [pid 178882:tid 179058] [remote 74.7.227.17:60158] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyc9qTm83YguA3303SNgAAyAY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=c2a8ad153a6fd7282a65318868075eef&start=75&t=17868
[Wed Sep 30 00:55:47.057147 2026] [security2:error] [pid 178882:tid 179058] [remote 74.7.227.17:60158] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyc9qTm83YguA3303SNgAAyAY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=c2a8ad153a6fd7282a65318868075eef&start=75&t=17868
[Wed Sep 30 00:55:47.083080 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.083370 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.172089 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.172495 2026] [access_compat:error] [pid 178882:tid 179293] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.253790 2026] [security2:error] [pid 178882:tid 179260] [client 20.219.2.60:55870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryyc9qTm83YguA3303SQwAAAMw"]
[Wed Sep 30 00:55:47.263136 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.263412 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.351610 2026] [security2:error] [pid 178882:tid 179186] [client 20.251.39.228:29951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/jk.php"] [unique_id "aryyc9qTm83YguA3303STAAAAIY"]
[Wed Sep 30 00:55:47.358980 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.359235 2026] [access_compat:error] [pid 178882:tid 179192] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.391767 2026] [access_compat:error] [pid 178882:tid 179262] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2N3ZA==
[Wed Sep 30 00:55:47.392062 2026] [access_compat:error] [pid 178882:tid 179262] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2N3ZA==
[Wed Sep 30 00:55:47.446542 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.446795 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.464613 2026] [security2:error] [pid 178882:tid 179267] [client 52.172.226.14:20167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyc9qTm83YguA3303SUQAAANM"]
[Wed Sep 30 00:55:47.487565 2026] [security2:error] [pid 178882:tid 179203] [client 45.138.12.16:59220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/index.php/home/"] [unique_id "aryyc9qTm83YguA3303SVAAAAJY"]
[Wed Sep 30 00:55:47.505235 2026] [security2:error] [pid 178882:tid 179315] [client 20.204.42.136:28108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/gif.php"] [unique_id "aryyc9qTm83YguA3303SVgAAAP8"]
[Wed Sep 30 00:55:47.519619 2026] [security2:error] [pid 178882:tid 179292] [client 20.214.191.94:61495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/groud1.php"] [unique_id "aryyc9qTm83YguA3303SVwAAAOo"]
[Wed Sep 30 00:55:47.537637 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.537922 2026] [access_compat:error] [pid 178882:tid 179208] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.567984 2026] [security2:error] [pid 178882:tid 179251] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "aryyc9qTm83YguA3303SXgAAAMM"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:47.574013 2026] [security2:error] [pid 178882:tid 179258] [client 20.219.2.60:36720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/tool.php"] [unique_id "aryyc9qTm83YguA3303SYAAAAMo"]
[Wed Sep 30 00:55:47.628993 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.629269 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.711665 2026] [access_compat:error] [pid 178882:tid 179298] [client 47.79.13.234:48644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:47.711939 2026] [access_compat:error] [pid 178882:tid 179298] [client 47.79.13.234:48644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:47.721562 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.721867 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:23529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.724648 2026] [security2:error] [pid 178882:tid 179194] [client 20.219.2.60:55823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws66.php"] [unique_id "aryyc9qTm83YguA3303SbwAAAI4"]
[Wed Sep 30 00:55:47.805523 2026] [security2:error] [pid 178882:tid 179271] [client 20.214.191.94:58862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/bro.php"] [unique_id "aryyc9qTm83YguA3303SdAAAANY"]
[Wed Sep 30 00:55:47.811293 2026] [security2:error] [pid 178882:tid 179293] [client 103.168.66.101:36284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyc9qTm83YguA3303SdQAAAOs"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:47.812467 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.812720 2026] [access_compat:error] [pid 178882:tid 179197] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.911392 2026] [security2:error] [pid 178882:tid 179260] [client 216.73.216.46:23529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyc9qTm83YguA3303SdgAAAMw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk2OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:47.937721 2026] [security2:error] [pid 178882:tid 179230] [client 20.28.180.172:29491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/cong.php"] [unique_id "aryyc9qTm83YguA3303SeAAAALA"]
[Wed Sep 30 00:55:47.945957 2026] [access_compat:error] [pid 178882:tid 179239] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 00:55:47.946205 2026] [access_compat:error] [pid 178882:tid 179239] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 00:55:47.970231 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.970498 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.993911 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:47.994170 2026] [access_compat:error] [pid 178882:tid 179213] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:47.996310 2026] [security2:error] [pid 178882:tid 179215] [client 52.172.226.14:20168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/images.php"] [unique_id "aryyc9qTm83YguA3303SfAAAAKE"]
[Wed Sep 30 00:55:48.047331 2026] [security2:error] [pid 178882:tid 179245] [client 20.251.39.228:7913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/gcqoa.php"] [unique_id "aryydNqTm83YguA3303SfQAAAL0"]
[Wed Sep 30 00:55:48.089885 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.090137 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.175126 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.175389 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.236212 2026] [security2:error] [pid 178882:tid 179286] [client 20.219.2.60:48843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ewe.php"] [unique_id "aryydNqTm83YguA3303SiwAAAOQ"]
[Wed Sep 30 00:55:48.237293 2026] [security2:error] [pid 178882:tid 179233] [client 20.219.2.60:18907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bypltspd.php"] [unique_id "aryydNqTm83YguA3303SjAAAALM"]
[Wed Sep 30 00:55:48.244277 2026] [security2:error] [pid 178882:tid 179280] [client 181.233.179.163:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryydNqTm83YguA3303SjgAAAN4"]
[Wed Sep 30 00:55:48.259844 2026] [security2:error] [pid 178882:tid 179302] [client 20.214.191.94:61503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ac83.php"] [unique_id "aryydNqTm83YguA3303SkQAAAPQ"]
[Wed Sep 30 00:55:48.264448 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.264714 2026] [access_compat:error] [pid 178882:tid 179203] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.358825 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.359088 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.383197 2026] [security2:error] [pid 178882:tid 179313] [client 74.7.242.1:41938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryydNqTm83YguA3303SmgAAAP0"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:55:48.386908 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 00:55:48.387187 2026] [access_compat:error] [pid 178882:tid 179249] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 00:55:48.448008 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.448282 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.504993 2026] [security2:error] [pid 178882:tid 179199] [client 114.119.130.40:26469] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "aaronwalsh.com"] [uri "/index.php"] [unique_id "aryydNqTm83YguA3303SnQAAAJM"], referer: http://aaronwalsh.com/index.php?p=1_3_Your-First-Visit
[Wed Sep 30 00:55:48.538560 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.539072 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.598464 2026] [security2:error] [pid 178882:tid 179303] [client 52.172.226.14:20492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/media.php"] [unique_id "aryydNqTm83YguA3303SpwAAAPU"]
[Wed Sep 30 00:55:48.613888 2026] [security2:error] [pid 178882:tid 179317] [client 20.251.39.228:35149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/plugin-editor.php"] [unique_id "aryydNqTm83YguA3303SqQAAAQE"]
[Wed Sep 30 00:55:48.614926 2026] [security2:error] [pid 178882:tid 179290] [client 20.214.191.94:47029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/class-wp-http-client.php"] [unique_id "aryydNqTm83YguA3303SqgAAAOg"]
[Wed Sep 30 00:55:48.628890 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.629149 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.721366 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.721626 2026] [access_compat:error] [pid 178882:tid 179250] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.792076 2026] [security2:error] [pid 178882:tid 179208] [client 103.159.192.142:56828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryydNqTm83YguA3303SswAAAJo"]
[Wed Sep 30 00:55:48.792235 2026] [security2:error] [pid 178882:tid 179208] [client 103.159.192.142:56828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryydNqTm83YguA3303SswAAAJo"]
[Wed Sep 30 00:55:48.810421 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.810676 2026] [access_compat:error] [pid 178882:tid 179185] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.870891 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 00:55:48.871156 2026] [access_compat:error] [pid 178882:tid 179230] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 00:55:48.901952 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.902198 2026] [access_compat:error] [pid 178882:tid 179301] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:48.931781 2026] [security2:error] [pid 178882:tid 179217] [client 20.219.2.60:48870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/aboute.php"] [unique_id "aryydNqTm83YguA3303SuwAAAKM"]
[Wed Sep 30 00:55:48.934272 2026] [security2:error] [pid 178882:tid 179300] [client 20.251.39.228:5781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/plugin-install.php"] [unique_id "aryydNqTm83YguA3303SvAAAAPI"]
[Wed Sep 30 00:55:48.954279 2026] [security2:error] [pid 178882:tid 179213] [client 20.214.191.94:61491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/zoo2.php"] [unique_id "aryydNqTm83YguA3303SvgAAAJ8"]
[Wed Sep 30 00:55:48.993280 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:48.993537 2026] [access_compat:error] [pid 178882:tid 179296] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.039304 2026] [security2:error] [pid 178882:tid 179299] [client 20.204.161.246:48555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/almafkew.php"] [unique_id "aryyddqTm83YguA3303SwAAAAPE"]
[Wed Sep 30 00:55:49.085645 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.085797 2026] [security2:error] [pid 178882:tid 179201] [client 20.219.2.60:36813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/drhunthq.php"] [unique_id "aryyddqTm83YguA3303SxQAAAJU"]
[Wed Sep 30 00:55:49.085913 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.089443 2026] [security2:error] [pid 178882:tid 179211] [client 52.172.226.14:20525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/mac.php"] [unique_id "aryyddqTm83YguA3303SxgAAAJ0"]
[Wed Sep 30 00:55:49.162617 2026] [security2:error] [pid 178882:tid 179268] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyddqTm83YguA3303SywAAANQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:49.194596 2026] [security2:error] [pid 178882:tid 179233] [client 20.194.30.107:64209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/red.php"] [unique_id "aryyddqTm83YguA3303SzQAAALM"]
[Wed Sep 30 00:55:49.244572 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.244847 2026] [access_compat:error] [pid 178882:tid 179222] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.276851 2026] [security2:error] [pid 178882:tid 179190] [client 20.214.191.94:61500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/zoo1.php"] [unique_id "aryyddqTm83YguA3303S1AAAAIo"]
[Wed Sep 30 00:55:49.304057 2026] [security2:error] [pid 178882:tid 179205] [client 202.51.84.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyddqTm83YguA3303S1gAAAJg"]
[Wed Sep 30 00:55:49.333148 2026] [security2:error] [pid 178882:tid 179258] [client 20.251.39.228:40912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/profile.php"] [unique_id "aryyddqTm83YguA3303S2QAAAMo"]
[Wed Sep 30 00:55:49.363930 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.364186 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.369972 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.370221 2026] [access_compat:error] [pid 178882:tid 179282] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.382983 2026] [access_compat:error] [pid 178882:tid 179316] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 00:55:49.383234 2026] [access_compat:error] [pid 178882:tid 179316] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 00:55:49.448874 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.449141 2026] [access_compat:error] [pid 178882:tid 179252] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.491407 2026] [security2:error] [pid 178882:tid 179239] [client 106.214.2.47:8263] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyddqTm83YguA3303S3wAAALg"]
[Wed Sep 30 00:55:49.491499 2026] [security2:error] [pid 178882:tid 179239] [client 106.214.2.47:8263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyddqTm83YguA3303S3wAAALg"]
[Wed Sep 30 00:55:49.538634 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.538906 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.613458 2026] [security2:error] [pid 178882:tid 179317] [client 20.70.173.30:25091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-blog-header.php"] [unique_id "aryyddqTm83YguA3303S4wAAAQE"]
[Wed Sep 30 00:55:49.629161 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.629420 2026] [access_compat:error] [pid 178882:tid 179243] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.650949 2026] [security2:error] [pid 178882:tid 179212] [client 20.214.191.94:61496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/class-ajax.php"] [unique_id "aryyddqTm83YguA3303S5wAAAJ4"]
[Wed Sep 30 00:55:49.672389 2026] [security2:error] [pid 178882:tid 179271] [client 20.70.173.30:60024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/a.php"] [unique_id "aryyddqTm83YguA3303S6QAAANY"]
[Wed Sep 30 00:55:49.720170 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.720430 2026] [access_compat:error] [pid 178882:tid 179244] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.748127 2026] [security2:error] [pid 178882:tid 179242] [client 20.219.2.60:58469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/x9.php"] [unique_id "aryyddqTm83YguA3303S7gAAALo"]
[Wed Sep 30 00:55:49.774518 2026] [security2:error] [pid 178882:tid 179309] [client 20.251.39.228:29910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/class-t.api.php"] [unique_id "aryyddqTm83YguA3303S8gAAAPo"]
[Wed Sep 30 00:55:49.813022 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.813304 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.898612 2026] [security2:error] [pid 178882:tid 179296] [client 20.28.180.172:29586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/xmini4.php"] [unique_id "aryyddqTm83YguA3303S_QAAAO4"]
[Wed Sep 30 00:55:49.902934 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:49.903192 2026] [access_compat:error] [pid 178882:tid 179198] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:49.905661 2026] [access_compat:error] [pid 178882:tid 179318] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:55:49.905927 2026] [access_compat:error] [pid 178882:tid 179318] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 00:55:49.925523 2026] [security2:error] [pid 178882:tid 179262] [client 20.214.191.94:58837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/gm.php"] [unique_id "aryyddqTm83YguA3303TAAAAAM4"]
[Wed Sep 30 00:55:50.000528 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.000969 2026] [access_compat:error] [pid 178882:tid 179283] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.026821 2026] [ssl:error] [pid 178882:tid 179261] [client 216.25.124.26:48226] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname website-74a45ce1.nucreativesolutions.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:55:50.084060 2026] [security2:error] [pid 178882:tid 179247] [client 52.172.226.14:20497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ops.php"] [unique_id "aryydtqTm83YguA3303TBQAAAL8"]
[Wed Sep 30 00:55:50.086516 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.086815 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.103682 2026] [security2:error] [pid 178882:tid 179079] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryydtqTm83YguA3303TBwAA2Bs"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=f984eb74a70684f29c1c3052aa54e06f
[Wed Sep 30 00:55:50.103713 2026] [security2:error] [pid 178882:tid 179079] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryydtqTm83YguA3303TBwAA2Bs"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=f984eb74a70684f29c1c3052aa54e06f
[Wed Sep 30 00:55:50.134287 2026] [security2:error] [pid 178882:tid 179204] [client 20.194.30.107:17483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/sym.php"] [unique_id "aryydtqTm83YguA3303TCQAAAJc"]
[Wed Sep 30 00:55:50.176465 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.176717 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.197747 2026] [security2:error] [pid 178882:tid 179280] [client 20.251.39.228:30867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-links-opml.php"] [unique_id "aryydtqTm83YguA3303TCwAAAN4"]
[Wed Sep 30 00:55:50.217644 2026] [security2:error] [pid 178882:tid 179297] [client 20.214.191.94:61469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/class-wp-site-list.php"] [unique_id "aryydtqTm83YguA3303TDAAAAO8"]
[Wed Sep 30 00:55:50.267912 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.268172 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.314860 2026] [security2:error] [pid 178882:tid 179278] [client 20.219.2.60:18932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/shell.php"] [unique_id "aryydtqTm83YguA3303TGAAAANw"]
[Wed Sep 30 00:55:50.359509 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.359783 2026] [access_compat:error] [pid 178882:tid 179313] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.372770 2026] [security2:error] [pid 178882:tid 179240] [client 20.219.2.60:63259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/an.php"] [unique_id "aryydtqTm83YguA3303THwAAALk"]
[Wed Sep 30 00:55:50.418950 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:55:50.419390 2026] [access_compat:error] [pid 178882:tid 179314] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:55:50.426081 2026] [security2:error] [pid 178882:tid 179168] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryydtqTm83YguA3303TIwAA-HI"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D73461
[Wed Sep 30 00:55:50.450060 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.450322 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.493322 2026] [security2:error] [pid 178882:tid 179257] [client 4.196.65.241:2499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/pep.php"] [unique_id "aryydtqTm83YguA3303TKQAAAMk"]
[Wed Sep 30 00:55:50.518633 2026] [security2:error] [pid 178882:tid 179295] [client 20.214.191.94:61446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/asd2.php"] [unique_id "aryydtqTm83YguA3303TKgAAAO0"]
[Wed Sep 30 00:55:50.541605 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.541877 2026] [access_compat:error] [pid 178882:tid 179214] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.574704 2026] [security2:error] [pid 178882:tid 179221] [client 52.172.226.14:20526] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/1.php"] [unique_id "aryydtqTm83YguA3303TMQAAAKc"]
[Wed Sep 30 00:55:50.574804 2026] [security2:error] [pid 178882:tid 179221] [client 52.172.226.14:20526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/1.php"] [unique_id "aryydtqTm83YguA3303TMQAAAKc"]
[Wed Sep 30 00:55:50.579748 2026] [security2:error] [pid 178882:tid 179122] [remote 74.7.241.5:40536] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryydtqTm83YguA3303TMgAAzEQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=b2725d59316810b9a67bf03be488ecf7
[Wed Sep 30 00:55:50.579772 2026] [security2:error] [pid 178882:tid 179122] [remote 74.7.241.5:40536] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryydtqTm83YguA3303TMgAAzEQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=b2725d59316810b9a67bf03be488ecf7
[Wed Sep 30 00:55:50.631589 2026] [access_compat:error] [pid 178882:tid 179217] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.631849 2026] [access_compat:error] [pid 178882:tid 179217] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.679965 2026] [security2:error] [pid 178882:tid 179233] [client 116.72.182.19:54940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryydtqTm83YguA3303TOgAAALM"]
[Wed Sep 30 00:55:50.680063 2026] [security2:error] [pid 178882:tid 179233] [client 116.72.182.19:54940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryydtqTm83YguA3303TOgAAALM"]
[Wed Sep 30 00:55:50.700507 2026] [access_compat:error] [pid 178882:tid 179210] [client 47.79.13.64:55912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:50.700758 2026] [access_compat:error] [pid 178882:tid 179210] [client 47.79.13.64:55912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:50.724354 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.724626 2026] [access_compat:error] [pid 178882:tid 179211] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.753723 2026] [security2:error] [pid 178882:tid 179259] [client 20.251.39.228:7885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-class-api.php"] [unique_id "aryydtqTm83YguA3303TPgAAAMs"]
[Wed Sep 30 00:55:50.800236 2026] [security2:error] [pid 178882:tid 179261] [client 20.198.74.230:23902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/tinysd.php"] [unique_id "aryydtqTm83YguA3303TQQAAAM0"]
[Wed Sep 30 00:55:50.806902 2026] [security2:error] [pid 178882:tid 179186] [client 20.214.191.94:61460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/cdc.php"] [unique_id "aryydtqTm83YguA3303TQwAAAIY"]
[Wed Sep 30 00:55:50.816099 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.816354 2026] [access_compat:error] [pid 178882:tid 179268] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.844000 2026] [security2:error] [pid 178882:tid 179180] [remote 64.23.166.180:16262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.ebl.otn.mybluehost.me"] [uri "/.env"] [unique_id "aryydtqTm83YguA3303TRQAAv34"]
[Wed Sep 30 00:55:50.904976 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.905233 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:50.931062 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 00:55:50.931318 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 00:55:50.999189 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:50.999538 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.089299 2026] [security2:error] [pid 178882:tid 179240] [client 91.203.164.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyd9qTm83YguA3303TWAAAALk"]
[Wed Sep 30 00:55:51.090971 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.091232 2026] [access_compat:error] [pid 178882:tid 179226] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.131874 2026] [security2:error] [pid 178882:tid 179252] [client 20.251.39.228:15010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-class-atom.php"] [unique_id "aryyd9qTm83YguA3303TWgAAAMQ"]
[Wed Sep 30 00:55:51.170350 2026] [security2:error] [pid 178882:tid 179306] [client 20.219.2.60:58493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/aboutc.php"] [unique_id "aryyd9qTm83YguA3303TWwAAAPg"]
[Wed Sep 30 00:55:51.188218 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.188482 2026] [access_compat:error] [pid 178882:tid 179194] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.235592 2026] [security2:error] [pid 178882:tid 179267] [client 103.168.66.101:36300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyd9qTm83YguA3303TXQAAANM"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:51.278091 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.278443 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.288645 2026] [security2:error] [pid 178882:tid 179275] [client 20.214.191.94:58845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/Components.php"] [unique_id "aryyd9qTm83YguA3303TZAAAANk"]
[Wed Sep 30 00:55:51.346288 2026] [access_compat:error] [pid 178882:tid 179291] [client 47.79.13.178:35824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:51.346641 2026] [access_compat:error] [pid 178882:tid 179291] [client 47.79.13.178:35824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:51.348144 2026] [security2:error] [pid 178882:tid 179214] [client 52.172.226.14:20504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/aaa.php"] [unique_id "aryyd9qTm83YguA3303TagAAAKA"]
[Wed Sep 30 00:55:51.369802 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.370325 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.461985 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.462255 2026] [access_compat:error] [pid 178882:tid 179318] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.478487 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 00:55:51.478769 2026] [access_compat:error] [pid 178882:tid 179294] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 00:55:51.482117 2026] [security2:error] [pid 178882:tid 179201] [client 20.251.39.228:5797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-block.php"] [unique_id "aryyd9qTm83YguA3303TcwAAAJU"]
[Wed Sep 30 00:55:51.548449 2026] [security2:error] [pid 178882:tid 179234] [client 155.190.6.18:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyd9qTm83YguA3303TdgAAALQ"]
[Wed Sep 30 00:55:51.553492 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.553831 2026] [access_compat:error] [pid 178882:tid 179304] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.582839 2026] [security2:error] [pid 178882:tid 179244] [client 20.214.191.94:58879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/admin.php/xl9.php"] [unique_id "aryyd9qTm83YguA3303TeAAAALw"]
[Wed Sep 30 00:55:51.642475 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.642732 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.674061 2026] [security2:error] [pid 178882:tid 179268] [client 20.219.2.60:19419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-links-opml.php"] [unique_id "aryyd9qTm83YguA3303TgAAAANQ"]
[Wed Sep 30 00:55:51.734355 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.734626 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.789658 2026] [security2:error] [pid 178882:tid 179190] [client 20.219.2.60:48861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gdn.php"] [unique_id "aryyd9qTm83YguA3303TigAAAIo"]
[Wed Sep 30 00:55:51.791581 2026] [core:error] [pid 178882:tid 179197] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:51.791597 2026] [core:error] [pid 178882:tid 179197] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:51.828455 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.828721 2026] [access_compat:error] [pid 178882:tid 179204] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.832548 2026] [security2:error] [pid 178882:tid 179234] [client 155.190.6.18:33834] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyd9qTm83YguA3303TdgAAALQ"]
[Wed Sep 30 00:55:51.891106 2026] [access_compat:error] [pid 178882:tid 179224] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 00:55:51.891364 2026] [access_compat:error] [pid 178882:tid 179224] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 00:55:51.893089 2026] [security2:error] [pid 178882:tid 179206] [client 20.214.191.94:47032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/gulu.php"] [unique_id "aryyd9qTm83YguA3303TkAAAAJk"]
[Wed Sep 30 00:55:51.900111 2026] [security2:error] [pid 178882:tid 179185] [client 116.197.133.25:52778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyd9qTm83YguA3303TkgAAAIU"]
[Wed Sep 30 00:55:51.900188 2026] [security2:error] [pid 178882:tid 179185] [client 116.197.133.25:52778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyd9qTm83YguA3303TkgAAAIU"]
[Wed Sep 30 00:55:51.916086 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:51.916355 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:51.941299 2026] [security2:error] [pid 178882:tid 179226] [client 20.70.173.30:25312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-manager.php"] [unique_id "aryyd9qTm83YguA3303TlgAAAKw"]
[Wed Sep 30 00:55:51.960663 2026] [security2:error] [pid 178882:tid 179298] [client 20.70.173.30:60029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/m.php"] [unique_id "aryyd9qTm83YguA3303TmAAAAPA"]
[Wed Sep 30 00:55:51.984384 2026] [security2:error] [pid 178882:tid 179085] [remote 64.23.166.180:16264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.vxa.pcx.mybluehost.me"] [uri "/.env"] [unique_id "aryyd9qTm83YguA3303TmwAAryE"]
[Wed Sep 30 00:55:52.009154 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.009405 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.051511 2026] [security2:error] [pid 178882:tid 179275] [client 52.172.226.14:20161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/chosen.php"] [unique_id "aryyeNqTm83YguA3303TngAAANk"]
[Wed Sep 30 00:55:52.098510 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.098777 2026] [access_compat:error] [pid 178882:tid 179291] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.108044 2026] [security2:error] [pid 178882:tid 179187] [client 116.193.128.26:52803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303TogAAAIc"]
[Wed Sep 30 00:55:52.108703 2026] [security2:error] [pid 178882:tid 179187] [client 116.193.128.26:52803] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303TogAAAIc"]
[Wed Sep 30 00:55:52.173828 2026] [security2:error] [pid 178882:tid 179230] [client 20.214.191.94:61498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/bala.php"] [unique_id "aryyeNqTm83YguA3303TpAAAALA"]
[Wed Sep 30 00:55:52.188034 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.188314 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.203936 2026] [security2:error] [pid 178882:tid 179198] [client 20.204.161.246:38607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/database2.php"] [unique_id "aryyeNqTm83YguA3303TqgAAAJI"]
[Wed Sep 30 00:55:52.205199 2026] [security2:error] [pid 178882:tid 179221] [client 20.194.30.107:64728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/ops.php"] [unique_id "aryyeNqTm83YguA3303TqwAAAKc"]
[Wed Sep 30 00:55:52.231411 2026] [security2:error] [pid 178882:tid 179208] [client 49.43.163.212:54423] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303TowAAAJo"]
[Wed Sep 30 00:55:52.231555 2026] [security2:error] [pid 178882:tid 179208] [client 49.43.163.212:54423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303TowAAAJo"]
[Wed Sep 30 00:55:52.253593 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:36806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/admin/index.php"] [unique_id "aryyeNqTm83YguA3303TrwAAAJ4"]
[Wed Sep 30 00:55:52.280879 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.281186 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.301569 2026] [security2:error] [pid 178882:tid 179093] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyeNqTm83YguA3303TsAAAzCk"], referer: https://torquayfans.com/viewtopic.php?p=22420
[Wed Sep 30 00:55:52.301600 2026] [security2:error] [pid 178882:tid 179093] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyeNqTm83YguA3303TsAAAzCk"], referer: https://torquayfans.com/viewtopic.php?p=22420
[Wed Sep 30 00:55:52.332657 2026] [security2:error] [pid 178882:tid 179244] [client 20.251.39.228:5805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-signup.php"] [unique_id "aryyeNqTm83YguA3303TtwAAALw"]
[Wed Sep 30 00:55:52.370358 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.370615 2026] [access_compat:error] [pid 178882:tid 179248] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.390782 2026] [access_compat:error] [pid 178882:tid 179259] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 00:55:52.391044 2026] [access_compat:error] [pid 178882:tid 179259] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 00:55:52.462715 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.462978 2026] [access_compat:error] [pid 178882:tid 179216] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.502302 2026] [security2:error] [pid 178882:tid 179315] [client 20.214.191.94:58829] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.nmarl.com"] [uri "/c99.php"] [unique_id "aryyeNqTm83YguA3303TxgAAAP8"]
[Wed Sep 30 00:55:52.554516 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.554768 2026] [access_compat:error] [pid 178882:tid 179281] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.596622 2026] [security2:error] [pid 178882:tid 179249] [client 20.219.2.60:48873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/first.php"] [unique_id "aryyeNqTm83YguA3303TzwAAAME"]
[Wed Sep 30 00:55:52.623613 2026] [security2:error] [pid 178882:tid 179277] [client 20.194.30.107:17498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/mh.php"] [unique_id "aryyeNqTm83YguA3303T0AAAANs"]
[Wed Sep 30 00:55:52.644987 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.645273 2026] [access_compat:error] [pid 178882:tid 179289] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.735164 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.735423 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.770534 2026] [security2:error] [pid 178882:tid 179275] [client 52.172.226.14:20169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/2P.php"] [unique_id "aryyeNqTm83YguA3303T2AAAANk"]
[Wed Sep 30 00:55:52.791678 2026] [security2:error] [pid 178882:tid 179276] [client 20.214.191.94:61484] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.nmarl.com"] [uri "/c99.php"] [unique_id "aryyeNqTm83YguA3303T2QAAANo"]
[Wed Sep 30 00:55:52.798425 2026] [security2:error] [pid 178882:tid 179292] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyeNqTm83YguA3303T2wAAAOo"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:52.824559 2026] [security2:error] [pid 178882:tid 179279] [client 85.215.45.236:39304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.45.215.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/pko-photography/wp-login.php"] [unique_id "aryyeNqTm83YguA3303T3AAAAN0"]
[Wed Sep 30 00:55:52.829534 2026] [security2:error] [pid 178882:tid 179219] [client 20.251.39.228:28879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-xmlsia.php"] [unique_id "aryyeNqTm83YguA3303T3gAAAKU"]
[Wed Sep 30 00:55:52.832058 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.832542 2026] [access_compat:error] [pid 178882:tid 179189] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:52.834954 2026] [security2:error] [pid 178882:tid 179296] [client 152.59.169.65:63975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303T3wAAAO4"]
[Wed Sep 30 00:55:52.835064 2026] [security2:error] [pid 178882:tid 179296] [client 152.59.169.65:63975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyeNqTm83YguA3303T3wAAAO4"]
[Wed Sep 30 00:55:52.848023 2026] [security2:error] [pid 178882:tid 179165] [remote 74.7.227.56:60844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyeNqTm83YguA3303T5AAA0W8"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:55:52.899936 2026] [access_compat:error] [pid 178882:tid 179295] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 00:55:52.900377 2026] [access_compat:error] [pid 178882:tid 179295] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 00:55:52.919123 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:52.919545 2026] [access_compat:error] [pid 178882:tid 179260] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.009865 2026] [security2:error] [pid 178882:tid 179192] [client 62.101.181.61:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television/"] [unique_id "aryyedqTm83YguA3303T-QAAAIw"]
[Wed Sep 30 00:55:53.013572 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.014016 2026] [access_compat:error] [pid 178882:tid 179228] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.071451 2026] [security2:error] [pid 178882:tid 179311] [client 20.214.191.94:47001] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.nmarl.com"] [uri "/c99.php"] [unique_id "aryyedqTm83YguA3303T_gAAAPw"]
[Wed Sep 30 00:55:53.100058 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.100326 2026] [access_compat:error] [pid 178882:tid 179234] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.131991 2026] [security2:error] [pid 178882:tid 179320] [client 20.219.2.60:19397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryyedqTm83YguA3303UAwAAAQQ"]
[Wed Sep 30 00:55:53.148822 2026] [security2:error] [pid 178882:tid 179300] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyedqTm83YguA3303UBAAAAPI"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:53.192284 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.192537 2026] [access_compat:error] [pid 178882:tid 179319] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.209752 2026] [security2:error] [pid 178882:tid 179294] [client 182.69.182.151:14961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UCQAAAOw"]
[Wed Sep 30 00:55:53.209915 2026] [security2:error] [pid 178882:tid 179294] [client 182.69.182.151:14961] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UCQAAAOw"]
[Wed Sep 30 00:55:53.219740 2026] [security2:error] [pid 178882:tid 179272] [client 20.219.2.60:63265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/redixsx.php"] [unique_id "aryyedqTm83YguA3303UCwAAANc"]
[Wed Sep 30 00:55:53.235071 2026] [security2:error] [pid 178882:tid 179277] [client 20.28.180.172:34277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/n30n.php"] [unique_id "aryyedqTm83YguA3303UDAAAANs"]
[Wed Sep 30 00:55:53.282105 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.282530 2026] [access_compat:error] [pid 178882:tid 179239] [client 216.73.216.46:62251] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.283971 2026] [security2:error] [pid 178882:tid 179289] [client 52.172.226.14:20493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/min.php"] [unique_id "aryyedqTm83YguA3303UDgAAAOc"]
[Wed Sep 30 00:55:53.286891 2026] [security2:error] [pid 178882:tid 179205] [client 20.251.39.228:20562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.weddingsbyleigh.com"] [uri "/wp-inic3.php"] [unique_id "aryyedqTm83YguA3303UDwAAAJg"]
[Wed Sep 30 00:55:53.296772 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:36823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/tfm.php"] [unique_id "aryyedqTm83YguA3303UEQAAAP4"]
[Wed Sep 30 00:55:53.298601 2026] [security2:error] [pid 178882:tid 179257] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyedqTm83YguA3303UEAAAAMk"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:53.356513 2026] [security2:error] [pid 178882:tid 179315] [client 20.70.173.30:63740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/fling.php"] [unique_id "aryyedqTm83YguA3303UFAAAAP8"]
[Wed Sep 30 00:55:53.373071 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.373344 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.378482 2026] [security2:error] [pid 178882:tid 179219] [client 20.214.191.94:46978] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.nmarl.com"] [uri "/c99.php"] [unique_id "aryyedqTm83YguA3303UGAAAAKU"]
[Wed Sep 30 00:55:53.389443 2026] [security2:error] [pid 178882:tid 179235] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyedqTm83YguA3303UHQAAALU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:53.446663 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 00:55:53.447082 2026] [access_compat:error] [pid 178882:tid 179208] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 00:55:53.464595 2026] [security2:error] [pid 178882:tid 179260] [client 216.73.216.46:62251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyedqTm83YguA3303UIgAAAMw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mzkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTU%3D
[Wed Sep 30 00:55:53.464766 2026] [security2:error] [pid 178882:tid 179243] [client 20.70.173.30:60001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/adminfuns.php"] [unique_id "aryyedqTm83YguA3303UIwAAALs"]
[Wed Sep 30 00:55:53.464929 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.465183 2026] [access_compat:error] [pid 178882:tid 179230] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.482333 2026] [security2:error] [pid 178882:tid 179250] [client 103.159.192.142:57138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UJAAAAMI"]
[Wed Sep 30 00:55:53.482437 2026] [security2:error] [pid 178882:tid 179250] [client 103.159.192.142:57138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UJAAAAMI"]
[Wed Sep 30 00:55:53.560748 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.561183 2026] [access_compat:error] [pid 178882:tid 179221] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.646696 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.646971 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.656644 2026] [security2:error] [pid 178882:tid 179268] [client 20.214.191.94:61462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/ttivnife.php"] [unique_id "aryyedqTm83YguA3303UKAAAANQ"]
[Wed Sep 30 00:55:53.708546 2026] [security2:error] [pid 178882:tid 179281] [client 103.172.210.103:51628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UKQAAAN8"]
[Wed Sep 30 00:55:53.708685 2026] [security2:error] [pid 178882:tid 179281] [client 103.172.210.103:51628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UKQAAAN8"]
[Wed Sep 30 00:55:53.737373 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.737627 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.777630 2026] [security2:error] [pid 178882:tid 179204] [client 20.219.2.60:58448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/cpp2.php"] [unique_id "aryyedqTm83YguA3303ULwAAAJc"]
[Wed Sep 30 00:55:53.803814 2026] [autoindex:error] [pid 178882:tid 179263] [client 52.172.226.14:20171] AH01276: Cannot serve directory /home2/kawasak2/public_html/notfaco/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:53.823313 2026] [security2:error] [pid 178882:tid 179258] [client 182.181.183.180:63324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.183.181.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UMgAAAMo"]
[Wed Sep 30 00:55:53.824927 2026] [security2:error] [pid 178882:tid 179258] [client 182.181.183.180:63324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UMgAAAMo"]
[Wed Sep 30 00:55:53.832149 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.832596 2026] [access_compat:error] [pid 178882:tid 179273] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.912058 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 00:55:53.912325 2026] [access_compat:error] [pid 178882:tid 179297] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 00:55:53.920118 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:53.920392 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:53.921951 2026] [security2:error] [pid 178882:tid 179193] [client 20.214.191.94:61497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/admin.php/2P.php"] [unique_id "aryyedqTm83YguA3303UOAAAAI0"]
[Wed Sep 30 00:55:53.952749 2026] [access_compat:error] [pid 178882:tid 179247] [client 47.79.13.172:57282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:53.953013 2026] [access_compat:error] [pid 178882:tid 179247] [client 47.79.13.172:57282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:54.014232 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.014681 2026] [access_compat:error] [pid 178882:tid 179280] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.016103 2026] [security2:error] [pid 178882:tid 179259] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyetqTm83YguA3303UPgAAAMs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:54.033455 2026] [security2:error] [pid 178882:tid 179226] [client 52.172.226.14:20171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/great.php"] [unique_id "aryyetqTm83YguA3303UPwAAAKw"]
[Wed Sep 30 00:55:54.101532 2026] [access_compat:error] [pid 178882:tid 179316] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.101830 2026] [access_compat:error] [pid 178882:tid 179316] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.139025 2026] [security2:error] [pid 178882:tid 179228] [client 45.156.62.96:54023] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyedqTm83YguA3303UOQAAAK4"]
[Wed Sep 30 00:55:54.193799 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.194078 2026] [access_compat:error] [pid 178882:tid 179302] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.210170 2026] [security2:error] [pid 178882:tid 179185] [client 20.214.191.94:46979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/a.php"] [unique_id "aryyetqTm83YguA3303UTQAAAIU"]
[Wed Sep 30 00:55:54.233981 2026] [security2:error] [pid 178882:tid 179200] [client 20.70.173.30:16284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/simple.php"] [unique_id "aryyetqTm83YguA3303UTgAAAJQ"]
[Wed Sep 30 00:55:54.284470 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.284731 2026] [access_compat:error] [pid 178882:tid 179271] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.325354 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:18830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws82.php"] [unique_id "aryyetqTm83YguA3303UVQAAAJ4"]
[Wed Sep 30 00:55:54.374720 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.375173 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.413008 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 00:55:54.413281 2026] [access_compat:error] [pid 178882:tid 179219] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 00:55:54.435280 2026] [security2:error] [pid 178882:tid 179250] [client 20.219.2.60:63266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/admlo.php"] [unique_id "aryyetqTm83YguA3303UXAAAAMI"]
[Wed Sep 30 00:55:54.443079 2026] [security2:error] [pid 178882:tid 179283] [client 223.181.30.165:23654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UXQAAAOE"]
[Wed Sep 30 00:55:54.443236 2026] [security2:error] [pid 178882:tid 179283] [client 223.181.30.165:23654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UXQAAAOE"]
[Wed Sep 30 00:55:54.476196 2026] [security2:error] [pid 178882:tid 179265] [client 4.240.25.22:21911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/c.php"] [unique_id "aryyetqTm83YguA3303UXgAAANE"]
[Wed Sep 30 00:55:54.517256 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.517644 2026] [access_compat:error] [pid 178882:tid 179187] [client 216.73.216.46:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.539841 2026] [security2:error] [pid 178882:tid 179213] [client 202.179.95.79:53827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UYwAAAJ8"]
[Wed Sep 30 00:55:54.539964 2026] [security2:error] [pid 178882:tid 179213] [client 202.179.95.79:53827] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UYwAAAJ8"]
[Wed Sep 30 00:55:54.557069 2026] [security2:error] [pid 178882:tid 179313] [client 150.107.232.159:35791] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UZQAAAP0"]
[Wed Sep 30 00:55:54.557277 2026] [security2:error] [pid 178882:tid 179313] [client 150.107.232.159:35791] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyetqTm83YguA3303UZQAAAP0"]
[Wed Sep 30 00:55:54.558191 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.558631 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.570407 2026] [security2:error] [pid 178882:tid 179198] [client 52.172.226.14:20675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/BDKR28WP.php"] [unique_id "aryyetqTm83YguA3303UZgAAAJI"]
[Wed Sep 30 00:55:54.621739 2026] [security2:error] [pid 178882:tid 179222] [client 20.214.191.94:58819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/cord.php"] [unique_id "aryyetqTm83YguA3303UawAAAKg"]
[Wed Sep 30 00:55:54.651213 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.651606 2026] [access_compat:error] [pid 178882:tid 179258] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.651890 2026] [security2:error] [pid 178882:tid 179273] [client 187.84.154.11:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television/"] [unique_id "aryyetqTm83YguA3303UbwAAANg"]
[Wed Sep 30 00:55:54.663098 2026] [security2:error] [pid 178882:tid 179278] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyetqTm83YguA3303UcAAAANw"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:54.738824 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.739098 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.835440 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.835914 2026] [access_compat:error] [pid 178882:tid 179240] [client 216.73.216.46:50132] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.870073 2026] [security2:error] [pid 178882:tid 179314] [client 20.219.2.60:36788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/a4.php"] [unique_id "aryyetqTm83YguA3303UegAAAP4"]
[Wed Sep 30 00:55:54.891373 2026] [security2:error] [pid 178882:tid 179116] [remote 47.128.124.161:10896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coscharis-tech.com"] [uri "/robot-wars-now-closed-post-with-gallery/"] [unique_id "aryyetqTm83YguA3303UewAA_z8"]
[Wed Sep 30 00:55:54.898825 2026] [security2:error] [pid 178882:tid 179307] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/Batch/v1"] [unique_id "aryyetqTm83YguA3303UfQAAAPk"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:54.921155 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:54.921277 2026] [access_compat:error] [pid 178882:tid 179191] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 00:55:54.921436 2026] [access_compat:error] [pid 178882:tid 179215] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:54.921515 2026] [access_compat:error] [pid 178882:tid 179191] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 00:55:54.929293 2026] [security2:error] [pid 178882:tid 179290] [client 20.204.161.246:59608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/aa.php"] [unique_id "aryyetqTm83YguA3303UgAAAAOg"]
[Wed Sep 30 00:55:54.975733 2026] [security2:error] [pid 178882:tid 179194] [client 216.73.216.46:6396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyetqTm83YguA3303UggAAAI4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvY3B1Mi9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:55:55.007192 2026] [security2:error] [pid 178882:tid 179288] [client 20.219.2.60:45315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/admin-ajax.php"] [unique_id "aryye9qTm83YguA3303UgwAAAOY"]
[Wed Sep 30 00:55:55.008246 2026] [security2:error] [pid 178882:tid 179299] [client 216.73.216.46:50132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryye9qTm83YguA3303UhAAAAPE"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMvcHNhL3BocF92ZXJzaW9ucy5k
[Wed Sep 30 00:55:55.053195 2026] [core:error] [pid 178882:tid 179212] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:55.053212 2026] [core:error] [pid 178882:tid 179212] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:55:55.067267 2026] [security2:error] [pid 178882:tid 179251] [client 49.36.41.37:60026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UjQAAAMM"]
[Wed Sep 30 00:55:55.067361 2026] [security2:error] [pid 178882:tid 179251] [client 49.36.41.37:60026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UjQAAAMM"]
[Wed Sep 30 00:55:55.081042 2026] [security2:error] [pid 178882:tid 179295] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryye9qTm83YguA3303UjgAAAO0"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:55.118786 2026] [security2:error] [pid 178882:tid 179248] [client 152.59.165.7:61542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UkAAAAMA"]
[Wed Sep 30 00:55:55.118902 2026] [security2:error] [pid 178882:tid 179248] [client 152.59.165.7:61542] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UkAAAAMA"]
[Wed Sep 30 00:55:55.138215 2026] [security2:error] [pid 178882:tid 179205] [client 168.107.70.193:59394] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.aps.aeb.mybluehost.me"] [uri "/"] [unique_id "aryye9qTm83YguA3303UkQAAAJg"]
[Wed Sep 30 00:55:55.139225 2026] [security2:error] [pid 178882:tid 179219] [client 4.196.65.241:27269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/bhigtouj.php"] [unique_id "aryye9qTm83YguA3303UkgAAAKU"]
[Wed Sep 30 00:55:55.155043 2026] [security2:error] [pid 178882:tid 179283] [client 20.28.180.172:34266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/calmjpss.php"] [unique_id "aryye9qTm83YguA3303UlwAAAOE"]
[Wed Sep 30 00:55:55.178781 2026] [security2:error] [pid 178882:tid 179282] [client 20.214.191.94:46995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/anom.php"] [unique_id "aryye9qTm83YguA3303UmAAAAOA"]
[Wed Sep 30 00:55:55.216835 2026] [security2:error] [pid 178882:tid 179213] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1/"] [unique_id "aryye9qTm83YguA3303UmgAAAJ8"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:55.230533 2026] [security2:error] [pid 178882:tid 179221] [client 20.194.30.107:30669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/classwithtostring.php"] [unique_id "aryye9qTm83YguA3303UnQAAAKc"]
[Wed Sep 30 00:55:55.232846 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.233120 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.268560 2026] [security2:error] [pid 178882:tid 179199] [client 123.63.248.21:59943] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UogAAAJM"]
[Wed Sep 30 00:55:55.268671 2026] [security2:error] [pid 178882:tid 179199] [client 123.63.248.21:59943] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "wellnesswithage.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UogAAAJM"]
[Wed Sep 30 00:55:55.273687 2026] [security2:error] [pid 178882:tid 179220] [client 52.172.226.14:20537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/gigi.php"] [unique_id "aryye9qTm83YguA3303UowAAAKY"]
[Wed Sep 30 00:55:55.324741 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.325010 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.375337 2026] [security2:error] [pid 178882:tid 179272] [client 203.122.45.246:52231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UqAAAANc"]
[Wed Sep 30 00:55:55.375428 2026] [security2:error] [pid 178882:tid 179272] [client 203.122.45.246:52231] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UqAAAANc"]
[Wed Sep 30 00:55:55.412442 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 00:55:55.412710 2026] [access_compat:error] [pid 178882:tid 179247] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 00:55:55.415144 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.415416 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.455081 2026] [security2:error] [pid 178882:tid 179266] [client 20.214.191.94:58831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/plugins.php"] [unique_id "aryye9qTm83YguA3303UqwAAANI"]
[Wed Sep 30 00:55:55.501557 2026] [security2:error] [pid 178882:tid 179238] [client 20.219.2.60:58475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/amthd.php"] [unique_id "aryye9qTm83YguA3303UrQAAALc"]
[Wed Sep 30 00:55:55.507047 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.507297 2026] [access_compat:error] [pid 178882:tid 179245] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.555157 2026] [security2:error] [pid 178882:tid 179197] [client 20.204.42.136:57189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/0mzrlfdt.php"] [unique_id "aryye9qTm83YguA3303UrwAAAJE"]
[Wed Sep 30 00:55:55.564291 2026] [security2:error] [pid 178882:tid 179277] [client 20.219.2.60:18888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/new.php"] [unique_id "aryye9qTm83YguA3303UsAAAANs"]
[Wed Sep 30 00:55:55.596846 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.597106 2026] [access_compat:error] [pid 178882:tid 179317] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.644633 2026] [security2:error] [pid 178882:tid 179189] [client 72.255.10.32:56189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UuwAAAIk"]
[Wed Sep 30 00:55:55.644753 2026] [security2:error] [pid 178882:tid 179189] [client 72.255.10.32:56189] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryye9qTm83YguA3303UuwAAAIk"]
[Wed Sep 30 00:55:55.686928 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.687192 2026] [access_compat:error] [pid 178882:tid 179233] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.729581 2026] [security2:error] [pid 178882:tid 179235] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "aryye9qTm83YguA3303UxgAAALU"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:55.746493 2026] [security2:error] [pid 178882:tid 179291] [client 52.172.226.14:20676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ant.php"] [unique_id "aryye9qTm83YguA3303UyAAAAOk"]
[Wed Sep 30 00:55:55.781544 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.781980 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.858715 2026] [access_compat:error] [pid 178882:tid 179285] [client 47.79.13.73:49052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:55.859009 2026] [access_compat:error] [pid 178882:tid 179285] [client 47.79.13.73:49052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:55.863421 2026] [security2:error] [pid 178882:tid 179216] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "aryye9qTm83YguA3303U0QAAAKI"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:55.870061 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.870312 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:55.881097 2026] [access_compat:error] [pid 178882:tid 179281] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 00:55:55.881368 2026] [access_compat:error] [pid 178882:tid 179281] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 00:55:55.882408 2026] [security2:error] [pid 178882:tid 179309] [client 20.214.191.94:46994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/zlwvxiyp.php"] [unique_id "aryye9qTm83YguA3303U1wAAAPo"]
[Wed Sep 30 00:55:55.961833 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:55.962095 2026] [access_compat:error] [pid 178882:tid 179190] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.052668 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.052920 2026] [access_compat:error] [pid 178882:tid 179263] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.060275 2026] [security2:error] [pid 178882:tid 179264] [client 20.219.2.60:63232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/8xyz.php"] [unique_id "aryyfNqTm83YguA3303U5AAAANA"]
[Wed Sep 30 00:55:56.143992 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.144260 2026] [access_compat:error] [pid 178882:tid 179300] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.163665 2026] [security2:error] [pid 178882:tid 179269] [client 20.194.30.107:37529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryyfNqTm83YguA3303U6wAAANU"]
[Wed Sep 30 00:55:56.164183 2026] [security2:error] [pid 178882:tid 179266] [client 20.214.191.94:58830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/1Be5IfrlWP.php"] [unique_id "aryyfNqTm83YguA3303U7AAAANI"]
[Wed Sep 30 00:55:56.216581 2026] [security2:error] [pid 178882:tid 179245] [client 93.152.76.237:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyfNqTm83YguA3303U8wAAAL0"]
[Wed Sep 30 00:55:56.221872 2026] [security2:error] [pid 178882:tid 179286] [client 52.172.226.14:20494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/uejvv.php"] [unique_id "aryyfNqTm83YguA3303U9AAAAOQ"]
[Wed Sep 30 00:55:56.233710 2026] [security2:error] [pid 178882:tid 179200] [client 43.227.131.37:59292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyfNqTm83YguA3303U9wAAAJQ"]
[Wed Sep 30 00:55:56.233804 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.233834 2026] [security2:error] [pid 178882:tid 179200] [client 43.227.131.37:59292] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyfNqTm83YguA3303U9wAAAJQ"]
[Wed Sep 30 00:55:56.234074 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.325480 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.325740 2026] [access_compat:error] [pid 178882:tid 179206] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.350328 2026] [security2:error] [pid 178882:tid 179243] [client 39.44.16.112:50414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyfNqTm83YguA3303VAAAAALs"]
[Wed Sep 30 00:55:56.354001 2026] [security2:error] [pid 178882:tid 179243] [client 39.44.16.112:50414] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyfNqTm83YguA3303VAAAAALs"]
[Wed Sep 30 00:55:56.365999 2026] [security2:error] [pid 178882:tid 179291] [client 103.168.66.101:60616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyfNqTm83YguA3303VAwAAAOk"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:56.397993 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:55:56.398247 2026] [access_compat:error] [pid 178882:tid 179240] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:55:56.418706 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.419133 2026] [access_compat:error] [pid 178882:tid 179209] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.472764 2026] [security2:error] [pid 178882:tid 179262] [client 20.214.191.94:46997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "aryyfNqTm83YguA3303VCAAAAM4"]
[Wed Sep 30 00:55:56.480710 2026] [security2:error] [pid 178882:tid 179213] [client 20.219.2.60:36755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wen.php"] [unique_id "aryyfNqTm83YguA3303VCQAAAJ8"]
[Wed Sep 30 00:55:56.507296 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.507565 2026] [access_compat:error] [pid 178882:tid 179310] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.533220 2026] [security2:error] [pid 178882:tid 179265] [client 20.70.173.30:18534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/yawa.php"] [unique_id "aryyfNqTm83YguA3303VEgAAANE"]
[Wed Sep 30 00:55:56.548489 2026] [security2:error] [pid 178882:tid 179187] [client 20.219.2.60:48842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/mini.php"] [unique_id "aryyfNqTm83YguA3303VFAAAAIc"]
[Wed Sep 30 00:55:56.596056 2026] [security2:error] [pid 178882:tid 179306] [client 20.28.180.172:29452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/ilex.php"] [unique_id "aryyfNqTm83YguA3303VGQAAAPg"]
[Wed Sep 30 00:55:56.638158 2026] [security2:error] [pid 178882:tid 179264] [client 213.188.89.238:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyfNqTm83YguA3303VHgAAANA"]
[Wed Sep 30 00:55:56.690602 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.690827 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.690897 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.691144 2026] [access_compat:error] [pid 178882:tid 179246] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.772123 2026] [autoindex:error] [pid 178882:tid 179254] [client 52.172.226.14:20203] AH01276: Cannot serve directory /home2/kawasak2/public_html/notfaco/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:56.783520 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.783770 2026] [access_compat:error] [pid 178882:tid 179286] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.789262 2026] [security2:error] [pid 178882:tid 179257] [client 20.214.191.94:61487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/admin.php/c.php"] [unique_id "aryyfNqTm83YguA3303VJQAAAMk"]
[Wed Sep 30 00:55:56.873314 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.873574 2026] [access_compat:error] [pid 178882:tid 179196] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.903243 2026] [security2:error] [pid 178882:tid 179192] [client 20.194.30.107:8611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/mac.php"] [unique_id "aryyfNqTm83YguA3303VKwAAAIw"]
[Wed Sep 30 00:55:56.934983 2026] [access_compat:error] [pid 178882:tid 179238] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 00:55:56.935234 2026] [access_compat:error] [pid 178882:tid 179238] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 00:55:56.965377 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:56.965628 2026] [access_compat:error] [pid 178882:tid 179290] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:56.977753 2026] [security2:error] [pid 178882:tid 179233] [client 20.70.173.30:59571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/ms-edit.php"] [unique_id "aryyfNqTm83YguA3303VLgAAALM"]
[Wed Sep 30 00:55:57.007396 2026] [security2:error] [pid 178882:tid 179205] [client 223.235.102.107:29310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VLwAAAJg"]
[Wed Sep 30 00:55:57.007942 2026] [security2:error] [pid 178882:tid 179205] [client 223.235.102.107:29310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VLwAAAJg"]
[Wed Sep 30 00:55:57.033738 2026] [security2:error] [pid 178882:tid 179212] [client 20.219.2.60:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws68.php"] [unique_id "aryyfdqTm83YguA3303VMAAAAJ4"]
[Wed Sep 30 00:55:57.055375 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.055633 2026] [access_compat:error] [pid 178882:tid 179235] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.092387 2026] [security2:error] [pid 178882:tid 179190] [client 49.205.105.16:15098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VMwAAAIo"]
[Wed Sep 30 00:55:57.092477 2026] [security2:error] [pid 178882:tid 179190] [client 49.205.105.16:15098] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VMwAAAIo"]
[Wed Sep 30 00:55:57.113568 2026] [security2:error] [pid 178882:tid 179295] [client 20.219.2.60:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/press.php"] [unique_id "aryyfdqTm83YguA3303VNQAAAO0"]
[Wed Sep 30 00:55:57.116163 2026] [autoindex:error] [pid 178882:tid 179243] [client 52.172.226.14:20203] AH01276: Cannot serve directory /home2/kawasak2/public_html/notfaco/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:57.146268 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.146542 2026] [access_compat:error] [pid 178882:tid 179255] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.175996 2026] [security2:error] [pid 178882:tid 179299] [client 4.240.25.22:18755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/0.php"] [unique_id "aryyfdqTm83YguA3303VOQAAAPE"]
[Wed Sep 30 00:55:57.224351 2026] [security2:error] [pid 178882:tid 179240] [client 20.214.191.94:58854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/admin.php/go.php"] [unique_id "aryyfdqTm83YguA3303VPAAAALk"]
[Wed Sep 30 00:55:57.236044 2026] [security2:error] [pid 178882:tid 179266] [client 103.24.86.56:52279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VQAAAANI"]
[Wed Sep 30 00:55:57.236592 2026] [security2:error] [pid 178882:tid 179266] [client 103.24.86.56:52279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VQAAAANI"]
[Wed Sep 30 00:55:57.237612 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.237928 2026] [access_compat:error] [pid 178882:tid 179219] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.278414 2026] [security2:error] [pid 178882:tid 179145] [remote 57.141.14.60:53298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "aryyfdqTm83YguA3303VPwAA1ls"]
[Wed Sep 30 00:55:57.331534 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.331802 2026] [access_compat:error] [pid 178882:tid 179288] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.357274 2026] [security2:error] [pid 178882:tid 179287] [client 52.172.226.14:20203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/file.php"] [unique_id "aryyfdqTm83YguA3303VTgAAAOU"]
[Wed Sep 30 00:55:57.419674 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:55:57.419941 2026] [access_compat:error] [pid 178882:tid 179261] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:55:57.420332 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.420579 2026] [access_compat:error] [pid 178882:tid 179199] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.513002 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.513296 2026] [access_compat:error] [pid 178882:tid 179200] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.522841 2026] [security2:error] [pid 178882:tid 179257] [client 20.214.191.94:61456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/groud3.php"] [unique_id "aryyfdqTm83YguA3303VWQAAAMk"]
[Wed Sep 30 00:55:57.586437 2026] [security2:error] [pid 178882:tid 179307] [client 20.204.42.136:57214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/nmd.php"] [unique_id "aryyfdqTm83YguA3303VXwAAAPk"]
[Wed Sep 30 00:55:57.598151 2026] [security2:error] [pid 178882:tid 179289] [client 20.219.2.60:48869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/xxx.php"] [unique_id "aryyfdqTm83YguA3303VYgAAAOc"]
[Wed Sep 30 00:55:57.600220 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.600566 2026] [access_compat:error] [pid 178882:tid 179256] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.610004 2026] [security2:error] [pid 178882:tid 179091] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyfdqTm83YguA3303VYwAA_ic"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D97070
[Wed Sep 30 00:55:57.693465 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.693724 2026] [access_compat:error] [pid 178882:tid 179201] [client 216.73.216.46:13452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.724314 2026] [security2:error] [pid 178882:tid 179266] [client 20.219.2.60:36783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/ms.php"] [unique_id "aryyfdqTm83YguA3303VbQAAANI"]
[Wed Sep 30 00:55:57.742300 2026] [security2:error] [pid 178882:tid 179217] [client 20.204.161.246:65203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/pJPoKA.php"] [unique_id "aryyfdqTm83YguA3303VbwAAAKM"]
[Wed Sep 30 00:55:57.783486 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.783757 2026] [access_compat:error] [pid 178882:tid 179262] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.813027 2026] [security2:error] [pid 178882:tid 179304] [client 20.214.191.94:58857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/gaxby.php"] [unique_id "aryyfdqTm83YguA3303VdAAAAPY"]
[Wed Sep 30 00:55:57.873571 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:57.873841 2026] [access_compat:error] [pid 178882:tid 179267] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:57.875176 2026] [security2:error] [pid 178882:tid 179268] [client 216.73.216.46:13452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyfdqTm83YguA3303VgwAAANQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHU4L2hvdHBsdWc%3D
[Wed Sep 30 00:55:57.883522 2026] [security2:error] [pid 178882:tid 179272] [client 193.163.74.131:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyfdqTm83YguA3303VhAAAANc"]
[Wed Sep 30 00:55:57.916113 2026] [access_compat:error] [pid 178882:tid 179221] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 00:55:57.916402 2026] [access_compat:error] [pid 178882:tid 179221] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 00:55:58.015284 2026] [security2:error] [pid 178882:tid 179214] [client 181.118.41.214:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyftqTm83YguA3303VjQAAAKA"]
[Wed Sep 30 00:55:58.019379 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.019622 2026] [access_compat:error] [pid 178882:tid 179306] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.090842 2026] [security2:error] [pid 178882:tid 179277] [client 20.70.173.30:25090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/felnggg.php"] [unique_id "aryyftqTm83YguA3303VkQAAANs"]
[Wed Sep 30 00:55:58.104355 2026] [security2:error] [pid 178882:tid 179318] [client 20.219.2.60:63248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/njxjtooj.php"] [unique_id "aryyftqTm83YguA3303VlAAAAQI"]
[Wed Sep 30 00:55:58.114607 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:6394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.115046 2026] [access_compat:error] [pid 178882:tid 179242] [client 216.73.216.46:6394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.130828 2026] [security2:error] [pid 178882:tid 179289] [client 20.214.191.94:61482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/dh9u7.php"] [unique_id "aryyftqTm83YguA3303VmAAAAOc"]
[Wed Sep 30 00:55:58.147435 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.147714 2026] [access_compat:error] [pid 178882:tid 179314] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.167747 2026] [security2:error] [pid 178882:tid 179301] [client 103.168.66.101:60626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infraas.digital"] [uri "/blog/index.php"] [unique_id "aryyftqTm83YguA3303VoAAAAPM"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:55:58.244141 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.244409 2026] [access_compat:error] [pid 178882:tid 179251] [client 216.73.216.46:42647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.246141 2026] [access_compat:error] [pid 178882:tid 179234] [client 47.79.13.177:44486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:55:58.246497 2026] [access_compat:error] [pid 178882:tid 179234] [client 47.79.13.177:44486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:55:58.267855 2026] [security2:error] [pid 178882:tid 179215] [client 20.28.180.172:29625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/2c88361384index.php"] [unique_id "aryyftqTm83YguA3303VpgAAAKE"]
[Wed Sep 30 00:55:58.278362 2026] [security2:error] [pid 178882:tid 179227] [client 4.196.65.241:27299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/simple.php"] [unique_id "aryyftqTm83YguA3303VpwAAAK0"]
[Wed Sep 30 00:55:58.284923 2026] [security2:error] [pid 178882:tid 179208] [client 213.136.69.135:59089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-avif-info.php"] [unique_id "aryyftqTm83YguA3303VqAAAAJo"], referer: binance.com
[Wed Sep 30 00:55:58.320853 2026] [security2:error] [pid 178882:tid 179231] [client 106.214.3.140:27254] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryyftqTm83YguA3303VnQAAALE"]
[Wed Sep 30 00:55:58.334777 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.335233 2026] [access_compat:error] [pid 178882:tid 179220] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.366912 2026] [security2:error] [pid 178882:tid 179249] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyftqTm83YguA3303VsgAAAME"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:55:58.407372 2026] [access_compat:error] [pid 178882:tid 179258] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:55:58.407629 2026] [access_compat:error] [pid 178882:tid 179258] [client 74.7.243.227:52998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:55:58.422715 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.422967 2026] [access_compat:error] [pid 178882:tid 179212] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.516949 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.517409 2026] [access_compat:error] [pid 178882:tid 179272] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.525860 2026] [security2:error] [pid 178882:tid 179247] [client 20.214.191.94:47006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/yvnqcuic.php"] [unique_id "aryyftqTm83YguA3303VuQAAAL8"]
[Wed Sep 30 00:55:58.537001 2026] [security2:error] [pid 178882:tid 179102] [remote 157.55.39.7:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.39.55.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayfans.com"] [uri "/index.php"] [unique_id "aryyftqTm83YguA3303VtQAA9TI"]
[Wed Sep 30 00:55:58.603658 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.603914 2026] [access_compat:error] [pid 178882:tid 179285] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.604527 2026] [security2:error] [pid 178882:tid 179288] [client 20.219.2.60:55844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws85.php"] [unique_id "aryyftqTm83YguA3303VvAAAAOY"]
[Wed Sep 30 00:55:58.658675 2026] [autoindex:error] [pid 178882:tid 179293] [client 212.156.70.154:37731] AH01276: Cannot serve directory /home2/skrgdzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:55:58.694760 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.695050 2026] [access_compat:error] [pid 178882:tid 179320] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.785257 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:55:58.785513 2026] [access_compat:error] [pid 178882:tid 179236] [client 216.73.216.46:57505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:55:58.791739 2026] [mpm_event:notice] [pid 426443:tid 426443] AH00493: SIGUSR1 received.  Doing graceful restart
[Wed Sep 30 00:55:58.846005 2026] [security2:error] [pid 178882:tid 179219] [client 45.138.12.47:16780] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.yse.asl.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyftqTm83YguA3303VygAAAKU"]
[Wed Sep 30 00:55:59.028845 2026] [security2:error] [pid 178882:tid 179204] [client 45.138.12.32:14702] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jqe.dvz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyf9qTm83YguA3303VywAAAJc"]
[Wed Sep 30 00:55:59.038344 2026] [security2:error] [pid 178882:tid 179281] [client 45.138.12.32:14686] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jsp.gib.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyf9qTm83YguA3303VzQAAAN8"]
[Wed Sep 30 00:56:00.057230 2026] [:notice] [pid 177751:tid 177751] [host root@just2086.justhost.com] mod_lsapi:  Selfstarter 177751 stopped
AH00112: Warning: DocumentRoot [/home3/kennetha/public_html/bapplware/paywizard] does not exist
AH00112: Warning: DocumentRoot [/home3/kennetha/public_html/bapplware/paywizard] does not exist
[Wed Sep 30 00:56:02.848675 2026] [lsapi:notice] [pid 426443:tid 426443] mod_lsapi:  version 1.1-92
[Wed Sep 30 00:56:02.865525 2026] [:notice] [pid 186776:tid 186776] [host root@just2086.justhost.com] mod_lsapi:  Selfstarter 186776 started
[Wed Sep 30 00:56:02.886280 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gapteckconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.890991 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: crm.grupowebmex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.892345 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: allyquality.wmxone.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.906770 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-01e827cf.thermalite.ca:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.907558 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: thermalite.ca:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.915347 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: iplumbcanberra.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.921186 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.922069 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: trapfilters.designthesign.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.946142 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.953516 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: explora.orontes-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:02.978668 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: northpineschurch.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.003968 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: beprettydope.werlegends.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.018775 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bienesraices.hn.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.019457 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: zuavinversiones.com.tutiendahn.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.037286 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: piox.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.039130 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticoms.pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.039522 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticoms-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.039893 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sydgps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.040271 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sydgps-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.042660 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lipimavida.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.043363 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.043727 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat-pe.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.044779 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avisogps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.045157 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: 5oceanos.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.045533 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ventasgps.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.046277 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kutralmar.cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.047318 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: todorestaurant-cl.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.047672 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: retamalesdaza.com.ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.048055 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: restore.threadloveapparel.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.053717 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jawsq.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.054299 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: msstch.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.054796 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avecs-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.055343 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avions-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.055897 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: inventumgs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.056450 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: azeemtechs.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.056973 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: isoltrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.057498 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: krosscorp-us.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.058034 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ghamditrading.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.058546 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: go.avions-biddingestimates.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.059624 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: avions-biddingestimates.taqniya.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.061336 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: massum.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.061746 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sprdalo-tech.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.062128 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sminzenering.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.062529 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: central-fuerth.sprdalo.website:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.069247 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-858bb8d7.retalview-northcoast.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.071939 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: rayfamilyga.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.072396 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: popsandlolly.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.074299 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lollyandpopsfarm.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.075212 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lollyandpopsworkshop.rayshelpinghandsfarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.123475 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: trustpages.org.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.126092 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-be57ef4a.petersotiriadis.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.129363 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: yoozu-fr.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.131351 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: cpfitness-eu.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.132445 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: estonreality-sk.pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.146023 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: 100schools.100schoolsinburma.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.146929 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sendammo.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.147923 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mymindandbaby.torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.162262 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hol.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.177635 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: transway.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.180147 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: premiopro.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.181142 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: memltd-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.182638 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: srchambers.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.184136 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hc-hungary.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.187043 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: arvanisocks.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.187555 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: artofliving.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.188061 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: slkgoldtaste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.189091 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: island-taste.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.190076 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: fsimauritius.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.191059 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: peacemaker-mu.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.192549 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: onehouseagency.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.194461 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: crayons-couleur.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.195935 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: parashakthipeetham.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.197429 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bulletin-rotaryd9220-info.nurveen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.200754 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: my2hotrods.com.jbkarate.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.201873 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-76b116a7.mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.207477 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jtmghana.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.208192 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: janiqueint.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.208555 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bayveritas.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.209065 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: speenergies.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.209400 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: nissicenter.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.209730 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: myticketbay.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.210107 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: linxconsult.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.211152 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: wdc-ministries.mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.214217 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gwbiohealth.com.medredisolutions.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.232225 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ncrally.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.232577 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ncsubaru.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.232922 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: limsport.limsrx.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.239545 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lalifechina.ladazhe.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.239940 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: eklipza.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.240465 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: alvasonline.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.241013 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: weblabspanama.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.242011 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-4b4e771b.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.242521 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: evaccfoundation-org.labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.252962 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: abenojar.xsodia.space:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.255309 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gsdf.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.257283 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: taascor.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.257801 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.259286 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: xsodia-space.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.259758 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: southxpresss.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.260278 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kapayaman-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.260784 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: afterfridays.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.261330 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hezekiah-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.261882 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: chsiphil-com-ph.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.262412 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: staging-stocksed.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.262941 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mastertackles.com.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.263335 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mastertackles.online.kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.267188 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mngroup.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.267947 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mnlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.268444 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: earthlandscaping-com-au.kandymarketing.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.304066 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: harmoneyentertainment.harmoneyent.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.310661 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: jodaly.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.311193 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: djstardao.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.311754 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: serenacandiani.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.312331 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: graphicdesignmmd.graphicdesignmmd.info:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.387541 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: er8.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.387976 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: drebok.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.388368 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: azarrow.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.388750 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aplusprint.fflsite.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.391008 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bowrattler.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.391536 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: falconproductsusa.eesokay.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.402687 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: silverlakess.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.404668 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: iaolabs-website.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.405205 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: website-15265131.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.405566 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: novadental-clinic.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.406071 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: dentiststudygroup.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.406574 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: floridamultiservices.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.407056 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: lindapulgardentalcare.creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.410141 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: humanconstitution.copperpen.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.414265 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: growwy-co.casadelmedia.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.414760 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: api.car4youpanama.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.415124 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: car4.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.415493 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: w-e-n.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.415863 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: worldsolarpro.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.416400 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: worldsolarprous.caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.417154 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bay-movers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.417519 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: calexpressmovers.bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.422682 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: madagascar-foundation-org.adam-de-villiers-foundation-usa.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.425395 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: track.easytrack.af:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.504255 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: h2olifeandstyle.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.505685 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: vinason.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.506082 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: vikingrollers.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.532581 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tres60.com.co:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.538868 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: tjmcgroup.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.540094 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ticomsat.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.541947 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: thestandchurch.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.556292 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: steelkitz.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.560387 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: sopritti.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.568654 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: securusconsultants.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.609656 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: premier-printer.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.616495 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: pilatesmith.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.625529 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: pavolvasko.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.633640 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: torquayfans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.660306 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mypoolplans.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.669567 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: michellemattar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.673040 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: mensapratt.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.694227 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: labs-tech.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.703347 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kierson.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.705415 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kennethabenojar.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.720459 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: kau.aan.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.737964 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: imagesarchitecture.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.749955 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hillcraftinc.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.767917 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: gongkar.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.780354 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aljabrisweets.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.793974 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: offshoremultihull.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.832211 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: donskey.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.850213 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: creativebizgroup.net:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.853710 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: corinnaharrod.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.856653 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: clubaereolaserena.cl:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.864906 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: caribbeanalarm.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.868691 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: buffaloprairiestorage.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.887789 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: bamovers.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.896030 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: asaas.ly:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.896762 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: arabcgt.org:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.900829 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: andrewperfetti.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.905898 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: aitess-sa.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.922772 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: co-opportunities-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.923295 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: beetreefolkschool-org.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.924397 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: admin.dennis-cooper.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.959693 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: codeproblem.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.960208 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: hamaraquetta-net2015.hamaraquetta.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.962856 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: charlesedge.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.963722 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: canmorewhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.964291 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: scotsgoldwhisky.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.965421 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: charlesedge-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.966219 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: londonsquarespirits.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.966717 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: scotsgoldwhisky-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.967531 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.968055 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: ethimexcasksolutions-co-uk.ethimex.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.971951 2026] [ssl:warn] [pid 426443:tid 426443] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name
[Wed Sep 30 00:56:03.997083 2026] [qos:notice] [pid 426443:tid 426443] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients)
[Wed Sep 30 00:56:04.409944 2026] [http2:info] [pid 426443:tid 426443] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.70.0), initializing...
[Wed Sep 30 00:56:04.419412 2026] [mpm_event:notice] [pid 426443:tid 426443] AH00489: Apache/2.4.68 (cPanel) OpenSSL/3.5.5 Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 mod_rbld2.0 configured -- resuming normal operations
[Wed Sep 30 00:56:04.419425 2026] [core:notice] [pid 426443:tid 426443] AH00094: Command line: '/usr/sbin/httpd'
[Wed Sep 30 00:56:05.507522 2026] [http2:info] [pid 186850:tid 186850] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 00:56:05.529322 2026] [security2:error] [pid 186850:tid 186982] [client 52.172.226.14:20515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/elements.php"] [unique_id "aryyhU5Phls--iYlcKj1NQAAAQw"]
[Wed Sep 30 00:56:05.529585 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.191.94:61502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/koiy.php"] [unique_id "aryyhU5Phls--iYlcKj1NgAAAQ4"]
[Wed Sep 30 00:56:05.532137 2026] [security2:error] [pid 186850:tid 187014] [client 20.219.2.60:58478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws61.php"] [unique_id "aryyhU5Phls--iYlcKj1PQAAASw"]
[Wed Sep 30 00:56:05.542717 2026] [security2:error] [pid 186850:tid 187033] [client 20.194.30.107:64710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/admin.php"] [unique_id "aryyhU5Phls--iYlcKj1SAAAAT8"]
[Wed Sep 30 00:56:05.548010 2026] [security2:error] [pid 186850:tid 187044] [client 4.196.65.241:2052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/29.php"] [unique_id "aryyhU5Phls--iYlcKj1TwAAAUo"]
[Wed Sep 30 00:56:05.548397 2026] [security2:error] [pid 186850:tid 187045] [client 20.194.30.107:56855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/222.php"] [unique_id "aryyhU5Phls--iYlcKj1UAAAAUs"]
[Wed Sep 30 00:56:05.548933 2026] [security2:error] [pid 186850:tid 187051] [client 4.240.25.22:30776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-filemannger.php"] [unique_id "aryyhU5Phls--iYlcKj1UQAAAVE"]
[Wed Sep 30 00:56:05.550170 2026] [security2:error] [pid 186850:tid 187048] [client 20.204.161.246:62647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyhU5Phls--iYlcKj1VAAAAU4"]
[Wed Sep 30 00:56:05.550307 2026] [security2:error] [pid 186850:tid 187054] [client 4.240.25.22:18807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/pJPoKA.php"] [unique_id "aryyhU5Phls--iYlcKj1UgAAAVQ"]
[Wed Sep 30 00:56:05.550967 2026] [security2:error] [pid 186850:tid 187056] [client 20.219.2.60:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryyhU5Phls--iYlcKj1VgAAAVY"]
[Wed Sep 30 00:56:05.551302 2026] [security2:error] [pid 186850:tid 187058] [client 20.194.30.107:8605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/txets.php"] [unique_id "aryyhU5Phls--iYlcKj1VwAAAVg"]
[Wed Sep 30 00:56:05.551829 2026] [security2:error] [pid 186850:tid 187055] [client 20.204.161.246:57976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/24.php"] [unique_id "aryyhU5Phls--iYlcKj1WAAAAVU"]
[Wed Sep 30 00:56:05.552083 2026] [security2:error] [pid 186850:tid 187049] [client 20.194.97.74:38662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyhU5Phls--iYlcKj1UwAAAU8"]
[Wed Sep 30 00:56:05.552107 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:49138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.552463 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:15238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.552545 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:49138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.552902 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:9705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.552926 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:15238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.553049 2026] [security2:error] [pid 186850:tid 187064] [client 20.28.180.172:29603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/a11.php"] [unique_id "aryyhU5Phls--iYlcKj1WQAAAV4"]
[Wed Sep 30 00:56:05.553291 2026] [security2:error] [pid 186850:tid 187062] [client 20.198.74.230:23935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ded.php"] [unique_id "aryyhU5Phls--iYlcKj1WgAAAVw"]
[Wed Sep 30 00:56:05.553377 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:9705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.554602 2026] [security2:error] [pid 186850:tid 187068] [client 4.240.25.22:63748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/adminan.php"] [unique_id "aryyhU5Phls--iYlcKj1XwAAAWI"]
[Wed Sep 30 00:56:05.555618 2026] [security2:error] [pid 186850:tid 187073] [client 20.194.30.107:14441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/amax.php"] [unique_id "aryyhU5Phls--iYlcKj1YgAAAWc"]
[Wed Sep 30 00:56:05.556844 2026] [security2:error] [pid 186850:tid 187077] [client 20.70.173.30:16270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/sym.php"] [unique_id "aryyhU5Phls--iYlcKj1ZgAAAWs"]
[Wed Sep 30 00:56:05.556930 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:53598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.556964 2026] [security2:error] [pid 186850:tid 187079] [client 20.219.2.60:36614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/hplfuns.php"] [unique_id "aryyhU5Phls--iYlcKj1ZwAAAW0"]
[Wed Sep 30 00:56:05.557253 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:53598] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.558091 2026] [security2:error] [pid 186850:tid 187083] [client 20.70.173.30:63711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/reop3.php"] [unique_id "aryyhU5Phls--iYlcKj1agAAAXE"]
[Wed Sep 30 00:56:05.558440 2026] [security2:error] [pid 186850:tid 187085] [client 20.204.42.136:54151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/dhlcu.php"] [unique_id "aryyhU5Phls--iYlcKj1awAAAXM"]
[Wed Sep 30 00:56:05.559450 2026] [security2:error] [pid 186850:tid 187089] [client 45.138.12.43:39898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.oyj.vgm.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyhU5Phls--iYlcKj1bQAAAXc"]
[Wed Sep 30 00:56:05.559996 2026] [security2:error] [pid 186850:tid 187093] [client 4.240.25.22:30725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/pfm.php"] [unique_id "aryyhU5Phls--iYlcKj1bwAAAXs"]
[Wed Sep 30 00:56:05.562571 2026] [proxy_http:error] [pid 186850:tid 187091] (20014)Internal error (specific information not available): [client 216.126.237.47:58786] AH01102: error reading status line from remote server 127.0.0.1:2082
[Wed Sep 30 00:56:05.562592 2026] [proxy:error] [pid 186850:tid 187091] [client 216.126.237.47:58786] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.git/config
[Wed Sep 30 00:56:05.573681 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:49274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 00:56:05.573959 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:49274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 00:56:05.574566 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:3180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.575012 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:3180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.575309 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:8055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.575564 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:17524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.575727 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:8055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.575986 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:17524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.577458 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:47055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.577887 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:47055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.584457 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:8877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.584918 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:8877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.589333 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:49093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.589764 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:49093] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.598961 2026] [security2:error] [pid 186850:tid 186873] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/posting.php"] [unique_id "aryyhU5Phls--iYlcKj1iwABdBY"]
[Wed Sep 30 00:56:05.599180 2026] [security2:error] [pid 186850:tid 187086] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/posting.php"] [unique_id "aryyhU5Phls--iYlcKj1iwABdBY"]
[Wed Sep 30 00:56:05.604017 2026] [security2:error] [pid 186850:tid 187102] [client 172.232.180.134:55254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reasonablerenovations.ca"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "aryyhU5Phls--iYlcKj1jgAAAYQ"]
[Wed Sep 30 00:56:05.639337 2026] [security2:error] [pid 186850:tid 187102] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyhU5Phls--iYlcKj1rgAAAYQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:05.639399 2026] [security2:error] [pid 186850:tid 187032] [client 82.177.100.152:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyhU5Phls--iYlcKj1rQAAAT4"]
[Wed Sep 30 00:56:05.643278 2026] [log_config:warn] [pid 178882:tid 179272] (32)Broken pipe: [client 82.177.100.152:53756] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log
[Wed Sep 30 00:56:05.643300 2026] [log_config:warn] [pid 178882:tid 179272] (32)Broken pipe: [client 82.177.100.152:53756] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log
[Wed Sep 30 00:56:05.643770 2026] [log_config:warn] [pid 178882:tid 179252] (32)Broken pipe: [client 47.79.13.175:51992] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log, referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:05.643784 2026] [log_config:warn] [pid 178882:tid 179252] (32)Broken pipe: [client 47.79.13.175:51992] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log, referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:05.690421 2026] [security2:error] [pid 186850:tid 187053] [client 127.0.0.1:36514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryyhU5Phls--iYlcKj1mQAAAVM"]
[Wed Sep 30 00:56:05.690443 2026] [security2:error] [pid 186850:tid 187029] [client 127.0.0.1:36510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.transparentyouth.com"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryyhU5Phls--iYlcKj1lAAAATs"]
[Wed Sep 30 00:56:05.692720 2026] [security2:error] [pid 186850:tid 187082] [client 74.7.241.182:49510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.transparentyouth.com"] [uri "/robots.txt"] [unique_id "aryyhU5Phls--iYlcKj1jQABcBg"]
[Wed Sep 30 00:56:05.696894 2026] [security2:error] [pid 186850:tid 187036] [client 93.113.206.248:61215] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crishuffman.com"] [uri "/.env"] [unique_id "aryyhU5Phls--iYlcKj1yQAAAUI"]
[Wed Sep 30 00:56:05.743926 2026] [security2:error] [pid 186850:tid 187101] [client 45.138.12.32:14802] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jra.vvt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyhU5Phls--iYlcKj13QAAAYM"]
[Wed Sep 30 00:56:05.749061 2026] [autoindex:error] [pid 186850:tid 187002] [client 212.156.70.154:51448] AH01276: Cannot serve directory /home2/iufehdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:05.762936 2026] [log_config:warn] [pid 178882:tid 179311] (32)Broken pipe: [client 72.204.186.251:36816] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log
[Wed Sep 30 00:56:05.762957 2026] [log_config:warn] [pid 178882:tid 179311] (32)Broken pipe: [client 72.204.186.251:36816] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log
[Wed Sep 30 00:56:05.791144 2026] [access_compat:error] [pid 186850:tid 187079] [client 47.82.11.53:58612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:05.791591 2026] [access_compat:error] [pid 186850:tid 187079] [client 47.82.11.53:58612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:05.797190 2026] [access_compat:error] [pid 186850:tid 187104] [client 47.82.11.53:58602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:05.797696 2026] [access_compat:error] [pid 186850:tid 187104] [client 47.82.11.53:58602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:05.810536 2026] [security2:error] [pid 186850:tid 186986] [client 20.214.191.94:58841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wordfence-waf.php"] [unique_id "aryyhU5Phls--iYlcKj19QAAARA"]
[Wed Sep 30 00:56:05.845031 2026] [security2:error] [pid 186850:tid 187014] [client 182.69.182.151:23644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyhU5Phls--iYlcKj1-gAAASw"]
[Wed Sep 30 00:56:05.845250 2026] [security2:error] [pid 186850:tid 187014] [client 182.69.182.151:23644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyhU5Phls--iYlcKj1-gAAASw"]
[Wed Sep 30 00:56:05.864355 2026] [security2:error] [pid 186850:tid 187014] [client 20.194.97.74:58476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyhU5Phls--iYlcKj1_gAAASw"]
[Wed Sep 30 00:56:05.872340 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.872745 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.888898 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:1180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.889347 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:1180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.919082 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:56:05.919526 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:56:05.935588 2026] [security2:error] [pid 186850:tid 187034] [client 154.17.135.140:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyhU5Phls--iYlcKj2CwAAAUA"]
[Wed Sep 30 00:56:05.960776 2026] [security2:error] [pid 186850:tid 186986] [client 204.44.99.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyhU5Phls--iYlcKj2EQAAARA"]
[Wed Sep 30 00:56:05.975506 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:05.975947 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:05.983307 2026] [security2:error] [pid 186850:tid 187034] [client 110.238.203.9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/tenda/"] [unique_id "aryyhU5Phls--iYlcKj2FwAAAUA"]
[Wed Sep 30 00:56:06.000047 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.000499 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.003536 2026] [security2:error] [pid 186850:tid 187019] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyhU5Phls--iYlcKj2IgAAATE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:06.011562 2026] [security2:error] [pid 186850:tid 187034] [client 20.219.2.60:45351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/iyy.php"] [unique_id "aryyhk5Phls--iYlcKj2KwAAAUA"]
[Wed Sep 30 00:56:06.023890 2026] [security2:error] [pid 186850:tid 187000] [client 74.7.241.166:55608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "worldsolarprous.com"] [uri "/robots.txt"] [unique_id "aryyhk5Phls--iYlcKj2LQABHkE"]
[Wed Sep 30 00:56:06.036477 2026] [security2:error] [pid 186850:tid 187100] [client 103.159.192.142:57588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NAAAAYI"]
[Wed Sep 30 00:56:06.036649 2026] [security2:error] [pid 186850:tid 187100] [client 103.159.192.142:57588] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NAAAAYI"]
[Wed Sep 30 00:56:06.041480 2026] [access_compat:error] [pid 186850:tid 186984] [client 47.79.13.75:40246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:06.041855 2026] [access_compat:error] [pid 186850:tid 186984] [client 47.79.13.75:40246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:06.048547 2026] [security2:error] [pid 186850:tid 187084] [client 116.197.133.25:53396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NgAAAXI"]
[Wed Sep 30 00:56:06.048683 2026] [security2:error] [pid 186850:tid 187084] [client 116.197.133.25:53396] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NgAAAXI"]
[Wed Sep 30 00:56:06.049380 2026] [security2:error] [pid 186850:tid 187047] [client 116.72.182.19:55586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NwAAAU0"]
[Wed Sep 30 00:56:06.049509 2026] [security2:error] [pid 186850:tid 187047] [client 116.72.182.19:55586] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2NwAAAU0"]
[Wed Sep 30 00:56:06.072009 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.072461 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.090200 2026] [security2:error] [pid 186850:tid 187081] [client 49.36.41.37:60574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2OwAAAW8"]
[Wed Sep 30 00:56:06.090407 2026] [security2:error] [pid 186850:tid 187081] [client 49.36.41.37:60574] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2OwAAAW8"]
[Wed Sep 30 00:56:06.092601 2026] [security2:error] [pid 186850:tid 186919] [remote 47.128.114.171:58526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/11228/"] [unique_id "aryyhk5Phls--iYlcKj2PAABcEQ"]
[Wed Sep 30 00:56:06.102750 2026] [security2:error] [pid 186850:tid 187094] [client 116.193.128.26:53443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2PwAAAXw"]
[Wed Sep 30 00:56:06.103121 2026] [security2:error] [pid 186850:tid 187094] [client 116.193.128.26:53443] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2PwAAAXw"]
[Wed Sep 30 00:56:06.118642 2026] [security2:error] [pid 186850:tid 187048] [client 202.179.95.79:54381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2QAAAAU4"]
[Wed Sep 30 00:56:06.118882 2026] [security2:error] [pid 186850:tid 187048] [client 202.179.95.79:54381] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2QAAAAU4"]
[Wed Sep 30 00:56:06.120791 2026] [security2:error] [pid 186850:tid 187101] [client 20.214.191.94:46339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wp5.php"] [unique_id "aryyhk5Phls--iYlcKj2QQAAAYM"]
[Wed Sep 30 00:56:06.127064 2026] [security2:error] [pid 186850:tid 187089] [client 103.172.210.103:52179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2QgAAAXc"]
[Wed Sep 30 00:56:06.127281 2026] [security2:error] [pid 186850:tid 187089] [client 103.172.210.103:52179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2QgAAAXc"]
[Wed Sep 30 00:56:06.129061 2026] [security2:error] [pid 186850:tid 187068] [client 152.59.165.7:62119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2RAAAAWI"]
[Wed Sep 30 00:56:06.129255 2026] [security2:error] [pid 186850:tid 187068] [client 152.59.165.7:62119] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2RAAAAWI"]
[Wed Sep 30 00:56:06.141688 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:40942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2RgAAAWo"]
[Wed Sep 30 00:56:06.142123 2026] [security2:error] [pid 186850:tid 187096] [client 103.168.66.101:62028] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyhk5Phls--iYlcKj2RQAAAX4"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:56:06.145483 2026] [security2:error] [pid 186850:tid 187006] [client 20.194.97.74:60621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/f35.update.php"] [unique_id "aryyhk5Phls--iYlcKj2RwAAASQ"]
[Wed Sep 30 00:56:06.147217 2026] [security2:error] [pid 186850:tid 187103] [client 152.59.169.65:64552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2SAAAAYU"]
[Wed Sep 30 00:56:06.147365 2026] [security2:error] [pid 186850:tid 187103] [client 152.59.169.65:64552] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2SAAAAYU"]
[Wed Sep 30 00:56:06.168563 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:1180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.169012 2026] [security2:error] [pid 186850:tid 187008] [client 223.181.30.165:2941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2UwAAASY"]
[Wed Sep 30 00:56:06.169063 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:1180] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.169216 2026] [security2:error] [pid 186850:tid 187008] [client 223.181.30.165:2941] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2UwAAASY"]
[Wed Sep 30 00:56:06.169888 2026] [security2:error] [pid 186850:tid 186996] [client 203.122.45.246:52851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2VQAAARo"]
[Wed Sep 30 00:56:06.170052 2026] [security2:error] [pid 186850:tid 186996] [client 203.122.45.246:52851] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2VQAAARo"]
[Wed Sep 30 00:56:06.204486 2026] [security2:error] [pid 186850:tid 187073] [client 150.107.232.159:35629] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2XAAAAWc"]
[Wed Sep 30 00:56:06.207195 2026] [security2:error] [pid 186850:tid 187073] [client 150.107.232.159:35629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2XAAAAWc"]
[Wed Sep 30 00:56:06.249923 2026] [security2:error] [pid 186850:tid 187106] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyhk5Phls--iYlcKj2bAAAAYg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:06.266650 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.267101 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.288218 2026] [ssl:error] [pid 186850:tid 187098] [client 216.25.124.26:7868] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname www.ffu.bzy.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:56:06.303861 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzExL25ldA==
[Wed Sep 30 00:56:06.304379 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzExL25ldA==
[Wed Sep 30 00:56:06.339126 2026] [security2:error] [pid 186850:tid 187030] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyhk5Phls--iYlcKj2gAAAATw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:06.351625 2026] [security2:error] [pid 186850:tid 186947] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyhk5Phls--iYlcKj2gQABcGA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=7ff9f193b059b1527af7692abf7676f1&start=105&t=6695
[Wed Sep 30 00:56:06.351661 2026] [security2:error] [pid 186850:tid 186947] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyhk5Phls--iYlcKj2gQABcGA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=7ff9f193b059b1527af7692abf7676f1&start=105&t=6695
[Wed Sep 30 00:56:06.353396 2026] [security2:error] [pid 186850:tid 187082] [client 52.172.226.14:20516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/sitemap.php"] [unique_id "aryyhk5Phls--iYlcKj2ggAAAXA"]
[Wed Sep 30 00:56:06.374640 2026] [security2:error] [pid 186850:tid 186982] [client 139.135.34.150:21667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.34.135.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2hAAAAQw"]
[Wed Sep 30 00:56:06.374857 2026] [security2:error] [pid 186850:tid 186982] [client 139.135.34.150:21667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2hAAAAQw"]
[Wed Sep 30 00:56:06.380557 2026] [security2:error] [pid 186850:tid 187045] [client 72.255.10.32:56798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2hQAAAUs"]
[Wed Sep 30 00:56:06.380714 2026] [security2:error] [pid 186850:tid 187045] [client 72.255.10.32:56798] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2hQAAAUs"]
[Wed Sep 30 00:56:06.410280 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.410706 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.423880 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:40942] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2RgAAAWo"]
[Wed Sep 30 00:56:06.426397 2026] [security2:error] [pid 186850:tid 186986] [client 20.194.97.74:38669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/adminfuns.php"] [unique_id "aryyhk5Phls--iYlcKj2jAAAARA"]
[Wed Sep 30 00:56:06.428294 2026] [security2:error] [pid 186850:tid 187039] [client 20.214.191.94:58856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/em.php"] [unique_id "aryyhk5Phls--iYlcKj2jQAAAUU"]
[Wed Sep 30 00:56:06.443356 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.444380 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.482453 2026] [security2:error] [pid 186850:tid 187026] [client 103.168.66.101:62028] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/"] [unique_id "aryyhk5Phls--iYlcKj2kQAAATg"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:56:06.487903 2026] [access_compat:error] [pid 186850:tid 187096] [client 47.79.13.28:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:06.488362 2026] [access_compat:error] [pid 186850:tid 187096] [client 47.79.13.28:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:06.531754 2026] [core:error] [pid 186850:tid 187050] [client 45.138.12.32:14740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:06.531780 2026] [core:error] [pid 186850:tid 187050] [client 45.138.12.32:14740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:06.533972 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.534414 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.561182 2026] [http2:info] [pid 187269:tid 187269] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 00:56:06.585205 2026] [security2:error] [pid 186850:tid 187073] [client 20.219.2.60:48840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/900.php"] [unique_id "aryyhk5Phls--iYlcKj2mwAAAWc"]
[Wed Sep 30 00:56:06.587048 2026] [security2:error] [pid 186850:tid 187063] [client 103.168.66.101:62028] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryyhk5Phls--iYlcKj2mgAAAV0"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:56:06.600228 2026] [security2:error] [pid 186850:tid 187066] [client 20.204.161.246:49114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/42b5827789index.php"] [unique_id "aryyhk5Phls--iYlcKj2ngAAAWA"]
[Wed Sep 30 00:56:06.630411 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.630707 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.657850 2026] [security2:error] [pid 186850:tid 186953] [remote 20.199.63.126:5393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.63.199.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryyhk5Phls--iYlcKj2oQABD2Y"], referer: https://thenerdistheword.ca/wp-admin/
[Wed Sep 30 00:56:06.703851 2026] [security2:error] [pid 186850:tid 187030] [client 216.73.216.46:1180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyhk5Phls--iYlcKj2pAAAATw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzMvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:56:06.704049 2026] [security2:error] [pid 187269:tid 187408] [client 20.194.97.74:60639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyhtFcyhWr7HDzNGlfnwAAAhY"]
[Wed Sep 30 00:56:06.708129 2026] [security2:error] [pid 187269:tid 187409] [client 20.214.191.94:46998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/hp.php"] [unique_id "aryyhtFcyhWr7HDzNGlfoAAAAhc"]
[Wed Sep 30 00:56:06.715211 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.715498 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.801729 2026] [security2:error] [pid 186850:tid 187061] [client 43.227.131.37:51116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2qQAAAVs"]
[Wed Sep 30 00:56:06.801869 2026] [security2:error] [pid 186850:tid 187061] [client 43.227.131.37:51116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyhk5Phls--iYlcKj2qQAAAVs"]
[Wed Sep 30 00:56:06.802291 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 00:56:06.802456 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.802710 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 00:56:06.802893 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.859391 2026] [security2:error] [pid 187269:tid 187414] [client 52.172.226.14:20510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/xetmolxr.php"] [unique_id "aryyhtFcyhWr7HDzNGlfogAAAhw"]
[Wed Sep 30 00:56:06.893888 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.894324 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.974823 2026] [security2:error] [pid 186850:tid 186986] [client 20.194.97.74:38690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryyhk5Phls--iYlcKj2swAAARA"]
[Wed Sep 30 00:56:06.981645 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:06.981932 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:2912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:06.987343 2026] [security2:error] [pid 187269:tid 187429] [client 20.214.191.94:61459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/wpuse.php"] [unique_id "aryyhtFcyhWr7HDzNGlfqQAAAis"]
[Wed Sep 30 00:56:07.048166 2026] [security2:error] [pid 186850:tid 187046] [client 20.204.161.246:29993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyh05Phls--iYlcKj2twAAAUw"]
[Wed Sep 30 00:56:07.066272 2026] [security2:error] [pid 186850:tid 187072] [client 216.73.216.46:2912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyh05Phls--iYlcKj2uAAAAWY"]
[Wed Sep 30 00:56:07.093221 2026] [access_compat:error] [pid 186850:tid 186960] [remote 52.38.147.55:48804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.093495 2026] [access_compat:error] [pid 186850:tid 186960] [remote 52.38.147.55:48804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.104497 2026] [security2:error] [pid 186850:tid 187029] [client 20.219.2.60:63288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/blsvgeyaza.php"] [unique_id "aryyh05Phls--iYlcKj2uQAAATs"]
[Wed Sep 30 00:56:07.167139 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.167415 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.220203 2026] [security2:error] [pid 186850:tid 186961] [remote 20.199.63.126:5393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.63.199.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryyh05Phls--iYlcKj2vAABfW4"], referer: https://thenerdistheword.ca/wp-admin/profile.php
[Wed Sep 30 00:56:07.256333 2026] [security2:error] [pid 186850:tid 187004] [client 20.194.97.74:52825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/av.php"] [unique_id "aryyh05Phls--iYlcKj2vwAAASI"]
[Wed Sep 30 00:56:07.260848 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.261285 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.266459 2026] [security2:error] [pid 187269:tid 187445] [client 20.214.191.94:61443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/file18x.php"] [unique_id "aryyh9FcyhWr7HDzNGlfrAAAAjs"]
[Wed Sep 30 00:56:07.272363 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 00:56:07.272785 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 00:56:07.283918 2026] [autoindex:error] [pid 186850:tid 187069] [client 8.138.207.158:52860] AH01276: Cannot serve directory /home4/muranoav/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://muranoaviacion.com
[Wed Sep 30 00:56:07.301379 2026] [access_compat:error] [pid 186850:tid 186963] [remote 52.38.147.55:48806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.301655 2026] [access_compat:error] [pid 186850:tid 186963] [remote 52.38.147.55:48806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.314793 2026] [security2:error] [pid 187269:tid 187430] [client 4.240.25.22:63766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/fling.php"] [unique_id "aryyh9FcyhWr7HDzNGlfrwAAAiw"]
[Wed Sep 30 00:56:07.345634 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.345892 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:45758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.347174 2026] [security2:error] [pid 187269:tid 187411] [client 39.44.16.112:50976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfsgAAAhk"]
[Wed Sep 30 00:56:07.347852 2026] [security2:error] [pid 187269:tid 187411] [client 39.44.16.112:50976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfsgAAAhk"]
[Wed Sep 30 00:56:07.353535 2026] [security2:error] [pid 187269:tid 187452] [client 20.219.2.60:19422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryyh9FcyhWr7HDzNGlftAAAAkI"]
[Wed Sep 30 00:56:07.425865 2026] [security2:error] [pid 187269:tid 187458] [client 172.232.107.136:49627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.107.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "costechacademy.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aryyh9FcyhWr7HDzNGlftwAAAkg"]
[Wed Sep 30 00:56:07.443268 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.443717 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.503367 2026] [security2:error] [pid 186850:tid 187067] [client 186.155.42.30:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyh05Phls--iYlcKj2ywAAAWE"]
[Wed Sep 30 00:56:07.529071 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.529393 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.545298 2026] [security2:error] [pid 187269:tid 187473] [client 20.194.97.74:38713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/dex.php"] [unique_id "aryyh9FcyhWr7HDzNGlfuwAAAlc"]
[Wed Sep 30 00:56:07.582103 2026] [security2:error] [pid 186850:tid 187097] [client 20.214.191.94:61493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/123viva.php"] [unique_id "aryyh05Phls--iYlcKj2zwAAAX8"]
[Wed Sep 30 00:56:07.591968 2026] [security2:error] [pid 187269:tid 187436] [client 103.159.192.142:57988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfvQAAAjI"]
[Wed Sep 30 00:56:07.592372 2026] [security2:error] [pid 187269:tid 187436] [client 103.159.192.142:57988] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfvQAAAjI"]
[Wed Sep 30 00:56:07.593598 2026] [security2:error] [pid 187269:tid 187479] [client 20.194.30.107:52575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/cilus.php"] [unique_id "aryyh9FcyhWr7HDzNGlfvgAAAl0"]
[Wed Sep 30 00:56:07.622666 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.623102 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.628262 2026] [security2:error] [pid 186850:tid 187034] [client 4.156.59.111:23168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.59.156.4.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgreenphotography.com"] [uri "/wp-login.php"] [unique_id "aryyh05Phls--iYlcKj20AAAAUA"]
[Wed Sep 30 00:56:07.648251 2026] [security2:error] [pid 187269:tid 187487] [client 52.172.226.14:20509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/mini.php"] [unique_id "aryyh9FcyhWr7HDzNGlfwQAAAmU"]
[Wed Sep 30 00:56:07.657718 2026] [security2:error] [pid 187269:tid 187444] [client 49.205.105.16:13929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfwgAAAjo"]
[Wed Sep 30 00:56:07.657858 2026] [security2:error] [pid 187269:tid 187444] [client 49.205.105.16:13929] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfwgAAAjo"]
[Wed Sep 30 00:56:07.681773 2026] [security2:error] [pid 186850:tid 187078] [client 4.240.25.22:30764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/well.php"] [unique_id "aryyh05Phls--iYlcKj21AAAAWw"]
[Wed Sep 30 00:56:07.686763 2026] [security2:error] [pid 186850:tid 187027] [client 20.219.2.60:49596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gqhyti.php"] [unique_id "aryyh05Phls--iYlcKj21QAAATk"]
[Wed Sep 30 00:56:07.697552 2026] [access_compat:error] [pid 187269:tid 187280] [remote 52.38.147.55:48808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.698148 2026] [access_compat:error] [pid 187269:tid 187280] [remote 52.38.147.55:48808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.719682 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.720252 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.747400 2026] [security2:error] [pid 187269:tid 187498] [client 20.28.180.172:29444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/cns.php"] [unique_id "aryyh9FcyhWr7HDzNGlfyAAAAnA"]
[Wed Sep 30 00:56:07.758228 2026] [security2:error] [pid 186850:tid 187059] [client 177.55.195.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyh05Phls--iYlcKj23AAAAVk"]
[Wed Sep 30 00:56:07.769314 2026] [security2:error] [pid 186850:tid 187084] [client 216.73.216.46:45758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyh05Phls--iYlcKj23QAAAXI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDUvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:56:07.808771 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:56:07.809267 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 00:56:07.818415 2026] [security2:error] [pid 186850:tid 187046] [client 20.194.97.74:38668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/chosen.php"] [unique_id "aryyh05Phls--iYlcKj24gAAAUw"]
[Wed Sep 30 00:56:07.831388 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.831918 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.861194 2026] [security2:error] [pid 187269:tid 187510] [client 20.214.191.94:58865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nmarl.com"] [uri "/Components.update.php"] [unique_id "aryyh9FcyhWr7HDzNGlfzgAAAnw"]
[Wed Sep 30 00:56:07.882598 2026] [security2:error] [pid 186850:tid 187028] [client 45.163.88.148:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/tenda/"] [unique_id "aryyh05Phls--iYlcKj25QAAATo"]
[Wed Sep 30 00:56:07.914883 2026] [security2:error] [pid 187269:tid 187455] [client 103.24.86.56:52891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfzwAAAkU"]
[Wed Sep 30 00:56:07.915190 2026] [security2:error] [pid 187269:tid 187455] [client 103.24.86.56:52891] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyh9FcyhWr7HDzNGlfzwAAAkU"]
[Wed Sep 30 00:56:07.958743 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.959193 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.965676 2026] [access_compat:error] [pid 186850:tid 187012] [client 47.79.13.175:43972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:07.966134 2026] [access_compat:error] [pid 186850:tid 187012] [client 47.79.13.175:43972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:07.987585 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:07.988041 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:07.998034 2026] [security2:error] [pid 186850:tid 186983] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyh05Phls--iYlcKj27QAAAQ0"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:08.015527 2026] [security2:error] [pid 186850:tid 187015] [client 161.118.214.16:60551] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.charlesedge.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "aryyhk5Phls--iYlcKj2rgAAAS0"]
[Wed Sep 30 00:56:08.055597 2026] [security2:error] [pid 187269:tid 187467] [client 223.235.102.107:2829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyiNFcyhWr7HDzNGlf1AAAAlE"]
[Wed Sep 30 00:56:08.055743 2026] [security2:error] [pid 187269:tid 187467] [client 223.235.102.107:2829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyiNFcyhWr7HDzNGlf1AAAAlE"]
[Wed Sep 30 00:56:08.073217 2026] [access_compat:error] [pid 186850:tid 187096] [client 17.166.152.201:55580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.073545 2026] [access_compat:error] [pid 186850:tid 187096] [client 17.166.152.201:55580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.074061 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.074417 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.127054 2026] [security2:error] [pid 187269:tid 187534] [client 20.194.97.74:52840] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/1.php"] [unique_id "aryyiNFcyhWr7HDzNGlf2AAAApM"]
[Wed Sep 30 00:56:08.127167 2026] [security2:error] [pid 187269:tid 187534] [client 20.194.97.74:52840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/1.php"] [unique_id "aryyiNFcyhWr7HDzNGlf2AAAApM"]
[Wed Sep 30 00:56:08.130026 2026] [security2:error] [pid 187269:tid 187532] [client 154.54.100.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "itbusinessmatrix.com"] [uri "/.git/config"] [unique_id "aryyiNFcyhWr7HDzNGlf1wAAApE"]
[Wed Sep 30 00:56:08.138104 2026] [security2:error] [pid 186850:tid 187064] [client 172.232.100.242:50175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.100.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mrbradgoreski.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aryyiE5Phls--iYlcKj29AAAAV4"]
[Wed Sep 30 00:56:08.165526 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.165767 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.215530 2026] [security2:error] [pid 186850:tid 187087] [client 52.172.226.14:20535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/zwso.php"] [unique_id "aryyiE5Phls--iYlcKj2-wAAAXU"]
[Wed Sep 30 00:56:08.237488 2026] [security2:error] [pid 186850:tid 187031] [client 45.138.12.32:29214] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jra.vvt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyiE5Phls--iYlcKj2_QAAAT0"]
[Wed Sep 30 00:56:08.250404 2026] [security2:error] [pid 187269:tid 187427] [client 20.219.2.60:36629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/tfm.php"] [unique_id "aryyiNFcyhWr7HDzNGlf5AAAAik"]
[Wed Sep 30 00:56:08.258286 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.258610 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.281742 2026] [security2:error] [pid 187269:tid 187431] [client 20.219.2.60:55826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/autoxxi.php"] [unique_id "aryyiNFcyhWr7HDzNGlf5QAAAi0"]
[Wed Sep 30 00:56:08.291525 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL25ldA==
[Wed Sep 30 00:56:08.291887 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL25ldA==
[Wed Sep 30 00:56:08.347749 2026] [security2:error] [pid 186850:tid 187077] [client 20.204.161.246:65509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/f35.update.php"] [unique_id "aryyiE5Phls--iYlcKj3AwAAAWs"]
[Wed Sep 30 00:56:08.351069 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.351521 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.411172 2026] [security2:error] [pid 187269:tid 187446] [client 20.194.97.74:60663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/radio.php"] [unique_id "aryyiNFcyhWr7HDzNGlf5gAAAjw"]
[Wed Sep 30 00:56:08.433780 2026] [security2:error] [pid 187269:tid 187430] [client 74.7.242.1:50090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyiNFcyhWr7HDzNGlf6QAAAiw"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:56:08.439607 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.440030 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.452977 2026] [access_compat:error] [pid 186850:tid 187074] [client 47.79.13.176:46100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:08.453242 2026] [access_compat:error] [pid 186850:tid 187074] [client 47.79.13.176:46100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:08.490569 2026] [security2:error] [pid 187269:tid 187450] [client 202.46.62.45:42351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.camera-roll.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyiNFcyhWr7HDzNGlf7gAAAkA"], referer: https://www.camera-roll.com/pale-flower-film-review/
[Wed Sep 30 00:56:08.533060 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.533334 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.625357 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.625673 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.630855 2026] [security2:error] [pid 186850:tid 187025] [client 20.204.42.136:27413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/go.php"] [unique_id "aryyiE5Phls--iYlcKj3HwAAATc"]
[Wed Sep 30 00:56:08.712420 2026] [security2:error] [pid 186850:tid 187080] [client 20.194.97.74:60646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/blacks.php"] [unique_id "aryyiE5Phls--iYlcKj3IwAAAW4"]
[Wed Sep 30 00:56:08.722300 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.722724 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.742761 2026] [security2:error] [pid 187269:tid 187489] [client 20.194.30.107:14440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/dex.php"] [unique_id "aryyiNFcyhWr7HDzNGlf_AAAAmc"]
[Wed Sep 30 00:56:08.748465 2026] [security2:error] [pid 186850:tid 186983] [client 103.168.66.101:62028] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "infraas.digital"] [uri "/blog/wp-json/Batch/v1"] [unique_id "aryyiE5Phls--iYlcKj3JAAAAQ0"], referer: https://infraas.digital/blog/wp-admin/
[Wed Sep 30 00:56:08.799116 2026] [security2:error] [pid 187269:tid 187447] [client 52.172.226.14:20490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/tiny.php"] [unique_id "aryyiNFcyhWr7HDzNGlf_QAAAj0"]
[Wed Sep 30 00:56:08.805918 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.806182 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.822482 2026] [security2:error] [pid 186850:tid 187102] [client 20.219.2.60:59612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/1144452145_error_log.php"] [unique_id "aryyiE5Phls--iYlcKj3KwAAAYQ"]
[Wed Sep 30 00:56:08.828679 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 00:56:08.828959 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 00:56:08.831025 2026] [security2:error] [pid 187269:tid 187496] [client 20.219.2.60:19420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws57.php"] [unique_id "aryyiNFcyhWr7HDzNGlf_gAAAm4"]
[Wed Sep 30 00:56:08.895200 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.895483 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:08.980312 2026] [security2:error] [pid 186850:tid 187007] [client 4.196.65.241:27274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/olvxz.php"] [unique_id "aryyiE5Phls--iYlcKj3PwAAASU"]
[Wed Sep 30 00:56:08.984905 2026] [security2:error] [pid 186850:tid 187019] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyiE5Phls--iYlcKj3QAAAATE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:08.987204 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:08.987521 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.014473 2026] [security2:error] [pid 186850:tid 187064] [client 20.194.97.74:60660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/run.php"] [unique_id "aryyiU5Phls--iYlcKj3QQAAAV4"]
[Wed Sep 30 00:56:09.076893 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.077158 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.167006 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.167270 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.260148 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.260413 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.296932 2026] [security2:error] [pid 186850:tid 187040] [client 20.194.97.74:60619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/vpn.php"] [unique_id "aryyiU5Phls--iYlcKj3UAAAAUY"]
[Wed Sep 30 00:56:09.312739 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:56:09.313057 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:56:09.349500 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.349754 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.439181 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.439457 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.446936 2026] [security2:error] [pid 187269:tid 187506] [client 20.219.2.60:48872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws48.php"] [unique_id "aryyidFcyhWr7HDzNGlgGQAAAng"]
[Wed Sep 30 00:56:09.533347 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.533620 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.543632 2026] [security2:error] [pid 187269:tid 187426] [client 20.198.74.230:23915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/qDAFu1Swzxyd4JIdefault.php"] [unique_id "aryyidFcyhWr7HDzNGlgHAAAAig"]
[Wed Sep 30 00:56:09.573937 2026] [security2:error] [pid 187269:tid 187420] [client 20.194.97.74:38686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/alfa.php"] [unique_id "aryyidFcyhWr7HDzNGlgHwAAAiI"]
[Wed Sep 30 00:56:09.617063 2026] [security2:error] [pid 187269:tid 187427] [client 52.172.226.14:20170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/simple.php"] [unique_id "aryyidFcyhWr7HDzNGlgIQAAAik"]
[Wed Sep 30 00:56:09.623612 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.623877 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.710770 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.711412 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.804792 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.805056 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.826608 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:56:09.826873 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:56:09.892320 2026] [security2:error] [pid 187269:tid 187430] [client 20.194.97.74:52843] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wp-content/uploads/"] [unique_id "aryyidFcyhWr7HDzNGlgJwAAAiw"]
[Wed Sep 30 00:56:09.894657 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.894933 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:09.971738 2026] [security2:error] [pid 187269:tid 187449] [client 20.219.2.60:55867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryyidFcyhWr7HDzNGlgLQAAAj8"]
[Wed Sep 30 00:56:09.976980 2026] [security2:error] [pid 187269:tid 187464] [client 20.219.2.60:36763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/8573.php"] [unique_id "aryyidFcyhWr7HDzNGlgLgAAAk4"]
[Wed Sep 30 00:56:09.984629 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:09.984904 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.030214 2026] [security2:error] [pid 186850:tid 187102] [client 45.138.12.32:29202] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.jqk.qmh.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyik5Phls--iYlcKj3fwAAAYQ"]
[Wed Sep 30 00:56:10.034789 2026] [security2:error] [pid 187269:tid 187468] [client 20.219.2.60:18855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/.qiodetme.php"] [unique_id "aryyitFcyhWr7HDzNGlgMAAAAlI"]
[Wed Sep 30 00:56:10.035258 2026] [security2:error] [pid 187269:tid 187432] [client 20.194.30.107:62144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/samll.php"] [unique_id "aryyitFcyhWr7HDzNGlgMQAAAi4"]
[Wed Sep 30 00:56:10.076982 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.077241 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.166557 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.166806 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.199207 2026] [security2:error] [pid 186850:tid 186980] [client 20.194.97.74:60609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/w.php"] [unique_id "aryyik5Phls--iYlcKj3hAAAAQo"]
[Wed Sep 30 00:56:10.258038 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.258308 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.303952 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:56:10.304202 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:56:10.319915 2026] [security2:error] [pid 186850:tid 187019] [client 20.204.161.246:65287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/adminfuns.php"] [unique_id "aryyik5Phls--iYlcKj3igAAATE"]
[Wed Sep 30 00:56:10.326260 2026] [security2:error] [pid 187269:tid 187487] [client 45.138.12.32:29270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.srchambers.com"] [uri "/wp-links-opml.php"] [unique_id "aryyitFcyhWr7HDzNGlgOwAAAmU"]
[Wed Sep 30 00:56:10.350424 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.350712 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.427079 2026] [security2:error] [pid 187269:tid 187482] [client 52.172.226.14:20482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/buy.php"] [unique_id "aryyitFcyhWr7HDzNGlgPQAAAmA"]
[Wed Sep 30 00:56:10.442342 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.442609 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.472045 2026] [security2:error] [pid 187269:tid 187472] [client 20.194.97.74:52806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyitFcyhWr7HDzNGlgPgAAAlY"]
[Wed Sep 30 00:56:10.477393 2026] [security2:error] [pid 186850:tid 186982] [client 20.219.2.60:45322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/schallfuns.php"] [unique_id "aryyik5Phls--iYlcKj3kgAAAQw"]
[Wed Sep 30 00:56:10.479447 2026] [security2:error] [pid 186850:tid 186900] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyik5Phls--iYlcKj3kwABQTE"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D71738
[Wed Sep 30 00:56:10.533585 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.533856 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.625131 2026] [autoindex:error] [pid 187269:tid 187495] [client 212.156.70.154:43639] AH01276: Cannot serve directory /home4/llimlymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:10.627568 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.629019 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.714922 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.715191 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.745998 2026] [security2:error] [pid 186850:tid 187097] [client 20.194.97.74:58463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/robot.php"] [unique_id "aryyik5Phls--iYlcKj3nQAAAX8"]
[Wed Sep 30 00:56:10.798328 2026] [security2:error] [pid 187269:tid 187477] [client 106.214.2.47:25970] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyitFcyhWr7HDzNGlgRQAAAls"]
[Wed Sep 30 00:56:10.798486 2026] [security2:error] [pid 187269:tid 187477] [client 106.214.2.47:25970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyitFcyhWr7HDzNGlgRQAAAls"]
[Wed Sep 30 00:56:10.800669 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:56:10.800968 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:56:10.803337 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.803597 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.856628 2026] [security2:error] [pid 187269:tid 187522] [client 20.204.161.246:48976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/mmq.php"] [unique_id "aryyitFcyhWr7HDzNGlgSQAAAoc"]
[Wed Sep 30 00:56:10.872880 2026] [security2:error] [pid 186850:tid 187041] [client 20.219.2.60:36853] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.craigbrownphd.com"] [uri "/1.php"] [unique_id "aryyik5Phls--iYlcKj3twAAAUc"]
[Wed Sep 30 00:56:10.872987 2026] [security2:error] [pid 186850:tid 187041] [client 20.219.2.60:36853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/1.php"] [unique_id "aryyik5Phls--iYlcKj3twAAAUc"]
[Wed Sep 30 00:56:10.895256 2026] [security2:error] [pid 187269:tid 187302] [remote 57.141.14.21:27554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/xmlrpc.php"] [unique_id "aryyitFcyhWr7HDzNGlgSAACVRk"]
[Wed Sep 30 00:56:10.895578 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.895894 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:10.981937 2026] [security2:error] [pid 187269:tid 187511] [client 20.219.2.60:55839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/CDX1.php"] [unique_id "aryyitFcyhWr7HDzNGlgTgAAAn0"]
[Wed Sep 30 00:56:10.989964 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:10.990419 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.010247 2026] [security2:error] [pid 186850:tid 187082] [client 52.172.226.14:20486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ioxi-o.php"] [unique_id "aryyi05Phls--iYlcKj3vQAAAXA"]
[Wed Sep 30 00:56:11.022026 2026] [security2:error] [pid 187269:tid 187517] [client 20.194.30.107:10128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp-manager.php"] [unique_id "aryyi9FcyhWr7HDzNGlgTwAAAoM"]
[Wed Sep 30 00:56:11.037562 2026] [security2:error] [pid 187269:tid 187455] [client 20.194.97.74:38700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/sss.php"] [unique_id "aryyi9FcyhWr7HDzNGlgUQAAAkU"]
[Wed Sep 30 00:56:11.041100 2026] [security2:error] [pid 187269:tid 187528] [client 20.28.180.172:29473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/qnHOQSw8LXV.php"] [unique_id "aryyi9FcyhWr7HDzNGlgUgAAAo0"]
[Wed Sep 30 00:56:11.076700 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.076990 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.089157 2026] [security2:error] [pid 186850:tid 186940] [remote 74.220.219.153:49738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "etqan-cpa-sa.rashed-office.com"] [uri "/wp-login.php"] [unique_id "aryyi05Phls--iYlcKj3wAABKlk"]
[Wed Sep 30 00:56:11.094122 2026] [security2:error] [pid 186850:tid 186951] [remote 74.220.219.153:49738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "etqan-cpa-sa.rashed-office.com"] [uri "/wp-login.php"] [unique_id "aryyi05Phls--iYlcKj3xAABOGQ"], referer: https://etqan-cpa-sa.rashed-office.com/wp-login.php
[Wed Sep 30 00:56:11.098589 2026] [security2:error] [pid 186850:tid 186948] [remote 74.220.219.153:49738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.219.220.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "etqan-cpa-sa.rashed-office.com"] [uri "/xmlrpc.php"] [unique_id "aryyi05Phls--iYlcKj3xQABJmE"]
[Wed Sep 30 00:56:11.098708 2026] [security2:error] [pid 186850:tid 187008] [client 74.220.219.153:49738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "etqan-cpa-sa.rashed-office.com"] [uri "/xmlrpc.php"] [unique_id "aryyi05Phls--iYlcKj3xQABJmE"]
[Wed Sep 30 00:56:11.126424 2026] [security2:error] [pid 186850:tid 186981] [client 4.196.65.241:2088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/hywzd.php"] [unique_id "aryyi05Phls--iYlcKj3xgAAAQs"]
[Wed Sep 30 00:56:11.129241 2026] [security2:error] [pid 187269:tid 187485] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyi9FcyhWr7HDzNGlgVgAAAmM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:11.168852 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.169118 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.173586 2026] [security2:error] [pid 187269:tid 187415] [client 20.194.30.107:62194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/ohct.php"] [unique_id "aryyi9FcyhWr7HDzNGlgWAAAAh0"]
[Wed Sep 30 00:56:11.197050 2026] [security2:error] [pid 186850:tid 186992] [client 20.204.161.246:62797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyi05Phls--iYlcKj3yQAAARY"]
[Wed Sep 30 00:56:11.222876 2026] [security2:error] [pid 187269:tid 187428] [client 45.138.12.32:29306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jqk.qmh.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyi9FcyhWr7HDzNGlgXQAAAio"]
[Wed Sep 30 00:56:11.260720 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.261004 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.311271 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:56:11.311593 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:56:11.312729 2026] [security2:error] [pid 187269:tid 187431] [client 20.194.97.74:38698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/or.php"] [unique_id "aryyi9FcyhWr7HDzNGlgXgAAAi0"]
[Wed Sep 30 00:56:11.331583 2026] [security2:error] [pid 187269:tid 187410] [client 20.70.173.30:18549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/mh.php"] [unique_id "aryyi9FcyhWr7HDzNGlgXwAAAhg"]
[Wed Sep 30 00:56:11.351587 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.351842 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.360311 2026] [security2:error] [pid 187269:tid 187424] [client 20.194.30.107:52582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryyi9FcyhWr7HDzNGlgYAAAAiY"]
[Wed Sep 30 00:56:11.383787 2026] [security2:error] [pid 186850:tid 187094] [client 213.136.69.135:62853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-bindings-registry.php"] [unique_id "aryyi05Phls--iYlcKj31AAAAXw"], referer: binance.com
[Wed Sep 30 00:56:11.444256 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.444495 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.488343 2026] [security2:error] [pid 187269:tid 187439] [client 20.219.2.60:19425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/sodas.php"] [unique_id "aryyi9FcyhWr7HDzNGlgZQAAAjU"]
[Wed Sep 30 00:56:11.532124 2026] [access_compat:error] [pid 187269:tid 187437] [client 47.79.13.213:36612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:11.532397 2026] [access_compat:error] [pid 187269:tid 187437] [client 47.79.13.213:36612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:11.533595 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.533869 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.596213 2026] [security2:error] [pid 186850:tid 187031] [client 20.219.2.60:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/clasa99.php"] [unique_id "aryyi05Phls--iYlcKj33AAAAT0"]
[Wed Sep 30 00:56:11.613141 2026] [security2:error] [pid 187269:tid 187470] [client 20.194.97.74:38661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/b8.php"] [unique_id "aryyi9FcyhWr7HDzNGlgbQAAAlQ"]
[Wed Sep 30 00:56:11.625745 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.626016 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.685108 2026] [security2:error] [pid 187269:tid 187414] [client 116.72.182.19:56239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyi9FcyhWr7HDzNGlgbwAAAhw"]
[Wed Sep 30 00:56:11.685274 2026] [security2:error] [pid 187269:tid 187414] [client 116.72.182.19:56239] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyi9FcyhWr7HDzNGlgbwAAAhw"]
[Wed Sep 30 00:56:11.720734 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.721148 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.806962 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.807292 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.844796 2026] [access_compat:error] [pid 186850:tid 187099] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:56:11.845068 2026] [access_compat:error] [pid 186850:tid 187099] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:56:11.901013 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.901446 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:11.913087 2026] [security2:error] [pid 187269:tid 187454] [client 20.194.97.74:38703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/xex.php"] [unique_id "aryyi9FcyhWr7HDzNGlgewAAAkQ"]
[Wed Sep 30 00:56:11.950416 2026] [security2:error] [pid 186850:tid 187073] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyi05Phls--iYlcKj38AAAAWc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:11.989517 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:11.989795 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.039570 2026] [security2:error] [pid 186850:tid 187046] [client 20.194.30.107:26835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/kj.php"] [unique_id "aryyjE5Phls--iYlcKj39AAAAUw"]
[Wed Sep 30 00:56:12.079755 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.080257 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.119854 2026] [access_compat:error] [pid 187269:tid 187476] [client 47.79.13.174:51102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:12.120122 2026] [access_compat:error] [pid 187269:tid 187476] [client 47.79.13.174:51102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:12.125348 2026] [security2:error] [pid 187269:tid 187471] [client 52.172.226.14:20518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ans.php"] [unique_id "aryyjNFcyhWr7HDzNGlgkAAAAlU"]
[Wed Sep 30 00:56:12.151343 2026] [security2:error] [pid 186850:tid 186983] [client 20.219.2.60:59611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/myfilexxx.php"] [unique_id "aryyjE5Phls--iYlcKj3-AAAAQ0"]
[Wed Sep 30 00:56:12.171190 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.171460 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.193755 2026] [security2:error] [pid 187269:tid 187528] [client 20.194.97.74:52810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/CAE-2.5.php"] [unique_id "aryyjNFcyhWr7HDzNGlgkgAAAo0"]
[Wed Sep 30 00:56:12.232883 2026] [security2:error] [pid 187269:tid 187524] [client 4.240.25.22:21514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/chosen.php"] [unique_id "aryyjNFcyhWr7HDzNGlglQAAAok"]
[Wed Sep 30 00:56:12.262011 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.262293 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.299090 2026] [security2:error] [pid 187269:tid 187485] [client 20.204.161.246:62792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryyjNFcyhWr7HDzNGlglwAAAmM"]
[Wed Sep 30 00:56:12.324851 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:56:12.325115 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:56:12.351410 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.351672 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.448488 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.448902 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.462402 2026] [security2:error] [pid 187269:tid 187417] [client 20.194.97.74:52813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/ass.php"] [unique_id "aryyjNFcyhWr7HDzNGlgogAAAh8"]
[Wed Sep 30 00:56:12.535296 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.535561 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.607784 2026] [security2:error] [pid 187269:tid 187456] [client 20.204.42.136:54165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/3.php"] [unique_id "aryyjNFcyhWr7HDzNGlgqQAAAkY"]
[Wed Sep 30 00:56:12.627609 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.627889 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.654183 2026] [security2:error] [pid 186850:tid 187072] [client 155.190.6.18:42206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyjE5Phls--iYlcKj4DQAAAWY"]
[Wed Sep 30 00:56:12.664891 2026] [security2:error] [pid 187269:tid 187432] [client 20.219.2.60:63259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/karma_144a.php"] [unique_id "aryyjNFcyhWr7HDzNGlgqgAAAi4"]
[Wed Sep 30 00:56:12.717930 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.718196 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.730905 2026] [security2:error] [pid 186850:tid 187004] [client 20.219.2.60:36839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/term.php"] [unique_id "aryyjE5Phls--iYlcKj4EQAAASI"]
[Wed Sep 30 00:56:12.784954 2026] [security2:error] [pid 186850:tid 187060] [client 20.194.97.74:58465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/felnggg.php"] [unique_id "aryyjE5Phls--iYlcKj4EwAAAVo"]
[Wed Sep 30 00:56:12.809620 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.809887 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.839193 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 00:56:12.839451 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 00:56:12.849051 2026] [security2:error] [pid 186850:tid 186968] [remote 74.7.227.56:43106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyjE5Phls--iYlcKj4FgABP3U"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?p=299083&sid=2f3309152fc52b5f950023f542b205d3
[Wed Sep 30 00:56:12.884526 2026] [security2:error] [pid 186850:tid 186984] [client 116.197.133.25:54025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyjE5Phls--iYlcKj4GAAAAQ4"]
[Wed Sep 30 00:56:12.884702 2026] [security2:error] [pid 186850:tid 186984] [client 116.197.133.25:54025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyjE5Phls--iYlcKj4GAAAAQ4"]
[Wed Sep 30 00:56:12.899018 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.899283 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:12.935073 2026] [security2:error] [pid 186850:tid 187072] [client 155.190.6.18:42206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyjE5Phls--iYlcKj4DQAAAWY"]
[Wed Sep 30 00:56:12.990286 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:12.990553 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.028866 2026] [security2:error] [pid 186850:tid 187064] [client 20.204.161.246:65493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/av.php"] [unique_id "aryyjU5Phls--iYlcKj4HQAAAV4"]
[Wed Sep 30 00:56:13.071666 2026] [security2:error] [pid 187269:tid 187496] [client 20.194.97.74:58491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/felnggg.update.php"] [unique_id "aryyjdFcyhWr7HDzNGlgsgAAAm4"]
[Wed Sep 30 00:56:13.080977 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.081250 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.143775 2026] [security2:error] [pid 186850:tid 187003] [client 20.219.2.60:58473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/3586%20b64.php"] [unique_id "aryyjU5Phls--iYlcKj4IQAAASE"]
[Wed Sep 30 00:56:13.171606 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.171864 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.264560 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.264829 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.312069 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvbmV0
[Wed Sep 30 00:56:13.312333 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvbmV0
[Wed Sep 30 00:56:13.339646 2026] [security2:error] [pid 186850:tid 186987] [client 37.41.16.35:59016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyjU5Phls--iYlcKj4KAAAARE"]
[Wed Sep 30 00:56:13.339765 2026] [security2:error] [pid 186850:tid 186987] [client 37.41.16.35:59016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyjU5Phls--iYlcKj4KAAAARE"]
[Wed Sep 30 00:56:13.354685 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.354979 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.356182 2026] [security2:error] [pid 186850:tid 187091] [client 20.194.97.74:52815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/jybkxer.php"] [unique_id "aryyjU5Phls--iYlcKj4LQAAAXk"]
[Wed Sep 30 00:56:13.369563 2026] [security2:error] [pid 186850:tid 186999] [client 20.204.161.246:39492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/fryvbbn.php"] [unique_id "aryyjU5Phls--iYlcKj4LgAAAR0"]
[Wed Sep 30 00:56:13.392289 2026] [security2:error] [pid 186850:tid 187104] [client 20.219.2.60:18900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/yw5bi63u.php"] [unique_id "aryyjU5Phls--iYlcKj4LwAAAYY"]
[Wed Sep 30 00:56:13.419076 2026] [security2:error] [pid 187269:tid 187514] [client 52.172.226.14:20677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/gf.php"] [unique_id "aryyjdFcyhWr7HDzNGlgvQAAAoA"]
[Wed Sep 30 00:56:13.445933 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.446379 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.536563 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.536835 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.624449 2026] [security2:error] [pid 187269:tid 187448] [client 20.219.2.60:63289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws.php"] [unique_id "aryyjdFcyhWr7HDzNGlgwgAAAj4"]
[Wed Sep 30 00:56:13.627298 2026] [security2:error] [pid 187269:tid 187481] [client 20.194.97.74:58462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/edit-tags.php"] [unique_id "aryyjdFcyhWr7HDzNGlgwwAAAl8"]
[Wed Sep 30 00:56:13.628690 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.629036 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.631076 2026] [security2:error] [pid 187269:tid 187525] [client 20.194.30.107:37554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/wp.php"] [unique_id "aryyjdFcyhWr7HDzNGlgxAAAAoo"]
[Wed Sep 30 00:56:13.642265 2026] [security2:error] [pid 187269:tid 187445] [client 116.193.128.26:54101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyjdFcyhWr7HDzNGlgxQAAAjs"]
[Wed Sep 30 00:56:13.642352 2026] [security2:error] [pid 187269:tid 187445] [client 116.193.128.26:54101] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyjdFcyhWr7HDzNGlgxQAAAjs"]
[Wed Sep 30 00:56:13.720004 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.720413 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.746083 2026] [security2:error] [pid 187269:tid 187531] [client 4.196.65.241:2109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/eb06f5f3c7index.php"] [unique_id "aryyjdFcyhWr7HDzNGlgyQAAApA"]
[Wed Sep 30 00:56:13.750706 2026] [security2:error] [pid 187269:tid 187467] [client 20.204.161.246:65512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/dex.php"] [unique_id "aryyjdFcyhWr7HDzNGlgygAAAlE"]
[Wed Sep 30 00:56:13.809445 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.809707 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.872664 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 00:56:13.872935 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 00:56:13.899615 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.899876 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:13.915127 2026] [security2:error] [pid 187269:tid 187527] [client 20.194.97.74:58473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/nauik.php"] [unique_id "aryyjdFcyhWr7HDzNGlgywAAAow"]
[Wed Sep 30 00:56:13.943839 2026] [security2:error] [pid 186850:tid 186990] [client 52.172.226.14:20514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/man.php"] [unique_id "aryyjU5Phls--iYlcKj4QAAAARQ"]
[Wed Sep 30 00:56:13.991850 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:13.992163 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.020197 2026] [security2:error] [pid 187269:tid 187415] [client 20.194.30.107:25872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/inputs.php"] [unique_id "aryyjtFcyhWr7HDzNGlgzgAAAh0"]
[Wed Sep 30 00:56:14.024100 2026] [security2:error] [pid 186850:tid 186976] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/posting.php"] [unique_id "aryyjk5Phls--iYlcKj4RAABbn0"]
[Wed Sep 30 00:56:14.024275 2026] [security2:error] [pid 186850:tid 187080] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/posting.php"] [unique_id "aryyjk5Phls--iYlcKj4RAABbn0"]
[Wed Sep 30 00:56:14.083471 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.083768 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.129731 2026] [security2:error] [pid 187269:tid 187419] [client 20.219.2.60:55850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bmi.php"] [unique_id "aryyjtFcyhWr7HDzNGlg0gAAAiE"]
[Wed Sep 30 00:56:14.153446 2026] [access_compat:error] [pid 187269:tid 187524] [client 47.79.13.27:58336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:14.153711 2026] [access_compat:error] [pid 187269:tid 187524] [client 47.79.13.27:58336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:14.159419 2026] [security2:error] [pid 187269:tid 187436] [client 152.59.169.65:65128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyjtFcyhWr7HDzNGlg1AAAAjI"]
[Wed Sep 30 00:56:14.159603 2026] [security2:error] [pid 187269:tid 187436] [client 152.59.169.65:65128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyjtFcyhWr7HDzNGlg1AAAAjI"]
[Wed Sep 30 00:56:14.173294 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.173557 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.184040 2026] [security2:error] [pid 187269:tid 187430] [client 20.194.97.74:52834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wander.php"] [unique_id "aryyjtFcyhWr7HDzNGlg1wAAAiw"]
[Wed Sep 30 00:56:14.212782 2026] [security2:error] [pid 187269:tid 187439] [client 20.219.2.60:36750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-content/radio.php"] [unique_id "aryyjtFcyhWr7HDzNGlg2QAAAjU"]
[Wed Sep 30 00:56:14.214913 2026] [security2:error] [pid 186850:tid 187020] [client 182.69.182.151:24726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyjk5Phls--iYlcKj4SgAAATI"]
[Wed Sep 30 00:56:14.215003 2026] [security2:error] [pid 186850:tid 187020] [client 182.69.182.151:24726] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyjk5Phls--iYlcKj4SgAAATI"]
[Wed Sep 30 00:56:14.265205 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.265473 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:10493] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.361213 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.361669 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.441153 2026] [security2:error] [pid 187269:tid 187446] [client 52.172.226.14:20520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/dev.php"] [unique_id "aryyjtFcyhWr7HDzNGlg5gAAAjw"]
[Wed Sep 30 00:56:14.446102 2026] [security2:error] [pid 187269:tid 187483] [client 20.204.161.246:42511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/chosen.php"] [unique_id "aryyjtFcyhWr7HDzNGlg5wAAAmE"]
[Wed Sep 30 00:56:14.449411 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.449840 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.468616 2026] [security2:error] [pid 186850:tid 187102] [client 45.175.15.230:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/led-lamp"] [unique_id "aryyjk5Phls--iYlcKj4UAAAAYQ"]
[Wed Sep 30 00:56:14.479034 2026] [security2:error] [pid 186850:tid 187002] [client 20.194.97.74:60655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wsd.php"] [unique_id "aryyjk5Phls--iYlcKj4UgAAASA"]
[Wed Sep 30 00:56:14.539175 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.539457 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.552564 2026] [security2:error] [pid 186850:tid 187096] [client 20.70.173.30:18555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/cycfruf.php"] [unique_id "aryyjk5Phls--iYlcKj4VgAAAX4"]
[Wed Sep 30 00:56:14.594479 2026] [security2:error] [pid 187269:tid 187494] [client 20.198.74.230:23917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/e219b53abbindex.php"] [unique_id "aryyjtFcyhWr7HDzNGlg7QAAAmw"]
[Wed Sep 30 00:56:14.614534 2026] [security2:error] [pid 187269:tid 187492] [client 20.219.2.60:63257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bypltspd.php"] [unique_id "aryyjtFcyhWr7HDzNGlg7wAAAmo"]
[Wed Sep 30 00:56:14.629262 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.629516 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:6934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.707110 2026] [security2:error] [pid 186850:tid 187028] [client 20.194.30.107:37550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/users.php"] [unique_id "aryyjk5Phls--iYlcKj4WwAAATo"]
[Wed Sep 30 00:56:14.769971 2026] [security2:error] [pid 187269:tid 187504] [client 20.194.97.74:60641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/media.php"] [unique_id "aryyjtFcyhWr7HDzNGlg8gAAAnY"]
[Wed Sep 30 00:56:14.770507 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.770749 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.787587 2026] [security2:error] [pid 187269:tid 187452] [client 45.138.12.32:15024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.svr.yrw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyjtFcyhWr7HDzNGlg8wAAAkI"]
[Wed Sep 30 00:56:14.818105 2026] [security2:error] [pid 186850:tid 187078] [client 20.219.2.60:19426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws81.php"] [unique_id "aryyjk5Phls--iYlcKj4aQAAAWw"]
[Wed Sep 30 00:56:14.875416 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.875671 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.902940 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.903210 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:14.925050 2026] [security2:error] [pid 187269:tid 187514] [client 52.172.226.14:20530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ms-edit.php"] [unique_id "aryyjtFcyhWr7HDzNGlg9gAAAoA"]
[Wed Sep 30 00:56:14.973651 2026] [security2:error] [pid 186850:tid 187036] [client 103.172.210.103:52730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyjk5Phls--iYlcKj4bgAAAUI"]
[Wed Sep 30 00:56:14.973753 2026] [security2:error] [pid 186850:tid 187036] [client 103.172.210.103:52730] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyjk5Phls--iYlcKj4bgAAAUI"]
[Wed Sep 30 00:56:14.987201 2026] [security2:error] [pid 187269:tid 187516] [client 4.240.25.22:21900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/ty.php"] [unique_id "aryyjtFcyhWr7HDzNGlg-QAAAoI"]
[Wed Sep 30 00:56:14.993578 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:14.993842 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.061071 2026] [security2:error] [pid 187269:tid 187512] [client 216.73.216.46:6934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyj9FcyhWr7HDzNGlg-gAAAn4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1MTQvY2FjaGU%3D
[Wed Sep 30 00:56:15.064794 2026] [security2:error] [pid 186850:tid 187043] [client 20.194.97.74:60625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/images.php"] [unique_id "aryyj05Phls--iYlcKj4cAAAAUk"]
[Wed Sep 30 00:56:15.083708 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.083957 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.096882 2026] [security2:error] [pid 187269:tid 187508] [client 20.219.2.60:63240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/shell.php"] [unique_id "aryyj9FcyhWr7HDzNGlg_AAAAno"]
[Wed Sep 30 00:56:15.174573 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.174917 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.266438 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.266694 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.337904 2026] [security2:error] [pid 187269:tid 187408] [client 91.78.101.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computer-accessories/speakers"] [unique_id "aryyj9FcyhWr7HDzNGlhCAAAAhY"]
[Wed Sep 30 00:56:15.356910 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.357169 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.371732 2026] [security2:error] [pid 187269:tid 187440] [client 20.194.97.74:52859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/ops.php"] [unique_id "aryyj9FcyhWr7HDzNGlhCgAAAjY"]
[Wed Sep 30 00:56:15.373081 2026] [security2:error] [pid 187269:tid 187436] [client 20.194.30.107:25204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/8.php"] [unique_id "aryyj9FcyhWr7HDzNGlhCwAAAjI"]
[Wed Sep 30 00:56:15.395190 2026] [security2:error] [pid 187269:tid 187524] [client 20.194.30.107:56168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/reviall.php"] [unique_id "aryyj9FcyhWr7HDzNGlhDAAAAok"]
[Wed Sep 30 00:56:15.438009 2026] [security2:error] [pid 187269:tid 187488] [client 52.172.226.14:20165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/txets.php"] [unique_id "aryyj9FcyhWr7HDzNGlhDwAAAmY"]
[Wed Sep 30 00:56:15.449018 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.449320 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.518999 2026] [security2:error] [pid 187269:tid 187443] [client 20.28.180.172:29606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/resp.php"] [unique_id "aryyj9FcyhWr7HDzNGlhEgAAAjk"]
[Wed Sep 30 00:56:15.539537 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.539869 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.598248 2026] [security2:error] [pid 187269:tid 187519] [client 223.181.30.165:7930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyj9FcyhWr7HDzNGlhFwAAAoU"]
[Wed Sep 30 00:56:15.598337 2026] [security2:error] [pid 187269:tid 187519] [client 223.181.30.165:7930] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyj9FcyhWr7HDzNGlhFwAAAoU"]
[Wed Sep 30 00:56:15.604034 2026] [security2:error] [pid 187269:tid 187484] [client 20.219.2.60:36791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/155.php"] [unique_id "aryyj9FcyhWr7HDzNGlhGgAAAmI"]
[Wed Sep 30 00:56:15.630973 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.631255 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.632950 2026] [security2:error] [pid 186850:tid 187000] [client 20.219.2.60:55864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-links-opml.php"] [unique_id "aryyj05Phls--iYlcKj4gwAAAR4"]
[Wed Sep 30 00:56:15.660935 2026] [security2:error] [pid 186850:tid 187065] [client 20.204.161.246:32423] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "impromptufridaynights.com"] [uri "/1.php"] [unique_id "aryyj05Phls--iYlcKj4hAAAAV8"]
[Wed Sep 30 00:56:15.661014 2026] [security2:error] [pid 186850:tid 187065] [client 20.204.161.246:32423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/1.php"] [unique_id "aryyj05Phls--iYlcKj4hAAAAV8"]
[Wed Sep 30 00:56:15.674661 2026] [security2:error] [pid 187269:tid 187444] [client 20.194.97.74:61344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/BDKR28WP.php"] [unique_id "aryyj9FcyhWr7HDzNGlhGwAAAjo"]
[Wed Sep 30 00:56:15.688630 2026] [security2:error] [pid 187269:tid 187528] [client 202.179.95.79:54944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyj9FcyhWr7HDzNGlhHQAAAo0"]
[Wed Sep 30 00:56:15.688708 2026] [security2:error] [pid 187269:tid 187528] [client 202.179.95.79:54944] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyj9FcyhWr7HDzNGlhHQAAAo0"]
[Wed Sep 30 00:56:15.722793 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.723253 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.728216 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 00:56:15.728478 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 00:56:15.803178 2026] [access_compat:error] [pid 187269:tid 187414] [client 47.79.13.73:42988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:15.803443 2026] [access_compat:error] [pid 187269:tid 187414] [client 47.79.13.73:42988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:15.811358 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.811630 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.825695 2026] [security2:error] [pid 187269:tid 187491] [client 20.219.14.152:43257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyj9FcyhWr7HDzNGlhIgAAAmk"]
[Wed Sep 30 00:56:15.904271 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.904641 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:15.938425 2026] [security2:error] [pid 187269:tid 187504] [client 52.172.226.14:20541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/hao.php"] [unique_id "aryyj9FcyhWr7HDzNGlhJwAAAnY"]
[Wed Sep 30 00:56:15.947816 2026] [security2:error] [pid 186850:tid 187091] [client 150.107.232.159:35554] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyj05Phls--iYlcKj4mwAAAXk"]
[Wed Sep 30 00:56:15.948397 2026] [security2:error] [pid 186850:tid 187091] [client 150.107.232.159:35554] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyj05Phls--iYlcKj4mwAAAXk"]
[Wed Sep 30 00:56:15.954071 2026] [autoindex:error] [pid 186850:tid 187059] [client 212.156.70.154:62785] AH01276: Cannot serve directory /home4/lrbkjcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:15.958282 2026] [security2:error] [pid 187269:tid 187431] [client 20.194.30.107:37537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.midimark.com"] [uri "/cabs.php"] [unique_id "aryyj9FcyhWr7HDzNGlhKgAAAi0"]
[Wed Sep 30 00:56:15.965211 2026] [security2:error] [pid 187269:tid 187495] [client 20.194.97.74:60665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/mac.php"] [unique_id "aryyj9FcyhWr7HDzNGlhKwAAAm0"]
[Wed Sep 30 00:56:15.995161 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:15.995427 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.003949 2026] [security2:error] [pid 187269:tid 187409] [client 49.36.41.37:61155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryykNFcyhWr7HDzNGlhLgAAAhc"]
[Wed Sep 30 00:56:16.004104 2026] [security2:error] [pid 187269:tid 187409] [client 49.36.41.37:61155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryykNFcyhWr7HDzNGlhLgAAAhc"]
[Wed Sep 30 00:56:16.007309 2026] [security2:error] [pid 186850:tid 187053] [client 168.107.70.193:50760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.apz.fah.mybluehost.me"] [uri "/"] [unique_id "aryykE5Phls--iYlcKj4ngAAAVM"]
[Wed Sep 30 00:56:16.087297 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.087547 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.109983 2026] [security2:error] [pid 186850:tid 187025] [client 20.219.2.60:18881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/mh.php"] [unique_id "aryykE5Phls--iYlcKj4oAAAATc"]
[Wed Sep 30 00:56:16.111052 2026] [security2:error] [pid 187269:tid 187500] [client 20.219.2.60:55862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryykNFcyhWr7HDzNGlhMQAAAnI"]
[Wed Sep 30 00:56:16.178258 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.178514 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.220721 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 00:56:16.221007 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 00:56:16.243620 2026] [security2:error] [pid 187269:tid 187525] [client 20.194.97.74:52816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wmore1.php"] [unique_id "aryykNFcyhWr7HDzNGlhNQAAAoo"]
[Wed Sep 30 00:56:16.268435 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.268693 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.317712 2026] [security2:error] [pid 186850:tid 186980] [client 20.219.14.152:43261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryykE5Phls--iYlcKj4qQAAAQo"]
[Wed Sep 30 00:56:16.342849 2026] [security2:error] [pid 186850:tid 187046] [client 103.159.192.142:58432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4qgAAAUw"]
[Wed Sep 30 00:56:16.342983 2026] [security2:error] [pid 186850:tid 187046] [client 103.159.192.142:58432] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4qgAAAUw"]
[Wed Sep 30 00:56:16.364431 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.364698 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.427573 2026] [security2:error] [pid 186850:tid 187082] [client 152.59.165.7:62693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4sAAAAXA"]
[Wed Sep 30 00:56:16.427667 2026] [security2:error] [pid 186850:tid 187082] [client 152.59.165.7:62693] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4sAAAAXA"]
[Wed Sep 30 00:56:16.430463 2026] [security2:error] [pid 187269:tid 187428] [client 52.172.226.14:20480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/33.php"] [unique_id "aryykNFcyhWr7HDzNGlhOAAAAio"]
[Wed Sep 30 00:56:16.449564 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.449824 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.504532 2026] [security2:error] [pid 187269:tid 187412] [client 4.196.65.241:2521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/b8.php"] [unique_id "aryykNFcyhWr7HDzNGlhPAAAAho"]
[Wed Sep 30 00:56:16.525952 2026] [security2:error] [pid 187269:tid 187408] [client 20.194.97.74:60611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryykNFcyhWr7HDzNGlhPQAAAhY"]
[Wed Sep 30 00:56:16.541166 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.541432 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.581004 2026] [security2:error] [pid 186850:tid 187008] [client 20.219.2.60:59625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws82.php"] [unique_id "aryykE5Phls--iYlcKj4swAAASY"]
[Wed Sep 30 00:56:16.632363 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.632622 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.723986 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.724267 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.731218 2026] [security2:error] [pid 187269:tid 187488] [client 20.204.161.246:32384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/radio.php"] [unique_id "aryykNFcyhWr7HDzNGlhQgAAAmY"]
[Wed Sep 30 00:56:16.749043 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:56:16.749316 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:57406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:56:16.797201 2026] [security2:error] [pid 187269:tid 187439] [client 20.219.14.152:43214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryykNFcyhWr7HDzNGlhQwAAAjU"]
[Wed Sep 30 00:56:16.811307 2026] [security2:error] [pid 187269:tid 187407] [client 20.194.97.74:52839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/ab.php"] [unique_id "aryykNFcyhWr7HDzNGlhRQAAAhU"]
[Wed Sep 30 00:56:16.817061 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.817342 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.861801 2026] [security2:error] [pid 187269:tid 187449] [client 4.240.25.22:20304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryykNFcyhWr7HDzNGlhRgAAAj8"]
[Wed Sep 30 00:56:16.900555 2026] [security2:error] [pid 186850:tid 187106] [client 203.122.45.246:53490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4vQAAAYg"]
[Wed Sep 30 00:56:16.900662 2026] [security2:error] [pid 186850:tid 187106] [client 203.122.45.246:53490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryykE5Phls--iYlcKj4vQAAAYg"]
[Wed Sep 30 00:56:16.903113 2026] [security2:error] [pid 186850:tid 187021] [client 52.172.226.14:20499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/adminner.php"] [unique_id "aryykE5Phls--iYlcKj4vgAAATM"]
[Wed Sep 30 00:56:16.904480 2026] [security2:error] [pid 187269:tid 187456] [client 20.70.173.30:16307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/gecko.php"] [unique_id "aryykNFcyhWr7HDzNGlhSQAAAkY"]
[Wed Sep 30 00:56:16.906500 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:16.906758 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:33008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:16.950577 2026] [security2:error] [pid 187269:tid 187418] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "aryykNFcyhWr7HDzNGlhUgAAAiA"]
[Wed Sep 30 00:56:16.957042 2026] [access_compat:error] [pid 187269:tid 187410] [client 47.79.13.53:52630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:16.957368 2026] [access_compat:error] [pid 187269:tid 187410] [client 47.79.13.53:52630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:16.991716 2026] [security2:error] [pid 187269:tid 187444] [client 216.73.216.46:33008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryykNFcyhWr7HDzNGlhVQAAAjo"]
[Wed Sep 30 00:56:17.009794 2026] [security2:error] [pid 187269:tid 187527] [client 72.255.10.32:57413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryykdFcyhWr7HDzNGlhVgAAAow"]
[Wed Sep 30 00:56:17.009939 2026] [security2:error] [pid 187269:tid 187527] [client 72.255.10.32:57413] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryykdFcyhWr7HDzNGlhVgAAAow"]
[Wed Sep 30 00:56:17.118616 2026] [security2:error] [pid 187269:tid 187451] [client 20.194.97.74:52819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/dairg.php"] [unique_id "aryykdFcyhWr7HDzNGlhWgAAAkE"]
[Wed Sep 30 00:56:17.173854 2026] [security2:error] [pid 187269:tid 187494] [client 20.219.2.60:49546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/new.php"] [unique_id "aryykdFcyhWr7HDzNGlhXQAAAmw"]
[Wed Sep 30 00:56:17.254550 2026] [security2:error] [pid 186850:tid 187107] [client 74.7.243.227:57406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryykU5Phls--iYlcKj4zwAAAYk"], referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 00:56:17.266069 2026] [security2:error] [pid 187269:tid 187480] [client 20.219.14.152:43288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/aa.php"] [unique_id "aryykdFcyhWr7HDzNGlhXwAAAl4"]
[Wed Sep 30 00:56:17.286851 2026] [security2:error] [pid 187269:tid 187483] [client 20.219.2.60:36817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-the.php"] [unique_id "aryykdFcyhWr7HDzNGlhYAAAAmE"]
[Wed Sep 30 00:56:17.387967 2026] [security2:error] [pid 187269:tid 187510] [client 20.194.97.74:38699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/z60.php"] [unique_id "aryykdFcyhWr7HDzNGlhYQAAAnw"]
[Wed Sep 30 00:56:17.447879 2026] [security2:error] [pid 186850:tid 186939] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryykU5Phls--iYlcKj41QABWFg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=8cc4f674f469d141be5b287983e54fb0
[Wed Sep 30 00:56:17.447904 2026] [security2:error] [pid 186850:tid 186939] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryykU5Phls--iYlcKj41QABWFg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=8cc4f674f469d141be5b287983e54fb0
[Wed Sep 30 00:56:17.477602 2026] [security2:error] [pid 187269:tid 187409] [client 52.172.226.14:20201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/thoms.php"] [unique_id "aryykdFcyhWr7HDzNGlhYwAAAhc"]
[Wed Sep 30 00:56:17.579772 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.580246 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.582386 2026] [security2:error] [pid 186850:tid 186982] [client 43.227.131.37:28531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryykU5Phls--iYlcKj43AAAAQw"]
[Wed Sep 30 00:56:17.582510 2026] [security2:error] [pid 186850:tid 186982] [client 43.227.131.37:28531] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryykU5Phls--iYlcKj43AAAAQw"]
[Wed Sep 30 00:56:17.584743 2026] [security2:error] [pid 187269:tid 187487] [client 20.194.30.107:25213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/b8.php"] [unique_id "aryykdFcyhWr7HDzNGlhagAAAmU"]
[Wed Sep 30 00:56:17.642006 2026] [security2:error] [pid 187269:tid 187522] [client 20.198.74.230:24157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/jj.php"] [unique_id "aryykdFcyhWr7HDzNGlhbAAAAoc"]
[Wed Sep 30 00:56:17.650818 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.651195 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.679221 2026] [security2:error] [pid 187269:tid 187351] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryykdFcyhWr7HDzNGlhbgACcEo"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D98855
[Wed Sep 30 00:56:17.682542 2026] [security2:error] [pid 187269:tid 187512] [client 20.194.97.74:52862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/imageskir.php"] [unique_id "aryykdFcyhWr7HDzNGlhbwAAAn4"]
[Wed Sep 30 00:56:17.695329 2026] [security2:error] [pid 187269:tid 187508] [client 20.204.161.246:31946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/blacks.php"] [unique_id "aryykdFcyhWr7HDzNGlhcAAAAno"]
[Wed Sep 30 00:56:17.704388 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.704647 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.732150 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.732586 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.734244 2026] [security2:error] [pid 187269:tid 187429] [client 20.219.14.152:43289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/z70.php"] [unique_id "aryykdFcyhWr7HDzNGlhdAAAAis"]
[Wed Sep 30 00:56:17.818501 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.818848 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.823073 2026] [access_compat:error] [pid 187269:tid 187422] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 00:56:17.823345 2026] [access_compat:error] [pid 187269:tid 187422] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 00:56:17.825508 2026] [security2:error] [pid 186850:tid 186997] [client 20.219.2.60:48876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/press.php"] [unique_id "aryykU5Phls--iYlcKj45AAAARs"]
[Wed Sep 30 00:56:17.909643 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.909908 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.910817 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.911068 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.957906 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.958171 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:17.966353 2026] [security2:error] [pid 187269:tid 187438] [client 20.194.97.74:38667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/backup-helper.php"] [unique_id "aryykdFcyhWr7HDzNGlhgQAAAjQ"]
[Wed Sep 30 00:56:17.991944 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:17.992204 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.000085 2026] [security2:error] [pid 187269:tid 187464] [client 52.172.226.14:20179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/a.php"] [unique_id "aryykdFcyhWr7HDzNGlhhQAAAk4"]
[Wed Sep 30 00:56:18.000166 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.000447 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.044963 2026] [security2:error] [pid 187269:tid 187495] [client 39.44.16.112:51539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhhgAAAm0"]
[Wed Sep 30 00:56:18.045844 2026] [security2:error] [pid 187269:tid 187495] [client 39.44.16.112:51539] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhhgAAAm0"]
[Wed Sep 30 00:56:18.074857 2026] [security2:error] [pid 187269:tid 187434] [client 49.43.163.212:55660] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhiAAAAjA"]
[Wed Sep 30 00:56:18.074976 2026] [security2:error] [pid 187269:tid 187434] [client 49.43.163.212:55660] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhiAAAAjA"]
[Wed Sep 30 00:56:18.087167 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.087433 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.090010 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.090279 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.160169 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.2.60:18883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws88.php"] [unique_id "aryyktFcyhWr7HDzNGlhjgAAAlU"]
[Wed Sep 30 00:56:18.180953 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.181208 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.208273 2026] [security2:error] [pid 187269:tid 187465] [client 20.219.14.152:43268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/f35.php"] [unique_id "aryyktFcyhWr7HDzNGlhkwAAAk8"]
[Wed Sep 30 00:56:18.258827 2026] [security2:error] [pid 187269:tid 187493] [client 20.194.97.74:58436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/1xmomo.php"] [unique_id "aryyktFcyhWr7HDzNGlhlgAAAms"]
[Wed Sep 30 00:56:18.270959 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.271238 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.302284 2026] [security2:error] [pid 186850:tid 186990] [client 20.219.2.60:55859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryykk5Phls--iYlcKj47QAAARQ"]
[Wed Sep 30 00:56:18.352573 2026] [security2:error] [pid 187269:tid 187517] [client 173.254.29.157:33236] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyktFcyhWr7HDzNGlhmgAAAoM"]
[Wed Sep 30 00:56:18.362790 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.363134 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.370138 2026] [security2:error] [pid 186850:tid 187086] [client 173.254.29.157:33238] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryykk5Phls--iYlcKj47wAAAXQ"]
[Wed Sep 30 00:56:18.386860 2026] [security2:error] [pid 187269:tid 187501] [client 173.254.29.157:33242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyktFcyhWr7HDzNGlhngAAAnM"]
[Wed Sep 30 00:56:18.403413 2026] [security2:error] [pid 187269:tid 187496] [client 173.254.29.157:33244] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyktFcyhWr7HDzNGlhnwAAAm4"]
[Wed Sep 30 00:56:18.407527 2026] [security2:error] [pid 186850:tid 186996] [client 49.205.105.16:14624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryykk5Phls--iYlcKj48AAAARo"]
[Wed Sep 30 00:56:18.407649 2026] [security2:error] [pid 186850:tid 186996] [client 49.205.105.16:14624] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryykk5Phls--iYlcKj48AAAARo"]
[Wed Sep 30 00:56:18.454108 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.454379 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.467621 2026] [security2:error] [pid 187269:tid 187505] [client 20.204.161.246:31939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/run.php"] [unique_id "aryyktFcyhWr7HDzNGlhpgAAAnc"]
[Wed Sep 30 00:56:18.515113 2026] [security2:error] [pid 186850:tid 187081] [client 52.172.226.14:20704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/b8.php"] [unique_id "aryykk5Phls--iYlcKj48QAAAW8"]
[Wed Sep 30 00:56:18.526556 2026] [security2:error] [pid 187269:tid 187522] [client 20.194.97.74:58471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/almafkew.php"] [unique_id "aryyktFcyhWr7HDzNGlhrAAAAoc"]
[Wed Sep 30 00:56:18.533419 2026] [access_compat:error] [pid 187269:tid 187448] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 00:56:18.533796 2026] [access_compat:error] [pid 187269:tid 187448] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 00:56:18.546101 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.546483 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.574259 2026] [security2:error] [pid 187269:tid 187361] [remote 47.128.114.183:41394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/4721/govt-announces-compensation-for-targeted-people"] [unique_id "aryyktFcyhWr7HDzNGlhsAACWFQ"]
[Wed Sep 30 00:56:18.639625 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.640037 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.685730 2026] [security2:error] [pid 187269:tid 187506] [client 20.219.14.152:43277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/adminfuns.php"] [unique_id "aryyktFcyhWr7HDzNGlhsgAAAng"]
[Wed Sep 30 00:56:18.691924 2026] [security2:error] [pid 187269:tid 187526] [client 103.24.86.56:53506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhswAAAos"]
[Wed Sep 30 00:56:18.692036 2026] [security2:error] [pid 187269:tid 187526] [client 103.24.86.56:53506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhswAAAos"]
[Wed Sep 30 00:56:18.726363 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.726642 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.770669 2026] [security2:error] [pid 187269:tid 187436] [client 20.219.2.60:63291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryyktFcyhWr7HDzNGlhuQAAAjI"]
[Wed Sep 30 00:56:18.802146 2026] [security2:error] [pid 187269:tid 187492] [client 103.159.192.142:58659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhvAAAAmo"]
[Wed Sep 30 00:56:18.802261 2026] [security2:error] [pid 187269:tid 187492] [client 103.159.192.142:58659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhvAAAAmo"]
[Wed Sep 30 00:56:18.818523 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.818957 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.827802 2026] [security2:error] [pid 187269:tid 187430] [client 20.194.97.74:60667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/database2.php"] [unique_id "aryyktFcyhWr7HDzNGlhwQAAAiw"]
[Wed Sep 30 00:56:18.841610 2026] [security2:error] [pid 187269:tid 187434] [client 20.28.180.172:29599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "aryyktFcyhWr7HDzNGlhxAAAAjA"]
[Wed Sep 30 00:56:18.909851 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:18.910251 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:18.925610 2026] [security2:error] [pid 187269:tid 187425] [client 223.235.102.107:14966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhyQAAAic"]
[Wed Sep 30 00:56:18.925731 2026] [security2:error] [pid 187269:tid 187425] [client 223.235.102.107:14966] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyktFcyhWr7HDzNGlhyQAAAic"]
[Wed Sep 30 00:56:18.999716 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.000088 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.005310 2026] [security2:error] [pid 187269:tid 187480] [client 20.204.161.246:39108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/ff.update.php"] [unique_id "aryyk9FcyhWr7HDzNGlhzgAAAl4"]
[Wed Sep 30 00:56:19.076602 2026] [security2:error] [pid 187269:tid 187501] [client 52.172.226.14:20195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/sid.php"] [unique_id "aryyk9FcyhWr7HDzNGlh0AAAAnM"]
[Wed Sep 30 00:56:19.094931 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.095376 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:24282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.114443 2026] [access_compat:error] [pid 187269:tid 187470] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:19.114699 2026] [access_compat:error] [pid 187269:tid 187470] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:19.120652 2026] [security2:error] [pid 187269:tid 187496] [client 20.194.97.74:60624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/aa.php"] [unique_id "aryyk9FcyhWr7HDzNGlh1AAAAm4"]
[Wed Sep 30 00:56:19.155718 2026] [security2:error] [pid 178882:tid 179108] [remote 176.28.255.174:0] ModSecurity: Warning. Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "36"] [id "330792"] [rev "2"] [msg "Multipart parser detected a possible unmatched boundary. This may be an impedence mismatch attack, a broken application or a broken connection.  This is not a false positive.  Check your application or client for errors."] [severity "NOTICE"] [tag "no_ar"] [hostname "www.arab-cgt.org"] [uri "/"] [unique_id "aryya9qTm83YguA3303PrQAApDg"], referer: https://www.arab-cgt.org/?page_id=7633
[Wed Sep 30 00:56:19.175061 2026] [security2:error] [pid 187269:tid 187466] [client 216.73.216.46:24282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryyk9FcyhWr7HDzNGlh1QAAAlA"]
[Wed Sep 30 00:56:19.177314 2026] [security2:error] [pid 187269:tid 187518] [client 20.219.14.152:43271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/av.php"] [unique_id "aryyk9FcyhWr7HDzNGlh1gAAAoQ"]
[Wed Sep 30 00:56:19.229247 2026] [log_config:warn] [pid 178882:tid 179239] (32)Broken pipe: [client 139.135.48.149:49152] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log, referer: https://webmail.saudinetworkers.com.sa/cpsess4951893811/3rdparty/roundcube/?_task=mail&_mbox=INBOX
[Wed Sep 30 00:56:19.229266 2026] [log_config:warn] [pid 178882:tid 179239] (32)Broken pipe: [client 139.135.48.149:49152] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log, referer: https://webmail.saudinetworkers.com.sa/cpsess4951893811/3rdparty/roundcube/?_task=mail&_mbox=INBOX
[Wed Sep 30 00:56:19.245545 2026] [security2:error] [pid 187269:tid 187442] [client 20.219.2.60:36749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp5.php"] [unique_id "aryyk9FcyhWr7HDzNGlh2AAAAjg"]
[Wed Sep 30 00:56:19.271821 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.272081 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.272528 2026] [security2:error] [pid 187269:tid 187487] [client 20.219.2.60:45319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws57.php"] [unique_id "aryyk9FcyhWr7HDzNGlh2wAAAmU"]
[Wed Sep 30 00:56:19.301907 2026] [security2:error] [pid 187269:tid 187502] [client 20.204.161.246:1346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/vpn.php"] [unique_id "aryyk9FcyhWr7HDzNGlh3QAAAnQ"]
[Wed Sep 30 00:56:19.306140 2026] [security2:error] [pid 187269:tid 187522] [client 173.254.29.157:33256] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyk9FcyhWr7HDzNGlh3wAAAoc"]
[Wed Sep 30 00:56:19.311402 2026] [security2:error] [pid 186850:tid 186946] [remote 57.141.14.110:44686] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/feed/wp-json/wp-includes/wlwmanifest.xml"] [unique_id "aryyk05Phls--iYlcKj5BQABM18"]
[Wed Sep 30 00:56:19.322719 2026] [security2:error] [pid 187269:tid 187525] [client 173.254.29.157:33258] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryyk9FcyhWr7HDzNGlh4QAAAoo"]
[Wed Sep 30 00:56:19.323402 2026] [security2:error] [pid 187269:tid 187513] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyk9FcyhWr7HDzNGlh4gAAAn8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:19.336548 2026] [security2:error] [pid 187269:tid 187474] [client 173.254.29.157:33262] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyk9FcyhWr7HDzNGlh4wAAAlg"]
[Wed Sep 30 00:56:19.354695 2026] [security2:error] [pid 187269:tid 187439] [client 173.254.29.157:33274] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyk9FcyhWr7HDzNGlh5AAAAjU"]
[Wed Sep 30 00:56:19.363352 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.363645 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.408136 2026] [security2:error] [pid 186850:tid 187095] [client 20.194.97.74:52831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/pJPoKA.php"] [unique_id "aryyk05Phls--iYlcKj5BgAAAX0"]
[Wed Sep 30 00:56:19.454017 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.454278 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.490903 2026] [security2:error] [pid 187269:tid 187452] [client 20.219.2.60:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws86.php"] [unique_id "aryyk9FcyhWr7HDzNGlh6wAAAkI"]
[Wed Sep 30 00:56:19.532010 2026] [security2:error] [pid 187269:tid 187435] [client 45.138.12.47:17018] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zhq.mfk.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyk9FcyhWr7HDzNGlh7wAAAjE"]
[Wed Sep 30 00:56:19.545176 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.545445 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.556123 2026] [security2:error] [pid 186850:tid 187087] [client 4.240.25.22:63786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryyk05Phls--iYlcKj5CQAAAXU"]
[Wed Sep 30 00:56:19.587434 2026] [access_compat:error] [pid 187269:tid 187485] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:56:19.587684 2026] [access_compat:error] [pid 187269:tid 187485] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:56:19.602602 2026] [security2:error] [pid 187269:tid 187488] [client 45.156.62.96:60512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyk9FcyhWr7HDzNGlh7QAAAmY"]
[Wed Sep 30 00:56:19.636727 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.637001 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.651781 2026] [security2:error] [pid 186850:tid 187010] [client 20.219.14.152:43206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/dex.php"] [unique_id "aryyk05Phls--iYlcKj5DAAAASg"]
[Wed Sep 30 00:56:19.683663 2026] [security2:error] [pid 187269:tid 187530] [client 20.194.97.74:52830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/24.php"] [unique_id "aryyk9FcyhWr7HDzNGlh9QAAAo8"]
[Wed Sep 30 00:56:19.706612 2026] [security2:error] [pid 187269:tid 187507] [client 105.112.178.79:38119] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fbd.ozt.mybluehost.me"] [uri "/.env"] [unique_id "aryyk9FcyhWr7HDzNGlh-AAAAnk"]
[Wed Sep 30 00:56:19.726452 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.726706 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.819931 2026] [security2:error] [pid 187269:tid 187416] [client 20.219.2.60:49541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/.qiodetme.php"] [unique_id "aryyk9FcyhWr7HDzNGlh_AAAAh4"]
[Wed Sep 30 00:56:19.889026 2026] [security2:error] [pid 187269:tid 187425] [client 20.194.30.107:14446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/mac.php"] [unique_id "aryyk9FcyhWr7HDzNGlh_gAAAic"]
[Wed Sep 30 00:56:19.898832 2026] [security2:error] [pid 187269:tid 187464] [client 52.172.226.14:20503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/bro.php"] [unique_id "aryyk9FcyhWr7HDzNGlh_wAAAk4"]
[Wed Sep 30 00:56:19.899556 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.900027 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:19.917320 2026] [security2:error] [pid 186850:tid 187058] [client 20.204.42.136:27946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/mentos.php"] [unique_id "aryyk05Phls--iYlcKj5FAAAAVg"]
[Wed Sep 30 00:56:19.962709 2026] [security2:error] [pid 187269:tid 187437] [client 20.194.97.74:58448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/42b5827789index.php"] [unique_id "aryyk9FcyhWr7HDzNGliAAAAAjM"]
[Wed Sep 30 00:56:19.984261 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:19.984738 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.002075 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.002382 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.092437 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.092700 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.101147 2026] [security2:error] [pid 186850:tid 186987] [client 135.125.104.145:54936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.104.125.135.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dennis-cooper.com"] [uri "/wp-login.php"] [unique_id "aryylE5Phls--iYlcKj5FQAAARE"]
[Wed Sep 30 00:56:20.110988 2026] [security2:error] [pid 186850:tid 187070] [client 20.219.14.152:43276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/chosen.php"] [unique_id "aryylE5Phls--iYlcKj5FwAAAWQ"]
[Wed Sep 30 00:56:20.119964 2026] [access_compat:error] [pid 187269:tid 187528] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:20.120210 2026] [access_compat:error] [pid 187269:tid 187528] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:20.183321 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.183577 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.205284 2026] [security2:error] [pid 186850:tid 186883] [remote 64.23.166.180:11630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eeh.yno.mybluehost.me"] [uri "/.env"] [unique_id "aryylE5Phls--iYlcKj5GgABGSA"]
[Wed Sep 30 00:56:20.227207 2026] [security2:error] [pid 186850:tid 187077] [client 20.194.97.74:58442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/mmq.php"] [unique_id "aryylE5Phls--iYlcKj5GwAAAWs"]
[Wed Sep 30 00:56:20.250141 2026] [security2:error] [pid 187269:tid 187496] [client 45.138.12.47:33264] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zekri-international.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryylNFcyhWr7HDzNGliDAAAAm4"]
[Wed Sep 30 00:56:20.275618 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.275881 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.317060 2026] [security2:error] [pid 186850:tid 187000] [client 20.204.161.246:47133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/alfa.php"] [unique_id "aryylE5Phls--iYlcKj5IAAAAR4"]
[Wed Sep 30 00:56:20.319554 2026] [security2:error] [pid 187269:tid 187505] [client 20.219.2.60:45335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/sodas.php"] [unique_id "aryylNFcyhWr7HDzNGliEwAAAnc"]
[Wed Sep 30 00:56:20.366368 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.366628 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.457434 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.457776 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.466620 2026] [security2:error] [pid 187269:tid 187448] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryylNFcyhWr7HDzNGliGQAAAj4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:20.507265 2026] [security2:error] [pid 187269:tid 187503] [client 20.194.97.74:58453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/fryvbbn.php"] [unique_id "aryylNFcyhWr7HDzNGliGgAAAnU"]
[Wed Sep 30 00:56:20.522313 2026] [security2:error] [pid 186850:tid 187074] [client 20.204.42.136:27392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/zejjyvzu.php"] [unique_id "aryylE5Phls--iYlcKj5IwAAAWg"]
[Wed Sep 30 00:56:20.546875 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.547171 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.563773 2026] [security2:error] [pid 187269:tid 187415] [client 223.181.60.167:9396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryylNFcyhWr7HDzNGliGwAAAh0"]
[Wed Sep 30 00:56:20.563976 2026] [security2:error] [pid 187269:tid 187415] [client 223.181.60.167:9396] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryylNFcyhWr7HDzNGliGwAAAh0"]
[Wed Sep 30 00:56:20.567452 2026] [security2:error] [pid 186850:tid 186989] [client 52.172.226.14:20696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/xwpg.php"] [unique_id "aryylE5Phls--iYlcKj5KgAAARM"]
[Wed Sep 30 00:56:20.587530 2026] [security2:error] [pid 187269:tid 187432] [client 20.219.14.152:43249] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/1.php"] [unique_id "aryylNFcyhWr7HDzNGliHwAAAi4"]
[Wed Sep 30 00:56:20.587633 2026] [security2:error] [pid 187269:tid 187432] [client 20.219.14.152:43249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/1.php"] [unique_id "aryylNFcyhWr7HDzNGliHwAAAi4"]
[Wed Sep 30 00:56:20.640334 2026] [access_compat:error] [pid 187269:tid 187486] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:56:20.640784 2026] [access_compat:error] [pid 187269:tid 187486] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:56:20.641487 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.641918 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.671926 2026] [security2:error] [pid 187269:tid 187409] [client 20.194.30.107:17512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/gecko.php"] [unique_id "aryylNFcyhWr7HDzNGliJQAAAhc"]
[Wed Sep 30 00:56:20.691298 2026] [security2:error] [pid 187269:tid 187532] [client 4.196.65.241:53107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wpxml.php"] [unique_id "aryylNFcyhWr7HDzNGliJwAAApE"]
[Wed Sep 30 00:56:20.730631 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.730900 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.771705 2026] [security2:error] [pid 187269:tid 187506] [client 45.138.12.47:33292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.zekri-international.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryylNFcyhWr7HDzNGliLQAAAng"]
[Wed Sep 30 00:56:20.772287 2026] [access_compat:error] [pid 186850:tid 187066] [client 47.79.13.37:46922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:20.772551 2026] [access_compat:error] [pid 186850:tid 187066] [client 47.79.13.37:46922] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:20.786882 2026] [security2:error] [pid 187269:tid 187508] [client 20.194.97.74:38675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/ff.update.php"] [unique_id "aryylNFcyhWr7HDzNGliMgAAAno"]
[Wed Sep 30 00:56:20.814709 2026] [security2:error] [pid 186850:tid 186996] [client 20.219.2.60:58451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/yw5bi63u.php"] [unique_id "aryylE5Phls--iYlcKj5MwAAARo"]
[Wed Sep 30 00:56:20.820343 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.820608 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:20.913492 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:20.913972 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.005601 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.006051 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.057081 2026] [security2:error] [pid 187269:tid 187437] [client 20.219.14.152:43305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/radio.php"] [unique_id "aryyldFcyhWr7HDzNGliQQAAAjM"]
[Wed Sep 30 00:56:21.066916 2026] [security2:error] [pid 187269:tid 187417] [client 20.194.97.74:38697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/lzlhihzi.php"] [unique_id "aryyldFcyhWr7HDzNGliQgAAAh8"]
[Wed Sep 30 00:56:21.075531 2026] [security2:error] [pid 187269:tid 187414] [client 52.172.226.14:20690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/radio.php"] [unique_id "aryyldFcyhWr7HDzNGliQwAAAhw"]
[Wed Sep 30 00:56:21.099321 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.099759 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:24963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.100901 2026] [security2:error] [pid 187269:tid 187458] [client 20.219.2.60:19413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/vx.php"] [unique_id "aryyldFcyhWr7HDzNGliRQAAAkg"]
[Wed Sep 30 00:56:21.131034 2026] [access_compat:error] [pid 187269:tid 187408] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:21.131300 2026] [access_compat:error] [pid 187269:tid 187408] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:21.144650 2026] [security2:error] [pid 187269:tid 187501] [client 4.240.25.22:18770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/admin.php"] [unique_id "aryyldFcyhWr7HDzNGliRwAAAnM"]
[Wed Sep 30 00:56:21.184787 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.185106 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.274842 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.275109 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.339451 2026] [security2:error] [pid 187269:tid 187525] [client 20.204.42.136:27949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/pqfpcelx.php"] [unique_id "aryyldFcyhWr7HDzNGliUwAAAoo"]
[Wed Sep 30 00:56:21.364422 2026] [security2:error] [pid 187269:tid 187472] [client 20.219.2.60:58454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws81.php"] [unique_id "aryyldFcyhWr7HDzNGliVQAAAlY"]
[Wed Sep 30 00:56:21.364547 2026] [security2:error] [pid 187269:tid 187406] [client 20.194.97.74:38663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/bfdghfgv.php"] [unique_id "aryyldFcyhWr7HDzNGliVgAAAhQ"]
[Wed Sep 30 00:56:21.368099 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.368390 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.459641 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.459942 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.513027 2026] [security2:error] [pid 187269:tid 187429] [client 216.73.216.46:24963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyldFcyhWr7HDzNGliWgAAAis"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mzkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTE%3D
[Wed Sep 30 00:56:21.514997 2026] [security2:error] [pid 187269:tid 187495] [client 106.214.2.47:8520] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyldFcyhWr7HDzNGliWwAAAm0"]
[Wed Sep 30 00:56:21.515131 2026] [security2:error] [pid 187269:tid 187495] [client 106.214.2.47:8520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyldFcyhWr7HDzNGliWwAAAm0"]
[Wed Sep 30 00:56:21.534870 2026] [security2:error] [pid 187269:tid 187529] [client 20.219.14.152:43273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/blacks.php"] [unique_id "aryyldFcyhWr7HDzNGliXQAAAo4"]
[Wed Sep 30 00:56:21.548175 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.548452 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.560691 2026] [security2:error] [pid 187269:tid 187409] [client 52.172.226.14:20698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ccc.php"] [unique_id "aryyldFcyhWr7HDzNGliXwAAAhc"]
[Wed Sep 30 00:56:21.587541 2026] [access_compat:error] [pid 187269:tid 187511] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:21.587818 2026] [access_compat:error] [pid 187269:tid 187511] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:21.593924 2026] [access_compat:error] [pid 187269:tid 187462] [client 47.79.13.1:46868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:21.594196 2026] [access_compat:error] [pid 187269:tid 187462] [client 47.79.13.1:46868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:21.621784 2026] [security2:error] [pid 187269:tid 187532] [client 151.244.51.112:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyldFcyhWr7HDzNGliYwAAApE"]
[Wed Sep 30 00:56:21.637696 2026] [security2:error] [pid 187269:tid 187412] [client 20.194.97.74:38665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/Dss.php"] [unique_id "aryyldFcyhWr7HDzNGliZQAAAho"]
[Wed Sep 30 00:56:21.640966 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.641206 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.730270 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.730537 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.821144 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.821414 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.897691 2026] [security2:error] [pid 187269:tid 187485] [client 20.219.2.60:55828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/mh.php"] [unique_id "aryyldFcyhWr7HDzNGlibQAAAmM"]
[Wed Sep 30 00:56:21.911439 2026] [security2:error] [pid 187269:tid 187507] [client 20.194.97.74:58469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/uploaxa1.php"] [unique_id "aryyldFcyhWr7HDzNGlibwAAAnk"]
[Wed Sep 30 00:56:21.913252 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:21.913505 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:21.984859 2026] [security2:error] [pid 187269:tid 187419] [client 20.219.2.60:18874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/dass.php"] [unique_id "aryyldFcyhWr7HDzNGlicAAAAiE"]
[Wed Sep 30 00:56:22.002757 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.003051 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.009752 2026] [security2:error] [pid 187269:tid 187444] [client 20.219.14.152:43283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/alfa.php"] [unique_id "aryyltFcyhWr7HDzNGlicgAAAjo"]
[Wed Sep 30 00:56:22.015236 2026] [security2:error] [pid 186850:tid 187094] [client 45.138.12.32:29464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.syc.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryylk5Phls--iYlcKj5SAAAAXw"]
[Wed Sep 30 00:56:22.094788 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.095321 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.105686 2026] [security2:error] [pid 186850:tid 187062] [client 52.172.226.14:20197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wmore1.php"] [unique_id "aryylk5Phls--iYlcKj5SQAAAVw"]
[Wed Sep 30 00:56:22.112621 2026] [security2:error] [pid 187269:tid 187443] [client 2.59.14.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyltFcyhWr7HDzNGliewAAAjk"]
[Wed Sep 30 00:56:22.126332 2026] [access_compat:error] [pid 187269:tid 187437] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:22.126589 2026] [access_compat:error] [pid 187269:tid 187437] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:22.132687 2026] [security2:error] [pid 187269:tid 187457] [client 116.72.182.19:56888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyltFcyhWr7HDzNGlifwAAAkc"]
[Wed Sep 30 00:56:22.132784 2026] [security2:error] [pid 187269:tid 187457] [client 116.72.182.19:56888] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyltFcyhWr7HDzNGlifwAAAkc"]
[Wed Sep 30 00:56:22.185898 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.186178 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.204166 2026] [security2:error] [pid 187269:tid 187450] [client 20.194.97.74:52833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/uploartg.php"] [unique_id "aryyltFcyhWr7HDzNGligwAAAkA"]
[Wed Sep 30 00:56:22.270453 2026] [security2:error] [pid 186850:tid 186891] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5TAABMSg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=f60eb9e740b052f46271a4f23a8e695d
[Wed Sep 30 00:56:22.270478 2026] [security2:error] [pid 186850:tid 186891] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5TAABMSg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=f60eb9e740b052f46271a4f23a8e695d
[Wed Sep 30 00:56:22.278286 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.278612 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.373055 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.373507 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.398164 2026] [security2:error] [pid 186850:tid 187036] [client 20.219.2.60:36842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-access.php"] [unique_id "aryylk5Phls--iYlcKj5TwAAAUI"]
[Wed Sep 30 00:56:22.429194 2026] [security2:error] [pid 187269:tid 187523] [client 20.219.2.60:55865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws88.php"] [unique_id "aryyltFcyhWr7HDzNGlijwAAAog"]
[Wed Sep 30 00:56:22.464323 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.464769 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.482140 2026] [security2:error] [pid 187269:tid 187459] [client 20.219.14.152:43215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyltFcyhWr7HDzNGlilQAAAkk"]
[Wed Sep 30 00:56:22.489774 2026] [autoindex:error] [pid 186850:tid 187049] [client 159.65.25.222:52778] AH01276: Cannot serve directory /home4/vpdyugmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:22.523405 2026] [security2:error] [pid 187269:tid 187503] [client 20.194.97.74:38694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/bgbagbcw.php"] [unique_id "aryyltFcyhWr7HDzNGlimAAAAnU"]
[Wed Sep 30 00:56:22.550299 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.551077 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.582329 2026] [security2:error] [pid 187269:tid 187401] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env"] [unique_id "aryyltFcyhWr7HDzNGlingACjnw"]
[Wed Sep 30 00:56:22.582710 2026] [security2:error] [pid 187269:tid 187277] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.docker/.env"] [unique_id "aryyltFcyhWr7HDzNGlinwACjgA"]
[Wed Sep 30 00:56:22.582710 2026] [security2:error] [pid 187269:tid 187404] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aryyltFcyhWr7HDzNGlioAACjn8"]
[Wed Sep 30 00:56:22.583877 2026] [security2:error] [pid 187269:tid 187404] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.aws/.env"] [unique_id "aryyltFcyhWr7HDzNGliqAACjn8"]
[Wed Sep 30 00:56:22.583973 2026] [security2:error] [pid 187269:tid 187283] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.aws/credentials.bak"] [unique_id "aryyltFcyhWr7HDzNGlipQACjgY"]
[Wed Sep 30 00:56:22.612553 2026] [security2:error] [pid 187269:tid 187489] [client 52.172.226.14:20163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/function.php"] [unique_id "aryyltFcyhWr7HDzNGliswAAAmc"]
[Wed Sep 30 00:56:22.636353 2026] [access_compat:error] [pid 187269:tid 187447] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 00:56:22.636786 2026] [access_compat:error] [pid 187269:tid 187447] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 00:56:22.659002 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.659463 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.663354 2026] [autoindex:error] [pid 186850:tid 187044] [client 20.204.161.246:0] AH01276: Cannot serve directory /home2/imprompt/public_html/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:22.683726 2026] [security2:error] [pid 186850:tid 186969] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5WgABLHY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=17332&sid=0c00c91fc995259e2ea74d05c409444e
[Wed Sep 30 00:56:22.683776 2026] [security2:error] [pid 186850:tid 186969] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5WgABLHY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=17332&sid=0c00c91fc995259e2ea74d05c409444e
[Wed Sep 30 00:56:22.697742 2026] [security2:error] [pid 187269:tid 187472] [client 114.119.158.50:20729] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "premiopro.com"] [uri "/property/ennea-villa"] [unique_id "aryyltFcyhWr7HDzNGlitwAAAlY"], referer: https://premiopro.com/property/amalthea-villa
[Wed Sep 30 00:56:22.734513 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.734767 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.756290 2026] [security2:error] [pid 186850:tid 186854] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5XQABaQM"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9ef6a338a253b9b213c7c244e6130df0
[Wed Sep 30 00:56:22.756331 2026] [security2:error] [pid 186850:tid 186854] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryylk5Phls--iYlcKj5XQABaQM"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9ef6a338a253b9b213c7c244e6130df0
[Wed Sep 30 00:56:22.803751 2026] [security2:error] [pid 186850:tid 187070] [client 20.194.97.74:60643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/tegubsiu.php"] [unique_id "aryylk5Phls--iYlcKj5YAAAAWQ"]
[Wed Sep 30 00:56:22.822344 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.822605 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.914437 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:22.914697 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:22.914783 2026] [security2:error] [pid 187269:tid 187468] [client 20.204.161.246:47145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/w.php"] [unique_id "aryyltFcyhWr7HDzNGliugAAAlI"]
[Wed Sep 30 00:56:22.958994 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.14.152:43221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/b8.php"] [unique_id "aryyltFcyhWr7HDzNGlivgAAAjk"]
[Wed Sep 30 00:56:22.970178 2026] [security2:error] [pid 187269:tid 187294] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env.bak"] [unique_id "aryyltFcyhWr7HDzNGliwQACTxE"]
[Wed Sep 30 00:56:22.970184 2026] [security2:error] [pid 187269:tid 187295] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env.backup"] [unique_id "aryyltFcyhWr7HDzNGliwwACTxI"]
[Wed Sep 30 00:56:22.971845 2026] [security2:error] [pid 187269:tid 187456] [client 20.219.2.60:55818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws86.php"] [unique_id "aryyltFcyhWr7HDzNGlixQAAAkY"]
[Wed Sep 30 00:56:22.999564 2026] [security2:error] [pid 187269:tid 187519] [client 45.138.12.32:29496] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.juu.mzp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyltFcyhWr7HDzNGlizAAAAoU"]
[Wed Sep 30 00:56:23.004087 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.004347 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.035578 2026] [security2:error] [pid 187269:tid 187414] [client 20.204.161.246:39496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/lzlhihzi.php"] [unique_id "aryyl9FcyhWr7HDzNGli0AAAAhw"]
[Wed Sep 30 00:56:23.038297 2026] [security2:error] [pid 186850:tid 187079] [client 14.102.51.159:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyl05Phls--iYlcKj5ZAAAAW0"]
[Wed Sep 30 00:56:23.041962 2026] [security2:error] [pid 187269:tid 187458] [client 188.250.13.93:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyl9FcyhWr7HDzNGli0gAAAkg"]
[Wed Sep 30 00:56:23.042266 2026] [security2:error] [pid 187269:tid 187408] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyl9FcyhWr7HDzNGli0wAAAhY"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:23.072317 2026] [security2:error] [pid 186850:tid 187103] [client 213.136.69.135:50128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-bindings-source.php"] [unique_id "aryyl05Phls--iYlcKj5ZQAAAYU"], referer: binance.com
[Wed Sep 30 00:56:23.080604 2026] [security2:error] [pid 186850:tid 187000] [client 20.194.97.74:63024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/xxw.php"] [unique_id "aryyl05Phls--iYlcKj5ZgAAAR4"]
[Wed Sep 30 00:56:23.095890 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.096201 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.109619 2026] [security2:error] [pid 187269:tid 187482] [client 52.172.226.14:20218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ab.php"] [unique_id "aryyl9FcyhWr7HDzNGli2AAAAmA"]
[Wed Sep 30 00:56:23.114821 2026] [security2:error] [pid 186850:tid 187090] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyl05Phls--iYlcKj5agAAAXg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:23.128466 2026] [security2:error] [pid 187269:tid 187473] [client 20.219.2.60:19376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/s.php"] [unique_id "aryyl9FcyhWr7HDzNGli2wAAAlc"]
[Wed Sep 30 00:56:23.147349 2026] [access_compat:error] [pid 187269:tid 187452] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3Q=
[Wed Sep 30 00:56:23.147606 2026] [access_compat:error] [pid 187269:tid 187452] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3Q=
[Wed Sep 30 00:56:23.166181 2026] [security2:error] [pid 187269:tid 187495] [client 155.190.6.18:52332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyl9FcyhWr7HDzNGli4QAAAm0"]
[Wed Sep 30 00:56:23.189860 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.190294 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.229031 2026] [security2:error] [pid 186850:tid 187073] [client 20.28.180.172:29590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/XrdbXydefault.php"] [unique_id "aryyl05Phls--iYlcKj5cQAAAWc"]
[Wed Sep 30 00:56:23.276061 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.276331 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.293839 2026] [security2:error] [pid 187269:tid 187305] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env.old"] [unique_id "aryyl9FcyhWr7HDzNGli7AACTxw"]
[Wed Sep 30 00:56:23.315874 2026] [security2:error] [pid 187269:tid 187307] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/.env.php"] [unique_id "aryyl9FcyhWr7HDzNGli7gACTx4"]
[Wed Sep 30 00:56:23.358666 2026] [security2:error] [pid 187269:tid 187442] [client 20.194.97.74:58470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/router.php"] [unique_id "aryyl9FcyhWr7HDzNGli9wAAAjg"]
[Wed Sep 30 00:56:23.361449 2026] [security2:error] [pid 187269:tid 187419] [client 116.197.133.25:54649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyl9FcyhWr7HDzNGli-AAAAiE"]
[Wed Sep 30 00:56:23.361585 2026] [security2:error] [pid 187269:tid 187419] [client 116.197.133.25:54649] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyl9FcyhWr7HDzNGli-AAAAiE"]
[Wed Sep 30 00:56:23.372848 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.373303 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.386180 2026] [security2:error] [pid 186850:tid 187006] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryyl05Phls--iYlcKj5dgAAASQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:23.445886 2026] [security2:error] [pid 187269:tid 187493] [client 20.219.14.152:43292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/xex.php"] [unique_id "aryyl9FcyhWr7HDzNGljAAAAAms"]
[Wed Sep 30 00:56:23.449250 2026] [security2:error] [pid 187269:tid 187495] [client 155.190.6.18:52332] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyl9FcyhWr7HDzNGli4QAAAm0"]
[Wed Sep 30 00:56:23.460713 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.461116 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.511607 2026] [security2:error] [pid 187269:tid 187407] [client 187.102.44.66:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyl9FcyhWr7HDzNGljCAAAAhU"]
[Wed Sep 30 00:56:23.513453 2026] [security2:error] [pid 187269:tid 187315] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env.swp"] [unique_id "aryyl9FcyhWr7HDzNGljCwACTyY"]
[Wed Sep 30 00:56:23.551233 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.551489 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.557461 2026] [security2:error] [pid 187269:tid 187463] [client 20.219.2.60:48851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/vx.php"] [unique_id "aryyl9FcyhWr7HDzNGljFQAAAk0"]
[Wed Sep 30 00:56:23.565364 2026] [security2:error] [pid 186850:tid 186950] [remote 91.244.197.105:44732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "aryyl05Phls--iYlcKj5fgABamM"]
[Wed Sep 30 00:56:23.588442 2026] [access_compat:error] [pid 187269:tid 187500] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 00:56:23.588900 2026] [access_compat:error] [pid 187269:tid 187500] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 00:56:23.635976 2026] [security2:error] [pid 187269:tid 187410] [client 20.194.97.74:58459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/cibrkysaeng.php"] [unique_id "aryyl9FcyhWr7HDzNGljGgAAAhg"]
[Wed Sep 30 00:56:23.636948 2026] [security2:error] [pid 187269:tid 187425] [client 20.204.161.246:62688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyl9FcyhWr7HDzNGljGwAAAic"]
[Wed Sep 30 00:56:23.645475 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.645798 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.662067 2026] [security2:error] [pid 186850:tid 186982] [client 37.41.16.35:59708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyl05Phls--iYlcKj5gwAAAQw"]
[Wed Sep 30 00:56:23.662220 2026] [security2:error] [pid 186850:tid 186982] [client 37.41.16.35:59708] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyl05Phls--iYlcKj5gwAAAQw"]
[Wed Sep 30 00:56:23.676250 2026] [security2:error] [pid 187269:tid 187320] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/.env~"] [unique_id "aryyl9FcyhWr7HDzNGljHgACTys"]
[Wed Sep 30 00:56:23.721923 2026] [security2:error] [pid 187269:tid 187476] [client 168.107.70.193:53533] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "ocw.png.mybluehost.me"] [uri "/"] [unique_id "aryyl9FcyhWr7HDzNGljKQAAAlo"]
[Wed Sep 30 00:56:23.733423 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.733898 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.747498 2026] [security2:error] [pid 186850:tid 186971] [remote 91.244.197.105:44732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/wp-login.php"] [unique_id "aryyl05Phls--iYlcKj5hAABV3g"], referer: https://yearlingrv.com/wp-login.php
[Wed Sep 30 00:56:23.829605 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.830059 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.907776 2026] [security2:error] [pid 186850:tid 187008] [client 52.172.226.14:20536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/css.php"] [unique_id "aryyl05Phls--iYlcKj5kQAAASY"]
[Wed Sep 30 00:56:23.909699 2026] [security2:error] [pid 186850:tid 186851] [remote 91.244.197.105:44732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yearlingrv.com"] [uri "/xmlrpc.php"] [unique_id "aryyl05Phls--iYlcKj5jwABRwA"]
[Wed Sep 30 00:56:23.909902 2026] [security2:error] [pid 186850:tid 187041] [client 91.244.197.105:44732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yearlingrv.com"] [uri "/xmlrpc.php"] [unique_id "aryyl05Phls--iYlcKj5jwABRwA"]
[Wed Sep 30 00:56:23.912103 2026] [security2:error] [pid 187269:tid 187464] [client 20.219.14.152:43247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ass.php"] [unique_id "aryyl9FcyhWr7HDzNGljNwAAAk4"]
[Wed Sep 30 00:56:23.919114 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:23.919403 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:23.927843 2026] [security2:error] [pid 187269:tid 187435] [client 20.194.97.74:60612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.97.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lasvegasrealtor360.com"] [uri "/wp-wpbak.php"] [unique_id "aryyl9FcyhWr7HDzNGljOAAAAjE"]
[Wed Sep 30 00:56:24.005865 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.006123 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.085818 2026] [security2:error] [pid 187269:tid 187448] [client 20.219.2.60:63292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/dass.php"] [unique_id "aryymNFcyhWr7HDzNGljPAAAAj4"]
[Wed Sep 30 00:56:24.096248 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.096523 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.097019 2026] [access_compat:error] [pid 187269:tid 187532] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:56:24.097485 2026] [access_compat:error] [pid 187269:tid 187532] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:56:24.157248 2026] [security2:error] [pid 187269:tid 187497] [client 20.219.2.60:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/kj.php"] [unique_id "aryymNFcyhWr7HDzNGljSQAAAm8"]
[Wed Sep 30 00:56:24.187158 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.187423 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.278880 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.279141 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.319478 2026] [security2:error] [pid 187269:tid 187452] [client 4.240.25.22:18706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-login.php"] [unique_id "aryymNFcyhWr7HDzNGljSwAAAkI"]
[Wed Sep 30 00:56:24.327907 2026] [security2:error] [pid 187269:tid 187337] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/api/phpinfo.php"] [unique_id "aryymNFcyhWr7HDzNGljUgACTzw"]
[Wed Sep 30 00:56:24.328366 2026] [security2:error] [pid 187269:tid 187333] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/application/.env"] [unique_id "aryymNFcyhWr7HDzNGljTQACTzg"]
[Wed Sep 30 00:56:24.328455 2026] [security2:error] [pid 187269:tid 187335] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/api/.env"] [unique_id "aryymNFcyhWr7HDzNGljUAACTzo"]
[Wed Sep 30 00:56:24.328471 2026] [security2:error] [pid 187269:tid 187338] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/app/.env"] [unique_id "aryymNFcyhWr7HDzNGljTwACTz0"]
[Wed Sep 30 00:56:24.362504 2026] [security2:error] [pid 186850:tid 186993] [client 116.193.128.26:54762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryymE5Phls--iYlcKj5mgAAARc"]
[Wed Sep 30 00:56:24.362646 2026] [security2:error] [pid 186850:tid 186993] [client 116.193.128.26:54762] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryymE5Phls--iYlcKj5mgAAARc"]
[Wed Sep 30 00:56:24.374580 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.375169 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.392109 2026] [security2:error] [pid 187269:tid 187519] [client 20.219.14.152:43208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wsd.php"] [unique_id "aryymNFcyhWr7HDzNGljVAAAAoU"]
[Wed Sep 30 00:56:24.412145 2026] [fcgid:warn] [pid 187269:tid 187414] (70014)End of file found: [client 199.45.154.118:45692] mod_fcgid: can't get data from http client
[Wed Sep 30 00:56:24.465026 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.465478 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.553065 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.553370 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.597961 2026] [security2:error] [pid 187269:tid 187423] [client 20.198.74.230:24155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wp-trackback.php"] [unique_id "aryymNFcyhWr7HDzNGljWQAAAiU"]
[Wed Sep 30 00:56:24.632693 2026] [security2:error] [pid 187269:tid 187518] [client 20.219.2.60:49566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/s.php"] [unique_id "aryymNFcyhWr7HDzNGljWgAAAoQ"]
[Wed Sep 30 00:56:24.642708 2026] [access_compat:error] [pid 187269:tid 187436] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:56:24.642993 2026] [access_compat:error] [pid 187269:tid 187436] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:56:24.643246 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.643545 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.660096 2026] [security2:error] [pid 186850:tid 186882] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryymE5Phls--iYlcKj5pAABex8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=dddb729e276a3136a1319b49ada7fabd
[Wed Sep 30 00:56:24.660124 2026] [security2:error] [pid 186850:tid 186882] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryymE5Phls--iYlcKj5pAABex8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=dddb729e276a3136a1319b49ada7fabd
[Wed Sep 30 00:56:24.725160 2026] [security2:error] [pid 187269:tid 187469] [client 20.204.161.246:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/robot.php"] [unique_id "aryymNFcyhWr7HDzNGljYQAAAlM"]
[Wed Sep 30 00:56:24.735316 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.735586 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.739770 2026] [security2:error] [pid 187269:tid 187346] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/backend/.env"] [unique_id "aryymNFcyhWr7HDzNGljagACMEU"]
[Wed Sep 30 00:56:24.739823 2026] [security2:error] [pid 187269:tid 187345] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/backup/.env"] [unique_id "aryymNFcyhWr7HDzNGljawACMEQ"]
[Wed Sep 30 00:56:24.739943 2026] [security2:error] [pid 187269:tid 187347] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/back/.env"] [unique_id "aryymNFcyhWr7HDzNGljZAACMEY"]
[Wed Sep 30 00:56:24.740041 2026] [security2:error] [pid 187269:tid 187348] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/cms/.env"] [unique_id "aryymNFcyhWr7HDzNGljZgACMEc"]
[Wed Sep 30 00:56:24.766461 2026] [security2:error] [pid 186850:tid 187014] [client 20.204.161.246:39136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/bfdghfgv.php"] [unique_id "aryymE5Phls--iYlcKj5qAAAASw"]
[Wed Sep 30 00:56:24.779601 2026] [security2:error] [pid 186850:tid 187010] [client 52.172.226.14:20521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryymE5Phls--iYlcKj5qQAAASg"]
[Wed Sep 30 00:56:24.815101 2026] [security2:error] [pid 187269:tid 187413] [client 152.59.169.65:49318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryymNFcyhWr7HDzNGljbwAAAhs"]
[Wed Sep 30 00:56:24.815312 2026] [security2:error] [pid 187269:tid 187413] [client 152.59.169.65:49318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryymNFcyhWr7HDzNGljbwAAAhs"]
[Wed Sep 30 00:56:24.827160 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.827496 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.829375 2026] [security2:error] [pid 187269:tid 187357] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/config.php"] [unique_id "aryymNFcyhWr7HDzNGljcwACMFA"]
[Wed Sep 30 00:56:24.830540 2026] [security2:error] [pid 187269:tid 187358] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/config/.env"] [unique_id "aryymNFcyhWr7HDzNGljcQACMFE"]
[Wed Sep 30 00:56:24.839215 2026] [security2:error] [pid 187269:tid 187483] [client 20.219.14.152:43237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/BDKR28WP.php"] [unique_id "aryymNFcyhWr7HDzNGljeQAAAmE"]
[Wed Sep 30 00:56:24.859939 2026] [security2:error] [pid 186850:tid 187095] [client 182.69.182.151:14156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryymE5Phls--iYlcKj5rAAAAX0"]
[Wed Sep 30 00:56:24.860120 2026] [security2:error] [pid 186850:tid 187095] [client 182.69.182.151:14156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryymE5Phls--iYlcKj5rAAAAX0"]
[Wed Sep 30 00:56:24.920864 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:24.921038 2026] [security2:error] [pid 187269:tid 187363] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/core/.env"] [unique_id "aryymNFcyhWr7HDzNGljhAACMFY"]
[Wed Sep 30 00:56:24.921344 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:24.942156 2026] [security2:error] [pid 186850:tid 187045] [client 45.188.181.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryymE5Phls--iYlcKj5rwAAAUs"]
[Wed Sep 30 00:56:25.001761 2026] [security2:error] [pid 187269:tid 187442] [client 20.194.30.107:33996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/one.php"] [unique_id "aryymdFcyhWr7HDzNGljiwAAAjg"]
[Wed Sep 30 00:56:25.009015 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.009288 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.011541 2026] [security2:error] [pid 187269:tid 187362] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/database.sql"] [unique_id "aryymdFcyhWr7HDzNGljjQACMFU"]
[Wed Sep 30 00:56:25.032069 2026] [security2:error] [pid 187269:tid 187367] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/dev/.env"] [unique_id "aryymdFcyhWr7HDzNGljjgACMFo"]
[Wed Sep 30 00:56:25.035762 2026] [security2:error] [pid 186850:tid 187030] [client 20.204.42.136:53970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/df.php"] [unique_id "aryymU5Phls--iYlcKj5swAAATw"]
[Wed Sep 30 00:56:25.089846 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:56:25.090124 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:56:25.185772 2026] [security2:error] [pid 187269:tid 187421] [client 20.219.2.60:45372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/kj.php"] [unique_id "aryymdFcyhWr7HDzNGljngAAAiM"]
[Wed Sep 30 00:56:25.254963 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.255234 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.276194 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.2.60:36815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/hots.php"] [unique_id "aryymdFcyhWr7HDzNGljoQAAAlU"]
[Wed Sep 30 00:56:25.304208 2026] [security2:error] [pid 186850:tid 187042] [client 52.172.226.14:20502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryymU5Phls--iYlcKj5ugAAAUg"]
[Wed Sep 30 00:56:25.307064 2026] [security2:error] [pid 187269:tid 187528] [client 20.219.14.152:43251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wmore1.php"] [unique_id "aryymdFcyhWr7HDzNGljogAAAo0"]
[Wed Sep 30 00:56:25.345044 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.345328 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.351016 2026] [security2:error] [pid 187269:tid 187447] [client 20.204.161.246:47115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/sss.php"] [unique_id "aryymdFcyhWr7HDzNGljowAAAj0"]
[Wed Sep 30 00:56:25.357951 2026] [security2:error] [pid 186850:tid 186888] [remote 84.69.170.203:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryymU5Phls--iYlcKj5uwABHyU"]
[Wed Sep 30 00:56:25.357983 2026] [security2:error] [pid 186850:tid 186888] [remote 84.69.170.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryymU5Phls--iYlcKj5uwABHyU"]
[Wed Sep 30 00:56:25.361737 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:18845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws83.php"] [unique_id "aryymU5Phls--iYlcKj5vgAAAU4"]
[Wed Sep 30 00:56:25.403524 2026] [security2:error] [pid 186850:tid 186989] [client 45.138.12.47:33346] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zbj.zav.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryymU5Phls--iYlcKj5vwAAARM"]
[Wed Sep 30 00:56:25.438289 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.438583 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.451282 2026] [security2:error] [pid 186850:tid 186988] [client 20.28.180.172:34294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/84300819ebindex.php"] [unique_id "aryymU5Phls--iYlcKj5xAAAARI"]
[Wed Sep 30 00:56:25.495391 2026] [access_compat:error] [pid 187269:tid 187448] [client 47.79.13.175:45392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:25.495654 2026] [access_compat:error] [pid 187269:tid 187448] [client 47.79.13.175:45392] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:25.514396 2026] [security2:error] [pid 187269:tid 187455] [client 103.172.210.103:53281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryymdFcyhWr7HDzNGljrQAAAkU"]
[Wed Sep 30 00:56:25.514534 2026] [security2:error] [pid 187269:tid 187455] [client 103.172.210.103:53281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryymdFcyhWr7HDzNGljrQAAAkU"]
[Wed Sep 30 00:56:25.528934 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.529203 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.619375 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.619635 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.655513 2026] [access_compat:error] [pid 187269:tid 187491] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L3Rhc2s=
[Wed Sep 30 00:56:25.656020 2026] [access_compat:error] [pid 187269:tid 187491] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L3Rhc2s=
[Wed Sep 30 00:56:25.692964 2026] [access_compat:error] [pid 187269:tid 187517] [client 47.79.13.28:51178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:25.693218 2026] [access_compat:error] [pid 187269:tid 187517] [client 47.79.13.28:51178] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:25.711682 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.712136 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.728602 2026] [security2:error] [pid 187269:tid 187430] [client 20.219.2.60:58433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws83.php"] [unique_id "aryymdFcyhWr7HDzNGljuAAAAiw"]
[Wed Sep 30 00:56:25.774524 2026] [security2:error] [pid 187269:tid 187482] [client 20.219.14.152:43312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/z60.php"] [unique_id "aryymdFcyhWr7HDzNGljuQAAAmA"]
[Wed Sep 30 00:56:25.801928 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.802204 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.892273 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.892550 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:25.953971 2026] [security2:error] [pid 187269:tid 187459] [client 52.172.226.14:20178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-links-opml.php"] [unique_id "aryymdFcyhWr7HDzNGljvAAAAkk"]
[Wed Sep 30 00:56:25.983720 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:25.984003 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.016263 2026] [security2:error] [pid 186850:tid 186879] [remote 84.69.170.203:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryymk5Phls--iYlcKj52wABWhw"], referer: https://torquayfans.com/memberlist.php?sid=0cd837c3c9c0b232c869851ac569987b&start=50
[Wed Sep 30 00:56:26.042585 2026] [security2:error] [pid 187269:tid 187486] [client 223.181.30.165:16266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGljvQAAAmQ"]
[Wed Sep 30 00:56:26.042689 2026] [security2:error] [pid 187269:tid 187486] [client 223.181.30.165:16266] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGljvQAAAmQ"]
[Wed Sep 30 00:56:26.074977 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.075240 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.111346 2026] [access_compat:error] [pid 187269:tid 187411] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:56:26.111612 2026] [access_compat:error] [pid 187269:tid 187411] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 00:56:26.166551 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.166827 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.192167 2026] [security2:error] [pid 187269:tid 187381] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/phpinfo.php"] [unique_id "aryymtFcyhWr7HDzNGljygACL2g"]
[Wed Sep 30 00:56:26.192477 2026] [security2:error] [pid 187269:tid 187382] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/info.php"] [unique_id "aryymtFcyhWr7HDzNGlj0gACL2k"]
[Wed Sep 30 00:56:26.193735 2026] [security2:error] [pid 187269:tid 187383] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/laravel/.env"] [unique_id "aryymtFcyhWr7HDzNGljzQACL2o"]
[Wed Sep 30 00:56:26.193735 2026] [security2:error] [pid 187269:tid 187386] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/old/.env"] [unique_id "aryymtFcyhWr7HDzNGljzAACL20"]
[Wed Sep 30 00:56:26.193838 2026] [security2:error] [pid 187269:tid 187389] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/public/.env"] [unique_id "aryymtFcyhWr7HDzNGljyAACL3A"]
[Wed Sep 30 00:56:26.193872 2026] [security2:error] [pid 187269:tid 187392] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/server/.env"] [unique_id "aryymtFcyhWr7HDzNGljxgACL3M"]
[Wed Sep 30 00:56:26.193877 2026] [security2:error] [pid 187269:tid 187388] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/production/.env"] [unique_id "aryymtFcyhWr7HDzNGljxwACL28"]
[Wed Sep 30 00:56:26.193888 2026] [security2:error] [pid 187269:tid 187396] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/src/.env"] [unique_id "aryymtFcyhWr7HDzNGlj1AACL3c"]
[Wed Sep 30 00:56:26.194019 2026] [security2:error] [pid 187269:tid 187384] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/media/.env"] [unique_id "aryymtFcyhWr7HDzNGljxQACL2s"]
[Wed Sep 30 00:56:26.194096 2026] [security2:error] [pid 187269:tid 187385] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/new/.env"] [unique_id "aryymtFcyhWr7HDzNGlj0wACL2w"]
[Wed Sep 30 00:56:26.194738 2026] [security2:error] [pid 187269:tid 187379] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/frontend/.env"] [unique_id "aryymtFcyhWr7HDzNGljzgACL2Y"]
[Wed Sep 30 00:56:26.241165 2026] [security2:error] [pid 187269:tid 187493] [client 20.219.2.60:58456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws75.php"] [unique_id "aryymtFcyhWr7HDzNGlj2gAAAms"]
[Wed Sep 30 00:56:26.246073 2026] [security2:error] [pid 187269:tid 187454] [client 20.219.14.152:43242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/pJPoKA.php"] [unique_id "aryymtFcyhWr7HDzNGlj2wAAAkQ"]
[Wed Sep 30 00:56:26.257621 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.257899 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.259392 2026] [security2:error] [pid 187269:tid 187444] [client 202.179.95.79:55499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj3AAAAjo"]
[Wed Sep 30 00:56:26.259511 2026] [security2:error] [pid 187269:tid 187444] [client 202.179.95.79:55499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj3AAAAjo"]
[Wed Sep 30 00:56:26.269604 2026] [security2:error] [pid 186850:tid 187023] [client 20.204.161.246:47147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/or.php"] [unique_id "aryymk5Phls--iYlcKj54gAAATU"]
[Wed Sep 30 00:56:26.350682 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.351024 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.436335 2026] [security2:error] [pid 186850:tid 187021] [client 20.219.2.60:19431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws75.php"] [unique_id "aryymk5Phls--iYlcKj55wAAATM"]
[Wed Sep 30 00:56:26.439924 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.440185 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.466505 2026] [security2:error] [pid 186850:tid 187061] [client 4.196.65.241:2581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cae2.3.php"] [unique_id "aryymk5Phls--iYlcKj56AAAAVs"]
[Wed Sep 30 00:56:26.488205 2026] [security2:error] [pid 187269:tid 187397] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/staging/.env"] [unique_id "aryymtFcyhWr7HDzNGlj4QACd3g"]
[Wed Sep 30 00:56:26.488439 2026] [security2:error] [pid 187269:tid 187398] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/test/.env"] [unique_id "aryymtFcyhWr7HDzNGlj4gACd3k"]
[Wed Sep 30 00:56:26.500756 2026] [security2:error] [pid 187269:tid 187499] [client 52.172.226.14:20512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/hp.php"] [unique_id "aryymtFcyhWr7HDzNGlj5AAAAnE"]
[Wed Sep 30 00:56:26.507670 2026] [security2:error] [pid 187269:tid 187479] [client 49.36.41.37:61750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj5gAAAl0"]
[Wed Sep 30 00:56:26.507777 2026] [security2:error] [pid 187269:tid 187479] [client 49.36.41.37:61750] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj5gAAAl0"]
[Wed Sep 30 00:56:26.531733 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.532000 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.535905 2026] [security2:error] [pid 187269:tid 187286] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/v1/.env"] [unique_id "aryymtFcyhWr7HDzNGlj5wACKQk"]
[Wed Sep 30 00:56:26.541988 2026] [security2:error] [pid 187269:tid 187525] [client 150.107.232.159:35642] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj6AAAAoo"]
[Wed Sep 30 00:56:26.542175 2026] [security2:error] [pid 187269:tid 187525] [client 150.107.232.159:35642] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryymtFcyhWr7HDzNGlj6AAAAoo"]
[Wed Sep 30 00:56:26.571602 2026] [security2:error] [pid 187269:tid 187519] [client 20.219.2.60:36855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/admin-footer.php"] [unique_id "aryymtFcyhWr7HDzNGlj6wAAAoU"]
[Wed Sep 30 00:56:26.575130 2026] [security2:error] [pid 187269:tid 187287] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/v2/.env"] [unique_id "aryymtFcyhWr7HDzNGlj7AACPAo"]
[Wed Sep 30 00:56:26.621996 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.622263 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.628290 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L3Jvb3Q=
[Wed Sep 30 00:56:26.628556 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:44324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L3Jvb3Q=
[Wed Sep 30 00:56:26.682467 2026] [security2:error] [pid 187269:tid 187283] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hannahjune.com"] [uri "/web/.env"] [unique_id "aryymtFcyhWr7HDzNGlj8wACQwY"]
[Wed Sep 30 00:56:26.714529 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.714779 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.720313 2026] [security2:error] [pid 187269:tid 187394] [remote 45.138.12.30:58876] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hannahjune.com"] [uri "/wp-config.php.bak"] [unique_id "aryymtFcyhWr7HDzNGlj9gACQ3U"]
[Wed Sep 30 00:56:26.741834 2026] [security2:error] [pid 187269:tid 187455] [client 20.219.14.152:43229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/24.php"] [unique_id "aryymtFcyhWr7HDzNGlj-AAAAkU"]
[Wed Sep 30 00:56:26.779894 2026] [security2:error] [pid 187269:tid 187503] [client 20.219.2.60:63234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ms-edit.php"] [unique_id "aryymtFcyhWr7HDzNGlj_QAAAnU"]
[Wed Sep 30 00:56:26.806631 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.807028 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.894802 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.895078 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:26.993101 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:26.993548 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.071054 2026] [security2:error] [pid 186850:tid 187035] [client 152.59.165.7:63261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryym05Phls--iYlcKj5_QAAAUE"]
[Wed Sep 30 00:56:27.071193 2026] [security2:error] [pid 186850:tid 187035] [client 152.59.165.7:63261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryym05Phls--iYlcKj5_QAAAUE"]
[Wed Sep 30 00:56:27.077584 2026] [security2:error] [pid 187269:tid 187457] [client 74.7.243.227:44324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryym9FcyhWr7HDzNGlkGwAAAkc"], referer: http://www.homs.co.ke/?del=razor-agent.log&p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 00:56:27.079495 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.079780 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.166161 2026] [security2:error] [pid 186850:tid 187077] [client 52.172.226.14:20524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/mo.php"] [unique_id "aryym05Phls--iYlcKj5_wAAAWs"]
[Wed Sep 30 00:56:27.179856 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.180141 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.240512 2026] [security2:error] [pid 187269:tid 187506] [client 20.219.14.152:43262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/xxw.php"] [unique_id "aryym9FcyhWr7HDzNGlkKgAAAng"]
[Wed Sep 30 00:56:27.264929 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.265359 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.340432 2026] [security2:error] [pid 187269:tid 187505] [client 20.219.2.60:63251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/abc.php"] [unique_id "aryym9FcyhWr7HDzNGlkLgAAAnc"]
[Wed Sep 30 00:56:27.351731 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.351998 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.443093 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.443354 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.475456 2026] [security2:error] [pid 187269:tid 187501] [client 203.122.45.246:54137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkMgAAAnM"]
[Wed Sep 30 00:56:27.475592 2026] [security2:error] [pid 187269:tid 187501] [client 203.122.45.246:54137] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkMgAAAnM"]
[Wed Sep 30 00:56:27.533885 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.534257 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.553576 2026] [access_compat:error] [pid 187269:tid 187489] [client 85.255.180.35:17849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.554032 2026] [access_compat:error] [pid 187269:tid 187489] [client 85.255.180.35:17849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.605538 2026] [security2:error] [pid 187269:tid 187472] [client 103.159.192.142:59059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkNwAAAlY"]
[Wed Sep 30 00:56:27.605687 2026] [security2:error] [pid 187269:tid 187472] [client 103.159.192.142:59059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkNwAAAlY"]
[Wed Sep 30 00:56:27.624135 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.624408 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.628792 2026] [security2:error] [pid 187269:tid 187424] [client 20.194.30.107:17280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/baba.php"] [unique_id "aryym9FcyhWr7HDzNGlkOQAAAiY"]
[Wed Sep 30 00:56:27.677133 2026] [security2:error] [pid 187269:tid 187524] [client 72.255.10.32:58022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkOgAAAok"]
[Wed Sep 30 00:56:27.677261 2026] [security2:error] [pid 187269:tid 187524] [client 72.255.10.32:58022] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryym9FcyhWr7HDzNGlkOgAAAok"]
[Wed Sep 30 00:56:27.690161 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:56:27.690428 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:56:27.715615 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.715920 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.719146 2026] [security2:error] [pid 187269:tid 187440] [client 20.219.14.152:43234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/bnmtp.php"] [unique_id "aryym9FcyhWr7HDzNGlkPAAAAjY"]
[Wed Sep 30 00:56:27.781762 2026] [security2:error] [pid 187269:tid 187414] [client 20.204.161.246:17267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/b8.php"] [unique_id "aryym9FcyhWr7HDzNGlkPwAAAhw"]
[Wed Sep 30 00:56:27.812183 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.812459 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.835875 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.2.60:18904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ms-edit.php"] [unique_id "aryym9FcyhWr7HDzNGlkQAAAAjk"]
[Wed Sep 30 00:56:27.841879 2026] [security2:error] [pid 186850:tid 187080] [client 20.219.2.60:63236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/motu.php"] [unique_id "aryym05Phls--iYlcKj6EQAAAW4"]
[Wed Sep 30 00:56:27.897287 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.897779 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:27.989327 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:27.989598 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.013331 2026] [security2:error] [pid 187269:tid 187486] [client 52.172.226.14:20196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/ivmirgut.php"] [unique_id "aryynNFcyhWr7HDzNGlkTgAAAmQ"]
[Wed Sep 30 00:56:28.080367 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.080622 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.120876 2026] [security2:error] [pid 187269:tid 187436] [client 4.240.25.22:63799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/df.php"] [unique_id "aryynNFcyhWr7HDzNGlkWgAAAjI"]
[Wed Sep 30 00:56:28.173178 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.173478 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:25326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.228962 2026] [security2:error] [pid 187269:tid 187466] [client 20.219.14.152:43248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ebkid.php"] [unique_id "aryynNFcyhWr7HDzNGlkYwAAAlA"]
[Wed Sep 30 00:56:28.234438 2026] [security2:error] [pid 187269:tid 187507] [client 20.204.42.136:57166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/or.php"] [unique_id "aryynNFcyhWr7HDzNGlkZAAAAnk"]
[Wed Sep 30 00:56:28.252949 2026] [security2:error] [pid 187269:tid 187467] [client 43.227.131.37:6438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryynNFcyhWr7HDzNGlkZQAAAlE"]
[Wed Sep 30 00:56:28.253051 2026] [security2:error] [pid 187269:tid 187467] [client 43.227.131.37:6438] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryynNFcyhWr7HDzNGlkZQAAAlE"]
[Wed Sep 30 00:56:28.287512 2026] [security2:error] [pid 186850:tid 186990] [client 20.70.173.30:16271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/8.php"] [unique_id "aryynE5Phls--iYlcKj6IAAAARQ"]
[Wed Sep 30 00:56:28.290455 2026] [security2:error] [pid 187269:tid 187464] [client 20.219.2.60:36846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/ws84.php"] [unique_id "aryynNFcyhWr7HDzNGlkZgAAAk4"]
[Wed Sep 30 00:56:28.314689 2026] [security2:error] [pid 187269:tid 187487] [client 20.204.161.246:39117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/Dss.php"] [unique_id "aryynNFcyhWr7HDzNGlkZwAAAmU"]
[Wed Sep 30 00:56:28.332992 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.333258 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.342275 2026] [security2:error] [pid 187269:tid 187479] [client 20.70.173.30:60585] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.mlvt-dsc.info"] [uri "/1.php"] [unique_id "aryynNFcyhWr7HDzNGlkbAAAAl0"]
[Wed Sep 30 00:56:28.342363 2026] [security2:error] [pid 187269:tid 187479] [client 20.70.173.30:60585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/1.php"] [unique_id "aryynNFcyhWr7HDzNGlkbAAAAl0"]
[Wed Sep 30 00:56:28.356538 2026] [security2:error] [pid 187269:tid 187451] [client 20.219.2.60:63274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/inputs.php"] [unique_id "aryynNFcyhWr7HDzNGlkbQAAAkE"]
[Wed Sep 30 00:56:28.367353 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvY3dk
[Wed Sep 30 00:56:28.367613 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvY3dk
[Wed Sep 30 00:56:28.375304 2026] [security2:error] [pid 187269:tid 187439] [client 168.107.70.193:55114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.aqm.qiu.mybluehost.me"] [uri "/"] [unique_id "aryynNFcyhWr7HDzNGlkbgAAAjU"]
[Wed Sep 30 00:56:28.387570 2026] [security2:error] [pid 187269:tid 187513] [client 74.7.242.1:53050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryynNFcyhWr7HDzNGlkbwAAAn8"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:56:28.407820 2026] [security2:error] [pid 187269:tid 187447] [client 20.194.30.107:25175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/amax.php"] [unique_id "aryynNFcyhWr7HDzNGlkcAAAAj0"]
[Wed Sep 30 00:56:28.425340 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.425606 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.467846 2026] [security2:error] [pid 187269:tid 187423] [client 4.196.65.241:2089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/pudym.php"] [unique_id "aryynNFcyhWr7HDzNGlkcgAAAiU"]
[Wed Sep 30 00:56:28.506970 2026] [security2:error] [pid 187269:tid 187522] [client 20.194.30.107:17490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/8.php"] [unique_id "aryynNFcyhWr7HDzNGlkdwAAAoc"]
[Wed Sep 30 00:56:28.507523 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:20521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.507777 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:20521] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.536644 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.537286 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.617845 2026] [security2:error] [pid 187269:tid 187431] [client 52.172.226.14:20705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/baba.php"] [unique_id "aryynNFcyhWr7HDzNGlkewAAAi0"]
[Wed Sep 30 00:56:28.631616 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.631895 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.633233 2026] [security2:error] [pid 186850:tid 186985] [client 45.138.12.32:29616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.juu.mzp.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryynE5Phls--iYlcKj6JQAAAQ8"]
[Wed Sep 30 00:56:28.705073 2026] [security2:error] [pid 186850:tid 187015] [client 20.219.14.152:43254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/133.php"] [unique_id "aryynE5Phls--iYlcKj6JwAAAS0"]
[Wed Sep 30 00:56:28.719191 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.719466 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.724800 2026] [security2:error] [pid 186850:tid 186996] [client 39.44.16.112:52094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryynE5Phls--iYlcKj6KAAAARo"]
[Wed Sep 30 00:56:28.726138 2026] [security2:error] [pid 186850:tid 186996] [client 39.44.16.112:52094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryynE5Phls--iYlcKj6KAAAARo"]
[Wed Sep 30 00:56:28.789307 2026] [security2:error] [pid 186850:tid 187081] [client 45.138.12.40:50992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fql.btm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryynE5Phls--iYlcKj6LAAAAW8"]
[Wed Sep 30 00:56:28.810744 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.811016 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.845597 2026] [security2:error] [pid 187269:tid 187491] [client 20.219.2.60:58467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp9.php"] [unique_id "aryynNFcyhWr7HDzNGlkhwAAAmk"]
[Wed Sep 30 00:56:28.900597 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.900918 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:28.937664 2026] [security2:error] [pid 187269:tid 187502] [client 216.73.216.46:20521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryynNFcyhWr7HDzNGlkiwAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mzkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTk%3D
[Wed Sep 30 00:56:28.991605 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:28.991855 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.000551 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L2F0dHI=
[Wed Sep 30 00:56:29.000794 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L2F0dHI=
[Wed Sep 30 00:56:29.060310 2026] [security2:error] [pid 187269:tid 187501] [client 49.205.105.16:13538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyndFcyhWr7HDzNGlkkAAAAnM"]
[Wed Sep 30 00:56:29.060442 2026] [security2:error] [pid 187269:tid 187501] [client 49.205.105.16:13538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyndFcyhWr7HDzNGlkkAAAAnM"]
[Wed Sep 30 00:56:29.082247 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.082524 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.174578 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.174844 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.188308 2026] [security2:error] [pid 187269:tid 187514] [client 45.138.12.32:29602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.svr.yrw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyndFcyhWr7HDzNGlklwAAAoA"]
[Wed Sep 30 00:56:29.199907 2026] [security2:error] [pid 187269:tid 187449] [client 103.24.86.56:54116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyndFcyhWr7HDzNGlklQAAAj8"]
[Wed Sep 30 00:56:29.200016 2026] [security2:error] [pid 187269:tid 187449] [client 103.24.86.56:54116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyndFcyhWr7HDzNGlklQAAAj8"]
[Wed Sep 30 00:56:29.254378 2026] [security2:error] [pid 186850:tid 186994] [client 20.219.14.152:43266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/x33.php"] [unique_id "aryynU5Phls--iYlcKj6PgAAARg"]
[Wed Sep 30 00:56:29.264376 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.264623 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.280794 2026] [security2:error] [pid 187269:tid 187506] [client 20.204.161.246:32994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/xex.php"] [unique_id "aryyndFcyhWr7HDzNGlkmgAAAng"]
[Wed Sep 30 00:56:29.330884 2026] [security2:error] [pid 187269:tid 187483] [client 20.219.2.60:58439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/public/vx.php"] [unique_id "aryyndFcyhWr7HDzNGlkmwAAAmE"]
[Wed Sep 30 00:56:29.357345 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.357639 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.422255 2026] [security2:error] [pid 186850:tid 187093] [client 20.219.2.60:36622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/bnm.php"] [unique_id "aryynU5Phls--iYlcKj6QAAAAXs"]
[Wed Sep 30 00:56:29.449642 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.450089 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.455961 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L3Rhc2s=
[Wed Sep 30 00:56:29.456210 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L3Rhc2s=
[Wed Sep 30 00:56:29.541619 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.541900 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.593481 2026] [security2:error] [pid 187269:tid 187513] [client 52.172.226.14:20485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/Components.php"] [unique_id "aryyndFcyhWr7HDzNGlkpgAAAn8"]
[Wed Sep 30 00:56:29.680383 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.680641 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.689695 2026] [log_config:warn] [pid 178882:tid 179218] (32)Broken pipe: [client 176.28.255.174:0] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log, referer: https://www.arab-cgt.org/?page_id=7633
[Wed Sep 30 00:56:29.689713 2026] [log_config:warn] [pid 178882:tid 179218] (32)Broken pipe: [client 176.28.255.174:0] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log, referer: https://www.arab-cgt.org/?page_id=7633
[Wed Sep 30 00:56:29.708394 2026] [security2:error] [pid 187269:tid 187445] [client 20.219.2.60:18927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/abc.php"] [unique_id "aryyndFcyhWr7HDzNGlktAAAAjs"]
[Wed Sep 30 00:56:29.723430 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.723846 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.725579 2026] [security2:error] [pid 187269:tid 187489] [client 20.219.14.152:43252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/cae.php"] [unique_id "aryyndFcyhWr7HDzNGlkuAAAAmc"]
[Wed Sep 30 00:56:29.817007 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.817339 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.825857 2026] [security2:error] [pid 186850:tid 186987] [client 20.219.2.60:58470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/inege.php"] [unique_id "aryynU5Phls--iYlcKj6TQAAARE"]
[Wed Sep 30 00:56:29.903437 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.903690 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:29.944618 2026] [security2:error] [pid 187269:tid 187491] [client 20.28.180.172:34292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/hypo.php"] [unique_id "aryyndFcyhWr7HDzNGlkwwAAAmk"]
[Wed Sep 30 00:56:29.949584 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:29.949854 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:56:29.995376 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:29.995643 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.041494 2026] [security2:error] [pid 186850:tid 187000] [client 212.46.142.42:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryynk5Phls--iYlcKj6VAAAAR4"]
[Wed Sep 30 00:56:30.061163 2026] [security2:error] [pid 186850:tid 187063] [client 52.172.226.14:20211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/aboutt.php"] [unique_id "aryynk5Phls--iYlcKj6VQAAAV0"]
[Wed Sep 30 00:56:30.080570 2026] [security2:error] [pid 186850:tid 187067] [client 20.194.30.107:17393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/images.php"] [unique_id "aryynk5Phls--iYlcKj6VwAAAWE"]
[Wed Sep 30 00:56:30.086538 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.086834 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.157598 2026] [security2:error] [pid 187269:tid 187481] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyntFcyhWr7HDzNGlk1AAAAl8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:30.176980 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.177243 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.183583 2026] [security2:error] [pid 187269:tid 187526] [client 20.219.14.152:44870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/txets.php"] [unique_id "aryyntFcyhWr7HDzNGlk1wAAAos"]
[Wed Sep 30 00:56:30.195888 2026] [security2:error] [pid 187269:tid 187407] [client 223.235.102.107:17630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyntFcyhWr7HDzNGlk2AAAAhU"]
[Wed Sep 30 00:56:30.196016 2026] [security2:error] [pid 187269:tid 187407] [client 223.235.102.107:17630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyntFcyhWr7HDzNGlk2AAAAhU"]
[Wed Sep 30 00:56:30.270301 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.270625 2026] [core:error] [pid 187269:tid 187433] [client 45.138.12.40:51048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:30.270637 2026] [core:error] [pid 187269:tid 187433] [client 45.138.12.40:51048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:30.270743 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.277017 2026] [access_compat:error] [pid 187269:tid 187534] [client 43.130.57.46:55574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.277272 2026] [access_compat:error] [pid 187269:tid 187534] [client 43.130.57.46:55574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.359159 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.359460 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.391331 2026] [security2:error] [pid 187269:tid 187479] [client 20.219.2.60:63281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/nw.php"] [unique_id "aryyntFcyhWr7HDzNGlk4QAAAl0"]
[Wed Sep 30 00:56:30.450733 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.451031 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.467952 2026] [security2:error] [pid 187269:tid 187334] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyntFcyhWr7HDzNGlk4wACfzk"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D64991
[Wed Sep 30 00:56:30.484597 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:30.484864 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:30.542357 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.542784 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.634764 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.635015 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.643061 2026] [security2:error] [pid 187269:tid 187525] [client 52.172.226.14:20681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/maint/14.php"] [unique_id "aryyntFcyhWr7HDzNGlk6wAAAoo"]
[Wed Sep 30 00:56:30.677066 2026] [security2:error] [pid 186850:tid 187083] [client 20.219.14.152:43293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wp-update.php"] [unique_id "aryynk5Phls--iYlcKj6ZQAAAXE"]
[Wed Sep 30 00:56:30.724774 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.725058 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.734398 2026] [security2:error] [pid 187269:tid 187524] [client 20.219.2.60:36692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/amax.php"] [unique_id "aryyntFcyhWr7HDzNGlk7gAAAok"]
[Wed Sep 30 00:56:30.765922 2026] [security2:error] [pid 187269:tid 187523] [client 20.204.42.136:54181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/wmore1.php"] [unique_id "aryyntFcyhWr7HDzNGlk8QAAAog"]
[Wed Sep 30 00:56:30.815451 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.815710 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.906825 2026] [security2:error] [pid 187269:tid 187478] [client 20.219.2.60:59628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/t.php"] [unique_id "aryyntFcyhWr7HDzNGlk-AAAAlw"]
[Wed Sep 30 00:56:30.908089 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:30.908366 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:30.947018 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 00:56:30.947294 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 00:56:30.968588 2026] [security2:error] [pid 187269:tid 187411] [client 49.43.163.212:56268] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyntFcyhWr7HDzNGlk_QAAAhk"]
[Wed Sep 30 00:56:30.968824 2026] [security2:error] [pid 187269:tid 187411] [client 49.43.163.212:56268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyntFcyhWr7HDzNGlk_QAAAhk"]
[Wed Sep 30 00:56:30.971366 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.172:54198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:30.971642 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.172:54198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:30.999984 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.000323 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.002937 2026] [security2:error] [pid 187269:tid 187530] [client 45.138.12.47:33456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.zbj.zav.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyn9FcyhWr7HDzNGlk_wAAAo8"]
[Wed Sep 30 00:56:31.020602 2026] [security2:error] [pid 187269:tid 187412] [client 106.214.3.140:15237] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryyntFcyhWr7HDzNGlk7wAAAho"]
[Wed Sep 30 00:56:31.070186 2026] [security2:error] [pid 187269:tid 187432] [client 20.28.180.172:29584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/tvbxn.php"] [unique_id "aryyn9FcyhWr7HDzNGllAwAAAi4"]
[Wed Sep 30 00:56:31.072169 2026] [security2:error] [pid 186850:tid 187057] [client 20.194.30.107:25202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/dex.php"] [unique_id "aryyn05Phls--iYlcKj6bwAAAVc"]
[Wed Sep 30 00:56:31.089805 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.090165 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.181058 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.181332 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.187494 2026] [security2:error] [pid 187269:tid 187452] [client 20.204.161.246:53922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/uploaxa1.php"] [unique_id "aryyn9FcyhWr7HDzNGllCwAAAkI"]
[Wed Sep 30 00:56:31.211906 2026] [security2:error] [pid 187269:tid 187503] [client 223.181.60.167:8159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyn9FcyhWr7HDzNGllDAAAAnU"]
[Wed Sep 30 00:56:31.212703 2026] [security2:error] [pid 187269:tid 187503] [client 223.181.60.167:8159] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyn9FcyhWr7HDzNGllDAAAAnU"]
[Wed Sep 30 00:56:31.230985 2026] [security2:error] [pid 187269:tid 187498] [client 20.219.14.152:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/177.php"] [unique_id "aryyn9FcyhWr7HDzNGllDQAAAnA"]
[Wed Sep 30 00:56:31.271236 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.271488 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.307038 2026] [security2:error] [pid 187269:tid 187509] [client 20.204.161.246:32056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/CAE-2.5.php"] [unique_id "aryyn9FcyhWr7HDzNGllFAAAAns"]
[Wed Sep 30 00:56:31.321014 2026] [security2:error] [pid 187269:tid 187529] [client 52.172.226.14:20162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/xx.php"] [unique_id "aryyn9FcyhWr7HDzNGllFQAAAo4"]
[Wed Sep 30 00:56:31.362926 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.363209 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:5449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.403546 2026] [security2:error] [pid 186850:tid 187069] [client 20.219.2.60:55811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryyn05Phls--iYlcKj6dQAAAWM"]
[Wed Sep 30 00:56:31.453528 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.453806 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.483430 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3Q=
[Wed Sep 30 00:56:31.483693 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3Q=
[Wed Sep 30 00:56:31.502749 2026] [security2:error] [pid 187269:tid 187428] [client 103.159.192.142:59323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyn9FcyhWr7HDzNGllGAAAAio"]
[Wed Sep 30 00:56:31.502899 2026] [security2:error] [pid 187269:tid 187428] [client 103.159.192.142:59323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyn9FcyhWr7HDzNGllGAAAAio"]
[Wed Sep 30 00:56:31.546714 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.547013 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.688984 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.689251 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.706110 2026] [security2:error] [pid 187269:tid 187505] [client 20.219.14.152:43202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ccc.php"] [unique_id "aryyn9FcyhWr7HDzNGllHQAAAnc"]
[Wed Sep 30 00:56:31.727280 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.727538 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.749441 2026] [security2:error] [pid 187269:tid 187434] [client 45.138.12.41:46210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp-links-opml.php"] [unique_id "aryyn9FcyhWr7HDzNGllHwAAAjA"]
[Wed Sep 30 00:56:31.779792 2026] [security2:error] [pid 187269:tid 187510] [client 216.73.216.46:5449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyn9FcyhWr7HDzNGllIAAAAnw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODkvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTc%3D
[Wed Sep 30 00:56:31.818614 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.818891 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.853336 2026] [security2:error] [pid 187269:tid 187528] [client 20.219.2.60:36840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/66.php"] [unique_id "aryyn9FcyhWr7HDzNGllJAAAAo0"]
[Wed Sep 30 00:56:31.882671 2026] [security2:error] [pid 186850:tid 187064] [client 20.219.2.60:58477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/public/ws49.php"] [unique_id "aryyn05Phls--iYlcKj6hQAAAV4"]
[Wed Sep 30 00:56:31.911526 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:31.911790 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:31.928799 2026] [security2:error] [pid 186850:tid 187009] [client 52.172.226.14:20185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/gelay.php"] [unique_id "aryyn05Phls--iYlcKj6hgAAASc"]
[Wed Sep 30 00:56:31.970617 2026] [security2:error] [pid 187269:tid 187477] [client 189.84.177.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyn9FcyhWr7HDzNGllKwAAAls"]
[Wed Sep 30 00:56:31.985428 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZA==
[Wed Sep 30 00:56:31.985693 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZA==
[Wed Sep 30 00:56:32.007953 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.008248 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.098065 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.098398 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.180565 2026] [security2:error] [pid 187269:tid 187502] [client 20.219.14.152:43270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/0xD.php"] [unique_id "aryyoNFcyhWr7HDzNGllNwAAAnQ"]
[Wed Sep 30 00:56:32.190392 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.190667 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.261878 2026] [security2:error] [pid 187269:tid 187441] [client 106.214.2.47:6239] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyoNFcyhWr7HDzNGllPAAAAjc"]
[Wed Sep 30 00:56:32.262005 2026] [security2:error] [pid 187269:tid 187441] [client 106.214.2.47:6239] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyoNFcyhWr7HDzNGllPAAAAjc"]
[Wed Sep 30 00:56:32.273464 2026] [security2:error] [pid 186850:tid 186943] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyoE5Phls--iYlcKj6kQABOVw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=197591
[Wed Sep 30 00:56:32.273493 2026] [security2:error] [pid 186850:tid 186943] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyoE5Phls--iYlcKj6kQABOVw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=197591
[Wed Sep 30 00:56:32.284258 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.284692 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.344355 2026] [security2:error] [pid 186850:tid 187042] [client 20.219.2.60:55845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gifclass.php"] [unique_id "aryyoE5Phls--iYlcKj6kwAAAUg"]
[Wed Sep 30 00:56:32.372242 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.372583 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.416625 2026] [security2:error] [pid 187269:tid 187450] [client 52.172.226.14:20489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/htaccess.php"] [unique_id "aryyoNFcyhWr7HDzNGllRQAAAkA"]
[Wed Sep 30 00:56:32.440090 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 00:56:32.440356 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 00:56:32.463633 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.463917 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.471266 2026] [security2:error] [pid 187269:tid 187503] [client 20.28.180.172:29442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wpxml.php"] [unique_id "aryyoNFcyhWr7HDzNGllRwAAAnU"]
[Wed Sep 30 00:56:32.503978 2026] [security2:error] [pid 187269:tid 187471] [client 20.204.161.246:62714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/ass.php"] [unique_id "aryyoNFcyhWr7HDzNGllSQAAAlU"]
[Wed Sep 30 00:56:32.553433 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.553705 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.645903 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.646186 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.648826 2026] [security2:error] [pid 187269:tid 187411] [client 116.72.182.19:57547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyoNFcyhWr7HDzNGllTQAAAhk"]
[Wed Sep 30 00:56:32.648958 2026] [security2:error] [pid 187269:tid 187411] [client 116.72.182.19:57547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyoNFcyhWr7HDzNGllTQAAAhk"]
[Wed Sep 30 00:56:32.654457 2026] [security2:error] [pid 186850:tid 187050] [client 20.219.14.152:43205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/sallu.php"] [unique_id "aryyoE5Phls--iYlcKj6nAAAAVA"]
[Wed Sep 30 00:56:32.706800 2026] [security2:error] [pid 187269:tid 187348] [remote 116.179.32.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyoNFcyhWr7HDzNGllUAACYkc"]
[Wed Sep 30 00:56:32.725995 2026] [security2:error] [pid 187269:tid 187427] [client 20.194.30.107:8856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/xkSudf.php"] [unique_id "aryyoNFcyhWr7HDzNGllUQAAAik"]
[Wed Sep 30 00:56:32.737056 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.737344 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.747788 2026] [security2:error] [pid 187269:tid 187464] [client 20.219.2.60:18885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/motu.php"] [unique_id "aryyoNFcyhWr7HDzNGllUwAAAk4"]
[Wed Sep 30 00:56:32.828862 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.829125 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.842185 2026] [security2:error] [pid 187269:tid 187417] [client 20.219.2.60:63269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/sa.php7"] [unique_id "aryyoNFcyhWr7HDzNGllVwAAAh8"]
[Wed Sep 30 00:56:32.848651 2026] [security2:error] [pid 187269:tid 187434] [client 20.204.42.136:27912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/kerang.php"] [unique_id "aryyoNFcyhWr7HDzNGllWAAAAjA"]
[Wed Sep 30 00:56:32.858147 2026] [security2:error] [pid 187269:tid 187510] [client 4.240.25.22:21898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/av.php"] [unique_id "aryyoNFcyhWr7HDzNGllWgAAAnw"]
[Wed Sep 30 00:56:32.866149 2026] [security2:error] [pid 186850:tid 186957] [remote 74.7.227.56:38844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyoE5Phls--iYlcKj6oAABOmo"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:56:32.886547 2026] [security2:error] [pid 187269:tid 187504] [client 52.172.226.14:20498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/readme.php"] [unique_id "aryyoNFcyhWr7HDzNGllWwAAAnY"]
[Wed Sep 30 00:56:32.922421 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:32.922875 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:32.978361 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI=
[Wed Sep 30 00:56:32.978642 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI=
[Wed Sep 30 00:56:33.010641 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.010928 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.013386 2026] [security2:error] [pid 187269:tid 187344] [remote 116.179.32.34:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyoNFcyhWr7HDzNGllZgACZUM"]
[Wed Sep 30 00:56:33.073356 2026] [security2:error] [pid 186850:tid 186959] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyoU5Phls--iYlcKj6pQABOGw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3fc5cb15e95e453d7f4111f19794e1d0&t=21533
[Wed Sep 30 00:56:33.073391 2026] [security2:error] [pid 186850:tid 186959] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyoU5Phls--iYlcKj6pQABOGw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3fc5cb15e95e453d7f4111f19794e1d0&t=21533
[Wed Sep 30 00:56:33.102079 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.102394 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.105081 2026] [security2:error] [pid 187269:tid 187339] [remote 57.141.14.80:31746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/xmlrpc.php"] [unique_id "aryyodFcyhWr7HDzNGllaQACiT4"]
[Wed Sep 30 00:56:33.151927 2026] [security2:error] [pid 187269:tid 187448] [client 20.219.14.152:43281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/01.php"] [unique_id "aryyodFcyhWr7HDzNGllbQAAAj4"]
[Wed Sep 30 00:56:33.192109 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.192371 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.286868 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.287155 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.332242 2026] [security2:error] [pid 186850:tid 187068] [client 20.219.2.60:36833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/public/file.php"] [unique_id "aryyoU5Phls--iYlcKj6rQAAAWI"]
[Wed Sep 30 00:56:33.374760 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.375033 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.437677 2026] [security2:error] [pid 187269:tid 187474] [client 52.172.226.14:20160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/max.php"] [unique_id "aryyodFcyhWr7HDzNGllhQAAAlg"]
[Wed Sep 30 00:56:33.437694 2026] [security2:error] [pid 187269:tid 187439] [client 20.219.2.60:48841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/jp.php"] [unique_id "aryyodFcyhWr7HDzNGllhgAAAjU"]
[Wed Sep 30 00:56:33.463481 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI=
[Wed Sep 30 00:56:33.463921 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI=
[Wed Sep 30 00:56:33.468649 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.468998 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.556222 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.556499 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.614771 2026] [security2:error] [pid 187269:tid 187533] [client 20.204.161.246:41529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/felnggg.php"] [unique_id "aryyodFcyhWr7HDzNGlligAAApI"]
[Wed Sep 30 00:56:33.639013 2026] [security2:error] [pid 186850:tid 187020] [client 20.219.14.152:44886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ab.php"] [unique_id "aryyoU5Phls--iYlcKj6twAAATI"]
[Wed Sep 30 00:56:33.647046 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.647316 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.745283 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.745731 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.763487 2026] [security2:error] [pid 187269:tid 187450] [client 155.190.6.18:36638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyodFcyhWr7HDzNGlllAAAAkA"]
[Wed Sep 30 00:56:33.763616 2026] [security2:error] [pid 187269:tid 187450] [client 155.190.6.18:36638] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyodFcyhWr7HDzNGlllAAAAkA"]
[Wed Sep 30 00:56:33.830480 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.830597 2026] [security2:error] [pid 186850:tid 186995] [client 116.197.133.25:55267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyoU5Phls--iYlcKj6vgAAARk"]
[Wed Sep 30 00:56:33.830754 2026] [security2:error] [pid 186850:tid 186995] [client 116.197.133.25:55267] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyoU5Phls--iYlcKj6vgAAARk"]
[Wed Sep 30 00:56:33.830756 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.922783 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:33.923206 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:33.940026 2026] [security2:error] [pid 187269:tid 187500] [client 20.219.2.60:59584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-good.php"] [unique_id "aryyodFcyhWr7HDzNGllnwAAAnI"]
[Wed Sep 30 00:56:33.947605 2026] [access_compat:error] [pid 186850:tid 187093] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3Q=
[Wed Sep 30 00:56:33.947865 2026] [access_compat:error] [pid 186850:tid 187093] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3Q=
[Wed Sep 30 00:56:33.955644 2026] [security2:error] [pid 187269:tid 187467] [client 20.219.2.60:19443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/inputs.php"] [unique_id "aryyodFcyhWr7HDzNGlloQAAAlE"]
[Wed Sep 30 00:56:34.012053 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.012341 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.114761 2026] [security2:error] [pid 187269:tid 187503] [client 52.172.226.14:20204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/post.php"] [unique_id "aryyotFcyhWr7HDzNGllqgAAAnU"]
[Wed Sep 30 00:56:34.132376 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.132692 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.141992 2026] [security2:error] [pid 187269:tid 187419] [client 20.219.14.152:43213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/xwpg.php"] [unique_id "aryyotFcyhWr7HDzNGllrAAAAiE"]
[Wed Sep 30 00:56:34.199465 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.199866 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.243645 2026] [security2:error] [pid 187269:tid 187507] [client 20.213.164.196:35781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyotFcyhWr7HDzNGllsgAAAnk"]
[Wed Sep 30 00:56:34.272549 2026] [security2:error] [pid 187269:tid 187427] [client 110.172.141.135:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyotFcyhWr7HDzNGlltQAAAik"]
[Wed Sep 30 00:56:34.286424 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.286700 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.314395 2026] [security2:error] [pid 187269:tid 187447] [client 20.28.180.172:29568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wefile.php"] [unique_id "aryyotFcyhWr7HDzNGlluQAAAj0"]
[Wed Sep 30 00:56:34.376267 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.376524 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.422035 2026] [security2:error] [pid 187269:tid 187417] [client 20.204.161.246:49066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/uploartg.php"] [unique_id "aryyotFcyhWr7HDzNGllwwAAAh8"]
[Wed Sep 30 00:56:34.464557 2026] [security2:error] [pid 187269:tid 187456] [client 20.219.2.60:48867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/a5.php"] [unique_id "aryyotFcyhWr7HDzNGllygAAAkY"]
[Wed Sep 30 00:56:34.469739 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.470019 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:41439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.492033 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:34.492479 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:34.562989 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.563413 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.605923 2026] [security2:error] [pid 187269:tid 187418] [client 20.219.14.152:43263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/flamini.php"] [unique_id "aryyotFcyhWr7HDzNGll1QAAAiA"]
[Wed Sep 30 00:56:34.650973 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.651238 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.687253 2026] [security2:error] [pid 187269:tid 187496] [client 20.219.2.60:36689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/166.php"] [unique_id "aryyotFcyhWr7HDzNGll2QAAAm4"]
[Wed Sep 30 00:56:34.727949 2026] [security2:error] [pid 186850:tid 187030] [client 52.172.226.14:20182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/themes.php"] [unique_id "aryyok5Phls--iYlcKj61QAAATw"]
[Wed Sep 30 00:56:34.741932 2026] [security2:error] [pid 187269:tid 187446] [client 37.41.16.35:60363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyotFcyhWr7HDzNGll2wAAAjw"]
[Wed Sep 30 00:56:34.742056 2026] [security2:error] [pid 187269:tid 187446] [client 37.41.16.35:60363] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyotFcyhWr7HDzNGll2wAAAjw"]
[Wed Sep 30 00:56:34.742749 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.743013 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.833908 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.834188 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.868126 2026] [security2:error] [pid 186850:tid 186967] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyok5Phls--iYlcKj62QABH3Q"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=069a0f49905a25d319a3d3266282da66&t=22212
[Wed Sep 30 00:56:34.868156 2026] [security2:error] [pid 186850:tid 186967] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyok5Phls--iYlcKj62QABH3Q"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=069a0f49905a25d319a3d3266282da66&t=22212
[Wed Sep 30 00:56:34.899723 2026] [security2:error] [pid 187269:tid 187473] [client 20.70.173.30:16288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/b8.php"] [unique_id "aryyotFcyhWr7HDzNGll4AAAAlc"]
[Wed Sep 30 00:56:34.927363 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:34.927758 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:34.952598 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:34.952877 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:34.971295 2026] [security2:error] [pid 187269:tid 187428] [client 20.219.2.60:45343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/amp.php"] [unique_id "aryyotFcyhWr7HDzNGll5QAAAio"]
[Wed Sep 30 00:56:34.994782 2026] [security2:error] [pid 187269:tid 187534] [client 20.219.2.60:18943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp9.php"] [unique_id "aryyotFcyhWr7HDzNGll5gAAApM"]
[Wed Sep 30 00:56:35.015991 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.016309 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.059746 2026] [security2:error] [pid 187269:tid 187527] [client 116.193.128.26:55415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGll6AAAAow"]
[Wed Sep 30 00:56:35.059934 2026] [security2:error] [pid 187269:tid 187527] [client 116.193.128.26:55415] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGll6AAAAow"]
[Wed Sep 30 00:56:35.084074 2026] [security2:error] [pid 187269:tid 187516] [client 20.219.14.152:43227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/themes.php"] [unique_id "aryyo9FcyhWr7HDzNGll7AAAAoI"]
[Wed Sep 30 00:56:35.108094 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.108446 2026] [security2:error] [pid 187269:tid 187510] [client 20.204.42.136:57184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/local.php"] [unique_id "aryyo9FcyhWr7HDzNGll7wAAAnw"]
[Wed Sep 30 00:56:35.108528 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.125207 2026] [security2:error] [pid 187269:tid 187408] [client 20.213.164.196:35808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyo9FcyhWr7HDzNGll8QAAAhY"]
[Wed Sep 30 00:56:35.199395 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.199661 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.206986 2026] [security2:error] [pid 187269:tid 187476] [client 20.194.30.107:14787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/txets.php"] [unique_id "aryyo9FcyhWr7HDzNGll9gAAAlo"]
[Wed Sep 30 00:56:35.214713 2026] [security2:error] [pid 186850:tid 186997] [client 20.204.161.246:32049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/felnggg.update.php"] [unique_id "aryyo05Phls--iYlcKj63gAAARs"]
[Wed Sep 30 00:56:35.289284 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.289546 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.330789 2026] [security2:error] [pid 187269:tid 187455] [client 52.172.226.14:20488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/maint/about.php"] [unique_id "aryyo9FcyhWr7HDzNGll_AAAAkU"]
[Wed Sep 30 00:56:35.347273 2026] [security2:error] [pid 187269:tid 187509] [client 182.69.182.151:31228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGll_QAAAns"]
[Wed Sep 30 00:56:35.347397 2026] [security2:error] [pid 187269:tid 187509] [client 182.69.182.151:31228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGll_QAAAns"]
[Wed Sep 30 00:56:35.380884 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.381144 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.387439 2026] [security2:error] [pid 186850:tid 186971] [remote 220.181.108.90:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyo05Phls--iYlcKj64AABJHg"]
[Wed Sep 30 00:56:35.467355 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:56:35.467608 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:56:35.470163 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.470437 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.506652 2026] [security2:error] [pid 187269:tid 187385] [remote 220.181.108.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyo9FcyhWr7HDzNGlmBgACU2w"]
[Wed Sep 30 00:56:35.526827 2026] [security2:error] [pid 187269:tid 187379] [remote 220.181.108.93:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyo9FcyhWr7HDzNGlmBwACZGY"]
[Wed Sep 30 00:56:35.561746 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.562005 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.580656 2026] [security2:error] [pid 186850:tid 187084] [client 20.219.2.60:55863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/abrand.php"] [unique_id "aryyo05Phls--iYlcKj65AAAAXI"]
[Wed Sep 30 00:56:35.586764 2026] [security2:error] [pid 187269:tid 187503] [client 213.136.69.135:53752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-editor-context.php"] [unique_id "aryyo9FcyhWr7HDzNGlmCQAAAnU"], referer: binance.com
[Wed Sep 30 00:56:35.588996 2026] [security2:error] [pid 187269:tid 187426] [client 152.59.169.65:49899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGlmCgAAAig"]
[Wed Sep 30 00:56:35.589073 2026] [security2:error] [pid 187269:tid 187426] [client 152.59.169.65:49899] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyo9FcyhWr7HDzNGlmCgAAAig"]
[Wed Sep 30 00:56:35.596234 2026] [security2:error] [pid 187269:tid 187488] [client 20.219.14.152:43231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/0.php"] [unique_id "aryyo9FcyhWr7HDzNGlmCwAAAmY"]
[Wed Sep 30 00:56:35.653664 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.653979 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.685153 2026] [access_compat:error] [pid 187269:tid 187515] [client 47.79.13.73:58382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:35.685582 2026] [access_compat:error] [pid 187269:tid 187515] [client 47.79.13.73:58382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:35.743584 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.743900 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.751107 2026] [security2:error] [pid 187269:tid 187390] [remote 116.179.32.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyo9FcyhWr7HDzNGlmFwACbnE"]
[Wed Sep 30 00:56:35.812018 2026] [security2:error] [pid 186850:tid 187046] [client 52.172.226.14:20542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryyo05Phls--iYlcKj67gAAAUw"]
[Wed Sep 30 00:56:35.813653 2026] [security2:error] [pid 186850:tid 187032] [client 13.70.4.78:3188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyo05Phls--iYlcKj67QAAAT4"]
[Wed Sep 30 00:56:35.882182 2026] [security2:error] [pid 187269:tid 187459] [client 20.219.2.60:36804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/ws77.php"] [unique_id "aryyo9FcyhWr7HDzNGlmGQAAAkk"]
[Wed Sep 30 00:56:35.891032 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:35.891299 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:35.936627 2026] [security2:error] [pid 187269:tid 187516] [client 20.204.161.246:62657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/jybkxer.php"] [unique_id "aryyo9FcyhWr7HDzNGlmHAAAAoI"]
[Wed Sep 30 00:56:36.006490 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:56:36.006790 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:56:36.055541 2026] [security2:error] [pid 187269:tid 187466] [client 20.219.2.60:55841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/init.php"] [unique_id "aryypNFcyhWr7HDzNGlmIwAAAlA"]
[Wed Sep 30 00:56:36.081686 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.081956 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.085354 2026] [security2:error] [pid 187269:tid 187417] [client 20.219.14.152:43256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/opsh.php"] [unique_id "aryypNFcyhWr7HDzNGlmJQAAAh8"]
[Wed Sep 30 00:56:36.112954 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.113403 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.143015 2026] [security2:error] [pid 187269:tid 187519] [client 13.70.4.78:62714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryypNFcyhWr7HDzNGlmKQAAAoU"]
[Wed Sep 30 00:56:36.163280 2026] [security2:error] [pid 187269:tid 187504] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryypNFcyhWr7HDzNGlmKgAAAnY"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:36.172744 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.173118 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.201195 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.201459 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.201504 2026] [security2:error] [pid 186850:tid 187051] [client 179.108.234.163:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryypE5Phls--iYlcKj6-QAAAVE"]
[Wed Sep 30 00:56:36.213733 2026] [security2:error] [pid 187269:tid 187378] [remote 47.128.114.170:28892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/city/251/ncat/13/pg/3"] [unique_id "aryypNFcyhWr7HDzNGlmMQACaGU"]
[Wed Sep 30 00:56:36.235386 2026] [security2:error] [pid 187269:tid 187492] [client 103.172.210.103:51826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmMgAAAmo"]
[Wed Sep 30 00:56:36.235534 2026] [security2:error] [pid 187269:tid 187492] [client 103.172.210.103:51826] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmMgAAAmo"]
[Wed Sep 30 00:56:36.289370 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.289626 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.331541 2026] [security2:error] [pid 187269:tid 187445] [client 52.172.226.14:20174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/click.php"] [unique_id "aryypNFcyhWr7HDzNGlmNgAAAjs"]
[Wed Sep 30 00:56:36.370778 2026] [security2:error] [pid 187269:tid 187524] [client 20.194.30.107:24840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/mac.php"] [unique_id "aryypNFcyhWr7HDzNGlmOAAAAok"]
[Wed Sep 30 00:56:36.384589 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.385010 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.401509 2026] [security2:error] [pid 186850:tid 186986] [client 20.70.173.30:18524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/amax.php"] [unique_id "aryypE5Phls--iYlcKj6_wAAARA"]
[Wed Sep 30 00:56:36.463668 2026] [security2:error] [pid 186850:tid 187082] [client 13.70.4.78:52665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryypE5Phls--iYlcKj7AQAAAXA"]
[Wed Sep 30 00:56:36.471056 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.471531 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.483016 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:36.483281 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:56:36.554449 2026] [security2:error] [pid 187269:tid 187472] [client 20.219.14.152:43279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/media.php"] [unique_id "aryypNFcyhWr7HDzNGlmPQAAAlY"]
[Wed Sep 30 00:56:36.564316 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.564573 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.577256 2026] [access_compat:error] [pid 186850:tid 187062] [client 47.79.13.168:50590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:36.577508 2026] [access_compat:error] [pid 186850:tid 187062] [client 47.79.13.168:50590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:36.578287 2026] [security2:error] [pid 187269:tid 187499] [client 20.213.164.196:35814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/adminfuns.php"] [unique_id "aryypNFcyhWr7HDzNGlmQAAAAnE"]
[Wed Sep 30 00:56:36.584190 2026] [security2:error] [pid 187269:tid 187491] [client 20.219.2.60:58485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gettest.php"] [unique_id "aryypNFcyhWr7HDzNGlmQQAAAmk"]
[Wed Sep 30 00:56:36.600147 2026] [security2:error] [pid 187269:tid 187420] [client 223.181.30.165:5525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmQgAAAiI"]
[Wed Sep 30 00:56:36.600272 2026] [security2:error] [pid 187269:tid 187420] [client 223.181.30.165:5525] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmQgAAAiI"]
[Wed Sep 30 00:56:36.642095 2026] [security2:error] [pid 186850:tid 187094] [client 4.196.65.241:27284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ccc.php"] [unique_id "aryypE5Phls--iYlcKj7BgAAAXw"]
[Wed Sep 30 00:56:36.654571 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.654866 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.702613 2026] [security2:error] [pid 187269:tid 187425] [client 20.204.161.246:32063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/edit-tags.php"] [unique_id "aryypNFcyhWr7HDzNGlmRAAAAic"]
[Wed Sep 30 00:56:36.744372 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.744625 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.774751 2026] [security2:error] [pid 187269:tid 187515] [client 13.70.4.78:53977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/aa.php"] [unique_id "aryypNFcyhWr7HDzNGlmSQAAAoE"]
[Wed Sep 30 00:56:36.785528 2026] [security2:error] [pid 186850:tid 187007] [client 20.194.30.107:14418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/cilus.php"] [unique_id "aryypE5Phls--iYlcKj7CgAAASU"]
[Wed Sep 30 00:56:36.835169 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:36.835446 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:36.884341 2026] [security2:error] [pid 187269:tid 187529] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryypNFcyhWr7HDzNGlmUAAAAo4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:36.886002 2026] [security2:error] [pid 187269:tid 187461] [client 127.0.0.1:51276] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryypNFcyhWr7HDzNGlmTgAAAks"]
[Wed Sep 30 00:56:36.886072 2026] [security2:error] [pid 187269:tid 187428] [client 74.7.230.0:50756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.vikingmj.com"] [uri "/robots.txt"] [unique_id "aryypNFcyhWr7HDzNGlmTAACKnk"]
[Wed Sep 30 00:56:36.902541 2026] [security2:error] [pid 187269:tid 187459] [client 20.219.2.60:18915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/public/vx.php"] [unique_id "aryypNFcyhWr7HDzNGlmUQAAAkk"]
[Wed Sep 30 00:56:36.919950 2026] [security2:error] [pid 187269:tid 187502] [client 202.179.95.79:56057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmUgAAAnQ"]
[Wed Sep 30 00:56:36.920024 2026] [security2:error] [pid 187269:tid 187502] [client 202.179.95.79:56057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmUgAAAnQ"]
[Wed Sep 30 00:56:36.946279 2026] [security2:error] [pid 187269:tid 187516] [client 52.172.226.14:20496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/install.php"] [unique_id "aryypNFcyhWr7HDzNGlmVAAAAoI"]
[Wed Sep 30 00:56:36.969744 2026] [access_compat:error] [pid 186850:tid 187037] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvODkyMzkwL2N3ZA==
[Wed Sep 30 00:56:36.970001 2026] [access_compat:error] [pid 186850:tid 187037] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvODkyMzkwL2N3ZA==
[Wed Sep 30 00:56:36.992218 2026] [access_compat:error] [pid 186850:tid 187036] [client 47.79.13.175:58070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:36.992478 2026] [access_compat:error] [pid 186850:tid 187036] [client 47.79.13.175:58070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:36.996364 2026] [security2:error] [pid 187269:tid 187503] [client 49.36.41.37:62360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmVQAAAnU"]
[Wed Sep 30 00:56:36.997957 2026] [security2:error] [pid 187269:tid 187503] [client 49.36.41.37:62360] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryypNFcyhWr7HDzNGlmVQAAAnU"]
[Wed Sep 30 00:56:37.009702 2026] [security2:error] [pid 187269:tid 187408] [client 20.204.161.246:48886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/bgbagbcw.php"] [unique_id "aryypdFcyhWr7HDzNGlmVgAAAhY"]
[Wed Sep 30 00:56:37.031520 2026] [security2:error] [pid 186850:tid 187014] [client 20.219.14.152:43246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/images.php"] [unique_id "aryypU5Phls--iYlcKj7EQAAASw"]
[Wed Sep 30 00:56:37.077414 2026] [security2:error] [pid 186850:tid 186995] [client 150.107.232.159:35617] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryypU5Phls--iYlcKj7DwAAARk"]
[Wed Sep 30 00:56:37.077529 2026] [security2:error] [pid 186850:tid 186995] [client 150.107.232.159:35617] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryypU5Phls--iYlcKj7DwAAARk"]
[Wed Sep 30 00:56:37.109858 2026] [security2:error] [pid 187269:tid 187466] [client 13.70.4.78:52656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/z70.php"] [unique_id "aryypdFcyhWr7HDzNGlmWQAAAlA"]
[Wed Sep 30 00:56:37.123653 2026] [security2:error] [pid 187269:tid 187454] [client 4.240.25.22:21924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/css.php"] [unique_id "aryypdFcyhWr7HDzNGlmWgAAAkQ"]
[Wed Sep 30 00:56:37.172732 2026] [security2:error] [pid 187269:tid 187450] [client 20.219.2.60:58450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/myfile.php"] [unique_id "aryypdFcyhWr7HDzNGlmXwAAAkA"]
[Wed Sep 30 00:56:37.191104 2026] [access_compat:error] [pid 187269:tid 187470] [client 47.79.13.168:50594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:37.191391 2026] [access_compat:error] [pid 187269:tid 187470] [client 47.79.13.168:50594] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:37.367739 2026] [security2:error] [pid 187269:tid 187513] [client 20.213.164.196:15949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/av.php"] [unique_id "aryypdFcyhWr7HDzNGlmaAAAAn8"]
[Wed Sep 30 00:56:37.434906 2026] [security2:error] [pid 187269:tid 187415] [client 52.172.226.14:20674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/13k.php"] [unique_id "aryypdFcyhWr7HDzNGlmaQAAAh0"]
[Wed Sep 30 00:56:37.440732 2026] [security2:error] [pid 186850:tid 187044] [client 13.70.4.78:62674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/f35.php"] [unique_id "aryypU5Phls--iYlcKj7GgAAAUo"]
[Wed Sep 30 00:56:37.453376 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:56:37.454299 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 00:56:37.482847 2026] [security2:error] [pid 186850:tid 187047] [client 20.219.2.60:36845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/www.php"] [unique_id "aryypU5Phls--iYlcKj7HQAAAU0"]
[Wed Sep 30 00:56:37.508015 2026] [security2:error] [pid 186850:tid 187001] [client 20.219.14.152:43220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ops.php"] [unique_id "aryypU5Phls--iYlcKj7HgAAAR8"]
[Wed Sep 30 00:56:37.593238 2026] [security2:error] [pid 186850:tid 186872] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryypU5Phls--iYlcKj7IgABYRU"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D89298
[Wed Sep 30 00:56:37.601335 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:37.601604 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:37.678498 2026] [security2:error] [pid 186850:tid 187072] [client 152.59.165.7:63823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryypU5Phls--iYlcKj7JAAAAWY"]
[Wed Sep 30 00:56:37.678647 2026] [security2:error] [pid 186850:tid 187072] [client 152.59.165.7:63823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryypU5Phls--iYlcKj7JAAAAWY"]
[Wed Sep 30 00:56:37.687090 2026] [security2:error] [pid 187269:tid 187486] [client 20.219.2.60:48847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/sid3.php"] [unique_id "aryypdFcyhWr7HDzNGlmcAAAAmQ"]
[Wed Sep 30 00:56:37.692326 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:37.692579 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:37.758832 2026] [security2:error] [pid 187269:tid 187432] [client 13.70.4.78:3245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/adminfuns.php"] [unique_id "aryypdFcyhWr7HDzNGlmcwAAAi4"]
[Wed Sep 30 00:56:37.783699 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:37.783979 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:37.879006 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:37.879422 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:37.944646 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 00:56:37.944922 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 00:56:37.965292 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:37.965559 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:37.966041 2026] [security2:error] [pid 186850:tid 186982] [client 20.219.14.152:43239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/mac.php"] [unique_id "aryypU5Phls--iYlcKj7KgAAAQw"]
[Wed Sep 30 00:56:37.976767 2026] [security2:error] [pid 187269:tid 187412] [client 52.172.226.14:20678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/up.php"] [unique_id "aryypdFcyhWr7HDzNGlmewAAAho"]
[Wed Sep 30 00:56:37.985041 2026] [security2:error] [pid 187269:tid 187425] [client 20.213.164.196:35803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/dex.php"] [unique_id "aryypdFcyhWr7HDzNGlmfAAAAic"]
[Wed Sep 30 00:56:38.058614 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.059074 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.059484 2026] [security2:error] [pid 186850:tid 186980] [client 20.204.42.136:27966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/Jcrop.php"] [unique_id "aryypk5Phls--iYlcKj7MAAAAQo"]
[Wed Sep 30 00:56:38.075548 2026] [security2:error] [pid 186850:tid 187095] [client 203.122.45.246:54782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryypk5Phls--iYlcKj7MQAAAX0"]
[Wed Sep 30 00:56:38.075721 2026] [security2:error] [pid 186850:tid 187095] [client 203.122.45.246:54782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryypk5Phls--iYlcKj7MQAAAX0"]
[Wed Sep 30 00:56:38.092196 2026] [security2:error] [pid 186850:tid 187025] [client 13.70.4.78:3240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/av.php"] [unique_id "aryypk5Phls--iYlcKj7MwAAATc"]
[Wed Sep 30 00:56:38.154939 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.155202 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.181355 2026] [security2:error] [pid 187269:tid 187520] [client 20.204.161.246:32996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/nauik.php"] [unique_id "aryyptFcyhWr7HDzNGlmiwAAAoY"]
[Wed Sep 30 00:56:38.234815 2026] [http2:warn] [pid 178882:tid 179223] [client 40.77.167.130:23906] h2_stream(178882-274-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 00:56:38.239018 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.239286 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:58194] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.319820 2026] [security2:error] [pid 187269:tid 187493] [client 20.219.2.60:18910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/inege.php"] [unique_id "aryyptFcyhWr7HDzNGlmkwAAAms"]
[Wed Sep 30 00:56:38.329155 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.329423 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.405395 2026] [security2:error] [pid 187269:tid 187533] [client 20.219.2.60:58465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/666.php"] [unique_id "aryyptFcyhWr7HDzNGlmlwAAApI"]
[Wed Sep 30 00:56:38.413551 2026] [security2:error] [pid 187269:tid 187453] [client 13.70.4.78:3163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/dex.php"] [unique_id "aryyptFcyhWr7HDzNGlmmAAAAkM"]
[Wed Sep 30 00:56:38.420754 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.421023 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.442456 2026] [security2:error] [pid 187269:tid 187492] [client 20.219.14.152:43284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/pass4.php"] [unique_id "aryyptFcyhWr7HDzNGlmmgAAAmo"]
[Wed Sep 30 00:56:38.473693 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:56:38.474140 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 00:56:38.483320 2026] [security2:error] [pid 186850:tid 187006] [client 72.255.10.32:58630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryypk5Phls--iYlcKj7PQAAASQ"]
[Wed Sep 30 00:56:38.483426 2026] [security2:error] [pid 186850:tid 187006] [client 72.255.10.32:58630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryypk5Phls--iYlcKj7PQAAASQ"]
[Wed Sep 30 00:56:38.495272 2026] [security2:error] [pid 186850:tid 187002] [client 45.138.12.32:15468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tgb.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryypk5Phls--iYlcKj7QAAAASA"]
[Wed Sep 30 00:56:38.499035 2026] [security2:error] [pid 186850:tid 187071] [client 52.172.226.14:20191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/0x1949.php"] [unique_id "aryypk5Phls--iYlcKj7QQAAAWU"]
[Wed Sep 30 00:56:38.511009 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.511267 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.521481 2026] [security2:error] [pid 186850:tid 186986] [client 20.198.74.230:23879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/pep.php"] [unique_id "aryypk5Phls--iYlcKj7QwAAARA"]
[Wed Sep 30 00:56:38.530323 2026] [security2:error] [pid 186850:tid 187019] [client 20.28.180.172:34298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/ebkid.php"] [unique_id "aryypk5Phls--iYlcKj7RAAAATE"]
[Wed Sep 30 00:56:38.571572 2026] [security2:error] [pid 186850:tid 187021] [client 20.213.164.196:15961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/chosen.php"] [unique_id "aryypk5Phls--iYlcKj7RQAAATM"]
[Wed Sep 30 00:56:38.603470 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.603732 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.643293 2026] [security2:error] [pid 187269:tid 187467] [client 20.204.161.246:53889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/tegubsiu.php"] [unique_id "aryyptFcyhWr7HDzNGlmpQAAAlE"]
[Wed Sep 30 00:56:38.647595 2026] [security2:error] [pid 187269:tid 187407] [client 216.73.216.46:58194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyptFcyhWr7HDzNGlmpgAAAhU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY5
[Wed Sep 30 00:56:38.696473 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.696780 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.732195 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryypk5Phls--iYlcKj7TAABNQU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3e527d82ec220b8f1023b9c323599ef5&t=22217
[Wed Sep 30 00:56:38.732240 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryypk5Phls--iYlcKj7TAABNQU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3e527d82ec220b8f1023b9c323599ef5&t=22217
[Wed Sep 30 00:56:38.733247 2026] [security2:error] [pid 187269:tid 187508] [client 13.70.4.78:52663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/chosen.php"] [unique_id "aryyptFcyhWr7HDzNGlmrgAAAno"]
[Wed Sep 30 00:56:38.742642 2026] [autoindex:error] [pid 186850:tid 187084] [client 20.215.88.213:31108] AH01276: Cannot serve directory /home4/txpwqtmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:38.782171 2026] [core:error] [pid 186850:tid 187038] [client 45.138.12.40:51206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:38.782192 2026] [core:error] [pid 186850:tid 187038] [client 45.138.12.40:51206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:38.788313 2026] [access_compat:error] [pid 187269:tid 187494] [client 47.79.13.64:56700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:38.788758 2026] [access_compat:error] [pid 187269:tid 187494] [client 47.79.13.64:56700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:38.789850 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.790299 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.824597 2026] [security2:error] [pid 187269:tid 187518] [client 20.219.2.60:36821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/adoms.php"] [unique_id "aryyptFcyhWr7HDzNGlmswAAAoQ"]
[Wed Sep 30 00:56:38.878572 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.878842 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.913725 2026] [security2:error] [pid 187269:tid 187425] [client 20.219.14.152:43316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/drttewyh.php"] [unique_id "aryyptFcyhWr7HDzNGlmvQAAAic"]
[Wed Sep 30 00:56:38.932434 2026] [security2:error] [pid 187269:tid 187460] [client 43.227.131.37:48538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyptFcyhWr7HDzNGlmuwAAAko"]
[Wed Sep 30 00:56:38.932530 2026] [security2:error] [pid 187269:tid 187460] [client 43.227.131.37:48538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyptFcyhWr7HDzNGlmuwAAAko"]
[Wed Sep 30 00:56:38.953333 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:56:38.953597 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 00:56:38.967369 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:38.967626 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:38.969580 2026] [security2:error] [pid 187269:tid 187482] [client 20.219.2.60:55829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/xxw.php"] [unique_id "aryyptFcyhWr7HDzNGlmvwAAAmA"]
[Wed Sep 30 00:56:39.059604 2026] [security2:error] [pid 187269:tid 187440] [client 13.70.4.78:62704] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.tripleclearhf.com"] [uri "/1.php"] [unique_id "aryyp9FcyhWr7HDzNGlmxQAAAjY"]
[Wed Sep 30 00:56:39.059783 2026] [security2:error] [pid 187269:tid 187440] [client 13.70.4.78:62704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/1.php"] [unique_id "aryyp9FcyhWr7HDzNGlmxQAAAjY"]
[Wed Sep 30 00:56:39.064145 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.064590 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.098562 2026] [security2:error] [pid 187269:tid 187436] [client 52.172.226.14:20172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/cong.php"] [unique_id "aryyp9FcyhWr7HDzNGlmxgAAAjI"]
[Wed Sep 30 00:56:39.149133 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.149425 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.165721 2026] [security2:error] [pid 187269:tid 187527] [client 45.138.12.40:61832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fql.btm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyp9FcyhWr7HDzNGlmywAAAow"]
[Wed Sep 30 00:56:39.203841 2026] [mime:warn] [pid 187269:tid 187502] AH01602: Cannot get media parameter.
[Wed Sep 30 00:56:39.240065 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.240384 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.240959 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.174:40610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:39.241245 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.174:40610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:39.338024 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.338468 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.387411 2026] [security2:error] [pid 187269:tid 187493] [client 20.219.14.152:43295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/sh.php"] [unique_id "aryyp9FcyhWr7HDzNGlm1gAAAms"]
[Wed Sep 30 00:56:39.391113 2026] [security2:error] [pid 187269:tid 187449] [client 13.70.4.78:52642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/radio.php"] [unique_id "aryyp9FcyhWr7HDzNGlm2AAAAj8"]
[Wed Sep 30 00:56:39.394830 2026] [security2:error] [pid 187269:tid 187452] [client 20.204.161.246:28372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wander.php"] [unique_id "aryyp9FcyhWr7HDzNGlm2QAAAkI"]
[Wed Sep 30 00:56:39.421648 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.421913 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.454662 2026] [security2:error] [pid 187269:tid 187431] [client 20.219.2.60:36738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/tymn.php"] [unique_id "aryyp9FcyhWr7HDzNGlm3QAAAi0"]
[Wed Sep 30 00:56:39.504262 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:56:39.504987 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 00:56:39.516616 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.516922 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.599771 2026] [security2:error] [pid 186850:tid 187088] [client 39.44.16.112:52666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyp05Phls--iYlcKj7WgAAAXY"]
[Wed Sep 30 00:56:39.600498 2026] [security2:error] [pid 186850:tid 187088] [client 39.44.16.112:52666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyp05Phls--iYlcKj7WgAAAXY"]
[Wed Sep 30 00:56:39.605717 2026] [access_compat:error] [pid 187269:tid 187457] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.605984 2026] [access_compat:error] [pid 187269:tid 187457] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.653909 2026] [security2:error] [pid 187269:tid 187476] [client 52.172.226.14:20725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/bs1.php"] [unique_id "aryyp9FcyhWr7HDzNGlm5gAAAlo"]
[Wed Sep 30 00:56:39.655290 2026] [security2:error] [pid 186850:tid 187044] [client 20.219.2.60:50548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-png.php"] [unique_id "aryyp05Phls--iYlcKj7YAAAAUo"]
[Wed Sep 30 00:56:39.696784 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.697096 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.707199 2026] [security2:error] [pid 187269:tid 187475] [client 13.70.4.78:3229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/blacks.php"] [unique_id "aryyp9FcyhWr7HDzNGlm6QAAAlk"]
[Wed Sep 30 00:56:39.742469 2026] [security2:error] [pid 186850:tid 187054] [client 49.205.105.16:14283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyp05Phls--iYlcKj7ZAAAAVQ"]
[Wed Sep 30 00:56:39.742592 2026] [security2:error] [pid 186850:tid 187054] [client 49.205.105.16:14283] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyp05Phls--iYlcKj7ZAAAAVQ"]
[Wed Sep 30 00:56:39.787701 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.787977 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.861562 2026] [security2:error] [pid 186850:tid 187077] [client 20.219.14.152:44884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/groud1.php"] [unique_id "aryyp05Phls--iYlcKj7aAAAAWs"]
[Wed Sep 30 00:56:39.878838 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:39.879098 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:39.952758 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:39.953011 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:39.994613 2026] [security2:error] [pid 186850:tid 187098] [client 20.219.2.60:19357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/nw.php"] [unique_id "aryyp05Phls--iYlcKj7bgAAAYA"]
[Wed Sep 30 00:56:39.999847 2026] [core:error] [pid 187269:tid 187468] [client 43.134.100.175:42154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://buyclenbuterolstore.info
[Wed Sep 30 00:56:39.999869 2026] [core:error] [pid 187269:tid 187468] [client 43.134.100.175:42154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://buyclenbuterolstore.info
[Wed Sep 30 00:56:40.030435 2026] [security2:error] [pid 186850:tid 187095] [client 13.70.4.78:62706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/alfa.php"] [unique_id "aryyqE5Phls--iYlcKj7cgAAAX0"]
[Wed Sep 30 00:56:40.037900 2026] [security2:error] [pid 187269:tid 187492] [client 103.24.86.56:54733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlm9QAAAmo"]
[Wed Sep 30 00:56:40.038016 2026] [security2:error] [pid 187269:tid 187492] [client 103.24.86.56:54733] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlm9QAAAmo"]
[Wed Sep 30 00:56:40.270913 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:40.271194 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:40.283960 2026] [access_compat:error] [pid 187269:tid 187531] [client 47.79.13.1:37728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:40.284231 2026] [access_compat:error] [pid 187269:tid 187531] [client 47.79.13.1:37728] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:40.305483 2026] [security2:error] [pid 187269:tid 187499] [client 52.172.226.14:20532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryyqNFcyhWr7HDzNGlnFwAAAnE"]
[Wed Sep 30 00:56:40.336091 2026] [security2:error] [pid 186850:tid 187015] [client 20.204.161.246:48924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/xxw.php"] [unique_id "aryyqE5Phls--iYlcKj7fwAAAS0"]
[Wed Sep 30 00:56:40.345001 2026] [security2:error] [pid 187269:tid 187411] [client 13.70.4.78:3205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyqNFcyhWr7HDzNGlnGwAAAhk"]
[Wed Sep 30 00:56:40.362856 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.14.152:43291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/bro.php"] [unique_id "aryyqE5Phls--iYlcKj7gAAAASQ"]
[Wed Sep 30 00:56:40.436956 2026] [security2:error] [pid 187269:tid 187502] [client 20.204.161.246:62710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wsd.php"] [unique_id "aryyqNFcyhWr7HDzNGlnIwAAAnQ"]
[Wed Sep 30 00:56:40.486470 2026] [security2:error] [pid 187269:tid 187408] [client 20.219.2.60:63279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/222.php"] [unique_id "aryyqNFcyhWr7HDzNGlnJQAAAhY"]
[Wed Sep 30 00:56:40.491706 2026] [security2:error] [pid 187269:tid 187504] [client 20.28.180.172:34283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/edorxrr.php"] [unique_id "aryyqNFcyhWr7HDzNGlnJgAAAnY"]
[Wed Sep 30 00:56:40.493668 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 00:56:40.493939 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 00:56:40.495108 2026] [security2:error] [pid 187269:tid 187327] [remote 57.141.14.68:34226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "aryyqNFcyhWr7HDzNGlnJwACNzI"]
[Wed Sep 30 00:56:40.664624 2026] [security2:error] [pid 187269:tid 187533] [client 13.70.4.78:62671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/b8.php"] [unique_id "aryyqNFcyhWr7HDzNGlnLQAAApI"]
[Wed Sep 30 00:56:40.708531 2026] [security2:error] [pid 186850:tid 187010] [client 20.219.2.60:36816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/eetu.php"] [unique_id "aryyqE5Phls--iYlcKj7jAAAASg"]
[Wed Sep 30 00:56:40.776062 2026] [security2:error] [pid 186850:tid 186900] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.aws/.env"] [unique_id "aryyqE5Phls--iYlcKj7kgABdTE"]
[Wed Sep 30 00:56:40.776918 2026] [security2:error] [pid 186850:tid 186900] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.aws/credentials.bak"] [unique_id "aryyqE5Phls--iYlcKj7kwABdTE"]
[Wed Sep 30 00:56:40.786641 2026] [security2:error] [pid 186850:tid 186981] [client 20.194.30.107:25153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/txets.php"] [unique_id "aryyqE5Phls--iYlcKj7lwAAAQs"]
[Wed Sep 30 00:56:40.830123 2026] [security2:error] [pid 187269:tid 187522] [client 20.219.14.152:43225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ac83.php"] [unique_id "aryyqNFcyhWr7HDzNGlnNwAAAoc"]
[Wed Sep 30 00:56:40.841041 2026] [security2:error] [pid 187269:tid 187426] [client 223.235.102.107:26325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlnOAAAAig"]
[Wed Sep 30 00:56:40.841330 2026] [security2:error] [pid 186850:tid 187071] [client 105.112.178.79:38120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.pqm.svd.mybluehost.me"] [uri "/__ss_probe_b2a78b062b402e66d114a5fb69ec7e26__"] [unique_id "aryyqE5Phls--iYlcKj7mQAAAWU"]
[Wed Sep 30 00:56:40.841413 2026] [security2:error] [pid 187269:tid 187426] [client 223.235.102.107:26325] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlnOAAAAig"]
[Wed Sep 30 00:56:40.917469 2026] [security2:error] [pid 186850:tid 186983] [client 52.172.226.14:20517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/termps.php"] [unique_id "aryyqE5Phls--iYlcKj7mwAAAQ0"]
[Wed Sep 30 00:56:40.962938 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:56:40.963384 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:56:40.970241 2026] [security2:error] [pid 187269:tid 187454] [client 103.159.192.142:59706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlnOgAAAkQ"]
[Wed Sep 30 00:56:40.970364 2026] [security2:error] [pid 187269:tid 187454] [client 103.159.192.142:59706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyqNFcyhWr7HDzNGlnOgAAAkQ"]
[Wed Sep 30 00:56:40.977663 2026] [security2:error] [pid 187269:tid 187500] [client 13.70.4.78:53963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/xex.php"] [unique_id "aryyqNFcyhWr7HDzNGlnOwAAAnI"]
[Wed Sep 30 00:56:41.117756 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyqU5Phls--iYlcKj7ogABGFQ"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=7066cb531cd326b0e4193b143fd2c03a
[Wed Sep 30 00:56:41.117788 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyqU5Phls--iYlcKj7ogABGFQ"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=7066cb531cd326b0e4193b143fd2c03a
[Wed Sep 30 00:56:41.121042 2026] [security2:error] [pid 187269:tid 187518] [client 20.204.42.136:57153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/php8.php"] [unique_id "aryyqdFcyhWr7HDzNGlnPgAAAoQ"]
[Wed Sep 30 00:56:41.129519 2026] [security2:error] [pid 187269:tid 187420] [client 20.219.2.60:58468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-blog.php"] [unique_id "aryyqdFcyhWr7HDzNGlnPwAAAiI"]
[Wed Sep 30 00:56:41.180983 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.181278 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.217519 2026] [security2:error] [pid 187269:tid 187435] [client 20.194.30.107:25907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/222.php"] [unique_id "aryyqdFcyhWr7HDzNGlnQwAAAjE"]
[Wed Sep 30 00:56:41.301018 2026] [security2:error] [pid 186850:tid 187064] [client 13.70.4.78:3179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/ass.php"] [unique_id "aryyqU5Phls--iYlcKj7pgAAAV4"]
[Wed Sep 30 00:56:41.309799 2026] [security2:error] [pid 187269:tid 187514] [client 20.219.14.152:43285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/class-wp-http-client.php"] [unique_id "aryyqdFcyhWr7HDzNGlnSAAAAoA"]
[Wed Sep 30 00:56:41.351172 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.351566 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.376482 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.376800 2026] [security2:error] [pid 187269:tid 187413] [client 52.172.226.14:20189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/brand.php"] [unique_id "aryyqdFcyhWr7HDzNGlnTwAAAhs"]
[Wed Sep 30 00:56:41.376897 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.420048 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.420314 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.461501 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:34576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.461752 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:34576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.475901 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.476193 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.480583 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:10225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.480962 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:10225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.489933 2026] [access_compat:error] [pid 186850:tid 187044] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:41.490382 2026] [access_compat:error] [pid 186850:tid 187044] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:41.495499 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.495773 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:2936] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.512759 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:2067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.513068 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:2067] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.552765 2026] [security2:error] [pid 187269:tid 187466] [client 45.138.12.41:24270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp-links-opml.php"] [unique_id "aryyqdFcyhWr7HDzNGlnWQAAAlA"]
[Wed Sep 30 00:56:41.565730 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.566041 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.572336 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:14372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.572602 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.572775 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:14372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.573047 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.630148 2026] [security2:error] [pid 186850:tid 186944] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyqU5Phls--iYlcKj7sAABHl0"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=0cab04745f819311299c6f1bf2ae849b
[Wed Sep 30 00:56:41.630176 2026] [security2:error] [pid 186850:tid 186944] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyqU5Phls--iYlcKj7sAABHl0"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=0cab04745f819311299c6f1bf2ae849b
[Wed Sep 30 00:56:41.643476 2026] [security2:error] [pid 186850:tid 187106] [client 13.70.4.78:62659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wsd.php"] [unique_id "aryyqU5Phls--iYlcKj7sgAAAYg"]
[Wed Sep 30 00:56:41.646395 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.646669 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.653622 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.653889 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.693322 2026] [security2:error] [pid 186850:tid 186999] [client 20.219.2.60:58460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryyqU5Phls--iYlcKj7tQAAAR0"]
[Wed Sep 30 00:56:41.700257 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.700533 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.784934 2026] [security2:error] [pid 187269:tid 187533] [client 20.219.14.152:43244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/zoo2.php"] [unique_id "aryyqdFcyhWr7HDzNGlnaAAAApI"]
[Wed Sep 30 00:56:41.792064 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.792447 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.806050 2026] [security2:error] [pid 187269:tid 187495] [client 20.204.161.246:28389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/media.php"] [unique_id "aryyqdFcyhWr7HDzNGlnaQAAAm0"]
[Wed Sep 30 00:56:41.844366 2026] [security2:error] [pid 187269:tid 187431] [client 52.172.226.14:20202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/atomlib.php"] [unique_id "aryyqdFcyhWr7HDzNGlnagAAAi0"]
[Wed Sep 30 00:56:41.852196 2026] [security2:error] [pid 187269:tid 187474] [client 223.181.60.167:30923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyqdFcyhWr7HDzNGlnawAAAlg"]
[Wed Sep 30 00:56:41.852504 2026] [security2:error] [pid 187269:tid 187474] [client 223.181.60.167:30923] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyqdFcyhWr7HDzNGlnawAAAlg"]
[Wed Sep 30 00:56:41.883043 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.883304 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.898462 2026] [security2:error] [pid 187269:tid 187406] [client 20.219.2.60:36859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/dx.php"] [unique_id "aryyqdFcyhWr7HDzNGlnbQAAAhQ"]
[Wed Sep 30 00:56:41.945853 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:56:41.946262 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 00:56:41.961750 2026] [security2:error] [pid 186850:tid 187059] [client 13.70.4.78:62680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/BDKR28WP.php"] [unique_id "aryyqU5Phls--iYlcKj7vwAAAVk"]
[Wed Sep 30 00:56:41.971403 2026] [security2:error] [pid 186850:tid 187050] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyqU5Phls--iYlcKj7wAAAAVA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:41.975981 2026] [security2:error] [pid 186850:tid 187057] [client 20.219.2.60:19455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/t.php"] [unique_id "aryyqU5Phls--iYlcKj7wgAAAVc"]
[Wed Sep 30 00:56:41.980549 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:41.981006 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:41.991208 2026] [security2:error] [pid 186850:tid 187066] [client 74.7.175.131:56408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.ftw.zym.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryyqU5Phls--iYlcKj7xAABYGI"]
[Wed Sep 30 00:56:42.071142 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.071492 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.161766 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.162063 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:29585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.205488 2026] [access_compat:error] [pid 187269:tid 187513] [client 47.79.13.178:56916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:42.206020 2026] [access_compat:error] [pid 187269:tid 187513] [client 47.79.13.178:56916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:42.224530 2026] [security2:error] [pid 186850:tid 187080] [client 216.73.216.46:29585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyqk5Phls--iYlcKj7zAAAAW4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTk4
[Wed Sep 30 00:56:42.250933 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.251200 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.266688 2026] [security2:error] [pid 187269:tid 187468] [client 20.219.14.152:44881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/zoo1.php"] [unique_id "aryyqtFcyhWr7HDzNGlnfAAAAlI"]
[Wed Sep 30 00:56:42.293765 2026] [security2:error] [pid 187269:tid 187455] [client 13.70.4.78:54006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wmore1.php"] [unique_id "aryyqtFcyhWr7HDzNGlngQAAAkU"]
[Wed Sep 30 00:56:42.315575 2026] [security2:error] [pid 186850:tid 187056] [client 20.219.2.60:59587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/lib.php"] [unique_id "aryyqk5Phls--iYlcKj7zwAAAVY"]
[Wed Sep 30 00:56:42.346554 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.346990 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.398765 2026] [security2:error] [pid 186850:tid 187084] [client 20.70.173.30:16305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/dex.php"] [unique_id "aryyqk5Phls--iYlcKj70QAAAXI"]
[Wed Sep 30 00:56:42.403032 2026] [security2:error] [pid 186850:tid 187043] [client 20.204.161.246:54420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/router.php"] [unique_id "aryyqk5Phls--iYlcKj70gAAAUk"]
[Wed Sep 30 00:56:42.432043 2026] [security2:error] [pid 186850:tid 187038] [client 52.172.226.14:20198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/product.php"] [unique_id "aryyqk5Phls--iYlcKj70wAAAUQ"]
[Wed Sep 30 00:56:42.435668 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.435980 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.479108 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:42.479573 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:56:42.512091 2026] [security2:error] [pid 187269:tid 187501] [client 20.198.74.230:23916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/bhigtouj.php"] [unique_id "aryyqtFcyhWr7HDzNGlniwAAAnM"]
[Wed Sep 30 00:56:42.526095 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.526459 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.613469 2026] [security2:error] [pid 186850:tid 187062] [client 13.70.4.78:53973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/z60.php"] [unique_id "aryyqk5Phls--iYlcKj72wAAAVw"]
[Wed Sep 30 00:56:42.617287 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.617560 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.665783 2026] [security2:error] [pid 187269:tid 187440] [client 20.204.161.246:41531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/images.php"] [unique_id "aryyqtFcyhWr7HDzNGlnjgAAAjY"]
[Wed Sep 30 00:56:42.708505 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.708772 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.715686 2026] [security2:error] [pid 186850:tid 187041] [client 106.214.2.47:5659] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyqk5Phls--iYlcKj73gAAAUc"]
[Wed Sep 30 00:56:42.717856 2026] [security2:error] [pid 187269:tid 187408] [client 20.219.14.152:43209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/class-ajax.php"] [unique_id "aryyqtFcyhWr7HDzNGlnkAAAAhY"]
[Wed Sep 30 00:56:42.722222 2026] [security2:error] [pid 186850:tid 187041] [client 106.214.2.47:5659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyqk5Phls--iYlcKj73gAAAUc"]
[Wed Sep 30 00:56:42.778662 2026] [security2:error] [pid 186850:tid 186994] [client 20.194.30.107:14449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryyqk5Phls--iYlcKj74AAAARg"]
[Wed Sep 30 00:56:42.801861 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.802319 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.814893 2026] [security2:error] [pid 187269:tid 187433] [client 20.219.2.60:48888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/edit.php"] [unique_id "aryyqtFcyhWr7HDzNGlnkwAAAi8"]
[Wed Sep 30 00:56:42.859354 2026] [security2:error] [pid 186850:tid 186878] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.env"] [unique_id "aryyqE5Phls--iYlcKj76wABdRs"]
[Wed Sep 30 00:56:42.859353 2026] [security2:error] [pid 186850:tid 186934] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.docker/.env"] [unique_id "aryyqE5Phls--iYlcKj77AABdVM"]
[Wed Sep 30 00:56:42.859906 2026] [security2:error] [pid 186850:tid 186940] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aryyqE5Phls--iYlcKj76QABdVk"]
[Wed Sep 30 00:56:42.887265 2026] [security2:error] [pid 186850:tid 187088] [client 20.219.2.60:36792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-kikikoko.php"] [unique_id "aryyqk5Phls--iYlcKj79AAAAXY"]
[Wed Sep 30 00:56:42.894490 2026] [security2:error] [pid 187269:tid 187534] [client 52.172.226.14:20221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/function.php"] [unique_id "aryyqtFcyhWr7HDzNGlnlwAAApM"]
[Wed Sep 30 00:56:42.895653 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.896118 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:42.930310 2026] [security2:error] [pid 187269:tid 187532] [client 13.70.4.78:62673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/24.php"] [unique_id "aryyqtFcyhWr7HDzNGlnmwAAApE"]
[Wed Sep 30 00:56:42.979091 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:56:42.979535 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 00:56:42.982994 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:42.983424 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.022432 2026] [security2:error] [pid 187269:tid 187431] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryyq9FcyhWr7HDzNGlnngAAAi0"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:43.071888 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.072167 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.093677 2026] [security2:error] [pid 186850:tid 187089] [client 116.72.182.19:58197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyq05Phls--iYlcKj8AAAAAXc"]
[Wed Sep 30 00:56:43.093872 2026] [security2:error] [pid 186850:tid 187089] [client 116.72.182.19:58197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyq05Phls--iYlcKj8AAAAAXc"]
[Wed Sep 30 00:56:43.125242 2026] [security2:error] [pid 186850:tid 186860] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.env.backup"] [unique_id "aryyq05Phls--iYlcKj8AwABdQk"]
[Wed Sep 30 00:56:43.130910 2026] [security2:error] [pid 187269:tid 187350] [remote 173.254.29.95:40512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.29.254.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uscblogistics.com"] [uri "/wp-login.php"] [unique_id "aryyq9FcyhWr7HDzNGlnoQACeEk"]
[Wed Sep 30 00:56:43.135483 2026] [security2:error] [pid 187269:tid 187366] [remote 173.254.29.95:40512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.29.254.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uscblogistics.com"] [uri "/wp-login.php"] [unique_id "aryyq9FcyhWr7HDzNGlnpgACWVk"], referer: https://uscblogistics.com/wp-login.php
[Wed Sep 30 00:56:43.150654 2026] [security2:error] [pid 187269:tid 187351] [remote 173.254.29.95:40512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.29.254.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uscblogistics.com"] [uri "/xmlrpc.php"] [unique_id "aryyq9FcyhWr7HDzNGlnpwACKEo"]
[Wed Sep 30 00:56:43.150945 2026] [security2:error] [pid 187269:tid 187426] [client 173.254.29.95:40512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "uscblogistics.com"] [uri "/xmlrpc.php"] [unique_id "aryyq9FcyhWr7HDzNGlnpwACKEo"]
[Wed Sep 30 00:56:43.166299 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.166754 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.181594 2026] [security2:error] [pid 187269:tid 187422] [client 4.240.25.22:21912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-content/index.php"] [unique_id "aryyq9FcyhWr7HDzNGlnrQAAAiQ"]
[Wed Sep 30 00:56:43.202801 2026] [security2:error] [pid 187269:tid 187524] [client 20.219.14.152:43299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/gm.php"] [unique_id "aryyq9FcyhWr7HDzNGlnrgAAAok"]
[Wed Sep 30 00:56:43.233622 2026] [security2:error] [pid 186850:tid 187000] [client 45.156.62.96:59044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyq05Phls--iYlcKj8BAAAAR4"]
[Wed Sep 30 00:56:43.252318 2026] [security2:error] [pid 187269:tid 187434] [client 13.70.4.78:3212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/xxw.php"] [unique_id "aryyq9FcyhWr7HDzNGlnrwAAAjA"]
[Wed Sep 30 00:56:43.257646 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.258068 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.259107 2026] [security2:error] [pid 186850:tid 186932] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/.env.bak"] [unique_id "aryyq05Phls--iYlcKj8CQABdVE"]
[Wed Sep 30 00:56:43.296703 2026] [security2:error] [pid 186850:tid 187039] [client 20.219.2.60:59608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ioxi-o.php"] [unique_id "aryyq05Phls--iYlcKj8DwAAAUU"]
[Wed Sep 30 00:56:43.346291 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.346708 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.384187 2026] [security2:error] [pid 187269:tid 187494] [client 43.104.4.219:12712] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "aryyq9FcyhWr7HDzNGlntQAAAmw"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:43.386558 2026] [security2:error] [pid 187269:tid 187498] [client 52.172.226.14:21059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/0x.php"] [unique_id "aryyq9FcyhWr7HDzNGlntgAAAnA"]
[Wed Sep 30 00:56:43.442854 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.443331 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.504457 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:56:43.504849 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 00:56:43.527162 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.527435 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.532113 2026] [security2:error] [pid 186850:tid 187034] [client 127.0.0.1:35512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryyq05Phls--iYlcKj8HgAAAUA"]
[Wed Sep 30 00:56:43.532350 2026] [security2:error] [pid 187269:tid 187528] [client 74.7.230.28:46086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.cqg.bzn.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryyq9FcyhWr7HDzNGlnuAACjVU"]
[Wed Sep 30 00:56:43.561395 2026] [security2:error] [pid 187269:tid 187514] [client 43.104.4.217:18372] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aryyq9FcyhWr7HDzNGlnwAAAAoA"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:43.579439 2026] [security2:error] [pid 187269:tid 187438] [client 13.70.4.78:53961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/bnmtp.php"] [unique_id "aryyq9FcyhWr7HDzNGlnwQAAAjQ"]
[Wed Sep 30 00:56:43.607448 2026] [security2:error] [pid 187269:tid 187460] [client 43.104.4.189:15430] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "aryyq9FcyhWr7HDzNGlnwwAAAko"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:43.611592 2026] [security2:error] [pid 186850:tid 187030] [client 43.104.4.209:49047] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "aryyq05Phls--iYlcKj8IwAAATw"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:43.620990 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.621433 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.677596 2026] [security2:error] [pid 186850:tid 186990] [client 20.219.14.152:43232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/class-wp-site-list.php"] [unique_id "aryyq05Phls--iYlcKj8JQAAARQ"]
[Wed Sep 30 00:56:43.691017 2026] [security2:error] [pid 186850:tid 187024] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryyq05Phls--iYlcKj8JgAAATY"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:43.709185 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.709458 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.728588 2026] [security2:error] [pid 186850:tid 186987] [client 20.204.161.246:41520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/ops.php"] [unique_id "aryyq05Phls--iYlcKj8KAAAARE"]
[Wed Sep 30 00:56:43.801474 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.801752 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.814896 2026] [security2:error] [pid 187269:tid 187416] [client 20.219.2.60:49574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ajax.php"] [unique_id "aryyq9FcyhWr7HDzNGln0wAAAh4"]
[Wed Sep 30 00:56:43.897640 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.897735 2026] [security2:error] [pid 186850:tid 187040] [client 52.172.226.14:20511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/index.php"] [unique_id "aryyq05Phls--iYlcKj8KwAAAUY"]
[Wed Sep 30 00:56:43.898068 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.910775 2026] [security2:error] [pid 186850:tid 187020] [client 13.70.4.78:3187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/ebkid.php"] [unique_id "aryyq05Phls--iYlcKj8LAAAATI"]
[Wed Sep 30 00:56:43.951508 2026] [security2:error] [pid 187269:tid 187410] [client 49.43.163.212:56887] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyq9FcyhWr7HDzNGln1AAAAhg"]
[Wed Sep 30 00:56:43.951719 2026] [security2:error] [pid 187269:tid 187410] [client 49.43.163.212:56887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyq9FcyhWr7HDzNGln1AAAAhg"]
[Wed Sep 30 00:56:43.955562 2026] [security2:error] [pid 187269:tid 187515] [client 45.138.12.32:15546] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kbi.fah.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyq9FcyhWr7HDzNGln1QAAAoE"]
[Wed Sep 30 00:56:43.982930 2026] [security2:error] [pid 186850:tid 187043] [client 20.194.30.107:25189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/cilus.php"] [unique_id "aryyq05Phls--iYlcKj8LgAAAUk"]
[Wed Sep 30 00:56:43.983961 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:43.984249 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:43.989089 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:56:43.989537 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 00:56:44.035382 2026] [security2:error] [pid 187269:tid 187474] [client 20.219.2.60:19453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryyrNFcyhWr7HDzNGln1wAAAlg"]
[Wed Sep 30 00:56:44.075497 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.075776 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.104167 2026] [security2:error] [pid 187269:tid 187527] [client 45.138.12.43:25302] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pix.trp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyrNFcyhWr7HDzNGln2gAAAow"]
[Wed Sep 30 00:56:44.162329 2026] [security2:error] [pid 186850:tid 187055] [client 20.219.14.152:43245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/asd2.php"] [unique_id "aryyrE5Phls--iYlcKj8MwAAAVU"]
[Wed Sep 30 00:56:44.164155 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.164441 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.219351 2026] [security2:error] [pid 187269:tid 187361] [remote 220.181.108.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryyrNFcyhWr7HDzNGln4wACUFQ"]
[Wed Sep 30 00:56:44.227773 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:53955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/133.php"] [unique_id "aryyrNFcyhWr7HDzNGln5QAAAn8"]
[Wed Sep 30 00:56:44.260842 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.261254 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.272191 2026] [security2:error] [pid 187269:tid 187509] [client 182.75.216.230:59900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryyrNFcyhWr7HDzNGln6AAAAns"]
[Wed Sep 30 00:56:44.272370 2026] [security2:error] [pid 187269:tid 187509] [client 182.75.216.230:59900] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryyrNFcyhWr7HDzNGln6AAAAns"]
[Wed Sep 30 00:56:44.274793 2026] [security2:error] [pid 187269:tid 187520] [client 155.190.6.18:34612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyrNFcyhWr7HDzNGln5wAAAoY"]
[Wed Sep 30 00:56:44.274899 2026] [security2:error] [pid 187269:tid 187520] [client 155.190.6.18:34612] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyrNFcyhWr7HDzNGln5wAAAoY"]
[Wed Sep 30 00:56:44.311608 2026] [security2:error] [pid 186850:tid 187008] [client 116.197.133.25:55889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyrE5Phls--iYlcKj8NQAAASY"]
[Wed Sep 30 00:56:44.311743 2026] [security2:error] [pid 186850:tid 187008] [client 116.197.133.25:55889] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyrE5Phls--iYlcKj8NQAAASY"]
[Wed Sep 30 00:56:44.337992 2026] [security2:error] [pid 186850:tid 186898] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrE5Phls--iYlcKj8NgABFy8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=c9015b5dac09a78186b2fd734e6a7991
[Wed Sep 30 00:56:44.338014 2026] [security2:error] [pid 186850:tid 186898] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrE5Phls--iYlcKj8NgABFy8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=c9015b5dac09a78186b2fd734e6a7991
[Wed Sep 30 00:56:44.342675 2026] [security2:error] [pid 186850:tid 187094] [client 20.219.2.60:50514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/install.php"] [unique_id "aryyrE5Phls--iYlcKj8OAAAAXw"]
[Wed Sep 30 00:56:44.346543 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.346796 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.372851 2026] [security2:error] [pid 186850:tid 187071] [client 52.172.226.14:20686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryyrE5Phls--iYlcKj8OgAAAWU"]
[Wed Sep 30 00:56:44.390007 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.30.107:17366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/0.php"] [unique_id "aryyrE5Phls--iYlcKj8OwAAAQ0"]
[Wed Sep 30 00:56:44.422207 2026] [security2:error] [pid 187269:tid 187451] [client 20.219.2.60:36708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/file61.php"] [unique_id "aryyrNFcyhWr7HDzNGln7gAAAkE"]
[Wed Sep 30 00:56:44.453358 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.453784 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.472381 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:44.472800 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:44.478289 2026] [security2:error] [pid 187269:tid 187470] [client 20.204.161.246:33011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/BDKR28WP.php"] [unique_id "aryyrNFcyhWr7HDzNGln7wAAAlQ"]
[Wed Sep 30 00:56:44.534692 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.534958 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.555201 2026] [security2:error] [pid 187269:tid 187407] [client 13.70.4.78:3198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/x33.php"] [unique_id "aryyrNFcyhWr7HDzNGln8QAAAhU"]
[Wed Sep 30 00:56:44.564693 2026] [security2:error] [pid 186850:tid 186854] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrE5Phls--iYlcKj8QAABGAM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=52e903dd68687fd7a0df65282d67860e&t=22212
[Wed Sep 30 00:56:44.564723 2026] [security2:error] [pid 186850:tid 186854] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrE5Phls--iYlcKj8QAABGAM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=52e903dd68687fd7a0df65282d67860e&t=22212
[Wed Sep 30 00:56:44.589232 2026] [security2:error] [pid 186850:tid 187063] [client 20.204.42.136:27403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/coffe.php"] [unique_id "aryyrE5Phls--iYlcKj8QQAAAV0"]
[Wed Sep 30 00:56:44.625369 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.625624 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.635357 2026] [security2:error] [pid 186850:tid 187047] [client 20.219.14.152:44901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/cdc.php"] [unique_id "aryyrE5Phls--iYlcKj8RQAAAU0"]
[Wed Sep 30 00:56:44.710068 2026] [security2:error] [pid 187269:tid 187512] [client 20.194.30.107:14461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/reviall.php"] [unique_id "aryyrNFcyhWr7HDzNGln9wAAAn4"]
[Wed Sep 30 00:56:44.718968 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.719245 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.827874 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.828141 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.847714 2026] [security2:error] [pid 187269:tid 187490] [client 52.172.226.14:20672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/classwithtostring.php"] [unique_id "aryyrNFcyhWr7HDzNGln-gAAAmg"]
[Wed Sep 30 00:56:44.869565 2026] [security2:error] [pid 186850:tid 187077] [client 13.70.4.78:3213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/cae.php"] [unique_id "aryyrE5Phls--iYlcKj8SQAAAWs"]
[Wed Sep 30 00:56:44.888420 2026] [security2:error] [pid 187269:tid 187511] [client 20.219.2.60:49569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/public/wp-blog.php"] [unique_id "aryyrNFcyhWr7HDzNGln-wAAAn0"]
[Wed Sep 30 00:56:44.899506 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.899777 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:44.956592 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:56:44.956879 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 00:56:44.969852 2026] [security2:error] [pid 186850:tid 187075] [client 20.213.164.196:15960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/radio.php"] [unique_id "aryyrE5Phls--iYlcKj8TQAAAWk"]
[Wed Sep 30 00:56:44.992470 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:44.992542 2026] [security2:error] [pid 187269:tid 187480] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyrNFcyhWr7HDzNGln_wAAAl4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:44.992735 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.021426 2026] [autoindex:error] [pid 187269:tid 187492] [client 20.215.88.213:31118] AH01276: Cannot serve directory /home4/txpwqtmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:45.051295 2026] [security2:error] [pid 186850:tid 186952] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrU5Phls--iYlcKj8TwABOWU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=17233&sid=0c00c91fc995259e2ea74d05c409444e
[Wed Sep 30 00:56:45.051329 2026] [security2:error] [pid 186850:tid 186952] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrU5Phls--iYlcKj8TwABOWU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=17233&sid=0c00c91fc995259e2ea74d05c409444e
[Wed Sep 30 00:56:45.081585 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.081858 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.101159 2026] [security2:error] [pid 187269:tid 187488] [client 4.196.65.241:2535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/sm.php"] [unique_id "aryyrdFcyhWr7HDzNGloAwAAAmY"]
[Wed Sep 30 00:56:45.131926 2026] [security2:error] [pid 187269:tid 187462] [client 20.219.14.152:43298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/Components.php"] [unique_id "aryyrdFcyhWr7HDzNGloBQAAAkw"]
[Wed Sep 30 00:56:45.172269 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.172542 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.192366 2026] [security2:error] [pid 187269:tid 187487] [client 13.70.4.78:3162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/txets.php"] [unique_id "aryyrdFcyhWr7HDzNGloCwAAAmU"]
[Wed Sep 30 00:56:45.259659 2026] [security2:error] [pid 187269:tid 187495] [client 20.204.161.246:48408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/cibrkysaeng.php"] [unique_id "aryyrdFcyhWr7HDzNGloDwAAAm0"]
[Wed Sep 30 00:56:45.264618 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.264884 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.291465 2026] [security2:error] [pid 187269:tid 187530] [client 37.41.16.35:60947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloEAAAAo8"]
[Wed Sep 30 00:56:45.291619 2026] [security2:error] [pid 187269:tid 187530] [client 37.41.16.35:60947] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloEAAAAo8"]
[Wed Sep 30 00:56:45.321094 2026] [security2:error] [pid 187269:tid 187412] [client 103.159.192.142:59967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloEQAAAho"]
[Wed Sep 30 00:56:45.321239 2026] [security2:error] [pid 187269:tid 187412] [client 103.159.192.142:59967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloEQAAAho"]
[Wed Sep 30 00:56:45.354311 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.354606 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.451902 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.452655 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.459080 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:45.459580 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:45.508683 2026] [security2:error] [pid 186850:tid 187053] [client 52.172.226.14:20522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/dropdown.php"] [unique_id "aryyrU5Phls--iYlcKj8XQAAAVM"]
[Wed Sep 30 00:56:45.508696 2026] [security2:error] [pid 186850:tid 187068] [client 20.219.2.60:45320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/nw.php"] [unique_id "aryyrU5Phls--iYlcKj8XAAAAWI"]
[Wed Sep 30 00:56:45.509776 2026] [security2:error] [pid 186850:tid 187030] [client 13.70.4.78:62684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wp-update.php"] [unique_id "aryyrU5Phls--iYlcKj8XgAAATw"]
[Wed Sep 30 00:56:45.535399 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.535715 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.625898 2026] [security2:error] [pid 187269:tid 187519] [client 20.219.14.152:43317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/admin.php/xl9.php"] [unique_id "aryyrdFcyhWr7HDzNGloHQAAAoU"]
[Wed Sep 30 00:56:45.627016 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.627304 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.683188 2026] [security2:error] [pid 187269:tid 187440] [client 116.193.128.26:56065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloHwAAAjY"]
[Wed Sep 30 00:56:45.683419 2026] [security2:error] [pid 187269:tid 187440] [client 116.193.128.26:56065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloHwAAAjY"]
[Wed Sep 30 00:56:45.700904 2026] [security2:error] [pid 187269:tid 187524] [client 20.28.180.172:29478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/Q7iw6mOdefault.php"] [unique_id "aryyrdFcyhWr7HDzNGloIAAAAok"]
[Wed Sep 30 00:56:45.706429 2026] [security2:error] [pid 187269:tid 187500] [client 20.204.161.246:28366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/mac.php"] [unique_id "aryyrdFcyhWr7HDzNGloIQAAAnI"]
[Wed Sep 30 00:56:45.719056 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.719324 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.746643 2026] [security2:error] [pid 187269:tid 187413] [client 20.194.30.107:14348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/666.php"] [unique_id "aryyrdFcyhWr7HDzNGloJQAAAhs"]
[Wed Sep 30 00:56:45.808537 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.808795 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.829498 2026] [security2:error] [pid 187269:tid 187444] [client 13.70.4.78:3246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/177.php"] [unique_id "aryyrdFcyhWr7HDzNGloKAAAAjo"]
[Wed Sep 30 00:56:45.862123 2026] [security2:error] [pid 187269:tid 187417] [client 182.69.182.151:29102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloKgAAAh8"]
[Wed Sep 30 00:56:45.862781 2026] [security2:error] [pid 187269:tid 187417] [client 182.69.182.151:29102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyrdFcyhWr7HDzNGloKgAAAh8"]
[Wed Sep 30 00:56:45.898401 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.898904 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:45.943639 2026] [security2:error] [pid 187269:tid 187508] [client 20.213.164.196:15964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wp_blog_footer.php"] [unique_id "aryyrdFcyhWr7HDzNGloMAAAAno"]
[Wed Sep 30 00:56:45.987516 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTE=
[Wed Sep 30 00:56:45.987774 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTE=
[Wed Sep 30 00:56:45.988009 2026] [security2:error] [pid 186850:tid 186995] [client 20.219.2.60:59621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tool.php"] [unique_id "aryyrU5Phls--iYlcKj8ZAAAARk"]
[Wed Sep 30 00:56:45.991203 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:45.991475 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.081969 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.082235 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.151270 2026] [security2:error] [pid 187269:tid 187492] [client 13.70.4.78:3214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/ccc.php"] [unique_id "aryyrtFcyhWr7HDzNGloOgAAAmo"]
[Wed Sep 30 00:56:46.152071 2026] [security2:error] [pid 187269:tid 187484] [client 20.219.14.152:43274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/gulu.php"] [unique_id "aryyrtFcyhWr7HDzNGloOwAAAmI"]
[Wed Sep 30 00:56:46.154392 2026] [security2:error] [pid 186850:tid 186976] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrk5Phls--iYlcKj8ZwABEH0"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9ce0574e3d9817a943631720fbc8aa4c
[Wed Sep 30 00:56:46.154420 2026] [security2:error] [pid 186850:tid 186976] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyrk5Phls--iYlcKj8ZwABEH0"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9ce0574e3d9817a943631720fbc8aa4c
[Wed Sep 30 00:56:46.155524 2026] [security2:error] [pid 186850:tid 187086] [client 152.59.169.65:18740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyrk5Phls--iYlcKj8ZgAAAXQ"]
[Wed Sep 30 00:56:46.155655 2026] [security2:error] [pid 186850:tid 187086] [client 152.59.169.65:18740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyrk5Phls--iYlcKj8ZgAAAXQ"]
[Wed Sep 30 00:56:46.173506 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.173755 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.209793 2026] [security2:error] [pid 187269:tid 187416] [client 20.219.2.60:36731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/xx.php"] [unique_id "aryyrtFcyhWr7HDzNGloRAAAAh4"]
[Wed Sep 30 00:56:46.254206 2026] [security2:error] [pid 187269:tid 187530] [client 20.204.161.246:48392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hairofsheba.com"] [uri "/wp-wpbak.php"] [unique_id "aryyrtFcyhWr7HDzNGloSQAAAo8"]
[Wed Sep 30 00:56:46.268999 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.269427 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.290026 2026] [security2:error] [pid 187269:tid 187430] [client 52.172.226.14:20180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/moon.php"] [unique_id "aryyrtFcyhWr7HDzNGloTAAAAiw"]
[Wed Sep 30 00:56:46.319961 2026] [security2:error] [pid 187269:tid 187493] [client 20.219.2.60:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/public/ws49.php"] [unique_id "aryyrtFcyhWr7HDzNGloTQAAAms"]
[Wed Sep 30 00:56:46.354336 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.354594 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.461404 2026] [security2:error] [pid 187269:tid 187434] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryyrtFcyhWr7HDzNGloVAAAAjA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:46.464969 2026] [security2:error] [pid 186850:tid 187006] [client 13.70.4.78:62685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/0xD.php"] [unique_id "aryyrk5Phls--iYlcKj8cgAAASQ"]
[Wed Sep 30 00:56:46.476364 2026] [security2:error] [pid 186850:tid 186993] [client 20.219.2.60:63249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/drhunthq.php"] [unique_id "aryyrk5Phls--iYlcKj8cwAAARc"]
[Wed Sep 30 00:56:46.479824 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:46.480313 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:46.483005 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.483462 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.537377 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.537629 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.562100 2026] [security2:error] [pid 187269:tid 187448] [client 102.254.102.41:49468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyrtFcyhWr7HDzNGloWQAAAj4"]
[Wed Sep 30 00:56:46.562214 2026] [security2:error] [pid 187269:tid 187448] [client 102.254.102.41:49468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryyrtFcyhWr7HDzNGloWQAAAj4"]
[Wed Sep 30 00:56:46.630072 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.630371 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.653135 2026] [security2:error] [pid 187269:tid 187407] [client 20.219.14.152:43203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/bala.php"] [unique_id "aryyrtFcyhWr7HDzNGloXAAAAhU"]
[Wed Sep 30 00:56:46.719020 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.719284 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.787082 2026] [security2:error] [pid 187269:tid 187508] [client 13.70.4.78:3222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/sallu.php"] [unique_id "aryyrtFcyhWr7HDzNGloZQAAAno"]
[Wed Sep 30 00:56:46.810905 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.811168 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.901906 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.902157 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:46.927080 2026] [security2:error] [pid 186850:tid 187062] [client 20.194.30.107:64708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp_blog_footer.php"] [unique_id "aryyrk5Phls--iYlcKj8ewAAAVw"]
[Wed Sep 30 00:56:46.964858 2026] [security2:error] [pid 187269:tid 187486] [client 20.219.2.60:48865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/admin/index.php"] [unique_id "aryyrtFcyhWr7HDzNGlobgAAAmQ"]
[Wed Sep 30 00:56:46.970970 2026] [security2:error] [pid 187269:tid 187495] [client 213.136.69.135:57185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-metadata-registry.php"] [unique_id "aryyrtFcyhWr7HDzNGlobwAAAm0"], referer: binance.com
[Wed Sep 30 00:56:46.971507 2026] [security2:error] [pid 187269:tid 187422] [client 103.172.210.103:52385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyrtFcyhWr7HDzNGlocAAAAiQ"]
[Wed Sep 30 00:56:46.971575 2026] [security2:error] [pid 187269:tid 187422] [client 103.172.210.103:52385] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyrtFcyhWr7HDzNGlocAAAAiQ"]
[Wed Sep 30 00:56:46.992285 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:46.992546 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.008855 2026] [security2:error] [pid 186850:tid 187007] [client 20.194.30.107:14354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/xkSudf.php"] [unique_id "aryyr05Phls--iYlcKj8fQAAASU"]
[Wed Sep 30 00:56:47.036239 2026] [security2:error] [pid 186850:tid 187106] [client 20.70.173.30:18536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/mac.php"] [unique_id "aryyr05Phls--iYlcKj8fgAAAYg"]
[Wed Sep 30 00:56:47.046311 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:56:47.046550 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 00:56:47.083603 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.083868 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.118676 2026] [security2:error] [pid 187269:tid 187442] [client 20.70.173.30:59529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wpxml.php"] [unique_id "aryyr9FcyhWr7HDzNGloeAAAAjg"]
[Wed Sep 30 00:56:47.132465 2026] [security2:error] [pid 186850:tid 187027] [client 52.172.226.14:20206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/autoload_classmap.php"] [unique_id "aryyr05Phls--iYlcKj8ggAAATk"]
[Wed Sep 30 00:56:47.136477 2026] [security2:error] [pid 186850:tid 186982] [client 13.70.4.78:52638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/xwpg.php"] [unique_id "aryyr05Phls--iYlcKj8gwAAAQw"]
[Wed Sep 30 00:56:47.143603 2026] [security2:error] [pid 187269:tid 187439] [client 20.219.14.152:44912] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/c99.php"] [unique_id "aryyr9FcyhWr7HDzNGlofQAAAjU"]
[Wed Sep 30 00:56:47.174915 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.175179 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.190726 2026] [security2:error] [pid 187269:tid 187467] [client 223.181.30.165:2386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyr9FcyhWr7HDzNGlogAAAAlE"]
[Wed Sep 30 00:56:47.190858 2026] [security2:error] [pid 187269:tid 187467] [client 223.181.30.165:2386] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyr9FcyhWr7HDzNGlogAAAAlE"]
[Wed Sep 30 00:56:47.243289 2026] [security2:error] [pid 186850:tid 187044] [client 20.194.30.107:10168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/reop3.php"] [unique_id "aryyr05Phls--iYlcKj8hAAAAUo"]
[Wed Sep 30 00:56:47.266200 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.266473 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.360161 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.360622 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.456306 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.456317 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:47.456722 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.456734 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:47.458653 2026] [security2:error] [pid 187269:tid 187487] [client 49.36.41.37:62971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyr9FcyhWr7HDzNGlojAAAAmU"]
[Wed Sep 30 00:56:47.458883 2026] [security2:error] [pid 187269:tid 187487] [client 49.36.41.37:62971] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyr9FcyhWr7HDzNGlojAAAAmU"]
[Wed Sep 30 00:56:47.472653 2026] [core:error] [pid 186850:tid 187018] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:47.472681 2026] [core:error] [pid 186850:tid 187018] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:47.473475 2026] [security2:error] [pid 186850:tid 187057] [client 13.70.4.78:52648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/flamini.php"] [unique_id "aryyr05Phls--iYlcKj8jgAAAVc"]
[Wed Sep 30 00:56:47.499461 2026] [security2:error] [pid 187269:tid 187475] [client 20.219.2.60:55871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tfm.php"] [unique_id "aryyr9FcyhWr7HDzNGlojwAAAlk"]
[Wed Sep 30 00:56:47.538510 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.538822 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.556887 2026] [security2:error] [pid 186850:tid 187047] [client 150.107.232.159:36470] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyr05Phls--iYlcKj8mAAAAU0"]
[Wed Sep 30 00:56:47.557034 2026] [security2:error] [pid 186850:tid 187047] [client 150.107.232.159:36470] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyr05Phls--iYlcKj8mAAAAU0"]
[Wed Sep 30 00:56:47.579618 2026] [security2:error] [pid 186850:tid 187073] [client 202.179.95.79:56617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyr05Phls--iYlcKj8mwAAAWc"]
[Wed Sep 30 00:56:47.579724 2026] [security2:error] [pid 186850:tid 187073] [client 202.179.95.79:56617] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyr05Phls--iYlcKj8mwAAAWc"]
[Wed Sep 30 00:56:47.595598 2026] [security2:error] [pid 186850:tid 187015] [client 20.204.42.136:57213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/zpslrqry.php"] [unique_id "aryyr05Phls--iYlcKj8nQAAAS0"]
[Wed Sep 30 00:56:47.630081 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.630343 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.633522 2026] [security2:error] [pid 186850:tid 187035] [client 20.219.14.152:43207] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/c99.php"] [unique_id "aryyr05Phls--iYlcKj8oAAAAUE"]
[Wed Sep 30 00:56:47.702109 2026] [core:error] [pid 187269:tid 187426] [client 45.138.12.40:51500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:47.702130 2026] [core:error] [pid 187269:tid 187426] [client 45.138.12.40:51500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:56:47.729909 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.730345 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:35006] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.744262 2026] [security2:error] [pid 187269:tid 187517] [client 20.219.2.60:18942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gifclass.php"] [unique_id "aryyr9FcyhWr7HDzNGlomAAAAoM"]
[Wed Sep 30 00:56:47.813592 2026] [security2:error] [pid 186850:tid 187084] [client 13.70.4.78:3145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/themes.php"] [unique_id "aryyr05Phls--iYlcKj8pgAAAXI"]
[Wed Sep 30 00:56:47.816312 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.816565 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.868962 2026] [security2:error] [pid 186850:tid 187069] [client 52.172.226.14:20508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/default.php"] [unique_id "aryyr05Phls--iYlcKj8qgAAAWM"]
[Wed Sep 30 00:56:47.905958 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.906240 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:47.942984 2026] [access_compat:error] [pid 186850:tid 187043] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:56:47.943270 2026] [access_compat:error] [pid 186850:tid 187043] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 00:56:47.997181 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:47.997460 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.007564 2026] [security2:error] [pid 187269:tid 187490] [client 20.219.2.60:45352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/a4.php"] [unique_id "aryysNFcyhWr7HDzNGlooAAAAmg"]
[Wed Sep 30 00:56:48.087485 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.087742 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.121899 2026] [security2:error] [pid 186850:tid 187088] [client 20.219.14.152:43211] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/c99.php"] [unique_id "aryysE5Phls--iYlcKj8rgAAAXY"]
[Wed Sep 30 00:56:48.142280 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.4.78:3184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/0.php"] [unique_id "aryysNFcyhWr7HDzNGlopAAAAnc"]
[Wed Sep 30 00:56:48.144535 2026] [security2:error] [pid 186850:tid 187058] [client 216.73.216.46:35006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryysE5Phls--iYlcKj8rwAAAVg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTIvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY3
[Wed Sep 30 00:56:48.178298 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.178565 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.268796 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.269074 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.277818 2026] [security2:error] [pid 187269:tid 187531] [client 20.194.30.107:17377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/pJPoKA.php"] [unique_id "aryysNFcyhWr7HDzNGloqgAAApA"]
[Wed Sep 30 00:56:48.329799 2026] [security2:error] [pid 186850:tid 186992] [client 152.59.165.7:64394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryysE5Phls--iYlcKj8uAAAARY"]
[Wed Sep 30 00:56:48.333883 2026] [security2:error] [pid 186850:tid 186992] [client 152.59.165.7:64394] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryysE5Phls--iYlcKj8uAAAARY"]
[Wed Sep 30 00:56:48.340836 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:20501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryysE5Phls--iYlcKj8uQAAAWw"]
[Wed Sep 30 00:56:48.364045 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.364484 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.403727 2026] [security2:error] [pid 186850:tid 187092] [client 74.7.242.1:37362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryysE5Phls--iYlcKj8ugAAAXo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:56:48.442917 2026] [access_compat:error] [pid 186850:tid 186994] [client 47.79.13.73:59504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:48.443377 2026] [access_compat:error] [pid 186850:tid 186994] [client 47.79.13.73:59504] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:48.457944 2026] [security2:error] [pid 186850:tid 187044] [client 13.70.4.78:62656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/opsh.php"] [unique_id "aryysE5Phls--iYlcKj8vQAAAUo"]
[Wed Sep 30 00:56:48.458745 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.459181 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.476494 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTI=
[Wed Sep 30 00:56:48.476947 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTI=
[Wed Sep 30 00:56:48.497332 2026] [security2:error] [pid 187269:tid 187462] [client 20.204.161.246:32059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wmore1.php"] [unique_id "aryysNFcyhWr7HDzNGlosgAAAkw"]
[Wed Sep 30 00:56:48.538552 2026] [security2:error] [pid 187269:tid 187409] [client 20.219.2.60:63243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wen.php"] [unique_id "aryysNFcyhWr7HDzNGlotgAAAhc"]
[Wed Sep 30 00:56:48.546091 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.546363 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.578680 2026] [proxy_http:error] [pid 186850:tid 187010] (20014)Internal error (specific information not available): [client 139.59.26.53:41950] AH01102: error reading status line from remote server 127.0.0.1:2082
[Wed Sep 30 00:56:48.578696 2026] [proxy:error] [pid 186850:tid 187010] [client 139.59.26.53:41950] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.txt
[Wed Sep 30 00:56:48.584161 2026] [proxy_http:error] [pid 186850:tid 187055] (20014)Internal error (specific information not available): [client 139.59.26.53:41954] AH01102: error reading status line from remote server 127.0.0.1:2082
[Wed Sep 30 00:56:48.584179 2026] [proxy:error] [pid 186850:tid 187055] [client 139.59.26.53:41954] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.git/config
[Wed Sep 30 00:56:48.593623 2026] [security2:error] [pid 186850:tid 187057] [client 20.219.14.152:43236] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/c99.php"] [unique_id "aryysE5Phls--iYlcKj8yAAAAVc"]
[Wed Sep 30 00:56:48.634104 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:48.634374 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:48.650407 2026] [security2:error] [pid 187269:tid 187461] [client 20.213.164.196:35835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/k.php"] [unique_id "aryysNFcyhWr7HDzNGlouwAAAks"]
[Wed Sep 30 00:56:48.677186 2026] [security2:error] [pid 186850:tid 187063] [client 203.122.45.246:55433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryysE5Phls--iYlcKj8yQAAAV0"]
[Wed Sep 30 00:56:48.677298 2026] [security2:error] [pid 186850:tid 187063] [client 203.122.45.246:55433] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryysE5Phls--iYlcKj8yQAAAV0"]
[Wed Sep 30 00:56:48.754908 2026] [security2:error] [pid 187269:tid 187475] [client 20.194.30.107:25865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/tool.php"] [unique_id "aryysNFcyhWr7HDzNGlovgAAAlk"]
[Wed Sep 30 00:56:48.772062 2026] [security2:error] [pid 186850:tid 186996] [client 13.70.4.78:52625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/pass4.php"] [unique_id "aryysE5Phls--iYlcKj8zQAAARo"]
[Wed Sep 30 00:56:48.968772 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:56:48.969062 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 00:56:49.020503 2026] [security2:error] [pid 187269:tid 187499] [client 72.255.10.32:59242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryysdFcyhWr7HDzNGloywAAAnE"]
[Wed Sep 30 00:56:49.020600 2026] [security2:error] [pid 187269:tid 187499] [client 72.255.10.32:59242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryysdFcyhWr7HDzNGloywAAAnE"]
[Wed Sep 30 00:56:49.037667 2026] [security2:error] [pid 187269:tid 187502] [client 20.219.2.60:45331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ms.php"] [unique_id "aryysdFcyhWr7HDzNGlozQAAAnQ"]
[Wed Sep 30 00:56:49.052495 2026] [security2:error] [pid 186850:tid 187059] [client 52.172.226.14:20188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/fucku.php"] [unique_id "aryysU5Phls--iYlcKj81wAAAVk"]
[Wed Sep 30 00:56:49.071785 2026] [security2:error] [pid 187269:tid 187529] [client 20.219.14.152:44918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/ttivnife.php"] [unique_id "aryysdFcyhWr7HDzNGlozgAAAo4"]
[Wed Sep 30 00:56:49.090112 2026] [security2:error] [pid 187269:tid 187481] [client 13.70.4.78:52611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/drttewyh.php"] [unique_id "aryysdFcyhWr7HDzNGlozwAAAl8"]
[Wed Sep 30 00:56:49.241347 2026] [security2:error] [pid 187269:tid 187505] [client 4.240.25.22:63751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/edit.php"] [unique_id "aryysdFcyhWr7HDzNGlo2AAAAnc"]
[Wed Sep 30 00:56:49.414670 2026] [security2:error] [pid 186850:tid 187095] [client 13.70.4.78:52635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/sh.php"] [unique_id "aryysU5Phls--iYlcKj84gAAAX0"]
[Wed Sep 30 00:56:49.454489 2026] [security2:error] [pid 187269:tid 187508] [client 43.227.131.37:37719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryysdFcyhWr7HDzNGlo3gAAAno"]
[Wed Sep 30 00:56:49.454634 2026] [security2:error] [pid 187269:tid 187508] [client 43.227.131.37:37719] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryysdFcyhWr7HDzNGlo3gAAAno"]
[Wed Sep 30 00:56:49.468048 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:49.468512 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:49.510287 2026] [security2:error] [pid 187269:tid 187288] [remote 111.225.148.158:55136] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/jupiter-ascending-review/"] [unique_id "aryysdFcyhWr7HDzNGlo4QACGgs"]
[Wed Sep 30 00:56:49.550932 2026] [security2:error] [pid 187269:tid 187453] [client 20.219.2.60:58434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/hplfuns.php"] [unique_id "aryysdFcyhWr7HDzNGlo5AAAAkM"]
[Wed Sep 30 00:56:49.566078 2026] [security2:error] [pid 186850:tid 187096] [client 20.219.14.152:43278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/admin.php/2P.php"] [unique_id "aryysU5Phls--iYlcKj86QAAAX4"]
[Wed Sep 30 00:56:49.618805 2026] [security2:error] [pid 187269:tid 187434] [client 52.172.226.14:20205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/plugins/Cache/footer.php"] [unique_id "aryysdFcyhWr7HDzNGlo5QAAAjA"]
[Wed Sep 30 00:56:49.738108 2026] [security2:error] [pid 186850:tid 187067] [client 13.70.4.78:62661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/groud1.php"] [unique_id "aryysU5Phls--iYlcKj87QAAAWE"]
[Wed Sep 30 00:56:49.822623 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.822895 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.908394 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.908659 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.913058 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:3653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.913336 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:3653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.918252 2026] [security2:error] [pid 187269:tid 187494] [client 20.219.2.60:18924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/sa.php7"] [unique_id "aryysdFcyhWr7HDzNGlo7wAAAmw"]
[Wed Sep 30 00:56:49.928474 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:51220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.928910 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:51220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.964125 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.964385 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.973135 2026] [security2:error] [pid 187269:tid 187474] [client 20.204.161.246:41523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryysdFcyhWr7HDzNGlo8wAAAlg"]
[Wed Sep 30 00:56:49.985708 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:62591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.985991 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:62591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.997000 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:3653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.997259 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:3653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:49.999359 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:49.999648 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.004524 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:17856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.004773 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:17856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.005921 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:50.006173 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:50.032506 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:43220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.032835 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:43220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.036667 2026] [security2:error] [pid 187269:tid 187466] [client 20.219.14.152:43241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/a.php"] [unique_id "aryystFcyhWr7HDzNGlo-QAAAlA"]
[Wed Sep 30 00:56:50.053926 2026] [security2:error] [pid 187269:tid 187432] [client 13.70.4.78:53985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/bro.php"] [unique_id "aryystFcyhWr7HDzNGlo-wAAAi4"]
[Wed Sep 30 00:56:50.068874 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.069140 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.071668 2026] [security2:error] [pid 187269:tid 187479] [client 20.219.2.60:59626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tfm.php"] [unique_id "aryystFcyhWr7HDzNGlo_gAAAl0"]
[Wed Sep 30 00:56:50.078780 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.079053 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.087910 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.088172 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.142760 2026] [security2:error] [pid 187269:tid 187440] [client 20.219.2.60:36805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/Jcrop.php"] [unique_id "aryystFcyhWr7HDzNGlpAgAAAjY"]
[Wed Sep 30 00:56:50.179560 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.179840 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.201893 2026] [security2:error] [pid 187269:tid 187481] [client 52.172.226.14:20193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/mail.php"] [unique_id "aryystFcyhWr7HDzNGlpBgAAAl8"]
[Wed Sep 30 00:56:50.270996 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.271406 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.316024 2026] [security2:error] [pid 187269:tid 187429] [client 20.204.42.136:54147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/w1px.php"] [unique_id "aryystFcyhWr7HDzNGlpDAAAAis"]
[Wed Sep 30 00:56:50.323590 2026] [security2:error] [pid 187269:tid 187461] [client 49.205.105.16:15164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryystFcyhWr7HDzNGlpDgAAAks"]
[Wed Sep 30 00:56:50.323744 2026] [security2:error] [pid 187269:tid 187461] [client 49.205.105.16:15164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryystFcyhWr7HDzNGlpDgAAAks"]
[Wed Sep 30 00:56:50.363284 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.363702 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.376426 2026] [security2:error] [pid 186850:tid 186980] [client 13.70.4.78:52679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/class-wp-http-client.php"] [unique_id "aryysk5Phls--iYlcKj9BwAAAQo"]
[Wed Sep 30 00:56:50.424893 2026] [security2:error] [pid 186850:tid 186906] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryysk5Phls--iYlcKj9CAABZjc"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dreply%26t%3D13404
[Wed Sep 30 00:56:50.451625 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.451904 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.463244 2026] [security2:error] [pid 187269:tid 187480] [client 39.44.16.112:53223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryystFcyhWr7HDzNGlpFAAAAl4"]
[Wed Sep 30 00:56:50.463371 2026] [security2:error] [pid 187269:tid 187480] [client 39.44.16.112:53223] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryystFcyhWr7HDzNGlpFAAAAl4"]
[Wed Sep 30 00:56:50.469767 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:56:50.470195 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 00:56:50.501078 2026] [security2:error] [pid 187269:tid 187433] [client 20.219.14.152:43294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/cord.php"] [unique_id "aryystFcyhWr7HDzNGlpFQAAAi8"]
[Wed Sep 30 00:56:50.539168 2026] [security2:error] [pid 186850:tid 186992] [client 103.24.86.56:55355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryysk5Phls--iYlcKj9DAAAARY"]
[Wed Sep 30 00:56:50.539650 2026] [security2:error] [pid 186850:tid 186992] [client 103.24.86.56:55355] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryysk5Phls--iYlcKj9DAAAARY"]
[Wed Sep 30 00:56:50.542053 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.542324 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.546521 2026] [security2:error] [pid 186850:tid 186964] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/api/.env"] [unique_id "aryysU5Phls--iYlcKj9DQABdXE"]
[Wed Sep 30 00:56:50.547824 2026] [security2:error] [pid 186850:tid 186867] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/app/.env"] [unique_id "aryysU5Phls--iYlcKj9DwABdRA"]
[Wed Sep 30 00:56:50.548720 2026] [security2:error] [pid 186850:tid 186867] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/application/.env"] [unique_id "aryysU5Phls--iYlcKj9EQABdRA"]
[Wed Sep 30 00:56:50.559225 2026] [security2:error] [pid 186850:tid 186964] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/api/phpinfo.php"] [unique_id "aryysU5Phls--iYlcKj9DgABdXE"]
[Wed Sep 30 00:56:50.618014 2026] [security2:error] [pid 187269:tid 187410] [client 20.219.2.60:50547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/8573.php"] [unique_id "aryystFcyhWr7HDzNGlpGgAAAhg"]
[Wed Sep 30 00:56:50.623045 2026] [security2:error] [pid 187269:tid 187486] [client 20.198.74.230:24148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/simple.php"] [unique_id "aryystFcyhWr7HDzNGlpGwAAAmQ"]
[Wed Sep 30 00:56:50.633790 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.634060 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.682948 2026] [security2:error] [pid 187269:tid 187442] [client 52.172.226.14:20208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/sx.php"] [unique_id "aryystFcyhWr7HDzNGlpHgAAAjg"]
[Wed Sep 30 00:56:50.702859 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.4.78:62682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/zoo2.php"] [unique_id "aryystFcyhWr7HDzNGlpIAAAAiI"]
[Wed Sep 30 00:56:50.709501 2026] [security2:error] [pid 187269:tid 187510] [client 20.28.180.172:34279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zoo2.php"] [unique_id "aryystFcyhWr7HDzNGlpIgAAAnw"]
[Wed Sep 30 00:56:50.715041 2026] [access_compat:error] [pid 187269:tid 187531] [client 47.79.13.28:36656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:50.715386 2026] [access_compat:error] [pid 187269:tid 187531] [client 47.79.13.28:36656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:50.724515 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.724790 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.818166 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.818426 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.905587 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.905871 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:50.956032 2026] [access_compat:error] [pid 186850:tid 187013] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTg=
[Wed Sep 30 00:56:50.956310 2026] [access_compat:error] [pid 186850:tid 187013] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTg=
[Wed Sep 30 00:56:50.990368 2026] [security2:error] [pid 186850:tid 187093] [client 20.219.14.152:43315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/anom.php"] [unique_id "aryysk5Phls--iYlcKj9KQAAAXs"]
[Wed Sep 30 00:56:50.998899 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:50.999253 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.003967 2026] [security2:error] [pid 187269:tid 187439] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryystFcyhWr7HDzNGlpLgAAAjU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:51.022719 2026] [security2:error] [pid 186850:tid 187059] [client 20.213.164.196:35785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/133.php"] [unique_id "aryys05Phls--iYlcKj9LAAAAVk"]
[Wed Sep 30 00:56:51.028573 2026] [security2:error] [pid 187269:tid 187408] [client 13.70.4.78:52628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/zoo1.php"] [unique_id "aryys9FcyhWr7HDzNGlpLwAAAhY"]
[Wed Sep 30 00:56:51.087880 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.088149 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.094698 2026] [security2:error] [pid 186850:tid 187038] [client 4.196.65.241:2050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/a65.php"] [unique_id "aryys05Phls--iYlcKj9LwAAAUQ"]
[Wed Sep 30 00:56:51.140307 2026] [security2:error] [pid 187269:tid 187489] [client 45.138.12.40:62002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.frederickmodelaircraftclub.org"] [uri "/wp-links-opml.php"] [unique_id "aryys9FcyhWr7HDzNGlpMQAAAmc"]
[Wed Sep 30 00:56:51.180176 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.180448 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.188354 2026] [security2:error] [pid 187269:tid 187466] [client 52.172.226.14:20164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryys9FcyhWr7HDzNGlpNQAAAlA"]
[Wed Sep 30 00:56:51.211832 2026] [security2:error] [pid 187269:tid 187503] [client 20.219.2.60:48858] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.yod.yourkatana.com"] [uri "/1.php"] [unique_id "aryys9FcyhWr7HDzNGlpNgAAAnU"]
[Wed Sep 30 00:56:51.211961 2026] [security2:error] [pid 187269:tid 187503] [client 20.219.2.60:48858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/1.php"] [unique_id "aryys9FcyhWr7HDzNGlpNgAAAnU"]
[Wed Sep 30 00:56:51.275364 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.275643 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.322103 2026] [security2:error] [pid 187269:tid 187411] [client 20.219.2.60:18887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/jp.php"] [unique_id "aryys9FcyhWr7HDzNGlpPAAAAhk"]
[Wed Sep 30 00:56:51.328047 2026] [security2:error] [pid 187269:tid 187418] [client 20.214.145.90:57010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryys9FcyhWr7HDzNGlpOwAAAiA"]
[Wed Sep 30 00:56:51.356712 2026] [security2:error] [pid 187269:tid 187502] [client 13.70.4.78:62689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/class-ajax.php"] [unique_id "aryys9FcyhWr7HDzNGlpPwAAAnQ"]
[Wed Sep 30 00:56:51.361615 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.361881 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.403528 2026] [security2:error] [pid 187269:tid 187512] [client 45.138.12.32:30038] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kde.lez.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryys9FcyhWr7HDzNGlpQQAAAn4"]
[Wed Sep 30 00:56:51.404903 2026] [security2:error] [pid 186850:tid 186921] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/back/.env"] [unique_id "aryysU5Phls--iYlcKj9QQABdUY"]
[Wed Sep 30 00:56:51.404904 2026] [security2:error] [pid 186850:tid 186923] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/backup/.env"] [unique_id "aryysU5Phls--iYlcKj9QAABdUg"]
[Wed Sep 30 00:56:51.404940 2026] [security2:error] [pid 186850:tid 186924] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/backend/.env"] [unique_id "aryysU5Phls--iYlcKj9PwABdUk"]
[Wed Sep 30 00:56:51.405766 2026] [security2:error] [pid 186850:tid 186921] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/cms/.env"] [unique_id "aryysU5Phls--iYlcKj9QwABdUY"]
[Wed Sep 30 00:56:51.408400 2026] [security2:error] [pid 187269:tid 187452] [client 223.235.102.107:21938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryys9FcyhWr7HDzNGlpQgAAAkI"]
[Wed Sep 30 00:56:51.408517 2026] [security2:error] [pid 187269:tid 187452] [client 223.235.102.107:21938] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryys9FcyhWr7HDzNGlpQgAAAkI"]
[Wed Sep 30 00:56:51.452988 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.453285 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.467043 2026] [security2:error] [pid 186850:tid 186964] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/config.php"] [unique_id "aryysk5Phls--iYlcKj9TgABdXE"]
[Wed Sep 30 00:56:51.472552 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25z
[Wed Sep 30 00:56:51.472890 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25z
[Wed Sep 30 00:56:51.493532 2026] [security2:error] [pid 187269:tid 187429] [client 20.219.14.152:44868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/plugins.php"] [unique_id "aryys9FcyhWr7HDzNGlpRAAAAis"]
[Wed Sep 30 00:56:51.508974 2026] [security2:error] [pid 186850:tid 187099] [client 43.104.4.192:24948] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "aryys05Phls--iYlcKj9UgAAAYE"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:51.538700 2026] [security2:error] [pid 186850:tid 186938] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/config/.env"] [unique_id "aryys05Phls--iYlcKj9VAABdVc"]
[Wed Sep 30 00:56:51.542767 2026] [security2:error] [pid 186850:tid 186927] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/core/.env"] [unique_id "aryys05Phls--iYlcKj9VwABdUw"]
[Wed Sep 30 00:56:51.547331 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.547766 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.600932 2026] [security2:error] [pid 186850:tid 187012] [client 20.214.145.90:62193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryys05Phls--iYlcKj9WwAAASo"]
[Wed Sep 30 00:56:51.605056 2026] [security2:error] [pid 186850:tid 186953] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/database.sql"] [unique_id "aryys05Phls--iYlcKj9XAABdWY"]
[Wed Sep 30 00:56:51.641472 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.641780 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.669316 2026] [security2:error] [pid 187269:tid 187516] [client 52.172.226.14:20523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/article.php"] [unique_id "aryys9FcyhWr7HDzNGlpVAAAAoI"]
[Wed Sep 30 00:56:51.675697 2026] [security2:error] [pid 186850:tid 186954] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/dev/.env"] [unique_id "aryys05Phls--iYlcKj9YQABdWc"]
[Wed Sep 30 00:56:51.690335 2026] [security2:error] [pid 187269:tid 187443] [client 13.70.4.78:3238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gm.php"] [unique_id "aryys9FcyhWr7HDzNGlpWgAAAjk"]
[Wed Sep 30 00:56:51.725514 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.725765 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.749958 2026] [security2:error] [pid 187269:tid 187415] [client 20.219.2.60:48833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/term.php"] [unique_id "aryys9FcyhWr7HDzNGlpYAAAAh0"]
[Wed Sep 30 00:56:51.815992 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.816270 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.840233 2026] [security2:error] [pid 187269:tid 187493] [client 34.148.249.105:61117] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryys9FcyhWr7HDzNGlpZQAAAms"]
[Wed Sep 30 00:56:51.867720 2026] [access_compat:error] [pid 187269:tid 187433] [client 47.79.13.167:52036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:51.867997 2026] [access_compat:error] [pid 187269:tid 187433] [client 47.79.13.167:52036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:51.873754 2026] [security2:error] [pid 187269:tid 187430] [client 20.214.145.90:39756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/1ac.php"] [unique_id "aryys9FcyhWr7HDzNGlpaQAAAiw"]
[Wed Sep 30 00:56:51.880722 2026] [proxy_http:error] [pid 187269:tid 187533] (20014)Internal error (specific information not available): [client 139.59.26.53:41978] AH01102: error reading status line from remote server 127.0.0.1:2082
[Wed Sep 30 00:56:51.880732 2026] [proxy:error] [pid 187269:tid 187533] [client 139.59.26.53:41978] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.bak
[Wed Sep 30 00:56:51.908430 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.908884 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:51.965540 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:51.965947 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:51.973759 2026] [security2:error] [pid 187269:tid 187465] [client 20.219.14.152:43226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/zlwvxiyp.php"] [unique_id "aryys9FcyhWr7HDzNGlpbwAAAk8"]
[Wed Sep 30 00:56:51.998313 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:51.998570 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.003425 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.158:39442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:52.003700 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.158:39442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:52.011425 2026] [security2:error] [pid 187269:tid 187476] [client 13.70.4.78:3226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/class-wp-site-list.php"] [unique_id "aryytNFcyhWr7HDzNGlpcQAAAlo"]
[Wed Sep 30 00:56:52.055074 2026] [security2:error] [pid 187269:tid 187466] [client 20.219.2.60:36743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/rip.php"] [unique_id "aryytNFcyhWr7HDzNGlpdwAAAlA"]
[Wed Sep 30 00:56:52.077660 2026] [security2:error] [pid 187269:tid 187439] [client 34.148.249.105:57677] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryytNFcyhWr7HDzNGlpeAAAAjU"]
[Wed Sep 30 00:56:52.089215 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.089480 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.138318 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.145.90:40931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/flm.php"] [unique_id "aryytE5Phls--iYlcKj9dQAAAQ4"]
[Wed Sep 30 00:56:52.145315 2026] [security2:error] [pid 187269:tid 187517] [client 52.172.226.14:20700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/link.php"] [unique_id "aryytNFcyhWr7HDzNGlpegAAAoM"]
[Wed Sep 30 00:56:52.145318 2026] [security2:error] [pid 187269:tid 187483] [client 20.213.164.196:35812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wsd.php"] [unique_id "aryytNFcyhWr7HDzNGlpeQAAAmE"]
[Wed Sep 30 00:56:52.180486 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.180750 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.201149 2026] [security2:error] [pid 187269:tid 187440] [client 20.204.161.246:41488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/ab.php"] [unique_id "aryytNFcyhWr7HDzNGlpfgAAAjY"]
[Wed Sep 30 00:56:52.270834 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.271089 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.299799 2026] [security2:error] [pid 187269:tid 187526] [client 20.219.2.60:63293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-content/radio.php"] [unique_id "aryytNFcyhWr7HDzNGlpgQAAAos"]
[Wed Sep 30 00:56:52.330746 2026] [security2:error] [pid 187269:tid 187497] [client 13.70.4.78:3182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/asd2.php"] [unique_id "aryytNFcyhWr7HDzNGlpgwAAAm8"]
[Wed Sep 30 00:56:52.334584 2026] [security2:error] [pid 187269:tid 187418] [client 34.148.249.105:49739] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aryytNFcyhWr7HDzNGlphAAAAiA"]
[Wed Sep 30 00:56:52.368330 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.368785 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.383699 2026] [security2:error] [pid 186850:tid 186999] [client 4.240.25.22:63778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/11.php"] [unique_id "aryytE5Phls--iYlcKj9gAAAAR0"]
[Wed Sep 30 00:56:52.407826 2026] [security2:error] [pid 187269:tid 187500] [client 20.214.145.90:39785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/40341.php"] [unique_id "aryytNFcyhWr7HDzNGlphgAAAnI"]
[Wed Sep 30 00:56:52.452390 2026] [security2:error] [pid 187269:tid 187460] [client 20.219.14.152:44926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/1Be5IfrlWP.php"] [unique_id "aryytNFcyhWr7HDzNGlpiQAAAko"]
[Wed Sep 30 00:56:52.461373 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25z
[Wed Sep 30 00:56:52.461428 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.461825 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25z
[Wed Sep 30 00:56:52.461861 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.481459 2026] [security2:error] [pid 186850:tid 187005] [client 4.196.65.241:27280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/koiy.php"] [unique_id "aryytE5Phls--iYlcKj9hgAAASM"]
[Wed Sep 30 00:56:52.535653 2026] [security2:error] [pid 186850:tid 187072] [client 223.181.60.167:30211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryytE5Phls--iYlcKj9hwAAAWY"]
[Wed Sep 30 00:56:52.535830 2026] [security2:error] [pid 186850:tid 187072] [client 223.181.60.167:30211] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryytE5Phls--iYlcKj9hwAAAWY"]
[Wed Sep 30 00:56:52.545652 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.545934 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.604763 2026] [security2:error] [pid 186850:tid 187015] [client 52.172.226.14:20689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/lock360.php"] [unique_id "aryytE5Phls--iYlcKj9iwAAAS0"]
[Wed Sep 30 00:56:52.634648 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.634920 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.648754 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.4.78:3243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/cdc.php"] [unique_id "aryytNFcyhWr7HDzNGlpjQAAAmQ"]
[Wed Sep 30 00:56:52.678493 2026] [security2:error] [pid 187269:tid 187510] [client 20.214.145.90:40915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-log.php"] [unique_id "aryytNFcyhWr7HDzNGlpjwAAAnw"]
[Wed Sep 30 00:56:52.715824 2026] [security2:error] [pid 186850:tid 186990] [client 34.148.249.105:59558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryytE5Phls--iYlcKj9kAAAARQ"]
[Wed Sep 30 00:56:52.725470 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.725727 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.799796 2026] [security2:error] [pid 187269:tid 187523] [client 20.204.161.246:31938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/dairg.php"] [unique_id "aryytNFcyhWr7HDzNGlplgAAAog"]
[Wed Sep 30 00:56:52.806838 2026] [security2:error] [pid 187269:tid 187507] [client 20.219.2.60:58445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/155.php"] [unique_id "aryytNFcyhWr7HDzNGlplwAAAnk"]
[Wed Sep 30 00:56:52.818801 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.819248 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.849008 2026] [security2:error] [pid 187269:tid 187442] [client 20.219.2.60:18920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-good.php"] [unique_id "aryytNFcyhWr7HDzNGlpmQAAAjg"]
[Wed Sep 30 00:56:52.874000 2026] [security2:error] [pid 186850:tid 186969] [remote 74.7.227.56:58240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryytE5Phls--iYlcKj9lQABX3Y"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:56:52.903882 2026] [security2:error] [pid 187269:tid 187533] [client 20.219.14.152:43301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "aryytNFcyhWr7HDzNGlpnQAAApI"]
[Wed Sep 30 00:56:52.909317 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:52.909574 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:52.945223 2026] [security2:error] [pid 186850:tid 186991] [client 20.214.145.90:40938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/sehryhv.php"] [unique_id "aryytE5Phls--iYlcKj9mAAAARU"]
[Wed Sep 30 00:56:52.968156 2026] [security2:error] [pid 187269:tid 187465] [client 13.70.4.78:3143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gulu.php"] [unique_id "aryytNFcyhWr7HDzNGlpoAAAAk8"]
[Wed Sep 30 00:56:53.002782 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.003046 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.019481 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:53.019753 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:53.048370 2026] [security2:error] [pid 187269:tid 187511] [client 34.148.249.105:64669] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryytdFcyhWr7HDzNGlpoQAAAn0"]
[Wed Sep 30 00:56:53.090481 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.090742 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.115342 2026] [security2:error] [pid 187269:tid 187468] [client 52.172.226.14:20491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-trackback.php"] [unique_id "aryytdFcyhWr7HDzNGlppQAAAlI"]
[Wed Sep 30 00:56:53.181718 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.181989 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.212074 2026] [security2:error] [pid 187269:tid 187478] [client 20.214.145.90:39749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/yich.php"] [unique_id "aryytdFcyhWr7HDzNGlpqQAAAlw"]
[Wed Sep 30 00:56:53.267640 2026] [security2:error] [pid 186850:tid 187095] [client 34.148.249.105:59835] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryytU5Phls--iYlcKj9oAAAAX0"]
[Wed Sep 30 00:56:53.272542 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.272794 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.281760 2026] [security2:error] [pid 186850:tid 187096] [client 13.70.4.78:3241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/bala.php"] [unique_id "aryytU5Phls--iYlcKj9oQAAAX4"]
[Wed Sep 30 00:56:53.344993 2026] [security2:error] [pid 186850:tid 187091] [client 43.104.4.192:24948] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryytU5Phls--iYlcKj9pAAAAXk"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:56:53.360566 2026] [security2:error] [pid 187269:tid 187456] [client 20.213.164.196:15947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/BDKR28WP.php"] [unique_id "aryytdFcyhWr7HDzNGlprwAAAkY"]
[Wed Sep 30 00:56:53.369530 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.369965 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.379509 2026] [security2:error] [pid 187269:tid 187440] [client 20.219.14.152:44866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/admin.php/c.php"] [unique_id "aryytdFcyhWr7HDzNGlpswAAAjY"]
[Wed Sep 30 00:56:53.395959 2026] [security2:error] [pid 186850:tid 186981] [client 20.219.2.60:49564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-the.php"] [unique_id "aryytU5Phls--iYlcKj9pgAAAQs"]
[Wed Sep 30 00:56:53.466438 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.466894 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.474679 2026] [security2:error] [pid 186850:tid 186997] [client 20.198.74.230:41382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryytU5Phls--iYlcKj9qgAAARs"]
[Wed Sep 30 00:56:53.482942 2026] [security2:error] [pid 187269:tid 187488] [client 20.214.145.90:2882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-blink.php"] [unique_id "aryytdFcyhWr7HDzNGlptgAAAmY"]
[Wed Sep 30 00:56:53.502357 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:53.502605 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:53.522255 2026] [security2:error] [pid 187269:tid 187526] [client 20.204.161.246:32388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/z60.php"] [unique_id "aryytdFcyhWr7HDzNGlpuAAAAos"]
[Wed Sep 30 00:56:53.538998 2026] [security2:error] [pid 187269:tid 187453] [client 106.214.2.47:29140] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryytdFcyhWr7HDzNGlptQAAAkM"]
[Wed Sep 30 00:56:53.539100 2026] [security2:error] [pid 187269:tid 187453] [client 106.214.2.47:29140] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryytdFcyhWr7HDzNGlptQAAAkM"]
[Wed Sep 30 00:56:53.546889 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.547219 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63241] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.566690 2026] [security2:error] [pid 186850:tid 187070] [client 34.148.249.105:61506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryytU5Phls--iYlcKj9rAAAAWQ"]
[Wed Sep 30 00:56:53.567452 2026] [security2:error] [pid 187269:tid 187496] [client 116.72.182.19:58848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryytdFcyhWr7HDzNGlpvAAAAm4"]
[Wed Sep 30 00:56:53.567545 2026] [security2:error] [pid 187269:tid 187496] [client 116.72.182.19:58848] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryytdFcyhWr7HDzNGlpvAAAAm4"]
[Wed Sep 30 00:56:53.592745 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.4.78:62657] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webmail.tripleclearhf.com"] [uri "/c99.php"] [unique_id "aryytdFcyhWr7HDzNGlpvgAAAnc"]
[Wed Sep 30 00:56:53.616579 2026] [security2:error] [pid 186850:tid 186982] [client 52.172.226.14:20219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/.well-known/index.php"] [unique_id "aryytU5Phls--iYlcKj9rwAAAQw"]
[Wed Sep 30 00:56:53.636178 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.636446 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.685736 2026] [security2:error] [pid 186850:tid 187082] [client 20.219.2.60:36818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/new4.php"] [unique_id "aryytU5Phls--iYlcKj9swAAAXA"]
[Wed Sep 30 00:56:53.728370 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.728736 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.770066 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.145.90:40836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-logis.php"] [unique_id "aryytU5Phls--iYlcKj9uQAAAQ4"]
[Wed Sep 30 00:56:53.818577 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.818838 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.837827 2026] [security2:error] [pid 186850:tid 187032] [client 34.148.249.105:61027] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryytU5Phls--iYlcKj9vAAAAT4"]
[Wed Sep 30 00:56:53.857524 2026] [security2:error] [pid 187269:tid 187531] [client 20.219.14.152:43327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/admin.php/go.php"] [unique_id "aryytdFcyhWr7HDzNGlpwwAAApA"]
[Wed Sep 30 00:56:53.909909 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:53.910195 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:24004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:53.920084 2026] [security2:error] [pid 186850:tid 187097] [client 13.70.4.78:62693] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webmail.tripleclearhf.com"] [uri "/c99.php"] [unique_id "aryytU5Phls--iYlcKj9wAAAAX8"]
[Wed Sep 30 00:56:53.941618 2026] [security2:error] [pid 187269:tid 187462] [client 20.219.2.60:55813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp5.php"] [unique_id "aryytdFcyhWr7HDzNGlpyAAAAkw"]
[Wed Sep 30 00:56:53.962446 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25z
[Wed Sep 30 00:56:53.962698 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25z
[Wed Sep 30 00:56:53.992382 2026] [security2:error] [pid 187269:tid 187443] [client 4.240.25.22:20290] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.offshoremultihull.org"] [uri "/1.php"] [unique_id "aryytdFcyhWr7HDzNGlpygAAAjk"]
[Wed Sep 30 00:56:53.992481 2026] [security2:error] [pid 187269:tid 187443] [client 4.240.25.22:20290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/1.php"] [unique_id "aryytdFcyhWr7HDzNGlpygAAAjk"]
[Wed Sep 30 00:56:54.005043 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.005458 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.021147 2026] [security2:error] [pid 187269:tid 187458] [client 20.198.74.230:23880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/29.php"] [unique_id "aryyttFcyhWr7HDzNGlpzQAAAkg"]
[Wed Sep 30 00:56:54.031070 2026] [access_compat:error] [pid 187269:tid 187416] [client 47.79.13.53:43926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:54.031359 2026] [access_compat:error] [pid 187269:tid 187416] [client 47.79.13.53:43926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:54.042977 2026] [security2:error] [pid 186850:tid 187068] [client 20.214.145.90:39752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/esc.php"] [unique_id "aryytk5Phls--iYlcKj9xAAAAWI"]
[Wed Sep 30 00:56:54.062109 2026] [security2:error] [pid 187269:tid 187522] [client 222.167.104.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyttFcyhWr7HDzNGlp0QAAAoc"]
[Wed Sep 30 00:56:54.067835 2026] [security2:error] [pid 187269:tid 187445] [client 114.119.133.108:28553] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "medredisolutions.com"] [uri "/"] [unique_id "aryyttFcyhWr7HDzNGlp0gAAAjs"], referer: https://medredisolutions.com/?attachment_id=352
[Wed Sep 30 00:56:54.092675 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.092947 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.096246 2026] [security2:error] [pid 187269:tid 187442] [client 52.172.226.14:20495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryyttFcyhWr7HDzNGlp1AAAAjg"]
[Wed Sep 30 00:56:54.096835 2026] [security2:error] [pid 186850:tid 187000] [client 34.148.249.105:49157] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "eai.ceg.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryytk5Phls--iYlcKj9xQAAAR4"]
[Wed Sep 30 00:56:54.121651 2026] [access_compat:error] [pid 187269:tid 187471] [client 47.79.13.172:54976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:54.121950 2026] [access_compat:error] [pid 187269:tid 187471] [client 47.79.13.172:54976] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:54.123003 2026] [security2:error] [pid 187269:tid 187474] [client 20.219.2.60:18880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/a5.php"] [unique_id "aryyttFcyhWr7HDzNGlp1wAAAlg"]
[Wed Sep 30 00:56:54.184152 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.184420 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.185707 2026] [security2:error] [pid 186850:tid 186977] [remote 47.128.114.102:18636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/13852/22"] [unique_id "aryytk5Phls--iYlcKj9xwABQX4"]
[Wed Sep 30 00:56:54.220575 2026] [security2:error] [pid 187269:tid 187435] [client 20.213.164.196:35831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wmore1.php"] [unique_id "aryyttFcyhWr7HDzNGlp3wAAAjE"]
[Wed Sep 30 00:56:54.244743 2026] [security2:error] [pid 187269:tid 187451] [client 13.70.4.78:62709] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webmail.tripleclearhf.com"] [uri "/c99.php"] [unique_id "aryyttFcyhWr7HDzNGlp4gAAAkE"]
[Wed Sep 30 00:56:54.275848 2026] [security2:error] [pid 187269:tid 187498] [client 194.145.221.255:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyttFcyhWr7HDzNGlp5QAAAnA"]
[Wed Sep 30 00:56:54.275993 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.276249 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.277501 2026] [security2:error] [pid 186850:tid 186992] [client 45.138.12.43:9066] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.piy.svw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryytk5Phls--iYlcKj9zAAAARY"]
[Wed Sep 30 00:56:54.315070 2026] [security2:error] [pid 187269:tid 187483] [client 20.214.145.90:40832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/2.php"] [unique_id "aryyttFcyhWr7HDzNGlp5gAAAmE"]
[Wed Sep 30 00:56:54.320690 2026] [security2:error] [pid 186850:tid 187086] [client 216.73.216.46:24004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryytk5Phls--iYlcKj9zQAAAXQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTI%3D
[Wed Sep 30 00:56:54.325082 2026] [security2:error] [pid 186850:tid 187076] [client 103.159.192.142:60319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryytk5Phls--iYlcKj9zgAAAWo"]
[Wed Sep 30 00:56:54.325167 2026] [security2:error] [pid 186850:tid 187076] [client 103.159.192.142:60319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryytk5Phls--iYlcKj9zgAAAWo"]
[Wed Sep 30 00:56:54.329909 2026] [security2:error] [pid 186850:tid 187013] [client 20.219.14.152:43224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/groud3.php"] [unique_id "aryytk5Phls--iYlcKj90AAAASs"]
[Wed Sep 30 00:56:54.371670 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.372119 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.391624 2026] [security2:error] [pid 186850:tid 187053] [client 20.28.180.172:29480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/1b.php"] [unique_id "aryytk5Phls--iYlcKj91AAAAVM"]
[Wed Sep 30 00:56:54.465760 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.466322 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.474784 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L2Zk
[Wed Sep 30 00:56:54.475721 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L2Zk
[Wed Sep 30 00:56:54.554356 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.554840 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.563621 2026] [security2:error] [pid 186850:tid 187024] [client 13.70.4.78:3174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/ttivnife.php"] [unique_id "aryytk5Phls--iYlcKj93QAAATY"]
[Wed Sep 30 00:56:54.569836 2026] [security2:error] [pid 186850:tid 187043] [client 20.219.2.60:45340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-access.php"] [unique_id "aryytk5Phls--iYlcKj93gAAAUk"]
[Wed Sep 30 00:56:54.594915 2026] [security2:error] [pid 186850:tid 186989] [client 52.172.226.14:20220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryytk5Phls--iYlcKj93wAAARM"]
[Wed Sep 30 00:56:54.602592 2026] [security2:error] [pid 186850:tid 187095] [client 110.172.129.145:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryytk5Phls--iYlcKj94AAAAX0"]
[Wed Sep 30 00:56:54.607304 2026] [security2:error] [pid 187269:tid 187418] [client 20.214.145.90:56990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/ba.php"] [unique_id "aryyttFcyhWr7HDzNGlp9gAAAiA"]
[Wed Sep 30 00:56:54.642085 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.642366 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.698554 2026] [security2:error] [pid 186850:tid 186975] [remote 47.128.35.240:24246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "camping4eloah.com"] [uri "/index.php"] [unique_id "aryytk5Phls--iYlcKj95QABLnw"]
[Wed Sep 30 00:56:54.730092 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.730350 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.749823 2026] [security2:error] [pid 187269:tid 187486] [client 20.204.42.136:54157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/Isadore.php"] [unique_id "aryyttFcyhWr7HDzNGlp-wAAAmQ"]
[Wed Sep 30 00:56:54.762977 2026] [security2:error] [pid 186850:tid 187063] [client 155.190.6.18:44558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryytk5Phls--iYlcKj96AAAAV0"]
[Wed Sep 30 00:56:54.768740 2026] [security2:error] [pid 187269:tid 187495] [client 20.219.2.60:36756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/aa.php"] [unique_id "aryyttFcyhWr7HDzNGlp_AAAAm0"]
[Wed Sep 30 00:56:54.780189 2026] [security2:error] [pid 187269:tid 187414] [client 116.197.133.25:56513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyttFcyhWr7HDzNGlp_QAAAhw"]
[Wed Sep 30 00:56:54.780301 2026] [security2:error] [pid 187269:tid 187414] [client 116.197.133.25:56513] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyttFcyhWr7HDzNGlp_QAAAhw"]
[Wed Sep 30 00:56:54.793886 2026] [security2:error] [pid 186850:tid 187062] [client 4.240.25.22:21554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/edit.php"] [unique_id "aryytk5Phls--iYlcKj96gAAAVw"]
[Wed Sep 30 00:56:54.825789 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.826246 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.827892 2026] [security2:error] [pid 187269:tid 187420] [client 20.219.14.152:43309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/gaxby.php"] [unique_id "aryyttFcyhWr7HDzNGlp_wAAAiI"]
[Wed Sep 30 00:56:54.873424 2026] [security2:error] [pid 187269:tid 187462] [client 13.70.4.78:3957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/admin.php/2P.php"] [unique_id "aryyttFcyhWr7HDzNGlqAwAAAkw"]
[Wed Sep 30 00:56:54.887114 2026] [security2:error] [pid 187269:tid 187443] [client 20.214.145.90:39774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/great.php"] [unique_id "aryyttFcyhWr7HDzNGlqBAAAAjk"]
[Wed Sep 30 00:56:54.912417 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:54.912673 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:54.932420 2026] [security2:error] [pid 187269:tid 187518] [client 20.204.161.246:41503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/imageskir.php"] [unique_id "aryyttFcyhWr7HDzNGlqCAAAAoQ"]
[Wed Sep 30 00:56:54.953115 2026] [access_compat:error] [pid 186850:tid 187048] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:54.953377 2026] [access_compat:error] [pid 186850:tid 187048] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:55.005539 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.005803 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.042670 2026] [security2:error] [pid 186850:tid 187063] [client 155.190.6.18:44558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryytk5Phls--iYlcKj96AAAAV0"]
[Wed Sep 30 00:56:55.093774 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.094042 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.104449 2026] [security2:error] [pid 186850:tid 187083] [client 20.219.2.60:59630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/hots.php"] [unique_id "aryyt05Phls--iYlcKj98AAAAXE"]
[Wed Sep 30 00:56:55.123586 2026] [security2:error] [pid 187269:tid 187437] [client 52.172.226.14:20692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryyt9FcyhWr7HDzNGlqEAAAAjM"]
[Wed Sep 30 00:56:55.167910 2026] [security2:error] [pid 186850:tid 187011] [client 20.214.145.90:40833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "aryyt05Phls--iYlcKj98wAAASk"]
[Wed Sep 30 00:56:55.185888 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.186139 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.201917 2026] [security2:error] [pid 187269:tid 187449] [client 13.70.4.78:52608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/cord.php"] [unique_id "aryyt9FcyhWr7HDzNGlqFAAAAj8"]
[Wed Sep 30 00:56:55.207137 2026] [security2:error] [pid 186850:tid 187100] [client 38.25.25.25:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryyt05Phls--iYlcKj99gAAAYI"]
[Wed Sep 30 00:56:55.220701 2026] [security2:error] [pid 186850:tid 187066] [client 20.213.164.196:15975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/177.php"] [unique_id "aryyt05Phls--iYlcKj9-AAAAWA"]
[Wed Sep 30 00:56:55.276558 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.276824 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.300322 2026] [security2:error] [pid 187269:tid 187501] [client 45.138.12.32:30060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tgb.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyt9FcyhWr7HDzNGlqGAAAAnM"]
[Wed Sep 30 00:56:55.322547 2026] [security2:error] [pid 186850:tid 186980] [client 20.219.14.152:44880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/dh9u7.php"] [unique_id "aryyt05Phls--iYlcKj9-wAAAQo"]
[Wed Sep 30 00:56:55.374302 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.374739 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.375687 2026] [security2:error] [pid 187269:tid 187431] [client 20.198.74.230:34842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyt9FcyhWr7HDzNGlqHAAAAi0"]
[Wed Sep 30 00:56:55.437323 2026] [security2:error] [pid 186850:tid 187072] [client 20.219.2.60:19441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/amp.php"] [unique_id "aryyt05Phls--iYlcKj9_gAAAWY"]
[Wed Sep 30 00:56:55.444522 2026] [security2:error] [pid 186850:tid 187068] [client 20.214.145.90:40857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/robots.php"] [unique_id "aryyt05Phls--iYlcKj9_wAAAWI"]
[Wed Sep 30 00:56:55.465081 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.465397 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.490245 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:55.490576 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:56:55.502561 2026] [security2:error] [pid 187269:tid 187438] [client 20.28.180.172:29628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/curldect.php"] [unique_id "aryyt9FcyhWr7HDzNGlqHgAAAjQ"]
[Wed Sep 30 00:56:55.515835 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:52633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/anom.php"] [unique_id "aryyt9FcyhWr7HDzNGlqHwAAAn8"]
[Wed Sep 30 00:56:55.549691 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.549962 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.640372 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.640639 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.644464 2026] [security2:error] [pid 187269:tid 187457] [client 20.204.161.246:1398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/backup-helper.php"] [unique_id "aryyt9FcyhWr7HDzNGlqIgAAAkc"]
[Wed Sep 30 00:56:55.706642 2026] [security2:error] [pid 187269:tid 187514] [client 146.103.110.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/building-sustainable-futures-microfinance-and-environmental-responsibility/"] [unique_id "aryyt9FcyhWr7HDzNGlqJwAAAoA"], referer: http://glorymfb.com/building-sustainable-futures-microfinance-and-environmental-responsibility/
[Wed Sep 30 00:56:55.714004 2026] [security2:error] [pid 187269:tid 187453] [client 20.214.145.90:39795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/k.php"] [unique_id "aryyt9FcyhWr7HDzNGlqKAAAAkM"]
[Wed Sep 30 00:56:55.731454 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.731688 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.753590 2026] [security2:error] [pid 187269:tid 187425] [client 20.219.2.60:59633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/admin-footer.php"] [unique_id "aryyt9FcyhWr7HDzNGlqLQAAAic"]
[Wed Sep 30 00:56:55.804519 2026] [security2:error] [pid 187269:tid 187424] [client 20.219.14.152:44869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/yvnqcuic.php"] [unique_id "aryyt9FcyhWr7HDzNGlqLwAAAiY"]
[Wed Sep 30 00:56:55.820312 2026] [security2:error] [pid 187269:tid 187463] [client 20.219.2.60:36844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/jk.php"] [unique_id "aryyt9FcyhWr7HDzNGlqMgAAAk0"]
[Wed Sep 30 00:56:55.825415 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.825671 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.839189 2026] [security2:error] [pid 186850:tid 186986] [client 13.70.4.78:62679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/plugins.php"] [unique_id "aryyt05Phls--iYlcKj-BgAAARA"]
[Wed Sep 30 00:56:55.853488 2026] [security2:error] [pid 187269:tid 187533] [client 37.41.16.35:61533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyt9FcyhWr7HDzNGlqNAAAApI"]
[Wed Sep 30 00:56:55.853606 2026] [security2:error] [pid 187269:tid 187533] [client 37.41.16.35:61533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyt9FcyhWr7HDzNGlqNAAAApI"]
[Wed Sep 30 00:56:55.876645 2026] [security2:error] [pid 186850:tid 187037] [client 52.172.226.14:21080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryyt05Phls--iYlcKj-CAAAAUM"]
[Wed Sep 30 00:56:55.914955 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:55.915220 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:55.983500 2026] [security2:error] [pid 187269:tid 187496] [client 20.214.145.90:40917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/w.php"] [unique_id "aryyt9FcyhWr7HDzNGlqOgAAAm4"]
[Wed Sep 30 00:56:55.994541 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25z
[Wed Sep 30 00:56:55.994791 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25z
[Wed Sep 30 00:56:56.007648 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.007965 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.077933 2026] [security2:error] [pid 186850:tid 187040] [client 4.240.25.22:18750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/dronishness.php"] [unique_id "aryyuE5Phls--iYlcKj-DAAAAUY"]
[Wed Sep 30 00:56:56.107674 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.107939 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.128574 2026] [access_compat:error] [pid 186850:tid 187085] [client 47.79.13.234:49848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:56.128895 2026] [access_compat:error] [pid 186850:tid 187085] [client 47.79.13.234:49848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:56.148763 2026] [security2:error] [pid 186850:tid 187013] [client 92.68.96.50:54496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.96.68.92.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "resourcefulplanner.co.uk"] [uri "/wp-login.php"] [unique_id "aryyuE5Phls--iYlcKj-DwAAASs"]
[Wed Sep 30 00:56:56.158586 2026] [security2:error] [pid 187269:tid 187442] [client 13.70.4.78:3223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/groud3.php"] [unique_id "aryyuNFcyhWr7HDzNGlqRAAAAjg"]
[Wed Sep 30 00:56:56.197851 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.198106 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.241876 2026] [security2:error] [pid 186850:tid 186992] [client 139.135.34.150:20244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.34.135.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyuE5Phls--iYlcKj-FgAAARY"]
[Wed Sep 30 00:56:56.242384 2026] [security2:error] [pid 186850:tid 186992] [client 139.135.34.150:20244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryyuE5Phls--iYlcKj-FgAAARY"]
[Wed Sep 30 00:56:56.256946 2026] [security2:error] [pid 187269:tid 187524] [client 20.214.145.90:40890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/ccc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqSQAAAok"]
[Wed Sep 30 00:56:56.267938 2026] [security2:error] [pid 186850:tid 187061] [client 20.219.2.60:55814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws84.php"] [unique_id "aryyuE5Phls--iYlcKj-FwAAAVs"]
[Wed Sep 30 00:56:56.282477 2026] [security2:error] [pid 187269:tid 187449] [client 20.219.14.152:43243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/koiy.php"] [unique_id "aryyuNFcyhWr7HDzNGlqTAAAAj8"]
[Wed Sep 30 00:56:56.288947 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.289201 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.294139 2026] [security2:error] [pid 187269:tid 187451] [client 20.213.164.196:15959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/ccc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqTQAAAkE"]
[Wed Sep 30 00:56:56.334542 2026] [autoindex:error] [pid 187269:tid 187429] [client 212.156.70.154:18876] AH01276: Cannot serve directory /home4/oztpngmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:56.374033 2026] [security2:error] [pid 186850:tid 187014] [client 20.219.2.60:18909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/abrand.php"] [unique_id "aryyuE5Phls--iYlcKj-GgAAASw"]
[Wed Sep 30 00:56:56.379346 2026] [security2:error] [pid 187269:tid 187413] [client 20.204.42.136:65218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/samll.php"] [unique_id "aryyuNFcyhWr7HDzNGlqUQAAAhs"]
[Wed Sep 30 00:56:56.385492 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.385970 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.393224 2026] [security2:error] [pid 187269:tid 187475] [client 182.69.182.151:15994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqUwAAAlk"]
[Wed Sep 30 00:56:56.393383 2026] [security2:error] [pid 187269:tid 187475] [client 182.69.182.151:15994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqUwAAAlk"]
[Wed Sep 30 00:56:56.432931 2026] [security2:error] [pid 186850:tid 187059] [client 116.193.128.26:56732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyuE5Phls--iYlcKj-HQAAAVk"]
[Wed Sep 30 00:56:56.433490 2026] [security2:error] [pid 186850:tid 187059] [client 116.193.128.26:56732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyuE5Phls--iYlcKj-HQAAAVk"]
[Wed Sep 30 00:56:56.468397 2026] [security2:error] [pid 186850:tid 186981] [client 13.70.4.78:62677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gaxby.php"] [unique_id "aryyuE5Phls--iYlcKj-IAAAAQs"]
[Wed Sep 30 00:56:56.472275 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25z
[Wed Sep 30 00:56:56.472709 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25z
[Wed Sep 30 00:56:56.474366 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.474638 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.483299 2026] [security2:error] [pid 186850:tid 186859] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/laravel/.env"] [unique_id "aryytU5Phls--iYlcKj-IQABdQg"]
[Wed Sep 30 00:56:56.484915 2026] [security2:error] [pid 186850:tid 186956] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/old/.env"] [unique_id "aryytk5Phls--iYlcKj-IwABdWk"]
[Wed Sep 30 00:56:56.484919 2026] [security2:error] [pid 186850:tid 186859] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/media/.env"] [unique_id "aryytU5Phls--iYlcKj-IgABdQg"]
[Wed Sep 30 00:56:56.485429 2026] [security2:error] [pid 186850:tid 186956] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/phpinfo.php"] [unique_id "aryytk5Phls--iYlcKj-JgABdWk"]
[Wed Sep 30 00:56:56.485824 2026] [security2:error] [pid 186850:tid 186859] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/production/.env"] [unique_id "aryytk5Phls--iYlcKj-JwABdQg"]
[Wed Sep 30 00:56:56.485838 2026] [security2:error] [pid 186850:tid 186869] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/new/.env"] [unique_id "aryytU5Phls--iYlcKj-JAABdRI"]
[Wed Sep 30 00:56:56.486133 2026] [security2:error] [pid 186850:tid 186956] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/public/.env"] [unique_id "aryytk5Phls--iYlcKj-KAABdWk"]
[Wed Sep 30 00:56:56.486671 2026] [security2:error] [pid 186850:tid 186974] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/server/.env"] [unique_id "aryytk5Phls--iYlcKj-KgABdXs"]
[Wed Sep 30 00:56:56.486723 2026] [security2:error] [pid 186850:tid 186978] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/src/.env"] [unique_id "aryyt05Phls--iYlcKj-KwABdX8"]
[Wed Sep 30 00:56:56.486730 2026] [security2:error] [pid 186850:tid 186875] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/staging/.env"] [unique_id "aryyt05Phls--iYlcKj-LAABdRg"]
[Wed Sep 30 00:56:56.486776 2026] [security2:error] [pid 186850:tid 186956] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/test/.env"] [unique_id "aryyuE5Phls--iYlcKj-LwABdWk"]
[Wed Sep 30 00:56:56.487216 2026] [security2:error] [pid 186850:tid 186974] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/v1/.env"] [unique_id "aryyuE5Phls--iYlcKj-MAABdXs"]
[Wed Sep 30 00:56:56.502156 2026] [security2:error] [pid 187269:tid 187508] [client 52.172.226.14:20715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryyuNFcyhWr7HDzNGlqWgAAAno"]
[Wed Sep 30 00:56:56.521527 2026] [security2:error] [pid 187269:tid 187479] [client 186.208.240.137:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryyuNFcyhWr7HDzNGlqXgAAAl0"]
[Wed Sep 30 00:56:56.524460 2026] [security2:error] [pid 187269:tid 187504] [client 20.214.145.90:39755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/images.php"] [unique_id "aryyuNFcyhWr7HDzNGlqXwAAAnY"]
[Wed Sep 30 00:56:56.563031 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.563390 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.620078 2026] [security2:error] [pid 186850:tid 186892] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/v2/.env"] [unique_id "aryyuE5Phls--iYlcKj-NwABdSk"]
[Wed Sep 30 00:56:56.621171 2026] [security2:error] [pid 186850:tid 186909] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "kbm-realty.com"] [uri "/wp-config.php.bak"] [unique_id "aryyuE5Phls--iYlcKj-OgABdTo"]
[Wed Sep 30 00:56:56.622545 2026] [security2:error] [pid 186850:tid 186920] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/web/.env"] [unique_id "aryyuE5Phls--iYlcKj-OQABdUU"]
[Wed Sep 30 00:56:56.623023 2026] [security2:error] [pid 186850:tid 186906] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/backup.sql"] [unique_id "aryyuE5Phls--iYlcKj-PwABdTc"]
[Wed Sep 30 00:56:56.655418 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.655883 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.748916 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.749359 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.758395 2026] [security2:error] [pid 186850:tid 186903] [remote 34.156.206.32:51042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kbm-realty.com"] [uri "/aws/.env"] [unique_id "aryyuE5Phls--iYlcKj-TwABdTQ"]
[Wed Sep 30 00:56:56.758645 2026] [security2:error] [pid 187269:tid 187436] [client 152.59.169.65:51040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqbAAAAjI"]
[Wed Sep 30 00:56:56.767456 2026] [security2:error] [pid 187269:tid 187485] [client 20.219.14.152:44806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wordfence-waf.php"] [unique_id "aryyuNFcyhWr7HDzNGlqbwAAAmM"]
[Wed Sep 30 00:56:56.767468 2026] [security2:error] [pid 187269:tid 187470] [client 105.112.178.79:38122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.pqm.svd.mybluehost.me"] [uri "/.env"] [unique_id "aryyuNFcyhWr7HDzNGlqcAAAAlQ"]
[Wed Sep 30 00:56:56.768464 2026] [security2:error] [pid 187269:tid 187436] [client 152.59.169.65:51040] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyuNFcyhWr7HDzNGlqbAAAAjI"]
[Wed Sep 30 00:56:56.790628 2026] [security2:error] [pid 187269:tid 187532] [client 20.214.145.90:40903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/alls.php"] [unique_id "aryyuNFcyhWr7HDzNGlqcQAAApE"]
[Wed Sep 30 00:56:56.800409 2026] [security2:error] [pid 186850:tid 186995] [client 13.70.4.78:3165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/dh9u7.php"] [unique_id "aryyuE5Phls--iYlcKj-UgAAARk"]
[Wed Sep 30 00:56:56.836505 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.836770 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.841678 2026] [security2:error] [pid 187269:tid 187490] [client 20.204.161.246:17217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/1xmomo.php"] [unique_id "aryyuNFcyhWr7HDzNGlqcwAAAmg"]
[Wed Sep 30 00:56:56.879038 2026] [security2:error] [pid 187269:tid 187507] [client 20.219.2.60:59599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/bnm.php"] [unique_id "aryyuNFcyhWr7HDzNGlqdwAAAnk"]
[Wed Sep 30 00:56:56.926709 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:56.926983 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:56.952045 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2Zk
[Wed Sep 30 00:56:56.952311 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2Zk
[Wed Sep 30 00:56:56.998038 2026] [security2:error] [pid 186850:tid 187030] [client 20.198.74.230:34834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/f35.update.php"] [unique_id "aryyuE5Phls--iYlcKj-WAAAATw"]
[Wed Sep 30 00:56:57.018310 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.018570 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.046882 2026] [security2:error] [pid 186850:tid 187026] [client 52.172.226.14:20712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/themes/about.php"] [unique_id "aryyuU5Phls--iYlcKj-WQAAATg"]
[Wed Sep 30 00:56:57.071622 2026] [security2:error] [pid 187269:tid 187509] [client 20.214.145.90:39796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/admin.php"] [unique_id "aryyudFcyhWr7HDzNGlqfAAAAns"]
[Wed Sep 30 00:56:57.109872 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.110148 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.117393 2026] [security2:error] [pid 187269:tid 187445] [client 20.194.30.107:25871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/az.php"] [unique_id "aryyudFcyhWr7HDzNGlqfgAAAjs"]
[Wed Sep 30 00:56:57.134969 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:3232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/koiy.php"] [unique_id "aryyudFcyhWr7HDzNGlqfwAAAjM"]
[Wed Sep 30 00:56:57.175430 2026] [security2:error] [pid 186850:tid 187045] [client 49.43.163.212:57535] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-XAAAAUs"]
[Wed Sep 30 00:56:57.175554 2026] [security2:error] [pid 186850:tid 187045] [client 49.43.163.212:57535] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-XAAAAUs"]
[Wed Sep 30 00:56:57.198868 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.199135 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.250935 2026] [security2:error] [pid 186850:tid 186994] [client 20.219.14.152:43218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wp5.php"] [unique_id "aryyuU5Phls--iYlcKj-XgAAARg"]
[Wed Sep 30 00:56:57.267655 2026] [access_compat:error] [pid 187269:tid 187484] [client 47.79.13.234:49854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:57.267940 2026] [access_compat:error] [pid 187269:tid 187484] [client 47.79.13.234:49854] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:57.290128 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.290396 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.307306 2026] [security2:error] [pid 186850:tid 187047] [client 20.194.30.107:14462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/red.php"] [unique_id "aryyuU5Phls--iYlcKj-YAAAAU0"]
[Wed Sep 30 00:56:57.343867 2026] [security2:error] [pid 187269:tid 187469] [client 20.214.145.90:40891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/geck.php"] [unique_id "aryyudFcyhWr7HDzNGlqjgAAAlM"]
[Wed Sep 30 00:56:57.346853 2026] [security2:error] [pid 187269:tid 187530] [client 20.219.2.60:63260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/amax.php"] [unique_id "aryyudFcyhWr7HDzNGlqjwAAAo8"]
[Wed Sep 30 00:56:57.386766 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.387300 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.447534 2026] [security2:error] [pid 187269:tid 187479] [client 13.70.4.78:52657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wordfence-waf.php"] [unique_id "aryyudFcyhWr7HDzNGlqlgAAAl0"]
[Wed Sep 30 00:56:57.478525 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.478976 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.489924 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:57.490366 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:56:57.523643 2026] [security2:error] [pid 186850:tid 186986] [client 81.2.141.30:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/power-products/stabilizers"] [unique_id "aryyuU5Phls--iYlcKj-ZgAAARA"]
[Wed Sep 30 00:56:57.549924 2026] [security2:error] [pid 186850:tid 187018] [client 103.172.210.103:52933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-aQAAATA"]
[Wed Sep 30 00:56:57.550161 2026] [security2:error] [pid 186850:tid 187018] [client 103.172.210.103:52933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-aQAAATA"]
[Wed Sep 30 00:56:57.564463 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.564796 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.583529 2026] [mime:warn] [pid 187269:tid 187514] AH01602: Cannot get media parameter.
[Wed Sep 30 00:56:57.604799 2026] [security2:error] [pid 187269:tid 187454] [client 4.196.65.241:2593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/faiy.php"] [unique_id "aryyudFcyhWr7HDzNGlqnwAAAkQ"]
[Wed Sep 30 00:56:57.621003 2026] [security2:error] [pid 187269:tid 187460] [client 20.214.145.90:40861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/goods.php"] [unique_id "aryyudFcyhWr7HDzNGlqogAAAko"]
[Wed Sep 30 00:56:57.630440 2026] [security2:error] [pid 187269:tid 187424] [client 4.240.25.22:30748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyudFcyhWr7HDzNGlqpAAAAiY"]
[Wed Sep 30 00:56:57.641110 2026] [security2:error] [pid 187269:tid 187512] [client 52.172.226.14:21068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/filemanager/dialog.php"] [unique_id "aryyudFcyhWr7HDzNGlqpgAAAn4"]
[Wed Sep 30 00:56:57.654880 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.655145 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.666097 2026] [security2:error] [pid 187269:tid 187366] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyudFcyhWr7HDzNGlqqQACVVk"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D99609
[Wed Sep 30 00:56:57.726820 2026] [security2:error] [pid 187269:tid 187470] [client 20.219.14.152:44877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/em.php"] [unique_id "aryyudFcyhWr7HDzNGlqrgAAAlQ"]
[Wed Sep 30 00:56:57.746342 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.746602 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.751423 2026] [security2:error] [pid 187269:tid 187524] [client 223.181.30.165:15333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyudFcyhWr7HDzNGlqsAAAAok"]
[Wed Sep 30 00:56:57.751547 2026] [security2:error] [pid 187269:tid 187524] [client 223.181.30.165:15333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyudFcyhWr7HDzNGlqsAAAAok"]
[Wed Sep 30 00:56:57.761485 2026] [security2:error] [pid 187269:tid 187434] [client 20.213.164.196:15941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/0xD.php"] [unique_id "aryyudFcyhWr7HDzNGlqsQAAAjA"]
[Wed Sep 30 00:56:57.770692 2026] [security2:error] [pid 187269:tid 187418] [client 13.70.4.78:52662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wp5.php"] [unique_id "aryyudFcyhWr7HDzNGlqsgAAAiA"]
[Wed Sep 30 00:56:57.836714 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.836996 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.860397 2026] [security2:error] [pid 186850:tid 187056] [client 20.28.180.172:29450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zwso.php"] [unique_id "aryyuU5Phls--iYlcKj-cgAAAVY"]
[Wed Sep 30 00:56:57.863082 2026] [security2:error] [pid 186850:tid 186866] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyuU5Phls--iYlcKj-cwABRw8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=21211ecab23ede4cac5a56b00aaa4845
[Wed Sep 30 00:56:57.863107 2026] [security2:error] [pid 186850:tid 186866] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyuU5Phls--iYlcKj-cwABRw8"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=21211ecab23ede4cac5a56b00aaa4845
[Wed Sep 30 00:56:57.904932 2026] [security2:error] [pid 187269:tid 187428] [client 20.214.145.90:40859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/dejavu.php"] [unique_id "aryyudFcyhWr7HDzNGlqtAAAAio"]
[Wed Sep 30 00:56:57.926060 2026] [security2:error] [pid 187269:tid 187423] [client 20.219.2.60:58457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/66.php"] [unique_id "aryyudFcyhWr7HDzNGlqtgAAAiU"]
[Wed Sep 30 00:56:57.928425 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:57.928684 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:57.931782 2026] [security2:error] [pid 186850:tid 187035] [client 49.36.41.37:63582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-dAAAAUE"]
[Wed Sep 30 00:56:57.931898 2026] [security2:error] [pid 186850:tid 187035] [client 49.36.41.37:63582] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyuU5Phls--iYlcKj-dAAAAUE"]
[Wed Sep 30 00:56:57.953401 2026] [security2:error] [pid 186850:tid 187061] [client 20.204.161.246:31979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/almafkew.php"] [unique_id "aryyuU5Phls--iYlcKj-dgAAAVs"]
[Wed Sep 30 00:56:57.976388 2026] [security2:error] [pid 187269:tid 187474] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyudFcyhWr7HDzNGlquAAAAlg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:56:58.006164 2026] [access_compat:error] [pid 186850:tid 187006] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25z
[Wed Sep 30 00:56:58.006428 2026] [access_compat:error] [pid 186850:tid 187006] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25z
[Wed Sep 30 00:56:58.017357 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.017613 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.041672 2026] [security2:error] [pid 187269:tid 187420] [client 20.219.2.60:19446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/init.php"] [unique_id "aryyutFcyhWr7HDzNGlquwAAAiI"]
[Wed Sep 30 00:56:58.051888 2026] [security2:error] [pid 187269:tid 187431] [client 45.138.12.32:30130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.kde.lez.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyutFcyhWr7HDzNGlqvAAAAi0"]
[Wed Sep 30 00:56:58.068234 2026] [autoindex:error] [pid 187269:tid 187458] [client 35.187.36.114:48426] AH01276: Cannot serve directory /home4/eiesrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:58.080371 2026] [autoindex:error] [pid 187269:tid 187488] [client 35.187.36.114:48434] AH01276: Cannot serve directory /home4/eiesrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:58.099910 2026] [security2:error] [pid 186850:tid 187091] [client 20.194.30.107:8247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/red.php"] [unique_id "aryyuk5Phls--iYlcKj-fAAAAXk"]
[Wed Sep 30 00:56:58.104173 2026] [security2:error] [pid 187269:tid 187432] [client 20.194.30.107:17441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/amax.php"] [unique_id "aryyutFcyhWr7HDzNGlqwgAAAi4"]
[Wed Sep 30 00:56:58.109573 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.109847 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.113666 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.4.78:52646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/em.php"] [unique_id "aryyutFcyhWr7HDzNGlqxAAAAk4"]
[Wed Sep 30 00:56:58.141446 2026] [security2:error] [pid 187269:tid 187459] [client 52.172.226.14:20173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/index/function.php"] [unique_id "aryyutFcyhWr7HDzNGlqxwAAAkk"]
[Wed Sep 30 00:56:58.141694 2026] [security2:error] [pid 187269:tid 187497] [client 150.107.232.159:36108] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyutFcyhWr7HDzNGlqxgAAAm8"]
[Wed Sep 30 00:56:58.141843 2026] [security2:error] [pid 187269:tid 187497] [client 150.107.232.159:36108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyutFcyhWr7HDzNGlqxgAAAm8"]
[Wed Sep 30 00:56:58.161192 2026] [security2:error] [pid 187269:tid 187500] [client 202.179.95.79:57182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyutFcyhWr7HDzNGlqywAAAnI"]
[Wed Sep 30 00:56:58.161295 2026] [security2:error] [pid 187269:tid 187500] [client 202.179.95.79:57182] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyutFcyhWr7HDzNGlqywAAAnI"]
[Wed Sep 30 00:56:58.196040 2026] [security2:error] [pid 187269:tid 187493] [client 20.214.145.90:62167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/h02ugyh.php"] [unique_id "aryyutFcyhWr7HDzNGlq1QAAAms"]
[Wed Sep 30 00:56:58.202243 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.202509 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.232883 2026] [security2:error] [pid 187269:tid 187417] [client 20.219.14.152:43222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/hp.php"] [unique_id "aryyutFcyhWr7HDzNGlq2AAAAh8"]
[Wed Sep 30 00:56:58.291379 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.291632 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.388015 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.388490 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.433058 2026] [security2:error] [pid 186850:tid 187062] [client 13.70.4.78:52613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/hp.php"] [unique_id "aryyuk5Phls--iYlcKj-hQAAAVw"]
[Wed Sep 30 00:56:58.457950 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.2.60:36781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/gcqoa.php"] [unique_id "aryyutFcyhWr7HDzNGlq4gAAAjk"]
[Wed Sep 30 00:56:58.481313 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.482405 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.488182 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25z
[Wed Sep 30 00:56:58.488609 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25z
[Wed Sep 30 00:56:58.512702 2026] [security2:error] [pid 187269:tid 187455] [client 20.214.145.90:40839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/155.php"] [unique_id "aryyutFcyhWr7HDzNGlq5AAAAkU"]
[Wed Sep 30 00:56:58.565110 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.565369 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.583519 2026] [security2:error] [pid 187269:tid 187465] [client 213.136.69.135:60625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-parser-block.php"] [unique_id "aryyutFcyhWr7HDzNGlq5gAAAk8"], referer: binance.com
[Wed Sep 30 00:56:58.662122 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.662387 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.669286 2026] [security2:error] [pid 187269:tid 187462] [client 52.172.226.14:20487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryyutFcyhWr7HDzNGlq7AAAAkw"]
[Wed Sep 30 00:56:58.672396 2026] [security2:error] [pid 187269:tid 187523] [client 20.204.161.246:65485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/database2.php"] [unique_id "aryyutFcyhWr7HDzNGlq7QAAAog"]
[Wed Sep 30 00:56:58.738063 2026] [security2:error] [pid 187269:tid 187439] [client 45.138.12.43:3506] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pix.trp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyutFcyhWr7HDzNGlq7wAAAjU"]
[Wed Sep 30 00:56:58.739940 2026] [security2:error] [pid 187269:tid 187487] [client 20.219.14.152:44893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/wpuse.php"] [unique_id "aryyutFcyhWr7HDzNGlq8QAAAmU"]
[Wed Sep 30 00:56:58.746144 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.746405 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.747613 2026] [security2:error] [pid 187269:tid 187429] [client 13.70.4.78:54002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wpuse.php"] [unique_id "aryyutFcyhWr7HDzNGlq8gAAAis"]
[Wed Sep 30 00:56:58.753434 2026] [security2:error] [pid 187269:tid 187511] [client 20.213.164.196:35826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/sallu.php"] [unique_id "aryyutFcyhWr7HDzNGlq8wAAAn0"]
[Wed Sep 30 00:56:58.783421 2026] [security2:error] [pid 186850:tid 187083] [client 20.194.30.107:17356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/admin.php"] [unique_id "aryyuk5Phls--iYlcKj-jQAAAXE"]
[Wed Sep 30 00:56:58.814380 2026] [security2:error] [pid 186850:tid 187005] [client 20.219.2.60:48845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/public/file.php"] [unique_id "aryyuk5Phls--iYlcKj-jwAAASM"]
[Wed Sep 30 00:56:58.820169 2026] [security2:error] [pid 187269:tid 187431] [client 20.214.145.90:40869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/ops.php"] [unique_id "aryyutFcyhWr7HDzNGlq9QAAAi0"]
[Wed Sep 30 00:56:58.835373 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.835630 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.836533 2026] [access_compat:error] [pid 187269:tid 187446] [client 47.79.13.28:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:58.836945 2026] [access_compat:error] [pid 187269:tid 187446] [client 47.79.13.28:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:58.843242 2026] [autoindex:error] [pid 187269:tid 187428] [client 212.156.70.154:26018] AH01276: Cannot serve directory /home4/lhsiclmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:56:58.855494 2026] [security2:error] [pid 186850:tid 187079] [client 20.198.74.230:41391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/adminfuns.php"] [unique_id "aryyuk5Phls--iYlcKj-kAAAAW0"]
[Wed Sep 30 00:56:58.864232 2026] [security2:error] [pid 186850:tid 187097] [client 173.254.29.157:32122] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-cron.php"] [unique_id "aryyuk5Phls--iYlcKj-kwAAAX8"]
[Wed Sep 30 00:56:58.864865 2026] [security2:error] [pid 187269:tid 187343] [remote 57.141.14.75:53990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "aryyutFcyhWr7HDzNGlq9AACIkI"]
[Wed Sep 30 00:56:58.904570 2026] [access_compat:error] [pid 187269:tid 187507] [client 47.79.13.168:50124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:58.904841 2026] [access_compat:error] [pid 187269:tid 187507] [client 47.79.13.168:50124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:58.908944 2026] [security2:error] [pid 186850:tid 187031] [client 152.59.165.7:64948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyuk5Phls--iYlcKj-lAAAAT0"]
[Wed Sep 30 00:56:58.909089 2026] [security2:error] [pid 186850:tid 187031] [client 152.59.165.7:64948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyuk5Phls--iYlcKj-lAAAAT0"]
[Wed Sep 30 00:56:58.928725 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:58.928997 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:58.948415 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 00:56:58.948677 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 00:56:59.021426 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.021683 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.022034 2026] [security2:error] [pid 187269:tid 187503] [client 20.70.173.30:60551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/echkm.php"] [unique_id "aryyu9FcyhWr7HDzNGlrAQAAAnU"]
[Wed Sep 30 00:56:59.072751 2026] [security2:error] [pid 187269:tid 187421] [client 13.70.4.78:3254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/file18x.php"] [unique_id "aryyu9FcyhWr7HDzNGlrAgAAAiM"]
[Wed Sep 30 00:56:59.093853 2026] [security2:error] [pid 186850:tid 186984] [client 103.159.192.142:60650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-lwAAAQ4"]
[Wed Sep 30 00:56:59.093974 2026] [security2:error] [pid 186850:tid 186984] [client 103.159.192.142:60650] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-lwAAAQ4"]
[Wed Sep 30 00:56:59.111511 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.111763 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.113338 2026] [security2:error] [pid 187269:tid 187417] [client 20.214.145.90:40910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/mac.php"] [unique_id "aryyu9FcyhWr7HDzNGlrBQAAAh8"]
[Wed Sep 30 00:56:59.201887 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.202150 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.204253 2026] [security2:error] [pid 187269:tid 187461] [client 20.198.74.230:23890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/olvxz.php"] [unique_id "aryyu9FcyhWr7HDzNGlrCQAAAks"]
[Wed Sep 30 00:56:59.233466 2026] [security2:error] [pid 186850:tid 186999] [client 203.122.45.246:56083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-nQAAAR0"]
[Wed Sep 30 00:56:59.233546 2026] [security2:error] [pid 186850:tid 186999] [client 203.122.45.246:56083] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-nQAAAR0"]
[Wed Sep 30 00:56:59.279587 2026] [security2:error] [pid 187269:tid 187447] [client 20.219.14.152:43290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/file18x.php"] [unique_id "aryyu9FcyhWr7HDzNGlrCgAAAj0"]
[Wed Sep 30 00:56:59.293316 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.293585 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.325704 2026] [security2:error] [pid 186850:tid 186927] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyu05Phls--iYlcKj-oQABaEw"], referer: https://forum.torquayfans.com/viewtopic.php?p=201589
[Wed Sep 30 00:56:59.325733 2026] [security2:error] [pid 186850:tid 186927] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyu05Phls--iYlcKj-oQABaEw"], referer: https://forum.torquayfans.com/viewtopic.php?p=201589
[Wed Sep 30 00:56:59.356251 2026] [security2:error] [pid 186850:tid 186990] [client 20.194.30.107:50256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/classwithtostring.php"] [unique_id "aryyu05Phls--iYlcKj-ogAAARQ"]
[Wed Sep 30 00:56:59.388177 2026] [security2:error] [pid 187269:tid 187485] [client 20.214.145.90:40934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/makeasmtp.php"] [unique_id "aryyu9FcyhWr7HDzNGlrEAAAAmM"]
[Wed Sep 30 00:56:59.390287 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.390753 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.402326 2026] [security2:error] [pid 187269:tid 187466] [client 13.70.4.78:62696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/123viva.php"] [unique_id "aryyu9FcyhWr7HDzNGlrEQAAAlA"]
[Wed Sep 30 00:56:59.471761 2026] [security2:error] [pid 187269:tid 187524] [client 20.219.2.60:52740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/166.php"] [unique_id "aryyu9FcyhWr7HDzNGlrFQAAAok"]
[Wed Sep 30 00:56:59.472290 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25z
[Wed Sep 30 00:56:59.472548 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25z
[Wed Sep 30 00:56:59.479768 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.480220 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.482594 2026] [security2:error] [pid 187269:tid 187411] [client 20.204.161.246:65332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/aa.php"] [unique_id "aryyu9FcyhWr7HDzNGlrFgAAAhk"]
[Wed Sep 30 00:56:59.505591 2026] [access_compat:error] [pid 186850:tid 186980] [client 47.79.13.174:58028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:56:59.505869 2026] [access_compat:error] [pid 186850:tid 186980] [client 47.79.13.174:58028] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:56:59.534067 2026] [security2:error] [pid 187269:tid 187408] [client 20.213.164.196:35787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/ops.php"] [unique_id "aryyu9FcyhWr7HDzNGlrGAAAAhY"]
[Wed Sep 30 00:56:59.568564 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.569005 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.572071 2026] [security2:error] [pid 187269:tid 187406] [client 146.103.110.101:50856] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "glorymfb.com"] [uri "/wp-comments-post.php"] [unique_id "aryyu9FcyhWr7HDzNGlrEgAAAhQ"], referer: http://glorymfb.com/building-sustainable-futures-microfinance-and-environmental-responsibility/
[Wed Sep 30 00:56:59.659223 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.659541 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.668043 2026] [security2:error] [pid 187269:tid 187491] [client 20.214.145.90:57000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/pucci.php"] [unique_id "aryyu9FcyhWr7HDzNGlrIAAAAmk"]
[Wed Sep 30 00:56:59.689482 2026] [security2:error] [pid 187269:tid 187414] [client 52.172.226.14:20190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryyu9FcyhWr7HDzNGlrIQAAAhw"]
[Wed Sep 30 00:56:59.703574 2026] [security2:error] [pid 186850:tid 186998] [client 173.254.29.157:16060] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryyu05Phls--iYlcKj-qwAAARw"]
[Wed Sep 30 00:56:59.713447 2026] [security2:error] [pid 186850:tid 187013] [client 13.70.4.78:52610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/Components.update.php"] [unique_id "aryyu05Phls--iYlcKj-rAAAASs"]
[Wed Sep 30 00:56:59.720130 2026] [security2:error] [pid 187269:tid 187419] [client 173.254.29.157:16070] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryyu9FcyhWr7HDzNGlrIwAAAiE"]
[Wed Sep 30 00:56:59.735654 2026] [security2:error] [pid 187269:tid 187531] [client 173.254.29.157:16084] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryyu9FcyhWr7HDzNGlrJAAAApA"]
[Wed Sep 30 00:56:59.747471 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.747728 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.750988 2026] [security2:error] [pid 187269:tid 187472] [client 173.254.29.157:16092] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryyu9FcyhWr7HDzNGlrJwAAAlY"]
[Wed Sep 30 00:56:59.766543 2026] [security2:error] [pid 187269:tid 187445] [client 20.219.14.152:43280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/123viva.php"] [unique_id "aryyu9FcyhWr7HDzNGlrKgAAAjs"]
[Wed Sep 30 00:56:59.805610 2026] [security2:error] [pid 186850:tid 187017] [client 72.255.10.32:59864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-rwAAAS8"]
[Wed Sep 30 00:56:59.805723 2026] [security2:error] [pid 186850:tid 187017] [client 72.255.10.32:59864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyu05Phls--iYlcKj-rwAAAS8"]
[Wed Sep 30 00:56:59.909322 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:56:59.909703 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:16739] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:56:59.935349 2026] [security2:error] [pid 187269:tid 187481] [client 20.214.145.90:62169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/puc.php"] [unique_id "aryyu9FcyhWr7HDzNGlrMAAAAl8"]
[Wed Sep 30 00:56:59.942950 2026] [security2:error] [pid 187269:tid 187488] [client 20.204.42.136:48490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/abde5e1996.php"] [unique_id "aryyu9FcyhWr7HDzNGlrMQAAAmY"]
[Wed Sep 30 00:56:59.979279 2026] [access_compat:error] [pid 186850:tid 187038] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:56:59.979563 2026] [access_compat:error] [pid 186850:tid 187038] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:56:59.983975 2026] [autoindex:error] [pid 187269:tid 187511] [client 202.61.233.150:60840] AH01276: Cannot serve directory /home4/qnvbafmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:00.016762 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.017031 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.044649 2026] [security2:error] [pid 187269:tid 187459] [client 13.70.4.78:3251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/sm.php"] [unique_id "aryyvNFcyhWr7HDzNGlrMwAAAkk"]
[Wed Sep 30 00:57:00.080904 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.081172 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.093664 2026] [autoindex:error] [pid 187269:tid 187448] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:00.112484 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.112744 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.132857 2026] [security2:error] [pid 187269:tid 187406] [client 146.103.110.101:50856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "glorymfb.com"] [uri "/wp-comments-post.php"] [unique_id "aryyu9FcyhWr7HDzNGlrEgAAAhQ"], referer: http://glorymfb.com/building-sustainable-futures-microfinance-and-environmental-responsibility/
[Wed Sep 30 00:57:00.198072 2026] [security2:error] [pid 187269:tid 187484] [client 20.214.145.90:40943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/8.php"] [unique_id "aryyvNFcyhWr7HDzNGlrOwAAAmI"]
[Wed Sep 30 00:57:00.204746 2026] [security2:error] [pid 186850:tid 187012] [client 52.172.226.14:20200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryyvE5Phls--iYlcKj-uAAAASo"]
[Wed Sep 30 00:57:00.205257 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.205615 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.226696 2026] [security2:error] [pid 187269:tid 187417] [client 20.219.14.152:43253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.retalviewgroup.retalview-northcoast.com"] [uri "/Components.update.php"] [unique_id "aryyvNFcyhWr7HDzNGlrPQAAAh8"]
[Wed Sep 30 00:57:00.237721 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.2.60:45364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/ws77.php"] [unique_id "aryyvE5Phls--iYlcKj-ugAAASQ"]
[Wed Sep 30 00:57:00.293251 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.293499 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.302324 2026] [security2:error] [pid 187269:tid 187444] [client 43.227.131.37:11709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyvNFcyhWr7HDzNGlrQQAAAjo"]
[Wed Sep 30 00:57:00.302417 2026] [security2:error] [pid 187269:tid 187444] [client 43.227.131.37:11709] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyvNFcyhWr7HDzNGlrQQAAAjo"]
[Wed Sep 30 00:57:00.318966 2026] [access_compat:error] [pid 187269:tid 187432] [client 47.79.13.168:52562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.319231 2026] [access_compat:error] [pid 187269:tid 187432] [client 47.79.13.168:52562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.368901 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:52609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/mknobgkg.php"] [unique_id "aryyvNFcyhWr7HDzNGlrSAAAAn4"]
[Wed Sep 30 00:57:00.385630 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.385903 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.444076 2026] [security2:error] [pid 186850:tid 187088] [client 20.219.2.60:36811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/plugin-editor.php"] [unique_id "aryyvE5Phls--iYlcKj-wQAAAXY"]
[Wed Sep 30 00:57:00.459314 2026] [security2:error] [pid 186850:tid 187033] [client 20.214.145.90:40951] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/1.php"] [unique_id "aryyvE5Phls--iYlcKj-wgAAAT8"]
[Wed Sep 30 00:57:00.459410 2026] [security2:error] [pid 186850:tid 187033] [client 20.214.145.90:40951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/1.php"] [unique_id "aryyvE5Phls--iYlcKj-wgAAAT8"]
[Wed Sep 30 00:57:00.477021 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.477312 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.518577 2026] [security2:error] [pid 187269:tid 187489] [client 37.218.243.186:56056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "aryyvNFcyhWr7HDzNGlrTwAAAmc"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 00:57:00.520332 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25z
[Wed Sep 30 00:57:00.520592 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25z
[Wed Sep 30 00:57:00.538155 2026] [security2:error] [pid 186850:tid 187079] [client 20.219.2.60:18911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gettest.php"] [unique_id "aryyvE5Phls--iYlcKj-yQAAAW0"]
[Wed Sep 30 00:57:00.572769 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.79.13.167:52048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.573109 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.79.13.167:52048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.573285 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.573707 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.632942 2026] [security2:error] [pid 187269:tid 187498] [client 20.204.161.246:30014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/pJPoKA.php"] [unique_id "aryyvNFcyhWr7HDzNGlrUwAAAnA"]
[Wed Sep 30 00:57:00.640347 2026] [security2:error] [pid 187269:tid 187443] [client 20.213.164.196:35839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/mac.php"] [unique_id "aryyvNFcyhWr7HDzNGlrVAAAAjk"]
[Wed Sep 30 00:57:00.653467 2026] [security2:error] [pid 186850:tid 187011] [client 4.196.65.241:2051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/12.php"] [unique_id "aryyvE5Phls--iYlcKj-zgAAASk"]
[Wed Sep 30 00:57:00.660866 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.661145 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.697478 2026] [security2:error] [pid 186850:tid 187069] [client 13.70.4.78:62691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/dairg.php"] [unique_id "aryyvE5Phls--iYlcKj-0AAAAWM"]
[Wed Sep 30 00:57:00.719847 2026] [security2:error] [pid 187269:tid 187533] [client 20.214.145.90:56976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/admin.php"] [unique_id "aryyvNFcyhWr7HDzNGlrVwAAApI"]
[Wed Sep 30 00:57:00.750533 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.750794 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.757854 2026] [security2:error] [pid 187269:tid 187442] [client 20.219.2.60:63273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/www.php"] [unique_id "aryyvNFcyhWr7HDzNGlrWQAAAjg"]
[Wed Sep 30 00:57:00.806591 2026] [access_compat:error] [pid 187269:tid 187490] [client 47.79.13.64:42054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.806866 2026] [access_compat:error] [pid 187269:tid 187490] [client 47.79.13.64:42054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.839080 2026] [security2:error] [pid 187269:tid 187486] [client 20.198.74.230:41346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryyvNFcyhWr7HDzNGlrYAAAAmQ"]
[Wed Sep 30 00:57:00.844417 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.844666 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.876729 2026] [access_compat:error] [pid 186850:tid 187105] [client 47.79.13.158:39174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.877003 2026] [access_compat:error] [pid 186850:tid 187105] [client 47.79.13.158:39174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:00.895127 2026] [security2:error] [pid 186850:tid 187062] [client 161.118.214.16:62502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.checkboxdev.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "aryyvE5Phls--iYlcKj-zwAAAVw"]
[Wed Sep 30 00:57:00.911999 2026] [security2:error] [pid 186850:tid 187094] [client 4.240.25.22:21556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/robots.php"] [unique_id "aryyvE5Phls--iYlcKj-1wAAAXw"]
[Wed Sep 30 00:57:00.929005 2026] [security2:error] [pid 186850:tid 187068] [client 52.172.226.14:20223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/about/function.php"] [unique_id "aryyvE5Phls--iYlcKj-2gAAAWI"]
[Wed Sep 30 00:57:00.932171 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:00.932464 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:00.937414 2026] [autoindex:error] [pid 186850:tid 187044] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:00.973046 2026] [security2:error] [pid 187269:tid 187496] [client 114.119.165.200:63165] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "adbadvertising.com"] [uri "/portfolio-items/ladybug/"] [unique_id "aryyvNFcyhWr7HDzNGlrZAAAAm4"], referer: https://adbadvertising.com/portfolio-items/easimobile/?portfolioCats=130
[Wed Sep 30 00:57:00.973743 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:57:00.974005 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:57:00.997557 2026] [security2:error] [pid 186850:tid 187074] [client 20.214.145.90:62203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/edit.php"] [unique_id "aryyvE5Phls--iYlcKj-3QAAAWg"]
[Wed Sep 30 00:57:01.026766 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.027226 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.037405 2026] [security2:error] [pid 186850:tid 187036] [client 13.70.4.78:59402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/dronishness.php"] [unique_id "aryyvU5Phls--iYlcKj-4QAAAUI"]
[Wed Sep 30 00:57:01.064905 2026] [security2:error] [pid 187269:tid 187516] [client 20.213.164.196:35838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/myglu.php"] [unique_id "aryyvdFcyhWr7HDzNGlraAAAAoI"]
[Wed Sep 30 00:57:01.116235 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.116502 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.155819 2026] [security2:error] [pid 186850:tid 187042] [client 49.205.105.16:14006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyvU5Phls--iYlcKj-5QAAAUg"]
[Wed Sep 30 00:57:01.155970 2026] [security2:error] [pid 186850:tid 187042] [client 49.205.105.16:14006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyvU5Phls--iYlcKj-5QAAAUg"]
[Wed Sep 30 00:57:01.195056 2026] [security2:error] [pid 187269:tid 187456] [client 103.24.86.56:55969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyvdFcyhWr7HDzNGlrcAAAAkY"]
[Wed Sep 30 00:57:01.195212 2026] [security2:error] [pid 187269:tid 187456] [client 103.24.86.56:55969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyvdFcyhWr7HDzNGlrcAAAAkY"]
[Wed Sep 30 00:57:01.211439 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.211974 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.267155 2026] [security2:error] [pid 186850:tid 187100] [client 20.214.145.90:40892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/inputs.php"] [unique_id "aryyvU5Phls--iYlcKj-7QAAAYI"]
[Wed Sep 30 00:57:01.287271 2026] [security2:error] [pid 186850:tid 187010] [client 20.219.2.60:19329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/myfile.php"] [unique_id "aryyvU5Phls--iYlcKj-7gAAASg"]
[Wed Sep 30 00:57:01.299562 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.299831 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.339098 2026] [security2:error] [pid 186850:tid 187045] [client 39.44.16.112:53783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyvU5Phls--iYlcKj-8wAAAUs"]
[Wed Sep 30 00:57:01.339869 2026] [security2:error] [pid 186850:tid 187045] [client 39.44.16.112:53783] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyvU5Phls--iYlcKj-8wAAAUs"]
[Wed Sep 30 00:57:01.357400 2026] [security2:error] [pid 187269:tid 187503] [client 20.194.30.107:14443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/classwithtostring.php"] [unique_id "aryyvdFcyhWr7HDzNGlrcwAAAnU"]
[Wed Sep 30 00:57:01.359569 2026] [security2:error] [pid 187269:tid 187406] [client 13.70.4.78:3941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/Row_wsoo.php"] [unique_id "aryyvdFcyhWr7HDzNGlrdAAAAhQ"]
[Wed Sep 30 00:57:01.391029 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.391462 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.395331 2026] [security2:error] [pid 187269:tid 187417] [client 52.172.226.14:20728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryyvdFcyhWr7HDzNGlrfAAAAh8"]
[Wed Sep 30 00:57:01.458259 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:01.458679 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:01.482785 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.483238 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.494028 2026] [security2:error] [pid 186850:tid 187099] [client 20.204.161.246:1668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/24.php"] [unique_id "aryyvU5Phls--iYlcKj-_QAAAYE"]
[Wed Sep 30 00:57:01.504530 2026] [security2:error] [pid 186850:tid 187029] [client 20.219.2.60:63264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/adoms.php"] [unique_id "aryyvU5Phls--iYlcKj-_gAAATs"]
[Wed Sep 30 00:57:01.540416 2026] [security2:error] [pid 187269:tid 187432] [client 20.214.145.90:62250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/classwithtostring.php"] [unique_id "aryyvdFcyhWr7HDzNGlrgQAAAi4"]
[Wed Sep 30 00:57:01.542125 2026] [security2:error] [pid 187269:tid 187500] [client 20.194.30.107:38590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryyvdFcyhWr7HDzNGlrgwAAAnI"]
[Wed Sep 30 00:57:01.573741 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.574187 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.594958 2026] [autoindex:error] [pid 187269:tid 187425] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:01.628053 2026] [security2:error] [pid 186850:tid 186970] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyvU5Phls--iYlcKj_AgABWXc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:57:01.628090 2026] [security2:error] [pid 186850:tid 186970] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyvU5Phls--iYlcKj_AgABWXc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:57:01.662305 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.662571 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.729963 2026] [security2:error] [pid 187269:tid 187502] [client 13.70.4.78:52629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/x2.php"] [unique_id "aryyvdFcyhWr7HDzNGlriQAAAnQ"]
[Wed Sep 30 00:57:01.750367 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.750636 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.809553 2026] [security2:error] [pid 187269:tid 187451] [client 213.32.19.195:40174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.19.32.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "aryyvdFcyhWr7HDzNGlrjgAAAkE"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 00:57:01.821174 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.145.90:56987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/adminfuns.php"] [unique_id "aryyvU5Phls--iYlcKj_CQAAAWE"]
[Wed Sep 30 00:57:01.826118 2026] [security2:error] [pid 187269:tid 187508] [client 37.218.243.186:49958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "aryyvdFcyhWr7HDzNGlrkQAAAno"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 00:57:01.843154 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.843414 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.930248 2026] [security2:error] [pid 186850:tid 187054] [client 20.213.164.196:35777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/aboutt.php"] [unique_id "aryyvU5Phls--iYlcKj_DQAAAVQ"]
[Wed Sep 30 00:57:01.946505 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:01.946780 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:01.989014 2026] [access_compat:error] [pid 186850:tid 187031] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25z
[Wed Sep 30 00:57:01.989287 2026] [access_compat:error] [pid 186850:tid 187031] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25z
[Wed Sep 30 00:57:02.026031 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.026302 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.056605 2026] [autoindex:error] [pid 187269:tid 187525] [client 212.156.70.154:6691] AH01276: Cannot serve directory /home4/mmlvedmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:02.085403 2026] [security2:error] [pid 187269:tid 187431] [client 13.70.4.78:53964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/v4.php"] [unique_id "aryyvtFcyhWr7HDzNGlrmQAAAi0"]
[Wed Sep 30 00:57:02.095633 2026] [security2:error] [pid 187269:tid 187499] [client 20.214.145.90:39750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/222.php"] [unique_id "aryyvtFcyhWr7HDzNGlrmgAAAnE"]
[Wed Sep 30 00:57:02.116406 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.116671 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.129078 2026] [security2:error] [pid 187269:tid 187534] [client 52.172.226.14:20720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/admin/function.php"] [unique_id "aryyvtFcyhWr7HDzNGlrmwAAApM"]
[Wed Sep 30 00:57:02.207500 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.207751 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.226371 2026] [security2:error] [pid 187269:tid 187524] [client 223.235.102.107:9470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyvtFcyhWr7HDzNGlrnwAAAok"]
[Wed Sep 30 00:57:02.232590 2026] [security2:error] [pid 187269:tid 187524] [client 223.235.102.107:9470] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyvtFcyhWr7HDzNGlrnwAAAok"]
[Wed Sep 30 00:57:02.234019 2026] [security2:error] [pid 187269:tid 187519] [client 20.198.74.230:34823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryyvtFcyhWr7HDzNGlrogAAAoU"]
[Wed Sep 30 00:57:02.234875 2026] [security2:error] [pid 187269:tid 187437] [client 45.138.12.43:40724] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.piy.svw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyvtFcyhWr7HDzNGlrowAAAjM"]
[Wed Sep 30 00:57:02.254068 2026] [security2:error] [pid 187269:tid 187450] [client 20.204.161.246:1724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/42b5827789index.php"] [unique_id "aryyvtFcyhWr7HDzNGlrpgAAAkA"]
[Wed Sep 30 00:57:02.269999 2026] [security2:error] [pid 187269:tid 187526] [client 20.219.2.60:63268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/tymn.php"] [unique_id "aryyvtFcyhWr7HDzNGlrrAAAAos"]
[Wed Sep 30 00:57:02.298970 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.299342 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.368284 2026] [security2:error] [pid 187269:tid 187500] [client 20.214.145.90:56965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/BDKR28WP.php"] [unique_id "aryyvtFcyhWr7HDzNGlrsgAAAnI"]
[Wed Sep 30 00:57:02.394603 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.395028 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.407981 2026] [autoindex:error] [pid 186850:tid 187044] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:02.411160 2026] [security2:error] [pid 186850:tid 187000] [client 13.70.4.78:3185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/albin.php"] [unique_id "aryyvk5Phls--iYlcKj_HgAAAR4"]
[Wed Sep 30 00:57:02.469047 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25z
[Wed Sep 30 00:57:02.469331 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25z
[Wed Sep 30 00:57:02.479965 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.480232 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.526354 2026] [security2:error] [pid 187269:tid 187502] [client 20.198.74.230:23903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/hywzd.php"] [unique_id "aryyvtFcyhWr7HDzNGlruQAAAnQ"]
[Wed Sep 30 00:57:02.541449 2026] [security2:error] [pid 186850:tid 187098] [client 167.234.113.186:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "aryyvk5Phls--iYlcKj_IwAAAYA"]
[Wed Sep 30 00:57:02.572552 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.572922 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.622350 2026] [security2:error] [pid 186850:tid 186861] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyvk5Phls--iYlcKj_JwABcAo"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D45
[Wed Sep 30 00:57:02.622386 2026] [security2:error] [pid 186850:tid 186861] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyvk5Phls--iYlcKj_JwABcAo"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D45
[Wed Sep 30 00:57:02.632095 2026] [security2:error] [pid 187269:tid 187447] [client 20.214.145.90:56967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp.php"] [unique_id "aryyvtFcyhWr7HDzNGlrxwAAAj0"]
[Wed Sep 30 00:57:02.635475 2026] [security2:error] [pid 187269:tid 187451] [client 52.172.226.14:20513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aryyvtFcyhWr7HDzNGlryAAAAkE"]
[Wed Sep 30 00:57:02.662667 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.662932 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.699405 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.64:42060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:02.699696 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.64:42060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:02.736418 2026] [security2:error] [pid 187269:tid 187470] [client 13.70.4.78:62697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/atkno.php"] [unique_id "aryyvtFcyhWr7HDzNGlrywAAAlQ"]
[Wed Sep 30 00:57:02.749431 2026] [security2:error] [pid 187269:tid 187509] [client 170.238.49.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryyvtFcyhWr7HDzNGlrzQAAAns"]
[Wed Sep 30 00:57:02.749592 2026] [security2:error] [pid 187269:tid 187434] [client 20.28.180.172:29604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/js.php"] [unique_id "aryyvtFcyhWr7HDzNGlrzgAAAjA"]
[Wed Sep 30 00:57:02.752609 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.752864 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.848079 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.848539 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.894647 2026] [security2:error] [pid 187269:tid 187466] [client 20.214.145.90:39798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/simple.php"] [unique_id "aryyvtFcyhWr7HDzNGlr1wAAAlA"]
[Wed Sep 30 00:57:02.899975 2026] [security2:error] [pid 186850:tid 186972] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyvk5Phls--iYlcKj_LQABTnk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131710&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:02.899999 2026] [security2:error] [pid 186850:tid 186972] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyvk5Phls--iYlcKj_LQABTnk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131710&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:02.907361 2026] [security2:error] [pid 186850:tid 187064] [client 20.219.2.60:59603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/eetu.php"] [unique_id "aryyvk5Phls--iYlcKj_LgAAAV4"]
[Wed Sep 30 00:57:02.934661 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:02.934946 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:02.964441 2026] [security2:error] [pid 187269:tid 187477] [client 20.204.161.246:65286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/mmq.php"] [unique_id "aryyvtFcyhWr7HDzNGlr2gAAAls"]
[Wed Sep 30 00:57:02.984083 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:02.984354 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:03.001673 2026] [autoindex:error] [pid 187269:tid 187476] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:03.026843 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.027115 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.079506 2026] [security2:error] [pid 187269:tid 187484] [client 13.70.4.78:53960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gptsh.php"] [unique_id "aryyv9FcyhWr7HDzNGlr3gAAAmI"]
[Wed Sep 30 00:57:03.116529 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.116793 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.117906 2026] [security2:error] [pid 187269:tid 187503] [client 52.172.226.14:20687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-admin/setup-config.php"] [unique_id "aryyv9FcyhWr7HDzNGlr4AAAAnU"]
[Wed Sep 30 00:57:03.155393 2026] [security2:error] [pid 187269:tid 187444] [client 20.214.145.90:39748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/chosen.php"] [unique_id "aryyv9FcyhWr7HDzNGlr4QAAAjo"]
[Wed Sep 30 00:57:03.212014 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.212433 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.298289 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.298537 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.336168 2026] [security2:error] [pid 187269:tid 187439] [client 223.181.60.167:18446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyv9FcyhWr7HDzNGlr6wAAAjU"]
[Wed Sep 30 00:57:03.336405 2026] [security2:error] [pid 187269:tid 187439] [client 223.181.60.167:18446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyv9FcyhWr7HDzNGlr6wAAAjU"]
[Wed Sep 30 00:57:03.354925 2026] [security2:error] [pid 187269:tid 187515] [client 213.32.19.195:50210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.19.32.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "aryyv9FcyhWr7HDzNGlr7AAAAoE"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 00:57:03.390228 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.390486 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.409394 2026] [security2:error] [pid 187269:tid 187452] [client 13.70.4.78:3178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/rithin.php"] [unique_id "aryyv9FcyhWr7HDzNGlr7gAAAkI"]
[Wed Sep 30 00:57:03.413025 2026] [security2:error] [pid 187269:tid 187502] [client 20.219.2.60:19442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/sid3.php"] [unique_id "aryyv9FcyhWr7HDzNGlr7wAAAnQ"]
[Wed Sep 30 00:57:03.421721 2026] [security2:error] [pid 187269:tid 187483] [client 20.214.145.90:40877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/als.php"] [unique_id "aryyv9FcyhWr7HDzNGlr8AAAAmE"]
[Wed Sep 30 00:57:03.436999 2026] [security2:error] [pid 187269:tid 187489] [client 20.219.2.60:55868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/dx.php"] [unique_id "aryyv9FcyhWr7HDzNGlr8QAAAmc"]
[Wed Sep 30 00:57:03.441108 2026] [security2:error] [pid 186850:tid 187041] [client 20.213.164.196:35810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wp-whe.php"] [unique_id "aryyv05Phls--iYlcKj_NwAAAUc"]
[Wed Sep 30 00:57:03.480294 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.480564 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.515678 2026] [security2:error] [pid 187269:tid 187464] [client 20.194.30.107:25166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/reviall.php"] [unique_id "aryyv9FcyhWr7HDzNGlr9gAAAk4"]
[Wed Sep 30 00:57:03.524145 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25z
[Wed Sep 30 00:57:03.524405 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25z
[Wed Sep 30 00:57:03.530318 2026] [autoindex:error] [pid 187269:tid 187457] [client 104.168.98.195:41012] AH01276: Cannot serve directory /home4/pvjvgmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:03.571222 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.571482 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.603224 2026] [security2:error] [pid 187269:tid 187517] [client 52.172.226.14:20187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/wp-content/radio.php"] [unique_id "aryyv9FcyhWr7HDzNGlr_AAAAoM"]
[Wed Sep 30 00:57:03.611637 2026] [security2:error] [pid 187269:tid 187377] [remote 57.141.14.71:45746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "aryyv9FcyhWr7HDzNGlr-AACQ2Q"]
[Wed Sep 30 00:57:03.651600 2026] [security2:error] [pid 187269:tid 187462] [client 20.204.161.246:65519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/fryvbbn.php"] [unique_id "aryyv9FcyhWr7HDzNGlr_gAAAkw"]
[Wed Sep 30 00:57:03.663025 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.663290 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.698614 2026] [security2:error] [pid 187269:tid 187504] [client 20.214.145.90:40935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/admin.php"] [unique_id "aryyv9FcyhWr7HDzNGlsBAAAAnY"]
[Wed Sep 30 00:57:03.747674 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.4.78:52641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/il.php"] [unique_id "aryyv9FcyhWr7HDzNGlsBQAAAns"]
[Wed Sep 30 00:57:03.755180 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.755451 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.778718 2026] [autoindex:error] [pid 186850:tid 187096] [client 212.156.70.154:56224] AH01276: Cannot serve directory /home4/tgbvgmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:03.848581 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.849025 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.923326 2026] [security2:error] [pid 187269:tid 187454] [client 20.219.2.60:48846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-kikikoko.php"] [unique_id "aryyv9FcyhWr7HDzNGlsDAAAAkQ"]
[Wed Sep 30 00:57:03.936485 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:03.936754 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:03.952303 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:03.952555 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:03.967598 2026] [security2:error] [pid 187269:tid 187499] [client 20.214.145.90:62181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/f35.php"] [unique_id "aryyv9FcyhWr7HDzNGlsDwAAAnE"]
[Wed Sep 30 00:57:04.001134 2026] [security2:error] [pid 186850:tid 187052] [client 116.72.182.19:59508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryywE5Phls--iYlcKj_QgAAAVI"]
[Wed Sep 30 00:57:04.001226 2026] [security2:error] [pid 186850:tid 187052] [client 116.72.182.19:59508] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryywE5Phls--iYlcKj_QgAAAVI"]
[Wed Sep 30 00:57:04.028957 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.029300 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.078324 2026] [security2:error] [pid 187269:tid 187507] [client 13.70.4.78:54009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/1klopedf.php"] [unique_id "aryywNFcyhWr7HDzNGlsFgAAAnk"]
[Wed Sep 30 00:57:04.118264 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.118560 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.151935 2026] [security2:error] [pid 186850:tid 187099] [client 20.213.164.196:35789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/ssixta.php"] [unique_id "aryywE5Phls--iYlcKj_QwAAAYE"]
[Wed Sep 30 00:57:04.210091 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.210367 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.234898 2026] [security2:error] [pid 187269:tid 187503] [client 20.194.30.107:64740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/133.php"] [unique_id "aryywNFcyhWr7HDzNGlsJAAAAnU"]
[Wed Sep 30 00:57:04.240977 2026] [security2:error] [pid 186850:tid 186992] [client 20.214.145.90:2887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/aaa.php"] [unique_id "aryywE5Phls--iYlcKj_RQAAARY"]
[Wed Sep 30 00:57:04.278054 2026] [security2:error] [pid 187269:tid 187470] [client 106.214.2.47:10937] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryywNFcyhWr7HDzNGlsKAAAAlQ"]
[Wed Sep 30 00:57:04.278208 2026] [security2:error] [pid 187269:tid 187470] [client 106.214.2.47:10937] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryywNFcyhWr7HDzNGlsKAAAAlQ"]
[Wed Sep 30 00:57:04.302317 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.302587 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.328548 2026] [autoindex:error] [pid 187269:tid 187529] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/Text/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:04.371640 2026] [security2:error] [pid 186850:tid 187006] [client 52.172.226.14:21058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryywE5Phls--iYlcKj_SAAAASQ"]
[Wed Sep 30 00:57:04.393721 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.393998 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.438716 2026] [security2:error] [pid 186850:tid 187090] [client 13.70.4.78:3160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/zv.php"] [unique_id "aryywE5Phls--iYlcKj_SwAAAXg"]
[Wed Sep 30 00:57:04.445372 2026] [security2:error] [pid 186850:tid 187043] [client 20.219.2.60:58453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/file61.php"] [unique_id "aryywE5Phls--iYlcKj_TAAAAUk"]
[Wed Sep 30 00:57:04.475568 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2Zk
[Wed Sep 30 00:57:04.475834 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2Zk
[Wed Sep 30 00:57:04.484272 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.484529 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.510663 2026] [security2:error] [pid 186850:tid 187084] [client 20.214.145.90:57017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/gecko.php"] [unique_id "aryywE5Phls--iYlcKj_TwAAAXI"]
[Wed Sep 30 00:57:04.553974 2026] [access_compat:error] [pid 186850:tid 186987] [client 47.79.13.213:38222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:04.554244 2026] [access_compat:error] [pid 186850:tid 186987] [client 47.79.13.213:38222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:04.567762 2026] [security2:error] [pid 186850:tid 187007] [client 20.204.161.246:1506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/ff.update.php"] [unique_id "aryywE5Phls--iYlcKj_UwAAASU"]
[Wed Sep 30 00:57:04.577909 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.578159 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.644285 2026] [security2:error] [pid 187269:tid 187498] [client 4.240.25.22:18767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp.php"] [unique_id "aryywNFcyhWr7HDzNGlsOAAAAnA"]
[Wed Sep 30 00:57:04.680638 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.680925 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.752414 2026] [security2:error] [pid 186850:tid 187027] [client 13.70.4.78:62676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/zv.update.php"] [unique_id "aryywE5Phls--iYlcKj_WAAAATk"]
[Wed Sep 30 00:57:04.754567 2026] [security2:error] [pid 186850:tid 187004] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryywE5Phls--iYlcKj_VwAAASI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:04.758107 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.758390 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.779008 2026] [security2:error] [pid 187269:tid 187455] [client 20.214.145.90:39780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/xiugai.php"] [unique_id "aryywNFcyhWr7HDzNGlsQwAAAkU"]
[Wed Sep 30 00:57:04.782665 2026] [security2:error] [pid 187269:tid 187469] [client 4.240.25.22:21546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-admin/js/index.php"] [unique_id "aryywNFcyhWr7HDzNGlsRAAAAlM"]
[Wed Sep 30 00:57:04.831006 2026] [security2:error] [pid 187269:tid 187480] [client 20.194.30.107:14436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryywNFcyhWr7HDzNGlsRgAAAl4"]
[Wed Sep 30 00:57:04.845948 2026] [security2:error] [pid 187269:tid 187509] [client 52.172.226.14:21070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/.well-known/log.php"] [unique_id "aryywNFcyhWr7HDzNGlsRwAAAns"]
[Wed Sep 30 00:57:04.849179 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.849445 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:04.939868 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:04.940127 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.023054 2026] [access_compat:error] [pid 186850:tid 187026] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:05.023319 2026] [access_compat:error] [pid 186850:tid 187026] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:05.031401 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.031721 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.043414 2026] [security2:error] [pid 187269:tid 187531] [client 20.214.145.90:39760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/inx.php"] [unique_id "aryywdFcyhWr7HDzNGlsSgAAApA"]
[Wed Sep 30 00:57:05.064724 2026] [security2:error] [pid 187269:tid 187423] [client 13.70.4.78:3141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/wquosqsi.php"] [unique_id "aryywdFcyhWr7HDzNGlsTAAAAiU"]
[Wed Sep 30 00:57:05.109852 2026] [security2:error] [pid 187269:tid 187516] [client 20.213.164.196:15958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/tesla.php"] [unique_id "aryywdFcyhWr7HDzNGlsTQAAAoI"]
[Wed Sep 30 00:57:05.122381 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.122632 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.179633 2026] [security2:error] [pid 186850:tid 187074] [client 20.204.42.136:65236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nucreativesolutions.com"] [uri "/cjhnp.php"] [unique_id "aryywU5Phls--iYlcKj_YwAAAWg"]
[Wed Sep 30 00:57:05.213305 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.213556 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.222864 2026] [security2:error] [pid 187269:tid 187478] [client 20.219.2.60:48893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/xx.php"] [unique_id "aryywdFcyhWr7HDzNGlsVAAAAlw"]
[Wed Sep 30 00:57:05.279343 2026] [security2:error] [pid 187269:tid 187419] [client 155.190.6.18:45976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryywdFcyhWr7HDzNGlsWAAAAiE"]
[Wed Sep 30 00:57:05.304272 2026] [security2:error] [pid 187269:tid 187417] [client 52.172.226.14:21090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/class.php"] [unique_id "aryywdFcyhWr7HDzNGlsWQAAAh8"]
[Wed Sep 30 00:57:05.305854 2026] [security2:error] [pid 186850:tid 187069] [client 116.197.133.25:57139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryywU5Phls--iYlcKj_aAAAAWM"]
[Wed Sep 30 00:57:05.305866 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.305950 2026] [security2:error] [pid 186850:tid 187069] [client 116.197.133.25:57139] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryywU5Phls--iYlcKj_aAAAAWM"]
[Wed Sep 30 00:57:05.306127 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.324388 2026] [security2:error] [pid 187269:tid 187431] [client 20.214.145.90:39784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/11.php"] [unique_id "aryywdFcyhWr7HDzNGlsWgAAAi0"]
[Wed Sep 30 00:57:05.375167 2026] [security2:error] [pid 187269:tid 187527] [client 13.70.4.78:3189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/asset.php"] [unique_id "aryywdFcyhWr7HDzNGlsWwAAAow"]
[Wed Sep 30 00:57:05.400960 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.401233 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.439666 2026] [security2:error] [pid 186850:tid 187098] [client 20.204.161.246:1501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/lzlhihzi.php"] [unique_id "aryywU5Phls--iYlcKj_awAAAYA"]
[Wed Sep 30 00:57:05.467617 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2Zk
[Wed Sep 30 00:57:05.467884 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:41404] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2Zk
[Wed Sep 30 00:57:05.487030 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.487342 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.550290 2026] [security2:error] [pid 187269:tid 187419] [client 155.190.6.18:45976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryywdFcyhWr7HDzNGlsWAAAAiE"]
[Wed Sep 30 00:57:05.577285 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.577552 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.614440 2026] [security2:error] [pid 187269:tid 187425] [client 20.214.145.90:40916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/File.php"] [unique_id "aryywdFcyhWr7HDzNGlsYQAAAic"]
[Wed Sep 30 00:57:05.616368 2026] [security2:error] [pid 187269:tid 187476] [client 20.198.74.230:23882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/eb06f5f3c7index.php"] [unique_id "aryywdFcyhWr7HDzNGlsYgAAAlo"]
[Wed Sep 30 00:57:05.632260 2026] [security2:error] [pid 187269:tid 187529] [client 130.131.227.119:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "piqueworks.nucreativesolutions.com"] [uri "/"] [unique_id "aryywdFcyhWr7HDzNGlsZAAAAo4"]
[Wed Sep 30 00:57:05.668814 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.669081 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.725006 2026] [security2:error] [pid 186850:tid 187048] [client 13.70.4.78:52614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/cued.php"] [unique_id "aryywU5Phls--iYlcKj_dAAAAU4"]
[Wed Sep 30 00:57:05.759934 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.760190 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.820482 2026] [security2:error] [pid 187269:tid 187411] [client 20.194.30.107:53293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/222.php"] [unique_id "aryywdFcyhWr7HDzNGlsbwAAAhk"]
[Wed Sep 30 00:57:05.853060 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.853489 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.863155 2026] [security2:error] [pid 187269:tid 187443] [client 52.172.226.14:20176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/lock360.php"] [unique_id "aryywdFcyhWr7HDzNGlsdQAAAjk"]
[Wed Sep 30 00:57:05.882001 2026] [security2:error] [pid 186850:tid 187100] [client 20.214.145.90:56963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryywU5Phls--iYlcKj_egAAAYI"]
[Wed Sep 30 00:57:05.887301 2026] [security2:error] [pid 187269:tid 187451] [client 20.213.164.196:35800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/222.php"] [unique_id "aryywdFcyhWr7HDzNGlsdgAAAkE"]
[Wed Sep 30 00:57:05.941113 2026] [security2:error] [pid 187269:tid 187501] [client 20.219.2.60:49538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/Jcrop.php"] [unique_id "aryywdFcyhWr7HDzNGlseQAAAnM"]
[Wed Sep 30 00:57:05.943015 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:05.943279 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:05.953995 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.2.60:36827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/plugin-install.php"] [unique_id "aryywdFcyhWr7HDzNGlsfQAAAlU"]
[Wed Sep 30 00:57:05.954134 2026] [security2:error] [pid 187269:tid 187424] [client 20.219.19.141:57129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryywdFcyhWr7HDzNGlsfAAAAiY"]
[Wed Sep 30 00:57:05.963746 2026] [security2:error] [pid 186850:tid 187046] [client 152.232.187.200:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryywU5Phls--iYlcKj_fgAAAUw"]
[Wed Sep 30 00:57:06.032522 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:06.032524 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.032777 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:06.032783 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.040010 2026] [security2:error] [pid 187269:tid 187422] [client 13.70.4.78:62717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/sd.php"] [unique_id "aryywtFcyhWr7HDzNGlsgAAAAiQ"]
[Wed Sep 30 00:57:06.122963 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.123252 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.148606 2026] [security2:error] [pid 187269:tid 187429] [client 20.214.145.90:39779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryywtFcyhWr7HDzNGlsiAAAAis"]
[Wed Sep 30 00:57:06.149739 2026] [security2:error] [pid 187269:tid 187531] [client 4.196.65.241:2094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/worksec.php"] [unique_id "aryywtFcyhWr7HDzNGlsiQAAApA"]
[Wed Sep 30 00:57:06.169012 2026] [security2:error] [pid 186850:tid 186888] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryywk5Phls--iYlcKj_ggABFCU"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=3194ff3e79210353b685d859c6515e2c
[Wed Sep 30 00:57:06.169042 2026] [security2:error] [pid 186850:tid 186888] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryywk5Phls--iYlcKj_ggABFCU"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=3194ff3e79210353b685d859c6515e2c
[Wed Sep 30 00:57:06.215270 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.215542 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.258853 2026] [security2:error] [pid 187269:tid 187524] [client 20.28.180.172:34270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zuk.php"] [unique_id "aryywtFcyhWr7HDzNGlsjAAAAok"]
[Wed Sep 30 00:57:06.264686 2026] [security2:error] [pid 187269:tid 187511] [client 20.194.30.107:14345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/222.php"] [unique_id "aryywtFcyhWr7HDzNGlsjgAAAn0"]
[Wed Sep 30 00:57:06.264977 2026] [security2:error] [pid 187269:tid 187488] [client 151.70.13.244:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "aryywtFcyhWr7HDzNGlsjQAAAmY"]
[Wed Sep 30 00:57:06.305121 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.305384 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.311191 2026] [security2:error] [pid 187269:tid 187478] [client 20.204.161.246:65413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/bfdghfgv.php"] [unique_id "aryywtFcyhWr7HDzNGlskgAAAlw"]
[Wed Sep 30 00:57:06.322724 2026] [security2:error] [pid 187269:tid 187409] [client 103.159.192.142:60962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryywtFcyhWr7HDzNGlskwAAAhc"]
[Wed Sep 30 00:57:06.322826 2026] [security2:error] [pid 187269:tid 187409] [client 103.159.192.142:60962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryywtFcyhWr7HDzNGlskwAAAhc"]
[Wed Sep 30 00:57:06.343262 2026] [security2:error] [pid 187269:tid 187437] [client 52.172.226.14:20533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "notfa-co-uk.paulmercer.me"] [uri "/system_log.php"] [unique_id "aryywtFcyhWr7HDzNGlslQAAAjM"]
[Wed Sep 30 00:57:06.351974 2026] [security2:error] [pid 187269:tid 187514] [client 37.41.16.35:62112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryywtFcyhWr7HDzNGlslgAAAoA"]
[Wed Sep 30 00:57:06.352059 2026] [security2:error] [pid 187269:tid 187514] [client 37.41.16.35:62112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryywtFcyhWr7HDzNGlslgAAAoA"]
[Wed Sep 30 00:57:06.353673 2026] [security2:error] [pid 186850:tid 187096] [client 13.70.4.78:52639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/ans.php"] [unique_id "aryywk5Phls--iYlcKj_hwAAAX4"]
[Wed Sep 30 00:57:06.396982 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.397253 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.416537 2026] [security2:error] [pid 187269:tid 187406] [client 20.214.145.90:62187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryywtFcyhWr7HDzNGlsmAAAAhQ"]
[Wed Sep 30 00:57:06.453137 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:06.453414 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:06.487722 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.488002 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.501765 2026] [security2:error] [pid 186850:tid 187017] [client 136.242.98.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryywk5Phls--iYlcKj_jAAAAS8"]
[Wed Sep 30 00:57:06.563100 2026] [security2:error] [pid 187269:tid 187470] [client 20.219.2.60:48863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/rip.php"] [unique_id "aryywtFcyhWr7HDzNGlsngAAAlQ"]
[Wed Sep 30 00:57:06.578744 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.579017 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.664668 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:62699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/cns.php"] [unique_id "aryywtFcyhWr7HDzNGlspAAAAn4"]
[Wed Sep 30 00:57:06.674229 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.674650 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.689321 2026] [security2:error] [pid 187269:tid 187428] [client 20.214.145.90:40853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "aryywtFcyhWr7HDzNGlsrAAAAio"]
[Wed Sep 30 00:57:06.713253 2026] [access_compat:error] [pid 186850:tid 187049] [client 47.82.11.53:44984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:06.713494 2026] [access_compat:error] [pid 186850:tid 187049] [client 47.82.11.53:44984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:06.765827 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.766096 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.867609 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.867905 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.925874 2026] [security2:error] [pid 186850:tid 186864] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryywk5Phls--iYlcKj_jwABLg0"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=f32838eefd06e9044d274a3c2f741c23
[Wed Sep 30 00:57:06.925903 2026] [security2:error] [pid 186850:tid 186864] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryywk5Phls--iYlcKj_jwABLg0"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=f32838eefd06e9044d274a3c2f741c23
[Wed Sep 30 00:57:06.956782 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:06.957051 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:06.959702 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:06.960138 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:06.976269 2026] [security2:error] [pid 187269:tid 187480] [client 20.214.145.90:40889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "aryywtFcyhWr7HDzNGlsvgAAAl4"]
[Wed Sep 30 00:57:06.984474 2026] [security2:error] [pid 187269:tid 187453] [client 13.70.4.78:53953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/faiy.php"] [unique_id "aryywtFcyhWr7HDzNGlswAAAAkM"]
[Wed Sep 30 00:57:06.993662 2026] [security2:error] [pid 187269:tid 187483] [client 20.204.161.246:62594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/Dss.php"] [unique_id "aryywtFcyhWr7HDzNGlswQAAAmE"]
[Wed Sep 30 00:57:07.020189 2026] [security2:error] [pid 187269:tid 187448] [client 20.70.173.30:25113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/ccc.php"] [unique_id "aryyw9FcyhWr7HDzNGlsxAAAAj4"]
[Wed Sep 30 00:57:07.024038 2026] [security2:error] [pid 186850:tid 187029] [client 182.69.182.151:18542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyw05Phls--iYlcKj_lAAAATs"]
[Wed Sep 30 00:57:07.024303 2026] [security2:error] [pid 186850:tid 187029] [client 182.69.182.151:18542] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyw05Phls--iYlcKj_lAAAATs"]
[Wed Sep 30 00:57:07.049272 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.049530 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.078198 2026] [security2:error] [pid 187269:tid 187423] [client 20.219.2.60:55866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/new4.php"] [unique_id "aryyw9FcyhWr7HDzNGlszwAAAiU"]
[Wed Sep 30 00:57:07.145079 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.145549 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.182312 2026] [security2:error] [pid 187269:tid 187525] [client 66.249.74.14:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "aryyw9FcyhWr7HDzNGls1wAAAoo"]
[Wed Sep 30 00:57:07.195129 2026] [security2:error] [pid 187269:tid 187409] [client 20.194.30.107:46932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/samll.php"] [unique_id "aryyw9FcyhWr7HDzNGls2AAAAhc"]
[Wed Sep 30 00:57:07.229748 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.230014 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.243248 2026] [security2:error] [pid 186850:tid 187090] [client 74.7.228.48:45472] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.buy-ketotifen.com"] [uri "/robots.txt"] [unique_id "aryyw05Phls--iYlcKj_mAABeGw"]
[Wed Sep 30 00:57:07.260310 2026] [security2:error] [pid 186850:tid 186941] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyw05Phls--iYlcKj_mQABclo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255441&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:07.260343 2026] [security2:error] [pid 186850:tid 186941] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyw05Phls--iYlcKj_mQABclo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255441&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:07.260556 2026] [security2:error] [pid 186850:tid 187070] [client 20.214.145.90:40956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "aryyw05Phls--iYlcKj_mgAAAWQ"]
[Wed Sep 30 00:57:07.281048 2026] [security2:error] [pid 186850:tid 186987] [client 20.213.164.196:15955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/media.php"] [unique_id "aryyw05Phls--iYlcKj_mwAAARE"]
[Wed Sep 30 00:57:07.297500 2026] [security2:error] [pid 186850:tid 187007] [client 13.70.4.78:3202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gecho.php"] [unique_id "aryyw05Phls--iYlcKj_nAAAASU"]
[Wed Sep 30 00:57:07.321675 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.321962 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.369211 2026] [security2:error] [pid 187269:tid 187411] [client 116.193.128.26:57399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyw9FcyhWr7HDzNGls4AAAAhk"]
[Wed Sep 30 00:57:07.369353 2026] [security2:error] [pid 187269:tid 187411] [client 116.193.128.26:57399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyw9FcyhWr7HDzNGls4AAAAhk"]
[Wed Sep 30 00:57:07.400740 2026] [security2:error] [pid 187269:tid 187505] [client 152.59.169.65:51615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyw9FcyhWr7HDzNGls4gAAAnc"]
[Wed Sep 30 00:57:07.400872 2026] [security2:error] [pid 187269:tid 187505] [client 152.59.169.65:51615] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyw9FcyhWr7HDzNGls4gAAAnc"]
[Wed Sep 30 00:57:07.504770 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:07.505040 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:07.508514 2026] [security2:error] [pid 186850:tid 187033] [client 168.107.70.193:52686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "domakshelter.jfootsteps.com"] [uri "/"] [unique_id "aryyw05Phls--iYlcKj_oQAAAT8"]
[Wed Sep 30 00:57:07.528430 2026] [security2:error] [pid 187269:tid 187470] [client 20.214.145.90:62206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/media.php"] [unique_id "aryyw9FcyhWr7HDzNGls5wAAAlQ"]
[Wed Sep 30 00:57:07.557025 2026] [security2:error] [pid 187269:tid 187485] [client 20.219.19.141:57091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyw9FcyhWr7HDzNGls6AAAAmM"]
[Wed Sep 30 00:57:07.613296 2026] [security2:error] [pid 187269:tid 187428] [client 13.70.4.78:62658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/gu.php"] [unique_id "aryyw9FcyhWr7HDzNGls6gAAAio"]
[Wed Sep 30 00:57:07.625031 2026] [security2:error] [pid 187269:tid 187513] [client 20.219.2.60:45327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/aa.php"] [unique_id "aryyw9FcyhWr7HDzNGls6wAAAn8"]
[Wed Sep 30 00:57:07.686197 2026] [security2:error] [pid 187269:tid 187426] [client 20.198.74.230:41350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/av.php"] [unique_id "aryyw9FcyhWr7HDzNGls7wAAAig"]
[Wed Sep 30 00:57:07.688045 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.688309 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.716113 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.716375 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.782162 2026] [security2:error] [pid 187269:tid 187498] [client 4.240.25.22:43805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyw9FcyhWr7HDzNGls8wAAAnA"]
[Wed Sep 30 00:57:07.798660 2026] [security2:error] [pid 187269:tid 187501] [client 20.214.145.90:40872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/inso.php"] [unique_id "aryyw9FcyhWr7HDzNGls9AAAAnM"]
[Wed Sep 30 00:57:07.810275 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.810536 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.816430 2026] [security2:error] [pid 187269:tid 187415] [client 20.213.164.196:35795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/24.php"] [unique_id "aryyw9FcyhWr7HDzNGls9QAAAh0"]
[Wed Sep 30 00:57:07.852862 2026] [security2:error] [pid 187269:tid 187480] [client 20.204.161.246:1961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/uploaxa1.php"] [unique_id "aryyw9FcyhWr7HDzNGls-wAAAl4"]
[Wed Sep 30 00:57:07.893319 2026] [security2:error] [pid 186850:tid 187051] [client 4.240.25.22:21563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/k.php"] [unique_id "aryyw05Phls--iYlcKj_qgAAAVE"]
[Wed Sep 30 00:57:07.898785 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.899051 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.943035 2026] [security2:error] [pid 187269:tid 187508] [client 13.70.4.78:3931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/nck.php"] [unique_id "aryyw9FcyhWr7HDzNGls_gAAAno"]
[Wed Sep 30 00:57:07.989920 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:07.990190 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:63402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:07.994734 2026] [access_compat:error] [pid 186850:tid 187057] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:07.995027 2026] [access_compat:error] [pid 186850:tid 187057] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:08.077992 2026] [security2:error] [pid 187269:tid 187509] [client 20.214.145.90:56973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/shiny.php"] [unique_id "aryyxNFcyhWr7HDzNGltBgAAAns"]
[Wed Sep 30 00:57:08.080302 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.081006 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.129554 2026] [security2:error] [pid 187269:tid 187517] [client 20.219.2.60:48855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/jk.php"] [unique_id "aryyxNFcyhWr7HDzNGltCgAAAoM"]
[Wed Sep 30 00:57:08.171846 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.172198 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.228497 2026] [security2:error] [pid 187269:tid 187419] [client 103.172.210.103:51464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltEAAAAiE"]
[Wed Sep 30 00:57:08.228613 2026] [security2:error] [pid 187269:tid 187419] [client 103.172.210.103:51464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltEAAAAiE"]
[Wed Sep 30 00:57:08.241024 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.1:57136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:08.241303 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.1:57136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:08.242826 2026] [security2:error] [pid 187269:tid 187528] [client 223.181.30.165:25732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltEwAAAo0"]
[Wed Sep 30 00:57:08.242948 2026] [security2:error] [pid 187269:tid 187528] [client 223.181.30.165:25732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltEwAAAo0"]
[Wed Sep 30 00:57:08.262928 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.262966 2026] [security2:error] [pid 186850:tid 187107] [client 13.70.4.78:59418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.tripleclearhf.com"] [uri "/xtt.php"] [unique_id "aryyxE5Phls--iYlcKj_sQAAAYk"]
[Wed Sep 30 00:57:08.263186 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.349268 2026] [security2:error] [pid 187269:tid 187431] [client 20.214.145.90:40850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/403dd.php"] [unique_id "aryyxNFcyhWr7HDzNGltGQAAAi0"]
[Wed Sep 30 00:57:08.353385 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.353628 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.385260 2026] [security2:error] [pid 186850:tid 187098] [client 216.73.216.46:63402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyxE5Phls--iYlcKj_swAAAYA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDA4L25vZGUwL21lbW9yeTM2MA%3D%3D
[Wed Sep 30 00:57:08.405134 2026] [security2:error] [pid 187269:tid 187484] [client 20.219.2.60:36802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/profile.php"] [unique_id "aryyxNFcyhWr7HDzNGltHQAAAmI"]
[Wed Sep 30 00:57:08.419177 2026] [security2:error] [pid 187269:tid 187485] [client 74.7.242.1:40844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryyxNFcyhWr7HDzNGltHgAAAmM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:57:08.448614 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.449043 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.478428 2026] [security2:error] [pid 187269:tid 187507] [client 20.204.161.246:48176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/uploartg.php"] [unique_id "aryyxNFcyhWr7HDzNGltIgAAAnk"]
[Wed Sep 30 00:57:08.492945 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:08.493210 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:08.504636 2026] [security2:error] [pid 187269:tid 187434] [client 49.36.41.37:64179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltJQAAAjA"]
[Wed Sep 30 00:57:08.504772 2026] [security2:error] [pid 187269:tid 187434] [client 49.36.41.37:64179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltJQAAAjA"]
[Wed Sep 30 00:57:08.524503 2026] [security2:error] [pid 187269:tid 187426] [client 45.179.151.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryyxNFcyhWr7HDzNGltJgAAAig"]
[Wed Sep 30 00:57:08.535273 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.535652 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.626849 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.627357 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.641692 2026] [security2:error] [pid 187269:tid 187492] [client 20.214.145.90:47305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/baba.php"] [unique_id "aryyxNFcyhWr7HDzNGltLQAAAmo"]
[Wed Sep 30 00:57:08.650150 2026] [security2:error] [pid 187269:tid 187427] [client 20.219.2.60:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/666.php"] [unique_id "aryyxNFcyhWr7HDzNGltMQAAAik"]
[Wed Sep 30 00:57:08.676848 2026] [autoindex:error] [pid 187269:tid 187501] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:08.679047 2026] [security2:error] [pid 186850:tid 187065] [client 45.138.12.43:40798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.piy.svw.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryyxE5Phls--iYlcKj_uQAAAV8"]
[Wed Sep 30 00:57:08.687583 2026] [security2:error] [pid 187269:tid 187420] [client 202.179.95.79:57739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltMwAAAiI"]
[Wed Sep 30 00:57:08.687671 2026] [security2:error] [pid 187269:tid 187420] [client 202.179.95.79:57739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyxNFcyhWr7HDzNGltMwAAAiI"]
[Wed Sep 30 00:57:08.694132 2026] [security2:error] [pid 187269:tid 187462] [client 20.219.19.141:23964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/adminfuns.php"] [unique_id "aryyxNFcyhWr7HDzNGltNAAAAkw"]
[Wed Sep 30 00:57:08.718464 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.718724 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.757170 2026] [security2:error] [pid 186850:tid 186999] [client 150.107.232.159:35722] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyxE5Phls--iYlcKj_uwAAAR0"]
[Wed Sep 30 00:57:08.757295 2026] [security2:error] [pid 186850:tid 186999] [client 150.107.232.159:35722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyxE5Phls--iYlcKj_uwAAAR0"]
[Wed Sep 30 00:57:08.807337 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.807594 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.855322 2026] [security2:error] [pid 187269:tid 187508] [client 20.213.164.196:35791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/xwpg.php"] [unique_id "aryyxNFcyhWr7HDzNGltOQAAAno"]
[Wed Sep 30 00:57:08.899643 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.899902 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:08.907038 2026] [security2:error] [pid 187269:tid 187452] [client 20.214.145.90:2921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/site.php"] [unique_id "aryyxNFcyhWr7HDzNGltOwAAAkI"]
[Wed Sep 30 00:57:08.953775 2026] [security2:error] [pid 187269:tid 187531] [client 20.219.2.60:50515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/gcqoa.php"] [unique_id "aryyxNFcyhWr7HDzNGltPQAAApA"]
[Wed Sep 30 00:57:08.989766 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:08.990029 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.045772 2026] [security2:error] [pid 187269:tid 187489] [client 127.0.0.1:52988] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryyxNFcyhWr7HDzNGltPwAAAmc"]
[Wed Sep 30 00:57:09.046115 2026] [security2:error] [pid 186850:tid 186985] [client 74.7.241.180:48366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.lzm.uus.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryyxE5Phls--iYlcKj_vgABDyw"]
[Wed Sep 30 00:57:09.071591 2026] [security2:error] [pid 187269:tid 187455] [client 62.101.170.182:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/routers-networking/"] [unique_id "aryyxdFcyhWr7HDzNGltSAAAAkU"]
[Wed Sep 30 00:57:09.081135 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.081403 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.101607 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:09.101872 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:09.160793 2026] [security2:error] [pid 187269:tid 187493] [client 20.204.161.246:1973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/bgbagbcw.php"] [unique_id "aryyxdFcyhWr7HDzNGltUQAAAms"]
[Wed Sep 30 00:57:09.165360 2026] [security2:error] [pid 187269:tid 187431] [client 45.138.12.32:16186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tky.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyxdFcyhWr7HDzNGltUwAAAi0"]
[Wed Sep 30 00:57:09.172192 2026] [security2:error] [pid 187269:tid 187473] [client 20.214.145.90:47327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/insc.php"] [unique_id "aryyxdFcyhWr7HDzNGltVQAAAlc"]
[Wed Sep 30 00:57:09.173052 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.173318 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.192882 2026] [security2:error] [pid 187269:tid 187466] [client 20.198.74.230:41386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/dex.php"] [unique_id "aryyxdFcyhWr7HDzNGltVwAAAlA"]
[Wed Sep 30 00:57:09.269883 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.270155 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.279138 2026] [security2:error] [pid 187269:tid 187429] [client 20.213.164.196:15969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/blacks.php"] [unique_id "aryyxdFcyhWr7HDzNGltXgAAAis"]
[Wed Sep 30 00:57:09.282612 2026] [autoindex:error] [pid 186850:tid 187060] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:09.351350 2026] [security2:error] [pid 186850:tid 187010] [client 20.28.180.172:34254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/faze.php"] [unique_id "aryyxU5Phls--iYlcKj_ywAAASg"]
[Wed Sep 30 00:57:09.354031 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.354274 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.361666 2026] [mime:warn] [pid 187269:tid 187496] AH01602: Cannot get media parameter.
[Wed Sep 30 00:57:09.438921 2026] [security2:error] [pid 186850:tid 187021] [client 20.214.145.90:56993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/file.php"] [unique_id "aryyxU5Phls--iYlcKj_zQAAATM"]
[Wed Sep 30 00:57:09.446338 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.446613 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.525876 2026] [security2:error] [pid 187269:tid 187446] [client 49.43.163.212:58167] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGltZwAAAjw"]
[Wed Sep 30 00:57:09.526035 2026] [security2:error] [pid 187269:tid 187446] [client 49.43.163.212:58167] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGltZwAAAjw"]
[Wed Sep 30 00:57:09.537408 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.537674 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.567830 2026] [security2:error] [pid 187269:tid 187481] [client 45.138.12.43:9410] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ppk.umh.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryyxdFcyhWr7HDzNGltbgAAAl8"]
[Wed Sep 30 00:57:09.585546 2026] [access_compat:error] [pid 187269:tid 187426] [client 47.79.13.177:41964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:09.585820 2026] [access_compat:error] [pid 187269:tid 187426] [client 47.79.13.177:41964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:09.628731 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.629024 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.629716 2026] [security2:error] [pid 187269:tid 187416] [client 152.59.165.7:45299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGlteAAAAh4"]
[Wed Sep 30 00:57:09.629839 2026] [security2:error] [pid 187269:tid 187416] [client 152.59.165.7:45299] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGlteAAAAh4"]
[Wed Sep 30 00:57:09.647638 2026] [security2:error] [pid 186850:tid 187050] [client 20.219.2.60:36810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/class-t.api.php"] [unique_id "aryyxU5Phls--iYlcKj_0gAAAVA"]
[Wed Sep 30 00:57:09.666241 2026] [security2:error] [pid 186850:tid 187022] [client 106.214.3.140:16221] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryyxU5Phls--iYlcKj_zwAAATQ"]
[Wed Sep 30 00:57:09.666702 2026] [security2:error] [pid 186850:tid 187052] [client 20.194.30.107:24850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/666.php"] [unique_id "aryyxU5Phls--iYlcKj_1AAAAVI"]
[Wed Sep 30 00:57:09.684442 2026] [security2:error] [pid 187269:tid 187504] [client 20.204.161.246:1807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/tegubsiu.php"] [unique_id "aryyxdFcyhWr7HDzNGltfQAAAnY"]
[Wed Sep 30 00:57:09.705790 2026] [security2:error] [pid 187269:tid 187478] [client 20.214.145.90:40847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/dex.php"] [unique_id "aryyxdFcyhWr7HDzNGltgQAAAlw"]
[Wed Sep 30 00:57:09.718349 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.718601 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.791265 2026] [security2:error] [pid 187269:tid 187477] [client 45.156.62.96:57609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGltcQAAAls"]
[Wed Sep 30 00:57:09.812070 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.812349 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.886023 2026] [security2:error] [pid 187269:tid 187421] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryyxdFcyhWr7HDzNGltjQAAAiM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:09.900679 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.900949 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:09.907568 2026] [security2:error] [pid 187269:tid 187427] [client 203.122.45.246:56731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGltjwAAAik"]
[Wed Sep 30 00:57:09.907693 2026] [security2:error] [pid 187269:tid 187427] [client 203.122.45.246:56731] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyxdFcyhWr7HDzNGltjwAAAik"]
[Wed Sep 30 00:57:09.965715 2026] [security2:error] [pid 187269:tid 187431] [client 20.219.2.60:45313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/plugin-editor.php"] [unique_id "aryyxdFcyhWr7HDzNGltlAAAAi0"]
[Wed Sep 30 00:57:09.977358 2026] [security2:error] [pid 186850:tid 187043] [client 20.214.145.90:40870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/key.php"] [unique_id "aryyxU5Phls--iYlcKj_2wAAAUk"]
[Wed Sep 30 00:57:09.992912 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:09.993175 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.050382 2026] [security2:error] [pid 186850:tid 186908] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyxk5Phls--iYlcKj_3wABbDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20272&sid=a1775f01611b7ddd32e0b7f270307966
[Wed Sep 30 00:57:10.050409 2026] [security2:error] [pid 186850:tid 186908] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyxk5Phls--iYlcKj_3wABbDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20272&sid=a1775f01611b7ddd32e0b7f270307966
[Wed Sep 30 00:57:10.066974 2026] [security2:error] [pid 187269:tid 187512] [client 20.219.2.60:19448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/xxw.php"] [unique_id "aryyxtFcyhWr7HDzNGltmwAAAn4"]
[Wed Sep 30 00:57:10.108652 2026] [security2:error] [pid 186850:tid 187070] [client 104.152.110.64:25567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.110.152.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "marionhandyman.com"] [uri "/wp-login.php"] [unique_id "aryyxk5Phls--iYlcKj_4gAAAWQ"]
[Wed Sep 30 00:57:10.245694 2026] [security2:error] [pid 187269:tid 187439] [client 20.214.145.90:57018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/kir.php"] [unique_id "aryyxtFcyhWr7HDzNGltpAAAAjU"]
[Wed Sep 30 00:57:10.375752 2026] [security2:error] [pid 186850:tid 187054] [client 20.204.161.246:1577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/xxw.php"] [unique_id "aryyxk5Phls--iYlcKj_4wAAAVQ"]
[Wed Sep 30 00:57:10.419942 2026] [security2:error] [pid 187269:tid 187330] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyxtFcyhWr7HDzNGltqAACSTU"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D50684
[Wed Sep 30 00:57:10.472830 2026] [security2:error] [pid 187269:tid 187420] [client 20.219.19.141:57126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/av.php"] [unique_id "aryyxtFcyhWr7HDzNGltqQAAAiI"]
[Wed Sep 30 00:57:10.501014 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:10.501293 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:10.502687 2026] [security2:error] [pid 187269:tid 187493] [client 72.255.10.32:60469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyxtFcyhWr7HDzNGltqwAAAms"]
[Wed Sep 30 00:57:10.502804 2026] [security2:error] [pid 187269:tid 187493] [client 72.255.10.32:60469] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryyxtFcyhWr7HDzNGltqwAAAms"]
[Wed Sep 30 00:57:10.503418 2026] [security2:error] [pid 186850:tid 187020] [client 20.219.2.60:48837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/plugin-install.php"] [unique_id "aryyxk5Phls--iYlcKj_6QAAATI"]
[Wed Sep 30 00:57:10.518129 2026] [security2:error] [pid 187269:tid 187414] [client 20.214.145.90:62196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/fling.php"] [unique_id "aryyxtFcyhWr7HDzNGltrQAAAhw"]
[Wed Sep 30 00:57:10.738956 2026] [security2:error] [pid 186850:tid 186901] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyxk5Phls--iYlcKj_7gABWDI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255411&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:10.738993 2026] [security2:error] [pid 186850:tid 186901] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyxk5Phls--iYlcKj_7gABWDI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255411&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:10.750676 2026] [autoindex:error] [pid 186850:tid 187011] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:10.799448 2026] [security2:error] [pid 187269:tid 187499] [client 20.214.145.90:57020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/btyuio.php"] [unique_id "aryyxtFcyhWr7HDzNGltuAAAAnE"]
[Wed Sep 30 00:57:10.835300 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.835570 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.896376 2026] [security2:error] [pid 187269:tid 187511] [client 20.28.180.172:34282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/mar.php"] [unique_id "aryyxtFcyhWr7HDzNGltuwAAAn0"]
[Wed Sep 30 00:57:10.910220 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:53949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.910476 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:53949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.917045 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.917316 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:16064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.923191 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:43761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.923451 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:43761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.944030 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:51505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.944294 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:51505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.963782 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:47685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.964106 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:47685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.982987 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.983420 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.991728 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.992041 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:10.993454 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:43761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:10.993728 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:43761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.009715 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.010152 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.022686 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:3656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.022955 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:3656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.043519 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:11.043767 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:11.064410 2026] [security2:error] [pid 187269:tid 187454] [client 43.227.131.37:44014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGltzAAAAkQ"]
[Wed Sep 30 00:57:11.064536 2026] [security2:error] [pid 187269:tid 187454] [client 43.227.131.37:44014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGltzAAAAkQ"]
[Wed Sep 30 00:57:11.072229 2026] [security2:error] [pid 187269:tid 187528] [client 20.70.173.30:18517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/cilus.php"] [unique_id "aryyx9FcyhWr7HDzNGltzgAAAo0"]
[Wed Sep 30 00:57:11.079667 2026] [security2:error] [pid 187269:tid 187520] [client 20.214.145.90:40928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/sm.php"] [unique_id "aryyx9FcyhWr7HDzNGltzwAAAoY"]
[Wed Sep 30 00:57:11.082894 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.083160 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.119219 2026] [security2:error] [pid 187269:tid 187440] [client 20.204.161.246:1555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/router.php"] [unique_id "aryyx9FcyhWr7HDzNGlt0QAAAjY"]
[Wed Sep 30 00:57:11.164881 2026] [security2:error] [pid 187269:tid 187510] [client 20.198.74.230:41356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/chosen.php"] [unique_id "aryyx9FcyhWr7HDzNGlt0wAAAnw"]
[Wed Sep 30 00:57:11.168713 2026] [security2:error] [pid 186850:tid 187044] [client 20.194.30.107:17422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/dex.php"] [unique_id "aryyx05Phls--iYlcKj_-wAAAUo"]
[Wed Sep 30 00:57:11.171525 2026] [security2:error] [pid 187269:tid 187508] [client 103.159.192.142:61306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGlt1AAAAno"]
[Wed Sep 30 00:57:11.171653 2026] [security2:error] [pid 187269:tid 187508] [client 103.159.192.142:61306] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGlt1AAAAno"]
[Wed Sep 30 00:57:11.174570 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.174850 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.264318 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.264591 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.354975 2026] [security2:error] [pid 187269:tid 187500] [client 20.214.145.90:40937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/a.php"] [unique_id "aryyx9FcyhWr7HDzNGlt3wAAAnI"]
[Wed Sep 30 00:57:11.359597 2026] [security2:error] [pid 187269:tid 187485] [client 114.119.155.78:57075] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.belvedereschoolcairo.com"] [uri "/life-and-learning/extra-curricular-activities/art-and-design"] [unique_id "aryyx9FcyhWr7HDzNGlt4AAAAmM"], referer: https://www.belvedereschoolcairo.com/cookie-policy
[Wed Sep 30 00:57:11.360632 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.361239 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.365003 2026] [security2:error] [pid 187269:tid 187496] [client 20.219.2.60:49544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/profile.php"] [unique_id "aryyx9FcyhWr7HDzNGlt4wAAAm4"]
[Wed Sep 30 00:57:11.377848 2026] [security2:error] [pid 186850:tid 187073] [client 213.136.69.135:64212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-parser-frame.php"] [unique_id "aryyx05Phls--iYlcKgABQAAAWc"], referer: binance.com
[Wed Sep 30 00:57:11.409027 2026] [security2:error] [pid 187269:tid 187475] [client 20.213.164.196:15966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/class-wp-http-client.php"] [unique_id "aryyx9FcyhWr7HDzNGlt6wAAAlk"]
[Wed Sep 30 00:57:11.451740 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.452032 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.482335 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3N5cw==
[Wed Sep 30 00:57:11.482759 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3N5cw==
[Wed Sep 30 00:57:11.502024 2026] [autoindex:error] [pid 187269:tid 187532] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/customize/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:11.537765 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.538074 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.631546 2026] [security2:error] [pid 187269:tid 187442] [client 20.214.145.90:62164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/sb.php"] [unique_id "aryyx9FcyhWr7HDzNGlt-wAAAjg"]
[Wed Sep 30 00:57:11.648503 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.648937 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.723288 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.723720 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.750947 2026] [security2:error] [pid 186850:tid 187046] [client 4.196.65.241:2502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/bnmtp.php"] [unique_id "aryyx05Phls--iYlcKgAFAAAAUw"]
[Wed Sep 30 00:57:11.763426 2026] [access_compat:error] [pid 187269:tid 187426] [client 47.79.13.71:37336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:11.763687 2026] [access_compat:error] [pid 187269:tid 187426] [client 47.79.13.71:37336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:11.808285 2026] [security2:error] [pid 187269:tid 187468] [client 20.219.2.60:18857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-png.php"] [unique_id "aryyx9FcyhWr7HDzNGluBgAAAlI"]
[Wed Sep 30 00:57:11.817325 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.817792 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.855796 2026] [security2:error] [pid 186850:tid 187106] [client 49.205.105.16:14756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyx05Phls--iYlcKgAFQAAAYg"]
[Wed Sep 30 00:57:11.855941 2026] [security2:error] [pid 186850:tid 187106] [client 49.205.105.16:14756] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryyx05Phls--iYlcKgAFQAAAYg"]
[Wed Sep 30 00:57:11.867772 2026] [security2:error] [pid 186850:tid 186949] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyx05Phls--iYlcKgAFgABM2I"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:57:11.867818 2026] [security2:error] [pid 186850:tid 186949] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyx05Phls--iYlcKgAFgABM2I"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:57:11.876017 2026] [autoindex:error] [pid 187269:tid 187431] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:11.890301 2026] [security2:error] [pid 187269:tid 187495] [client 103.24.86.56:56583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGluCwAAAm0"]
[Wed Sep 30 00:57:11.890845 2026] [security2:error] [pid 187269:tid 187495] [client 103.24.86.56:56583] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryyx9FcyhWr7HDzNGluCwAAAm0"]
[Wed Sep 30 00:57:11.907234 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.907666 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:11.909394 2026] [security2:error] [pid 187269:tid 187440] [client 20.214.145.90:62146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/av.php"] [unique_id "aryyx9FcyhWr7HDzNGluDQAAAjY"]
[Wed Sep 30 00:57:11.931646 2026] [security2:error] [pid 187269:tid 187510] [client 20.219.19.141:23751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/dex.php"] [unique_id "aryyx9FcyhWr7HDzNGluDgAAAnw"]
[Wed Sep 30 00:57:11.973800 2026] [security2:error] [pid 187269:tid 187516] [client 20.204.161.246:1960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/cibrkysaeng.php"] [unique_id "aryyx9FcyhWr7HDzNGluDwAAAoI"]
[Wed Sep 30 00:57:11.986745 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:11.987030 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:11.996227 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:11.996639 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.046680 2026] [security2:error] [pid 187269:tid 187488] [client 20.213.164.196:35818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/zoo2.php"] [unique_id "aryyyNFcyhWr7HDzNGluEwAAAmY"]
[Wed Sep 30 00:57:12.088691 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.088965 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.101862 2026] [security2:error] [pid 187269:tid 187423] [client 39.44.16.112:54349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyyNFcyhWr7HDzNGluFwAAAiU"]
[Wed Sep 30 00:57:12.103189 2026] [security2:error] [pid 187269:tid 187423] [client 39.44.16.112:54349] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryyyNFcyhWr7HDzNGluFwAAAiU"]
[Wed Sep 30 00:57:12.135185 2026] [access_compat:error] [pid 187269:tid 187490] [client 47.79.13.177:41970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:12.135650 2026] [access_compat:error] [pid 187269:tid 187490] [client 47.79.13.177:41970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:12.141710 2026] [security2:error] [pid 187269:tid 187475] [client 20.70.173.30:25116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-content/admin.php"] [unique_id "aryyyNFcyhWr7HDzNGluGgAAAlk"]
[Wed Sep 30 00:57:12.178271 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.178531 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.186167 2026] [security2:error] [pid 187269:tid 187501] [client 20.214.145.90:62183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/b8.php"] [unique_id "aryyyNFcyhWr7HDzNGluGwAAAnM"]
[Wed Sep 30 00:57:12.256103 2026] [security2:error] [pid 187269:tid 187446] [client 20.194.30.107:17513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/mac.php"] [unique_id "aryyyNFcyhWr7HDzNGluIwAAAjw"]
[Wed Sep 30 00:57:12.269047 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.269395 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.308563 2026] [autoindex:error] [pid 186850:tid 187061] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:12.352876 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.2.60:63278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/class-t.api.php"] [unique_id "aryyyE5Phls--iYlcKgAIgAAASQ"]
[Wed Sep 30 00:57:12.368448 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.368909 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.406613 2026] [security2:error] [pid 186850:tid 186937] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyE5Phls--iYlcKgAJQABJlY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131710&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:12.406656 2026] [security2:error] [pid 186850:tid 186937] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyE5Phls--iYlcKgAJQABJlY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131710&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:12.454099 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.454549 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.466782 2026] [security2:error] [pid 187269:tid 187480] [client 20.214.145.90:40896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyyNFcyhWr7HDzNGluLQAAAl4"]
[Wed Sep 30 00:57:12.473331 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:57:12.473596 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:57:12.547456 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.547709 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.567999 2026] [autoindex:error] [pid 186850:tid 187091] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:12.574334 2026] [security2:error] [pid 187269:tid 187482] [client 20.194.30.107:25168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/xkSudf.php"] [unique_id "aryyyNFcyhWr7HDzNGluMQAAAmA"]
[Wed Sep 30 00:57:12.636336 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.636845 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.693350 2026] [security2:error] [pid 187269:tid 187478] [client 20.198.74.230:24146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/b8.php"] [unique_id "aryyyNFcyhWr7HDzNGluOQAAAlw"]
[Wed Sep 30 00:57:12.723289 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.723563 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.755410 2026] [security2:error] [pid 187269:tid 187442] [client 20.214.145.90:2897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/0.php"] [unique_id "aryyyNFcyhWr7HDzNGluPAAAAjg"]
[Wed Sep 30 00:57:12.785496 2026] [security2:error] [pid 187269:tid 187363] [remote 57.141.14.39:39638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "aryyyNFcyhWr7HDzNGluOwACTlY"]
[Wed Sep 30 00:57:12.812652 2026] [security2:error] [pid 186850:tid 187041] [client 20.204.161.246:48168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.161.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-wpbak.php"] [unique_id "aryyyE5Phls--iYlcKgAOAAAAUc"]
[Wed Sep 30 00:57:12.819966 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.820232 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.841069 2026] [security2:error] [pid 187269:tid 187468] [client 20.213.164.196:15936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/zoo1.php"] [unique_id "aryyyNFcyhWr7HDzNGluQwAAAlI"]
[Wed Sep 30 00:57:12.855060 2026] [security2:error] [pid 187269:tid 187520] [client 4.196.65.241:64178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryyyNFcyhWr7HDzNGluRQAAAoY"]
[Wed Sep 30 00:57:12.860424 2026] [security2:error] [pid 187269:tid 187430] [client 45.164.85.193:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/routers-networking/"] [unique_id "aryyyNFcyhWr7HDzNGluRwAAAiw"]
[Wed Sep 30 00:57:12.881428 2026] [security2:error] [pid 186850:tid 186927] [remote 74.7.227.56:51706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryyyE5Phls--iYlcKgAOgABDEw"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:57:12.911291 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:12.911749 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:12.926302 2026] [security2:error] [pid 186850:tid 186993] [client 20.219.2.60:59589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-links-opml.php"] [unique_id "aryyyE5Phls--iYlcKgAPAAAARc"]
[Wed Sep 30 00:57:13.002138 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.002584 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.009337 2026] [security2:error] [pid 186850:tid 187000] [client 20.198.74.230:41351] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.windo.co.uk"] [uri "/1.php"] [unique_id "aryyyU5Phls--iYlcKgAQgAAAR4"]
[Wed Sep 30 00:57:13.009462 2026] [security2:error] [pid 186850:tid 187000] [client 20.198.74.230:41351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/1.php"] [unique_id "aryyyU5Phls--iYlcKgAQgAAAR4"]
[Wed Sep 30 00:57:13.034534 2026] [security2:error] [pid 187269:tid 187530] [client 20.214.145.90:56996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/fms.php"] [unique_id "aryyydFcyhWr7HDzNGluTwAAAo8"]
[Wed Sep 30 00:57:13.092342 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.092602 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.098918 2026] [security2:error] [pid 186850:tid 187097] [client 223.235.102.107:27260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyyU5Phls--iYlcKgARQAAAX8"]
[Wed Sep 30 00:57:13.099055 2026] [security2:error] [pid 186850:tid 187097] [client 223.235.102.107:27260] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyyU5Phls--iYlcKgARQAAAX8"]
[Wed Sep 30 00:57:13.119920 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:13.120224 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:13.181655 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.181945 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.272455 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.272727 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.296950 2026] [security2:error] [pid 186850:tid 187073] [client 20.214.145.90:57015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/xyn.php"] [unique_id "aryyyU5Phls--iYlcKgATwAAAWc"]
[Wed Sep 30 00:57:13.363730 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.363986 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.459803 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.460068 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.505901 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.2.60:45354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-class-api.php"] [unique_id "aryyydFcyhWr7HDzNGluZgAAAjk"]
[Wed Sep 30 00:57:13.541235 2026] [security2:error] [pid 187269:tid 187502] [client 45.138.12.32:16228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tnv.imz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyydFcyhWr7HDzNGluaQAAAnQ"]
[Wed Sep 30 00:57:13.550410 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.550673 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.565345 2026] [security2:error] [pid 186850:tid 187063] [client 20.213.164.196:54701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/class-ajax.php"] [unique_id "aryyyU5Phls--iYlcKgAWgAAAV0"]
[Wed Sep 30 00:57:13.570596 2026] [security2:error] [pid 186850:tid 186987] [client 20.214.145.90:40927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/min.php"] [unique_id "aryyyU5Phls--iYlcKgAWwAAARE"]
[Wed Sep 30 00:57:13.573197 2026] [security2:error] [pid 186850:tid 187076] [client 20.194.30.107:14382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/samll.php"] [unique_id "aryyyU5Phls--iYlcKgAXAAAAWo"]
[Wed Sep 30 00:57:13.587052 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:13.587332 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:13.641434 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.641722 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.732514 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.732773 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:48289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.821708 2026] [security2:error] [pid 187269:tid 187506] [client 20.219.2.60:18899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/222.php"] [unique_id "aryyydFcyhWr7HDzNGlucgAAAng"]
[Wed Sep 30 00:57:13.823951 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.824250 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.842906 2026] [security2:error] [pid 186850:tid 187009] [client 20.214.145.90:40867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-whe.php"] [unique_id "aryyyU5Phls--iYlcKgAYwAAASc"]
[Wed Sep 30 00:57:13.899043 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyU5Phls--iYlcKgAZAABVgU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297855&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:13.899069 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyU5Phls--iYlcKgAZAABVgU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297855&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:13.913161 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:13.913432 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:13.983258 2026] [autoindex:error] [pid 187269:tid 187463] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:13.989480 2026] [security2:error] [pid 187269:tid 187483] [client 20.219.2.60:49553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-class-atom.php"] [unique_id "aryyydFcyhWr7HDzNGlufAAAAmE"]
[Wed Sep 30 00:57:14.002283 2026] [security2:error] [pid 187269:tid 187465] [client 20.219.19.141:57106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/chosen.php"] [unique_id "aryyytFcyhWr7HDzNGlufgAAAk8"]
[Wed Sep 30 00:57:14.002892 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.003143 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.064487 2026] [security2:error] [pid 186850:tid 187042] [client 223.181.60.167:15797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyyk5Phls--iYlcKgAaAAAAUg"]
[Wed Sep 30 00:57:14.065252 2026] [security2:error] [pid 186850:tid 187042] [client 223.181.60.167:15797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryyyk5Phls--iYlcKgAaAAAAUg"]
[Wed Sep 30 00:57:14.069536 2026] [security2:error] [pid 187269:tid 187510] [client 20.198.74.230:41398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/radio.php"] [unique_id "aryyytFcyhWr7HDzNGlugAAAAnw"]
[Wed Sep 30 00:57:14.072380 2026] [security2:error] [pid 186850:tid 187045] [client 20.198.74.230:24152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wpxml.php"] [unique_id "aryyyk5Phls--iYlcKgAaQAAAUs"]
[Wed Sep 30 00:57:14.094734 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.094992 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.107550 2026] [security2:error] [pid 187269:tid 187498] [client 20.214.145.90:39769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-filemanager1.php"] [unique_id "aryyytFcyhWr7HDzNGluhQAAAnA"]
[Wed Sep 30 00:57:14.111982 2026] [access_compat:error] [pid 186850:tid 187048] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3N5cw==
[Wed Sep 30 00:57:14.112238 2026] [access_compat:error] [pid 186850:tid 187048] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3N5cw==
[Wed Sep 30 00:57:14.149753 2026] [security2:error] [pid 186850:tid 187022] [client 216.73.216.46:48289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyyk5Phls--iYlcKgAbAAAATQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5MTA3
[Wed Sep 30 00:57:14.161881 2026] [core:error] [pid 187269:tid 187527] [client 45.138.12.40:52114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:57:14.161907 2026] [core:error] [pid 187269:tid 187527] [client 45.138.12.40:52114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:57:14.186954 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.187229 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.270422 2026] [security2:error] [pid 186850:tid 186911] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyk5Phls--iYlcKgAbQABKjw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131713&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:14.270466 2026] [security2:error] [pid 186850:tid 186911] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyk5Phls--iYlcKgAbQABKjw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131713&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:57:14.271622 2026] [security2:error] [pid 187269:tid 187371] [remote 103.154.177.135:43814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "aryyytFcyhWr7HDzNGlujwACNF4"]
[Wed Sep 30 00:57:14.277331 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.277607 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.368640 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.368951 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.371709 2026] [security2:error] [pid 187269:tid 187529] [client 20.214.145.90:40957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-freya.php"] [unique_id "aryyytFcyhWr7HDzNGlulwAAAo4"]
[Wed Sep 30 00:57:14.409552 2026] [security2:error] [pid 187269:tid 187460] [client 20.219.2.60:36795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-links-opml.php"] [unique_id "aryyytFcyhWr7HDzNGlumAAAAko"]
[Wed Sep 30 00:57:14.433242 2026] [security2:error] [pid 186850:tid 186868] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyk5Phls--iYlcKgAcgABSRE"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=63f823d81541f1735e5870be155aa0ed
[Wed Sep 30 00:57:14.433294 2026] [security2:error] [pid 186850:tid 186868] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyyk5Phls--iYlcKgAcgABSRE"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=63f823d81541f1735e5870be155aa0ed
[Wed Sep 30 00:57:14.469880 2026] [security2:error] [pid 187269:tid 187452] [client 20.194.30.107:8372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/ohct.php"] [unique_id "aryyytFcyhWr7HDzNGlunAAAAkI"]
[Wed Sep 30 00:57:14.476244 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.476661 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.477908 2026] [cgid:error] [pid 187269:tid 187446] [client 85.204.70.112:0] AH01265: stderr from /home4/nysasor1/public_html/cgi-bin/: attempt to invoke directory as script
[Wed Sep 30 00:57:14.481725 2026] [security2:error] [pid 187269:tid 187440] [client 116.72.182.19:60159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGlunQAAAjY"]
[Wed Sep 30 00:57:14.481847 2026] [security2:error] [pid 187269:tid 187440] [client 116.72.182.19:60159] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGlunQAAAjY"]
[Wed Sep 30 00:57:14.555649 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.556108 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.582571 2026] [security2:error] [pid 187269:tid 187474] [client 20.194.30.107:25884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-filemannger.php"] [unique_id "aryyytFcyhWr7HDzNGluogAAAlg"]
[Wed Sep 30 00:57:14.583565 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:14.584027 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:14.601148 2026] [security2:error] [pid 187269:tid 187420] [client 4.196.65.241:64141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryyytFcyhWr7HDzNGlupAAAAiI"]
[Wed Sep 30 00:57:14.603713 2026] [security2:error] [pid 187269:tid 187376] [remote 103.154.177.135:43814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "aryyytFcyhWr7HDzNGluowACHmM"], referer: https://inspirationalspeakerstm.ca/wp-login.php
[Wed Sep 30 00:57:14.609495 2026] [access_compat:error] [pid 186850:tid 187099] [client 47.79.13.167:41634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:14.609884 2026] [access_compat:error] [pid 186850:tid 187099] [client 47.79.13.167:41634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:14.641985 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.642657 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.647264 2026] [security2:error] [pid 187269:tid 187501] [client 20.214.145.90:39790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/admin.php/admin.php"] [unique_id "aryyytFcyhWr7HDzNGlupwAAAnM"]
[Wed Sep 30 00:57:14.714458 2026] [security2:error] [pid 187269:tid 187459] [client 20.28.180.172:34303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/abde5e1996index.php"] [unique_id "aryyytFcyhWr7HDzNGluqwAAAkk"]
[Wed Sep 30 00:57:14.731055 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.731337 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.741387 2026] [security2:error] [pid 187269:tid 187448] [client 20.219.2.60:45326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-block.php"] [unique_id "aryyytFcyhWr7HDzNGlurgAAAj4"]
[Wed Sep 30 00:57:14.814587 2026] [security2:error] [pid 187269:tid 187493] [client 20.213.164.196:15940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/gm.php"] [unique_id "aryyytFcyhWr7HDzNGlutQAAAms"]
[Wed Sep 30 00:57:14.819336 2026] [security2:error] [pid 187269:tid 187429] [client 4.240.25.22:21551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/blurbs.php"] [unique_id "aryyytFcyhWr7HDzNGlutwAAAis"]
[Wed Sep 30 00:57:14.819380 2026] [security2:error] [pid 187269:tid 187511] [client 172.232.107.136:54546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.107.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ybflorida.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aryyytFcyhWr7HDzNGlutgAAAn0"]
[Wed Sep 30 00:57:14.823016 2026] [security2:error] [pid 187269:tid 187408] [client 106.214.2.47:25580] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGluuAAAAhY"]
[Wed Sep 30 00:57:14.823125 2026] [security2:error] [pid 187269:tid 187408] [client 106.214.2.47:25580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGluuAAAAhY"]
[Wed Sep 30 00:57:14.824178 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.824442 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.834672 2026] [access_compat:error] [pid 187269:tid 187457] [client 47.79.13.234:54400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:14.834973 2026] [access_compat:error] [pid 187269:tid 187457] [client 47.79.13.234:54400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:14.880215 2026] [security2:error] [pid 187269:tid 187384] [remote 103.154.177.135:43814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGluvgACXGs"]
[Wed Sep 30 00:57:14.880368 2026] [security2:error] [pid 187269:tid 187478] [client 103.154.177.135:43814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "aryyytFcyhWr7HDzNGluvgACXGs"]
[Wed Sep 30 00:57:14.914410 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:14.914675 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:14.918918 2026] [security2:error] [pid 187269:tid 187427] [client 20.214.145.90:56978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/faiy.php"] [unique_id "aryyytFcyhWr7HDzNGluvwAAAik"]
[Wed Sep 30 00:57:15.007659 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.007941 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:43079] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.085051 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.82.11.53:34912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:15.085313 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.82.11.53:34912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:15.094777 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.095042 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.095725 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:15.096051 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:15.195049 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.195320 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.248499 2026] [security2:error] [pid 186850:tid 186995] [client 20.214.145.90:56974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryyy05Phls--iYlcKgAjAAAARk"]
[Wed Sep 30 00:57:15.258818 2026] [security2:error] [pid 186850:tid 187011] [client 20.219.2.60:49537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-signup.php"] [unique_id "aryyy05Phls--iYlcKgAjgAAASk"]
[Wed Sep 30 00:57:15.272839 2026] [security2:error] [pid 187269:tid 187526] [client 20.198.74.230:34817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/blacks.php"] [unique_id "aryyy9FcyhWr7HDzNGlu0gAAAos"]
[Wed Sep 30 00:57:15.276704 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.276988 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.296324 2026] [security2:error] [pid 187269:tid 187385] [remote 162.241.252.23:36908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.252.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bioxco.com"] [uri "/wp-login.php"] [unique_id "aryyy9FcyhWr7HDzNGlu0wACWWw"]
[Wed Sep 30 00:57:15.301565 2026] [security2:error] [pid 187269:tid 187379] [remote 162.241.252.23:36908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.252.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bioxco.com"] [uri "/wp-login.php"] [unique_id "aryyy9FcyhWr7HDzNGlu1AACimY"], referer: https://bioxco.com/wp-login.php
[Wed Sep 30 00:57:15.307345 2026] [security2:error] [pid 187269:tid 187381] [remote 162.241.252.23:36908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.252.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bioxco.com"] [uri "/xmlrpc.php"] [unique_id "aryyy9FcyhWr7HDzNGlu1QACRGg"]
[Wed Sep 30 00:57:15.307464 2026] [security2:error] [pid 187269:tid 187454] [client 162.241.252.23:36908] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bioxco.com"] [uri "/xmlrpc.php"] [unique_id "aryyy9FcyhWr7HDzNGlu1QACRGg"]
[Wed Sep 30 00:57:15.369741 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.370000 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.418381 2026] [security2:error] [pid 186850:tid 187000] [client 216.73.216.46:43079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyy05Phls--iYlcKgAkAAAAR4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDM2
[Wed Sep 30 00:57:15.459211 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.459462 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.508450 2026] [security2:error] [pid 187269:tid 187530] [client 20.213.164.196:15938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/class-wp-site-list.php"] [unique_id "aryyy9FcyhWr7HDzNGlu3gAAAo8"]
[Wed Sep 30 00:57:15.539165 2026] [security2:error] [pid 186850:tid 187107] [client 20.214.145.90:62147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/myglu.php"] [unique_id "aryyy05Phls--iYlcKgAlgAAAYk"]
[Wed Sep 30 00:57:15.551292 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.551553 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.596855 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:15.597116 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:57:15.642792 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.643069 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.736367 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.736624 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.737419 2026] [security2:error] [pid 187269:tid 187474] [client 4.240.25.22:21916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/min.php"] [unique_id "aryyy9FcyhWr7HDzNGlu6wAAAlg"]
[Wed Sep 30 00:57:15.761595 2026] [security2:error] [pid 187269:tid 187416] [client 45.138.12.32:30488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tnv.imz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyy9FcyhWr7HDzNGlu7AAAAh4"]
[Wed Sep 30 00:57:15.783460 2026] [security2:error] [pid 186850:tid 187007] [client 116.197.133.25:57757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyy05Phls--iYlcKgAnAAAASU"]
[Wed Sep 30 00:57:15.783610 2026] [security2:error] [pid 186850:tid 187007] [client 116.197.133.25:57757] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryyy05Phls--iYlcKgAnAAAASU"]
[Wed Sep 30 00:57:15.821447 2026] [security2:error] [pid 187269:tid 187437] [client 20.219.2.60:55808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-xmlsia.php"] [unique_id "aryyy9FcyhWr7HDzNGlu7wAAAjM"]
[Wed Sep 30 00:57:15.827690 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.827956 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:15.828227 2026] [security2:error] [pid 186850:tid 186980] [client 20.214.145.90:62254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/bnmtp.php"] [unique_id "aryyy05Phls--iYlcKgAnQAAAQo"]
[Wed Sep 30 00:57:15.853895 2026] [security2:error] [pid 187269:tid 187439] [client 155.190.6.18:60162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyy9FcyhWr7HDzNGlu8QAAAjU"]
[Wed Sep 30 00:57:15.853988 2026] [security2:error] [pid 187269:tid 187439] [client 155.190.6.18:60162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryyy9FcyhWr7HDzNGlu8QAAAjU"]
[Wed Sep 30 00:57:15.917086 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:15.917356 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.007379 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.007666 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.023171 2026] [security2:error] [pid 187269:tid 187511] [client 20.219.2.60:19454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-blog.php"] [unique_id "aryyzNFcyhWr7HDzNGlu-AAAAn0"]
[Wed Sep 30 00:57:16.035055 2026] [security2:error] [pid 187269:tid 187360] [remote 57.141.14.99:29002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-includes/wlwmanifest.xml"] [unique_id "aryyzNFcyhWr7HDzNGlu-gACFlM"]
[Wed Sep 30 00:57:16.100949 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.101245 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.119522 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:16.119781 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:16.133666 2026] [security2:error] [pid 187269:tid 187427] [client 20.214.145.90:39744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/zeta.php"] [unique_id "aryyzNFcyhWr7HDzNGlu_QAAAik"]
[Wed Sep 30 00:57:16.189974 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.190243 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.280490 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.280754 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.371267 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.371521 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.424314 2026] [security2:error] [pid 187269:tid 187488] [client 20.198.74.230:41405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/run.php"] [unique_id "aryyzNFcyhWr7HDzNGlvEQAAAmY"]
[Wed Sep 30 00:57:16.439378 2026] [security2:error] [pid 187269:tid 187486] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-scanner/"] [unique_id "aryyzNFcyhWr7HDzNGlvEgAAAmQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:16.445372 2026] [security2:error] [pid 187269:tid 187526] [client 20.214.145.90:62168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "aryyzNFcyhWr7HDzNGlvEwAAAos"]
[Wed Sep 30 00:57:16.446838 2026] [security2:error] [pid 186850:tid 187068] [client 20.28.180.172:34243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/000.php"] [unique_id "aryyzE5Phls--iYlcKgAqAAAAWI"]
[Wed Sep 30 00:57:16.463399 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.463679 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.488272 2026] [security2:error] [pid 186850:tid 186939] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyzE5Phls--iYlcKgAqgABblg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271684
[Wed Sep 30 00:57:16.488295 2026] [security2:error] [pid 186850:tid 186939] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryyzE5Phls--iYlcKgAqgABblg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271684
[Wed Sep 30 00:57:16.530318 2026] [security2:error] [pid 186850:tid 186987] [client 20.219.2.60:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.yod.yourkatana.com"] [uri "/wp-inic3.php"] [unique_id "aryyzE5Phls--iYlcKgAqwAAARE"]
[Wed Sep 30 00:57:16.546334 2026] [security2:error] [pid 187269:tid 187438] [client 20.198.74.230:23913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cae2.3.php"] [unique_id "aryyzNFcyhWr7HDzNGlvGAAAAjQ"]
[Wed Sep 30 00:57:16.553636 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.553922 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.613241 2026] [security2:error] [pid 187269:tid 187491] [client 4.196.65.241:64159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/gecho.php"] [unique_id "aryyzNFcyhWr7HDzNGlvHAAAAmk"]
[Wed Sep 30 00:57:16.614428 2026] [security2:error] [pid 187269:tid 187530] [client 20.213.164.196:35824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/ttivnife.php"] [unique_id "aryyzNFcyhWr7HDzNGlvHQAAAo8"]
[Wed Sep 30 00:57:16.624753 2026] [access_compat:error] [pid 186850:tid 187046] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:16.625019 2026] [access_compat:error] [pid 186850:tid 187046] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:16.640259 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.177:41984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:16.640527 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.177:41984] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:16.643617 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.643886 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.735637 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.735953 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.759315 2026] [security2:error] [pid 187269:tid 187419] [client 20.214.145.90:62264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "aryyzNFcyhWr7HDzNGlvJQAAAiE"]
[Wed Sep 30 00:57:16.827782 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.828226 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:16.894057 2026] [security2:error] [pid 187269:tid 187412] [client 20.194.30.107:8328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/kj.php"] [unique_id "aryyzNFcyhWr7HDzNGlvLQAAAho"]
[Wed Sep 30 00:57:16.916996 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:16.917317 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.012257 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.012660 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.086138 2026] [security2:error] [pid 187269:tid 187454] [client 37.41.16.35:62697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyzdFcyhWr7HDzNGlvNgAAAkQ"]
[Wed Sep 30 00:57:17.086294 2026] [security2:error] [pid 187269:tid 187454] [client 37.41.16.35:62697] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryyzdFcyhWr7HDzNGlvNgAAAkQ"]
[Wed Sep 30 00:57:17.090100 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:17.090353 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 00:57:17.100984 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.101295 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.124319 2026] [security2:error] [pid 187269:tid 187457] [client 20.214.145.90:40955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "aryyzdFcyhWr7HDzNGlvOAAAAkc"]
[Wed Sep 30 00:57:17.131357 2026] [security2:error] [pid 187269:tid 187445] [client 20.219.2.60:19328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryyzdFcyhWr7HDzNGlvOQAAAjs"]
[Wed Sep 30 00:57:17.180505 2026] [security2:error] [pid 187269:tid 187429] [client 45.138.12.32:22098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tmx.wef.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryyzdFcyhWr7HDzNGlvPwAAAis"]
[Wed Sep 30 00:57:17.188735 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.189003 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.212348 2026] [security2:error] [pid 186850:tid 186968] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyzU5Phls--iYlcKgAtwABgnU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297545&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:17.212369 2026] [security2:error] [pid 186850:tid 186968] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyzU5Phls--iYlcKgAtwABgnU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297545&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:17.277339 2026] [security2:error] [pid 187269:tid 187489] [client 20.213.164.196:35823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/admin.php/2P.php"] [unique_id "aryyzdFcyhWr7HDzNGlvQwAAAmc"]
[Wed Sep 30 00:57:17.281142 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.281406 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.372838 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.373100 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.394978 2026] [security2:error] [pid 187269:tid 187477] [client 20.214.145.90:2894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/flamini.php"] [unique_id "aryyzdFcyhWr7HDzNGlvSgAAAls"]
[Wed Sep 30 00:57:17.415156 2026] [security2:error] [pid 187269:tid 187426] [client 4.196.65.241:19462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xz7l6w5h.php"] [unique_id "aryyzdFcyhWr7HDzNGlvSwAAAig"]
[Wed Sep 30 00:57:17.462724 2026] [security2:error] [pid 187269:tid 187484] [client 85.204.70.116:38976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryyzdFcyhWr7HDzNGlvTAAAAmI"]
[Wed Sep 30 00:57:17.471379 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.471639 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.554970 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.555275 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.570879 2026] [security2:error] [pid 187269:tid 187435] [client 182.69.182.151:23336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyzdFcyhWr7HDzNGlvUAAAAjE"]
[Wed Sep 30 00:57:17.571001 2026] [security2:error] [pid 187269:tid 187435] [client 182.69.182.151:23336] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryyzdFcyhWr7HDzNGlvUAAAAjE"]
[Wed Sep 30 00:57:17.580864 2026] [security2:error] [pid 187269:tid 187442] [client 105.112.178.79:38123] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fcg.eid.mybluehost.me"] [uri "/__ss_probe_6665464bc5c9ceddd9d546c154380ace__"] [unique_id "aryyzdFcyhWr7HDzNGlvUQAAAjg"]
[Wed Sep 30 00:57:17.595952 2026] [security2:error] [pid 186850:tid 186922] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyzU5Phls--iYlcKgAuwABSEc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3fc5cb15e95e453d7f4111f19794e1d0&t=21547
[Wed Sep 30 00:57:17.595971 2026] [security2:error] [pid 186850:tid 186922] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryyzU5Phls--iYlcKgAuwABSEc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=3fc5cb15e95e453d7f4111f19794e1d0&t=21547
[Wed Sep 30 00:57:17.621357 2026] [security2:error] [pid 187269:tid 187391] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryyzdFcyhWr7HDzNGlvUwACZHI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D98868
[Wed Sep 30 00:57:17.645736 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.646004 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.652161 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:17.652423 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:17.689563 2026] [security2:error] [pid 187269:tid 187476] [client 20.214.145.90:62185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/myglu.php"] [unique_id "aryyzdFcyhWr7HDzNGlvVQAAAlo"]
[Wed Sep 30 00:57:17.737099 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.737381 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.761316 2026] [security2:error] [pid 187269:tid 187530] [client 85.204.70.116:38990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryyzdFcyhWr7HDzNGlvWQAAAo8"]
[Wed Sep 30 00:57:17.816395 2026] [security2:error] [pid 187269:tid 187422] [client 20.28.180.172:29658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wp5.php"] [unique_id "aryyzdFcyhWr7HDzNGlvWwAAAiQ"]
[Wed Sep 30 00:57:17.827862 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.828123 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.917335 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:17.917596 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:17.952023 2026] [security2:error] [pid 187269:tid 187518] [client 20.194.30.107:14455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/ohct.php"] [unique_id "aryyzdFcyhWr7HDzNGlvYgAAAoQ"]
[Wed Sep 30 00:57:17.996733 2026] [security2:error] [pid 187269:tid 187419] [client 20.213.164.196:15952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/a.php"] [unique_id "aryyzdFcyhWr7HDzNGlvZQAAAiE"]
[Wed Sep 30 00:57:17.998535 2026] [security2:error] [pid 187269:tid 187406] [client 20.214.145.90:62244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/alfa.php"] [unique_id "aryyzdFcyhWr7HDzNGlvZwAAAhQ"]
[Wed Sep 30 00:57:18.008850 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.009105 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.075394 2026] [security2:error] [pid 187269:tid 187533] [client 116.193.128.26:58053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvawAAApI"]
[Wed Sep 30 00:57:18.075977 2026] [security2:error] [pid 187269:tid 187533] [client 116.193.128.26:58053] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvawAAApI"]
[Wed Sep 30 00:57:18.093601 2026] [security2:error] [pid 187269:tid 187412] [client 4.196.65.241:53070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/mssrt.php"] [unique_id "aryyztFcyhWr7HDzNGlvbAAAAho"]
[Wed Sep 30 00:57:18.100711 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.100979 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.135352 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:18.135796 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:18.164570 2026] [security2:error] [pid 187269:tid 187512] [client 152.59.169.65:52183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvcAAAAn4"]
[Wed Sep 30 00:57:18.164670 2026] [security2:error] [pid 187269:tid 187512] [client 152.59.169.65:52183] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvcAAAAn4"]
[Wed Sep 30 00:57:18.193048 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.193323 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.19.141:57090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/radio.php"] [unique_id "aryyztFcyhWr7HDzNGlvcgAAAjk"]
[Wed Sep 30 00:57:18.193390 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.198562 2026] [security2:error] [pid 187269:tid 187448] [client 85.204.70.116:39000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryyztFcyhWr7HDzNGlvdAAAAj4"]
[Wed Sep 30 00:57:18.283943 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.284255 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.297950 2026] [security2:error] [pid 186850:tid 187099] [client 20.214.145.90:2898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/index.php"] [unique_id "aryyzk5Phls--iYlcKgAxwAAAYE"]
[Wed Sep 30 00:57:18.375767 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.376130 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.467941 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.468247 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.485375 2026] [security2:error] [pid 187269:tid 187450] [client 85.204.70.116:39002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryyztFcyhWr7HDzNGlvhAAAAkA"]
[Wed Sep 30 00:57:18.559429 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.559704 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.610177 2026] [security2:error] [pid 187269:tid 187483] [client 4.240.25.22:21543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/100.php"] [unique_id "aryyztFcyhWr7HDzNGlvhwAAAmE"]
[Wed Sep 30 00:57:18.622555 2026] [security2:error] [pid 186850:tid 187041] [client 20.214.145.90:62159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryyzk5Phls--iYlcKgAzQAAAUc"]
[Wed Sep 30 00:57:18.628231 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:18.628489 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:18.656410 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.656662 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.669113 2026] [log_config:warn] [pid 178882:tid 179063] (32)Broken pipe: [remote 40.77.167.130:23906] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log
[Wed Sep 30 00:57:18.669129 2026] [log_config:warn] [pid 178882:tid 179063] (32)Broken pipe: [remote 40.77.167.130:23906] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log
[Wed Sep 30 00:57:18.700740 2026] [security2:error] [pid 186850:tid 186950] [remote 57.141.14.78:23308] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "aryyzk5Phls--iYlcKgAzwABLWM"]
[Wed Sep 30 00:57:18.749800 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.750144 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:4125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.765745 2026] [security2:error] [pid 186850:tid 187104] [client 85.204.70.116:39018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryyzk5Phls--iYlcKgA0QAAAYY"]
[Wed Sep 30 00:57:18.777252 2026] [security2:error] [pid 186850:tid 187034] [client 103.172.210.103:52029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyzk5Phls--iYlcKgA0gAAAUA"]
[Wed Sep 30 00:57:18.777342 2026] [security2:error] [pid 186850:tid 187034] [client 103.172.210.103:52029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryyzk5Phls--iYlcKgA0gAAAUA"]
[Wed Sep 30 00:57:18.829758 2026] [security2:error] [pid 187269:tid 187426] [client 20.213.164.196:35832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/cord.php"] [unique_id "aryyztFcyhWr7HDzNGlvjgAAAig"]
[Wed Sep 30 00:57:18.839189 2026] [access_compat:error] [pid 186850:tid 187004] [client 47.79.13.158:52934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:18.839464 2026] [access_compat:error] [pid 186850:tid 187004] [client 47.79.13.158:52934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:18.841478 2026] [security2:error] [pid 187269:tid 187487] [client 223.181.30.165:27548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvkAAAAmU"]
[Wed Sep 30 00:57:18.841658 2026] [security2:error] [pid 187269:tid 187487] [client 223.181.30.165:27548] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvkAAAAmU"]
[Wed Sep 30 00:57:18.851006 2026] [security2:error] [pid 187269:tid 187479] [client 20.219.2.60:19436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/lib.php"] [unique_id "aryyztFcyhWr7HDzNGlvkQAAAl0"]
[Wed Sep 30 00:57:18.892086 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.892356 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:18.931411 2026] [security2:error] [pid 187269:tid 187418] [client 49.36.41.37:64771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvlAAAAiA"]
[Wed Sep 30 00:57:18.931501 2026] [security2:error] [pid 187269:tid 187418] [client 49.36.41.37:64771] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryyztFcyhWr7HDzNGlvlAAAAiA"]
[Wed Sep 30 00:57:18.980759 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:18.981026 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.021615 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.021905 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.027891 2026] [security2:error] [pid 187269:tid 187469] [client 20.194.30.107:30426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/js.php"] [unique_id "aryyz9FcyhWr7HDzNGlvnAAAAlM"]
[Wed Sep 30 00:57:19.059070 2026] [security2:error] [pid 187269:tid 187458] [client 85.204.70.116:39034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryyz9FcyhWr7HDzNGlvngAAAkg"]
[Wed Sep 30 00:57:19.064163 2026] [security2:error] [pid 186850:tid 187037] [client 4.196.65.241:64162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/c3c427fa59index.php"] [unique_id "aryyz05Phls--iYlcKgA1gAAAUM"]
[Wed Sep 30 00:57:19.106014 2026] [access_compat:error] [pid 186850:tid 186997] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:19.106273 2026] [access_compat:error] [pid 186850:tid 186997] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:19.113181 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.113557 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.120619 2026] [security2:error] [pid 186850:tid 186983] [client 150.107.232.159:35867] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyz05Phls--iYlcKgA2AAAAQ0"]
[Wed Sep 30 00:57:19.120769 2026] [security2:error] [pid 186850:tid 186983] [client 150.107.232.159:35867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryyz05Phls--iYlcKgA2AAAAQ0"]
[Wed Sep 30 00:57:19.166079 2026] [security2:error] [pid 187269:tid 187444] [client 216.73.216.46:4125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryyz9FcyhWr7HDzNGlvpAAAAjo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDQ2
[Wed Sep 30 00:57:19.174433 2026] [security2:error] [pid 187269:tid 187534] [client 105.112.178.79:38124] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fcg.rdg.mybluehost.me"] [uri "/__ss_probe_019dc91d365f8cc70baf75642306b163__"] [unique_id "aryyz9FcyhWr7HDzNGlvpQAAApM"]
[Wed Sep 30 00:57:19.202675 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.202970 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.252325 2026] [security2:error] [pid 187269:tid 187430] [client 103.159.192.142:61566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyz9FcyhWr7HDzNGlvqgAAAiw"]
[Wed Sep 30 00:57:19.252453 2026] [security2:error] [pid 187269:tid 187430] [client 103.159.192.142:61566] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryyz9FcyhWr7HDzNGlvqgAAAiw"]
[Wed Sep 30 00:57:19.255218 2026] [security2:error] [pid 187269:tid 187434] [client 20.214.145.90:56984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-admin/js/index.php"] [unique_id "aryyz9FcyhWr7HDzNGlvqwAAAjA"]
[Wed Sep 30 00:57:19.294348 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.294611 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.338282 2026] [security2:error] [pid 187269:tid 187459] [client 85.204.70.116:53487] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryyz9FcyhWr7HDzNGlvsAAAAkk"]
[Wed Sep 30 00:57:19.340570 2026] [security2:error] [pid 186850:tid 187011] [client 202.179.95.79:58487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyz05Phls--iYlcKgA2QAAASk"]
[Wed Sep 30 00:57:19.340658 2026] [security2:error] [pid 186850:tid 187011] [client 202.179.95.79:58487] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryyz05Phls--iYlcKgA2QAAASk"]
[Wed Sep 30 00:57:19.386338 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.386585 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.476704 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.477281 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.507098 2026] [security2:error] [pid 187269:tid 187433] [client 120.46.93.200:24466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.93.46.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "aryyz9FcyhWr7HDzNGlvtgAAAi8"], referer: https://medredisolutions.com/wp-login.php
[Wed Sep 30 00:57:19.536129 2026] [security2:error] [pid 187269:tid 187408] [client 20.214.145.90:40949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/admin.php"] [unique_id "aryyz9FcyhWr7HDzNGlvuAAAAhY"]
[Wed Sep 30 00:57:19.577141 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.577399 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.617247 2026] [security2:error] [pid 187269:tid 187478] [client 85.204.70.116:55749] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryyz9FcyhWr7HDzNGlvvwAAAlw"]
[Wed Sep 30 00:57:19.625084 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:57:19.625519 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:57:19.673903 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.674361 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.691033 2026] [security2:error] [pid 187269:tid 187461] [client 20.194.30.107:25207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/red.php"] [unique_id "aryyz9FcyhWr7HDzNGlvywAAAks"]
[Wed Sep 30 00:57:19.759715 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.760085 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.783055 2026] [security2:error] [pid 187269:tid 187426] [client 20.213.164.196:35834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/anom.php"] [unique_id "aryyz9FcyhWr7HDzNGlv0AAAAig"]
[Wed Sep 30 00:57:19.850350 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.850660 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.854537 2026] [security2:error] [pid 187269:tid 187526] [client 20.214.145.90:65188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryyz9FcyhWr7HDzNGlv0wAAAos"]
[Wed Sep 30 00:57:19.904124 2026] [security2:error] [pid 187269:tid 187418] [client 85.204.70.116:7912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryyz9FcyhWr7HDzNGlv1QAAAiA"]
[Wed Sep 30 00:57:19.942993 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:19.943265 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:19.985887 2026] [security2:error] [pid 187269:tid 187422] [client 20.219.2.60:36808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-class-api.php"] [unique_id "aryyz9FcyhWr7HDzNGlv2QAAAiQ"]
[Wed Sep 30 00:57:19.991517 2026] [security2:error] [pid 187269:tid 187458] [client 20.219.19.141:57144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wp_blog_footer.php"] [unique_id "aryyz9FcyhWr7HDzNGlv2gAAAkg"]
[Wed Sep 30 00:57:20.033223 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.033481 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.037714 2026] [security2:error] [pid 187269:tid 187477] [client 20.28.180.172:29460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/new.php"] [unique_id "aryy0NFcyhWr7HDzNGlv3AAAAls"]
[Wed Sep 30 00:57:20.118602 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL29wdA==
[Wed Sep 30 00:57:20.118876 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL29wdA==
[Wed Sep 30 00:57:20.124797 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.125088 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.157727 2026] [security2:error] [pid 187269:tid 187419] [client 20.214.145.90:39807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryy0NFcyhWr7HDzNGlv4QAAAiE"]
[Wed Sep 30 00:57:20.199386 2026] [security2:error] [pid 187269:tid 187495] [client 152.59.165.7:62895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy0NFcyhWr7HDzNGlv4gAAAm0"]
[Wed Sep 30 00:57:20.200426 2026] [security2:error] [pid 187269:tid 187481] [client 85.204.70.116:39064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryy0NFcyhWr7HDzNGlv4wAAAl8"]
[Wed Sep 30 00:57:20.202996 2026] [security2:error] [pid 187269:tid 187495] [client 152.59.165.7:62895] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy0NFcyhWr7HDzNGlv4gAAAm0"]
[Wed Sep 30 00:57:20.212316 2026] [security2:error] [pid 187269:tid 187474] [client 20.198.74.230:23910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/pudym.php"] [unique_id "aryy0NFcyhWr7HDzNGlv5QAAAlg"]
[Wed Sep 30 00:57:20.216211 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.216464 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.273056 2026] [access_compat:error] [pid 187269:tid 187487] [client 47.79.13.65:38258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:20.273322 2026] [access_compat:error] [pid 187269:tid 187487] [client 47.79.13.65:38258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:20.306406 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.306667 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.397726 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.397991 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:12676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.399511 2026] [security2:error] [pid 187269:tid 187501] [client 4.196.65.241:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xivoefjr.php"] [unique_id "aryy0NFcyhWr7HDzNGlv7QAAAnM"]
[Wed Sep 30 00:57:20.426846 2026] [security2:error] [pid 187269:tid 187414] [client 20.213.164.196:15942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/plugins.php"] [unique_id "aryy0NFcyhWr7HDzNGlv7gAAAhw"]
[Wed Sep 30 00:57:20.483521 2026] [security2:error] [pid 186850:tid 187002] [client 85.204.70.116:39076] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryy0E5Phls--iYlcKgA6QAAASA"]
[Wed Sep 30 00:57:20.488233 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.488495 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.496307 2026] [security2:error] [pid 187269:tid 187439] [client 20.214.145.90:57014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/cgi-bin/index.php"] [unique_id "aryy0NFcyhWr7HDzNGlv9AAAAjU"]
[Wed Sep 30 00:57:20.532047 2026] [security2:error] [pid 186850:tid 187075] [client 203.122.45.246:57541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy0E5Phls--iYlcKgA6wAAAWk"]
[Wed Sep 30 00:57:20.532189 2026] [security2:error] [pid 186850:tid 187075] [client 203.122.45.246:57541] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy0E5Phls--iYlcKgA6wAAAWk"]
[Wed Sep 30 00:57:20.633780 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.634076 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.659610 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:20.659885 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:20.673433 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.673675 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.679630 2026] [security2:error] [pid 187269:tid 187462] [client 20.198.74.230:41360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/vpn.php"] [unique_id "aryy0NFcyhWr7HDzNGlv_AAAAkw"]
[Wed Sep 30 00:57:20.762683 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.762974 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.763600 2026] [security2:error] [pid 187269:tid 187438] [client 85.204.70.116:39090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryy0NFcyhWr7HDzNGlwAQAAAjQ"]
[Wed Sep 30 00:57:20.791998 2026] [security2:error] [pid 187269:tid 187470] [client 20.214.145.90:64544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-manager.php"] [unique_id "aryy0NFcyhWr7HDzNGlwAwAAAlQ"]
[Wed Sep 30 00:57:20.808474 2026] [security2:error] [pid 187269:tid 187482] [client 216.73.216.46:12676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy0NFcyhWr7HDzNGlwBAAAAmA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjE3
[Wed Sep 30 00:57:20.855571 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.855863 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.945082 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:20.945350 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:20.996749 2026] [security2:error] [pid 186850:tid 187087] [client 20.219.2.60:19407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/edit.php"] [unique_id "aryy0E5Phls--iYlcKgA8QAAAXU"]
[Wed Sep 30 00:57:21.039290 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.039729 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.043079 2026] [security2:error] [pid 187269:tid 187457] [client 20.194.30.107:25191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/classwithtostring.php"] [unique_id "aryy0dFcyhWr7HDzNGlwDAAAAkc"]
[Wed Sep 30 00:57:21.077280 2026] [security2:error] [pid 187269:tid 187468] [client 85.204.70.116:39096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryy0dFcyhWr7HDzNGlwDwAAAlI"]
[Wed Sep 30 00:57:21.082115 2026] [security2:error] [pid 187269:tid 187497] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy0dFcyhWr7HDzNGlwEAAAAm8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:21.110490 2026] [security2:error] [pid 187269:tid 187527] [client 20.213.164.196:35790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/groud3.php"] [unique_id "aryy0dFcyhWr7HDzNGlwEQAAAow"]
[Wed Sep 30 00:57:21.115880 2026] [security2:error] [pid 187269:tid 187526] [client 20.214.145.90:40953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryy0dFcyhWr7HDzNGlwEgAAAos"]
[Wed Sep 30 00:57:21.125846 2026] [security2:error] [pid 187269:tid 187435] [client 120.46.93.200:1876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.93.46.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "aryy0dFcyhWr7HDzNGlwFQAAAjE"], referer: https://medredisolutions.com/wp-login.php
[Wed Sep 30 00:57:21.126033 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.126387 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.156745 2026] [security2:error] [pid 187269:tid 187522] [client 72.255.10.32:61083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy0dFcyhWr7HDzNGlwFwAAAoc"]
[Wed Sep 30 00:57:21.157641 2026] [security2:error] [pid 187269:tid 187522] [client 72.255.10.32:61083] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy0dFcyhWr7HDzNGlwFwAAAoc"]
[Wed Sep 30 00:57:21.158789 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:21.159063 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:21.218622 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.218917 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.290825 2026] [security2:error] [pid 187269:tid 187293] [remote 91.84.124.42:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.124.84.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/wp-comments-post.php"] [unique_id "aryy0dFcyhWr7HDzNGlwHQACaRA"], referer: https://sergil.net/blog/2026/02/05/%d9%85%d8%b9%d9%85%d9%88%d8%af%d9%8a%d9%91%d8%a9-%d8%a7%d9%84%d9%81%d8%b6%d9%8a%d8%ad%d8%a9/
[Wed Sep 30 00:57:21.291049 2026] [security2:error] [pid 187269:tid 187491] [client 91.84.124.42:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "sergil.net"] [uri "/wp-comments-post.php"] [unique_id "aryy0dFcyhWr7HDzNGlwHQACaRA"], referer: https://sergil.net/blog/2026/02/05/%d9%85%d8%b9%d9%85%d9%88%d8%af%d9%8a%d9%91%d8%a9-%d8%a7%d9%84%d9%81%d8%b6%d9%8a%d8%ad%d8%a9/
[Wed Sep 30 00:57:21.307026 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.307301 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.368413 2026] [security2:error] [pid 187269:tid 187518] [client 85.204.70.116:39108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryy0dFcyhWr7HDzNGlwJQAAAoQ"]
[Wed Sep 30 00:57:21.401397 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.401696 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.444371 2026] [security2:error] [pid 187269:tid 187481] [client 20.214.145.90:40918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/cgi-bin/admin.php"] [unique_id "aryy0dFcyhWr7HDzNGlwJwAAAl8"]
[Wed Sep 30 00:57:21.457021 2026] [security2:error] [pid 187269:tid 187411] [client 45.138.12.32:16464] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kkj.lfk.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy0dFcyhWr7HDzNGlwKAAAAhk"]
[Wed Sep 30 00:57:21.469085 2026] [autoindex:error] [pid 187269:tid 187463] [client 212.156.70.154:24425] AH01276: Cannot serve directory /home4/ttygflmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:21.490613 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.490910 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.581767 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.582045 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.610765 2026] [security2:error] [pid 187269:tid 187431] [client 43.227.131.37:1917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy0dFcyhWr7HDzNGlwNAAAAi0"]
[Wed Sep 30 00:57:21.610873 2026] [security2:error] [pid 187269:tid 187431] [client 43.227.131.37:1917] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy0dFcyhWr7HDzNGlwNAAAAi0"]
[Wed Sep 30 00:57:21.612254 2026] [security2:error] [pid 187269:tid 187439] [client 20.194.30.107:17499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/txets.php"] [unique_id "aryy0dFcyhWr7HDzNGlwNgAAAjU"]
[Wed Sep 30 00:57:21.672932 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.673228 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.677517 2026] [security2:error] [pid 187269:tid 187532] [client 85.204.70.116:48466] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.cvg.mzp.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryy0dFcyhWr7HDzNGlwPgAAApE"]
[Wed Sep 30 00:57:21.691104 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:21.691399 2026] [access_compat:error] [pid 186850:tid 187042] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:21.708561 2026] [security2:error] [pid 187269:tid 187410] [client 4.196.65.241:19503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/a22.php"] [unique_id "aryy0dFcyhWr7HDzNGlwQQAAAhg"]
[Wed Sep 30 00:57:21.765926 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.766229 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.854712 2026] [security2:error] [pid 187269:tid 187427] [client 4.240.25.22:21944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/kir.php"] [unique_id "aryy0dFcyhWr7HDzNGlwUQAAAik"]
[Wed Sep 30 00:57:21.855647 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.855961 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.880450 2026] [security2:error] [pid 187269:tid 187455] [client 213.136.69.135:51047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-processor.php"] [unique_id "aryy0dFcyhWr7HDzNGlwUwAAAkU"], referer: binance.com
[Wed Sep 30 00:57:21.946347 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:21.946682 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:21.959304 2026] [security2:error] [pid 187269:tid 187435] [client 20.213.164.196:35809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/gaxby.php"] [unique_id "aryy0dFcyhWr7HDzNGlwWQAAAjE"]
[Wed Sep 30 00:57:22.036371 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.036629 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.127632 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.127970 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.156696 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:57:22.156979 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 00:57:22.158952 2026] [security2:error] [pid 187269:tid 187490] [client 20.28.180.172:29501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/ava.php"] [unique_id "aryy0tFcyhWr7HDzNGlwZgAAAmg"]
[Wed Sep 30 00:57:22.213976 2026] [security2:error] [pid 187269:tid 187534] [client 20.214.145.90:39773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryy0tFcyhWr7HDzNGlwagAAApM"]
[Wed Sep 30 00:57:22.218841 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.219122 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.254840 2026] [security2:error] [pid 187269:tid 187406] [client 20.219.2.60:19437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ioxi-o.php"] [unique_id "aryy0tFcyhWr7HDzNGlwbQAAAhQ"]
[Wed Sep 30 00:57:22.270708 2026] [access_compat:error] [pid 187269:tid 187485] [client 47.79.13.71:59722] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:22.271004 2026] [access_compat:error] [pid 187269:tid 187485] [client 47.79.13.71:59722] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:22.309022 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.309302 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.316627 2026] [security2:error] [pid 187269:tid 187483] [client 103.24.86.56:57164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.86.24.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryy0tFcyhWr7HDzNGlwcQAAAmE"]
[Wed Sep 30 00:57:22.316748 2026] [security2:error] [pid 187269:tid 187483] [client 103.24.86.56:57164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "indoorenvironmentaltesting.com"] [uri "/xmlrpc.php"] [unique_id "aryy0tFcyhWr7HDzNGlwcQAAAmE"]
[Wed Sep 30 00:57:22.347209 2026] [autoindex:error] [pid 187269:tid 187520] [client 212.156.70.154:14071] AH01276: Cannot serve directory /home4/lzqkpgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:22.400462 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.400729 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.485664 2026] [security2:error] [pid 186850:tid 187048] [client 49.205.105.16:13656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy0k5Phls--iYlcKgBBAAAAU4"]
[Wed Sep 30 00:57:22.485775 2026] [security2:error] [pid 186850:tid 187048] [client 49.205.105.16:13656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy0k5Phls--iYlcKgBBAAAAU4"]
[Wed Sep 30 00:57:22.489358 2026] [security2:error] [pid 187269:tid 187458] [client 20.214.145.90:39745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aryy0tFcyhWr7HDzNGlweQAAAkg"]
[Wed Sep 30 00:57:22.491246 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.491496 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.530612 2026] [security2:error] [pid 187269:tid 187473] [client 20.213.164.196:35778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/dh9u7.php"] [unique_id "aryy0tFcyhWr7HDzNGlwewAAAlc"]
[Wed Sep 30 00:57:22.535421 2026] [security2:error] [pid 187269:tid 187414] [client 20.198.74.230:41399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/alfa.php"] [unique_id "aryy0tFcyhWr7HDzNGlwfgAAAhw"]
[Wed Sep 30 00:57:22.580899 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.581151 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.653661 2026] [security2:error] [pid 187269:tid 187482] [client 20.219.19.141:23978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/k.php"] [unique_id "aryy0tFcyhWr7HDzNGlwggAAAmA"]
[Wed Sep 30 00:57:22.664484 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 00:57:22.664759 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 00:57:22.672433 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.672689 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.764925 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.765186 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.770080 2026] [security2:error] [pid 187269:tid 187440] [client 85.204.70.116:39140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryy0tFcyhWr7HDzNGlwhwAAAjY"]
[Wed Sep 30 00:57:22.792630 2026] [security2:error] [pid 187269:tid 187427] [client 4.196.65.241:64169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ho.php"] [unique_id "aryy0tFcyhWr7HDzNGlwiAAAAik"]
[Wed Sep 30 00:57:22.802137 2026] [security2:error] [pid 187269:tid 187308] [remote 87.199.194.213:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.194.199.87.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/wp-comments-post.php"] [unique_id "aryy0tFcyhWr7HDzNGlwhgACQh8"], referer: https://sergil.net/blog/2026/02/05/%d9%85%d8%b9%d9%85%d9%88%d8%af%d9%8a%d9%91%d8%a9-%d8%a7%d9%84%d9%81%d8%b6%d9%8a%d8%ad%d8%a9/
[Wed Sep 30 00:57:22.802329 2026] [security2:error] [pid 187269:tid 187452] [client 87.199.194.213:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "sergil.net"] [uri "/wp-comments-post.php"] [unique_id "aryy0tFcyhWr7HDzNGlwhgACQh8"], referer: https://sergil.net/blog/2026/02/05/%d9%85%d8%b9%d9%85%d9%88%d8%af%d9%8a%d9%91%d8%a9-%d8%a7%d9%84%d9%81%d8%b6%d9%8a%d8%ad%d8%a9/
[Wed Sep 30 00:57:22.857755 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.858026 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.867923 2026] [security2:error] [pid 187269:tid 187444] [client 39.44.16.112:54923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy0tFcyhWr7HDzNGlwigAAAjo"]
[Wed Sep 30 00:57:22.869016 2026] [security2:error] [pid 187269:tid 187444] [client 39.44.16.112:54923] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy0tFcyhWr7HDzNGlwigAAAjo"]
[Wed Sep 30 00:57:22.947607 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:22.947872 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:22.993085 2026] [security2:error] [pid 187269:tid 187456] [client 20.194.30.107:56231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/wp.php"] [unique_id "aryy0tFcyhWr7HDzNGlwjgAAAkY"]
[Wed Sep 30 00:57:23.037634 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.037907 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.040681 2026] [security2:error] [pid 187269:tid 187408] [client 20.213.164.196:35802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/yvnqcuic.php"] [unique_id "aryy09FcyhWr7HDzNGlwlgAAAhY"]
[Wed Sep 30 00:57:23.057949 2026] [security2:error] [pid 187269:tid 187503] [client 85.204.70.116:39150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryy09FcyhWr7HDzNGlwmQAAAnU"]
[Wed Sep 30 00:57:23.071096 2026] [security2:error] [pid 186850:tid 186994] [client 20.214.145.90:39789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/matcha.php"] [unique_id "aryy005Phls--iYlcKgBFgAAARg"]
[Wed Sep 30 00:57:23.093946 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy005Phls--iYlcKgBGAABF1Q"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297554&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:23.093968 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy005Phls--iYlcKgBGAABF1Q"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297554&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:57:23.130166 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.130441 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.144951 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:23.145253 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:23.221961 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.222231 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.263378 2026] [security2:error] [pid 187269:tid 187528] [client 20.219.2.60:18940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ajax.php"] [unique_id "aryy09FcyhWr7HDzNGlwowAAAo0"]
[Wed Sep 30 00:57:23.311091 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.311362 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.358140 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.145.90:56970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/aboutt.php"] [unique_id "aryy005Phls--iYlcKgBHQAAAQ4"]
[Wed Sep 30 00:57:23.402393 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.402644 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.433905 2026] [security2:error] [pid 187269:tid 187467] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryy09FcyhWr7HDzNGlwtQAAAlE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:23.493326 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.493585 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.585239 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.585522 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.630508 2026] [security2:error] [pid 187269:tid 187505] [client 20.214.145.90:47303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/opsh.php"] [unique_id "aryy09FcyhWr7HDzNGlwwwAAAnc"]
[Wed Sep 30 00:57:23.640907 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:23.641185 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:23.677615 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.677918 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.696836 2026] [security2:error] [pid 187269:tid 187452] [client 74.7.228.14:44472] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.homs.co.ke"] [uri "/robots.txt"] [unique_id "aryy09FcyhWr7HDzNGlwygAAAkI"]
[Wed Sep 30 00:57:23.729280 2026] [security2:error] [pid 187269:tid 187468] [client 85.204.70.116:39152] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryy09FcyhWr7HDzNGlw1AAAAlI"]
[Wed Sep 30 00:57:23.761042 2026] [security2:error] [pid 187269:tid 187439] [client 43.228.72.130:25549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.72.228.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/wp-login.php"] [unique_id "aryy09FcyhWr7HDzNGlw1gAAAjU"]
[Wed Sep 30 00:57:23.767617 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.767933 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.866082 2026] [security2:error] [pid 187269:tid 187433] [client 20.28.180.172:34255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "aryy09FcyhWr7HDzNGlw4AAAAi8"]
[Wed Sep 30 00:57:23.866282 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.866540 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:23.905778 2026] [security2:error] [pid 187269:tid 187499] [client 20.213.164.196:35805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/koiy.php"] [unique_id "aryy09FcyhWr7HDzNGlw4wAAAnE"]
[Wed Sep 30 00:57:23.907447 2026] [security2:error] [pid 187269:tid 187464] [client 20.214.145.90:2902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/photo.php"] [unique_id "aryy09FcyhWr7HDzNGlw5AAAAk4"]
[Wed Sep 30 00:57:23.908042 2026] [security2:error] [pid 186850:tid 187004] [client 49.43.163.212:58767] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy005Phls--iYlcKgBKgAAASI"]
[Wed Sep 30 00:57:23.908176 2026] [security2:error] [pid 186850:tid 187004] [client 49.43.163.212:58767] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy005Phls--iYlcKgBKgAAASI"]
[Wed Sep 30 00:57:23.957021 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:23.957298 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.016596 2026] [security2:error] [pid 187269:tid 187422] [client 45.138.12.32:30564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tky.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy1NFcyhWr7HDzNGlw5wAAAiQ"]
[Wed Sep 30 00:57:24.021132 2026] [security2:error] [pid 187269:tid 187460] [client 85.204.70.116:4721] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryy1NFcyhWr7HDzNGlw6AAAAko"]
[Wed Sep 30 00:57:24.048335 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.048596 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.112916 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:24.113181 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:24.122161 2026] [security2:error] [pid 187269:tid 187494] [client 223.235.102.107:29161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy1NFcyhWr7HDzNGlw7gAAAmw"]
[Wed Sep 30 00:57:24.122266 2026] [security2:error] [pid 187269:tid 187494] [client 223.235.102.107:29161] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy1NFcyhWr7HDzNGlw7gAAAmw"]
[Wed Sep 30 00:57:24.138891 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.139161 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.179014 2026] [security2:error] [pid 187269:tid 187442] [client 20.214.145.90:56969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-fxxxx.php"] [unique_id "aryy1NFcyhWr7HDzNGlw8AAAAjg"]
[Wed Sep 30 00:57:24.227845 2026] [security2:error] [pid 187269:tid 187344] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryy1NFcyhWr7HDzNGlw8gACgEM"], referer: https://torquayfans.com/viewtopic.php?p=62257
[Wed Sep 30 00:57:24.227889 2026] [security2:error] [pid 187269:tid 187344] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryy1NFcyhWr7HDzNGlw8gACgEM"], referer: https://torquayfans.com/viewtopic.php?p=62257
[Wed Sep 30 00:57:24.231156 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.231434 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.270482 2026] [security2:error] [pid 187269:tid 187426] [client 20.198.74.230:34827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/w.php"] [unique_id "aryy1NFcyhWr7HDzNGlw8wAAAig"]
[Wed Sep 30 00:57:24.315256 2026] [security2:error] [pid 187269:tid 187490] [client 85.204.70.116:39168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryy1NFcyhWr7HDzNGlw-QAAAmg"]
[Wed Sep 30 00:57:24.320065 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.320327 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.412020 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.412295 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:13685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.447472 2026] [security2:error] [pid 186850:tid 187064] [client 20.214.145.90:57016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp-filemannger4h.php"] [unique_id "aryy1E5Phls--iYlcKgBMgAAAV4"]
[Wed Sep 30 00:57:24.484684 2026] [security2:error] [pid 187269:tid 187440] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryy1NFcyhWr7HDzNGlxCAAAAjY"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:24.496494 2026] [security2:error] [pid 187269:tid 187444] [client 216.73.216.46:13685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy1NFcyhWr7HDzNGlxCQAAAjo"]
[Wed Sep 30 00:57:24.588195 2026] [access_compat:error] [pid 186850:tid 187068] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:24.588471 2026] [access_compat:error] [pid 186850:tid 187068] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:24.596405 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.596724 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.610186 2026] [security2:error] [pid 187269:tid 187408] [client 85.204.70.116:39180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryy1NFcyhWr7HDzNGlxDAAAAhY"]
[Wed Sep 30 00:57:24.669246 2026] [security2:error] [pid 187269:tid 187488] [client 20.219.19.141:23968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/133.php"] [unique_id "aryy1NFcyhWr7HDzNGlxEQAAAmY"]
[Wed Sep 30 00:57:24.691856 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.692301 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.725071 2026] [security2:error] [pid 187269:tid 187424] [client 20.214.145.90:40863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/ffl.php"] [unique_id "aryy1NFcyhWr7HDzNGlxFAAAAiY"]
[Wed Sep 30 00:57:24.760596 2026] [security2:error] [pid 186850:tid 187089] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy1E5Phls--iYlcKgBNAAAAXc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:24.766314 2026] [security2:error] [pid 187269:tid 187470] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryy1NFcyhWr7HDzNGlxFgAAAlQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:24.776266 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.776523 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.853746 2026] [security2:error] [pid 186850:tid 187001] [client 223.181.60.167:14850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy1E5Phls--iYlcKgBOAAAAR8"]
[Wed Sep 30 00:57:24.853908 2026] [security2:error] [pid 186850:tid 187001] [client 223.181.60.167:14850] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy1E5Phls--iYlcKgBOAAAAR8"]
[Wed Sep 30 00:57:24.869518 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.869816 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.878778 2026] [security2:error] [pid 187269:tid 187528] [client 20.219.2.60:19332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/install.php"] [unique_id "aryy1NFcyhWr7HDzNGlxIAAAAo0"]
[Wed Sep 30 00:57:24.900381 2026] [security2:error] [pid 186850:tid 187076] [client 85.204.70.116:53050] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryy1E5Phls--iYlcKgBOQAAAWo"]
[Wed Sep 30 00:57:24.961631 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:24.961911 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:24.965923 2026] [security2:error] [pid 187269:tid 187489] [client 20.213.164.196:15974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wordfence-waf.php"] [unique_id "aryy1NFcyhWr7HDzNGlxIwAAAmc"]
[Wed Sep 30 00:57:24.993195 2026] [security2:error] [pid 187269:tid 187448] [client 116.72.182.19:60811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy1NFcyhWr7HDzNGlxJQAAAj4"]
[Wed Sep 30 00:57:24.994027 2026] [security2:error] [pid 187269:tid 187448] [client 116.72.182.19:60811] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy1NFcyhWr7HDzNGlxJQAAAj4"]
[Wed Sep 30 00:57:24.999533 2026] [security2:error] [pid 186850:tid 187063] [client 20.214.145.90:40904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/wp5.php"] [unique_id "aryy1E5Phls--iYlcKgBOwAAAV0"]
[Wed Sep 30 00:57:25.054994 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.055256 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.077021 2026] [security2:error] [pid 187269:tid 187449] [client 20.219.2.60:36824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-class-atom.php"] [unique_id "aryy1dFcyhWr7HDzNGlxKQAAAj8"]
[Wed Sep 30 00:57:25.124224 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:25.124498 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:25.142769 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.143058 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.180375 2026] [security2:error] [pid 186850:tid 186987] [client 85.204.70.116:39184] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryy1U5Phls--iYlcKgBPgAAARE"]
[Wed Sep 30 00:57:25.234868 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.235130 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.268177 2026] [security2:error] [pid 187269:tid 187430] [client 20.214.145.90:40858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/koiy.php"] [unique_id "aryy1dFcyhWr7HDzNGlxLgAAAiw"]
[Wed Sep 30 00:57:25.325184 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.325454 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.417904 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.418191 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.462485 2026] [security2:error] [pid 187269:tid 187406] [client 103.159.192.142:61988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy1dFcyhWr7HDzNGlxNwAAAhQ"]
[Wed Sep 30 00:57:25.462600 2026] [security2:error] [pid 187269:tid 187406] [client 103.159.192.142:61988] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy1dFcyhWr7HDzNGlxNwAAAhQ"]
[Wed Sep 30 00:57:25.464977 2026] [security2:error] [pid 187269:tid 187478] [client 85.204.70.116:14659] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryy1dFcyhWr7HDzNGlxOAAAAlw"]
[Wed Sep 30 00:57:25.506228 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.506477 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.547451 2026] [security2:error] [pid 186850:tid 187047] [client 20.214.145.90:40871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/bnmtp.php"] [unique_id "aryy1U5Phls--iYlcKgBRQAAAU0"]
[Wed Sep 30 00:57:25.583866 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:25.584141 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:25.603553 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.604001 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.663658 2026] [security2:error] [pid 186850:tid 187049] [client 20.198.74.230:41361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "aryy1U5Phls--iYlcKgBSAAAAU8"]
[Wed Sep 30 00:57:25.690083 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.690354 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.746957 2026] [security2:error] [pid 186850:tid 186992] [client 85.204.70.116:52782] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryy1U5Phls--iYlcKgBTAAAARY"]
[Wed Sep 30 00:57:25.780792 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.781070 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.829555 2026] [security2:error] [pid 187269:tid 187450] [client 20.214.145.90:40946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/abbi.php"] [unique_id "aryy1dFcyhWr7HDzNGlxRQAAAkA"]
[Wed Sep 30 00:57:25.871639 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.871926 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:25.890078 2026] [security2:error] [pid 186850:tid 187099] [client 20.70.173.30:63732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/biufile.php"] [unique_id "aryy1U5Phls--iYlcKgBUgAAAYE"]
[Wed Sep 30 00:57:25.942043 2026] [security2:error] [pid 186850:tid 187033] [client 20.213.164.196:54666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wp5.php"] [unique_id "aryy1U5Phls--iYlcKgBVQAAAT8"]
[Wed Sep 30 00:57:25.957505 2026] [security2:error] [pid 187269:tid 187480] [client 4.196.65.241:19504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/un.php"] [unique_id "aryy1dFcyhWr7HDzNGlxSAAAAl4"]
[Wed Sep 30 00:57:25.962632 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:25.962892 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.041594 2026] [security2:error] [pid 187269:tid 187408] [client 85.204.70.116:52784] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryy1tFcyhWr7HDzNGlxTQAAAhY"]
[Wed Sep 30 00:57:26.053392 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.053652 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.133652 2026] [security2:error] [pid 187269:tid 187507] [client 20.214.145.90:62223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.habeshacontacts.com"] [uri "/asw.php"] [unique_id "aryy1tFcyhWr7HDzNGlxUAAAAnk"]
[Wed Sep 30 00:57:26.146090 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.146381 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.159138 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:26.159477 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:57:26.172061 2026] [security2:error] [pid 187269:tid 187427] [client 20.194.30.107:56205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/users.php"] [unique_id "aryy1tFcyhWr7HDzNGlxUgAAAik"]
[Wed Sep 30 00:57:26.249070 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.249345 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.252351 2026] [security2:error] [pid 186850:tid 187101] [client 116.197.133.25:58381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy1k5Phls--iYlcKgBWAAAAYM"]
[Wed Sep 30 00:57:26.252469 2026] [security2:error] [pid 186850:tid 187101] [client 116.197.133.25:58381] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy1k5Phls--iYlcKgBWAAAAYM"]
[Wed Sep 30 00:57:26.324569 2026] [security2:error] [pid 187269:tid 187412] [client 85.204.70.116:52786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryy1tFcyhWr7HDzNGlxVwAAAho"]
[Wed Sep 30 00:57:26.343552 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.344008 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.431244 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.431536 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.522480 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.522747 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.593570 2026] [security2:error] [pid 187269:tid 187503] [client 155.190.6.18:59436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy1tFcyhWr7HDzNGlxZQAAAnU"]
[Wed Sep 30 00:57:26.608150 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:26.608435 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:26.612157 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.612423 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:47911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.620586 2026] [security2:error] [pid 187269:tid 187494] [client 85.204.70.116:52794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryy1tFcyhWr7HDzNGlxaAAAAmw"]
[Wed Sep 30 00:57:26.732465 2026] [security2:error] [pid 187269:tid 187514] [client 20.213.164.196:54681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/em.php"] [unique_id "aryy1tFcyhWr7HDzNGlxbgAAAoA"]
[Wed Sep 30 00:57:26.736532 2026] [security2:error] [pid 187269:tid 187403] [remote 57.141.14.92:42274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "aryy1tFcyhWr7HDzNGlxawACb34"]
[Wed Sep 30 00:57:26.756271 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.756546 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.848499 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.848773 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.875608 2026] [security2:error] [pid 187269:tid 187508] [client 4.196.65.241:2091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/gxjybsva.php"] [unique_id "aryy1tFcyhWr7HDzNGlxcgAAAno"]
[Wed Sep 30 00:57:26.877650 2026] [security2:error] [pid 187269:tid 187503] [client 155.190.6.18:59436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy1tFcyhWr7HDzNGlxZQAAAnU"]
[Wed Sep 30 00:57:26.886894 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.887173 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:26.897698 2026] [security2:error] [pid 187269:tid 187442] [client 43.104.4.209:28552] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "aryy1tFcyhWr7HDzNGlxdwAAAjg"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:57:26.903544 2026] [security2:error] [pid 187269:tid 187445] [client 85.204.70.116:52796] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryy1tFcyhWr7HDzNGlxeAAAAjs"]
[Wed Sep 30 00:57:26.906459 2026] [security2:error] [pid 186850:tid 187097] [client 20.219.2.60:19429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/public/wp-blog.php"] [unique_id "aryy1k5Phls--iYlcKgBZwAAAX8"]
[Wed Sep 30 00:57:26.944124 2026] [security2:error] [pid 187269:tid 187478] [client 20.194.30.107:17516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/cilus.php"] [unique_id "aryy1tFcyhWr7HDzNGlxegAAAlw"]
[Wed Sep 30 00:57:26.982193 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:26.982598 2026] [access_compat:error] [pid 187269:tid 187531] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.006526 2026] [security2:error] [pid 187269:tid 187505] [client 216.73.216.46:47911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy19FcyhWr7HDzNGlxfwAAAnc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjU4
[Wed Sep 30 00:57:27.068791 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.069047 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.078716 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:27.078996 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:27.103518 2026] [security2:error] [pid 187269:tid 187461] [client 45.138.12.32:2184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tmx.wef.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy19FcyhWr7HDzNGlxhwAAAks"]
[Wed Sep 30 00:57:27.159559 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.159947 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:55011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.160194 2026] [security2:error] [pid 187269:tid 187513] [client 20.194.30.107:9987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/echkm.php"] [unique_id "aryy19FcyhWr7HDzNGlxjQAAAn8"]
[Wed Sep 30 00:57:27.181303 2026] [security2:error] [pid 187269:tid 187493] [client 85.204.70.116:52806] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryy19FcyhWr7HDzNGlxjgAAAms"]
[Wed Sep 30 00:57:27.251739 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.252007 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.341379 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.341639 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.358521 2026] [security2:error] [pid 187269:tid 187506] [client 20.219.2.60:36741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-block.php"] [unique_id "aryy19FcyhWr7HDzNGlxlQAAAng"]
[Wed Sep 30 00:57:27.391168 2026] [autoindex:error] [pid 187269:tid 187507] [client 212.156.70.154:6610] AH01276: Cannot serve directory /home4/twzhdkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:27.485826 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.486113 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.490514 2026] [security2:error] [pid 187269:tid 187517] [client 85.204.70.116:52812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bay.vpu.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryy19FcyhWr7HDzNGlxngAAAoM"]
[Wed Sep 30 00:57:27.492553 2026] [security2:error] [pid 187269:tid 187415] [client 20.28.180.172:29600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/2fa307c31b.php"] [unique_id "aryy19FcyhWr7HDzNGlxnwAAAh0"]
[Wed Sep 30 00:57:27.529211 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.529624 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.532186 2026] [security2:error] [pid 187269:tid 187528] [client 20.213.164.196:15996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/hp.php"] [unique_id "aryy19FcyhWr7HDzNGlxoQAAAo0"]
[Wed Sep 30 00:57:27.570665 2026] [security2:error] [pid 187269:tid 187524] [client 216.73.216.46:55011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy19FcyhWr7HDzNGlxpAAAAok"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5ODk%3D
[Wed Sep 30 00:57:27.579241 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:27.579503 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:27.615356 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.615619 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.705402 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.705662 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.798682 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.799109 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:3214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.882326 2026] [security2:error] [pid 187269:tid 187504] [client 216.73.216.46:3214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy19FcyhWr7HDzNGlxuAAAAnY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxMi9kcml2ZXI%3D
[Wed Sep 30 00:57:27.887642 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.887923 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:27.914704 2026] [security2:error] [pid 187269:tid 187438] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "aryy19FcyhWr7HDzNGlxvQAAAjQ"]
[Wed Sep 30 00:57:27.945465 2026] [security2:error] [pid 186850:tid 187005] [client 37.41.16.35:63284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy105Phls--iYlcKgBdQAAASM"]
[Wed Sep 30 00:57:27.945588 2026] [security2:error] [pid 186850:tid 187005] [client 37.41.16.35:63284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy105Phls--iYlcKgBdQAAASM"]
[Wed Sep 30 00:57:27.982279 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:27.982762 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.074610 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.075290 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.112898 2026] [security2:error] [pid 187269:tid 187462] [client 20.213.164.196:54100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wpuse.php"] [unique_id "aryy2NFcyhWr7HDzNGlx0AAAAkw"]
[Wed Sep 30 00:57:28.124619 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:28.124888 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:28.149508 2026] [security2:error] [pid 187269:tid 187531] [client 182.69.182.151:32436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx0gAAApA"]
[Wed Sep 30 00:57:28.149616 2026] [security2:error] [pid 187269:tid 187531] [client 182.69.182.151:32436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx0gAAApA"]
[Wed Sep 30 00:57:28.214838 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.215101 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.251696 2026] [security2:error] [pid 187269:tid 187517] [client 20.219.2.60:18902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/nw.php"] [unique_id "aryy2NFcyhWr7HDzNGlx2AAAAoM"]
[Wed Sep 30 00:57:28.252545 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.252804 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.286897 2026] [security2:error] [pid 187269:tid 187446] [client 103.241.204.139:51360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx1gAAAjw"]
[Wed Sep 30 00:57:28.287017 2026] [security2:error] [pid 187269:tid 187446] [client 103.241.204.139:51360] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx1gAAAjw"]
[Wed Sep 30 00:57:28.331608 2026] [security2:error] [pid 186850:tid 187081] [client 20.194.30.107:10033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/ccc.php"] [unique_id "aryy2E5Phls--iYlcKgBfQAAAW8"]
[Wed Sep 30 00:57:28.336383 2026] [security2:error] [pid 187269:tid 187477] [client 20.194.30.107:17528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryy2NFcyhWr7HDzNGlx4AAAAls"]
[Wed Sep 30 00:57:28.343064 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.343333 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.344501 2026] [security2:error] [pid 187269:tid 187494] [client 45.138.12.40:20284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.her.xwq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy2NFcyhWr7HDzNGlx4gAAAmw"]
[Wed Sep 30 00:57:28.377078 2026] [security2:error] [pid 187269:tid 187489] [client 74.7.242.1:43810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryy2NFcyhWr7HDzNGlx5AAAAmc"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:57:28.407352 2026] [security2:error] [pid 187269:tid 187529] [client 20.194.30.107:56199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dentiststudygroup.com"] [uri "/cabs.php"] [unique_id "aryy2NFcyhWr7HDzNGlx5gAAAo4"]
[Wed Sep 30 00:57:28.435298 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.435547 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.454413 2026] [security2:error] [pid 187269:tid 187485] [client 45.138.12.40:52522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hannahjune.com"] [uri "/wp-links-opml.php"] [unique_id "aryy2NFcyhWr7HDzNGlx6AAAAmM"]
[Wed Sep 30 00:57:28.464561 2026] [access_compat:error] [pid 187269:tid 187421] [client 47.79.13.176:39472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:28.464925 2026] [access_compat:error] [pid 187269:tid 187421] [client 47.79.13.176:39472] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:28.509745 2026] [security2:error] [pid 186850:tid 187098] [client 116.193.128.26:58696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy2E5Phls--iYlcKgBfwAAAYA"]
[Wed Sep 30 00:57:28.509895 2026] [security2:error] [pid 186850:tid 187098] [client 116.193.128.26:58696] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy2E5Phls--iYlcKgBfwAAAYA"]
[Wed Sep 30 00:57:28.527261 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.527512 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.622125 2026] [access_compat:error] [pid 186850:tid 187068] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:28.622220 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.622418 2026] [access_compat:error] [pid 186850:tid 187068] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:28.622636 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.651959 2026] [security2:error] [pid 187269:tid 187474] [client 20.213.164.196:35813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/sm.php"] [unique_id "aryy2NFcyhWr7HDzNGlx-AAAAlg"]
[Wed Sep 30 00:57:28.714354 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.714778 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.734816 2026] [security2:error] [pid 187269:tid 187471] [client 152.59.169.65:52755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx-gAAAlU"]
[Wed Sep 30 00:57:28.738295 2026] [security2:error] [pid 187269:tid 187471] [client 152.59.169.65:52755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlx-gAAAlU"]
[Wed Sep 30 00:57:28.761098 2026] [security2:error] [pid 187269:tid 187509] [client 4.196.65.241:27319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/new4.php"] [unique_id "aryy2NFcyhWr7HDzNGlx_AAAAns"]
[Wed Sep 30 00:57:28.800519 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.800782 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.840954 2026] [security2:error] [pid 187269:tid 187498] [client 20.219.19.141:46505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wsd.php"] [unique_id "aryy2NFcyhWr7HDzNGlyAQAAAnA"]
[Wed Sep 30 00:57:28.889591 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.889881 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:28.892462 2026] [autoindex:error] [pid 187269:tid 187533] [client 212.156.70.154:54246] AH01276: Cannot serve directory /home4/umzmhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:28.923282 2026] [security2:error] [pid 187269:tid 187379] [remote 57.141.14.96:29240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/xmlrpc.php"] [unique_id "aryy2NFcyhWr7HDzNGlyAwACOmY"]
[Wed Sep 30 00:57:28.981545 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:28.981800 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.073867 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.074280 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.110601 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:29.110869 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:29.134786 2026] [security2:error] [pid 187269:tid 187446] [client 20.194.30.107:10045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp-content/admin.php"] [unique_id "aryy2dFcyhWr7HDzNGlyEwAAAjw"]
[Wed Sep 30 00:57:29.164974 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.165249 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.226411 2026] [security2:error] [pid 186850:tid 187009] [client 114.119.143.77:23965] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "falconproductsusa.com"] [uri "/images/special_orders.jpg"] [unique_id "aryy2U5Phls--iYlcKgBiQAAASc"], referer: http://falconproductsusa.com/images/special_orders.jpg
[Wed Sep 30 00:57:29.277420 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.167:57302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:29.277678 2026] [access_compat:error] [pid 187269:tid 187488] [client 47.79.13.167:57302] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:29.308418 2026] [security2:error] [pid 187269:tid 187435] [client 20.213.164.196:35779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/mknobgkg.php"] [unique_id "aryy2dFcyhWr7HDzNGlyGwAAAjE"]
[Wed Sep 30 00:57:29.324422 2026] [security2:error] [pid 187269:tid 187377] [remote 47.128.114.130:11052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/761/governor-grieved-over-deaths-in-peshawar-blast"] [unique_id "aryy2dFcyhWr7HDzNGlyHQACjmQ"]
[Wed Sep 30 00:57:29.344360 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.344653 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.424797 2026] [security2:error] [pid 187269:tid 187447] [client 103.172.210.103:52710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyJgAAAj0"]
[Wed Sep 30 00:57:29.424951 2026] [security2:error] [pid 187269:tid 187447] [client 103.172.210.103:52710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyJgAAAj0"]
[Wed Sep 30 00:57:29.429904 2026] [security2:error] [pid 187269:tid 187473] [client 223.181.30.165:5701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyJwAAAlc"]
[Wed Sep 30 00:57:29.430022 2026] [security2:error] [pid 187269:tid 187473] [client 223.181.30.165:5701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyJwAAAlc"]
[Wed Sep 30 00:57:29.438164 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.438448 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.441647 2026] [security2:error] [pid 187269:tid 187531] [client 49.36.41.37:65366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyKQAAApA"]
[Wed Sep 30 00:57:29.441736 2026] [security2:error] [pid 187269:tid 187531] [client 49.36.41.37:65366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy2dFcyhWr7HDzNGlyKQAAApA"]
[Wed Sep 30 00:57:29.451840 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:23798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.452247 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:23798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.493176 2026] [security2:error] [pid 186850:tid 187042] [client 20.219.2.60:36775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-signup.php"] [unique_id "aryy2U5Phls--iYlcKgBkgAAAUg"]
[Wed Sep 30 00:57:29.528568 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.528847 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.596610 2026] [security2:error] [pid 186850:tid 187106] [client 20.219.2.60:18922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/tool.php"] [unique_id "aryy2U5Phls--iYlcKgBlgAAAYg"]
[Wed Sep 30 00:57:29.613508 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:29.613963 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:29.621458 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.621900 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.709624 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.709913 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.800480 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.800735 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.871326 2026] [security2:error] [pid 187269:tid 187520] [client 216.73.216.46:23798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy2dFcyhWr7HDzNGlyOwAAAoY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDAy
[Wed Sep 30 00:57:29.892835 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.893107 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.983455 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:29.983716 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:29.996942 2026] [security2:error] [pid 187269:tid 187518] [client 20.194.30.107:10175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/biufile.php"] [unique_id "aryy2dFcyhWr7HDzNGlyQQAAAoQ"]
[Wed Sep 30 00:57:30.077935 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.078201 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.104734 2026] [security2:error] [pid 187269:tid 187442] [client 202.179.95.79:55058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy2tFcyhWr7HDzNGlyRgAAAjg"]
[Wed Sep 30 00:57:30.104833 2026] [security2:error] [pid 187269:tid 187442] [client 202.179.95.79:55058] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy2tFcyhWr7HDzNGlyRgAAAjg"]
[Wed Sep 30 00:57:30.119712 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:30.120354 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 00:57:30.165501 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.165856 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.254888 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.255146 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.256660 2026] [security2:error] [pid 186850:tid 187084] [client 4.196.65.241:64187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/asax.php"] [unique_id "aryy2k5Phls--iYlcKgBpgAAAXI"]
[Wed Sep 30 00:57:30.346847 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.347149 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.437022 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.437427 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.469926 2026] [security2:error] [pid 187269:tid 187283] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryy2tFcyhWr7HDzNGlyVgACSgY"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D87244
[Wed Sep 30 00:57:30.527839 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.528103 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:7163] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.542894 2026] [security2:error] [pid 187269:tid 187439] [client 20.198.74.230:23920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ccc.php"] [unique_id "aryy2tFcyhWr7HDzNGlyWwAAAjU"]
[Wed Sep 30 00:57:30.553190 2026] [security2:error] [pid 186850:tid 187051] [client 74.7.230.17:35040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kiy.bbn.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryy2k5Phls--iYlcKgBsAABUTQ"]
[Wed Sep 30 00:57:30.622947 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.623234 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.646500 2026] [access_compat:error] [pid 186850:tid 187105] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:30.646751 2026] [access_compat:error] [pid 186850:tid 187105] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:30.663210 2026] [security2:error] [pid 187269:tid 187524] [client 20.213.164.196:35776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/dairg.php"] [unique_id "aryy2tFcyhWr7HDzNGlyXgAAAok"]
[Wed Sep 30 00:57:30.679531 2026] [security2:error] [pid 187269:tid 187415] [client 82.102.18.222:19324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryy2tFcyhWr7HDzNGlyYQAAAh0"]
[Wed Sep 30 00:57:30.695559 2026] [security2:error] [pid 186850:tid 187079] [client 20.219.2.60:19335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/drhunthq.php"] [unique_id "aryy2k5Phls--iYlcKgBswAAAW0"]
[Wed Sep 30 00:57:30.698041 2026] [autoindex:error] [pid 186850:tid 186874] [remote 74.7.241.59:45716] AH01276: Cannot serve directory /home4/kiybbnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:30.711387 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.711645 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.792816 2026] [security2:error] [pid 186850:tid 187101] [client 152.59.165.7:50327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy2k5Phls--iYlcKgBtwAAAYM"]
[Wed Sep 30 00:57:30.792931 2026] [security2:error] [pid 186850:tid 187101] [client 152.59.165.7:50327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy2k5Phls--iYlcKgBtwAAAYM"]
[Wed Sep 30 00:57:30.804284 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.804596 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.838511 2026] [security2:error] [pid 186850:tid 187025] [client 20.198.74.230:34860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/robot.php"] [unique_id "aryy2k5Phls--iYlcKgBugAAATc"]
[Wed Sep 30 00:57:30.895820 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.896096 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:30.932374 2026] [security2:error] [pid 187269:tid 187508] [client 216.73.216.46:7163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy2tFcyhWr7HDzNGlybQAAAno"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvbWVtb3J5OS9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:57:30.960489 2026] [security2:error] [pid 186850:tid 187072] [client 150.107.232.159:35713] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy2k5Phls--iYlcKgBvQAAAWY"]
[Wed Sep 30 00:57:30.960600 2026] [security2:error] [pid 186850:tid 187072] [client 150.107.232.159:35713] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy2k5Phls--iYlcKgBvQAAAWY"]
[Wed Sep 30 00:57:30.986368 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:30.986622 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:31.010732 2026] [security2:error] [pid 187269:tid 187489] [client 82.102.18.222:37532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryy29FcyhWr7HDzNGlycAAAAmc"]
[Wed Sep 30 00:57:31.062505 2026] [security2:error] [pid 186850:tid 187039] [client 20.28.180.172:29608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/aqotrjkg.php"] [unique_id "aryy205Phls--iYlcKgBwAAAAUU"]
[Wed Sep 30 00:57:31.083398 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:31.083839 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:31.112597 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:31.112866 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:57:31.140606 2026] [security2:error] [pid 187269:tid 187483] [client 45.138.12.32:30794] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kkj.lfk.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy29FcyhWr7HDzNGlycwAAAmE"]
[Wed Sep 30 00:57:31.258558 2026] [security2:error] [pid 187269:tid 187437] [client 203.122.45.246:58311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy29FcyhWr7HDzNGlyeAAAAjM"]
[Wed Sep 30 00:57:31.258660 2026] [security2:error] [pid 187269:tid 187437] [client 203.122.45.246:58311] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy29FcyhWr7HDzNGlyeAAAAjM"]
[Wed Sep 30 00:57:31.294306 2026] [security2:error] [pid 187269:tid 187520] [client 4.196.65.241:64181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/esp.php"] [unique_id "aryy29FcyhWr7HDzNGlyfAAAAoY"]
[Wed Sep 30 00:57:31.295590 2026] [security2:error] [pid 187269:tid 187523] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryy29FcyhWr7HDzNGlyewAAAog"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:31.359541 2026] [security2:error] [pid 187269:tid 187466] [client 74.7.228.56:40286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.pyn.auh.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryy29FcyhWr7HDzNGlyggACUAw"]
[Wed Sep 30 00:57:31.408060 2026] [security2:error] [pid 186850:tid 187075] [client 20.213.164.196:35807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/dronishness.php"] [unique_id "aryy205Phls--iYlcKgBxgAAAWk"]
[Wed Sep 30 00:57:31.445973 2026] [security2:error] [pid 187269:tid 187482] [client 64.62.156.182:62136] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "173.254.4.161"] [uri "/"] [unique_id "aryy29FcyhWr7HDzNGlyiAAAAmA"]
[Wed Sep 30 00:57:31.449380 2026] [security2:error] [pid 187269:tid 187510] [client 20.219.19.141:46471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/BDKR28WP.php"] [unique_id "aryy29FcyhWr7HDzNGlyiwAAAnw"]
[Wed Sep 30 00:57:31.484432 2026] [autoindex:error] [pid 186850:tid 186954] [remote 74.7.241.6:41606] AH01276: Cannot serve directory /home4/pynauhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:31.613558 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:31.613996 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 00:57:31.734620 2026] [security2:error] [pid 187269:tid 187509] [client 20.194.30.107:10008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/simple.php"] [unique_id "aryy29FcyhWr7HDzNGlyrgAAAns"]
[Wed Sep 30 00:57:31.739148 2026] [security2:error] [pid 187269:tid 187468] [client 127.0.0.1:58128] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryy29FcyhWr7HDzNGlyrAAAAlI"]
[Wed Sep 30 00:57:31.739277 2026] [security2:error] [pid 187269:tid 187471] [client 74.7.228.14:43756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.udr.paw.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryy29FcyhWr7HDzNGlyqgACVSU"]
[Wed Sep 30 00:57:31.751032 2026] [security2:error] [pid 186850:tid 187038] [client 20.219.2.60:36857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-xmlsia.php"] [unique_id "aryy205Phls--iYlcKgB4wAAAUQ"]
[Wed Sep 30 00:57:31.767456 2026] [security2:error] [pid 187269:tid 187498] [client 104.28.222.47:33184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/.env"] [unique_id "aryy29FcyhWr7HDzNGlyrwAAAnA"]
[Wed Sep 30 00:57:31.772522 2026] [security2:error] [pid 187269:tid 187513] [client 82.102.18.222:37544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryy29FcyhWr7HDzNGlysAAAAn8"]
[Wed Sep 30 00:57:31.792954 2026] [security2:error] [pid 186850:tid 187058] [client 104.28.222.47:9965] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/.env.backup"] [unique_id "aryy205Phls--iYlcKgB5QAAAVg"]
[Wed Sep 30 00:57:31.794179 2026] [security2:error] [pid 187269:tid 187438] [client 104.28.222.47:9988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/wp-config.php"] [unique_id "aryy29FcyhWr7HDzNGlytQAAAjQ"]
[Wed Sep 30 00:57:31.794956 2026] [security2:error] [pid 187269:tid 187455] [client 104.28.222.47:9974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/wp-config.php.bak"] [unique_id "aryy29FcyhWr7HDzNGlyuAAAAkU"]
[Wed Sep 30 00:57:31.825550 2026] [security2:error] [pid 186850:tid 187005] [client 117.72.168.90:48506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.168.72.117.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "aryy205Phls--iYlcKgB5AAAASM"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 00:57:31.872557 2026] [security2:error] [pid 186850:tid 186983] [client 20.213.164.196:35821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/Row_wsoo.php"] [unique_id "aryy205Phls--iYlcKgB7AAAAQ0"]
[Wed Sep 30 00:57:31.875756 2026] [security2:error] [pid 187269:tid 187410] [client 72.255.10.32:61689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy29FcyhWr7HDzNGly6QAAAhg"]
[Wed Sep 30 00:57:31.876074 2026] [security2:error] [pid 187269:tid 187410] [client 72.255.10.32:61689] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy29FcyhWr7HDzNGly6QAAAhg"]
[Wed Sep 30 00:57:31.881536 2026] [security2:error] [pid 186850:tid 186997] [client 4.240.25.22:63754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/term.php"] [unique_id "aryy205Phls--iYlcKgB7QAAARs"]
[Wed Sep 30 00:57:31.888745 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.79.13.53:49764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:31.889023 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.79.13.53:49764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:31.937367 2026] [security2:error] [pid 187269:tid 187482] [client 20.219.2.60:19452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/admin/index.php"] [unique_id "aryy29FcyhWr7HDzNGly8AAAAmA"]
[Wed Sep 30 00:57:32.060911 2026] [access_compat:error] [pid 186850:tid 187033] [client 47.79.13.167:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:32.061167 2026] [access_compat:error] [pid 186850:tid 187033] [client 47.79.13.167:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:32.071039 2026] [security2:error] [pid 187269:tid 187432] [client 4.196.65.241:19489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/UT6UJndefault.php"] [unique_id "aryy3NFcyhWr7HDzNGly-QAAAi4"]
[Wed Sep 30 00:57:32.084756 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:32.085068 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:32.103203 2026] [security2:error] [pid 187269:tid 187505] [client 82.102.18.222:37546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryy3NFcyhWr7HDzNGlzAQAAAnc"]
[Wed Sep 30 00:57:32.294722 2026] [security2:error] [pid 187269:tid 187488] [client 43.227.131.37:25950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy3NFcyhWr7HDzNGlzBgAAAmY"]
[Wed Sep 30 00:57:32.294878 2026] [security2:error] [pid 187269:tid 187488] [client 43.227.131.37:25950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy3NFcyhWr7HDzNGlzBgAAAmY"]
[Wed Sep 30 00:57:32.336007 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.336270 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.349660 2026] [security2:error] [pid 186850:tid 186980] [client 45.138.12.40:32656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.her.xwq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy3E5Phls--iYlcKgB9wAAAQo"]
[Wed Sep 30 00:57:32.403870 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.404120 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.425109 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.425373 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.445872 2026] [security2:error] [pid 187269:tid 187438] [client 82.102.18.222:37558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryy3NFcyhWr7HDzNGlzDwAAAjQ"]
[Wed Sep 30 00:57:32.497046 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.497315 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.500913 2026] [security2:error] [pid 187269:tid 187502] [client 20.194.30.107:17289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wsd.php"] [unique_id "aryy3NFcyhWr7HDzNGlzEwAAAnQ"]
[Wed Sep 30 00:57:32.519941 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.520369 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.544439 2026] [security2:error] [pid 187269:tid 187441] [client 45.138.12.32:30800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.kkj.lfk.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryy3NFcyhWr7HDzNGlzHAAAAjc"]
[Wed Sep 30 00:57:32.599611 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.599908 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.619142 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Q=
[Wed Sep 30 00:57:32.619422 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Q=
[Wed Sep 30 00:57:32.626045 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.626318 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.717990 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.718255 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.755803 2026] [security2:error] [pid 187269:tid 187482] [client 82.102.18.222:37560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryy3NFcyhWr7HDzNGlzIwAAAmA"]
[Wed Sep 30 00:57:32.780397 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.780660 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:54142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.809629 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.809909 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.846120 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.846392 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.849271 2026] [security2:error] [pid 187269:tid 187475] [client 20.219.19.141:46464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wmore1.php"] [unique_id "aryy3NFcyhWr7HDzNGlzJwAAAlk"]
[Wed Sep 30 00:57:32.864796 2026] [security2:error] [pid 187269:tid 187367] [remote 74.7.227.56:55736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryy3NFcyhWr7HDzNGlzKQACTlo"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=06edd3364c432025dd02220018277c7d
[Wed Sep 30 00:57:32.879338 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.879604 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.893349 2026] [security2:error] [pid 186850:tid 187098] [client 216.73.216.46:54142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy3E5Phls--iYlcKgCBgAAAYA"]
[Wed Sep 30 00:57:32.950253 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.950519 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.961970 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:14038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.962230 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:14038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:32.989960 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:32.990226 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.058675 2026] [security2:error] [pid 187269:tid 187474] [client 82.102.18.222:37564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryy3dFcyhWr7HDzNGlzNQAAAlg"]
[Wed Sep 30 00:57:33.082257 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.082513 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.089367 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L25ldA==
[Wed Sep 30 00:57:33.089634 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L25ldA==
[Wed Sep 30 00:57:33.101775 2026] [security2:error] [pid 186850:tid 187036] [client 49.205.105.16:14381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy3U5Phls--iYlcKgCCwAAAUI"]
[Wed Sep 30 00:57:33.101920 2026] [security2:error] [pid 186850:tid 187036] [client 49.205.105.16:14381] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy3U5Phls--iYlcKgCCwAAAUI"]
[Wed Sep 30 00:57:33.163956 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.164232 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.172014 2026] [security2:error] [pid 187269:tid 187489] [client 20.213.164.196:15972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/x2.php"] [unique_id "aryy3dFcyhWr7HDzNGlzPwAAAmc"]
[Wed Sep 30 00:57:33.172539 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.172827 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.265936 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.266204 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.355863 2026] [security2:error] [pid 187269:tid 187484] [client 216.73.216.46:14038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy3dFcyhWr7HDzNGlzSwAAAmI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY0
[Wed Sep 30 00:57:33.356238 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.356514 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.365174 2026] [security2:error] [pid 187269:tid 187468] [client 82.102.18.222:37580] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryy3dFcyhWr7HDzNGlzTAAAAlI"]
[Wed Sep 30 00:57:33.445056 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.445333 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.463050 2026] [security2:error] [pid 186850:tid 187013] [client 213.136.69.135:54618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "aryy3U5Phls--iYlcKgCEAAAASs"], referer: binance.com
[Wed Sep 30 00:57:33.478623 2026] [security2:error] [pid 187269:tid 187490] [client 103.159.192.142:62218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy3dFcyhWr7HDzNGlzVgAAAmg"]
[Wed Sep 30 00:57:33.478722 2026] [security2:error] [pid 187269:tid 187490] [client 103.159.192.142:62218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy3dFcyhWr7HDzNGlzVgAAAmg"]
[Wed Sep 30 00:57:33.488451 2026] [security2:error] [pid 187269:tid 187492] [client 93.152.53.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryy3dFcyhWr7HDzNGlzVwAAAmo"]
[Wed Sep 30 00:57:33.537621 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.537908 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.552862 2026] [security2:error] [pid 187269:tid 187508] [client 105.112.178.79:38126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fcg.eid.mybluehost.me"] [uri "/.env"] [unique_id "aryy3dFcyhWr7HDzNGlzWQAAAno"]
[Wed Sep 30 00:57:33.578315 2026] [security2:error] [pid 187269:tid 187502] [client 43.104.4.199:2728] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "aryy3dFcyhWr7HDzNGlzWwAAAnQ"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:57:33.592547 2026] [security2:error] [pid 187269:tid 187371] [remote 64.23.166.180:39400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.enb.qiu.mybluehost.me"] [uri "/.env"] [unique_id "aryy3dFcyhWr7HDzNGlzXAACT14"]
[Wed Sep 30 00:57:33.611548 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25ldA==
[Wed Sep 30 00:57:33.611818 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L25ldA==
[Wed Sep 30 00:57:33.628429 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.628826 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.657837 2026] [security2:error] [pid 186850:tid 187026] [client 39.44.16.112:55581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy3U5Phls--iYlcKgCEwAAATg"]
[Wed Sep 30 00:57:33.659137 2026] [security2:error] [pid 186850:tid 187026] [client 39.44.16.112:55581] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy3U5Phls--iYlcKgCEwAAATg"]
[Wed Sep 30 00:57:33.659295 2026] [security2:error] [pid 187269:tid 187462] [client 20.219.2.60:36752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.craigbrownphd.com"] [uri "/wp-inic3.php"] [unique_id "aryy3dFcyhWr7HDzNGlzXgAAAkw"]
[Wed Sep 30 00:57:33.702580 2026] [security2:error] [pid 187269:tid 187525] [client 82.102.18.222:37596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryy3dFcyhWr7HDzNGlzXwAAAoo"]
[Wed Sep 30 00:57:33.718580 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.718836 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.799036 2026] [security2:error] [pid 186850:tid 187022] [client 4.196.65.241:19496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ccou.php"] [unique_id "aryy3U5Phls--iYlcKgCFwAAATQ"]
[Wed Sep 30 00:57:33.808672 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.808966 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.899752 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.900031 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:33.910939 2026] [security2:error] [pid 187269:tid 187480] [client 20.219.2.60:18834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/tfm.php"] [unique_id "aryy3dFcyhWr7HDzNGlzZwAAAl4"]
[Wed Sep 30 00:57:33.927169 2026] [security2:error] [pid 186850:tid 186989] [client 20.213.164.196:54663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/v4.php"] [unique_id "aryy3U5Phls--iYlcKgCGwAAARM"]
[Wed Sep 30 00:57:33.959765 2026] [security2:error] [pid 186850:tid 187043] [client 20.70.173.30:63702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/simple.php"] [unique_id "aryy3U5Phls--iYlcKgCHgAAAUk"]
[Wed Sep 30 00:57:33.991742 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:33.992060 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.042042 2026] [security2:error] [pid 187269:tid 187481] [client 82.102.18.222:37598] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryy3tFcyhWr7HDzNGlzcgAAAl8"]
[Wed Sep 30 00:57:34.081226 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.081480 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.087294 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:34.087549 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 00:57:34.089002 2026] [security2:error] [pid 187269:tid 187434] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy3tFcyhWr7HDzNGlzdgAAAjA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:34.109379 2026] [security2:error] [pid 187269:tid 187531] [client 117.72.168.90:47834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.168.72.117.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "aryy3tFcyhWr7HDzNGlzeAAAApA"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 00:57:34.168924 2026] [security2:error] [pid 186850:tid 187044] [client 45.156.62.96:57753] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryy3k5Phls--iYlcKgCIQAAAUo"]
[Wed Sep 30 00:57:34.176342 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.176594 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.265768 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.266043 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.357276 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.357548 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.361306 2026] [security2:error] [pid 187269:tid 187496] [client 82.102.18.222:37604] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryy3tFcyhWr7HDzNGlzhgAAAm4"]
[Wed Sep 30 00:57:34.449405 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.449673 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.537100 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.537363 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.586700 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L25ldA==
[Wed Sep 30 00:57:34.586984 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L25ldA==
[Wed Sep 30 00:57:34.630305 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.630581 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.637071 2026] [security2:error] [pid 187269:tid 187497] [client 20.213.164.196:15995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/albin.php"] [unique_id "aryy3tFcyhWr7HDzNGlzmgAAAm8"]
[Wed Sep 30 00:57:34.698640 2026] [security2:error] [pid 187269:tid 187449] [client 82.102.18.222:37620] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryy3tFcyhWr7HDzNGlznQAAAj8"]
[Wed Sep 30 00:57:34.706024 2026] [security2:error] [pid 187269:tid 187418] [client 20.219.19.141:57096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/177.php"] [unique_id "aryy3tFcyhWr7HDzNGlzngAAAiA"]
[Wed Sep 30 00:57:34.721292 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.721536 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.816019 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.816293 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.832802 2026] [security2:error] [pid 187269:tid 187408] [client 45.138.12.43:29412] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.psrecruit.org.uk"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy3tFcyhWr7HDzNGlzpQAAAhY"]
[Wed Sep 30 00:57:34.841053 2026] [security2:error] [pid 186850:tid 187077] [client 136.242.107.146:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryy3k5Phls--iYlcKgCMAAAAWs"]
[Wed Sep 30 00:57:34.907686 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:34.908087 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:34.921161 2026] [security2:error] [pid 187269:tid 187386] [remote 220.181.108.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryy3tFcyhWr7HDzNGlzrQACkm0"]
[Wed Sep 30 00:57:35.001750 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.002216 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.013786 2026] [security2:error] [pid 187269:tid 187416] [client 20.213.164.196:54702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/atkno.php"] [unique_id "aryy39FcyhWr7HDzNGlztAAAAh4"]
[Wed Sep 30 00:57:35.015696 2026] [security2:error] [pid 187269:tid 187509] [client 223.235.102.107:32041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy39FcyhWr7HDzNGlztQAAAns"]
[Wed Sep 30 00:57:35.015855 2026] [security2:error] [pid 187269:tid 187509] [client 223.235.102.107:32041] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy39FcyhWr7HDzNGlztQAAAns"]
[Wed Sep 30 00:57:35.022410 2026] [security2:error] [pid 187269:tid 187413] [client 82.102.18.222:37628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryy39FcyhWr7HDzNGlztgAAAhs"]
[Wed Sep 30 00:57:35.036609 2026] [security2:error] [pid 187269:tid 187388] [remote 220.181.108.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryy39FcyhWr7HDzNGlztwACkG8"]
[Wed Sep 30 00:57:35.090770 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.091074 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.094538 2026] [security2:error] [pid 187269:tid 187472] [client 20.28.180.172:34278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/632e19b36dindex.php"] [unique_id "aryy39FcyhWr7HDzNGlzuwAAAlY"]
[Wed Sep 30 00:57:35.095994 2026] [security2:error] [pid 187269:tid 187529] [client 20.219.2.60:18918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/a4.php"] [unique_id "aryy39FcyhWr7HDzNGlzvAAAAo4"]
[Wed Sep 30 00:57:35.096520 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.79.13.78:37104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:35.096918 2026] [access_compat:error] [pid 187269:tid 187502] [client 47.79.13.78:37104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:35.102347 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 00:57:35.102599 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 00:57:35.182009 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.182271 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.271880 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.272182 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.333193 2026] [security2:error] [pid 187269:tid 187423] [client 82.102.18.222:37638] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryy39FcyhWr7HDzNGlzyAAAAiU"]
[Wed Sep 30 00:57:35.357499 2026] [security2:error] [pid 186850:tid 186980] [client 4.240.25.22:21913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/f35.update.php"] [unique_id "aryy305Phls--iYlcKgCPAAAAQo"]
[Wed Sep 30 00:57:35.361892 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.362265 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.382899 2026] [security2:error] [pid 186850:tid 187000] [client 105.112.178.79:38128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fcg.rdg.mybluehost.me"] [uri "/.env"] [unique_id "aryy305Phls--iYlcKgCPgAAAR4"]
[Wed Sep 30 00:57:35.428124 2026] [security2:error] [pid 186850:tid 187079] [client 116.72.182.19:61463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy305Phls--iYlcKgCQAAAAW0"]
[Wed Sep 30 00:57:35.428230 2026] [security2:error] [pid 186850:tid 187079] [client 116.72.182.19:61463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy305Phls--iYlcKgCQAAAAW0"]
[Wed Sep 30 00:57:35.452998 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.453276 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.511861 2026] [security2:error] [pid 187269:tid 187498] [client 45.138.12.32:16654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tsa.ysf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy39FcyhWr7HDzNGlz0gAAAnA"]
[Wed Sep 30 00:57:35.544669 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.544960 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.547072 2026] [security2:error] [pid 187269:tid 187497] [client 20.213.164.196:15946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/gptsh.php"] [unique_id "aryy39FcyhWr7HDzNGlz1QAAAm8"]
[Wed Sep 30 00:57:35.618326 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:57:35.618588 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL25ldA==
[Wed Sep 30 00:57:35.634048 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.634303 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.643629 2026] [security2:error] [pid 186850:tid 186988] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy305Phls--iYlcKgCRAAAARI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:35.675601 2026] [security2:error] [pid 186850:tid 187085] [client 223.181.60.167:9020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy305Phls--iYlcKgCSAAAAXM"]
[Wed Sep 30 00:57:35.675688 2026] [security2:error] [pid 186850:tid 187085] [client 223.181.60.167:9020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy305Phls--iYlcKgCSAAAAXM"]
[Wed Sep 30 00:57:35.688687 2026] [security2:error] [pid 187269:tid 187424] [client 82.102.18.222:37640] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryy39FcyhWr7HDzNGlz3QAAAiY"]
[Wed Sep 30 00:57:35.725543 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.725801 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.816573 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.816861 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.900503 2026] [security2:error] [pid 186850:tid 187040] [client 20.194.30.107:10024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/yawa.php"] [unique_id "aryy305Phls--iYlcKgCTQAAAUY"]
[Wed Sep 30 00:57:35.909034 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:35.909302 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:35.912597 2026] [security2:error] [pid 187269:tid 187472] [client 93.114.137.183:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryy39FcyhWr7HDzNGlz9QAAAlY"]
[Wed Sep 30 00:57:36.007744 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.008036 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.013373 2026] [security2:error] [pid 186850:tid 187026] [client 20.219.2.60:19430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wen.php"] [unique_id "aryy4E5Phls--iYlcKgCUAAAATg"]
[Wed Sep 30 00:57:36.028773 2026] [security2:error] [pid 186850:tid 186993] [client 49.43.163.212:59388] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy4E5Phls--iYlcKgCUgAAARc"]
[Wed Sep 30 00:57:36.028894 2026] [security2:error] [pid 186850:tid 186993] [client 49.43.163.212:59388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy4E5Phls--iYlcKgCUgAAARc"]
[Wed Sep 30 00:57:36.032884 2026] [security2:error] [pid 187269:tid 187488] [client 82.102.18.222:37646] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryy4NFcyhWr7HDzNGl0BAAAAmY"]
[Wed Sep 30 00:57:36.099403 2026] [access_compat:error] [pid 187269:tid 187522] [client 47.79.13.75:37864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:36.099845 2026] [access_compat:error] [pid 187269:tid 187522] [client 47.79.13.75:37864] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:36.099846 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.100292 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.118382 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdA==
[Wed Sep 30 00:57:36.118643 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdA==
[Wed Sep 30 00:57:36.189970 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.190240 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.254309 2026] [security2:error] [pid 186850:tid 187057] [client 45.138.12.32:16762] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kox.sul.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy4E5Phls--iYlcKgCWAAAAVc"]
[Wed Sep 30 00:57:36.280227 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.280486 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.291106 2026] [autoindex:error] [pid 187269:tid 187499] [client 17.166.22.212:0] AH01276: Cannot serve directory /home4/golden38/public_html/tiny_mce/plugins/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:36.351873 2026] [security2:error] [pid 187269:tid 187464] [client 82.102.18.222:37662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.lhs.icl.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryy4NFcyhWr7HDzNGl0IgAAAk4"]
[Wed Sep 30 00:57:36.371561 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.371829 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.461803 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.462075 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.553376 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.553668 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.569361 2026] [security2:error] [pid 187269:tid 187414] [client 4.196.65.241:2070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/d62.php"] [unique_id "aryy4NFcyhWr7HDzNGl0NgAAAhw"]
[Wed Sep 30 00:57:36.619525 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:36.619781 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3QvcHJvYw==
[Wed Sep 30 00:57:36.625935 2026] [security2:error] [pid 186850:tid 187017] [client 168.227.181.74:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryy4E5Phls--iYlcKgCYAAAAS8"]
[Wed Sep 30 00:57:36.645115 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.645389 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.720419 2026] [security2:error] [pid 187269:tid 187408] [client 116.197.133.25:58998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy4NFcyhWr7HDzNGl0PQAAAhY"]
[Wed Sep 30 00:57:36.720549 2026] [security2:error] [pid 187269:tid 187408] [client 116.197.133.25:58998] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy4NFcyhWr7HDzNGl0PQAAAhY"]
[Wed Sep 30 00:57:36.737400 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.737668 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:1863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.782108 2026] [security2:error] [pid 187269:tid 187470] [client 20.213.164.196:35827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/rithin.php"] [unique_id "aryy4NFcyhWr7HDzNGl0QQAAAlQ"]
[Wed Sep 30 00:57:36.827752 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.828038 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.922800 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:36.923203 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:36.947500 2026] [security2:error] [pid 187269:tid 187506] [client 45.138.12.32:35688] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kqr.myw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy4NFcyhWr7HDzNGl0SgAAAng"]
[Wed Sep 30 00:57:37.012216 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.012497 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.099879 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.100144 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.109115 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdA==
[Wed Sep 30 00:57:37.109461 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdA==
[Wed Sep 30 00:57:37.121657 2026] [security2:error] [pid 187269:tid 187515] [client 20.219.19.141:23961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/ccc.php"] [unique_id "aryy4dFcyhWr7HDzNGl0VAAAAoE"]
[Wed Sep 30 00:57:37.129522 2026] [security2:error] [pid 187269:tid 187451] [client 216.73.216.46:1863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy4dFcyhWr7HDzNGl0VQAAAkE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnkxOTA%3D
[Wed Sep 30 00:57:37.191002 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.191273 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.212060 2026] [security2:error] [pid 187269:tid 187458] [client 155.190.6.18:53264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy4dFcyhWr7HDzNGl0WAAAAkg"]
[Wed Sep 30 00:57:37.212256 2026] [security2:error] [pid 187269:tid 187458] [client 155.190.6.18:53264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy4dFcyhWr7HDzNGl0WAAAAkg"]
[Wed Sep 30 00:57:37.282244 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.282516 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.354147 2026] [security2:error] [pid 186850:tid 187029] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy4U5Phls--iYlcKgCcgAAATs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:37.376024 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.376308 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.395338 2026] [security2:error] [pid 187269:tid 187474] [client 20.219.2.60:18912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ms.php"] [unique_id "aryy4dFcyhWr7HDzNGl0awAAAlg"]
[Wed Sep 30 00:57:37.436179 2026] [security2:error] [pid 187269:tid 187516] [client 20.194.30.107:17303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/dronishness.php"] [unique_id "aryy4dFcyhWr7HDzNGl0bgAAAoI"]
[Wed Sep 30 00:57:37.527637 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.176:49770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:37.528089 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.176:49770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:37.595960 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 00:57:37.596261 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 00:57:37.605205 2026] [security2:error] [pid 187269:tid 187408] [client 104.28.254.46:59328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/.env.old"] [unique_id "aryy4dFcyhWr7HDzNGl0dQAAAhY"], referer: https://www.google.com/search?q=website-7bb5852f.geyserjz.com
[Wed Sep 30 00:57:37.613301 2026] [security2:error] [pid 186850:tid 186910] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryy4U5Phls--iYlcKgCewABCzs"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D87687
[Wed Sep 30 00:57:37.638607 2026] [security2:error] [pid 187269:tid 187513] [client 4.196.65.241:64147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/kbqhb.php"] [unique_id "aryy4dFcyhWr7HDzNGl0dwAAAn8"]
[Wed Sep 30 00:57:37.648937 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.649380 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.683229 2026] [security2:error] [pid 187269:tid 187487] [client 104.28.222.47:55732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "website-7bb5852f.geyserjz.com"] [uri "/.env.bak"] [unique_id "aryy4dFcyhWr7HDzNGl0hAAAAmU"]
[Wed Sep 30 00:57:37.737151 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.737421 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.830943 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.831217 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:37.924673 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:37.925123 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.014041 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.014426 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.020574 2026] [security2:error] [pid 187269:tid 187491] [client 93.152.76.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryy4tFcyhWr7HDzNGl0mgAAAmk"]
[Wed Sep 30 00:57:38.079084 2026] [http2:warn] [pid 178882:tid 179305] [client 40.77.167.130:22996] h2_stream(178882-968-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 00:57:38.102655 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.102974 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.122516 2026] [security2:error] [pid 187269:tid 187481] [client 4.196.65.241:27304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/yachi.php"] [unique_id "aryy4tFcyhWr7HDzNGl0oQAAAl8"]
[Wed Sep 30 00:57:38.124425 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:57:38.124663 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 00:57:38.129132 2026] [security2:error] [pid 186850:tid 187016] [client 20.213.164.196:35781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/il.php"] [unique_id "aryy4k5Phls--iYlcKgCmAAAAS4"]
[Wed Sep 30 00:57:38.193581 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.193841 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.200316 2026] [access_compat:error] [pid 187269:tid 187528] [client 47.79.13.37:50348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:38.200582 2026] [access_compat:error] [pid 187269:tid 187528] [client 47.79.13.37:50348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:38.227383 2026] [security2:error] [pid 187269:tid 187422] [client 213.35.101.27:52663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.101.35.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opryidaho.com"] [uri "/wp-links-opml.php"] [unique_id "aryy4tFcyhWr7HDzNGl0qAAAAiQ"]
[Wed Sep 30 00:57:38.285725 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.286192 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.298016 2026] [security2:error] [pid 187269:tid 187467] [client 177.22.181.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryy4tFcyhWr7HDzNGl0rQAAAlE"]
[Wed Sep 30 00:57:38.380182 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.380470 2026] [access_compat:error] [pid 186850:tid 187100] [client 47.79.13.177:38202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:38.380637 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.380923 2026] [access_compat:error] [pid 186850:tid 187100] [client 47.79.13.177:38202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:38.466568 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.467016 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.559683 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.560138 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.560235 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.19.141:23946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/0xD.php"] [unique_id "aryy4tFcyhWr7HDzNGl0vgAAAlU"]
[Wed Sep 30 00:57:38.620793 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L25ldA==
[Wed Sep 30 00:57:38.621074 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L25ldA==
[Wed Sep 30 00:57:38.647735 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.648013 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.650519 2026] [security2:error] [pid 187269:tid 187503] [client 182.69.182.151:13865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0wgAAAnU"]
[Wed Sep 30 00:57:38.650612 2026] [security2:error] [pid 187269:tid 187503] [client 182.69.182.151:13865] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0wgAAAnU"]
[Wed Sep 30 00:57:38.672142 2026] [security2:error] [pid 187269:tid 187497] [client 139.135.34.150:21480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.34.135.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0wwAAAm8"]
[Wed Sep 30 00:57:38.672322 2026] [security2:error] [pid 187269:tid 187497] [client 139.135.34.150:21480] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0wwAAAm8"]
[Wed Sep 30 00:57:38.737950 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.738232 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.742187 2026] [security2:error] [pid 187269:tid 187444] [client 20.213.164.196:35830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/1klopedf.php"] [unique_id "aryy4tFcyhWr7HDzNGl0xwAAAjo"]
[Wed Sep 30 00:57:38.759356 2026] [security2:error] [pid 187269:tid 187519] [client 20.219.2.60:19364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/hplfuns.php"] [unique_id "aryy4tFcyhWr7HDzNGl0yAAAAoU"]
[Wed Sep 30 00:57:38.808394 2026] [security2:error] [pid 187269:tid 187505] [client 103.241.204.139:51941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0zwAAAnc"]
[Wed Sep 30 00:57:38.813291 2026] [security2:error] [pid 187269:tid 187505] [client 103.241.204.139:51941] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy4tFcyhWr7HDzNGl0zwAAAnc"]
[Wed Sep 30 00:57:38.827782 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.828049 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:38.894245 2026] [security2:error] [pid 187269:tid 187415] [client 20.28.180.172:34264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/82.php"] [unique_id "aryy4tFcyhWr7HDzNGl02gAAAh0"]
[Wed Sep 30 00:57:38.920818 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:38.921176 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.016223 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.016499 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.070259 2026] [security2:error] [pid 187269:tid 187448] [client 116.193.128.26:59351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl05wAAAj4"]
[Wed Sep 30 00:57:39.070368 2026] [security2:error] [pid 187269:tid 187448] [client 116.193.128.26:59351] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl05wAAAj4"]
[Wed Sep 30 00:57:39.103001 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.103270 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.107005 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25ldA==
[Wed Sep 30 00:57:39.107379 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L25ldA==
[Wed Sep 30 00:57:39.192723 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.193107 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.273165 2026] [security2:error] [pid 187269:tid 187504] [client 37.41.16.35:63880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl0-QAAAnY"]
[Wed Sep 30 00:57:39.273291 2026] [security2:error] [pid 187269:tid 187504] [client 37.41.16.35:63880] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl0-QAAAnY"]
[Wed Sep 30 00:57:39.288272 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.288686 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.379695 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.380110 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:17011] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.383313 2026] [security2:error] [pid 187269:tid 187534] [client 4.240.25.22:11537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryy49FcyhWr7HDzNGl1BgAAApM"]
[Wed Sep 30 00:57:39.437267 2026] [security2:error] [pid 187269:tid 187465] [client 152.59.169.65:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl1CgAAAk8"]
[Wed Sep 30 00:57:39.437395 2026] [security2:error] [pid 187269:tid 187465] [client 152.59.169.65:53320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl1CgAAAk8"]
[Wed Sep 30 00:57:39.456898 2026] [security2:error] [pid 187269:tid 187532] [client 103.159.192.142:62628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl1DAAAApE"]
[Wed Sep 30 00:57:39.457020 2026] [security2:error] [pid 187269:tid 187532] [client 103.159.192.142:62628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy49FcyhWr7HDzNGl1DAAAApE"]
[Wed Sep 30 00:57:39.467338 2026] [security2:error] [pid 186850:tid 186937] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy405Phls--iYlcKgCswABJlY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255492&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:39.467371 2026] [security2:error] [pid 186850:tid 186937] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy405Phls--iYlcKgCswABJlY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255492&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:39.519592 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.519866 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.532826 2026] [security2:error] [pid 187269:tid 187454] [client 20.198.74.230:41403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/sss.php"] [unique_id "aryy49FcyhWr7HDzNGl1EQAAAkQ"]
[Wed Sep 30 00:57:39.609760 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.610045 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.614423 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:57:39.614675 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L25ldA==
[Wed Sep 30 00:57:39.621846 2026] [security2:error] [pid 187269:tid 187514] [client 20.213.164.196:54083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/zv.php"] [unique_id "aryy49FcyhWr7HDzNGl1HwAAAoA"]
[Wed Sep 30 00:57:39.702391 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.702649 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.740719 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.741019 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.785881 2026] [security2:error] [pid 187269:tid 187408] [client 216.73.216.46:17011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy49FcyhWr7HDzNGl1KQAAAhY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvbWVtb3J5NDc2
[Wed Sep 30 00:57:39.806367 2026] [security2:error] [pid 187269:tid 187469] [client 20.198.74.230:23877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/sm.php"] [unique_id "aryy49FcyhWr7HDzNGl1KgAAAlM"]
[Wed Sep 30 00:57:39.831883 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.832158 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:39.925165 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:39.925614 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.013144 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.013427 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.052609 2026] [security2:error] [pid 186850:tid 187097] [client 103.172.210.103:52558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgCwgAAAX8"]
[Wed Sep 30 00:57:40.052734 2026] [security2:error] [pid 186850:tid 187097] [client 103.172.210.103:52558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgCwgAAAX8"]
[Wed Sep 30 00:57:40.095723 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:57:40.096038 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L25ldA==
[Wed Sep 30 00:57:40.102348 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.102607 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.126483 2026] [security2:error] [pid 187269:tid 187457] [client 20.219.2.60:19409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/tfm.php"] [unique_id "aryy5NFcyhWr7HDzNGl1NgAAAkc"]
[Wed Sep 30 00:57:40.155567 2026] [security2:error] [pid 187269:tid 187467] [client 45.138.12.40:62704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hannahjune.com"] [uri "/wp-links-opml.php"] [unique_id "aryy5NFcyhWr7HDzNGl1OQAAAlE"]
[Wed Sep 30 00:57:40.182777 2026] [security2:error] [pid 187269:tid 187414] [client 150.107.232.159:36020] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy5NFcyhWr7HDzNGl1OgAAAhw"]
[Wed Sep 30 00:57:40.182912 2026] [security2:error] [pid 187269:tid 187414] [client 150.107.232.159:36020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy5NFcyhWr7HDzNGl1OgAAAhw"]
[Wed Sep 30 00:57:40.194012 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.194272 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.286155 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.286461 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.380215 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.380659 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.406957 2026] [security2:error] [pid 187269:tid 187456] [client 4.240.25.22:43810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/xiugai.php"] [unique_id "aryy5NFcyhWr7HDzNGl1RAAAAkY"]
[Wed Sep 30 00:57:40.450561 2026] [security2:error] [pid 186850:tid 187079] [client 223.181.30.165:9089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgC2gAAAW0"]
[Wed Sep 30 00:57:40.450676 2026] [security2:error] [pid 186850:tid 187079] [client 223.181.30.165:9089] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgC2gAAAW0"]
[Wed Sep 30 00:57:40.467864 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.468150 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.561007 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.561289 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.635100 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:57:40.635376 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL25ldA==
[Wed Sep 30 00:57:40.652523 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.652836 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.740799 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.741077 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.766136 2026] [security2:error] [pid 186850:tid 187085] [client 202.179.95.79:55702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgC6QAAAXM"]
[Wed Sep 30 00:57:40.766270 2026] [security2:error] [pid 186850:tid 187085] [client 202.179.95.79:55702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy5E5Phls--iYlcKgC6QAAAXM"]
[Wed Sep 30 00:57:40.832389 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.832652 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.925048 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:40.925218 2026] [security2:error] [pid 186850:tid 187019] [client 20.213.164.196:15970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/zv.update.php"] [unique_id "aryy5E5Phls--iYlcKgC8QAAATE"]
[Wed Sep 30 00:57:40.925370 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:40.967719 2026] [security2:error] [pid 187269:tid 187481] [client 49.36.41.37:49577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy5NFcyhWr7HDzNGl1UwAAAl8"]
[Wed Sep 30 00:57:40.967891 2026] [security2:error] [pid 187269:tid 187481] [client 49.36.41.37:49577] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy5NFcyhWr7HDzNGl1UwAAAl8"]
[Wed Sep 30 00:57:41.018215 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.018481 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.019135 2026] [security2:error] [pid 186850:tid 187084] [client 4.196.65.241:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/goeu.php"] [unique_id "aryy5U5Phls--iYlcKgC9QAAAXI"]
[Wed Sep 30 00:57:41.019455 2026] [security2:error] [pid 186850:tid 187020] [client 151.244.39.139:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryy5U5Phls--iYlcKgC9AAAATI"]
[Wed Sep 30 00:57:41.111553 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.111994 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.138601 2026] [access_compat:error] [pid 186850:tid 187028] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:57:41.138915 2026] [access_compat:error] [pid 186850:tid 187028] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L25ldA==
[Wed Sep 30 00:57:41.163638 2026] [core:error] [pid 187269:tid 187439] [client 104.234.32.215:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:57:41.163659 2026] [core:error] [pid 187269:tid 187439] [client 104.234.32.215:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:57:41.180144 2026] [security2:error] [pid 187269:tid 187444] [client 45.138.12.40:52812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hvh.btm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy5dFcyhWr7HDzNGl1XAAAAjo"]
[Wed Sep 30 00:57:41.196845 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.197096 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.289071 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.289363 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.306115 2026] [security2:error] [pid 187269:tid 187412] [client 20.219.19.141:23971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/sallu.php"] [unique_id "aryy5dFcyhWr7HDzNGl1YQAAAho"]
[Wed Sep 30 00:57:41.356092 2026] [security2:error] [pid 187269:tid 187510] [client 4.240.25.22:63764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "aryy5dFcyhWr7HDzNGl1YgAAAnw"]
[Wed Sep 30 00:57:41.379946 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.380208 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.467863 2026] [security2:error] [pid 186850:tid 187017] [client 152.59.165.7:50917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy5U5Phls--iYlcKgDAwAAAS8"]
[Wed Sep 30 00:57:41.467956 2026] [security2:error] [pid 186850:tid 187017] [client 152.59.165.7:50917] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy5U5Phls--iYlcKgDAwAAAS8"]
[Wed Sep 30 00:57:41.474222 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.474609 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.505050 2026] [security2:error] [pid 187269:tid 187519] [client 20.213.164.196:15990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/wquosqsi.php"] [unique_id "aryy5dFcyhWr7HDzNGl1aAAAAoU"]
[Wed Sep 30 00:57:41.563820 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.564089 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.585230 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:57:41.585489 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L25ldA==
[Wed Sep 30 00:57:41.653164 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.653432 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.748686 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.748969 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.839016 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.839285 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.864419 2026] [security2:error] [pid 187269:tid 187500] [client 161.118.214.16:59415] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.appludi.coimage.net"] [uri "/"] [unique_id "aryy5dFcyhWr7HDzNGl1cAAAAnI"]
[Wed Sep 30 00:57:41.874015 2026] [security2:error] [pid 187269:tid 187461] [client 161.118.214.16:59412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.appludi.com"] [uri "/"] [unique_id "aryy5dFcyhWr7HDzNGl1dQAAAks"]
[Wed Sep 30 00:57:41.931062 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:41.931502 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:41.960213 2026] [access_compat:error] [pid 187269:tid 187525] [client 47.79.13.172:50546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:41.960477 2026] [access_compat:error] [pid 187269:tid 187525] [client 47.79.13.172:50546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:41.991128 2026] [security2:error] [pid 187269:tid 187485] [client 20.194.30.107:25906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/well.php"] [unique_id "aryy5dFcyhWr7HDzNGl1fAAAAmM"]
[Wed Sep 30 00:57:42.021142 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.021555 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.066213 2026] [security2:error] [pid 187269:tid 187511] [client 203.122.45.246:58978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy5tFcyhWr7HDzNGl1gQAAAn0"]
[Wed Sep 30 00:57:42.066308 2026] [security2:error] [pid 187269:tid 187511] [client 203.122.45.246:58978] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy5tFcyhWr7HDzNGl1gQAAAn0"]
[Wed Sep 30 00:57:42.068289 2026] [security2:error] [pid 187269:tid 187511] [client 54.37.86.225:43162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nj-ccc.org"] [uri "/robots.txt"] [unique_id "aryy5tFcyhWr7HDzNGl1ggAAAn0"]
[Wed Sep 30 00:57:42.068385 2026] [security2:error] [pid 187269:tid 187511] [client 54.37.86.225:43162] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "nj-ccc.org"] [uri "/robots.txt"] [unique_id "aryy5tFcyhWr7HDzNGl1ggAAAn0"]
[Wed Sep 30 00:57:42.110286 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.110528 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.115779 2026] [security2:error] [pid 186850:tid 187007] [client 20.194.30.107:17515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/reviall.php"] [unique_id "aryy5k5Phls--iYlcKgDGQAAASU"]
[Wed Sep 30 00:57:42.122515 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:57:42.122762 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUwL25ldA==
[Wed Sep 30 00:57:42.150207 2026] [security2:error] [pid 186850:tid 186997] [client 20.198.74.230:34843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/or.php"] [unique_id "aryy5k5Phls--iYlcKgDGwAAARs"]
[Wed Sep 30 00:57:42.176309 2026] [security2:error] [pid 187269:tid 187408] [client 20.219.2.60:19438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/8573.php"] [unique_id "aryy5tFcyhWr7HDzNGl1jAAAAhY"]
[Wed Sep 30 00:57:42.203286 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.203573 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.274860 2026] [security2:error] [pid 187269:tid 187513] [client 104.28.254.46:42759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.254.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/wp-config.php"] [unique_id "aryy5tFcyhWr7HDzNGl1kAAAAn8"]
[Wed Sep 30 00:57:42.292938 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.293211 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.297752 2026] [security2:error] [pid 186850:tid 187038] [client 104.28.222.47:52553] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wildingproperties.magia.vegas"] [uri "/wp-config.php.bak"] [unique_id "aryy5k5Phls--iYlcKgDJwAAAUQ"], referer: https://www.google.com/search?q=wildingproperties.magia.vegas
[Wed Sep 30 00:57:42.326244 2026] [security2:error] [pid 186850:tid 187043] [client 104.28.222.47:52561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/wp-config.php"] [unique_id "aryy5k5Phls--iYlcKgDLAAAAUk"]
[Wed Sep 30 00:57:42.342932 2026] [security2:error] [pid 186850:tid 187093] [client 104.28.254.46:56726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wildingproperties.com"] [uri "/wp-config.php.bak"] [unique_id "aryy5k5Phls--iYlcKgDLgAAAXs"]
[Wed Sep 30 00:57:42.393934 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.394211 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.477006 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.477424 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.483546 2026] [security2:error] [pid 187269:tid 187407] [client 20.213.164.196:54691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/asset.php"] [unique_id "aryy5tFcyhWr7HDzNGl1pQAAAhU"]
[Wed Sep 30 00:57:42.562213 2026] [access_compat:error] [pid 186850:tid 187042] [client 47.79.13.1:43146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.562507 2026] [access_compat:error] [pid 186850:tid 187042] [client 47.79.13.1:43146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.568507 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.568781 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.572069 2026] [security2:error] [pid 187269:tid 187473] [client 72.255.10.32:62420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy5tFcyhWr7HDzNGl1qAAAAlc"]
[Wed Sep 30 00:57:42.572208 2026] [security2:error] [pid 187269:tid 187473] [client 72.255.10.32:62420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy5tFcyhWr7HDzNGl1qAAAAlc"]
[Wed Sep 30 00:57:42.585539 2026] [autoindex:error] [pid 186850:tid 186968] [remote 93.152.209.11:24086] AH01276: Cannot serve directory /home4/cqrjaimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:42.619342 2026] [access_compat:error] [pid 186850:tid 187062] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdA==
[Wed Sep 30 00:57:42.619606 2026] [access_compat:error] [pid 186850:tid 187062] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdA==
[Wed Sep 30 00:57:42.636769 2026] [access_compat:error] [pid 187269:tid 187533] [client 47.79.13.64:60108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.637064 2026] [access_compat:error] [pid 187269:tid 187533] [client 47.79.13.64:60108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.642649 2026] [security2:error] [pid 187269:tid 187449] [client 20.194.30.107:24838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/222.php"] [unique_id "aryy5tFcyhWr7HDzNGl1qwAAAj8"]
[Wed Sep 30 00:57:42.658429 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.658690 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.664871 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.82.11.32:60770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.665294 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.82.11.32:60770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:42.749225 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.749664 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.810156 2026] [security2:error] [pid 186850:tid 186898] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy5k5Phls--iYlcKgDPgABFS8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255429&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:42.810206 2026] [security2:error] [pid 186850:tid 186898] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy5k5Phls--iYlcKgDPgABFS8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255429&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:57:42.838156 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.838427 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.844044 2026] [security2:error] [pid 187269:tid 187497] [client 104.28.222.47:52340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env"] [unique_id "aryy5tFcyhWr7HDzNGl1uQAAAm8"], referer: http://wildingproperties.magia.vegas/.env
[Wed Sep 30 00:57:42.928605 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:42.928871 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:42.951700 2026] [security2:error] [pid 187269:tid 187423] [client 179.48.172.111:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryy5tFcyhWr7HDzNGl10wAAAiU"]
[Wed Sep 30 00:57:42.968340 2026] [security2:error] [pid 187269:tid 187520] [client 104.28.254.46:56718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.backup"] [unique_id "aryy5tFcyhWr7HDzNGl13AAAAoY"], referer: http://wildingproperties.com/.env.backup
[Wed Sep 30 00:57:43.021785 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.022054 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.081778 2026] [access_compat:error] [pid 186850:tid 187082] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdA==
[Wed Sep 30 00:57:43.082079 2026] [access_compat:error] [pid 186850:tid 187082] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdA==
[Wed Sep 30 00:57:43.091688 2026] [security2:error] [pid 187269:tid 187461] [client 104.28.222.47:52354] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.backup"] [unique_id "aryy59FcyhWr7HDzNGl16gAAAks"], referer: http://wildingproperties.magia.vegas/.env.backup
[Wed Sep 30 00:57:43.114567 2026] [security2:error] [pid 186850:tid 187048] [client 43.227.131.37:46416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy505Phls--iYlcKgDXQAAAU4"]
[Wed Sep 30 00:57:43.114704 2026] [security2:error] [pid 186850:tid 187048] [client 43.227.131.37:46416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy505Phls--iYlcKgDXQAAAU4"]
[Wed Sep 30 00:57:43.206369 2026] [security2:error] [pid 187269:tid 187511] [client 104.28.254.46:56732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env"] [unique_id "aryy59FcyhWr7HDzNGl18AAAAn0"], referer: http://wildingproperties.com/.env
[Wed Sep 30 00:57:43.253354 2026] [security2:error] [pid 187269:tid 187502] [client 20.219.19.141:23972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/ops.php"] [unique_id "aryy59FcyhWr7HDzNGl18gAAAnQ"]
[Wed Sep 30 00:57:43.290973 2026] [security2:error] [pid 187269:tid 187462] [client 20.194.30.107:25195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/samll.php"] [unique_id "aryy59FcyhWr7HDzNGl18wAAAkw"]
[Wed Sep 30 00:57:43.296647 2026] [security2:error] [pid 187269:tid 187420] [client 20.213.164.196:15957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/cued.php"] [unique_id "aryy59FcyhWr7HDzNGl19AAAAiI"]
[Wed Sep 30 00:57:43.307099 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.307386 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.327903 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.328151 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.332431 2026] [access_compat:error] [pid 187269:tid 187466] [client 220.181.108.81:38219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.332686 2026] [access_compat:error] [pid 187269:tid 187466] [client 220.181.108.81:38219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.339791 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.340062 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.384894 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.385164 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.413172 2026] [security2:error] [pid 187269:tid 187534] [client 20.219.2.60:19400] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.crictconsulting.com"] [uri "/1.php"] [unique_id "aryy59FcyhWr7HDzNGl1-wAAApM"]
[Wed Sep 30 00:57:43.413278 2026] [security2:error] [pid 187269:tid 187534] [client 20.219.2.60:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/1.php"] [unique_id "aryy59FcyhWr7HDzNGl1-wAAApM"]
[Wed Sep 30 00:57:43.490732 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.491015 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.567535 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.567967 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.614607 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdA==
[Wed Sep 30 00:57:43.615071 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdA==
[Wed Sep 30 00:57:43.659774 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.660219 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.748433 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.749037 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.755316 2026] [security2:error] [pid 187269:tid 187532] [client 4.196.65.241:19483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/tinysd.php"] [unique_id "aryy59FcyhWr7HDzNGl2DAAAApE"]
[Wed Sep 30 00:57:43.798800 2026] [security2:error] [pid 186850:tid 186997] [client 49.205.105.16:15223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy505Phls--iYlcKgDcQAAARs"]
[Wed Sep 30 00:57:43.798968 2026] [security2:error] [pid 186850:tid 186997] [client 49.205.105.16:15223] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy505Phls--iYlcKgDcQAAARs"]
[Wed Sep 30 00:57:43.838845 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.839118 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.932159 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:43.932481 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:43.941802 2026] [security2:error] [pid 186850:tid 187012] [client 20.28.180.172:34268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/yyjBRcdefault.php"] [unique_id "aryy505Phls--iYlcKgDeAAAASo"]
[Wed Sep 30 00:57:44.025785 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.026244 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.100454 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:57:44.100737 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL25ldA==
[Wed Sep 30 00:57:44.112450 2026] [security2:error] [pid 186850:tid 187099] [client 20.213.164.196:35780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/sd.php"] [unique_id "aryy6E5Phls--iYlcKgDfQAAAYE"]
[Wed Sep 30 00:57:44.112502 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.112796 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.145458 2026] [security2:error] [pid 187269:tid 187454] [client 152.39.180.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryy6NFcyhWr7HDzNGl2IQAAAkQ"]
[Wed Sep 30 00:57:44.203568 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.203845 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:42827] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.441337 2026] [security2:error] [pid 187269:tid 187533] [client 20.194.30.107:17374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp.php"] [unique_id "aryy6NFcyhWr7HDzNGl2MAAAApI"]
[Wed Sep 30 00:57:44.516254 2026] [security2:error] [pid 187269:tid 187494] [client 39.44.16.112:56267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy6NFcyhWr7HDzNGl2MwAAAmw"]
[Wed Sep 30 00:57:44.516864 2026] [security2:error] [pid 187269:tid 187494] [client 39.44.16.112:56267] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy6NFcyhWr7HDzNGl2MwAAAmw"]
[Wed Sep 30 00:57:44.578889 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.579296 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.591148 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL25ldA==
[Wed Sep 30 00:57:44.591442 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:42408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL25ldA==
[Wed Sep 30 00:57:44.612482 2026] [security2:error] [pid 186850:tid 187105] [client 216.73.216.46:42827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy6E5Phls--iYlcKgDiAAAAYc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODQvbm9kZTAvbWVtb3J5MzAw
[Wed Sep 30 00:57:44.661339 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.661617 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.750484 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.750744 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:34614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.768882 2026] [security2:error] [pid 186850:tid 187025] [client 20.219.19.141:23956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/mac.php"] [unique_id "aryy6E5Phls--iYlcKgDkQAAATc"]
[Wed Sep 30 00:57:44.797237 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.797503 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.818944 2026] [security2:error] [pid 186850:tid 187018] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy6E5Phls--iYlcKgDlAAAATA"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:44.834437 2026] [security2:error] [pid 186850:tid 186999] [client 216.73.216.46:34614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy6E5Phls--iYlcKgDlQAAAR0"]
[Wed Sep 30 00:57:44.876668 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.876932 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:37141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.913422 2026] [security2:error] [pid 187269:tid 187505] [client 20.219.2.60:19414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/term.php"] [unique_id "aryy6NFcyhWr7HDzNGl2QQAAAnc"]
[Wed Sep 30 00:57:44.969819 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.970084 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:44.988292 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:44.988733 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.026290 2026] [security2:error] [pid 187269:tid 187424] [client 20.213.164.196:15965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/ans.php"] [unique_id "aryy6dFcyhWr7HDzNGl2RgAAAiY"]
[Wed Sep 30 00:57:45.061435 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.061883 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.112488 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.112751 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.173623 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL25ldA==
[Wed Sep 30 00:57:45.174056 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL25ldA==
[Wed Sep 30 00:57:45.202361 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.202643 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.224528 2026] [security2:error] [pid 187269:tid 187473] [client 78.138.127.62:58400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.127.138.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "aryy6dFcyhWr7HDzNGl2UQAAAlc"], referer: https://www.clenbuterol4you.com/
[Wed Sep 30 00:57:45.228948 2026] [security2:error] [pid 187269:tid 187430] [client 20.194.30.107:25179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/ohct.php"] [unique_id "aryy6dFcyhWr7HDzNGl2VAAAAiw"]
[Wed Sep 30 00:57:45.290712 2026] [security2:error] [pid 187269:tid 187454] [client 216.73.216.46:37141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy6dFcyhWr7HDzNGl2VwAAAkQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mzc2
[Wed Sep 30 00:57:45.294928 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.295220 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.304353 2026] [security2:error] [pid 187269:tid 187418] [client 45.138.12.32:13422] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kqr.myw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy6dFcyhWr7HDzNGl2WAAAAiA"]
[Wed Sep 30 00:57:45.354423 2026] [security2:error] [pid 186850:tid 186995] [client 20.198.74.230:41345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/b8.php"] [unique_id "aryy6U5Phls--iYlcKgDoQAAARk"]
[Wed Sep 30 00:57:45.378821 2026] [security2:error] [pid 187269:tid 187531] [client 102.254.102.41:5797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryy6dFcyhWr7HDzNGl2WgAAApA"]
[Wed Sep 30 00:57:45.378984 2026] [security2:error] [pid 187269:tid 187531] [client 102.254.102.41:5797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryy6dFcyhWr7HDzNGl2WgAAApA"]
[Wed Sep 30 00:57:45.384724 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.384997 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.407015 2026] [security2:error] [pid 187269:tid 187506] [client 106.214.3.140:20919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryy6dFcyhWr7HDzNGl2SQAAAng"]
[Wed Sep 30 00:57:45.456376 2026] [security2:error] [pid 186850:tid 187060] [client 213.136.69.135:58661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-block-templates-registry.php"] [unique_id "aryy6U5Phls--iYlcKgDqgAAAVo"], referer: binance.com
[Wed Sep 30 00:57:45.457832 2026] [security2:error] [pid 186850:tid 187001] [client 151.67.148.9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryy6U5Phls--iYlcKgDqQAAAR8"]
[Wed Sep 30 00:57:45.477306 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.477607 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.480861 2026] [security2:error] [pid 187269:tid 187514] [client 4.196.65.241:2557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/bgmlktrf.php"] [unique_id "aryy6dFcyhWr7HDzNGl2YAAAAoA"]
[Wed Sep 30 00:57:45.510824 2026] [security2:error] [pid 187269:tid 187476] [client 20.70.173.30:18518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/666.php"] [unique_id "aryy6dFcyhWr7HDzNGl2ZAAAAlo"]
[Wed Sep 30 00:57:45.568035 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.568318 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.603062 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:57:45.603331 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L25ldA==
[Wed Sep 30 00:57:45.653000 2026] [security2:error] [pid 187269:tid 187503] [client 52.231.69.245:30844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryy6dFcyhWr7HDzNGl2agAAAnU"]
[Wed Sep 30 00:57:45.658844 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.659115 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.678499 2026] [security2:error] [pid 186850:tid 187000] [client 223.235.102.107:7378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy6U5Phls--iYlcKgDsAAAAR4"]
[Wed Sep 30 00:57:45.678671 2026] [security2:error] [pid 186850:tid 187000] [client 223.235.102.107:7378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy6U5Phls--iYlcKgDsAAAAR4"]
[Wed Sep 30 00:57:45.755265 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.755724 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.841663 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.841936 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:1117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.842827 2026] [security2:error] [pid 186850:tid 186990] [client 20.213.164.196:15973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/cns.php"] [unique_id "aryy6U5Phls--iYlcKgDswAAARQ"]
[Wed Sep 30 00:57:45.848186 2026] [security2:error] [pid 187269:tid 187487] [client 20.194.30.107:64761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryy6dFcyhWr7HDzNGl2cgAAAmU"]
[Wed Sep 30 00:57:45.935103 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:45.935562 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:45.943238 2026] [security2:error] [pid 186850:tid 187007] [client 116.72.182.19:62114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy6U5Phls--iYlcKgDuAAAASU"]
[Wed Sep 30 00:57:45.943394 2026] [security2:error] [pid 186850:tid 187007] [client 116.72.182.19:62114] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy6U5Phls--iYlcKgDuAAAASU"]
[Wed Sep 30 00:57:46.022806 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.19.141:23945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/myglu.php"] [unique_id "aryy6tFcyhWr7HDzNGl2eAAAAlU"]
[Wed Sep 30 00:57:46.026308 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.026834 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.028150 2026] [security2:error] [pid 187269:tid 187499] [client 52.231.69.245:30946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryy6tFcyhWr7HDzNGl2eQAAAnE"]
[Wed Sep 30 00:57:46.072617 2026] [security2:error] [pid 186850:tid 187106] [client 78.138.127.62:56202] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "78.138.127.62" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "aryy6k5Phls--iYlcKgDvQAAAYg"], referer: https://www.clenbuterol4you.com/
[Wed Sep 30 00:57:46.108206 2026] [access_compat:error] [pid 186850:tid 187044] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:57:46.108469 2026] [access_compat:error] [pid 186850:tid 187044] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L25ldA==
[Wed Sep 30 00:57:46.113685 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.113973 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.162858 2026] [security2:error] [pid 186850:tid 186855] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy6k5Phls--iYlcKgDwgABUAQ"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=0bedb407d7d1dbcd75f3d822e76bc038
[Wed Sep 30 00:57:46.162886 2026] [security2:error] [pid 186850:tid 186855] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy6k5Phls--iYlcKgDwgABUAQ"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=0bedb407d7d1dbcd75f3d822e76bc038
[Wed Sep 30 00:57:46.205451 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.205583 2026] [security2:error] [pid 187269:tid 187410] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy6tFcyhWr7HDzNGl2fwAAAhg"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:46.205721 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.227242 2026] [security2:error] [pid 186850:tid 187099] [client 20.194.30.107:17360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/sb.php"] [unique_id "aryy6k5Phls--iYlcKgDxgAAAYE"]
[Wed Sep 30 00:57:46.231350 2026] [security2:error] [pid 187269:tid 187467] [client 216.73.216.46:1117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy6tFcyhWr7HDzNGl2gAAAAlE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjI0
[Wed Sep 30 00:57:46.236872 2026] [security2:error] [pid 186850:tid 187091] [client 45.138.12.32:31070] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kox.sul.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy6k5Phls--iYlcKgDxwAAAXk"]
[Wed Sep 30 00:57:46.297570 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.297876 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.315616 2026] [access_compat:error] [pid 187269:tid 187424] [client 47.79.13.176:44822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:46.315904 2026] [access_compat:error] [pid 187269:tid 187424] [client 47.79.13.176:44822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:46.332003 2026] [security2:error] [pid 187269:tid 187462] [client 52.231.69.245:30912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryy6tFcyhWr7HDzNGl2hQAAAkw"]
[Wed Sep 30 00:57:46.370766 2026] [security2:error] [pid 186850:tid 187089] [client 45.138.12.32:16868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tvu.obp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy6k5Phls--iYlcKgDzQAAAXc"]
[Wed Sep 30 00:57:46.387804 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.388089 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.479355 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.479627 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.488817 2026] [security2:error] [pid 186850:tid 187066] [client 4.196.65.241:27277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cnsk.php"] [unique_id "aryy6k5Phls--iYlcKgD1gAAAWA"]
[Wed Sep 30 00:57:46.570070 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.570339 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.643971 2026] [security2:error] [pid 186850:tid 187018] [client 52.231.69.245:30846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/aa.php"] [unique_id "aryy6k5Phls--iYlcKgD3QAAATA"]
[Wed Sep 30 00:57:46.645307 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 00:57:46.645605 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 00:57:46.660875 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.661147 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.661556 2026] [security2:error] [pid 186850:tid 187032] [client 91.209.114.116:10435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.114.209.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "celadondragon.com"] [uri "/xmlrpc.php"] [unique_id "aryy6k5Phls--iYlcKgD2wAAAT4"]
[Wed Sep 30 00:57:46.661671 2026] [security2:error] [pid 186850:tid 187032] [client 91.209.114.116:10435] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "celadondragon.com"] [uri "/xmlrpc.php"] [unique_id "aryy6k5Phls--iYlcKgD2wAAAT4"]
[Wed Sep 30 00:57:46.670117 2026] [security2:error] [pid 187269:tid 187441] [client 20.219.2.60:18938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-content/radio.php"] [unique_id "aryy6tFcyhWr7HDzNGl2kQAAAjc"]
[Wed Sep 30 00:57:46.712626 2026] [security2:error] [pid 186850:tid 187037] [client 20.198.74.230:41366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/xex.php"] [unique_id "aryy6k5Phls--iYlcKgD4QAAAUM"]
[Wed Sep 30 00:57:46.713751 2026] [security2:error] [pid 187269:tid 187438] [client 4.196.65.241:64163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ded.php"] [unique_id "aryy6tFcyhWr7HDzNGl2lQAAAjQ"]
[Wed Sep 30 00:57:46.729517 2026] [security2:error] [pid 186850:tid 187022] [client 223.181.60.167:16633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy6k5Phls--iYlcKgD4gAAATQ"]
[Wed Sep 30 00:57:46.730838 2026] [security2:error] [pid 186850:tid 187022] [client 223.181.60.167:16633] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy6k5Phls--iYlcKgD4gAAATQ"]
[Wed Sep 30 00:57:46.733499 2026] [security2:error] [pid 187269:tid 187473] [client 78.138.127.62:62329] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "78.138.127.62" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "aryy6tFcyhWr7HDzNGl2lgAAAlc"], referer: https://www.clenbuterol4you.com/wp-login.php
[Wed Sep 30 00:57:46.754092 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.754535 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.817945 2026] [security2:error] [pid 187269:tid 187409] [client 20.213.164.196:54099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/faiy.php"] [unique_id "aryy6tFcyhWr7HDzNGl2mQAAAhc"]
[Wed Sep 30 00:57:46.819415 2026] [security2:error] [pid 187269:tid 187524] [client 45.138.12.32:16850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tzq.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy6tFcyhWr7HDzNGl2mgAAAok"]
[Wed Sep 30 00:57:46.893517 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:9508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.893773 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:9508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.907563 2026] [security2:error] [pid 187269:tid 187406] [client 20.70.173.30:18516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/xkSudf.php"] [unique_id "aryy6tFcyhWr7HDzNGl2nwAAAhQ"]
[Wed Sep 30 00:57:46.932916 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:46.933173 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:46.983706 2026] [security2:error] [pid 187269:tid 187520] [client 20.219.19.141:46475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/aboutt.php"] [unique_id "aryy6tFcyhWr7HDzNGl2ogAAAoY"]
[Wed Sep 30 00:57:46.998894 2026] [security2:error] [pid 187269:tid 187429] [client 52.231.69.245:30914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/z70.php"] [unique_id "aryy6tFcyhWr7HDzNGl2pAAAAis"]
[Wed Sep 30 00:57:47.023697 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.023995 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.064186 2026] [security2:error] [pid 186850:tid 187086] [client 104.234.32.210:47845] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryy605Phls--iYlcKgD6AAAAXQ"]
[Wed Sep 30 00:57:47.084949 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:57:47.085213 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL25ldA==
[Wed Sep 30 00:57:47.115568 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.115846 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.141959 2026] [security2:error] [pid 186850:tid 187004] [client 103.159.192.142:62831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy605Phls--iYlcKgD6wAAASI"]
[Wed Sep 30 00:57:47.142081 2026] [security2:error] [pid 186850:tid 187004] [client 103.159.192.142:62831] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy605Phls--iYlcKgD6wAAASI"]
[Wed Sep 30 00:57:47.207925 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.208182 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.228603 2026] [security2:error] [pid 187269:tid 187451] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryy69FcyhWr7HDzNGl2qAAAAkE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:47.250738 2026] [security2:error] [pid 187269:tid 187510] [client 116.197.133.25:59629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl2qQAAAnw"]
[Wed Sep 30 00:57:47.250873 2026] [security2:error] [pid 187269:tid 187510] [client 116.197.133.25:59629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl2qQAAAnw"]
[Wed Sep 30 00:57:47.267766 2026] [security2:error] [pid 186850:tid 187057] [client 4.240.25.22:43786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/sxxb.php"] [unique_id "aryy605Phls--iYlcKgD7wAAAVc"]
[Wed Sep 30 00:57:47.286972 2026] [security2:error] [pid 187269:tid 187278] [remote 129.121.112.81:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.112.121.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "aryy69FcyhWr7HDzNGl2qgACMwE"]
[Wed Sep 30 00:57:47.298152 2026] [security2:error] [pid 187269:tid 187491] [client 52.231.69.245:30796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/f35.php"] [unique_id "aryy69FcyhWr7HDzNGl2qwAAAmk"]
[Wed Sep 30 00:57:47.299107 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.299385 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.304251 2026] [access_compat:error] [pid 186850:tid 187075] [client 47.82.11.32:60786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:47.304516 2026] [access_compat:error] [pid 186850:tid 187075] [client 47.82.11.32:60786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:47.352721 2026] [security2:error] [pid 187269:tid 187277] [remote 129.121.112.81:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.112.121.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "aryy69FcyhWr7HDzNGl2rwACNQA"], referer: https://adbadvertising.com/wp-login.php
[Wed Sep 30 00:57:47.393703 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.394144 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.409350 2026] [security2:error] [pid 187269:tid 187401] [remote 129.121.112.81:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.112.121.129.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl2sgACS3w"]
[Wed Sep 30 00:57:47.409506 2026] [security2:error] [pid 187269:tid 187461] [client 129.121.112.81:51448] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "adbadvertising.com"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl2sgACS3w"]
[Wed Sep 30 00:57:47.480551 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:47.480926 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:47.552975 2026] [security2:error] [pid 186850:tid 187064] [client 45.138.12.32:13498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.kqr.myw.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryy605Phls--iYlcKgD-wAAAV4"]
[Wed Sep 30 00:57:47.578891 2026] [security2:error] [pid 186850:tid 186987] [client 52.231.69.245:30813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/adminfuns.php"] [unique_id "aryy605Phls--iYlcKgD_AAAARE"]
[Wed Sep 30 00:57:47.607131 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:57:47.607410 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:57:47.684970 2026] [security2:error] [pid 187269:tid 187419] [client 20.28.180.172:29583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/gix.php"] [unique_id "aryy69FcyhWr7HDzNGl2xgAAAiE"]
[Wed Sep 30 00:57:47.908129 2026] [security2:error] [pid 187269:tid 187489] [client 20.219.19.141:23951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wp-whe.php"] [unique_id "aryy69FcyhWr7HDzNGl21AAAAmc"]
[Wed Sep 30 00:57:47.938766 2026] [security2:error] [pid 187269:tid 187444] [client 20.219.2.60:19418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/155.php"] [unique_id "aryy69FcyhWr7HDzNGl21gAAAjo"]
[Wed Sep 30 00:57:47.955615 2026] [security2:error] [pid 187269:tid 187528] [client 43.104.4.209:41585] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js"] [unique_id "aryy69FcyhWr7HDzNGl21wAAAo0"], referer: https://coscharis-tech.com/product-category/computer-accessories/speakers/?wlfilter=1&woolentor_product_cat=apc%2Ccomputer-accessories%2Celectronics%2Cmouse%2Conline-ups%2Cphone-accessories%2Csnmp-cards-networking%2Ctablets-smart-phones
[Wed Sep 30 00:57:47.986461 2026] [security2:error] [pid 187269:tid 187447] [client 155.190.6.18:53244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl22QAAAj0"]
[Wed Sep 30 00:57:48.004398 2026] [security2:error] [pid 187269:tid 187519] [client 52.231.69.245:30800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/av.php"] [unique_id "aryy7NFcyhWr7HDzNGl22gAAAoU"]
[Wed Sep 30 00:57:48.016365 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.016670 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.106395 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:9508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.106669 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:9508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.119343 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2F0dHI=
[Wed Sep 30 00:57:48.119601 2026] [access_compat:error] [pid 186850:tid 187061] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2F0dHI=
[Wed Sep 30 00:57:48.131643 2026] [security2:error] [pid 187269:tid 187520] [client 20.213.164.196:35799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/gecho.php"] [unique_id "aryy7NFcyhWr7HDzNGl23wAAAoY"]
[Wed Sep 30 00:57:48.150429 2026] [security2:error] [pid 187269:tid 187501] [client 104.234.32.229:49773] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryy7NFcyhWr7HDzNGl24gAAAnM"]
[Wed Sep 30 00:57:48.165371 2026] [security2:error] [pid 187269:tid 187504] [client 4.196.65.241:64167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/qDAFu1Swzxyd4JIdefault.php"] [unique_id "aryy7NFcyhWr7HDzNGl24wAAAnY"]
[Wed Sep 30 00:57:48.189067 2026] [security2:error] [pid 187269:tid 187412] [client 216.73.216.46:9508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy7NFcyhWr7HDzNGl25QAAAho"]
[Wed Sep 30 00:57:48.251418 2026] [security2:error] [pid 187269:tid 187505] [client 45.138.12.32:16808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tye.htc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy7NFcyhWr7HDzNGl26wAAAnc"]
[Wed Sep 30 00:57:48.267129 2026] [security2:error] [pid 187269:tid 187447] [client 155.190.6.18:53244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy69FcyhWr7HDzNGl22QAAAj0"]
[Wed Sep 30 00:57:48.286461 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.286718 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:51172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.332496 2026] [security2:error] [pid 187269:tid 187431] [client 104.28.222.47:56430] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.old"] [unique_id "aryy7NFcyhWr7HDzNGl27wAAAi0"], referer: http://wildingproperties.com/.env.old
[Wed Sep 30 00:57:48.343639 2026] [security2:error] [pid 187269:tid 187488] [client 104.28.254.46:64739] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.old"] [unique_id "aryy7NFcyhWr7HDzNGl28QAAAmY"], referer: http://wildingproperties.magia.vegas/.env.old
[Wed Sep 30 00:57:48.399679 2026] [security2:error] [pid 186850:tid 187054] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryy7E5Phls--iYlcKgEIQAAAVQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:48.413463 2026] [security2:error] [pid 187269:tid 187467] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryy7NFcyhWr7HDzNGl29gAAAlE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:48.428979 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.429256 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.458669 2026] [security2:error] [pid 187269:tid 187511] [client 74.7.242.1:33152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryy7NFcyhWr7HDzNGl2-gAAAn0"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:57:48.501559 2026] [security2:error] [pid 187269:tid 187464] [client 52.231.69.245:30915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/dex.php"] [unique_id "aryy7NFcyhWr7HDzNGl2_gAAAk4"]
[Wed Sep 30 00:57:48.515114 2026] [security2:error] [pid 187269:tid 187445] [client 216.73.216.46:16810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy7NFcyhWr7HDzNGl3AQAAAjs"]
[Wed Sep 30 00:57:48.543862 2026] [security2:error] [pid 187269:tid 187419] [client 45.138.12.32:16966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uan.soq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy7NFcyhWr7HDzNGl3BgAAAiE"]
[Wed Sep 30 00:57:48.560967 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.561235 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.616771 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25ldA==
[Wed Sep 30 00:57:48.617052 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0L25ldA==
[Wed Sep 30 00:57:48.701597 2026] [security2:error] [pid 186850:tid 187077] [client 216.73.216.46:51172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy7E5Phls--iYlcKgEKwAAAWs"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3IvbG9jYWw%3D
[Wed Sep 30 00:57:48.702093 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.702367 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.745785 2026] [security2:error] [pid 187269:tid 187420] [client 182.75.216.230:61214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryy7NFcyhWr7HDzNGl3EwAAAiI"]
[Wed Sep 30 00:57:48.745908 2026] [security2:error] [pid 187269:tid 187420] [client 182.75.216.230:61214] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryy7NFcyhWr7HDzNGl3EwAAAiI"]
[Wed Sep 30 00:57:48.787074 2026] [security2:error] [pid 187269:tid 187497] [client 104.28.254.46:32131] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.bak"] [unique_id "aryy7NFcyhWr7HDzNGl3FQAAAm8"], referer: http://wildingproperties.magia.vegas/.env.bak
[Wed Sep 30 00:57:48.796893 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.797184 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.824617 2026] [security2:error] [pid 187269:tid 187422] [client 52.231.69.245:30924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/chosen.php"] [unique_id "aryy7NFcyhWr7HDzNGl3GwAAAiQ"]
[Wed Sep 30 00:57:48.834831 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.835263 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.845630 2026] [security2:error] [pid 187269:tid 187440] [client 20.194.30.107:17290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/ops.php"] [unique_id "aryy7NFcyhWr7HDzNGl3HgAAAjY"]
[Wed Sep 30 00:57:48.902790 2026] [security2:error] [pid 187269:tid 187520] [client 104.28.222.47:40175] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.bak"] [unique_id "aryy7NFcyhWr7HDzNGl3IgAAAoY"], referer: http://wildingproperties.com/.env.bak
[Wed Sep 30 00:57:48.925665 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:48.925963 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:25558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:48.931149 2026] [security2:error] [pid 187269:tid 187471] [client 20.213.164.196:35796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/gu.php"] [unique_id "aryy7NFcyhWr7HDzNGl3KQAAAlU"]
[Wed Sep 30 00:57:49.014602 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.014873 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.101639 2026] [security2:error] [pid 187269:tid 187495] [client 52.231.69.245:30799] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/1.php"] [unique_id "aryy7dFcyhWr7HDzNGl3TQAAAm0"]
[Wed Sep 30 00:57:49.101717 2026] [security2:error] [pid 187269:tid 187495] [client 52.231.69.245:30799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/1.php"] [unique_id "aryy7dFcyhWr7HDzNGl3TQAAAm0"]
[Wed Sep 30 00:57:49.105885 2026] [security2:error] [pid 187269:tid 187469] [client 37.41.16.35:64453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3TgAAAlM"]
[Wed Sep 30 00:57:49.106033 2026] [security2:error] [pid 187269:tid 187469] [client 37.41.16.35:64453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3TgAAAlM"]
[Wed Sep 30 00:57:49.108049 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.108305 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.129858 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L2F0dHI=
[Wed Sep 30 00:57:49.130115 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L2F0dHI=
[Wed Sep 30 00:57:49.198234 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.198485 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.212739 2026] [security2:error] [pid 187269:tid 187508] [client 212.156.70.154:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.unilagstaffschoolhr.space"] [uri "/"] [unique_id "aryy7dFcyhWr7HDzNGl3XgAAAno"]
[Wed Sep 30 00:57:49.271928 2026] [security2:error] [pid 186850:tid 187006] [client 49.43.163.212:60037] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy7U5Phls--iYlcKgEQwAAASQ"]
[Wed Sep 30 00:57:49.272086 2026] [security2:error] [pid 186850:tid 187006] [client 49.43.163.212:60037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy7U5Phls--iYlcKgEQwAAASQ"]
[Wed Sep 30 00:57:49.290285 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.290547 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.296464 2026] [security2:error] [pid 187269:tid 187523] [client 182.69.182.151:4702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3ZQAAAog"]
[Wed Sep 30 00:57:49.296567 2026] [security2:error] [pid 187269:tid 187523] [client 182.69.182.151:4702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3ZQAAAog"]
[Wed Sep 30 00:57:49.298297 2026] [security2:error] [pid 187269:tid 187457] [client 43.104.4.186:57467] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "aryy7dFcyhWr7HDzNGl3ZAAAAkc"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=interactive-smart-panels
[Wed Sep 30 00:57:49.336787 2026] [security2:error] [pid 187269:tid 187416] [client 216.73.216.46:25558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy7dFcyhWr7HDzNGl3ZwAAAh4"], referer: http://www.homs.co.ke/?action=adminer&p=L2xpYjY0L3h0YWJsZXM%3D
[Wed Sep 30 00:57:49.382844 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.383111 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.391026 2026] [security2:error] [pid 186850:tid 187060] [client 103.241.204.139:52585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy7U5Phls--iYlcKgERQAAAVo"]
[Wed Sep 30 00:57:49.391223 2026] [security2:error] [pid 186850:tid 187060] [client 103.241.204.139:52585] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy7U5Phls--iYlcKgERQAAAVo"]
[Wed Sep 30 00:57:49.457464 2026] [security2:error] [pid 187269:tid 187506] [client 52.231.69.245:30811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/radio.php"] [unique_id "aryy7dFcyhWr7HDzNGl3cQAAAng"]
[Wed Sep 30 00:57:49.471612 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.471881 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.563145 2026] [security2:error] [pid 187269:tid 187519] [client 20.213.164.196:15976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/nck.php"] [unique_id "aryy7dFcyhWr7HDzNGl3ewAAAoU"]
[Wed Sep 30 00:57:49.563733 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.564011 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.604928 2026] [security2:error] [pid 187269:tid 187414] [client 116.193.128.26:60002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3fQAAAhw"]
[Wed Sep 30 00:57:49.605042 2026] [security2:error] [pid 187269:tid 187414] [client 116.193.128.26:60002] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy7dFcyhWr7HDzNGl3fQAAAhw"]
[Wed Sep 30 00:57:49.626159 2026] [autoindex:error] [pid 186850:tid 187085] [client 212.156.70.154:54361] AH01276: Cannot serve directory /home4/odlqjdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:49.644973 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 00:57:49.645403 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 00:57:49.688312 2026] [security2:error] [pid 187269:tid 187500] [client 20.28.180.172:34242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/dot.php"] [unique_id "aryy7dFcyhWr7HDzNGl3gwAAAnI"]
[Wed Sep 30 00:57:49.708400 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:9912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.708666 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:9912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.749762 2026] [security2:error] [pid 187269:tid 187437] [client 52.231.69.245:30837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/blacks.php"] [unique_id "aryy7dFcyhWr7HDzNGl3hQAAAjM"]
[Wed Sep 30 00:57:49.791463 2026] [security2:error] [pid 186850:tid 187083] [client 20.219.2.60:19377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-the.php"] [unique_id "aryy7U5Phls--iYlcKgEVgAAAXE"]
[Wed Sep 30 00:57:49.794158 2026] [security2:error] [pid 186850:tid 187088] [client 20.70.173.30:16269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/red.php"] [unique_id "aryy7U5Phls--iYlcKgEVwAAAXY"]
[Wed Sep 30 00:57:49.799584 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.799865 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.871359 2026] [security2:error] [pid 187269:tid 187426] [client 45.138.12.32:17044] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.kyk.cbe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy7dFcyhWr7HDzNGl3jQAAAig"]
[Wed Sep 30 00:57:49.894214 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.894651 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:49.902676 2026] [security2:error] [pid 186850:tid 187042] [client 74.7.241.179:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.copycrmallyquality.wmxone.com"] [uri "/cgi-sys/404.html"] [unique_id "aryy7U5Phls--iYlcKgEWgAAAUg"]
[Wed Sep 30 00:57:49.904595 2026] [security2:error] [pid 187269:tid 187501] [client 74.7.241.179:44650] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.copycrmallyquality.wmxone.com"] [uri "/robots.txt"] [unique_id "aryy7dFcyhWr7HDzNGl3iwACcxA"]
[Wed Sep 30 00:57:49.984754 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:49.985176 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.012920 2026] [security2:error] [pid 186850:tid 186875] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy7k5Phls--iYlcKgEXwABGBg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=058a39bb8a99b88552fa3a0f29a99eba
[Wed Sep 30 00:57:50.012951 2026] [security2:error] [pid 186850:tid 186875] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy7k5Phls--iYlcKgEXwABGBg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=058a39bb8a99b88552fa3a0f29a99eba
[Wed Sep 30 00:57:50.029576 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.030028 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.102717 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:57:50.102988 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:57:50.123174 2026] [security2:error] [pid 187269:tid 187482] [client 52.231.69.245:30957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/alfa.php"] [unique_id "aryy7tFcyhWr7HDzNGl3mwAAAmA"]
[Wed Sep 30 00:57:50.123648 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.123904 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.130291 2026] [security2:error] [pid 187269:tid 187476] [client 216.73.216.46:9912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy7tFcyhWr7HDzNGl3nAAAAlo"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9vcHQ%3D
[Wed Sep 30 00:57:50.153265 2026] [security2:error] [pid 187269:tid 187421] [client 152.59.169.65:53889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3nQAAAiM"]
[Wed Sep 30 00:57:50.153382 2026] [security2:error] [pid 187269:tid 187421] [client 152.59.169.65:53889] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3nQAAAiM"]
[Wed Sep 30 00:57:50.195978 2026] [security2:error] [pid 187269:tid 187462] [client 4.196.65.241:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/e219b53abbindex.php"] [unique_id "aryy7tFcyhWr7HDzNGl3oQAAAkw"]
[Wed Sep 30 00:57:50.208382 2026] [security2:error] [pid 187269:tid 187416] [client 20.198.74.230:34846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/CAE-2.5.php"] [unique_id "aryy7tFcyhWr7HDzNGl3ogAAAh4"]
[Wed Sep 30 00:57:50.217708 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.217970 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.312302 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.312742 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.339023 2026] [security2:error] [pid 187269:tid 187459] [client 20.213.164.196:15967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/xtt.php"] [unique_id "aryy7tFcyhWr7HDzNGl3qAAAAkk"]
[Wed Sep 30 00:57:50.400214 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.400495 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.407066 2026] [security2:error] [pid 187269:tid 187505] [client 49.36.41.37:50178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3qwAAAnc"]
[Wed Sep 30 00:57:50.408682 2026] [security2:error] [pid 187269:tid 187505] [client 49.36.41.37:50178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3qwAAAnc"]
[Wed Sep 30 00:57:50.451931 2026] [access_compat:error] [pid 187269:tid 187311] [remote 17.166.234.198:39190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.452198 2026] [security2:error] [pid 187269:tid 187282] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryy7tFcyhWr7HDzNGl3rQACTgU"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D46804
[Wed Sep 30 00:57:50.452344 2026] [access_compat:error] [pid 187269:tid 187311] [remote 17.166.234.198:39190] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.457800 2026] [security2:error] [pid 187269:tid 187477] [client 52.231.69.245:30929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp_blog_footer.php"] [unique_id "aryy7tFcyhWr7HDzNGl3rgAAAls"]
[Wed Sep 30 00:57:50.493367 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.493795 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.583492 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2F0dHI=
[Wed Sep 30 00:57:50.583947 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2F0dHI=
[Wed Sep 30 00:57:50.597661 2026] [security2:error] [pid 186850:tid 186999] [client 20.219.19.141:57111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/ssixta.php"] [unique_id "aryy7k5Phls--iYlcKgEZgAAAR0"]
[Wed Sep 30 00:57:50.600228 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.600640 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.678612 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.678891 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.731882 2026] [security2:error] [pid 187269:tid 187437] [client 52.231.69.245:30812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/b8.php"] [unique_id "aryy7tFcyhWr7HDzNGl3xAAAAjM"]
[Wed Sep 30 00:57:50.750234 2026] [security2:error] [pid 187269:tid 187443] [client 103.172.210.103:53053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3xQAAAjk"]
[Wed Sep 30 00:57:50.750355 2026] [security2:error] [pid 187269:tid 187443] [client 103.172.210.103:53053] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3xQAAAjk"]
[Wed Sep 30 00:57:50.813749 2026] [security2:error] [pid 186850:tid 187037] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy7k5Phls--iYlcKgEbAAAAUM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:50.825038 2026] [security2:error] [pid 187269:tid 187511] [client 150.107.232.159:36225] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3xgAAAn0"]
[Wed Sep 30 00:57:50.825166 2026] [security2:error] [pid 187269:tid 187511] [client 150.107.232.159:36225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy7tFcyhWr7HDzNGl3xgAAAn0"]
[Wed Sep 30 00:57:50.843928 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.844374 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.850189 2026] [security2:error] [pid 187269:tid 187450] [client 74.7.230.23:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "304"] [hostname "www.torquayfans.com"] [uri "/robots.txt"] [unique_id "aryy7tFcyhWr7HDzNGl3ywACQBY"]
[Wed Sep 30 00:57:50.906452 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.906707 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.917802 2026] [security2:error] [pid 187269:tid 187446] [client 45.138.12.43:10414] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pzm.mly.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy7tFcyhWr7HDzNGl3zgAAAjw"]
[Wed Sep 30 00:57:50.955230 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:50.955663 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:50.983181 2026] [security2:error] [pid 187269:tid 187410] [client 20.219.2.60:18929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp5.php"] [unique_id "aryy7tFcyhWr7HDzNGl30QAAAhg"]
[Wed Sep 30 00:57:51.004794 2026] [security2:error] [pid 187269:tid 187451] [client 52.231.69.245:30831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xex.php"] [unique_id "aryy79FcyhWr7HDzNGl30gAAAkE"]
[Wed Sep 30 00:57:51.066393 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.066648 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.097888 2026] [access_compat:error] [pid 186850:tid 187071] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdA==
[Wed Sep 30 00:57:51.098163 2026] [access_compat:error] [pid 186850:tid 187071] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdA==
[Wed Sep 30 00:57:51.131294 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.131584 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.170513 2026] [security2:error] [pid 187269:tid 187502] [client 45.138.12.32:31142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tye.htc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy79FcyhWr7HDzNGl33wAAAnQ"]
[Wed Sep 30 00:57:51.197403 2026] [security2:error] [pid 187269:tid 187439] [client 20.28.180.172:29441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wp-9p3vdgw.php"] [unique_id "aryy79FcyhWr7HDzNGl34QAAAjU"]
[Wed Sep 30 00:57:51.226983 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.227438 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.295869 2026] [security2:error] [pid 187269:tid 187459] [client 45.138.12.32:31102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tzp.uhw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy79FcyhWr7HDzNGl35wAAAkk"]
[Wed Sep 30 00:57:51.298601 2026] [security2:error] [pid 187269:tid 187505] [client 52.231.69.245:30919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ass.php"] [unique_id "aryy79FcyhWr7HDzNGl36AAAAnc"]
[Wed Sep 30 00:57:51.315862 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.316288 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.361091 2026] [security2:error] [pid 187269:tid 187458] [client 20.213.164.196:54676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinhand.biz"] [uri "/go.php"] [unique_id "aryy79FcyhWr7HDzNGl36wAAAkg"]
[Wed Sep 30 00:57:51.409380 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.409835 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.500938 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.501388 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.577401 2026] [security2:error] [pid 187269:tid 187414] [client 52.231.69.245:30793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wsd.php"] [unique_id "aryy79FcyhWr7HDzNGl39QAAAhw"]
[Wed Sep 30 00:57:51.588778 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.589165 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.677951 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.678229 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.771941 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.772375 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.773557 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2F0dHI=
[Wed Sep 30 00:57:51.773801 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2F0dHI=
[Wed Sep 30 00:57:51.854833 2026] [security2:error] [pid 187269:tid 187422] [client 52.231.69.245:30913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/BDKR28WP.php"] [unique_id "aryy79FcyhWr7HDzNGl4AwAAAiQ"]
[Wed Sep 30 00:57:51.860060 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.860324 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:45165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.909951 2026] [security2:error] [pid 186850:tid 187040] [client 20.219.19.141:57100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/tesla.php"] [unique_id "aryy705Phls--iYlcKgEhQAAAUY"]
[Wed Sep 30 00:57:51.925968 2026] [security2:error] [pid 187269:tid 187464] [client 202.179.95.79:56336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy79FcyhWr7HDzNGl4BwAAAk4"]
[Wed Sep 30 00:57:51.926093 2026] [security2:error] [pid 187269:tid 187464] [client 202.179.95.79:56336] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy79FcyhWr7HDzNGl4BwAAAk4"]
[Wed Sep 30 00:57:51.950560 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:51.950839 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:51.993945 2026] [security2:error] [pid 187269:tid 187451] [client 45.138.12.40:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hvh.btm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy79FcyhWr7HDzNGl4EAAAAkE"]
[Wed Sep 30 00:57:52.043198 2026] [security2:error] [pid 187269:tid 187415] [client 4.196.65.241:27306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/4cdf8c8db0index.php"] [unique_id "aryy8NFcyhWr7HDzNGl4FgAAAh0"]
[Wed Sep 30 00:57:52.050818 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.051034 2026] [security2:error] [pid 187269:tid 187456] [client 20.198.74.230:41374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/ass.php"] [unique_id "aryy8NFcyhWr7HDzNGl4FwAAAkY"]
[Wed Sep 30 00:57:52.051291 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.117455 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2F0dHI=
[Wed Sep 30 00:57:52.117904 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2F0dHI=
[Wed Sep 30 00:57:52.130662 2026] [security2:error] [pid 187269:tid 187502] [client 52.231.69.245:30838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wmore1.php"] [unique_id "aryy8NFcyhWr7HDzNGl4GwAAAnQ"]
[Wed Sep 30 00:57:52.133245 2026] [security2:error] [pid 187269:tid 187452] [client 152.59.165.7:51472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy8NFcyhWr7HDzNGl4GQAAAkI"]
[Wed Sep 30 00:57:52.133345 2026] [security2:error] [pid 187269:tid 187452] [client 152.59.165.7:51472] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy8NFcyhWr7HDzNGl4GQAAAkI"]
[Wed Sep 30 00:57:52.138301 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.138768 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.224053 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.224335 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.260176 2026] [security2:error] [pid 187269:tid 187411] [client 216.73.216.46:45165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy8NFcyhWr7HDzNGl4IAAAAhk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWI2NC9wZXJsNS9GaWxl
[Wed Sep 30 00:57:52.285029 2026] [security2:error] [pid 187269:tid 187455] [client 20.194.30.107:17408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/666.php"] [unique_id "aryy8NFcyhWr7HDzNGl4IQAAAkU"]
[Wed Sep 30 00:57:52.315322 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.315581 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.382519 2026] [security2:error] [pid 186850:tid 187010] [client 146.190.213.223:57154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.213.190.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "aryy8E5Phls--iYlcKgElgAAASg"]
[Wed Sep 30 00:57:52.405861 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.406155 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.419638 2026] [security2:error] [pid 187269:tid 187492] [client 52.231.69.245:30948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/z60.php"] [unique_id "aryy8NFcyhWr7HDzNGl4KwAAAmo"]
[Wed Sep 30 00:57:52.460840 2026] [security2:error] [pid 187269:tid 187440] [client 1.209.110.147:31034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.110.209.1.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "royalcanvas.ca"] [uri "/wp-login.php"] [unique_id "aryy8NFcyhWr7HDzNGl4MAAAAjY"], referer: https://royalcanvas.ca/wp-login.php
[Wed Sep 30 00:57:52.496378 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.496636 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.507224 2026] [security2:error] [pid 186850:tid 187105] [client 20.219.2.60:19336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-access.php"] [unique_id "aryy8E5Phls--iYlcKgEngAAAYc"]
[Wed Sep 30 00:57:52.524013 2026] [security2:error] [pid 187269:tid 187479] [client 20.28.180.172:34296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/UuAFIYGYKdefault.php"] [unique_id "aryy8NFcyhWr7HDzNGl4NAAAAl0"]
[Wed Sep 30 00:57:52.590842 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L2F0dHI=
[Wed Sep 30 00:57:52.591271 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L2F0dHI=
[Wed Sep 30 00:57:52.593186 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.593629 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.654947 2026] [security2:error] [pid 187269:tid 187471] [client 223.181.30.165:4584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy8NFcyhWr7HDzNGl4OwAAAlU"]
[Wed Sep 30 00:57:52.655131 2026] [security2:error] [pid 187269:tid 187471] [client 223.181.30.165:4584] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy8NFcyhWr7HDzNGl4OwAAAlU"]
[Wed Sep 30 00:57:52.680388 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.680658 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.705872 2026] [security2:error] [pid 187269:tid 187496] [client 20.194.30.107:34007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/ccc.php"] [unique_id "aryy8NFcyhWr7HDzNGl4QgAAAm4"]
[Wed Sep 30 00:57:52.721397 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.30.107:17301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/or.php"] [unique_id "aryy8E5Phls--iYlcKgEpQAAATs"]
[Wed Sep 30 00:57:52.742211 2026] [security2:error] [pid 187269:tid 187490] [client 52.231.69.245:30821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/pJPoKA.php"] [unique_id "aryy8NFcyhWr7HDzNGl4RAAAAmg"]
[Wed Sep 30 00:57:52.762352 2026] [security2:error] [pid 186850:tid 187085] [client 203.122.45.246:59622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy8E5Phls--iYlcKgEpwAAAXM"]
[Wed Sep 30 00:57:52.762604 2026] [security2:error] [pid 186850:tid 187085] [client 203.122.45.246:59622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy8E5Phls--iYlcKgEpwAAAXM"]
[Wed Sep 30 00:57:52.772938 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.773352 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.780875 2026] [security2:error] [pid 186850:tid 187027] [client 104.234.32.226:39903] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryy8E5Phls--iYlcKgEqAAAATk"]
[Wed Sep 30 00:57:52.863168 2026] [security2:error] [pid 187269:tid 187326] [remote 74.7.227.56:52824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/app.php/feed/forums"] [unique_id "aryy8NFcyhWr7HDzNGl4SwACJDE"], referer: https://www.uxa.hoh.mybluehost.me/viewonline.php?sid=916e5488e7a8ffedc4117dbe660992ce
[Wed Sep 30 00:57:52.864702 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.864999 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:52.927700 2026] [security2:error] [pid 187269:tid 187482] [client 20.198.74.230:34874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/felnggg.php"] [unique_id "aryy8NFcyhWr7HDzNGl4TAAAAmA"]
[Wed Sep 30 00:57:52.957735 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:52.958183 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.045226 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.045494 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.072683 2026] [access_compat:error] [pid 186850:tid 186869] [remote 57.141.18.47:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.072967 2026] [access_compat:error] [pid 186850:tid 186869] [remote 57.141.18.47:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.125157 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:53.125611 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:53.135462 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.135725 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.167908 2026] [security2:error] [pid 187269:tid 187447] [client 20.219.19.141:23952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/222.php"] [unique_id "aryy8dFcyhWr7HDzNGl4UgAAAj0"]
[Wed Sep 30 00:57:53.192573 2026] [security2:error] [pid 187269:tid 187460] [client 52.231.69.245:30791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/24.php"] [unique_id "aryy8dFcyhWr7HDzNGl4VgAAAko"]
[Wed Sep 30 00:57:53.197750 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvYmxvY2svbG9vcDA%3D
[Wed Sep 30 00:57:53.198051 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvYmxvY2svbG9vcDA%3D
[Wed Sep 30 00:57:53.225524 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.225781 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.304582 2026] [security2:error] [pid 187269:tid 187454] [client 72.255.10.32:63156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4WwAAAkQ"]
[Wed Sep 30 00:57:53.304771 2026] [security2:error] [pid 187269:tid 187454] [client 72.255.10.32:63156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4WwAAAkQ"]
[Wed Sep 30 00:57:53.318413 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.318665 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.342455 2026] [security2:error] [pid 187269:tid 187510] [client 45.138.12.32:17090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ujc.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy8dFcyhWr7HDzNGl4XgAAAnw"]
[Wed Sep 30 00:57:53.361587 2026] [security2:error] [pid 187269:tid 187459] [client 20.219.2.60:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/hots.php"] [unique_id "aryy8dFcyhWr7HDzNGl4YAAAAkk"]
[Wed Sep 30 00:57:53.410456 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.410786 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.461483 2026] [security2:error] [pid 187269:tid 187432] [client 52.231.69.245:30788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xxw.php"] [unique_id "aryy8dFcyhWr7HDzNGl4ZwAAAi4"]
[Wed Sep 30 00:57:53.478134 2026] [security2:error] [pid 187269:tid 187421] [client 103.159.192.142:63273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4aAAAAiM"]
[Wed Sep 30 00:57:53.478268 2026] [security2:error] [pid 187269:tid 187421] [client 103.159.192.142:63273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4aAAAAiM"]
[Wed Sep 30 00:57:53.502462 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.502894 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.503919 2026] [security2:error] [pid 186850:tid 187101] [client 69.165.72.150:57151] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "djstardao.com"] [uri "/wp-comments-post.php"] [unique_id "aryy8U5Phls--iYlcKgEuwAAAYM"], referer: https://djstardao.com
[Wed Sep 30 00:57:53.584197 2026] [security2:error] [pid 187269:tid 187518] [client 168.107.70.193:53371] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mirandacustomsbrokerage.com"] [uri "/"] [unique_id "aryy8dFcyhWr7HDzNGl4bQAAAoQ"]
[Wed Sep 30 00:57:53.590767 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.591070 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:40191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.591483 2026] [security2:error] [pid 187269:tid 187411] [client 168.107.70.193:53427] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.arb.mdm.mybluehost.me"] [uri "/"] [unique_id "aryy8dFcyhWr7HDzNGl4cgAAAhk"]
[Wed Sep 30 00:57:53.615184 2026] [security2:error] [pid 187269:tid 187523] [client 168.107.70.193:53447] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mirandacustomsbrokerage.geyserjz.com"] [uri "/"] [unique_id "aryy8dFcyhWr7HDzNGl4dQAAAog"]
[Wed Sep 30 00:57:53.623561 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:53.623820 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:53.646516 2026] [security2:error] [pid 187269:tid 187472] [client 4.240.25.22:21527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-blog-header.php"] [unique_id "aryy8dFcyhWr7HDzNGl4egAAAlY"]
[Wed Sep 30 00:57:53.685005 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.685316 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.716339 2026] [security2:error] [pid 187269:tid 187529] [client 20.198.74.230:24130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/a65.php"] [unique_id "aryy8dFcyhWr7HDzNGl4gAAAAo4"]
[Wed Sep 30 00:57:53.731308 2026] [security2:error] [pid 187269:tid 187437] [client 4.196.65.241:19493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/jj.php"] [unique_id "aryy8dFcyhWr7HDzNGl4gQAAAjM"]
[Wed Sep 30 00:57:53.777029 2026] [security2:error] [pid 187269:tid 187420] [client 52.231.69.245:31374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/bnmtp.php"] [unique_id "aryy8dFcyhWr7HDzNGl4hgAAAiI"]
[Wed Sep 30 00:57:53.778585 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.779019 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.783751 2026] [security2:error] [pid 186850:tid 187101] [client 69.165.72.150:57151] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "djstardao.com"] [uri "/wp-comments-post.php"] [unique_id "aryy8U5Phls--iYlcKgEuwAAAYM"], referer: https://djstardao.com
[Wed Sep 30 00:57:53.861907 2026] [security2:error] [pid 187269:tid 187455] [client 43.227.131.37:37994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4iQAAAkU"]
[Wed Sep 30 00:57:53.862068 2026] [security2:error] [pid 187269:tid 187455] [client 43.227.131.37:37994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy8dFcyhWr7HDzNGl4iQAAAkU"]
[Wed Sep 30 00:57:53.866643 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.866921 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:53.942219 2026] [security2:error] [pid 187269:tid 187452] [client 45.138.12.32:31208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tzq.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy8dFcyhWr7HDzNGl4jQAAAkI"]
[Wed Sep 30 00:57:53.957325 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:53.957586 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.008513 2026] [security2:error] [pid 187269:tid 187528] [client 216.73.216.46:40191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy8tFcyhWr7HDzNGl4kwAAAo0"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL21hbjh4
[Wed Sep 30 00:57:54.009612 2026] [security2:error] [pid 187269:tid 187444] [client 20.219.19.141:57110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/media.php"] [unique_id "aryy8tFcyhWr7HDzNGl4lAAAAjo"]
[Wed Sep 30 00:57:54.047201 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.047490 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.063914 2026] [security2:error] [pid 187269:tid 187517] [client 20.194.30.107:17474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/xkSudf.php"] [unique_id "aryy8tFcyhWr7HDzNGl4mAAAAoM"]
[Wed Sep 30 00:57:54.071389 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:30936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ebkid.php"] [unique_id "aryy8k5Phls--iYlcKgExgAAAUY"]
[Wed Sep 30 00:57:54.092289 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2F0dHI=
[Wed Sep 30 00:57:54.092633 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2F0dHI=
[Wed Sep 30 00:57:54.139117 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.139449 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.179924 2026] [security2:error] [pid 187269:tid 187473] [client 45.138.12.32:17088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uix.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy8tFcyhWr7HDzNGl4owAAAlc"]
[Wed Sep 30 00:57:54.229655 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.229935 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.309489 2026] [security2:error] [pid 187269:tid 187443] [client 1.209.110.147:31958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.110.209.1.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "royalcanvas.ca"] [uri "/wp-login.php"] [unique_id "aryy8tFcyhWr7HDzNGl4sQAAAjk"], referer: https://royalcanvas.ca/wp-login.php
[Wed Sep 30 00:57:54.324861 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.325315 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.336708 2026] [security2:error] [pid 186850:tid 187060] [client 104.234.32.230:41893] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryy8k5Phls--iYlcKgEzQAAAVo"]
[Wed Sep 30 00:57:54.373614 2026] [security2:error] [pid 187269:tid 187442] [client 52.231.69.245:30939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/133.php"] [unique_id "aryy8tFcyhWr7HDzNGl4tQAAAjg"]
[Wed Sep 30 00:57:54.381756 2026] [security2:error] [pid 186850:tid 187087] [client 49.205.105.16:13977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy8k5Phls--iYlcKgE0AAAAXU"]
[Wed Sep 30 00:57:54.381889 2026] [security2:error] [pid 186850:tid 187087] [client 49.205.105.16:13977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy8k5Phls--iYlcKgE0AAAAXU"]
[Wed Sep 30 00:57:54.417029 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.417296 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.512883 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.513355 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.569618 2026] [access_compat:error] [pid 187269:tid 187523] [client 47.79.13.158:49348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.569901 2026] [access_compat:error] [pid 187269:tid 187523] [client 47.79.13.158:49348] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.599527 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.599795 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.617776 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:54.618138 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3Q=
[Wed Sep 30 00:57:54.669353 2026] [security2:error] [pid 187269:tid 187510] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryy8tFcyhWr7HDzNGl4yAAAAnw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:54.671413 2026] [security2:error] [pid 187269:tid 187526] [client 52.231.69.245:30816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/x33.php"] [unique_id "aryy8tFcyhWr7HDzNGl4yQAAAos"]
[Wed Sep 30 00:57:54.693702 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.694143 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.718712 2026] [security2:error] [pid 186850:tid 186980] [client 20.194.30.107:14337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/users.php"] [unique_id "aryy8k5Phls--iYlcKgE1gAAAQo"]
[Wed Sep 30 00:57:54.737346 2026] [access_compat:error] [pid 186850:tid 187049] [client 47.79.13.78:44306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.737787 2026] [access_compat:error] [pid 186850:tid 187049] [client 47.79.13.78:44306] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.771548 2026] [access_compat:error] [pid 186850:tid 187014] [client 47.79.13.176:40434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.771829 2026] [access_compat:error] [pid 186850:tid 187014] [client 47.79.13.176:40434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:54.805040 2026] [security2:error] [pid 187269:tid 187532] [client 20.219.2.60:18933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/admin-footer.php"] [unique_id "aryy8tFcyhWr7HDzNGl4zgAAApE"]
[Wed Sep 30 00:57:54.814185 2026] [security2:error] [pid 187269:tid 187460] [client 20.194.30.107:10040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/mh.php"] [unique_id "aryy8tFcyhWr7HDzNGl4zwAAAko"]
[Wed Sep 30 00:57:54.814185 2026] [security2:error] [pid 186850:tid 187095] [client 45.138.12.32:31192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ugh.bch.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy8k5Phls--iYlcKgE2wAAAX0"]
[Wed Sep 30 00:57:54.837047 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.837482 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.874151 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.874438 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:54.950434 2026] [security2:error] [pid 187269:tid 187495] [client 52.231.69.245:30789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/cae.php"] [unique_id "aryy8tFcyhWr7HDzNGl41QAAAm0"]
[Wed Sep 30 00:57:54.967873 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:54.968293 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:49641] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.057776 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.058059 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.097128 2026] [security2:error] [pid 187269:tid 187410] [client 4.196.65.241:2558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ORVX-55jkI7.php"] [unique_id "aryy89FcyhWr7HDzNGl44AAAAhg"]
[Wed Sep 30 00:57:55.119123 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:57:55.119405 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:57:55.148244 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.148536 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.199568 2026] [security2:error] [pid 187269:tid 187421] [client 45.138.12.32:31212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tvu.obp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy89FcyhWr7HDzNGl45QAAAiM"]
[Wed Sep 30 00:57:55.227622 2026] [security2:error] [pid 187269:tid 187517] [client 39.44.16.112:56869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy89FcyhWr7HDzNGl46AAAAoM"]
[Wed Sep 30 00:57:55.228986 2026] [security2:error] [pid 187269:tid 187517] [client 39.44.16.112:56869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy89FcyhWr7HDzNGl46AAAAoM"]
[Wed Sep 30 00:57:55.234295 2026] [security2:error] [pid 187269:tid 187529] [client 52.231.69.245:30819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/txets.php"] [unique_id "aryy89FcyhWr7HDzNGl46gAAAo4"]
[Wed Sep 30 00:57:55.239044 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.239301 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.329156 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.330182 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.341780 2026] [security2:error] [pid 187269:tid 187489] [client 20.198.74.230:41396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/felnggg.update.php"] [unique_id "aryy89FcyhWr7HDzNGl49AAAAmc"]
[Wed Sep 30 00:57:55.386455 2026] [security2:error] [pid 187269:tid 187466] [client 216.73.216.46:49641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy89FcyhWr7HDzNGl4-gAAAlA"], referer: http://www.homs.co.ke/?action=adminer&p=L2Rldi9kaXNr
[Wed Sep 30 00:57:55.387861 2026] [security2:error] [pid 187269:tid 187501] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy89FcyhWr7HDzNGl4-wAAAnM"]
[Wed Sep 30 00:57:55.400933 2026] [security2:error] [pid 187269:tid 187470] [client 20.219.19.141:23783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/24.php"] [unique_id "aryy89FcyhWr7HDzNGl4_AAAAlQ"]
[Wed Sep 30 00:57:55.424765 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.425187 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:36558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.448372 2026] [security2:error] [pid 187269:tid 187454] [client 20.28.180.172:34289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/gif.php"] [unique_id "aryy89FcyhWr7HDzNGl4_wAAAkQ"]
[Wed Sep 30 00:57:55.515525 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.515791 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.518707 2026] [access_compat:error] [pid 187269:tid 187497] [client 47.79.13.234:34314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:55.519004 2026] [access_compat:error] [pid 187269:tid 187497] [client 47.79.13.234:34314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:55.530748 2026] [security2:error] [pid 187269:tid 187418] [client 52.231.69.245:30951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-update.php"] [unique_id "aryy89FcyhWr7HDzNGl5CAAAAiA"]
[Wed Sep 30 00:57:55.577530 2026] [security2:error] [pid 187269:tid 187505] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy89FcyhWr7HDzNGl5DAAAAnc"]
[Wed Sep 30 00:57:55.605851 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.606308 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.613680 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2F0dHI=
[Wed Sep 30 00:57:55.613974 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2F0dHI=
[Wed Sep 30 00:57:55.699086 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.699536 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.729750 2026] [security2:error] [pid 187269:tid 187465] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryy89FcyhWr7HDzNGl5DgAAAk8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:57:55.764668 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L2Rldi92Zmlv
[Wed Sep 30 00:57:55.765115 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L2Rldi92Zmlv
[Wed Sep 30 00:57:55.767311 2026] [security2:error] [pid 187269:tid 187468] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy89FcyhWr7HDzNGl5EAAAAlI"]
[Wed Sep 30 00:57:55.784414 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.784667 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.859061 2026] [security2:error] [pid 187269:tid 187409] [client 52.231.69.245:30935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/177.php"] [unique_id "aryy89FcyhWr7HDzNGl5FwAAAhc"]
[Wed Sep 30 00:57:55.876804 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:55.877113 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:55.957133 2026] [security2:error] [pid 187269:tid 187524] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy89FcyhWr7HDzNGl5GgAAAok"]
[Wed Sep 30 00:57:55.960408 2026] [security2:error] [pid 187269:tid 187481] [client 216.73.216.46:36558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy89FcyhWr7HDzNGl5HAAAAl8"]
[Wed Sep 30 00:57:56.059552 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.059827 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.070264 2026] [security2:error] [pid 186850:tid 187012] [client 213.136.69.135:62358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-classic-to-block-menu-converter.php"] [unique_id "aryy9E5Phls--iYlcKgFAwAAASo"], referer: binance.com
[Wed Sep 30 00:57:56.078647 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L2F0dHI=
[Wed Sep 30 00:57:56.078918 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L2F0dHI=
[Wed Sep 30 00:57:56.146989 2026] [security2:error] [pid 187269:tid 187421] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9NFcyhWr7HDzNGl5IwAAAiM"]
[Wed Sep 30 00:57:56.149249 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.149520 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.187759 2026] [security2:error] [pid 186850:tid 187039] [client 52.231.69.245:30955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ccc.php"] [unique_id "aryy9E5Phls--iYlcKgFBwAAAUU"]
[Wed Sep 30 00:57:56.194495 2026] [security2:error] [pid 187269:tid 187504] [client 20.70.173.30:61290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/sym.php"] [unique_id "aryy9NFcyhWr7HDzNGl5JAAAAnY"]
[Wed Sep 30 00:57:56.242919 2026] [security2:error] [pid 187269:tid 187451] [client 104.234.32.220:40265] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aryy9NFcyhWr7HDzNGl5JwAAAkE"]
[Wed Sep 30 00:57:56.294492 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:5955] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.294781 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:5955] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.331328 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.331602 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.337369 2026] [security2:error] [pid 187269:tid 187489] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9NFcyhWr7HDzNGl5LQAAAmc"]
[Wed Sep 30 00:57:56.366400 2026] [security2:error] [pid 186850:tid 187052] [client 223.235.102.107:31941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy9E5Phls--iYlcKgFCgAAAVI"]
[Wed Sep 30 00:57:56.366523 2026] [security2:error] [pid 186850:tid 187052] [client 223.235.102.107:31941] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy9E5Phls--iYlcKgFCgAAAVI"]
[Wed Sep 30 00:57:56.424071 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.424376 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:2737] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.489166 2026] [security2:error] [pid 187269:tid 187479] [client 116.72.182.19:62761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy9NFcyhWr7HDzNGl5MwAAAl0"]
[Wed Sep 30 00:57:56.489276 2026] [security2:error] [pid 187269:tid 187479] [client 116.72.182.19:62761] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy9NFcyhWr7HDzNGl5MwAAAl0"]
[Wed Sep 30 00:57:56.516290 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.516720 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.527630 2026] [security2:error] [pid 187269:tid 187434] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9NFcyhWr7HDzNGl5NAAAAjA"]
[Wed Sep 30 00:57:56.569933 2026] [security2:error] [pid 187269:tid 187454] [client 52.231.69.245:30926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/0xD.php"] [unique_id "aryy9NFcyhWr7HDzNGl5NgAAAkQ"]
[Wed Sep 30 00:57:56.604155 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L2F0dHI=
[Wed Sep 30 00:57:56.604566 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L2F0dHI=
[Wed Sep 30 00:57:56.632968 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.633250 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.661958 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.71:51962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:56.662410 2026] [access_compat:error] [pid 187269:tid 187501] [client 47.79.13.71:51962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:56.662953 2026] [security2:error] [pid 187269:tid 187444] [client 20.219.2.60:18876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws84.php"] [unique_id "aryy9NFcyhWr7HDzNGl5QAAAAjo"]
[Wed Sep 30 00:57:56.717309 2026] [security2:error] [pid 187269:tid 187532] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9NFcyhWr7HDzNGl5QgAAApE"]
[Wed Sep 30 00:57:56.754787 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.755263 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.787463 2026] [security2:error] [pid 186850:tid 186993] [client 20.28.180.172:29618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/0mzrlfdt.php"] [unique_id "aryy9E5Phls--iYlcKgFJAAAARc"]
[Wed Sep 30 00:57:56.798143 2026] [security2:error] [pid 187269:tid 187425] [client 20.194.30.107:10138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/cycfruf.php"] [unique_id "aryy9NFcyhWr7HDzNGl5SAAAAic"]
[Wed Sep 30 00:57:56.805909 2026] [access_compat:error] [pid 187269:tid 187463] [client 47.79.13.71:51972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:57:56.806169 2026] [access_compat:error] [pid 187269:tid 187463] [client 47.79.13.71:51972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:57:56.821610 2026] [security2:error] [pid 187269:tid 187462] [client 216.73.216.46:2737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy9NFcyhWr7HDzNGl5SgAAAkw"], referer: http://www.homs.co.ke/?action=adminer&p=L3J1bi9uc2Nk
[Wed Sep 30 00:57:56.836135 2026] [security2:error] [pid 186850:tid 187091] [client 20.194.30.107:64760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/memberfuns.php"] [unique_id "aryy9E5Phls--iYlcKgFJwAAAXk"]
[Wed Sep 30 00:57:56.839597 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.839890 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.879049 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.879748 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:56.889799 2026] [security2:error] [pid 187269:tid 187515] [client 4.196.65.241:64170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wp-trackback.php"] [unique_id "aryy9NFcyhWr7HDzNGl5TwAAAoE"]
[Wed Sep 30 00:57:56.907181 2026] [security2:error] [pid 187269:tid 187428] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9NFcyhWr7HDzNGl5UAAAAio"]
[Wed Sep 30 00:57:56.944872 2026] [security2:error] [pid 187269:tid 187478] [client 52.231.69.245:30961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/sallu.php"] [unique_id "aryy9NFcyhWr7HDzNGl5UQAAAlw"]
[Wed Sep 30 00:57:56.969363 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:56.969735 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.055241 2026] [autoindex:error] [pid 187269:tid 187414] [client 43.134.100.175:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/RoyalTrainingCenter/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:57:57.059833 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.060130 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.097446 2026] [security2:error] [pid 187269:tid 187430] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5WwAAAiw"]
[Wed Sep 30 00:57:57.124061 2026] [access_compat:error] [pid 186850:tid 187030] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:57:57.124340 2026] [access_compat:error] [pid 186850:tid 187030] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:57:57.150722 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.150984 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.217521 2026] [security2:error] [pid 187269:tid 187469] [client 20.198.74.230:41393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/jybkxer.php"] [unique_id "aryy9dFcyhWr7HDzNGl5YgAAAlM"]
[Wed Sep 30 00:57:57.242461 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.242737 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.281101 2026] [security2:error] [pid 187269:tid 187464] [client 4.240.25.22:11557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/classwithtostring.php"] [unique_id "aryy9dFcyhWr7HDzNGl5ZgAAAk4"]
[Wed Sep 30 00:57:57.281467 2026] [security2:error] [pid 187269:tid 187534] [client 52.231.69.245:30792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/01.php"] [unique_id "aryy9dFcyhWr7HDzNGl5ZwAAApM"]
[Wed Sep 30 00:57:57.287203 2026] [security2:error] [pid 187269:tid 187493] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5aAAAAms"]
[Wed Sep 30 00:57:57.325632 2026] [security2:error] [pid 186850:tid 187038] [client 20.219.19.141:23994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/xwpg.php"] [unique_id "aryy9U5Phls--iYlcKgFRQAAAUQ"]
[Wed Sep 30 00:57:57.344269 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.344526 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.425144 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.425421 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.450839 2026] [security2:error] [pid 187269:tid 187416] [client 223.181.60.167:33121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy9dFcyhWr7HDzNGl5bQAAAh4"]
[Wed Sep 30 00:57:57.451138 2026] [security2:error] [pid 187269:tid 187416] [client 223.181.60.167:33121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryy9dFcyhWr7HDzNGl5bQAAAh4"]
[Wed Sep 30 00:57:57.468232 2026] [security2:error] [pid 186850:tid 186959] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env"] [unique_id "aryy9U5Phls--iYlcKgFTwABZ2w"]
[Wed Sep 30 00:57:57.468276 2026] [security2:error] [pid 186850:tid 186919] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.aws/.env"] [unique_id "aryy9U5Phls--iYlcKgFUAABZ0Q"]
[Wed Sep 30 00:57:57.468287 2026] [security2:error] [pid 186850:tid 186941] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.docker/laravel/app/.env"] [unique_id "aryy9U5Phls--iYlcKgFTQABZ1o"]
[Wed Sep 30 00:57:57.476115 2026] [security2:error] [pid 187269:tid 187420] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5cgAAAiI"]
[Wed Sep 30 00:57:57.516097 2026] [security2:error] [pid 187269:tid 187439] [client 20.194.30.107:9996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/gecko.php"] [unique_id "aryy9dFcyhWr7HDzNGl5eQAAAjU"]
[Wed Sep 30 00:57:57.517207 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.517624 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.542837 2026] [security2:error] [pid 186850:tid 186957] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.docker/.env"] [unique_id "aryy9U5Phls--iYlcKgFWAABZ2o"]
[Wed Sep 30 00:57:57.545450 2026] [security2:error] [pid 186850:tid 186957] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.aws/credentials.bak"] [unique_id "aryy9U5Phls--iYlcKgFWQABZ2o"]
[Wed Sep 30 00:57:57.587021 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2F0dHI=
[Wed Sep 30 00:57:57.587328 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2F0dHI=
[Wed Sep 30 00:57:57.595891 2026] [security2:error] [pid 187269:tid 187423] [client 20.70.173.30:18537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/classwithtostring.php"] [unique_id "aryy9dFcyhWr7HDzNGl5fAAAAiU"]
[Wed Sep 30 00:57:57.601487 2026] [security2:error] [pid 187269:tid 187353] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.aws/.env"] [unique_id "aryy9dFcyhWr7HDzNGl5fQACjUw"]
[Wed Sep 30 00:57:57.601506 2026] [security2:error] [pid 187269:tid 187482] [client 52.231.69.245:30921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ab.php"] [unique_id "aryy9dFcyhWr7HDzNGl5gwAAAmA"]
[Wed Sep 30 00:57:57.601760 2026] [security2:error] [pid 187269:tid 187361] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.aws/credentials.bak"] [unique_id "aryy9dFcyhWr7HDzNGl5fgACjVQ"]
[Wed Sep 30 00:57:57.609694 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:5955] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.610139 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:5955] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.643017 2026] [security2:error] [pid 187269:tid 187370] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryy9dFcyhWr7HDzNGl5jAACQl0"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D18177
[Wed Sep 30 00:57:57.666726 2026] [security2:error] [pid 187269:tid 187495] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5kAAAAm0"]
[Wed Sep 30 00:57:57.683141 2026] [security2:error] [pid 187269:tid 187403] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.docker/.env"] [unique_id "aryy9dFcyhWr7HDzNGl5kQACjX4"]
[Wed Sep 30 00:57:57.690907 2026] [security2:error] [pid 187269:tid 187471] [client 216.73.216.46:5955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5lAAAAlU"]
[Wed Sep 30 00:57:57.715458 2026] [security2:error] [pid 187269:tid 187513] [client 116.197.133.25:60250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy9dFcyhWr7HDzNGl5lQAAAn8"]
[Wed Sep 30 00:57:57.715620 2026] [security2:error] [pid 187269:tid 187513] [client 116.197.133.25:60250] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryy9dFcyhWr7HDzNGl5lQAAAn8"]
[Wed Sep 30 00:57:57.723979 2026] [security2:error] [pid 187269:tid 187375] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env"] [unique_id "aryy9dFcyhWr7HDzNGl5lwACjWI"]
[Wed Sep 30 00:57:57.724021 2026] [security2:error] [pid 187269:tid 187354] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aryy9dFcyhWr7HDzNGl5mQACjU0"]
[Wed Sep 30 00:57:57.739144 2026] [security2:error] [pid 186850:tid 186908] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env.backup"] [unique_id "aryy9U5Phls--iYlcKgFdQABZzk"]
[Wed Sep 30 00:57:57.766008 2026] [security2:error] [pid 187269:tid 187520] [client 104.234.32.222:42997] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryy9dFcyhWr7HDzNGl5nwAAAoY"]
[Wed Sep 30 00:57:57.789421 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.789831 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.811523 2026] [security2:error] [pid 186850:tid 186876] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env.bak"] [unique_id "aryy9U5Phls--iYlcKgFeAABDhk"]
[Wed Sep 30 00:57:57.856396 2026] [security2:error] [pid 187269:tid 187473] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9dFcyhWr7HDzNGl5qQAAAlc"]
[Wed Sep 30 00:57:57.872969 2026] [security2:error] [pid 187269:tid 187392] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env.backup"] [unique_id "aryy9dFcyhWr7HDzNGl5rAACjXM"]
[Wed Sep 30 00:57:57.878891 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:30943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xwpg.php"] [unique_id "aryy9U5Phls--iYlcKgFggAAAUY"]
[Wed Sep 30 00:57:57.882518 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.882950 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:57.949581 2026] [security2:error] [pid 187269:tid 187389] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env.bak"] [unique_id "aryy9dFcyhWr7HDzNGl5swACjXA"]
[Wed Sep 30 00:57:57.970857 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:57.971137 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.004897 2026] [security2:error] [pid 186850:tid 186866] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env.old"] [unique_id "aryy9k5Phls--iYlcKgFjAABDg8"]
[Wed Sep 30 00:57:58.017967 2026] [security2:error] [pid 186850:tid 186945] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env.php"] [unique_id "aryy9k5Phls--iYlcKgFjgABDl4"]
[Wed Sep 30 00:57:58.045262 2026] [security2:error] [pid 187269:tid 187474] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9tFcyhWr7HDzNGl5zAAAAlg"]
[Wed Sep 30 00:57:58.065712 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.065995 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.080499 2026] [security2:error] [pid 186850:tid 186947] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env.swp"] [unique_id "aryy9k5Phls--iYlcKgFmAABDmA"]
[Wed Sep 30 00:57:58.114091 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 00:57:58.114525 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 00:57:58.135307 2026] [security2:error] [pid 187269:tid 187394] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/.env.php"] [unique_id "aryy9tFcyhWr7HDzNGl54QACjXU"]
[Wed Sep 30 00:57:58.135318 2026] [security2:error] [pid 187269:tid 187378] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env.old"] [unique_id "aryy9tFcyhWr7HDzNGl54AACjWU"]
[Wed Sep 30 00:57:58.155322 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.155778 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.171486 2026] [security2:error] [pid 186850:tid 187049] [client 52.231.69.245:30847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/flamini.php"] [unique_id "aryy9k5Phls--iYlcKgFpwAAAU8"]
[Wed Sep 30 00:57:58.218035 2026] [security2:error] [pid 186850:tid 186856] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/.env~"] [unique_id "aryy9k5Phls--iYlcKgFqQABDgU"]
[Wed Sep 30 00:57:58.235365 2026] [security2:error] [pid 187269:tid 187437] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9tFcyhWr7HDzNGl58AAAAjM"]
[Wed Sep 30 00:57:58.244978 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.245432 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.272453 2026] [security2:error] [pid 187269:tid 187281] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env.swp"] [unique_id "aryy9tFcyhWr7HDzNGl58wACjQQ"]
[Wed Sep 30 00:57:58.332975 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.333247 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.400156 2026] [security2:error] [pid 187269:tid 187481] [client 4.240.25.22:21519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-manager.php"] [unique_id "aryy9tFcyhWr7HDzNGl5_AAAAl8"]
[Wed Sep 30 00:57:58.412159 2026] [security2:error] [pid 186850:tid 186868] [remote 64.23.166.180:26360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eod.bch.mybluehost.me"] [uri "/.env"] [unique_id "aryy9k5Phls--iYlcKgFuQABgRE"]
[Wed Sep 30 00:57:58.432505 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.432954 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.435705 2026] [security2:error] [pid 187269:tid 187512] [client 52.231.69.245:30818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/themes.php"] [unique_id "aryy9tFcyhWr7HDzNGl6AAAAAn4"]
[Wed Sep 30 00:57:58.440213 2026] [security2:error] [pid 187269:tid 187492] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9tFcyhWr7HDzNGl5_wAAAmo"]
[Wed Sep 30 00:57:58.481537 2026] [security2:error] [pid 186850:tid 187054] [client 20.219.2.60:19450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/bnm.php"] [unique_id "aryy9k5Phls--iYlcKgFxAAAAVQ"]
[Wed Sep 30 00:57:58.520679 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.521128 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:49589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.596408 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2F0dHI=
[Wed Sep 30 00:57:58.596846 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2F0dHI=
[Wed Sep 30 00:57:58.604291 2026] [security2:error] [pid 187269:tid 187292] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/.env~"] [unique_id "aryy9tFcyhWr7HDzNGl6EgACjQ8"]
[Wed Sep 30 00:57:58.607100 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.607370 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.629652 2026] [security2:error] [pid 187269:tid 187502] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9tFcyhWr7HDzNGl6GAAAAnQ"]
[Wed Sep 30 00:57:58.660106 2026] [security2:error] [pid 186850:tid 187064] [client 155.190.6.18:33942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy9k5Phls--iYlcKgF2QAAAV4"]
[Wed Sep 30 00:57:58.698996 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.699455 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.707173 2026] [security2:error] [pid 186850:tid 187017] [client 52.231.69.245:30795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/0.php"] [unique_id "aryy9k5Phls--iYlcKgF4AAAAS8"]
[Wed Sep 30 00:57:58.804571 2026] [security2:error] [pid 187269:tid 187468] [client 20.219.19.141:46514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/blacks.php"] [unique_id "aryy9tFcyhWr7HDzNGl6JwAAAlI"]
[Wed Sep 30 00:57:58.819635 2026] [security2:error] [pid 187269:tid 187431] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy9tFcyhWr7HDzNGl6KAAAAi0"]
[Wed Sep 30 00:57:58.841074 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.841334 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:58.875406 2026] [security2:error] [pid 187269:tid 187429] [client 181.215.65.185:41219] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryy9tFcyhWr7HDzNGl6NAAAAis"]
[Wed Sep 30 00:57:58.913231 2026] [security2:error] [pid 186850:tid 187073] [client 216.73.216.46:49589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy9k5Phls--iYlcKgF6QAAAWc"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvcGtp
[Wed Sep 30 00:57:58.925592 2026] [security2:error] [pid 186850:tid 187064] [client 155.190.6.18:33942] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy9k5Phls--iYlcKgF2QAAAV4"]
[Wed Sep 30 00:57:58.934188 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:58.934459 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.009784 2026] [security2:error] [pid 187269:tid 187419] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6PQAAAiE"]
[Wed Sep 30 00:57:59.024358 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.024626 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.046270 2026] [security2:error] [pid 187269:tid 187410] [client 52.231.69.245:30790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/opsh.php"] [unique_id "aryy99FcyhWr7HDzNGl6QgAAAhg"]
[Wed Sep 30 00:57:59.063441 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.063756 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:63340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.084277 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2F0dHI=
[Wed Sep 30 00:57:59.084737 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2F0dHI=
[Wed Sep 30 00:57:59.148126 2026] [security2:error] [pid 187269:tid 187437] [client 216.73.216.46:63340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6RQAAAjM"]
[Wed Sep 30 00:57:59.199616 2026] [security2:error] [pid 187269:tid 187472] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6RwAAAlY"]
[Wed Sep 30 00:57:59.246751 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.247023 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.339975 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.340246 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.391198 2026] [security2:error] [pid 187269:tid 187444] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6TQAAAjo"]
[Wed Sep 30 00:57:59.412910 2026] [security2:error] [pid 186850:tid 187049] [client 52.231.69.245:30836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/media.php"] [unique_id "aryy905Phls--iYlcKgF_AAAAU8"]
[Wed Sep 30 00:57:59.443965 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.444425 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.458971 2026] [security2:error] [pid 187269:tid 187448] [client 20.219.2.60:18831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/amax.php"] [unique_id "aryy99FcyhWr7HDzNGl6VgAAAj4"]
[Wed Sep 30 00:57:59.520994 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.521282 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.554047 2026] [security2:error] [pid 186850:tid 186873] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/api/.env"] [unique_id "aryy905Phls--iYlcKgGFwABDhY"]
[Wed Sep 30 00:57:59.557335 2026] [security2:error] [pid 186850:tid 187056] [client 45.138.12.43:10716] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qsk.vpu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy905Phls--iYlcKgGGQAAAVY"]
[Wed Sep 30 00:57:59.570308 2026] [security2:error] [pid 186850:tid 186976] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/api/phpinfo.php"] [unique_id "aryy905Phls--iYlcKgGGgABDn0"]
[Wed Sep 30 00:57:59.580788 2026] [security2:error] [pid 187269:tid 187488] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6ZwAAAmY"]
[Wed Sep 30 00:57:59.586210 2026] [access_compat:error] [pid 186850:tid 187090] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:57:59.586476 2026] [access_compat:error] [pid 186850:tid 187090] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:57:59.611686 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.611965 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:34264] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.647673 2026] [security2:error] [pid 186850:tid 186897] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/application/.env"] [unique_id "aryy905Phls--iYlcKgGJgABDi4"]
[Wed Sep 30 00:57:59.647836 2026] [security2:error] [pid 187269:tid 187310] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/api/phpinfo.php"] [unique_id "aryy99FcyhWr7HDzNGl6cAACjSE"]
[Wed Sep 30 00:57:59.648679 2026] [security2:error] [pid 187269:tid 187315] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/app/.env"] [unique_id "aryy99FcyhWr7HDzNGl6cQACjSY"]
[Wed Sep 30 00:57:59.648726 2026] [security2:error] [pid 187269:tid 187288] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/application/.env"] [unique_id "aryy99FcyhWr7HDzNGl6cgACjQs"]
[Wed Sep 30 00:57:59.648769 2026] [security2:error] [pid 187269:tid 187312] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/api/.env"] [unique_id "aryy99FcyhWr7HDzNGl6dAACjSM"]
[Wed Sep 30 00:57:59.648877 2026] [security2:error] [pid 186850:tid 186939] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/app/.env"] [unique_id "aryy905Phls--iYlcKgGJQABDlg"]
[Wed Sep 30 00:57:59.652058 2026] [security2:error] [pid 186850:tid 186877] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/back/.env"] [unique_id "aryy905Phls--iYlcKgGKgABDho"]
[Wed Sep 30 00:57:59.656418 2026] [security2:error] [pid 186850:tid 186867] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/backend/.env"] [unique_id "aryy905Phls--iYlcKgGKwABDhA"]
[Wed Sep 30 00:57:59.687293 2026] [security2:error] [pid 186850:tid 186923] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/backup/.env"] [unique_id "aryy905Phls--iYlcKgGLQABDkg"]
[Wed Sep 30 00:57:59.689917 2026] [security2:error] [pid 186850:tid 186872] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/cms/.env"] [unique_id "aryy905Phls--iYlcKgGLgABDhU"]
[Wed Sep 30 00:57:59.697860 2026] [security2:error] [pid 187269:tid 187527] [client 52.231.69.245:31364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/images.php"] [unique_id "aryy99FcyhWr7HDzNGl6fQAAAow"]
[Wed Sep 30 00:57:59.701516 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.701824 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:41486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.770667 2026] [security2:error] [pid 187269:tid 187423] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6gQAAAiU"]
[Wed Sep 30 00:57:59.784796 2026] [security2:error] [pid 187269:tid 187311] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/back/.env"] [unique_id "aryy99FcyhWr7HDzNGl6gwACjSI"]
[Wed Sep 30 00:57:59.784796 2026] [security2:error] [pid 187269:tid 187318] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/backend/.env"] [unique_id "aryy99FcyhWr7HDzNGl6hQACjSk"]
[Wed Sep 30 00:57:59.787146 2026] [security2:error] [pid 187269:tid 187484] [client 216.73.216.46:41486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6hgAAAmI"]
[Wed Sep 30 00:57:59.791567 2026] [security2:error] [pid 186850:tid 186857] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/config.php"] [unique_id "aryy905Phls--iYlcKgGNgABDgY"]
[Wed Sep 30 00:57:59.810549 2026] [security2:error] [pid 186850:tid 186997] [client 182.69.182.151:26643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy905Phls--iYlcKgGNwAAARs"]
[Wed Sep 30 00:57:59.811260 2026] [security2:error] [pid 186850:tid 186997] [client 182.69.182.151:26643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryy905Phls--iYlcKgGNwAAARs"]
[Wed Sep 30 00:57:59.826854 2026] [security2:error] [pid 186850:tid 186852] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/config/.env"] [unique_id "aryy905Phls--iYlcKgGOQABDgE"]
[Wed Sep 30 00:57:59.840384 2026] [security2:error] [pid 187269:tid 187431] [client 45.138.12.43:10770] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qom.xio.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy99FcyhWr7HDzNGl6igAAAi0"]
[Wed Sep 30 00:57:59.885455 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.885727 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.886242 2026] [security2:error] [pid 187269:tid 187505] [client 20.219.19.141:23803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/class-wp-http-client.php"] [unique_id "aryy99FcyhWr7HDzNGl6kQAAAnc"]
[Wed Sep 30 00:57:59.897488 2026] [security2:error] [pid 187269:tid 187508] [client 4.196.65.241:19486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/pep.php"] [unique_id "aryy99FcyhWr7HDzNGl6kgAAAno"]
[Wed Sep 30 00:57:59.911220 2026] [security2:error] [pid 186850:tid 187035] [client 20.70.173.30:62852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/mh.php"] [unique_id "aryy905Phls--iYlcKgGQAAAAUE"]
[Wed Sep 30 00:57:59.921386 2026] [security2:error] [pid 187269:tid 187299] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/backup/.env"] [unique_id "aryy99FcyhWr7HDzNGl6kwACjRY"]
[Wed Sep 30 00:57:59.922721 2026] [security2:error] [pid 187269:tid 187309] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/cms/.env"] [unique_id "aryy99FcyhWr7HDzNGl6lAACjSA"]
[Wed Sep 30 00:57:59.928319 2026] [security2:error] [pid 186850:tid 186934] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/core/.env"] [unique_id "aryy905Phls--iYlcKgGQQABDlM"]
[Wed Sep 30 00:57:59.959966 2026] [security2:error] [pid 187269:tid 187410] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy99FcyhWr7HDzNGl6mQAAAhg"]
[Wed Sep 30 00:57:59.967589 2026] [security2:error] [pid 186850:tid 187050] [client 20.194.30.107:64715] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.steaminnovationfoundation.org"] [uri "/1.php"] [unique_id "aryy905Phls--iYlcKgGRwAAAVA"]
[Wed Sep 30 00:57:59.967705 2026] [security2:error] [pid 186850:tid 187050] [client 20.194.30.107:64715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/1.php"] [unique_id "aryy905Phls--iYlcKgGRwAAAVA"]
[Wed Sep 30 00:57:59.975617 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:57:59.975927 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:57:59.979291 2026] [security2:error] [pid 187269:tid 187474] [client 4.196.65.241:27311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/2rrtccj7.php"] [unique_id "aryy99FcyhWr7HDzNGl6nAAAAlg"]
[Wed Sep 30 00:58:00.013083 2026] [security2:error] [pid 187269:tid 187502] [client 216.73.216.46:34264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy-NFcyhWr7HDzNGl6nwAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMvcnd0YWIuZA%3D%3D
[Wed Sep 30 00:58:00.031267 2026] [security2:error] [pid 187269:tid 187414] [client 52.231.69.245:31389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ops.php"] [unique_id "aryy-NFcyhWr7HDzNGl6oAAAAhw"]
[Wed Sep 30 00:58:00.056690 2026] [security2:error] [pid 186850:tid 187066] [client 37.41.16.35:65054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGSwAAAWA"]
[Wed Sep 30 00:58:00.056856 2026] [security2:error] [pid 186850:tid 187066] [client 37.41.16.35:65054] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGSwAAAWA"]
[Wed Sep 30 00:58:00.065358 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.065625 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.069157 2026] [security2:error] [pid 187269:tid 187469] [client 103.241.204.139:53070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl6pgAAAlM"]
[Wed Sep 30 00:58:00.069251 2026] [security2:error] [pid 187269:tid 187469] [client 103.241.204.139:53070] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl6pgAAAlM"]
[Wed Sep 30 00:58:00.082322 2026] [security2:error] [pid 186850:tid 187055] [client 20.28.180.172:29595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/nmd.php"] [unique_id "aryy-E5Phls--iYlcKgGTQAAAVU"]
[Wed Sep 30 00:58:00.133520 2026] [security2:error] [pid 187269:tid 187475] [client 116.193.128.26:60655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl6qAAAAlk"]
[Wed Sep 30 00:58:00.134072 2026] [security2:error] [pid 187269:tid 187475] [client 116.193.128.26:60655] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl6qAAAAlk"]
[Wed Sep 30 00:58:00.138206 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:58:00.138489 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:58:00.149769 2026] [security2:error] [pid 187269:tid 187517] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-NFcyhWr7HDzNGl6qQAAAoM"]
[Wed Sep 30 00:58:00.157176 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.157514 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.208420 2026] [security2:error] [pid 187269:tid 187522] [client 20.198.74.230:24128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/koiy.php"] [unique_id "aryy-NFcyhWr7HDzNGl6rAAAAoc"]
[Wed Sep 30 00:58:00.248431 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.248691 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.278221 2026] [security2:error] [pid 186850:tid 187042] [client 45.138.12.32:17204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uqx.cle.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy-E5Phls--iYlcKgGVQAAAUg"]
[Wed Sep 30 00:58:00.332899 2026] [security2:error] [pid 187269:tid 187534] [client 45.156.62.96:56034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl6rQAAApM"]
[Wed Sep 30 00:58:00.339938 2026] [security2:error] [pid 187269:tid 187485] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-NFcyhWr7HDzNGl6wAAAAmM"]
[Wed Sep 30 00:58:00.404675 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.405130 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.413274 2026] [security2:error] [pid 186850:tid 186992] [client 52.231.69.245:30822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/mac.php"] [unique_id "aryy-E5Phls--iYlcKgGWwAAARY"]
[Wed Sep 30 00:58:00.483462 2026] [security2:error] [pid 187269:tid 187457] [client 4.240.25.22:21902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/fling.php"] [unique_id "aryy-NFcyhWr7HDzNGl6yAAAAkc"]
[Wed Sep 30 00:58:00.498493 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.498952 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.510738 2026] [security2:error] [pid 186850:tid 187000] [client 104.234.32.234:62223] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "moresolutionsjrz.geyserjz.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryy-E5Phls--iYlcKgGXwAAAR4"]
[Wed Sep 30 00:58:00.526957 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.527356 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.529456 2026] [security2:error] [pid 187269:tid 187430] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-NFcyhWr7HDzNGl6zAAAAiw"]
[Wed Sep 30 00:58:00.567095 2026] [security2:error] [pid 187269:tid 187317] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/config.php"] [unique_id "aryy-NFcyhWr7HDzNGl60AACjSg"]
[Wed Sep 30 00:58:00.594542 2026] [security2:error] [pid 186850:tid 186959] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/database.sql"] [unique_id "aryy-E5Phls--iYlcKgGZQABDmw"]
[Wed Sep 30 00:58:00.600778 2026] [security2:error] [pid 186850:tid 186892] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/dev/.env"] [unique_id "aryy-E5Phls--iYlcKgGZgABDik"]
[Wed Sep 30 00:58:00.601658 2026] [security2:error] [pid 187269:tid 187329] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/config/.env"] [unique_id "aryy-NFcyhWr7HDzNGl60gACjTQ"]
[Wed Sep 30 00:58:00.611147 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.611418 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.645603 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2F0dHI=
[Wed Sep 30 00:58:00.645883 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2F0dHI=
[Wed Sep 30 00:58:00.649181 2026] [security2:error] [pid 187269:tid 187476] [client 4.240.25.22:43783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/key.php"] [unique_id "aryy-NFcyhWr7HDzNGl63QAAAlo"]
[Wed Sep 30 00:58:00.658668 2026] [security2:error] [pid 187269:tid 187326] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/core/.env"] [unique_id "aryy-NFcyhWr7HDzNGl64QACjTE"]
[Wed Sep 30 00:58:00.672578 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.2.60:18866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/66.php"] [unique_id "aryy-NFcyhWr7HDzNGl65AAAAlU"]
[Wed Sep 30 00:58:00.701648 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.701925 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.703453 2026] [security2:error] [pid 187269:tid 187341] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/database.sql"] [unique_id "aryy-NFcyhWr7HDzNGl67QACjUA"]
[Wed Sep 30 00:58:00.719401 2026] [security2:error] [pid 187269:tid 187513] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-NFcyhWr7HDzNGl67gAAAn8"]
[Wed Sep 30 00:58:00.730916 2026] [security2:error] [pid 187269:tid 187328] [remote 57.141.14.49:35372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "aryy-NFcyhWr7HDzNGl65QACZDM"]
[Wed Sep 30 00:58:00.731131 2026] [security2:error] [pid 186850:tid 186920] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/frontend/.env"] [unique_id "aryy-E5Phls--iYlcKgGcgABDkU"]
[Wed Sep 30 00:58:00.732129 2026] [security2:error] [pid 187269:tid 187428] [client 52.231.69.245:30938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/pass4.php"] [unique_id "aryy-NFcyhWr7HDzNGl67wAAAio"]
[Wed Sep 30 00:58:00.738752 2026] [security2:error] [pid 187269:tid 187332] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/dev/.env"] [unique_id "aryy-NFcyhWr7HDzNGl68AACjTc"]
[Wed Sep 30 00:58:00.742682 2026] [security2:error] [pid 186850:tid 187030] [client 152.59.169.65:54451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGcwAAATw"]
[Wed Sep 30 00:58:00.742792 2026] [security2:error] [pid 186850:tid 187030] [client 152.59.169.65:54451] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGcwAAATw"]
[Wed Sep 30 00:58:00.746143 2026] [security2:error] [pid 186850:tid 187005] [client 103.159.192.142:63451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGdQAAASM"]
[Wed Sep 30 00:58:00.746269 2026] [security2:error] [pid 186850:tid 187005] [client 103.159.192.142:63451] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGdQAAASM"]
[Wed Sep 30 00:58:00.794907 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.795186 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.830507 2026] [security2:error] [pid 187269:tid 187525] [client 168.107.70.193:55977] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.msstch.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "aryy-NFcyhWr7HDzNGl69AAAAoo"]
[Wed Sep 30 00:58:00.866635 2026] [security2:error] [pid 186850:tid 186895] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/info.php"] [unique_id "aryy-E5Phls--iYlcKgGegABDiw"]
[Wed Sep 30 00:58:00.883636 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.883908 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:00.888572 2026] [security2:error] [pid 187269:tid 187416] [client 20.194.30.107:17509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/red.php"] [unique_id "aryy-NFcyhWr7HDzNGl6_AAAAh4"]
[Wed Sep 30 00:58:00.897073 2026] [security2:error] [pid 186850:tid 187025] [client 49.36.41.37:51016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGewAAATc"]
[Wed Sep 30 00:58:00.897158 2026] [security2:error] [pid 186850:tid 187025] [client 49.36.41.37:51016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryy-E5Phls--iYlcKgGewAAATc"]
[Wed Sep 30 00:58:00.911251 2026] [security2:error] [pid 187269:tid 187441] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-NFcyhWr7HDzNGl7AQAAAjc"]
[Wed Sep 30 00:58:00.975737 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:00.976029 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.003178 2026] [security2:error] [pid 186850:tid 186956] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/laravel/.env"] [unique_id "aryy-U5Phls--iYlcKgGiQABDmk"]
[Wed Sep 30 00:58:01.006400 2026] [security2:error] [pid 186850:tid 187047] [client 52.231.69.245:30845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/drttewyh.php"] [unique_id "aryy-U5Phls--iYlcKgGigAAAU0"]
[Wed Sep 30 00:58:01.067605 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.067885 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.093402 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:58:01.093684 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L3Jvb3Q=
[Wed Sep 30 00:58:01.098748 2026] [security2:error] [pid 187269:tid 187517] [client 4.196.65.241:2513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/fsfrl.php"] [unique_id "aryy-dFcyhWr7HDzNGl7IQAAAoM"]
[Wed Sep 30 00:58:01.100557 2026] [security2:error] [pid 187269:tid 187466] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-dFcyhWr7HDzNGl7IgAAAlA"]
[Wed Sep 30 00:58:01.109165 2026] [security2:error] [pid 187269:tid 187532] [client 114.26.150.233:59163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.150.26.114.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7HAAAApE"]
[Wed Sep 30 00:58:01.109297 2026] [security2:error] [pid 187269:tid 187532] [client 114.26.150.233:59163] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "centuryslateandcopper.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7HAAAApE"]
[Wed Sep 30 00:58:01.140242 2026] [security2:error] [pid 186850:tid 186876] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/media/.env"] [unique_id "aryy-U5Phls--iYlcKgGjAABDhk"]
[Wed Sep 30 00:58:01.163487 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.163919 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.182142 2026] [security2:error] [pid 187269:tid 187440] [client 20.219.19.141:23949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/zoo2.php"] [unique_id "aryy-dFcyhWr7HDzNGl7LgAAAjY"]
[Wed Sep 30 00:58:01.250606 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.250881 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.262526 2026] [security2:error] [pid 187269:tid 187510] [client 150.107.232.159:35616] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7NQAAAnw"]
[Wed Sep 30 00:58:01.262634 2026] [security2:error] [pid 187269:tid 187510] [client 150.107.232.159:35616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7NQAAAnw"]
[Wed Sep 30 00:58:01.276760 2026] [security2:error] [pid 186850:tid 186866] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/new/.env"] [unique_id "aryy-U5Phls--iYlcKgGkgABDg8"]
[Wed Sep 30 00:58:01.291386 2026] [security2:error] [pid 187269:tid 187435] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-dFcyhWr7HDzNGl7NwAAAjE"]
[Wed Sep 30 00:58:01.292906 2026] [security2:error] [pid 186850:tid 187067] [client 52.231.69.245:30809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/sh.php"] [unique_id "aryy-U5Phls--iYlcKgGkwAAAWE"]
[Wed Sep 30 00:58:01.316560 2026] [security2:error] [pid 186850:tid 187045] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryy-U5Phls--iYlcKgGlQAAAUs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:01.344346 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.344776 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.369453 2026] [security2:error] [pid 187269:tid 187444] [client 223.181.30.165:24066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7OwAAAjo"]
[Wed Sep 30 00:58:01.369703 2026] [security2:error] [pid 187269:tid 187444] [client 223.181.30.165:24066] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7OwAAAjo"]
[Wed Sep 30 00:58:01.376386 2026] [security2:error] [pid 187269:tid 187534] [client 103.172.210.103:53200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7PQAAApM"]
[Wed Sep 30 00:58:01.376552 2026] [security2:error] [pid 187269:tid 187534] [client 103.172.210.103:53200] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7PQAAApM"]
[Wed Sep 30 00:58:01.417314 2026] [security2:error] [pid 186850:tid 186947] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/old/.env"] [unique_id "aryy-U5Phls--iYlcKgGmwABDmA"]
[Wed Sep 30 00:58:01.440049 2026] [access_compat:error] [pid 187269:tid 187478] [client 47.82.11.53:49896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:01.440526 2026] [access_compat:error] [pid 187269:tid 187478] [client 47.82.11.53:49896] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:01.441350 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.441778 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:49961] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.486838 2026] [security2:error] [pid 187269:tid 187466] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-dFcyhWr7HDzNGl7RgAAAlA"]
[Wed Sep 30 00:58:01.501662 2026] [security2:error] [pid 186850:tid 186890] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.magia.vegas"] [uri "/phpinfo.php"] [unique_id "aryy-U5Phls--iYlcKgGoQABDic"]
[Wed Sep 30 00:58:01.522709 2026] [security2:error] [pid 186850:tid 186901] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/production/.env"] [unique_id "aryy-U5Phls--iYlcKgGpgABDjI"]
[Wed Sep 30 00:58:01.525091 2026] [security2:error] [pid 186850:tid 186913] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/public/.env"] [unique_id "aryy-U5Phls--iYlcKgGpwABDj4"]
[Wed Sep 30 00:58:01.527417 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.527730 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.556579 2026] [security2:error] [pid 187269:tid 187367] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/frontend/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7TgACjVo"]
[Wed Sep 30 00:58:01.564464 2026] [security2:error] [pid 186850:tid 186929] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/server/.env"] [unique_id "aryy-U5Phls--iYlcKgGrAABDk4"]
[Wed Sep 30 00:58:01.588715 2026] [security2:error] [pid 187269:tid 187431] [client 52.231.69.245:30930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/groud1.php"] [unique_id "aryy-dFcyhWr7HDzNGl7UQAAAi0"]
[Wed Sep 30 00:58:01.614705 2026] [security2:error] [pid 187269:tid 187372] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/info.php"] [unique_id "aryy-dFcyhWr7HDzNGl7UwACjV8"]
[Wed Sep 30 00:58:01.619010 2026] [access_compat:error] [pid 187269:tid 187512] [client 47.79.13.1:47136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:01.619271 2026] [access_compat:error] [pid 187269:tid 187512] [client 47.79.13.1:47136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:01.624059 2026] [security2:error] [pid 187269:tid 187374] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/laravel/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7VQACjWE"]
[Wed Sep 30 00:58:01.625480 2026] [security2:error] [pid 187269:tid 187370] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/media/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7VgACjV0"]
[Wed Sep 30 00:58:01.626676 2026] [security2:error] [pid 186850:tid 186881] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/src/.env"] [unique_id "aryy-U5Phls--iYlcKgGsAABDh4"]
[Wed Sep 30 00:58:01.627627 2026] [security2:error] [pid 187269:tid 187359] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/new/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7VwACjVI"]
[Wed Sep 30 00:58:01.632173 2026] [security2:error] [pid 187269:tid 187376] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/old/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7WQACjWM"]
[Wed Sep 30 00:58:01.632473 2026] [security2:error] [pid 186850:tid 186917] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/staging/.env"] [unique_id "aryy-U5Phls--iYlcKgGsgABDkI"]
[Wed Sep 30 00:58:01.635327 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:58:01.635565 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 00:58:01.637601 2026] [security2:error] [pid 186850:tid 186937] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/test/.env"] [unique_id "aryy-U5Phls--iYlcKgGswABDlY"]
[Wed Sep 30 00:58:01.676795 2026] [security2:error] [pid 187269:tid 187446] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-dFcyhWr7HDzNGl7XQAAAjw"]
[Wed Sep 30 00:58:01.682740 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.683018 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.693631 2026] [security2:error] [pid 186850:tid 186893] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "marcelafernandes.magia.vegas"] [uri "/wp-config.php.bak"] [unique_id "aryy-U5Phls--iYlcKgGuQABDio"]
[Wed Sep 30 00:58:01.694169 2026] [security2:error] [pid 186850:tid 186912] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/v1/.env"] [unique_id "aryy-U5Phls--iYlcKgGtgABDj0"]
[Wed Sep 30 00:58:01.694298 2026] [security2:error] [pid 186850:tid 186886] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/v2/.env"] [unique_id "aryy-U5Phls--iYlcKgGugABDiM"]
[Wed Sep 30 00:58:01.694299 2026] [security2:error] [pid 186850:tid 186968] [remote 35.241.239.86:43348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.magia.vegas"] [uri "/web/.env"] [unique_id "aryy-U5Phls--iYlcKgGuAABDnU"]
[Wed Sep 30 00:58:01.695888 2026] [security2:error] [pid 187269:tid 187375] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.239.241.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcelafernandes.com"] [uri "/phpinfo.php"] [unique_id "aryy-dFcyhWr7HDzNGl7XgACjWI"]
[Wed Sep 30 00:58:01.700696 2026] [security2:error] [pid 187269:tid 187354] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/public/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7YgACjU0"]
[Wed Sep 30 00:58:01.700743 2026] [security2:error] [pid 187269:tid 187353] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/production/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7YwACjUw"]
[Wed Sep 30 00:58:01.700776 2026] [security2:error] [pid 187269:tid 187365] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/server/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7YQACjVg"]
[Wed Sep 30 00:58:01.725705 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.725975 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.726258 2026] [security2:error] [pid 187269:tid 187383] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/src/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7cwACjWo"]
[Wed Sep 30 00:58:01.751533 2026] [security2:error] [pid 187269:tid 187364] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/staging/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7dwACjVc"]
[Wed Sep 30 00:58:01.760911 2026] [security2:error] [pid 187269:tid 187342] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/test/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7eAACjUE"]
[Wed Sep 30 00:58:01.761373 2026] [security2:error] [pid 187269:tid 187388] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/v1/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7eQACjW8"]
[Wed Sep 30 00:58:01.763618 2026] [security2:error] [pid 187269:tid 187392] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/v2/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7egACjXM"]
[Wed Sep 30 00:58:01.765541 2026] [security2:error] [pid 187269:tid 187455] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy-dFcyhWr7HDzNGl7ewAAAkU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:01.787977 2026] [security2:error] [pid 187269:tid 187515] [client 20.70.173.30:44723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryy-dFcyhWr7HDzNGl7gAAAAoE"]
[Wed Sep 30 00:58:01.797186 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.797458 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.798523 2026] [security2:error] [pid 186850:tid 187000] [client 20.219.2.60:18935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/public/file.php"] [unique_id "aryy-U5Phls--iYlcKgGyQAAAR4"]
[Wed Sep 30 00:58:01.831517 2026] [security2:error] [pid 187269:tid 187389] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marcelafernandes.com"] [uri "/web/.env"] [unique_id "aryy-dFcyhWr7HDzNGl7hwACjXA"]
[Wed Sep 30 00:58:01.836173 2026] [security2:error] [pid 187269:tid 187385] [remote 35.241.239.86:43360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "marcelafernandes.com"] [uri "/wp-config.php.bak"] [unique_id "aryy-dFcyhWr7HDzNGl7igACjWw"]
[Wed Sep 30 00:58:01.858488 2026] [security2:error] [pid 187269:tid 187463] [client 49.43.163.212:60675] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7kQAAAk0"]
[Wed Sep 30 00:58:01.858610 2026] [security2:error] [pid 187269:tid 187463] [client 49.43.163.212:60675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryy-dFcyhWr7HDzNGl7kQAAAk0"]
[Wed Sep 30 00:58:01.864273 2026] [security2:error] [pid 187269:tid 187516] [client 216.73.216.46:49961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy-dFcyhWr7HDzNGl7lgAAAoI"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMvcGtpL2phdmE%3D
[Wed Sep 30 00:58:01.865858 2026] [security2:error] [pid 187269:tid 187452] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-dFcyhWr7HDzNGl7lwAAAkI"]
[Wed Sep 30 00:58:01.877713 2026] [security2:error] [pid 187269:tid 187499] [client 52.231.69.245:30927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/bro.php"] [unique_id "aryy-dFcyhWr7HDzNGl7mAAAAnE"]
[Wed Sep 30 00:58:01.889660 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:01.890096 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:01.952026 2026] [security2:error] [pid 186850:tid 186981] [client 20.198.74.230:41358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/edit-tags.php"] [unique_id "aryy-U5Phls--iYlcKgG0wAAAQs"]
[Wed Sep 30 00:58:01.967302 2026] [security2:error] [pid 187269:tid 187534] [client 4.240.25.22:21520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/felnggg.php"] [unique_id "aryy-dFcyhWr7HDzNGl7qAAAApM"]
[Wed Sep 30 00:58:01.975520 2026] [security2:error] [pid 187269:tid 187484] [client 193.163.77.143:41814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.77.163.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoorenvironmentaltesting.com"] [uri "/wp-login.php"] [unique_id "aryy-dFcyhWr7HDzNGl7pgAAAmI"]
[Wed Sep 30 00:58:01.998419 2026] [security2:error] [pid 187269:tid 187502] [client 20.194.30.107:10150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/8.php"] [unique_id "aryy-dFcyhWr7HDzNGl7rQAAAnQ"]
[Wed Sep 30 00:58:02.029550 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.029823 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.060241 2026] [security2:error] [pid 187269:tid 187483] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-tFcyhWr7HDzNGl7sQAAAmE"]
[Wed Sep 30 00:58:02.071092 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.071402 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.079922 2026] [security2:error] [pid 187269:tid 187442] [client 20.194.30.107:17428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/classwithtostring.php"] [unique_id "aryy-tFcyhWr7HDzNGl7swAAAjg"]
[Wed Sep 30 00:58:02.108156 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:58:02.108452 2026] [access_compat:error] [pid 186850:tid 187095] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L3Jvb3Q=
[Wed Sep 30 00:58:02.145102 2026] [security2:error] [pid 187269:tid 187410] [client 52.231.69.245:30966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ac83.php"] [unique_id "aryy-tFcyhWr7HDzNGl7twAAAhg"]
[Wed Sep 30 00:58:02.215905 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.216159 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.250892 2026] [security2:error] [pid 187269:tid 187438] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-tFcyhWr7HDzNGl7ugAAAjQ"]
[Wed Sep 30 00:58:02.252087 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.252463 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.312246 2026] [security2:error] [pid 187269:tid 187422] [client 20.28.180.172:34273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/dhlcu.php"] [unique_id "aryy-tFcyhWr7HDzNGl7wAAAAiQ"]
[Wed Sep 30 00:58:02.344326 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.344587 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:19829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.400255 2026] [security2:error] [pid 186850:tid 187004] [client 4.196.65.241:19084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/bhigtouj.php"] [unique_id "aryy-k5Phls--iYlcKgG4AAAASI"]
[Wed Sep 30 00:58:02.426963 2026] [security2:error] [pid 186850:tid 186953] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy-k5Phls--iYlcKgG4wABM2Y"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302280&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:58:02.426998 2026] [security2:error] [pid 186850:tid 186953] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy-k5Phls--iYlcKgG4wABM2Y"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302280&sid=d7211be9d21d387adb03474cddcdd4a0
[Wed Sep 30 00:58:02.427831 2026] [security2:error] [pid 187269:tid 187415] [client 52.231.69.245:31383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/class-wp-http-client.php"] [unique_id "aryy-tFcyhWr7HDzNGl7xAAAAh0"]
[Wed Sep 30 00:58:02.440456 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.440953 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.443259 2026] [security2:error] [pid 187269:tid 187436] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-tFcyhWr7HDzNGl7xwAAAjI"]
[Wed Sep 30 00:58:02.449401 2026] [security2:error] [pid 187269:tid 187518] [client 45.138.12.32:31350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uan.soq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy-tFcyhWr7HDzNGl7yQAAAoQ"]
[Wed Sep 30 00:58:02.528331 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.528693 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.612125 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:58:02.612385 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3Q=
[Wed Sep 30 00:58:02.619631 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.619896 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.633605 2026] [security2:error] [pid 187269:tid 187529] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-tFcyhWr7HDzNGl70QAAAo4"]
[Wed Sep 30 00:58:02.708356 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.708626 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.769065 2026] [security2:error] [pid 187269:tid 187530] [client 216.73.216.46:19829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy-tFcyhWr7HDzNGl71AAAAo8"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL21hbjI%3D
[Wed Sep 30 00:58:02.800175 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.800637 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.807418 2026] [security2:error] [pid 187269:tid 187461] [client 152.59.165.7:52138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy-tFcyhWr7HDzNGl73QAAAks"]
[Wed Sep 30 00:58:02.807552 2026] [security2:error] [pid 187269:tid 187461] [client 152.59.165.7:52138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryy-tFcyhWr7HDzNGl73QAAAks"]
[Wed Sep 30 00:58:02.822706 2026] [security2:error] [pid 187269:tid 187413] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-tFcyhWr7HDzNGl74AAAAhs"]
[Wed Sep 30 00:58:02.851108 2026] [security2:error] [pid 187269:tid 187296] [remote 57.141.14.6:60964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "aryy-tFcyhWr7HDzNGl71wACWBM"]
[Wed Sep 30 00:58:02.893722 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.894147 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:02.903551 2026] [security2:error] [pid 186850:tid 187100] [client 52.231.69.245:30842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/zoo2.php"] [unique_id "aryy-k5Phls--iYlcKgG7QAAAYI"]
[Wed Sep 30 00:58:02.932175 2026] [security2:error] [pid 187269:tid 187406] [client 202.179.95.79:56999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy-tFcyhWr7HDzNGl75gAAAhQ"]
[Wed Sep 30 00:58:02.932284 2026] [security2:error] [pid 187269:tid 187406] [client 202.179.95.79:56999] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryy-tFcyhWr7HDzNGl75gAAAhQ"]
[Wed Sep 30 00:58:02.992844 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:02.993304 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.013326 2026] [security2:error] [pid 187269:tid 187408] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl76wAAAhY"]
[Wed Sep 30 00:58:03.050994 2026] [security2:error] [pid 187269:tid 187411] [client 20.219.19.141:46498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/zoo1.php"] [unique_id "aryy-9FcyhWr7HDzNGl77QAAAhk"]
[Wed Sep 30 00:58:03.079770 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.080240 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.092038 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25z
[Wed Sep 30 00:58:03.092305 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25z
[Wed Sep 30 00:58:03.168754 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.169057 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.203560 2026] [security2:error] [pid 187269:tid 187523] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl78gAAAog"]
[Wed Sep 30 00:58:03.259900 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.260177 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.270636 2026] [security2:error] [pid 186850:tid 187013] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryy-05Phls--iYlcKgG9wAAASs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:03.308908 2026] [security2:error] [pid 187269:tid 187503] [client 52.231.69.245:31380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/zoo1.php"] [unique_id "aryy-9FcyhWr7HDzNGl79wAAAnU"]
[Wed Sep 30 00:58:03.314748 2026] [security2:error] [pid 187269:tid 187496] [client 13.70.4.78:49855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryy-9FcyhWr7HDzNGl7-AAAAm4"]
[Wed Sep 30 00:58:03.328207 2026] [security2:error] [pid 186850:tid 187069] [client 4.196.65.241:27308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/02d4cc85caindex.php"] [unique_id "aryy-05Phls--iYlcKgG-AAAAWM"]
[Wed Sep 30 00:58:03.349772 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.350043 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.374490 2026] [security2:error] [pid 187269:tid 187430] [client 20.194.30.107:10117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/b8.php"] [unique_id "aryy-9FcyhWr7HDzNGl7-gAAAiw"]
[Wed Sep 30 00:58:03.392907 2026] [security2:error] [pid 187269:tid 187491] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl8AAAAAmk"]
[Wed Sep 30 00:58:03.427627 2026] [security2:error] [pid 186850:tid 187060] [client 20.219.2.60:18939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/166.php"] [unique_id "aryy-05Phls--iYlcKgG_wAAAVo"]
[Wed Sep 30 00:58:03.440831 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.441142 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.489656 2026] [security2:error] [pid 187269:tid 187467] [client 203.122.45.246:60264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy-9FcyhWr7HDzNGl8BgAAAlE"]
[Wed Sep 30 00:58:03.489801 2026] [security2:error] [pid 187269:tid 187467] [client 203.122.45.246:60264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryy-9FcyhWr7HDzNGl8BgAAAlE"]
[Wed Sep 30 00:58:03.536033 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.536320 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.554436 2026] [access_compat:error] [pid 187269:tid 187465] [client 47.79.13.1:54026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:03.554743 2026] [access_compat:error] [pid 187269:tid 187465] [client 47.79.13.1:54026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:03.586201 2026] [security2:error] [pid 187269:tid 187455] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl8EgAAAkU"]
[Wed Sep 30 00:58:03.589378 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2F0dHI=
[Wed Sep 30 00:58:03.589625 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2F0dHI=
[Wed Sep 30 00:58:03.624300 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.624565 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.652615 2026] [security2:error] [pid 187269:tid 187450] [client 45.138.12.43:41604] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qom.xio.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy-9FcyhWr7HDzNGl8FwAAAkA"]
[Wed Sep 30 00:58:03.660898 2026] [security2:error] [pid 187269:tid 187510] [client 52.231.69.245:30940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/class-ajax.php"] [unique_id "aryy-9FcyhWr7HDzNGl8GAAAAnw"]
[Wed Sep 30 00:58:03.713376 2026] [security2:error] [pid 187269:tid 187469] [client 13.70.4.78:49802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryy-9FcyhWr7HDzNGl8HQAAAlM"]
[Wed Sep 30 00:58:03.723216 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.723662 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.776327 2026] [security2:error] [pid 187269:tid 187438] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl8IAAAAjQ"]
[Wed Sep 30 00:58:03.810254 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.810681 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.850417 2026] [security2:error] [pid 187269:tid 187533] [client 72.255.10.32:63807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy-9FcyhWr7HDzNGl8JAAAApI"]
[Wed Sep 30 00:58:03.850545 2026] [security2:error] [pid 187269:tid 187533] [client 72.255.10.32:63807] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryy-9FcyhWr7HDzNGl8JAAAApI"]
[Wed Sep 30 00:58:03.898713 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.899042 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:03.965782 2026] [security2:error] [pid 187269:tid 187497] [client 213.35.101.27:56211] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy-9FcyhWr7HDzNGl8KgAAAm8"]
[Wed Sep 30 00:58:03.985549 2026] [security2:error] [pid 187269:tid 187518] [client 52.231.69.245:31403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gm.php"] [unique_id "aryy-9FcyhWr7HDzNGl8LAAAAoQ"]
[Wed Sep 30 00:58:03.990363 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:03.990632 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.001488 2026] [security2:error] [pid 186850:tid 187089] [client 20.219.19.141:46491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/class-ajax.php"] [unique_id "aryy_E5Phls--iYlcKgHDgAAAXc"]
[Wed Sep 30 00:58:04.054831 2026] [security2:error] [pid 187269:tid 187454] [client 45.138.12.32:17328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uwy.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy_NFcyhWr7HDzNGl8LgAAAkQ"]
[Wed Sep 30 00:58:04.080595 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.080863 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.108072 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2F0dHI=
[Wed Sep 30 00:58:04.108356 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2F0dHI=
[Wed Sep 30 00:58:04.143006 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYmxvY2svc2Rj
[Wed Sep 30 00:58:04.143268 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYmxvY2svc2Rj
[Wed Sep 30 00:58:04.144134 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.4.78:49803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryy_NFcyhWr7HDzNGl8MwAAAiI"]
[Wed Sep 30 00:58:04.171513 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.171776 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.263077 2026] [security2:error] [pid 187269:tid 187480] [client 52.231.69.245:30825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/class-wp-site-list.php"] [unique_id "aryy_NFcyhWr7HDzNGl8OAAAAl4"]
[Wed Sep 30 00:58:04.269860 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.270231 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:25982] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.304237 2026] [security2:error] [pid 186850:tid 187020] [client 193.32.127.188:58921] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "917"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_E5Phls--iYlcKgHFgAAATI"]
[Wed Sep 30 00:58:04.335933 2026] [security2:error] [pid 186850:tid 186940] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy_E5Phls--iYlcKgHGAABdVk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131712&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:58:04.335964 2026] [security2:error] [pid 186850:tid 186940] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryy_E5Phls--iYlcKgHGAABdVk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131712&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:58:04.353681 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.354013 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.438762 2026] [security2:error] [pid 186850:tid 186999] [client 154.54.100.187:43102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "mail.izn.soq.mybluehost.me"] [uri "/.git/config"] [unique_id "aryy_E5Phls--iYlcKgHHwAAAR0"]
[Wed Sep 30 00:58:04.444615 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.444906 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.444977 2026] [security2:error] [pid 186850:tid 187057] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy_E5Phls--iYlcKgHIQAAAVc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:04.456022 2026] [security2:error] [pid 186850:tid 187017] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryy_E5Phls--iYlcKgHIgAAAS8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:04.536852 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.537121 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.539354 2026] [security2:error] [pid 187269:tid 187490] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_NFcyhWr7HDzNGl8QAAAAmg"]
[Wed Sep 30 00:58:04.544452 2026] [security2:error] [pid 187269:tid 187477] [client 43.227.131.37:35994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy_NFcyhWr7HDzNGl8QQAAAls"]
[Wed Sep 30 00:58:04.544608 2026] [security2:error] [pid 187269:tid 187477] [client 43.227.131.37:35994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryy_NFcyhWr7HDzNGl8QQAAAls"]
[Wed Sep 30 00:58:04.545272 2026] [security2:error] [pid 187269:tid 187500] [client 52.231.69.245:30794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/asd2.php"] [unique_id "aryy_NFcyhWr7HDzNGl8QgAAAnI"]
[Wed Sep 30 00:58:04.599791 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:04.600256 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:04.615464 2026] [security2:error] [pid 187269:tid 187285] [remote 74.91.221.47:23020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.221.91.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/wp-login.php"] [unique_id "aryy_NFcyhWr7HDzNGl8RQACRQg"]
[Wed Sep 30 00:58:04.628144 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.628453 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.673542 2026] [security2:error] [pid 187269:tid 187410] [client 45.138.12.43:41560] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qkv.mds.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy_NFcyhWr7HDzNGl8SgAAAhg"]
[Wed Sep 30 00:58:04.681751 2026] [security2:error] [pid 186850:tid 186985] [client 216.73.216.46:25982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_E5Phls--iYlcKgHKgAAAQ8"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL21hbjJ4
[Wed Sep 30 00:58:04.714728 2026] [security2:error] [pid 187269:tid 187485] [client 13.70.4.78:49824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/aa.php"] [unique_id "aryy_NFcyhWr7HDzNGl8TwAAAmM"]
[Wed Sep 30 00:58:04.717755 2026] [security2:error] [pid 187269:tid 187418] [client 20.219.2.60:18934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/ws77.php"] [unique_id "aryy_NFcyhWr7HDzNGl8UAAAAiA"]
[Wed Sep 30 00:58:04.720736 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.721176 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.728830 2026] [security2:error] [pid 187269:tid 187476] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_NFcyhWr7HDzNGl8UQAAAlo"]
[Wed Sep 30 00:58:04.810788 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.811089 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.827428 2026] [access_compat:error] [pid 187269:tid 187452] [client 47.79.13.177:55320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:04.827693 2026] [access_compat:error] [pid 187269:tid 187452] [client 47.79.13.177:55320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:04.841769 2026] [security2:error] [pid 187269:tid 187483] [client 52.231.69.245:30787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/cdc.php"] [unique_id "aryy_NFcyhWr7HDzNGl8WwAAAmE"]
[Wed Sep 30 00:58:04.865037 2026] [security2:error] [pid 186850:tid 187025] [client 49.205.105.16:14671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy_E5Phls--iYlcKgHMQAAATc"]
[Wed Sep 30 00:58:04.865146 2026] [security2:error] [pid 186850:tid 187025] [client 49.205.105.16:14671] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryy_E5Phls--iYlcKgHMQAAATc"]
[Wed Sep 30 00:58:04.900471 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.900737 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:04.916513 2026] [security2:error] [pid 187269:tid 187512] [client 20.194.30.107:25864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryy_NFcyhWr7HDzNGl8YAAAAn4"]
[Wed Sep 30 00:58:04.918586 2026] [security2:error] [pid 187269:tid 187441] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_NFcyhWr7HDzNGl8YQAAAjc"]
[Wed Sep 30 00:58:04.997652 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:04.998491 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.029385 2026] [security2:error] [pid 187269:tid 187406] [client 193.32.127.188:59012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_dFcyhWr7HDzNGl8agAAAhQ"]
[Wed Sep 30 00:58:05.085471 2026] [security2:error] [pid 187269:tid 187442] [client 13.70.4.78:49828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/z70.php"] [unique_id "aryy_dFcyhWr7HDzNGl8cwAAAjg"]
[Wed Sep 30 00:58:05.086498 2026] [access_compat:error] [pid 186850:tid 187100] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:05.086947 2026] [access_compat:error] [pid 186850:tid 187100] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:05.087887 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.088144 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.109468 2026] [security2:error] [pid 187269:tid 187506] [client 4.240.25.22:21513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/reop3.php"] [unique_id "aryy_dFcyhWr7HDzNGl8dgAAAng"]
[Wed Sep 30 00:58:05.109983 2026] [security2:error] [pid 187269:tid 187430] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8dQAAAiw"]
[Wed Sep 30 00:58:05.135462 2026] [security2:error] [pid 186850:tid 187035] [client 52.231.69.245:30784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/Components.php"] [unique_id "aryy_U5Phls--iYlcKgHOQAAAUE"]
[Wed Sep 30 00:58:05.136973 2026] [security2:error] [pid 187269:tid 187480] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8eQAAAl4"]
[Wed Sep 30 00:58:05.229768 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.230224 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.257283 2026] [security2:error] [pid 186850:tid 187026] [client 4.196.65.241:19162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/simple.php"] [unique_id "aryy_U5Phls--iYlcKgHPwAAATg"]
[Wed Sep 30 00:58:05.261465 2026] [access_compat:error] [pid 187269:tid 187437] [client 47.79.13.174:59324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:05.261895 2026] [access_compat:error] [pid 187269:tid 187437] [client 47.79.13.174:59324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:05.300032 2026] [security2:error] [pid 187269:tid 187490] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8hAAAAmg"]
[Wed Sep 30 00:58:05.318710 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.319004 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.327125 2026] [security2:error] [pid 187269:tid 187500] [client 45.138.12.43:41610] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qsk.vpu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy_dFcyhWr7HDzNGl8hQAAAnI"]
[Wed Sep 30 00:58:05.328852 2026] [security2:error] [pid 187269:tid 187496] [client 8.155.17.250:48556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "aryy_dFcyhWr7HDzNGl8cQAAAm4"], referer: https://izubaplanners.com/wp-login.php
[Wed Sep 30 00:58:05.358087 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.358350 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.413214 2026] [security2:error] [pid 187269:tid 187410] [client 52.231.69.245:30923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin.php/xl9.php"] [unique_id "aryy_dFcyhWr7HDzNGl8jQAAAhg"]
[Wed Sep 30 00:58:05.429252 2026] [security2:error] [pid 187269:tid 187485] [client 13.70.4.78:49440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/f35.php"] [unique_id "aryy_dFcyhWr7HDzNGl8kAAAAmM"]
[Wed Sep 30 00:58:05.451991 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.452274 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.453376 2026] [security2:error] [pid 187269:tid 187513] [client 45.138.12.32:17294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uus.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryy_dFcyhWr7HDzNGl8kwAAAn8"]
[Wed Sep 30 00:58:05.489908 2026] [security2:error] [pid 187269:tid 187495] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8lAAAAm0"]
[Wed Sep 30 00:58:05.539162 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.539417 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.562619 2026] [security2:error] [pid 187269:tid 187399] [remote 74.91.221.47:23020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.221.91.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/wp-login.php"] [unique_id "aryy_dFcyhWr7HDzNGl8lwACQHo"], referer: https://onemontgomerygreen.org/wp-login.php
[Wed Sep 30 00:58:05.614945 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2F0dHI=
[Wed Sep 30 00:58:05.615227 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2F0dHI=
[Wed Sep 30 00:58:05.617838 2026] [security2:error] [pid 187269:tid 187439] [client 20.28.180.172:34299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/go.php"] [unique_id "aryy_dFcyhWr7HDzNGl8mgAAAjU"]
[Wed Sep 30 00:58:05.629643 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.629980 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.680010 2026] [security2:error] [pid 187269:tid 187428] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8nwAAAio"]
[Wed Sep 30 00:58:05.688010 2026] [security2:error] [pid 187269:tid 187447] [client 52.231.69.245:30931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gulu.php"] [unique_id "aryy_dFcyhWr7HDzNGl8oAAAAj0"]
[Wed Sep 30 00:58:05.721873 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.722201 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.723739 2026] [security2:error] [pid 187269:tid 187484] [client 20.70.173.30:18526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryy_dFcyhWr7HDzNGl8owAAAmI"]
[Wed Sep 30 00:58:05.754081 2026] [security2:error] [pid 186850:tid 186995] [client 193.32.127.188:59106] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=http://:"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_U5Phls--iYlcKgHUgAAARk"]
[Wed Sep 30 00:58:05.755416 2026] [security2:error] [pid 187269:tid 187511] [client 13.70.4.78:49825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/adminfuns.php"] [unique_id "aryy_dFcyhWr7HDzNGl8pQAAAn0"]
[Wed Sep 30 00:58:05.760036 2026] [security2:error] [pid 186850:tid 186908] [remote 47.128.114.181:64588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/6143/prof-jamaldini-paid-tributes-on-valuable-services-for-cause-of-balochi-literature"] [unique_id "aryy_U5Phls--iYlcKgHUwABczk"]
[Wed Sep 30 00:58:05.812128 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.812411 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.869692 2026] [security2:error] [pid 187269:tid 187442] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_dFcyhWr7HDzNGl8qgAAAjg"]
[Wed Sep 30 00:58:05.902103 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.902368 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:05.959678 2026] [security2:error] [pid 187269:tid 187453] [client 52.231.69.245:30806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/bala.php"] [unique_id "aryy_dFcyhWr7HDzNGl8sQAAAkM"]
[Wed Sep 30 00:58:05.993077 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:05.993341 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.001787 2026] [security2:error] [pid 187269:tid 187422] [client 45.138.12.43:10944] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qxi.baf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryy_tFcyhWr7HDzNGl8tQAAAiQ"]
[Wed Sep 30 00:58:06.028754 2026] [security2:error] [pid 187269:tid 187528] [client 20.219.2.60:19373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/www.php"] [unique_id "aryy_tFcyhWr7HDzNGl8twAAAo0"]
[Wed Sep 30 00:58:06.060205 2026] [security2:error] [pid 187269:tid 187419] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl8uAAAAiE"]
[Wed Sep 30 00:58:06.083621 2026] [security2:error] [pid 186850:tid 186984] [client 39.44.16.112:57437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy_k5Phls--iYlcKgHWQAAAQ4"]
[Wed Sep 30 00:58:06.083753 2026] [security2:error] [pid 186850:tid 186984] [client 39.44.16.112:57437] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryy_k5Phls--iYlcKgHWQAAAQ4"]
[Wed Sep 30 00:58:06.086357 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.086626 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:4582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.087684 2026] [core:error] [pid 187269:tid 187421] [client 217.181.90.100:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:06.087699 2026] [core:error] [pid 187269:tid 187421] [client 217.181.90.100:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:06.131113 2026] [security2:error] [pid 186850:tid 187037] [client 13.70.4.78:49843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/av.php"] [unique_id "aryy_k5Phls--iYlcKgHXAAAAUM"]
[Wed Sep 30 00:58:06.138723 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:06.139021 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:06.177029 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.177307 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:42234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.234114 2026] [security2:error] [pid 187269:tid 187432] [client 52.231.69.245:30918] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/c99.php"] [unique_id "aryy_tFcyhWr7HDzNGl8vwAAAi4"]
[Wed Sep 30 00:58:06.250534 2026] [security2:error] [pid 187269:tid 187490] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl8wgAAAmg"]
[Wed Sep 30 00:58:06.258287 2026] [security2:error] [pid 187269:tid 187451] [client 20.198.74.230:23927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/faiy.php"] [unique_id "aryy_tFcyhWr7HDzNGl8wwAAAkE"]
[Wed Sep 30 00:58:06.261567 2026] [security2:error] [pid 187269:tid 187417] [client 216.73.216.46:42234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl8xAAAAh8"]
[Wed Sep 30 00:58:06.278746 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.30.107:10025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/amax.php"] [unique_id "aryy_k5Phls--iYlcKgHXwAAAQ0"]
[Wed Sep 30 00:58:06.282461 2026] [security2:error] [pid 186850:tid 187058] [client 45.138.12.43:41740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.qsk.vpu.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryy_k5Phls--iYlcKgHYAAAAVg"]
[Wed Sep 30 00:58:06.337602 2026] [security2:error] [pid 187269:tid 187410] [client 20.194.30.107:17522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryy_tFcyhWr7HDzNGl8yAAAAhg"]
[Wed Sep 30 00:58:06.360442 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.360715 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.416530 2026] [security2:error] [pid 187269:tid 187526] [client 20.219.19.141:57099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/gm.php"] [unique_id "aryy_tFcyhWr7HDzNGl8ywAAAos"]
[Wed Sep 30 00:58:06.418260 2026] [security2:error] [pid 187269:tid 187510] [client 20.194.30.107:17409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryy_tFcyhWr7HDzNGl8zAAAAnw"]
[Wed Sep 30 00:58:06.440516 2026] [security2:error] [pid 187269:tid 187415] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl8zwAAAh0"]
[Wed Sep 30 00:58:06.457457 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.457712 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.476439 2026] [security2:error] [pid 187269:tid 187438] [client 216.73.216.46:4582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_tFcyhWr7HDzNGl81QAAAjQ"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUveG1s
[Wed Sep 30 00:58:06.476911 2026] [security2:error] [pid 187269:tid 187437] [client 193.32.127.188:59201] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "907"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_tFcyhWr7HDzNGl81AAAAjM"]
[Wed Sep 30 00:58:06.478873 2026] [security2:error] [pid 186850:tid 187005] [client 20.194.30.107:25186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/wp.php"] [unique_id "aryy_k5Phls--iYlcKgHZwAAASM"]
[Wed Sep 30 00:58:06.526829 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:49797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/dex.php"] [unique_id "aryy_tFcyhWr7HDzNGl81wAAAn4"]
[Wed Sep 30 00:58:06.548085 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.548371 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60539] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.578691 2026] [security2:error] [pid 187269:tid 187308] [remote 74.91.221.47:23020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.221.91.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/xmlrpc.php"] [unique_id "aryy_tFcyhWr7HDzNGl82QACkh8"]
[Wed Sep 30 00:58:06.578865 2026] [security2:error] [pid 187269:tid 187533] [client 74.91.221.47:23020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "onemontgomerygreen.org"] [uri "/xmlrpc.php"] [unique_id "aryy_tFcyhWr7HDzNGl82QACkh8"]
[Wed Sep 30 00:58:06.592054 2026] [security2:error] [pid 186850:tid 187031] [client 52.231.69.245:31395] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/c99.php"] [unique_id "aryy_k5Phls--iYlcKgHawAAAT0"]
[Wed Sep 30 00:58:06.596554 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:06.596803 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:06.631382 2026] [security2:error] [pid 187269:tid 187494] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl83AAAAmw"]
[Wed Sep 30 00:58:06.638425 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.638690 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.671719 2026] [autoindex:error] [pid 187269:tid 187431] [client 212.156.70.154:62764] AH01276: Cannot serve directory /home4/vvezefmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:06.710410 2026] [security2:error] [pid 187269:tid 187424] [client 103.159.192.142:63897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy_tFcyhWr7HDzNGl85AAAAiY"]
[Wed Sep 30 00:58:06.710509 2026] [security2:error] [pid 187269:tid 187424] [client 103.159.192.142:63897] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryy_tFcyhWr7HDzNGl85AAAAiY"]
[Wed Sep 30 00:58:06.742861 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.743130 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.784445 2026] [security2:error] [pid 187269:tid 187498] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl87AAAAnA"]
[Wed Sep 30 00:58:06.796580 2026] [security2:error] [pid 186850:tid 187048] [client 4.196.65.241:2553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wyzer3.php"] [unique_id "aryy_k5Phls--iYlcKgHcAAAAU4"]
[Wed Sep 30 00:58:06.821068 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.821311 2026] [security2:error] [pid 187269:tid 187419] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_tFcyhWr7HDzNGl87wAAAiE"]
[Wed Sep 30 00:58:06.821353 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.847778 2026] [security2:error] [pid 186850:tid 187033] [client 13.70.4.78:49425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/chosen.php"] [unique_id "aryy_k5Phls--iYlcKgHcgAAAT8"]
[Wed Sep 30 00:58:06.909362 2026] [access_compat:error] [pid 186850:tid 187054] [client 47.79.13.168:38820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:06.909792 2026] [access_compat:error] [pid 186850:tid 187054] [client 47.79.13.168:38820] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:06.915035 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:06.915485 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:06.931036 2026] [access_compat:error] [pid 187269:tid 187476] [client 47.79.13.175:57238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:06.931316 2026] [access_compat:error] [pid 187269:tid 187476] [client 47.79.13.175:57238] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:06.957616 2026] [security2:error] [pid 187269:tid 187507] [client 52.231.69.245:30832] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/c99.php"] [unique_id "aryy_tFcyhWr7HDzNGl89wAAAnk"]
[Wed Sep 30 00:58:06.966743 2026] [security2:error] [pid 187269:tid 187466] [client 216.73.216.46:60539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_tFcyhWr7HDzNGl8-gAAAlA"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMvc2dtbA%3D%3D
[Wed Sep 30 00:58:06.972711 2026] [security2:error] [pid 187269:tid 187501] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryy_tFcyhWr7HDzNGl8-wAAAnM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:07.004120 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.004402 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.012181 2026] [security2:error] [pid 187269:tid 187446] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl8_wAAAjw"]
[Wed Sep 30 00:58:07.020388 2026] [security2:error] [pid 187269:tid 187520] [client 116.72.182.19:63412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy_9FcyhWr7HDzNGl9AAAAAoY"]
[Wed Sep 30 00:58:07.020511 2026] [security2:error] [pid 187269:tid 187520] [client 116.72.182.19:63412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryy_9FcyhWr7HDzNGl9AAAAAoY"]
[Wed Sep 30 00:58:07.050504 2026] [security2:error] [pid 186850:tid 187064] [client 45.156.128.168:27558] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/optinmonster/readme.txt"] [unique_id "aryy_05Phls--iYlcKgHeQAAAV4"]
[Wed Sep 30 00:58:07.081163 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2F0dHI=
[Wed Sep 30 00:58:07.081429 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L2F0dHI=
[Wed Sep 30 00:58:07.095937 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.096227 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:31777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.109147 2026] [security2:error] [pid 187269:tid 187530] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/careers"] [unique_id "aryy_9FcyhWr7HDzNGl9BAAAAo8"]
[Wed Sep 30 00:58:07.190999 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.191457 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:1197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.195319 2026] [security2:error] [pid 187269:tid 187497] [client 193.32.127.188:59293] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_9FcyhWr7HDzNGl9CQAAAm8"]
[Wed Sep 30 00:58:07.201629 2026] [security2:error] [pid 187269:tid 187473] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl9CgAAAlc"]
[Wed Sep 30 00:58:07.227455 2026] [security2:error] [pid 186850:tid 187063] [client 52.231.69.245:30925] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/c99.php"] [unique_id "aryy_05Phls--iYlcKgHggAAAV0"]
[Wed Sep 30 00:58:07.254598 2026] [security2:error] [pid 187269:tid 187517] [client 223.235.102.107:30859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy_9FcyhWr7HDzNGl9DQAAAoM"]
[Wed Sep 30 00:58:07.254755 2026] [security2:error] [pid 187269:tid 187517] [client 223.235.102.107:30859] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryy_9FcyhWr7HDzNGl9DQAAAoM"]
[Wed Sep 30 00:58:07.294790 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:49852] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.manga.an-ime.com"] [uri "/1.php"] [unique_id "aryy_9FcyhWr7HDzNGl9EAAAAjM"]
[Wed Sep 30 00:58:07.294937 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:49852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/1.php"] [unique_id "aryy_9FcyhWr7HDzNGl9EAAAAjM"]
[Wed Sep 30 00:58:07.334698 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.334979 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.391661 2026] [security2:error] [pid 187269:tid 187428] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl9FAAAAio"]
[Wed Sep 30 00:58:07.394394 2026] [security2:error] [pid 186850:tid 187035] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/jobs"] [unique_id "aryy_05Phls--iYlcKgHhgAAAUE"]
[Wed Sep 30 00:58:07.429778 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:4244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.430236 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:4244] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.462769 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.463059 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.474536 2026] [security2:error] [pid 187269:tid 187515] [client 4.196.65.241:19475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/29.php"] [unique_id "aryy_9FcyhWr7HDzNGl9GwAAAoE"]
[Wed Sep 30 00:58:07.511402 2026] [security2:error] [pid 186850:tid 187032] [client 216.73.216.46:31777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_05Phls--iYlcKgHjgAAAT4"], referer: http://www.homs.co.ke/?action=adminer&p=L2Rldi9odWdlcGFnZXM%3D
[Wed Sep 30 00:58:07.525320 2026] [security2:error] [pid 187269:tid 187462] [client 52.231.69.245:31361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ttivnife.php"] [unique_id "aryy_9FcyhWr7HDzNGl9HQAAAkw"]
[Wed Sep 30 00:58:07.526250 2026] [security2:error] [pid 187269:tid 187489] [client 20.219.2.60:19294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/adoms.php"] [unique_id "aryy_9FcyhWr7HDzNGl9HgAAAmc"]
[Wed Sep 30 00:58:07.559037 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:07.559305 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:07.581012 2026] [security2:error] [pid 187269:tid 187518] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl9IQAAAoQ"]
[Wed Sep 30 00:58:07.583336 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:07.583584 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:07.610023 2026] [security2:error] [pid 187269:tid 187502] [client 216.73.216.46:1197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_9FcyhWr7HDzNGl9IwAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9uaXM%3D
[Wed Sep 30 00:58:07.641868 2026] [security2:error] [pid 187269:tid 187436] [client 13.70.4.78:49837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/radio.php"] [unique_id "aryy_9FcyhWr7HDzNGl9JwAAAjI"]
[Wed Sep 30 00:58:07.666542 2026] [security2:error] [pid 187269:tid 187491] [client 20.194.30.107:14436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.holin.us"] [uri "/cabs.php"] [unique_id "aryy_9FcyhWr7HDzNGl9KQAAAmk"]
[Wed Sep 30 00:58:07.771021 2026] [security2:error] [pid 187269:tid 187454] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl9MQAAAkQ"]
[Wed Sep 30 00:58:07.801331 2026] [core:error] [pid 187269:tid 187474] [client 104.207.57.166:54241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:07.801354 2026] [core:error] [pid 187269:tid 187474] [client 104.207.57.166:54241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:07.850234 2026] [security2:error] [pid 187269:tid 187434] [client 52.231.69.245:31392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin.php/2P.php"] [unique_id "aryy_9FcyhWr7HDzNGl9NwAAAjA"]
[Wed Sep 30 00:58:07.860307 2026] [security2:error] [pid 186850:tid 186996] [client 216.73.216.46:4244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryy_05Phls--iYlcKgHlwAAARo"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvY2xhc3MvZGF4
[Wed Sep 30 00:58:07.917430 2026] [security2:error] [pid 187269:tid 187448] [client 193.32.127.188:59392] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryy_9FcyhWr7HDzNGl9OAAAAj4"]
[Wed Sep 30 00:58:07.961098 2026] [security2:error] [pid 187269:tid 187499] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryy_9FcyhWr7HDzNGl9OgAAAnE"]
[Wed Sep 30 00:58:08.019850 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.020136 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.036738 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.4.78:49434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/blacks.php"] [unique_id "aryzANFcyhWr7HDzNGl9PAAAAk4"]
[Wed Sep 30 00:58:08.039350 2026] [security2:error] [pid 187269:tid 187420] [client 223.181.60.167:23773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9PgAAAiI"]
[Wed Sep 30 00:58:08.039472 2026] [security2:error] [pid 187269:tid 187420] [client 223.181.60.167:23773] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9PgAAAiI"]
[Wed Sep 30 00:58:08.115967 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.116411 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.119667 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:08.119969 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:08.138548 2026] [security2:error] [pid 187269:tid 187441] [client 52.231.69.245:31401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/a.php"] [unique_id "aryzANFcyhWr7HDzNGl9QgAAAjc"]
[Wed Sep 30 00:58:08.151569 2026] [security2:error] [pid 187269:tid 187486] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzANFcyhWr7HDzNGl9QwAAAmQ"]
[Wed Sep 30 00:58:08.184105 2026] [security2:error] [pid 187269:tid 187484] [client 20.194.30.107:64720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/cdc.php"] [unique_id "aryzANFcyhWr7HDzNGl9RwAAAmI"]
[Wed Sep 30 00:58:08.187769 2026] [security2:error] [pid 187269:tid 187482] [client 116.197.133.25:60873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9SAAAAmA"]
[Wed Sep 30 00:58:08.187878 2026] [security2:error] [pid 187269:tid 187482] [client 116.197.133.25:60873] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9SAAAAmA"]
[Wed Sep 30 00:58:08.341320 2026] [security2:error] [pid 187269:tid 187480] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzANFcyhWr7HDzNGl9TAAAAl4"]
[Wed Sep 30 00:58:08.414891 2026] [security2:error] [pid 187269:tid 187443] [client 52.231.69.245:30835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/cord.php"] [unique_id "aryzANFcyhWr7HDzNGl9TQAAAjk"]
[Wed Sep 30 00:58:08.425526 2026] [security2:error] [pid 187269:tid 187502] [client 74.7.242.1:37392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzANFcyhWr7HDzNGl9TgAAAnQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:58:08.464410 2026] [security2:error] [pid 186850:tid 187011] [client 213.136.69.135:50073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-connector-registry.php"] [unique_id "aryzAE5Phls--iYlcKgHpAAAASk"], referer: binance.com
[Wed Sep 30 00:58:08.498275 2026] [security2:error] [pid 187269:tid 187524] [client 13.70.4.78:49845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/alfa.php"] [unique_id "aryzANFcyhWr7HDzNGl9VQAAAok"]
[Wed Sep 30 00:58:08.531754 2026] [security2:error] [pid 187269:tid 187452] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzANFcyhWr7HDzNGl9VwAAAkI"]
[Wed Sep 30 00:58:08.557803 2026] [security2:error] [pid 187269:tid 187345] [remote 57.141.14.15:21670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-json/feed/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9VgACk0Q"]
[Wed Sep 30 00:58:08.561250 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.561502 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.596918 2026] [security2:error] [pid 187269:tid 187532] [client 20.28.180.172:29609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/3.php"] [unique_id "aryzANFcyhWr7HDzNGl9XAAAApE"]
[Wed Sep 30 00:58:08.617924 2026] [access_compat:error] [pid 186850:tid 187012] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:08.618204 2026] [access_compat:error] [pid 186850:tid 187012] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:08.662612 2026] [security2:error] [pid 187269:tid 187423] [client 20.219.19.141:46496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/class-wp-site-list.php"] [unique_id "aryzANFcyhWr7HDzNGl9ZAAAAiU"]
[Wed Sep 30 00:58:08.671631 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.671900 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.672118 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.672544 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.720166 2026] [security2:error] [pid 187269:tid 187460] [client 13.70.1.101:56263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzANFcyhWr7HDzNGl9ZwAAAko"]
[Wed Sep 30 00:58:08.723120 2026] [security2:error] [pid 187269:tid 187463] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzANFcyhWr7HDzNGl9aAAAAk0"]
[Wed Sep 30 00:58:08.736262 2026] [security2:error] [pid 187269:tid 187477] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/join-us"] [unique_id "aryzANFcyhWr7HDzNGl9agAAAls"]
[Wed Sep 30 00:58:08.745117 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.745442 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.757939 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.758299 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.777074 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.777347 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.802302 2026] [security2:error] [pid 187269:tid 187422] [client 20.219.2.60:19366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/tymn.php"] [unique_id "aryzANFcyhWr7HDzNGl9cgAAAiQ"]
[Wed Sep 30 00:58:08.817432 2026] [security2:error] [pid 187269:tid 187495] [client 52.231.69.245:30974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/anom.php"] [unique_id "aryzANFcyhWr7HDzNGl9dAAAAm0"]
[Wed Sep 30 00:58:08.860556 2026] [security2:error] [pid 186850:tid 187004] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzAE5Phls--iYlcKgHuQAAASI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:08.876261 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.4.78:49449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzANFcyhWr7HDzNGl9dwAAAnc"]
[Wed Sep 30 00:58:08.912851 2026] [security2:error] [pid 187269:tid 187413] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzANFcyhWr7HDzNGl9eQAAAhs"]
[Wed Sep 30 00:58:08.939380 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.939675 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:08.951020 2026] [security2:error] [pid 186850:tid 187046] [client 4.240.25.22:30763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/dex.php"] [unique_id "aryzAE5Phls--iYlcKgHvAAAAUw"]
[Wed Sep 30 00:58:08.966215 2026] [security2:error] [pid 187269:tid 187427] [client 102.253.38.25:50929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9fQAAAik"]
[Wed Sep 30 00:58:08.966478 2026] [security2:error] [pid 187269:tid 187427] [client 102.253.38.25:50929] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzANFcyhWr7HDzNGl9fQAAAik"]
[Wed Sep 30 00:58:08.970606 2026] [security2:error] [pid 187269:tid 187533] [client 4.240.25.22:11556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/BDKR28WP.php"] [unique_id "aryzANFcyhWr7HDzNGl9gAAAApI"]
[Wed Sep 30 00:58:08.979863 2026] [security2:error] [pid 187269:tid 187351] [remote 64.23.166.180:13016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eqy.imz.mybluehost.me"] [uri "/.env"] [unique_id "aryzANFcyhWr7HDzNGl9gQACYUo"]
[Wed Sep 30 00:58:08.988834 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:08.989098 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.002116 2026] [security2:error] [pid 187269:tid 187482] [client 20.198.74.230:41368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/nauik.php"] [unique_id "aryzAdFcyhWr7HDzNGl9hAAAAmA"]
[Wed Sep 30 00:58:09.030104 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.030357 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.040830 2026] [security2:error] [pid 187269:tid 187415] [client 193.32.127.188:59536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "917"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzAdFcyhWr7HDzNGl9hQAAAh0"]
[Wed Sep 30 00:58:09.044130 2026] [security2:error] [pid 187269:tid 187471] [client 13.70.1.101:15978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzAdFcyhWr7HDzNGl9iAAAAlU"]
[Wed Sep 30 00:58:09.048967 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.049396 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.079095 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:58:09.079354 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 00:58:09.080818 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.081088 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.102985 2026] [security2:error] [pid 187269:tid 187497] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAdFcyhWr7HDzNGl9igAAAm8"]
[Wed Sep 30 00:58:09.104441 2026] [security2:error] [pid 187269:tid 187442] [client 45.138.12.43:41742] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qxi.baf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzAdFcyhWr7HDzNGl9iwAAAjg"]
[Wed Sep 30 00:58:09.120711 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.121141 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.121182 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.121599 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.130710 2026] [security2:error] [pid 186850:tid 187043] [client 52.231.69.245:30968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/plugins.php"] [unique_id "aryzAU5Phls--iYlcKgHwwAAAUk"]
[Wed Sep 30 00:58:09.178156 2026] [security2:error] [pid 187269:tid 187443] [client 49.47.69.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/work-with-us"] [unique_id "aryzAdFcyhWr7HDzNGl9kgAAAjk"]
[Wed Sep 30 00:58:09.198402 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.198859 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.212473 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.212772 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.217313 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.217750 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.260338 2026] [security2:error] [pid 187269:tid 187534] [client 4.196.65.241:2533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ssdg.php"] [unique_id "aryzAdFcyhWr7HDzNGl9lwAAApM"]
[Wed Sep 30 00:58:09.292713 2026] [security2:error] [pid 187269:tid 187418] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAdFcyhWr7HDzNGl9mAAAAiA"]
[Wed Sep 30 00:58:09.299407 2026] [security2:error] [pid 187269:tid 187510] [client 155.190.6.18:56084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzAdFcyhWr7HDzNGl9mgAAAnw"]
[Wed Sep 30 00:58:09.299551 2026] [security2:error] [pid 187269:tid 187510] [client 155.190.6.18:56084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzAdFcyhWr7HDzNGl9mgAAAnw"]
[Wed Sep 30 00:58:09.307138 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.307561 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.373435 2026] [security2:error] [pid 187269:tid 187496] [client 13.70.1.101:15944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/b.php"] [unique_id "aryzAdFcyhWr7HDzNGl9nAAAAm4"]
[Wed Sep 30 00:58:09.392304 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.392677 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.414698 2026] [security2:error] [pid 187269:tid 187512] [client 52.231.69.245:30933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/zlwvxiyp.php"] [unique_id "aryzAdFcyhWr7HDzNGl9oAAAAn4"]
[Wed Sep 30 00:58:09.455049 2026] [security2:error] [pid 187269:tid 187495] [client 45.156.128.170:53200] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wp-fastest-cache/readme.txt"] [unique_id "aryzAdFcyhWr7HDzNGl9pAAAAm0"]
[Wed Sep 30 00:58:09.482602 2026] [security2:error] [pid 187269:tid 187517] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAdFcyhWr7HDzNGl9pgAAAoM"]
[Wed Sep 30 00:58:09.483830 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.484082 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.560866 2026] [security2:error] [pid 187269:tid 187458] [client 4.240.25.22:21561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/CAE-2.5.php"] [unique_id "aryzAdFcyhWr7HDzNGl9qwAAAkg"]
[Wed Sep 30 00:58:09.577555 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.577827 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.582525 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:09.582959 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:09.644763 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvZGF2
[Wed Sep 30 00:58:09.645232 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvZGF2
[Wed Sep 30 00:58:09.668452 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.668828 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.672168 2026] [security2:error] [pid 187269:tid 187533] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAdFcyhWr7HDzNGl9sgAAApI"]
[Wed Sep 30 00:58:09.695130 2026] [security2:error] [pid 186850:tid 187092] [client 52.231.69.245:31376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/1Be5IfrlWP.php"] [unique_id "aryzAU5Phls--iYlcKgH2AAAAXo"]
[Wed Sep 30 00:58:09.762195 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.762652 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.764273 2026] [security2:error] [pid 187269:tid 187505] [client 193.32.127.188:59621] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzAdFcyhWr7HDzNGl9uAAAAnc"]
[Wed Sep 30 00:58:09.764887 2026] [security2:error] [pid 187269:tid 187508] [client 91.235.210.74:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzAdFcyhWr7HDzNGl9uQAAAno"]
[Wed Sep 30 00:58:09.769512 2026] [security2:error] [pid 187269:tid 187482] [client 4.196.65.241:19481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/olvxz.php"] [unique_id "aryzAdFcyhWr7HDzNGl9ugAAAmA"]
[Wed Sep 30 00:58:09.823406 2026] [security2:error] [pid 187269:tid 187519] [client 13.70.1.101:15965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/admin.php"] [unique_id "aryzAdFcyhWr7HDzNGl9uwAAAoU"]
[Wed Sep 30 00:58:09.857372 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.857656 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.865500 2026] [security2:error] [pid 187269:tid 187417] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAdFcyhWr7HDzNGl9vwAAAh8"]
[Wed Sep 30 00:58:09.873756 2026] [security2:error] [pid 187269:tid 187279] [remote 47.128.38.44:15348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "camera-roll.com"] [uri "/robots.txt"] [unique_id "aryzAdFcyhWr7HDzNGl9wQAChwI"]
[Wed Sep 30 00:58:09.949085 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:09.949359 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:09.992723 2026] [security2:error] [pid 187269:tid 187480] [client 52.231.69.245:30941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "aryzAdFcyhWr7HDzNGl9xQAAAl4"]
[Wed Sep 30 00:58:10.041294 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.041804 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.056470 2026] [security2:error] [pid 187269:tid 187408] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAtFcyhWr7HDzNGl9yAAAAhY"]
[Wed Sep 30 00:58:10.097825 2026] [security2:error] [pid 186850:tid 187099] [client 45.138.12.43:41786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.qkv.mds.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzAk5Phls--iYlcKgH4QAAAYE"]
[Wed Sep 30 00:58:10.125111 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:10.125370 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:10.128959 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.129226 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.131499 2026] [security2:error] [pid 186850:tid 187085] [client 20.219.2.60:19404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/eetu.php"] [unique_id "aryzAk5Phls--iYlcKgH5AAAAXM"]
[Wed Sep 30 00:58:10.133761 2026] [security2:error] [pid 187269:tid 187532] [client 20.70.173.30:18522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/222.php"] [unique_id "aryzAtFcyhWr7HDzNGl9yQAAApE"]
[Wed Sep 30 00:58:10.163349 2026] [security2:error] [pid 187269:tid 187407] [client 13.70.1.101:15692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/fling.php"] [unique_id "aryzAtFcyhWr7HDzNGl9ygAAAhU"]
[Wed Sep 30 00:58:10.221468 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.221731 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.246142 2026] [security2:error] [pid 187269:tid 187470] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAtFcyhWr7HDzNGl9zQAAAlQ"]
[Wed Sep 30 00:58:10.310887 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.311161 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.380258 2026] [security2:error] [pid 186850:tid 187010] [client 182.69.182.151:3526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzAk5Phls--iYlcKgH7AAAASg"]
[Wed Sep 30 00:58:10.380869 2026] [security2:error] [pid 186850:tid 187010] [client 182.69.182.151:3526] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzAk5Phls--iYlcKgH7AAAASg"]
[Wed Sep 30 00:58:10.393761 2026] [access_compat:error] [pid 187269:tid 187468] [client 47.79.13.28:55026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:10.394067 2026] [access_compat:error] [pid 187269:tid 187468] [client 47.79.13.28:55026] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:10.403649 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.403918 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.404748 2026] [security2:error] [pid 187269:tid 187511] [client 43.104.4.211:27759] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "aryzAtFcyhWr7HDzNGl92gAAAn0"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=interactive-smart-panels
[Wed Sep 30 00:58:10.408478 2026] [security2:error] [pid 187269:tid 187524] [client 52.231.69.245:30826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin.php/c.php"] [unique_id "aryzAtFcyhWr7HDzNGl92wAAAok"]
[Wed Sep 30 00:58:10.435965 2026] [security2:error] [pid 187269:tid 187492] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAtFcyhWr7HDzNGl93AAAAmo"]
[Wed Sep 30 00:58:10.473142 2026] [security2:error] [pid 187269:tid 187357] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzAtFcyhWr7HDzNGl94gACL1A"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D96861
[Wed Sep 30 00:58:10.495705 2026] [security2:error] [pid 186850:tid 187006] [client 193.32.127.188:59714] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=http://:"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzAk5Phls--iYlcKgH8AAAASQ"]
[Wed Sep 30 00:58:10.495870 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.496123 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.517040 2026] [security2:error] [pid 187269:tid 187529] [client 13.70.1.101:15743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryzAtFcyhWr7HDzNGl95AAAAo4"]
[Wed Sep 30 00:58:10.541109 2026] [security2:error] [pid 187269:tid 187455] [client 37.41.16.35:49251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzAtFcyhWr7HDzNGl95QAAAkU"]
[Wed Sep 30 00:58:10.541217 2026] [security2:error] [pid 187269:tid 187455] [client 37.41.16.35:49251] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzAtFcyhWr7HDzNGl95QAAAkU"]
[Wed Sep 30 00:58:10.563950 2026] [security2:error] [pid 187269:tid 187429] [client 20.198.74.230:23578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/12.php"] [unique_id "aryzAtFcyhWr7HDzNGl95wAAAis"]
[Wed Sep 30 00:58:10.585337 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.585619 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.625234 2026] [security2:error] [pid 187269:tid 187437] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAtFcyhWr7HDzNGl96wAAAjM"]
[Wed Sep 30 00:58:10.631216 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:10.631492 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:10.653652 2026] [security2:error] [pid 187269:tid 187481] [client 116.193.128.26:61315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzAtFcyhWr7HDzNGl97wAAAl8"]
[Wed Sep 30 00:58:10.653759 2026] [security2:error] [pid 187269:tid 187481] [client 116.193.128.26:61315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzAtFcyhWr7HDzNGl97wAAAl8"]
[Wed Sep 30 00:58:10.660197 2026] [security2:error] [pid 187269:tid 187508] [client 45.138.12.43:41784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.qom.xio.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzAtFcyhWr7HDzNGl98QAAAno"]
[Wed Sep 30 00:58:10.683454 2026] [security2:error] [pid 187269:tid 187431] [client 52.231.69.245:30934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin.php/go.php"] [unique_id "aryzAtFcyhWr7HDzNGl99QAAAi0"]
[Wed Sep 30 00:58:10.687459 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.687743 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.707901 2026] [security2:error] [pid 187269:tid 187445] [client 4.240.25.22:21557] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "captpeacock.com"] [uri "/1.php"] [unique_id "aryzAtFcyhWr7HDzNGl9-AAAAjs"]
[Wed Sep 30 00:58:10.708042 2026] [security2:error] [pid 187269:tid 187445] [client 4.240.25.22:21557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/1.php"] [unique_id "aryzAtFcyhWr7HDzNGl9-AAAAjs"]
[Wed Sep 30 00:58:10.732080 2026] [security2:error] [pid 186850:tid 187000] [client 103.241.204.139:53565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzAk5Phls--iYlcKgH9AAAAR4"]
[Wed Sep 30 00:58:10.732214 2026] [security2:error] [pid 186850:tid 187000] [client 103.241.204.139:53565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzAk5Phls--iYlcKgH9AAAAR4"]
[Wed Sep 30 00:58:10.752368 2026] [security2:error] [pid 187269:tid 187424] [client 20.70.173.30:61800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/cycfruf.php"] [unique_id "aryzAtFcyhWr7HDzNGl9-QAAAiY"]
[Wed Sep 30 00:58:10.769550 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.769858 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.815126 2026] [security2:error] [pid 187269:tid 187428] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzAtFcyhWr7HDzNGl9_AAAAio"]
[Wed Sep 30 00:58:10.839595 2026] [security2:error] [pid 187269:tid 187471] [client 20.70.173.30:47317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzAtFcyhWr7HDzNGl-AAAAAlU"]
[Wed Sep 30 00:58:10.860775 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.861085 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.875957 2026] [security2:error] [pid 187269:tid 187480] [client 13.70.1.101:15980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/adminfuns.php"] [unique_id "aryzAtFcyhWr7HDzNGl-BQAAAl4"]
[Wed Sep 30 00:58:10.956183 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:10.956614 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:10.977339 2026] [security2:error] [pid 187269:tid 187440] [client 52.231.69.245:30814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/groud3.php"] [unique_id "aryzAtFcyhWr7HDzNGl-CwAAAjY"]
[Wed Sep 30 00:58:11.005735 2026] [security2:error] [pid 187269:tid 187414] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzA9FcyhWr7HDzNGl-DAAAAhw"]
[Wed Sep 30 00:58:11.014937 2026] [security2:error] [pid 187269:tid 187451] [client 4.196.65.241:27298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/usr.php"] [unique_id "aryzA9FcyhWr7HDzNGl-DgAAAkE"]
[Wed Sep 30 00:58:11.020828 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYmxvY2svc2Ri
[Wed Sep 30 00:58:11.021095 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYmxvY2svc2Ri
[Wed Sep 30 00:58:11.043611 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.043871 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:56271] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.125526 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:11.125784 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:11.127304 2026] [security2:error] [pid 186850:tid 187089] [client 216.73.216.46:56271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzA05Phls--iYlcKgIAQAAAXc"]
[Wed Sep 30 00:58:11.187094 2026] [security2:error] [pid 187269:tid 187498] [client 20.219.2.60:18867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/dx.php"] [unique_id "aryzA9FcyhWr7HDzNGl-EgAAAnA"]
[Wed Sep 30 00:58:11.193124 2026] [security2:error] [pid 187269:tid 187520] [client 20.219.19.141:23983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/ttivnife.php"] [unique_id "aryzA9FcyhWr7HDzNGl-EwAAAoY"]
[Wed Sep 30 00:58:11.198803 2026] [security2:error] [pid 187269:tid 187495] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzA9FcyhWr7HDzNGl-FAAAAm0"]
[Wed Sep 30 00:58:11.214020 2026] [security2:error] [pid 187269:tid 187503] [client 13.70.1.101:15977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/alfa.php"] [unique_id "aryzA9FcyhWr7HDzNGl-FwAAAnU"]
[Wed Sep 30 00:58:11.227606 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.227886 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.277602 2026] [security2:error] [pid 187269:tid 187507] [client 52.231.69.245:31297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gaxby.php"] [unique_id "aryzA9FcyhWr7HDzNGl-HAAAAnk"]
[Wed Sep 30 00:58:11.301017 2026] [security2:error] [pid 186850:tid 187005] [client 152.59.169.65:55147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzA05Phls--iYlcKgIBQAAASM"]
[Wed Sep 30 00:58:11.305535 2026] [security2:error] [pid 186850:tid 187005] [client 152.59.169.65:55147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzA05Phls--iYlcKgIBQAAASM"]
[Wed Sep 30 00:58:11.309440 2026] [security2:error] [pid 186850:tid 187075] [client 20.28.180.172:34245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/mentos.php"] [unique_id "aryzA05Phls--iYlcKgIBgAAAWk"]
[Wed Sep 30 00:58:11.317169 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.317447 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.320653 2026] [security2:error] [pid 187269:tid 187450] [client 13.70.4.78:49471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/b8.php"] [unique_id "aryzA9FcyhWr7HDzNGl-IwAAAkA"]
[Wed Sep 30 00:58:11.326054 2026] [security2:error] [pid 186850:tid 186986] [client 45.138.12.32:31440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uqx.cle.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzA05Phls--iYlcKgIBwAAARA"]
[Wed Sep 30 00:58:11.389183 2026] [security2:error] [pid 187269:tid 187455] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzA9FcyhWr7HDzNGl-JgAAAkU"]
[Wed Sep 30 00:58:11.410067 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.410357 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.461122 2026] [security2:error] [pid 187269:tid 187452] [client 49.36.41.37:51706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-LAAAAkI"]
[Wed Sep 30 00:58:11.461233 2026] [security2:error] [pid 187269:tid 187452] [client 49.36.41.37:51706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-LAAAAkI"]
[Wed Sep 30 00:58:11.499153 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.499315 2026] [security2:error] [pid 187269:tid 187467] [client 20.70.173.30:62337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/gecko.php"] [unique_id "aryzA9FcyhWr7HDzNGl-MgAAAlE"]
[Wed Sep 30 00:58:11.499432 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.503986 2026] [security2:error] [pid 187269:tid 187415] [client 186.235.99.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzA9FcyhWr7HDzNGl-MwAAAh0"]
[Wed Sep 30 00:58:11.547918 2026] [security2:error] [pid 186850:tid 187086] [client 13.70.1.101:15712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/222.php"] [unique_id "aryzA05Phls--iYlcKgICwAAAXQ"]
[Wed Sep 30 00:58:11.579941 2026] [security2:error] [pid 187269:tid 187442] [client 213.35.101.27:53276] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "opryidaho.com"] [uri "/"] [unique_id "aryzA9FcyhWr7HDzNGl-OAAAAjg"]
[Wed Sep 30 00:58:11.591903 2026] [security2:error] [pid 187269:tid 187446] [client 150.107.232.159:36426] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-OgAAAjw"]
[Wed Sep 30 00:58:11.592011 2026] [security2:error] [pid 187269:tid 187446] [client 150.107.232.159:36426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-OgAAAjw"]
[Wed Sep 30 00:58:11.610377 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.610638 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.618442 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:11.618706 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:11.630441 2026] [security2:error] [pid 187269:tid 187473] [client 52.231.69.245:31369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/dh9u7.php"] [unique_id "aryzA9FcyhWr7HDzNGl-PwAAAlc"]
[Wed Sep 30 00:58:11.648265 2026] [security2:error] [pid 187269:tid 187480] [client 13.70.4.78:49840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/xex.php"] [unique_id "aryzA9FcyhWr7HDzNGl-QgAAAl4"]
[Wed Sep 30 00:58:11.649992 2026] [security2:error] [pid 187269:tid 187365] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzA9FcyhWr7HDzNGl-QQACP1g"], referer: https://torquayfans.com/posting.php?mode=reply&t=21196
[Wed Sep 30 00:58:11.650017 2026] [security2:error] [pid 187269:tid 187365] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzA9FcyhWr7HDzNGl-QQACP1g"], referer: https://torquayfans.com/posting.php?mode=reply&t=21196
[Wed Sep 30 00:58:11.681794 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.682056 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.726268 2026] [autoindex:error] [pid 187269:tid 187412] [client 4.240.25.22:30739] AH01276: Cannot serve directory /home2/ffshorem/public_html/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:11.775553 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.775827 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.864899 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.865274 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.917066 2026] [security2:error] [pid 187269:tid 187526] [client 52.231.69.245:30804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/yvnqcuic.php"] [unique_id "aryzA9FcyhWr7HDzNGl-VAAAAos"]
[Wed Sep 30 00:58:11.919359 2026] [security2:error] [pid 186850:tid 187103] [client 13.70.1.101:15693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzA05Phls--iYlcKgIEgAAAYU"]
[Wed Sep 30 00:58:11.939665 2026] [security2:error] [pid 187269:tid 187500] [client 74.7.244.42:43098] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "indoorenviromentaltesting.com"] [uri "/robots.txt"] [unique_id "aryzA9FcyhWr7HDzNGl-VgAAAnI"]
[Wed Sep 30 00:58:11.953082 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:11.953358 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:11.981484 2026] [security2:error] [pid 187269:tid 187481] [client 223.181.30.165:13426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-WAAAAl8"]
[Wed Sep 30 00:58:11.981611 2026] [security2:error] [pid 187269:tid 187481] [client 223.181.30.165:13426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzA9FcyhWr7HDzNGl-WAAAAl8"]
[Wed Sep 30 00:58:12.009742 2026] [security2:error] [pid 187269:tid 187496] [client 4.240.25.22:30737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/c.php"] [unique_id "aryzBNFcyhWr7HDzNGl-WQAAAm4"]
[Wed Sep 30 00:58:12.042057 2026] [security2:error] [pid 187269:tid 187524] [client 45.138.12.32:23676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uzi.cxi.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzBNFcyhWr7HDzNGl-WgAAAok"]
[Wed Sep 30 00:58:12.046020 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.046271 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.072466 2026] [core:error] [pid 187269:tid 187392] [remote 74.7.244.42:54418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://indoorenviromentaltesting.com/robots.txt
[Wed Sep 30 00:58:12.072504 2026] [core:error] [pid 187269:tid 187392] [remote 74.7.244.42:54418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://indoorenviromentaltesting.com/robots.txt
[Wed Sep 30 00:58:12.072779 2026] [security2:error] [pid 187269:tid 187529] [client 74.7.244.42:54418] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "indoorenviromentaltesting.com"] [uri "/index.php"] [unique_id "aryzBNFcyhWr7HDzNGl-WwACjnM"], referer: http://indoorenviromentaltesting.com/robots.txt
[Wed Sep 30 00:58:12.075045 2026] [security2:error] [pid 186850:tid 187072] [client 20.194.30.107:17471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzBE5Phls--iYlcKgIGAAAAWY"]
[Wed Sep 30 00:58:12.093946 2026] [security2:error] [pid 187269:tid 187513] [client 103.172.210.103:51787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzBNFcyhWr7HDzNGl-XAAAAn8"]
[Wed Sep 30 00:58:12.094097 2026] [security2:error] [pid 187269:tid 187513] [client 103.172.210.103:51787] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzBNFcyhWr7HDzNGl-XAAAAn8"]
[Wed Sep 30 00:58:12.114336 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:12.114602 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:12.124658 2026] [access_compat:error] [pid 187269:tid 187511] [client 47.79.13.176:40978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:12.124956 2026] [access_compat:error] [pid 187269:tid 187511] [client 47.79.13.176:40978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:12.135883 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.136151 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.157465 2026] [security2:error] [pid 187269:tid 187441] [client 4.196.65.241:64183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/hywzd.php"] [unique_id "aryzBNFcyhWr7HDzNGl-YAAAAjc"]
[Wed Sep 30 00:58:12.210847 2026] [security2:error] [pid 187269:tid 187448] [client 52.231.69.245:31399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/koiy.php"] [unique_id "aryzBNFcyhWr7HDzNGl-YwAAAj4"]
[Wed Sep 30 00:58:12.225901 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.226156 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.319049 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.319343 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.322992 2026] [security2:error] [pid 187269:tid 187447] [client 105.112.178.79:38129] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fda.wmq.mybluehost.me"] [uri "/__ss_probe_87e4fd261acfd5eaed0ab24f27b354d1__"] [unique_id "aryzBNFcyhWr7HDzNGl-ZgAAAj0"]
[Wed Sep 30 00:58:12.345574 2026] [access_compat:error] [pid 187269:tid 187514] [client 47.79.13.37:48480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:12.345869 2026] [access_compat:error] [pid 187269:tid 187514] [client 47.79.13.37:48480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:12.370918 2026] [security2:error] [pid 187269:tid 187442] [client 13.70.4.78:49412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ass.php"] [unique_id "aryzBNFcyhWr7HDzNGl-agAAAjg"]
[Wed Sep 30 00:58:12.388468 2026] [security2:error] [pid 187269:tid 187428] [client 45.156.128.171:60952] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/elementor/readme.txt"] [unique_id "aryzBNFcyhWr7HDzNGl-bAAAAio"]
[Wed Sep 30 00:58:12.409057 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.409321 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.498988 2026] [security2:error] [pid 187269:tid 187439] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzBNFcyhWr7HDzNGl-cgAAAjU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:12.500998 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.501259 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.561886 2026] [security2:error] [pid 187269:tid 187408] [client 45.138.12.41:21610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.goarchitects.com"] [uri "/wp-links-opml.php"] [unique_id "aryzBNFcyhWr7HDzNGl-dAAAAhY"]
[Wed Sep 30 00:58:12.581446 2026] [security2:error] [pid 187269:tid 187519] [client 52.231.69.245:31400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wordfence-waf.php"] [unique_id "aryzBNFcyhWr7HDzNGl-dQAAAoU"]
[Wed Sep 30 00:58:12.594750 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.595047 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.635943 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:12.636226 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:12.687620 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.688063 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.737475 2026] [security2:error] [pid 186850:tid 187077] [client 13.70.4.78:49416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wsd.php"] [unique_id "aryzBE5Phls--iYlcKgIJgAAAWs"]
[Wed Sep 30 00:58:12.775428 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.775693 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.867846 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.868113 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:12.881488 2026] [security2:error] [pid 187269:tid 187451] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzBNFcyhWr7HDzNGl-ggAAAkE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:12.896607 2026] [security2:error] [pid 187269:tid 187371] [remote 74.7.227.56:51494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzBNFcyhWr7HDzNGl-gwACNF4"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 00:58:12.897735 2026] [security2:error] [pid 187269:tid 187525] [client 20.198.74.230:41363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wander.php"] [unique_id "aryzBNFcyhWr7HDzNGl-hAAAAoo"]
[Wed Sep 30 00:58:12.946410 2026] [security2:error] [pid 186850:tid 187037] [client 52.231.69.245:30932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp5.php"] [unique_id "aryzBE5Phls--iYlcKgILQAAAUM"]
[Wed Sep 30 00:58:12.958322 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:12.958580 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.032722 2026] [security2:error] [pid 187269:tid 187477] [client 20.219.2.60:18835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-kikikoko.php"] [unique_id "aryzBdFcyhWr7HDzNGl-iQAAAls"]
[Wed Sep 30 00:58:13.048116 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.048389 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.121005 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:13.121435 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:13.139101 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.140062 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.232305 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.232572 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.239878 2026] [security2:error] [pid 187269:tid 187465] [client 52.231.69.245:30798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/em.php"] [unique_id "aryzBdFcyhWr7HDzNGl-lAAAAk8"]
[Wed Sep 30 00:58:13.322421 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.322681 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.324079 2026] [security2:error] [pid 187269:tid 187528] [client 4.196.65.241:2611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/file2.php"] [unique_id "aryzBdFcyhWr7HDzNGl-lwAAAo0"]
[Wed Sep 30 00:58:13.345991 2026] [security2:error] [pid 187269:tid 187490] [client 4.240.25.22:30862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/adminan.php"] [unique_id "aryzBdFcyhWr7HDzNGl-mwAAAmg"]
[Wed Sep 30 00:58:13.407326 2026] [security2:error] [pid 187269:tid 187412] [client 152.59.165.7:52867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-oQAAAho"]
[Wed Sep 30 00:58:13.407546 2026] [security2:error] [pid 187269:tid 187412] [client 152.59.165.7:52867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-oQAAAho"]
[Wed Sep 30 00:58:13.415635 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.415945 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:2867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.431270 2026] [security2:error] [pid 187269:tid 187532] [client 13.70.1.101:15710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/images.php"] [unique_id "aryzBdFcyhWr7HDzNGl-pAAAApE"]
[Wed Sep 30 00:58:13.449117 2026] [security2:error] [pid 186850:tid 187096] [client 20.28.180.172:34256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zejjyvzu.php"] [unique_id "aryzBU5Phls--iYlcKgIMwAAAX4"]
[Wed Sep 30 00:58:13.497847 2026] [security2:error] [pid 187269:tid 187447] [client 216.73.216.46:2867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzBdFcyhWr7HDzNGl-pgAAAj0"]
[Wed Sep 30 00:58:13.509798 2026] [security2:error] [pid 187269:tid 187504] [client 202.179.95.79:57642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-qAAAAnY"]
[Wed Sep 30 00:58:13.509893 2026] [security2:error] [pid 187269:tid 187504] [client 202.179.95.79:57642] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-qAAAAnY"]
[Wed Sep 30 00:58:13.516562 2026] [security2:error] [pid 187269:tid 187420] [client 52.231.69.245:31390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/hp.php"] [unique_id "aryzBdFcyhWr7HDzNGl-qQAAAiI"]
[Wed Sep 30 00:58:13.597551 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.597956 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.633666 2026] [access_compat:error] [pid 186850:tid 187038] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:13.633928 2026] [access_compat:error] [pid 186850:tid 187038] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:13.674568 2026] [security2:error] [pid 187269:tid 187518] [client 103.159.192.142:64077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-sAAAAoQ"]
[Wed Sep 30 00:58:13.674668 2026] [security2:error] [pid 187269:tid 187518] [client 103.159.192.142:64077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzBdFcyhWr7HDzNGl-sAAAAoQ"]
[Wed Sep 30 00:58:13.686870 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.687112 2026] [access_compat:error] [pid 187269:tid 187471] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.714268 2026] [security2:error] [pid 187269:tid 187408] [client 13.70.4.78:49418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/BDKR28WP.php"] [unique_id "aryzBdFcyhWr7HDzNGl-swAAAhY"]
[Wed Sep 30 00:58:13.778271 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.778530 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.800319 2026] [security2:error] [pid 187269:tid 187436] [client 52.231.69.245:30920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wpuse.php"] [unique_id "aryzBdFcyhWr7HDzNGl-uQAAAjI"]
[Wed Sep 30 00:58:13.806095 2026] [access_compat:error] [pid 187269:tid 187446] [client 47.79.13.28:55034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:13.806362 2026] [access_compat:error] [pid 187269:tid 187446] [client 47.79.13.28:55034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:13.809484 2026] [security2:error] [pid 187269:tid 187435] [client 13.70.1.101:15999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/media.php"] [unique_id "aryzBdFcyhWr7HDzNGl-uwAAAjE"]
[Wed Sep 30 00:58:13.862815 2026] [security2:error] [pid 187269:tid 187487] [client 20.219.19.141:23959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/admin.php/2P.php"] [unique_id "aryzBdFcyhWr7HDzNGl-vAAAAmU"]
[Wed Sep 30 00:58:13.868644 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.868914 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.907720 2026] [security2:error] [pid 187269:tid 187462] [client 84.17.60.236:48236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzBdFcyhWr7HDzNGl-wQAAAkw"]
[Wed Sep 30 00:58:13.923200 2026] [security2:error] [pid 187269:tid 187451] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzBdFcyhWr7HDzNGl-wgAAAkE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:13.958489 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:13.958753 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:13.976935 2026] [security2:error] [pid 187269:tid 187477] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryzBdFcyhWr7HDzNGl-yAAAAls"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:14.053205 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.053469 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.061794 2026] [security2:error] [pid 187269:tid 187455] [client 105.112.178.79:38130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fdb.png.mybluehost.me"] [uri "/__ss_probe_624797fcb26450c46ab1c51759013b08__"] [unique_id "aryzBtFcyhWr7HDzNGl-ygAAAkU"]
[Wed Sep 30 00:58:14.098965 2026] [security2:error] [pid 186850:tid 187034] [client 52.231.69.245:30937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/file18x.php"] [unique_id "aryzBk5Phls--iYlcKgIPQAAAUA"]
[Wed Sep 30 00:58:14.142974 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.143156 2026] [access_compat:error] [pid 186850:tid 187030] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:14.143261 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.143437 2026] [access_compat:error] [pid 186850:tid 187030] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:14.150706 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.4.78:49429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wmore1.php"] [unique_id "aryzBtFcyhWr7HDzNGl-zQAAAns"]
[Wed Sep 30 00:58:14.181232 2026] [security2:error] [pid 187269:tid 187481] [client 13.70.1.101:15705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/mac.php"] [unique_id "aryzBtFcyhWr7HDzNGl-0AAAAl8"]
[Wed Sep 30 00:58:14.234556 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.234828 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.259581 2026] [security2:error] [pid 187269:tid 187480] [client 203.122.45.246:60903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzBtFcyhWr7HDzNGl-1QAAAl4"]
[Wed Sep 30 00:58:14.259694 2026] [security2:error] [pid 187269:tid 187480] [client 203.122.45.246:60903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzBtFcyhWr7HDzNGl-1QAAAl4"]
[Wed Sep 30 00:58:14.323546 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.323803 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.372578 2026] [security2:error] [pid 186850:tid 187057] [client 20.194.30.107:64753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/f35.php"] [unique_id "aryzBk5Phls--iYlcKgIQgAAAVc"]
[Wed Sep 30 00:58:14.401096 2026] [security2:error] [pid 186850:tid 187105] [client 52.231.69.245:30949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/123viva.php"] [unique_id "aryzBk5Phls--iYlcKgIRQAAAYc"]
[Wed Sep 30 00:58:14.415919 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.416284 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.512292 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.512718 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.559761 2026] [access_compat:error] [pid 187269:tid 187492] [client 47.79.13.172:54226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:14.560032 2026] [access_compat:error] [pid 187269:tid 187492] [client 47.79.13.172:54226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:14.562281 2026] [security2:error] [pid 187269:tid 187456] [client 84.17.60.236:48242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pikarthouse.com"] [uri "/xmlrpc.php"] [unique_id "aryzBtFcyhWr7HDzNGl-4AAAAkY"]
[Wed Sep 30 00:58:14.587609 2026] [security2:error] [pid 186850:tid 187043] [client 13.70.4.78:49796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/z60.php"] [unique_id "aryzBk5Phls--iYlcKgIUQAAAUk"]
[Wed Sep 30 00:58:14.598589 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.598870 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.601632 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.1.101:15690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ops.php"] [unique_id "aryzBtFcyhWr7HDzNGl-4wAAAiI"]
[Wed Sep 30 00:58:14.618089 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:14.618430 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:14.677906 2026] [security2:error] [pid 186850:tid 187098] [client 72.255.10.32:64435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzBk5Phls--iYlcKgIVQAAAYA"]
[Wed Sep 30 00:58:14.678022 2026] [security2:error] [pid 186850:tid 187098] [client 72.255.10.32:64435] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzBk5Phls--iYlcKgIVQAAAYA"]
[Wed Sep 30 00:58:14.690988 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.691440 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.727363 2026] [security2:error] [pid 186850:tid 187001] [client 52.231.69.245:31421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/Components.update.php"] [unique_id "aryzBk5Phls--iYlcKgIWgAAAR8"]
[Wed Sep 30 00:58:14.782043 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.782313 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.871682 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.871984 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:14.960089 2026] [security2:error] [pid 187269:tid 187476] [client 4.240.25.22:21535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/js.php"] [unique_id "aryzBtFcyhWr7HDzNGl--wAAAlo"]
[Wed Sep 30 00:58:14.969090 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:14.969532 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.033578 2026] [security2:error] [pid 187269:tid 187525] [client 13.70.4.78:49841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/pJPoKA.php"] [unique_id "aryzB9FcyhWr7HDzNGl-_gAAAoo"]
[Wed Sep 30 00:58:15.038237 2026] [security2:error] [pid 187269:tid 187497] [client 49.43.163.212:61314] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzBtFcyhWr7HDzNGl--gAAAm8"]
[Wed Sep 30 00:58:15.038435 2026] [security2:error] [pid 187269:tid 187497] [client 49.43.163.212:61314] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzBtFcyhWr7HDzNGl--gAAAm8"]
[Wed Sep 30 00:58:15.056438 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.056712 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.100017 2026] [security2:error] [pid 187269:tid 187485] [client 74.7.244.20:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "website-946c9ca1.nucreativesolutions.com"] [uri "/robots.txt"] [unique_id "aryzB9FcyhWr7HDzNGl-_wAAAmM"]
[Wed Sep 30 00:58:15.100120 2026] [security2:error] [pid 187269:tid 187485] [client 74.7.244.20:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "website-946c9ca1.nucreativesolutions.com"] [uri "/robots.txt"] [unique_id "aryzB9FcyhWr7HDzNGl-_wAAAmM"]
[Wed Sep 30 00:58:15.110288 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:15.110544 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:15.132195 2026] [security2:error] [pid 186850:tid 187092] [client 74.7.244.20:40666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "website-946c9ca1.nucreativesolutions.com"] [uri "/robots.txt"] [unique_id "aryzB05Phls--iYlcKgIYwABenE"]
[Wed Sep 30 00:58:15.132861 2026] [security2:error] [pid 187269:tid 187494] [client 43.227.131.37:38824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzB9FcyhWr7HDzNGl_AgAAAmw"]
[Wed Sep 30 00:58:15.132969 2026] [security2:error] [pid 187269:tid 187494] [client 43.227.131.37:38824] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzB9FcyhWr7HDzNGl_AgAAAmw"]
[Wed Sep 30 00:58:15.148490 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.148764 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.150440 2026] [security2:error] [pid 187269:tid 187523] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzB9FcyhWr7HDzNGl_BQAAAog"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:15.206337 2026] [security2:error] [pid 187269:tid 187489] [client 84.17.60.236:48258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzB9FcyhWr7HDzNGl_CAAAAmc"]
[Wed Sep 30 00:58:15.238204 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.238566 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.240100 2026] [security2:error] [pid 186850:tid 187078] [client 20.219.2.60:18820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/file61.php"] [unique_id "aryzB05Phls--iYlcKgIagAAAWw"]
[Wed Sep 30 00:58:15.249920 2026] [security2:error] [pid 187269:tid 187493] [client 13.70.1.101:15976] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/1.php"] [unique_id "aryzB9FcyhWr7HDzNGl_CgAAAms"]
[Wed Sep 30 00:58:15.250023 2026] [security2:error] [pid 187269:tid 187493] [client 13.70.1.101:15976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/1.php"] [unique_id "aryzB9FcyhWr7HDzNGl_CgAAAms"]
[Wed Sep 30 00:58:15.331126 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.331558 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.343037 2026] [security2:error] [pid 186850:tid 186996] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryzB05Phls--iYlcKgIbwAAARo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:15.344196 2026] [security2:error] [pid 186850:tid 187013] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzB05Phls--iYlcKgIcAAAASs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:15.379895 2026] [security2:error] [pid 187269:tid 187449] [client 13.70.4.78:49445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/24.php"] [unique_id "aryzB9FcyhWr7HDzNGl_FAAAAj8"]
[Wed Sep 30 00:58:15.410486 2026] [security2:error] [pid 186850:tid 187077] [client 4.196.65.241:64174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/eb06f5f3c7index.php"] [unique_id "aryzB05Phls--iYlcKgIcgAAAWs"]
[Wed Sep 30 00:58:15.424621 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.425075 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.513157 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.513422 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.536966 2026] [security2:error] [pid 186850:tid 187007] [client 49.205.105.16:13547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzB05Phls--iYlcKgIdQAAASU"]
[Wed Sep 30 00:58:15.537079 2026] [security2:error] [pid 186850:tid 187007] [client 49.205.105.16:13547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzB05Phls--iYlcKgIdQAAASU"]
[Wed Sep 30 00:58:15.601473 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.601724 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.616638 2026] [security2:error] [pid 186850:tid 187060] [client 45.156.128.169:22488] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/groma-canary-not-a-real-plugin/readme.txt"] [unique_id "aryzB05Phls--iYlcKgIdwAAAVo"]
[Wed Sep 30 00:58:15.623718 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:15.623997 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:15.691126 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.691223 2026] [access_compat:error] [pid 187269:tid 187532] [client 47.79.13.73:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:15.691389 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:50465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.691499 2026] [access_compat:error] [pid 187269:tid 187532] [client 47.79.13.73:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:15.727023 2026] [security2:error] [pid 186850:tid 187053] [client 13.70.4.78:49455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/xxw.php"] [unique_id "aryzB05Phls--iYlcKgIfAAAAVM"]
[Wed Sep 30 00:58:15.780140 2026] [security2:error] [pid 187269:tid 187432] [client 216.73.216.46:50465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzB9FcyhWr7HDzNGl_KgAAAi4"]
[Wed Sep 30 00:58:15.791258 2026] [security2:error] [pid 187269:tid 187476] [client 20.70.173.30:54826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzB9FcyhWr7HDzNGl_KwAAAlo"]
[Wed Sep 30 00:58:15.862278 2026] [security2:error] [pid 187269:tid 187441] [client 84.17.60.236:48272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzB9FcyhWr7HDzNGl_LQAAAjc"]
[Wed Sep 30 00:58:15.868991 2026] [security2:error] [pid 186850:tid 187061] [client 20.198.74.230:23918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/worksec.php"] [unique_id "aryzB05Phls--iYlcKgIgQAAAVs"]
[Wed Sep 30 00:58:15.877353 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.877608 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:15.968289 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:15.968576 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:18303] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.027387 2026] [security2:error] [pid 186850:tid 187057] [client 20.198.74.230:51399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wsd.php"] [unique_id "aryzCE5Phls--iYlcKgIhwAAAVc"]
[Wed Sep 30 00:58:16.053084 2026] [security2:error] [pid 186850:tid 187054] [client 216.73.216.46:18303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzCE5Phls--iYlcKgIiAAAAVQ"]
[Wed Sep 30 00:58:16.067738 2026] [security2:error] [pid 187269:tid 187288] [remote 47.128.35.50:35594] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "camping4eloah.com"] [uri "/index.php"] [unique_id "aryzCNFcyhWr7HDzNGl_NgACRQs"]
[Wed Sep 30 00:58:16.099051 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:16.099316 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:16.116163 2026] [security2:error] [pid 187269:tid 187503] [client 13.70.4.78:49417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/bnmtp.php"] [unique_id "aryzCNFcyhWr7HDzNGl_NwAAAnU"]
[Wed Sep 30 00:58:16.149698 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.149961 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:2962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.224257 2026] [security2:error] [pid 186850:tid 187083] [client 45.156.128.171:49414] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/elementor/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIjAAAAXE"]
[Wed Sep 30 00:58:16.228708 2026] [security2:error] [pid 187269:tid 187497] [client 45.156.128.170:15830] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/akismet/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_PgAAAm8"]
[Wed Sep 30 00:58:16.233309 2026] [security2:error] [pid 186850:tid 187056] [client 45.156.128.168:19398] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/woocommerce/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIjQAAAVY"]
[Wed Sep 30 00:58:16.235276 2026] [security2:error] [pid 186850:tid 186985] [client 216.73.216.46:2962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzCE5Phls--iYlcKgIjgAAAQ8"]
[Wed Sep 30 00:58:16.235799 2026] [security2:error] [pid 186850:tid 186991] [client 45.156.128.170:15832] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wordpress-seo/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIjwAAARU"]
[Wed Sep 30 00:58:16.237416 2026] [security2:error] [pid 186850:tid 186999] [client 45.156.128.169:22500] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/litespeed-cache/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIkAAAAR0"]
[Wed Sep 30 00:58:16.252960 2026] [security2:error] [pid 187269:tid 187459] [client 45.156.128.171:49428] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wpforms-lite/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_PwAAAkk"]
[Wed Sep 30 00:58:16.259607 2026] [security2:error] [pid 187269:tid 187508] [client 45.156.128.169:22510] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/really-simple-ssl/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_QAAAAno"]
[Wed Sep 30 00:58:16.261090 2026] [security2:error] [pid 186850:tid 187030] [client 45.156.128.168:19406] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIkQAAATw"]
[Wed Sep 30 00:58:16.264516 2026] [security2:error] [pid 187269:tid 187434] [client 106.214.3.140:20868] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzCNFcyhWr7HDzNGl_QQAAAjA"]
[Wed Sep 30 00:58:16.267154 2026] [security2:error] [pid 187269:tid 187434] [client 106.214.3.140:20868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzCNFcyhWr7HDzNGl_QQAAAjA"]
[Wed Sep 30 00:58:16.277284 2026] [security2:error] [pid 187269:tid 187417] [client 20.28.180.172:29614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/pqfpcelx.php"] [unique_id "aryzCNFcyhWr7HDzNGl_QgAAAh8"]
[Wed Sep 30 00:58:16.280884 2026] [security2:error] [pid 186850:tid 187021] [client 45.156.128.169:22524] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/duplicate-post/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIkgAAATM"]
[Wed Sep 30 00:58:16.282101 2026] [security2:error] [pid 187269:tid 187485] [client 45.156.128.170:15836] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/duplicate-page/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_QwAAAmM"]
[Wed Sep 30 00:58:16.283140 2026] [security2:error] [pid 186850:tid 187031] [client 45.156.128.169:22540] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/redirection/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIkwAAAT0"]
[Wed Sep 30 00:58:16.289154 2026] [security2:error] [pid 186850:tid 187044] [client 45.156.128.170:15842] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/insert-headers-and-footers/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIlAAAAUo"]
[Wed Sep 30 00:58:16.290114 2026] [security2:error] [pid 187269:tid 187454] [client 45.156.128.171:49434] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/google-analytics-for-wordpress/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_RAAAAkQ"]
[Wed Sep 30 00:58:16.292502 2026] [security2:error] [pid 187269:tid 187527] [client 45.156.128.171:49440] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/mailchimp-for-wp/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_RQAAAow"]
[Wed Sep 30 00:58:16.297002 2026] [security2:error] [pid 187269:tid 187444] [client 45.156.128.170:15858] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/limit-login-attempts-reloaded/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_RwAAAjo"]
[Wed Sep 30 00:58:16.298931 2026] [security2:error] [pid 187269:tid 187494] [client 45.156.128.170:15866] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/advanced-custom-fields/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_SQAAAmw"]
[Wed Sep 30 00:58:16.313846 2026] [security2:error] [pid 187269:tid 187458] [client 13.70.1.101:15713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/aaa.php"] [unique_id "aryzCNFcyhWr7HDzNGl_SgAAAkg"]
[Wed Sep 30 00:58:16.316682 2026] [security2:error] [pid 186850:tid 187090] [client 45.156.128.170:15874] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/header-footer-elementor/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIlQAAAXg"]
[Wed Sep 30 00:58:16.325559 2026] [security2:error] [pid 186850:tid 187105] [client 45.156.128.171:49450] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/astra-sites/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIlgAAAYc"]
[Wed Sep 30 00:58:16.326137 2026] [security2:error] [pid 186850:tid 187065] [client 45.156.128.169:22556] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wps-hide-login/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIlwAAAV8"]
[Wed Sep 30 00:58:16.339952 2026] [security2:error] [pid 187269:tid 187478] [client 45.156.128.171:49456] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/disable-comments/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_SwAAAlw"]
[Wed Sep 30 00:58:16.347721 2026] [security2:error] [pid 187269:tid 187489] [client 45.156.128.171:49470] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wp-fastest-cache/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_TQAAAmc"]
[Wed Sep 30 00:58:16.356833 2026] [security2:error] [pid 186850:tid 187017] [client 45.156.128.170:15882] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/svg-support/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgImQAAAS8"]
[Wed Sep 30 00:58:16.358411 2026] [security2:error] [pid 186850:tid 187097] [client 45.156.128.169:22562] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wordfence/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgImgAAAX8"]
[Wed Sep 30 00:58:16.360688 2026] [security2:error] [pid 187269:tid 187517] [client 45.156.128.169:22578] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/better-search-replace/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_TgAAAoM"]
[Wed Sep 30 00:58:16.360928 2026] [security2:error] [pid 186850:tid 186981] [client 45.156.128.168:19420] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/all-in-one-seo-pack/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgImwAAAQs"]
[Wed Sep 30 00:58:16.366820 2026] [security2:error] [pid 187269:tid 187507] [client 45.156.128.169:22586] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/envato-elements/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_TwAAAnk"]
[Wed Sep 30 00:58:16.370371 2026] [security2:error] [pid 187269:tid 187520] [client 45.156.128.168:19428] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/complianz-gdpr/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_UAAAAoY"]
[Wed Sep 30 00:58:16.370372 2026] [security2:error] [pid 187269:tid 187493] [client 45.156.128.170:15900] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wp-optimize/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_UQAAAms"]
[Wed Sep 30 00:58:16.370761 2026] [security2:error] [pid 187269:tid 187442] [client 45.156.128.170:15886] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/w3-total-cache/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_UgAAAjg"]
[Wed Sep 30 00:58:16.371605 2026] [security2:error] [pid 187269:tid 187475] [client 45.156.128.170:15912] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/sg-security/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_UwAAAlk"]
[Wed Sep 30 00:58:16.373326 2026] [security2:error] [pid 187269:tid 187465] [client 45.156.128.170:15924] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_VAAAAk8"]
[Wed Sep 30 00:58:16.377718 2026] [security2:error] [pid 187269:tid 187492] [client 216.73.216.46:13178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzCNFcyhWr7HDzNGl_VQAAAmo"]
[Wed Sep 30 00:58:16.379595 2026] [security2:error] [pid 186850:tid 187046] [client 45.156.128.171:49484] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/google-site-kit/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgInAAAAUw"]
[Wed Sep 30 00:58:16.380852 2026] [security2:error] [pid 186850:tid 187049] [client 45.156.128.171:49488] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/code-snippets/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgInQAAAU8"]
[Wed Sep 30 00:58:16.382246 2026] [security2:error] [pid 187269:tid 187463] [client 45.156.128.169:22590] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/redux-framework/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_VwAAAk0"]
[Wed Sep 30 00:58:16.389734 2026] [security2:error] [pid 186850:tid 187018] [client 45.156.128.170:15938] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/coming-soon/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIngAAATA"]
[Wed Sep 30 00:58:16.389965 2026] [security2:error] [pid 186850:tid 187048] [client 45.156.128.171:49498] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/smart-slider-3/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgInwAAAU4"]
[Wed Sep 30 00:58:16.394823 2026] [security2:error] [pid 187269:tid 187470] [client 45.156.128.170:15944] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/updraftplus/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_WAAAAlQ"]
[Wed Sep 30 00:58:16.397604 2026] [security2:error] [pid 187269:tid 187462] [client 45.156.128.168:19430] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wp-super-cache/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_WQAAAkw"]
[Wed Sep 30 00:58:16.402275 2026] [security2:error] [pid 187269:tid 187509] [client 45.156.128.170:15946] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/hostinger/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_WgAAAns"]
[Wed Sep 30 00:58:16.406848 2026] [security2:error] [pid 187269:tid 187515] [client 45.156.128.171:49502] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_XQAAAoE"]
[Wed Sep 30 00:58:16.455360 2026] [security2:error] [pid 187269:tid 187529] [client 45.156.128.170:15956] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/loginizer/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_YgAAAo4"]
[Wed Sep 30 00:58:16.456715 2026] [security2:error] [pid 187269:tid 187506] [client 45.156.128.169:22594] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/autoptimize/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_YwAAAng"]
[Wed Sep 30 00:58:16.457702 2026] [security2:error] [pid 187269:tid 187410] [client 20.70.173.30:50711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/xiugai.php"] [unique_id "aryzCNFcyhWr7HDzNGl_ZAAAAhg"]
[Wed Sep 30 00:58:16.459751 2026] [security2:error] [pid 186850:tid 187075] [client 45.156.128.168:19442] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/all-in-one-wp-migration/readme.txt"] [unique_id "aryzCE5Phls--iYlcKgIoQAAAWk"]
[Wed Sep 30 00:58:16.474688 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.474942 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.495793 2026] [security2:error] [pid 187269:tid 187524] [client 45.156.128.170:15970] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_ZgAAAok"]
[Wed Sep 30 00:58:16.501993 2026] [security2:error] [pid 187269:tid 187490] [client 84.17.60.236:48286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzCNFcyhWr7HDzNGl_ZwAAAmg"]
[Wed Sep 30 00:58:16.511294 2026] [security2:error] [pid 187269:tid 187431] [client 45.156.128.169:22602] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/seo-by-rank-math/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_aAAAAi0"]
[Wed Sep 30 00:58:16.536242 2026] [security2:error] [pid 186850:tid 187103] [client 20.219.19.141:23974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/a.php"] [unique_id "aryzCE5Phls--iYlcKgIogAAAYU"]
[Wed Sep 30 00:58:16.565877 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.566148 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.566671 2026] [security2:error] [pid 187269:tid 187472] [client 45.156.128.169:22610] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/duplicator/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_bgAAAlY"]
[Wed Sep 30 00:58:16.576662 2026] [security2:error] [pid 187269:tid 187448] [client 45.156.128.169:22620] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/wp-file-manager/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_bwAAAj4"]
[Wed Sep 30 00:58:16.606150 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:16.606494 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:16.660196 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.660464 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.661122 2026] [security2:error] [pid 187269:tid 187430] [client 45.156.128.170:15982] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/ewww-image-optimizer/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_dQAAAiw"]
[Wed Sep 30 00:58:16.662658 2026] [security2:error] [pid 187269:tid 187424] [client 45.156.128.171:49508] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.madagascar-foundation.org"] [uri "/wp-content/plugins/better-wp-security/readme.txt"] [unique_id "aryzCNFcyhWr7HDzNGl_dwAAAiY"]
[Wed Sep 30 00:58:16.676336 2026] [security2:error] [pid 187269:tid 187511] [client 13.70.4.78:49444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ebkid.php"] [unique_id "aryzCNFcyhWr7HDzNGl_eQAAAn0"]
[Wed Sep 30 00:58:16.720443 2026] [security2:error] [pid 187269:tid 187485] [client 13.70.1.101:15952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/chosen.php"] [unique_id "aryzCNFcyhWr7HDzNGl_ewAAAmM"]
[Wed Sep 30 00:58:16.741260 2026] [security2:error] [pid 187269:tid 187486] [client 216.73.216.46:63251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzCNFcyhWr7HDzNGl_fgAAAmQ"]
[Wed Sep 30 00:58:16.793018 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.793293 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.835115 2026] [security2:error] [pid 186850:tid 187003] [client 4.240.25.22:63770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/echkm.php"] [unique_id "aryzCE5Phls--iYlcKgIpwAAASE"]
[Wed Sep 30 00:58:16.883862 2026] [security2:error] [pid 187269:tid 187433] [client 39.44.16.112:58008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzCNFcyhWr7HDzNGl_hwAAAi8"]
[Wed Sep 30 00:58:16.885395 2026] [security2:error] [pid 187269:tid 187433] [client 39.44.16.112:58008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzCNFcyhWr7HDzNGl_hwAAAi8"]
[Wed Sep 30 00:58:16.886006 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.886265 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:16.977948 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:16.978217 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.004686 2026] [security2:error] [pid 187269:tid 187524] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzCdFcyhWr7HDzNGl_kQAAAok"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:17.028675 2026] [security2:error] [pid 187269:tid 187471] [client 20.219.2.60:18917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/xx.php"] [unique_id "aryzCdFcyhWr7HDzNGl_kgAAAlU"]
[Wed Sep 30 00:58:17.067928 2026] [security2:error] [pid 187269:tid 187441] [client 13.70.1.101:15738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/2P.php"] [unique_id "aryzCdFcyhWr7HDzNGl_lAAAAjc"]
[Wed Sep 30 00:58:17.070411 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.070675 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.130831 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:17.131120 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:17.143221 2026] [security2:error] [pid 187269:tid 187463] [client 84.17.60.236:48294] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzCdFcyhWr7HDzNGl_lQAAAk0"]
[Wed Sep 30 00:58:17.160685 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.161081 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.252461 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.252862 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.347509 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.347776 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.401513 2026] [security2:error] [pid 187269:tid 187449] [client 13.70.4.78:49831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/133.php"] [unique_id "aryzCdFcyhWr7HDzNGl_oQAAAj8"]
[Wed Sep 30 00:58:17.440279 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.440550 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.451618 2026] [security2:error] [pid 187269:tid 187506] [client 116.72.182.19:64065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzCdFcyhWr7HDzNGl_qwAAAng"]
[Wed Sep 30 00:58:17.451718 2026] [security2:error] [pid 187269:tid 187506] [client 116.72.182.19:64065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzCdFcyhWr7HDzNGl_qwAAAng"]
[Wed Sep 30 00:58:17.467921 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.1.101:15728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/min.php"] [unique_id "aryzCdFcyhWr7HDzNGl_rgAAAk4"]
[Wed Sep 30 00:58:17.528863 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.529126 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.564332 2026] [access_compat:error] [pid 187269:tid 187503] [client 47.82.11.32:37580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:17.564707 2026] [access_compat:error] [pid 187269:tid 187503] [client 47.82.11.32:37580] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:17.584763 2026] [security2:error] [pid 187269:tid 187442] [client 159.223.71.139:56004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/cache.php"] [unique_id "aryzCdFcyhWr7HDzNGl_uwAAAjg"], referer: www.google.com
[Wed Sep 30 00:58:17.612903 2026] [security2:error] [pid 186850:tid 186879] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzCU5Phls--iYlcKgIsgABaxw"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D12281
[Wed Sep 30 00:58:17.621847 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.622117 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.632050 2026] [security2:error] [pid 187269:tid 187496] [client 4.196.65.241:27293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cae2.3.php"] [unique_id "aryzCdFcyhWr7HDzNGl_vQAAAm4"]
[Wed Sep 30 00:58:17.651019 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:17.651313 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:17.714503 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.714763 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.783377 2026] [security2:error] [pid 187269:tid 187512] [client 84.17.60.236:48304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzCdFcyhWr7HDzNGl_wAAAAn4"]
[Wed Sep 30 00:58:17.804907 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:17.805158 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:17.833438 2026] [security2:error] [pid 186850:tid 187006] [client 4.196.65.241:64157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/b8.php"] [unique_id "aryzCU5Phls--iYlcKgIvQAAASQ"]
[Wed Sep 30 00:58:17.872196 2026] [security2:error] [pid 186850:tid 187059] [client 13.70.4.78:49439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/x33.php"] [unique_id "aryzCU5Phls--iYlcKgIvgAAAVk"]
[Wed Sep 30 00:58:17.944214 2026] [security2:error] [pid 187269:tid 187423] [client 20.219.19.141:46507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/cord.php"] [unique_id "aryzCdFcyhWr7HDzNGl_zgAAAiU"]
[Wed Sep 30 00:58:18.021625 2026] [security2:error] [pid 187269:tid 187461] [client 223.235.102.107:32152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzCtFcyhWr7HDzNGl_1AAAAks"]
[Wed Sep 30 00:58:18.021743 2026] [security2:error] [pid 187269:tid 187461] [client 223.235.102.107:32152] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzCtFcyhWr7HDzNGl_1AAAAks"]
[Wed Sep 30 00:58:18.049734 2026] [access_compat:error] [pid 187269:tid 187470] [client 47.79.13.27:42834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:18.050007 2026] [access_compat:error] [pid 187269:tid 187470] [client 47.79.13.27:42834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:18.054577 2026] [security2:error] [pid 187269:tid 187437] [client 45.138.12.32:17550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vci.ffz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzCtFcyhWr7HDzNGl_1gAAAjM"]
[Wed Sep 30 00:58:18.055939 2026] [security2:error] [pid 187269:tid 187519] [client 4.240.25.22:21511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/ccc.php"] [unique_id "aryzCtFcyhWr7HDzNGl_1wAAAoU"]
[Wed Sep 30 00:58:18.073477 2026] [security2:error] [pid 187269:tid 187514] [client 20.194.30.107:25914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/about.php"] [unique_id "aryzCtFcyhWr7HDzNGl_2AAAAoA"]
[Wed Sep 30 00:58:18.114954 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:18.115155 2026] [security2:error] [pid 186850:tid 186995] [client 45.3.37.114:60651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.37.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yourkatana.com"] [uri "/wp-login.php"] [unique_id "aryzCk5Phls--iYlcKgIxAAAARk"], referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:18.115223 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:18.142817 2026] [security2:error] [pid 187269:tid 187448] [client 13.70.1.101:15974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/great.php"] [unique_id "aryzCtFcyhWr7HDzNGl_2wAAAj4"]
[Wed Sep 30 00:58:18.219352 2026] [security2:error] [pid 187269:tid 187497] [client 20.194.30.107:10032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/dex.php"] [unique_id "aryzCtFcyhWr7HDzNGl_3wAAAm8"]
[Wed Sep 30 00:58:18.262087 2026] [security2:error] [pid 187269:tid 187522] [client 13.70.4.78:49430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/cae.php"] [unique_id "aryzCtFcyhWr7HDzNGl_4wAAAoc"]
[Wed Sep 30 00:58:18.318191 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.318475 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.372703 2026] [security2:error] [pid 187269:tid 187486] [client 45.156.128.168:17046] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/code-snippets/readme.txt"] [unique_id "aryzCtFcyhWr7HDzNGl_5wAAAmQ"]
[Wed Sep 30 00:58:18.382766 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.383046 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:25399] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.399201 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.399468 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.413166 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.413466 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.424816 2026] [security2:error] [pid 186850:tid 186900] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzCk5Phls--iYlcKgIygABcjE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=4839d995d358d13315e93e294c91c497&t=13538
[Wed Sep 30 00:58:18.424840 2026] [security2:error] [pid 186850:tid 186900] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzCk5Phls--iYlcKgIygABcjE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=4839d995d358d13315e93e294c91c497&t=13538
[Wed Sep 30 00:58:18.429076 2026] [security2:error] [pid 187269:tid 187525] [client 84.17.60.236:48310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzCtFcyhWr7HDzNGl_6wAAAoo"]
[Wed Sep 30 00:58:18.485497 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.485771 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.488421 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.488713 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.569358 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.1.101:56265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/BDKR28WP.php"] [unique_id "aryzCtFcyhWr7HDzNGl_-gAAAn4"]
[Wed Sep 30 00:58:18.588136 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.588400 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.590638 2026] [security2:error] [pid 187269:tid 187462] [client 20.219.2.60:18848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/Jcrop.php"] [unique_id "aryzCtFcyhWr7HDzNGl__AAAAkw"]
[Wed Sep 30 00:58:18.619787 2026] [access_compat:error] [pid 186850:tid 187106] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:18.620060 2026] [access_compat:error] [pid 186850:tid 187106] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:18.622675 2026] [security2:error] [pid 186850:tid 187089] [client 13.70.4.78:59148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/txets.php"] [unique_id "aryzCk5Phls--iYlcKgIzAAAAXc"]
[Wed Sep 30 00:58:18.679473 2026] [security2:error] [pid 187269:tid 187499] [client 116.197.133.25:61500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzCtFcyhWr7HDzNGmACAAAAnE"]
[Wed Sep 30 00:58:18.679563 2026] [security2:error] [pid 187269:tid 187499] [client 116.197.133.25:61500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzCtFcyhWr7HDzNGmACAAAAnE"]
[Wed Sep 30 00:58:18.687876 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.688912 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.753973 2026] [core:error] [pid 187269:tid 187493] [client 45.138.12.40:53898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:18.753995 2026] [core:error] [pid 187269:tid 187493] [client 45.138.12.40:53898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:18.777357 2026] [security2:error] [pid 186850:tid 187057] [client 223.181.60.167:2096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzCk5Phls--iYlcKgI0AAAAVc"]
[Wed Sep 30 00:58:18.777459 2026] [security2:error] [pid 186850:tid 187057] [client 223.181.60.167:2096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzCk5Phls--iYlcKgI0AAAAVc"]
[Wed Sep 30 00:58:18.777875 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.778332 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.804375 2026] [security2:error] [pid 186850:tid 187056] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzCk5Phls--iYlcKgI0QAAAVY"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:18.868786 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.869057 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:18.956246 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:18.956496 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.047997 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.048314 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.061594 2026] [security2:error] [pid 187269:tid 187430] [client 13.70.1.101:56259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/gigi.php"] [unique_id "aryzC9FcyhWr7HDzNGmAGgAAAiw"]
[Wed Sep 30 00:58:19.079626 2026] [security2:error] [pid 187269:tid 187530] [client 84.17.60.236:41612] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzC9FcyhWr7HDzNGmAGwAAAo8"]
[Wed Sep 30 00:58:19.122601 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:19.123003 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:19.127193 2026] [access_compat:error] [pid 187269:tid 187469] [client 47.79.13.58:38396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:19.127456 2026] [access_compat:error] [pid 187269:tid 187469] [client 47.79.13.58:38396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:19.142259 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.142699 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.165332 2026] [security2:error] [pid 187269:tid 187409] [client 4.240.25.22:21899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-content/admin.php"] [unique_id "aryzC9FcyhWr7HDzNGmALQAAAhc"]
[Wed Sep 30 00:58:19.168792 2026] [security2:error] [pid 187269:tid 187481] [client 13.70.4.78:49829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wp-update.php"] [unique_id "aryzC9FcyhWr7HDzNGmALwAAAl8"]
[Wed Sep 30 00:58:19.229569 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.229843 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.267374 2026] [security2:error] [pid 187269:tid 187496] [client 20.198.74.230:34820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/media.php"] [unique_id "aryzC9FcyhWr7HDzNGmAMwAAAm4"]
[Wed Sep 30 00:58:19.322074 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.322378 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:14431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.338708 2026] [access_compat:error] [pid 187269:tid 187465] [client 47.79.13.1:42956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:19.338980 2026] [access_compat:error] [pid 187269:tid 187465] [client 47.79.13.1:42956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:19.412883 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.413171 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.477087 2026] [security2:error] [pid 187269:tid 187520] [client 45.138.12.32:31634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uus.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzC9FcyhWr7HDzNGmAQQAAAoY"]
[Wed Sep 30 00:58:19.477962 2026] [security2:error] [pid 187269:tid 187516] [client 13.70.1.101:15739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ant.php"] [unique_id "aryzC9FcyhWr7HDzNGmAQgAAAoI"]
[Wed Sep 30 00:58:19.504246 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.504513 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.524526 2026] [core:error] [pid 186850:tid 187065] [client 65.111.31.229:38071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:19.524545 2026] [core:error] [pid 186850:tid 187065] [client 65.111.31.229:38071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:19.542392 2026] [core:error] [pid 187269:tid 187432] [client 45.138.12.40:53936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:19.542411 2026] [core:error] [pid 187269:tid 187432] [client 45.138.12.40:53936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:19.543080 2026] [security2:error] [pid 187269:tid 187438] [client 45.138.12.32:17618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.veq.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzC9FcyhWr7HDzNGmARgAAAjQ"]
[Wed Sep 30 00:58:19.577272 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:19.577544 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:19.593263 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.593526 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.687014 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.687444 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.726987 2026] [security2:error] [pid 187269:tid 187443] [client 84.17.60.236:41624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzC9FcyhWr7HDzNGmAWQAAAjk"]
[Wed Sep 30 00:58:19.739828 2026] [security2:error] [pid 187269:tid 187413] [client 216.73.216.46:14431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzC9FcyhWr7HDzNGmAWwAAAhs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMy9kcml2ZXIvY3B1MTQ%3D
[Wed Sep 30 00:58:19.777243 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.777611 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.826140 2026] [security2:error] [pid 187269:tid 187427] [client 13.70.1.101:15707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/uejvv.php"] [unique_id "aryzC9FcyhWr7HDzNGmAYwAAAik"]
[Wed Sep 30 00:58:19.832162 2026] [security2:error] [pid 187269:tid 187471] [client 20.217.128.132:7122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.ghamditrading.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "aryzC9FcyhWr7HDzNGmAZAAAAlU"]
[Wed Sep 30 00:58:19.832518 2026] [security2:error] [pid 187269:tid 187415] [client 20.217.128.132:9323] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.ghamditrading.com"] [uri "/___proxy_subdomain_webdisk/.env.old"] [unique_id "aryzC9FcyhWr7HDzNGmAZgAAAh0"]
[Wed Sep 30 00:58:19.866162 2026] [security2:error] [pid 187269:tid 187469] [client 4.240.25.22:11523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/dehnl.php"] [unique_id "aryzC9FcyhWr7HDzNGmAaQAAAlM"]
[Wed Sep 30 00:58:19.872936 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.873388 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.949293 2026] [security2:error] [pid 187269:tid 187458] [client 20.219.2.60:19382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/rip.php"] [unique_id "aryzC9FcyhWr7HDzNGmAbAAAAkg"]
[Wed Sep 30 00:58:19.955769 2026] [security2:error] [pid 186850:tid 187028] [client 20.219.19.141:57093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/anom.php"] [unique_id "aryzC05Phls--iYlcKgI5QAAATo"]
[Wed Sep 30 00:58:19.955852 2026] [security2:error] [pid 187269:tid 187437] [client 20.217.128.132:7127] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.ghamditrading.com"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "aryzC9FcyhWr7HDzNGmAcAAAAjM"]
[Wed Sep 30 00:58:19.955863 2026] [security2:error] [pid 187269:tid 187474] [client 20.217.128.132:9316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.ghamditrading.com"] [uri "/___proxy_subdomain_webdisk/.env.swp"] [unique_id "aryzC9FcyhWr7HDzNGmAbgAAAlg"]
[Wed Sep 30 00:58:19.956843 2026] [security2:error] [pid 186850:tid 187102] [client 20.217.128.132:9309] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.ghamditrading.com"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "aryzC05Phls--iYlcKgI5gAAAYQ"]
[Wed Sep 30 00:58:19.960163 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:19.960519 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:19.975881 2026] [security2:error] [pid 187269:tid 187462] [client 155.190.6.18:57660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzC9FcyhWr7HDzNGmAdQAAAkw"]
[Wed Sep 30 00:58:19.976005 2026] [security2:error] [pid 187269:tid 187462] [client 155.190.6.18:57660] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzC9FcyhWr7HDzNGmAdQAAAkw"]
[Wed Sep 30 00:58:20.022322 2026] [security2:error] [pid 187269:tid 187468] [client 193.37.200.111:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzDNFcyhWr7HDzNGmAfAAAAlI"]
[Wed Sep 30 00:58:20.049857 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.050127 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.089658 2026] [security2:error] [pid 187269:tid 187520] [client 213.136.69.135:53642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-dependencies.php"] [unique_id "aryzDNFcyhWr7HDzNGmAfgAAAoY"], referer: binance.com
[Wed Sep 30 00:58:20.137841 2026] [security2:error] [pid 187269:tid 187438] [client 4.196.65.241:19461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wpxml.php"] [unique_id "aryzDNFcyhWr7HDzNGmAhAAAAjQ"]
[Wed Sep 30 00:58:20.141001 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.141318 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.147085 2026] [security2:error] [pid 186850:tid 186902] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzDE5Phls--iYlcKgI6gABNDM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131711&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:58:20.147106 2026] [security2:error] [pid 186850:tid 186902] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzDE5Phls--iYlcKgI6gABNDM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131711&sid=1ebd2a12a0d7cda02eb54ad19f5e1131
[Wed Sep 30 00:58:20.153698 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:20.153977 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:20.165686 2026] [security2:error] [pid 186850:tid 187098] [client 103.159.192.142:64528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzDE5Phls--iYlcKgI7AAAAYA"]
[Wed Sep 30 00:58:20.165787 2026] [security2:error] [pid 186850:tid 187098] [client 103.159.192.142:64528] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzDE5Phls--iYlcKgI7AAAAYA"]
[Wed Sep 30 00:58:20.179108 2026] [security2:error] [pid 187269:tid 187519] [client 20.194.30.107:10034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/mac.php"] [unique_id "aryzDNFcyhWr7HDzNGmAhQAAAoU"]
[Wed Sep 30 00:58:20.232727 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.233003 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.311902 2026] [security2:error] [pid 187269:tid 187477] [client 20.198.74.230:41376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/images.php"] [unique_id "aryzDNFcyhWr7HDzNGmAiwAAAls"]
[Wed Sep 30 00:58:20.326577 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.326849 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.379742 2026] [security2:error] [pid 187269:tid 187411] [client 84.17.60.236:41628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzDNFcyhWr7HDzNGmAkgAAAhk"]
[Wed Sep 30 00:58:20.386560 2026] [security2:error] [pid 186850:tid 187062] [client 13.70.4.78:49812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/177.php"] [unique_id "aryzDE5Phls--iYlcKgI8AAAAVw"]
[Wed Sep 30 00:58:20.421207 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.421461 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.447593 2026] [core:error] [pid 187269:tid 187431] [client 45.138.12.40:53960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:20.447610 2026] [core:error] [pid 187269:tid 187431] [client 45.138.12.40:53960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:20.509702 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.509996 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.590948 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:20.591275 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:20.599644 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.599928 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.692316 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.692635 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:16230] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.774780 2026] [security2:error] [pid 187269:tid 187478] [client 45.156.128.171:49264] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wp-time-capsule/readme.txt"] [unique_id "aryzDNFcyhWr7HDzNGmApAAAAlw"]
[Wed Sep 30 00:58:20.781944 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.782221 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.875077 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.875345 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.959352 2026] [security2:error] [pid 187269:tid 187525] [client 13.70.4.78:49426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ccc.php"] [unique_id "aryzDNFcyhWr7HDzNGmAsAAAAoo"]
[Wed Sep 30 00:58:20.965201 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:20.965476 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:20.990710 2026] [security2:error] [pid 187269:tid 187486] [client 182.69.182.151:26113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzDNFcyhWr7HDzNGmAswAAAmQ"]
[Wed Sep 30 00:58:20.990838 2026] [security2:error] [pid 187269:tid 187486] [client 182.69.182.151:26113] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzDNFcyhWr7HDzNGmAswAAAmQ"]
[Wed Sep 30 00:58:21.033386 2026] [security2:error] [pid 186850:tid 187092] [client 84.17.60.236:41642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzDU5Phls--iYlcKgI_wAAAXo"]
[Wed Sep 30 00:58:21.057176 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.057475 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.064363 2026] [security2:error] [pid 187269:tid 187450] [client 37.41.16.35:49863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAtgAAAkA"]
[Wed Sep 30 00:58:21.064481 2026] [security2:error] [pid 187269:tid 187450] [client 37.41.16.35:49863] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAtgAAAkA"]
[Wed Sep 30 00:58:21.080566 2026] [autoindex:error] [pid 186850:tid 187007] [client 212.156.70.154:43977] AH01276: Cannot serve directory /home4/mpqigmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:21.086053 2026] [security2:error] [pid 187269:tid 187501] [client 13.70.1.101:15960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/file.php"] [unique_id "aryzDdFcyhWr7HDzNGmAtwAAAnM"]
[Wed Sep 30 00:58:21.104302 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:21.104742 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:21.107957 2026] [security2:error] [pid 187269:tid 187491] [client 216.73.216.46:16230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzDdFcyhWr7HDzNGmAuAAAAmk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MQ%3D%3D
[Wed Sep 30 00:58:21.137530 2026] [security2:error] [pid 187269:tid 187434] [client 116.193.128.26:61978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAuQAAAjA"]
[Wed Sep 30 00:58:21.137626 2026] [security2:error] [pid 187269:tid 187434] [client 116.193.128.26:61978] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAuQAAAjA"]
[Wed Sep 30 00:58:21.145542 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.145802 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.239595 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.239866 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.241792 2026] [autoindex:error] [pid 186850:tid 187027] [client 212.156.70.154:48692] AH01276: Cannot serve directory /home4/pegrvymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:21.289383 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzDU5Phls--iYlcKgJAwABJFQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=6a97e6af41ed43308bb681a88033334c
[Wed Sep 30 00:58:21.289411 2026] [security2:error] [pid 186850:tid 186935] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzDU5Phls--iYlcKgJAwABJFQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=6a97e6af41ed43308bb681a88033334c
[Wed Sep 30 00:58:21.299202 2026] [security2:error] [pid 187269:tid 187429] [client 20.194.30.107:64759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/dex.php"] [unique_id "aryzDdFcyhWr7HDzNGmAwAAAAis"]
[Wed Sep 30 00:58:21.319765 2026] [security2:error] [pid 187269:tid 187487] [client 13.70.4.78:49850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/0xD.php"] [unique_id "aryzDdFcyhWr7HDzNGmAwQAAAmU"]
[Wed Sep 30 00:58:21.329558 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.329832 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.364391 2026] [security2:error] [pid 187269:tid 187480] [client 20.219.2.60:19288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/new4.php"] [unique_id "aryzDdFcyhWr7HDzNGmAxgAAAl4"]
[Wed Sep 30 00:58:21.393026 2026] [security2:error] [pid 187269:tid 187505] [client 103.241.204.139:54070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAywAAAnc"]
[Wed Sep 30 00:58:21.393207 2026] [security2:error] [pid 187269:tid 187505] [client 103.241.204.139:54070] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmAywAAAnc"]
[Wed Sep 30 00:58:21.415349 2026] [security2:error] [pid 187269:tid 187441] [client 20.219.19.141:46509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/plugins.php"] [unique_id "aryzDdFcyhWr7HDzNGmAzwAAAjc"]
[Wed Sep 30 00:58:21.419733 2026] [security2:error] [pid 186850:tid 187099] [client 13.70.1.101:15691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/elements.php"] [unique_id "aryzDU5Phls--iYlcKgJBgAAAYE"]
[Wed Sep 30 00:58:21.420778 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.421076 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.509459 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.509724 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.600549 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.600814 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.616486 2026] [security2:error] [pid 187269:tid 187534] [client 20.198.74.230:41384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/ops.php"] [unique_id "aryzDdFcyhWr7HDzNGmA2AAAApM"]
[Wed Sep 30 00:58:21.618415 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:21.618657 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:21.622164 2026] [security2:error] [pid 187269:tid 187484] [client 20.194.30.107:30413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/txets.php"] [unique_id "aryzDdFcyhWr7HDzNGmA2QAAAmI"]
[Wed Sep 30 00:58:21.642335 2026] [security2:error] [pid 187269:tid 187409] [client 20.194.30.107:17504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzDdFcyhWr7HDzNGmA2wAAAhc"]
[Wed Sep 30 00:58:21.662093 2026] [security2:error] [pid 187269:tid 187533] [client 13.70.4.78:49833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/sallu.php"] [unique_id "aryzDdFcyhWr7HDzNGmA3gAAApI"]
[Wed Sep 30 00:58:21.674904 2026] [security2:error] [pid 187269:tid 187414] [client 84.17.60.236:41650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzDdFcyhWr7HDzNGmA3wAAAhw"]
[Wed Sep 30 00:58:21.692914 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.693222 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.726300 2026] [security2:error] [pid 187269:tid 187496] [client 4.196.65.241:2060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/.cache.php"] [unique_id "aryzDdFcyhWr7HDzNGmA4QAAAm4"]
[Wed Sep 30 00:58:21.781403 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.781664 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.788581 2026] [security2:error] [pid 187269:tid 187468] [client 13.70.1.101:15726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/sitemap.php"] [unique_id "aryzDdFcyhWr7HDzNGmA6AAAAlI"]
[Wed Sep 30 00:58:21.791959 2026] [security2:error] [pid 187269:tid 187515] [client 179.56.122.155:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzDdFcyhWr7HDzNGmA6QAAAoE"]
[Wed Sep 30 00:58:21.874442 2026] [access_compat:error] [pid 187269:tid 187467] [client 47.82.11.32:37582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:21.874695 2026] [access_compat:error] [pid 187269:tid 187467] [client 47.82.11.32:37582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:21.875920 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.876215 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.965173 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:21.965434 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:21.967778 2026] [security2:error] [pid 187269:tid 187438] [client 20.219.2.60:18936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/aa.php"] [unique_id "aryzDdFcyhWr7HDzNGmA8AAAAjQ"]
[Wed Sep 30 00:58:21.974588 2026] [security2:error] [pid 187269:tid 187506] [client 49.36.41.37:52276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmA8QAAAng"]
[Wed Sep 30 00:58:21.974670 2026] [security2:error] [pid 187269:tid 187506] [client 49.36.41.37:52276] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzDdFcyhWr7HDzNGmA8QAAAng"]
[Wed Sep 30 00:58:22.002767 2026] [security2:error] [pid 187269:tid 187445] [client 152.59.169.65:55715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzDtFcyhWr7HDzNGmA8wAAAjs"]
[Wed Sep 30 00:58:22.002950 2026] [security2:error] [pid 187269:tid 187445] [client 152.59.169.65:55715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzDtFcyhWr7HDzNGmA8wAAAjs"]
[Wed Sep 30 00:58:22.055541 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.055800 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.104265 2026] [security2:error] [pid 186850:tid 187037] [client 150.107.232.159:36228] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzDk5Phls--iYlcKgJEgAAAUM"]
[Wed Sep 30 00:58:22.105018 2026] [security2:error] [pid 186850:tid 187037] [client 150.107.232.159:36228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzDk5Phls--iYlcKgJEgAAAUM"]
[Wed Sep 30 00:58:22.105440 2026] [security2:error] [pid 186850:tid 187066] [client 45.156.128.168:17056] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wp-central/readme.txt"] [unique_id "aryzDk5Phls--iYlcKgJEwAAAWA"]
[Wed Sep 30 00:58:22.113338 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:22.113595 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:22.146586 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.146845 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.197847 2026] [security2:error] [pid 187269:tid 187443] [client 13.70.1.101:15942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/xetmolxr.php"] [unique_id "aryzDtFcyhWr7HDzNGmA_AAAAjk"]
[Wed Sep 30 00:58:22.238363 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.238615 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.324864 2026] [security2:error] [pid 187269:tid 187432] [client 84.17.60.236:41658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzDtFcyhWr7HDzNGmBAQAAAi4"]
[Wed Sep 30 00:58:22.329765 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.330044 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.336591 2026] [security2:error] [pid 187269:tid 187459] [client 45.138.12.32:3072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.uzi.cxi.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzDtFcyhWr7HDzNGmBAgAAAkk"]
[Wed Sep 30 00:58:22.418725 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.418989 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.433093 2026] [security2:error] [pid 187269:tid 187410] [client 223.181.30.165:26269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzDtFcyhWr7HDzNGmBBwAAAhg"]
[Wed Sep 30 00:58:22.433197 2026] [security2:error] [pid 187269:tid 187410] [client 223.181.30.165:26269] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzDtFcyhWr7HDzNGmBBwAAAhg"]
[Wed Sep 30 00:58:22.494315 2026] [security2:error] [pid 187269:tid 187335] [remote 47.128.114.132:20828] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/6576/economy-cpec-project-to-trigger-massive-foreign-investment-in-country-ahsan"] [unique_id "aryzDtFcyhWr7HDzNGmBCgACZjo"]
[Wed Sep 30 00:58:22.509815 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.510087 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.579989 2026] [security2:error] [pid 187269:tid 187526] [client 13.70.1.101:15730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/mini.php"] [unique_id "aryzDtFcyhWr7HDzNGmBEQAAAos"]
[Wed Sep 30 00:58:22.601934 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.602204 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.611581 2026] [security2:error] [pid 187269:tid 187534] [client 85.89.204.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzDtFcyhWr7HDzNGmBEwAAApM"]
[Wed Sep 30 00:58:22.614632 2026] [security2:error] [pid 186850:tid 187034] [client 103.172.210.103:52277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzDk5Phls--iYlcKgJGQAAAUA"]
[Wed Sep 30 00:58:22.614730 2026] [security2:error] [pid 186850:tid 187034] [client 103.172.210.103:52277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzDk5Phls--iYlcKgJGQAAAUA"]
[Wed Sep 30 00:58:22.653943 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:22.654217 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:52278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:22.692847 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.693108 2026] [access_compat:error] [pid 187269:tid 187409] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.705651 2026] [security2:error] [pid 187269:tid 187414] [client 20.198.74.230:24133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/bnmtp.php"] [unique_id "aryzDtFcyhWr7HDzNGmBFwAAAhw"]
[Wed Sep 30 00:58:22.718216 2026] [security2:error] [pid 187269:tid 187496] [client 13.70.4.78:49421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/01.php"] [unique_id "aryzDtFcyhWr7HDzNGmBGAAAAm4"]
[Wed Sep 30 00:58:22.783214 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.783481 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.875706 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.876052 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.880619 2026] [security2:error] [pid 187269:tid 187486] [client 20.70.173.30:62385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/8.php"] [unique_id "aryzDtFcyhWr7HDzNGmBIgAAAmQ"]
[Wed Sep 30 00:58:22.889265 2026] [security2:error] [pid 186850:tid 186998] [client 20.28.180.172:29607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/df.php"] [unique_id "aryzDk5Phls--iYlcKgJHgAAARw"]
[Wed Sep 30 00:58:22.924476 2026] [security2:error] [pid 187269:tid 187430] [client 20.219.2.60:19356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/jk.php"] [unique_id "aryzDtFcyhWr7HDzNGmBIwAAAiw"]
[Wed Sep 30 00:58:22.932033 2026] [security2:error] [pid 187269:tid 187481] [client 20.219.19.141:23986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/groud3.php"] [unique_id "aryzDtFcyhWr7HDzNGmBJAAAAl8"]
[Wed Sep 30 00:58:22.959715 2026] [security2:error] [pid 186850:tid 187044] [client 4.196.65.241:2508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/motu.php"] [unique_id "aryzDk5Phls--iYlcKgJIAAAAUo"]
[Wed Sep 30 00:58:22.965877 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:22.966131 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:22.975042 2026] [security2:error] [pid 186850:tid 187057] [client 84.17.60.236:41660] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzDk5Phls--iYlcKgJIgAAAVc"]
[Wed Sep 30 00:58:23.020665 2026] [security2:error] [pid 186850:tid 187033] [client 13.70.1.101:15956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/zwso.php"] [unique_id "aryzD05Phls--iYlcKgJIwAAAT8"]
[Wed Sep 30 00:58:23.041147 2026] [security2:error] [pid 187269:tid 187467] [client 20.198.74.230:34833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/BDKR28WP.php"] [unique_id "aryzD9FcyhWr7HDzNGmBKQAAAlE"]
[Wed Sep 30 00:58:23.057147 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.057416 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.123042 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:23.123313 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:23.147908 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.148178 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.230601 2026] [security2:error] [pid 187269:tid 187490] [client 193.163.74.131:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzD9FcyhWr7HDzNGmBMQAAAmg"]
[Wed Sep 30 00:58:23.238041 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.238318 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.269530 2026] [security2:error] [pid 187269:tid 187452] [client 38.154.5.209:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/smart-ups/"] [unique_id "aryzD9FcyhWr7HDzNGmBNQAAAkI"]
[Wed Sep 30 00:58:23.301415 2026] [security2:error] [pid 187269:tid 187431] [client 159.223.71.139:61734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "aryzD9FcyhWr7HDzNGmBNwAAAi0"], referer: www.google.com
[Wed Sep 30 00:58:23.308568 2026] [security2:error] [pid 187269:tid 187413] [client 13.70.4.78:49842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ab.php"] [unique_id "aryzD9FcyhWr7HDzNGmBOAAAAhs"]
[Wed Sep 30 00:58:23.323264 2026] [security2:error] [pid 187269:tid 187439] [client 4.240.25.22:21518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/biufile.php"] [unique_id "aryzD9FcyhWr7HDzNGmBOgAAAjU"]
[Wed Sep 30 00:58:23.329636 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.329921 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.412210 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.30.107:10020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/cilus.php"] [unique_id "aryzD05Phls--iYlcKgJKQAAATs"]
[Wed Sep 30 00:58:23.421040 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.421308 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.446354 2026] [security2:error] [pid 187269:tid 187473] [client 13.70.1.101:15698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/tiny.php"] [unique_id "aryzD9FcyhWr7HDzNGmBQQAAAlc"]
[Wed Sep 30 00:58:23.512891 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.513306 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.603247 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.603509 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.623073 2026] [security2:error] [pid 187269:tid 187463] [client 84.17.60.236:41674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzD9FcyhWr7HDzNGmBTAAAAk0"]
[Wed Sep 30 00:58:23.652067 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:23.652535 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:23.668653 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.58:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:23.668970 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.58:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:23.691493 2026] [security2:error] [pid 187269:tid 187483] [client 13.70.4.78:59137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/xwpg.php"] [unique_id "aryzD9FcyhWr7HDzNGmBTwAAAmE"]
[Wed Sep 30 00:58:23.694215 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.694482 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.784315 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.784575 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.866628 2026] [security2:error] [pid 187269:tid 187512] [client 74.7.244.16:49186] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ghx.uus.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzD9FcyhWr7HDzNGmBXQACfl8"]
[Wed Sep 30 00:58:23.875376 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.875665 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:23.935323 2026] [security2:error] [pid 187269:tid 187359] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzD9FcyhWr7HDzNGmBYQACZFI"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D27405
[Wed Sep 30 00:58:23.935347 2026] [security2:error] [pid 187269:tid 187359] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzD9FcyhWr7HDzNGmBYQACZFI"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D27405
[Wed Sep 30 00:58:23.950150 2026] [security2:error] [pid 187269:tid 187468] [client 20.219.2.60:18868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/gcqoa.php"] [unique_id "aryzD9FcyhWr7HDzNGmBYwAAAlI"]
[Wed Sep 30 00:58:23.971275 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:23.971709 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.011049 2026] [security2:error] [pid 186850:tid 186982] [client 13.70.1.101:15998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/simple.php"] [unique_id "aryzEE5Phls--iYlcKgJOQAAAQw"]
[Wed Sep 30 00:58:24.056238 2026] [security2:error] [pid 187269:tid 187510] [client 13.70.4.78:49420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/flamini.php"] [unique_id "aryzENFcyhWr7HDzNGmBbAAAAnw"]
[Wed Sep 30 00:58:24.060228 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.060494 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:37419] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.069376 2026] [security2:error] [pid 187269:tid 187426] [client 152.59.165.7:53515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBbgAAAig"]
[Wed Sep 30 00:58:24.069485 2026] [security2:error] [pid 187269:tid 187426] [client 152.59.165.7:53515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBbgAAAig"]
[Wed Sep 30 00:58:24.075263 2026] [security2:error] [pid 186850:tid 187073] [client 4.196.65.241:19491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cae2.3.php"] [unique_id "aryzEE5Phls--iYlcKgJOgAAAWc"]
[Wed Sep 30 00:58:24.120235 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:24.120499 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:24.136725 2026] [security2:error] [pid 187269:tid 187532] [client 202.179.95.79:58441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBbwAAApE"]
[Wed Sep 30 00:58:24.137067 2026] [security2:error] [pid 187269:tid 187532] [client 202.179.95.79:58441] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBbwAAApE"]
[Wed Sep 30 00:58:24.201891 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.202204 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.270788 2026] [security2:error] [pid 186850:tid 187026] [client 84.17.60.236:41688] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzEE5Phls--iYlcKgJPgAAATg"]
[Wed Sep 30 00:58:24.294327 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.294583 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.329822 2026] [security2:error] [pid 187269:tid 187445] [client 45.156.62.96:50477] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBeAAAAjs"]
[Wed Sep 30 00:58:24.330036 2026] [security2:error] [pid 187269:tid 187445] [client 45.156.62.96:50477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBeAAAAjs"]
[Wed Sep 30 00:58:24.336395 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.336829 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.424983 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.425241 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.477159 2026] [security2:error] [pid 187269:tid 187418] [client 216.73.216.46:37419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzENFcyhWr7HDzNGmBgAAAAiA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTEvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY3
[Wed Sep 30 00:58:24.513189 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.513465 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.591345 2026] [security2:error] [pid 187269:tid 187463] [client 4.240.25.22:21895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/simple.php"] [unique_id "aryzENFcyhWr7HDzNGmBhgAAAk0"]
[Wed Sep 30 00:58:24.605157 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:24.605438 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:24.605761 2026] [security2:error] [pid 186850:tid 187077] [client 20.70.173.30:2471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/sxxb.php"] [unique_id "aryzEE5Phls--iYlcKgJRAAAAWs"]
[Wed Sep 30 00:58:24.607961 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.608411 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.676104 2026] [security2:error] [pid 187269:tid 187534] [client 45.156.128.169:17224] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/iwp-client/readme.txt"] [unique_id "aryzENFcyhWr7HDzNGmBigAAApM"]
[Wed Sep 30 00:58:24.696096 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.696363 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.769634 2026] [security2:error] [pid 186850:tid 187092] [client 20.198.74.230:51416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/mac.php"] [unique_id "aryzEE5Phls--iYlcKgJSQAAAXo"]
[Wed Sep 30 00:58:24.785560 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:49463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/themes.php"] [unique_id "aryzENFcyhWr7HDzNGmBlAAAAjM"]
[Wed Sep 30 00:58:24.788283 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.788559 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.877169 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.877435 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:24.904546 2026] [security2:error] [pid 187269:tid 187500] [client 203.122.45.246:61539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBmAAAAnI"]
[Wed Sep 30 00:58:24.904660 2026] [security2:error] [pid 187269:tid 187500] [client 203.122.45.246:61539] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzENFcyhWr7HDzNGmBmAAAAnI"]
[Wed Sep 30 00:58:24.910341 2026] [security2:error] [pid 186850:tid 187093] [client 13.70.1.101:15697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/buy.php"] [unique_id "aryzEE5Phls--iYlcKgJSwAAAXs"]
[Wed Sep 30 00:58:24.910430 2026] [ssl:error] [pid 187269:tid 187413] [client 216.25.124.25:39452] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname webdisk.erg.qmh.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:58:24.917741 2026] [security2:error] [pid 186850:tid 186983] [client 20.28.180.172:29979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/or.php"] [unique_id "aryzEE5Phls--iYlcKgJTAAAAQ0"]
[Wed Sep 30 00:58:24.927022 2026] [security2:error] [pid 187269:tid 187504] [client 4.240.25.22:43812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aryzENFcyhWr7HDzNGmBmgAAAnY"]
[Wed Sep 30 00:58:24.929478 2026] [security2:error] [pid 187269:tid 187433] [client 84.17.60.236:41704] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pikarthouse.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzENFcyhWr7HDzNGmBmwAAAi8"]
[Wed Sep 30 00:58:24.954404 2026] [security2:error] [pid 186850:tid 187035] [client 189.37.74.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzEE5Phls--iYlcKgJTQAAAUE"]
[Wed Sep 30 00:58:24.967946 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:24.968248 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.025422 2026] [security2:error] [pid 187269:tid 187408] [client 45.138.12.32:31746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vci.ffz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzEdFcyhWr7HDzNGmBoAAAAhY"]
[Wed Sep 30 00:58:25.059164 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.059430 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.102986 2026] [security2:error] [pid 187269:tid 187532] [client 45.189.57.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzEdFcyhWr7HDzNGmBpwAAApE"]
[Wed Sep 30 00:58:25.150595 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.150966 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.162378 2026] [security2:error] [pid 186850:tid 186955] [remote 47.128.33.90:58364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "central-fuerth.de"] [uri "/"] [unique_id "aryzEU5Phls--iYlcKgJVQABCmg"]
[Wed Sep 30 00:58:25.235329 2026] [security2:error] [pid 186850:tid 187084] [client 20.70.173.30:25361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/b8.php"] [unique_id "aryzEU5Phls--iYlcKgJVgAAAXI"]
[Wed Sep 30 00:58:25.242190 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.242443 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.261539 2026] [security2:error] [pid 187269:tid 187461] [client 13.70.1.101:56260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ioxi-o.php"] [unique_id "aryzEdFcyhWr7HDzNGmBrwAAAks"]
[Wed Sep 30 00:58:25.263372 2026] [security2:error] [pid 187269:tid 187440] [client 13.70.4.78:49807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/0.php"] [unique_id "aryzEdFcyhWr7HDzNGmBsAAAAjY"]
[Wed Sep 30 00:58:25.277647 2026] [security2:error] [pid 187269:tid 187485] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzEdFcyhWr7HDzNGmBsQAAAmM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:25.332191 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:25.332637 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:25.333803 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.334094 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.365344 2026] [security2:error] [pid 187269:tid 187456] [client 20.70.173.30:16318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/samll.php"] [unique_id "aryzEdFcyhWr7HDzNGmBtwAAAkY"]
[Wed Sep 30 00:58:25.425100 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.425378 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.425957 2026] [security2:error] [pid 187269:tid 187436] [client 72.255.10.32:65051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzEdFcyhWr7HDzNGmBuQAAAjI"]
[Wed Sep 30 00:58:25.426066 2026] [security2:error] [pid 187269:tid 187436] [client 72.255.10.32:65051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzEdFcyhWr7HDzNGmBuQAAAjI"]
[Wed Sep 30 00:58:25.516670 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.517085 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.607068 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.607333 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.619550 2026] [security2:error] [pid 186850:tid 186991] [client 13.70.4.78:59150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/opsh.php"] [unique_id "aryzEU5Phls--iYlcKgJXgAAARU"]
[Wed Sep 30 00:58:25.694018 2026] [security2:error] [pid 186850:tid 187019] [client 43.227.131.37:51108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzEU5Phls--iYlcKgJXwAAATE"]
[Wed Sep 30 00:58:25.694139 2026] [security2:error] [pid 186850:tid 187019] [client 43.227.131.37:51108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzEU5Phls--iYlcKgJXwAAATE"]
[Wed Sep 30 00:58:25.703162 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.703601 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.708948 2026] [security2:error] [pid 187269:tid 187454] [client 20.198.74.230:41390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wmore1.php"] [unique_id "aryzEdFcyhWr7HDzNGmBzgAAAkQ"]
[Wed Sep 30 00:58:25.789364 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.789618 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.797395 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:25.797647 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 00:58:25.830251 2026] [security2:error] [pid 187269:tid 187408] [client 13.70.1.101:15985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ans.php"] [unique_id "aryzEdFcyhWr7HDzNGmB1QAAAhY"]
[Wed Sep 30 00:58:25.869317 2026] [access_compat:error] [pid 186850:tid 187030] [client 47.82.11.32:43906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:25.869572 2026] [access_compat:error] [pid 186850:tid 187030] [client 47.82.11.32:43906] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:25.878714 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.878974 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:25.919379 2026] [security2:error] [pid 186850:tid 187031] [client 20.219.19.141:23975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/gaxby.php"] [unique_id "aryzEU5Phls--iYlcKgJZAAAAT0"]
[Wed Sep 30 00:58:25.971089 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:25.971357 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.012975 2026] [security2:error] [pid 187269:tid 187450] [client 4.196.65.241:27301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wo.php"] [unique_id "aryzEtFcyhWr7HDzNGmB4AAAAkA"]
[Wed Sep 30 00:58:26.062056 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.062322 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:55341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.088589 2026] [access_compat:error] [pid 187269:tid 187491] [client 47.79.13.172:39362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:26.088860 2026] [access_compat:error] [pid 187269:tid 187491] [client 47.79.13.172:39362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:26.152150 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.152434 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.185654 2026] [security2:error] [pid 187269:tid 187458] [client 13.70.1.101:15938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/gf.php"] [unique_id "aryzEtFcyhWr7HDzNGmB8QAAAkg"]
[Wed Sep 30 00:58:26.188035 2026] [security2:error] [pid 187269:tid 187438] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzEtFcyhWr7HDzNGmB8AAAAjQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:26.198516 2026] [security2:error] [pid 187269:tid 187361] [remote 57.141.14.95:51102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmB7QACY1Q"]
[Wed Sep 30 00:58:26.209541 2026] [security2:error] [pid 187269:tid 187439] [client 13.70.4.78:59144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/media.php"] [unique_id "aryzEtFcyhWr7HDzNGmB8gAAAjU"]
[Wed Sep 30 00:58:26.229607 2026] [security2:error] [pid 187269:tid 187451] [client 49.205.105.16:14274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmB9AAAAkE"]
[Wed Sep 30 00:58:26.229697 2026] [security2:error] [pid 187269:tid 187451] [client 49.205.105.16:14274] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmB9AAAAkE"]
[Wed Sep 30 00:58:26.240086 2026] [security2:error] [pid 187269:tid 187478] [client 20.219.2.60:18825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/plugin-editor.php"] [unique_id "aryzEtFcyhWr7HDzNGmB9gAAAlw"]
[Wed Sep 30 00:58:26.242858 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.243113 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.254188 2026] [security2:error] [pid 187269:tid 187442] [client 4.240.25.22:18810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/or.php"] [unique_id "aryzEtFcyhWr7HDzNGmB-QAAAjg"]
[Wed Sep 30 00:58:26.295331 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:26.295585 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:26.334429 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.334694 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.353033 2026] [security2:error] [pid 187269:tid 187462] [client 4.240.25.22:63762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/yawa.php"] [unique_id "aryzEtFcyhWr7HDzNGmB_QAAAkw"]
[Wed Sep 30 00:58:26.426621 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.426902 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.467079 2026] [security2:error] [pid 187269:tid 187517] [client 216.73.216.46:55341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzEtFcyhWr7HDzNGmCAgAAAoM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTI%3D
[Wed Sep 30 00:58:26.516793 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.517093 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.598941 2026] [security2:error] [pid 187269:tid 187417] [client 13.70.1.101:15717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/man.php"] [unique_id "aryzEtFcyhWr7HDzNGmCCgAAAh8"]
[Wed Sep 30 00:58:26.607662 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.607926 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.644676 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:59174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/images.php"] [unique_id "aryzEtFcyhWr7HDzNGmCEQAAAjM"]
[Wed Sep 30 00:58:26.698738 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.699039 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.766443 2026] [security2:error] [pid 187269:tid 187532] [client 20.194.30.107:17438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/xiugai.php"] [unique_id "aryzEtFcyhWr7HDzNGmCGQAAApE"]
[Wed Sep 30 00:58:26.793685 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.793958 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.835915 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:26.836340 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 00:58:26.882607 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.882893 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.914717 2026] [security2:error] [pid 187269:tid 187482] [client 103.159.192.142:64695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmCIgAAAmA"]
[Wed Sep 30 00:58:26.914872 2026] [security2:error] [pid 187269:tid 187482] [client 103.159.192.142:64695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmCIgAAAmA"]
[Wed Sep 30 00:58:26.925476 2026] [access_compat:error] [pid 187269:tid 187435] [client 47.79.13.53:41412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:26.925923 2026] [access_compat:error] [pid 187269:tid 187435] [client 47.79.13.53:41412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:26.928063 2026] [security2:error] [pid 187269:tid 187438] [client 20.194.30.107:25895] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-admin/css/"] [unique_id "aryzEtFcyhWr7HDzNGmCJQAAAjQ"]
[Wed Sep 30 00:58:26.975938 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:26.976381 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:26.986732 2026] [security2:error] [pid 186850:tid 187075] [client 20.70.173.30:3071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/classwithtostring.php"] [unique_id "aryzEk5Phls--iYlcKgJdwAAAWk"]
[Wed Sep 30 00:58:26.998233 2026] [security2:error] [pid 187269:tid 187487] [client 49.43.163.212:61905] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmCKAAAAmU"]
[Wed Sep 30 00:58:26.998382 2026] [security2:error] [pid 187269:tid 187487] [client 49.43.163.212:61905] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzEtFcyhWr7HDzNGmCKAAAAmU"]
[Wed Sep 30 00:58:27.020851 2026] [security2:error] [pid 186850:tid 187008] [client 13.70.1.101:15711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/dev.php"] [unique_id "aryzE05Phls--iYlcKgJegAAASY"]
[Wed Sep 30 00:58:27.048679 2026] [security2:error] [pid 187269:tid 187519] [client 13.70.4.78:49414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ops.php"] [unique_id "aryzE9FcyhWr7HDzNGmCKgAAAoU"]
[Wed Sep 30 00:58:27.065142 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.065428 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.072941 2026] [security2:error] [pid 187269:tid 187451] [client 45.156.128.169:17238] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wpschoolpress/readme.txt"] [unique_id "aryzE9FcyhWr7HDzNGmCLAAAAkE"]
[Wed Sep 30 00:58:27.075815 2026] [security2:error] [pid 187269:tid 187478] [client 20.194.30.107:25895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/c.php"] [unique_id "aryzE9FcyhWr7HDzNGmCLQAAAlw"]
[Wed Sep 30 00:58:27.140574 2026] [security2:error] [pid 187269:tid 187407] [client 151.244.25.82:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/smart-ups/"] [unique_id "aryzE9FcyhWr7HDzNGmCMgAAAhU"]
[Wed Sep 30 00:58:27.155569 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.155838 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.198732 2026] [security2:error] [pid 186850:tid 187091] [client 4.196.65.241:64185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/pudym.php"] [unique_id "aryzE05Phls--iYlcKgJfgAAAXk"]
[Wed Sep 30 00:58:27.247233 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.247546 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:48824] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.249105 2026] [security2:error] [pid 187269:tid 187425] [client 20.219.19.141:23950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/dh9u7.php"] [unique_id "aryzE9FcyhWr7HDzNGmCOgAAAic"]
[Wed Sep 30 00:58:27.317433 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:27.317792 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 00:58:27.327936 2026] [security2:error] [pid 187269:tid 187505] [client 37.218.243.186:34698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "aryzE9FcyhWr7HDzNGmCPAAAAnc"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 00:58:27.346509 2026] [security2:error] [pid 187269:tid 187474] [client 20.198.74.230:34845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wp-ainefgskk.php"] [unique_id "aryzE9FcyhWr7HDzNGmCPQAAAlg"]
[Wed Sep 30 00:58:27.465233 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.465495 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.489352 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.4.78:49809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/mac.php"] [unique_id "aryzE9FcyhWr7HDzNGmCRwAAAiI"]
[Wed Sep 30 00:58:27.512414 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.512690 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.539607 2026] [security2:error] [pid 186850:tid 186954] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzE05Phls--iYlcKgJhQABS2c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22130
[Wed Sep 30 00:58:27.539642 2026] [security2:error] [pid 186850:tid 186954] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzE05Phls--iYlcKgJhQABS2c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=590ad3023aa1e006a85f9790536d6a8e&start=15&t=22130
[Wed Sep 30 00:58:27.559067 2026] [security2:error] [pid 186850:tid 187009] [client 105.112.178.79:38318] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fda.wmq.mybluehost.me"] [uri "/.env"] [unique_id "aryzE05Phls--iYlcKgJhgAAASc"]
[Wed Sep 30 00:58:27.574285 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.574554 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.599374 2026] [security2:error] [pid 187269:tid 187533] [client 13.70.1.101:15973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ms-edit.php"] [unique_id "aryzE9FcyhWr7HDzNGmCTQAAApI"]
[Wed Sep 30 00:58:27.612088 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.612403 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.663626 2026] [security2:error] [pid 187269:tid 187421] [client 216.73.216.46:48824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzE9FcyhWr7HDzNGmCUAAAAiM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy90aGVybWFsL2Nvb2xpbmdfZGV2aWNlMTQvc3Vic3lzdGVtL2Nvb2xpbmdfZGV2aWNlMA%3D%3D
[Wed Sep 30 00:58:27.703945 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.704228 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.712204 2026] [security2:error] [pid 186850:tid 187062] [client 39.44.16.112:58565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzE05Phls--iYlcKgJiQAAAVw"]
[Wed Sep 30 00:58:27.713307 2026] [security2:error] [pid 186850:tid 187062] [client 39.44.16.112:58565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzE05Phls--iYlcKgJiQAAAVw"]
[Wed Sep 30 00:58:27.794500 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.794746 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.797678 2026] [security2:error] [pid 187269:tid 187438] [client 20.28.180.172:29451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/wmore1.php"] [unique_id "aryzE9FcyhWr7HDzNGmCWQAAAjQ"]
[Wed Sep 30 00:58:27.884565 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.884840 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.922160 2026] [security2:error] [pid 186850:tid 187085] [client 116.72.182.19:64714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzE05Phls--iYlcKgJkAAAAXM"]
[Wed Sep 30 00:58:27.922258 2026] [security2:error] [pid 186850:tid 187085] [client 116.72.182.19:64714] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzE05Phls--iYlcKgJkAAAAXM"]
[Wed Sep 30 00:58:27.940005 2026] [security2:error] [pid 187269:tid 187496] [client 13.70.1.101:15689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/txets.php"] [unique_id "aryzE9FcyhWr7HDzNGmCXQAAAm4"]
[Wed Sep 30 00:58:27.948217 2026] [security2:error] [pid 187269:tid 187487] [client 217.154.178.10:54702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.178.154.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.weblabspanama.com"] [uri "/wp-login.php"] [unique_id "aryzE9FcyhWr7HDzNGmCXgAAAmU"]
[Wed Sep 30 00:58:27.977495 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:27.977767 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:27.990353 2026] [security2:error] [pid 187269:tid 187409] [client 20.219.2.60:18894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/plugin-install.php"] [unique_id "aryzE9FcyhWr7HDzNGmCYgAAAhc"]
[Wed Sep 30 00:58:28.064322 2026] [security2:error] [pid 186850:tid 186984] [client 13.70.4.78:49827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/pass4.php"] [unique_id "aryzFE5Phls--iYlcKgJmQAAAQ4"]
[Wed Sep 30 00:58:28.066022 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.066278 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.124257 2026] [security2:error] [pid 187269:tid 187407] [client 4.196.65.241:2511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cilus.php"] [unique_id "aryzFNFcyhWr7HDzNGmCagAAAhU"]
[Wed Sep 30 00:58:28.151068 2026] [security2:error] [pid 187269:tid 187534] [client 20.219.19.141:46497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/yvnqcuic.php"] [unique_id "aryzFNFcyhWr7HDzNGmCbQAAApM"]
[Wed Sep 30 00:58:28.162740 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.163169 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.249042 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.249309 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.336420 2026] [security2:error] [pid 186850:tid 187000] [client 13.70.1.101:15948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/hao.php"] [unique_id "aryzFE5Phls--iYlcKgJoAAAAR4"]
[Wed Sep 30 00:58:28.341165 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.341450 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.398133 2026] [security2:error] [pid 187269:tid 187448] [client 13.70.4.78:49806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/drttewyh.php"] [unique_id "aryzFNFcyhWr7HDzNGmCdwAAAj4"]
[Wed Sep 30 00:58:28.409434 2026] [security2:error] [pid 187269:tid 187502] [client 74.7.242.1:59750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzFNFcyhWr7HDzNGmCeAAAAnQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:58:28.434707 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.434969 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.482600 2026] [security2:error] [pid 187269:tid 187455] [client 213.204.198.126:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/smart-ups/"] [unique_id "aryzFNFcyhWr7HDzNGmCewAAAkU"]
[Wed Sep 30 00:58:28.523395 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.523646 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.613797 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.614092 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.627908 2026] [security2:error] [pid 187269:tid 187414] [client 37.218.243.186:57784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "aryzFNFcyhWr7HDzNGmCgwAAAhw"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 00:58:28.632535 2026] [security2:error] [pid 186850:tid 187057] [client 151.245.33.239:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryzFE5Phls--iYlcKgJqwAAAVc"]
[Wed Sep 30 00:58:28.667299 2026] [security2:error] [pid 186850:tid 187090] [client 20.198.74.230:41357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/ab.php"] [unique_id "aryzFE5Phls--iYlcKgJrAAAAXg"]
[Wed Sep 30 00:58:28.704967 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.705247 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.791985 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:28.792248 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:28.798762 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.799050 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:15589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.843427 2026] [security2:error] [pid 186850:tid 187080] [client 13.70.4.78:49823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/sh.php"] [unique_id "aryzFE5Phls--iYlcKgJtAAAAW4"]
[Wed Sep 30 00:58:28.848492 2026] [security2:error] [pid 186850:tid 186986] [client 20.70.173.30:18504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/ohct.php"] [unique_id "aryzFE5Phls--iYlcKgJtQAAARA"]
[Wed Sep 30 00:58:28.858916 2026] [security2:error] [pid 187269:tid 187491] [client 4.240.25.22:21549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/sym.php"] [unique_id "aryzFNFcyhWr7HDzNGmCjQAAAmk"]
[Wed Sep 30 00:58:28.863185 2026] [security2:error] [pid 187269:tid 187525] [client 20.70.173.30:24901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/amax.php"] [unique_id "aryzFNFcyhWr7HDzNGmCjgAAAoo"]
[Wed Sep 30 00:58:28.890049 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.890348 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.908933 2026] [security2:error] [pid 187269:tid 187467] [client 45.138.12.40:54104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jaidgear.com"] [uri "/wp-links-opml.php"] [unique_id "aryzFNFcyhWr7HDzNGmCkAAAAlE"]
[Wed Sep 30 00:58:28.938059 2026] [security2:error] [pid 187269:tid 187429] [client 20.194.30.107:10023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzFNFcyhWr7HDzNGmClAAAAis"]
[Wed Sep 30 00:58:28.952558 2026] [security2:error] [pid 186850:tid 187054] [client 223.235.102.107:4180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzFE5Phls--iYlcKgJtgAAAVQ"]
[Wed Sep 30 00:58:28.952669 2026] [security2:error] [pid 186850:tid 187054] [client 223.235.102.107:4180] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzFE5Phls--iYlcKgJtgAAAVQ"]
[Wed Sep 30 00:58:28.981131 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:28.981406 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:28.991770 2026] [security2:error] [pid 187269:tid 187476] [client 170.247.206.136:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "aryzFNFcyhWr7HDzNGmCmQAAAlo"]
[Wed Sep 30 00:58:29.030864 2026] [security2:error] [pid 186850:tid 187071] [client 13.70.1.101:15986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/33.php"] [unique_id "aryzFU5Phls--iYlcKgJugAAAWU"]
[Wed Sep 30 00:58:29.066147 2026] [security2:error] [pid 187269:tid 187520] [client 20.194.30.107:24841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pempaleh.com"] [uri "/cabs.php"] [unique_id "aryzFdFcyhWr7HDzNGmCnQAAAoY"]
[Wed Sep 30 00:58:29.071533 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.071781 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.138718 2026] [security2:error] [pid 186850:tid 187103] [client 216.73.216.46:15589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzFU5Phls--iYlcKgJvgAAAYU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1Mg%3D%3D
[Wed Sep 30 00:58:29.163310 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.163720 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.230793 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:29.231072 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:29.251301 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.251553 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.253039 2026] [security2:error] [pid 187269:tid 187425] [client 13.70.4.78:49448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/groud1.php"] [unique_id "aryzFdFcyhWr7HDzNGmCqgAAAic"]
[Wed Sep 30 00:58:29.343690 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.343981 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.371861 2026] [security2:error] [pid 187269:tid 187480] [client 223.181.60.167:24972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzFdFcyhWr7HDzNGmCrgAAAl4"]
[Wed Sep 30 00:58:29.372139 2026] [security2:error] [pid 187269:tid 187480] [client 223.181.60.167:24972] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzFdFcyhWr7HDzNGmCrgAAAl4"]
[Wed Sep 30 00:58:29.387929 2026] [security2:error] [pid 186850:tid 186905] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFU5Phls--iYlcKgJwwABXjY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=240&t=5642
[Wed Sep 30 00:58:29.387957 2026] [security2:error] [pid 186850:tid 186905] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFU5Phls--iYlcKgJwwABXjY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=240&t=5642
[Wed Sep 30 00:58:29.388896 2026] [security2:error] [pid 186850:tid 187026] [client 45.156.128.168:31526] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wordpress-database-reset/readme.txt"] [unique_id "aryzFU5Phls--iYlcKgJxAAAATg"]
[Wed Sep 30 00:58:29.389914 2026] [access_compat:error] [pid 187269:tid 187529] [client 47.79.13.37:48410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:29.390200 2026] [access_compat:error] [pid 187269:tid 187529] [client 47.79.13.37:48410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:29.433581 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.433860 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.467462 2026] [security2:error] [pid 187269:tid 187533] [client 116.197.133.25:62117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzFdFcyhWr7HDzNGmCuAAAApI"]
[Wed Sep 30 00:58:29.467585 2026] [security2:error] [pid 187269:tid 187533] [client 116.197.133.25:62117] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzFdFcyhWr7HDzNGmCuAAAApI"]
[Wed Sep 30 00:58:29.527223 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.527494 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.574937 2026] [security2:error] [pid 186850:tid 187003] [client 13.70.4.78:49836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/bro.php"] [unique_id "aryzFU5Phls--iYlcKgJxQAAASE"]
[Wed Sep 30 00:58:29.575768 2026] [security2:error] [pid 187269:tid 187423] [client 13.70.1.101:56289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/adminner.php"] [unique_id "aryzFdFcyhWr7HDzNGmCugAAAiU"]
[Wed Sep 30 00:58:29.618128 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.618399 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.709999 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.710290 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.726100 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:29.726360 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:29.781489 2026] [core:error] [pid 187269:tid 187473] [client 45.3.39.204:15611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:29.781508 2026] [core:error] [pid 187269:tid 187473] [client 45.3.39.204:15611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:29.801192 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.801441 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.820701 2026] [security2:error] [pid 186850:tid 186930] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFU5Phls--iYlcKgJzQABSE8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b178593922fc0d31b62b64687b746bb6&start=90&t=6362
[Wed Sep 30 00:58:29.820723 2026] [security2:error] [pid 186850:tid 186930] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFU5Phls--iYlcKgJzQABSE8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b178593922fc0d31b62b64687b746bb6&start=90&t=6362
[Wed Sep 30 00:58:29.889094 2026] [security2:error] [pid 187269:tid 187443] [client 20.219.2.60:19412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/profile.php"] [unique_id "aryzFdFcyhWr7HDzNGmCzAAAAjk"]
[Wed Sep 30 00:58:29.892960 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.893229 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:29.902045 2026] [security2:error] [pid 187269:tid 187435] [client 4.240.25.22:43804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/mac.php"] [unique_id "aryzFdFcyhWr7HDzNGmCzQAAAjE"]
[Wed Sep 30 00:58:29.903620 2026] [security2:error] [pid 187269:tid 187498] [client 105.112.178.79:38320] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fdb.png.mybluehost.me"] [uri "/.env"] [unique_id "aryzFdFcyhWr7HDzNGmCzgAAAnA"]
[Wed Sep 30 00:58:29.947879 2026] [security2:error] [pid 187269:tid 187485] [client 13.70.1.101:15742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/thoms.php"] [unique_id "aryzFdFcyhWr7HDzNGmCzwAAAmM"]
[Wed Sep 30 00:58:29.953270 2026] [security2:error] [pid 187269:tid 187439] [client 13.70.4.78:49801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ac83.php"] [unique_id "aryzFdFcyhWr7HDzNGmC0AAAAjU"]
[Wed Sep 30 00:58:29.989827 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:29.990271 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.074703 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.074971 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.079771 2026] [security2:error] [pid 187269:tid 187431] [client 173.254.29.157:46314] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "aryzFtFcyhWr7HDzNGmC2AAAAi0"]
[Wed Sep 30 00:58:30.087941 2026] [security2:error] [pid 187269:tid 187320] [remote 41.193.224.64:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.224.193.41.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chizlaw.com"] [uri "/xmlrpc.php"] [unique_id "aryzFtFcyhWr7HDzNGmC1gACTis"]
[Wed Sep 30 00:58:30.088082 2026] [security2:error] [pid 187269:tid 187464] [client 41.193.224.64:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "chizlaw.com"] [uri "/xmlrpc.php"] [unique_id "aryzFtFcyhWr7HDzNGmC1gACTis"]
[Wed Sep 30 00:58:30.165828 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.166092 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.228066 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:30.228357 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:30.239469 2026] [security2:error] [pid 186850:tid 187053] [client 177.74.237.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryzFk5Phls--iYlcKgJ0QAAAVM"]
[Wed Sep 30 00:58:30.249958 2026] [security2:error] [pid 186850:tid 186983] [client 4.196.65.241:2552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/myglu.php"] [unique_id "aryzFk5Phls--iYlcKgJ0gAAAQ0"]
[Wed Sep 30 00:58:30.258632 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.259029 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.303937 2026] [security2:error] [pid 186850:tid 187016] [client 13.70.4.78:59157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/class-wp-http-client.php"] [unique_id "aryzFk5Phls--iYlcKgJ1AAAAS4"]
[Wed Sep 30 00:58:30.315467 2026] [security2:error] [pid 187269:tid 187291] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzFtFcyhWr7HDzNGmC4wACRg4"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D24969
[Wed Sep 30 00:58:30.317617 2026] [security2:error] [pid 187269:tid 187412] [client 114.119.137.232:43105] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "magicclubstore.magia.vegas"] [uri "/"] [unique_id "aryzFtFcyhWr7HDzNGmC5AAAAho"], referer: http://magicclubstore.magia.vegas/
[Wed Sep 30 00:58:30.347260 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.347531 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.356476 2026] [security2:error] [pid 187269:tid 187523] [client 159.223.71.139:62839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "aryzFtFcyhWr7HDzNGmC6AAAAog"], referer: www.google.com
[Wed Sep 30 00:58:30.360280 2026] [security2:error] [pid 187269:tid 187518] [client 13.70.1.101:15736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/a.php"] [unique_id "aryzFtFcyhWr7HDzNGmC6QAAAoQ"]
[Wed Sep 30 00:58:30.376322 2026] [security2:error] [pid 187269:tid 187434] [client 4.196.65.241:19513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ccc.php"] [unique_id "aryzFtFcyhWr7HDzNGmC6wAAAjA"]
[Wed Sep 30 00:58:30.424571 2026] [access_compat:error] [pid 187269:tid 187415] [client 47.79.13.158:50206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:30.424845 2026] [access_compat:error] [pid 187269:tid 187415] [client 47.79.13.158:50206] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:30.443305 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.443560 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.451252 2026] [autoindex:error] [pid 186850:tid 187010] [client 212.156.70.154:28985] AH01276: Cannot serve directory /home4/pfgxnjmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:30.580495 2026] [security2:error] [pid 186850:tid 186862] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFk5Phls--iYlcKgJ2gABEQs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=60&t=19848
[Wed Sep 30 00:58:30.580526 2026] [security2:error] [pid 186850:tid 186862] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzFk5Phls--iYlcKgJ2gABEQs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=60&t=19848
[Wed Sep 30 00:58:30.642818 2026] [security2:error] [pid 186850:tid 186989] [client 20.219.19.141:23995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/koiy.php"] [unique_id "aryzFk5Phls--iYlcKgJ2wAAARM"]
[Wed Sep 30 00:58:30.677326 2026] [security2:error] [pid 186850:tid 187020] [client 4.240.25.22:21530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/mh.php"] [unique_id "aryzFk5Phls--iYlcKgJ4QAAATI"]
[Wed Sep 30 00:58:30.677983 2026] [security2:error] [pid 187269:tid 187414] [client 13.70.4.78:49435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/zoo2.php"] [unique_id "aryzFtFcyhWr7HDzNGmC8wAAAhw"]
[Wed Sep 30 00:58:30.716052 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.716337 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.717402 2026] [security2:error] [pid 187269:tid 187507] [client 155.190.6.18:57490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzFtFcyhWr7HDzNGmC9gAAAnk"]
[Wed Sep 30 00:58:30.748649 2026] [security2:error] [pid 186850:tid 187068] [client 13.70.1.101:56261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/b8.php"] [unique_id "aryzFk5Phls--iYlcKgJ5AAAAWI"]
[Wed Sep 30 00:58:30.789909 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:30.790168 2026] [access_compat:error] [pid 186850:tid 186988] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:30.804579 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.804839 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.805833 2026] [security2:error] [pid 187269:tid 187450] [client 159.223.71.139:50504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "aryzFtFcyhWr7HDzNGmC_QAAAkA"], referer: www.google.com
[Wed Sep 30 00:58:30.903975 2026] [security2:error] [pid 187269:tid 187491] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzFtFcyhWr7HDzNGmDBAAAAmk"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:30.963233 2026] [security2:error] [pid 187269:tid 187481] [client 20.198.74.230:23934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/mssrt.php"] [unique_id "aryzFtFcyhWr7HDzNGmDBgAAAl8"]
[Wed Sep 30 00:58:30.989691 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:30.990114 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:30.998832 2026] [security2:error] [pid 187269:tid 187507] [client 155.190.6.18:57490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzFtFcyhWr7HDzNGmC9gAAAnk"]
[Wed Sep 30 00:58:31.056929 2026] [security2:error] [pid 187269:tid 187435] [client 13.70.4.78:49793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/zoo1.php"] [unique_id "aryzF9FcyhWr7HDzNGmDCQAAAjE"]
[Wed Sep 30 00:58:31.077868 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.078128 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.095881 2026] [security2:error] [pid 187269:tid 187423] [client 139.135.34.150:20832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.34.135.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDDQAAAiU"]
[Wed Sep 30 00:58:31.095893 2026] [security2:error] [pid 187269:tid 187494] [client 173.254.29.157:46336] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzF9FcyhWr7HDzNGmDDAAAAmw"]
[Wed Sep 30 00:58:31.096272 2026] [security2:error] [pid 187269:tid 187423] [client 139.135.34.150:20832] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "agribiolink.com"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDDQAAAiU"]
[Wed Sep 30 00:58:31.099801 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.100169 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.102533 2026] [security2:error] [pid 187269:tid 187433] [client 13.70.1.101:16144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/sid.php"] [unique_id "aryzF9FcyhWr7HDzNGmDDgAAAi8"]
[Wed Sep 30 00:58:31.112279 2026] [security2:error] [pid 187269:tid 187418] [client 173.254.29.157:46352] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzF9FcyhWr7HDzNGmDEAAAAiA"]
[Wed Sep 30 00:58:31.125500 2026] [security2:error] [pid 187269:tid 187501] [client 20.194.30.107:10160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/reviall.php"] [unique_id "aryzF9FcyhWr7HDzNGmDEQAAAnM"]
[Wed Sep 30 00:58:31.129774 2026] [security2:error] [pid 187269:tid 187440] [client 173.254.29.157:46354] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzF9FcyhWr7HDzNGmDEwAAAjY"]
[Wed Sep 30 00:58:31.144859 2026] [security2:error] [pid 187269:tid 187431] [client 173.254.29.157:46358] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzF9FcyhWr7HDzNGmDFAAAAi0"]
[Wed Sep 30 00:58:31.169988 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.170278 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.172003 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.172263 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.227195 2026] [access_compat:error] [pid 187269:tid 187443] [client 47.79.13.1:59806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.227460 2026] [access_compat:error] [pid 187269:tid 187443] [client 47.79.13.1:59806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.228943 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.229208 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.259717 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.260002 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.269610 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:31.269886 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:31.292153 2026] [security2:error] [pid 186850:tid 187083] [client 20.198.74.230:34821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/dairg.php"] [unique_id "aryzF05Phls--iYlcKgJ7gAAAXE"]
[Wed Sep 30 00:58:31.312798 2026] [security2:error] [pid 187269:tid 187458] [client 168.107.70.193:50467] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "faa.yqe.mybluehost.me"] [uri "/"] [unique_id "aryzF9FcyhWr7HDzNGmDIgAAAkg"]
[Wed Sep 30 00:58:31.322300 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODE%3D
[Wed Sep 30 00:58:31.322568 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODE%3D
[Wed Sep 30 00:58:31.350796 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.351063 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.442368 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.442698 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.445765 2026] [security2:error] [pid 187269:tid 187509] [client 4.196.65.241:27324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ot.php"] [unique_id "aryzF9FcyhWr7HDzNGmDJwAAAns"]
[Wed Sep 30 00:58:31.446094 2026] [security2:error] [pid 187269:tid 187415] [client 45.156.128.168:31542] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/fancy-product-designer/readme.txt"] [unique_id "aryzF9FcyhWr7HDzNGmDKAAAAh0"]
[Wed Sep 30 00:58:31.513188 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.1.101:16151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/bro.php"] [unique_id "aryzF9FcyhWr7HDzNGmDKQAAAmQ"]
[Wed Sep 30 00:58:31.527206 2026] [security2:error] [pid 187269:tid 187448] [client 182.69.182.151:9691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDKwAAAj4"]
[Wed Sep 30 00:58:31.527312 2026] [security2:error] [pid 187269:tid 187448] [client 182.69.182.151:9691] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDKwAAAj4"]
[Wed Sep 30 00:58:31.532434 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.532708 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.566823 2026] [security2:error] [pid 187269:tid 187498] [client 103.159.192.142:65148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDLQAAAnA"]
[Wed Sep 30 00:58:31.566969 2026] [security2:error] [pid 187269:tid 187498] [client 103.159.192.142:65148] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDLQAAAnA"]
[Wed Sep 30 00:58:31.585315 2026] [security2:error] [pid 186850:tid 187004] [client 13.70.4.78:49415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/class-ajax.php"] [unique_id "aryzF05Phls--iYlcKgJ8gAAASI"]
[Wed Sep 30 00:58:31.612562 2026] [security2:error] [pid 187269:tid 187479] [client 37.41.16.35:50453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDMgAAAl0"]
[Wed Sep 30 00:58:31.612688 2026] [security2:error] [pid 187269:tid 187479] [client 37.41.16.35:50453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzF9FcyhWr7HDzNGmDMgAAAl0"]
[Wed Sep 30 00:58:31.625527 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.625898 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.682237 2026] [security2:error] [pid 187269:tid 187429] [client 20.28.180.172:29578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/kerang.php"] [unique_id "aryzF9FcyhWr7HDzNGmDPQAAAis"]
[Wed Sep 30 00:58:31.696403 2026] [security2:error] [pid 187269:tid 187347] [remote 52.167.144.183:39412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "aryzF9FcyhWr7HDzNGmDPgACYEY"]
[Wed Sep 30 00:58:31.714432 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.714698 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.726805 2026] [access_compat:error] [pid 187269:tid 187530] [client 47.79.13.177:46974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.727255 2026] [access_compat:error] [pid 187269:tid 187530] [client 47.79.13.177:46974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.787999 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:31.788468 2026] [access_compat:error] [pid 186850:tid 187018] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:31.807960 2026] [access_compat:error] [pid 187269:tid 187411] [client 47.79.13.213:56588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.808236 2026] [access_compat:error] [pid 187269:tid 187411] [client 47.79.13.213:56588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:31.808375 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.808629 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.820071 2026] [security2:error] [pid 187269:tid 187501] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzF9FcyhWr7HDzNGmDTAAAAnM"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:31.872384 2026] [security2:error] [pid 187269:tid 187516] [client 114.119.153.209:64315] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "agribiolink.com"] [uri "/about-us/chris-vanezis-re-sized/"] [unique_id "aryzF9FcyhWr7HDzNGmDTgAAAoI"], referer: http://agribiolink.com/about-us/chris-vanezis-re-sized
[Wed Sep 30 00:58:31.900287 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.900533 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:31.985871 2026] [autoindex:error] [pid 187269:tid 187519] [client 130.131.227.119:7125] AH01276: Cannot serve directory /home3/teapeakn/public_html/dino/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:31.996199 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:31.996459 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.007383 2026] [security2:error] [pid 187269:tid 187466] [client 20.219.19.141:46476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wordfence-waf.php"] [unique_id "aryzGNFcyhWr7HDzNGmDVQAAAlA"]
[Wed Sep 30 00:58:32.013473 2026] [security2:error] [pid 187269:tid 187463] [client 13.70.1.101:15685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/xwpg.php"] [unique_id "aryzGNFcyhWr7HDzNGmDVwAAAk0"]
[Wed Sep 30 00:58:32.076187 2026] [security2:error] [pid 187269:tid 187518] [client 13.70.4.78:49413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/gm.php"] [unique_id "aryzGNFcyhWr7HDzNGmDWgAAAoQ"]
[Wed Sep 30 00:58:32.091113 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.091432 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.118457 2026] [security2:error] [pid 187269:tid 187473] [client 103.241.204.139:54566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDZAAAAlc"]
[Wed Sep 30 00:58:32.118581 2026] [security2:error] [pid 187269:tid 187473] [client 103.241.204.139:54566] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDZAAAAlc"]
[Wed Sep 30 00:58:32.126252 2026] [security2:error] [pid 187269:tid 187474] [client 116.193.129.194:50830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.129.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "codeproblem.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDWwAAAlg"]
[Wed Sep 30 00:58:32.126379 2026] [security2:error] [pid 187269:tid 187474] [client 116.193.129.194:50830] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "codeproblem.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDWwAAAlg"]
[Wed Sep 30 00:58:32.184839 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.185288 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.185953 2026] [security2:error] [pid 186850:tid 186972] [remote 220.181.108.147:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 147.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzGE5Phls--iYlcKgJ_wABO3k"]
[Wed Sep 30 00:58:32.203323 2026] [security2:error] [pid 187269:tid 187459] [client 4.240.25.22:21896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/cycfruf.php"] [unique_id "aryzGNFcyhWr7HDzNGmDbQAAAkk"]
[Wed Sep 30 00:58:32.233873 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:32.234149 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:32.271777 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.272056 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.362718 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.363000 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.383471 2026] [security2:error] [pid 187269:tid 187445] [client 45.138.12.32:17844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vkp.zdx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzGNFcyhWr7HDzNGmDdAAAAjs"]
[Wed Sep 30 00:58:32.406847 2026] [security2:error] [pid 187269:tid 187362] [remote 220.181.108.113:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 113.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzGNFcyhWr7HDzNGmDdQACjFU"]
[Wed Sep 30 00:58:32.438135 2026] [security2:error] [pid 187269:tid 187406] [client 20.198.74.230:51394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/z60.php"] [unique_id "aryzGNFcyhWr7HDzNGmDdgAAAhQ"]
[Wed Sep 30 00:58:32.444691 2026] [security2:error] [pid 187269:tid 187534] [client 49.36.41.37:52852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDdwAAApM"]
[Wed Sep 30 00:58:32.444803 2026] [security2:error] [pid 187269:tid 187534] [client 49.36.41.37:52852] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDdwAAApM"]
[Wed Sep 30 00:58:32.448576 2026] [security2:error] [pid 187269:tid 187439] [client 13.70.4.78:49817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/class-wp-site-list.php"] [unique_id "aryzGNFcyhWr7HDzNGmDeQAAAjU"]
[Wed Sep 30 00:58:32.454275 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.454553 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.527042 2026] [security2:error] [pid 187269:tid 187444] [client 13.70.1.101:15964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/radio.php"] [unique_id "aryzGNFcyhWr7HDzNGmDfgAAAjo"]
[Wed Sep 30 00:58:32.553903 2026] [security2:error] [pid 187269:tid 187412] [client 116.193.128.26:62634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDhAAAAho"]
[Wed Sep 30 00:58:32.554025 2026] [security2:error] [pid 187269:tid 187412] [client 116.193.128.26:62634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDhAAAAho"]
[Wed Sep 30 00:58:32.561749 2026] [security2:error] [pid 187269:tid 187419] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzGNFcyhWr7HDzNGmDhQAAAiE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:32.569059 2026] [security2:error] [pid 187269:tid 187525] [client 152.59.169.65:56279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDhgAAAoo"]
[Wed Sep 30 00:58:32.569171 2026] [security2:error] [pid 187269:tid 187525] [client 152.59.169.65:56279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDhgAAAoo"]
[Wed Sep 30 00:58:32.604272 2026] [security2:error] [pid 187269:tid 187529] [client 150.107.232.159:35683] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDiQAAAo4"]
[Wed Sep 30 00:58:32.604497 2026] [security2:error] [pid 187269:tid 187529] [client 150.107.232.159:35683] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDiQAAAo4"]
[Wed Sep 30 00:58:32.704920 2026] [security2:error] [pid 186850:tid 187087] [client 45.138.12.32:17846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vjw.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzGE5Phls--iYlcKgKCwAAAXU"]
[Wed Sep 30 00:58:32.725520 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:32.725763 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:32.738201 2026] [security2:error] [pid 187269:tid 187409] [client 20.194.30.107:25902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/adminan.php"] [unique_id "aryzGNFcyhWr7HDzNGmDjQAAAhc"]
[Wed Sep 30 00:58:32.789299 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.789683 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.858309 2026] [security2:error] [pid 187269:tid 187462] [client 4.196.65.241:19464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/sm.php"] [unique_id "aryzGNFcyhWr7HDzNGmDmQAAAkw"]
[Wed Sep 30 00:58:32.861500 2026] [security2:error] [pid 187269:tid 187489] [client 13.70.4.78:59179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/asd2.php"] [unique_id "aryzGNFcyhWr7HDzNGmDmgAAAmc"]
[Wed Sep 30 00:58:32.868643 2026] [security2:error] [pid 187269:tid 187480] [client 45.138.12.40:54262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqe.ybe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzGNFcyhWr7HDzNGmDmwAAAl4"]
[Wed Sep 30 00:58:32.884165 2026] [security2:error] [pid 187269:tid 187343] [remote 74.7.227.56:34378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzGNFcyhWr7HDzNGmDnQACIkI"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=625
[Wed Sep 30 00:58:32.884248 2026] [security2:error] [pid 187269:tid 187522] [client 223.181.30.165:21983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDngAAAoc"]
[Wed Sep 30 00:58:32.884349 2026] [security2:error] [pid 187269:tid 187522] [client 223.181.30.165:21983] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDngAAAoc"]
[Wed Sep 30 00:58:32.907532 2026] [security2:error] [pid 187269:tid 187503] [client 13.70.1.101:15709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ccc.php"] [unique_id "aryzGNFcyhWr7HDzNGmDoQAAAnU"]
[Wed Sep 30 00:58:32.912856 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.913126 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:32.975665 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:32.975935 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.001148 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.001434 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.003666 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.004092 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.017943 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.018218 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.092631 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.092910 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.173224 2026] [security2:error] [pid 187269:tid 187534] [client 213.136.69.135:57612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aryzGdFcyhWr7HDzNGmDrwAAApM"], referer: binance.com
[Wed Sep 30 00:58:33.182541 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.182824 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.254890 2026] [security2:error] [pid 187269:tid 187467] [client 13.70.4.78:49846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/cdc.php"] [unique_id "aryzGdFcyhWr7HDzNGmDsQAAAlE"]
[Wed Sep 30 00:58:33.260468 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:33.260716 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:33.271899 2026] [security2:error] [pid 187269:tid 187482] [client 13.70.1.101:15953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wmore1.php"] [unique_id "aryzGdFcyhWr7HDzNGmDswAAAmA"]
[Wed Sep 30 00:58:33.273936 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.274174 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.366349 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.366642 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.374962 2026] [security2:error] [pid 187269:tid 187520] [client 20.70.173.30:25258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/dex.php"] [unique_id "aryzGdFcyhWr7HDzNGmDuAAAAoY"]
[Wed Sep 30 00:58:33.394121 2026] [security2:error] [pid 186850:tid 186855] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzGU5Phls--iYlcKgKFQABSAQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=23c398cf0d96613a9672c40f7d95699b&start=15&t=4497
[Wed Sep 30 00:58:33.394144 2026] [security2:error] [pid 186850:tid 186855] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzGU5Phls--iYlcKgKFQABSAQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=23c398cf0d96613a9672c40f7d95699b&start=15&t=4497
[Wed Sep 30 00:58:33.421922 2026] [security2:error] [pid 187269:tid 187430] [client 103.172.210.103:52568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzGdFcyhWr7HDzNGmDugAAAiw"]
[Wed Sep 30 00:58:33.422057 2026] [security2:error] [pid 187269:tid 187430] [client 103.172.210.103:52568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzGdFcyhWr7HDzNGmDugAAAiw"]
[Wed Sep 30 00:58:33.458116 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.458391 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.489417 2026] [security2:error] [pid 187269:tid 187496] [client 20.219.19.141:46519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wp5.php"] [unique_id "aryzGdFcyhWr7HDzNGmDvAAAAm4"]
[Wed Sep 30 00:58:33.548601 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.548870 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.579115 2026] [security2:error] [pid 187269:tid 187454] [client 13.70.4.78:49800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/Components.php"] [unique_id "aryzGdFcyhWr7HDzNGmDxQAAAkQ"]
[Wed Sep 30 00:58:33.640786 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.641066 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.649887 2026] [security2:error] [pid 187269:tid 187489] [client 4.240.25.22:18772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/baru.php"] [unique_id "aryzGdFcyhWr7HDzNGmDyAAAAmc"]
[Wed Sep 30 00:58:33.665398 2026] [security2:error] [pid 187269:tid 187502] [client 13.70.1.101:16170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/function.php"] [unique_id "aryzGdFcyhWr7HDzNGmDygAAAnQ"]
[Wed Sep 30 00:58:33.701053 2026] [security2:error] [pid 187269:tid 187410] [client 45.156.128.169:18572] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/bbpress/readme.txt"] [unique_id "aryzGdFcyhWr7HDzNGmDywAAAhg"]
[Wed Sep 30 00:58:33.731053 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.731494 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.738803 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:33.739209 2026] [access_compat:error] [pid 186850:tid 187091] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:33.823874 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.824144 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.890688 2026] [security2:error] [pid 187269:tid 187486] [client 4.196.65.241:2582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/bunks.php"] [unique_id "aryzGdFcyhWr7HDzNGmD0wAAAmQ"]
[Wed Sep 30 00:58:33.908259 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:49428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/admin.php/xl9.php"] [unique_id "aryzGdFcyhWr7HDzNGmD1gAAAjM"]
[Wed Sep 30 00:58:33.914986 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:33.915240 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:33.940129 2026] [security2:error] [pid 187269:tid 187483] [client 20.198.74.230:24144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/gxjybsva.php"] [unique_id "aryzGdFcyhWr7HDzNGmD1wAAAmE"]
[Wed Sep 30 00:58:33.955721 2026] [security2:error] [pid 186850:tid 187060] [client 20.219.2.60:18822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/class-t.api.php"] [unique_id "aryzGU5Phls--iYlcKgKHgAAAVo"]
[Wed Sep 30 00:58:33.987993 2026] [security2:error] [pid 186850:tid 187053] [client 13.70.1.101:15939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ab.php"] [unique_id "aryzGU5Phls--iYlcKgKIAAAAVM"]
[Wed Sep 30 00:58:34.005036 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.005310 2026] [access_compat:error] [pid 187269:tid 187455] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.057544 2026] [security2:error] [pid 187269:tid 187473] [client 4.240.25.22:21508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/gecko.php"] [unique_id "aryzGtFcyhWr7HDzNGmD2wAAAlc"]
[Wed Sep 30 00:58:34.089278 2026] [security2:error] [pid 187269:tid 187493] [client 52.58.146.230:0] ModSecurity: Warning. Matched phrase "Siteimprove" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "montgomerycountygreenfest.org"] [uri "/index.php"] [unique_id "aryzGdFcyhWr7HDzNGmDwgAAAms"]
[Wed Sep 30 00:58:34.090543 2026] [security2:error] [pid 187269:tid 187418] [client 52.58.146.230:36455] ModSecurity: Warning. Matched phrase "Siteimprove" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "montgomerycountygreenfest.org"] [uri "/entertainment/"] [unique_id "aryzGdFcyhWr7HDzNGmDvwAAAiA"]
[Wed Sep 30 00:58:34.096187 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.096456 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.106167 2026] [security2:error] [pid 187269:tid 187446] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzGtFcyhWr7HDzNGmD4QAAAjw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:34.148328 2026] [security2:error] [pid 187269:tid 187449] [client 20.28.180.172:34286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/local.php"] [unique_id "aryzGtFcyhWr7HDzNGmD5AAAAj8"]
[Wed Sep 30 00:58:34.160320 2026] [security2:error] [pid 187269:tid 187304] [remote 220.181.108.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzGtFcyhWr7HDzNGmD4wACSRs"]
[Wed Sep 30 00:58:34.186248 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.186513 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.251840 2026] [security2:error] [pid 186850:tid 187012] [client 13.70.4.78:49851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/gulu.php"] [unique_id "aryzGk5Phls--iYlcKgKJAAAASo"]
[Wed Sep 30 00:58:34.283563 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.284016 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.299660 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:34.300102 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:34.324837 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.1.101:16140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/css.php"] [unique_id "aryzGtFcyhWr7HDzNGmD-AAAAn4"]
[Wed Sep 30 00:58:34.368168 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.368437 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.414744 2026] [security2:error] [pid 187269:tid 187432] [client 20.198.74.230:34837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/imageskir.php"] [unique_id "aryzGtFcyhWr7HDzNGmD_QAAAi4"]
[Wed Sep 30 00:58:34.459434 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.459685 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.551698 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.551972 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.587643 2026] [security2:error] [pid 187269:tid 187526] [client 13.70.4.78:49792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/bala.php"] [unique_id "aryzGtFcyhWr7HDzNGmECwAAAos"]
[Wed Sep 30 00:58:34.588421 2026] [security2:error] [pid 187269:tid 187374] [remote 220.181.108.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzGtFcyhWr7HDzNGmECgACGGE"]
[Wed Sep 30 00:58:34.643079 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.643362 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.711903 2026] [security2:error] [pid 186850:tid 187096] [client 13.70.1.101:15967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzGk5Phls--iYlcKgKLQAAAX4"]
[Wed Sep 30 00:58:34.731121 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:58:34.731381 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:58:34.732953 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.733250 2026] [access_compat:error] [pid 187269:tid 187522] [client 216.73.216.46:46998] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.744092 2026] [security2:error] [pid 187269:tid 187431] [client 152.59.165.7:40769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzGtFcyhWr7HDzNGmEEgAAAi0"]
[Wed Sep 30 00:58:34.744218 2026] [security2:error] [pid 187269:tid 187431] [client 152.59.165.7:40769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzGtFcyhWr7HDzNGmEEgAAAi0"]
[Wed Sep 30 00:58:34.824952 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.825220 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.887094 2026] [security2:error] [pid 186850:tid 187079] [client 52.58.146.230:0] ModSecurity: Warning. Matched phrase "Siteimprove" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "montgomerycountygreenfest.org"] [uri "/index.php"] [unique_id "aryzGk5Phls--iYlcKgKKAAAAW0"]
[Wed Sep 30 00:58:34.888755 2026] [security2:error] [pid 187269:tid 187506] [client 52.58.146.230:57265] ModSecurity: Warning. Matched phrase "Siteimprove" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "montgomerycountygreenfest.org"] [uri "/entertainment/"] [unique_id "aryzGtFcyhWr7HDzNGmD-wAAAng"]
[Wed Sep 30 00:58:34.916592 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:34.917039 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:34.920437 2026] [security2:error] [pid 187269:tid 187458] [client 216.73.216.46:46998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzGtFcyhWr7HDzNGmEGwAAAkg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDMvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDA3
[Wed Sep 30 00:58:34.936245 2026] [security2:error] [pid 187269:tid 187488] [client 13.70.4.78:49436] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.manga.an-ime.com"] [uri "/c99.php"] [unique_id "aryzGtFcyhWr7HDzNGmEHAAAAmY"]
[Wed Sep 30 00:58:34.959456 2026] [security2:error] [pid 187269:tid 187427] [client 20.70.173.30:63637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/mac.php"] [unique_id "aryzGtFcyhWr7HDzNGmEHgAAAik"]
[Wed Sep 30 00:58:34.997564 2026] [security2:error] [pid 187269:tid 187418] [client 4.196.65.241:64156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/a65.php"] [unique_id "aryzGtFcyhWr7HDzNGmEHwAAAiA"]
[Wed Sep 30 00:58:35.010732 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.011009 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.045882 2026] [security2:error] [pid 187269:tid 187443] [client 202.179.95.79:59163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmEIgAAAjk"]
[Wed Sep 30 00:58:35.046029 2026] [security2:error] [pid 187269:tid 187443] [client 202.179.95.79:59163] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmEIgAAAjk"]
[Wed Sep 30 00:58:35.098538 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.098830 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.105726 2026] [security2:error] [pid 187269:tid 187459] [client 13.70.1.101:15962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzG9FcyhWr7HDzNGmEJgAAAkk"]
[Wed Sep 30 00:58:35.136989 2026] [security2:error] [pid 186850:tid 187034] [client 142.147.154.244:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzG05Phls--iYlcKgKNwAAAUA"]
[Wed Sep 30 00:58:35.190875 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.191133 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.193432 2026] [security2:error] [pid 187269:tid 187533] [client 188.215.233.208:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzG9FcyhWr7HDzNGmELAAAApI"]
[Wed Sep 30 00:58:35.213102 2026] [security2:error] [pid 186850:tid 187005] [client 45.156.128.168:15028] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wp-user-avatar/readme.txt"] [unique_id "aryzG05Phls--iYlcKgKOwAAASM"]
[Wed Sep 30 00:58:35.242873 2026] [security2:error] [pid 187269:tid 187415] [client 20.194.30.107:17514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/samll.php"] [unique_id "aryzG9FcyhWr7HDzNGmELQAAAh0"]
[Wed Sep 30 00:58:35.266149 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:35.266424 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:35.284398 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.284672 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.293705 2026] [security2:error] [pid 187269:tid 187419] [client 13.70.4.78:49470] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.manga.an-ime.com"] [uri "/c99.php"] [unique_id "aryzG9FcyhWr7HDzNGmELwAAAiE"]
[Wed Sep 30 00:58:35.370974 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.371239 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.430783 2026] [security2:error] [pid 187269:tid 187511] [client 20.219.19.141:23989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/em.php"] [unique_id "aryzG9FcyhWr7HDzNGmEPAAAAn0"]
[Wed Sep 30 00:58:35.464383 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:35.464646 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:35.484325 2026] [security2:error] [pid 187269:tid 187425] [client 13.70.1.101:15941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-links-opml.php"] [unique_id "aryzG9FcyhWr7HDzNGmEQgAAAic"]
[Wed Sep 30 00:58:35.569626 2026] [security2:error] [pid 187269:tid 187523] [client 203.122.45.246:62179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmERgAAAog"]
[Wed Sep 30 00:58:35.569764 2026] [security2:error] [pid 187269:tid 187523] [client 203.122.45.246:62179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmERgAAAog"]
[Wed Sep 30 00:58:35.705986 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.4.78:49834] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.manga.an-ime.com"] [uri "/c99.php"] [unique_id "aryzG9FcyhWr7HDzNGmETwAAAmQ"]
[Wed Sep 30 00:58:35.758729 2026] [security2:error] [pid 187269:tid 187489] [client 161.118.214.16:59144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.chimbuko.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "aryzG9FcyhWr7HDzNGmEUQAAAmc"]
[Wed Sep 30 00:58:35.760618 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:35.760892 2026] [access_compat:error] [pid 186850:tid 187049] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:35.834942 2026] [security2:error] [pid 187269:tid 187456] [client 13.70.1.101:56258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/hp.php"] [unique_id "aryzG9FcyhWr7HDzNGmEUwAAAkY"]
[Wed Sep 30 00:58:35.908502 2026] [security2:error] [pid 187269:tid 187488] [client 45.138.12.32:31936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.veq.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzG9FcyhWr7HDzNGmEVQAAAmY"]
[Wed Sep 30 00:58:35.950829 2026] [security2:error] [pid 187269:tid 187416] [client 72.255.10.32:49270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmEVwAAAh4"]
[Wed Sep 30 00:58:35.950972 2026] [security2:error] [pid 187269:tid 187416] [client 72.255.10.32:49270] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzG9FcyhWr7HDzNGmEVwAAAh4"]
[Wed Sep 30 00:58:36.008451 2026] [security2:error] [pid 187269:tid 187436] [client 20.219.2.60:18859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-links-opml.php"] [unique_id "aryzHNFcyhWr7HDzNGmEWAAAAjI"]
[Wed Sep 30 00:58:36.059881 2026] [autoindex:error] [pid 187269:tid 187509] [client 212.156.70.154:15136] AH01276: Cannot serve directory /home2/wsglpcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:36.118652 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.118932 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.124948 2026] [security2:error] [pid 187269:tid 187477] [client 13.70.4.78:49431] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.manga.an-ime.com"] [uri "/c99.php"] [unique_id "aryzHNFcyhWr7HDzNGmEXwAAAls"]
[Wed Sep 30 00:58:36.189341 2026] [security2:error] [pid 187269:tid 187467] [client 13.70.1.101:56283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/mo.php"] [unique_id "aryzHNFcyhWr7HDzNGmEZAAAAlE"]
[Wed Sep 30 00:58:36.193185 2026] [security2:error] [pid 187269:tid 187437] [client 43.227.131.37:14187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzHNFcyhWr7HDzNGmEZwAAAjM"]
[Wed Sep 30 00:58:36.193307 2026] [security2:error] [pid 187269:tid 187437] [client 43.227.131.37:14187] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzHNFcyhWr7HDzNGmEZwAAAjM"]
[Wed Sep 30 00:58:36.195585 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.195837 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.229341 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:36.229593 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:36.282627 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.282908 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.291640 2026] [security2:error] [pid 187269:tid 187355] [remote 57.141.14.39:56958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-includes/wlwmanifest.xml"] [unique_id "aryzHNFcyhWr7HDzNGmEbAACGk4"]
[Wed Sep 30 00:58:36.304211 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.304481 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.364999 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.365266 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.375557 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.375851 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.393304 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.393571 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.458559 2026] [security2:error] [pid 187269:tid 187432] [client 78.99.33.200:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzHNFcyhWr7HDzNGmEeAAAAi4"]
[Wed Sep 30 00:58:36.466432 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.466717 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:43629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.472391 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.472697 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.482972 2026] [security2:error] [pid 187269:tid 187475] [client 13.70.4.78:49844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/ttivnife.php"] [unique_id "aryzHNFcyhWr7HDzNGmEewAAAlk"]
[Wed Sep 30 00:58:36.507363 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:53774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.507633 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:53774] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.525989 2026] [security2:error] [pid 187269:tid 187514] [client 13.70.1.101:15724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/ivmirgut.php"] [unique_id "aryzHNFcyhWr7HDzNGmEfgAAAoA"]
[Wed Sep 30 00:58:36.556768 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.557071 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.561765 2026] [security2:error] [pid 187269:tid 187438] [client 45.156.128.170:13786] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/wp-video-lightbox/readme.txt"] [unique_id "aryzHNFcyhWr7HDzNGmEgwAAAjQ"]
[Wed Sep 30 00:58:36.569664 2026] [security2:error] [pid 187269:tid 187487] [client 216.73.216.46:53774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzHNFcyhWr7HDzNGmEhAAAAmU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OC9kcml2ZXIvY3B1OS90b3BvbG9neQ%3D%3D
[Wed Sep 30 00:58:36.624914 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.625361 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.648036 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.648318 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.681326 2026] [security2:error] [pid 187269:tid 187508] [client 20.219.19.141:23982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/hp.php"] [unique_id "aryzHNFcyhWr7HDzNGmEjgAAAno"]
[Wed Sep 30 00:58:36.692763 2026] [security2:error] [pid 187269:tid 187478] [client 20.70.173.30:18510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/kj.php"] [unique_id "aryzHNFcyhWr7HDzNGmEjwAAAlw"]
[Wed Sep 30 00:58:36.739564 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.739842 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.758592 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:36.759063 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:36.831364 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.831775 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.864084 2026] [security2:error] [pid 187269:tid 187446] [client 13.70.1.101:15951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/baba.php"] [unique_id "aryzHNFcyhWr7HDzNGmEmQAAAjw"]
[Wed Sep 30 00:58:36.874002 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.4.78:49446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/admin.php/2P.php"] [unique_id "aryzHNFcyhWr7HDzNGmEmgAAAns"]
[Wed Sep 30 00:58:36.914506 2026] [security2:error] [pid 187269:tid 187507] [client 49.205.105.16:15051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzHNFcyhWr7HDzNGmEnQAAAnk"]
[Wed Sep 30 00:58:36.914646 2026] [security2:error] [pid 187269:tid 187507] [client 49.205.105.16:15051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzHNFcyhWr7HDzNGmEnQAAAnk"]
[Wed Sep 30 00:58:36.916137 2026] [security2:error] [pid 186850:tid 187042] [client 186.67.240.232:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzHE5Phls--iYlcKgKYQAAAUg"]
[Wed Sep 30 00:58:36.922796 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:36.923085 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:36.923610 2026] [security2:error] [pid 187269:tid 187459] [client 4.196.65.241:19469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/koiy.php"] [unique_id "aryzHNFcyhWr7HDzNGmEnwAAAkk"]
[Wed Sep 30 00:58:37.008966 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.009246 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.011479 2026] [security2:error] [pid 187269:tid 187437] [client 20.198.74.230:23923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/new4.php"] [unique_id "aryzHdFcyhWr7HDzNGmEowAAAjM"]
[Wed Sep 30 00:58:37.100765 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.101029 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.207152 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.207572 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.214997 2026] [security2:error] [pid 187269:tid 187534] [client 13.70.1.101:15695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/Components.php"] [unique_id "aryzHdFcyhWr7HDzNGmErAAAApM"]
[Wed Sep 30 00:58:37.216288 2026] [security2:error] [pid 187269:tid 187429] [client 172.86.125.31:55332] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "lisamiastudios.com"] [uri "/public_html.zip"] [unique_id "aryzHdFcyhWr7HDzNGmErQAAAis"]
[Wed Sep 30 00:58:37.239351 2026] [security2:error] [pid 186850:tid 187014] [client 13.70.4.78:49433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/a.php"] [unique_id "aryzHU5Phls--iYlcKgKZwAAASw"]
[Wed Sep 30 00:58:37.250030 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:37.250479 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:37.283010 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.283278 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.324313 2026] [security2:error] [pid 187269:tid 187391] [remote 57.141.14.78:25378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "aryzHdFcyhWr7HDzNGmEsgACinI"]
[Wed Sep 30 00:58:37.379364 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.379780 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:55440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.393439 2026] [lsapi:warn] [pid 187269:tid 187402] [remote 216.73.216.20:49354] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 00:58:37.393464 2026] [lsapi:warn] [pid 187269:tid 187402] [remote 216.73.216.20:49354] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 00:58:37.465852 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.466120 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.558643 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.558924 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.622113 2026] [security2:error] [pid 187269:tid 187422] [client 216.73.216.46:55440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzHdFcyhWr7HDzNGmEvQAAAiQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY4L25vZGUwL21lbW9yeTM3
[Wed Sep 30 00:58:37.636735 2026] [security2:error] [pid 187269:tid 187286] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzHdFcyhWr7HDzNGmEvgACKAk"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D82628
[Wed Sep 30 00:58:37.654050 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.654313 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.685788 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.4.78:59170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/cord.php"] [unique_id "aryzHdFcyhWr7HDzNGmEwwAAAk4"]
[Wed Sep 30 00:58:37.730276 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:37.730580 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:37.733002 2026] [security2:error] [pid 186850:tid 187096] [client 20.194.30.107:17478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/ohct.php"] [unique_id "aryzHU5Phls--iYlcKgKcwAAAX4"]
[Wed Sep 30 00:58:37.740876 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.741139 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.776441 2026] [security2:error] [pid 186850:tid 187107] [client 103.159.192.142:65323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzHU5Phls--iYlcKgKdgAAAYk"]
[Wed Sep 30 00:58:37.776544 2026] [security2:error] [pid 186850:tid 187107] [client 103.159.192.142:65323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzHU5Phls--iYlcKgKdgAAAYk"]
[Wed Sep 30 00:58:37.815545 2026] [security2:error] [pid 187269:tid 187278] [remote 81.101.126.103:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzHdFcyhWr7HDzNGmEyQACXgE"], referer: https://www.torquayfans.com/viewforum.php?f=3&sid=a52a13564c2e87a950757475dc056bab
[Wed Sep 30 00:58:37.815586 2026] [security2:error] [pid 187269:tid 187278] [remote 81.101.126.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzHdFcyhWr7HDzNGmEyQACXgE"], referer: https://www.torquayfans.com/viewforum.php?f=3&sid=a52a13564c2e87a950757475dc056bab
[Wed Sep 30 00:58:37.830546 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.830827 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.841371 2026] [security2:error] [pid 187269:tid 187473] [client 20.219.19.141:46518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wpuse.php"] [unique_id "aryzHdFcyhWr7HDzNGmEzAAAAlc"]
[Wed Sep 30 00:58:37.864531 2026] [security2:error] [pid 187269:tid 187411] [client 13.70.1.101:15703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/aboutt.php"] [unique_id "aryzHdFcyhWr7HDzNGmEzQAAAhk"]
[Wed Sep 30 00:58:37.880265 2026] [ssl:error] [pid 187269:tid 187466] [client 216.25.124.24:27123] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname msstch.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:58:37.897325 2026] [security2:error] [pid 186850:tid 186949] [remote 57.141.14.33:54520] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-includes/wlwmanifest.xml"] [unique_id "aryzHU5Phls--iYlcKgKegABYmI"]
[Wed Sep 30 00:58:37.926212 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:37.926656 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:37.954094 2026] [security2:error] [pid 187269:tid 187443] [client 20.70.173.30:43579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/key.php"] [unique_id "aryzHdFcyhWr7HDzNGmE0wAAAjk"]
[Wed Sep 30 00:58:37.968030 2026] [security2:error] [pid 187269:tid 187459] [client 20.198.74.230:34839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/backup-helper.php"] [unique_id "aryzHdFcyhWr7HDzNGmE1AAAAkk"]
[Wed Sep 30 00:58:37.968673 2026] [security2:error] [pid 187269:tid 187518] [client 20.28.180.172:34248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/Jcrop.php"] [unique_id "aryzHdFcyhWr7HDzNGmE1QAAAoQ"]
[Wed Sep 30 00:58:37.977751 2026] [security2:error] [pid 187269:tid 187492] [client 20.219.2.60:19439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-class-api.php"] [unique_id "aryzHdFcyhWr7HDzNGmE1gAAAmo"]
[Wed Sep 30 00:58:37.981774 2026] [ssl:error] [pid 187269:tid 187413] [client 216.25.124.24:55872] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcalendars.jbj.cqy.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:58:38.004584 2026] [security2:error] [pid 187269:tid 187427] [client 4.240.25.22:63771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/8.php"] [unique_id "aryzHtFcyhWr7HDzNGmE2wAAAik"]
[Wed Sep 30 00:58:38.013853 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.014100 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.017153 2026] [security2:error] [pid 187269:tid 187407] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzHtFcyhWr7HDzNGmE3QAAAhU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:38.079202 2026] [http2:warn] [pid 178882:tid 179305] [client 40.77.167.130:22996] h2_stream(178882-968-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 00:58:38.099718 2026] [security2:error] [pid 187269:tid 187280] [remote 81.101.126.103:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzHtFcyhWr7HDzNGmE4QACkgM"], referer: https://www.torquayfans.com/memberlist.php?mode=viewprofile&u=25334
[Wed Sep 30 00:58:38.103827 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.104087 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.190264 2026] [security2:error] [pid 187269:tid 187429] [client 13.70.4.78:59188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/anom.php"] [unique_id "aryzHtFcyhWr7HDzNGmE6gAAAis"]
[Wed Sep 30 00:58:38.196947 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.197309 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.267686 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:38.267954 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:38.285154 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.285425 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.311747 2026] [security2:error] [pid 187269:tid 187452] [client 45.138.12.32:31960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vkp.zdx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzHtFcyhWr7HDzNGmE7gAAAkI"]
[Wed Sep 30 00:58:38.363217 2026] [security2:error] [pid 187269:tid 187439] [client 39.44.16.112:58897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.16.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzHtFcyhWr7HDzNGmE9QAAAjU"]
[Wed Sep 30 00:58:38.364263 2026] [security2:error] [pid 187269:tid 187439] [client 39.44.16.112:58897] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "wardens-keep.com"] [uri "/xmlrpc.php"] [unique_id "aryzHtFcyhWr7HDzNGmE9QAAAjU"]
[Wed Sep 30 00:58:38.380242 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.380526 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.427259 2026] [security2:error] [pid 187269:tid 187477] [client 116.72.182.19:65367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzHtFcyhWr7HDzNGmE9wAAAls"]
[Wed Sep 30 00:58:38.427397 2026] [security2:error] [pid 187269:tid 187477] [client 116.72.182.19:65367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzHtFcyhWr7HDzNGmE9wAAAls"]
[Wed Sep 30 00:58:38.471006 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.471275 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.473085 2026] [security2:error] [pid 187269:tid 187312] [remote 64.23.166.180:21808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.estonreality.sk"] [uri "/.env"] [unique_id "aryzHtFcyhWr7HDzNGmE-gACFCM"]
[Wed Sep 30 00:58:38.499846 2026] [security2:error] [pid 187269:tid 187478] [client 13.70.1.101:15686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/maint/14.php"] [unique_id "aryzHtFcyhWr7HDzNGmE_QAAAlw"]
[Wed Sep 30 00:58:38.553611 2026] [security2:error] [pid 187269:tid 187456] [client 13.70.4.78:24340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzHtFcyhWr7HDzNGmFAAAAAkY"]
[Wed Sep 30 00:58:38.562151 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.562425 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.597564 2026] [security2:error] [pid 187269:tid 187500] [client 20.198.74.230:23907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/d62.php"] [unique_id "aryzHtFcyhWr7HDzNGmFBAAAAnI"]
[Wed Sep 30 00:58:38.653566 2026] [security2:error] [pid 186850:tid 187090] [client 13.70.4.78:49464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/plugins.php"] [unique_id "aryzHk5Phls--iYlcKgKiAAAAXg"]
[Wed Sep 30 00:58:38.678988 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.679449 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.681554 2026] [security2:error] [pid 186850:tid 186968] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzHk5Phls--iYlcKgKiQABPXU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255492&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:58:38.681584 2026] [security2:error] [pid 186850:tid 186968] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzHk5Phls--iYlcKgKiQABPXU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255492&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 00:58:38.730725 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:38.730995 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:38.742212 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.743003 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.822375 2026] [security2:error] [pid 187269:tid 187418] [client 13.70.1.101:56319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/xx.php"] [unique_id "aryzHtFcyhWr7HDzNGmFDAAAAiA"]
[Wed Sep 30 00:58:38.832934 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.833204 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.898189 2026] [security2:error] [pid 187269:tid 187449] [client 45.156.128.168:15036] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "madagascar-foundation.org"] [uri "/wp-content/plugins/kingcomposer/readme.txt"] [unique_id "aryzHtFcyhWr7HDzNGmFEgAAAj8"]
[Wed Sep 30 00:58:38.924115 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:38.924388 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:38.939945 2026] [security2:error] [pid 187269:tid 187414] [client 13.70.4.78:24342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzHtFcyhWr7HDzNGmFFQAAAhw"]
[Wed Sep 30 00:58:39.016976 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.017263 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.031590 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:49411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/zlwvxiyp.php"] [unique_id "aryzH9FcyhWr7HDzNGmFGgAAAn8"]
[Wed Sep 30 00:58:39.108553 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.108837 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.147970 2026] [security2:error] [pid 187269:tid 187442] [client 20.213.164.196:10795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzH9FcyhWr7HDzNGmFIQAAAjg"]
[Wed Sep 30 00:58:39.198931 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.199191 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.230704 2026] [security2:error] [pid 186850:tid 187081] [client 13.70.1.101:15982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/gelay.php"] [unique_id "aryzH05Phls--iYlcKgKkgAAAW8"]
[Wed Sep 30 00:58:39.274901 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:39.275188 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:39.290880 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.291147 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.381319 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.381584 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.438110 2026] [security2:error] [pid 187269:tid 187439] [client 13.70.4.78:59198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/1Be5IfrlWP.php"] [unique_id "aryzH9FcyhWr7HDzNGmFNQAAAjU"]
[Wed Sep 30 00:58:39.453917 2026] [security2:error] [pid 187269:tid 187438] [client 103.168.67.253:2588] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzH9FcyhWr7HDzNGmFNgAAAjQ"]
[Wed Sep 30 00:58:39.471171 2026] [security2:error] [pid 187269:tid 187447] [client 20.219.2.60:19311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-class-atom.php"] [unique_id "aryzH9FcyhWr7HDzNGmFOgAAAj0"]
[Wed Sep 30 00:58:39.471739 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.472010 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.476115 2026] [security2:error] [pid 187269:tid 187494] [client 4.240.25.22:43838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/abcd.php"] [unique_id "aryzH9FcyhWr7HDzNGmFOwAAAmw"]
[Wed Sep 30 00:58:39.511670 2026] [security2:error] [pid 187269:tid 187422] [client 103.168.67.253:2588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzH9FcyhWr7HDzNGmFPAAAAiQ"]
[Wed Sep 30 00:58:39.529864 2026] [security2:error] [pid 187269:tid 187493] [client 223.235.102.107:25779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFPwAAAms"]
[Wed Sep 30 00:58:39.530388 2026] [security2:error] [pid 187269:tid 187493] [client 223.235.102.107:25779] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFPwAAAms"]
[Wed Sep 30 00:58:39.563364 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.563620 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.570224 2026] [security2:error] [pid 187269:tid 187460] [client 13.70.4.78:24372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/b.php"] [unique_id "aryzH9FcyhWr7HDzNGmFQQAAAko"]
[Wed Sep 30 00:58:39.616046 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.1.101:15968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/htaccess.php"] [unique_id "aryzH9FcyhWr7HDzNGmFRQAAAk4"]
[Wed Sep 30 00:58:39.618987 2026] [security2:error] [pid 187269:tid 187533] [client 116.197.133.25:62740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFRgAAApI"]
[Wed Sep 30 00:58:39.619074 2026] [security2:error] [pid 187269:tid 187533] [client 116.197.133.25:62740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFRgAAApI"]
[Wed Sep 30 00:58:39.634935 2026] [security2:error] [pid 187269:tid 187498] [client 49.43.163.212:62563] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFSAAAAnA"]
[Wed Sep 30 00:58:39.635108 2026] [security2:error] [pid 187269:tid 187498] [client 49.43.163.212:62563] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFSAAAAnA"]
[Wed Sep 30 00:58:39.655112 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.655392 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.744119 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.744411 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.762885 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:39.763163 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:39.770223 2026] [security2:error] [pid 187269:tid 187284] [remote 50.6.19.130:30072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-login.php"] [unique_id "aryzH9FcyhWr7HDzNGmFTwACTQc"]
[Wed Sep 30 00:58:39.772789 2026] [security2:error] [pid 187269:tid 187293] [remote 50.6.19.130:30072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-login.php"] [unique_id "aryzH9FcyhWr7HDzNGmFUQACexA"], referer: https://casanoelectric.com/wp-login.php
[Wed Sep 30 00:58:39.775121 2026] [security2:error] [pid 187269:tid 187305] [remote 50.6.19.130:30072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.19.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFUgACPxw"]
[Wed Sep 30 00:58:39.775238 2026] [security2:error] [pid 187269:tid 187449] [client 50.6.19.130:30072] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFUgACPxw"]
[Wed Sep 30 00:58:39.838329 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.838703 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.845863 2026] [security2:error] [pid 187269:tid 187461] [client 13.70.4.78:49835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "aryzH9FcyhWr7HDzNGmFWgAAAks"]
[Wed Sep 30 00:58:39.852081 2026] [security2:error] [pid 187269:tid 187516] [client 77.29.166.37:36404] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "aryzHtFcyhWr7HDzNGmFCQACglM"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 00:58:39.913610 2026] [access_compat:error] [pid 187269:tid 187408] [client 47.79.13.175:43796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:39.913975 2026] [access_compat:error] [pid 187269:tid 187408] [client 47.79.13.175:43796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:39.927783 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:39.928073 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:39.941161 2026] [security2:error] [pid 187269:tid 187451] [client 20.219.19.141:23944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/sm.php"] [unique_id "aryzH9FcyhWr7HDzNGmFZAAAAkE"]
[Wed Sep 30 00:58:39.946988 2026] [security2:error] [pid 187269:tid 187501] [client 4.196.65.241:2542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/f35.update.php"] [unique_id "aryzH9FcyhWr7HDzNGmFZQAAAnM"]
[Wed Sep 30 00:58:39.965647 2026] [security2:error] [pid 187269:tid 187512] [client 4.196.65.241:19168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/faiy.php"] [unique_id "aryzH9FcyhWr7HDzNGmFaAAAAn4"]
[Wed Sep 30 00:58:39.968293 2026] [security2:error] [pid 187269:tid 187297] [remote 74.125.208.104:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzH9FcyhWr7HDzNGmFYwACURQ"]
[Wed Sep 30 00:58:39.968313 2026] [security2:error] [pid 187269:tid 187297] [remote 74.125.208.104:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzH9FcyhWr7HDzNGmFYwACURQ"]
[Wed Sep 30 00:58:39.973413 2026] [core:error] [pid 187269:tid 187480] [client 45.3.40.67:39711] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:39.973428 2026] [core:error] [pid 187269:tid 187480] [client 45.3.40.67:39711] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:39.990221 2026] [security2:error] [pid 186850:tid 186911] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.aws/.env"] [unique_id "aryzH05Phls--iYlcKgKqgABWjw"]
[Wed Sep 30 00:58:39.994932 2026] [security2:error] [pid 186850:tid 186965] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.aws/credentials.bak"] [unique_id "aryzH05Phls--iYlcKgKsQABWnI"]
[Wed Sep 30 00:58:39.996328 2026] [security2:error] [pid 186850:tid 186916] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aryzH05Phls--iYlcKgKswABWkE"]
[Wed Sep 30 00:58:39.996396 2026] [security2:error] [pid 186850:tid 186965] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.docker/.env"] [unique_id "aryzH05Phls--iYlcKgKtAABWnI"]
[Wed Sep 30 00:58:39.997444 2026] [security2:error] [pid 186850:tid 186958] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env"] [unique_id "aryzH05Phls--iYlcKgKuAABWms"]
[Wed Sep 30 00:58:39.999677 2026] [security2:error] [pid 187269:tid 187341] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env"] [unique_id "aryzH9FcyhWr7HDzNGmFbgACJ0A"]
[Wed Sep 30 00:58:39.999728 2026] [security2:error] [pid 187269:tid 187332] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.aws/.env"] [unique_id "aryzH9FcyhWr7HDzNGmFbwACJzc"]
[Wed Sep 30 00:58:40.005136 2026] [security2:error] [pid 187269:tid 187332] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.docker/.env"] [unique_id "aryzH9FcyhWr7HDzNGmFewACJzc"]
[Wed Sep 30 00:58:40.006111 2026] [security2:error] [pid 187269:tid 187345] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.aws/credentials.bak"] [unique_id "aryzH9FcyhWr7HDzNGmFfwACJ0Q"]
[Wed Sep 30 00:58:40.006137 2026] [security2:error] [pid 187269:tid 187348] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.docker/laravel/app/.env"] [unique_id "aryzH9FcyhWr7HDzNGmFfgACJ0c"]
[Wed Sep 30 00:58:40.018731 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.019038 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.045311 2026] [security2:error] [pid 186850:tid 187066] [client 13.70.4.78:61978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/admin.php"] [unique_id "aryzIE5Phls--iYlcKgKxwAAAWA"]
[Wed Sep 30 00:58:40.070798 2026] [security2:error] [pid 186850:tid 187003] [client 223.181.60.167:19668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzIE5Phls--iYlcKgKyAAAASE"]
[Wed Sep 30 00:58:40.072633 2026] [security2:error] [pid 186850:tid 187003] [client 223.181.60.167:19668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzIE5Phls--iYlcKgKyAAAASE"]
[Wed Sep 30 00:58:40.109024 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.109304 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.130431 2026] [security2:error] [pid 186850:tid 186976] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.bak"] [unique_id "aryzIE5Phls--iYlcKgKzQABQX0"]
[Wed Sep 30 00:58:40.130497 2026] [security2:error] [pid 186850:tid 186860] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.backup"] [unique_id "aryzIE5Phls--iYlcKgKzAABQQk"]
[Wed Sep 30 00:58:40.138074 2026] [security2:error] [pid 187269:tid 187343] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.bak"] [unique_id "aryzINFcyhWr7HDzNGmFlAACJkI"]
[Wed Sep 30 00:58:40.138521 2026] [security2:error] [pid 187269:tid 187314] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.backup"] [unique_id "aryzINFcyhWr7HDzNGmFkwACJiU"]
[Wed Sep 30 00:58:40.171412 2026] [security2:error] [pid 187269:tid 187468] [client 20.194.30.107:34017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/fling.php"] [unique_id "aryzINFcyhWr7HDzNGmFowAAAlI"]
[Wed Sep 30 00:58:40.200587 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.200865 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.227864 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:40.228132 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:40.257060 2026] [security2:error] [pid 186850:tid 186872] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/.env.php"] [unique_id "aryzIE5Phls--iYlcKgK2gABURU"]
[Wed Sep 30 00:58:40.258982 2026] [security2:error] [pid 186850:tid 186877] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.old"] [unique_id "aryzIE5Phls--iYlcKgK3wABURo"]
[Wed Sep 30 00:58:40.266638 2026] [security2:error] [pid 187269:tid 187335] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.php"] [unique_id "aryzINFcyhWr7HDzNGmFsQACMzo"]
[Wed Sep 30 00:58:40.267705 2026] [security2:error] [pid 187269:tid 187316] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.old"] [unique_id "aryzINFcyhWr7HDzNGmFswACMyc"]
[Wed Sep 30 00:58:40.275713 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:49811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/admin.php/c.php"] [unique_id "aryzINFcyhWr7HDzNGmFwAAAAn4"]
[Wed Sep 30 00:58:40.290566 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.290818 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.292449 2026] [security2:error] [pid 186850:tid 186852] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env.swp"] [unique_id "aryzIE5Phls--iYlcKgK7gABUQE"]
[Wed Sep 30 00:58:40.295702 2026] [security2:error] [pid 187269:tid 187321] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env.swp"] [unique_id "aryzINFcyhWr7HDzNGmFyAACMyw"]
[Wed Sep 30 00:58:40.330471 2026] [security2:error] [pid 187269:tid 187504] [client 105.112.178.79:44572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fdm.tcs.mybluehost.me"] [uri "/__ss_probe_784a2e680f8f1e0fd2dd572f67585b2a__"] [unique_id "aryzINFcyhWr7HDzNGmF3wAAAnY"]
[Wed Sep 30 00:58:40.346247 2026] [security2:error] [pid 187269:tid 187340] [remote 74.125.208.102:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzINFcyhWr7HDzNGmF2gACdT8"]
[Wed Sep 30 00:58:40.346267 2026] [security2:error] [pid 187269:tid 187340] [remote 74.125.208.102:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzINFcyhWr7HDzNGmF2gACdT8"]
[Wed Sep 30 00:58:40.380010 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.4.78:62004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/fling.php"] [unique_id "aryzINFcyhWr7HDzNGmF5AAAAnc"]
[Wed Sep 30 00:58:40.380840 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.381097 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.393455 2026] [security2:error] [pid 186850:tid 186888] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.env~"] [unique_id "aryzIE5Phls--iYlcKgK-wABNCU"]
[Wed Sep 30 00:58:40.394185 2026] [security2:error] [pid 187269:tid 187520] [client 13.70.1.101:15740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/readme.php"] [unique_id "aryzINFcyhWr7HDzNGmF5wAAAoY"]
[Wed Sep 30 00:58:40.402195 2026] [security2:error] [pid 187269:tid 187367] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.env~"] [unique_id "aryzINFcyhWr7HDzNGmF6QACUlo"]
[Wed Sep 30 00:58:40.449331 2026] [security2:error] [pid 187269:tid 187524] [client 45.138.12.40:63782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqe.ybe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzINFcyhWr7HDzNGmGBQAAAok"]
[Wed Sep 30 00:58:40.458555 2026] [security2:error] [pid 187269:tid 187338] [remote 74.125.210.99:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzINFcyhWr7HDzNGmF7QACeD0"]
[Wed Sep 30 00:58:40.458588 2026] [security2:error] [pid 187269:tid 187338] [remote 74.125.210.99:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzINFcyhWr7HDzNGmF7QACeD0"]
[Wed Sep 30 00:58:40.467745 2026] [security2:error] [pid 186850:tid 186889] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/api/.env"] [unique_id "aryzIE5Phls--iYlcKgLIAABOCY"]
[Wed Sep 30 00:58:40.468217 2026] [security2:error] [pid 186850:tid 186879] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/api/phpinfo.php"] [unique_id "aryzIE5Phls--iYlcKgLIQABOBw"]
[Wed Sep 30 00:58:40.468284 2026] [security2:error] [pid 187269:tid 187353] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/api/.env"] [unique_id "aryzINFcyhWr7HDzNGmGEgACgUw"]
[Wed Sep 30 00:58:40.473742 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.474107 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.474284 2026] [security2:error] [pid 187269:tid 187425] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzINFcyhWr7HDzNGmGFgAAAic"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:40.489434 2026] [security2:error] [pid 187269:tid 187383] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/api/phpinfo.php"] [unique_id "aryzINFcyhWr7HDzNGmGGgACgWo"]
[Wed Sep 30 00:58:40.529665 2026] [security2:error] [pid 186850:tid 186920] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/app/.env"] [unique_id "aryzIE5Phls--iYlcKgLJQABYUU"]
[Wed Sep 30 00:58:40.535756 2026] [security2:error] [pid 186850:tid 187037] [client 20.28.180.172:29477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/php8.php"] [unique_id "aryzIE5Phls--iYlcKgLJgAAAUM"]
[Wed Sep 30 00:58:40.538540 2026] [security2:error] [pid 187269:tid 187392] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/app/.env"] [unique_id "aryzINFcyhWr7HDzNGmGHQACGXM"]
[Wed Sep 30 00:58:40.543728 2026] [security2:error] [pid 186850:tid 186895] [remote 64.23.166.180:21810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.esvarbon.gov.ng"] [uri "/.env"] [unique_id "aryzIE5Phls--iYlcKgLJwABdSw"]
[Wed Sep 30 00:58:40.555286 2026] [security2:error] [pid 186850:tid 186892] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/application/.env"] [unique_id "aryzIE5Phls--iYlcKgLKQABRyk"]
[Wed Sep 30 00:58:40.556849 2026] [security2:error] [pid 186850:tid 187000] [client 103.168.67.253:2592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzIE5Phls--iYlcKgLKgAAAR4"]
[Wed Sep 30 00:58:40.562090 2026] [security2:error] [pid 187269:tid 187389] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/application/.env"] [unique_id "aryzINFcyhWr7HDzNGmGHwACP3A"]
[Wed Sep 30 00:58:40.562849 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.563106 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.596356 2026] [security2:error] [pid 186850:tid 186900] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/back/.env"] [unique_id "aryzIE5Phls--iYlcKgLMQABRjE"]
[Wed Sep 30 00:58:40.597768 2026] [security2:error] [pid 186850:tid 186931] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/backend/.env"] [unique_id "aryzIE5Phls--iYlcKgLMgABQVA"]
[Wed Sep 30 00:58:40.599067 2026] [security2:error] [pid 187269:tid 187371] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/back/.env"] [unique_id "aryzINFcyhWr7HDzNGmGJQACG14"]
[Wed Sep 30 00:58:40.599135 2026] [security2:error] [pid 186850:tid 186853] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/backup/.env"] [unique_id "aryzIE5Phls--iYlcKgLMwABagI"]
[Wed Sep 30 00:58:40.599140 2026] [security2:error] [pid 187269:tid 187373] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/backend/.env"] [unique_id "aryzINFcyhWr7HDzNGmGJgACG2A"]
[Wed Sep 30 00:58:40.599852 2026] [security2:error] [pid 186850:tid 186956] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/cms/.env"] [unique_id "aryzIE5Phls--iYlcKgLNAABamk"]
[Wed Sep 30 00:58:40.603378 2026] [security2:error] [pid 187269:tid 187381] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/backup/.env"] [unique_id "aryzINFcyhWr7HDzNGmGJwACSGg"]
[Wed Sep 30 00:58:40.608010 2026] [security2:error] [pid 187269:tid 187394] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/cms/.env"] [unique_id "aryzINFcyhWr7HDzNGmGKQACKXU"]
[Wed Sep 30 00:58:40.608705 2026] [security2:error] [pid 187269:tid 187498] [client 20.213.164.196:10807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzINFcyhWr7HDzNGmGLAAAAnA"]
[Wed Sep 30 00:58:40.615510 2026] [security2:error] [pid 187269:tid 187476] [client 13.70.4.78:49816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/admin.php/go.php"] [unique_id "aryzINFcyhWr7HDzNGmGLgAAAlo"]
[Wed Sep 30 00:58:40.624258 2026] [security2:error] [pid 186850:tid 186902] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/config.php"] [unique_id "aryzIE5Phls--iYlcKgLOgABNjM"]
[Wed Sep 30 00:58:40.637237 2026] [security2:error] [pid 187269:tid 187289] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/config.php"] [unique_id "aryzINFcyhWr7HDzNGmGMgACKQw"]
[Wed Sep 30 00:58:40.649825 2026] [security2:error] [pid 187269:tid 187369] [remote 47.128.114.101:58394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/8245/sc-reserves-decision-on-disqualification-duration-case"] [unique_id "aryzINFcyhWr7HDzNGmGNAACV1w"]
[Wed Sep 30 00:58:40.653771 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.654036 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.692986 2026] [security2:error] [pid 186850:tid 186878] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/config/.env"] [unique_id "aryzIE5Phls--iYlcKgLPgABPRs"]
[Wed Sep 30 00:58:40.697251 2026] [security2:error] [pid 187269:tid 187296] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/config/.env"] [unique_id "aryzINFcyhWr7HDzNGmGPQACKRM"]
[Wed Sep 30 00:58:40.726662 2026] [security2:error] [pid 186850:tid 186871] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/core/.env"] [unique_id "aryzIE5Phls--iYlcKgLQQABHBQ"]
[Wed Sep 30 00:58:40.731463 2026] [security2:error] [pid 187269:tid 187386] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/core/.env"] [unique_id "aryzINFcyhWr7HDzNGmGRAACIG0"]
[Wed Sep 30 00:58:40.734548 2026] [security2:error] [pid 186850:tid 186948] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/dev/.env"] [unique_id "aryzIE5Phls--iYlcKgLRwABHGE"]
[Wed Sep 30 00:58:40.734919 2026] [security2:error] [pid 186850:tid 186935] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/database.sql"] [unique_id "aryzIE5Phls--iYlcKgLRQABHFQ"]
[Wed Sep 30 00:58:40.737336 2026] [security2:error] [pid 187269:tid 187286] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/database.sql"] [unique_id "aryzINFcyhWr7HDzNGmGSQACIAk"]
[Wed Sep 30 00:58:40.737855 2026] [security2:error] [pid 186850:tid 186859] [remote 74.125.210.97:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzIE5Phls--iYlcKgLSgABIgg"], referer: https://www.torquayfans.com/memberlist.php?mode=viewprofile&u=25334
[Wed Sep 30 00:58:40.739140 2026] [security2:error] [pid 187269:tid 187278] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/dev/.env"] [unique_id "aryzINFcyhWr7HDzNGmGSgACIAE"]
[Wed Sep 30 00:58:40.747248 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.747628 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.798915 2026] [security2:error] [pid 186850:tid 186868] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/frontend/.env"] [unique_id "aryzIE5Phls--iYlcKgLXQABIBE"]
[Wed Sep 30 00:58:40.809821 2026] [security2:error] [pid 187269:tid 187378] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/frontend/.env"] [unique_id "aryzINFcyhWr7HDzNGmGXgACKmU"]
[Wed Sep 30 00:58:40.820190 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:40.820605 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:40.827921 2026] [security2:error] [pid 186850:tid 186896] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/info.php"] [unique_id "aryzIE5Phls--iYlcKgLYAABGy0"]
[Wed Sep 30 00:58:40.834315 2026] [security2:error] [pid 187269:tid 187285] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/info.php"] [unique_id "aryzINFcyhWr7HDzNGmGZQACKgg"]
[Wed Sep 30 00:58:40.834477 2026] [core:error] [pid 186850:tid 187036] [client 65.111.6.135:44731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:40.834486 2026] [core:error] [pid 186850:tid 187036] [client 65.111.6.135:44731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:40.838343 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.838636 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.858396 2026] [security2:error] [pid 187269:tid 187436] [client 202.81.212.220:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzINFcyhWr7HDzNGmGaAAAAjI"]
[Wed Sep 30 00:58:40.862231 2026] [security2:error] [pid 186850:tid 186949] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/laravel/.env"] [unique_id "aryzIE5Phls--iYlcKgLYQABJmI"]
[Wed Sep 30 00:58:40.862232 2026] [security2:error] [pid 186850:tid 186917] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/media/.env"] [unique_id "aryzIE5Phls--iYlcKgLYgABJkI"]
[Wed Sep 30 00:58:40.864467 2026] [security2:error] [pid 187269:tid 187277] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/laravel/.env"] [unique_id "aryzINFcyhWr7HDzNGmGagACcgA"]
[Wed Sep 30 00:58:40.866727 2026] [security2:error] [pid 187269:tid 187312] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/media/.env"] [unique_id "aryzINFcyhWr7HDzNGmGawACZCM"]
[Wed Sep 30 00:58:40.868608 2026] [security2:error] [pid 186850:tid 186912] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/new/.env"] [unique_id "aryzIE5Phls--iYlcKgLYwABUT0"]
[Wed Sep 30 00:58:40.869285 2026] [security2:error] [pid 186850:tid 186893] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/old/.env"] [unique_id "aryzIE5Phls--iYlcKgLZAABUSo"]
[Wed Sep 30 00:58:40.870535 2026] [security2:error] [pid 187269:tid 187387] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/new/.env"] [unique_id "aryzINFcyhWr7HDzNGmGbAACdm4"]
[Wed Sep 30 00:58:40.872323 2026] [security2:error] [pid 187269:tid 187294] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/old/.env"] [unique_id "aryzINFcyhWr7HDzNGmGbQACgRE"]
[Wed Sep 30 00:58:40.882405 2026] [security2:error] [pid 186850:tid 186928] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.com"] [uri "/phpinfo.php"] [unique_id "aryzIE5Phls--iYlcKgLZwABUU0"]
[Wed Sep 30 00:58:40.884207 2026] [security2:error] [pid 186850:tid 186968] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/production/.env"] [unique_id "aryzIE5Phls--iYlcKgLaAABUXU"]
[Wed Sep 30 00:58:40.884462 2026] [security2:error] [pid 186850:tid 187030] [client 13.70.4.78:24348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryzIE5Phls--iYlcKgLaQAAATw"]
[Wed Sep 30 00:58:40.889142 2026] [security2:error] [pid 186850:tid 186910] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/public/.env"] [unique_id "aryzIE5Phls--iYlcKgLagABUTs"]
[Wed Sep 30 00:58:40.892728 2026] [security2:error] [pid 187269:tid 187377] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.58.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wildingproperties.magia.vegas"] [uri "/phpinfo.php"] [unique_id "aryzINFcyhWr7HDzNGmGcQACgGQ"]
[Wed Sep 30 00:58:40.896553 2026] [security2:error] [pid 187269:tid 187315] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/production/.env"] [unique_id "aryzINFcyhWr7HDzNGmGcgACgCY"]
[Wed Sep 30 00:58:40.899244 2026] [security2:error] [pid 186850:tid 186967] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/server/.env"] [unique_id "aryzIE5Phls--iYlcKgLbgABUXQ"]
[Wed Sep 30 00:58:40.899557 2026] [security2:error] [pid 187269:tid 187318] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/public/.env"] [unique_id "aryzINFcyhWr7HDzNGmGdAACgCk"]
[Wed Sep 30 00:58:40.903804 2026] [security2:error] [pid 187269:tid 187309] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/server/.env"] [unique_id "aryzINFcyhWr7HDzNGmGdwACgCA"]
[Wed Sep 30 00:58:40.918914 2026] [security2:error] [pid 186850:tid 186926] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/src/.env"] [unique_id "aryzIE5Phls--iYlcKgLcQABUUs"]
[Wed Sep 30 00:58:40.934729 2026] [security2:error] [pid 186850:tid 186946] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/staging/.env"] [unique_id "aryzIE5Phls--iYlcKgLcgABTF8"]
[Wed Sep 30 00:58:40.939613 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:40.939888 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:40.946592 2026] [security2:error] [pid 187269:tid 187333] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/src/.env"] [unique_id "aryzINFcyhWr7HDzNGmGfgACXzg"]
[Wed Sep 30 00:58:40.949792 2026] [security2:error] [pid 187269:tid 187488] [client 13.70.1.101:15983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/max.php"] [unique_id "aryzINFcyhWr7HDzNGmGfwAAAmY"]
[Wed Sep 30 00:58:40.964847 2026] [security2:error] [pid 186850:tid 186942] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/test/.env"] [unique_id "aryzIE5Phls--iYlcKgLcwABF1s"]
[Wed Sep 30 00:58:40.965462 2026] [security2:error] [pid 186850:tid 186944] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/v1/.env"] [unique_id "aryzIE5Phls--iYlcKgLdAABF10"]
[Wed Sep 30 00:58:40.970317 2026] [security2:error] [pid 187269:tid 187284] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/test/.env"] [unique_id "aryzINFcyhWr7HDzNGmGggACGwc"]
[Wed Sep 30 00:58:40.970509 2026] [security2:error] [pid 187269:tid 187299] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/staging/.env"] [unique_id "aryzINFcyhWr7HDzNGmGgQACGxY"]
[Wed Sep 30 00:58:40.970935 2026] [security2:error] [pid 187269:tid 187293] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/v1/.env"] [unique_id "aryzINFcyhWr7HDzNGmGgwACGxA"]
[Wed Sep 30 00:58:40.997883 2026] [security2:error] [pid 186850:tid 186927] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/v2/.env"] [unique_id "aryzIE5Phls--iYlcKgLdwABVUw"]
[Wed Sep 30 00:58:41.000108 2026] [security2:error] [pid 187269:tid 187305] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/v2/.env"] [unique_id "aryzINFcyhWr7HDzNGmGhQACcBw"]
[Wed Sep 30 00:58:41.003354 2026] [security2:error] [pid 186850:tid 186856] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/web/.env"] [unique_id "aryzIU5Phls--iYlcKgLeQABUgU"]
[Wed Sep 30 00:58:41.003924 2026] [security2:error] [pid 186850:tid 186899] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wildingproperties.com"] [uri "/wp-config.php.bak"] [unique_id "aryzIU5Phls--iYlcKgLegABSDA"]
[Wed Sep 30 00:58:41.005462 2026] [security2:error] [pid 187269:tid 187360] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/web/.env"] [unique_id "aryzIdFcyhWr7HDzNGmGhwACWlM"]
[Wed Sep 30 00:58:41.006659 2026] [security2:error] [pid 187269:tid 187297] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wildingproperties.magia.vegas"] [uri "/wp-config.php.bak"] [unique_id "aryzIdFcyhWr7HDzNGmGiAACMxQ"]
[Wed Sep 30 00:58:41.017123 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.017380 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.031474 2026] [security2:error] [pid 186850:tid 186938] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/.netrc.bak"] [unique_id "aryzIU5Phls--iYlcKgLgQABDVc"]
[Wed Sep 30 00:58:41.036349 2026] [security2:error] [pid 187269:tid 187295] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/.netrc.bak"] [unique_id "aryzIdFcyhWr7HDzNGmGjQACdxI"]
[Wed Sep 30 00:58:41.039039 2026] [security2:error] [pid 187269:tid 187516] [client 13.70.4.78:59199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/groud3.php"] [unique_id "aryzIdFcyhWr7HDzNGmGkQAAAoI"]
[Wed Sep 30 00:58:41.050599 2026] [security2:error] [pid 187269:tid 187325] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/administrator/.env"] [unique_id "aryzIdFcyhWr7HDzNGmGiwACdzA"]
[Wed Sep 30 00:58:41.057299 2026] [security2:error] [pid 186850:tid 186922] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/apps/.env"] [unique_id "aryzIU5Phls--iYlcKgLiQABDUc"]
[Wed Sep 30 00:58:41.067583 2026] [security2:error] [pid 186850:tid 186943] [remote 35.240.58.49:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.com"] [uri "/administrator/.env"] [unique_id "aryzIU5Phls--iYlcKgLfgABDVw"]
[Wed Sep 30 00:58:41.081953 2026] [security2:error] [pid 187269:tid 187345] [remote 35.240.58.49:51458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wildingproperties.magia.vegas"] [uri "/apps/.env"] [unique_id "aryzIdFcyhWr7HDzNGmGmwACd0Q"]
[Wed Sep 30 00:58:41.108003 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.108417 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.202857 2026] [security2:error] [pid 186850:tid 187062] [client 20.198.74.230:34832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/1xmomo.php"] [unique_id "aryzIU5Phls--iYlcKgLkAAAAVw"]
[Wed Sep 30 00:58:41.212786 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.213088 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.237168 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:41.237575 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:41.292469 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.292731 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.308928 2026] [security2:error] [pid 186850:tid 187066] [client 20.194.30.107:17507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/kj.php"] [unique_id "aryzIU5Phls--iYlcKgLlAAAAWA"]
[Wed Sep 30 00:58:41.324594 2026] [security2:error] [pid 186850:tid 186990] [client 13.70.4.78:61985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/adminfuns.php"] [unique_id "aryzIU5Phls--iYlcKgLlQAAARQ"]
[Wed Sep 30 00:58:41.379531 2026] [security2:error] [pid 187269:tid 187447] [client 155.190.6.18:52864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzIdFcyhWr7HDzNGmGpAAAAj0"]
[Wed Sep 30 00:58:41.382791 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.383052 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.422398 2026] [security2:error] [pid 186850:tid 187079] [client 13.70.4.78:49457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/gaxby.php"] [unique_id "aryzIU5Phls--iYlcKgLmAAAAW0"]
[Wed Sep 30 00:58:41.466589 2026] [security2:error] [pid 186850:tid 187040] [client 13.70.1.101:15963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/post.php"] [unique_id "aryzIU5Phls--iYlcKgLnQAAAUY"]
[Wed Sep 30 00:58:41.473117 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.473387 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.550066 2026] [security2:error] [pid 186850:tid 186985] [client 20.219.2.60:18850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-block.php"] [unique_id "aryzIU5Phls--iYlcKgLogAAAQ8"]
[Wed Sep 30 00:58:41.567087 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.567508 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:44546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.601075 2026] [core:error] [pid 187269:tid 187510] [client 45.138.12.40:54498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:41.601099 2026] [core:error] [pid 187269:tid 187510] [client 45.138.12.40:54498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:41.650477 2026] [security2:error] [pid 187269:tid 187502] [client 216.73.216.46:44546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzIdFcyhWr7HDzNGmGsQAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnkxOTE%3D
[Wed Sep 30 00:58:41.658912 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.659357 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.665788 2026] [security2:error] [pid 187269:tid 187447] [client 155.190.6.18:52864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzIdFcyhWr7HDzNGmGpAAAAj0"]
[Wed Sep 30 00:58:41.698152 2026] [security2:error] [pid 186850:tid 187056] [client 20.213.164.196:10751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/adminfuns.php"] [unique_id "aryzIU5Phls--iYlcKgLqwAAAVY"]
[Wed Sep 30 00:58:41.748181 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.748466 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.759399 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:41.759681 2026] [access_compat:error] [pid 186850:tid 187039] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:41.791253 2026] [security2:error] [pid 187269:tid 187478] [client 13.70.1.101:15741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/themes.php"] [unique_id "aryzIdFcyhWr7HDzNGmGuQAAAlw"]
[Wed Sep 30 00:58:41.799130 2026] [security2:error] [pid 186850:tid 187004] [client 4.196.65.241:64130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/12.php"] [unique_id "aryzIU5Phls--iYlcKgLrQAAASI"]
[Wed Sep 30 00:58:41.806767 2026] [security2:error] [pid 186850:tid 187090] [client 13.70.4.78:49462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/dh9u7.php"] [unique_id "aryzIU5Phls--iYlcKgLrgAAAXg"]
[Wed Sep 30 00:58:41.828382 2026] [security2:error] [pid 187269:tid 187500] [client 13.70.4.78:24347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/alfa.php"] [unique_id "aryzIdFcyhWr7HDzNGmGugAAAnI"]
[Wed Sep 30 00:58:41.829076 2026] [security2:error] [pid 186850:tid 187033] [client 20.194.30.107:42929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzIU5Phls--iYlcKgLsQAAAT8"]
[Wed Sep 30 00:58:41.842661 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.843110 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:41.931504 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:41.931928 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.019498 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.019764 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.022722 2026] [security2:error] [pid 187269:tid 187449] [client 159.223.71.139:50373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/images/images/images/cache.php"] [unique_id "aryzItFcyhWr7HDzNGmGyAAAAj8"], referer: www.google.com
[Wed Sep 30 00:58:42.110776 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.111043 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.112646 2026] [security2:error] [pid 186850:tid 187075] [client 13.70.1.101:56282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aryzIk5Phls--iYlcKgLuwAAAWk"]
[Wed Sep 30 00:58:42.118577 2026] [security2:error] [pid 186850:tid 187082] [client 182.69.182.151:25261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgLvAAAAXA"]
[Wed Sep 30 00:58:42.119183 2026] [security2:error] [pid 186850:tid 187082] [client 182.69.182.151:25261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgLvAAAAXA"]
[Wed Sep 30 00:58:42.148529 2026] [security2:error] [pid 187269:tid 187493] [client 37.41.16.35:51043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzItFcyhWr7HDzNGmGywAAAms"]
[Wed Sep 30 00:58:42.148664 2026] [security2:error] [pid 187269:tid 187493] [client 37.41.16.35:51043] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzItFcyhWr7HDzNGmGywAAAms"]
[Wed Sep 30 00:58:42.171006 2026] [security2:error] [pid 187269:tid 187520] [client 20.219.19.141:46486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/mknobgkg.php"] [unique_id "aryzItFcyhWr7HDzNGmGzQAAAoY"]
[Wed Sep 30 00:58:42.204512 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.205262 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.213448 2026] [security2:error] [pid 187269:tid 187427] [client 13.70.4.78:49814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/yvnqcuic.php"] [unique_id "aryzItFcyhWr7HDzNGmG0wAAAik"]
[Wed Sep 30 00:58:42.293227 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.293497 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.311442 2026] [security2:error] [pid 187269:tid 187329] [remote 57.141.14.18:60470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "aryzItFcyhWr7HDzNGmG1AACLDQ"]
[Wed Sep 30 00:58:42.331990 2026] [security2:error] [pid 187269:tid 187450] [client 151.70.6.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzItFcyhWr7HDzNGmG2AAAAkA"]
[Wed Sep 30 00:58:42.334882 2026] [security2:error] [pid 187269:tid 187308] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzItFcyhWr7HDzNGmG2QACfx8"], referer: https://torquayfans.com/posting.php?mode=quote&p=199105
[Wed Sep 30 00:58:42.334907 2026] [security2:error] [pid 187269:tid 187308] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzItFcyhWr7HDzNGmG2QACfx8"], referer: https://torquayfans.com/posting.php?mode=quote&p=199105
[Wed Sep 30 00:58:42.338639 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:42.339073 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:42.384503 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.384767 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.393127 2026] [security2:error] [pid 186850:tid 187091] [client 13.70.4.78:24380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/222.php"] [unique_id "aryzIk5Phls--iYlcKgLxAAAAXk"]
[Wed Sep 30 00:58:42.405493 2026] [security2:error] [pid 187269:tid 187524] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzItFcyhWr7HDzNGmG3QAAAok"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:42.458366 2026] [security2:error] [pid 187269:tid 187485] [client 13.70.1.101:15733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryzItFcyhWr7HDzNGmG3gAAAmM"]
[Wed Sep 30 00:58:42.468705 2026] [security2:error] [pid 187269:tid 187452] [client 20.198.74.230:34847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/almafkew.php"] [unique_id "aryzItFcyhWr7HDzNGmG4AAAAkI"]
[Wed Sep 30 00:58:42.475675 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.475988 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.533336 2026] [security2:error] [pid 187269:tid 187483] [client 13.70.4.78:49443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/koiy.php"] [unique_id "aryzItFcyhWr7HDzNGmG4wAAAmE"]
[Wed Sep 30 00:58:42.564911 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.565184 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.612850 2026] [security2:error] [pid 187269:tid 187528] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzItFcyhWr7HDzNGmG7QAAAo0"]
[Wed Sep 30 00:58:42.656288 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.656548 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:10846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.712120 2026] [security2:error] [pid 186850:tid 187001] [client 103.241.204.139:55066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgLygAAAR8"]
[Wed Sep 30 00:58:42.712289 2026] [security2:error] [pid 186850:tid 187001] [client 103.241.204.139:55066] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgLygAAAR8"]
[Wed Sep 30 00:58:42.745672 2026] [access_compat:error] [pid 187269:tid 187412] [client 47.82.11.32:36488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:42.745945 2026] [access_compat:error] [pid 187269:tid 187412] [client 47.82.11.32:36488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:42.759720 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:42.759982 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:42.780117 2026] [security2:error] [pid 187269:tid 187424] [client 213.136.69.135:60749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-exception.php"] [unique_id "aryzItFcyhWr7HDzNGmG9wAAAiY"], referer: binance.com
[Wed Sep 30 00:58:42.794052 2026] [security2:error] [pid 187269:tid 187488] [client 13.70.1.101:15955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/click.php"] [unique_id "aryzItFcyhWr7HDzNGmG-QAAAmY"]
[Wed Sep 30 00:58:42.799344 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.799617 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.839312 2026] [security2:error] [pid 187269:tid 187514] [client 216.73.216.46:10846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzItFcyhWr7HDzNGmG-gAAAoA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OA%3D%3D
[Wed Sep 30 00:58:42.863393 2026] [security2:error] [pid 186850:tid 187078] [client 49.36.41.37:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgL0AAAAWw"]
[Wed Sep 30 00:58:42.863542 2026] [security2:error] [pid 186850:tid 187078] [client 49.36.41.37:53416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzIk5Phls--iYlcKgL0AAAAWw"]
[Wed Sep 30 00:58:42.890428 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:36687] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.890701 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:36687] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.924976 2026] [security2:error] [pid 186850:tid 187007] [client 20.213.164.196:10726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/av.php"] [unique_id "aryzIk5Phls--iYlcKgL1AAAASU"]
[Wed Sep 30 00:58:42.929253 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:42.929517 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:42.945309 2026] [security2:error] [pid 187269:tid 187473] [client 13.70.4.78:24369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzItFcyhWr7HDzNGmG_QAAAlc"]
[Wed Sep 30 00:58:43.009314 2026] [security2:error] [pid 187269:tid 187516] [client 4.240.25.22:21933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/b8.php"] [unique_id "aryzI9FcyhWr7HDzNGmHAwAAAoI"]
[Wed Sep 30 00:58:43.030779 2026] [security2:error] [pid 186850:tid 187079] [client 13.70.4.78:59142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wordfence-waf.php"] [unique_id "aryzI05Phls--iYlcKgL2AAAAW0"]
[Wed Sep 30 00:58:43.045418 2026] [security2:error] [pid 186850:tid 186995] [client 20.198.74.230:23891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/yachi.php"] [unique_id "aryzI05Phls--iYlcKgL2QAAARk"]
[Wed Sep 30 00:58:43.075399 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.075650 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.093074 2026] [security2:error] [pid 187269:tid 187427] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzI9FcyhWr7HDzNGmHBwAAAik"]
[Wed Sep 30 00:58:43.111099 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.111391 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.135155 2026] [security2:error] [pid 187269:tid 187529] [client 45.138.12.32:18082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vvs.rug.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzI9FcyhWr7HDzNGmHCgAAAo4"]
[Wed Sep 30 00:58:43.148855 2026] [security2:error] [pid 187269:tid 187425] [client 116.193.128.26:63285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHCwAAAic"]
[Wed Sep 30 00:58:43.148976 2026] [security2:error] [pid 187269:tid 187425] [client 116.193.128.26:63285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHCwAAAic"]
[Wed Sep 30 00:58:43.161903 2026] [security2:error] [pid 187269:tid 187461] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzI9FcyhWr7HDzNGmHDAAAAks"]
[Wed Sep 30 00:58:43.183385 2026] [security2:error] [pid 186850:tid 187019] [client 20.28.180.172:29483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/coffe.php"] [unique_id "aryzI05Phls--iYlcKgL4gAAATE"]
[Wed Sep 30 00:58:43.190768 2026] [security2:error] [pid 187269:tid 187441] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzI9FcyhWr7HDzNGmHDgAAAjc"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:43.201589 2026] [security2:error] [pid 187269:tid 187500] [client 150.107.232.159:36008] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHDwAAAnI"]
[Wed Sep 30 00:58:43.202330 2026] [security2:error] [pid 187269:tid 187500] [client 150.107.232.159:36008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHDwAAAnI"]
[Wed Sep 30 00:58:43.208525 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.208967 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.219140 2026] [security2:error] [pid 187269:tid 187419] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzI9FcyhWr7HDzNGmHEQAAAiE"]
[Wed Sep 30 00:58:43.242770 2026] [access_compat:error] [pid 186850:tid 187076] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:43.243065 2026] [access_compat:error] [pid 186850:tid 187076] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:43.271435 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.1.101:15723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/install.php"] [unique_id "aryzI9FcyhWr7HDzNGmHFQAAAnc"]
[Wed Sep 30 00:58:43.273513 2026] [security2:error] [pid 187269:tid 187442] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/Batch/v1"] [unique_id "aryzI9FcyhWr7HDzNGmHFAAAAjg"]
[Wed Sep 30 00:58:43.299037 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.299467 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.304374 2026] [security2:error] [pid 187269:tid 187532] [client 152.59.169.65:56842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHFgAAApE"]
[Wed Sep 30 00:58:43.313195 2026] [security2:error] [pid 187269:tid 187532] [client 152.59.169.65:56842] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHFgAAApE"]
[Wed Sep 30 00:58:43.365296 2026] [security2:error] [pid 186850:tid 187048] [client 13.70.4.78:49442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wp5.php"] [unique_id "aryzI05Phls--iYlcKgL6wAAAU4"]
[Wed Sep 30 00:58:43.379375 2026] [security2:error] [pid 187269:tid 187479] [client 13.70.4.78:24325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/images.php"] [unique_id "aryzI9FcyhWr7HDzNGmHFwAAAl0"]
[Wed Sep 30 00:58:43.387352 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.387611 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.438333 2026] [security2:error] [pid 187269:tid 187491] [client 20.194.30.107:17455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/wp.php"] [unique_id "aryzI9FcyhWr7HDzNGmHGQAAAmk"]
[Wed Sep 30 00:58:43.441257 2026] [security2:error] [pid 186850:tid 187062] [client 223.181.30.165:15097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzI05Phls--iYlcKgL7QAAAVw"]
[Wed Sep 30 00:58:43.441364 2026] [security2:error] [pid 186850:tid 187062] [client 223.181.30.165:15097] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzI05Phls--iYlcKgL7QAAAVw"]
[Wed Sep 30 00:58:43.477189 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.477455 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.568847 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.569114 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.634522 2026] [security2:error] [pid 186850:tid 186998] [client 20.213.164.196:10718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/dex.php"] [unique_id "aryzI05Phls--iYlcKgL8gAAARw"]
[Wed Sep 30 00:58:43.646418 2026] [security2:error] [pid 187269:tid 187482] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzI9FcyhWr7HDzNGmHHQAAAmA"]
[Wed Sep 30 00:58:43.659908 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.660196 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.661579 2026] [security2:error] [pid 187269:tid 187420] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzI9FcyhWr7HDzNGmHHwAAAiI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:43.692439 2026] [security2:error] [pid 187269:tid 187415] [client 13.70.1.101:56266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/13k.php"] [unique_id "aryzI9FcyhWr7HDzNGmHIgAAAh0"]
[Wed Sep 30 00:58:43.706981 2026] [security2:error] [pid 187269:tid 187502] [client 13.70.4.78:59146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/em.php"] [unique_id "aryzI9FcyhWr7HDzNGmHJAAAAnQ"]
[Wed Sep 30 00:58:43.712256 2026] [security2:error] [pid 187269:tid 187422] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1/"] [unique_id "aryzI9FcyhWr7HDzNGmHJQAAAiQ"]
[Wed Sep 30 00:58:43.733539 2026] [security2:error] [pid 187269:tid 187513] [client 103.159.192.142:49409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHJwAAAn8"]
[Wed Sep 30 00:58:43.733644 2026] [security2:error] [pid 187269:tid 187513] [client 103.159.192.142:49409] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzI9FcyhWr7HDzNGmHJwAAAn8"]
[Wed Sep 30 00:58:43.738867 2026] [security2:error] [pid 187269:tid 187494] [client 13.70.4.78:61965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/media.php"] [unique_id "aryzI9FcyhWr7HDzNGmHKAAAAmw"]
[Wed Sep 30 00:58:43.749492 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.749754 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.766654 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:43.766941 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:43.770341 2026] [security2:error] [pid 187269:tid 187447] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryzI9FcyhWr7HDzNGmHKQAAAj0"]
[Wed Sep 30 00:58:43.836982 2026] [security2:error] [pid 187269:tid 187534] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryzI9FcyhWr7HDzNGmHLgAAApM"]
[Wed Sep 30 00:58:43.841781 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.842087 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:39108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:43.864460 2026] [access_compat:error] [pid 187269:tid 187433] [client 47.79.13.27:45834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:43.864732 2026] [access_compat:error] [pid 187269:tid 187433] [client 47.79.13.27:45834] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:43.917616 2026] [fcgid:warn] [pid 187269:tid 187507] (70014)End of file found: [client 66.132.172.180:33194] mod_fcgid: can't get data from http client
[Wed Sep 30 00:58:43.930270 2026] [security2:error] [pid 186850:tid 187065] [client 216.73.216.46:36687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzI05Phls--iYlcKgL_gAAAV8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAwL25vZGUwL21lbW9yeTM%3D
[Wed Sep 30 00:58:43.934287 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:43.934547 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.010883 2026] [security2:error] [pid 187269:tid 187434] [client 216.73.216.46:39108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzJNFcyhWr7HDzNGmHNAAAAjA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTcvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzAx
[Wed Sep 30 00:58:44.014796 2026] [security2:error] [pid 187269:tid 187486] [client 20.28.180.172:36478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzJNFcyhWr7HDzNGmHNQAAAmQ"]
[Wed Sep 30 00:58:44.023073 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.023337 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.031901 2026] [security2:error] [pid 186850:tid 186993] [client 13.70.1.101:15996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/up.php"] [unique_id "aryzJE5Phls--iYlcKgMAgAAARc"]
[Wed Sep 30 00:58:44.042640 2026] [security2:error] [pid 186850:tid 187054] [client 103.172.210.103:53216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzJE5Phls--iYlcKgMAwAAAVQ"]
[Wed Sep 30 00:58:44.042761 2026] [security2:error] [pid 186850:tid 187054] [client 103.172.210.103:53216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzJE5Phls--iYlcKgMAwAAAVQ"]
[Wed Sep 30 00:58:44.047405 2026] [security2:error] [pid 187269:tid 187413] [client 103.168.67.253:2598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzJNFcyhWr7HDzNGmHOAAAAhs"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:44.070380 2026] [security2:error] [pid 187269:tid 187463] [client 13.70.4.78:24365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/mac.php"] [unique_id "aryzJNFcyhWr7HDzNGmHOgAAAk0"]
[Wed Sep 30 00:58:44.081588 2026] [security2:error] [pid 187269:tid 187476] [client 13.70.4.78:49466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/hp.php"] [unique_id "aryzJNFcyhWr7HDzNGmHOwAAAlo"]
[Wed Sep 30 00:58:44.116466 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.116754 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.206307 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.206616 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.289878 2026] [access_compat:error] [pid 186850:tid 187046] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:44.290363 2026] [access_compat:error] [pid 186850:tid 187046] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:44.296965 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.297283 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.388490 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.388769 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.441065 2026] [security2:error] [pid 187269:tid 187431] [client 13.70.4.78:24333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ops.php"] [unique_id "aryzJNFcyhWr7HDzNGmHRQAAAi0"]
[Wed Sep 30 00:58:44.443385 2026] [security2:error] [pid 187269:tid 187474] [client 20.213.164.196:10792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/chosen.php"] [unique_id "aryzJNFcyhWr7HDzNGmHRgAAAlg"]
[Wed Sep 30 00:58:44.477098 2026] [security2:error] [pid 187269:tid 187419] [client 20.219.2.60:18871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-signup.php"] [unique_id "aryzJNFcyhWr7HDzNGmHSQAAAiE"]
[Wed Sep 30 00:58:44.478485 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.478799 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.482893 2026] [security2:error] [pid 187269:tid 187450] [client 13.70.1.101:15937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/0x1949.php"] [unique_id "aryzJNFcyhWr7HDzNGmHSgAAAkA"]
[Wed Sep 30 00:58:44.505048 2026] [security2:error] [pid 187269:tid 187505] [client 4.196.65.241:64151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/worksec.php"] [unique_id "aryzJNFcyhWr7HDzNGmHTAAAAnc"]
[Wed Sep 30 00:58:44.548471 2026] [security2:error] [pid 187269:tid 187430] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzJNFcyhWr7HDzNGmHUQAAAiw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:44.569788 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.570092 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.571578 2026] [security2:error] [pid 186850:tid 187083] [client 13.70.4.78:59140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/wpuse.php"] [unique_id "aryzJE5Phls--iYlcKgMEwAAAXE"]
[Wed Sep 30 00:58:44.589025 2026] [security2:error] [pid 186850:tid 187013] [client 20.28.180.172:36470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzJE5Phls--iYlcKgMFAAAASs"]
[Wed Sep 30 00:58:44.650665 2026] [security2:error] [pid 187269:tid 187279] [remote 50.6.252.181:18430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.252.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "aryzJNFcyhWr7HDzNGmHWAACaQI"]
[Wed Sep 30 00:58:44.667495 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.668033 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.704121 2026] [security2:error] [pid 187269:tid 187303] [remote 50.6.252.181:18430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.252.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/wp-login.php"] [unique_id "aryzJNFcyhWr7HDzNGmHXAACcRo"], referer: https://impromptufridaynights.com/wp-login.php
[Wed Sep 30 00:58:44.752731 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.753056 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.757617 2026] [security2:error] [pid 187269:tid 187400] [remote 50.6.252.181:18430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.252.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "impromptufridaynights.com"] [uri "/xmlrpc.php"] [unique_id "aryzJNFcyhWr7HDzNGmHXgACSns"]
[Wed Sep 30 00:58:44.757852 2026] [security2:error] [pid 187269:tid 187460] [client 50.6.252.181:18430] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "impromptufridaynights.com"] [uri "/xmlrpc.php"] [unique_id "aryzJNFcyhWr7HDzNGmHXgACSns"]
[Wed Sep 30 00:58:44.765551 2026] [security2:error] [pid 187269:tid 187502] [client 20.70.173.30:18523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/wp.php"] [unique_id "aryzJNFcyhWr7HDzNGmHYAAAAnQ"]
[Wed Sep 30 00:58:44.768797 2026] [security2:error] [pid 186850:tid 187096] [client 13.70.4.78:24338] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.nicecongo.com"] [uri "/1.php"] [unique_id "aryzJE5Phls--iYlcKgMHgAAAX4"]
[Wed Sep 30 00:58:44.768941 2026] [security2:error] [pid 186850:tid 187096] [client 13.70.4.78:24338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/1.php"] [unique_id "aryzJE5Phls--iYlcKgMHgAAAX4"]
[Wed Sep 30 00:58:44.774891 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:44.775358 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:44.844068 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.844391 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.856189 2026] [security2:error] [pid 187269:tid 187510] [client 20.194.30.107:25883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/chosen.php"] [unique_id "aryzJNFcyhWr7HDzNGmHZAAAAnw"]
[Wed Sep 30 00:58:44.907917 2026] [security2:error] [pid 187269:tid 187483] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzJNFcyhWr7HDzNGmHZgAAAmE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:44.921455 2026] [security2:error] [pid 187269:tid 187534] [client 13.70.4.78:49437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/file18x.php"] [unique_id "aryzJNFcyhWr7HDzNGmHZwAAApM"]
[Wed Sep 30 00:58:44.933458 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:44.933670 2026] [security2:error] [pid 187269:tid 187497] [client 20.198.74.230:51405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/database2.php"] [unique_id "aryzJNFcyhWr7HDzNGmHaAAAAm8"]
[Wed Sep 30 00:58:44.933734 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:44.998125 2026] [security2:error] [pid 187269:tid 187412] [client 13.70.1.101:56308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/cong.php"] [unique_id "aryzJNFcyhWr7HDzNGmHbQAAAho"]
[Wed Sep 30 00:58:45.031463 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.032315 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.072593 2026] [security2:error] [pid 187269:tid 187462] [client 20.28.180.172:36457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/f35.update.php"] [unique_id "aryzJdFcyhWr7HDzNGmHbwAAAkw"]
[Wed Sep 30 00:58:45.079713 2026] [security2:error] [pid 186850:tid 186995] [client 103.63.227.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/led-lamp/"] [unique_id "aryzJU5Phls--iYlcKgMKQAAARk"]
[Wed Sep 30 00:58:45.103312 2026] [autoindex:error] [pid 187269:tid 187519] [client 212.156.70.154:45414] AH01276: Cannot serve directory /home4/xwdyqemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:45.119371 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.119884 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.138183 2026] [security2:error] [pid 187269:tid 187517] [client 13.70.4.78:24356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/aaa.php"] [unique_id "aryzJdFcyhWr7HDzNGmHdQAAAoM"]
[Wed Sep 30 00:58:45.205928 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.206187 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.264235 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:45.264684 2026] [access_compat:error] [pid 186850:tid 187019] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:45.284150 2026] [security2:error] [pid 187269:tid 187458] [client 13.70.4.78:49461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.manga.an-ime.com"] [uri "/123viva.php"] [unique_id "aryzJdFcyhWr7HDzNGmHdwAAAkg"]
[Wed Sep 30 00:58:45.297980 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.298267 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.387329 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.387579 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.394931 2026] [security2:error] [pid 186850:tid 187084] [client 45.138.12.32:18186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vut.rvy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzJU5Phls--iYlcKgMNAAAAXI"]
[Wed Sep 30 00:58:45.443414 2026] [security2:error] [pid 187269:tid 187441] [client 13.70.1.101:15727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/bs1.php"] [unique_id "aryzJdFcyhWr7HDzNGmHfgAAAjc"]
[Wed Sep 30 00:58:45.482007 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.482440 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.484756 2026] [security2:error] [pid 187269:tid 187450] [client 20.28.180.172:36450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/adminfuns.php"] [unique_id "aryzJdFcyhWr7HDzNGmHggAAAkA"]
[Wed Sep 30 00:58:45.556286 2026] [security2:error] [pid 187269:tid 187524] [client 20.213.164.196:10740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/radio.php"] [unique_id "aryzJdFcyhWr7HDzNGmHhgAAAok"]
[Wed Sep 30 00:58:45.574646 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.575076 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.637085 2026] [security2:error] [pid 187269:tid 187452] [client 45.138.12.41:18764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harmonicaworkshop.com"] [uri "/wp-links-opml.php"] [unique_id "aryzJdFcyhWr7HDzNGmHiAAAAkI"]
[Wed Sep 30 00:58:45.661191 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.661469 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.699205 2026] [security2:error] [pid 186850:tid 187105] [client 152.59.165.7:54654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzJU5Phls--iYlcKgMOwAAAYc"]
[Wed Sep 30 00:58:45.706461 2026] [security2:error] [pid 186850:tid 187105] [client 152.59.165.7:54654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzJU5Phls--iYlcKgMOwAAAYc"]
[Wed Sep 30 00:58:45.711023 2026] [security2:error] [pid 187269:tid 187504] [client 202.179.95.79:59719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzJdFcyhWr7HDzNGmHigAAAnY"]
[Wed Sep 30 00:58:45.711115 2026] [security2:error] [pid 187269:tid 187504] [client 202.179.95.79:59719] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzJdFcyhWr7HDzNGmHigAAAnY"]
[Wed Sep 30 00:58:45.737008 2026] [access_compat:error] [pid 186850:tid 187043] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:45.737381 2026] [access_compat:error] [pid 186850:tid 187043] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:45.746951 2026] [security2:error] [pid 186850:tid 187062] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzJU5Phls--iYlcKgMPwAAAVw"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:45.751225 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.751482 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.843385 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.843665 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.849395 2026] [security2:error] [pid 187269:tid 187421] [client 13.70.4.78:61971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/chosen.php"] [unique_id "aryzJdFcyhWr7HDzNGmHjQAAAiM"]
[Wed Sep 30 00:58:45.860161 2026] [security2:error] [pid 186850:tid 187004] [client 13.70.1.101:15702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryzJU5Phls--iYlcKgMQQAAASI"]
[Wed Sep 30 00:58:45.935313 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:45.935582 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:45.969860 2026] [security2:error] [pid 187269:tid 187408] [client 4.240.25.22:21532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/amax.php"] [unique_id "aryzJdFcyhWr7HDzNGmHkQAAAhY"]
[Wed Sep 30 00:58:46.026282 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.026566 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:57487] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.033125 2026] [security2:error] [pid 187269:tid 187453] [client 20.28.180.172:36377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzJtFcyhWr7HDzNGmHkwAAAkM"]
[Wed Sep 30 00:58:46.035856 2026] [lsapi:warn] [pid 187269:tid 187344] [remote 216.73.216.20:17106] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 00:58:46.035875 2026] [lsapi:warn] [pid 187269:tid 187344] [remote 216.73.216.20:17106] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 00:58:46.110771 2026] [security2:error] [pid 186850:tid 187028] [client 216.73.216.46:57487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzJk5Phls--iYlcKgMSgAAATo"]
[Wed Sep 30 00:58:46.117759 2026] [security2:error] [pid 187269:tid 187412] [client 20.213.164.196:10690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzJtFcyhWr7HDzNGmHlwAAAho"]
[Wed Sep 30 00:58:46.219210 2026] [security2:error] [pid 187269:tid 187448] [client 13.70.4.78:61998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/2P.php"] [unique_id "aryzJtFcyhWr7HDzNGmHmwAAAj4"]
[Wed Sep 30 00:58:46.229602 2026] [security2:error] [pid 187269:tid 187488] [client 13.70.1.101:15992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/termps.php"] [unique_id "aryzJtFcyhWr7HDzNGmHnQAAAmY"]
[Wed Sep 30 00:58:46.237509 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:46.237764 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:46.260662 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.260978 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.268777 2026] [security2:error] [pid 187269:tid 187519] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzJtFcyhWr7HDzNGmHngAAAoU"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:46.295954 2026] [security2:error] [pid 186850:tid 187035] [client 203.122.45.246:62815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzJk5Phls--iYlcKgMTQAAAUE"]
[Wed Sep 30 00:58:46.296073 2026] [security2:error] [pid 186850:tid 187035] [client 203.122.45.246:62815] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzJk5Phls--iYlcKgMTQAAAUE"]
[Wed Sep 30 00:58:46.350101 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.350388 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.390440 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.390833 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.422311 2026] [security2:error] [pid 186850:tid 187097] [client 4.196.65.241:27316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/xcrarnkpo.php"] [unique_id "aryzJk5Phls--iYlcKgMUwAAAX8"]
[Wed Sep 30 00:58:46.423570 2026] [security2:error] [pid 187269:tid 187459] [client 20.28.180.172:36474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzJtFcyhWr7HDzNGmHowAAAkk"]
[Wed Sep 30 00:58:46.481236 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.481540 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.485674 2026] [security2:error] [pid 187269:tid 187466] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzJtFcyhWr7HDzNGmHpgAAAlA"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:46.508519 2026] [security2:error] [pid 186850:tid 187069] [client 159.223.71.139:64937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/images/images/cache.php"] [unique_id "aryzJk5Phls--iYlcKgMVgAAAWM"], referer: www.google.com
[Wed Sep 30 00:58:46.546461 2026] [security2:error] [pid 187269:tid 187423] [client 4.196.65.241:19457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/bnmtp.php"] [unique_id "aryzJtFcyhWr7HDzNGmHqAAAAiU"]
[Wed Sep 30 00:58:46.568550 2026] [security2:error] [pid 186850:tid 187091] [client 13.70.1.101:16186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/brand.php"] [unique_id "aryzJk5Phls--iYlcKgMWgAAAXk"]
[Wed Sep 30 00:58:46.576022 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.576335 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.592714 2026] [security2:error] [pid 186850:tid 187027] [client 13.70.4.78:61981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/min.php"] [unique_id "aryzJk5Phls--iYlcKgMWwAAATk"]
[Wed Sep 30 00:58:46.625500 2026] [security2:error] [pid 187269:tid 187527] [client 20.194.30.107:47850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzJtFcyhWr7HDzNGmHqgAAAow"]
[Wed Sep 30 00:58:46.664302 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.664578 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.668763 2026] [security2:error] [pid 187269:tid 187533] [client 161.123.99.199:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryzJtFcyhWr7HDzNGmHrQAAApI"]
[Wed Sep 30 00:58:46.698693 2026] [security2:error] [pid 187269:tid 187515] [client 72.255.10.32:49887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzJtFcyhWr7HDzNGmHrgAAAoE"]
[Wed Sep 30 00:58:46.698797 2026] [security2:error] [pid 187269:tid 187515] [client 72.255.10.32:49887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzJtFcyhWr7HDzNGmHrgAAAoE"]
[Wed Sep 30 00:58:46.752524 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.752793 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.766098 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:46.766373 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:46.839159 2026] [security2:error] [pid 187269:tid 187424] [client 43.227.131.37:7866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzJtFcyhWr7HDzNGmHswAAAiY"]
[Wed Sep 30 00:58:46.839271 2026] [security2:error] [pid 187269:tid 187424] [client 43.227.131.37:7866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzJtFcyhWr7HDzNGmHswAAAiY"]
[Wed Sep 30 00:58:46.844573 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.844845 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.915470 2026] [security2:error] [pid 187269:tid 187440] [client 177.136.100.138:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/led-lamp/"] [unique_id "aryzJtFcyhWr7HDzNGmHuAAAAjY"]
[Wed Sep 30 00:58:46.935033 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:46.935308 2026] [access_compat:error] [pid 187269:tid 187432] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:46.947013 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:24328] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/css/"] [unique_id "aryzJtFcyhWr7HDzNGmHugAAAn4"]
[Wed Sep 30 00:58:46.963291 2026] [security2:error] [pid 186850:tid 186983] [client 20.219.2.60:19433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-xmlsia.php"] [unique_id "aryzJk5Phls--iYlcKgMYAAAAQ0"]
[Wed Sep 30 00:58:46.971162 2026] [security2:error] [pid 187269:tid 187429] [client 13.70.1.101:15958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/atomlib.php"] [unique_id "aryzJtFcyhWr7HDzNGmHvQAAAis"]
[Wed Sep 30 00:58:47.011549 2026] [security2:error] [pid 187269:tid 187480] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzJ9FcyhWr7HDzNGmHvwAAAl4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:47.030322 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.030744 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.119687 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.119968 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.200887 2026] [security2:error] [pid 187269:tid 187442] [client 20.219.19.141:23981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/dairg.php"] [unique_id "aryzJ9FcyhWr7HDzNGmHzAAAAjg"]
[Wed Sep 30 00:58:47.205426 2026] [security2:error] [pid 187269:tid 187506] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzJ9FcyhWr7HDzNGmHzQAAAng"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:47.209605 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.209879 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.239003 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:47.239281 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:47.270560 2026] [security2:error] [pid 186850:tid 187066] [client 187.189.28.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryzJ05Phls--iYlcKgMaAAAAWA"]
[Wed Sep 30 00:58:47.287786 2026] [security2:error] [pid 186850:tid 187009] [client 106.214.3.140:32352] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzJ05Phls--iYlcKgMaQAAASc"]
[Wed Sep 30 00:58:47.287999 2026] [security2:error] [pid 186850:tid 187009] [client 106.214.3.140:32352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzJ05Phls--iYlcKgMaQAAASc"]
[Wed Sep 30 00:58:47.289535 2026] [security2:error] [pid 186850:tid 186931] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMagABYVA"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=aa35a76e45e06d11135a3f9ecee75e21
[Wed Sep 30 00:58:47.289558 2026] [security2:error] [pid 186850:tid 186931] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMagABYVA"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=aa35a76e45e06d11135a3f9ecee75e21
[Wed Sep 30 00:58:47.300562 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.300839 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.301474 2026] [security2:error] [pid 187269:tid 187482] [client 20.28.180.172:36476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/av.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH0QAAAmA"]
[Wed Sep 30 00:58:47.315935 2026] [security2:error] [pid 186850:tid 187079] [client 20.198.74.230:23924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/bgmlktrf.php"] [unique_id "aryzJ05Phls--iYlcKgMbQAAAW0"]
[Wed Sep 30 00:58:47.358474 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.4.78:24361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/great.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH0gAAAmQ"]
[Wed Sep 30 00:58:47.368088 2026] [security2:error] [pid 187269:tid 187462] [client 20.213.164.196:10808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/k.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH1QAAAkw"]
[Wed Sep 30 00:58:47.390843 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.391090 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.418501 2026] [security2:error] [pid 187269:tid 187488] [client 13.70.1.101:15988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/product.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH2QAAAmY"]
[Wed Sep 30 00:58:47.458961 2026] [security2:error] [pid 186850:tid 186956] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMbgABGWk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=245c45fb0046eee14d08ab42a81e2d07&start=225&t=21812
[Wed Sep 30 00:58:47.458992 2026] [security2:error] [pid 186850:tid 186956] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMbgABGWk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=245c45fb0046eee14d08ab42a81e2d07&start=225&t=21812
[Wed Sep 30 00:58:47.482446 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.482710 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.555248 2026] [security2:error] [pid 187269:tid 187517] [client 45.138.12.32:32044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vjw.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH3AAAAoM"]
[Wed Sep 30 00:58:47.575840 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.576264 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.625192 2026] [security2:error] [pid 187269:tid 187465] [client 49.205.105.16:13829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH4AAAAk8"]
[Wed Sep 30 00:58:47.625303 2026] [security2:error] [pid 187269:tid 187465] [client 49.205.105.16:13829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH4AAAAk8"]
[Wed Sep 30 00:58:47.664765 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.665031 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.665523 2026] [security2:error] [pid 187269:tid 187427] [client 20.198.74.230:41401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/aa.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH5wAAAik"]
[Wed Sep 30 00:58:47.756552 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:47.756833 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:47.781736 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:47.782001 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:47.855290 2026] [security2:error] [pid 186850:tid 187019] [client 20.219.19.141:46511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/dronishness.php"] [unique_id "aryzJ05Phls--iYlcKgMdgAAATE"]
[Wed Sep 30 00:58:47.872792 2026] [access_compat:error] [pid 187269:tid 187420] [client 47.79.13.1:45964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:47.873061 2026] [access_compat:error] [pid 187269:tid 187420] [client 47.79.13.1:45964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:47.883041 2026] [security2:error] [pid 186850:tid 187040] [client 13.70.4.78:24358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/BDKR28WP.php"] [unique_id "aryzJ05Phls--iYlcKgMdwAAAUY"]
[Wed Sep 30 00:58:47.944067 2026] [security2:error] [pid 187269:tid 187505] [client 13.70.1.101:56310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/function.php"] [unique_id "aryzJ9FcyhWr7HDzNGmH8wAAAnc"]
[Wed Sep 30 00:58:47.969223 2026] [security2:error] [pid 186850:tid 186945] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMeQABS14"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18183&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:58:47.969249 2026] [security2:error] [pid 186850:tid 186945] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzJ05Phls--iYlcKgMeQABS14"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18183&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:58:48.007777 2026] [security2:error] [pid 187269:tid 187496] [client 20.219.2.60:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.crictconsulting.com"] [uri "/wp-inic3.php"] [unique_id "aryzKNFcyhWr7HDzNGmH9gAAAm4"]
[Wed Sep 30 00:58:48.050653 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.050926 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.108131 2026] [security2:error] [pid 186850:tid 187031] [client 4.240.25.22:11564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/w.php"] [unique_id "aryzKE5Phls--iYlcKgMegAAAT0"]
[Wed Sep 30 00:58:48.133475 2026] [security2:error] [pid 187269:tid 187484] [client 20.213.164.196:10705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/133.php"] [unique_id "aryzKNFcyhWr7HDzNGmH_gAAAmI"]
[Wed Sep 30 00:58:48.142585 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.142876 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.227304 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:48.227594 2026] [access_compat:error] [pid 186850:tid 186999] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:48.230371 2026] [security2:error] [pid 187269:tid 187430] [client 13.70.4.78:23943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/gigi.php"] [unique_id "aryzKNFcyhWr7HDzNGmIAQAAAiw"]
[Wed Sep 30 00:58:48.232819 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.233108 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:41247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.254352 2026] [security2:error] [pid 187269:tid 187410] [client 20.28.180.172:36365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/dex.php"] [unique_id "aryzKNFcyhWr7HDzNGmIAgAAAhg"]
[Wed Sep 30 00:58:48.327680 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.328120 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.392320 2026] [security2:error] [pid 187269:tid 187428] [client 13.70.1.101:15700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/0x.php"] [unique_id "aryzKNFcyhWr7HDzNGmIBgAAAio"]
[Wed Sep 30 00:58:48.413058 2026] [security2:error] [pid 187269:tid 187406] [client 216.73.216.46:41247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzKNFcyhWr7HDzNGmICAAAAhQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTYx
[Wed Sep 30 00:58:48.414366 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.414626 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.446185 2026] [security2:error] [pid 187269:tid 187421] [client 74.7.242.1:34080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzKNFcyhWr7HDzNGmIDgAAAiM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:58:48.505997 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.506441 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.573757 2026] [security2:error] [pid 187269:tid 187472] [client 13.70.4.78:61993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ant.php"] [unique_id "aryzKNFcyhWr7HDzNGmIFwAAAlY"]
[Wed Sep 30 00:58:48.597029 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.597312 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.687490 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.687766 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.767842 2026] [security2:error] [pid 187269:tid 187493] [client 45.138.12.32:18280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcn.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzKNFcyhWr7HDzNGmIGgAAAms"]
[Wed Sep 30 00:58:48.778800 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.779063 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.806475 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:48.806732 2026] [access_compat:error] [pid 186850:tid 187089] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:48.870199 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.870478 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.889528 2026] [security2:error] [pid 186850:tid 187065] [client 20.194.30.107:17508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kcd-global.com"] [uri "/users.php"] [unique_id "aryzKE5Phls--iYlcKgMlQAAAV8"]
[Wed Sep 30 00:58:48.912337 2026] [security2:error] [pid 186850:tid 187082] [client 13.70.4.78:24324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/uejvv.php"] [unique_id "aryzKE5Phls--iYlcKgMlgAAAXA"]
[Wed Sep 30 00:58:48.930356 2026] [security2:error] [pid 187269:tid 187451] [client 20.28.180.172:36439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/chosen.php"] [unique_id "aryzKNFcyhWr7HDzNGmIIQAAAkE"]
[Wed Sep 30 00:58:48.936565 2026] [security2:error] [pid 187269:tid 187529] [client 13.70.1.101:15729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/index.php"] [unique_id "aryzKNFcyhWr7HDzNGmIIwAAAo4"]
[Wed Sep 30 00:58:48.962333 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:48.962725 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:48.981834 2026] [security2:error] [pid 187269:tid 187418] [client 116.72.182.19:49633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzKNFcyhWr7HDzNGmIJAAAAiA"]
[Wed Sep 30 00:58:48.981981 2026] [security2:error] [pid 187269:tid 187418] [client 116.72.182.19:49633] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzKNFcyhWr7HDzNGmIJAAAAiA"]
[Wed Sep 30 00:58:49.052141 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.052430 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.075580 2026] [security2:error] [pid 186850:tid 187103] [client 20.219.19.141:46501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/Row_wsoo.php"] [unique_id "aryzKU5Phls--iYlcKgMmQAAAYU"]
[Wed Sep 30 00:58:49.117411 2026] [security2:error] [pid 186850:tid 187039] [client 45.138.12.32:18284] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.lfm.ieo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzKU5Phls--iYlcKgMnAAAAUU"]
[Wed Sep 30 00:58:49.141570 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.141844 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.233772 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.234048 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.246561 2026] [security2:error] [pid 187269:tid 187458] [client 20.70.173.30:59562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/admin.php"] [unique_id "aryzKdFcyhWr7HDzNGmIKAAAAkg"]
[Wed Sep 30 00:58:49.288235 2026] [security2:error] [pid 187269:tid 187443] [client 13.70.4.78:61988] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aryzKdFcyhWr7HDzNGmIKwAAAjk"]
[Wed Sep 30 00:58:49.309129 2026] [security2:error] [pid 187269:tid 187504] [client 4.240.25.22:21910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/dex.php"] [unique_id "aryzKdFcyhWr7HDzNGmILAAAAnY"]
[Wed Sep 30 00:58:49.328801 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.329265 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.342179 2026] [security2:error] [pid 187269:tid 187484] [client 45.138.12.32:18282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcr.uvv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzKdFcyhWr7HDzNGmILQAAAmI"]
[Wed Sep 30 00:58:49.417987 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.418269 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.469126 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:49.469537 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:49.498216 2026] [security2:error] [pid 187269:tid 187526] [client 13.70.1.101:15721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryzKdFcyhWr7HDzNGmIMgAAAos"]
[Wed Sep 30 00:58:49.508225 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.508490 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.559665 2026] [security2:error] [pid 187269:tid 187436] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzKdFcyhWr7HDzNGmINgAAAjI"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:49.568313 2026] [security2:error] [pid 186850:tid 187070] [client 117.72.168.90:45004] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "aryzKU5Phls--iYlcKgMoAAAAWQ"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 00:58:49.601268 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.601683 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.660144 2026] [security2:error] [pid 187269:tid 187442] [client 20.213.164.196:10793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wsd.php"] [unique_id "aryzKdFcyhWr7HDzNGmIOQAAAjg"]
[Wed Sep 30 00:58:49.733963 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.734244 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.738566 2026] [security2:error] [pid 187269:tid 187524] [client 45.138.12.40:63940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jayariken.ca"] [uri "/wp-links-opml.php"] [unique_id "aryzKdFcyhWr7HDzNGmIPQAAAok"]
[Wed Sep 30 00:58:49.753099 2026] [security2:error] [pid 187269:tid 187510] [client 20.28.180.172:36396] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/1.php"] [unique_id "aryzKdFcyhWr7HDzNGmIPgAAAnw"]
[Wed Sep 30 00:58:49.753209 2026] [security2:error] [pid 187269:tid 187510] [client 20.28.180.172:36396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/1.php"] [unique_id "aryzKdFcyhWr7HDzNGmIPgAAAnw"]
[Wed Sep 30 00:58:49.758936 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:49.759232 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:49.806151 2026] [security2:error] [pid 187269:tid 187417] [client 20.28.180.172:34259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/zpslrqry.php"] [unique_id "aryzKdFcyhWr7HDzNGmIQQAAAh8"]
[Wed Sep 30 00:58:49.833700 2026] [security2:error] [pid 187269:tid 187408] [client 13.70.1.101:15714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/classwithtostring.php"] [unique_id "aryzKdFcyhWr7HDzNGmIRwAAAhY"]
[Wed Sep 30 00:58:49.852848 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.853127 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.874231 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.874505 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:49.963931 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:49.964205 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.026311 2026] [security2:error] [pid 187269:tid 187463] [client 4.240.25.22:30776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/chosen.php"] [unique_id "aryzKtFcyhWr7HDzNGmIUwAAAk0"]
[Wed Sep 30 00:58:50.032712 2026] [security2:error] [pid 187269:tid 187407] [client 13.70.4.78:24364] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aryzKtFcyhWr7HDzNGmIVAAAAhU"]
[Wed Sep 30 00:58:50.057363 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.057643 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.133782 2026] [access_compat:error] [pid 186850:tid 187053] [client 47.79.13.176:41040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.134052 2026] [access_compat:error] [pid 186850:tid 187053] [client 47.79.13.176:41040] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.147604 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.147875 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.179338 2026] [security2:error] [pid 187269:tid 187491] [client 223.235.102.107:7071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIWAAAAmk"]
[Wed Sep 30 00:58:50.179467 2026] [security2:error] [pid 187269:tid 187491] [client 223.235.102.107:7071] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIWAAAAmk"]
[Wed Sep 30 00:58:50.180060 2026] [security2:error] [pid 186850:tid 187007] [client 13.70.1.101:15688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/dropdown.php"] [unique_id "aryzKk5Phls--iYlcKgMvAAAASU"]
[Wed Sep 30 00:58:50.241314 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.241623 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.245847 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:50.246254 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:50.331320 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.331590 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.388987 2026] [security2:error] [pid 187269:tid 187496] [client 13.70.4.78:61989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/file.php"] [unique_id "aryzKtFcyhWr7HDzNGmIYQAAAm4"]
[Wed Sep 30 00:58:50.409802 2026] [security2:error] [pid 187269:tid 187437] [client 20.28.180.172:36357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/radio.php"] [unique_id "aryzKtFcyhWr7HDzNGmIYgAAAjM"]
[Wed Sep 30 00:58:50.410798 2026] [security2:error] [pid 187269:tid 187441] [client 45.138.12.32:18290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wdp.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzKtFcyhWr7HDzNGmIYwAAAjc"]
[Wed Sep 30 00:58:50.422387 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.422654 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.434523 2026] [security2:error] [pid 186850:tid 186896] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzKk5Phls--iYlcKgMxwABXS0"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D54097
[Wed Sep 30 00:58:50.455486 2026] [security2:error] [pid 187269:tid 187445] [client 116.197.133.25:63365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIZwAAAjs"]
[Wed Sep 30 00:58:50.455706 2026] [security2:error] [pid 187269:tid 187445] [client 116.197.133.25:63365] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIZwAAAjs"]
[Wed Sep 30 00:58:50.485236 2026] [security2:error] [pid 186850:tid 187045] [client 4.240.25.22:43820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/aaa.php"] [unique_id "aryzKk5Phls--iYlcKgMyAAAAUs"]
[Wed Sep 30 00:58:50.512639 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.512929 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.542978 2026] [security2:error] [pid 186850:tid 187068] [client 13.70.1.101:56281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/moon.php"] [unique_id "aryzKk5Phls--iYlcKgMywAAAWI"]
[Wed Sep 30 00:58:50.587890 2026] [security2:error] [pid 186850:tid 187005] [client 4.196.65.241:19086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/mssrt.php"] [unique_id "aryzKk5Phls--iYlcKgMzQAAASM"]
[Wed Sep 30 00:58:50.589997 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzKk5Phls--iYlcKgMzAABHXs"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=ce91a9fff491a8aa924e2059b22b8e85
[Wed Sep 30 00:58:50.590033 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzKk5Phls--iYlcKgMzAABHXs"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=ce91a9fff491a8aa924e2059b22b8e85
[Wed Sep 30 00:58:50.603548 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.603830 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.649115 2026] [access_compat:error] [pid 186850:tid 187034] [client 47.79.13.213:35344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.649391 2026] [access_compat:error] [pid 186850:tid 187034] [client 47.79.13.213:35344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.695148 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.695416 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.727394 2026] [security2:error] [pid 187269:tid 187530] [client 103.159.192.142:49558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIbAAAAo8"]
[Wed Sep 30 00:58:50.727536 2026] [security2:error] [pid 187269:tid 187530] [client 103.159.192.142:49558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIbAAAAo8"]
[Wed Sep 30 00:58:50.756318 2026] [security2:error] [pid 186850:tid 187062] [client 13.70.4.78:24378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/elements.php"] [unique_id "aryzKk5Phls--iYlcKgM1QAAAVw"]
[Wed Sep 30 00:58:50.763347 2026] [security2:error] [pid 187269:tid 187418] [client 223.181.60.167:15964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIbQAAAiA"]
[Wed Sep 30 00:58:50.763465 2026] [security2:error] [pid 187269:tid 187418] [client 223.181.60.167:15964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzKtFcyhWr7HDzNGmIbQAAAiA"]
[Wed Sep 30 00:58:50.785654 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.785965 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.798380 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:50.798634 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:50.806777 2026] [access_compat:error] [pid 186850:tid 187057] [client 47.79.13.78:58554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.807066 2026] [access_compat:error] [pid 186850:tid 187057] [client 47.79.13.78:58554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:50.814591 2026] [security2:error] [pid 187269:tid 187410] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzKtFcyhWr7HDzNGmIcAAAAhg"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:50.868892 2026] [security2:error] [pid 187269:tid 187477] [client 45.138.12.32:32112] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ley.xio.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzKtFcyhWr7HDzNGmIcQAAAls"]
[Wed Sep 30 00:58:50.880128 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.880456 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.880552 2026] [security2:error] [pid 187269:tid 187406] [client 13.70.1.101:59993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/autoload_classmap.php"] [unique_id "aryzKtFcyhWr7HDzNGmIcgAAAhQ"]
[Wed Sep 30 00:58:50.897449 2026] [security2:error] [pid 187269:tid 187415] [client 20.213.164.196:10809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/BDKR28WP.php"] [unique_id "aryzKtFcyhWr7HDzNGmIcwAAAh0"]
[Wed Sep 30 00:58:50.969298 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:50.969567 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:50.989495 2026] [security2:error] [pid 187269:tid 187417] [client 20.70.173.30:60023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/inputs.php"] [unique_id "aryzKtFcyhWr7HDzNGmIdQAAAh8"]
[Wed Sep 30 00:58:51.011878 2026] [security2:error] [pid 186850:tid 187029] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "aryzK05Phls--iYlcKgM4QAAATs"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:51.048539 2026] [security2:error] [pid 186850:tid 187021] [client 20.28.180.172:36380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/blacks.php"] [unique_id "aryzK05Phls--iYlcKgM4gAAATM"]
[Wed Sep 30 00:58:51.048776 2026] [core:error] [pid 187269:tid 187430] [client 65.111.6.135:65035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:51.048789 2026] [core:error] [pid 187269:tid 187430] [client 65.111.6.135:65035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:58:51.061014 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.061313 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.151641 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.151935 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.172272 2026] [access_compat:error] [pid 187269:tid 187442] [client 47.79.13.53:33508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.172705 2026] [access_compat:error] [pid 187269:tid 187442] [client 47.79.13.53:33508] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.198412 2026] [security2:error] [pid 187269:tid 187525] [client 45.138.12.32:32140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vvs.rug.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzK9FcyhWr7HDzNGmIhgAAAoo"]
[Wed Sep 30 00:58:51.214543 2026] [security2:error] [pid 187269:tid 187482] [client 13.70.1.101:15732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/default.php"] [unique_id "aryzK9FcyhWr7HDzNGmIigAAAmA"]
[Wed Sep 30 00:58:51.247360 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.247831 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.258498 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:51.258946 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:51.287234 2026] [security2:error] [pid 187269:tid 187425] [client 13.70.4.78:61957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/sitemap.php"] [unique_id "aryzK9FcyhWr7HDzNGmIjQAAAic"]
[Wed Sep 30 00:58:51.312725 2026] [security2:error] [pid 187269:tid 187527] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzK9FcyhWr7HDzNGmIjwAAAow"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:51.318414 2026] [autoindex:error] [pid 186850:tid 187008] [client 43.154.127.188:45640] AH01276: Cannot serve directory /home4/accessar/public_html/easytrack/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.easytrack.af
[Wed Sep 30 00:58:51.341446 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.341906 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.403035 2026] [security2:error] [pid 187269:tid 187426] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzK9FcyhWr7HDzNGmIkwAAAig"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:51.426286 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.426548 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.464974 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.78:58566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.465439 2026] [access_compat:error] [pid 187269:tid 187422] [client 47.79.13.78:58566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.496426 2026] [access_compat:error] [pid 186850:tid 187054] [client 47.79.13.1:45968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.496819 2026] [access_compat:error] [pid 186850:tid 187054] [client 47.79.13.1:45968] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.516333 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.516612 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.536856 2026] [security2:error] [pid 187269:tid 187444] [client 20.194.30.107:1402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzK9FcyhWr7HDzNGmIlgAAAjo"]
[Wed Sep 30 00:58:51.551822 2026] [security2:error] [pid 187269:tid 187419] [client 20.28.180.172:36352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/run.php"] [unique_id "aryzK9FcyhWr7HDzNGmIlwAAAiE"]
[Wed Sep 30 00:58:51.564089 2026] [security2:error] [pid 187269:tid 187432] [client 13.70.1.101:15701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryzK9FcyhWr7HDzNGmImAAAAi4"]
[Wed Sep 30 00:58:51.607188 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.607461 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.614467 2026] [access_compat:error] [pid 186850:tid 187051] [client 47.79.13.175:40384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.614734 2026] [access_compat:error] [pid 186850:tid 187051] [client 47.79.13.175:40384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:51.647508 2026] [security2:error] [pid 187269:tid 187424] [client 13.70.4.78:24371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/xetmolxr.php"] [unique_id "aryzK9FcyhWr7HDzNGmImwAAAiY"]
[Wed Sep 30 00:58:51.681367 2026] [autoindex:error] [pid 187269:tid 187473] [client 212.156.70.154:30465] AH01276: Cannot serve directory /home4/yactrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:51.698095 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.698365 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:31659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.744365 2026] [security2:error] [pid 187269:tid 187450] [client 20.219.19.141:46517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/x2.php"] [unique_id "aryzK9FcyhWr7HDzNGmInQAAAkA"]
[Wed Sep 30 00:58:51.761651 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:51.761968 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:58:51.788699 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.788985 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.794223 2026] [security2:error] [pid 187269:tid 187443] [client 20.198.74.230:41407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/pJPoKA.php"] [unique_id "aryzK9FcyhWr7HDzNGmIoQAAAjk"]
[Wed Sep 30 00:58:51.796753 2026] [security2:error] [pid 187269:tid 187475] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/Batch/v1"] [unique_id "aryzK9FcyhWr7HDzNGmIogAAAlk"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:51.831926 2026] [security2:error] [pid 187269:tid 187467] [client 45.138.12.32:32182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ley.xio.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzK9FcyhWr7HDzNGmIpAAAAlE"]
[Wed Sep 30 00:58:51.833236 2026] [security2:error] [pid 186850:tid 187013] [client 45.156.62.96:56369] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzK05Phls--iYlcKgNBAAAASs"]
[Wed Sep 30 00:58:51.833381 2026] [security2:error] [pid 186850:tid 187013] [client 45.156.62.96:56369] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzK05Phls--iYlcKgNBAAAASs"]
[Wed Sep 30 00:58:51.883063 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:51.883489 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:51.892570 2026] [security2:error] [pid 186850:tid 187067] [client 216.73.216.46:31659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzK05Phls--iYlcKgNBwAAAWE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OC9kcml2ZXIvY3B1MQ%3D%3D
[Wed Sep 30 00:58:51.969164 2026] [security2:error] [pid 186850:tid 187012] [client 13.70.1.101:15706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/fucku.php"] [unique_id "aryzK05Phls--iYlcKgNDgAAASo"]
[Wed Sep 30 00:58:52.000035 2026] [security2:error] [pid 187269:tid 187433] [client 13.70.4.78:61963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/mini.php"] [unique_id "aryzK9FcyhWr7HDzNGmIswAAAi8"]
[Wed Sep 30 00:58:52.029073 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.029532 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.038863 2026] [security2:error] [pid 187269:tid 187464] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzLNFcyhWr7HDzNGmIuAAAAk4"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:52.063663 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.063944 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.130830 2026] [security2:error] [pid 187269:tid 187442] [client 20.70.173.30:16259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/users.php"] [unique_id "aryzLNFcyhWr7HDzNGmIwQAAAjg"]
[Wed Sep 30 00:58:52.142310 2026] [security2:error] [pid 187269:tid 187525] [client 5.42.198.189:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzLNFcyhWr7HDzNGmIwgAAAoo"]
[Wed Sep 30 00:58:52.151575 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.151870 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.157019 2026] [security2:error] [pid 187269:tid 187533] [client 20.28.180.172:36460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/vpn.php"] [unique_id "aryzLNFcyhWr7HDzNGmIxAAAApI"]
[Wed Sep 30 00:58:52.242656 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.242933 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.253381 2026] [security2:error] [pid 186850:tid 187088] [client 155.190.6.18:52432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzLE5Phls--iYlcKgNFAAAAXY"]
[Wed Sep 30 00:58:52.260145 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:52.260429 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:52.289612 2026] [security2:error] [pid 186850:tid 186995] [client 45.138.12.32:32184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcn.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzLE5Phls--iYlcKgNFQAAARk"]
[Wed Sep 30 00:58:52.310260 2026] [security2:error] [pid 187269:tid 187431] [client 13.70.1.101:59975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aryzLNFcyhWr7HDzNGmI0QAAAi0"]
[Wed Sep 30 00:58:52.333671 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.333955 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.348224 2026] [security2:error] [pid 187269:tid 187438] [client 13.70.4.78:24382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/zwso.php"] [unique_id "aryzLNFcyhWr7HDzNGmI0wAAAjQ"]
[Wed Sep 30 00:58:52.424212 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.424606 2026] [access_compat:error] [pid 187269:tid 187422] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.502745 2026] [security2:error] [pid 187269:tid 187439] [client 20.213.164.196:10701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wmore1.php"] [unique_id "aryzLNFcyhWr7HDzNGmI2AAAAjU"]
[Wed Sep 30 00:58:52.532304 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.532573 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.540084 2026] [security2:error] [pid 186850:tid 187088] [client 155.190.6.18:52432] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzLE5Phls--iYlcKgNFAAAAXY"]
[Wed Sep 30 00:58:52.545147 2026] [access_compat:error] [pid 187269:tid 187461] [client 47.79.13.73:52036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:52.545425 2026] [access_compat:error] [pid 187269:tid 187461] [client 47.79.13.73:52036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:52.604337 2026] [autoindex:error] [pid 187269:tid 187473] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/files/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:52.608289 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.608630 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.667192 2026] [security2:error] [pid 187269:tid 187529] [client 13.70.4.78:61983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/tiny.php"] [unique_id "aryzLNFcyhWr7HDzNGmI5AAAAo4"]
[Wed Sep 30 00:58:52.668420 2026] [security2:error] [pid 187269:tid 187515] [client 37.41.16.35:51635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzLNFcyhWr7HDzNGmI4wAAAoE"]
[Wed Sep 30 00:58:52.668632 2026] [security2:error] [pid 187269:tid 187515] [client 37.41.16.35:51635] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzLNFcyhWr7HDzNGmI4wAAAoE"]
[Wed Sep 30 00:58:52.679335 2026] [security2:error] [pid 187269:tid 187520] [client 182.69.182.151:21910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzLNFcyhWr7HDzNGmI5QAAAoY"]
[Wed Sep 30 00:58:52.679436 2026] [security2:error] [pid 187269:tid 187520] [client 182.69.182.151:21910] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzLNFcyhWr7HDzNGmI5QAAAoY"]
[Wed Sep 30 00:58:52.697713 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.697981 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.705325 2026] [security2:error] [pid 186850:tid 187043] [client 13.70.1.101:16174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/mail.php"] [unique_id "aryzLE5Phls--iYlcKgNHQAAAUk"]
[Wed Sep 30 00:58:52.725928 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:52.726348 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:52.794703 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.795149 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.862670 2026] [security2:error] [pid 186850:tid 186994] [client 4.240.25.22:30754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/ty.php"] [unique_id "aryzLE5Phls--iYlcKgNJQAAARg"]
[Wed Sep 30 00:58:52.872604 2026] [security2:error] [pid 186850:tid 186921] [remote 74.7.227.56:40990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzLE5Phls--iYlcKgNJgABIkY"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=500
[Wed Sep 30 00:58:52.874176 2026] [security2:error] [pid 187269:tid 187534] [client 20.198.74.230:23906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cnsk.php"] [unique_id "aryzLNFcyhWr7HDzNGmI9AAAApM"]
[Wed Sep 30 00:58:52.879602 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.879880 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.955608 2026] [security2:error] [pid 186850:tid 186903] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzLE5Phls--iYlcKgNKAABUDQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=7e2bba0a7333c033ce520b548ae671ae
[Wed Sep 30 00:58:52.955633 2026] [security2:error] [pid 186850:tid 186903] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzLE5Phls--iYlcKgNKAABUDQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewonline.php?sid=7e2bba0a7333c033ce520b548ae671ae
[Wed Sep 30 00:58:52.971082 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:52.971362 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:52.996599 2026] [security2:error] [pid 187269:tid 187499] [client 20.28.180.172:36463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/alfa.php"] [unique_id "aryzLNFcyhWr7HDzNGmI9wAAAnE"]
[Wed Sep 30 00:58:53.014471 2026] [security2:error] [pid 187269:tid 187469] [client 20.194.30.107:25890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/ty.php"] [unique_id "aryzLdFcyhWr7HDzNGmI-AAAAlM"]
[Wed Sep 30 00:58:53.019777 2026] [security2:error] [pid 187269:tid 187406] [client 13.70.4.78:23963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/simple.php"] [unique_id "aryzLdFcyhWr7HDzNGmI-QAAAhQ"]
[Wed Sep 30 00:58:53.065200 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.065638 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.110691 2026] [security2:error] [pid 186850:tid 187100] [client 4.196.65.241:19484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/gxjybsva.php"] [unique_id "aryzLU5Phls--iYlcKgNLAAAAYI"]
[Wed Sep 30 00:58:53.127178 2026] [security2:error] [pid 187269:tid 187437] [client 182.75.216.230:62508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzLdFcyhWr7HDzNGmI_AAAAjM"]
[Wed Sep 30 00:58:53.127290 2026] [security2:error] [pid 187269:tid 187437] [client 182.75.216.230:62508] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzLdFcyhWr7HDzNGmI_AAAAjM"]
[Wed Sep 30 00:58:53.152928 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.153198 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.160841 2026] [security2:error] [pid 187269:tid 187459] [client 13.70.1.101:59984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/sx.php"] [unique_id "aryzLdFcyhWr7HDzNGmJAgAAAkk"]
[Wed Sep 30 00:58:53.166645 2026] [access_compat:error] [pid 187269:tid 187530] [client 47.79.13.78:58578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:53.166918 2026] [access_compat:error] [pid 187269:tid 187530] [client 47.79.13.78:58578] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:53.185417 2026] [security2:error] [pid 186850:tid 187069] [client 20.70.173.30:16291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ienergyp.com"] [uri "/cabs.php"] [unique_id "aryzLU5Phls--iYlcKgNLQAAAWM"]
[Wed Sep 30 00:58:53.191917 2026] [security2:error] [pid 186850:tid 187076] [client 49.43.163.212:63206] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNLgAAAWo"]
[Wed Sep 30 00:58:53.192021 2026] [security2:error] [pid 186850:tid 187076] [client 49.43.163.212:63206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNLgAAAWo"]
[Wed Sep 30 00:58:53.219033 2026] [security2:error] [pid 187269:tid 187462] [client 20.28.180.172:34291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/w1px.php"] [unique_id "aryzLdFcyhWr7HDzNGmJBQAAAkw"]
[Wed Sep 30 00:58:53.244003 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.244524 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.265852 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:53.266306 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:53.317969 2026] [security2:error] [pid 187269:tid 187513] [client 103.241.204.139:55559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzLdFcyhWr7HDzNGmJCwAAAn8"]
[Wed Sep 30 00:58:53.318111 2026] [security2:error] [pid 187269:tid 187513] [client 103.241.204.139:55559] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzLdFcyhWr7HDzNGmJCwAAAn8"]
[Wed Sep 30 00:58:53.334560 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.334835 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.363084 2026] [security2:error] [pid 186850:tid 187002] [client 159.223.71.139:57617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/images/cache.php"] [unique_id "aryzLU5Phls--iYlcKgNNwAAASA"], referer: www.google.com
[Wed Sep 30 00:58:53.382212 2026] [security2:error] [pid 186850:tid 187071] [client 13.70.4.78:61969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/buy.php"] [unique_id "aryzLU5Phls--iYlcKgNOAAAAWU"]
[Wed Sep 30 00:58:53.383645 2026] [security2:error] [pid 186850:tid 187065] [client 49.36.41.37:54038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNOQAAAV8"]
[Wed Sep 30 00:58:53.383729 2026] [security2:error] [pid 186850:tid 187065] [client 49.36.41.37:54038] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNOQAAAV8"]
[Wed Sep 30 00:58:53.429545 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.429958 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.511655 2026] [security2:error] [pid 187269:tid 187419] [client 20.198.74.230:34871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/24.php"] [unique_id "aryzLdFcyhWr7HDzNGmJFQAAAiE"]
[Wed Sep 30 00:58:53.517353 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.517627 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.610801 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.611254 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.639075 2026] [security2:error] [pid 187269:tid 187500] [client 13.70.1.101:56306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryzLdFcyhWr7HDzNGmJGQAAAnI"]
[Wed Sep 30 00:58:53.669846 2026] [access_compat:error] [pid 187269:tid 187411] [client 47.79.13.234:58068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:53.670144 2026] [access_compat:error] [pid 187269:tid 187411] [client 47.79.13.234:58068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:53.672541 2026] [security2:error] [pid 187269:tid 187479] [client 20.213.164.196:10777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/177.php"] [unique_id "aryzLdFcyhWr7HDzNGmJGwAAAl0"]
[Wed Sep 30 00:58:53.690487 2026] [security2:error] [pid 187269:tid 187523] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzLdFcyhWr7HDzNGmJHQAAAog"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:53.696383 2026] [security2:error] [pid 187269:tid 187434] [client 20.28.180.172:36420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/w.php"] [unique_id "aryzLdFcyhWr7HDzNGmJHwAAAjA"]
[Wed Sep 30 00:58:53.701852 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.702279 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.735487 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:53.735752 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:53.742846 2026] [security2:error] [pid 187269:tid 187448] [client 4.196.65.241:2551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ho.php"] [unique_id "aryzLdFcyhWr7HDzNGmJIQAAAj4"]
[Wed Sep 30 00:58:53.790191 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.790458 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.824294 2026] [security2:error] [pid 187269:tid 187444] [client 13.70.4.78:23974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ioxi-o.php"] [unique_id "aryzLdFcyhWr7HDzNGmJKAAAAjo"]
[Wed Sep 30 00:58:53.858206 2026] [security2:error] [pid 186850:tid 187046] [client 150.107.232.159:35836] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNTgAAAUw"]
[Wed Sep 30 00:58:53.858341 2026] [security2:error] [pid 186850:tid 187046] [client 150.107.232.159:35836] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNTgAAAUw"]
[Wed Sep 30 00:58:53.880376 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.880638 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:53.912646 2026] [security2:error] [pid 187269:tid 187534] [client 20.219.19.141:46480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/v4.php"] [unique_id "aryzLdFcyhWr7HDzNGmJKwAAApM"]
[Wed Sep 30 00:58:53.943278 2026] [security2:error] [pid 186850:tid 187055] [client 152.59.169.65:1104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNWAAAAVU"]
[Wed Sep 30 00:58:53.947626 2026] [security2:error] [pid 186850:tid 187055] [client 152.59.169.65:1104] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzLU5Phls--iYlcKgNWAAAAVU"]
[Wed Sep 30 00:58:53.970691 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:53.970963 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.021019 2026] [security2:error] [pid 186850:tid 187092] [client 223.181.30.165:21426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzLk5Phls--iYlcKgNYAAAAXo"]
[Wed Sep 30 00:58:54.021139 2026] [security2:error] [pid 186850:tid 187092] [client 223.181.30.165:21426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzLk5Phls--iYlcKgNYAAAAXo"]
[Wed Sep 30 00:58:54.047117 2026] [security2:error] [pid 186850:tid 187096] [client 116.193.128.26:63933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzLk5Phls--iYlcKgNYgAAAX4"]
[Wed Sep 30 00:58:54.047350 2026] [security2:error] [pid 186850:tid 187096] [client 116.193.128.26:63933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzLk5Phls--iYlcKgNYgAAAX4"]
[Wed Sep 30 00:58:54.062903 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.063180 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.158777 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.159224 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.169769 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:23962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ans.php"] [unique_id "aryzLtFcyhWr7HDzNGmJOQAAAjM"]
[Wed Sep 30 00:58:54.184352 2026] [security2:error] [pid 186850:tid 187003] [client 13.70.1.101:56275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/article.php"] [unique_id "aryzLk5Phls--iYlcKgNaQAAASE"]
[Wed Sep 30 00:58:54.240837 2026] [security2:error] [pid 187269:tid 187442] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1/"] [unique_id "aryzLtFcyhWr7HDzNGmJQAAAAjg"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:54.247458 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.247885 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.265946 2026] [access_compat:error] [pid 186850:tid 186997] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:54.266229 2026] [access_compat:error] [pid 186850:tid 186997] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:54.311397 2026] [security2:error] [pid 187269:tid 187505] [client 45.138.12.32:18382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcj.rru.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzLtFcyhWr7HDzNGmJRwAAAnc"]
[Wed Sep 30 00:58:54.337404 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.337752 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:3952] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.353823 2026] [security2:error] [pid 187269:tid 187465] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryzLtFcyhWr7HDzNGmJSgAAAk8"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:54.419128 2026] [security2:error] [pid 187269:tid 187451] [client 20.28.180.172:36430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzLtFcyhWr7HDzNGmJTgAAAkE"]
[Wed Sep 30 00:58:54.420601 2026] [security2:error] [pid 187269:tid 187491] [client 216.73.216.46:3952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzLtFcyhWr7HDzNGmJTwAAAmk"]
[Wed Sep 30 00:58:54.475072 2026] [security2:error] [pid 187269:tid 187503] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryzLtFcyhWr7HDzNGmJUQAAAnU"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:54.508702 2026] [security2:error] [pid 186850:tid 187060] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzLk5Phls--iYlcKgNeAAAAVo"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:54.519873 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.520146 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.524564 2026] [security2:error] [pid 186850:tid 187100] [client 13.70.4.78:24355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/gf.php"] [unique_id "aryzLk5Phls--iYlcKgNewAAAYI"]
[Wed Sep 30 00:58:54.528873 2026] [security2:error] [pid 187269:tid 187470] [client 103.172.210.103:53354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzLtFcyhWr7HDzNGmJWgAAAlQ"]
[Wed Sep 30 00:58:54.529005 2026] [security2:error] [pid 187269:tid 187470] [client 103.172.210.103:53354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzLtFcyhWr7HDzNGmJWgAAAlQ"]
[Wed Sep 30 00:58:54.537239 2026] [security2:error] [pid 187269:tid 187432] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "aryzLtFcyhWr7HDzNGmJXAAAAi4"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:54.559158 2026] [security2:error] [pid 187269:tid 187500] [client 103.168.67.253:25136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzLtFcyhWr7HDzNGmJXQAAAnI"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:54.610440 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.610702 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.620876 2026] [security2:error] [pid 187269:tid 187455] [client 13.70.1.101:15699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/link.php"] [unique_id "aryzLtFcyhWr7HDzNGmJYQAAAkU"]
[Wed Sep 30 00:58:54.626103 2026] [security2:error] [pid 187269:tid 187420] [client 201.1.173.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzLtFcyhWr7HDzNGmJYgAAAiI"]
[Wed Sep 30 00:58:54.648346 2026] [security2:error] [pid 187269:tid 187450] [client 4.240.25.22:21889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/mac.php"] [unique_id "aryzLtFcyhWr7HDzNGmJZAAAAkA"]
[Wed Sep 30 00:58:54.662423 2026] [security2:error] [pid 187269:tid 187515] [client 103.168.67.253:9222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzLtFcyhWr7HDzNGmJZgAAAoE"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:58:54.708893 2026] [security2:error] [pid 187269:tid 187407] [client 20.219.19.141:23987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/albin.php"] [unique_id "aryzLtFcyhWr7HDzNGmJaQAAAhU"]
[Wed Sep 30 00:58:54.755658 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:54.755953 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:54.757494 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.757768 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.783930 2026] [security2:error] [pid 187269:tid 187424] [client 213.136.69.135:64717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-filter-sentinel.php"] [unique_id "aryzLtFcyhWr7HDzNGmJbgAAAiY"], referer: binance.com
[Wed Sep 30 00:58:54.791996 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.792284 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.808087 2026] [security2:error] [pid 187269:tid 187461] [client 185.79.30.55:55014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.30.79.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "aryzLtFcyhWr7HDzNGmJcAAAAks"], referer: https://eccl.co.uk/wp-login.php
[Wed Sep 30 00:58:54.814237 2026] [security2:error] [pid 186850:tid 187091] [client 82.102.18.222:54564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzLk5Phls--iYlcKgNgwAAAXk"]
[Wed Sep 30 00:58:54.868268 2026] [security2:error] [pid 187269:tid 187492] [client 13.70.4.78:23949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/man.php"] [unique_id "aryzLtFcyhWr7HDzNGmJdAAAAmo"]
[Wed Sep 30 00:58:54.883786 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.884053 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.938665 2026] [security2:error] [pid 187269:tid 187522] [client 13.70.1.101:56288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/lock360.php"] [unique_id "aryzLtFcyhWr7HDzNGmJdgAAAoc"]
[Wed Sep 30 00:58:54.974557 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:54.974832 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:54.983382 2026] [security2:error] [pid 187269:tid 187524] [client 20.28.180.172:36361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/robot.php"] [unique_id "aryzLtFcyhWr7HDzNGmJewAAAok"]
[Wed Sep 30 00:58:55.065706 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.066001 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.129260 2026] [security2:error] [pid 187269:tid 187452] [client 82.102.18.222:54570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryzL9FcyhWr7HDzNGmJiAAAAkI"]
[Wed Sep 30 00:58:55.225555 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:55.225830 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:55.231965 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.232256 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.238824 2026] [access_compat:error] [pid 187269:tid 187323] [remote 17.166.22.168:50332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.239095 2026] [access_compat:error] [pid 187269:tid 187323] [remote 17.166.22.168:50332] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.250136 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.250570 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.254382 2026] [security2:error] [pid 187269:tid 187490] [client 20.194.30.107:33990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzL9FcyhWr7HDzNGmJjgAAAmg"]
[Wed Sep 30 00:58:55.331232 2026] [security2:error] [pid 186850:tid 187011] [client 13.70.4.78:61964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/dev.php"] [unique_id "aryzL05Phls--iYlcKgNigAAASk"]
[Wed Sep 30 00:58:55.339687 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.339975 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.390104 2026] [security2:error] [pid 186850:tid 187083] [client 13.70.1.101:15687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-trackback.php"] [unique_id "aryzL05Phls--iYlcKgNjQAAAXE"]
[Wed Sep 30 00:58:55.430964 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.431230 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.521447 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.521781 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.597726 2026] [security2:error] [pid 187269:tid 187431] [client 4.196.65.241:64188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/new4.php"] [unique_id "aryzL9FcyhWr7HDzNGmJnAAAAi0"]
[Wed Sep 30 00:58:55.612482 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.612776 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.702708 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.702984 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.758447 2026] [access_compat:error] [pid 186850:tid 187079] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:55.758717 2026] [access_compat:error] [pid 186850:tid 187079] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:58:55.774473 2026] [security2:error] [pid 186850:tid 187066] [client 13.70.4.78:24349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ms-edit.php"] [unique_id "aryzL05Phls--iYlcKgNlAAAAWA"]
[Wed Sep 30 00:58:55.792036 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.792300 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.884728 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.885004 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:55.886634 2026] [security2:error] [pid 187269:tid 187528] [client 82.102.18.222:54572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzL9FcyhWr7HDzNGmJqgAAAo0"]
[Wed Sep 30 00:58:55.897904 2026] [security2:error] [pid 187269:tid 187447] [client 152.59.165.7:55239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzL9FcyhWr7HDzNGmJqwAAAj0"]
[Wed Sep 30 00:58:55.898009 2026] [security2:error] [pid 187269:tid 187447] [client 152.59.165.7:55239] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzL9FcyhWr7HDzNGmJqwAAAj0"]
[Wed Sep 30 00:58:55.928340 2026] [security2:error] [pid 187269:tid 187461] [client 13.70.1.101:15681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/.well-known/index.php"] [unique_id "aryzL9FcyhWr7HDzNGmJrAAAAks"]
[Wed Sep 30 00:58:55.976995 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:55.977257 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.057493 2026] [access_compat:error] [pid 186850:tid 187010] [client 47.79.13.75:49146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:56.057758 2026] [access_compat:error] [pid 186850:tid 187010] [client 47.79.13.75:49146] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:56.066888 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.067172 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.082791 2026] [security2:error] [pid 187269:tid 187439] [client 4.240.25.22:11561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/images.php"] [unique_id "aryzMNFcyhWr7HDzNGmJsgAAAjU"]
[Wed Sep 30 00:58:56.123692 2026] [security2:error] [pid 187269:tid 187464] [client 185.79.30.55:38590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.30.79.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "aryzMNFcyhWr7HDzNGmJtAAAAk4"], referer: https://eccl.co.uk/wp-login.php
[Wed Sep 30 00:58:56.135016 2026] [security2:error] [pid 186850:tid 187034] [client 20.28.180.172:36386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/sss.php"] [unique_id "aryzME5Phls--iYlcKgNpwAAAUA"]
[Wed Sep 30 00:58:56.159734 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.160008 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.190673 2026] [security2:error] [pid 187269:tid 187487] [client 82.102.18.222:54578] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzMNFcyhWr7HDzNGmJugAAAmU"]
[Wed Sep 30 00:58:56.196790 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.4.78:61990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/txets.php"] [unique_id "aryzMNFcyhWr7HDzNGmJuwAAAjM"]
[Wed Sep 30 00:58:56.219458 2026] [security2:error] [pid 186850:tid 187101] [client 20.219.19.141:57131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/atkno.php"] [unique_id "aryzME5Phls--iYlcKgNqAAAAYM"]
[Wed Sep 30 00:58:56.250035 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.250317 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:60221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.264283 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:56.264694 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:56.341982 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.342280 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.360347 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.1.101:15945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryzMNFcyhWr7HDzNGmJvwAAAns"]
[Wed Sep 30 00:58:56.409112 2026] [security2:error] [pid 187269:tid 187460] [client 20.213.164.196:10708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/ccc.php"] [unique_id "aryzMNFcyhWr7HDzNGmJwQAAAko"]
[Wed Sep 30 00:58:56.429103 2026] [security2:error] [pid 187269:tid 187451] [client 216.73.216.46:60221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzMNFcyhWr7HDzNGmJxAAAAkE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1OQ%3D%3D
[Wed Sep 30 00:58:56.431751 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.432111 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.434594 2026] [security2:error] [pid 187269:tid 187491] [client 20.70.173.30:41449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/dehnl.php"] [unique_id "aryzMNFcyhWr7HDzNGmJxQAAAmk"]
[Wed Sep 30 00:58:56.452948 2026] [security2:error] [pid 187269:tid 187424] [client 202.179.95.79:60273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzMNFcyhWr7HDzNGmJyAAAAiY"]
[Wed Sep 30 00:58:56.453022 2026] [security2:error] [pid 187269:tid 187424] [client 202.179.95.79:60273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzMNFcyhWr7HDzNGmJyAAAAiY"]
[Wed Sep 30 00:58:56.467713 2026] [access_compat:error] [pid 187269:tid 187407] [client 47.79.13.75:49148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:56.468102 2026] [access_compat:error] [pid 187269:tid 187407] [client 47.79.13.75:49148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:56.493692 2026] [security2:error] [pid 187269:tid 187436] [client 82.102.18.222:54592] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzMNFcyhWr7HDzNGmJygAAAjI"]
[Wed Sep 30 00:58:56.535371 2026] [security2:error] [pid 187269:tid 187506] [client 13.70.4.78:24350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/hao.php"] [unique_id "aryzMNFcyhWr7HDzNGmJzAAAAng"]
[Wed Sep 30 00:58:56.542376 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.542793 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.579190 2026] [security2:error] [pid 187269:tid 187469] [client 105.112.178.79:44577] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fdm.tcs.mybluehost.me"] [uri "/.env"] [unique_id "aryzMNFcyhWr7HDzNGmJ0wAAAlM"]
[Wed Sep 30 00:58:56.638454 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.638883 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.678604 2026] [access_compat:error] [pid 187269:tid 187351] [remote 17.166.25.104:35342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.679035 2026] [access_compat:error] [pid 187269:tid 187351] [remote 17.166.25.104:35342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.758501 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.758762 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.781568 2026] [security2:error] [pid 186850:tid 186988] [client 13.70.1.101:16169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryzME5Phls--iYlcKgNtwAAARI"]
[Wed Sep 30 00:58:56.785281 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:56.785561 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:56.797770 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.798077 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.802118 2026] [security2:error] [pid 186850:tid 187089] [client 82.102.18.222:54602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzME5Phls--iYlcKgNuQAAAXc"]
[Wed Sep 30 00:58:56.887617 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.887887 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:56.890124 2026] [security2:error] [pid 187269:tid 187530] [client 203.122.45.246:63450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzMNFcyhWr7HDzNGmJ6QAAAo8"]
[Wed Sep 30 00:58:56.890272 2026] [security2:error] [pid 187269:tid 187530] [client 203.122.45.246:63450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzMNFcyhWr7HDzNGmJ6QAAAo8"]
[Wed Sep 30 00:58:56.918422 2026] [security2:error] [pid 187269:tid 187520] [client 13.70.4.78:61976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/33.php"] [unique_id "aryzMNFcyhWr7HDzNGmJ6gAAAoY"]
[Wed Sep 30 00:58:56.977728 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:56.978013 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.068992 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.069271 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.104827 2026] [security2:error] [pid 186850:tid 187050] [client 13.70.1.101:15720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzMU5Phls--iYlcKgNvwAAAVA"]
[Wed Sep 30 00:58:57.138036 2026] [security2:error] [pid 186850:tid 187039] [client 82.102.18.222:33650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzMU5Phls--iYlcKgNwQAAAUU"]
[Wed Sep 30 00:58:57.160799 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.161099 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:11137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.248102 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:57.248385 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:57.250149 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.250424 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.256321 2026] [security2:error] [pid 186850:tid 187103] [client 20.28.180.172:36416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/or.php"] [unique_id "aryzMU5Phls--iYlcKgNxQAAAYU"]
[Wed Sep 30 00:58:57.274784 2026] [security2:error] [pid 186850:tid 187081] [client 13.70.4.78:24379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/adminner.php"] [unique_id "aryzMU5Phls--iYlcKgNxgAAAW8"]
[Wed Sep 30 00:58:57.351264 2026] [security2:error] [pid 187269:tid 187420] [client 72.255.10.32:50499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzMdFcyhWr7HDzNGmKBAAAAiI"]
[Wed Sep 30 00:58:57.351452 2026] [security2:error] [pid 187269:tid 187420] [client 72.255.10.32:50499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzMdFcyhWr7HDzNGmKBAAAAiI"]
[Wed Sep 30 00:58:57.355517 2026] [security2:error] [pid 187269:tid 187519] [client 216.73.216.46:11137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzMdFcyhWr7HDzNGmKBQAAAoU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjI5
[Wed Sep 30 00:58:57.397609 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.397889 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.439259 2026] [security2:error] [pid 187269:tid 187455] [client 43.227.131.37:24329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzMdFcyhWr7HDzNGmKEAAAAkU"]
[Wed Sep 30 00:58:57.439430 2026] [security2:error] [pid 187269:tid 187455] [client 43.227.131.37:24329] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzMdFcyhWr7HDzNGmKEAAAAkU"]
[Wed Sep 30 00:58:57.441866 2026] [security2:error] [pid 186850:tid 187099] [client 82.102.18.222:45778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzMU5Phls--iYlcKgNzQAAAYE"]
[Wed Sep 30 00:58:57.442140 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.442426 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.448542 2026] [security2:error] [pid 187269:tid 187424] [client 13.70.1.101:15995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryzMdFcyhWr7HDzNGmKEgAAAiY"]
[Wed Sep 30 00:58:57.528186 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.528464 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.608017 2026] [security2:error] [pid 187269:tid 187489] [client 45.138.12.32:32264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.vut.rvy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzMdFcyhWr7HDzNGmKGAAAAmc"]
[Wed Sep 30 00:58:57.615393 2026] [security2:error] [pid 187269:tid 187340] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzMdFcyhWr7HDzNGmKGgACUz8"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D44332
[Wed Sep 30 00:58:57.617540 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.617835 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.710848 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.711154 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.745404 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:57.745660 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:57.784159 2026] [security2:error] [pid 186850:tid 187013] [client 82.102.18.222:45794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzMU5Phls--iYlcKgN1AAAASs"]
[Wed Sep 30 00:58:57.796563 2026] [security2:error] [pid 186850:tid 187014] [client 13.70.4.78:24332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/thoms.php"] [unique_id "aryzMU5Phls--iYlcKgN1wAAASw"]
[Wed Sep 30 00:58:57.798489 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.798750 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.799350 2026] [security2:error] [pid 187269:tid 187523] [client 45.138.12.32:32270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcj.rru.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzMdFcyhWr7HDzNGmKJgAAAog"]
[Wed Sep 30 00:58:57.846699 2026] [security2:error] [pid 186850:tid 187066] [client 13.70.1.101:15984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryzMU5Phls--iYlcKgN3QAAAWA"]
[Wed Sep 30 00:58:57.891984 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.892293 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:57.900850 2026] [security2:error] [pid 187269:tid 187530] [client 20.213.164.196:10694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/0xD.php"] [unique_id "aryzMdFcyhWr7HDzNGmKKwAAAo8"]
[Wed Sep 30 00:58:57.924106 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.79.13.1:40740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:57.924404 2026] [access_compat:error] [pid 187269:tid 187504] [client 47.79.13.1:40740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:57.958562 2026] [security2:error] [pid 187269:tid 187438] [client 20.28.180.172:36354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/b8.php"] [unique_id "aryzMdFcyhWr7HDzNGmKLwAAAjQ"]
[Wed Sep 30 00:58:57.960724 2026] [security2:error] [pid 187269:tid 187444] [client 20.219.19.141:46527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/gptsh.php"] [unique_id "aryzMdFcyhWr7HDzNGmKMAAAAjo"]
[Wed Sep 30 00:58:57.982646 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:57.982916 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.016054 2026] [security2:error] [pid 187269:tid 187503] [client 103.159.192.142:50056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzMtFcyhWr7HDzNGmKNAAAAnU"]
[Wed Sep 30 00:58:58.016232 2026] [security2:error] [pid 187269:tid 187503] [client 103.159.192.142:50056] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzMtFcyhWr7HDzNGmKNAAAAnU"]
[Wed Sep 30 00:58:58.073863 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.074179 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.100317 2026] [security2:error] [pid 187269:tid 187441] [client 82.102.18.222:45802] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzMtFcyhWr7HDzNGmKOgAAAjc"]
[Wed Sep 30 00:58:58.123948 2026] [access_compat:error] [pid 187269:tid 187374] [remote 17.166.21.181:48662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.124378 2026] [access_compat:error] [pid 187269:tid 187374] [remote 17.166.21.181:48662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.163735 2026] [security2:error] [pid 186850:tid 187011] [client 49.205.105.16:14447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzMk5Phls--iYlcKgN4QAAASk"]
[Wed Sep 30 00:58:58.163865 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.163888 2026] [security2:error] [pid 186850:tid 187011] [client 49.205.105.16:14447] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzMk5Phls--iYlcKgN4QAAASk"]
[Wed Sep 30 00:58:58.164162 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.176313 2026] [security2:error] [pid 187269:tid 187528] [client 13.70.4.78:23951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/a.php"] [unique_id "aryzMtFcyhWr7HDzNGmKPgAAAo0"]
[Wed Sep 30 00:58:58.180126 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.1.101:56287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-content/themes/about.php"] [unique_id "aryzMtFcyhWr7HDzNGmKPwAAAn4"]
[Wed Sep 30 00:58:58.256667 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.256951 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.259536 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:58.259803 2026] [access_compat:error] [pid 186850:tid 187017] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:58.345924 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.346205 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.387889 2026] [security2:error] [pid 186850:tid 186909] [remote 47.128.114.133:56928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/7965/protesters-block-national-highway-at-kan-mehterzai"] [unique_id "aryzMk5Phls--iYlcKgN5QABKDo"]
[Wed Sep 30 00:58:58.403906 2026] [security2:error] [pid 187269:tid 187462] [client 82.102.18.222:45806] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzMtFcyhWr7HDzNGmKSQAAAkw"]
[Wed Sep 30 00:58:58.409159 2026] [security2:error] [pid 187269:tid 187482] [client 20.194.30.107:17412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/classwithtostring.php"] [unique_id "aryzMtFcyhWr7HDzNGmKSgAAAmA"]
[Wed Sep 30 00:58:58.435794 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.436088 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.512230 2026] [security2:error] [pid 186850:tid 187059] [client 13.70.4.78:61959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/b8.php"] [unique_id "aryzMk5Phls--iYlcKgN6AAAAVk"]
[Wed Sep 30 00:58:58.528441 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.528705 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.605731 2026] [security2:error] [pid 186850:tid 186936] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzMk5Phls--iYlcKgN6gABClU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:58:58.605758 2026] [security2:error] [pid 186850:tid 186936] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzMk5Phls--iYlcKgN6gABClU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 00:58:58.611674 2026] [security2:error] [pid 186850:tid 186985] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzMk5Phls--iYlcKgN6wAAAQ8"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:58:58.619024 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.619279 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.640692 2026] [security2:error] [pid 187269:tid 187524] [client 20.28.180.172:36418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/xex.php"] [unique_id "aryzMtFcyhWr7HDzNGmKVAAAAok"]
[Wed Sep 30 00:58:58.711774 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.712110 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.728099 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:58.728519 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:58.734490 2026] [security2:error] [pid 186850:tid 187032] [client 82.102.18.222:45814] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzMk5Phls--iYlcKgN9AAAAT4"]
[Wed Sep 30 00:58:58.802163 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.802459 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.830043 2026] [security2:error] [pid 187269:tid 187432] [client 13.70.4.78:24383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/sid.php"] [unique_id "aryzMtFcyhWr7HDzNGmKWQAAAi4"]
[Wed Sep 30 00:58:58.831280 2026] [security2:error] [pid 186850:tid 186931] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzMk5Phls--iYlcKgN9gABEVA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=83586&sid=b60d78e1cd8b019b4688698b037c44b0
[Wed Sep 30 00:58:58.831306 2026] [security2:error] [pid 186850:tid 186931] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzMk5Phls--iYlcKgN9gABEVA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=83586&sid=b60d78e1cd8b019b4688698b037c44b0
[Wed Sep 30 00:58:58.892903 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.893338 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:58.983247 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:58.983522 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.018009 2026] [security2:error] [pid 187269:tid 187406] [client 13.70.1.101:56273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/filemanager/dialog.php"] [unique_id "aryzM9FcyhWr7HDzNGmKYgAAAhQ"]
[Wed Sep 30 00:58:59.054538 2026] [security2:error] [pid 187269:tid 187527] [client 82.102.18.222:45822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzM9FcyhWr7HDzNGmKaAAAAow"]
[Wed Sep 30 00:58:59.064114 2026] [security2:error] [pid 187269:tid 187481] [client 159.223.71.139:60836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/images/images/images/cache.php"] [unique_id "aryzM9FcyhWr7HDzNGmKaQAAAl8"], referer: www.google.com
[Wed Sep 30 00:58:59.078343 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.078780 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.116573 2026] [core:error] [pid 187269:tid 187515] [client 64.62.156.94:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:59.116591 2026] [core:error] [pid 187269:tid 187515] [client 64.62.156.94:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:58:59.161449 2026] [security2:error] [pid 186850:tid 187035] [client 13.70.4.78:61952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/bro.php"] [unique_id "aryzM05Phls--iYlcKgOAQAAAUE"]
[Wed Sep 30 00:58:59.167401 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.167656 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.246703 2026] [security2:error] [pid 186850:tid 187100] [client 20.28.180.172:36356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/CAE-2.5.php"] [unique_id "aryzM05Phls--iYlcKgOAwAAAYI"]
[Wed Sep 30 00:58:59.255853 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.256189 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.282569 2026] [security2:error] [pid 187269:tid 187505] [client 4.240.25.22:20295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzM9FcyhWr7HDzNGmKcQAAAnc"]
[Wed Sep 30 00:58:59.288924 2026] [access_compat:error] [pid 186850:tid 186993] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:59.289215 2026] [access_compat:error] [pid 186850:tid 186993] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:58:59.340194 2026] [security2:error] [pid 187269:tid 187494] [client 20.198.74.230:41352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/42b5827789index.php"] [unique_id "aryzM9FcyhWr7HDzNGmKdgAAAmw"]
[Wed Sep 30 00:58:59.346252 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.346515 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.358214 2026] [security2:error] [pid 187269:tid 187408] [client 82.102.18.222:45836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.udr.paw.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzM9FcyhWr7HDzNGmKdwAAAhY"]
[Wed Sep 30 00:58:59.367115 2026] [security2:error] [pid 187269:tid 187440] [client 20.213.164.196:10730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/sallu.php"] [unique_id "aryzM9FcyhWr7HDzNGmKeAAAAjY"]
[Wed Sep 30 00:58:59.424947 2026] [security2:error] [pid 187269:tid 187508] [client 105.112.178.79:38321] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tjmcgroup.com.au"] [uri "/__ss_probe_7e1d7c78d6743a0f87c710a168240731__"] [unique_id "aryzM9FcyhWr7HDzNGmKegAAAno"]
[Wed Sep 30 00:58:59.437001 2026] [access_compat:error] [pid 187269:tid 187479] [client 47.79.13.58:35746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:58:59.437286 2026] [access_compat:error] [pid 187269:tid 187479] [client 47.79.13.58:35746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:58:59.437730 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.438005 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:47092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.499617 2026] [security2:error] [pid 187269:tid 187501] [client 116.72.182.19:50290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzM9FcyhWr7HDzNGmKgAAAAnM"]
[Wed Sep 30 00:58:59.499781 2026] [security2:error] [pid 187269:tid 187501] [client 116.72.182.19:50290] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzM9FcyhWr7HDzNGmKgAAAAnM"]
[Wed Sep 30 00:58:59.534534 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.535004 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.539655 2026] [security2:error] [pid 187269:tid 187415] [client 13.70.4.78:24345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/xwpg.php"] [unique_id "aryzM9FcyhWr7HDzNGmKhwAAAh0"]
[Wed Sep 30 00:58:59.592015 2026] [autoindex:error] [pid 187269:tid 187491] [client 85.204.70.112:51370] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:58:59.621066 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.621338 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.626034 2026] [security2:error] [pid 186850:tid 187054] [client 216.73.216.46:47092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzM05Phls--iYlcKgODQAAAVQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzI0
[Wed Sep 30 00:58:59.710870 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.711135 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.730508 2026] [security2:error] [pid 187269:tid 187534] [client 13.70.1.101:59977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/index/function.php"] [unique_id "aryzM9FcyhWr7HDzNGmKjgAAApM"]
[Wed Sep 30 00:58:59.750645 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:59.750902 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:58:59.803834 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.804109 2026] [access_compat:error] [pid 187269:tid 187488] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.823215 2026] [security2:error] [pid 187269:tid 187469] [client 20.28.180.172:36475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/ass.php"] [unique_id "aryzM9FcyhWr7HDzNGmKkQAAAlM"]
[Wed Sep 30 00:58:59.897315 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.897721 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:58:59.949802 2026] [security2:error] [pid 186850:tid 187049] [client 13.70.4.78:23953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/radio.php"] [unique_id "aryzM05Phls--iYlcKgOFAAAAU8"]
[Wed Sep 30 00:58:59.985959 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:58:59.986233 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.080570 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.081037 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.119291 2026] [security2:error] [pid 187269:tid 187467] [client 4.196.65.241:64131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/d62.php"] [unique_id "aryzNNFcyhWr7HDzNGmKngAAAlE"]
[Wed Sep 30 00:59:00.123572 2026] [security2:error] [pid 187269:tid 187419] [client 20.219.19.141:23963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/rithin.php"] [unique_id "aryzNNFcyhWr7HDzNGmKoAAAAiE"]
[Wed Sep 30 00:59:00.143141 2026] [security2:error] [pid 187269:tid 187512] [client 20.198.74.230:24160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/4cdf8c8db0index.php"] [unique_id "aryzNNFcyhWr7HDzNGmKoQAAAn4"]
[Wed Sep 30 00:59:00.174002 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.174447 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.258648 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.258921 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.283482 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:00.283749 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:00.331202 2026] [security2:error] [pid 187269:tid 187456] [client 13.70.4.78:24354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ccc.php"] [unique_id "aryzNNFcyhWr7HDzNGmKqgAAAkY"]
[Wed Sep 30 00:59:00.341766 2026] [security2:error] [pid 187269:tid 187517] [client 13.70.1.101:15683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryzNNFcyhWr7HDzNGmKqwAAAoM"]
[Wed Sep 30 00:59:00.351792 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.352096 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:63892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.486999 2026] [security2:error] [pid 187269:tid 187498] [client 20.28.180.172:36402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/felnggg.php"] [unique_id "aryzNNFcyhWr7HDzNGmKuQAAAnA"]
[Wed Sep 30 00:59:00.493455 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.493785 2026] [access_compat:error] [pid 187269:tid 187430] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.532024 2026] [security2:error] [pid 187269:tid 187482] [client 216.73.216.46:63892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzNNFcyhWr7HDzNGmKwAAAAmA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTI0
[Wed Sep 30 00:59:00.586689 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.586943 2026] [access_compat:error] [pid 187269:tid 187504] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.625523 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.625838 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.679681 2026] [security2:error] [pid 187269:tid 187505] [client 116.197.133.25:63984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzNNFcyhWr7HDzNGmKxAAAAnc"]
[Wed Sep 30 00:59:00.679795 2026] [security2:error] [pid 187269:tid 187505] [client 116.197.133.25:63984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzNNFcyhWr7HDzNGmKxAAAAnc"]
[Wed Sep 30 00:59:00.688043 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzAz
[Wed Sep 30 00:59:00.688310 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzAz
[Wed Sep 30 00:59:00.704968 2026] [security2:error] [pid 187269:tid 187490] [client 13.70.1.101:15972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryzNNFcyhWr7HDzNGmKyQAAAmg"]
[Wed Sep 30 00:59:00.716035 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.716328 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.720709 2026] [security2:error] [pid 186850:tid 187078] [client 223.235.102.107:23539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzNE5Phls--iYlcKgOHgAAAWw"]
[Wed Sep 30 00:59:00.720900 2026] [security2:error] [pid 186850:tid 187078] [client 223.235.102.107:23539] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzNE5Phls--iYlcKgOHgAAAWw"]
[Wed Sep 30 00:59:00.795418 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:00.795722 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:00.806421 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.806702 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.888338 2026] [security2:error] [pid 187269:tid 187533] [client 13.70.4.78:23938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wmore1.php"] [unique_id "aryzNNFcyhWr7HDzNGmK0AAAApI"]
[Wed Sep 30 00:59:00.894262 2026] [security2:error] [pid 187269:tid 187406] [client 20.213.164.196:10702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/ops.php"] [unique_id "aryzNNFcyhWr7HDzNGmK0gAAAhQ"]
[Wed Sep 30 00:59:00.896623 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.896891 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:00.941735 2026] [security2:error] [pid 187269:tid 187472] [client 4.240.25.22:21915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/txets.php"] [unique_id "aryzNNFcyhWr7HDzNGmK1gAAAlY"]
[Wed Sep 30 00:59:00.988968 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:00.989286 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.072477 2026] [security2:error] [pid 187269:tid 187522] [client 13.70.1.101:16157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryzNdFcyhWr7HDzNGmK3gAAAoc"]
[Wed Sep 30 00:59:01.079738 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.080012 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.083007 2026] [access_compat:error] [pid 187269:tid 187458] [client 47.79.13.167:50060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:01.083283 2026] [access_compat:error] [pid 187269:tid 187458] [client 47.79.13.167:50060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:01.110337 2026] [security2:error] [pid 187269:tid 187418] [client 45.138.12.32:18546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.whq.xcc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzNdFcyhWr7HDzNGmK4AAAAiA"]
[Wed Sep 30 00:59:01.151954 2026] [access_compat:error] [pid 187269:tid 187487] [client 47.79.13.234:58074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:01.152224 2026] [access_compat:error] [pid 187269:tid 187487] [client 47.79.13.234:58074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:01.170626 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.170947 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.173055 2026] [security2:error] [pid 187269:tid 187408] [client 20.28.180.172:36368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/felnggg.update.php"] [unique_id "aryzNdFcyhWr7HDzNGmK7AAAAhY"]
[Wed Sep 30 00:59:01.205608 2026] [core:error] [pid 187269:tid 187466] [client 104.207.36.199:40691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:01.205630 2026] [core:error] [pid 187269:tid 187466] [client 104.207.36.199:40691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:01.264848 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.265278 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.283237 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:01.283505 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:01.321375 2026] [security2:error] [pid 186850:tid 187063] [client 4.240.25.22:43776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/chosen.php"] [unique_id "aryzNU5Phls--iYlcKgOJgAAAV0"]
[Wed Sep 30 00:59:01.331243 2026] [security2:error] [pid 187269:tid 187482] [client 13.70.4.78:24351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/function.php"] [unique_id "aryzNdFcyhWr7HDzNGmK8gAAAmA"]
[Wed Sep 30 00:59:01.351024 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.351300 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.373981 2026] [lsapi:warn] [pid 186850:tid 186984] [client 146.103.110.101:0] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: http://kshar.net/gift-wrap/
[Wed Sep 30 00:59:01.430403 2026] [security2:error] [pid 187269:tid 187500] [client 223.181.60.167:19475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzNdFcyhWr7HDzNGmK9gAAAnI"]
[Wed Sep 30 00:59:01.432213 2026] [security2:error] [pid 187269:tid 187500] [client 223.181.60.167:19475] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzNdFcyhWr7HDzNGmK9gAAAnI"]
[Wed Sep 30 00:59:01.434653 2026] [security2:error] [pid 187269:tid 187493] [client 13.70.1.101:56256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/about/function.php"] [unique_id "aryzNdFcyhWr7HDzNGmK9wAAAms"]
[Wed Sep 30 00:59:01.439545 2026] [security2:error] [pid 187269:tid 187421] [client 20.219.19.141:23755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/il.php"] [unique_id "aryzNdFcyhWr7HDzNGmK-gAAAiM"]
[Wed Sep 30 00:59:01.443654 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.443964 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.538579 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.539047 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.561579 2026] [security2:error] [pid 187269:tid 187475] [client 20.28.180.172:36479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/jybkxer.php"] [unique_id "aryzNdFcyhWr7HDzNGmLAQAAAlk"]
[Wed Sep 30 00:59:01.626302 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.626578 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.683620 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:24341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ab.php"] [unique_id "aryzNdFcyhWr7HDzNGmLBgAAAn8"]
[Wed Sep 30 00:59:01.716093 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.716381 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.720055 2026] [security2:error] [pid 187269:tid 187452] [client 20.213.164.196:10711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/mac.php"] [unique_id "aryzNdFcyhWr7HDzNGmLCQAAAkI"]
[Wed Sep 30 00:59:01.735249 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:01.735678 2026] [access_compat:error] [pid 186850:tid 187088] [client 74.7.243.227:44502] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:01.763039 2026] [security2:error] [pid 186850:tid 187079] [client 13.70.1.101:15969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryzNU5Phls--iYlcKgOLQAAAW0"]
[Wed Sep 30 00:59:01.768020 2026] [security2:error] [pid 187269:tid 187481] [client 20.70.173.30:48681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/cgi-bin/admin.php"] [unique_id "aryzNdFcyhWr7HDzNGmLDgAAAl8"]
[Wed Sep 30 00:59:01.801796 2026] [security2:error] [pid 187269:tid 187429] [client 20.70.173.30:25150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/cilus.php"] [unique_id "aryzNdFcyhWr7HDzNGmLEQAAAis"]
[Wed Sep 30 00:59:01.808061 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.808331 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.898536 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.898873 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:01.989193 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:01.989457 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.080947 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.081232 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.105651 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.1.101:15708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/admin/function.php"] [unique_id "aryzNtFcyhWr7HDzNGmLIwAAAiI"]
[Wed Sep 30 00:59:02.150303 2026] [security2:error] [pid 187269:tid 187427] [client 20.28.180.172:34285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/Isadore.php"] [unique_id "aryzNtFcyhWr7HDzNGmLJgAAAik"]
[Wed Sep 30 00:59:02.170944 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.171223 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.171879 2026] [security2:error] [pid 187269:tid 187466] [client 146.103.110.101:57884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.103.146.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kshar.net"] [uri "/wp-comments-post.php"] [unique_id "aryzNtFcyhWr7HDzNGmLJQAAAlA"], referer: http://kshar.net/gift-wrap/
[Wed Sep 30 00:59:02.186336 2026] [security2:error] [pid 187269:tid 187455] [client 13.70.4.78:23982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/css.php"] [unique_id "aryzNtFcyhWr7HDzNGmLKQAAAkU"]
[Wed Sep 30 00:59:02.212124 2026] [security2:error] [pid 187269:tid 187519] [client 20.28.180.172:36447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/edit-tags.php"] [unique_id "aryzNtFcyhWr7HDzNGmLKwAAAoU"]
[Wed Sep 30 00:59:02.226195 2026] [security2:error] [pid 187269:tid 187528] [client 4.240.25.22:11531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/log.php"] [unique_id "aryzNtFcyhWr7HDzNGmLLAAAAo0"]
[Wed Sep 30 00:59:02.264450 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.264760 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.286571 2026] [security2:error] [pid 187269:tid 187466] [client 146.103.110.101:57884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "kshar.net"] [uri "/wp-comments-post.php"] [unique_id "aryzNtFcyhWr7HDzNGmLJQAAAlA"], referer: http://kshar.net/gift-wrap/
[Wed Sep 30 00:59:02.292105 2026] [access_compat:error] [pid 187269:tid 187460] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:02.292426 2026] [access_compat:error] [pid 187269:tid 187460] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:02.295844 2026] [security2:error] [pid 187269:tid 187407] [client 4.196.65.241:2105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wpx2.php"] [unique_id "aryzNtFcyhWr7HDzNGmLMQAAAhU"]
[Wed Sep 30 00:59:02.353479 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.353748 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.442776 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.443056 2026] [access_compat:error] [pid 187269:tid 187476] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.455127 2026] [security2:error] [pid 187269:tid 187436] [client 13.70.1.101:15722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/9.php"] [unique_id "aryzNtFcyhWr7HDzNGmLOAAAAjI"]
[Wed Sep 30 00:59:02.534613 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.534900 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.590159 2026] [security2:error] [pid 187269:tid 187435] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryzNtFcyhWr7HDzNGmLQwAAAjE"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:59:02.592640 2026] [security2:error] [pid 187269:tid 187429] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzNtFcyhWr7HDzNGmLRAAAAis"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.626602 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.28:46466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:02.626870 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.626886 2026] [access_compat:error] [pid 187269:tid 187505] [client 47.79.13.28:46466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:02.627140 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.645426 2026] [lsapi:warn] [pid 187269:tid 187530] [client 146.103.110.101:0] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: http://kshar.net/gift-wrap/
[Wed Sep 30 00:59:02.646317 2026] [security2:error] [pid 187269:tid 187515] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzNtFcyhWr7HDzNGmLSAAAAoE"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.717015 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.717300 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.720739 2026] [security2:error] [pid 187269:tid 187410] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzNtFcyhWr7HDzNGmLTQAAAhg"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.722979 2026] [security2:error] [pid 187269:tid 187523] [client 20.28.180.172:29601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/samll.php"] [unique_id "aryzNtFcyhWr7HDzNGmLTgAAAog"]
[Wed Sep 30 00:59:02.752007 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.4.78:24321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzNtFcyhWr7HDzNGmLUQAAAmQ"]
[Wed Sep 30 00:59:02.760206 2026] [access_compat:error] [pid 187269:tid 187487] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:02.760472 2026] [access_compat:error] [pid 187269:tid 187487] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:02.767500 2026] [security2:error] [pid 186850:tid 187070] [client 13.70.1.101:16139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryzNk5Phls--iYlcKgOOQAAAWQ"]
[Wed Sep 30 00:59:02.769696 2026] [security2:error] [pid 187269:tid 187512] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzNtFcyhWr7HDzNGmLVAAAAn4"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.808390 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.808664 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.825501 2026] [security2:error] [pid 187269:tid 187441] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/Batch/v1"] [unique_id "aryzNtFcyhWr7HDzNGmLVgAAAjc"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.850530 2026] [security2:error] [pid 186850:tid 186991] [client 20.28.180.172:36467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/nauik.php"] [unique_id "aryzNk5Phls--iYlcKgOOwAAARU"]
[Wed Sep 30 00:59:02.880909 2026] [security2:error] [pid 187269:tid 187408] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzNtFcyhWr7HDzNGmLVwAAAhY"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.899225 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.899491 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:02.937315 2026] [security2:error] [pid 187269:tid 187454] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1/"] [unique_id "aryzNtFcyhWr7HDzNGmLXQAAAkQ"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.943247 2026] [security2:error] [pid 187269:tid 187459] [client 155.190.6.18:40662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzNtFcyhWr7HDzNGmLXgAAAkk"]
[Wed Sep 30 00:59:02.943340 2026] [security2:error] [pid 187269:tid 187459] [client 155.190.6.18:40662] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzNtFcyhWr7HDzNGmLXgAAAkk"]
[Wed Sep 30 00:59:02.990771 2026] [security2:error] [pid 187269:tid 187519] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryzNtFcyhWr7HDzNGmLYQAAAoU"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:02.992726 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:02.993133 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.050322 2026] [security2:error] [pid 187269:tid 187518] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryzN9FcyhWr7HDzNGmLZQAAAoQ"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:03.083678 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.083956 2026] [access_compat:error] [pid 187269:tid 187411] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.087833 2026] [security2:error] [pid 187269:tid 187482] [client 20.213.164.196:10767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/myglu.php"] [unique_id "aryzN9FcyhWr7HDzNGmLaAAAAmA"]
[Wed Sep 30 00:59:03.103286 2026] [security2:error] [pid 187269:tid 187460] [client 103.168.67.253:9228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzN9FcyhWr7HDzNGmLagAAAko"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:03.110940 2026] [security2:error] [pid 186850:tid 186990] [client 13.70.4.78:23971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzN05Phls--iYlcKgOPQAAARQ"]
[Wed Sep 30 00:59:03.133030 2026] [security2:error] [pid 187269:tid 187500] [client 20.28.180.172:29613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/abde5e1996.php"] [unique_id "aryzN9FcyhWr7HDzNGmLbAAAAnI"]
[Wed Sep 30 00:59:03.173959 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.174234 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.181514 2026] [security2:error] [pid 187269:tid 187437] [client 13.70.1.101:15936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/.well-known/log.php"] [unique_id "aryzN9FcyhWr7HDzNGmLcgAAAjM"]
[Wed Sep 30 00:59:03.199182 2026] [security2:error] [pid 187269:tid 187492] [client 20.219.19.141:23776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/1klopedf.php"] [unique_id "aryzN9FcyhWr7HDzNGmLdAAAAmo"]
[Wed Sep 30 00:59:03.215407 2026] [security2:error] [pid 187269:tid 187413] [client 4.196.65.241:19114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/yachi.php"] [unique_id "aryzN9FcyhWr7HDzNGmLdQAAAhs"]
[Wed Sep 30 00:59:03.216937 2026] [security2:error] [pid 187269:tid 187526] [client 103.168.67.253:9232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzN9FcyhWr7HDzNGmLdgAAAos"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:03.221349 2026] [security2:error] [pid 186850:tid 186981] [client 37.41.16.35:52229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOQAAAAQs"]
[Wed Sep 30 00:59:03.221452 2026] [security2:error] [pid 186850:tid 186981] [client 37.41.16.35:52229] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOQAAAAQs"]
[Wed Sep 30 00:59:03.229694 2026] [security2:error] [pid 187269:tid 187436] [client 45.138.12.32:32346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wdp.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzN9FcyhWr7HDzNGmLdwAAAjI"]
[Wed Sep 30 00:59:03.266284 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.266591 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.267194 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:03.267452 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:03.267661 2026] [security2:error] [pid 187269:tid 187480] [client 182.69.182.151:24452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzN9FcyhWr7HDzNGmLegAAAl4"]
[Wed Sep 30 00:59:03.268231 2026] [security2:error] [pid 187269:tid 187480] [client 182.69.182.151:24452] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzN9FcyhWr7HDzNGmLegAAAl4"]
[Wed Sep 30 00:59:03.300650 2026] [security2:error] [pid 187269:tid 187412] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "aryzN9FcyhWr7HDzNGmLfgAAAho"], referer: https://coscharis-tech.com/
[Wed Sep 30 00:59:03.327144 2026] [security2:error] [pid 187269:tid 187416] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzN9FcyhWr7HDzNGmLgAAAAh4"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:03.356580 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.356896 2026] [access_compat:error] [pid 187269:tid 187446] [client 216.73.216.46:9943] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.371752 2026] [security2:error] [pid 186850:tid 186906] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzN05Phls--iYlcKgOQgABeDc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18182&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:59:03.371773 2026] [security2:error] [pid 186850:tid 186906] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzN05Phls--iYlcKgOQgABeDc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18182&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:59:03.381741 2026] [security2:error] [pid 187269:tid 187478] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzN9FcyhWr7HDzNGmLgwAAAlw"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:03.408471 2026] [security2:error] [pid 187269:tid 187511] [client 105.112.178.79:38322] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tjo.tiz.mybluehost.me"] [uri "/__ss_probe_da7c649b1e4e4b76d7929f857533645e__"] [unique_id "aryzN9FcyhWr7HDzNGmLhAAAAn0"]
[Wed Sep 30 00:59:03.447902 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.448193 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.448737 2026] [security2:error] [pid 186850:tid 187064] [client 13.70.4.78:23954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-links-opml.php"] [unique_id "aryzN05Phls--iYlcKgOQwAAAV4"]
[Wed Sep 30 00:59:03.516488 2026] [security2:error] [pid 186850:tid 187021] [client 13.70.1.101:56290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/class.php"] [unique_id "aryzN05Phls--iYlcKgORAAAATM"]
[Wed Sep 30 00:59:03.523918 2026] [security2:error] [pid 186850:tid 187058] [client 180.149.24.202:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryzN05Phls--iYlcKgORQAAAVg"]
[Wed Sep 30 00:59:03.538743 2026] [security2:error] [pid 187269:tid 187426] [client 216.73.216.46:9943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzN9FcyhWr7HDzNGmLigAAAig"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OC9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTM%3D
[Wed Sep 30 00:59:03.538776 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.539071 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.591357 2026] [security2:error] [pid 187269:tid 187425] [client 20.28.180.172:36438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wander.php"] [unique_id "aryzN9FcyhWr7HDzNGmLjQAAAic"]
[Wed Sep 30 00:59:03.684104 2026] [security2:error] [pid 187269:tid 187486] [client 45.138.12.32:32364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wcr.uvv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzN9FcyhWr7HDzNGmLkQAAAmQ"]
[Wed Sep 30 00:59:03.721924 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.722194 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.756718 2026] [access_compat:error] [pid 187269:tid 187484] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:03.756980 2026] [access_compat:error] [pid 187269:tid 187484] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:03.812695 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:03.812973 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:4721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:03.850343 2026] [security2:error] [pid 186850:tid 187075] [client 49.36.41.37:54568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOTwAAAWk"]
[Wed Sep 30 00:59:03.851982 2026] [security2:error] [pid 186850:tid 187075] [client 49.36.41.37:54568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOTwAAAWk"]
[Wed Sep 30 00:59:03.864762 2026] [security2:error] [pid 187269:tid 187442] [client 13.70.1.101:15735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/lock360.php"] [unique_id "aryzN9FcyhWr7HDzNGmLlwAAAjg"]
[Wed Sep 30 00:59:03.910529 2026] [security2:error] [pid 186850:tid 186913] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzN05Phls--iYlcKgOUAABTj4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18180&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:59:03.910554 2026] [security2:error] [pid 186850:tid 186913] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzN05Phls--iYlcKgOUAABTj4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=18180&sid=743e31d6e7c22510dc62711cd0544370
[Wed Sep 30 00:59:03.983624 2026] [security2:error] [pid 186850:tid 187105] [client 103.241.204.139:56065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOUgAAAYc"]
[Wed Sep 30 00:59:03.983777 2026] [security2:error] [pid 186850:tid 187105] [client 103.241.204.139:56065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzN05Phls--iYlcKgOUgAAAYc"]
[Wed Sep 30 00:59:03.998737 2026] [security2:error] [pid 187269:tid 187502] [client 216.73.216.46:4721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzN9FcyhWr7HDzNGmLmQAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OC9kcml2ZXIvY3B1MTM%3D
[Wed Sep 30 00:59:04.035314 2026] [security2:error] [pid 186850:tid 187060] [client 13.70.4.78:62003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/hp.php"] [unique_id "aryzOE5Phls--iYlcKgOUwAAAVo"]
[Wed Sep 30 00:59:04.049527 2026] [security2:error] [pid 187269:tid 187440] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzONFcyhWr7HDzNGmLmwAAAjY"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:04.111182 2026] [security2:error] [pid 187269:tid 187498] [client 20.198.74.230:24183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ORVX-55jkI7.php"] [unique_id "aryzONFcyhWr7HDzNGmLnwAAAnA"]
[Wed Sep 30 00:59:04.229060 2026] [security2:error] [pid 187269:tid 187479] [client 13.70.1.101:56313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.allprobuildingandcontracting.com"] [uri "/system_log.php"] [unique_id "aryzONFcyhWr7HDzNGmLpgAAAl0"]
[Wed Sep 30 00:59:04.229594 2026] [access_compat:error] [pid 187269:tid 187520] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:04.229849 2026] [access_compat:error] [pid 187269:tid 187520] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:04.249783 2026] [security2:error] [pid 186850:tid 187025] [client 20.28.180.172:34261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinoleary.net"] [uri "/cjhnp.php"] [unique_id "aryzOE5Phls--iYlcKgOWgAAATc"]
[Wed Sep 30 00:59:04.271315 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.271595 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.303027 2026] [access_compat:error] [pid 187269:tid 187449] [client 47.79.13.1:54996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:04.303331 2026] [access_compat:error] [pid 187269:tid 187449] [client 47.79.13.1:54996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:04.316479 2026] [security2:error] [pid 186850:tid 187072] [client 43.104.4.186:18567] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryzOE5Phls--iYlcKgOXAAAAWY"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=phone-accessories%2Cprinters%2Csolid-works-software
[Wed Sep 30 00:59:04.327435 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:62001] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.327878 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:62001] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.348203 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:53782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.348473 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:53782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.373430 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:46336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.373687 2026] [access_compat:error] [pid 187269:tid 187439] [client 216.73.216.46:46336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.393660 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.393967 2026] [access_compat:error] [pid 187269:tid 187475] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.397618 2026] [security2:error] [pid 187269:tid 187450] [client 20.28.180.172:36468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wsd.php"] [unique_id "aryzONFcyhWr7HDzNGmLsgAAAkA"]
[Wed Sep 30 00:59:04.413950 2026] [security2:error] [pid 187269:tid 187448] [client 223.181.30.165:1063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLswAAAj4"]
[Wed Sep 30 00:59:04.414062 2026] [security2:error] [pid 187269:tid 187448] [client 223.181.30.165:1063] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLswAAAj4"]
[Wed Sep 30 00:59:04.415017 2026] [security2:error] [pid 187269:tid 187414] [client 150.107.232.159:35714] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLqgAAAhw"]
[Wed Sep 30 00:59:04.415122 2026] [security2:error] [pid 187269:tid 187414] [client 150.107.232.159:35714] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLqgAAAhw"]
[Wed Sep 30 00:59:04.417378 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.417641 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.429404 2026] [security2:error] [pid 187269:tid 187476] [client 20.70.173.30:2134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/mac.php"] [unique_id "aryzONFcyhWr7HDzNGmLtQAAAlo"]
[Wed Sep 30 00:59:04.444191 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.444457 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.445996 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.446266 2026] [access_compat:error] [pid 187269:tid 187436] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.521049 2026] [security2:error] [pid 186850:tid 187037] [client 13.70.4.78:61991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/mo.php"] [unique_id "aryzOE5Phls--iYlcKgOYQAAAUM"]
[Wed Sep 30 00:59:04.538910 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.539196 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.610515 2026] [security2:error] [pid 187269:tid 187415] [client 20.219.19.141:57094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/zv.php"] [unique_id "aryzONFcyhWr7HDzNGmLwgAAAh0"]
[Wed Sep 30 00:59:04.632360 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.632792 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.642689 2026] [security2:error] [pid 186850:tid 187078] [client 20.194.30.107:10026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/red.php"] [unique_id "aryzOE5Phls--iYlcKgOZAAAAWw"]
[Wed Sep 30 00:59:04.661094 2026] [security2:error] [pid 187269:tid 187485] [client 152.59.169.65:57965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLxgAAAmM"]
[Wed Sep 30 00:59:04.664649 2026] [security2:error] [pid 187269:tid 187485] [client 152.59.169.65:57965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmLxgAAAmM"]
[Wed Sep 30 00:59:04.719475 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.719729 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.796178 2026] [access_compat:error] [pid 187269:tid 187453] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:04.796449 2026] [access_compat:error] [pid 187269:tid 187453] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:04.812576 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.812904 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.880368 2026] [security2:error] [pid 187269:tid 187507] [client 13.70.4.78:24322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/ivmirgut.php"] [unique_id "aryzONFcyhWr7HDzNGmL1QAAAnk"]
[Wed Sep 30 00:59:04.903885 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.904143 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:04.907431 2026] [security2:error] [pid 187269:tid 187525] [client 103.159.192.142:50194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmL1gAAAoo"]
[Wed Sep 30 00:59:04.907567 2026] [security2:error] [pid 187269:tid 187525] [client 103.159.192.142:50194] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzONFcyhWr7HDzNGmL1gAAAoo"]
[Wed Sep 30 00:59:04.958825 2026] [security2:error] [pid 187269:tid 187442] [client 20.213.164.196:10774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/aboutt.php"] [unique_id "aryzONFcyhWr7HDzNGmL1wAAAjg"]
[Wed Sep 30 00:59:04.995000 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:04.995270 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.084253 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.084516 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.093326 2026] [security2:error] [pid 187269:tid 187474] [client 45.185.192.46:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryzOdFcyhWr7HDzNGmL3QAAAlg"]
[Wed Sep 30 00:59:05.133526 2026] [access_compat:error] [pid 187269:tid 187408] [client 47.79.13.168:38088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:05.133793 2026] [access_compat:error] [pid 187269:tid 187408] [client 47.79.13.168:38088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:05.176063 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.176352 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.183669 2026] [security2:error] [pid 186850:tid 187045] [client 159.223.71.139:52360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/wp-content/plugins/plugins/cache.php"] [unique_id "aryzOU5Phls--iYlcKgOdwAAAUs"], referer: www.google.com
[Wed Sep 30 00:59:05.224341 2026] [security2:error] [pid 187269:tid 187449] [client 13.70.4.78:61956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/baba.php"] [unique_id "aryzOdFcyhWr7HDzNGmL5QAAAj8"]
[Wed Sep 30 00:59:05.226860 2026] [security2:error] [pid 187269:tid 187533] [client 103.172.210.103:51975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL5gAAApI"]
[Wed Sep 30 00:59:05.226955 2026] [security2:error] [pid 187269:tid 187533] [client 103.172.210.103:51975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL5gAAApI"]
[Wed Sep 30 00:59:05.236127 2026] [access_compat:error] [pid 187269:tid 187524] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:05.236586 2026] [access_compat:error] [pid 187269:tid 187524] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:05.269318 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.269586 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.295308 2026] [security2:error] [pid 187269:tid 187413] [client 82.102.18.222:4004] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzOdFcyhWr7HDzNGmL6QAAAhs"]
[Wed Sep 30 00:59:05.312961 2026] [access_compat:error] [pid 187269:tid 187472] [client 47.79.13.174:52366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:05.313294 2026] [access_compat:error] [pid 187269:tid 187472] [client 47.79.13.174:52366] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:05.359248 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.359520 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.375018 2026] [security2:error] [pid 187269:tid 187475] [client 20.28.180.172:36464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/media.php"] [unique_id "aryzOdFcyhWr7HDzNGmL6wAAAlk"]
[Wed Sep 30 00:59:05.451209 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.451484 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.494190 2026] [security2:error] [pid 187269:tid 187441] [client 116.193.128.26:64598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL7gAAAjc"]
[Wed Sep 30 00:59:05.494299 2026] [security2:error] [pid 187269:tid 187441] [client 116.193.128.26:64598] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL7gAAAjc"]
[Wed Sep 30 00:59:05.511096 2026] [security2:error] [pid 187269:tid 187534] [client 20.213.164.196:10766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wp-whe.php"] [unique_id "aryzOdFcyhWr7HDzNGmL7wAAApM"]
[Wed Sep 30 00:59:05.532046 2026] [security2:error] [pid 187269:tid 187432] [client 20.70.173.30:49498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/abcd.php"] [unique_id "aryzOdFcyhWr7HDzNGmL8AAAAi4"]
[Wed Sep 30 00:59:05.540074 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.540351 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.557067 2026] [security2:error] [pid 187269:tid 187450] [client 161.118.214.16:52200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.chizlaw.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "aryzOdFcyhWr7HDzNGmL8QAAAkA"]
[Wed Sep 30 00:59:05.578745 2026] [security2:error] [pid 187269:tid 187469] [client 4.240.25.22:30783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/df.php"] [unique_id "aryzOdFcyhWr7HDzNGmL9QAAAlM"]
[Wed Sep 30 00:59:05.587448 2026] [security2:error] [pid 187269:tid 187429] [client 13.70.4.78:24329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/Components.php"] [unique_id "aryzOdFcyhWr7HDzNGmL9gAAAis"]
[Wed Sep 30 00:59:05.631450 2026] [security2:error] [pid 187269:tid 187452] [client 82.102.18.222:45858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL-AAAAkI"]
[Wed Sep 30 00:59:05.632886 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.633134 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.656498 2026] [security2:error] [pid 187269:tid 187487] [client 49.43.163.212:63842] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL_AAAAmU"]
[Wed Sep 30 00:59:05.656603 2026] [security2:error] [pid 187269:tid 187487] [client 49.43.163.212:63842] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzOdFcyhWr7HDzNGmL_AAAAmU"]
[Wed Sep 30 00:59:05.723326 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.723641 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.728423 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:05.728670 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:05.758919 2026] [security2:error] [pid 187269:tid 187422] [client 4.240.25.22:22155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/cilus.php"] [unique_id "aryzOdFcyhWr7HDzNGmMBAAAAiQ"]
[Wed Sep 30 00:59:05.813965 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.814223 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.905980 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.906265 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:05.996756 2026] [security2:error] [pid 187269:tid 187486] [client 13.70.4.78:23978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/aboutt.php"] [unique_id "aryzOdFcyhWr7HDzNGmMDwAAAmQ"]
[Wed Sep 30 00:59:05.997677 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:05.997959 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.067306 2026] [security2:error] [pid 187269:tid 187451] [client 20.28.180.172:36311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/images.php"] [unique_id "aryzOtFcyhWr7HDzNGmMEAAAAkE"]
[Wed Sep 30 00:59:06.088195 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.088462 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.179713 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.180051 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.231462 2026] [access_compat:error] [pid 187269:tid 187473] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:06.231732 2026] [access_compat:error] [pid 187269:tid 187473] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:06.271274 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.271547 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.360605 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.360879 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.373926 2026] [security2:error] [pid 186850:tid 187053] [client 4.196.65.241:2516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/Qdkv4tOtNdefault.php"] [unique_id "aryzOk5Phls--iYlcKgOlQAAAVM"]
[Wed Sep 30 00:59:06.402196 2026] [security2:error] [pid 186850:tid 187030] [client 13.70.4.78:24375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/maint/14.php"] [unique_id "aryzOk5Phls--iYlcKgOlgAAATw"]
[Wed Sep 30 00:59:06.409734 2026] [security2:error] [pid 187269:tid 187440] [client 82.102.18.222:45864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzOtFcyhWr7HDzNGmMFwAAAjY"]
[Wed Sep 30 00:59:06.451333 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.451604 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.458264 2026] [security2:error] [pid 187269:tid 187424] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzOtFcyhWr7HDzNGmMGAAAAiY"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.470843 2026] [security2:error] [pid 187269:tid 187460] [client 20.213.164.196:10693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/ssixta.php"] [unique_id "aryzOtFcyhWr7HDzNGmMGgAAAko"]
[Wed Sep 30 00:59:06.543668 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.543952 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.560752 2026] [security2:error] [pid 186850:tid 187058] [client 152.59.165.7:55822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzOk5Phls--iYlcKgOmQAAAVg"]
[Wed Sep 30 00:59:06.560887 2026] [security2:error] [pid 186850:tid 187058] [client 152.59.165.7:55822] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzOk5Phls--iYlcKgOmQAAAVg"]
[Wed Sep 30 00:59:06.597738 2026] [security2:error] [pid 187269:tid 187470] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/Batch/v1"] [unique_id "aryzOtFcyhWr7HDzNGmMHgAAAlQ"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.633933 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.634206 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.670872 2026] [security2:error] [pid 187269:tid 187524] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzOtFcyhWr7HDzNGmMIAAAAok"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.719305 2026] [security2:error] [pid 187269:tid 187529] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/batch/v1/"] [unique_id "aryzOtFcyhWr7HDzNGmMIQAAAo4"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.725030 2026] [security2:error] [pid 186850:tid 187028] [client 13.70.4.78:24344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/xx.php"] [unique_id "aryzOk5Phls--iYlcKgOowAAATo"]
[Wed Sep 30 00:59:06.726278 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.726536 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.762579 2026] [security2:error] [pid 186850:tid 187076] [client 82.102.18.222:45866] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzOk5Phls--iYlcKgOpgAAAWo"]
[Wed Sep 30 00:59:06.773753 2026] [security2:error] [pid 187269:tid 187413] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "aryzOtFcyhWr7HDzNGmMJQAAAhs"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.785862 2026] [access_compat:error] [pid 187269:tid 187472] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:06.786130 2026] [access_compat:error] [pid 187269:tid 187472] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:06.815279 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.815668 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:44577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:06.816738 2026] [access_compat:error] [pid 187269:tid 187523] [client 47.79.13.73:47730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:06.817156 2026] [access_compat:error] [pid 187269:tid 187523] [client 47.79.13.73:47730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:06.827961 2026] [security2:error] [pid 187269:tid 187414] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryzOtFcyhWr7HDzNGmMKwAAAhw"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:06.836584 2026] [security2:error] [pid 186850:tid 187051] [client 20.28.180.172:36372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/ops.php"] [unique_id "aryzOk5Phls--iYlcKgOqQAAAVE"]
[Wed Sep 30 00:59:06.906076 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:06.906394 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.013443 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.013715 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.016158 2026] [security2:error] [pid 187269:tid 187412] [client 20.219.19.141:23985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/zv.update.php"] [unique_id "aryzO9FcyhWr7HDzNGmMMgAAAho"]
[Wed Sep 30 00:59:07.021190 2026] [security2:error] [pid 187269:tid 187463] [client 202.179.95.79:60837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMMQAAAk0"]
[Wed Sep 30 00:59:07.021308 2026] [security2:error] [pid 187269:tid 187463] [client 202.179.95.79:60837] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMMQAAAk0"]
[Wed Sep 30 00:59:07.036567 2026] [security2:error] [pid 186850:tid 186996] [client 216.73.216.46:44577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzO05Phls--iYlcKgOrAAAARo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTIvbm9kZTAvbWVtb3J5MzM2
[Wed Sep 30 00:59:07.089788 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.090062 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.108335 2026] [security2:error] [pid 186850:tid 187099] [client 82.102.18.222:33284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzO05Phls--iYlcKgOrQAAAYE"]
[Wed Sep 30 00:59:07.120752 2026] [security2:error] [pid 187269:tid 187487] [client 13.70.4.78:61982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/gelay.php"] [unique_id "aryzO9FcyhWr7HDzNGmMNQAAAmU"]
[Wed Sep 30 00:59:07.180072 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.180349 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.228819 2026] [security2:error] [pid 186850:tid 187074] [client 20.213.164.196:10749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/tesla.php"] [unique_id "aryzO05Phls--iYlcKgOsgAAAWg"]
[Wed Sep 30 00:59:07.260580 2026] [access_compat:error] [pid 187269:tid 187485] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:07.261016 2026] [access_compat:error] [pid 187269:tid 187485] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:07.274896 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.275341 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.361817 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.362118 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.423003 2026] [security2:error] [pid 186850:tid 187087] [client 82.102.18.222:33286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzO05Phls--iYlcKgOvAAAAXU"]
[Wed Sep 30 00:59:07.452460 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.452715 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.456134 2026] [security2:error] [pid 187269:tid 187492] [client 203.122.45.246:64087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMRwAAAmo"]
[Wed Sep 30 00:59:07.456369 2026] [security2:error] [pid 187269:tid 187492] [client 203.122.45.246:64087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMRwAAAmo"]
[Wed Sep 30 00:59:07.458657 2026] [security2:error] [pid 187269:tid 187411] [client 103.168.67.253:9242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzO9FcyhWr7HDzNGmMSAAAAhk"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:07.484600 2026] [security2:error] [pid 187269:tid 187467] [client 13.70.4.78:61967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/htaccess.php"] [unique_id "aryzO9FcyhWr7HDzNGmMSgAAAlE"]
[Wed Sep 30 00:59:07.487692 2026] [autoindex:error] [pid 187269:tid 187453] [client 169.40.142.131:49418] AH01276: Cannot serve directory /home4/ghiqmhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:07.543450 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.543711 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.548108 2026] [security2:error] [pid 186850:tid 187094] [client 20.70.173.30:25279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzO05Phls--iYlcKgOwAAAAXw"]
[Wed Sep 30 00:59:07.586384 2026] [security2:error] [pid 186850:tid 186999] [client 88.234.255.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/desktops"] [unique_id "aryzO05Phls--iYlcKgOwQAAAR0"]
[Wed Sep 30 00:59:07.605741 2026] [security2:error] [pid 187269:tid 187428] [client 131.123.43.138:42542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.43.123.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php/wp-login.php"] [unique_id "aryzO9FcyhWr7HDzNGmMUAAAAio"]
[Wed Sep 30 00:59:07.634562 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:07.634844 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:07.748849 2026] [access_compat:error] [pid 187269:tid 187503] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:07.749137 2026] [access_compat:error] [pid 187269:tid 187503] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:07.758035 2026] [security2:error] [pid 187269:tid 187419] [client 82.102.18.222:24107] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzO9FcyhWr7HDzNGmMWQAAAiE"]
[Wed Sep 30 00:59:07.784340 2026] [security2:error] [pid 186850:tid 187084] [client 213.136.69.135:51806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-http.php"] [unique_id "aryzO05Phls--iYlcKgOyAAAAXI"], referer: binance.com
[Wed Sep 30 00:59:07.821681 2026] [security2:error] [pid 186850:tid 187005] [client 13.70.4.78:24368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/readme.php"] [unique_id "aryzO05Phls--iYlcKgOyQAAASM"]
[Wed Sep 30 00:59:07.935479 2026] [security2:error] [pid 186850:tid 187033] [client 4.240.25.22:63775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzO05Phls--iYlcKgOzAAAAT8"]
[Wed Sep 30 00:59:08.014836 2026] [security2:error] [pid 187269:tid 187515] [client 72.255.10.32:51110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMaAAAAoE"]
[Wed Sep 30 00:59:08.015012 2026] [security2:error] [pid 187269:tid 187515] [client 72.255.10.32:51110] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzO9FcyhWr7HDzNGmMaAAAAoE"]
[Wed Sep 30 00:59:08.052859 2026] [security2:error] [pid 186850:tid 187009] [client 4.196.65.241:64155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/bgmlktrf.php"] [unique_id "aryzPE5Phls--iYlcKgO0AAAASc"]
[Wed Sep 30 00:59:08.059432 2026] [security2:error] [pid 186850:tid 187059] [client 43.227.131.37:48190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzPE5Phls--iYlcKgOzwAAAVk"]
[Wed Sep 30 00:59:08.059585 2026] [security2:error] [pid 186850:tid 187059] [client 43.227.131.37:48190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzPE5Phls--iYlcKgOzwAAAVk"]
[Wed Sep 30 00:59:08.064377 2026] [security2:error] [pid 187269:tid 187412] [client 82.102.18.222:8566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzPNFcyhWr7HDzNGmMcQAAAho"]
[Wed Sep 30 00:59:08.102097 2026] [security2:error] [pid 187269:tid 187533] [client 131.123.43.138:42556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.43.123.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryzPNFcyhWr7HDzNGmMdgAAApI"]
[Wed Sep 30 00:59:08.110956 2026] [security2:error] [pid 187269:tid 187513] [client 20.198.74.230:24159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/2rrtccj7.php"] [unique_id "aryzPNFcyhWr7HDzNGmMdwAAAn8"]
[Wed Sep 30 00:59:08.154601 2026] [security2:error] [pid 187269:tid 187422] [client 103.168.67.253:6844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzPNFcyhWr7HDzNGmMeAAAAiQ"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:08.175591 2026] [security2:error] [pid 187269:tid 187434] [client 13.70.4.78:23561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/max.php"] [unique_id "aryzPNFcyhWr7HDzNGmMewAAAjA"]
[Wed Sep 30 00:59:08.186626 2026] [security2:error] [pid 186850:tid 186982] [client 169.40.142.131:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.ghi.qmh.mybluehost.me"] [uri "/.env"] [unique_id "aryzPE5Phls--iYlcKgO1AAAAQw"]
[Wed Sep 30 00:59:08.187597 2026] [security2:error] [pid 186850:tid 186995] [client 169.40.142.131:49446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.ghi.qmh.mybluehost.me"] [uri "/.env.bak"] [unique_id "aryzPE5Phls--iYlcKgO1QAAARk"]
[Wed Sep 30 00:59:08.190653 2026] [security2:error] [pid 187269:tid 187441] [client 169.40.142.131:49472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.ghi.qmh.mybluehost.me"] [uri "/.env.old"] [unique_id "aryzPNFcyhWr7HDzNGmMgAAAAjc"]
[Wed Sep 30 00:59:08.191038 2026] [security2:error] [pid 187269:tid 187534] [client 169.40.142.131:49510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.ghi.qmh.mybluehost.me"] [uri "/.env.backup"] [unique_id "aryzPNFcyhWr7HDzNGmMgQAAApM"]
[Wed Sep 30 00:59:08.191638 2026] [security2:error] [pid 186850:tid 187085] [client 169.40.142.131:49508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.ghi.qmh.mybluehost.me"] [uri "/.env.swp"] [unique_id "aryzPE5Phls--iYlcKgO1gAAAXM"]
[Wed Sep 30 00:59:08.284859 2026] [access_compat:error] [pid 187269:tid 187451] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:08.284966 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.285129 2026] [access_compat:error] [pid 187269:tid 187451] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:08.285221 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.333332 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.333613 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.350187 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.350495 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.365517 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.365943 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.373396 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:46336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.373842 2026] [access_compat:error] [pid 187269:tid 187481] [client 216.73.216.46:46336] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.385317 2026] [security2:error] [pid 186850:tid 187038] [client 20.219.19.141:46487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/wquosqsi.php"] [unique_id "aryzPE5Phls--iYlcKgO3QAAAUQ"]
[Wed Sep 30 00:59:08.386546 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:53782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.386803 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:53782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.403244 2026] [security2:error] [pid 187269:tid 187428] [client 82.102.18.222:33310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzPNFcyhWr7HDzNGmMlQAAAio"]
[Wed Sep 30 00:59:08.418802 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.419223 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.428074 2026] [security2:error] [pid 186850:tid 187029] [client 74.7.242.1:59344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzPE5Phls--iYlcKgO3gAAATs"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:59:08.435096 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.435552 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.457228 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.457516 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.495862 2026] [access_compat:error] [pid 186850:tid 187042] [client 47.79.13.177:60356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 00:59:08.496118 2026] [access_compat:error] [pid 186850:tid 187042] [client 47.79.13.177:60356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 00:59:08.544715 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.545004 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.558437 2026] [security2:error] [pid 186850:tid 187081] [client 13.70.4.78:61970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/post.php"] [unique_id "aryzPE5Phls--iYlcKgO5gAAAW8"]
[Wed Sep 30 00:59:08.634199 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.634469 2026] [access_compat:error] [pid 187269:tid 187410] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.687036 2026] [autoindex:error] [pid 187269:tid 187522] [client 212.156.70.154:55988] AH01276: Cannot serve directory /home4/qnvbafmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:08.708766 2026] [security2:error] [pid 187269:tid 187515] [client 82.102.18.222:33318] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzPNFcyhWr7HDzNGmMpwAAAoE"]
[Wed Sep 30 00:59:08.729559 2026] [access_compat:error] [pid 187269:tid 187414] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:08.729559 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.730022 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.730022 2026] [access_compat:error] [pid 187269:tid 187414] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:08.819375 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.819670 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.848728 2026] [security2:error] [pid 187269:tid 187496] [client 49.205.105.16:15282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzPNFcyhWr7HDzNGmMrgAAAm4"]
[Wed Sep 30 00:59:08.848908 2026] [security2:error] [pid 187269:tid 187496] [client 49.205.105.16:15282] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzPNFcyhWr7HDzNGmMrgAAAm4"]
[Wed Sep 30 00:59:08.909351 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:08.909605 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:08.952960 2026] [security2:error] [pid 187269:tid 187487] [client 20.213.164.196:10798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/222.php"] [unique_id "aryzPNFcyhWr7HDzNGmMsgAAAmU"]
[Wed Sep 30 00:59:08.979979 2026] [security2:error] [pid 186850:tid 187071] [client 13.70.4.78:23942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/themes.php"] [unique_id "aryzPE5Phls--iYlcKgO7QAAAWU"]
[Wed Sep 30 00:59:09.001188 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.001457 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.044676 2026] [security2:error] [pid 186850:tid 187025] [client 82.102.18.222:33322] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzPU5Phls--iYlcKgO7wAAATc"]
[Wed Sep 30 00:59:09.062598 2026] [security2:error] [pid 187269:tid 187533] [client 45.138.12.32:37726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wjv.vmd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzPdFcyhWr7HDzNGmMtQAAApI"]
[Wed Sep 30 00:59:09.091288 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.091562 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.165470 2026] [security2:error] [pid 187269:tid 187416] [client 4.240.25.22:11581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-the.php"] [unique_id "aryzPdFcyhWr7HDzNGmMuQAAAh4"]
[Wed Sep 30 00:59:09.181531 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.181825 2026] [access_compat:error] [pid 187269:tid 187452] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.266860 2026] [access_compat:error] [pid 187269:tid 187441] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:09.267110 2026] [access_compat:error] [pid 187269:tid 187441] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:09.271156 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.271410 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.295045 2026] [security2:error] [pid 186850:tid 187065] [client 13.70.4.78:23957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aryzPU5Phls--iYlcKgO8gAAAV8"]
[Wed Sep 30 00:59:09.324065 2026] [security2:error] [pid 186850:tid 186983] [client 4.240.25.22:63800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/reviall.php"] [unique_id "aryzPU5Phls--iYlcKgO9AAAAQ0"]
[Wed Sep 30 00:59:09.363985 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.364271 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.389228 2026] [security2:error] [pid 187269:tid 187445] [client 82.102.18.222:33324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzPdFcyhWr7HDzNGmMwwAAAjs"]
[Wed Sep 30 00:59:09.455996 2026] [security2:error] [pid 187269:tid 187431] [client 20.213.164.196:10721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/media.php"] [unique_id "aryzPdFcyhWr7HDzNGmMyAAAAi0"]
[Wed Sep 30 00:59:09.459106 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.459552 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.481955 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzPU5Phls--iYlcKgO-AABLEg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=d03ddc0ebb136c242c75e6435b1d1717
[Wed Sep 30 00:59:09.481982 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzPU5Phls--iYlcKgO-AABLEg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=d03ddc0ebb136c242c75e6435b1d1717
[Wed Sep 30 00:59:09.545508 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.545772 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.590125 2026] [security2:error] [pid 187269:tid 187415] [client 131.123.43.138:42558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.43.123.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryzPdFcyhWr7HDzNGmMzwAAAh0"]
[Wed Sep 30 00:59:09.636987 2026] [security2:error] [pid 187269:tid 187348] [remote 57.141.14.24:25368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-includes/wlwmanifest.xml"] [unique_id "aryzPdFcyhWr7HDzNGmM0gACcUc"]
[Wed Sep 30 00:59:09.637673 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.638197 2026] [access_compat:error] [pid 187269:tid 187428] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.692684 2026] [security2:error] [pid 187269:tid 187464] [client 82.102.18.222:33336] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzPdFcyhWr7HDzNGmM1QAAAk4"]
[Wed Sep 30 00:59:09.728523 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.728789 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.769474 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:09.769748 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:09.785874 2026] [security2:error] [pid 187269:tid 187430] [client 13.70.4.78:24336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryzPdFcyhWr7HDzNGmM2QAAAiw"]
[Wed Sep 30 00:59:09.804860 2026] [security2:error] [pid 187269:tid 187518] [client 20.28.180.172:36417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/BDKR28WP.php"] [unique_id "aryzPdFcyhWr7HDzNGmM2wAAAoQ"]
[Wed Sep 30 00:59:09.811996 2026] [security2:error] [pid 187269:tid 187468] [client 173.254.29.157:32314] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzPdFcyhWr7HDzNGmM3AAAAlI"]
[Wed Sep 30 00:59:09.819803 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.820086 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.829059 2026] [security2:error] [pid 187269:tid 187502] [client 173.254.29.157:32324] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzPdFcyhWr7HDzNGmM3gAAAnQ"]
[Wed Sep 30 00:59:09.844269 2026] [security2:error] [pid 187269:tid 187410] [client 173.254.29.157:32338] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzPdFcyhWr7HDzNGmM3wAAAhg"]
[Wed Sep 30 00:59:09.858680 2026] [security2:error] [pid 187269:tid 187458] [client 173.254.29.157:32354] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzPdFcyhWr7HDzNGmM4AAAAkg"]
[Wed Sep 30 00:59:09.911111 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:09.911390 2026] [access_compat:error] [pid 187269:tid 187412] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:09.969720 2026] [security2:error] [pid 187269:tid 187530] [client 116.72.182.19:50940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzPdFcyhWr7HDzNGmM5wAAAo8"]
[Wed Sep 30 00:59:09.969902 2026] [security2:error] [pid 187269:tid 187530] [client 116.72.182.19:50940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzPdFcyhWr7HDzNGmM5wAAAo8"]
[Wed Sep 30 00:59:10.002904 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.003187 2026] [access_compat:error] [pid 187269:tid 187460] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.018572 2026] [security2:error] [pid 187269:tid 187506] [client 82.102.18.222:33344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzPtFcyhWr7HDzNGmM6gAAAng"]
[Wed Sep 30 00:59:10.039135 2026] [security2:error] [pid 187269:tid 187525] [client 20.213.164.196:10765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/24.php"] [unique_id "aryzPtFcyhWr7HDzNGmM6wAAAoo"]
[Wed Sep 30 00:59:10.095566 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.095841 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.138297 2026] [security2:error] [pid 186850:tid 187047] [client 13.70.4.78:61980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/click.php"] [unique_id "aryzPk5Phls--iYlcKgO_wAAAU0"]
[Wed Sep 30 00:59:10.173846 2026] [security2:error] [pid 186850:tid 187093] [client 4.196.65.241:53063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/acf1ced8aec2.php"] [unique_id "aryzPk5Phls--iYlcKgPAgAAAXs"]
[Wed Sep 30 00:59:10.184956 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.185215 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.240256 2026] [security2:error] [pid 186850:tid 187063] [client 20.219.19.141:23953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/asset.php"] [unique_id "aryzPk5Phls--iYlcKgPAwAAAV0"]
[Wed Sep 30 00:59:10.267002 2026] [access_compat:error] [pid 187269:tid 187455] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:10.267278 2026] [access_compat:error] [pid 187269:tid 187455] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:10.275829 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.276110 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.337074 2026] [security2:error] [pid 187269:tid 187478] [client 82.102.18.222:33352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzPtFcyhWr7HDzNGmM_QAAAlw"]
[Wed Sep 30 00:59:10.366284 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.366610 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.422369 2026] [security2:error] [pid 187269:tid 187431] [client 20.28.180.172:36469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/mac.php"] [unique_id "aryzPtFcyhWr7HDzNGmNAAAAAi0"]
[Wed Sep 30 00:59:10.444874 2026] [security2:error] [pid 187269:tid 187329] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzPtFcyhWr7HDzNGmNAQACOjQ"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D26927
[Wed Sep 30 00:59:10.457636 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.457901 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:26977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.479645 2026] [security2:error] [pid 187269:tid 187418] [client 20.213.164.196:10781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/xwpg.php"] [unique_id "aryzPtFcyhWr7HDzNGmNAwAAAiA"]
[Wed Sep 30 00:59:10.548199 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.548469 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.553868 2026] [security2:error] [pid 187269:tid 187499] [client 13.70.4.78:61960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/install.php"] [unique_id "aryzPtFcyhWr7HDzNGmNDAAAAnE"]
[Wed Sep 30 00:59:10.638290 2026] [security2:error] [pid 187269:tid 187459] [client 216.73.216.46:26977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzPtFcyhWr7HDzNGmNFAAAAkk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTA%3D
[Wed Sep 30 00:59:10.640141 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.640411 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.665404 2026] [security2:error] [pid 187269:tid 187420] [client 127.0.0.1:24998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzPtFcyhWr7HDzNGmNDwAAAiI"]
[Wed Sep 30 00:59:10.665630 2026] [security2:error] [pid 187269:tid 187427] [client 74.7.244.57:43830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.vaj.rdg.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzPtFcyhWr7HDzNGmNDgACKSE"]
[Wed Sep 30 00:59:10.671902 2026] [security2:error] [pid 187269:tid 187512] [client 85.204.70.118:54534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzPtFcyhWr7HDzNGmNFQAAAn4"]
[Wed Sep 30 00:59:10.681850 2026] [security2:error] [pid 186850:tid 187003] [client 82.102.18.222:33354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzPk5Phls--iYlcKgPCAAAASE"]
[Wed Sep 30 00:59:10.731140 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.731429 2026] [access_compat:error] [pid 187269:tid 187529] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.772670 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:10.773044 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:10.822408 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.822666 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.849803 2026] [security2:error] [pid 186850:tid 186987] [client 159.223.71.139:53502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/assets/images/images/cache.php"] [unique_id "aryzPk5Phls--iYlcKgPDAAAARE"], referer: www.google.com
[Wed Sep 30 00:59:10.914909 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:10.915181 2026] [access_compat:error] [pid 187269:tid 187447] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:10.920686 2026] [security2:error] [pid 187269:tid 187487] [client 20.28.180.172:36472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wmore1.php"] [unique_id "aryzPtFcyhWr7HDzNGmNIgAAAmU"]
[Wed Sep 30 00:59:10.967384 2026] [security2:error] [pid 187269:tid 187466] [client 85.204.70.118:54538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryzPtFcyhWr7HDzNGmNIwAAAlA"]
[Wed Sep 30 00:59:10.994517 2026] [security2:error] [pid 187269:tid 187508] [client 82.102.18.222:33360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ghz.sul.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzPtFcyhWr7HDzNGmNJAAAAno"]
[Wed Sep 30 00:59:11.006107 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.006398 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.057523 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:24360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/13k.php"] [unique_id "aryzP9FcyhWr7HDzNGmNKAAAAn8"]
[Wed Sep 30 00:59:11.096063 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.096335 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.124400 2026] [security2:error] [pid 187269:tid 187525] [client 20.213.164.196:10760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/blacks.php"] [unique_id "aryzP9FcyhWr7HDzNGmNKwAAAoo"]
[Wed Sep 30 00:59:11.129076 2026] [security2:error] [pid 187269:tid 187489] [client 20.70.173.30:24713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/reviall.php"] [unique_id "aryzP9FcyhWr7HDzNGmNLAAAAmc"]
[Wed Sep 30 00:59:11.134387 2026] [security2:error] [pid 187269:tid 187416] [client 20.198.74.230:51420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/mmq.php"] [unique_id "aryzP9FcyhWr7HDzNGmNLQAAAh4"]
[Wed Sep 30 00:59:11.147078 2026] [security2:error] [pid 187269:tid 187470] [client 116.197.133.25:64607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNLgAAAlQ"]
[Wed Sep 30 00:59:11.147187 2026] [security2:error] [pid 187269:tid 187470] [client 116.197.133.25:64607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNLgAAAlQ"]
[Wed Sep 30 00:59:11.192822 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.193286 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.213021 2026] [security2:error] [pid 187269:tid 187506] [client 185.191.171.14:57614] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.clenbuterol4sale.com"] [uri "/robots.txt"] [unique_id "aryzP9FcyhWr7HDzNGmNNQAAAng"]
[Wed Sep 30 00:59:11.213143 2026] [security2:error] [pid 187269:tid 187506] [client 185.191.171.14:57614] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.clenbuterol4sale.com"] [uri "/robots.txt"] [unique_id "aryzP9FcyhWr7HDzNGmNNQAAAng"]
[Wed Sep 30 00:59:11.258709 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:11.259006 2026] [access_compat:error] [pid 187269:tid 187435] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:11.279444 2026] [security2:error] [pid 187269:tid 187502] [client 223.235.102.107:19686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNPAAAAnQ"]
[Wed Sep 30 00:59:11.279623 2026] [security2:error] [pid 187269:tid 187502] [client 223.235.102.107:19686] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNPAAAAnQ"]
[Wed Sep 30 00:59:11.282009 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.282448 2026] [access_compat:error] [pid 187269:tid 187469] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.317232 2026] [security2:error] [pid 187269:tid 187429] [client 177.137.62.9:6366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.62.137.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "coscharis-tech.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNPQAAAis"]
[Wed Sep 30 00:59:11.317375 2026] [security2:error] [pid 187269:tid 187429] [client 177.137.62.9:6366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "coscharis-tech.com"] [uri "/xmlrpc.php"] [unique_id "aryzP9FcyhWr7HDzNGmNPQAAAis"]
[Wed Sep 30 00:59:11.331442 2026] [security2:error] [pid 187269:tid 187461] [client 20.219.19.141:46468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/cued.php"] [unique_id "aryzP9FcyhWr7HDzNGmNRAAAAks"]
[Wed Sep 30 00:59:11.357608 2026] [security2:error] [pid 187269:tid 187443] [client 45.138.12.32:32476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.whq.xcc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzP9FcyhWr7HDzNGmNRQAAAjk"]
[Wed Sep 30 00:59:11.371636 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.371907 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.407801 2026] [security2:error] [pid 187269:tid 187482] [client 85.204.70.118:54546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzP9FcyhWr7HDzNGmNSQAAAmA"]
[Wed Sep 30 00:59:11.454658 2026] [security2:error] [pid 187269:tid 187474] [client 13.70.4.78:23955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/up.php"] [unique_id "aryzP9FcyhWr7HDzNGmNTgAAAlg"]
[Wed Sep 30 00:59:11.460756 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.461047 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.508674 2026] [core:error] [pid 187269:tid 187441] [client 65.111.21.129:14169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:11.508697 2026] [core:error] [pid 187269:tid 187441] [client 65.111.21.129:14169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:11.552318 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.552589 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.567706 2026] [security2:error] [pid 187269:tid 187505] [client 85.208.96.207:44674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.clenbuterol4sale.com"] [uri "/rsp-nutrition-amino-lean-review/"] [unique_id "aryzP9FcyhWr7HDzNGmNVwAAAnc"]
[Wed Sep 30 00:59:11.567830 2026] [security2:error] [pid 187269:tid 187505] [client 85.208.96.207:44674] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.clenbuterol4sale.com"] [uri "/rsp-nutrition-amino-lean-review/"] [unique_id "aryzP9FcyhWr7HDzNGmNVwAAAnc"]
[Wed Sep 30 00:59:11.626896 2026] [security2:error] [pid 187269:tid 187522] [client 20.213.164.196:10720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/class-wp-http-client.php"] [unique_id "aryzP9FcyhWr7HDzNGmNWgAAAoc"]
[Wed Sep 30 00:59:11.642749 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.643017 2026] [access_compat:error] [pid 187269:tid 187413] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.647299 2026] [security2:error] [pid 187269:tid 187515] [client 20.194.30.107:17527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/key.php"] [unique_id "aryzP9FcyhWr7HDzNGmNXAAAAoE"]
[Wed Sep 30 00:59:11.667804 2026] [security2:error] [pid 186850:tid 186885] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzP05Phls--iYlcKgPFAABGSI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:11.667837 2026] [security2:error] [pid 186850:tid 186885] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzP05Phls--iYlcKgPFAABGSI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:11.689502 2026] [security2:error] [pid 187269:tid 187449] [client 85.204.70.118:61836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzP9FcyhWr7HDzNGmNXwAAAj8"]
[Wed Sep 30 00:59:11.704031 2026] [security2:error] [pid 187269:tid 187448] [client 20.28.180.172:36425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryzP9FcyhWr7HDzNGmNYAAAAj4"]
[Wed Sep 30 00:59:11.736221 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.736497 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.794549 2026] [access_compat:error] [pid 187269:tid 187477] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:11.794866 2026] [access_compat:error] [pid 187269:tid 187477] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:11.801539 2026] [autoindex:error] [pid 187269:tid 187406] [client 194.163.134.215:57050] AH01276: Cannot serve directory /home4/mwkjvmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:11.815438 2026] [security2:error] [pid 187269:tid 187513] [client 13.70.4.78:24353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/0x1949.php"] [unique_id "aryzP9FcyhWr7HDzNGmNbAAAAn8"]
[Wed Sep 30 00:59:11.824257 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.824524 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.833664 2026] [security2:error] [pid 186850:tid 186964] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzP05Phls--iYlcKgPFwABInE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=245c45fb0046eee14d08ab42a81e2d07&start=225&t=21812
[Wed Sep 30 00:59:11.833688 2026] [security2:error] [pid 186850:tid 186964] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzP05Phls--iYlcKgPFwABInE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=245c45fb0046eee14d08ab42a81e2d07&start=225&t=21812
[Wed Sep 30 00:59:11.874475 2026] [access_compat:error] [pid 187269:tid 187365] [remote 17.166.237.146:50704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.874915 2026] [access_compat:error] [pid 187269:tid 187365] [remote 17.166.237.146:50704] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.917474 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:11.917747 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:11.924433 2026] [security2:error] [pid 187269:tid 187422] [client 4.196.65.241:19470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cnsk.php"] [unique_id "aryzP9FcyhWr7HDzNGmNcQAAAiQ"]
[Wed Sep 30 00:59:11.970820 2026] [security2:error] [pid 187269:tid 187476] [client 85.204.70.118:54556] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzP9FcyhWr7HDzNGmNcwAAAlo"]
[Wed Sep 30 00:59:11.981685 2026] [security2:error] [pid 187269:tid 187421] [client 4.196.65.241:53089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/20.php"] [unique_id "aryzP9FcyhWr7HDzNGmNdAAAAiM"]
[Wed Sep 30 00:59:12.007143 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.007417 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.061744 2026] [security2:error] [pid 186850:tid 186988] [client 93.174.93.12:59448] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "173.254.29.159"] [uri "/server-status"] [unique_id "aryzQE5Phls--iYlcKgPGAAAARI"]
[Wed Sep 30 00:59:12.098332 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.098767 2026] [access_compat:error] [pid 187269:tid 187429] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.167704 2026] [security2:error] [pid 187269:tid 187501] [client 20.219.19.141:23958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/sd.php"] [unique_id "aryzQNFcyhWr7HDzNGmNegAAAnM"]
[Wed Sep 30 00:59:12.184487 2026] [security2:error] [pid 187269:tid 187431] [client 103.168.67.253:6852] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQNFcyhWr7HDzNGmNfQAAAi0"], referer: http://glorymfb.com/wp-admin/
[Wed Sep 30 00:59:12.188566 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.188827 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.203179 2026] [security2:error] [pid 187269:tid 187415] [client 20.28.180.172:36462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/ab.php"] [unique_id "aryzQNFcyhWr7HDzNGmNfgAAAh0"]
[Wed Sep 30 00:59:12.208864 2026] [security2:error] [pid 187269:tid 187433] [client 223.181.60.167:24774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzQNFcyhWr7HDzNGmNfwAAAi8"]
[Wed Sep 30 00:59:12.209132 2026] [security2:error] [pid 187269:tid 187433] [client 223.181.60.167:24774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzQNFcyhWr7HDzNGmNfwAAAi8"]
[Wed Sep 30 00:59:12.252481 2026] [security2:error] [pid 187269:tid 187407] [client 85.204.70.118:54560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzQNFcyhWr7HDzNGmNhgAAAhU"]
[Wed Sep 30 00:59:12.271988 2026] [security2:error] [pid 186850:tid 186986] [client 103.159.192.142:50706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzQE5Phls--iYlcKgPGgAAARA"]
[Wed Sep 30 00:59:12.272116 2026] [security2:error] [pid 186850:tid 186986] [client 103.159.192.142:50706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzQE5Phls--iYlcKgPGgAAARA"]
[Wed Sep 30 00:59:12.278751 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.279008 2026] [access_compat:error] [pid 187269:tid 187474] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.289631 2026] [security2:error] [pid 187269:tid 187500] [client 20.213.164.196:10513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/zoo2.php"] [unique_id "aryzQNFcyhWr7HDzNGmNigAAAnI"]
[Wed Sep 30 00:59:12.290627 2026] [access_compat:error] [pid 187269:tid 187526] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:12.290938 2026] [access_compat:error] [pid 187269:tid 187526] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:12.309327 2026] [security2:error] [pid 187269:tid 187420] [client 13.70.4.78:61979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/cong.php"] [unique_id "aryzQNFcyhWr7HDzNGmNiwAAAiI"]
[Wed Sep 30 00:59:12.371911 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.372215 2026] [access_compat:error] [pid 187269:tid 187485] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.448415 2026] [security2:error] [pid 187269:tid 187499] [client 194.163.134.215:57080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.mwk.jvm.mybluehost.me"] [uri "/.env"] [unique_id "aryzQNFcyhWr7HDzNGmNmwAAAnE"]
[Wed Sep 30 00:59:12.462152 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.462235 2026] [security2:error] [pid 187269:tid 187408] [client 194.163.134.215:57056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.mwk.jvm.mybluehost.me"] [uri "/.env.old"] [unique_id "aryzQNFcyhWr7HDzNGmNogAAAhY"]
[Wed Sep 30 00:59:12.462246 2026] [security2:error] [pid 187269:tid 187495] [client 194.163.134.215:57070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.mwk.jvm.mybluehost.me"] [uri "/.env.bak"] [unique_id "aryzQNFcyhWr7HDzNGmNoQAAAm0"]
[Wed Sep 30 00:59:12.462424 2026] [access_compat:error] [pid 187269:tid 187487] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.462498 2026] [security2:error] [pid 187269:tid 187441] [client 194.163.134.215:57110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.mwk.jvm.mybluehost.me"] [uri "/.env.backup"] [unique_id "aryzQNFcyhWr7HDzNGmNoAAAAjc"]
[Wed Sep 30 00:59:12.463009 2026] [security2:error] [pid 186850:tid 187029] [client 194.163.134.215:57108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.mwk.jvm.mybluehost.me"] [uri "/.env.swp"] [unique_id "aryzQE5Phls--iYlcKgPHQAAATs"]
[Wed Sep 30 00:59:12.532682 2026] [security2:error] [pid 187269:tid 187450] [client 85.204.70.118:54576] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzQNFcyhWr7HDzNGmNpQAAAkA"]
[Wed Sep 30 00:59:12.533889 2026] [security2:error] [pid 186850:tid 187058] [client 20.28.180.172:36434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/dairg.php"] [unique_id "aryzQE5Phls--iYlcKgPHgAAAVg"]
[Wed Sep 30 00:59:12.554991 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.555304 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.645155 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.645422 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.704622 2026] [security2:error] [pid 186850:tid 187080] [client 13.70.4.78:23964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/bs1.php"] [unique_id "aryzQE5Phls--iYlcKgPHwAAAW4"]
[Wed Sep 30 00:59:12.736495 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.736760 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.743387 2026] [access_compat:error] [pid 187269:tid 187523] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:12.743704 2026] [access_compat:error] [pid 187269:tid 187523] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:12.743850 2026] [security2:error] [pid 187269:tid 187452] [client 20.198.74.230:41347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/fryvbbn.php"] [unique_id "aryzQNFcyhWr7HDzNGmNsAAAAkI"]
[Wed Sep 30 00:59:12.748222 2026] [security2:error] [pid 187269:tid 187432] [client 103.168.67.253:29742] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "glorymfb.com"] [uri "/rest/settings"] [unique_id "aryzQNFcyhWr7HDzNGmNsQAAAi4"]
[Wed Sep 30 00:59:12.774820 2026] [security2:error] [pid 187269:tid 187506] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQNFcyhWr7HDzNGmNtwAAAng"]
[Wed Sep 30 00:59:12.776605 2026] [security2:error] [pid 187269:tid 187493] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/@vite/client"] [unique_id "aryzQNFcyhWr7HDzNGmNuAAAAms"]
[Wed Sep 30 00:59:12.800447 2026] [security2:error] [pid 186850:tid 187064] [client 49.13.24.81:13284] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "networkwestmichigan.com"] [uri "/"] [unique_id "aryzQE5Phls--iYlcKgPIgAAAV4"], referer: http://networkwestmichigan.com
[Wed Sep 30 00:59:12.817498 2026] [security2:error] [pid 187269:tid 187463] [client 85.204.70.118:54582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzQNFcyhWr7HDzNGmNvgAAAk0"]
[Wed Sep 30 00:59:12.818189 2026] [security2:error] [pid 187269:tid 187456] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQNFcyhWr7HDzNGmNvQAAAkY"]
[Wed Sep 30 00:59:12.825909 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.826185 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.832632 2026] [security2:error] [pid 187269:tid 187534] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQNFcyhWr7HDzNGmNwwAAApM"]
[Wed Sep 30 00:59:12.850871 2026] [security2:error] [pid 187269:tid 187451] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/magento_version"] [unique_id "aryzQNFcyhWr7HDzNGmNxQAAAkE"]
[Wed Sep 30 00:59:12.851401 2026] [security2:error] [pid 187269:tid 187443] [client 103.168.67.253:29748] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "glorymfb.com"] [uri "/livewire/update"] [unique_id "aryzQNFcyhWr7HDzNGmNxgAAAjk"]
[Wed Sep 30 00:59:12.871250 2026] [security2:error] [pid 187269:tid 187364] [remote 74.7.227.56:46022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzQNFcyhWr7HDzNGmNxwACS1c"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 00:59:12.890344 2026] [security2:error] [pid 187269:tid 187433] [client 103.168.67.253:29768] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQNFcyhWr7HDzNGmNyAAAAi8"]
[Wed Sep 30 00:59:12.919015 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:12.919310 2026] [access_compat:error] [pid 187269:tid 187526] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:12.919529 2026] [core:error] [pid 187269:tid 187510] [client 65.111.24.249:21023] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:12.919540 2026] [core:error] [pid 187269:tid 187510] [client 65.111.24.249:21023] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:13.011665 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.012101 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.096087 2026] [security2:error] [pid 187269:tid 187505] [client 85.204.70.118:38025] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzQdFcyhWr7HDzNGmN1wAAAnc"]
[Wed Sep 30 00:59:13.100981 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.101264 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.139566 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.4.78:61962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryzQdFcyhWr7HDzNGmN1gAAAns"]
[Wed Sep 30 00:59:13.190821 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.191100 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.226651 2026] [security2:error] [pid 187269:tid 187518] [client 20.213.164.196:10802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/zoo1.php"] [unique_id "aryzQdFcyhWr7HDzNGmN3AAAAoQ"]
[Wed Sep 30 00:59:13.236600 2026] [access_compat:error] [pid 187269:tid 187412] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:13.236862 2026] [security2:error] [pid 187269:tid 187513] [client 20.28.180.172:36451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/z60.php"] [unique_id "aryzQdFcyhWr7HDzNGmN3gAAAn8"]
[Wed Sep 30 00:59:13.236871 2026] [access_compat:error] [pid 187269:tid 187412] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:13.282629 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.282911 2026] [access_compat:error] [pid 187269:tid 187525] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.376611 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.376904 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.403846 2026] [security2:error] [pid 187269:tid 187469] [client 85.204.70.118:54596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzQdFcyhWr7HDzNGmN4wAAAlM"]
[Wed Sep 30 00:59:13.468432 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.468873 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.532217 2026] [autoindex:error] [pid 187269:tid 187465] [client 212.156.70.154:14824] AH01276: Cannot serve directory /home4/zmsysrmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:13.554181 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.554441 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.645035 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.645295 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.682958 2026] [security2:error] [pid 187269:tid 187480] [client 85.204.70.118:54598] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzQdFcyhWr7HDzNGmN9wAAAl4"]
[Wed Sep 30 00:59:13.737862 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.738133 2026] [access_compat:error] [pid 187269:tid 187468] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.753456 2026] [security2:error] [pid 187269:tid 187519] [client 20.219.19.141:23937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/ans.php"] [unique_id "aryzQdFcyhWr7HDzNGmN-gAAAoU"]
[Wed Sep 30 00:59:13.754492 2026] [security2:error] [pid 187269:tid 187467] [client 37.41.16.35:52833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmN-wAAAlE"]
[Wed Sep 30 00:59:13.754593 2026] [security2:error] [pid 187269:tid 187467] [client 37.41.16.35:52833] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmN-wAAAlE"]
[Wed Sep 30 00:59:13.770988 2026] [access_compat:error] [pid 187269:tid 187530] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:13.771286 2026] [access_compat:error] [pid 187269:tid 187530] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:13.779129 2026] [security2:error] [pid 187269:tid 187423] [client 155.190.6.18:53156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmN_gAAAiU"]
[Wed Sep 30 00:59:13.828035 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.828314 2026] [access_compat:error] [pid 187269:tid 187505] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.836720 2026] [security2:error] [pid 187269:tid 187484] [client 13.70.4.78:23979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/termps.php"] [unique_id "aryzQdFcyhWr7HDzNGmOAQAAAmI"]
[Wed Sep 30 00:59:13.843052 2026] [security2:error] [pid 187269:tid 187522] [client 20.213.164.196:10734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/class-ajax.php"] [unique_id "aryzQdFcyhWr7HDzNGmOAgAAAoc"]
[Wed Sep 30 00:59:13.874360 2026] [security2:error] [pid 187269:tid 187502] [client 182.69.182.151:26472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmOBgAAAnQ"]
[Wed Sep 30 00:59:13.874466 2026] [security2:error] [pid 187269:tid 187502] [client 182.69.182.151:26472] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmOBgAAAnQ"]
[Wed Sep 30 00:59:13.918937 2026] [security2:error] [pid 187269:tid 187458] [client 45.138.12.32:18774] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.lkq.woo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzQdFcyhWr7HDzNGmODAAAAkg"]
[Wed Sep 30 00:59:13.919332 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:13.919707 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:13.968225 2026] [security2:error] [pid 187269:tid 187472] [client 85.204.70.118:54600] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzQdFcyhWr7HDzNGmOEAAAAlY"]
[Wed Sep 30 00:59:14.010584 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.010871 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.022568 2026] [security2:error] [pid 187269:tid 187454] [client 20.28.180.172:36400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/imageskir.php"] [unique_id "aryzQtFcyhWr7HDzNGmOEgAAAkQ"]
[Wed Sep 30 00:59:14.053559 2026] [security2:error] [pid 187269:tid 187423] [client 155.190.6.18:53156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzQdFcyhWr7HDzNGmN_gAAAiU"]
[Wed Sep 30 00:59:14.102610 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.102879 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.155926 2026] [security2:error] [pid 187269:tid 187432] [client 13.70.4.78:61973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/brand.php"] [unique_id "aryzQtFcyhWr7HDzNGmOFwAAAi4"]
[Wed Sep 30 00:59:14.192016 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.192346 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:45994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.252365 2026] [security2:error] [pid 186850:tid 187015] [client 85.204.70.118:54610] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzQk5Phls--iYlcKgPNAAAAS0"]
[Wed Sep 30 00:59:14.283091 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.283370 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.286846 2026] [access_compat:error] [pid 187269:tid 187529] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:14.287099 2026] [access_compat:error] [pid 187269:tid 187529] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:14.327618 2026] [security2:error] [pid 187269:tid 187475] [client 49.36.41.37:55108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmOHwAAAlk"]
[Wed Sep 30 00:59:14.327740 2026] [security2:error] [pid 187269:tid 187475] [client 49.36.41.37:55108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmOHwAAAlk"]
[Wed Sep 30 00:59:14.334870 2026] [security2:error] [pid 187269:tid 187485] [client 104.207.51.219:26395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yourkatana.com"] [uri "/wp-login.php"] [unique_id "aryzQtFcyhWr7HDzNGmOIAAAAmM"], referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:14.372698 2026] [security2:error] [pid 187269:tid 187439] [client 216.73.216.46:45994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzQtFcyhWr7HDzNGmOJQAAAjU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk0MDAvbm9kZTAvbWVtb3J5MzAz
[Wed Sep 30 00:59:14.426017 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.426288 2026] [access_compat:error] [pid 187269:tid 187511] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.465598 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.465872 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.469046 2026] [security2:error] [pid 186850:tid 187067] [client 20.70.173.30:59523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/222.php"] [unique_id "aryzQk5Phls--iYlcKgPNgAAAWE"]
[Wed Sep 30 00:59:14.473624 2026] [security2:error] [pid 186850:tid 187087] [client 13.70.4.78:61992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/atomlib.php"] [unique_id "aryzQk5Phls--iYlcKgPNwAAAXU"]
[Wed Sep 30 00:59:14.479655 2026] [security2:error] [pid 187269:tid 187441] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQtFcyhWr7HDzNGmOGwAAAjc"]
[Wed Sep 30 00:59:14.518874 2026] [security2:error] [pid 187269:tid 187479] [client 49.13.24.81:17870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "aryzQdFcyhWr7HDzNGmN3wAAAl0"], referer: http://networkwestmichigan.com
[Wed Sep 30 00:59:14.551294 2026] [security2:error] [pid 187269:tid 187428] [client 85.204.70.118:54626] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzQtFcyhWr7HDzNGmOMAAAAio"]
[Wed Sep 30 00:59:14.557034 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.557306 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.569465 2026] [security2:error] [pid 187269:tid 187519] [client 20.213.164.196:10759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/gm.php"] [unique_id "aryzQtFcyhWr7HDzNGmOMgAAAoU"]
[Wed Sep 30 00:59:14.576136 2026] [security2:error] [pid 186850:tid 187054] [client 103.241.204.139:56569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzQk5Phls--iYlcKgPOgAAAVQ"]
[Wed Sep 30 00:59:14.576232 2026] [security2:error] [pid 186850:tid 187054] [client 103.241.204.139:56569] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzQk5Phls--iYlcKgPOgAAAVQ"]
[Wed Sep 30 00:59:14.591129 2026] [security2:error] [pid 187269:tid 187468] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQtFcyhWr7HDzNGmOMQAAAlI"]
[Wed Sep 30 00:59:14.627873 2026] [security2:error] [pid 187269:tid 187446] [client 105.112.178.79:38324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tjmcgroup.com.au"] [uri "/.env"] [unique_id "aryzQtFcyhWr7HDzNGmONQAAAjw"]
[Wed Sep 30 00:59:14.631320 2026] [security2:error] [pid 187269:tid 187445] [client 150.107.232.159:35611] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmONgAAAjs"]
[Wed Sep 30 00:59:14.631413 2026] [security2:error] [pid 187269:tid 187445] [client 150.107.232.159:35611] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmONgAAAjs"]
[Wed Sep 30 00:59:14.644961 2026] [security2:error] [pid 187269:tid 187530] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQtFcyhWr7HDzNGmONwAAAo8"]
[Wed Sep 30 00:59:14.645416 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.645678 2026] [access_compat:error] [pid 187269:tid 187512] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.685634 2026] [security2:error] [pid 187269:tid 187503] [client 20.211.90.37:48410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzQtFcyhWr7HDzNGmOOgAAAnU"]
[Wed Sep 30 00:59:14.725654 2026] [access_compat:error] [pid 187269:tid 187472] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:14.725929 2026] [access_compat:error] [pid 187269:tid 187472] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:14.737257 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.737508 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.793062 2026] [security2:error] [pid 186850:tid 186980] [client 4.240.25.22:11913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/baba.php"] [unique_id "aryzQk5Phls--iYlcKgPQAAAAQo"]
[Wed Sep 30 00:59:14.805646 2026] [security2:error] [pid 187269:tid 187427] [client 13.70.4.78:23565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/product.php"] [unique_id "aryzQtFcyhWr7HDzNGmOQgAAAik"]
[Wed Sep 30 00:59:14.814394 2026] [security2:error] [pid 187269:tid 187509] [client 4.240.25.22:21890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/666.php"] [unique_id "aryzQtFcyhWr7HDzNGmOQwAAAns"]
[Wed Sep 30 00:59:14.828733 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.828997 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.833057 2026] [security2:error] [pid 187269:tid 187454] [client 20.28.180.172:36298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/backup-helper.php"] [unique_id "aryzQtFcyhWr7HDzNGmORQAAAkQ"]
[Wed Sep 30 00:59:14.845111 2026] [security2:error] [pid 186850:tid 186984] [client 85.204.70.118:54642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzQk5Phls--iYlcKgPQgAAAQ4"]
[Wed Sep 30 00:59:14.920881 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:14.921140 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:14.941353 2026] [security2:error] [pid 187269:tid 187495] [client 20.219.19.141:23998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/cns.php"] [unique_id "aryzQtFcyhWr7HDzNGmOSAAAAm0"]
[Wed Sep 30 00:59:14.982338 2026] [security2:error] [pid 187269:tid 187451] [client 223.181.30.165:26203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmOSQAAAkE"]
[Wed Sep 30 00:59:14.982492 2026] [security2:error] [pid 187269:tid 187451] [client 223.181.30.165:26203] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzQtFcyhWr7HDzNGmOSQAAAkE"]
[Wed Sep 30 00:59:15.012487 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.012773 2026] [access_compat:error] [pid 187269:tid 187482] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.025516 2026] [security2:error] [pid 187269:tid 187513] [client 4.196.65.241:64176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/4cdf8c8db0index.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOTgAAAn8"]
[Wed Sep 30 00:59:15.042718 2026] [security2:error] [pid 187269:tid 187481] [client 20.211.90.37:48390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOUQAAAl8"]
[Wed Sep 30 00:59:15.070085 2026] [security2:error] [pid 187269:tid 187499] [client 45.138.12.32:18706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wmz.icl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOUgAAAnE"]
[Wed Sep 30 00:59:15.085048 2026] [security2:error] [pid 187269:tid 187432] [client 20.213.164.196:10712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/class-wp-site-list.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOUwAAAi4"]
[Wed Sep 30 00:59:15.104904 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.105189 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.126327 2026] [security2:error] [pid 187269:tid 187462] [client 85.204.70.118:54652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.czb.qzc.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzQ9FcyhWr7HDzNGmOVgAAAkw"]
[Wed Sep 30 00:59:15.174268 2026] [security2:error] [pid 187269:tid 187430] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzQ9FcyhWr7HDzNGmOWAAAAiw"]
[Wed Sep 30 00:59:15.194989 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.195268 2026] [access_compat:error] [pid 187269:tid 187524] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.200190 2026] [security2:error] [pid 187269:tid 187477] [client 45.156.62.96:60657] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOWgAAAls"]
[Wed Sep 30 00:59:15.200335 2026] [security2:error] [pid 187269:tid 187477] [client 45.156.62.96:60657] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOWgAAAls"]
[Wed Sep 30 00:59:15.229961 2026] [security2:error] [pid 187269:tid 187463] [client 13.70.4.78:61987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/function.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOXQAAAk0"]
[Wed Sep 30 00:59:15.233537 2026] [access_compat:error] [pid 187269:tid 187483] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:15.233798 2026] [access_compat:error] [pid 187269:tid 187483] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:15.285240 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.285517 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.377465 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.377757 2026] [access_compat:error] [pid 187269:tid 187501] [client 216.73.216.46:52924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.397985 2026] [security2:error] [pid 187269:tid 187414] [client 152.59.169.65:1054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOYwAAAhw"]
[Wed Sep 30 00:59:15.398111 2026] [security2:error] [pid 187269:tid 187414] [client 152.59.169.65:1054] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOYwAAAhw"]
[Wed Sep 30 00:59:15.446306 2026] [security2:error] [pid 187269:tid 187422] [client 20.28.180.172:36383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/1xmomo.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOZgAAAiQ"]
[Wed Sep 30 00:59:15.468434 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.468710 2026] [access_compat:error] [pid 187269:tid 187415] [client 216.73.216.46:4129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.481493 2026] [security2:error] [pid 187269:tid 187425] [client 20.211.90.37:47048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/1ac.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOaAAAAic"]
[Wed Sep 30 00:59:15.528564 2026] [security2:error] [pid 187269:tid 187492] [client 45.138.12.32:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.woi.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOaQAAAmo"]
[Wed Sep 30 00:59:15.561144 2026] [security2:error] [pid 187269:tid 187443] [client 216.73.216.46:52924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzQ9FcyhWr7HDzNGmObQAAAjk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDcvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDA5
[Wed Sep 30 00:59:15.615255 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.615688 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.645023 2026] [security2:error] [pid 187269:tid 187428] [client 13.70.4.78:62002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/0x.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOcAAAAio"]
[Wed Sep 30 00:59:15.654093 2026] [security2:error] [pid 187269:tid 187420] [client 216.73.216.46:4129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOcQAAAiI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTcvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDA3
[Wed Sep 30 00:59:15.679466 2026] [security2:error] [pid 187269:tid 187530] [client 20.213.164.196:10736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/ttivnife.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOdAAAAo8"]
[Wed Sep 30 00:59:15.704026 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.704359 2026] [access_compat:error] [pid 187269:tid 187503] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.740626 2026] [access_compat:error] [pid 187269:tid 187464] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:15.740907 2026] [access_compat:error] [pid 187269:tid 187464] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:15.774255 2026] [security2:error] [pid 187269:tid 187515] [client 103.172.210.103:52308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOfwAAAoE"]
[Wed Sep 30 00:59:15.774350 2026] [security2:error] [pid 187269:tid 187515] [client 103.172.210.103:52308] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOfwAAAoE"]
[Wed Sep 30 00:59:15.779650 2026] [security2:error] [pid 186850:tid 187089] [client 85.89.215.198:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzQ05Phls--iYlcKgPTgAAAXc"]
[Wed Sep 30 00:59:15.792296 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.792636 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.832487 2026] [security2:error] [pid 186850:tid 187056] [client 20.211.90.37:48420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/flm.php"] [unique_id "aryzQ05Phls--iYlcKgPUgAAAVY"]
[Wed Sep 30 00:59:15.832562 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.832893 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.855399 2026] [security2:error] [pid 187269:tid 187482] [client 20.28.180.172:36290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/almafkew.php"] [unique_id "aryzQ9FcyhWr7HDzNGmOgQAAAmA"]
[Wed Sep 30 00:59:15.922711 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:15.922991 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:15.930987 2026] [security2:error] [pid 186850:tid 187102] [client 20.219.19.141:46522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/faiy.php"] [unique_id "aryzQ05Phls--iYlcKgPVAAAAYQ"]
[Wed Sep 30 00:59:15.986735 2026] [security2:error] [pid 187269:tid 187469] [client 103.168.67.253:29782] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/gravitysmtp/v1/tests/mock-data"] [unique_id "aryzQ9FcyhWr7HDzNGmOgwAAAlM"]
[Wed Sep 30 00:59:16.011993 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.012269 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.079954 2026] [security2:error] [pid 186850:tid 187021] [client 13.70.4.78:24377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/index.php"] [unique_id "aryzRE5Phls--iYlcKgPVwAAATM"]
[Wed Sep 30 00:59:16.104322 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.104586 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.193830 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.194100 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.199119 2026] [security2:error] [pid 187269:tid 187475] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzRNFcyhWr7HDzNGmOtwAAAlk"]
[Wed Sep 30 00:59:16.220079 2026] [security2:error] [pid 187269:tid 187455] [client 20.28.180.172:36362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/database2.php"] [unique_id "aryzRNFcyhWr7HDzNGmOuAAAAkU"]
[Wed Sep 30 00:59:16.231232 2026] [security2:error] [pid 187269:tid 187413] [client 103.168.67.253:29782] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/gravitysmtp/v1/tests/mock-data"] [unique_id "aryzRNFcyhWr7HDzNGmOuQAAAhs"]
[Wed Sep 30 00:59:16.238729 2026] [access_compat:error] [pid 187269:tid 187489] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:16.239013 2026] [access_compat:error] [pid 187269:tid 187489] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:16.286383 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.286653 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.319938 2026] [security2:error] [pid 187269:tid 187414] [client 20.213.164.196:10748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/admin.php/2P.php"] [unique_id "aryzRNFcyhWr7HDzNGmOwAAAAhw"]
[Wed Sep 30 00:59:16.377417 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.377690 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.398210 2026] [security2:error] [pid 187269:tid 187441] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzRNFcyhWr7HDzNGmOwgAAAjc"]
[Wed Sep 30 00:59:16.432441 2026] [security2:error] [pid 187269:tid 187527] [client 103.168.67.253:29782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/index.php"] [unique_id "aryzRNFcyhWr7HDzNGmOxAAAAow"]
[Wed Sep 30 00:59:16.435688 2026] [security2:error] [pid 187269:tid 187501] [client 20.211.90.37:48414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/40341.php"] [unique_id "aryzRNFcyhWr7HDzNGmOxQAAAnM"]
[Wed Sep 30 00:59:16.468086 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.468358 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.540177 2026] [security2:error] [pid 187269:tid 187411] [client 103.168.67.253:28370] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp-json/gravitysmtp/v1/tests/mock-data"] [unique_id "aryzRNFcyhWr7HDzNGmOywAAAhk"]
[Wed Sep 30 00:59:16.560087 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.560363 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.560981 2026] [security2:error] [pid 187269:tid 187510] [client 13.70.4.78:61958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryzRNFcyhWr7HDzNGmOzAAAAnw"]
[Wed Sep 30 00:59:16.649944 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.650237 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.744998 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.745412 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.779603 2026] [access_compat:error] [pid 187269:tid 187508] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:16.779880 2026] [access_compat:error] [pid 187269:tid 187508] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:16.831777 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.832065 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.894222 2026] [security2:error] [pid 187269:tid 187449] [client 20.211.90.37:47081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-log.php"] [unique_id "aryzRNFcyhWr7HDzNGmO4QAAAj8"]
[Wed Sep 30 00:59:16.917910 2026] [security2:error] [pid 187269:tid 187534] [client 116.193.128.26:65347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzRNFcyhWr7HDzNGmO4gAAApM"]
[Wed Sep 30 00:59:16.918037 2026] [security2:error] [pid 187269:tid 187534] [client 116.193.128.26:65347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzRNFcyhWr7HDzNGmO4gAAApM"]
[Wed Sep 30 00:59:16.924142 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:16.924429 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:16.941514 2026] [security2:error] [pid 187269:tid 187507] [client 20.213.164.196:10732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/a.php"] [unique_id "aryzRNFcyhWr7HDzNGmO4wAAAnk"]
[Wed Sep 30 00:59:16.969173 2026] [security2:error] [pid 187269:tid 187525] [client 13.70.4.78:24370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/classwithtostring.php"] [unique_id "aryzRNFcyhWr7HDzNGmO5AAAAoo"]
[Wed Sep 30 00:59:16.985221 2026] [security2:error] [pid 187269:tid 187493] [client 20.28.180.172:36358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/aa.php"] [unique_id "aryzRNFcyhWr7HDzNGmO5QAAAms"]
[Wed Sep 30 00:59:17.014726 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.015009 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.035386 2026] [security2:error] [pid 187269:tid 187518] [client 45.138.12.32:18874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzRdFcyhWr7HDzNGmO6QAAAoQ"]
[Wed Sep 30 00:59:17.038952 2026] [security2:error] [pid 187269:tid 187528] [client 20.198.74.230:41385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/ff.update.php"] [unique_id "aryzRdFcyhWr7HDzNGmO6gAAAo0"]
[Wed Sep 30 00:59:17.048559 2026] [security2:error] [pid 187269:tid 187430] [client 159.223.71.139:61061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/blogs/media/media/cache.php"] [unique_id "aryzRdFcyhWr7HDzNGmO6wAAAiw"], referer: www.google.com
[Wed Sep 30 00:59:17.107528 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.107961 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.197468 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.197736 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.263067 2026] [access_compat:error] [pid 187269:tid 187439] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:17.263301 2026] [security2:error] [pid 187269:tid 187496] [client 20.211.90.37:47102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/sehryhv.php"] [unique_id "aryzRdFcyhWr7HDzNGmO8wAAAm4"]
[Wed Sep 30 00:59:17.263354 2026] [access_compat:error] [pid 187269:tid 187439] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:17.287524 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.287841 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.319998 2026] [security2:error] [pid 187269:tid 187515] [client 152.59.165.7:56400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmO9AAAAoE"]
[Wed Sep 30 00:59:17.320088 2026] [security2:error] [pid 187269:tid 187515] [client 152.59.165.7:56400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmO9AAAAoE"]
[Wed Sep 30 00:59:17.365018 2026] [security2:error] [pid 187269:tid 187410] [client 172.86.81.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.cloud9exp-net.nucreativesolutions.com"] [uri "/.git/config"] [unique_id "aryzRdFcyhWr7HDzNGmO-gAAAhg"]
[Wed Sep 30 00:59:17.367476 2026] [security2:error] [pid 187269:tid 187479] [client 4.240.25.22:30729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/av.php"] [unique_id "aryzRdFcyhWr7HDzNGmO-wAAAl0"]
[Wed Sep 30 00:59:17.377079 2026] [security2:error] [pid 187269:tid 187506] [client 20.28.180.172:36379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/pJPoKA.php"] [unique_id "aryzRdFcyhWr7HDzNGmO_AAAAng"]
[Wed Sep 30 00:59:17.377113 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.377371 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.412726 2026] [security2:error] [pid 187269:tid 187501] [client 13.70.4.78:23564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/dropdown.php"] [unique_id "aryzRdFcyhWr7HDzNGmO_wAAAnM"]
[Wed Sep 30 00:59:17.468871 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.469131 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.564148 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.564439 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.595649 2026] [security2:error] [pid 186850:tid 186901] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzRU5Phls--iYlcKgPfQABOTI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D83989
[Wed Sep 30 00:59:17.649995 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.650257 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.659477 2026] [security2:error] [pid 187269:tid 187459] [client 202.179.95.79:61389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmPCwAAAkk"]
[Wed Sep 30 00:59:17.659632 2026] [security2:error] [pid 187269:tid 187459] [client 202.179.95.79:61389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmPCwAAAkk"]
[Wed Sep 30 00:59:17.667210 2026] [security2:error] [pid 186850:tid 187074] [client 20.211.90.37:48407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/yich.php"] [unique_id "aryzRU5Phls--iYlcKgPgQAAAWg"]
[Wed Sep 30 00:59:17.721544 2026] [security2:error] [pid 187269:tid 187436] [client 177.92.151.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzRdFcyhWr7HDzNGmPDQAAAjI"]
[Wed Sep 30 00:59:17.740436 2026] [access_compat:error] [pid 187269:tid 187499] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:17.740703 2026] [access_compat:error] [pid 187269:tid 187499] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:17.741675 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.741946 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.765559 2026] [security2:error] [pid 187269:tid 187466] [client 20.28.180.172:36429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/24.php"] [unique_id "aryzRdFcyhWr7HDzNGmPEgAAAlA"]
[Wed Sep 30 00:59:17.780291 2026] [security2:error] [pid 187269:tid 187416] [client 20.219.19.141:23967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/gecho.php"] [unique_id "aryzRdFcyhWr7HDzNGmPEwAAAh4"]
[Wed Sep 30 00:59:17.831715 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:17.832050 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:17.851725 2026] [security2:error] [pid 187269:tid 187319] [remote 57.141.14.54:32980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmPGgACiCo"]
[Wed Sep 30 00:59:17.941333 2026] [security2:error] [pid 187269:tid 187462] [client 20.213.164.196:10698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/cord.php"] [unique_id "aryzRdFcyhWr7HDzNGmPIQAAAkw"]
[Wed Sep 30 00:59:17.977255 2026] [security2:error] [pid 187269:tid 187500] [client 203.122.45.246:64722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmPJQAAAnI"]
[Wed Sep 30 00:59:17.977383 2026] [security2:error] [pid 187269:tid 187500] [client 203.122.45.246:64722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzRdFcyhWr7HDzNGmPJQAAAnI"]
[Wed Sep 30 00:59:18.013904 2026] [security2:error] [pid 186850:tid 187093] [client 172.86.81.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.cloud9exp-net.nucreativesolutions.com"] [uri "/.git-credentials"] [unique_id "aryzRk5Phls--iYlcKgPigAAAXs"]
[Wed Sep 30 00:59:18.068753 2026] [security2:error] [pid 186850:tid 187107] [client 20.211.90.37:47052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-blink.php"] [unique_id "aryzRk5Phls--iYlcKgPjQAAAYk"]
[Wed Sep 30 00:59:18.074443 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.074688 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.162885 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.163238 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.175900 2026] [security2:error] [pid 187269:tid 187460] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzRdFcyhWr7HDzNGmPKAAAAko"]
[Wed Sep 30 00:59:18.214253 2026] [security2:error] [pid 186850:tid 186984] [client 13.70.4.78:23552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/moon.php"] [unique_id "aryzRk5Phls--iYlcKgPkwAAAQ4"]
[Wed Sep 30 00:59:18.226102 2026] [access_compat:error] [pid 187269:tid 187519] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:18.227169 2026] [access_compat:error] [pid 187269:tid 187519] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:18.254064 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.254330 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.305338 2026] [security2:error] [pid 187269:tid 187445] [client 20.198.74.230:41364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/lzlhihzi.php"] [unique_id "aryzRtFcyhWr7HDzNGmPMwAAAjs"]
[Wed Sep 30 00:59:18.343727 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.344021 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.436308 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.436590 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.443688 2026] [security2:error] [pid 187269:tid 187467] [client 20.28.180.172:36459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/42b5827789index.php"] [unique_id "aryzRtFcyhWr7HDzNGmPNQAAAlE"]
[Wed Sep 30 00:59:18.476521 2026] [security2:error] [pid 187269:tid 187464] [client 20.211.90.37:47057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-logis.php"] [unique_id "aryzRtFcyhWr7HDzNGmPOAAAAk4"]
[Wed Sep 30 00:59:18.526518 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.526791 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.567423 2026] [security2:error] [pid 186850:tid 187067] [client 106.214.3.140:8931] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzRk5Phls--iYlcKgPmgAAAWE"]
[Wed Sep 30 00:59:18.567540 2026] [security2:error] [pid 186850:tid 187067] [client 106.214.3.140:8931] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzRk5Phls--iYlcKgPmgAAAWE"]
[Wed Sep 30 00:59:18.599780 2026] [security2:error] [pid 187269:tid 187507] [client 20.213.164.196:10788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/anom.php"] [unique_id "aryzRtFcyhWr7HDzNGmPPAAAAnk"]
[Wed Sep 30 00:59:18.605192 2026] [security2:error] [pid 187269:tid 187499] [client 13.70.4.78:61954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/autoload_classmap.php"] [unique_id "aryzRtFcyhWr7HDzNGmPPQAAAnE"]
[Wed Sep 30 00:59:18.617851 2026] [security2:error] [pid 187269:tid 187443] [client 72.255.10.32:51721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzRtFcyhWr7HDzNGmPPgAAAjk"]
[Wed Sep 30 00:59:18.617861 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.617936 2026] [security2:error] [pid 187269:tid 187443] [client 72.255.10.32:51721] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzRtFcyhWr7HDzNGmPPgAAAjk"]
[Wed Sep 30 00:59:18.618124 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.708536 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.708845 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.738339 2026] [security2:error] [pid 187269:tid 187448] [client 172.86.81.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.cloud9exp-net.nucreativesolutions.com"] [uri "/.config/git/config"] [unique_id "aryzRtFcyhWr7HDzNGmPRAAAAj4"]
[Wed Sep 30 00:59:18.786127 2026] [security2:error] [pid 187269:tid 187497] [client 43.227.131.37:10934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzRtFcyhWr7HDzNGmPRgAAAm8"]
[Wed Sep 30 00:59:18.786295 2026] [security2:error] [pid 187269:tid 187497] [client 43.227.131.37:10934] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzRtFcyhWr7HDzNGmPRgAAAm8"]
[Wed Sep 30 00:59:18.795450 2026] [access_compat:error] [pid 187269:tid 187408] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:18.795748 2026] [access_compat:error] [pid 187269:tid 187408] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:18.798110 2026] [security2:error] [pid 187269:tid 187310] [remote 57.141.14.51:61912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "aryzRtFcyhWr7HDzNGmPSAACiiE"]
[Wed Sep 30 00:59:18.801269 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.801710 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.894112 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.894397 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:13979] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:18.982597 2026] [security2:error] [pid 186850:tid 187085] [client 20.213.164.196:10738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/plugins.php"] [unique_id "aryzRk5Phls--iYlcKgPqAAAAXM"]
[Wed Sep 30 00:59:18.985890 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:18.986176 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.066877 2026] [security2:error] [pid 187269:tid 187534] [client 103.159.192.142:50828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzR9FcyhWr7HDzNGmPUwAAApM"]
[Wed Sep 30 00:59:19.067006 2026] [security2:error] [pid 187269:tid 187534] [client 103.159.192.142:50828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzR9FcyhWr7HDzNGmPUwAAApM"]
[Wed Sep 30 00:59:19.070567 2026] [security2:error] [pid 187269:tid 187511] [client 20.211.90.37:48394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/esc.php"] [unique_id "aryzR9FcyhWr7HDzNGmPVgAAAn0"]
[Wed Sep 30 00:59:19.075431 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.075709 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.077299 2026] [security2:error] [pid 186850:tid 187004] [client 216.73.216.46:13979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzR05Phls--iYlcKgPqwAAASI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTAvbm9kZTAvY3B1OS90b3BvbG9neQ%3D%3D
[Wed Sep 30 00:59:19.081856 2026] [security2:error] [pid 187269:tid 187425] [client 20.219.19.141:23795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/gu.php"] [unique_id "aryzR9FcyhWr7HDzNGmPVwAAAic"]
[Wed Sep 30 00:59:19.166285 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.166698 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.242863 2026] [access_compat:error] [pid 187269:tid 187411] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:19.243141 2026] [access_compat:error] [pid 187269:tid 187411] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:19.256218 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.256483 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.272451 2026] [security2:error] [pid 187269:tid 187444] [client 213.136.69.135:55445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-icon-collections-registry.php"] [unique_id "aryzR9FcyhWr7HDzNGmPXwAAAjo"], referer: binance.com
[Wed Sep 30 00:59:19.278856 2026] [security2:error] [pid 187269:tid 187527] [client 20.198.74.230:34859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/bfdghfgv.php"] [unique_id "aryzR9FcyhWr7HDzNGmPYAAAAow"]
[Wed Sep 30 00:59:19.354411 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.354918 2026] [access_compat:error] [pid 187269:tid 187438] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.367121 2026] [security2:error] [pid 186850:tid 187070] [client 20.28.180.172:36355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/mmq.php"] [unique_id "aryzR05Phls--iYlcKgPsQAAAWQ"]
[Wed Sep 30 00:59:19.440613 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.440889 2026] [access_compat:error] [pid 187269:tid 187495] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.447840 2026] [security2:error] [pid 187269:tid 187512] [client 13.70.4.78:23555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/default.php"] [unique_id "aryzR9FcyhWr7HDzNGmPbAAAAn4"]
[Wed Sep 30 00:59:19.447941 2026] [security2:error] [pid 187269:tid 187419] [client 49.205.105.16:14001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzR9FcyhWr7HDzNGmPbQAAAiE"]
[Wed Sep 30 00:59:19.448034 2026] [security2:error] [pid 187269:tid 187419] [client 49.205.105.16:14001] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzR9FcyhWr7HDzNGmPbQAAAiE"]
[Wed Sep 30 00:59:19.502384 2026] [security2:error] [pid 187269:tid 187503] [client 4.240.25.22:63804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/xkSudf.php"] [unique_id "aryzR9FcyhWr7HDzNGmPbwAAAnU"]
[Wed Sep 30 00:59:19.530768 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.531060 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.559488 2026] [security2:error] [pid 187269:tid 187459] [client 20.213.164.196:10761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/groud3.php"] [unique_id "aryzR9FcyhWr7HDzNGmPdQAAAkk"]
[Wed Sep 30 00:59:19.621990 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.622413 2026] [access_compat:error] [pid 187269:tid 187484] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.644840 2026] [ssl:error] [pid 187269:tid 187452] [client 216.25.124.25:20277] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname www.tty.gfl.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 00:59:19.712335 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.712621 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.747466 2026] [security2:error] [pid 187269:tid 187529] [client 20.211.90.37:47068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/2.php"] [unique_id "aryzR9FcyhWr7HDzNGmPfQAAAo4"]
[Wed Sep 30 00:59:19.758706 2026] [security2:error] [pid 187269:tid 187423] [client 13.70.4.78:24334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryzR9FcyhWr7HDzNGmPfwAAAiU"]
[Wed Sep 30 00:59:19.763678 2026] [access_compat:error] [pid 187269:tid 187406] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:19.764004 2026] [access_compat:error] [pid 187269:tid 187406] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:19.804303 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.804551 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:25730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.894875 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.895128 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.907113 2026] [security2:error] [pid 187269:tid 187463] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzR9FcyhWr7HDzNGmPhQAAAk0"]
[Wed Sep 30 00:59:19.985677 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:19.985950 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:19.988059 2026] [security2:error] [pid 187269:tid 187479] [client 216.73.216.46:25730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzR9FcyhWr7HDzNGmPigAAAl0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHU0
[Wed Sep 30 00:59:20.075793 2026] [security2:error] [pid 187269:tid 187523] [client 20.28.180.172:36477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/fryvbbn.php"] [unique_id "aryzSNFcyhWr7HDzNGmPjgAAAog"]
[Wed Sep 30 00:59:20.105098 2026] [security2:error] [pid 187269:tid 187493] [client 20.211.90.37:48399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/ba.php"] [unique_id "aryzSNFcyhWr7HDzNGmPkAAAAms"]
[Wed Sep 30 00:59:20.110450 2026] [security2:error] [pid 187269:tid 187475] [client 20.198.74.230:41359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/Dss.php"] [unique_id "aryzSNFcyhWr7HDzNGmPkQAAAlk"]
[Wed Sep 30 00:59:20.127603 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.127976 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.144773 2026] [security2:error] [pid 187269:tid 187506] [client 13.70.4.78:61986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/fucku.php"] [unique_id "aryzSNFcyhWr7HDzNGmPlAAAAng"]
[Wed Sep 30 00:59:20.160668 2026] [security2:error] [pid 186850:tid 186881] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSE5Phls--iYlcKgPvAABMR4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=d03ddc0ebb136c242c75e6435b1d1717
[Wed Sep 30 00:59:20.160694 2026] [security2:error] [pid 186850:tid 186881] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSE5Phls--iYlcKgPvAABMR4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=d03ddc0ebb136c242c75e6435b1d1717
[Wed Sep 30 00:59:20.166294 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.166558 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.226660 2026] [access_compat:error] [pid 187269:tid 187428] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:20.226937 2026] [access_compat:error] [pid 187269:tid 187428] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:20.261102 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.261522 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.349098 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.349399 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.353001 2026] [security2:error] [pid 187269:tid 187439] [client 20.213.164.196:10504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/gaxby.php"] [unique_id "aryzSNFcyhWr7HDzNGmPmAAAAjU"]
[Wed Sep 30 00:59:20.410196 2026] [security2:error] [pid 187269:tid 187437] [client 116.72.182.19:51602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzSNFcyhWr7HDzNGmPmQAAAjM"]
[Wed Sep 30 00:59:20.410314 2026] [security2:error] [pid 187269:tid 187437] [client 116.72.182.19:51602] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzSNFcyhWr7HDzNGmPmQAAAjM"]
[Wed Sep 30 00:59:20.447099 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.447376 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.451969 2026] [security2:error] [pid 186850:tid 187008] [client 20.211.90.37:48396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/great.php"] [unique_id "aryzSE5Phls--iYlcKgPwgAAASY"]
[Wed Sep 30 00:59:20.483393 2026] [security2:error] [pid 187269:tid 187453] [client 145.223.145.1:24969] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "www.clenbuterol4sale.com"] [uri "/robots.txt"] [unique_id "aryzSNFcyhWr7HDzNGmPmgAAAkM"]
[Wed Sep 30 00:59:20.539382 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.539648 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.584484 2026] [security2:error] [pid 187269:tid 187512] [client 74.7.241.187:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.staging.graphicdesignmmd.com"] [uri "/cgi-sys/404.html"] [unique_id "aryzSNFcyhWr7HDzNGmPnwAAAn4"]
[Wed Sep 30 00:59:20.586356 2026] [security2:error] [pid 187269:tid 187424] [client 74.7.241.187:50952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.staging.graphicdesignmmd.com"] [uri "/robots.txt"] [unique_id "aryzSNFcyhWr7HDzNGmPnQACJj0"]
[Wed Sep 30 00:59:20.588093 2026] [security2:error] [pid 187269:tid 187472] [client 74.7.228.22:44946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ienergyp.com"] [uri "/404.shtml"] [unique_id "aryzSNFcyhWr7HDzNGmPoAACVlE"]
[Wed Sep 30 00:59:20.628350 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.628602 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.658693 2026] [security2:error] [pid 187269:tid 187459] [client 20.194.30.107:25910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/av.php"] [unique_id "aryzSNFcyhWr7HDzNGmPpgAAAkk"]
[Wed Sep 30 00:59:20.676919 2026] [security2:error] [pid 187269:tid 187473] [client 20.28.180.172:36419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/ff.update.php"] [unique_id "aryzSNFcyhWr7HDzNGmPqQAAAlc"]
[Wed Sep 30 00:59:20.686841 2026] [security2:error] [pid 187269:tid 187452] [client 20.219.19.141:23939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/nck.php"] [unique_id "aryzSNFcyhWr7HDzNGmPqwAAAkI"]
[Wed Sep 30 00:59:20.723943 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.724233 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.735818 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:20.736094 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:20.756062 2026] [security2:error] [pid 187269:tid 187526] [client 20.213.164.196:10811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/dh9u7.php"] [unique_id "aryzSNFcyhWr7HDzNGmPtwAAAos"]
[Wed Sep 30 00:59:20.815627 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.816085 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.874051 2026] [security2:error] [pid 187269:tid 187343] [remote 216.73.216.255:19058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.parashakthipeetham.com"] [uri "/index.php/2026/04/13/como-jugar-casino-virtual-en-vivo-en-linea-espana/"] [unique_id "aryzSNFcyhWr7HDzNGmPugACdEI"]
[Wed Sep 30 00:59:20.904140 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:20.904413 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:20.906775 2026] [security2:error] [pid 187269:tid 187476] [client 20.211.90.37:48441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "aryzSNFcyhWr7HDzNGmPuwAAAlo"]
[Wed Sep 30 00:59:20.920596 2026] [security2:error] [pid 187269:tid 187509] [client 13.70.4.78:62005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aryzSNFcyhWr7HDzNGmPvAAAAns"]
[Wed Sep 30 00:59:20.935847 2026] [security2:error] [pid 187269:tid 187525] [client 4.196.65.241:64138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ORVX-55jkI7.php"] [unique_id "aryzSNFcyhWr7HDzNGmPvQAAAoo"]
[Wed Sep 30 00:59:20.973791 2026] [security2:error] [pid 187269:tid 187470] [client 105.112.178.79:38326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tjo.tiz.mybluehost.me"] [uri "/.env"] [unique_id "aryzSNFcyhWr7HDzNGmPwAAAAlQ"]
[Wed Sep 30 00:59:21.000566 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.001025 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.024037 2026] [security2:error] [pid 186850:tid 186922] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSU5Phls--iYlcKgP0gABcEc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65336&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 00:59:21.024076 2026] [security2:error] [pid 186850:tid 186922] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSU5Phls--iYlcKgP0gABcEc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65336&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 00:59:21.093870 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.094334 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.179636 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.179941 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.210302 2026] [security2:error] [pid 187269:tid 187425] [client 20.70.173.30:60016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzSdFcyhWr7HDzNGmPwwAAAic"]
[Wed Sep 30 00:59:21.250940 2026] [security2:error] [pid 187269:tid 187454] [client 20.28.180.172:36407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/lzlhihzi.php"] [unique_id "aryzSdFcyhWr7HDzNGmPxQAAAkQ"]
[Wed Sep 30 00:59:21.270508 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.270778 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.278434 2026] [access_compat:error] [pid 187269:tid 187493] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:21.278709 2026] [access_compat:error] [pid 187269:tid 187493] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:21.279023 2026] [security2:error] [pid 186850:tid 187074] [client 13.70.4.78:23940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/mail.php"] [unique_id "aryzSU5Phls--iYlcKgP1gAAAWg"]
[Wed Sep 30 00:59:21.331977 2026] [security2:error] [pid 187269:tid 187483] [client 20.211.90.37:47086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/robots.php"] [unique_id "aryzSdFcyhWr7HDzNGmPzAAAAmE"]
[Wed Sep 30 00:59:21.367373 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.367662 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.415799 2026] [security2:error] [pid 187269:tid 187411] [client 20.198.74.230:51408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/uploaxa1.php"] [unique_id "aryzSdFcyhWr7HDzNGmPzwAAAhk"]
[Wed Sep 30 00:59:21.458823 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.459106 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.549326 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.549601 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.572950 2026] [security2:error] [pid 187269:tid 187437] [client 20.198.74.230:24140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/fsfrl.php"] [unique_id "aryzSdFcyhWr7HDzNGmP1QAAAjM"]
[Wed Sep 30 00:59:21.588852 2026] [security2:error] [pid 187269:tid 187504] [client 20.213.164.196:10770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/yvnqcuic.php"] [unique_id "aryzSdFcyhWr7HDzNGmP1gAAAnY"]
[Wed Sep 30 00:59:21.607830 2026] [security2:error] [pid 187269:tid 187442] [client 116.197.133.25:65226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzSdFcyhWr7HDzNGmP1wAAAjg"]
[Wed Sep 30 00:59:21.607959 2026] [security2:error] [pid 187269:tid 187442] [client 116.197.133.25:65226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzSdFcyhWr7HDzNGmP1wAAAjg"]
[Wed Sep 30 00:59:21.642230 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.642509 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.670271 2026] [security2:error] [pid 187269:tid 187435] [client 13.70.4.78:61955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/sx.php"] [unique_id "aryzSdFcyhWr7HDzNGmP2QAAAjE"]
[Wed Sep 30 00:59:21.733357 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.733618 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.767225 2026] [access_compat:error] [pid 187269:tid 187464] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:21.767487 2026] [access_compat:error] [pid 187269:tid 187464] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:21.823481 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.823759 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.826100 2026] [security2:error] [pid 186850:tid 187054] [client 74.7.244.59:37798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.mcr.pyt.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzSU5Phls--iYlcKgP4wABVGg"]
[Wed Sep 30 00:59:21.831107 2026] [security2:error] [pid 187269:tid 187473] [client 20.28.180.172:36436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/bfdghfgv.php"] [unique_id "aryzSdFcyhWr7HDzNGmP3AAAAlc"]
[Wed Sep 30 00:59:21.919188 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:21.919613 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:21.938870 2026] [security2:error] [pid 187269:tid 187518] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzSdFcyhWr7HDzNGmP3wAAAoQ"]
[Wed Sep 30 00:59:22.001661 2026] [security2:error] [pid 187269:tid 187498] [client 20.211.90.37:47099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/k.php"] [unique_id "aryzStFcyhWr7HDzNGmP5wAAAnA"]
[Wed Sep 30 00:59:22.005037 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.005311 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.095887 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.096151 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.174195 2026] [security2:error] [pid 187269:tid 187502] [client 13.70.4.78:23556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryzStFcyhWr7HDzNGmP7QAAAnQ"]
[Wed Sep 30 00:59:22.188306 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.188572 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.224365 2026] [security2:error] [pid 187269:tid 187525] [client 4.196.65.241:2519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/xrp.php"] [unique_id "aryzStFcyhWr7HDzNGmP8AAAAoo"]
[Wed Sep 30 00:59:22.226798 2026] [access_compat:error] [pid 187269:tid 187509] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:22.227091 2026] [access_compat:error] [pid 187269:tid 187509] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:22.235075 2026] [security2:error] [pid 187269:tid 187486] [client 20.194.30.107:17521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/BDKR28WP.php"] [unique_id "aryzStFcyhWr7HDzNGmP8QAAAmQ"]
[Wed Sep 30 00:59:22.284284 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.284729 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.310760 2026] [security2:error] [pid 186850:tid 187107] [client 223.235.102.107:21622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzSk5Phls--iYlcKgP7gAAAYk"]
[Wed Sep 30 00:59:22.310894 2026] [security2:error] [pid 186850:tid 187107] [client 223.235.102.107:21622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzSk5Phls--iYlcKgP7gAAAYk"]
[Wed Sep 30 00:59:22.348894 2026] [security2:error] [pid 187269:tid 187372] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzStFcyhWr7HDzNGmP9AACf18"], referer: https://torquayfans.com/posting.php?mode=quote&p=284282
[Wed Sep 30 00:59:22.348917 2026] [security2:error] [pid 187269:tid 187372] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzStFcyhWr7HDzNGmP9AACf18"], referer: https://torquayfans.com/posting.php?mode=quote&p=284282
[Wed Sep 30 00:59:22.368927 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.369196 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.462817 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.463077 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.473609 2026] [security2:error] [pid 187269:tid 187483] [client 20.194.30.107:17300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/a.php"] [unique_id "aryzStFcyhWr7HDzNGmP-wAAAmE"]
[Wed Sep 30 00:59:22.496354 2026] [security2:error] [pid 187269:tid 187511] [client 13.70.4.78:61953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/article.php"] [unique_id "aryzStFcyhWr7HDzNGmP_gAAAn0"]
[Wed Sep 30 00:59:22.503583 2026] [security2:error] [pid 186850:tid 186961] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSk5Phls--iYlcKgP9wABHm4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=268909&sid=40ee079109fa75b7f7e7127cfe77f0f1
[Wed Sep 30 00:59:22.503624 2026] [security2:error] [pid 186850:tid 186961] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzSk5Phls--iYlcKgP9wABHm4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=268909&sid=40ee079109fa75b7f7e7127cfe77f0f1
[Wed Sep 30 00:59:22.557746 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.558209 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.563572 2026] [security2:error] [pid 186850:tid 187011] [client 20.213.164.196:10756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/koiy.php"] [unique_id "aryzSk5Phls--iYlcKgP-QAAASk"]
[Wed Sep 30 00:59:22.645585 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.645984 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.735470 2026] [security2:error] [pid 187269:tid 187449] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzStFcyhWr7HDzNGmQBAAAAj8"]
[Wed Sep 30 00:59:22.736243 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.736620 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.773660 2026] [access_compat:error] [pid 187269:tid 187534] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:22.774068 2026] [access_compat:error] [pid 187269:tid 187534] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:22.826566 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.826873 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.830733 2026] [security2:error] [pid 187269:tid 187444] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzStFcyhWr7HDzNGmQCAAAAjo"]
[Wed Sep 30 00:59:22.832166 2026] [security2:error] [pid 186850:tid 187009] [client 45.138.12.32:19008] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.lollyandpopsfarm.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzSk5Phls--iYlcKgQAAAAASc"]
[Wed Sep 30 00:59:22.866523 2026] [security2:error] [pid 187269:tid 187490] [client 20.219.19.141:23798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/xtt.php"] [unique_id "aryzStFcyhWr7HDzNGmQCwAAAmg"]
[Wed Sep 30 00:59:22.882350 2026] [security2:error] [pid 187269:tid 187519] [client 13.70.4.78:61977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/link.php"] [unique_id "aryzStFcyhWr7HDzNGmQDgAAAoU"]
[Wed Sep 30 00:59:22.898096 2026] [security2:error] [pid 187269:tid 187528] [client 20.28.180.172:36370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/Dss.php"] [unique_id "aryzStFcyhWr7HDzNGmQEAAAAo0"]
[Wed Sep 30 00:59:22.904481 2026] [security2:error] [pid 187269:tid 187482] [client 20.211.90.37:47084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/w.php"] [unique_id "aryzStFcyhWr7HDzNGmQEQAAAmA"]
[Wed Sep 30 00:59:22.916962 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:22.917258 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:22.924312 2026] [security2:error] [pid 187269:tid 187437] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzStFcyhWr7HDzNGmQDQAAAjM"]
[Wed Sep 30 00:59:22.946939 2026] [security2:error] [pid 186850:tid 187021] [client 20.198.74.230:41400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/uploartg.php"] [unique_id "aryzSk5Phls--iYlcKgQBAAAATM"]
[Wed Sep 30 00:59:22.991397 2026] [security2:error] [pid 187269:tid 187485] [client 159.223.71.139:63479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.71.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "afrilech.org"] [uri "/cache/cache/cache.php"] [unique_id "aryzStFcyhWr7HDzNGmQFAAAAmM"], referer: www.google.com
[Wed Sep 30 00:59:23.060350 2026] [security2:error] [pid 187269:tid 187445] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzStFcyhWr7HDzNGmQEwAAAjs"]
[Wed Sep 30 00:59:23.078381 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.078642 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:46310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.099583 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.099848 2026] [access_compat:error] [pid 187269:tid 187480] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.188503 2026] [security2:error] [pid 186850:tid 187029] [client 20.70.173.30:59988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/tool.php"] [unique_id "aryzS05Phls--iYlcKgQCQAAATs"]
[Wed Sep 30 00:59:23.196092 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.196351 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.232812 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:23.233073 2026] [access_compat:error] [pid 187269:tid 187510] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:23.290431 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.290683 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.304404 2026] [security2:error] [pid 187269:tid 187522] [client 20.211.90.37:47066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/ccc.php"] [unique_id "aryzS9FcyhWr7HDzNGmQIQAAAoc"]
[Wed Sep 30 00:59:23.321916 2026] [security2:error] [pid 187269:tid 187412] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzS9FcyhWr7HDzNGmQIgAAAho"]
[Wed Sep 30 00:59:23.322046 2026] [security2:error] [pid 187269:tid 187415] [client 13.70.4.78:24330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/lock360.php"] [unique_id "aryzS9FcyhWr7HDzNGmQIwAAAh0"]
[Wed Sep 30 00:59:23.346550 2026] [security2:error] [pid 186850:tid 186884] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzS05Phls--iYlcKgQCwABEyE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65334&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 00:59:23.346591 2026] [security2:error] [pid 186850:tid 186884] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzS05Phls--iYlcKgQCwABEyE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65334&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 00:59:23.379523 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.379799 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.471205 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.471474 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.514480 2026] [security2:error] [pid 187269:tid 187450] [client 109.228.57.170:38090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.57.228.109.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hannahjune.com"] [uri "/wp-login.php"] [unique_id "aryzS9FcyhWr7HDzNGmQKgAAAkA"]
[Wed Sep 30 00:59:23.563014 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.563298 2026] [access_compat:error] [pid 187269:tid 187443] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.579366 2026] [security2:error] [pid 187269:tid 187529] [client 20.28.180.172:36423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/uploaxa1.php"] [unique_id "aryzS9FcyhWr7HDzNGmQLgAAAo4"]
[Wed Sep 30 00:59:23.614135 2026] [security2:error] [pid 187269:tid 187451] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzS9FcyhWr7HDzNGmQMAAAAkE"]
[Wed Sep 30 00:59:23.645654 2026] [security2:error] [pid 187269:tid 187408] [client 45.138.12.32:14786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wjv.vmd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzS9FcyhWr7HDzNGmQMgAAAhY"]
[Wed Sep 30 00:59:23.653317 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.653568 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.707635 2026] [security2:error] [pid 186850:tid 186997] [client 4.240.25.22:18693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/adminfuns.php"] [unique_id "aryzS05Phls--iYlcKgQDgAAARs"]
[Wed Sep 30 00:59:23.721700 2026] [security2:error] [pid 187269:tid 187410] [client 13.70.4.78:24323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-trackback.php"] [unique_id "aryzS9FcyhWr7HDzNGmQNgAAAhg"]
[Wed Sep 30 00:59:23.738575 2026] [security2:error] [pid 186850:tid 187091] [client 216.73.216.46:46310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzS05Phls--iYlcKgQDwAAAXk"]
[Wed Sep 30 00:59:23.768423 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:23.768704 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:23.803502 2026] [security2:error] [pid 186850:tid 187034] [client 223.181.60.167:25038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzS05Phls--iYlcKgQEQAAAUA"]
[Wed Sep 30 00:59:23.804348 2026] [security2:error] [pid 186850:tid 187034] [client 223.181.60.167:25038] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzS05Phls--iYlcKgQEQAAAUA"]
[Wed Sep 30 00:59:23.838343 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.838611 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:18733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:23.957357 2026] [security2:error] [pid 186850:tid 187076] [client 20.211.90.37:47073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/images.php"] [unique_id "aryzS05Phls--iYlcKgQGAAAAWo"]
[Wed Sep 30 00:59:23.971349 2026] [security2:error] [pid 186850:tid 187071] [client 20.28.180.172:36461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/uploartg.php"] [unique_id "aryzS05Phls--iYlcKgQGQAAAWU"]
[Wed Sep 30 00:59:23.988197 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:23.988451 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.020143 2026] [security2:error] [pid 187269:tid 187407] [client 216.73.216.46:18733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzTNFcyhWr7HDzNGmQPwAAAhU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL2NwdTMvcG93ZXI%3D
[Wed Sep 30 00:59:24.044522 2026] [security2:error] [pid 186850:tid 187072] [client 4.240.25.22:20300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/css.php"] [unique_id "aryzTE5Phls--iYlcKgQHAAAAWY"]
[Wed Sep 30 00:59:24.086594 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.087052 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.113657 2026] [security2:error] [pid 187269:tid 187474] [client 13.70.4.78:23994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/.well-known/index.php"] [unique_id "aryzTNFcyhWr7HDzNGmQRQAAAlg"]
[Wed Sep 30 00:59:24.119384 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.119677 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.208678 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.208966 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.244503 2026] [security2:error] [pid 186850:tid 187064] [client 37.41.16.35:53428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQIAAAAV4"]
[Wed Sep 30 00:59:24.244618 2026] [security2:error] [pid 186850:tid 187064] [client 37.41.16.35:53428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQIAAAAV4"]
[Wed Sep 30 00:59:24.250468 2026] [access_compat:error] [pid 187269:tid 187453] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:24.250732 2026] [access_compat:error] [pid 187269:tid 187453] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:24.300797 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.301077 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.342138 2026] [security2:error] [pid 186850:tid 187027] [client 20.211.90.37:48415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/alls.php"] [unique_id "aryzTE5Phls--iYlcKgQJAAAATk"]
[Wed Sep 30 00:59:24.351592 2026] [security2:error] [pid 186850:tid 187075] [client 182.69.182.151:24999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQJQAAAWk"]
[Wed Sep 30 00:59:24.352357 2026] [security2:error] [pid 186850:tid 187075] [client 182.69.182.151:24999] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQJQAAAWk"]
[Wed Sep 30 00:59:24.392575 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.392874 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.397407 2026] [security2:error] [pid 186850:tid 187014] [client 20.28.180.172:36246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/bgbagbcw.php"] [unique_id "aryzTE5Phls--iYlcKgQKAAAASw"]
[Wed Sep 30 00:59:24.483186 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.483460 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.518609 2026] [security2:error] [pid 187269:tid 187411] [client 20.198.74.230:34844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/bgbagbcw.php"] [unique_id "aryzTNFcyhWr7HDzNGmQVgAAAhk"]
[Wed Sep 30 00:59:24.525222 2026] [security2:error] [pid 187269:tid 187430] [client 155.190.6.18:44878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzTNFcyhWr7HDzNGmQWQAAAiw"]
[Wed Sep 30 00:59:24.580591 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.580865 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.588491 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzTE5Phls--iYlcKgQMwABVEg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:24.588524 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzTE5Phls--iYlcKgQMwABVEg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:24.671320 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.671735 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.678378 2026] [security2:error] [pid 187269:tid 187423] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTNFcyhWr7HDzNGmQYgAAAiU"]
[Wed Sep 30 00:59:24.732188 2026] [security2:error] [pid 187269:tid 187412] [client 20.211.90.37:48411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/admin.php"] [unique_id "aryzTNFcyhWr7HDzNGmQZAAAAho"]
[Wed Sep 30 00:59:24.732444 2026] [access_compat:error] [pid 187269:tid 187406] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:24.732779 2026] [access_compat:error] [pid 187269:tid 187406] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:24.764760 2026] [security2:error] [pid 187269:tid 187433] [client 20.219.19.141:23707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "realfmonline.klrccares.com"] [uri "/go.php"] [unique_id "aryzTNFcyhWr7HDzNGmQZgAAAi8"]
[Wed Sep 30 00:59:24.793832 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.794102 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.801439 2026] [security2:error] [pid 187269:tid 187512] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTNFcyhWr7HDzNGmQZQAAAn4"]
[Wed Sep 30 00:59:24.806040 2026] [security2:error] [pid 187269:tid 187430] [client 155.190.6.18:44878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzTNFcyhWr7HDzNGmQWQAAAiw"]
[Wed Sep 30 00:59:24.824209 2026] [security2:error] [pid 186850:tid 187025] [client 49.36.41.37:55641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQNwAAATc"]
[Wed Sep 30 00:59:24.825422 2026] [security2:error] [pid 186850:tid 187025] [client 49.36.41.37:55641] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzTE5Phls--iYlcKgQNwAAATc"]
[Wed Sep 30 00:59:24.853418 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.853694 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.895921 2026] [security2:error] [pid 186850:tid 187028] [client 20.194.30.107:17530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/dehnl.php"] [unique_id "aryzTE5Phls--iYlcKgQPQAAATo"]
[Wed Sep 30 00:59:24.900377 2026] [security2:error] [pid 186850:tid 187003] [client 20.28.180.172:36403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/tegubsiu.php"] [unique_id "aryzTE5Phls--iYlcKgQPwAAASE"]
[Wed Sep 30 00:59:24.942088 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:24.942385 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:24.965958 2026] [security2:error] [pid 187269:tid 187524] [client 13.70.4.78:24337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryzTNFcyhWr7HDzNGmQcQAAAok"]
[Wed Sep 30 00:59:24.975175 2026] [security2:error] [pid 186850:tid 187010] [client 20.213.164.196:10511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wordfence-waf.php"] [unique_id "aryzTE5Phls--iYlcKgQRAAAASg"]
[Wed Sep 30 00:59:25.023603 2026] [security2:error] [pid 187269:tid 187488] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTNFcyhWr7HDzNGmQbgAAAmY"]
[Wed Sep 30 00:59:25.041813 2026] [security2:error] [pid 187269:tid 187413] [client 216.73.216.46:63175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzTdFcyhWr7HDzNGmQcwAAAhs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL21lbW9yeTQ4OS9ub2RlMA%3D%3D
[Wed Sep 30 00:59:25.060364 2026] [security2:error] [pid 186850:tid 187059] [client 45.138.12.32:32712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.woi.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzTU5Phls--iYlcKgQRQAAAVk"]
[Wed Sep 30 00:59:25.085206 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.085478 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.140297 2026] [security2:error] [pid 187269:tid 187465] [client 154.54.100.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cpanel.esvarbon.gov.ng"] [uri "/___proxy_subdomain_cpanel/___proxy_subdomain_cpanel/.git/config"] [unique_id "aryzTdFcyhWr7HDzNGmQdwAAAk8"]
[Wed Sep 30 00:59:25.143555 2026] [security2:error] [pid 187269:tid 187481] [client 150.107.232.159:35723] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzTdFcyhWr7HDzNGmQeQAAAl8"]
[Wed Sep 30 00:59:25.143685 2026] [security2:error] [pid 187269:tid 187481] [client 150.107.232.159:35723] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzTdFcyhWr7HDzNGmQeQAAAl8"]
[Wed Sep 30 00:59:25.159805 2026] [security2:error] [pid 187269:tid 187415] [client 103.241.204.139:57073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzTdFcyhWr7HDzNGmQegAAAh0"]
[Wed Sep 30 00:59:25.159897 2026] [security2:error] [pid 187269:tid 187415] [client 103.241.204.139:57073] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzTdFcyhWr7HDzNGmQegAAAh0"]
[Wed Sep 30 00:59:25.202235 2026] [security2:error] [pid 187269:tid 187458] [client 4.240.25.22:30755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-content/index.php"] [unique_id "aryzTdFcyhWr7HDzNGmQfQAAAkg"]
[Wed Sep 30 00:59:25.245166 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.245593 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.254665 2026] [security2:error] [pid 187269:tid 187418] [client 104.208.65.139:60491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzTdFcyhWr7HDzNGmQgQAAAiA"]
[Wed Sep 30 00:59:25.263171 2026] [access_compat:error] [pid 187269:tid 187520] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:25.263453 2026] [access_compat:error] [pid 187269:tid 187520] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:25.300739 2026] [security2:error] [pid 187269:tid 187479] [client 20.211.90.37:47063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/geck.php"] [unique_id "aryzTdFcyhWr7HDzNGmQhgAAAl0"]
[Wed Sep 30 00:59:25.316262 2026] [core:error] [pid 187269:tid 187476] [client 104.207.58.228:59689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:25.316293 2026] [core:error] [pid 187269:tid 187476] [client 104.207.58.228:59689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:25.333263 2026] [security2:error] [pid 186850:tid 187012] [client 13.70.4.78:61984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryzTU5Phls--iYlcKgQSgAAASo"]
[Wed Sep 30 00:59:25.380379 2026] [security2:error] [pid 187269:tid 187528] [client 4.196.65.241:19506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/2rrtccj7.php"] [unique_id "aryzTdFcyhWr7HDzNGmQiAAAAo0"]
[Wed Sep 30 00:59:25.404660 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.404955 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.416098 2026] [security2:error] [pid 187269:tid 187439] [client 20.70.173.30:63671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/666.php"] [unique_id "aryzTdFcyhWr7HDzNGmQigAAAjU"]
[Wed Sep 30 00:59:25.422065 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.422418 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.450372 2026] [security2:error] [pid 187269:tid 187454] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTdFcyhWr7HDzNGmQiwAAAkQ"]
[Wed Sep 30 00:59:25.473603 2026] [security2:error] [pid 186850:tid 186999] [client 223.181.30.165:13816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzTU5Phls--iYlcKgQTwAAAR0"]
[Wed Sep 30 00:59:25.473787 2026] [security2:error] [pid 186850:tid 186999] [client 223.181.30.165:13816] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzTU5Phls--iYlcKgQTwAAAR0"]
[Wed Sep 30 00:59:25.475349 2026] [security2:error] [pid 187269:tid 187442] [client 20.28.180.172:36431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/xxw.php"] [unique_id "aryzTdFcyhWr7HDzNGmQjAAAAjg"]
[Wed Sep 30 00:59:25.537945 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:9945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.538219 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:9945] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.546869 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.547140 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.584838 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.585094 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:65240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.674088 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.674366 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.729248 2026] [security2:error] [pid 187269:tid 187436] [client 216.73.216.46:9945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzTdFcyhWr7HDzNGmQlwAAAjI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 00:59:25.731271 2026] [security2:error] [pid 187269:tid 187427] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTdFcyhWr7HDzNGmQlQAAAik"]
[Wed Sep 30 00:59:25.732849 2026] [access_compat:error] [pid 187269:tid 187503] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:25.736192 2026] [access_compat:error] [pid 187269:tid 187503] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:25.749322 2026] [security2:error] [pid 187269:tid 187452] [client 104.208.65.139:25330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzTdFcyhWr7HDzNGmQmQAAAkI"]
[Wed Sep 30 00:59:25.755561 2026] [security2:error] [pid 186850:tid 187061] [client 216.73.216.46:65240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzTU5Phls--iYlcKgQUQAAAVs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDMw
[Wed Sep 30 00:59:25.772182 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.772468 2026] [access_compat:error] [pid 187269:tid 187498] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.801119 2026] [security2:error] [pid 187269:tid 187412] [client 20.211.90.37:48400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/goods.php"] [unique_id "aryzTdFcyhWr7HDzNGmQnAAAAho"]
[Wed Sep 30 00:59:25.804559 2026] [security2:error] [pid 187269:tid 187533] [client 13.70.4.78:61997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzTdFcyhWr7HDzNGmQnQAAApI"]
[Wed Sep 30 00:59:25.859756 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:25.860030 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:25.932020 2026] [core:error] [pid 187269:tid 187467] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:25.932042 2026] [core:error] [pid 187269:tid 187467] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:26.000376 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.000639 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.019819 2026] [security2:error] [pid 187269:tid 187482] [client 152.59.169.65:59097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzTtFcyhWr7HDzNGmQrQAAAmA"]
[Wed Sep 30 00:59:26.019932 2026] [security2:error] [pid 187269:tid 187482] [client 152.59.169.65:59097] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzTtFcyhWr7HDzNGmQrQAAAmA"]
[Wed Sep 30 00:59:26.057856 2026] [security2:error] [pid 187269:tid 187502] [client 45.138.12.32:32708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzTtFcyhWr7HDzNGmQrgAAAnQ"]
[Wed Sep 30 00:59:26.093615 2026] [security2:error] [pid 187269:tid 187465] [client 104.208.65.139:28046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/f35.update.php"] [unique_id "aryzTtFcyhWr7HDzNGmQrwAAAk8"]
[Wed Sep 30 00:59:26.102624 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.102905 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.118284 2026] [security2:error] [pid 187269:tid 187522] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTdFcyhWr7HDzNGmQpwAAAoc"]
[Wed Sep 30 00:59:26.146264 2026] [security2:error] [pid 187269:tid 187415] [client 4.240.25.22:30722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/edit.php"] [unique_id "aryzTtFcyhWr7HDzNGmQswAAAh0"]
[Wed Sep 30 00:59:26.180078 2026] [security2:error] [pid 187269:tid 187500] [client 13.70.4.78:24327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryzTtFcyhWr7HDzNGmQtQAAAnI"]
[Wed Sep 30 00:59:26.187033 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.187310 2026] [access_compat:error] [pid 187269:tid 187418] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.211959 2026] [security2:error] [pid 187269:tid 187520] [client 45.138.12.32:19036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wvs.emf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzTtFcyhWr7HDzNGmQtwAAAoY"]
[Wed Sep 30 00:59:26.228927 2026] [access_compat:error] [pid 187269:tid 187479] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:26.229207 2026] [access_compat:error] [pid 187269:tid 187479] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:26.271779 2026] [security2:error] [pid 187269:tid 187456] [client 43.104.4.218:35782] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "aryzTtFcyhWr7HDzNGmQvAAAAkY"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 00:59:26.287135 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.287402 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.379591 2026] [security2:error] [pid 187269:tid 187530] [client 20.211.90.37:47050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/dejavu.php"] [unique_id "aryzTtFcyhWr7HDzNGmQywAAAo8"]
[Wed Sep 30 00:59:26.382027 2026] [autoindex:error] [pid 187269:tid 187474] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/assets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:26.383857 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.384297 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.442721 2026] [security2:error] [pid 187269:tid 187443] [client 103.172.210.103:52853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzTtFcyhWr7HDzNGmQzQAAAjk"]
[Wed Sep 30 00:59:26.442871 2026] [security2:error] [pid 187269:tid 187443] [client 103.172.210.103:52853] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzTtFcyhWr7HDzNGmQzQAAAjk"]
[Wed Sep 30 00:59:26.445949 2026] [security2:error] [pid 187269:tid 187464] [client 104.208.65.139:37183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/adminfuns.php"] [unique_id "aryzTtFcyhWr7HDzNGmQzgAAAk4"]
[Wed Sep 30 00:59:26.476542 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.476799 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.565567 2026] [security2:error] [pid 186850:tid 187035] [client 103.159.192.142:51341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzTk5Phls--iYlcKgQXgAAAUE"]
[Wed Sep 30 00:59:26.565680 2026] [security2:error] [pid 186850:tid 187035] [client 103.159.192.142:51341] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzTk5Phls--iYlcKgQXgAAAUE"]
[Wed Sep 30 00:59:26.570054 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.570330 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.610672 2026] [security2:error] [pid 187269:tid 187498] [client 20.28.180.172:36366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/router.php"] [unique_id "aryzTtFcyhWr7HDzNGmQ0AAAAnA"]
[Wed Sep 30 00:59:26.671969 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.672280 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.677260 2026] [security2:error] [pid 187269:tid 187517] [client 13.70.4.78:24381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryzTtFcyhWr7HDzNGmQ1gAAAoM"]
[Wed Sep 30 00:59:26.717343 2026] [security2:error] [pid 187269:tid 187449] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTtFcyhWr7HDzNGmQ2AAAAj8"]
[Wed Sep 30 00:59:26.727123 2026] [access_compat:error] [pid 187269:tid 187451] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:26.727401 2026] [access_compat:error] [pid 187269:tid 187451] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:26.769191 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.769455 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.778641 2026] [security2:error] [pid 187269:tid 187492] [client 104.208.65.139:28040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzTtFcyhWr7HDzNGmQ3gAAAmo"]
[Wed Sep 30 00:59:26.845703 2026] [security2:error] [pid 187269:tid 187505] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzTtFcyhWr7HDzNGmQ3wAAAnc"]
[Wed Sep 30 00:59:26.921441 2026] [security2:error] [pid 187269:tid 187426] [client 20.211.90.37:47047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/h02ugyh.php"] [unique_id "aryzTtFcyhWr7HDzNGmQ4wAAAig"]
[Wed Sep 30 00:59:26.958197 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:26.958692 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:26.960311 2026] [security2:error] [pid 186850:tid 187060] [client 20.213.164.196:10700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wp5.php"] [unique_id "aryzTk5Phls--iYlcKgQaAAAAVo"]
[Wed Sep 30 00:59:27.002964 2026] [security2:error] [pid 186850:tid 187071] [client 13.70.4.78:23980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-content/themes/about.php"] [unique_id "aryzT05Phls--iYlcKgQaQAAAWU"]
[Wed Sep 30 00:59:27.049611 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.049895 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.112007 2026] [security2:error] [pid 186850:tid 187090] [client 104.208.65.139:60497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzT05Phls--iYlcKgQawAAAXg"]
[Wed Sep 30 00:59:27.140771 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.141032 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.187184 2026] [autoindex:error] [pid 186850:tid 187105] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:27.229959 2026] [access_compat:error] [pid 187269:tid 187522] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:27.230399 2026] [access_compat:error] [pid 187269:tid 187522] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:27.232998 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.233296 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.381237 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.381505 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.397760 2026] [autoindex:error] [pid 187269:tid 187432] [client 82.102.18.190:25976] AH01276: Cannot serve directory /home4/nzbhctmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:27.407494 2026] [security2:error] [pid 186850:tid 186889] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzT05Phls--iYlcKgQdgABaSY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:27.407516 2026] [security2:error] [pid 186850:tid 186889] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzT05Phls--iYlcKgQdgABaSY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131737&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:27.419518 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.419796 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.424355 2026] [security2:error] [pid 187269:tid 187493] [client 13.70.4.78:23976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/filemanager/dialog.php"] [unique_id "aryzT9FcyhWr7HDzNGmQ-AAAAms"]
[Wed Sep 30 00:59:27.458522 2026] [security2:error] [pid 187269:tid 187530] [client 20.213.164.196:10801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/em.php"] [unique_id "aryzT9FcyhWr7HDzNGmQ-gAAAo8"]
[Wed Sep 30 00:59:27.490347 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.490624 2026] [access_compat:error] [pid 187269:tid 187461] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.492134 2026] [security2:error] [pid 187269:tid 187411] [client 20.211.90.37:47065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/155.php"] [unique_id "aryzT9FcyhWr7HDzNGmQ_gAAAhk"]
[Wed Sep 30 00:59:27.517423 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.517697 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.540338 2026] [security2:error] [pid 187269:tid 187474] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzT9FcyhWr7HDzNGmQ_AAAAlg"]
[Wed Sep 30 00:59:27.558935 2026] [security2:error] [pid 187269:tid 187425] [client 82.102.18.190:25976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzT9FcyhWr7HDzNGmRAQAAAic"]
[Wed Sep 30 00:59:27.568068 2026] [security2:error] [pid 187269:tid 187414] [client 4.240.25.22:30733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/11.php"] [unique_id "aryzT9FcyhWr7HDzNGmRAwAAAhw"]
[Wed Sep 30 00:59:27.636204 2026] [security2:error] [pid 187269:tid 187420] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzT9FcyhWr7HDzNGmRBAAAAiI"]
[Wed Sep 30 00:59:27.644840 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.645104 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:47588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.720641 2026] [security2:error] [pid 187269:tid 187523] [client 216.73.216.46:47588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzT9FcyhWr7HDzNGmRCQAAAog"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjEx
[Wed Sep 30 00:59:27.736077 2026] [security2:error] [pid 187269:tid 187436] [client 20.28.180.172:36376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/cibrkysaeng.php"] [unique_id "aryzT9FcyhWr7HDzNGmRCwAAAjI"]
[Wed Sep 30 00:59:27.737692 2026] [access_compat:error] [pid 187269:tid 187526] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:59:27.738187 2026] [access_compat:error] [pid 187269:tid 187526] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:59:27.743559 2026] [security2:error] [pid 187269:tid 187417] [client 116.193.128.26:49772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzT9FcyhWr7HDzNGmRDAAAAh8"]
[Wed Sep 30 00:59:27.743664 2026] [security2:error] [pid 187269:tid 187417] [client 116.193.128.26:49772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzT9FcyhWr7HDzNGmRDAAAAh8"]
[Wed Sep 30 00:59:27.754663 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.754944 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.756904 2026] [security2:error] [pid 187269:tid 187452] [client 13.70.4.78:24376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/index/function.php"] [unique_id "aryzT9FcyhWr7HDzNGmRDQAAAkI"]
[Wed Sep 30 00:59:27.758195 2026] [security2:error] [pid 187269:tid 187480] [client 20.198.74.230:51406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/tegubsiu.php"] [unique_id "aryzT9FcyhWr7HDzNGmRDgAAAl4"]
[Wed Sep 30 00:59:27.797978 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.798362 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:14491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.832451 2026] [security2:error] [pid 186850:tid 187018] [client 104.208.65.139:28074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/av.php"] [unique_id "aryzT05Phls--iYlcKgQfgAAATA"]
[Wed Sep 30 00:59:27.872340 2026] [security2:error] [pid 187269:tid 187495] [client 20.211.90.37:47094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/ops.php"] [unique_id "aryzT9FcyhWr7HDzNGmREgAAAm0"]
[Wed Sep 30 00:59:27.939737 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.940015 2026] [access_compat:error] [pid 187269:tid 187448] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.967398 2026] [security2:error] [pid 187269:tid 187467] [client 45.138.12.32:32754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wmz.icl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzT9FcyhWr7HDzNGmRGwAAAlE"]
[Wed Sep 30 00:59:27.983386 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:27.983834 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:27.990528 2026] [security2:error] [pid 186850:tid 187104] [client 216.73.216.46:14491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzT05Phls--iYlcKgQggAAAYY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MzAz
[Wed Sep 30 00:59:27.995818 2026] [security2:error] [pid 187269:tid 187469] [client 152.59.165.7:56981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzT9FcyhWr7HDzNGmRHwAAAlM"]
[Wed Sep 30 00:59:27.999825 2026] [security2:error] [pid 187269:tid 187469] [client 152.59.165.7:56981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzT9FcyhWr7HDzNGmRHwAAAlM"]
[Wed Sep 30 00:59:28.017515 2026] [autoindex:error] [pid 186850:tid 186992] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:28.070035 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.070314 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.159138 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.159402 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.185405 2026] [security2:error] [pid 187269:tid 187423] [client 104.208.65.139:60522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/dex.php"] [unique_id "aryzUNFcyhWr7HDzNGmRJQAAAiU"]
[Wed Sep 30 00:59:28.209331 2026] [security2:error] [pid 187269:tid 187514] [client 20.28.180.172:36295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.retaldevelopments.com"] [uri "/wp-wpbak.php"] [unique_id "aryzUNFcyhWr7HDzNGmRKAAAAoA"]
[Wed Sep 30 00:59:28.223345 2026] [security2:error] [pid 187269:tid 187406] [client 82.102.18.190:43458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nzb.hct.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryzUNFcyhWr7HDzNGmRJwAAAhQ"]
[Wed Sep 30 00:59:28.237701 2026] [security2:error] [pid 187269:tid 187433] [client 13.70.4.78:62008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryzUNFcyhWr7HDzNGmRKwAAAi8"]
[Wed Sep 30 00:59:28.240866 2026] [security2:error] [pid 187269:tid 187506] [client 202.76.173.127:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog-grid-2-columns-sidebar-left/"] [unique_id "aryzUNFcyhWr7HDzNGmRLAAAAng"]
[Wed Sep 30 00:59:28.250434 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.250699 2026] [access_compat:error] [pid 187269:tid 187478] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.282428 2026] [access_compat:error] [pid 187269:tid 187418] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:28.282708 2026] [access_compat:error] [pid 187269:tid 187418] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:28.322550 2026] [security2:error] [pid 187269:tid 187498] [client 202.179.95.79:61946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzUNFcyhWr7HDzNGmRMgAAAnA"]
[Wed Sep 30 00:59:28.322680 2026] [security2:error] [pid 187269:tid 187498] [client 202.179.95.79:61946] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzUNFcyhWr7HDzNGmRMgAAAnA"]
[Wed Sep 30 00:59:28.342998 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.343334 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.356516 2026] [security2:error] [pid 187269:tid 187486] [client 20.211.90.37:48424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/mac.php"] [unique_id "aryzUNFcyhWr7HDzNGmRNwAAAmQ"]
[Wed Sep 30 00:59:28.388650 2026] [autoindex:error] [pid 187269:tid 187527] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:28.433605 2026] [security2:error] [pid 187269:tid 187519] [client 74.7.242.1:56930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzUNFcyhWr7HDzNGmRPQAAAoU"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:59:28.434287 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.434694 2026] [access_compat:error] [pid 187269:tid 187416] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.468737 2026] [security2:error] [pid 187269:tid 187518] [client 4.196.65.241:19501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/fsfrl.php"] [unique_id "aryzUNFcyhWr7HDzNGmRPwAAAoQ"]
[Wed Sep 30 00:59:28.524669 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.524982 2026] [access_compat:error] [pid 187269:tid 187414] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.560660 2026] [security2:error] [pid 187269:tid 187413] [client 203.122.45.246:65355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzUNFcyhWr7HDzNGmRQQAAAhs"]
[Wed Sep 30 00:59:28.560881 2026] [security2:error] [pid 187269:tid 187413] [client 203.122.45.246:65355] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzUNFcyhWr7HDzNGmRQQAAAhs"]
[Wed Sep 30 00:59:28.616358 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.616623 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.646162 2026] [security2:error] [pid 186850:tid 187046] [client 20.198.74.230:34836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/xxw.php"] [unique_id "aryzUE5Phls--iYlcKgQigAAAUw"]
[Wed Sep 30 00:59:28.707027 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.707285 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.714662 2026] [security2:error] [pid 186850:tid 186980] [client 13.70.4.78:24320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryzUE5Phls--iYlcKgQiwAAAQo"]
[Wed Sep 30 00:59:28.759755 2026] [access_compat:error] [pid 187269:tid 187442] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:28.760044 2026] [access_compat:error] [pid 187269:tid 187442] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:28.797109 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.797384 2026] [access_compat:error] [pid 187269:tid 187510] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.819939 2026] [security2:error] [pid 187269:tid 187526] [client 104.208.65.139:25331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/chosen.php"] [unique_id "aryzUNFcyhWr7HDzNGmRTQAAAos"]
[Wed Sep 30 00:59:28.891102 2026] [autoindex:error] [pid 187269:tid 187504] [client 82.102.18.190:43470] AH01276: Cannot serve directory /home4/nzbhctmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:28.898322 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.898630 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:28.930383 2026] [security2:error] [pid 187269:tid 187412] [client 20.211.90.37:48395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/makeasmtp.php"] [unique_id "aryzUNFcyhWr7HDzNGmRUwAAAho"]
[Wed Sep 30 00:59:28.993692 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:28.993996 2026] [access_compat:error] [pid 187269:tid 187496] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.052740 2026] [security2:error] [pid 187269:tid 187427] [client 82.102.18.190:43470] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzUdFcyhWr7HDzNGmRWAAAAik"]
[Wed Sep 30 00:59:29.085259 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.085559 2026] [access_compat:error] [pid 187269:tid 187440] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.090120 2026] [security2:error] [pid 187269:tid 187488] [client 20.70.173.30:2552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/aaa.php"] [unique_id "aryzUdFcyhWr7HDzNGmRWwAAAmY"]
[Wed Sep 30 00:59:29.162526 2026] [security2:error] [pid 186850:tid 187068] [client 104.208.65.139:31987] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.solarrackworks.com"] [uri "/1.php"] [unique_id "aryzUU5Phls--iYlcKgQkgAAAWI"]
[Wed Sep 30 00:59:29.162649 2026] [security2:error] [pid 186850:tid 187068] [client 104.208.65.139:31987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/1.php"] [unique_id "aryzUU5Phls--iYlcKgQkgAAAWI"]
[Wed Sep 30 00:59:29.175571 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.175841 2026] [access_compat:error] [pid 187269:tid 187492] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.209027 2026] [security2:error] [pid 187269:tid 187410] [client 13.70.4.78:23969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryzUdFcyhWr7HDzNGmRYgAAAhg"]
[Wed Sep 30 00:59:29.266377 2026] [access_compat:error] [pid 187269:tid 187426] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:29.266800 2026] [access_compat:error] [pid 187269:tid 187426] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:29.267357 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.267636 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.286382 2026] [autoindex:error] [pid 187269:tid 187507] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/js/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:29.319938 2026] [security2:error] [pid 187269:tid 187523] [client 72.255.10.32:52338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzUdFcyhWr7HDzNGmRawAAAog"]
[Wed Sep 30 00:59:29.320033 2026] [security2:error] [pid 187269:tid 187523] [client 72.255.10.32:52338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzUdFcyhWr7HDzNGmRawAAAog"]
[Wed Sep 30 00:59:29.357872 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.358151 2026] [access_compat:error] [pid 187269:tid 187433] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.419218 2026] [security2:error] [pid 186850:tid 187078] [client 43.227.131.37:48722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzUU5Phls--iYlcKgQmQAAAWw"]
[Wed Sep 30 00:59:29.419319 2026] [security2:error] [pid 186850:tid 187078] [client 43.227.131.37:48722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzUU5Phls--iYlcKgQmQAAAWw"]
[Wed Sep 30 00:59:29.449453 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.449771 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25929] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.543023 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.543458 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.588214 2026] [security2:error] [pid 187269:tid 187486] [client 104.208.65.139:31989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/radio.php"] [unique_id "aryzUdFcyhWr7HDzNGmRcwAAAmQ"]
[Wed Sep 30 00:59:29.630331 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.630598 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.657552 2026] [security2:error] [pid 187269:tid 187506] [client 82.102.18.190:43482] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzUdFcyhWr7HDzNGmRdwAAAng"]
[Wed Sep 30 00:59:29.675330 2026] [security2:error] [pid 187269:tid 187527] [client 13.70.4.78:61972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/about/function.php"] [unique_id "aryzUdFcyhWr7HDzNGmReAAAAow"]
[Wed Sep 30 00:59:29.693188 2026] [security2:error] [pid 187269:tid 187455] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUdFcyhWr7HDzNGmRdAAAAkU"]
[Wed Sep 30 00:59:29.713582 2026] [security2:error] [pid 187269:tid 187446] [client 20.211.90.37:47040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/pucci.php"] [unique_id "aryzUdFcyhWr7HDzNGmRewAAAjw"]
[Wed Sep 30 00:59:29.726777 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.727104 2026] [access_compat:error] [pid 187269:tid 187441] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.740229 2026] [access_compat:error] [pid 187269:tid 187477] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:29.740514 2026] [access_compat:error] [pid 187269:tid 187477] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:29.783240 2026] [security2:error] [pid 187269:tid 187439] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUdFcyhWr7HDzNGmRhAAAAjU"]
[Wed Sep 30 00:59:29.818231 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.818504 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:29.897219 2026] [security2:error] [pid 186850:tid 187024] [client 45.138.12.32:19114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xjn.hct.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzUU5Phls--iYlcKgQpgAAATY"]
[Wed Sep 30 00:59:29.909720 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:29.909997 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.000557 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.000873 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.052858 2026] [security2:error] [pid 187269:tid 187464] [client 13.70.4.78:23569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryzUtFcyhWr7HDzNGmRjQAAAk4"]
[Wed Sep 30 00:59:30.055006 2026] [security2:error] [pid 187269:tid 187466] [client 20.198.74.230:41369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/router.php"] [unique_id "aryzUtFcyhWr7HDzNGmRjgAAAlA"]
[Wed Sep 30 00:59:30.091198 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.091457 2026] [access_compat:error] [pid 187269:tid 187490] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.096775 2026] [security2:error] [pid 187269:tid 187442] [client 20.194.30.107:34002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/css.php"] [unique_id "aryzUtFcyhWr7HDzNGmRkQAAAjg"]
[Wed Sep 30 00:59:30.106844 2026] [security2:error] [pid 187269:tid 187510] [client 104.208.65.139:60534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/blacks.php"] [unique_id "aryzUtFcyhWr7HDzNGmRkgAAAnw"]
[Wed Sep 30 00:59:30.183285 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.183557 2026] [access_compat:error] [pid 187269:tid 187459] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.191422 2026] [security2:error] [pid 187269:tid 187468] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUtFcyhWr7HDzNGmRlgAAAlI"]
[Wed Sep 30 00:59:30.193664 2026] [autoindex:error] [pid 187269:tid 187504] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:30.196546 2026] [security2:error] [pid 187269:tid 187493] [client 49.205.105.16:14661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmRmgAAAms"]
[Wed Sep 30 00:59:30.196632 2026] [security2:error] [pid 187269:tid 187493] [client 49.205.105.16:14661] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmRmgAAAms"]
[Wed Sep 30 00:59:30.266954 2026] [access_compat:error] [pid 187269:tid 187496] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:30.267252 2026] [access_compat:error] [pid 187269:tid 187496] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:30.269893 2026] [security2:error] [pid 187269:tid 187444] [client 82.102.18.190:43486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzUtFcyhWr7HDzNGmRoAAAAjo"]
[Wed Sep 30 00:59:30.273901 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.274175 2026] [access_compat:error] [pid 187269:tid 187427] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.296050 2026] [security2:error] [pid 187269:tid 187484] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUtFcyhWr7HDzNGmRngAAAmI"]
[Wed Sep 30 00:59:30.330428 2026] [security2:error] [pid 186850:tid 186956] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzUk5Phls--iYlcKgQqwABF2k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=84678&sid=558b08b808910f583708a6dd00d46767
[Wed Sep 30 00:59:30.330462 2026] [security2:error] [pid 186850:tid 186956] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzUk5Phls--iYlcKgQqwABF2k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=84678&sid=558b08b808910f583708a6dd00d46767
[Wed Sep 30 00:59:30.363819 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.364090 2026] [access_compat:error] [pid 187269:tid 187483] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.373194 2026] [security2:error] [pid 187269:tid 187408] [client 213.136.69.135:59254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-icons-registry.php"] [unique_id "aryzUtFcyhWr7HDzNGmRpgAAAhY"], referer: binance.com
[Wed Sep 30 00:59:30.385956 2026] [security2:error] [pid 187269:tid 187516] [client 20.70.173.30:2691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/images.php"] [unique_id "aryzUtFcyhWr7HDzNGmRpwAAAoI"]
[Wed Sep 30 00:59:30.388712 2026] [security2:error] [pid 187269:tid 187429] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUtFcyhWr7HDzNGmRoQAAAis"]
[Wed Sep 30 00:59:30.394445 2026] [security2:error] [pid 186850:tid 187106] [client 20.211.90.37:48433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/puc.php"] [unique_id "aryzUk5Phls--iYlcKgQrgAAAYg"]
[Wed Sep 30 00:59:30.412613 2026] [security2:error] [pid 186850:tid 186915] [remote 64.23.166.180:16418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.eyt.icg.mybluehost.me"] [uri "/.env"] [unique_id "aryzUk5Phls--iYlcKgQrwABSEA"]
[Wed Sep 30 00:59:30.454988 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.455269 2026] [access_compat:error] [pid 187269:tid 187515] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.489488 2026] [security2:error] [pid 187269:tid 187311] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzUtFcyhWr7HDzNGmRsQACkSI"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D38711
[Wed Sep 30 00:59:30.489558 2026] [security2:error] [pid 187269:tid 187523] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUtFcyhWr7HDzNGmRrQAAAog"]
[Wed Sep 30 00:59:30.537250 2026] [security2:error] [pid 187269:tid 187470] [client 13.70.4.78:61996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/admin/function.php"] [unique_id "aryzUtFcyhWr7HDzNGmRtAAAAlQ"]
[Wed Sep 30 00:59:30.560859 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.561240 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.579709 2026] [security2:error] [pid 187269:tid 187500] [client 104.208.65.139:60515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/run.php"] [unique_id "aryzUtFcyhWr7HDzNGmRuQAAAnI"]
[Wed Sep 30 00:59:30.588309 2026] [security2:error] [pid 187269:tid 187430] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzUtFcyhWr7HDzNGmRtQAAAiw"]
[Wed Sep 30 00:59:30.647432 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.647696 2026] [access_compat:error] [pid 187269:tid 187527] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.738732 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.739015 2026] [access_compat:error] [pid 187269:tid 187425] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.747668 2026] [access_compat:error] [pid 187269:tid 187431] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:30.747938 2026] [access_compat:error] [pid 187269:tid 187431] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:30.802744 2026] [security2:error] [pid 186850:tid 186871] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzUk5Phls--iYlcKgQtgABJhQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=285744&sid=00ffac055248a90ddcc1d8a574188180
[Wed Sep 30 00:59:30.802772 2026] [security2:error] [pid 186850:tid 186871] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzUk5Phls--iYlcKgQtgABJhQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=285744&sid=00ffac055248a90ddcc1d8a574188180
[Wed Sep 30 00:59:30.829763 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.830226 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:30.834773 2026] [security2:error] [pid 187269:tid 187491] [client 20.211.90.37:48419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/8.php"] [unique_id "aryzUtFcyhWr7HDzNGmRzAAAAmk"]
[Wed Sep 30 00:59:30.871774 2026] [security2:error] [pid 187269:tid 187495] [client 116.72.182.19:52485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmRzgAAAm0"]
[Wed Sep 30 00:59:30.872560 2026] [security2:error] [pid 187269:tid 187495] [client 116.72.182.19:52485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmRzgAAAm0"]
[Wed Sep 30 00:59:30.876200 2026] [security2:error] [pid 186850:tid 187081] [client 82.102.18.190:43490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzUk5Phls--iYlcKgQuAAAAW8"]
[Wed Sep 30 00:59:30.914203 2026] [security2:error] [pid 187269:tid 187466] [client 20.213.164.196:60179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/hp.php"] [unique_id "aryzUtFcyhWr7HDzNGmR0QAAAlA"]
[Wed Sep 30 00:59:30.921262 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:30.921520 2026] [access_compat:error] [pid 187269:tid 187528] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.011694 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.011996 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.027731 2026] [security2:error] [pid 187269:tid 187480] [client 104.208.65.139:25621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/vpn.php"] [unique_id "aryzU9FcyhWr7HDzNGmR2gAAAl4"]
[Wed Sep 30 00:59:31.047169 2026] [security2:error] [pid 187269:tid 187494] [client 49.43.163.212:65075] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmR1QAAAmw"]
[Wed Sep 30 00:59:31.047297 2026] [security2:error] [pid 187269:tid 187494] [client 49.43.163.212:65075] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzUtFcyhWr7HDzNGmR1QAAAmw"]
[Wed Sep 30 00:59:31.055537 2026] [security2:error] [pid 186850:tid 187072] [client 13.70.4.78:24366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/9.php"] [unique_id "aryzU05Phls--iYlcKgQuwAAAWY"]
[Wed Sep 30 00:59:31.103883 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.104166 2026] [access_compat:error] [pid 187269:tid 187533] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.106625 2026] [security2:error] [pid 187269:tid 187419] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzU9FcyhWr7HDzNGmR3gAAAiE"]
[Wed Sep 30 00:59:31.194106 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.194363 2026] [access_compat:error] [pid 187269:tid 187444] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.232697 2026] [security2:error] [pid 187269:tid 187484] [client 20.211.90.37:47060] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/1.php"] [unique_id "aryzU9FcyhWr7HDzNGmR4gAAAmI"]
[Wed Sep 30 00:59:31.232834 2026] [security2:error] [pid 187269:tid 187484] [client 20.211.90.37:47060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/1.php"] [unique_id "aryzU9FcyhWr7HDzNGmR4gAAAmI"]
[Wed Sep 30 00:59:31.236199 2026] [access_compat:error] [pid 187269:tid 187427] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:31.236463 2026] [access_compat:error] [pid 187269:tid 187427] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:31.284930 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.285229 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.325979 2026] [security2:error] [pid 187269:tid 187443] [client 4.196.65.241:53083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/felnggg.php"] [unique_id "aryzU9FcyhWr7HDzNGmR5wAAAjk"]
[Wed Sep 30 00:59:31.341295 2026] [security2:error] [pid 187269:tid 187451] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzU9FcyhWr7HDzNGmR6AAAAkE"]
[Wed Sep 30 00:59:31.377310 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.377733 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.386642 2026] [autoindex:error] [pid 187269:tid 187426] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:31.403762 2026] [security2:error] [pid 187269:tid 187463] [client 104.208.65.139:37158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/alfa.php"] [unique_id "aryzU9FcyhWr7HDzNGmR8wAAAk0"]
[Wed Sep 30 00:59:31.432756 2026] [security2:error] [pid 187269:tid 187423] [client 20.213.164.196:10503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wpuse.php"] [unique_id "aryzU9FcyhWr7HDzNGmR9QAAAiU"]
[Wed Sep 30 00:59:31.467036 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.467310 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.467985 2026] [security2:error] [pid 187269:tid 187524] [client 20.194.30.107:17383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/m.php"] [unique_id "aryzU9FcyhWr7HDzNGmR-AAAAok"]
[Wed Sep 30 00:59:31.491556 2026] [security2:error] [pid 187269:tid 187496] [client 82.102.18.190:52338] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzU9FcyhWr7HDzNGmR-gAAAm4"]
[Wed Sep 30 00:59:31.502174 2026] [security2:error] [pid 186850:tid 187099] [client 20.198.74.230:51402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/cibrkysaeng.php"] [unique_id "aryzU05Phls--iYlcKgQwAAAAYE"]
[Wed Sep 30 00:59:31.556930 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.557196 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.596455 2026] [security2:error] [pid 187269:tid 187439] [client 20.194.30.107:40406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/classwithtostring.php"] [unique_id "aryzU9FcyhWr7HDzNGmSAgAAAjU"]
[Wed Sep 30 00:59:31.648765 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.649112 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.730688 2026] [security2:error] [pid 187269:tid 187422] [client 13.70.4.78:23948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryzU9FcyhWr7HDzNGmSBQAAAiQ"]
[Wed Sep 30 00:59:31.736611 2026] [access_compat:error] [pid 187269:tid 187440] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:31.736878 2026] [access_compat:error] [pid 187269:tid 187440] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:31.738547 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.738830 2026] [access_compat:error] [pid 187269:tid 187491] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.773076 2026] [security2:error] [pid 187269:tid 187485] [client 45.138.12.32:19174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xoa.xcc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzU9FcyhWr7HDzNGmSCgAAAmM"]
[Wed Sep 30 00:59:31.807504 2026] [security2:error] [pid 187269:tid 187413] [client 20.213.164.196:10778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/sm.php"] [unique_id "aryzU9FcyhWr7HDzNGmSCwAAAhs"]
[Wed Sep 30 00:59:31.830233 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.830502 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:31.923655 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:31.924099 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.011166 2026] [security2:error] [pid 187269:tid 187512] [client 20.211.90.37:48418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/admin.php"] [unique_id "aryzVNFcyhWr7HDzNGmSHwAAAn4"]
[Wed Sep 30 00:59:32.016389 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.016804 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.079241 2026] [security2:error] [pid 187269:tid 187484] [client 13.70.4.78:23975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/.well-known/log.php"] [unique_id "aryzVNFcyhWr7HDzNGmSIQAAAmI"]
[Wed Sep 30 00:59:32.103501 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.103770 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.105337 2026] [security2:error] [pid 187269:tid 187425] [client 116.197.133.25:49466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzVNFcyhWr7HDzNGmSJAAAAic"]
[Wed Sep 30 00:59:32.105437 2026] [security2:error] [pid 187269:tid 187425] [client 116.197.133.25:49466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzVNFcyhWr7HDzNGmSJAAAAic"]
[Wed Sep 30 00:59:32.108355 2026] [security2:error] [pid 187269:tid 187443] [client 104.208.65.139:28054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/w.php"] [unique_id "aryzVNFcyhWr7HDzNGmSJQAAAjk"]
[Wed Sep 30 00:59:32.140325 2026] [security2:error] [pid 187269:tid 187464] [client 82.102.18.190:15344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzVNFcyhWr7HDzNGmSKAAAAk4"]
[Wed Sep 30 00:59:32.196238 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.196510 2026] [access_compat:error] [pid 187269:tid 187426] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.229170 2026] [access_compat:error] [pid 187269:tid 187436] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:32.229452 2026] [access_compat:error] [pid 187269:tid 187436] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:32.290697 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.291397 2026] [access_compat:error] [pid 187269:tid 187509] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.381168 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.381434 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.471716 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.472008 2026] [access_compat:error] [pid 187269:tid 187513] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.561644 2026] [security2:error] [pid 187269:tid 187349] [remote 50.6.108.183:25534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.108.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "aryzVNFcyhWr7HDzNGmSNgACjEg"]
[Wed Sep 30 00:59:32.563247 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.563513 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.567476 2026] [security2:error] [pid 187269:tid 187417] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVNFcyhWr7HDzNGmSOAAAAh8"]
[Wed Sep 30 00:59:32.638193 2026] [security2:error] [pid 186850:tid 187082] [client 103.159.192.142:51478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzVE5Phls--iYlcKgQzQAAAXA"]
[Wed Sep 30 00:59:32.638310 2026] [security2:error] [pid 186850:tid 187082] [client 103.159.192.142:51478] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzVE5Phls--iYlcKgQzQAAAXA"]
[Wed Sep 30 00:59:32.654112 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.654395 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.712305 2026] [security2:error] [pid 187269:tid 187446] [client 20.211.90.37:47053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/edit.php"] [unique_id "aryzVNFcyhWr7HDzNGmSPAAAAjw"]
[Wed Sep 30 00:59:32.743358 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.743629 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.771381 2026] [access_compat:error] [pid 187269:tid 187501] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:32.771836 2026] [access_compat:error] [pid 187269:tid 187501] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:32.802722 2026] [security2:error] [pid 186850:tid 187018] [client 82.102.18.190:52352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzVE5Phls--iYlcKgQ0QAAATA"]
[Wed Sep 30 00:59:32.808575 2026] [security2:error] [pid 187269:tid 187454] [client 13.70.4.78:23970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/class.php"] [unique_id "aryzVNFcyhWr7HDzNGmSRwAAAkQ"]
[Wed Sep 30 00:59:32.835521 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.835854 2026] [access_compat:error] [pid 187269:tid 187497] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:32.907184 2026] [security2:error] [pid 187269:tid 187510] [client 104.208.65.139:25659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzVNFcyhWr7HDzNGmSUQAAAnw"]
[Wed Sep 30 00:59:32.923731 2026] [security2:error] [pid 187269:tid 187333] [remote 74.7.227.56:47428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzVNFcyhWr7HDzNGmSTAACHDg"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=625
[Wed Sep 30 00:59:32.930544 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:32.930918 2026] [access_compat:error] [pid 187269:tid 187466] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.025901 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.026165 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.119129 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.119422 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.155055 2026] [security2:error] [pid 186850:tid 187017] [client 154.54.100.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "bna.rqu.mybluehost.me"] [uri "/.git/config"] [unique_id "aryzVU5Phls--iYlcKgQ2wAAAS8"]
[Wed Sep 30 00:59:33.163765 2026] [core:error] [pid 187269:tid 187488] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:33.163783 2026] [core:error] [pid 187269:tid 187488] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:33.173504 2026] [security2:error] [pid 187269:tid 187407] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVdFcyhWr7HDzNGmSYwAAAhU"]
[Wed Sep 30 00:59:33.216011 2026] [security2:error] [pid 187269:tid 187495] [client 13.70.4.78:23992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/lock360.php"] [unique_id "aryzVdFcyhWr7HDzNGmSZgAAAm0"]
[Wed Sep 30 00:59:33.216010 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.216561 2026] [access_compat:error] [pid 187269:tid 187408] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.255498 2026] [access_compat:error] [pid 187269:tid 187516] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:33.256102 2026] [access_compat:error] [pid 187269:tid 187516] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:33.304614 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.304873 2026] [access_compat:error] [pid 187269:tid 187472] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.305194 2026] [security2:error] [pid 187269:tid 187444] [client 104.208.65.139:25610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/robot.php"] [unique_id "aryzVdFcyhWr7HDzNGmSawAAAjo"]
[Wed Sep 30 00:59:33.332406 2026] [security2:error] [pid 187269:tid 187522] [client 20.213.164.196:10784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/mknobgkg.php"] [unique_id "aryzVdFcyhWr7HDzNGmSbAAAAoc"]
[Wed Sep 30 00:59:33.395465 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.395791 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.447284 2026] [security2:error] [pid 187269:tid 187422] [client 223.235.102.107:33064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzVdFcyhWr7HDzNGmSdAAAAiQ"]
[Wed Sep 30 00:59:33.447397 2026] [security2:error] [pid 187269:tid 187422] [client 223.235.102.107:33064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzVdFcyhWr7HDzNGmSdAAAAiQ"]
[Wed Sep 30 00:59:33.467019 2026] [security2:error] [pid 187269:tid 187484] [client 82.102.18.190:52364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzVdFcyhWr7HDzNGmSdgAAAmI"]
[Wed Sep 30 00:59:33.475052 2026] [security2:error] [pid 187269:tid 187437] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVdFcyhWr7HDzNGmScgAAAjM"]
[Wed Sep 30 00:59:33.486029 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.486484 2026] [access_compat:error] [pid 187269:tid 187514] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.544792 2026] [security2:error] [pid 187269:tid 187327] [remote 50.6.108.183:25534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.108.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/wp-login.php"] [unique_id "aryzVdFcyhWr7HDzNGmSewAChjI"], referer: https://medredisolutions.com/wp-login.php
[Wed Sep 30 00:59:33.575452 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.575708 2026] [access_compat:error] [pid 187269:tid 187519] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.661018 2026] [security2:error] [pid 187269:tid 187505] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVdFcyhWr7HDzNGmSgQAAAnc"]
[Wed Sep 30 00:59:33.668289 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.668590 2026] [access_compat:error] [pid 187269:tid 187506] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.689357 2026] [security2:error] [pid 187269:tid 187466] [client 104.208.65.139:37162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/sss.php"] [unique_id "aryzVdFcyhWr7HDzNGmSjAAAAlA"]
[Wed Sep 30 00:59:33.707318 2026] [security2:error] [pid 187269:tid 187479] [client 13.70.4.78:23615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nicecongo.com"] [uri "/system_log.php"] [unique_id "aryzVdFcyhWr7HDzNGmSjQAAAl0"]
[Wed Sep 30 00:59:33.757848 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.758116 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.772918 2026] [security2:error] [pid 187269:tid 187533] [client 20.198.74.230:41375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.windo.co.uk"] [uri "/wp-wpbak.php"] [unique_id "aryzVdFcyhWr7HDzNGmSlAAAApI"]
[Wed Sep 30 00:59:33.801133 2026] [access_compat:error] [pid 187269:tid 187419] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:33.801397 2026] [access_compat:error] [pid 187269:tid 187419] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:33.806009 2026] [security2:error] [pid 187269:tid 187490] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVdFcyhWr7HDzNGmSkgAAAmg"]
[Wed Sep 30 00:59:33.848804 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.849064 2026] [access_compat:error] [pid 187269:tid 187458] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:33.860388 2026] [security2:error] [pid 186850:tid 187005] [client 223.181.60.167:7916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzVU5Phls--iYlcKgQ4QAAASM"]
[Wed Sep 30 00:59:33.860617 2026] [security2:error] [pid 186850:tid 187005] [client 223.181.60.167:7916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzVU5Phls--iYlcKgQ4QAAASM"]
[Wed Sep 30 00:59:33.863302 2026] [security2:error] [pid 187269:tid 187457] [client 20.213.164.196:10805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/dairg.php"] [unique_id "aryzVdFcyhWr7HDzNGmSmQAAAkc"]
[Wed Sep 30 00:59:33.895112 2026] [security2:error] [pid 186850:tid 187096] [client 20.211.90.37:47062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/inputs.php"] [unique_id "aryzVU5Phls--iYlcKgQ5AAAAX4"]
[Wed Sep 30 00:59:33.941805 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:33.942097 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.032056 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.032346 2026] [access_compat:error] [pid 187269:tid 187517] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.033399 2026] [security2:error] [pid 187269:tid 187426] [client 104.208.65.139:30510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/or.php"] [unique_id "aryzVtFcyhWr7HDzNGmSoQAAAig"]
[Wed Sep 30 00:59:34.072819 2026] [security2:error] [pid 187269:tid 187459] [client 82.102.18.190:52368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzVtFcyhWr7HDzNGmSogAAAkk"]
[Wed Sep 30 00:59:34.124926 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.125348 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.184070 2026] [security2:error] [pid 187269:tid 187436] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzVtFcyhWr7HDzNGmSpAAAAjI"]
[Wed Sep 30 00:59:34.211569 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.211835 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.271020 2026] [security2:error] [pid 186850:tid 186981] [client 4.240.25.22:21507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/red.php"] [unique_id "aryzVk5Phls--iYlcKgQ5wAAAQs"]
[Wed Sep 30 00:59:34.281649 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:34.282103 2026] [access_compat:error] [pid 187269:tid 187413] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:34.288680 2026] [security2:error] [pid 187269:tid 187507] [client 20.213.164.196:10729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/dronishness.php"] [unique_id "aryzVtFcyhWr7HDzNGmSqgAAAnk"]
[Wed Sep 30 00:59:34.307338 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.307608 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.310029 2026] [security2:error] [pid 186850:tid 186949] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzVk5Phls--iYlcKgQ6AABGGI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293197&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:34.310056 2026] [security2:error] [pid 186850:tid 186949] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzVk5Phls--iYlcKgQ6AABGGI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293197&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 00:59:34.397375 2026] [security2:error] [pid 187269:tid 187406] [client 20.211.90.37:47991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/classwithtostring.php"] [unique_id "aryzVtFcyhWr7HDzNGmSrgAAAhQ"]
[Wed Sep 30 00:59:34.398719 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.399001 2026] [access_compat:error] [pid 187269:tid 187423] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.412492 2026] [security2:error] [pid 187269:tid 187422] [client 20.70.173.30:63645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/xkSudf.php"] [unique_id "aryzVtFcyhWr7HDzNGmSrwAAAiQ"]
[Wed Sep 30 00:59:34.466671 2026] [security2:error] [pid 187269:tid 187532] [client 45.138.12.47:19128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/cgi-sys/suspendedpage.cgi/wp-links-opml.php"] [unique_id "aryzVtFcyhWr7HDzNGmSsQAAApE"]
[Wed Sep 30 00:59:34.489606 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.489931 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.581751 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.582057 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.584155 2026] [security2:error] [pid 187269:tid 187302] [remote 50.6.108.183:25534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.108.6.50.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmStgACgBk"]
[Wed Sep 30 00:59:34.584282 2026] [security2:error] [pid 187269:tid 187514] [client 50.6.108.183:25534] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmStgACgBk"]
[Wed Sep 30 00:59:34.599130 2026] [core:error] [pid 187269:tid 187515] [client 45.138.12.41:48980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:34.599144 2026] [core:error] [pid 187269:tid 187515] [client 45.138.12.41:48980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:34.651458 2026] [security2:error] [pid 187269:tid 187527] [client 104.208.65.139:60531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/b8.php"] [unique_id "aryzVtFcyhWr7HDzNGmSugAAAow"]
[Wed Sep 30 00:59:34.661121 2026] [security2:error] [pid 187269:tid 187474] [client 45.138.12.43:12446] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rvz.vpu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzVtFcyhWr7HDzNGmSuwAAAlg"]
[Wed Sep 30 00:59:34.672711 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.673004 2026] [access_compat:error] [pid 187269:tid 187523] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.687220 2026] [security2:error] [pid 187269:tid 187433] [client 82.102.18.190:52376] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzVtFcyhWr7HDzNGmSvQAAAi8"]
[Wed Sep 30 00:59:34.720511 2026] [security2:error] [pid 187269:tid 187464] [client 37.41.16.35:54028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmSvgAAAk4"]
[Wed Sep 30 00:59:34.720736 2026] [security2:error] [pid 187269:tid 187464] [client 37.41.16.35:54028] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmSvgAAAk4"]
[Wed Sep 30 00:59:34.764144 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.764423 2026] [access_compat:error] [pid 187269:tid 187473] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.765076 2026] [access_compat:error] [pid 187269:tid 187438] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:34.765352 2026] [access_compat:error] [pid 187269:tid 187438] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:34.782764 2026] [security2:error] [pid 186850:tid 187009] [client 45.138.12.32:4456] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.llz.xcs.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzVk5Phls--iYlcKgQ7AAAASc"]
[Wed Sep 30 00:59:34.843297 2026] [security2:error] [pid 187269:tid 187467] [client 20.211.90.37:47078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/adminfuns.php"] [unique_id "aryzVtFcyhWr7HDzNGmSxAAAAlE"]
[Wed Sep 30 00:59:34.855058 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.855384 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.948116 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:34.948600 2026] [access_compat:error] [pid 187269:tid 187449] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:34.957161 2026] [security2:error] [pid 187269:tid 187417] [client 182.69.182.151:9411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmSyQAAAh8"]
[Wed Sep 30 00:59:34.957274 2026] [security2:error] [pid 187269:tid 187417] [client 182.69.182.151:9411] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzVtFcyhWr7HDzNGmSyQAAAh8"]
[Wed Sep 30 00:59:35.015843 2026] [security2:error] [pid 186850:tid 186912] [remote 57.141.14.12:33476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "aryzVk5Phls--iYlcKgQ8QABNj0"]
[Wed Sep 30 00:59:35.039927 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.040317 2026] [access_compat:error] [pid 187269:tid 187479] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.074466 2026] [security2:error] [pid 186850:tid 187012] [client 20.213.164.196:10737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/Row_wsoo.php"] [unique_id "aryzV05Phls--iYlcKgQ8wAAASo"]
[Wed Sep 30 00:59:35.126459 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.126912 2026] [access_compat:error] [pid 187269:tid 187442] [client 216.73.216.46:63885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.157486 2026] [security2:error] [pid 187269:tid 187465] [client 155.190.6.18:48356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzV9FcyhWr7HDzNGmS1AAAAk8"]
[Wed Sep 30 00:59:35.199735 2026] [security2:error] [pid 187269:tid 187490] [client 45.138.12.32:4466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.llz.xcs.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzV9FcyhWr7HDzNGmS2gAAAmg"]
[Wed Sep 30 00:59:35.241006 2026] [access_compat:error] [pid 187269:tid 187494] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:35.241425 2026] [access_compat:error] [pid 187269:tid 187494] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:35.270853 2026] [security2:error] [pid 186850:tid 187095] [client 49.36.41.37:56257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgQ9AAAAX0"]
[Wed Sep 30 00:59:35.270965 2026] [security2:error] [pid 186850:tid 187095] [client 49.36.41.37:56257] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgQ9AAAAX0"]
[Wed Sep 30 00:59:35.273111 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.273539 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.292905 2026] [security2:error] [pid 187269:tid 187414] [client 82.102.18.190:13169] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzV9FcyhWr7HDzNGmS3wAAAhw"]
[Wed Sep 30 00:59:35.339029 2026] [security2:error] [pid 187269:tid 187488] [client 20.211.90.37:48416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/222.php"] [unique_id "aryzV9FcyhWr7HDzNGmS4gAAAmY"]
[Wed Sep 30 00:59:35.361697 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.361968 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.382749 2026] [security2:error] [pid 187269:tid 187408] [client 104.208.65.139:50163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/xex.php"] [unique_id "aryzV9FcyhWr7HDzNGmS5QAAAhY"]
[Wed Sep 30 00:59:35.401549 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.401992 2026] [access_compat:error] [pid 187269:tid 187516] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.426129 2026] [security2:error] [pid 187269:tid 187465] [client 155.190.6.18:48356] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzV9FcyhWr7HDzNGmS1AAAAk8"]
[Wed Sep 30 00:59:35.491232 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.491499 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.549742 2026] [security2:error] [pid 186850:tid 187004] [client 150.107.232.159:35580] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgQ-gAAASI"]
[Wed Sep 30 00:59:35.550493 2026] [security2:error] [pid 186850:tid 187004] [client 150.107.232.159:35580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgQ-gAAASI"]
[Wed Sep 30 00:59:35.581567 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.581875 2026] [access_compat:error] [pid 187269:tid 187437] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.663644 2026] [security2:error] [pid 187269:tid 187464] [client 4.196.65.241:19077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/02d4cc85caindex.php"] [unique_id "aryzV9FcyhWr7HDzNGmS9QAAAk4"]
[Wed Sep 30 00:59:35.673884 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.674170 2026] [access_compat:error] [pid 187269:tid 187520] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.729340 2026] [security2:error] [pid 187269:tid 187473] [client 104.208.65.139:37153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/CAE-2.5.php"] [unique_id "aryzV9FcyhWr7HDzNGmS-AAAAlc"]
[Wed Sep 30 00:59:35.760103 2026] [access_compat:error] [pid 187269:tid 187501] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:35.760397 2026] [access_compat:error] [pid 187269:tid 187501] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:35.762989 2026] [security2:error] [pid 187269:tid 187475] [client 103.241.204.139:57581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzV9FcyhWr7HDzNGmS_AAAAlk"]
[Wed Sep 30 00:59:35.763108 2026] [security2:error] [pid 187269:tid 187475] [client 103.241.204.139:57581] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzV9FcyhWr7HDzNGmS_AAAAlk"]
[Wed Sep 30 00:59:35.763680 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.763963 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.779784 2026] [security2:error] [pid 187269:tid 187467] [client 20.211.90.37:48387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/BDKR28WP.php"] [unique_id "aryzV9FcyhWr7HDzNGmS_QAAAlE"]
[Wed Sep 30 00:59:35.855839 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.856114 2026] [access_compat:error] [pid 187269:tid 187421] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:35.918900 2026] [security2:error] [pid 186850:tid 187073] [client 223.181.30.165:4634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgRAAAAAWc"]
[Wed Sep 30 00:59:35.919010 2026] [security2:error] [pid 186850:tid 187073] [client 223.181.30.165:4634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzV05Phls--iYlcKgRAAAAAWc"]
[Wed Sep 30 00:59:35.941842 2026] [security2:error] [pid 186850:tid 187035] [client 82.102.18.190:52396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzV05Phls--iYlcKgRAgAAAUE"]
[Wed Sep 30 00:59:35.947198 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:35.947482 2026] [access_compat:error] [pid 187269:tid 187534] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.038780 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.039070 2026] [access_compat:error] [pid 187269:tid 187530] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.109559 2026] [security2:error] [pid 187269:tid 187415] [client 104.208.65.139:37147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/ass.php"] [unique_id "aryzWNFcyhWr7HDzNGmTBgAAAh0"]
[Wed Sep 30 00:59:36.122305 2026] [security2:error] [pid 187269:tid 187510] [client 20.213.164.196:10782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/x2.php"] [unique_id "aryzWNFcyhWr7HDzNGmTCAAAAnw"]
[Wed Sep 30 00:59:36.127490 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.127752 2026] [access_compat:error] [pid 187269:tid 187463] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.217331 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.217605 2026] [access_compat:error] [pid 187269:tid 187445] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.231369 2026] [security2:error] [pid 186850:tid 187081] [client 20.211.90.37:48393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp.php"] [unique_id "aryzWE5Phls--iYlcKgRBQAAAW8"]
[Wed Sep 30 00:59:36.232031 2026] [access_compat:error] [pid 187269:tid 187508] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:36.232279 2026] [access_compat:error] [pid 187269:tid 187508] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:36.240421 2026] [security2:error] [pid 187269:tid 187515] [client 122.173.27.10:7643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzWNFcyhWr7HDzNGmTEgAAAoE"]
[Wed Sep 30 00:59:36.240528 2026] [security2:error] [pid 187269:tid 187515] [client 122.173.27.10:7643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzWNFcyhWr7HDzNGmTEgAAAoE"]
[Wed Sep 30 00:59:36.257563 2026] [security2:error] [pid 186850:tid 187071] [client 4.240.25.22:43792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/0.php"] [unique_id "aryzWE5Phls--iYlcKgRBwAAAWU"]
[Wed Sep 30 00:59:36.281414 2026] [security2:error] [pid 187269:tid 187462] [client 20.198.74.230:24153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/02d4cc85caindex.php"] [unique_id "aryzWNFcyhWr7HDzNGmTFwAAAkw"]
[Wed Sep 30 00:59:36.310457 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.310729 2026] [access_compat:error] [pid 187269:tid 187435] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.346671 2026] [security2:error] [pid 186850:tid 186929] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzWE5Phls--iYlcKgRCgABMU4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=195&t=21812
[Wed Sep 30 00:59:36.346702 2026] [security2:error] [pid 186850:tid 186929] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzWE5Phls--iYlcKgRCgABMU4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=195&t=21812
[Wed Sep 30 00:59:36.382113 2026] [security2:error] [pid 187269:tid 187482] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzWNFcyhWr7HDzNGmTGwAAAmA"]
[Wed Sep 30 00:59:36.400060 2026] [autoindex:error] [pid 187269:tid 187518] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 00:59:36.402692 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.402964 2026] [access_compat:error] [pid 187269:tid 187424] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.494838 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.495113 2026] [access_compat:error] [pid 187269:tid 187486] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.520538 2026] [security2:error] [pid 187269:tid 187436] [client 20.213.164.196:10791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/v4.php"] [unique_id "aryzWNFcyhWr7HDzNGmTIgAAAjI"]
[Wed Sep 30 00:59:36.536245 2026] [core:error] [pid 187269:tid 187416] [client 183.88.218.201:50042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:36.536273 2026] [core:error] [pid 187269:tid 187416] [client 183.88.218.201:50042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:36.554146 2026] [security2:error] [pid 186850:tid 187016] [client 82.102.18.190:52402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzWE5Phls--iYlcKgRDQAAAS4"]
[Wed Sep 30 00:59:36.586229 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.586480 2026] [access_compat:error] [pid 187269:tid 187507] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.593578 2026] [security2:error] [pid 187269:tid 187466] [client 152.59.169.65:59782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzWNFcyhWr7HDzNGmTKAAAAlA"]
[Wed Sep 30 00:59:36.593693 2026] [security2:error] [pid 187269:tid 187466] [client 152.59.169.65:59782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzWNFcyhWr7HDzNGmTKAAAAlA"]
[Wed Sep 30 00:59:36.620884 2026] [security2:error] [pid 186850:tid 186899] [remote 57.141.14.16:36324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-includes/wlwmanifest.xml"] [unique_id "aryzWE5Phls--iYlcKgRDwABGjA"]
[Wed Sep 30 00:59:36.633722 2026] [security2:error] [pid 187269:tid 187444] [client 4.240.25.22:63783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/classwithtostring.php"] [unique_id "aryzWNFcyhWr7HDzNGmTKwAAAjo"]
[Wed Sep 30 00:59:36.678114 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.678398 2026] [access_compat:error] [pid 187269:tid 187420] [client 216.73.216.46:17629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.705223 2026] [security2:error] [pid 186850:tid 186983] [client 20.211.90.37:47091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/simple.php"] [unique_id "aryzWE5Phls--iYlcKgREQAAAQ0"]
[Wed Sep 30 00:59:36.748052 2026] [access_compat:error] [pid 187269:tid 187437] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:36.748397 2026] [access_compat:error] [pid 187269:tid 187437] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:36.765902 2026] [security2:error] [pid 187269:tid 187502] [client 104.208.65.139:59189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/felnggg.php"] [unique_id "aryzWNFcyhWr7HDzNGmTMAAAAnQ"]
[Wed Sep 30 00:59:36.767816 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.768175 2026] [access_compat:error] [pid 187269:tid 187450] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.860547 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:36.860822 2026] [access_compat:error] [pid 187269:tid 187464] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:36.881702 2026] [security2:error] [pid 187269:tid 187455] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzWNFcyhWr7HDzNGmTOAAAAkU"]
[Wed Sep 30 00:59:36.940185 2026] [security2:error] [pid 186850:tid 186903] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzWE5Phls--iYlcKgRFgABYDQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=297823&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 00:59:36.940210 2026] [security2:error] [pid 186850:tid 186903] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzWE5Phls--iYlcKgRFgABYDQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=297823&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 00:59:36.973413 2026] [security2:error] [pid 187269:tid 187489] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzWNFcyhWr7HDzNGmTPwAAAmc"]
[Wed Sep 30 00:59:37.057480 2026] [security2:error] [pid 187269:tid 187479] [client 52.231.69.245:34967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzWdFcyhWr7HDzNGmTRgAAAl0"]
[Wed Sep 30 00:59:37.070968 2026] [security2:error] [pid 187269:tid 187468] [client 52.172.226.14:32064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzWdFcyhWr7HDzNGmTRwAAAlI"]
[Wed Sep 30 00:59:37.150502 2026] [security2:error] [pid 187269:tid 187508] [client 45.138.12.32:32886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.wvs.emf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzWdFcyhWr7HDzNGmTSgAAAno"]
[Wed Sep 30 00:59:37.153823 2026] [security2:error] [pid 187269:tid 187473] [client 82.102.18.190:52414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzWdFcyhWr7HDzNGmTSwAAAlc"]
[Wed Sep 30 00:59:37.163479 2026] [security2:error] [pid 186850:tid 187074] [client 103.172.210.103:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzWU5Phls--iYlcKgRGAAAAWg"]
[Wed Sep 30 00:59:37.163585 2026] [security2:error] [pid 186850:tid 187074] [client 103.172.210.103:53320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzWU5Phls--iYlcKgRGAAAAWg"]
[Wed Sep 30 00:59:37.167802 2026] [security2:error] [pid 187269:tid 187515] [client 20.211.90.37:48386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/chosen.php"] [unique_id "aryzWdFcyhWr7HDzNGmTTAAAAoE"]
[Wed Sep 30 00:59:37.179608 2026] [security2:error] [pid 187269:tid 187494] [client 216.73.216.46:17629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzWdFcyhWr7HDzNGmTTgAAAmw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1Mw%3D%3D
[Wed Sep 30 00:59:37.196927 2026] [security2:error] [pid 187269:tid 187476] [client 20.213.164.196:10742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/albin.php"] [unique_id "aryzWdFcyhWr7HDzNGmTTwAAAlo"]
[Wed Sep 30 00:59:37.246252 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.246516 2026] [access_compat:error] [pid 187269:tid 187477] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.276289 2026] [access_compat:error] [pid 187269:tid 187499] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:37.276563 2026] [access_compat:error] [pid 187269:tid 187499] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:37.334616 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.334894 2026] [access_compat:error] [pid 187269:tid 187518] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.346726 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:60350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.347030 2026] [access_compat:error] [pid 187269:tid 187407] [client 216.73.216.46:60350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.347763 2026] [access_compat:error] [pid 187269:tid 187457] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.348173 2026] [access_compat:error] [pid 187269:tid 187457] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.348571 2026] [security2:error] [pid 187269:tid 187482] [client 103.168.67.253:29772] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzWdFcyhWr7HDzNGmTVwAAAmA"]
[Wed Sep 30 00:59:37.348670 2026] [security2:error] [pid 186850:tid 187018] [client 45.138.12.32:32904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xjn.hct.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzWU5Phls--iYlcKgRGgAAATA"]
[Wed Sep 30 00:59:37.363852 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:8484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.364124 2026] [access_compat:error] [pid 187269:tid 187454] [client 216.73.216.46:8484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.411056 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.411490 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.435652 2026] [security2:error] [pid 187269:tid 187452] [client 52.231.69.245:34956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzWdFcyhWr7HDzNGmTYAAAAkI"]
[Wed Sep 30 00:59:37.455464 2026] [security2:error] [pid 187269:tid 187480] [client 139.159.215.28:13180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-login.php"] [unique_id "aryzWdFcyhWr7HDzNGmTYgAAAl4"], referer: https://yod.ninja/wp-login.php
[Wed Sep 30 00:59:37.499225 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.499531 2026] [access_compat:error] [pid 187269:tid 187434] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.539651 2026] [security2:error] [pid 186850:tid 187049] [client 104.208.65.139:17946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/felnggg.update.php"] [unique_id "aryzWU5Phls--iYlcKgRHQAAAU8"]
[Wed Sep 30 00:59:37.548607 2026] [security2:error] [pid 187269:tid 187422] [client 52.172.226.14:32704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzWdFcyhWr7HDzNGmTawAAAiQ"]
[Wed Sep 30 00:59:37.585953 2026] [security2:error] [pid 187269:tid 187385] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzWdFcyhWr7HDzNGmTbgACJWw"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D85358
[Wed Sep 30 00:59:37.588646 2026] [security2:error] [pid 186850:tid 187040] [client 20.211.90.37:47046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/als.php"] [unique_id "aryzWU5Phls--iYlcKgRHgAAAUY"]
[Wed Sep 30 00:59:37.590531 2026] [security2:error] [pid 186850:tid 187020] [client 4.240.25.22:20301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/edit.php"] [unique_id "aryzWU5Phls--iYlcKgRHwAAATI"]
[Wed Sep 30 00:59:37.592012 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.592991 2026] [access_compat:error] [pid 187269:tid 187502] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.680747 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.681013 2026] [access_compat:error] [pid 187269:tid 187467] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.726246 2026] [security2:error] [pid 186850:tid 187046] [client 52.231.69.245:34947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzWU5Phls--iYlcKgRIgAAAUw"]
[Wed Sep 30 00:59:37.727759 2026] [access_compat:error] [pid 187269:tid 187438] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:37.728053 2026] [access_compat:error] [pid 187269:tid 187438] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:37.770927 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.771204 2026] [access_compat:error] [pid 187269:tid 187470] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.778905 2026] [security2:error] [pid 187269:tid 187474] [client 216.73.216.46:8484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzWdFcyhWr7HDzNGmTdwAAAlg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODA%3D
[Wed Sep 30 00:59:37.809353 2026] [security2:error] [pid 187269:tid 187444] [client 82.102.18.190:52420] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzWdFcyhWr7HDzNGmTeAAAAjo"]
[Wed Sep 30 00:59:37.825827 2026] [security2:error] [pid 186850:tid 187031] [client 45.138.12.32:19300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xyd.fbj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzWU5Phls--iYlcKgRIwAAAT0"]
[Wed Sep 30 00:59:37.862783 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.863059 2026] [access_compat:error] [pid 187269:tid 187489] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:37.865434 2026] [core:error] [pid 187269:tid 187460] [client 47.150.46.116:49542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:37.865447 2026] [core:error] [pid 187269:tid 187460] [client 47.150.46.116:49542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:37.954171 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:37.954450 2026] [access_compat:error] [pid 187269:tid 187453] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.019071 2026] [security2:error] [pid 186850:tid 186991] [client 52.172.226.14:32088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/b.php"] [unique_id "aryzWk5Phls--iYlcKgRJQAAARU"]
[Wed Sep 30 00:59:38.029998 2026] [security2:error] [pid 187269:tid 187463] [client 52.231.69.245:34963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/aa.php"] [unique_id "aryzWtFcyhWr7HDzNGmTggAAAk0"]
[Wed Sep 30 00:59:38.044739 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.045023 2026] [access_compat:error] [pid 187269:tid 187500] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.056311 2026] [security2:error] [pid 187269:tid 187411] [client 20.211.90.37:47067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/admin.php"] [unique_id "aryzWtFcyhWr7HDzNGmThgAAAhk"]
[Wed Sep 30 00:59:38.079320 2026] [http2:warn] [pid 178882:tid 179305] [client 40.77.167.130:22996] h2_stream(178882-968-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 00:59:38.137181 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.137454 2026] [access_compat:error] [pid 187269:tid 187494] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.140762 2026] [security2:error] [pid 187269:tid 187483] [client 104.208.65.139:25631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/jybkxer.php"] [unique_id "aryzWtFcyhWr7HDzNGmTjAAAAmE"]
[Wed Sep 30 00:59:38.227609 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.227887 2026] [access_compat:error] [pid 187269:tid 187419] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.276204 2026] [security2:error] [pid 187269:tid 187461] [client 14.224.196.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "digitise.africa"] [uri "/"] [unique_id "aryzWtFcyhWr7HDzNGmTlAAAAks"]
[Wed Sep 30 00:59:38.298472 2026] [security2:error] [pid 187269:tid 187457] [client 20.213.164.196:10498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/atkno.php"] [unique_id "aryzWtFcyhWr7HDzNGmTlwAAAkc"]
[Wed Sep 30 00:59:38.318575 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.319019 2026] [access_compat:error] [pid 187269:tid 187493] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.328663 2026] [security2:error] [pid 187269:tid 187436] [client 52.231.69.245:34981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/z70.php"] [unique_id "aryzWtFcyhWr7HDzNGmTmgAAAjI"]
[Wed Sep 30 00:59:38.350008 2026] [access_compat:error] [pid 187269:tid 187480] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:38.350277 2026] [access_compat:error] [pid 187269:tid 187480] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:38.375282 2026] [security2:error] [pid 187269:tid 187441] [client 20.211.90.37:48402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/f35.php"] [unique_id "aryzWtFcyhWr7HDzNGmTnAAAAjc"]
[Wed Sep 30 00:59:38.409668 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.409939 2026] [access_compat:error] [pid 187269:tid 187451] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.433189 2026] [security2:error] [pid 187269:tid 187468] [client 103.159.192.142:51967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTngAAAlI"]
[Wed Sep 30 00:59:38.433352 2026] [security2:error] [pid 187269:tid 187468] [client 103.159.192.142:51967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTngAAAlI"]
[Wed Sep 30 00:59:38.439064 2026] [security2:error] [pid 187269:tid 187509] [client 116.193.128.26:50468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTnwAAAns"]
[Wed Sep 30 00:59:38.439197 2026] [security2:error] [pid 187269:tid 187509] [client 116.193.128.26:50468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTnwAAAns"]
[Wed Sep 30 00:59:38.455636 2026] [security2:error] [pid 187269:tid 187519] [client 82.102.18.190:52436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nzb.hct.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzWtFcyhWr7HDzNGmToQAAAoU"]
[Wed Sep 30 00:59:38.478857 2026] [security2:error] [pid 187269:tid 187427] [client 45.138.12.43:43192] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rvz.vpu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzWtFcyhWr7HDzNGmTowAAAik"]
[Wed Sep 30 00:59:38.499452 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.499721 2026] [access_compat:error] [pid 187269:tid 187465] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.590409 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.590676 2026] [access_compat:error] [pid 187269:tid 187532] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.593738 2026] [security2:error] [pid 187269:tid 187527] [client 104.208.65.139:25318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/edit-tags.php"] [unique_id "aryzWtFcyhWr7HDzNGmTrAAAAow"]
[Wed Sep 30 00:59:38.630364 2026] [security2:error] [pid 187269:tid 187464] [client 4.240.25.22:20302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/robots.php"] [unique_id "aryzWtFcyhWr7HDzNGmTsQAAAk4"]
[Wed Sep 30 00:59:38.654861 2026] [security2:error] [pid 186850:tid 187094] [client 52.231.69.245:34983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/f35.php"] [unique_id "aryzWk5Phls--iYlcKgRMAAAAXw"]
[Wed Sep 30 00:59:38.681979 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.682257 2026] [access_compat:error] [pid 187269:tid 187431] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.685788 2026] [security2:error] [pid 187269:tid 187467] [client 52.172.226.14:32732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/admin.php"] [unique_id "aryzWtFcyhWr7HDzNGmTswAAAlE"]
[Wed Sep 30 00:59:38.687147 2026] [security2:error] [pid 187269:tid 187473] [client 152.59.165.7:57572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTtAAAAlc"]
[Wed Sep 30 00:59:38.696174 2026] [security2:error] [pid 187269:tid 187473] [client 152.59.165.7:57572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTtAAAAlc"]
[Wed Sep 30 00:59:38.697760 2026] [security2:error] [pid 187269:tid 187438] [client 20.211.90.37:47071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/aaa.php"] [unique_id "aryzWtFcyhWr7HDzNGmTtQAAAjQ"]
[Wed Sep 30 00:59:38.772540 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.772804 2026] [access_compat:error] [pid 187269:tid 187406] [client 216.73.216.46:27104] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.786125 2026] [security2:error] [pid 187269:tid 187430] [client 14.224.196.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "digitise.africa"] [uri "/"] [unique_id "aryzWtFcyhWr7HDzNGmTugAAAiw"]
[Wed Sep 30 00:59:38.795613 2026] [access_compat:error] [pid 187269:tid 187460] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:38.795890 2026] [access_compat:error] [pid 187269:tid 187460] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:38.865613 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.865896 2026] [access_compat:error] [pid 187269:tid 187417] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.883415 2026] [security2:error] [pid 187269:tid 187500] [client 20.194.30.107:30415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/222.php"] [unique_id "aryzWtFcyhWr7HDzNGmTwQAAAnI"]
[Wed Sep 30 00:59:38.930828 2026] [security2:error] [pid 186850:tid 187043] [client 52.231.69.245:34960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/adminfuns.php"] [unique_id "aryzWk5Phls--iYlcKgRNwAAAUk"]
[Wed Sep 30 00:59:38.955406 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:38.955672 2026] [access_compat:error] [pid 187269:tid 187508] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:38.992379 2026] [security2:error] [pid 187269:tid 187487] [client 202.179.95.79:62502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTwwAAAmU"]
[Wed Sep 30 00:59:38.992544 2026] [security2:error] [pid 187269:tid 187487] [client 202.179.95.79:62502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzWtFcyhWr7HDzNGmTwwAAAmU"]
[Wed Sep 30 00:59:39.015122 2026] [security2:error] [pid 187269:tid 187505] [client 104.208.65.139:64219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/nauik.php"] [unique_id "aryzW9FcyhWr7HDzNGmTxQAAAnc"]
[Wed Sep 30 00:59:39.046369 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.046654 2026] [access_compat:error] [pid 187269:tid 187462] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.060613 2026] [security2:error] [pid 187269:tid 187414] [client 20.213.164.196:10786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/gptsh.php"] [unique_id "aryzW9FcyhWr7HDzNGmTxwAAAhw"]
[Wed Sep 30 00:59:39.065423 2026] [security2:error] [pid 187269:tid 187411] [client 43.104.4.198:54841] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "aryzW9FcyhWr7HDzNGmTyAAAAhk"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=phone-accessories%2Cprinters%2Csolid-works-software
[Wed Sep 30 00:59:39.094646 2026] [security2:error] [pid 187269:tid 187415] [client 20.211.90.37:47061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/gecko.php"] [unique_id "aryzW9FcyhWr7HDzNGmTyQAAAh0"]
[Wed Sep 30 00:59:39.137917 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.138191 2026] [access_compat:error] [pid 187269:tid 187456] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.229047 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.229323 2026] [access_compat:error] [pid 187269:tid 187499] [client 216.73.216.46:61914] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.235586 2026] [security2:error] [pid 187269:tid 187518] [client 52.172.226.14:32087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/fling.php"] [unique_id "aryzW9FcyhWr7HDzNGmTzgAAAoQ"]
[Wed Sep 30 00:59:39.239178 2026] [security2:error] [pid 186850:tid 186953] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzW05Phls--iYlcKgROAABhGY"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=0688c7ed301d4bd5a03d06953d71e5ea
[Wed Sep 30 00:59:39.239209 2026] [security2:error] [pid 186850:tid 186953] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzW05Phls--iYlcKgROAABhGY"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=0688c7ed301d4bd5a03d06953d71e5ea
[Wed Sep 30 00:59:39.251842 2026] [security2:error] [pid 186850:tid 187089] [client 52.231.69.245:35559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/av.php"] [unique_id "aryzW05Phls--iYlcKgROQAAAXc"]
[Wed Sep 30 00:59:39.252997 2026] [security2:error] [pid 187269:tid 187482] [client 4.240.25.22:43778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/pJPoKA.php"] [unique_id "aryzW9FcyhWr7HDzNGmTzwAAAmA"]
[Wed Sep 30 00:59:39.292526 2026] [access_compat:error] [pid 187269:tid 187459] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:39.292798 2026] [access_compat:error] [pid 187269:tid 187459] [client 74.7.243.227:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:39.314902 2026] [security2:error] [pid 186850:tid 186998] [client 203.122.45.246:49610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzW05Phls--iYlcKgROgAAARw"]
[Wed Sep 30 00:59:39.315565 2026] [security2:error] [pid 186850:tid 186998] [client 203.122.45.246:49610] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzW05Phls--iYlcKgROgAAARw"]
[Wed Sep 30 00:59:39.371040 2026] [security2:error] [pid 186850:tid 187095] [client 104.208.65.139:17948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wander.php"] [unique_id "aryzW05Phls--iYlcKgRQgAAAX0"]
[Wed Sep 30 00:59:39.419251 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.419652 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.455611 2026] [security2:error] [pid 186850:tid 186989] [client 20.211.90.37:48421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/xiugai.php"] [unique_id "aryzW05Phls--iYlcKgRRgAAARM"]
[Wed Sep 30 00:59:39.463990 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.464269 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.480754 2026] [security2:error] [pid 186850:tid 187103] [client 20.213.164.196:10803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/rithin.php"] [unique_id "aryzW05Phls--iYlcKgRSQAAAYU"]
[Wed Sep 30 00:59:39.492374 2026] [security2:error] [pid 186850:tid 187073] [client 139.159.215.28:61668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-login.php"] [unique_id "aryzW05Phls--iYlcKgRSgAAAWc"], referer: https://yod.ninja/wp-login.php
[Wed Sep 30 00:59:39.526823 2026] [security2:error] [pid 186850:tid 187035] [client 52.231.69.245:34976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/dex.php"] [unique_id "aryzW05Phls--iYlcKgRSwAAAUE"]
[Wed Sep 30 00:59:39.552267 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.552529 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.591474 2026] [security2:error] [pid 186850:tid 187062] [client 20.194.30.107:17496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/cgi-bin/admin.php"] [unique_id "aryzW05Phls--iYlcKgRUAAAAVw"]
[Wed Sep 30 00:59:39.593039 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.593521 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.604816 2026] [security2:error] [pid 186850:tid 187081] [client 20.194.30.107:42544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/key.php"] [unique_id "aryzW05Phls--iYlcKgRUQAAAW8"]
[Wed Sep 30 00:59:39.663668 2026] [core:error] [pid 186850:tid 187090] [client 121.3.237.201:43100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:39.663688 2026] [core:error] [pid 186850:tid 187090] [client 121.3.237.201:43100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:39.682946 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.683223 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.758899 2026] [security2:error] [pid 186850:tid 187016] [client 104.208.65.139:64196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wsd.php"] [unique_id "aryzW05Phls--iYlcKgRWQAAAS4"]
[Wed Sep 30 00:59:39.772980 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.773245 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.788572 2026] [security2:error] [pid 186850:tid 187027] [client 52.172.226.14:32114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryzW05Phls--iYlcKgRXQAAATk"]
[Wed Sep 30 00:59:39.809751 2026] [security2:error] [pid 186850:tid 186983] [client 52.231.69.245:34979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/chosen.php"] [unique_id "aryzW05Phls--iYlcKgRYAAAAQ0"]
[Wed Sep 30 00:59:39.831305 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:39.831560 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:39.847951 2026] [security2:error] [pid 186850:tid 187055] [client 20.211.90.37:47950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/inx.php"] [unique_id "aryzW05Phls--iYlcKgRagAAAVU"]
[Wed Sep 30 00:59:39.867918 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.868338 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:39.956053 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:39.956331 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.003279 2026] [security2:error] [pid 186850:tid 187003] [client 20.213.164.196:60164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/il.php"] [unique_id "aryzXE5Phls--iYlcKgRdwAAASE"]
[Wed Sep 30 00:59:40.016247 2026] [security2:error] [pid 186850:tid 187034] [client 72.255.10.32:52948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgReAAAAUA"]
[Wed Sep 30 00:59:40.016373 2026] [security2:error] [pid 186850:tid 187034] [client 72.255.10.32:52948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgReAAAAUA"]
[Wed Sep 30 00:59:40.047745 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.048048 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.077392 2026] [security2:error] [pid 186850:tid 186987] [client 20.194.30.107:34761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-content/index.php"] [unique_id "aryzXE5Phls--iYlcKgRfQAAARE"]
[Wed Sep 30 00:59:40.094098 2026] [security2:error] [pid 186850:tid 187000] [client 45.138.12.32:19374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yan.qlp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzXE5Phls--iYlcKgRfgAAAR4"]
[Wed Sep 30 00:59:40.118352 2026] [security2:error] [pid 186850:tid 187033] [client 104.208.65.139:17937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/media.php"] [unique_id "aryzXE5Phls--iYlcKgRgAAAAT8"]
[Wed Sep 30 00:59:40.129601 2026] [security2:error] [pid 186850:tid 187056] [client 106.214.2.47:14206] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRfAAAAVY"]
[Wed Sep 30 00:59:40.129768 2026] [security2:error] [pid 186850:tid 187056] [client 106.214.2.47:14206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRfAAAAVY"]
[Wed Sep 30 00:59:40.138351 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.138619 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:2793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.138989 2026] [security2:error] [pid 186850:tid 187083] [client 45.156.62.96:59505] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRewAAAXE"]
[Wed Sep 30 00:59:40.139178 2026] [security2:error] [pid 186850:tid 187083] [client 45.156.62.96:59505] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRewAAAXE"]
[Wed Sep 30 00:59:40.144531 2026] [security2:error] [pid 186850:tid 187072] [client 43.227.131.37:13601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRggAAAWY"]
[Wed Sep 30 00:59:40.144647 2026] [security2:error] [pid 186850:tid 187072] [client 43.227.131.37:13601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRggAAAWY"]
[Wed Sep 30 00:59:40.161694 2026] [security2:error] [pid 186850:tid 187028] [client 52.231.69.245:34986] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/1.php"] [unique_id "aryzXE5Phls--iYlcKgRgwAAATo"]
[Wed Sep 30 00:59:40.161804 2026] [security2:error] [pid 186850:tid 187028] [client 52.231.69.245:34986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/1.php"] [unique_id "aryzXE5Phls--iYlcKgRgwAAATo"]
[Wed Sep 30 00:59:40.163739 2026] [security2:error] [pid 186850:tid 187078] [client 45.138.12.43:43256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rvz.vpu.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzXE5Phls--iYlcKgRhAAAAWw"]
[Wed Sep 30 00:59:40.230184 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.230444 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:40122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.233613 2026] [access_compat:error] [pid 186850:tid 187059] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:40.233884 2026] [access_compat:error] [pid 186850:tid 187059] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:40.264563 2026] [security2:error] [pid 186850:tid 187045] [client 52.172.226.14:32722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/adminfuns.php"] [unique_id "aryzXE5Phls--iYlcKgRhwAAAUs"]
[Wed Sep 30 00:59:40.321438 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.321698 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.370659 2026] [security2:error] [pid 186850:tid 187070] [client 20.211.90.37:47960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/11.php"] [unique_id "aryzXE5Phls--iYlcKgRjgAAAWQ"]
[Wed Sep 30 00:59:40.412091 2026] [security2:error] [pid 186850:tid 187035] [client 45.138.12.32:32946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xyd.fbj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzXE5Phls--iYlcKgRkwAAAUE"]
[Wed Sep 30 00:59:40.441542 2026] [security2:error] [pid 186850:tid 187091] [client 52.231.69.245:35533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/radio.php"] [unique_id "aryzXE5Phls--iYlcKgRlgAAAXk"]
[Wed Sep 30 00:59:40.461546 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.461804 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.502527 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.502806 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.535899 2026] [security2:error] [pid 186850:tid 187105] [client 216.73.216.46:2793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzXE5Phls--iYlcKgRngAAAYc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTU%3D
[Wed Sep 30 00:59:40.589662 2026] [security2:error] [pid 186850:tid 187027] [client 4.240.25.22:11583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/admin.php"] [unique_id "aryzXE5Phls--iYlcKgRogAAATk"]
[Wed Sep 30 00:59:40.595609 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.595933 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.612982 2026] [security2:error] [pid 186850:tid 187075] [client 216.73.216.46:40122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzXE5Phls--iYlcKgRpgAAAWk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDUvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY4
[Wed Sep 30 00:59:40.685611 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.685886 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:22684] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.721581 2026] [security2:error] [pid 186850:tid 187087] [client 104.208.65.139:17898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/images.php"] [unique_id "aryzXE5Phls--iYlcKgRqgAAAXU"]
[Wed Sep 30 00:59:40.728006 2026] [security2:error] [pid 186850:tid 187020] [client 52.231.69.245:34990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/blacks.php"] [unique_id "aryzXE5Phls--iYlcKgRrAAAATI"]
[Wed Sep 30 00:59:40.762482 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:40.762854 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:40.777388 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.777865 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.778210 2026] [security2:error] [pid 186850:tid 186872] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayutd.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzXE5Phls--iYlcKgRtgABYxU"]
[Wed Sep 30 00:59:40.779118 2026] [security2:error] [pid 186850:tid 187089] [client 49.205.105.16:13455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRtwAAAXc"]
[Wed Sep 30 00:59:40.779273 2026] [security2:error] [pid 186850:tid 187089] [client 49.205.105.16:13455] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzXE5Phls--iYlcKgRtwAAAXc"]
[Wed Sep 30 00:59:40.793242 2026] [security2:error] [pid 186850:tid 187058] [client 43.104.4.208:63527] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryzXE5Phls--iYlcKgRugAAAVg"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 00:59:40.866391 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:40.866654 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:40.895113 2026] [security2:error] [pid 186850:tid 187034] [client 127.0.0.1:12416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzXE5Phls--iYlcKgRvgAAAUA"]
[Wed Sep 30 00:59:40.895302 2026] [security2:error] [pid 186850:tid 187084] [client 74.7.241.159:56798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.eex.nbb.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzXE5Phls--iYlcKgRvQABcm0"]
[Wed Sep 30 00:59:40.928197 2026] [security2:error] [pid 186850:tid 187040] [client 52.172.226.14:32123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/alfa.php"] [unique_id "aryzXE5Phls--iYlcKgRzAAAAUY"]
[Wed Sep 30 00:59:40.986979 2026] [security2:error] [pid 186850:tid 187092] [client 20.213.164.196:10500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/1klopedf.php"] [unique_id "aryzXE5Phls--iYlcKgR0AAAAXo"]
[Wed Sep 30 00:59:41.012991 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.013451 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.043290 2026] [security2:error] [pid 186850:tid 187076] [client 52.231.69.245:35537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/alfa.php"] [unique_id "aryzXU5Phls--iYlcKgR1wAAAWo"]
[Wed Sep 30 00:59:41.050066 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.050340 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.100987 2026] [security2:error] [pid 186850:tid 187106] [client 216.73.216.46:22684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzXU5Phls--iYlcKgR3QAAAYg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1NC9kcml2ZXI%3D
[Wed Sep 30 00:59:41.122834 2026] [security2:error] [pid 186850:tid 186981] [client 20.211.90.37:47097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/File.php"] [unique_id "aryzXU5Phls--iYlcKgR3wAAAQs"]
[Wed Sep 30 00:59:41.140201 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.140484 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.232135 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.232410 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.256919 2026] [security2:error] [pid 186850:tid 187035] [client 43.104.4.223:44403] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "aryzXU5Phls--iYlcKgR5QAAAUE"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 00:59:41.258262 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:41.258525 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:41.321598 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.321857 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.368582 2026] [security2:error] [pid 186850:tid 187049] [client 52.231.69.245:35538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzXU5Phls--iYlcKgR6gAAAU8"]
[Wed Sep 30 00:59:41.379666 2026] [security2:error] [pid 186850:tid 187018] [client 116.72.182.19:53155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzXU5Phls--iYlcKgR6wAAATA"]
[Wed Sep 30 00:59:41.379741 2026] [security2:error] [pid 186850:tid 187018] [client 116.72.182.19:53155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzXU5Phls--iYlcKgR6wAAATA"]
[Wed Sep 30 00:59:41.398207 2026] [security2:error] [pid 186850:tid 187071] [client 104.208.65.139:17865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/ops.php"] [unique_id "aryzXU5Phls--iYlcKgR7gAAAWU"]
[Wed Sep 30 00:59:41.413164 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.413412 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.427181 2026] [security2:error] [pid 186850:tid 187007] [client 4.240.25.22:21907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryzXU5Phls--iYlcKgR8AAAASU"]
[Wed Sep 30 00:59:41.467784 2026] [security2:error] [pid 186850:tid 187074] [client 52.172.226.14:32072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/222.php"] [unique_id "aryzXU5Phls--iYlcKgR8gAAAWg"]
[Wed Sep 30 00:59:41.503407 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.503661 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.566605 2026] [security2:error] [pid 186850:tid 186991] [client 213.136.69.135:62948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-navigation-fallback.php"] [unique_id "aryzXU5Phls--iYlcKgR9QAAARU"], referer: binance.com
[Wed Sep 30 00:59:41.592902 2026] [security2:error] [pid 186850:tid 187005] [client 45.138.12.32:32972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xoa.xcc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzXU5Phls--iYlcKgR-gAAASM"]
[Wed Sep 30 00:59:41.595216 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.595479 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.637095 2026] [security2:error] [pid 186850:tid 186987] [client 52.231.69.245:34969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/b8.php"] [unique_id "aryzXU5Phls--iYlcKgR_AAAARE"]
[Wed Sep 30 00:59:41.687193 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.687470 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.699622 2026] [security2:error] [pid 186850:tid 187017] [client 20.213.164.196:10745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/zv.php"] [unique_id "aryzXU5Phls--iYlcKgSAQAAAS8"]
[Wed Sep 30 00:59:41.768433 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:41.768902 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:41.776868 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.777124 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.865926 2026] [security2:error] [pid 186850:tid 187010] [client 66.249.74.14:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "aryzXU5Phls--iYlcKgSEQAAASg"]
[Wed Sep 30 00:59:41.867965 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.868240 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:41.893507 2026] [security2:error] [pid 186850:tid 187103] [client 104.208.65.139:30503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/BDKR28WP.php"] [unique_id "aryzXU5Phls--iYlcKgSEgAAAYU"]
[Wed Sep 30 00:59:41.923620 2026] [security2:error] [pid 186850:tid 186988] [client 52.231.69.245:35523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xex.php"] [unique_id "aryzXU5Phls--iYlcKgSEwAAARI"]
[Wed Sep 30 00:59:41.929104 2026] [security2:error] [pid 186850:tid 187041] [client 20.211.90.37:47088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzXU5Phls--iYlcKgSFAAAAUc"]
[Wed Sep 30 00:59:41.947226 2026] [security2:error] [pid 186850:tid 187073] [client 52.172.226.14:32727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzXU5Phls--iYlcKgSFQAAAWc"]
[Wed Sep 30 00:59:41.964821 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:41.965233 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:10501] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.052321 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.052581 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.077691 2026] [security2:error] [pid 186850:tid 187029] [client 20.213.164.196:10722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/zv.update.php"] [unique_id "aryzXk5Phls--iYlcKgSHgAAATs"]
[Wed Sep 30 00:59:42.105601 2026] [security2:error] [pid 186850:tid 186994] [client 4.196.65.241:27307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/aboutt.php"] [unique_id "aryzXk5Phls--iYlcKgSIwAAARg"]
[Wed Sep 30 00:59:42.107964 2026] [security2:error] [pid 186850:tid 187105] [client 185.223.43.254:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/backup-ups/"] [unique_id "aryzXk5Phls--iYlcKgSIgAAAYc"]
[Wed Sep 30 00:59:42.143961 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.144256 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.213427 2026] [security2:error] [pid 186850:tid 187000] [client 52.231.69.245:34988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ass.php"] [unique_id "aryzXk5Phls--iYlcKgSJgAAAR4"]
[Wed Sep 30 00:59:42.233866 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.234122 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.242484 2026] [access_compat:error] [pid 186850:tid 187099] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:42.242751 2026] [access_compat:error] [pid 186850:tid 187099] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:42.322705 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.322981 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.347836 2026] [security2:error] [pid 186850:tid 186992] [client 104.208.65.139:29405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/mac.php"] [unique_id "aryzXk5Phls--iYlcKgSMwAAARY"]
[Wed Sep 30 00:59:42.383857 2026] [security2:error] [pid 186850:tid 187007] [client 216.73.216.46:10501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzXk5Phls--iYlcKgSNAAAASU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTExL25vZGUwL21lbW9yeTM4
[Wed Sep 30 00:59:42.415645 2026] [security2:error] [pid 186850:tid 187074] [client 20.211.90.37:48423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryzXk5Phls--iYlcKgSOQAAAWg"]
[Wed Sep 30 00:59:42.416366 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.416665 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.478463 2026] [security2:error] [pid 186850:tid 186991] [client 52.231.69.245:35329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wsd.php"] [unique_id "aryzXk5Phls--iYlcKgSOwAAARU"]
[Wed Sep 30 00:59:42.507764 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.508066 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.520552 2026] [security2:error] [pid 186850:tid 187093] [client 20.213.164.196:10539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/wquosqsi.php"] [unique_id "aryzXk5Phls--iYlcKgSPQAAAXs"]
[Wed Sep 30 00:59:42.557586 2026] [security2:error] [pid 186850:tid 187044] [client 52.172.226.14:32082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/images.php"] [unique_id "aryzXk5Phls--iYlcKgSPwAAAUo"]
[Wed Sep 30 00:59:42.564137 2026] [security2:error] [pid 186850:tid 187050] [client 116.197.133.25:50230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzXk5Phls--iYlcKgSQQAAAVA"]
[Wed Sep 30 00:59:42.564222 2026] [security2:error] [pid 186850:tid 187050] [client 116.197.133.25:50230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzXk5Phls--iYlcKgSQQAAAVA"]
[Wed Sep 30 00:59:42.596422 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.596685 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.659269 2026] [core:error] [pid 186850:tid 187058] [client 58.10.245.74:8029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:42.659288 2026] [core:error] [pid 186850:tid 187058] [client 58.10.245.74:8029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:42.690736 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.691052 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.722818 2026] [security2:error] [pid 186850:tid 187009] [client 104.208.65.139:30489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wmore1.php"] [unique_id "aryzXk5Phls--iYlcKgSTgAAASc"]
[Wed Sep 30 00:59:42.750130 2026] [security2:error] [pid 186850:tid 187045] [client 52.231.69.245:35548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/BDKR28WP.php"] [unique_id "aryzXk5Phls--iYlcKgSTwAAAUs"]
[Wed Sep 30 00:59:42.763491 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:42.763758 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:42.780260 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.780518 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.826925 2026] [security2:error] [pid 186850:tid 187057] [client 4.196.65.241:64171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wyzer3.php"] [unique_id "aryzXk5Phls--iYlcKgSWAAAAVc"]
[Wed Sep 30 00:59:42.871226 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.871493 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:42.882744 2026] [security2:error] [pid 186850:tid 187041] [client 20.211.90.37:48389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzXk5Phls--iYlcKgSWwAAAUc"]
[Wed Sep 30 00:59:42.896568 2026] [security2:error] [pid 186850:tid 187062] [client 45.138.12.32:19416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xwf.hia.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzXk5Phls--iYlcKgSXAAAAVw"]
[Wed Sep 30 00:59:42.960537 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:42.960980 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.019055 2026] [security2:error] [pid 186850:tid 187101] [client 52.231.69.245:34966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wmore1.php"] [unique_id "aryzX05Phls--iYlcKgSZAAAAYM"]
[Wed Sep 30 00:59:43.052369 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.052631 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.087616 2026] [security2:error] [pid 186850:tid 187090] [client 104.208.65.139:25613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryzX05Phls--iYlcKgSbQAAAXg"]
[Wed Sep 30 00:59:43.092882 2026] [security2:error] [pid 186850:tid 187075] [client 189.217.222.29:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/backup-ups/"] [unique_id "aryzX05Phls--iYlcKgSbgAAAWk"]
[Wed Sep 30 00:59:43.105258 2026] [security2:error] [pid 186850:tid 187030] [client 52.172.226.14:32708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/media.php"] [unique_id "aryzX05Phls--iYlcKgSbwAAATw"]
[Wed Sep 30 00:59:43.143818 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.144142 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.145389 2026] [security2:error] [pid 186850:tid 187061] [client 20.213.164.196:10758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/asset.php"] [unique_id "aryzX05Phls--iYlcKgScgAAAVs"]
[Wed Sep 30 00:59:43.232752 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:43.233023 2026] [access_compat:error] [pid 186850:tid 187002] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:43.235920 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.236193 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.296960 2026] [security2:error] [pid 186850:tid 187054] [client 52.231.69.245:35007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/z60.php"] [unique_id "aryzX05Phls--iYlcKgSeQAAAVQ"]
[Wed Sep 30 00:59:43.303410 2026] [security2:error] [pid 186850:tid 186996] [client 49.43.163.212:49335] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzX05Phls--iYlcKgSegAAARo"]
[Wed Sep 30 00:59:43.303546 2026] [security2:error] [pid 186850:tid 186996] [client 49.43.163.212:49335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzX05Phls--iYlcKgSegAAARo"]
[Wed Sep 30 00:59:43.327679 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.327957 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.348334 2026] [security2:error] [pid 186850:tid 187020] [client 45.138.12.47:36068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "derektaylorbrokerage.com"] [uri "/cgi-sys/suspendedpage.cgi/wp-links-opml.php"] [unique_id "aryzX05Phls--iYlcKgSfwAAATI"]
[Wed Sep 30 00:59:43.375424 2026] [security2:error] [pid 186850:tid 187035] [client 20.211.90.37:47087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "aryzX05Phls--iYlcKgSgQAAAUE"]
[Wed Sep 30 00:59:43.417931 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.418199 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.486608 2026] [security2:error] [pid 186850:tid 187050] [client 104.208.65.139:17921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/ab.php"] [unique_id "aryzX05Phls--iYlcKgShwAAAVA"]
[Wed Sep 30 00:59:43.510706 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.510992 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.597412 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.597682 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.615824 2026] [security2:error] [pid 186850:tid 187034] [client 52.231.69.245:34973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/pJPoKA.php"] [unique_id "aryzX05Phls--iYlcKgSjgAAAUA"]
[Wed Sep 30 00:59:43.647126 2026] [security2:error] [pid 186850:tid 187092] [client 52.172.226.14:32085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/mac.php"] [unique_id "aryzX05Phls--iYlcKgSjwAAAXo"]
[Wed Sep 30 00:59:43.653067 2026] [security2:error] [pid 186850:tid 187083] [client 20.213.164.196:10741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/cued.php"] [unique_id "aryzX05Phls--iYlcKgSkAAAAXE"]
[Wed Sep 30 00:59:43.690455 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.690727 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.709631 2026] [security2:error] [pid 186850:tid 186990] [client 20.194.30.107:42532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/BDKR28WP.php"] [unique_id "aryzX05Phls--iYlcKgSlAAAARQ"]
[Wed Sep 30 00:59:43.726413 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:43.726693 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:43.727835 2026] [security2:error] [pid 186850:tid 187057] [client 103.245.42.243:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/transformer-book/"] [unique_id "aryzX05Phls--iYlcKgSmQAAAVc"]
[Wed Sep 30 00:59:43.735208 2026] [security2:error] [pid 186850:tid 186986] [client 216.157.41.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "rhodaalbert.com"] [uri "/robots.txt"] [unique_id "aryzX05Phls--iYlcKgSmwAAARA"]
[Wed Sep 30 00:59:43.779652 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.779938 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.855334 2026] [security2:error] [pid 186850:tid 186993] [client 20.211.90.37:8337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "aryzX05Phls--iYlcKgSpAAAARc"]
[Wed Sep 30 00:59:43.872235 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.872515 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:43.880509 2026] [security2:error] [pid 186850:tid 187013] [client 52.231.69.245:35527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/24.php"] [unique_id "aryzX05Phls--iYlcKgSpwAAASs"]
[Wed Sep 30 00:59:43.901027 2026] [security2:error] [pid 186850:tid 187098] [client 104.208.65.139:17958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/dairg.php"] [unique_id "aryzX05Phls--iYlcKgSqQAAAYA"]
[Wed Sep 30 00:59:43.963417 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:43.963681 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.019777 2026] [security2:error] [pid 186850:tid 187094] [client 20.213.164.196:10794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/sd.php"] [unique_id "aryzYE5Phls--iYlcKgSrwAAAXw"]
[Wed Sep 30 00:59:44.034477 2026] [security2:error] [pid 186850:tid 186999] [client 4.240.25.22:18793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ms-edit.php"] [unique_id "aryzYE5Phls--iYlcKgSsAAAAR0"]
[Wed Sep 30 00:59:44.052266 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.052529 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.125301 2026] [security2:error] [pid 186850:tid 187080] [client 52.172.226.14:32712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ops.php"] [unique_id "aryzYE5Phls--iYlcKgSuAAAAW4"]
[Wed Sep 30 00:59:44.140584 2026] [security2:error] [pid 186850:tid 187015] [client 216.157.41.79:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.rhodaalbert.com"] [uri "/robots.txt"] [unique_id "aryzYE5Phls--iYlcKgSuwAAAS0"]
[Wed Sep 30 00:59:44.145825 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.146106 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.170289 2026] [security2:error] [pid 186850:tid 187007] [client 52.231.69.245:35531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xxw.php"] [unique_id "aryzYE5Phls--iYlcKgSvAAAASU"]
[Wed Sep 30 00:59:44.198428 2026] [security2:error] [pid 186850:tid 187054] [client 43.104.4.223:44403] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "aryzYE5Phls--iYlcKgSvwAAAVQ"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 00:59:44.225061 2026] [security2:error] [pid 186850:tid 187020] [client 104.208.65.139:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/z60.php"] [unique_id "aryzYE5Phls--iYlcKgSwgAAATI"]
[Wed Sep 30 00:59:44.225757 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:44.226031 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:44.235067 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.235333 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.274704 2026] [security2:error] [pid 186850:tid 187068] [client 223.235.102.107:1242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgSxAAAAWI"]
[Wed Sep 30 00:59:44.274994 2026] [security2:error] [pid 186850:tid 187068] [client 223.235.102.107:1242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgSxAAAAWI"]
[Wed Sep 30 00:59:44.327338 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.327597 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.362711 2026] [security2:error] [pid 186850:tid 187005] [client 20.194.30.107:17423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/mac.php"] [unique_id "aryzYE5Phls--iYlcKgSzgAAASM"]
[Wed Sep 30 00:59:44.380473 2026] [security2:error] [pid 186850:tid 187017] [client 20.211.90.37:47968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "aryzYE5Phls--iYlcKgS0AAAAS8"]
[Wed Sep 30 00:59:44.391858 2026] [security2:error] [pid 186850:tid 187036] [client 216.157.41.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "rhodaalbert.com"] [uri "/robots.txt"] [unique_id "aryzYE5Phls--iYlcKgS0gAAAUI"]
[Wed Sep 30 00:59:44.419172 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.419439 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.439569 2026] [security2:error] [pid 186850:tid 187008] [client 52.231.69.245:35524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/bnmtp.php"] [unique_id "aryzYE5Phls--iYlcKgS1gAAASY"]
[Wed Sep 30 00:59:44.509208 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.509473 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:26395] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.522921 2026] [security2:error] [pid 186850:tid 187075] [client 223.181.60.167:30537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgS2wAAAWk"]
[Wed Sep 30 00:59:44.523008 2026] [security2:error] [pid 186850:tid 187075] [client 223.181.60.167:30537] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgS2wAAAWk"]
[Wed Sep 30 00:59:44.550075 2026] [security2:error] [pid 186850:tid 187016] [client 103.159.192.142:52119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgS3QAAAS4"]
[Wed Sep 30 00:59:44.550179 2026] [security2:error] [pid 186850:tid 187016] [client 103.159.192.142:52119] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgS3QAAAS4"]
[Wed Sep 30 00:59:44.567326 2026] [security2:error] [pid 186850:tid 187032] [client 216.157.41.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.rhodaalbert.com"] [uri "/robots.txt"] [unique_id "aryzYE5Phls--iYlcKgS4QAAAT4"]
[Wed Sep 30 00:59:44.567555 2026] [security2:error] [pid 186850:tid 187045] [client 104.208.65.139:29378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/imageskir.php"] [unique_id "aryzYE5Phls--iYlcKgS4gAAAUs"]
[Wed Sep 30 00:59:44.575744 2026] [security2:error] [pid 186850:tid 187012] [client 20.213.164.196:10744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/ans.php"] [unique_id "aryzYE5Phls--iYlcKgS5AAAASo"]
[Wed Sep 30 00:59:44.656082 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.656362 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.718681 2026] [security2:error] [pid 186850:tid 186997] [client 52.231.69.245:34950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ebkid.php"] [unique_id "aryzYE5Phls--iYlcKgS9AAAARs"]
[Wed Sep 30 00:59:44.755334 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:1060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.755768 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:1060] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.762691 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:44.762993 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:44.779470 2026] [security2:error] [pid 186850:tid 187051] [client 52.172.226.14:32066] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.dkl-hardware.com"] [uri "/1.php"] [unique_id "aryzYE5Phls--iYlcKgS-wAAAVE"]
[Wed Sep 30 00:59:44.779565 2026] [security2:error] [pid 186850:tid 187051] [client 52.172.226.14:32066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/1.php"] [unique_id "aryzYE5Phls--iYlcKgS-wAAAVE"]
[Wed Sep 30 00:59:44.786836 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.787079 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.801099 2026] [security2:error] [pid 186850:tid 187023] [client 216.157.41.88:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzYE5Phls--iYlcKgTAAAAATU"]
[Wed Sep 30 00:59:44.914292 2026] [security2:error] [pid 186850:tid 187001] [client 104.208.65.139:17975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/backup-helper.php"] [unique_id "aryzYE5Phls--iYlcKgTBwAAAR8"]
[Wed Sep 30 00:59:44.931030 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.931439 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:44.935093 2026] [security2:error] [pid 186850:tid 187018] [client 216.73.216.46:26395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzYE5Phls--iYlcKgTCgAAATA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDM3
[Wed Sep 30 00:59:44.939963 2026] [security2:error] [pid 186850:tid 187046] [client 20.211.90.37:48417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/media.php"] [unique_id "aryzYE5Phls--iYlcKgTCwAAAUw"]
[Wed Sep 30 00:59:44.970392 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:44.970669 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:61754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.004042 2026] [security2:error] [pid 186850:tid 186910] [remote 57.141.14.92:52276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "aryzYE5Phls--iYlcKgTDAABUDs"]
[Wed Sep 30 00:59:45.012824 2026] [core:error] [pid 186850:tid 187031] [client 187.189.123.95:25058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:45.012837 2026] [core:error] [pid 186850:tid 187031] [client 187.189.123.95:25058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:45.045955 2026] [security2:error] [pid 186850:tid 187059] [client 57.141.12.7:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "aryzYU5Phls--iYlcKgTEQAAAVk"]
[Wed Sep 30 00:59:45.050971 2026] [security2:error] [pid 186850:tid 186985] [client 52.231.69.245:35352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/133.php"] [unique_id "aryzYU5Phls--iYlcKgTEgAAAQ8"]
[Wed Sep 30 00:59:45.066903 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.067157 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.069601 2026] [security2:error] [pid 186850:tid 187004] [client 20.213.164.196:60185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/cns.php"] [unique_id "aryzYU5Phls--iYlcKgTFAAAASI"]
[Wed Sep 30 00:59:45.105653 2026] [security2:error] [pid 186850:tid 187088] [client 4.240.25.22:22200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/222.php"] [unique_id "aryzYU5Phls--iYlcKgTGgAAAXY"]
[Wed Sep 30 00:59:45.109870 2026] [security2:error] [pid 186850:tid 187104] [client 216.157.41.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.rhodaalbert.com"] [uri "/"] [unique_id "aryzYU5Phls--iYlcKgTGwAAAYY"]
[Wed Sep 30 00:59:45.178561 2026] [security2:error] [pid 186850:tid 187033] [client 216.73.216.46:1060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzYU5Phls--iYlcKgTIgAAAT8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1NS9ub2RlMA%3D%3D
[Wed Sep 30 00:59:45.210139 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.210444 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.227716 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:45.228009 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:45.250285 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.250556 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.253090 2026] [security2:error] [pid 186850:tid 187048] [client 37.41.16.35:54628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTJwAAAU4"]
[Wed Sep 30 00:59:45.253211 2026] [security2:error] [pid 186850:tid 187048] [client 37.41.16.35:54628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTJwAAAU4"]
[Wed Sep 30 00:59:45.264123 2026] [security2:error] [pid 186850:tid 187058] [client 52.172.226.14:32069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/aaa.php"] [unique_id "aryzYU5Phls--iYlcKgTKAAAAVg"]
[Wed Sep 30 00:59:45.264277 2026] [security2:error] [pid 186850:tid 186999] [client 20.211.90.37:48445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/inso.php"] [unique_id "aryzYU5Phls--iYlcKgTKQAAAR0"]
[Wed Sep 30 00:59:45.307556 2026] [security2:error] [pid 186850:tid 187070] [client 104.208.65.139:30492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/1xmomo.php"] [unique_id "aryzYU5Phls--iYlcKgTKwAAAWQ"]
[Wed Sep 30 00:59:45.326738 2026] [security2:error] [pid 186850:tid 187002] [client 52.231.69.245:34995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/x33.php"] [unique_id "aryzYU5Phls--iYlcKgTMAAAASA"]
[Wed Sep 30 00:59:45.329772 2026] [security2:error] [pid 186850:tid 187074] [client 216.157.41.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzYU5Phls--iYlcKgTMQAAAWg"]
[Wed Sep 30 00:59:45.340874 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.341137 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.394438 2026] [security2:error] [pid 186850:tid 187029] [client 216.73.216.46:61754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzYU5Phls--iYlcKgTNwAAATs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1Mi9kcml2ZXIvY3B1MTA%3D
[Wed Sep 30 00:59:45.431454 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.431723 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:10022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.461995 2026] [security2:error] [pid 186850:tid 187001] [client 104.208.65.139:18649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzYU5Phls--iYlcKgTPgAAAR8"]
[Wed Sep 30 00:59:45.502179 2026] [security2:error] [pid 186850:tid 186986] [client 182.69.182.151:4999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTRgAAARA"]
[Wed Sep 30 00:59:45.503046 2026] [security2:error] [pid 186850:tid 186986] [client 182.69.182.151:4999] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTRgAAARA"]
[Wed Sep 30 00:59:45.509352 2026] [security2:error] [pid 186850:tid 187055] [client 216.157.41.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.rhodaalbert.com"] [uri "/"] [unique_id "aryzYU5Phls--iYlcKgTRwAAAVU"]
[Wed Sep 30 00:59:45.523101 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.523373 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.545306 2026] [security2:error] [pid 186850:tid 187036] [client 186.207.159.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/transformer-book/"] [unique_id "aryzYU5Phls--iYlcKgTSwAAAUI"]
[Wed Sep 30 00:59:45.584596 2026] [security2:error] [pid 186850:tid 186985] [client 20.211.90.37:47095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/shiny.php"] [unique_id "aryzYU5Phls--iYlcKgTTgAAAQ8"]
[Wed Sep 30 00:59:45.629668 2026] [security2:error] [pid 186850:tid 187011] [client 52.231.69.245:35002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/cae.php"] [unique_id "aryzYU5Phls--iYlcKgTUwAAASk"]
[Wed Sep 30 00:59:45.672983 2026] [security2:error] [pid 186850:tid 187102] [client 20.213.164.196:10804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/faiy.php"] [unique_id "aryzYU5Phls--iYlcKgTVAAAAYQ"]
[Wed Sep 30 00:59:45.729919 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.730357 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.733605 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:45.734402 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:45.743490 2026] [security2:error] [pid 186850:tid 187076] [client 52.172.226.14:32721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/chosen.php"] [unique_id "aryzYU5Phls--iYlcKgTWAAAAWo"]
[Wed Sep 30 00:59:45.745032 2026] [security2:error] [pid 186850:tid 187062] [client 49.36.41.37:56755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTWQAAAVw"]
[Wed Sep 30 00:59:45.745155 2026] [security2:error] [pid 186850:tid 187062] [client 49.36.41.37:56755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTWQAAAVw"]
[Wed Sep 30 00:59:45.772201 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.772461 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.798565 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.798935 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.850060 2026] [security2:error] [pid 186850:tid 187098] [client 216.73.216.46:10022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzYU5Phls--iYlcKgTYAAAAYA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUzL2RyaXZlcg%3D%3D
[Wed Sep 30 00:59:45.888304 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.888585 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:45.919708 2026] [security2:error] [pid 186850:tid 186999] [client 52.231.69.245:34996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/txets.php"] [unique_id "aryzYU5Phls--iYlcKgTZQAAAR0"]
[Wed Sep 30 00:59:45.921043 2026] [security2:error] [pid 186850:tid 187000] [client 20.211.90.37:48438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/403dd.php"] [unique_id "aryzYU5Phls--iYlcKgTZgAAAR4"]
[Wed Sep 30 00:59:45.950636 2026] [security2:error] [pid 186850:tid 187080] [client 155.190.6.18:41462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTaQAAAW4"]
[Wed Sep 30 00:59:45.979430 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:45.979792 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.071082 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.071355 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.159777 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.160237 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.212906 2026] [security2:error] [pid 186850:tid 187018] [client 52.231.69.245:34945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-update.php"] [unique_id "aryzYk5Phls--iYlcKgTfQAAATA"]
[Wed Sep 30 00:59:46.215918 2026] [security2:error] [pid 186850:tid 187073] [client 150.107.232.159:36322] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTfgAAAWc"]
[Wed Sep 30 00:59:46.216135 2026] [security2:error] [pid 186850:tid 187073] [client 150.107.232.159:36322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTfgAAAWc"]
[Wed Sep 30 00:59:46.238350 2026] [security2:error] [pid 186850:tid 187080] [client 155.190.6.18:41462] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzYU5Phls--iYlcKgTaQAAAW4"]
[Wed Sep 30 00:59:46.249475 2026] [security2:error] [pid 186850:tid 187106] [client 20.213.164.196:60171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/gecho.php"] [unique_id "aryzYk5Phls--iYlcKgTgQAAAYg"]
[Wed Sep 30 00:59:46.252070 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.252335 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.270564 2026] [security2:error] [pid 186850:tid 187052] [client 52.172.226.14:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/2P.php"] [unique_id "aryzYk5Phls--iYlcKgTgwAAAVI"]
[Wed Sep 30 00:59:46.272516 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:46.272820 2026] [access_compat:error] [pid 186850:tid 187085] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:46.282544 2026] [security2:error] [pid 186850:tid 187020] [client 104.208.65.139:18644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzYk5Phls--iYlcKgThAAAATI"]
[Wed Sep 30 00:59:46.343565 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.343839 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.435799 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.436121 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.438653 2026] [security2:error] [pid 186850:tid 187054] [client 103.241.204.139:58096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTjgAAAVQ"]
[Wed Sep 30 00:59:46.438746 2026] [security2:error] [pid 186850:tid 187054] [client 103.241.204.139:58096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTjgAAAVQ"]
[Wed Sep 30 00:59:46.502379 2026] [security2:error] [pid 186850:tid 187034] [client 52.231.69.245:34994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/177.php"] [unique_id "aryzYk5Phls--iYlcKgTkAAAAUA"]
[Wed Sep 30 00:59:46.506359 2026] [security2:error] [pid 186850:tid 186992] [client 223.181.30.165:9225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTkQAAARY"]
[Wed Sep 30 00:59:46.506568 2026] [security2:error] [pid 186850:tid 186992] [client 223.181.30.165:9225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgTkQAAARY"]
[Wed Sep 30 00:59:46.524568 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.524827 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.552578 2026] [security2:error] [pid 186850:tid 187076] [client 4.240.25.22:21935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/samll.php"] [unique_id "aryzYk5Phls--iYlcKgTlAAAAWo"]
[Wed Sep 30 00:59:46.589597 2026] [security2:error] [pid 186850:tid 187104] [client 43.104.4.222:27832] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "aryzYk5Phls--iYlcKgTmQAAAYY"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=phone-accessories%2Cprinters%2Csolid-works-software
[Wed Sep 30 00:59:46.591018 2026] [security2:error] [pid 186850:tid 187009] [client 104.208.65.139:17920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/almafkew.php"] [unique_id "aryzYk5Phls--iYlcKgTmgAAASc"]
[Wed Sep 30 00:59:46.615609 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.615907 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.624872 2026] [core:error] [pid 186850:tid 187098] [client 5.31.199.212:59306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:46.624898 2026] [core:error] [pid 186850:tid 187098] [client 5.31.199.212:59306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:46.658601 2026] [security2:error] [pid 186850:tid 187051] [client 105.112.178.79:38327] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tke.sxn.mybluehost.me"] [uri "/__ss_probe_988830a73c1e2529e5757a3ae8fe2691__"] [unique_id "aryzYk5Phls--iYlcKgTnwAAAVE"]
[Wed Sep 30 00:59:46.659088 2026] [security2:error] [pid 186850:tid 187093] [client 122.173.27.10:7966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgToAAAAXs"]
[Wed Sep 30 00:59:46.659769 2026] [security2:error] [pid 186850:tid 187093] [client 122.173.27.10:7966] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzYk5Phls--iYlcKgToAAAAXs"]
[Wed Sep 30 00:59:46.673334 2026] [security2:error] [pid 186850:tid 187087] [client 4.196.65.241:19495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ssdg.php"] [unique_id "aryzYk5Phls--iYlcKgToQAAAXU"]
[Wed Sep 30 00:59:46.705854 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.706115 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.724361 2026] [security2:error] [pid 186850:tid 187061] [client 20.213.164.196:10703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/gu.php"] [unique_id "aryzYk5Phls--iYlcKgTqQAAAVs"]
[Wed Sep 30 00:59:46.755728 2026] [security2:error] [pid 186850:tid 187049] [client 20.211.90.37:47955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/baba.php"] [unique_id "aryzYk5Phls--iYlcKgTrAAAAU8"]
[Wed Sep 30 00:59:46.761414 2026] [security2:error] [pid 186850:tid 187005] [client 52.172.226.14:32558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/min.php"] [unique_id "aryzYk5Phls--iYlcKgTrQAAASM"]
[Wed Sep 30 00:59:46.784878 2026] [security2:error] [pid 186850:tid 186990] [client 52.231.69.245:34959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ccc.php"] [unique_id "aryzYk5Phls--iYlcKgTrwAAARQ"]
[Wed Sep 30 00:59:46.797577 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.797829 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.826092 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:46.826344 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:46.888986 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.889270 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:46.980251 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:46.980522 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.069659 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.070189 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.071297 2026] [security2:error] [pid 186850:tid 187060] [client 52.231.69.245:35570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/0xD.php"] [unique_id "aryzY05Phls--iYlcKgTxQAAAVo"]
[Wed Sep 30 00:59:47.162664 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.162954 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.197215 2026] [security2:error] [pid 186850:tid 186994] [client 104.208.65.139:59188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/database2.php"] [unique_id "aryzY05Phls--iYlcKgTywAAARg"]
[Wed Sep 30 00:59:47.229598 2026] [security2:error] [pid 186850:tid 187010] [client 20.211.90.37:48429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/site.php"] [unique_id "aryzY05Phls--iYlcKgTzAAAASg"]
[Wed Sep 30 00:59:47.232887 2026] [security2:error] [pid 186850:tid 187016] [client 52.172.226.14:32113] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/css/"] [unique_id "aryzY05Phls--iYlcKgTzQAAAS4"]
[Wed Sep 30 00:59:47.252496 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.252754 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.268333 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:47.268605 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:47.292093 2026] [security2:error] [pid 186850:tid 187012] [client 20.213.164.196:10699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/nck.php"] [unique_id "aryzY05Phls--iYlcKgT0QAAASo"]
[Wed Sep 30 00:59:47.343826 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.344083 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.350724 2026] [security2:error] [pid 186850:tid 187074] [client 152.59.169.65:60383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT2QAAAWg"]
[Wed Sep 30 00:59:47.355180 2026] [security2:error] [pid 186850:tid 187074] [client 152.59.169.65:60383] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT2QAAAWg"]
[Wed Sep 30 00:59:47.390446 2026] [security2:error] [pid 186850:tid 187019] [client 52.231.69.245:35522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/sallu.php"] [unique_id "aryzY05Phls--iYlcKgT2wAAATE"]
[Wed Sep 30 00:59:47.434221 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.434492 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.524227 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.524477 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.616450 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.616743 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.674408 2026] [security2:error] [pid 186850:tid 187083] [client 106.214.3.140:18646] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT7AAAAXE"]
[Wed Sep 30 00:59:47.674685 2026] [security2:error] [pid 186850:tid 187083] [client 106.214.3.140:18646] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT7AAAAXE"]
[Wed Sep 30 00:59:47.707656 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.707931 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.730376 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:47.730645 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:47.740896 2026] [security2:error] [pid 186850:tid 187063] [client 52.231.69.245:35552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/01.php"] [unique_id "aryzY05Phls--iYlcKgT9QAAAV0"]
[Wed Sep 30 00:59:47.789845 2026] [security2:error] [pid 186850:tid 186884] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzY05Phls--iYlcKgT-AABbCE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148313&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 00:59:47.789873 2026] [security2:error] [pid 186850:tid 186884] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzY05Phls--iYlcKgT-AABbCE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148313&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 00:59:47.800768 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:47.801045 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:47.841274 2026] [security2:error] [pid 186850:tid 187069] [client 45.138.12.32:33056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yad.hst.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzY05Phls--iYlcKgT_QAAAWM"]
[Wed Sep 30 00:59:47.843074 2026] [security2:error] [pid 186850:tid 187076] [client 103.172.210.103:51759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT_gAAAWo"]
[Wed Sep 30 00:59:47.843181 2026] [security2:error] [pid 186850:tid 187076] [client 103.172.210.103:51759] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzY05Phls--iYlcKgT_gAAAWo"]
[Wed Sep 30 00:59:47.879317 2026] [security2:error] [pid 186850:tid 186986] [client 20.213.164.196:10506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/xtt.php"] [unique_id "aryzY05Phls--iYlcKgUAAAAARA"]
[Wed Sep 30 00:59:47.879592 2026] [security2:error] [pid 186850:tid 186980] [client 52.172.226.14:32080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/great.php"] [unique_id "aryzY05Phls--iYlcKgUAQAAAQo"]
[Wed Sep 30 00:59:47.932577 2026] [security2:error] [pid 186850:tid 187028] [client 20.211.90.37:47042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/insc.php"] [unique_id "aryzY05Phls--iYlcKgUAgAAATo"]
[Wed Sep 30 00:59:48.001304 2026] [security2:error] [pid 186850:tid 187055] [client 104.208.65.139:17973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/aa.php"] [unique_id "aryzZE5Phls--iYlcKgUCgAAAVU"]
[Wed Sep 30 00:59:48.034879 2026] [security2:error] [pid 186850:tid 187075] [client 45.138.12.32:19558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ydd.mzp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzZE5Phls--iYlcKgUDwAAAWk"]
[Wed Sep 30 00:59:48.037309 2026] [security2:error] [pid 186850:tid 187054] [client 52.231.69.245:35525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ab.php"] [unique_id "aryzZE5Phls--iYlcKgUEAAAAVQ"]
[Wed Sep 30 00:59:48.097283 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.097717 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.187566 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.187827 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.200765 2026] [security2:error] [pid 186850:tid 187009] [client 127.0.0.1:43790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzZE5Phls--iYlcKgUHQAAASc"]
[Wed Sep 30 00:59:48.200976 2026] [security2:error] [pid 186850:tid 187034] [client 74.7.244.32:58864] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.kgh.gui.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzZE5Phls--iYlcKgUHAABQAo"]
[Wed Sep 30 00:59:48.201543 2026] [security2:error] [pid 186850:tid 187053] [client 127.0.0.1:43782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzZE5Phls--iYlcKgUGgAAAVM"]
[Wed Sep 30 00:59:48.201817 2026] [security2:error] [pid 186850:tid 187016] [client 74.7.241.169:49000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.izn.soq.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzZE5Phls--iYlcKgUGQABLlE"]
[Wed Sep 30 00:59:48.225261 2026] [security2:error] [pid 186850:tid 186993] [client 127.0.0.1:43806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzZE5Phls--iYlcKgUIAAAARc"]
[Wed Sep 30 00:59:48.225477 2026] [security2:error] [pid 186850:tid 187059] [client 74.7.175.150:56222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.klrccares.com"] [uri "/robots.txt"] [unique_id "aryzZE5Phls--iYlcKgUHgABWUM"]
[Wed Sep 30 00:59:48.252578 2026] [security2:error] [pid 186850:tid 187000] [client 45.138.12.32:33094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yan.qlp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzZE5Phls--iYlcKgUJwAAAR4"]
[Wed Sep 30 00:59:48.258936 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:48.259220 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:48.277272 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.277576 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.305983 2026] [security2:error] [pid 186850:tid 187007] [client 52.231.69.245:34953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xwpg.php"] [unique_id "aryzZE5Phls--iYlcKgULAAAASU"]
[Wed Sep 30 00:59:48.369101 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.369392 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.388936 2026] [security2:error] [pid 186850:tid 186940] [remote 57.141.14.89:28580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "aryzZE5Phls--iYlcKgULgABFVk"]
[Wed Sep 30 00:59:48.418178 2026] [security2:error] [pid 186850:tid 187015] [client 74.7.242.1:33652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzZE5Phls--iYlcKgUMQAAAS0"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 00:59:48.459771 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.460076 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.482959 2026] [security2:error] [pid 186850:tid 186986] [client 20.213.164.196:60199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ephodgroup.com"] [uri "/go.php"] [unique_id "aryzZE5Phls--iYlcKgUOQAAARA"]
[Wed Sep 30 00:59:48.483157 2026] [security2:error] [pid 186850:tid 187080] [client 52.172.226.14:32729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/BDKR28WP.php"] [unique_id "aryzZE5Phls--iYlcKgUOAAAAW4"]
[Wed Sep 30 00:59:48.513949 2026] [security2:error] [pid 186850:tid 187073] [client 20.211.90.37:47970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/file.php"] [unique_id "aryzZE5Phls--iYlcKgUOgAAAWc"]
[Wed Sep 30 00:59:48.519728 2026] [security2:error] [pid 186850:tid 187045] [client 105.112.178.79:38328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.premiopro.com"] [uri "/__ss_probe_948d9faa5ea5ae9a423d3278c59b9827__"] [unique_id "aryzZE5Phls--iYlcKgUOwAAAUs"]
[Wed Sep 30 00:59:48.545566 2026] [security2:error] [pid 186850:tid 187025] [client 104.208.65.139:19075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/f35.update.php"] [unique_id "aryzZE5Phls--iYlcKgUQQAAATc"]
[Wed Sep 30 00:59:48.550674 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.550961 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.574347 2026] [security2:error] [pid 186850:tid 187077] [client 52.231.69.245:34949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/flamini.php"] [unique_id "aryzZE5Phls--iYlcKgURAAAAWs"]
[Wed Sep 30 00:59:48.575153 2026] [security2:error] [pid 186850:tid 187041] [client 45.138.12.41:49204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.isoltrading.com"] [uri "/wp-links-opml.php"] [unique_id "aryzZE5Phls--iYlcKgURQAAAUc"]
[Wed Sep 30 00:59:48.642198 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.642455 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.729414 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:48.729683 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:48.734579 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.734836 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.761999 2026] [security2:error] [pid 186850:tid 187023] [client 104.208.65.139:29363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/pJPoKA.php"] [unique_id "aryzZE5Phls--iYlcKgUVAAAATU"]
[Wed Sep 30 00:59:48.827171 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.827488 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:48.848524 2026] [security2:error] [pid 186850:tid 187087] [client 52.231.69.245:35529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/themes.php"] [unique_id "aryzZE5Phls--iYlcKgUWAAAAXU"]
[Wed Sep 30 00:59:48.916252 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:48.916528 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.004673 2026] [security2:error] [pid 186850:tid 187058] [client 4.240.25.22:38782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzZU5Phls--iYlcKgUXwAAAVg"]
[Wed Sep 30 00:59:49.005739 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.006035 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.007950 2026] [access_compat:error] [pid 186850:tid 187029] [client 116.179.32.159:51232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.008371 2026] [access_compat:error] [pid 186850:tid 187029] [client 116.179.32.159:51232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.023574 2026] [security2:error] [pid 186850:tid 187083] [client 20.211.90.37:47056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/dex.php"] [unique_id "aryzZU5Phls--iYlcKgUYQAAAXE"]
[Wed Sep 30 00:59:49.053399 2026] [security2:error] [pid 186850:tid 187007] [client 52.172.226.14:32538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/gigi.php"] [unique_id "aryzZU5Phls--iYlcKgUZQAAASU"]
[Wed Sep 30 00:59:49.081490 2026] [security2:error] [pid 186850:tid 186885] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzZU5Phls--iYlcKgUZgABGSI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=105&t=22190
[Wed Sep 30 00:59:49.081524 2026] [security2:error] [pid 186850:tid 186885] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzZU5Phls--iYlcKgUZgABGSI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=105&t=22190
[Wed Sep 30 00:59:49.098843 2026] [security2:error] [pid 186850:tid 187089] [client 116.193.128.26:51119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUaQAAAXc"]
[Wed Sep 30 00:59:49.098964 2026] [security2:error] [pid 186850:tid 187089] [client 116.193.128.26:51119] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUaQAAAXc"]
[Wed Sep 30 00:59:49.099889 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.100190 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.114975 2026] [security2:error] [pid 186850:tid 187086] [client 104.208.65.139:29390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/24.php"] [unique_id "aryzZU5Phls--iYlcKgUawAAAXQ"]
[Wed Sep 30 00:59:49.115649 2026] [security2:error] [pid 186850:tid 186991] [client 52.231.69.245:35534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/0.php"] [unique_id "aryzZU5Phls--iYlcKgUbAAAARU"]
[Wed Sep 30 00:59:49.139521 2026] [security2:error] [pid 186850:tid 187031] [client 4.240.25.22:22206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/ohct.php"] [unique_id "aryzZU5Phls--iYlcKgUcwAAAT0"]
[Wed Sep 30 00:59:49.157514 2026] [security2:error] [pid 186850:tid 187096] [client 103.159.192.142:52598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUdwAAAX4"]
[Wed Sep 30 00:59:49.157677 2026] [security2:error] [pid 186850:tid 187096] [client 103.159.192.142:52598] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUdwAAAX4"]
[Wed Sep 30 00:59:49.193949 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.194377 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.241612 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:49.242019 2026] [access_compat:error] [pid 186850:tid 187077] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:49.274746 2026] [security2:error] [pid 186850:tid 187013] [client 20.194.30.107:44654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/dehnl.php"] [unique_id "aryzZU5Phls--iYlcKgUhQAAASs"]
[Wed Sep 30 00:59:49.286150 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.286583 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:34064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.372074 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.372355 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.404504 2026] [security2:error] [pid 186850:tid 187062] [client 52.231.69.245:34946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/opsh.php"] [unique_id "aryzZU5Phls--iYlcKgUigAAAVw"]
[Wed Sep 30 00:59:49.432663 2026] [security2:error] [pid 186850:tid 187006] [client 152.59.165.7:58152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUjAAAASQ"]
[Wed Sep 30 00:59:49.432845 2026] [security2:error] [pid 186850:tid 187006] [client 152.59.165.7:58152] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUjAAAASQ"]
[Wed Sep 30 00:59:49.464113 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.464397 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.468664 2026] [security2:error] [pid 186850:tid 187070] [client 20.211.90.37:47961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/key.php"] [unique_id "aryzZU5Phls--iYlcKgUkAAAAWQ"]
[Wed Sep 30 00:59:49.475523 2026] [security2:error] [pid 186850:tid 187053] [client 104.208.65.139:29325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/42b5827789index.php"] [unique_id "aryzZU5Phls--iYlcKgUkQAAAVM"]
[Wed Sep 30 00:59:49.552850 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.553152 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.580106 2026] [security2:error] [pid 186850:tid 187029] [client 52.172.226.14:32749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ant.php"] [unique_id "aryzZU5Phls--iYlcKgUmwAAATs"]
[Wed Sep 30 00:59:49.646371 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.646800 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.682800 2026] [security2:error] [pid 186850:tid 187096] [client 52.231.69.245:34944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/media.php"] [unique_id "aryzZU5Phls--iYlcKgUpwAAAX4"]
[Wed Sep 30 00:59:49.701508 2026] [security2:error] [pid 186850:tid 187039] [client 4.196.65.241:64182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/usr.php"] [unique_id "aryzZU5Phls--iYlcKgUqAAAAUU"]
[Wed Sep 30 00:59:49.704171 2026] [security2:error] [pid 186850:tid 186986] [client 216.73.216.46:34064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzZU5Phls--iYlcKgUqQAAARA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTMvbm9kZTAvY3B1OS90b3BvbG9neQ%3D%3D
[Wed Sep 30 00:59:49.739962 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.740392 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.762666 2026] [security2:error] [pid 186850:tid 187056] [client 4.196.65.241:2092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/SbK7VBNnXJj.php"] [unique_id "aryzZU5Phls--iYlcKgUqwAAAVY"]
[Wed Sep 30 00:59:49.771934 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:49.772189 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 00:59:49.833595 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.834070 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.878845 2026] [security2:error] [pid 186850:tid 187073] [client 20.211.90.37:47938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/kir.php"] [unique_id "aryzZU5Phls--iYlcKgUtQAAAWc"]
[Wed Sep 30 00:59:49.900213 2026] [security2:error] [pid 186850:tid 187079] [client 203.122.45.246:50253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUtgAAAW0"]
[Wed Sep 30 00:59:49.900340 2026] [security2:error] [pid 186850:tid 187079] [client 203.122.45.246:50253] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUtgAAAW0"]
[Wed Sep 30 00:59:49.922196 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:49.922512 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:49.962503 2026] [security2:error] [pid 186850:tid 187103] [client 104.208.65.139:25465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/mmq.php"] [unique_id "aryzZU5Phls--iYlcKgUwwAAAYU"]
[Wed Sep 30 00:59:49.969390 2026] [security2:error] [pid 186850:tid 187060] [client 52.231.69.245:35544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/images.php"] [unique_id "aryzZU5Phls--iYlcKgUxAAAAVo"]
[Wed Sep 30 00:59:49.977778 2026] [security2:error] [pid 186850:tid 187014] [client 202.179.95.79:63055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUxQAAASw"]
[Wed Sep 30 00:59:49.978249 2026] [security2:error] [pid 186850:tid 187014] [client 202.179.95.79:63055] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzZU5Phls--iYlcKgUxQAAASw"]
[Wed Sep 30 00:59:50.010178 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.010442 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.095097 2026] [security2:error] [pid 186850:tid 187033] [client 20.70.173.30:24754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/red.php"] [unique_id "aryzZk5Phls--iYlcKgUyQAAAT8"]
[Wed Sep 30 00:59:50.100973 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.101289 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:2445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.180890 2026] [security2:error] [pid 186850:tid 187102] [client 52.172.226.14:32119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/uejvv.php"] [unique_id "aryzZk5Phls--iYlcKgU0gAAAYQ"]
[Wed Sep 30 00:59:50.194604 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.195015 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.227647 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:50.227941 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:50.242196 2026] [security2:error] [pid 186850:tid 187027] [client 20.211.90.37:47049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/fling.php"] [unique_id "aryzZk5Phls--iYlcKgU1wAAATk"]
[Wed Sep 30 00:59:50.276180 2026] [security2:error] [pid 186850:tid 187072] [client 52.231.69.245:35521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ops.php"] [unique_id "aryzZk5Phls--iYlcKgU2QAAAWY"]
[Wed Sep 30 00:59:50.286237 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.286500 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.333607 2026] [security2:error] [pid 186850:tid 187106] [client 138.255.27.226:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzZk5Phls--iYlcKgU3gAAAYg"]
[Wed Sep 30 00:59:50.376151 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.376412 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.464684 2026] [security2:error] [pid 186850:tid 186878] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzZk5Phls--iYlcKgU5wABFxs"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D58028
[Wed Sep 30 00:59:50.466544 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.466820 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.484791 2026] [security2:error] [pid 186850:tid 186987] [client 104.208.65.139:15018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/adminfuns.php"] [unique_id "aryzZk5Phls--iYlcKgU6AAAARE"]
[Wed Sep 30 00:59:50.486362 2026] [security2:error] [pid 186850:tid 186981] [client 106.214.2.47:31544] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgU6QAAAQs"]
[Wed Sep 30 00:59:50.486486 2026] [security2:error] [pid 186850:tid 186981] [client 106.214.2.47:31544] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgU6QAAAQs"]
[Wed Sep 30 00:59:50.495326 2026] [security2:error] [pid 186850:tid 187032] [client 216.73.216.46:2445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzZk5Phls--iYlcKgU6gAAAT4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL21lbW9yeTM5MS9ub2RlMA%3D%3D
[Wed Sep 30 00:59:50.550137 2026] [security2:error] [pid 186850:tid 187016] [client 52.231.69.245:35339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/mac.php"] [unique_id "aryzZk5Phls--iYlcKgU7QAAAS4"]
[Wed Sep 30 00:59:50.555119 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.555388 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.566663 2026] [security2:error] [pid 186850:tid 187038] [client 104.208.65.139:29398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/fryvbbn.php"] [unique_id "aryzZk5Phls--iYlcKgU7wAAAUQ"]
[Wed Sep 30 00:59:50.647593 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.647900 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:29368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.675267 2026] [security2:error] [pid 186850:tid 187036] [client 52.172.226.14:32125] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aryzZk5Phls--iYlcKgU-gAAAUI"]
[Wed Sep 30 00:59:50.710935 2026] [security2:error] [pid 186850:tid 186980] [client 4.196.65.241:27315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/css.php"] [unique_id "aryzZk5Phls--iYlcKgU_wAAAQo"]
[Wed Sep 30 00:59:50.724968 2026] [security2:error] [pid 186850:tid 187052] [client 20.211.90.37:47098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/btyuio.php"] [unique_id "aryzZk5Phls--iYlcKgVAAAAAVI"]
[Wed Sep 30 00:59:50.725758 2026] [security2:error] [pid 186850:tid 187044] [client 72.255.10.32:53563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgVAQAAAUo"]
[Wed Sep 30 00:59:50.725854 2026] [security2:error] [pid 186850:tid 187044] [client 72.255.10.32:53563] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgVAQAAAUo"]
[Wed Sep 30 00:59:50.734153 2026] [security2:error] [pid 186850:tid 186999] [client 43.227.131.37:45631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgVAgAAAR0"]
[Wed Sep 30 00:59:50.734258 2026] [security2:error] [pid 186850:tid 186999] [client 43.227.131.37:45631] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzZk5Phls--iYlcKgVAgAAAR0"]
[Wed Sep 30 00:59:50.787396 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:50.787670 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:50.790534 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.790804 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.822733 2026] [security2:error] [pid 186850:tid 187057] [client 52.231.69.245:35573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/pass4.php"] [unique_id "aryzZk5Phls--iYlcKgVBgAAAVc"]
[Wed Sep 30 00:59:50.882244 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.882504 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:50.919739 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:50.920097 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.018382 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.018646 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.035519 2026] [security2:error] [pid 186850:tid 187099] [client 111.221.44.115:57499] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "hermaniv.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzZ05Phls--iYlcKgVEwAAAYE"]
[Wed Sep 30 00:59:51.057700 2026] [security2:error] [pid 186850:tid 187096] [client 216.73.216.46:29368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzZ05Phls--iYlcKgVGAAAAX4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDUvbm9kZTAvbWVtb3J5MjAzL3Bvd2Vy
[Wed Sep 30 00:59:51.057958 2026] [security2:error] [pid 186850:tid 187106] [client 104.208.65.139:29374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/ff.update.php"] [unique_id "aryzZ05Phls--iYlcKgVGQAAAYg"]
[Wed Sep 30 00:59:51.086387 2026] [security2:error] [pid 186850:tid 187063] [client 24.77.92.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television"] [unique_id "aryzZ05Phls--iYlcKgVHAAAAV0"]
[Wed Sep 30 00:59:51.098756 2026] [security2:error] [pid 186850:tid 187031] [client 52.231.69.245:34987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/drttewyh.php"] [unique_id "aryzZ05Phls--iYlcKgVHQAAAT0"]
[Wed Sep 30 00:59:51.115716 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.116184 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.131295 2026] [security2:error] [pid 186850:tid 186868] [remote 47.128.114.151:48244] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/2554/2-levies-men-shot-dead"] [unique_id "aryzZ05Phls--iYlcKgVIQABURE"]
[Wed Sep 30 00:59:51.206062 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.206488 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.245148 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:51.245422 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:51.271188 2026] [security2:error] [pid 186850:tid 187056] [client 52.172.226.14:32739] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aryzZ05Phls--iYlcKgVKAAAAVY"]
[Wed Sep 30 00:59:51.296729 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.297186 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.358931 2026] [security2:error] [pid 186850:tid 187088] [client 45.138.12.32:19660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yik.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzZ05Phls--iYlcKgVKwAAAXY"]
[Wed Sep 30 00:59:51.367376 2026] [security2:error] [pid 186850:tid 187054] [client 52.231.69.245:35006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/sh.php"] [unique_id "aryzZ05Phls--iYlcKgVLAAAAVQ"]
[Wed Sep 30 00:59:51.383756 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.384068 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.473407 2026] [security2:error] [pid 186850:tid 187075] [client 49.205.105.16:14189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzZ05Phls--iYlcKgVMgAAAWk"]
[Wed Sep 30 00:59:51.473553 2026] [security2:error] [pid 186850:tid 187075] [client 49.205.105.16:14189] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzZ05Phls--iYlcKgVMgAAAWk"]
[Wed Sep 30 00:59:51.473838 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.474119 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.474268 2026] [security2:error] [pid 186850:tid 186996] [client 20.211.90.37:47976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/sm.php"] [unique_id "aryzZ05Phls--iYlcKgVMwAAARo"]
[Wed Sep 30 00:59:51.565419 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.565676 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.576006 2026] [security2:error] [pid 186850:tid 187033] [client 104.208.65.139:25424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/lzlhihzi.php"] [unique_id "aryzZ05Phls--iYlcKgVNgAAAT8"]
[Wed Sep 30 00:59:51.632399 2026] [security2:error] [pid 186850:tid 187071] [client 52.231.69.245:35543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/groud1.php"] [unique_id "aryzZ05Phls--iYlcKgVOAAAAWU"]
[Wed Sep 30 00:59:51.642771 2026] [security2:error] [pid 186850:tid 187050] [client 38.253.224.33:49478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "921"] [severity "CRITICAL"] [tag "SQLi"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryzZ05Phls--iYlcKgVOgAAAVA"]
[Wed Sep 30 00:59:51.656548 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.656842 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.720763 2026] [security2:error] [pid 186850:tid 187035] [client 4.196.65.241:19112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/file2.php"] [unique_id "aryzZ05Phls--iYlcKgVQQAAAUE"]
[Wed Sep 30 00:59:51.747309 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.747575 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:26036] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.758596 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:51.758990 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:51.797557 2026] [security2:error] [pid 186850:tid 187073] [client 116.72.182.19:53801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzZ05Phls--iYlcKgVRwAAAWc"]
[Wed Sep 30 00:59:51.798153 2026] [security2:error] [pid 186850:tid 187073] [client 116.72.182.19:53801] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzZ05Phls--iYlcKgVRwAAAWc"]
[Wed Sep 30 00:59:51.826141 2026] [security2:error] [pid 186850:tid 187008] [client 20.211.90.37:47076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/a.php"] [unique_id "aryzZ05Phls--iYlcKgVSwAAASY"]
[Wed Sep 30 00:59:51.836717 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.836977 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:51.885328 2026] [security2:error] [pid 186850:tid 187013] [client 103.168.67.253:20216] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signin"] [unique_id "aryzZ05Phls--iYlcKgVUAAAASs"]
[Wed Sep 30 00:59:51.897795 2026] [security2:error] [pid 186850:tid 187007] [client 52.172.226.14:32565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/file.php"] [unique_id "aryzZ05Phls--iYlcKgVUQAAASU"]
[Wed Sep 30 00:59:51.905109 2026] [security2:error] [pid 186850:tid 187049] [client 52.231.69.245:35528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/bro.php"] [unique_id "aryzZ05Phls--iYlcKgVUwAAAU8"]
[Wed Sep 30 00:59:51.929569 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:51.929857 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.043843 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.044120 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.113380 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.113645 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.168224 2026] [security2:error] [pid 186850:tid 187018] [client 216.73.216.46:26036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzaE5Phls--iYlcKgVYQAAATA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL21lbW9yeTc5
[Wed Sep 30 00:59:52.184008 2026] [security2:error] [pid 186850:tid 187026] [client 52.231.69.245:35355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ac83.php"] [unique_id "aryzaE5Phls--iYlcKgVYgAAATg"]
[Wed Sep 30 00:59:52.201256 2026] [security2:error] [pid 186850:tid 187012] [client 20.211.90.37:47058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/sb.php"] [unique_id "aryzaE5Phls--iYlcKgVZAAAASo"]
[Wed Sep 30 00:59:52.206634 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.206911 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.262169 2026] [security2:error] [pid 186850:tid 187048] [client 104.208.65.139:17972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/bfdghfgv.php"] [unique_id "aryzaE5Phls--iYlcKgVZwAAAU4"]
[Wed Sep 30 00:59:52.269788 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:52.270223 2026] [access_compat:error] [pid 186850:tid 187033] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:52.285469 2026] [security2:error] [pid 186850:tid 187027] [client 104.208.65.139:35317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzaE5Phls--iYlcKgVaAAAATk"]
[Wed Sep 30 00:59:52.345877 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.346157 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.390020 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.390463 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.390759 2026] [security2:error] [pid 186850:tid 186893] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzaE5Phls--iYlcKgVbgABUyo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=247578&sid=f6e522a7b5e8a7624028aa37462c7eaa
[Wed Sep 30 00:59:52.390785 2026] [security2:error] [pid 186850:tid 186893] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzaE5Phls--iYlcKgVbgABUyo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=247578&sid=f6e522a7b5e8a7624028aa37462c7eaa
[Wed Sep 30 00:59:52.440669 2026] [security2:error] [pid 186850:tid 187022] [client 52.172.226.14:32121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/elements.php"] [unique_id "aryzaE5Phls--iYlcKgVcQAAATQ"]
[Wed Sep 30 00:59:52.441200 2026] [security2:error] [pid 186850:tid 187054] [client 38.253.224.33:49510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryzaE5Phls--iYlcKgVcAAAAVQ"]
[Wed Sep 30 00:59:52.445489 2026] [security2:error] [pid 186850:tid 187070] [client 52.231.69.245:34982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/class-wp-http-client.php"] [unique_id "aryzaE5Phls--iYlcKgVcwAAAWQ"]
[Wed Sep 30 00:59:52.476334 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.476704 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.478455 2026] [security2:error] [pid 186850:tid 187035] [client 20.194.30.107:34043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/edit.php"] [unique_id "aryzaE5Phls--iYlcKgVdQAAAUE"]
[Wed Sep 30 00:59:52.565906 2026] [security2:error] [pid 186850:tid 187008] [client 20.211.90.37:47971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/av.php"] [unique_id "aryzaE5Phls--iYlcKgVeQAAASY"]
[Wed Sep 30 00:59:52.568092 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.568355 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.569550 2026] [security2:error] [pid 186850:tid 187039] [client 213.136.69.135:50084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-phpmailer.php"] [unique_id "aryzaE5Phls--iYlcKgVewAAAUU"], referer: binance.com
[Wed Sep 30 00:59:52.616375 2026] [security2:error] [pid 186850:tid 186986] [client 45.138.12.32:19612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yoj.fme.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzaE5Phls--iYlcKgVgAAAARA"]
[Wed Sep 30 00:59:52.629220 2026] [security2:error] [pid 186850:tid 187049] [client 104.208.65.139:44255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/Dss.php"] [unique_id "aryzaE5Phls--iYlcKgVhAAAAU8"]
[Wed Sep 30 00:59:52.660569 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.660908 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.716505 2026] [security2:error] [pid 186850:tid 186981] [client 45.138.12.32:19694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ypq.lmg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzaE5Phls--iYlcKgViQAAAQs"]
[Wed Sep 30 00:59:52.730738 2026] [security2:error] [pid 186850:tid 187011] [client 52.231.69.245:34948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/zoo2.php"] [unique_id "aryzaE5Phls--iYlcKgVigAAASk"]
[Wed Sep 30 00:59:52.752188 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.752458 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.767880 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:52.768291 2026] [access_compat:error] [pid 186850:tid 187067] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:52.780109 2026] [security2:error] [pid 186850:tid 187056] [client 4.196.65.241:27283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/twivahpi.php"] [unique_id "aryzaE5Phls--iYlcKgVjgAAAVY"]
[Wed Sep 30 00:59:52.805521 2026] [security2:error] [pid 186850:tid 187018] [client 4.240.25.22:63749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/kj.php"] [unique_id "aryzaE5Phls--iYlcKgVjwAAATA"]
[Wed Sep 30 00:59:52.839459 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.839729 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.885224 2026] [security2:error] [pid 186850:tid 186854] [remote 74.7.227.56:41694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzaE5Phls--iYlcKgVmAABHAM"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=650
[Wed Sep 30 00:59:52.929480 2026] [security2:error] [pid 186850:tid 187050] [client 173.254.29.157:28428] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzaE5Phls--iYlcKgVnwAAAVA"]
[Wed Sep 30 00:59:52.930335 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:52.930618 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:52.946166 2026] [security2:error] [pid 186850:tid 187095] [client 173.254.29.157:28444] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzaE5Phls--iYlcKgVogAAAX0"]
[Wed Sep 30 00:59:52.953509 2026] [security2:error] [pid 186850:tid 186992] [client 20.211.90.37:47949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/b8.php"] [unique_id "aryzaE5Phls--iYlcKgVpAAAARY"]
[Wed Sep 30 00:59:52.963480 2026] [security2:error] [pid 186850:tid 187040] [client 103.168.67.253:20216] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signin"] [unique_id "aryzaE5Phls--iYlcKgVowAAAUY"]
[Wed Sep 30 00:59:52.964179 2026] [security2:error] [pid 186850:tid 187044] [client 173.254.29.157:28456] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzaE5Phls--iYlcKgVpQAAAUo"]
[Wed Sep 30 00:59:52.980367 2026] [security2:error] [pid 186850:tid 187091] [client 173.254.29.157:28460] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzaE5Phls--iYlcKgVpgAAAXk"]
[Wed Sep 30 00:59:53.010191 2026] [security2:error] [pid 186850:tid 187022] [client 52.172.226.14:32118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/sitemap.php"] [unique_id "aryzaU5Phls--iYlcKgVpwAAATQ"]
[Wed Sep 30 00:59:53.022381 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.022653 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.028134 2026] [security2:error] [pid 186850:tid 187070] [client 52.231.69.245:35574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/zoo1.php"] [unique_id "aryzaU5Phls--iYlcKgVqQAAAWQ"]
[Wed Sep 30 00:59:53.039005 2026] [security2:error] [pid 186850:tid 187043] [client 116.197.133.25:51024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzaU5Phls--iYlcKgVqgAAAUk"]
[Wed Sep 30 00:59:53.039139 2026] [security2:error] [pid 186850:tid 187043] [client 116.197.133.25:51024] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzaU5Phls--iYlcKgVqgAAAUk"]
[Wed Sep 30 00:59:53.100223 2026] [security2:error] [pid 186850:tid 187002] [client 104.208.65.139:56034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/uploaxa1.php"] [unique_id "aryzaU5Phls--iYlcKgVrQAAASA"]
[Wed Sep 30 00:59:53.113965 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.114236 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.203715 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.203991 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.232652 2026] [security2:error] [pid 186850:tid 187059] [client 38.253.224.33:49548] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=http://:"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryzaU5Phls--iYlcKgVuQAAAVk"]
[Wed Sep 30 00:59:53.256559 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:53.256832 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:53.293751 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.294029 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.338514 2026] [security2:error] [pid 186850:tid 187012] [client 52.231.69.245:34985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/class-ajax.php"] [unique_id "aryzaU5Phls--iYlcKgVwQAAASo"]
[Wed Sep 30 00:59:53.385089 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.385359 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.436892 2026] [security2:error] [pid 186850:tid 187014] [client 103.168.67.253:20216] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signin"] [unique_id "aryzaU5Phls--iYlcKgVxAAAASw"]
[Wed Sep 30 00:59:53.462529 2026] [security2:error] [pid 186850:tid 187030] [client 104.208.65.139:25436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/uploartg.php"] [unique_id "aryzaU5Phls--iYlcKgVxQAAATw"]
[Wed Sep 30 00:59:53.476389 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.476659 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.482134 2026] [security2:error] [pid 186850:tid 187092] [client 20.211.90.37:8343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "aryzaU5Phls--iYlcKgVxwAAAXo"]
[Wed Sep 30 00:59:53.569685 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.569961 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.643043 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:35334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gm.php"] [unique_id "aryzaU5Phls--iYlcKgV1gAAAUY"]
[Wed Sep 30 00:59:53.660270 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.660523 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.669230 2026] [security2:error] [pid 186850:tid 186999] [client 52.172.226.14:32075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/xetmolxr.php"] [unique_id "aryzaU5Phls--iYlcKgV3AAAAR0"]
[Wed Sep 30 00:59:53.735475 2026] [security2:error] [pid 186850:tid 187060] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzaU5Phls--iYlcKgV3gAAAVo"]
[Wed Sep 30 00:59:53.750147 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.750421 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.828329 2026] [security2:error] [pid 186850:tid 187093] [client 104.208.65.139:59777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/bgbagbcw.php"] [unique_id "aryzaU5Phls--iYlcKgV5QAAAXs"]
[Wed Sep 30 00:59:53.834343 2026] [security2:error] [pid 186850:tid 186997] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzaU5Phls--iYlcKgV4wAAARs"]
[Wed Sep 30 00:59:53.836093 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:53.836542 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9zYmlu
[Wed Sep 30 00:59:53.842199 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.842469 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.906019 2026] [security2:error] [pid 186850:tid 186982] [client 52.231.69.245:35560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/class-wp-site-list.php"] [unique_id "aryzaU5Phls--iYlcKgV6wAAAQw"]
[Wed Sep 30 00:59:53.907291 2026] [security2:error] [pid 186850:tid 187058] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzaU5Phls--iYlcKgV6gAAAVg"]
[Wed Sep 30 00:59:53.932345 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:53.932616 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:53.939533 2026] [security2:error] [pid 186850:tid 187098] [client 20.211.90.37:48406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/0.php"] [unique_id "aryzaU5Phls--iYlcKgV7gAAAYA"]
[Wed Sep 30 00:59:53.997901 2026] [security2:error] [pid 186850:tid 187043] [client 38.253.224.33:49586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryzaU5Phls--iYlcKgV8AAAAUk"]
[Wed Sep 30 00:59:53.999916 2026] [security2:error] [pid 186850:tid 187049] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzaU5Phls--iYlcKgV7wAAAU8"]
[Wed Sep 30 00:59:54.023058 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.023329 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.061031 2026] [security2:error] [pid 186850:tid 187020] [client 20.194.30.107:42824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/cgi-bin/admin.php"] [unique_id "aryzak5Phls--iYlcKgV8gAAATI"]
[Wed Sep 30 00:59:54.115868 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.116231 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.155747 2026] [security2:error] [pid 186850:tid 187068] [client 104.208.65.139:15014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzak5Phls--iYlcKgV-AAAAWI"]
[Wed Sep 30 00:59:54.163559 2026] [security2:error] [pid 186850:tid 187066] [client 20.219.2.60:19573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzak5Phls--iYlcKgV-QAAAWA"]
[Wed Sep 30 00:59:54.185158 2026] [security2:error] [pid 186850:tid 187008] [client 104.208.65.139:59806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/tegubsiu.php"] [unique_id "aryzak5Phls--iYlcKgV-wAAASY"]
[Wed Sep 30 00:59:54.185174 2026] [security2:error] [pid 186850:tid 187023] [client 52.172.226.14:32547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/mini.php"] [unique_id "aryzak5Phls--iYlcKgV_AAAATU"]
[Wed Sep 30 00:59:54.185316 2026] [security2:error] [pid 186850:tid 187017] [client 52.231.69.245:35000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/asd2.php"] [unique_id "aryzak5Phls--iYlcKgV_QAAAS8"]
[Wed Sep 30 00:59:54.204335 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.204597 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.285331 2026] [security2:error] [pid 186850:tid 187099] [client 114.119.158.156:35381] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.heavensentequine.com"] [uri "/robots.txt"] [unique_id "aryzak5Phls--iYlcKgWAgAAAYE"], referer: https://www.heavensentequine.com/robots.txt
[Wed Sep 30 00:59:54.289058 2026] [security2:error] [pid 186850:tid 186894] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzak5Phls--iYlcKgWAwABgis"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=420&t=15949
[Wed Sep 30 00:59:54.289079 2026] [security2:error] [pid 186850:tid 186894] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzak5Phls--iYlcKgWAwABgis"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=420&t=15949
[Wed Sep 30 00:59:54.289443 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:54.289695 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 00:59:54.294980 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.295248 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.341699 2026] [core:error] [pid 186850:tid 187097] [client 104.207.37.166:50279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:54.341724 2026] [core:error] [pid 186850:tid 187097] [client 104.207.37.166:50279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:54.386952 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.387231 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.410398 2026] [security2:error] [pid 186850:tid 187028] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzak5Phls--iYlcKgWDQAAATo"]
[Wed Sep 30 00:59:54.481415 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.481874 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.496909 2026] [security2:error] [pid 186850:tid 186996] [client 45.138.12.32:19668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yourshowfactory.com"] [uri "/wp-links-opml.php"] [unique_id "aryzak5Phls--iYlcKgWFAAAARo"]
[Wed Sep 30 00:59:54.530177 2026] [security2:error] [pid 186850:tid 186988] [client 104.208.65.139:25040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/xxw.php"] [unique_id "aryzak5Phls--iYlcKgWFgAAARI"]
[Wed Sep 30 00:59:54.530916 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:35563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/cdc.php"] [unique_id "aryzak5Phls--iYlcKgWFwAAAUY"]
[Wed Sep 30 00:59:54.568632 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.568906 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.652227 2026] [security2:error] [pid 186850:tid 187077] [client 4.240.25.22:18809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/media.php"] [unique_id "aryzak5Phls--iYlcKgWIAAAAWs"]
[Wed Sep 30 00:59:54.660206 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.660493 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.664647 2026] [security2:error] [pid 186850:tid 187003] [client 4.196.65.241:19490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cae2.3.php"] [unique_id "aryzak5Phls--iYlcKgWIgAAASE"]
[Wed Sep 30 00:59:54.678328 2026] [security2:error] [pid 186850:tid 187053] [client 20.219.2.60:19571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzak5Phls--iYlcKgWIwAAAVM"]
[Wed Sep 30 00:59:54.721207 2026] [security2:error] [pid 186850:tid 187000] [client 52.172.226.14:32517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/zwso.php"] [unique_id "aryzak5Phls--iYlcKgWJAAAAR4"]
[Wed Sep 30 00:59:54.734646 2026] [security2:error] [pid 186850:tid 186992] [client 38.253.224.33:49611] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryzak5Phls--iYlcKgWJQAAARY"]
[Wed Sep 30 00:59:54.751245 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.751503 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.759284 2026] [security2:error] [pid 186850:tid 186982] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzak5Phls--iYlcKgWJwAAAQw"]
[Wed Sep 30 00:59:54.759537 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:54.760007 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:54.788958 2026] [security2:error] [pid 186850:tid 187098] [client 20.204.42.136:7042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzak5Phls--iYlcKgWLAAAAYA"]
[Wed Sep 30 00:59:54.792750 2026] [security2:error] [pid 186850:tid 186986] [client 52.231.69.245:34984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/Components.php"] [unique_id "aryzak5Phls--iYlcKgWLgAAARA"]
[Wed Sep 30 00:59:54.811333 2026] [security2:error] [pid 186850:tid 187065] [client 45.138.12.32:19728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yse.svd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzak5Phls--iYlcKgWMwAAAV8"]
[Wed Sep 30 00:59:54.818663 2026] [security2:error] [pid 186850:tid 187046] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzak5Phls--iYlcKgWMgAAAUw"]
[Wed Sep 30 00:59:54.842692 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.843084 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.880574 2026] [security2:error] [pid 186850:tid 187020] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzak5Phls--iYlcKgWNwAAATI"]
[Wed Sep 30 00:59:54.934203 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:54.934483 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:54.940795 2026] [security2:error] [pid 186850:tid 186995] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzak5Phls--iYlcKgWOQAAARk"]
[Wed Sep 30 00:59:54.973605 2026] [security2:error] [pid 186850:tid 187094] [client 104.208.65.139:59795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/router.php"] [unique_id "aryzak5Phls--iYlcKgWQAAAAXw"]
[Wed Sep 30 00:59:55.029944 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.030239 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.059407 2026] [security2:error] [pid 186850:tid 187012] [client 52.231.69.245:35565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin.php/xl9.php"] [unique_id "aryza05Phls--iYlcKgWRQAAASo"]
[Wed Sep 30 00:59:55.070401 2026] [security2:error] [pid 186850:tid 187038] [client 45.138.12.32:33212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.xwf.hia.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryza05Phls--iYlcKgWRgAAAUQ"]
[Wed Sep 30 00:59:55.109608 2026] [security2:error] [pid 186850:tid 186987] [client 20.211.90.37:48403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/fms.php"] [unique_id "aryza05Phls--iYlcKgWSwAAARE"]
[Wed Sep 30 00:59:55.116104 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.116397 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.148244 2026] [security2:error] [pid 186850:tid 187082] [client 20.219.2.60:19582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ccs.php"] [unique_id "aryza05Phls--iYlcKgWTwAAAXA"]
[Wed Sep 30 00:59:55.179941 2026] [security2:error] [pid 186850:tid 186997] [client 103.159.192.142:52730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWUAAAARs"]
[Wed Sep 30 00:59:55.180057 2026] [security2:error] [pid 186850:tid 186997] [client 103.159.192.142:52730] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWUAAAARs"]
[Wed Sep 30 00:59:55.195952 2026] [core:error] [pid 186850:tid 187057] [client 104.207.47.237:50051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:55.195972 2026] [core:error] [pid 186850:tid 187057] [client 104.207.47.237:50051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 00:59:55.206451 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.206711 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.268154 2026] [security2:error] [pid 186850:tid 187034] [client 20.204.42.136:7105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryza05Phls--iYlcKgWVAAAAUA"]
[Wed Sep 30 00:59:55.290243 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:55.290507 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:55.296836 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.297114 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.302821 2026] [core:error] [pid 186850:tid 187060] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:55.302838 2026] [core:error] [pid 186850:tid 187060] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 00:59:55.307009 2026] [security2:error] [pid 186850:tid 187062] [client 223.181.60.167:6258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWWwAAAVw"]
[Wed Sep 30 00:59:55.307117 2026] [security2:error] [pid 186850:tid 187062] [client 223.181.60.167:6258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWWwAAAVw"]
[Wed Sep 30 00:59:55.381965 2026] [security2:error] [pid 186850:tid 187064] [client 104.208.65.139:18450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/av.php"] [unique_id "aryza05Phls--iYlcKgWYAAAAV4"]
[Wed Sep 30 00:59:55.388098 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.388365 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.395880 2026] [security2:error] [pid 186850:tid 187085] [client 223.235.102.107:18181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWYgAAAXM"]
[Wed Sep 30 00:59:55.395986 2026] [security2:error] [pid 186850:tid 187085] [client 223.235.102.107:18181] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWYgAAAXM"]
[Wed Sep 30 00:59:55.397593 2026] [security2:error] [pid 186850:tid 187029] [client 52.231.69.245:35545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gulu.php"] [unique_id "aryza05Phls--iYlcKgWYwAAATs"]
[Wed Sep 30 00:59:55.442179 2026] [security2:error] [pid 186850:tid 187005] [client 20.211.90.37:48440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/xyn.php"] [unique_id "aryza05Phls--iYlcKgWZQAAASM"]
[Wed Sep 30 00:59:55.449549 2026] [security2:error] [pid 186850:tid 186985] [client 38.253.224.33:49639] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "just2086.temp.domains"] [uri "/"] [unique_id "aryza05Phls--iYlcKgWZgAAAQ8"]
[Wed Sep 30 00:59:55.480984 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.481266 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.500549 2026] [security2:error] [pid 186850:tid 187065] [client 52.172.226.14:32766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/tiny.php"] [unique_id "aryza05Phls--iYlcKgWawAAAV8"]
[Wed Sep 30 00:59:55.571746 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.572029 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.628233 2026] [security2:error] [pid 186850:tid 187068] [client 20.219.2.60:20072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/set.php"] [unique_id "aryza05Phls--iYlcKgWdwAAAWI"]
[Wed Sep 30 00:59:55.629318 2026] [security2:error] [pid 186850:tid 187066] [client 4.196.65.241:19148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/.cache.php"] [unique_id "aryza05Phls--iYlcKgWeAAAAWA"]
[Wed Sep 30 00:59:55.660876 2026] [security2:error] [pid 186850:tid 187007] [client 52.231.69.245:35382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/bala.php"] [unique_id "aryza05Phls--iYlcKgWfQAAASU"]
[Wed Sep 30 00:59:55.662792 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.663061 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.736471 2026] [security2:error] [pid 186850:tid 187031] [client 37.41.16.35:55226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWfwAAAT0"]
[Wed Sep 30 00:59:55.736634 2026] [security2:error] [pid 186850:tid 187031] [client 37.41.16.35:55226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryza05Phls--iYlcKgWfwAAAT0"]
[Wed Sep 30 00:59:55.747276 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:55.747536 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:55.753922 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.754198 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.781442 2026] [security2:error] [pid 186850:tid 187038] [client 4.240.25.22:63789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/wp.php"] [unique_id "aryza05Phls--iYlcKgWgwAAAUQ"]
[Wed Sep 30 00:59:55.806787 2026] [security2:error] [pid 186850:tid 186987] [client 20.204.42.136:7125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/f35.update.php"] [unique_id "aryza05Phls--iYlcKgWiQAAARE"]
[Wed Sep 30 00:59:55.810531 2026] [security2:error] [pid 186850:tid 186998] [client 20.211.90.37:48446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/min.php"] [unique_id "aryza05Phls--iYlcKgWigAAARw"]
[Wed Sep 30 00:59:55.815306 2026] [security2:error] [pid 186850:tid 187028] [client 45.138.12.32:33216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ydz.jky.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryza05Phls--iYlcKgWjAAAATo"]
[Wed Sep 30 00:59:55.846258 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.846523 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.878052 2026] [security2:error] [pid 186850:tid 186990] [client 45.138.12.43:43512] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rxk.svd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryza05Phls--iYlcKgWkQAAARQ"]
[Wed Sep 30 00:59:55.886338 2026] [security2:error] [pid 186850:tid 187080] [client 104.208.65.139:59790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/cibrkysaeng.php"] [unique_id "aryza05Phls--iYlcKgWkgAAAW4"]
[Wed Sep 30 00:59:55.929294 2026] [security2:error] [pid 186850:tid 186996] [client 52.231.69.245:35532] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/c99.php"] [unique_id "aryza05Phls--iYlcKgWkwAAARo"]
[Wed Sep 30 00:59:55.937837 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:55.938158 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:55.990062 2026] [security2:error] [pid 186850:tid 187010] [client 52.172.226.14:32706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/simple.php"] [unique_id "aryza05Phls--iYlcKgWmAAAASg"]
[Wed Sep 30 00:59:56.026347 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.026607 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.090254 2026] [security2:error] [pid 186850:tid 187000] [client 20.219.2.60:19534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/mode.php"] [unique_id "aryzbE5Phls--iYlcKgWngAAAR4"]
[Wed Sep 30 00:59:56.117129 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.117393 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.152341 2026] [security2:error] [pid 186850:tid 186997] [client 182.69.182.151:24738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWpAAAARs"]
[Wed Sep 30 00:59:56.152430 2026] [security2:error] [pid 186850:tid 186997] [client 182.69.182.151:24738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWpAAAARs"]
[Wed Sep 30 00:59:56.160625 2026] [security2:error] [pid 186850:tid 186861] [remote 64.23.166.180:4464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.fantastictradeshows.com"] [uri "/.env"] [unique_id "aryzbE5Phls--iYlcKgWpQABXwo"]
[Wed Sep 30 00:59:56.208890 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.209155 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.264659 2026] [security2:error] [pid 186850:tid 187036] [client 52.231.69.245:35526] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/c99.php"] [unique_id "aryzbE5Phls--iYlcKgWrwAAAUI"]
[Wed Sep 30 00:59:56.270453 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:56.270726 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:56.282277 2026] [security2:error] [pid 186850:tid 187059] [client 49.36.41.37:57248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWsQAAAVk"]
[Wed Sep 30 00:59:56.282412 2026] [security2:error] [pid 186850:tid 187059] [client 49.36.41.37:57248] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWsQAAAVk"]
[Wed Sep 30 00:59:56.299302 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.299633 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.312966 2026] [security2:error] [pid 186850:tid 187089] [client 45.138.12.43:43538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rxk.svd.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzbE5Phls--iYlcKgWtQAAAXc"]
[Wed Sep 30 00:59:56.320631 2026] [security2:error] [pid 186850:tid 187055] [client 20.211.90.37:47075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-whe.php"] [unique_id "aryzbE5Phls--iYlcKgWtgAAAVU"]
[Wed Sep 30 00:59:56.392410 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.392684 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.423623 2026] [security2:error] [pid 186850:tid 187021] [client 20.204.42.136:7049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/adminfuns.php"] [unique_id "aryzbE5Phls--iYlcKgWvAAAATM"]
[Wed Sep 30 00:59:56.430676 2026] [log_config:warn] [pid 178882:tid 179225] (32)Broken pipe: [client 66.249.73.130:54044] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log
[Wed Sep 30 00:59:56.430694 2026] [log_config:warn] [pid 178882:tid 179225] (32)Broken pipe: [client 66.249.73.130:54044] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log
[Wed Sep 30 00:59:56.482966 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.483247 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.542052 2026] [security2:error] [pid 186850:tid 187024] [client 52.231.69.245:35553] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/c99.php"] [unique_id "aryzbE5Phls--iYlcKgWwQAAATY"]
[Wed Sep 30 00:59:56.557719 2026] [security2:error] [pid 186850:tid 186990] [client 52.172.226.14:32716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/buy.php"] [unique_id "aryzbE5Phls--iYlcKgWxgAAARQ"]
[Wed Sep 30 00:59:56.563428 2026] [security2:error] [pid 186850:tid 187071] [client 20.219.2.60:19549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ok.php"] [unique_id "aryzbE5Phls--iYlcKgWxwAAAWU"]
[Wed Sep 30 00:59:56.573775 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.574041 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.602509 2026] [security2:error] [pid 186850:tid 187072] [client 155.190.6.18:53866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWywAAAWY"]
[Wed Sep 30 00:59:56.602845 2026] [security2:error] [pid 186850:tid 187047] [client 150.107.232.159:35663] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWygAAAU0"]
[Wed Sep 30 00:59:56.602963 2026] [security2:error] [pid 186850:tid 187047] [client 150.107.232.159:35663] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWygAAAU0"]
[Wed Sep 30 00:59:56.620923 2026] [security2:error] [pid 186850:tid 186994] [client 4.196.65.241:64128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/motu.php"] [unique_id "aryzbE5Phls--iYlcKgWzAAAARg"]
[Wed Sep 30 00:59:56.665642 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.665929 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.679835 2026] [security2:error] [pid 186850:tid 187002] [client 182.75.216.230:63794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgW2QAAASA"]
[Wed Sep 30 00:59:56.679958 2026] [security2:error] [pid 186850:tid 187002] [client 182.75.216.230:63794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgW2QAAASA"]
[Wed Sep 30 00:59:56.761202 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.761635 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.772720 2026] [security2:error] [pid 186850:tid 187000] [client 104.208.65.139:25430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.solarrackworks.com"] [uri "/wp-wpbak.php"] [unique_id "aryzbE5Phls--iYlcKgW4AAAAR4"]
[Wed Sep 30 00:59:56.788012 2026] [security2:error] [pid 186850:tid 187053] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbE5Phls--iYlcKgW3wAAAVM"]
[Wed Sep 30 00:59:56.791311 2026] [security2:error] [pid 186850:tid 186989] [client 4.240.25.22:38783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzbE5Phls--iYlcKgW4wAAARM"]
[Wed Sep 30 00:59:56.794578 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:56.794836 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:56.847449 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.847724 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:56.879198 2026] [security2:error] [pid 186850:tid 187020] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbE5Phls--iYlcKgW6QAAATI"]
[Wed Sep 30 00:59:56.885079 2026] [security2:error] [pid 186850:tid 187072] [client 155.190.6.18:53866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgWywAAAWY"]
[Wed Sep 30 00:59:56.903506 2026] [security2:error] [pid 186850:tid 186995] [client 52.231.69.245:34972] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/c99.php"] [unique_id "aryzbE5Phls--iYlcKgW7gAAARk"]
[Wed Sep 30 00:59:56.966676 2026] [security2:error] [pid 186850:tid 187082] [client 103.241.204.139:58605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgW8gAAAXA"]
[Wed Sep 30 00:59:56.966783 2026] [security2:error] [pid 186850:tid 187082] [client 103.241.204.139:58605] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzbE5Phls--iYlcKgW8gAAAXA"]
[Wed Sep 30 00:59:56.989376 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:56.989628 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.016641 2026] [security2:error] [pid 186850:tid 187019] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbE5Phls--iYlcKgW9AAAATE"]
[Wed Sep 30 00:59:57.040387 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.040828 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.042029 2026] [security2:error] [pid 186850:tid 187059] [client 20.219.2.60:20051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/zoo.php"] [unique_id "aryzbU5Phls--iYlcKgW9gAAAVk"]
[Wed Sep 30 00:59:57.065243 2026] [security2:error] [pid 186850:tid 187092] [client 223.181.30.165:14182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgW9wAAAXo"]
[Wed Sep 30 00:59:57.065349 2026] [security2:error] [pid 186850:tid 187092] [client 223.181.30.165:14182] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgW9wAAAXo"]
[Wed Sep 30 00:59:57.069336 2026] [security2:error] [pid 186850:tid 187040] [client 49.43.163.212:28877] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgW-AAAAUY"]
[Wed Sep 30 00:59:57.069490 2026] [security2:error] [pid 186850:tid 187040] [client 49.43.163.212:28877] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgW-AAAAUY"]
[Wed Sep 30 00:59:57.073380 2026] [security2:error] [pid 186850:tid 187104] [client 20.204.42.136:7138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzbU5Phls--iYlcKgW-wAAAYY"]
[Wed Sep 30 00:59:57.073792 2026] [security2:error] [pid 186850:tid 187100] [client 20.211.90.37:8327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-filemanager1.php"] [unique_id "aryzbU5Phls--iYlcKgW_AAAAYI"]
[Wed Sep 30 00:59:57.127670 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.127978 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.133413 2026] [security2:error] [pid 186850:tid 186991] [client 52.172.226.14:32741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ioxi-o.php"] [unique_id "aryzbU5Phls--iYlcKgW_wAAARU"]
[Wed Sep 30 00:59:57.163905 2026] [security2:error] [pid 186850:tid 187052] [client 52.231.69.245:35554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ttivnife.php"] [unique_id "aryzbU5Phls--iYlcKgXAwAAAVI"]
[Wed Sep 30 00:59:57.221486 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.221759 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.252105 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:57.252359 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:57.267870 2026] [security2:error] [pid 186850:tid 187071] [client 45.138.12.32:33226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ydd.mzp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzbU5Phls--iYlcKgXDwAAAWU"]
[Wed Sep 30 00:59:57.310875 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.311121 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.341227 2026] [security2:error] [pid 186850:tid 187037] [client 122.173.27.10:30214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXFQAAAUM"]
[Wed Sep 30 00:59:57.341317 2026] [security2:error] [pid 186850:tid 187037] [client 122.173.27.10:30214] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXFQAAAUM"]
[Wed Sep 30 00:59:57.374152 2026] [security2:error] [pid 186850:tid 187074] [client 193.32.127.188:57582] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "rhodaalbert.com"] [uri "/wp-json/batch/v1"] [unique_id "aryzbU5Phls--iYlcKgXGQAAAWg"]
[Wed Sep 30 00:59:57.381925 2026] [security2:error] [pid 186850:tid 187027] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbU5Phls--iYlcKgXFgAAATk"]
[Wed Sep 30 00:59:57.403798 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.404067 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.438978 2026] [security2:error] [pid 186850:tid 187093] [client 52.231.69.245:34978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin.php/2P.php"] [unique_id "aryzbU5Phls--iYlcKgXHQAAAXs"]
[Wed Sep 30 00:59:57.493259 2026] [security2:error] [pid 186850:tid 187065] [client 20.211.90.37:48435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-freya.php"] [unique_id "aryzbU5Phls--iYlcKgXIAAAAV8"]
[Wed Sep 30 00:59:57.493591 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.493859 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.510738 2026] [security2:error] [pid 186850:tid 186989] [client 20.219.2.60:20095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gaza.php"] [unique_id "aryzbU5Phls--iYlcKgXIgAAARM"]
[Wed Sep 30 00:59:57.584787 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.585502 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.588192 2026] [security2:error] [pid 186850:tid 187034] [client 45.138.12.41:26998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.isoltrading.com"] [uri "/wp-links-opml.php"] [unique_id "aryzbU5Phls--iYlcKgXKgAAAUA"]
[Wed Sep 30 00:59:57.595379 2026] [security2:error] [pid 186850:tid 187013] [client 20.204.42.136:7148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzbU5Phls--iYlcKgXKwAAASs"]
[Wed Sep 30 00:59:57.633660 2026] [security2:error] [pid 186850:tid 187043] [client 45.138.12.32:33252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yse.svd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzbU5Phls--iYlcKgXLAAAAUk"]
[Wed Sep 30 00:59:57.650223 2026] [security2:error] [pid 186850:tid 186863] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzbU5Phls--iYlcKgXLwABZgw"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D92298
[Wed Sep 30 00:59:57.657461 2026] [security2:error] [pid 186850:tid 187103] [client 52.172.226.14:32736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ans.php"] [unique_id "aryzbU5Phls--iYlcKgXMAAAAYU"]
[Wed Sep 30 00:59:57.675896 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.676160 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.701686 2026] [security2:error] [pid 186850:tid 187060] [client 20.70.173.30:63622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/classwithtostring.php"] [unique_id "aryzbU5Phls--iYlcKgXOwAAAVo"]
[Wed Sep 30 00:59:57.727336 2026] [security2:error] [pid 186850:tid 187100] [client 52.231.69.245:35576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/a.php"] [unique_id "aryzbU5Phls--iYlcKgXPgAAAYI"]
[Wed Sep 30 00:59:57.744096 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:57.744506 2026] [access_compat:error] [pid 186850:tid 186991] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:57.767856 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.768211 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.803775 2026] [security2:error] [pid 186850:tid 187046] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbU5Phls--iYlcKgXIQAAAUw"]
[Wed Sep 30 00:59:57.857606 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.857937 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.865761 2026] [security2:error] [pid 186850:tid 187036] [client 102.254.102.41:49447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXSAAAAUI"]
[Wed Sep 30 00:59:57.867226 2026] [security2:error] [pid 186850:tid 187036] [client 102.254.102.41:49447] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXSAAAAUI"]
[Wed Sep 30 00:59:57.902527 2026] [security2:error] [pid 186850:tid 187028] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbU5Phls--iYlcKgXRwAAATo"]
[Wed Sep 30 00:59:57.916036 2026] [security2:error] [pid 186850:tid 186994] [client 152.59.169.65:60962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXTQAAARg"]
[Wed Sep 30 00:59:57.916229 2026] [security2:error] [pid 186850:tid 186994] [client 152.59.169.65:60962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzbU5Phls--iYlcKgXTQAAARg"]
[Wed Sep 30 00:59:57.947282 2026] [security2:error] [pid 186850:tid 187008] [client 4.240.25.22:63803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/users.php"] [unique_id "aryzbU5Phls--iYlcKgXTwAAASY"]
[Wed Sep 30 00:59:57.952937 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:57.953224 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:57.961217 2026] [security2:error] [pid 186850:tid 187090] [client 104.208.65.139:18423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/dex.php"] [unique_id "aryzbU5Phls--iYlcKgXUAAAAXg"]
[Wed Sep 30 00:59:57.967611 2026] [security2:error] [pid 186850:tid 187038] [client 20.219.2.60:19531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/grsiuk.php"] [unique_id "aryzbU5Phls--iYlcKgXUQAAAUQ"]
[Wed Sep 30 00:59:58.033348 2026] [security2:error] [pid 186850:tid 187062] [client 52.231.69.245:35558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/cord.php"] [unique_id "aryzbk5Phls--iYlcKgXVQAAAVw"]
[Wed Sep 30 00:59:58.039505 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.039763 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.058002 2026] [security2:error] [pid 186850:tid 187087] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbU5Phls--iYlcKgXUgAAAXU"]
[Wed Sep 30 00:59:58.104588 2026] [security2:error] [pid 186850:tid 187033] [client 193.32.127.188:57664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "917"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzbk5Phls--iYlcKgXWwAAAT8"]
[Wed Sep 30 00:59:58.112159 2026] [security2:error] [pid 186850:tid 187077] [client 20.211.90.37:47069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/admin.php/admin.php"] [unique_id "aryzbk5Phls--iYlcKgXXAAAAWs"]
[Wed Sep 30 00:59:58.122903 2026] [security2:error] [pid 186850:tid 187097] [client 4.196.65.241:27295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/gEeSoXdefault.php"] [unique_id "aryzbk5Phls--iYlcKgXXQAAAX8"]
[Wed Sep 30 00:59:58.134407 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.134651 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.149132 2026] [security2:error] [pid 186850:tid 186988] [client 20.214.191.94:23370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzbk5Phls--iYlcKgXYgAAARI"]
[Wed Sep 30 00:59:58.159660 2026] [security2:error] [pid 186850:tid 187101] [client 20.204.42.136:7116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/av.php"] [unique_id "aryzbk5Phls--iYlcKgXZAAAAYM"]
[Wed Sep 30 00:59:58.202165 2026] [security2:error] [pid 186850:tid 186993] [client 4.196.65.241:64133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wo.php"] [unique_id "aryzbk5Phls--iYlcKgXawAAARc"]
[Wed Sep 30 00:59:58.224945 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.225381 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.235366 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:58.235653 2026] [access_compat:error] [pid 186850:tid 186980] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:58.261247 2026] [security2:error] [pid 186850:tid 187068] [client 52.172.226.14:32070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/gf.php"] [unique_id "aryzbk5Phls--iYlcKgXcgAAAWI"]
[Wed Sep 30 00:59:58.314017 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.314296 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.340516 2026] [security2:error] [pid 186850:tid 186985] [client 52.231.69.245:34964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/anom.php"] [unique_id "aryzbk5Phls--iYlcKgXggAAAQ8"]
[Wed Sep 30 00:59:58.342420 2026] [security2:error] [pid 186850:tid 186950] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzbk5Phls--iYlcKgXgQABhGM"], referer: https://torquayfans.com/viewtopic.php?p=111209
[Wed Sep 30 00:59:58.342450 2026] [security2:error] [pid 186850:tid 186950] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzbk5Phls--iYlcKgXgQABhGM"], referer: https://torquayfans.com/viewtopic.php?p=111209
[Wed Sep 30 00:59:58.354952 2026] [security2:error] [pid 186850:tid 186902] [remote 2a03:2880:f814:11:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzbk5Phls--iYlcKgXhAABFTM"]
[Wed Sep 30 00:59:58.354984 2026] [security2:error] [pid 186850:tid 186902] [remote 2a03:2880:f814:11:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzbk5Phls--iYlcKgXhAABFTM"]
[Wed Sep 30 00:59:58.403781 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.404057 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.411167 2026] [security2:error] [pid 186850:tid 186984] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbk5Phls--iYlcKgXiAAAAQ4"]
[Wed Sep 30 00:59:58.463682 2026] [security2:error] [pid 186850:tid 187099] [client 20.219.2.60:19563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-act.php"] [unique_id "aryzbk5Phls--iYlcKgXjQAAAYE"]
[Wed Sep 30 00:59:58.496583 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.496851 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.510181 2026] [security2:error] [pid 186850:tid 187012] [client 103.172.210.103:52572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzbk5Phls--iYlcKgXkAAAASo"]
[Wed Sep 30 00:59:58.510303 2026] [security2:error] [pid 186850:tid 187012] [client 103.172.210.103:52572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzbk5Phls--iYlcKgXkAAAASo"]
[Wed Sep 30 00:59:58.531254 2026] [security2:error] [pid 186850:tid 186983] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbk5Phls--iYlcKgXjwAAAQ0"]
[Wed Sep 30 00:59:58.585958 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.586237 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.608816 2026] [security2:error] [pid 186850:tid 187014] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbk5Phls--iYlcKgXlQAAASw"]
[Wed Sep 30 00:59:58.628539 2026] [security2:error] [pid 186850:tid 186988] [client 52.231.69.245:35348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/plugins.php"] [unique_id "aryzbk5Phls--iYlcKgXmQAAARI"]
[Wed Sep 30 00:59:58.675813 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.676083 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.677023 2026] [security2:error] [pid 186850:tid 187083] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbk5Phls--iYlcKgXngAAAXE"]
[Wed Sep 30 00:59:58.679175 2026] [security2:error] [pid 186850:tid 187096] [client 20.204.42.136:7150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/dex.php"] [unique_id "aryzbk5Phls--iYlcKgXoQAAAX4"]
[Wed Sep 30 00:59:58.727020 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:58.727303 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:58.769467 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.769738 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.802513 2026] [security2:error] [pid 186850:tid 186981] [client 52.172.226.14:32086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/man.php"] [unique_id "aryzbk5Phls--iYlcKgXrQAAAQs"]
[Wed Sep 30 00:59:58.823065 2026] [security2:error] [pid 186850:tid 187095] [client 193.32.127.188:57750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzbk5Phls--iYlcKgXrwAAAX0"]
[Wed Sep 30 00:59:58.865292 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.865546 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:58.937917 2026] [security2:error] [pid 186850:tid 186992] [client 20.219.2.60:20084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/cu.php"] [unique_id "aryzbk5Phls--iYlcKgXtQAAARY"]
[Wed Sep 30 00:59:58.956271 2026] [security2:error] [pid 186850:tid 187069] [client 52.231.69.245:35001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/zlwvxiyp.php"] [unique_id "aryzbk5Phls--iYlcKgXtwAAAWM"]
[Wed Sep 30 00:59:58.961723 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:58.962197 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.048235 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.048511 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.137661 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.137953 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.211973 2026] [security2:error] [pid 186850:tid 187093] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzbk5Phls--iYlcKgXtAAAAXs"]
[Wed Sep 30 00:59:59.229692 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.229831 2026] [security2:error] [pid 186850:tid 187021] [client 52.231.69.245:35367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/1Be5IfrlWP.php"] [unique_id "aryzb05Phls--iYlcKgXxgAAATM"]
[Wed Sep 30 00:59:59.229971 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.250887 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:59:59.251159 2026] [access_compat:error] [pid 186850:tid 187055] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 00:59:59.262866 2026] [security2:error] [pid 186850:tid 187078] [client 20.204.42.136:7041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/chosen.php"] [unique_id "aryzb05Phls--iYlcKgXyAAAAWw"]
[Wed Sep 30 00:59:59.279524 2026] [security2:error] [pid 186850:tid 187104] [client 216.73.216.46:48696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzb05Phls--iYlcKgXyQAAAYY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NTY%3D
[Wed Sep 30 00:59:59.320083 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.320351 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.364322 2026] [security2:error] [pid 186850:tid 187080] [client 20.214.191.94:23248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzb05Phls--iYlcKgXzQAAAW4"]
[Wed Sep 30 00:59:59.412100 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.412369 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.417104 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:20093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/8.php"] [unique_id "aryzb05Phls--iYlcKgX0AAAAXk"]
[Wed Sep 30 00:59:59.469318 2026] [security2:error] [pid 186850:tid 186901] [remote 64.23.166.180:50018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "eai.ceg.mybluehost.me"] [uri "/.env"] [unique_id "aryzb05Phls--iYlcKgX0wABeDI"]
[Wed Sep 30 00:59:59.504539 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.504800 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.550971 2026] [security2:error] [pid 186850:tid 187087] [client 52.231.69.245:35561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "aryzb05Phls--iYlcKgX1wAAAXU"]
[Wed Sep 30 00:59:59.579163 2026] [security2:error] [pid 186850:tid 187001] [client 193.32.127.188:57853] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=http://:"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzb05Phls--iYlcKgX2gAAAR8"]
[Wed Sep 30 00:59:59.595069 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.595341 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.606102 2026] [security2:error] [pid 186850:tid 187014] [client 52.172.226.14:32743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/dev.php"] [unique_id "aryzb05Phls--iYlcKgX3wAAASw"]
[Wed Sep 30 00:59:59.628450 2026] [security2:error] [pid 186850:tid 186948] [remote 2a03:2880:f814:3c:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzb05Phls--iYlcKgX4QABImE"]
[Wed Sep 30 00:59:59.628497 2026] [security2:error] [pid 186850:tid 186948] [remote 2a03:2880:f814:3c:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzb05Phls--iYlcKgX4QABImE"]
[Wed Sep 30 00:59:59.649800 2026] [security2:error] [pid 186850:tid 186982] [client 20.211.90.37:47070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/faiy.php"] [unique_id "aryzb05Phls--iYlcKgX5AAAAQw"]
[Wed Sep 30 00:59:59.686396 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.686667 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.701301 2026] [security2:error] [pid 186850:tid 187003] [client 116.193.128.26:51771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzb05Phls--iYlcKgX6gAAASE"]
[Wed Sep 30 00:59:59.701421 2026] [security2:error] [pid 186850:tid 187003] [client 116.193.128.26:51771] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzb05Phls--iYlcKgX6gAAASE"]
[Wed Sep 30 00:59:59.749586 2026] [security2:error] [pid 186850:tid 187022] [client 20.204.42.136:7156] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/1.php"] [unique_id "aryzb05Phls--iYlcKgX7QAAATQ"]
[Wed Sep 30 00:59:59.749747 2026] [security2:error] [pid 186850:tid 187022] [client 20.204.42.136:7156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/1.php"] [unique_id "aryzb05Phls--iYlcKgX7QAAATQ"]
[Wed Sep 30 00:59:59.777855 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.778122 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.781583 2026] [security2:error] [pid 186850:tid 187075] [client 20.214.191.94:23259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzb05Phls--iYlcKgX8QAAAWk"]
[Wed Sep 30 00:59:59.798536 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:59.798859 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 00:59:59.815108 2026] [security2:error] [pid 186850:tid 186994] [client 103.159.192.142:53220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzb05Phls--iYlcKgX9QAAARg"]
[Wed Sep 30 00:59:59.815224 2026] [security2:error] [pid 186850:tid 186994] [client 103.159.192.142:53220] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzb05Phls--iYlcKgX9QAAARg"]
[Wed Sep 30 00:59:59.852301 2026] [security2:error] [pid 186850:tid 186992] [client 52.231.69.245:34998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin.php/c.php"] [unique_id "aryzb05Phls--iYlcKgX-AAAARY"]
[Wed Sep 30 00:59:59.866098 2026] [security2:error] [pid 186850:tid 187069] [client 20.194.30.107:46737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/mac.php"] [unique_id "aryzb05Phls--iYlcKgX-wAAAWM"]
[Wed Sep 30 00:59:59.868497 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.868759 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 00:59:59.951899 2026] [security2:error] [pid 186850:tid 186985] [client 20.219.2.60:19524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws60.php"] [unique_id "aryzb05Phls--iYlcKgX_QAAAQ8"]
[Wed Sep 30 00:59:59.960205 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 00:59:59.960471 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.052174 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.052439 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.089316 2026] [security2:error] [pid 186850:tid 186986] [client 152.59.165.7:58710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYAAAAARA"]
[Wed Sep 30 01:00:00.089419 2026] [security2:error] [pid 186850:tid 186986] [client 152.59.165.7:58710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYAAAAARA"]
[Wed Sep 30 01:00:00.127775 2026] [security2:error] [pid 186850:tid 187085] [client 45.138.12.32:19832] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.lvv.xqt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzcE5Phls--iYlcKgYAwAAAXM"]
[Wed Sep 30 01:00:00.140418 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.140679 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.231589 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.231853 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.252226 2026] [security2:error] [pid 186850:tid 187079] [client 52.231.69.245:34974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin.php/go.php"] [unique_id "aryzcE5Phls--iYlcKgYDAAAAW0"]
[Wed Sep 30 01:00:00.266062 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:00.266331 2026] [access_compat:error] [pid 186850:tid 186987] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:00.272070 2026] [security2:error] [pid 186850:tid 187076] [client 4.240.25.22:21542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "captpeacock.com"] [uri "/cabs.php"] [unique_id "aryzcE5Phls--iYlcKgYDwAAAWo"]
[Wed Sep 30 01:00:00.323320 2026] [security2:error] [pid 186850:tid 187008] [client 20.204.42.136:7135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/radio.php"] [unique_id "aryzcE5Phls--iYlcKgYEwAAASY"]
[Wed Sep 30 01:00:00.324796 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.325067 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.325731 2026] [security2:error] [pid 186850:tid 187023] [client 193.32.127.188:57948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "907"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzcE5Phls--iYlcKgYFAAAATU"]
[Wed Sep 30 01:00:00.335859 2026] [security2:error] [pid 186850:tid 187090] [client 20.211.90.37:47953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/file-mancvgertdxz.php"] [unique_id "aryzcE5Phls--iYlcKgYFQAAAXg"]
[Wed Sep 30 01:00:00.415558 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.415830 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.444278 2026] [security2:error] [pid 186850:tid 187001] [client 104.208.65.139:15001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/chosen.php"] [unique_id "aryzcE5Phls--iYlcKgYGgAAAR8"]
[Wed Sep 30 01:00:00.472312 2026] [security2:error] [pid 186850:tid 187024] [client 203.122.45.246:50884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYHQAAATY"]
[Wed Sep 30 01:00:00.472416 2026] [security2:error] [pid 186850:tid 187024] [client 203.122.45.246:50884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYHQAAATY"]
[Wed Sep 30 01:00:00.475092 2026] [security2:error] [pid 186850:tid 186982] [client 4.196.65.241:19073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cilus.php"] [unique_id "aryzcE5Phls--iYlcKgYHgAAAQw"]
[Wed Sep 30 01:00:00.488765 2026] [security2:error] [pid 186850:tid 187097] [client 20.219.2.60:19521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/vanda.php"] [unique_id "aryzcE5Phls--iYlcKgYHwAAAX8"]
[Wed Sep 30 01:00:00.506684 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.506840 2026] [security2:error] [pid 186850:tid 187062] [client 52.172.226.14:32090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ms-edit.php"] [unique_id "aryzcE5Phls--iYlcKgYIQAAAVw"]
[Wed Sep 30 01:00:00.506963 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.566125 2026] [security2:error] [pid 186850:tid 187017] [client 20.214.191.94:23380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/aa.php"] [unique_id "aryzcE5Phls--iYlcKgYJAAAAS8"]
[Wed Sep 30 01:00:00.600400 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.600841 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.675315 2026] [security2:error] [pid 186850:tid 187064] [client 52.231.69.245:34992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/groud3.php"] [unique_id "aryzcE5Phls--iYlcKgYLAAAAV4"]
[Wed Sep 30 01:00:00.688086 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.688403 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.693156 2026] [security2:error] [pid 186850:tid 186998] [client 202.179.95.79:63578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYLwAAARw"]
[Wed Sep 30 01:00:00.693239 2026] [security2:error] [pid 186850:tid 186998] [client 202.179.95.79:63578] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzcE5Phls--iYlcKgYLwAAARw"]
[Wed Sep 30 01:00:00.728984 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:00.729292 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:00.781767 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.782177 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.830282 2026] [security2:error] [pid 186850:tid 187060] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzcE5Phls--iYlcKgYFgAAAVo"]
[Wed Sep 30 01:00:00.869158 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.869423 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.884781 2026] [security2:error] [pid 186850:tid 187073] [client 20.204.42.136:7040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/blacks.php"] [unique_id "aryzcE5Phls--iYlcKgYOAAAAWc"]
[Wed Sep 30 01:00:00.960573 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:00.960843 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:00.966642 2026] [security2:error] [pid 186850:tid 187052] [client 20.219.2.60:20065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/domains.php"] [unique_id "aryzcE5Phls--iYlcKgYQAAAAVI"]
[Wed Sep 30 01:00:01.005435 2026] [security2:error] [pid 186850:tid 187050] [client 20.211.90.37:47997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/myglu.php"] [unique_id "aryzcU5Phls--iYlcKgYRgAAAVA"]
[Wed Sep 30 01:00:01.018292 2026] [ssl:error] [pid 186850:tid 187061] [client 216.25.124.26:4985] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.pyt.pinnacletrainingsystems.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:00:01.034008 2026] [security2:error] [pid 186850:tid 187070] [client 74.7.175.160:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "smartsafetycenter.com"] [uri "/index.php"] [unique_id "aryzb05Phls--iYlcKgX5wAAAWQ"]
[Wed Sep 30 01:00:01.046990 2026] [security2:error] [pid 186850:tid 187074] [client 106.214.2.47:27857] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYSAAAAWg"]
[Wed Sep 30 01:00:01.047104 2026] [security2:error] [pid 186850:tid 187074] [client 106.214.2.47:27857] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYSAAAAWg"]
[Wed Sep 30 01:00:01.048350 2026] [security2:error] [pid 186850:tid 187065] [client 193.32.127.188:58046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzcU5Phls--iYlcKgYSgAAAV8"]
[Wed Sep 30 01:00:01.051572 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.051843 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.087795 2026] [security2:error] [pid 186850:tid 187033] [client 74.7.175.160:45456] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "smartsafetycenter.com"] [uri "/robots.txt"] [unique_id "aryzb05Phls--iYlcKgX4gABP38"]
[Wed Sep 30 01:00:01.139037 2026] [security2:error] [pid 186850:tid 186922] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzcU5Phls--iYlcKgYVQABd0c"]
[Wed Sep 30 01:00:01.139225 2026] [security2:error] [pid 186850:tid 187089] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzcU5Phls--iYlcKgYVQABd0c"]
[Wed Sep 30 01:00:01.141667 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.141940 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.170896 2026] [security2:error] [pid 186850:tid 187097] [client 52.231.69.245:35535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gaxby.php"] [unique_id "aryzcU5Phls--iYlcKgYWQAAAX8"]
[Wed Sep 30 01:00:01.234119 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.234395 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:35204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.259560 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:01.259866 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:01.277428 2026] [security2:error] [pid 186850:tid 187031] [client 43.227.131.37:51945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYZAAAAT0"]
[Wed Sep 30 01:00:01.277541 2026] [security2:error] [pid 186850:tid 187031] [client 43.227.131.37:51945] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYZAAAAT0"]
[Wed Sep 30 01:00:01.339659 2026] [security2:error] [pid 186850:tid 186998] [client 52.172.226.14:32723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/txets.php"] [unique_id "aryzcU5Phls--iYlcKgYaAAAARw"]
[Wed Sep 30 01:00:01.377533 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.377798 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.379825 2026] [security2:error] [pid 186850:tid 187048] [client 20.204.42.136:7047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/run.php"] [unique_id "aryzcU5Phls--iYlcKgYbAAAAU4"]
[Wed Sep 30 01:00:01.385019 2026] [security2:error] [pid 186850:tid 187081] [client 72.255.10.32:54174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYbQAAAW8"]
[Wed Sep 30 01:00:01.385120 2026] [security2:error] [pid 186850:tid 187081] [client 72.255.10.32:54174] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYbQAAAW8"]
[Wed Sep 30 01:00:01.427302 2026] [security2:error] [pid 186850:tid 187053] [client 20.214.191.94:23362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/z70.php"] [unique_id "aryzcU5Phls--iYlcKgYbwAAAVM"]
[Wed Sep 30 01:00:01.432121 2026] [security2:error] [pid 186850:tid 187040] [client 20.219.2.60:20038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/144.php"] [unique_id "aryzcU5Phls--iYlcKgYcAAAAUY"]
[Wed Sep 30 01:00:01.441970 2026] [security2:error] [pid 186850:tid 187086] [client 43.104.4.186:21615] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "aryzcU5Phls--iYlcKgYcQAAAXQ"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 01:00:01.468466 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.468731 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.469169 2026] [security2:error] [pid 186850:tid 187095] [client 52.231.69.245:35571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/dh9u7.php"] [unique_id "aryzcU5Phls--iYlcKgYcwAAAX0"]
[Wed Sep 30 01:00:01.486128 2026] [security2:error] [pid 186850:tid 187072] [client 74.7.175.160:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.smartsafetycenter.com"] [uri "/index.php"] [unique_id "aryzcU5Phls--iYlcKgYZgAAAWY"], referer: https://smartsafetycenter.com/robots.txt
[Wed Sep 30 01:00:01.493352 2026] [security2:error] [pid 186850:tid 187014] [client 74.7.175.160:35578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.smartsafetycenter.com"] [uri "/robots.txt"] [unique_id "aryzcU5Phls--iYlcKgYXgABLDQ"], referer: https://smartsafetycenter.com/robots.txt
[Wed Sep 30 01:00:01.618841 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.619292 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.709077 2026] [security2:error] [pid 186850:tid 187047] [client 74.7.241.157:50846] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.smartsafetycenter.com"] [uri "/robots.txt"] [unique_id "aryzcU5Phls--iYlcKgYhQAAAU0"]
[Wed Sep 30 01:00:01.740269 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:01.740687 2026] [access_compat:error] [pid 186850:tid 187080] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:01.762272 2026] [security2:error] [pid 186850:tid 187006] [client 103.168.67.253:20224] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/signup"] [unique_id "aryzcE5Phls--iYlcKgYPwAAASQ"]
[Wed Sep 30 01:00:01.775513 2026] [security2:error] [pid 186850:tid 187066] [client 161.123.99.126:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzcU5Phls--iYlcKgYiwAAAWA"]
[Wed Sep 30 01:00:01.778344 2026] [security2:error] [pid 186850:tid 187012] [client 52.231.69.245:34989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/yvnqcuic.php"] [unique_id "aryzcU5Phls--iYlcKgYjgAAASo"]
[Wed Sep 30 01:00:01.784791 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.785225 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.785251 2026] [security2:error] [pid 186850:tid 187000] [client 193.32.127.188:58134] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzcU5Phls--iYlcKgYjwAAAR4"]
[Wed Sep 30 01:00:01.829639 2026] [security2:error] [pid 186850:tid 187002] [client 52.172.226.14:32096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/hao.php"] [unique_id "aryzcU5Phls--iYlcKgYkgAAASA"]
[Wed Sep 30 01:00:01.874440 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.874931 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.888415 2026] [security2:error] [pid 186850:tid 186983] [client 20.219.2.60:20074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/asd.php"] [unique_id "aryzcU5Phls--iYlcKgYmAAAAQ0"]
[Wed Sep 30 01:00:01.896282 2026] [security2:error] [pid 186850:tid 187044] [client 20.194.30.107:34743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/11.php"] [unique_id "aryzcU5Phls--iYlcKgYmQAAAUo"]
[Wed Sep 30 01:00:01.917834 2026] [security2:error] [pid 186850:tid 186911] [remote 57.141.14.107:64714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "aryzcU5Phls--iYlcKgYlwABPTw"]
[Wed Sep 30 01:00:01.925527 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.925874 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:01.956767 2026] [security2:error] [pid 186850:tid 187101] [client 20.204.42.136:7051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/vpn.php"] [unique_id "aryzcU5Phls--iYlcKgYmwAAAYM"]
[Wed Sep 30 01:00:01.966470 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:01.966901 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.025086 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.025358 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.056371 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.056800 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.059781 2026] [security2:error] [pid 186850:tid 187062] [client 74.7.241.157:39392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.smartsafetycenter.com"] [uri "/robots.txt"] [unique_id "aryzcU5Phls--iYlcKgYkwABXEE"], referer: http://www.smartsafetycenter.com/robots.txt
[Wed Sep 30 01:00:02.080459 2026] [security2:error] [pid 186850:tid 187021] [client 49.205.105.16:14864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzck5Phls--iYlcKgYpgAAATM"]
[Wed Sep 30 01:00:02.080594 2026] [security2:error] [pid 186850:tid 187021] [client 49.205.105.16:14864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzck5Phls--iYlcKgYpgAAATM"]
[Wed Sep 30 01:00:02.116820 2026] [security2:error] [pid 186850:tid 187056] [client 52.231.69.245:35546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/koiy.php"] [unique_id "aryzck5Phls--iYlcKgYqQAAAVY"]
[Wed Sep 30 01:00:02.133923 2026] [security2:error] [pid 186850:tid 186991] [client 20.214.191.94:23255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/f35.php"] [unique_id "aryzck5Phls--iYlcKgYqgAAARU"]
[Wed Sep 30 01:00:02.152819 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.153172 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.190124 2026] [security2:error] [pid 186850:tid 187068] [client 45.138.12.32:19808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yzb.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzck5Phls--iYlcKgYrwAAAWI"]
[Wed Sep 30 01:00:02.245296 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.245580 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.270841 2026] [security2:error] [pid 186850:tid 186984] [client 20.211.90.37:48388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/bnmtp.php"] [unique_id "aryzck5Phls--iYlcKgYsgAAAQ4"]
[Wed Sep 30 01:00:02.293620 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:02.294052 2026] [access_compat:error] [pid 186850:tid 186992] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:02.308903 2026] [security2:error] [pid 186850:tid 187104] [client 116.72.182.19:54456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzck5Phls--iYlcKgYtgAAAYY"]
[Wed Sep 30 01:00:02.309024 2026] [security2:error] [pid 186850:tid 187104] [client 116.72.182.19:54456] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzck5Phls--iYlcKgYtgAAAYY"]
[Wed Sep 30 01:00:02.314531 2026] [security2:error] [pid 186850:tid 187105] [client 52.172.226.14:32724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/33.php"] [unique_id "aryzck5Phls--iYlcKgYuQAAAYc"]
[Wed Sep 30 01:00:02.329298 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.329575 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.339571 2026] [security2:error] [pid 186850:tid 186869] [remote 141.98.140.66:25612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.140.98.141.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.shortstaygem.co.uk"] [uri "/wp-login.php"] [unique_id "aryzck5Phls--iYlcKgYtwABfBI"], referer: https://mail.shortstaygem.co.uk/wp-login.php
[Wed Sep 30 01:00:02.352457 2026] [security2:error] [pid 186850:tid 186986] [client 20.219.2.60:20078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/zc-104.php"] [unique_id "aryzck5Phls--iYlcKgYxAAAARA"]
[Wed Sep 30 01:00:02.406540 2026] [security2:error] [pid 186850:tid 186999] [client 52.231.69.245:35530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wordfence-waf.php"] [unique_id "aryzck5Phls--iYlcKgYygAAAR0"]
[Wed Sep 30 01:00:02.419792 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.420073 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.446400 2026] [security2:error] [pid 186850:tid 187097] [client 91.233.109.151:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzck5Phls--iYlcKgY0AAAAX8"]
[Wed Sep 30 01:00:02.511933 2026] [security2:error] [pid 186850:tid 187017] [client 20.204.42.136:7045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/alfa.php"] [unique_id "aryzck5Phls--iYlcKgY1AAAAS8"]
[Wed Sep 30 01:00:02.513026 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.513436 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.517050 2026] [lsapi:warn] [pid 186850:tid 187047] [client 173.254.29.157:27712] [host linkingqr.cambodiaskills.org] Backend log: PHP Warning:  Undefined property: stdClass::$auto_delete_unconfirmed_users in /home1/mlvtdsci/public_html/linkingqr-cambodiaskills-org/app/controllers/Cron.php on line 155\n
[Wed Sep 30 01:00:02.527589 2026] [security2:error] [pid 186850:tid 187002] [client 20.214.191.94:23232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/adminfuns.php"] [unique_id "aryzck5Phls--iYlcKgY1gAAASA"]
[Wed Sep 30 01:00:02.544307 2026] [security2:error] [pid 186850:tid 187075] [client 4.196.65.241:27291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ebkid.php"] [unique_id "aryzck5Phls--iYlcKgY2AAAAWk"]
[Wed Sep 30 01:00:02.601398 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.601674 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.695053 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.695510 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.785603 2026] [security2:error] [pid 186850:tid 187039] [client 52.172.226.14:32742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/adminner.php"] [unique_id "aryzck5Phls--iYlcKgY7QAAAUU"]
[Wed Sep 30 01:00:02.786085 2026] [security2:error] [pid 186850:tid 186932] [remote 57.141.14.94:43326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-includes/wlwmanifest.xml"] [unique_id "aryzck5Phls--iYlcKgY7AABfVE"]
[Wed Sep 30 01:00:02.787090 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.787539 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.817234 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:02.817676 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:02.840448 2026] [security2:error] [pid 186850:tid 186992] [client 20.219.2.60:19474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/rzki.php"] [unique_id "aryzck5Phls--iYlcKgY8AAAARY"]
[Wed Sep 30 01:00:02.874736 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.875178 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:02.880912 2026] [security2:error] [pid 186850:tid 187105] [client 52.231.69.245:34997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp5.php"] [unique_id "aryzck5Phls--iYlcKgY9AAAAYc"]
[Wed Sep 30 01:00:02.908434 2026] [security2:error] [pid 186850:tid 187048] [client 193.32.127.188:58247] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "917"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzck5Phls--iYlcKgY9QAAAU4"]
[Wed Sep 30 01:00:02.971670 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:02.972110 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:16289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.022013 2026] [security2:error] [pid 186850:tid 187097] [client 20.204.42.136:7155] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wp-content/uploads/"] [unique_id "aryzc05Phls--iYlcKgY-wAAAX8"]
[Wed Sep 30 01:00:03.060762 2026] [security2:error] [pid 186850:tid 187102] [client 20.70.173.30:48744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-the.php"] [unique_id "aryzc05Phls--iYlcKgY_gAAAYQ"]
[Wed Sep 30 01:00:03.063798 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.064248 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.111095 2026] [security2:error] [pid 186850:tid 187047] [client 179.0.49.51:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzc05Phls--iYlcKgZAgAAAU0"]
[Wed Sep 30 01:00:03.149240 2026] [security2:error] [pid 186850:tid 186983] [client 20.214.191.94:23235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/av.php"] [unique_id "aryzc05Phls--iYlcKgZCAAAAQ0"]
[Wed Sep 30 01:00:03.151213 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.151646 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.194996 2026] [security2:error] [pid 186850:tid 186998] [client 52.231.69.245:35368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/em.php"] [unique_id "aryzc05Phls--iYlcKgZDAAAARw"]
[Wed Sep 30 01:00:03.267579 2026] [security2:error] [pid 186850:tid 186994] [client 4.196.65.241:19500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/myglu.php"] [unique_id "aryzc05Phls--iYlcKgZEAAAARg"]
[Wed Sep 30 01:00:03.269572 2026] [security2:error] [pid 186850:tid 187092] [client 20.211.90.37:47975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/zeta.php"] [unique_id "aryzc05Phls--iYlcKgZEQAAAXo"]
[Wed Sep 30 01:00:03.279827 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.280259 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.285806 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:03.286268 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:03.296538 2026] [security2:error] [pid 186850:tid 187003] [client 4.240.25.22:38777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzc05Phls--iYlcKgZFAAAASE"]
[Wed Sep 30 01:00:03.334883 2026] [security2:error] [pid 186850:tid 187056] [client 20.219.2.60:19583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/xsas.php"] [unique_id "aryzc05Phls--iYlcKgZGAAAAVY"]
[Wed Sep 30 01:00:03.335557 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.335998 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.355695 2026] [security2:error] [pid 186850:tid 186989] [client 52.172.226.14:32101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/thoms.php"] [unique_id "aryzc05Phls--iYlcKgZGQAAARM"]
[Wed Sep 30 01:00:03.389481 2026] [security2:error] [pid 186850:tid 186996] [client 216.73.216.46:16289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzc05Phls--iYlcKgZGgAAARo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC94ODY%3D
[Wed Sep 30 01:00:03.421889 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.422171 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.453353 2026] [security2:error] [pid 186850:tid 187069] [client 105.112.178.79:38330] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.premiopro.com"] [uri "/.env"] [unique_id "aryzc05Phls--iYlcKgZHwAAAWM"]
[Wed Sep 30 01:00:03.477235 2026] [security2:error] [pid 186850:tid 186986] [client 52.231.69.245:35577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/hp.php"] [unique_id "aryzc05Phls--iYlcKgZIAAAARA"]
[Wed Sep 30 01:00:03.514344 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.514771 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.531346 2026] [security2:error] [pid 186850:tid 187066] [client 116.197.133.25:51678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzc05Phls--iYlcKgZJQAAAWA"]
[Wed Sep 30 01:00:03.531510 2026] [security2:error] [pid 186850:tid 187066] [client 116.197.133.25:51678] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzc05Phls--iYlcKgZJQAAAWA"]
[Wed Sep 30 01:00:03.531650 2026] [security2:error] [pid 186850:tid 187086] [client 20.214.191.94:23288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/dex.php"] [unique_id "aryzc05Phls--iYlcKgZJAAAAXQ"]
[Wed Sep 30 01:00:03.559360 2026] [security2:error] [pid 186850:tid 187099] [client 20.204.42.136:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/w.php"] [unique_id "aryzc05Phls--iYlcKgZKAAAAYE"]
[Wed Sep 30 01:00:03.605118 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.605403 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.607944 2026] [security2:error] [pid 186850:tid 186877] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzc05Phls--iYlcKgZKgABcRo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=345&t=15949
[Wed Sep 30 01:00:03.607979 2026] [security2:error] [pid 186850:tid 186877] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzc05Phls--iYlcKgZKgABcRo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=345&t=15949
[Wed Sep 30 01:00:03.615618 2026] [security2:error] [pid 186850:tid 187022] [client 20.211.90.37:8321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "aryzc05Phls--iYlcKgZKwAAATQ"]
[Wed Sep 30 01:00:03.645794 2026] [security2:error] [pid 186850:tid 186982] [client 193.32.127.188:58329] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzc05Phls--iYlcKgZLAAAAQw"]
[Wed Sep 30 01:00:03.699077 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.699526 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.742901 2026] [security2:error] [pid 186850:tid 187038] [client 52.231.69.245:35360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wpuse.php"] [unique_id "aryzc05Phls--iYlcKgZNAAAAUQ"]
[Wed Sep 30 01:00:03.754188 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:03.754523 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:03.772524 2026] [security2:error] [pid 186850:tid 187082] [client 172.232.180.137:50136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aryzc05Phls--iYlcKgZOAAAAXA"], referer: www.google.com
[Wed Sep 30 01:00:03.777132 2026] [security2:error] [pid 186850:tid 187001] [client 172.232.180.137:50144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-plain.php"] [unique_id "aryzc05Phls--iYlcKgZOgAAAR8"], referer: www.google.com
[Wed Sep 30 01:00:03.782916 2026] [access_compat:error] [pid 186850:tid 187107] [client 172.232.180.137:50137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.783190 2026] [access_compat:error] [pid 186850:tid 187107] [client 172.232.180.137:50137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.790857 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.791301 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.799355 2026] [security2:error] [pid 186850:tid 187040] [client 20.219.2.60:20086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/d12.php"] [unique_id "aryzc05Phls--iYlcKgZPAAAAUY"]
[Wed Sep 30 01:00:03.823725 2026] [security2:error] [pid 186850:tid 187103] [client 52.172.226.14:32707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/a.php"] [unique_id "aryzc05Phls--iYlcKgZPQAAAYU"]
[Wed Sep 30 01:00:03.833267 2026] [security2:error] [pid 186850:tid 186993] [client 104.208.65.139:14313] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "networkbuildkits.sa"] [uri "/1.php"] [unique_id "aryzc05Phls--iYlcKgZPwAAARc"]
[Wed Sep 30 01:00:03.833361 2026] [security2:error] [pid 186850:tid 186993] [client 104.208.65.139:14313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/1.php"] [unique_id "aryzc05Phls--iYlcKgZPwAAARc"]
[Wed Sep 30 01:00:03.840432 2026] [security2:error] [pid 186850:tid 187030] [client 45.138.12.32:33374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yik.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzc05Phls--iYlcKgZQgAAATw"]
[Wed Sep 30 01:00:03.876537 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.876792 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.904688 2026] [security2:error] [pid 186850:tid 186872] [remote 111.225.148.156:43890] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/the-november-man-review/"] [unique_id "aryzc05Phls--iYlcKgZSAABgxU"]
[Wed Sep 30 01:00:03.969313 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:03.969584 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:03.974830 2026] [security2:error] [pid 186850:tid 187073] [client 172.232.180.137:50137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "aryzc05Phls--iYlcKgZTgAAAWc"]
[Wed Sep 30 01:00:04.002844 2026] [security2:error] [pid 186850:tid 187105] [client 20.211.90.37:47051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "aryzdE5Phls--iYlcKgZUAAAAYc"]
[Wed Sep 30 01:00:04.011859 2026] [security2:error] [pid 186850:tid 187007] [client 52.231.69.245:35568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/file18x.php"] [unique_id "aryzdE5Phls--iYlcKgZUQAAASU"]
[Wed Sep 30 01:00:04.029202 2026] [security2:error] [pid 186850:tid 187069] [client 20.204.42.136:7046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzdE5Phls--iYlcKgZUwAAAWM"]
[Wed Sep 30 01:00:04.060044 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.060381 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.063797 2026] [security2:error] [pid 186850:tid 187071] [client 45.138.12.32:33414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yzb.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzdE5Phls--iYlcKgZVQAAAWU"]
[Wed Sep 30 01:00:04.111862 2026] [security2:error] [pid 186850:tid 187000] [client 20.70.173.30:42536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/baba.php"] [unique_id "aryzdE5Phls--iYlcKgZWQAAAR4"]
[Wed Sep 30 01:00:04.127992 2026] [security2:error] [pid 186850:tid 187006] [client 20.214.191.94:23285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/chosen.php"] [unique_id "aryzdE5Phls--iYlcKgZXAAAASQ"]
[Wed Sep 30 01:00:04.145273 2026] [security2:error] [pid 186850:tid 187078] [client 45.224.83.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzdE5Phls--iYlcKgZXQAAAWw"]
[Wed Sep 30 01:00:04.151333 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.151634 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.229447 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:04.229740 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:04.241736 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.242001 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.284065 2026] [security2:error] [pid 186850:tid 187050] [client 20.219.2.60:19581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/okxh.php"] [unique_id "aryzdE5Phls--iYlcKgZaAAAAVA"]
[Wed Sep 30 01:00:04.299931 2026] [security2:error] [pid 186850:tid 187052] [client 52.231.69.245:34993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/123viva.php"] [unique_id "aryzdE5Phls--iYlcKgZaQAAAVI"]
[Wed Sep 30 01:00:04.322734 2026] [security2:error] [pid 186850:tid 187100] [client 52.172.226.14:32734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/b8.php"] [unique_id "aryzdE5Phls--iYlcKgZagAAAYI"]
[Wed Sep 30 01:00:04.333882 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.334127 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.351721 2026] [security2:error] [pid 186850:tid 187018] [client 8.222.155.68:57296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.155.222.8.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cooperart.net"] [uri "/index.php"] [unique_id "aryzdE5Phls--iYlcKgZbwAAATA"]
[Wed Sep 30 01:00:04.357699 2026] [security2:error] [pid 186850:tid 187009] [client 93.152.53.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzdE5Phls--iYlcKgZcQAAASc"]
[Wed Sep 30 01:00:04.381270 2026] [security2:error] [pid 186850:tid 186991] [client 193.32.127.188:58421] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=http://:"] [hostname "rhodaalbert.com"] [uri "/"] [unique_id "aryzdE5Phls--iYlcKgZcgAAARU"]
[Wed Sep 30 01:00:04.423347 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.423629 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.517346 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.517642 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.532982 2026] [security2:error] [pid 186850:tid 187035] [client 213.136.69.135:53409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-plugin-dependencies.php"] [unique_id "aryzdE5Phls--iYlcKgZdwAAAUE"], referer: binance.com
[Wed Sep 30 01:00:04.564166 2026] [security2:error] [pid 186850:tid 187014] [client 20.204.42.136:7053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/robot.php"] [unique_id "aryzdE5Phls--iYlcKgZeQAAASw"]
[Wed Sep 30 01:00:04.586856 2026] [security2:error] [pid 186850:tid 187107] [client 52.231.69.245:35580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/Components.update.php"] [unique_id "aryzdE5Phls--iYlcKgZfAAAAYk"]
[Wed Sep 30 01:00:04.608817 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.609125 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.617083 2026] [security2:error] [pid 186850:tid 187068] [client 20.211.90.37:48405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "aryzdE5Phls--iYlcKgZfwAAAWI"]
[Wed Sep 30 01:00:04.698591 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.698913 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.770835 2026] [security2:error] [pid 186850:tid 187061] [client 20.219.2.60:20080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/55b76.php"] [unique_id "aryzdE5Phls--iYlcKgZjAAAAVs"]
[Wed Sep 30 01:00:04.790923 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.791309 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.796568 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.191.94:23287] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.rashed-office.com"] [uri "/1.php"] [unique_id "aryzdE5Phls--iYlcKgZjwAAAWE"]
[Wed Sep 30 01:00:04.796665 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.191.94:23287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/1.php"] [unique_id "aryzdE5Phls--iYlcKgZjwAAAWE"]
[Wed Sep 30 01:00:04.819816 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:04.820269 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:04.823323 2026] [security2:error] [pid 186850:tid 187000] [client 20.194.30.107:64721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/edit.php"] [unique_id "aryzdE5Phls--iYlcKgZmAAAAR4"]
[Wed Sep 30 01:00:04.882773 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.883045 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:04.900529 2026] [autoindex:error] [pid 186850:tid 186980] [client 212.156.70.154:18198] AH01276: Cannot serve directory /home4/umzmhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:04.918456 2026] [security2:error] [pid 186850:tid 187102] [client 52.172.226.14:32551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/sid.php"] [unique_id "aryzdE5Phls--iYlcKgZoQAAAYQ"]
[Wed Sep 30 01:00:04.970421 2026] [security2:error] [pid 186850:tid 187034] [client 45.156.62.96:59776] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzdE5Phls--iYlcKgZowAAAUA"]
[Wed Sep 30 01:00:04.970554 2026] [security2:error] [pid 186850:tid 187034] [client 45.156.62.96:59776] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzdE5Phls--iYlcKgZowAAAUA"]
[Wed Sep 30 01:00:04.971922 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:04.972178 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.063241 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.063510 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:32663] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.132773 2026] [security2:error] [pid 186850:tid 187024] [client 20.214.191.94:23266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/radio.php"] [unique_id "aryzdU5Phls--iYlcKgZrQAAATY"]
[Wed Sep 30 01:00:05.157985 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.158439 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.162442 2026] [security2:error] [pid 186850:tid 187012] [client 20.204.42.136:7095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/sss.php"] [unique_id "aryzdU5Phls--iYlcKgZrwAAASo"]
[Wed Sep 30 01:00:05.246211 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.246494 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.247132 2026] [security2:error] [pid 186850:tid 186991] [client 20.219.2.60:19575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tt.php"] [unique_id "aryzdU5Phls--iYlcKgZtQAAARU"]
[Wed Sep 30 01:00:05.287942 2026] [security2:error] [pid 186850:tid 187076] [client 217.197.103.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzdU5Phls--iYlcKgZuQAAAWo"]
[Wed Sep 30 01:00:05.289187 2026] [security2:error] [pid 186850:tid 187059] [client 103.168.67.253:42156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/register"] [unique_id "aryzdU5Phls--iYlcKgZuAAAAVk"]
[Wed Sep 30 01:00:05.318936 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:05.319267 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:05.332777 2026] [security2:error] [pid 186850:tid 187013] [client 20.211.90.37:8330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/flamini.php"] [unique_id "aryzdU5Phls--iYlcKgZvQAAASs"]
[Wed Sep 30 01:00:05.336157 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.336420 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.340645 2026] [security2:error] [pid 186850:tid 187059] [client 103.168.67.253:42156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "glorymfb.com"] [uri "/register"] [unique_id "aryzdU5Phls--iYlcKgZuAAAAVk"]
[Wed Sep 30 01:00:05.387275 2026] [security2:error] [pid 186850:tid 187068] [client 52.172.226.14:32124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/bro.php"] [unique_id "aryzdU5Phls--iYlcKgZwQAAAWI"]
[Wed Sep 30 01:00:05.429177 2026] [security2:error] [pid 186850:tid 186992] [client 20.214.191.94:23408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/blacks.php"] [unique_id "aryzdU5Phls--iYlcKgZxAAAARY"]
[Wed Sep 30 01:00:05.430031 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.430335 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.482189 2026] [security2:error] [pid 186850:tid 187025] [client 216.73.216.46:32663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzdU5Phls--iYlcKgZyAAAATc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjAxL25vZGUw
[Wed Sep 30 01:00:05.520291 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.520721 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.610459 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.610707 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.677488 2026] [security2:error] [pid 186850:tid 187086] [client 20.204.42.136:7110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/or.php"] [unique_id "aryzdU5Phls--iYlcKgZ1gAAAXQ"]
[Wed Sep 30 01:00:05.698237 2026] [security2:error] [pid 186850:tid 186986] [client 20.219.2.60:20069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/maul.php"] [unique_id "aryzdU5Phls--iYlcKgZ2wAAARA"]
[Wed Sep 30 01:00:05.701383 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.701788 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.790979 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.791302 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.856639 2026] [security2:error] [pid 186850:tid 187014] [client 105.112.178.79:38332] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tke.sxn.mybluehost.me"] [uri "/.env"] [unique_id "aryzdU5Phls--iYlcKgZ7gAAASw"]
[Wed Sep 30 01:00:05.861219 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:05.861568 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:05.867368 2026] [security2:error] [pid 186850:tid 186999] [client 103.159.192.142:53352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzdU5Phls--iYlcKgZ7wAAAR0"]
[Wed Sep 30 01:00:05.867495 2026] [security2:error] [pid 186850:tid 186999] [client 103.159.192.142:53352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzdU5Phls--iYlcKgZ7wAAAR0"]
[Wed Sep 30 01:00:05.882588 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.882865 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.916851 2026] [security2:error] [pid 186850:tid 187092] [client 52.172.226.14:32537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/xwpg.php"] [unique_id "aryzdU5Phls--iYlcKgZ8gAAAXo"]
[Wed Sep 30 01:00:05.940127 2026] [security2:error] [pid 186850:tid 187021] [client 105.112.178.79:38333] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fef.pcx.mybluehost.me"] [uri "/__ss_probe_dc6c895e2aa26d1c5f6abfcd44e2ff12__"] [unique_id "aryzdU5Phls--iYlcKgZ8wAAATM"]
[Wed Sep 30 01:00:05.974729 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:05.975027 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:05.987598 2026] [security2:error] [pid 186850:tid 187051] [client 104.208.65.139:41084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/radio.php"] [unique_id "aryzdU5Phls--iYlcKgZ9gAAAVE"]
[Wed Sep 30 01:00:06.047564 2026] [security2:error] [pid 186850:tid 187040] [client 4.240.25.22:43790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wsd.php"] [unique_id "aryzdk5Phls--iYlcKgZ-QAAAUY"]
[Wed Sep 30 01:00:06.064292 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.064560 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.154723 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.154999 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.188369 2026] [security2:error] [pid 186850:tid 187104] [client 223.181.60.167:4702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaBAAAAYY"]
[Wed Sep 30 01:00:06.188481 2026] [security2:error] [pid 186850:tid 187104] [client 223.181.60.167:4702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaBAAAAYY"]
[Wed Sep 30 01:00:06.246472 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.246731 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.258918 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.191.94:23374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/alfa.php"] [unique_id "aryzdk5Phls--iYlcKgaCwAAAWE"]
[Wed Sep 30 01:00:06.272622 2026] [security2:error] [pid 186850:tid 187094] [client 20.204.42.136:7158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/b8.php"] [unique_id "aryzdk5Phls--iYlcKgaDQAAAXw"]
[Wed Sep 30 01:00:06.276889 2026] [security2:error] [pid 186850:tid 187045] [client 37.41.16.35:55829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaDgAAAUs"]
[Wed Sep 30 01:00:06.277040 2026] [security2:error] [pid 186850:tid 187045] [client 37.41.16.35:55829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaDgAAAUs"]
[Wed Sep 30 01:00:06.337427 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.337690 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.351015 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:06.351309 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:06.375931 2026] [security2:error] [pid 186850:tid 187083] [client 223.235.102.107:1202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaFAAAAXE"]
[Wed Sep 30 01:00:06.376066 2026] [security2:error] [pid 186850:tid 187083] [client 223.235.102.107:1202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaFAAAAXE"]
[Wed Sep 30 01:00:06.433459 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.433890 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:32617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.506243 2026] [security2:error] [pid 186850:tid 187099] [client 20.211.90.37:47044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/myglu.php"] [unique_id "aryzdk5Phls--iYlcKgaGQAAAYE"]
[Wed Sep 30 01:00:06.525609 2026] [security2:error] [pid 186850:tid 187066] [client 4.196.65.241:64140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ot.php"] [unique_id "aryzdk5Phls--iYlcKgaGwAAAWA"]
[Wed Sep 30 01:00:06.569628 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.569901 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.616244 2026] [security2:error] [pid 186850:tid 187034] [client 200.124.65.162:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzdk5Phls--iYlcKgaIgAAAUA"]
[Wed Sep 30 01:00:06.663777 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.664077 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.701586 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.701886 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.751428 2026] [security2:error] [pid 186850:tid 187044] [client 182.69.182.151:31143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaKgAAAUo"]
[Wed Sep 30 01:00:06.751527 2026] [security2:error] [pid 186850:tid 187044] [client 182.69.182.151:31143] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaKgAAAUo"]
[Wed Sep 30 01:00:06.754229 2026] [security2:error] [pid 186850:tid 187050] [client 20.214.191.94:23233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzdk5Phls--iYlcKgaKwAAAVA"]
[Wed Sep 30 01:00:06.772206 2026] [security2:error] [pid 186850:tid 187040] [client 20.204.42.136:6989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/xex.php"] [unique_id "aryzdk5Phls--iYlcKgaLAAAAUY"]
[Wed Sep 30 01:00:06.772388 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:32081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/radio.php"] [unique_id "aryzdk5Phls--iYlcKgaLQAAAWw"]
[Wed Sep 30 01:00:06.795130 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.795427 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.798969 2026] [security2:error] [pid 186850:tid 187105] [client 49.36.41.37:57760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaLwAAAYc"]
[Wed Sep 30 01:00:06.800617 2026] [security2:error] [pid 186850:tid 187105] [client 49.36.41.37:57760] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzdk5Phls--iYlcKgaLwAAAYc"]
[Wed Sep 30 01:00:06.838358 2026] [security2:error] [pid 186850:tid 187007] [client 216.73.216.46:32617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzdk5Phls--iYlcKgaMQAAASU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDMvc3Vic3lzdGVtL2RldmljZXM%3D
[Wed Sep 30 01:00:06.884828 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.885130 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:06.890620 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:06.890890 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:06.974939 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:06.975229 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.237423 2026] [security2:error] [pid 186850:tid 186983] [client 20.211.90.37:48398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/alfa.php"] [unique_id "aryzd05Phls--iYlcKgaSQAAAQ0"]
[Wed Sep 30 01:00:07.258838 2026] [security2:error] [pid 186850:tid 187074] [client 52.172.226.14:32094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ccc.php"] [unique_id "aryzd05Phls--iYlcKgaSgAAAWg"]
[Wed Sep 30 01:00:07.283236 2026] [security2:error] [pid 186850:tid 187065] [client 20.214.191.94:23386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/b8.php"] [unique_id "aryzd05Phls--iYlcKgaSwAAAV8"]
[Wed Sep 30 01:00:07.324104 2026] [security2:error] [pid 186850:tid 187088] [client 20.204.42.136:7114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/CAE-2.5.php"] [unique_id "aryzd05Phls--iYlcKgaTgAAAXY"]
[Wed Sep 30 01:00:07.340094 2026] [security2:error] [pid 186850:tid 187008] [client 155.190.6.18:33310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaUAAAASY"]
[Wed Sep 30 01:00:07.340275 2026] [security2:error] [pid 186850:tid 187008] [client 155.190.6.18:33310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaUAAAASY"]
[Wed Sep 30 01:00:07.347848 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:07.348289 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:07.364055 2026] [security2:error] [pid 186850:tid 186944] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzd05Phls--iYlcKgaUgABZV0"]
[Wed Sep 30 01:00:07.364291 2026] [security2:error] [pid 186850:tid 187071] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzd05Phls--iYlcKgaUgABZV0"]
[Wed Sep 30 01:00:07.397545 2026] [security2:error] [pid 186850:tid 186999] [client 144.76.23.49:33126] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "forum.loohan.com"] [uri "/robots.txt"] [unique_id "aryzd05Phls--iYlcKgaUwAAAR0"]
[Wed Sep 30 01:00:07.511231 2026] [security2:error] [pid 186850:tid 187070] [client 103.241.204.139:59112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaWwAAAWQ"]
[Wed Sep 30 01:00:07.511488 2026] [security2:error] [pid 186850:tid 187070] [client 103.241.204.139:59112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaWwAAAWQ"]
[Wed Sep 30 01:00:07.556115 2026] [security2:error] [pid 186850:tid 187087] [client 223.181.30.165:10085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaXwAAAXU"]
[Wed Sep 30 01:00:07.556254 2026] [security2:error] [pid 186850:tid 187087] [client 223.181.30.165:10085] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaXwAAAXU"]
[Wed Sep 30 01:00:07.571016 2026] [security2:error] [pid 186850:tid 186998] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "aryzd05Phls--iYlcKgaYAAAARw"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:00:07.630501 2026] [security2:error] [pid 186850:tid 187044] [client 172.232.180.137:62402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aryzd05Phls--iYlcKgaZAAAAUo"], referer: www.google.com
[Wed Sep 30 01:00:07.658361 2026] [security2:error] [pid 186850:tid 187091] [client 43.104.4.204:42497] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "aryzd05Phls--iYlcKgaZgAAAXk"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:07.733785 2026] [security2:error] [pid 186850:tid 187058] [client 43.104.4.215:34410] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aryzd05Phls--iYlcKgaagAAAVg"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:07.773920 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:07.774213 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.797421 2026] [security2:error] [pid 186850:tid 187059] [client 52.172.226.14:32575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wmore1.php"] [unique_id "aryzd05Phls--iYlcKgabgAAAVk"]
[Wed Sep 30 01:00:07.823058 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:07.823351 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.844385 2026] [access_compat:error] [pid 186850:tid 187046] [client 47.79.13.78:55166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:00:07.844676 2026] [access_compat:error] [pid 186850:tid 187046] [client 47.79.13.78:55166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:00:07.859875 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:07.860327 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:07.871942 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:07.872204 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.878959 2026] [security2:error] [pid 186850:tid 186987] [client 20.204.42.136:7145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/ass.php"] [unique_id "aryzd05Phls--iYlcKgaegAAARE"]
[Wed Sep 30 01:00:07.941241 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:07.941514 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.983436 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:07.983852 2026] [security2:error] [pid 186850:tid 187034] [client 122.173.27.10:17865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaggAAAUA"]
[Wed Sep 30 01:00:07.983933 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:07.983967 2026] [security2:error] [pid 186850:tid 187034] [client 122.173.27.10:17865] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzd05Phls--iYlcKgaggAAAUA"]
[Wed Sep 30 01:00:08.048257 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.048513 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.069399 2026] [security2:error] [pid 186850:tid 186986] [client 20.214.191.94:23361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/xex.php"] [unique_id "aryzeE5Phls--iYlcKgahgAAARA"]
[Wed Sep 30 01:00:08.069913 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.070438 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.112826 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzeE5Phls--iYlcKgaiAABfwU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b25b5956a0cc6788b7ec2585e6d06a06&t=20089
[Wed Sep 30 01:00:08.112860 2026] [security2:error] [pid 186850:tid 186856] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzeE5Phls--iYlcKgaiAABfwU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b25b5956a0cc6788b7ec2585e6d06a06&t=20089
[Wed Sep 30 01:00:08.132717 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.133157 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.141772 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.142217 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:16048] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.163891 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:47327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.164329 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:47327] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.166093 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.166347 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.167053 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.167510 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.204302 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.204559 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.251208 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.251490 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:2240] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.341210 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.341461 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.350399 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:08.350653 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:08.370935 2026] [security2:error] [pid 186850:tid 187098] [client 52.172.226.14:32105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/function.php"] [unique_id "aryzeE5Phls--iYlcKgamAAAAYA"]
[Wed Sep 30 01:00:08.414847 2026] [security2:error] [pid 186850:tid 186996] [client 74.7.242.1:45090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzeE5Phls--iYlcKganAAAARo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:00:08.423286 2026] [security2:error] [pid 186850:tid 187065] [client 43.104.4.208:54077] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aryzeE5Phls--iYlcKgangAAAV8"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=antivirus-software%2Capc%2Cinverters%2Claptop%2Csolid-works-brands
[Wed Sep 30 01:00:08.431412 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.431676 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.437796 2026] [security2:error] [pid 186850:tid 187037] [client 20.204.42.136:7143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/felnggg.php"] [unique_id "aryzeE5Phls--iYlcKgaoQAAAUM"]
[Wed Sep 30 01:00:08.504052 2026] [security2:error] [pid 186850:tid 187091] [client 20.211.90.37:8353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/index.php"] [unique_id "aryzeE5Phls--iYlcKgaqQAAAXk"]
[Wed Sep 30 01:00:08.524109 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.524395 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.578110 2026] [security2:error] [pid 186850:tid 187103] [client 216.73.216.46:47327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzeE5Phls--iYlcKgarQAAAYU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvbWVtb3J5ODIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:00:08.616142 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.616591 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.670439 2026] [security2:error] [pid 186850:tid 187096] [client 216.73.216.46:2240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzeE5Phls--iYlcKgatwAAAX4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTI%3D
[Wed Sep 30 01:00:08.672252 2026] [security2:error] [pid 186850:tid 187086] [client 152.59.169.65:61532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzeE5Phls--iYlcKgauAAAAXQ"]
[Wed Sep 30 01:00:08.672351 2026] [security2:error] [pid 186850:tid 187086] [client 152.59.169.65:61532] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzeE5Phls--iYlcKgauAAAAXQ"]
[Wed Sep 30 01:00:08.710270 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.710685 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.799205 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.799637 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.844908 2026] [security2:error] [pid 186850:tid 187030] [client 20.211.90.37:8326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-includes/ID3/about.php"] [unique_id "aryzeE5Phls--iYlcKgawQAAATw"]
[Wed Sep 30 01:00:08.875486 2026] [security2:error] [pid 186850:tid 187009] [client 45.138.12.32:33456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.ypq.lmg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzeE5Phls--iYlcKgawgAAASc"]
[Wed Sep 30 01:00:08.891683 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.892112 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:08.964202 2026] [security2:error] [pid 186850:tid 187074] [client 20.204.42.136:7117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/felnggg.update.php"] [unique_id "aryzeE5Phls--iYlcKgaygAAAWg"]
[Wed Sep 30 01:00:08.978314 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:08.978586 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.046896 2026] [security2:error] [pid 186850:tid 186997] [client 144.76.23.49:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/index.php"] [unique_id "aryzeU5Phls--iYlcKga0gAAARs"], referer: http://forum.loohan.com/robots.txt
[Wed Sep 30 01:00:09.062080 2026] [security2:error] [pid 186850:tid 186986] [client 144.76.23.49:41762] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/robots.txt"] [unique_id "aryzeU5Phls--iYlcKga0AAAARA"], referer: http://forum.loohan.com/robots.txt
[Wed Sep 30 01:00:09.084507 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.084949 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.087818 2026] [security2:error] [pid 186850:tid 186990] [client 45.138.12.32:20070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zdf.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzeU5Phls--iYlcKga1gAAARQ"]
[Wed Sep 30 01:00:09.100573 2026] [security2:error] [pid 186850:tid 187095] [client 103.172.210.103:52659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzeU5Phls--iYlcKga2AAAAX0"]
[Wed Sep 30 01:00:09.100725 2026] [security2:error] [pid 186850:tid 187095] [client 103.172.210.103:52659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzeU5Phls--iYlcKga2AAAAX0"]
[Wed Sep 30 01:00:09.160708 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.160983 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.234698 2026] [access_compat:error] [pid 186850:tid 187070] [client 47.82.11.32:47848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:00:09.234976 2026] [access_compat:error] [pid 186850:tid 187070] [client 47.82.11.32:47848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:00:09.251255 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:32744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ab.php"] [unique_id "aryzeU5Phls--iYlcKga5QAAAWw"]
[Wed Sep 30 01:00:09.309232 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.309520 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.344229 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.344495 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.381238 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:19500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/5b9ac.php"] [unique_id "aryzeU5Phls--iYlcKga7wAAAU4"]
[Wed Sep 30 01:00:09.402229 2026] [security2:error] [pid 186850:tid 186965] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzeU5Phls--iYlcKga8QABXHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301656&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:00:09.402257 2026] [security2:error] [pid 186850:tid 186965] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzeU5Phls--iYlcKga8QABXHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301656&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:00:09.433717 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.433981 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.456002 2026] [security2:error] [pid 186850:tid 186971] [remote 47.128.114.152:56500] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/3729/man-abducted"] [unique_id "aryzeU5Phls--iYlcKga-AABXng"]
[Wed Sep 30 01:00:09.457493 2026] [security2:error] [pid 186850:tid 187025] [client 4.240.25.22:43837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/dronishness.php"] [unique_id "aryzeU5Phls--iYlcKga-QAAATc"]
[Wed Sep 30 01:00:09.496518 2026] [security2:error] [pid 186850:tid 187026] [client 49.43.163.212:50829] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzeU5Phls--iYlcKga_AAAATg"]
[Wed Sep 30 01:00:09.496688 2026] [security2:error] [pid 186850:tid 187026] [client 49.43.163.212:50829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzeU5Phls--iYlcKga_AAAATg"]
[Wed Sep 30 01:00:09.529190 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.529606 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.532105 2026] [security2:error] [pid 186850:tid 187019] [client 20.204.42.136:7075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/jybkxer.php"] [unique_id "aryzeU5Phls--iYlcKga_wAAATE"]
[Wed Sep 30 01:00:09.615530 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.615792 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.633566 2026] [security2:error] [pid 186850:tid 187021] [client 105.112.178.79:38335] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.arvanisocks.com"] [uri "/__ss_probe_811d7b1f6e1155e3c46d0bc27dbca599__"] [unique_id "aryzeU5Phls--iYlcKgbBgAAATM"]
[Wed Sep 30 01:00:09.633983 2026] [security2:error] [pid 186850:tid 187099] [client 20.214.191.94:23369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/ass.php"] [unique_id "aryzeU5Phls--iYlcKgbBwAAAYE"]
[Wed Sep 30 01:00:09.641960 2026] [security2:error] [pid 186850:tid 186997] [client 20.211.90.37:47967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-admin/js/index.php"] [unique_id "aryzeU5Phls--iYlcKgbCQAAARs"]
[Wed Sep 30 01:00:09.709092 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.709361 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.722623 2026] [security2:error] [pid 186850:tid 187033] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzeU5Phls--iYlcKgbCgAAAT8"]
[Wed Sep 30 01:00:09.791960 2026] [security2:error] [pid 186850:tid 187001] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzeU5Phls--iYlcKgbDQAAAR8"]
[Wed Sep 30 01:00:09.807691 2026] [security2:error] [pid 186850:tid 186990] [client 4.196.65.241:64146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/bunks.php"] [unique_id "aryzeU5Phls--iYlcKgbDgAAARQ"]
[Wed Sep 30 01:00:09.826566 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.826850 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.835864 2026] [security2:error] [pid 186850:tid 187005] [client 20.219.2.60:19566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/hehe.php"] [unique_id "aryzeU5Phls--iYlcKgbEAAAASM"]
[Wed Sep 30 01:00:09.869994 2026] [security2:error] [pid 186850:tid 187080] [client 52.172.226.14:32762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/css.php"] [unique_id "aryzeU5Phls--iYlcKgbFAAAAW4"]
[Wed Sep 30 01:00:09.889865 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.890146 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:09.986248 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:09.986517 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.032068 2026] [security2:error] [pid 186850:tid 186985] [client 20.204.42.136:7089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/edit-tags.php"] [unique_id "aryzek5Phls--iYlcKgbJQAAAQ8"]
[Wed Sep 30 01:00:10.075749 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.076057 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.127056 2026] [security2:error] [pid 186850:tid 187004] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbLAAAASI"]
[Wed Sep 30 01:00:10.166872 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.167138 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.197045 2026] [security2:error] [pid 186850:tid 187026] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbMQAAATg"]
[Wed Sep 30 01:00:10.257233 2026] [security2:error] [pid 186850:tid 187031] [client 20.214.191.94:23257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wsd.php"] [unique_id "aryzek5Phls--iYlcKgbMwAAAT0"]
[Wed Sep 30 01:00:10.261252 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.261512 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.326402 2026] [security2:error] [pid 186850:tid 187083] [client 20.219.2.60:19465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryzek5Phls--iYlcKgbOQAAAXE"]
[Wed Sep 30 01:00:10.339737 2026] [security2:error] [pid 186850:tid 187058] [client 200.150.200.208:53444] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "aryzek5Phls--iYlcKgbNwAAAVg"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 01:00:10.351960 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.352387 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.381802 2026] [security2:error] [pid 186850:tid 186997] [client 20.211.90.37:47959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/admin.php"] [unique_id "aryzek5Phls--iYlcKgbPgAAARs"]
[Wed Sep 30 01:00:10.408516 2026] [security2:error] [pid 186850:tid 187066] [client 104.208.65.139:48848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/blacks.php"] [unique_id "aryzek5Phls--iYlcKgbQAAAAWA"]
[Wed Sep 30 01:00:10.410003 2026] [security2:error] [pid 186850:tid 187099] [client 144.76.23.49:54298] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "forum.loohan.com"] [uri "/viewforum.php"] [unique_id "aryzek5Phls--iYlcKgbPQAAAYE"], referer: http://forum.loohan.com/
[Wed Sep 30 01:00:10.420569 2026] [security2:error] [pid 186850:tid 187092] [client 116.193.128.26:52429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbQQAAAXo"]
[Wed Sep 30 01:00:10.421497 2026] [security2:error] [pid 186850:tid 187092] [client 116.193.128.26:52429] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbQQAAAXo"]
[Wed Sep 30 01:00:10.441780 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.442165 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.458794 2026] [security2:error] [pid 186850:tid 186918] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzek5Phls--iYlcKgbRQABGkM"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D29409
[Wed Sep 30 01:00:10.529860 2026] [security2:error] [pid 186850:tid 187053] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbTAAAAVM"]
[Wed Sep 30 01:00:10.534098 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.534499 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.545440 2026] [security2:error] [pid 186850:tid 187039] [client 103.159.192.142:53838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbTgAAAUU"]
[Wed Sep 30 01:00:10.545587 2026] [security2:error] [pid 186850:tid 187039] [client 103.159.192.142:53838] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbTgAAAUU"]
[Wed Sep 30 01:00:10.590854 2026] [security2:error] [pid 186850:tid 187012] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbUgAAASo"]
[Wed Sep 30 01:00:10.596663 2026] [security2:error] [pid 186850:tid 187068] [client 20.204.42.136:7062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/nauik.php"] [unique_id "aryzek5Phls--iYlcKgbUwAAAWI"]
[Wed Sep 30 01:00:10.623705 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.623993 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.628244 2026] [security2:error] [pid 186850:tid 187078] [client 4.196.65.241:2497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zoo1.php"] [unique_id "aryzek5Phls--iYlcKgbWAAAAWw"]
[Wed Sep 30 01:00:10.651664 2026] [security2:error] [pid 186850:tid 187023] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbWgAAATU"]
[Wed Sep 30 01:00:10.671922 2026] [security2:error] [pid 186850:tid 187079] [client 45.138.12.32:33516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zbj.zav.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzek5Phls--iYlcKgbXAAAAW0"]
[Wed Sep 30 01:00:10.692429 2026] [security2:error] [pid 186850:tid 187034] [client 152.59.165.7:59281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbYAAAAUA"]
[Wed Sep 30 01:00:10.692531 2026] [security2:error] [pid 186850:tid 187034] [client 152.59.165.7:59281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzek5Phls--iYlcKgbYAAAAUA"]
[Wed Sep 30 01:00:10.713200 2026] [security2:error] [pid 186850:tid 187072] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbYQAAAWY"]
[Wed Sep 30 01:00:10.718925 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.719388 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.720123 2026] [security2:error] [pid 186850:tid 187000] [client 20.214.191.94:23293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/BDKR28WP.php"] [unique_id "aryzek5Phls--iYlcKgbYwAAAR4"]
[Wed Sep 30 01:00:10.755464 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:10.755899 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:10.786593 2026] [security2:error] [pid 186850:tid 187086] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbZwAAAXQ"]
[Wed Sep 30 01:00:10.809281 2026] [security2:error] [pid 186850:tid 186980] [client 20.219.2.60:19536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/varb.php"] [unique_id "aryzek5Phls--iYlcKgbawAAAQo"]
[Wed Sep 30 01:00:10.811215 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.811641 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.826226 2026] [security2:error] [pid 186850:tid 187104] [client 52.172.226.14:32737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzek5Phls--iYlcKgbbAAAAYY"]
[Wed Sep 30 01:00:10.856596 2026] [security2:error] [pid 186850:tid 186999] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzek5Phls--iYlcKgbbgAAAR0"]
[Wed Sep 30 01:00:10.870576 2026] [security2:error] [pid 186850:tid 186951] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzek5Phls--iYlcKgbbwABIWQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10168&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:10.870602 2026] [security2:error] [pid 186850:tid 186951] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzek5Phls--iYlcKgbbwABIWQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10168&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:10.901466 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.901836 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:10.993347 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:10.993751 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.047440 2026] [security2:error] [pid 186850:tid 187083] [client 20.214.191.94:23282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wmore1.php"] [unique_id "aryze05Phls--iYlcKgbgQAAAXE"]
[Wed Sep 30 01:00:11.105606 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.105936 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.119623 2026] [security2:error] [pid 186850:tid 187014] [client 20.204.42.136:7153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wander.php"] [unique_id "aryze05Phls--iYlcKgbgwAAASw"]
[Wed Sep 30 01:00:11.171654 2026] [security2:error] [pid 186850:tid 187037] [client 4.240.25.22:30759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/k.php"] [unique_id "aryze05Phls--iYlcKgbhQAAAUM"]
[Wed Sep 30 01:00:11.174347 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.174603 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.197150 2026] [security2:error] [pid 186850:tid 187076] [client 203.122.45.246:51517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbhgAAAWo"]
[Wed Sep 30 01:00:11.197286 2026] [security2:error] [pid 186850:tid 187076] [client 203.122.45.246:51517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbhgAAAWo"]
[Wed Sep 30 01:00:11.248142 2026] [security2:error] [pid 186850:tid 187106] [client 45.138.12.32:33524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.yourshowfactory.com"] [uri "/wp-links-opml.php"] [unique_id "aryze05Phls--iYlcKgbiQAAAYg"]
[Wed Sep 30 01:00:11.262383 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:11.262649 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:11.265628 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.266052 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.269407 2026] [security2:error] [pid 186850:tid 187075] [client 202.179.95.79:64105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbjQAAAWk"]
[Wed Sep 30 01:00:11.269530 2026] [security2:error] [pid 186850:tid 187075] [client 202.179.95.79:64105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbjQAAAWk"]
[Wed Sep 30 01:00:11.280273 2026] [security2:error] [pid 186850:tid 186988] [client 20.219.2.60:19514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/lm15.php"] [unique_id "aryze05Phls--iYlcKgbjgAAARI"]
[Wed Sep 30 01:00:11.329054 2026] [security2:error] [pid 186850:tid 187010] [client 20.211.90.37:48404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/themes/index.php"] [unique_id "aryze05Phls--iYlcKgbkAAAASg"]
[Wed Sep 30 01:00:11.353949 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.354224 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.383304 2026] [security2:error] [pid 186850:tid 187050] [client 20.214.191.94:23375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/z60.php"] [unique_id "aryze05Phls--iYlcKgbkgAAAVA"]
[Wed Sep 30 01:00:11.390149 2026] [security2:error] [pid 186850:tid 187063] [client 45.138.12.32:20138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zog.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryze05Phls--iYlcKgbkwAAAV0"]
[Wed Sep 30 01:00:11.452199 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.452642 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.502630 2026] [security2:error] [pid 186850:tid 187013] [client 104.208.65.139:18458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/run.php"] [unique_id "aryze05Phls--iYlcKgbmwAAASs"]
[Wed Sep 30 01:00:11.527222 2026] [autoindex:error] [pid 186850:tid 186993] [client 20.247.251.4:45579] AH01276: Cannot serve directory /home4/weglksmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:11.537602 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.538019 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.588380 2026] [security2:error] [pid 186850:tid 187007] [client 20.204.42.136:7152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wsd.php"] [unique_id "aryze05Phls--iYlcKgbpAAAASU"]
[Wed Sep 30 01:00:11.626548 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.626818 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.670434 2026] [security2:error] [pid 186850:tid 187027] [client 20.214.191.94:23286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/24.php"] [unique_id "aryze05Phls--iYlcKgbsQAAATk"]
[Wed Sep 30 01:00:11.682696 2026] [security2:error] [pid 186850:tid 187096] [client 52.172.226.14:32073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryze05Phls--iYlcKgbswAAAX4"]
[Wed Sep 30 01:00:11.718593 2026] [security2:error] [pid 186850:tid 187033] [client 106.214.2.47:13668] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbtgAAAT8"]
[Wed Sep 30 01:00:11.718727 2026] [security2:error] [pid 186850:tid 187033] [client 106.214.2.47:13668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryze05Phls--iYlcKgbtgAAAT8"]
[Wed Sep 30 01:00:11.719555 2026] [security2:error] [pid 186850:tid 186892] [remote 2a03:2880:f814:3a:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryze05Phls--iYlcKgbtwABcik"]
[Wed Sep 30 01:00:11.719576 2026] [security2:error] [pid 186850:tid 186892] [remote 2a03:2880:f814:3a:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryze05Phls--iYlcKgbtwABcik"]
[Wed Sep 30 01:00:11.720111 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.720386 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.748757 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:11.749216 2026] [access_compat:error] [pid 186850:tid 186989] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:11.760155 2026] [security2:error] [pid 186850:tid 187089] [client 45.138.12.32:20096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zkx.lez.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryze05Phls--iYlcKgbuwAAAXc"]
[Wed Sep 30 01:00:11.761719 2026] [security2:error] [pid 186850:tid 187071] [client 20.211.90.37:47985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-content/themes/index.php"] [unique_id "aryze05Phls--iYlcKgbvAAAAWU"]
[Wed Sep 30 01:00:11.762743 2026] [security2:error] [pid 186850:tid 187021] [client 20.219.2.60:20089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/clss.php"] [unique_id "aryze05Phls--iYlcKgbvQAAATM"]
[Wed Sep 30 01:00:11.813642 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.814063 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.840336 2026] [security2:error] [pid 186850:tid 187066] [client 151.245.7.201:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryze05Phls--iYlcKgbwAAAAWA"]
[Wed Sep 30 01:00:11.901459 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.901738 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:11.997450 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:11.997893 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.007860 2026] [security2:error] [pid 186850:tid 187107] [client 20.214.191.94:23418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/xxw.php"] [unique_id "aryzfE5Phls--iYlcKgbxgAAAYk"]
[Wed Sep 30 01:00:12.050181 2026] [security2:error] [pid 186850:tid 187034] [client 72.255.10.32:54784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgbyAAAAUA"]
[Wed Sep 30 01:00:12.050282 2026] [security2:error] [pid 186850:tid 187034] [client 72.255.10.32:54784] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgbyAAAAUA"]
[Wed Sep 30 01:00:12.052342 2026] [security2:error] [pid 186850:tid 187005] [client 4.196.65.241:64165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/f35.update.php"] [unique_id "aryzfE5Phls--iYlcKgbyQAAASM"]
[Wed Sep 30 01:00:12.082516 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.082991 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.084282 2026] [security2:error] [pid 186850:tid 187104] [client 43.227.131.37:6193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgb0QAAAYY"]
[Wed Sep 30 01:00:12.084386 2026] [security2:error] [pid 186850:tid 187104] [client 43.227.131.37:6193] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgb0QAAAYY"]
[Wed Sep 30 01:00:12.118919 2026] [security2:error] [pid 186850:tid 186995] [client 144.76.23.49:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewforum.php"] [unique_id "aryzfE5Phls--iYlcKgb1QAAARk"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:12.121175 2026] [security2:error] [pid 186850:tid 187092] [client 144.76.23.49:58306] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewforum.php"] [unique_id "aryzfE5Phls--iYlcKgbzAAAAXo"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:12.168357 2026] [access_compat:error] [pid 186850:tid 187020] [client 47.79.207.167:27344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:00:12.168786 2026] [access_compat:error] [pid 186850:tid 187020] [client 47.79.207.167:27344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:00:12.173453 2026] [security2:error] [pid 186850:tid 187061] [client 20.204.42.136:7164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/media.php"] [unique_id "aryzfE5Phls--iYlcKgb3gAAAVs"]
[Wed Sep 30 01:00:12.177546 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.177972 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.229613 2026] [security2:error] [pid 186850:tid 187086] [client 20.219.2.60:20052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/44.php"] [unique_id "aryzfE5Phls--iYlcKgb5gAAAXQ"]
[Wed Sep 30 01:00:12.265068 2026] [security2:error] [pid 186850:tid 187015] [client 52.172.226.14:32733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-links-opml.php"] [unique_id "aryzfE5Phls--iYlcKgb6gAAAS0"]
[Wed Sep 30 01:00:12.267343 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.267762 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.287463 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:12.287746 2026] [access_compat:error] [pid 186850:tid 187003] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:12.355497 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.355740 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.408978 2026] [security2:error] [pid 186850:tid 187058] [client 20.211.90.37:48428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/cgi-bin/index.php"] [unique_id "aryzfE5Phls--iYlcKgb8wAAAVg"]
[Wed Sep 30 01:00:12.447845 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.448112 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.538907 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.539185 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.624572 2026] [security2:error] [pid 186850:tid 187039] [client 20.198.74.230:23908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ssdg.php"] [unique_id "aryzfE5Phls--iYlcKgb_wAAAUU"]
[Wed Sep 30 01:00:12.629148 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.629409 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.709083 2026] [security2:error] [pid 186850:tid 187026] [client 20.219.2.60:19548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/a5e0a.php"] [unique_id "aryzfE5Phls--iYlcKgcCAAAATg"]
[Wed Sep 30 01:00:12.715409 2026] [security2:error] [pid 186850:tid 187087] [client 4.240.25.22:11546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp.php"] [unique_id "aryzfE5Phls--iYlcKgcCgAAAXU"]
[Wed Sep 30 01:00:12.719400 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.719667 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.747623 2026] [security2:error] [pid 186850:tid 187044] [client 116.72.182.19:55101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgcDAAAAUo"]
[Wed Sep 30 01:00:12.747722 2026] [security2:error] [pid 186850:tid 187044] [client 116.72.182.19:55101] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgcDAAAAUo"]
[Wed Sep 30 01:00:12.763423 2026] [access_compat:error] [pid 186850:tid 186993] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:12.763687 2026] [access_compat:error] [pid 186850:tid 186993] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:12.781397 2026] [security2:error] [pid 186850:tid 187004] [client 20.204.42.136:7139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/images.php"] [unique_id "aryzfE5Phls--iYlcKgcDgAAASI"]
[Wed Sep 30 01:00:12.801904 2026] [security2:error] [pid 186850:tid 187098] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfE5Phls--iYlcKgcDwAAAYA"]
[Wed Sep 30 01:00:12.810292 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.810556 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.826779 2026] [security2:error] [pid 186850:tid 187024] [client 52.172.226.14:32756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/hp.php"] [unique_id "aryzfE5Phls--iYlcKgcEgAAATY"]
[Wed Sep 30 01:00:12.846226 2026] [security2:error] [pid 186850:tid 187007] [client 20.214.191.94:23378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/bnmtp.php"] [unique_id "aryzfE5Phls--iYlcKgcEwAAASU"]
[Wed Sep 30 01:00:12.881881 2026] [security2:error] [pid 186850:tid 187043] [client 49.205.105.16:13651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgcFAAAAUk"]
[Wed Sep 30 01:00:12.882032 2026] [security2:error] [pid 186850:tid 187043] [client 49.205.105.16:13651] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzfE5Phls--iYlcKgcFAAAAUk"]
[Wed Sep 30 01:00:12.892421 2026] [security2:error] [pid 186850:tid 186908] [remote 74.7.227.56:52874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzfE5Phls--iYlcKgcFgABDzk"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:00:12.902299 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.902569 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:12.992556 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:12.992833 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.085057 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.085339 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.160826 2026] [security2:error] [pid 186850:tid 186992] [client 20.219.2.60:20066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bo.php"] [unique_id "aryzfU5Phls--iYlcKgcJwAAARY"]
[Wed Sep 30 01:00:13.175957 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.176229 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.209012 2026] [security2:error] [pid 186850:tid 187029] [client 177.196.128.243:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzfU5Phls--iYlcKgcLAAAATs"]
[Wed Sep 30 01:00:13.268073 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.268343 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.298984 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:13.299282 2026] [access_compat:error] [pid 186850:tid 187101] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:13.305591 2026] [security2:error] [pid 186850:tid 186988] [client 20.204.42.136:7074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/ops.php"] [unique_id "aryzfU5Phls--iYlcKgcMQAAARI"]
[Wed Sep 30 01:00:13.324586 2026] [security2:error] [pid 186850:tid 186994] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfU5Phls--iYlcKgcMgAAARg"]
[Wed Sep 30 01:00:13.360076 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.360350 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.452543 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.452998 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.495463 2026] [security2:error] [pid 186850:tid 187052] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfU5Phls--iYlcKgcOwAAAVI"]
[Wed Sep 30 01:00:13.536592 2026] [security2:error] [pid 186850:tid 186995] [client 20.211.90.37:47083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-manager.php"] [unique_id "aryzfU5Phls--iYlcKgcPwAAARk"]
[Wed Sep 30 01:00:13.541744 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.542028 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.545100 2026] [security2:error] [pid 186850:tid 187022] [client 104.208.65.139:18389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/vpn.php"] [unique_id "aryzfU5Phls--iYlcKgcQAAAATQ"]
[Wed Sep 30 01:00:13.592787 2026] [security2:error] [pid 186850:tid 187032] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzfU5Phls--iYlcKgcJAAAAT4"]
[Wed Sep 30 01:00:13.594731 2026] [security2:error] [pid 186850:tid 187018] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "aryzfU5Phls--iYlcKgcHwAAATA"]
[Wed Sep 30 01:00:13.611149 2026] [security2:error] [pid 186850:tid 186997] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfU5Phls--iYlcKgcQwAAARs"]
[Wed Sep 30 01:00:13.633392 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.633682 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.643667 2026] [security2:error] [pid 186850:tid 187017] [client 20.219.2.60:20068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/56c53.php"] [unique_id "aryzfU5Phls--iYlcKgcSwAAAS8"]
[Wed Sep 30 01:00:13.714911 2026] [security2:error] [pid 186850:tid 187009] [client 52.172.226.14:32752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/mo.php"] [unique_id "aryzfU5Phls--iYlcKgcUQAAASc"]
[Wed Sep 30 01:00:13.725641 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.726071 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.755715 2026] [access_compat:error] [pid 186850:tid 187090] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:13.755984 2026] [access_compat:error] [pid 186850:tid 187090] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:13.756248 2026] [security2:error] [pid 186850:tid 187055] [client 144.76.23.49:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "aryzfU5Phls--iYlcKgcUwAAAVU"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:13.758202 2026] [security2:error] [pid 186850:tid 187082] [client 144.76.23.49:58316] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "aryzfU5Phls--iYlcKgcTgAAAXA"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:13.809433 2026] [security2:error] [pid 186850:tid 187094] [client 20.204.42.136:7142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/BDKR28WP.php"] [unique_id "aryzfU5Phls--iYlcKgcWAAAAXw"]
[Wed Sep 30 01:00:13.814770 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.815119 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.849300 2026] [security2:error] [pid 186850:tid 187008] [client 20.194.30.107:17462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/w.php"] [unique_id "aryzfU5Phls--iYlcKgcWgAAASY"]
[Wed Sep 30 01:00:13.908747 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.909214 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:13.972567 2026] [security2:error] [pid 186850:tid 187021] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfU5Phls--iYlcKgcXwAAATM"]
[Wed Sep 30 01:00:13.992724 2026] [security2:error] [pid 186850:tid 187029] [client 20.211.90.37:47090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzfU5Phls--iYlcKgcZQAAATs"]
[Wed Sep 30 01:00:13.996042 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:13.996318 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.001084 2026] [security2:error] [pid 186850:tid 187066] [client 20.214.191.94:23284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/ebkid.php"] [unique_id "aryzfk5Phls--iYlcKgcZwAAAWA"]
[Wed Sep 30 01:00:14.005286 2026] [security2:error] [pid 186850:tid 186998] [client 116.197.133.25:52305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzfU5Phls--iYlcKgcZAAAARw"]
[Wed Sep 30 01:00:14.005422 2026] [security2:error] [pid 186850:tid 186998] [client 116.197.133.25:52305] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzfU5Phls--iYlcKgcZAAAARw"]
[Wed Sep 30 01:00:14.089182 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.089615 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.110024 2026] [security2:error] [pid 186850:tid 186994] [client 20.219.2.60:20179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tx78.php"] [unique_id "aryzfk5Phls--iYlcKgcbwAAARg"]
[Wed Sep 30 01:00:14.118075 2026] [security2:error] [pid 186850:tid 187046] [client 35.160.172.136:22197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.172.160.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php/sitemap_index.xml"] [unique_id "aryzfk5Phls--iYlcKgcaQAAAUw"]
[Wed Sep 30 01:00:14.118173 2026] [security2:error] [pid 186850:tid 187067] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfk5Phls--iYlcKgccAAAAWE"]
[Wed Sep 30 01:00:14.149062 2026] [security2:error] [pid 186850:tid 187030] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryzfk5Phls--iYlcKgcdAAAATw"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:00:14.179464 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.179751 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.198785 2026] [security2:error] [pid 186850:tid 187011] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfk5Phls--iYlcKgcdwAAASk"]
[Wed Sep 30 01:00:14.267643 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.267919 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.268495 2026] [security2:error] [pid 186850:tid 187087] [client 20.204.42.136:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/mac.php"] [unique_id "aryzfk5Phls--iYlcKgchAAAAXU"]
[Wed Sep 30 01:00:14.278792 2026] [security2:error] [pid 186850:tid 187105] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfk5Phls--iYlcKgcgwAAAYc"]
[Wed Sep 30 01:00:14.326562 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:14.326841 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:14.337901 2026] [security2:error] [pid 186850:tid 186948] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzfk5Phls--iYlcKgciAABHWE"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=12286
[Wed Sep 30 01:00:14.337936 2026] [security2:error] [pid 186850:tid 186948] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzfk5Phls--iYlcKgciAABHWE"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=12286
[Wed Sep 30 01:00:14.360427 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.360708 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.361409 2026] [security2:error] [pid 186850:tid 187033] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfk5Phls--iYlcKgciQAAAT8"]
[Wed Sep 30 01:00:14.375902 2026] [security2:error] [pid 186850:tid 187044] [client 20.211.90.37:47952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/cgi-bin/admin.php"] [unique_id "aryzfk5Phls--iYlcKgcjAAAAUo"]
[Wed Sep 30 01:00:14.388772 2026] [security2:error] [pid 186850:tid 187039] [client 20.214.191.94:23236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/133.php"] [unique_id "aryzfk5Phls--iYlcKgcjQAAAUU"]
[Wed Sep 30 01:00:14.451837 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.452112 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.540953 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.541355 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.575315 2026] [security2:error] [pid 186850:tid 187096] [client 20.219.2.60:20075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws80.php"] [unique_id "aryzfk5Phls--iYlcKgcmwAAAX4"]
[Wed Sep 30 01:00:14.637687 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.637989 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.687445 2026] [security2:error] [pid 186850:tid 187030] [client 52.172.226.14:32068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/ivmirgut.php"] [unique_id "aryzfk5Phls--iYlcKgcrgAAATw"]
[Wed Sep 30 01:00:14.725962 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.726239 2026] [access_compat:error] [pid 186850:tid 187061] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.741937 2026] [security2:error] [pid 186850:tid 186988] [client 20.204.42.136:7101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wmore1.php"] [unique_id "aryzfk5Phls--iYlcKgctQAAARI"]
[Wed Sep 30 01:00:14.805522 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:14.805948 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:14.818751 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.819173 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.906984 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.907264 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:14.929796 2026] [security2:error] [pid 186850:tid 187102] [client 20.194.30.107:44282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/abcd.php"] [unique_id "aryzfk5Phls--iYlcKgcxgAAAYQ"]
[Wed Sep 30 01:00:14.951543 2026] [security2:error] [pid 186850:tid 187017] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzfk5Phls--iYlcKgcxwAAAS8"]
[Wed Sep 30 01:00:14.999200 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:14.999622 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.038464 2026] [security2:error] [pid 186850:tid 187081] [client 20.219.2.60:19551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/jga.php"] [unique_id "aryzf05Phls--iYlcKgczAAAAW8"]
[Wed Sep 30 01:00:15.048217 2026] [security2:error] [pid 186850:tid 186996] [client 35.160.172.136:45569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.172.160.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php"] [unique_id "aryzf05Phls--iYlcKgczwAAARo"]
[Wed Sep 30 01:00:15.094034 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.094492 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.109709 2026] [security2:error] [pid 186850:tid 187055] [client 20.214.191.94:23397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/x33.php"] [unique_id "aryzf05Phls--iYlcKgc0wAAAVU"]
[Wed Sep 30 01:00:15.180211 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.180490 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.237590 2026] [access_compat:error] [pid 186850:tid 187073] [client 47.79.13.177:59272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:00:15.237855 2026] [access_compat:error] [pid 186850:tid 187073] [client 47.79.13.177:59272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:00:15.244020 2026] [security2:error] [pid 186850:tid 187075] [client 20.204.42.136:7112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryzf05Phls--iYlcKgc2wAAAWk"]
[Wed Sep 30 01:00:15.271261 2026] [access_compat:error] [pid 186850:tid 187093] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:15.271541 2026] [access_compat:error] [pid 186850:tid 187093] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:15.271552 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.271883 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.288432 2026] [security2:error] [pid 186850:tid 187067] [client 45.138.12.32:20216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zms.ysr.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzf05Phls--iYlcKgc3wAAAWE"]
[Wed Sep 30 01:00:15.304620 2026] [security2:error] [pid 186850:tid 187037] [client 52.172.226.14:32065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/baba.php"] [unique_id "aryzf05Phls--iYlcKgc4gAAAUM"]
[Wed Sep 30 01:00:15.312095 2026] [security2:error] [pid 186850:tid 187077] [client 93.152.205.108:60156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.205.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/wp-login.php"] [unique_id "aryzf05Phls--iYlcKgc3AAAAWs"]
[Wed Sep 30 01:00:15.329578 2026] [security2:error] [pid 186850:tid 187094] [client 20.211.90.37:8421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzf05Phls--iYlcKgc5gAAAXw"]
[Wed Sep 30 01:00:15.360817 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.361097 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.453181 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.453540 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.463165 2026] [security2:error] [pid 186850:tid 187103] [client 4.196.65.241:19139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xcrarnkpo.php"] [unique_id "aryzf05Phls--iYlcKgc9QAAAYU"]
[Wed Sep 30 01:00:15.463517 2026] [security2:error] [pid 186850:tid 187011] [client 144.76.23.49:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "aryzf05Phls--iYlcKgc8gAAASk"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:15.465288 2026] [security2:error] [pid 186850:tid 186985] [client 144.76.23.49:58330] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "aryzf05Phls--iYlcKgc7wAAAQ8"], referer: http://forum.loohan.com/viewforum.php?id=5
[Wed Sep 30 01:00:15.497777 2026] [security2:error] [pid 186850:tid 187062] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/"] [unique_id "aryzf05Phls--iYlcKgc5AAAAVw"]
[Wed Sep 30 01:00:15.515995 2026] [security2:error] [pid 186850:tid 187020] [client 20.219.2.60:20058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/fs.php"] [unique_id "aryzf05Phls--iYlcKgc-gAAATI"]
[Wed Sep 30 01:00:15.518353 2026] [security2:error] [pid 186850:tid 186880] [remote 64.23.166.180:15840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.fcs.hfj.mybluehost.me"] [uri "/.env"] [unique_id "aryzf05Phls--iYlcKgc-wABDB0"]
[Wed Sep 30 01:00:15.534510 2026] [security2:error] [pid 186850:tid 187090] [client 35.160.172.136:52084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.172.160.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php"] [unique_id "aryzf05Phls--iYlcKgc_gAAAXg"]
[Wed Sep 30 01:00:15.547776 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.548215 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.636801 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.637083 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.691881 2026] [security2:error] [pid 186850:tid 187080] [client 20.211.90.37:47986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-admin/maint/index.php"] [unique_id "aryzf05Phls--iYlcKgdCgAAAW4"]
[Wed Sep 30 01:00:15.727592 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.727864 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.740047 2026] [security2:error] [pid 186850:tid 187039] [client 45.138.12.32:33622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zkx.lez.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzf05Phls--iYlcKgdDQAAAUU"]
[Wed Sep 30 01:00:15.753973 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:15.754258 2026] [access_compat:error] [pid 186850:tid 187098] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:15.797168 2026] [security2:error] [pid 186850:tid 186969] [remote 121.92.18.96:40450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.18.92.121.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "aryzf05Phls--iYlcKgdDgABIHY"], referer: https://nysas.org/wp-login.php
[Wed Sep 30 01:00:15.819237 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.819510 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.848797 2026] [security2:error] [pid 186850:tid 187065] [client 20.204.42.136:7167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/ab.php"] [unique_id "aryzf05Phls--iYlcKgdFgAAAV8"]
[Wed Sep 30 01:00:15.911060 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:15.911356 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:15.924653 2026] [security2:error] [pid 186850:tid 187051] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/api/auth/signin"] [unique_id "aryzf05Phls--iYlcKgcywAAAVE"]
[Wed Sep 30 01:00:15.966093 2026] [security2:error] [pid 186850:tid 186986] [client 35.160.172.136:4056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.172.160.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php"] [unique_id "aryzf05Phls--iYlcKgdHgAAARA"]
[Wed Sep 30 01:00:15.987738 2026] [security2:error] [pid 186850:tid 187093] [client 20.219.2.60:19525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/byypas.php"] [unique_id "aryzf05Phls--iYlcKgdIAAAAXs"]
[Wed Sep 30 01:00:16.001780 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.002076 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.091692 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.091962 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.121043 2026] [security2:error] [pid 186850:tid 187008] [client 20.214.191.94:23260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/cae.php"] [unique_id "aryzgE5Phls--iYlcKgdKwAAASY"]
[Wed Sep 30 01:00:16.184289 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.184772 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.262314 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:16.262830 2026] [access_compat:error] [pid 186850:tid 187078] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:16.274973 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.275263 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.313213 2026] [security2:error] [pid 186850:tid 186924] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzgE5Phls--iYlcKgdNgABWUk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10186&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:16.313242 2026] [security2:error] [pid 186850:tid 186924] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzgE5Phls--iYlcKgdNgABWUk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10186&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:16.323938 2026] [security2:error] [pid 186850:tid 187043] [client 20.194.30.107:46732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/w.php"] [unique_id "aryzgE5Phls--iYlcKgdOAAAAUk"]
[Wed Sep 30 01:00:16.333267 2026] [security2:error] [pid 186850:tid 187087] [client 52.172.226.14:32122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/Components.php"] [unique_id "aryzgE5Phls--iYlcKgdOQAAAXU"]
[Wed Sep 30 01:00:16.335783 2026] [security2:error] [pid 186850:tid 187105] [client 20.204.42.136:7048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/dairg.php"] [unique_id "aryzgE5Phls--iYlcKgdOgAAAYc"]
[Wed Sep 30 01:00:16.365422 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.365671 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.390555 2026] [security2:error] [pid 186850:tid 187099] [client 93.152.205.108:60464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.205.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "transparentyouth.com"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdPQAAAYE"]
[Wed Sep 30 01:00:16.453078 2026] [security2:error] [pid 186850:tid 187060] [client 20.219.2.60:20064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/b.php"] [unique_id "aryzgE5Phls--iYlcKgdQwAAAVo"]
[Wed Sep 30 01:00:16.458023 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.458290 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28071] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.508108 2026] [security2:error] [pid 186850:tid 187049] [client 20.214.191.94:23493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/txets.php"] [unique_id "aryzgE5Phls--iYlcKgdRAAAAU8"]
[Wed Sep 30 01:00:16.546408 2026] [security2:error] [pid 186850:tid 187054] [client 103.159.192.142:53968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdRQAAAVQ"]
[Wed Sep 30 01:00:16.546642 2026] [security2:error] [pid 186850:tid 187054] [client 103.159.192.142:53968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdRQAAAVQ"]
[Wed Sep 30 01:00:16.547443 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.547701 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.639429 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.639718 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.689417 2026] [security2:error] [pid 186850:tid 187048] [client 45.138.12.32:20198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zlx.xqt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzgE5Phls--iYlcKgdUQAAAU4"]
[Wed Sep 30 01:00:16.730422 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.730687 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.755217 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:16.755490 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:16.784868 2026] [security2:error] [pid 186850:tid 187025] [client 37.41.16.35:56430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdWgAAATc"]
[Wed Sep 30 01:00:16.785005 2026] [security2:error] [pid 186850:tid 187025] [client 37.41.16.35:56430] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdWgAAATc"]
[Wed Sep 30 01:00:16.802789 2026] [security2:error] [pid 186850:tid 187072] [client 52.172.226.14:32099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/aboutt.php"] [unique_id "aryzgE5Phls--iYlcKgdYQAAAWY"]
[Wed Sep 30 01:00:16.819905 2026] [security2:error] [pid 186850:tid 187003] [client 20.214.191.94:23368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wp-update.php"] [unique_id "aryzgE5Phls--iYlcKgdZQAAASE"]
[Wed Sep 30 01:00:16.820250 2026] [security2:error] [pid 186850:tid 187047] [client 223.181.60.167:9833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdZgAAAU0"]
[Wed Sep 30 01:00:16.820356 2026] [security2:error] [pid 186850:tid 187047] [client 223.181.60.167:9833] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzgE5Phls--iYlcKgdZgAAAU0"]
[Wed Sep 30 01:00:16.824325 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:16.825038 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:16.871688 2026] [security2:error] [pid 186850:tid 187097] [client 20.204.42.136:7121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/z60.php"] [unique_id "aryzgE5Phls--iYlcKgdawAAAX8"]
[Wed Sep 30 01:00:16.872401 2026] [security2:error] [pid 186850:tid 186852] [remote 121.92.18.96:40450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.18.92.121.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "aryzgE5Phls--iYlcKgdbAABRAE"], referer: https://nysas.org/wp-admin/
[Wed Sep 30 01:00:16.884242 2026] [security2:error] [pid 186850:tid 186998] [client 216.73.216.46:28071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzgE5Phls--iYlcKgdbQAAARw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5MTk3
[Wed Sep 30 01:00:16.907075 2026] [security2:error] [pid 186850:tid 187094] [client 20.219.2.60:20168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws49.php"] [unique_id "aryzgE5Phls--iYlcKgdbgAAAXw"]
[Wed Sep 30 01:00:16.911420 2026] [security2:error] [pid 186850:tid 187058] [client 20.211.90.37:47080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/matcha.php"] [unique_id "aryzgE5Phls--iYlcKgdbwAAAVg"]
[Wed Sep 30 01:00:17.129218 2026] [security2:error] [pid 186850:tid 187106] [client 45.138.12.32:20214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zmz.trv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzgU5Phls--iYlcKgddAAAAYg"]
[Wed Sep 30 01:00:17.151534 2026] [security2:error] [pid 186850:tid 186980] [client 45.138.12.32:20244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zxb.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzgU5Phls--iYlcKgddgAAAQo"]
[Wed Sep 30 01:00:17.252342 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:17.252623 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:17.255596 2026] [security2:error] [pid 186850:tid 187036] [client 49.36.41.37:58289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdfwAAAUI"]
[Wed Sep 30 01:00:17.255715 2026] [security2:error] [pid 186850:tid 187036] [client 49.36.41.37:58289] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdfwAAAUI"]
[Wed Sep 30 01:00:17.255839 2026] [security2:error] [pid 186850:tid 187084] [client 114.119.152.12:28521] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kcd-global.com"] [uri "/shop-products/page/2/"] [unique_id "aryzgU5Phls--iYlcKgdgAAAAXI"], referer: https://kcd-global.com/shop-products
[Wed Sep 30 01:00:17.284712 2026] [security2:error] [pid 186850:tid 186985] [client 213.136.69.135:57158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-script-modules.php"] [unique_id "aryzgU5Phls--iYlcKgdhAAAAQ8"], referer: binance.com
[Wed Sep 30 01:00:17.305778 2026] [security2:error] [pid 186850:tid 187054] [client 52.172.226.14:32728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/maint/14.php"] [unique_id "aryzgU5Phls--iYlcKgdhQAAAVQ"]
[Wed Sep 30 01:00:17.325161 2026] [security2:error] [pid 186850:tid 187103] [client 182.69.182.151:1984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdhgAAAYU"]
[Wed Sep 30 01:00:17.325695 2026] [security2:error] [pid 186850:tid 187103] [client 182.69.182.151:1984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdhgAAAYU"]
[Wed Sep 30 01:00:17.342786 2026] [security2:error] [pid 186850:tid 187092] [client 20.204.42.136:6993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/imageskir.php"] [unique_id "aryzgU5Phls--iYlcKgdiAAAAXo"]
[Wed Sep 30 01:00:17.376681 2026] [security2:error] [pid 186850:tid 187070] [client 20.219.2.60:20060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-blog-header.php"] [unique_id "aryzgU5Phls--iYlcKgdigAAAWQ"]
[Wed Sep 30 01:00:17.445759 2026] [security2:error] [pid 186850:tid 187067] [client 223.235.102.107:23136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdjwAAAWE"]
[Wed Sep 30 01:00:17.446894 2026] [security2:error] [pid 186850:tid 187067] [client 223.235.102.107:23136] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdjwAAAWE"]
[Wed Sep 30 01:00:17.478835 2026] [security2:error] [pid 186850:tid 187082] [client 150.107.232.159:36092] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdjQAAAXA"]
[Wed Sep 30 01:00:17.478982 2026] [security2:error] [pid 186850:tid 187082] [client 150.107.232.159:36092] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdjQAAAXA"]
[Wed Sep 30 01:00:17.580836 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.581114 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.654697 2026] [security2:error] [pid 186850:tid 186872] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzgU5Phls--iYlcKgdngABEBU"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D52211
[Wed Sep 30 01:00:17.665846 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.666121 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.680280 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.680568 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.711306 2026] [security2:error] [pid 186850:tid 187006] [client 20.194.5.96:35611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzgU5Phls--iYlcKgdpAAAASQ"]
[Wed Sep 30 01:00:17.751293 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:17.751542 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:17.762162 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.762411 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.783229 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.783520 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.787880 2026] [security2:error] [pid 186850:tid 186991] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzgU5Phls--iYlcKgdpQAAARU"]
[Wed Sep 30 01:00:17.788623 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.788932 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.821643 2026] [security2:error] [pid 186850:tid 187066] [client 20.204.42.136:7141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/backup-helper.php"] [unique_id "aryzgU5Phls--iYlcKgdswAAAWA"]
[Wed Sep 30 01:00:17.825303 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.825559 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.843903 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.844335 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.846027 2026] [security2:error] [pid 186850:tid 187050] [client 20.219.2.60:19580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bgymj.php"] [unique_id "aryzgU5Phls--iYlcKgdtgAAAVA"]
[Wed Sep 30 01:00:17.876814 2026] [security2:error] [pid 186850:tid 187031] [client 155.190.6.18:33682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdvgAAAT0"]
[Wed Sep 30 01:00:17.883664 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.884084 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.886269 2026] [security2:error] [pid 186850:tid 187084] [client 20.211.90.37:47974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/aboutt.php"] [unique_id "aryzgU5Phls--iYlcKgdvwAAAXI"]
[Wed Sep 30 01:00:17.895742 2026] [security2:error] [pid 186850:tid 186988] [client 104.208.65.139:48837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/alfa.php"] [unique_id "aryzgU5Phls--iYlcKgdwAAAARI"]
[Wed Sep 30 01:00:17.911163 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.911423 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.929327 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:17.929605 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:17.996996 2026] [security2:error] [pid 186850:tid 186964] [remote 121.92.18.96:40450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.18.92.121.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdyQABd3E"]
[Wed Sep 30 01:00:17.997139 2026] [security2:error] [pid 186850:tid 187089] [client 121.92.18.96:40450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nysas.org"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdyQABd3E"]
[Wed Sep 30 01:00:18.006173 2026] [autoindex:error] [pid 186850:tid 187091] [client 212.156.70.154:27417] AH01276: Cannot serve directory /home4/pxcaebmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:18.031475 2026] [access_compat:error] [pid 186850:tid 187039] [client 47.79.206.242:53614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:00:18.031744 2026] [access_compat:error] [pid 186850:tid 187039] [client 47.79.206.242:53614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:00:18.120650 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.121128 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.121795 2026] [security2:error] [pid 186850:tid 187080] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzgk5Phls--iYlcKgd1QAAAW4"]
[Wed Sep 30 01:00:18.138687 2026] [security2:error] [pid 186850:tid 187047] [client 223.181.30.165:25153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd2AAAAU0"]
[Wed Sep 30 01:00:18.138806 2026] [security2:error] [pid 186850:tid 187047] [client 223.181.30.165:25153] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd2AAAAU0"]
[Wed Sep 30 01:00:18.154150 2026] [security2:error] [pid 186850:tid 187031] [client 155.190.6.18:33682] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzgU5Phls--iYlcKgdvgAAAT0"]
[Wed Sep 30 01:00:18.174202 2026] [security2:error] [pid 186850:tid 187026] [client 20.214.191.94:23278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/177.php"] [unique_id "aryzgk5Phls--iYlcKgd2gAAATg"]
[Wed Sep 30 01:00:18.209066 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.209345 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.300122 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.300372 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.301926 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:18.302208 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:18.302675 2026] [security2:error] [pid 186850:tid 187027] [client 20.219.2.60:19487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gfd.php"] [unique_id "aryzgk5Phls--iYlcKgd5wAAATk"]
[Wed Sep 30 01:00:18.317027 2026] [security2:error] [pid 186850:tid 187000] [client 20.204.42.136:7127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/1xmomo.php"] [unique_id "aryzgk5Phls--iYlcKgd6gAAAR4"]
[Wed Sep 30 01:00:18.354136 2026] [security2:error] [pid 186850:tid 187030] [client 20.211.90.37:47989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/opsh.php"] [unique_id "aryzgk5Phls--iYlcKgd7AAAATw"]
[Wed Sep 30 01:00:18.367546 2026] [log_config:warn] [pid 178882:tid 179123] (32)Broken pipe: [remote 40.77.167.130:22996] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --suffix=-bytes_log
[Wed Sep 30 01:00:18.367563 2026] [log_config:warn] [pid 178882:tid 179123] (32)Broken pipe: [remote 40.77.167.130:22996] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=just2086.justhost.com --mainout=/etc/apache2/logs/access_log
[Wed Sep 30 01:00:18.390774 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.391068 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.443290 2026] [security2:error] [pid 186850:tid 187073] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzgk5Phls--iYlcKgd8QAAAWc"]
[Wed Sep 30 01:00:18.455583 2026] [security2:error] [pid 186850:tid 186984] [client 20.194.30.107:17489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/aaa.php"] [unique_id "aryzgk5Phls--iYlcKgd9AAAAQ4"]
[Wed Sep 30 01:00:18.463970 2026] [core:error] [pid 186850:tid 187064] [client 104.208.65.139:41074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:00:18.463996 2026] [core:error] [pid 186850:tid 187064] [client 104.208.65.139:41074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:00:18.482940 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.483228 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.485627 2026] [security2:error] [pid 186850:tid 187043] [client 103.241.204.139:59630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd-AAAAUk"]
[Wed Sep 30 01:00:18.485761 2026] [security2:error] [pid 186850:tid 187043] [client 103.241.204.139:59630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd-AAAAUk"]
[Wed Sep 30 01:00:18.489222 2026] [security2:error] [pid 186850:tid 186981] [client 4.196.65.241:19093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ho.php"] [unique_id "aryzgk5Phls--iYlcKgd-gAAAQs"]
[Wed Sep 30 01:00:18.507884 2026] [security2:error] [pid 186850:tid 187012] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzgk5Phls--iYlcKgd6QAAASo"]
[Wed Sep 30 01:00:18.511643 2026] [security2:error] [pid 186850:tid 187010] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/contact"] [unique_id "aryzgk5Phls--iYlcKgd4gAAASg"]
[Wed Sep 30 01:00:18.543833 2026] [security2:error] [pid 186850:tid 187070] [client 122.173.27.10:10863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd_AAAAWQ"]
[Wed Sep 30 01:00:18.543990 2026] [security2:error] [pid 186850:tid 187070] [client 122.173.27.10:10863] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgd_AAAAWQ"]
[Wed Sep 30 01:00:18.572759 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.573219 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.647131 2026] [security2:error] [pid 186850:tid 187074] [client 20.194.5.96:35488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzgk5Phls--iYlcKgeAAAAAWg"]
[Wed Sep 30 01:00:18.661628 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.661902 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.730934 2026] [security2:error] [pid 186850:tid 186993] [client 52.172.226.14:32100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/xx.php"] [unique_id "aryzgk5Phls--iYlcKgeDAAAARc"]
[Wed Sep 30 01:00:18.753696 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.754672 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.761139 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:18.761415 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:18.775278 2026] [security2:error] [pid 186850:tid 187047] [client 20.219.2.60:20056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/callback.php"] [unique_id "aryzgk5Phls--iYlcKgeEwAAAU0"]
[Wed Sep 30 01:00:18.814216 2026] [security2:error] [pid 186850:tid 187009] [client 20.204.42.136:7132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/almafkew.php"] [unique_id "aryzgk5Phls--iYlcKgeFQAAASc"]
[Wed Sep 30 01:00:18.845871 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.846172 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.863323 2026] [security2:error] [pid 186850:tid 187076] [client 45.138.12.32:20236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zwi.baf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzgk5Phls--iYlcKgeGAAAAWo"]
[Wed Sep 30 01:00:18.893292 2026] [security2:error] [pid 186850:tid 187096] [client 20.211.90.37:47981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/photo.php"] [unique_id "aryzgk5Phls--iYlcKgeGwAAAX4"]
[Wed Sep 30 01:00:18.923636 2026] [security2:error] [pid 186850:tid 187048] [client 201.228.48.133:64482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.48.228.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "combatscore.com"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgeGQAAAU4"]
[Wed Sep 30 01:00:18.923879 2026] [security2:error] [pid 186850:tid 187048] [client 201.228.48.133:64482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "combatscore.com"] [uri "/xmlrpc.php"] [unique_id "aryzgk5Phls--iYlcKgeGQAAAU4"]
[Wed Sep 30 01:00:18.937297 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:18.937585 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:18.948608 2026] [security2:error] [pid 186850:tid 186998] [client 187.108.125.196:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzgk5Phls--iYlcKgeHwAAARw"]
[Wed Sep 30 01:00:19.024116 2026] [security2:error] [pid 186850:tid 187025] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzgk5Phls--iYlcKgeFAAAATc"]
[Wed Sep 30 01:00:19.026583 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.026861 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.028347 2026] [security2:error] [pid 186850:tid 187008] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgeJAAAASY"]
[Wed Sep 30 01:00:19.039967 2026] [security2:error] [pid 186850:tid 187021] [client 104.208.65.139:43338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/w.php"] [unique_id "aryzg05Phls--iYlcKgeJgAAATM"]
[Wed Sep 30 01:00:19.102983 2026] [security2:error] [pid 186850:tid 186992] [client 20.214.191.94:23385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/ccc.php"] [unique_id "aryzg05Phls--iYlcKgeKAAAARY"]
[Wed Sep 30 01:00:19.114106 2026] [security2:error] [pid 186850:tid 187059] [client 45.138.12.32:33684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zgs.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzg05Phls--iYlcKgeKwAAAVk"]
[Wed Sep 30 01:00:19.118601 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.118855 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:59690] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.169457 2026] [security2:error] [pid 186850:tid 187085] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/pages/\\xce\\xb5\\xcf\\x80\\xce\\xb9\\xce\\xba\\xce\\xbf\\xce\\xb9\\xce\\xbd\\xcf\\x89\\xce\\xbd\\xce\\xb9\\xce\\xb1/"] [unique_id "aryzgk5Phls--iYlcKgeDgAAAXM"]
[Wed Sep 30 01:00:19.210038 2026] [security2:error] [pid 186850:tid 186988] [client 4.240.25.22:20289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/blurbs.php"] [unique_id "aryzg05Phls--iYlcKgeOQAAARI"]
[Wed Sep 30 01:00:19.210170 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.210529 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.250343 2026] [security2:error] [pid 186850:tid 187070] [client 20.219.2.60:19561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/file.php"] [unique_id "aryzg05Phls--iYlcKgeOgAAAWQ"]
[Wed Sep 30 01:00:19.257010 2026] [security2:error] [pid 186850:tid 187007] [client 20.194.30.107:43199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/aaa.php"] [unique_id "aryzg05Phls--iYlcKgeOwAAASU"]
[Wed Sep 30 01:00:19.293777 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:19.294039 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:38010] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:19.298665 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.298925 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.302006 2026] [security2:error] [pid 186850:tid 187053] [client 20.204.42.136:7022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/database2.php"] [unique_id "aryzg05Phls--iYlcKgeQAAAAVM"]
[Wed Sep 30 01:00:19.321769 2026] [security2:error] [pid 186850:tid 187089] [client 20.211.90.37:47082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-fxxxx.php"] [unique_id "aryzg05Phls--iYlcKgeQwAAAXc"]
[Wed Sep 30 01:00:19.332614 2026] [security2:error] [pid 186850:tid 187020] [client 52.172.226.14:32745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/gelay.php"] [unique_id "aryzg05Phls--iYlcKgeRAAAATI"]
[Wed Sep 30 01:00:19.362396 2026] [security2:error] [pid 186850:tid 187046] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgeRgAAAUw"]
[Wed Sep 30 01:00:19.395975 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.396404 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.442640 2026] [security2:error] [pid 186850:tid 186987] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgeSAAAARE"]
[Wed Sep 30 01:00:19.483627 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.483897 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:54088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.495049 2026] [security2:error] [pid 186850:tid 187091] [client 20.214.191.94:23289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/0xD.php"] [unique_id "aryzg05Phls--iYlcKgeSgAAAXk"]
[Wed Sep 30 01:00:19.504564 2026] [security2:error] [pid 186850:tid 187047] [client 104.208.65.139:43368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wp_blog_footer.php"] [unique_id "aryzg05Phls--iYlcKgeSwAAAU0"]
[Wed Sep 30 01:00:19.544429 2026] [security2:error] [pid 186850:tid 187009] [client 216.73.216.46:59690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzg05Phls--iYlcKgeTgAAASc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvbWVtb3J5NDAvcG93ZXI%3D
[Wed Sep 30 01:00:19.573080 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.573362 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.664195 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.664445 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.729785 2026] [security2:error] [pid 186850:tid 187088] [client 20.211.90.37:47101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp-filemannger4h.php"] [unique_id "aryzg05Phls--iYlcKgeWQAAAXY"]
[Wed Sep 30 01:00:19.737277 2026] [security2:error] [pid 186850:tid 187037] [client 20.219.2.60:20055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bolt.php"] [unique_id "aryzg05Phls--iYlcKgeXAAAAUM"]
[Wed Sep 30 01:00:19.757605 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.757970 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.785595 2026] [security2:error] [pid 186850:tid 187025] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgeXgAAATc"]
[Wed Sep 30 01:00:19.797430 2026] [security2:error] [pid 186850:tid 187042] [client 20.204.42.136:7144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/aa.php"] [unique_id "aryzg05Phls--iYlcKgeYgAAAUg"]
[Wed Sep 30 01:00:19.809170 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:19.809478 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:19.847813 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.848097 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:19.866415 2026] [security2:error] [pid 186850:tid 187083] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgeaAAAAXE"]
[Wed Sep 30 01:00:19.889960 2026] [security2:error] [pid 186850:tid 187085] [client 216.73.216.46:54088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzg05Phls--iYlcKgeawAAAXM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvY3B1MC9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTI%3D
[Wed Sep 30 01:00:19.900404 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.5.96:35588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/adminfuns.php"] [unique_id "aryzg05Phls--iYlcKgebgAAATs"]
[Wed Sep 30 01:00:19.937062 2026] [security2:error] [pid 186850:tid 187107] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzg05Phls--iYlcKgebwAAAYk"]
[Wed Sep 30 01:00:19.937220 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:19.937476 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.027158 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.027438 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:3538] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.045430 2026] [security2:error] [pid 186850:tid 187082] [client 152.59.169.65:62100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzhE5Phls--iYlcKgeeAAAAXA"]
[Wed Sep 30 01:00:20.045540 2026] [security2:error] [pid 186850:tid 187082] [client 152.59.169.65:62100] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzhE5Phls--iYlcKgeeAAAAXA"]
[Wed Sep 30 01:00:20.113517 2026] [security2:error] [pid 186850:tid 187063] [client 216.73.216.46:3538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzhE5Phls--iYlcKgeegAAAV0"]
[Wed Sep 30 01:00:20.137952 2026] [security2:error] [pid 186850:tid 187067] [client 20.211.90.37:48432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/ffl.php"] [unique_id "aryzhE5Phls--iYlcKgefQAAAWE"]
[Wed Sep 30 01:00:20.199759 2026] [security2:error] [pid 186850:tid 187100] [client 20.219.2.60:20037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-blogs.php"] [unique_id "aryzhE5Phls--iYlcKgeggAAAYI"]
[Wed Sep 30 01:00:20.202969 2026] [security2:error] [pid 186850:tid 187080] [client 20.214.191.94:23242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/sallu.php"] [unique_id "aryzhE5Phls--iYlcKgegwAAAW4"]
[Wed Sep 30 01:00:20.213803 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.214247 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.244243 2026] [security2:error] [pid 186850:tid 187015] [client 52.172.226.14:32109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/htaccess.php"] [unique_id "aryzhE5Phls--iYlcKgehgAAAS0"]
[Wed Sep 30 01:00:20.247983 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:20.248273 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:20.279418 2026] [security2:error] [pid 186850:tid 187017] [client 20.204.42.136:7124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/pJPoKA.php"] [unique_id "aryzhE5Phls--iYlcKgeiAAAAS8"]
[Wed Sep 30 01:00:20.302360 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.302627 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.392854 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.393206 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.423392 2026] [security2:error] [pid 186850:tid 187011] [client 20.194.30.107:9995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/ohct.php"] [unique_id "aryzhE5Phls--iYlcKgekAAAASk"]
[Wed Sep 30 01:00:20.484528 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.484806 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.515819 2026] [security2:error] [pid 186850:tid 186996] [client 20.211.90.37:47103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/wp5.php"] [unique_id "aryzhE5Phls--iYlcKgekwAAARo"]
[Wed Sep 30 01:00:20.529497 2026] [security2:error] [pid 186850:tid 187094] [client 20.214.191.94:23238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/xwpg.php"] [unique_id "aryzhE5Phls--iYlcKgelAAAAXw"]
[Wed Sep 30 01:00:20.574389 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.574668 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:24072] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.582376 2026] [security2:error] [pid 186850:tid 186994] [client 4.240.25.22:11908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/sb.php"] [unique_id "aryzhE5Phls--iYlcKgemAAAARg"]
[Wed Sep 30 01:00:20.606705 2026] [security2:error] [pid 186850:tid 187041] [client 20.194.30.107:64725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/robots.php"] [unique_id "aryzhE5Phls--iYlcKgenQAAAUc"]
[Wed Sep 30 01:00:20.621547 2026] [security2:error] [pid 186850:tid 186980] [client 104.208.65.139:18411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/robot.php"] [unique_id "aryzhE5Phls--iYlcKgenwAAAQo"]
[Wed Sep 30 01:00:20.654836 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.2.60:19556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/zlnckdxn.php"] [unique_id "aryzhE5Phls--iYlcKgepwAAASQ"]
[Wed Sep 30 01:00:20.667826 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.668283 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.757386 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.757669 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.780747 2026] [security2:error] [pid 186850:tid 187082] [client 20.204.42.136:7111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/24.php"] [unique_id "aryzhE5Phls--iYlcKgeswAAAXA"]
[Wed Sep 30 01:00:20.829622 2026] [security2:error] [pid 186850:tid 187070] [client 20.194.5.96:35585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/av.php"] [unique_id "aryzhE5Phls--iYlcKgetwAAAWQ"]
[Wed Sep 30 01:00:20.843120 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:20.843389 2026] [access_compat:error] [pid 186850:tid 187103] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:20.850220 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.850548 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:20.878340 2026] [security2:error] [pid 186850:tid 187046] [client 20.211.90.37:48431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/koiy.php"] [unique_id "aryzhE5Phls--iYlcKgeugAAAUw"]
[Wed Sep 30 01:00:20.949198 2026] [security2:error] [pid 186850:tid 187068] [client 52.172.226.14:32098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/readme.php"] [unique_id "aryzhE5Phls--iYlcKgeuwAAAWI"]
[Wed Sep 30 01:00:20.993768 2026] [security2:error] [pid 186850:tid 187098] [client 216.73.216.46:24072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzhE5Phls--iYlcKgevwAAAYA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTE5L3Bvd2Vy
[Wed Sep 30 01:00:20.995474 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:20.995728 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.048873 2026] [security2:error] [pid 186850:tid 187023] [client 103.159.192.142:54446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgewQAAATU"]
[Wed Sep 30 01:00:21.048994 2026] [security2:error] [pid 186850:tid 187023] [client 103.159.192.142:54446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgewQAAATU"]
[Wed Sep 30 01:00:21.085486 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.085746 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.121467 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.121727 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.127415 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:19553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/fs6.php"] [unique_id "aryzhU5Phls--iYlcKgexAAAAXk"]
[Wed Sep 30 01:00:21.151298 2026] [security2:error] [pid 186850:tid 187047] [client 4.196.65.241:2520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/h86jb6g8.php"] [unique_id "aryzhU5Phls--iYlcKgexQAAAU0"]
[Wed Sep 30 01:00:21.199418 2026] [security2:error] [pid 186850:tid 187056] [client 193.163.101.113:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzhU5Phls--iYlcKgezwAAAVY"]
[Wed Sep 30 01:00:21.203896 2026] [security2:error] [pid 186850:tid 187086] [client 116.193.128.26:53082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgezgAAAXQ"]
[Wed Sep 30 01:00:21.204000 2026] [security2:error] [pid 186850:tid 187086] [client 116.193.128.26:53082] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgezgAAAXQ"]
[Wed Sep 30 01:00:21.213737 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.214034 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.246209 2026] [security2:error] [pid 186850:tid 187088] [client 20.70.173.30:52206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/0.php"] [unique_id "aryzhU5Phls--iYlcKge0QAAAXY"]
[Wed Sep 30 01:00:21.255028 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:21.255301 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:21.261340 2026] [security2:error] [pid 186850:tid 187027] [client 20.204.42.136:7050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/42b5827789index.php"] [unique_id "aryzhU5Phls--iYlcKge0wAAATk"]
[Wed Sep 30 01:00:21.304206 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.304470 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.315597 2026] [security2:error] [pid 186850:tid 187041] [client 20.211.90.37:47940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/bnmtp.php"] [unique_id "aryzhU5Phls--iYlcKge1gAAAUc"]
[Wed Sep 30 01:00:21.320695 2026] [security2:error] [pid 186850:tid 186980] [client 20.214.191.94:23249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/flamini.php"] [unique_id "aryzhU5Phls--iYlcKge1wAAAQo"]
[Wed Sep 30 01:00:21.366450 2026] [autoindex:error] [pid 186850:tid 186866] [remote 93.152.209.11:43974] AH01276: Cannot serve directory /home4/therxfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:21.370727 2026] [security2:error] [pid 186850:tid 187092] [client 152.59.165.7:59869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKge2gAAAXo"]
[Wed Sep 30 01:00:21.370825 2026] [security2:error] [pid 186850:tid 187092] [client 152.59.165.7:59869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKge2gAAAXo"]
[Wed Sep 30 01:00:21.395038 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.395442 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.422897 2026] [security2:error] [pid 186850:tid 187087] [client 172.232.180.137:61981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/ycrfquve.php"] [unique_id "aryzhU5Phls--iYlcKge3wAAAXU"], referer: www.google.com
[Wed Sep 30 01:00:21.486459 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.486790 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.515064 2026] [security2:error] [pid 186850:tid 186985] [client 172.232.180.137:64008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "aryzhU5Phls--iYlcKge4QAAAQ8"]
[Wed Sep 30 01:00:21.577290 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.577568 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.595846 2026] [security2:error] [pid 186850:tid 187044] [client 20.194.5.96:35589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/dex.php"] [unique_id "aryzhU5Phls--iYlcKge5QAAAUo"]
[Wed Sep 30 01:00:21.595979 2026] [security2:error] [pid 186850:tid 187090] [client 20.219.2.60:20043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/xwzs.php"] [unique_id "aryzhU5Phls--iYlcKge5gAAAXg"]
[Wed Sep 30 01:00:21.626267 2026] [security2:error] [pid 186850:tid 187074] [client 194.135.26.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzhU5Phls--iYlcKge6QAAAWg"]
[Wed Sep 30 01:00:21.668751 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.669028 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.694397 2026] [security2:error] [pid 186850:tid 187033] [client 45.138.12.32:20316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zvh.jky.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzhU5Phls--iYlcKge9QAAAT8"]
[Wed Sep 30 01:00:21.720257 2026] [security2:error] [pid 186850:tid 187081] [client 106.214.3.140:17979] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKge9gAAAW8"]
[Wed Sep 30 01:00:21.722569 2026] [security2:error] [pid 186850:tid 187081] [client 106.214.3.140:17979] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKge9gAAAW8"]
[Wed Sep 30 01:00:21.732786 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:32092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/max.php"] [unique_id "aryzhU5Phls--iYlcKge9wAAAWw"]
[Wed Sep 30 01:00:21.739971 2026] [security2:error] [pid 186850:tid 187077] [client 20.204.42.136:6987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/mmq.php"] [unique_id "aryzhU5Phls--iYlcKge-AAAAWs"]
[Wed Sep 30 01:00:21.753023 2026] [security2:error] [pid 186850:tid 187030] [client 4.196.65.241:19147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wpx2.php"] [unique_id "aryzhU5Phls--iYlcKge_AAAATw"]
[Wed Sep 30 01:00:21.763604 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.763979 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.781534 2026] [security2:error] [pid 186850:tid 186994] [client 105.112.178.79:38337] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fef.pcx.mybluehost.me"] [uri "/.env"] [unique_id "aryzhU5Phls--iYlcKgfAQAAARg"]
[Wed Sep 30 01:00:21.811574 2026] [security2:error] [pid 186850:tid 187000] [client 20.194.30.107:30403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/kj.php"] [unique_id "aryzhU5Phls--iYlcKgfAwAAAR4"]
[Wed Sep 30 01:00:21.819816 2026] [security2:error] [pid 186850:tid 187002] [client 20.211.90.37:47041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/abbi.php"] [unique_id "aryzhU5Phls--iYlcKgfBQAAASA"]
[Wed Sep 30 01:00:21.844676 2026] [security2:error] [pid 186850:tid 187025] [client 203.122.45.246:52145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgfBgAAATc"]
[Wed Sep 30 01:00:21.844885 2026] [security2:error] [pid 186850:tid 187025] [client 203.122.45.246:52145] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgfBgAAATc"]
[Wed Sep 30 01:00:21.851275 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.851562 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.910072 2026] [security2:error] [pid 186850:tid 187073] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzhU5Phls--iYlcKge8AAAAWc"]
[Wed Sep 30 01:00:21.915349 2026] [security2:error] [pid 186850:tid 187020] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/contact-us"] [unique_id "aryzhU5Phls--iYlcKge7AAAATI"]
[Wed Sep 30 01:00:21.918724 2026] [security2:error] [pid 186850:tid 187049] [client 20.214.191.94:23241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/themes.php"] [unique_id "aryzhU5Phls--iYlcKgfCgAAAU8"]
[Wed Sep 30 01:00:21.940647 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:21.941050 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:21.958909 2026] [security2:error] [pid 186850:tid 187072] [client 202.179.95.79:64638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgfDQAAAWY"]
[Wed Sep 30 01:00:21.959024 2026] [security2:error] [pid 186850:tid 187072] [client 202.179.95.79:64638] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzhU5Phls--iYlcKgfDQAAAWY"]
[Wed Sep 30 01:00:22.034071 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.034366 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.076079 2026] [security2:error] [pid 186850:tid 187059] [client 20.219.2.60:20046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryzhk5Phls--iYlcKgfEwAAAVk"]
[Wed Sep 30 01:00:22.119652 2026] [security2:error] [pid 186850:tid 187074] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzhk5Phls--iYlcKgfFAAAAWg"]
[Wed Sep 30 01:00:22.123966 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.124258 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.213900 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.214187 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.220086 2026] [security2:error] [pid 186850:tid 187032] [client 20.204.42.136:7084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/fryvbbn.php"] [unique_id "aryzhk5Phls--iYlcKgfHgAAAT4"]
[Wed Sep 30 01:00:22.228074 2026] [security2:error] [pid 186850:tid 186989] [client 20.211.90.37:48443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apcooper.co.uk"] [uri "/asw.php"] [unique_id "aryzhk5Phls--iYlcKgfHwAAARM"]
[Wed Sep 30 01:00:22.237171 2026] [ssl:error] [pid 186850:tid 187093] [client 216.25.124.26:62353] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname webmail.dan.medredisolutions.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:00:22.257634 2026] [security2:error] [pid 186850:tid 187015] [client 4.240.25.22:20293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/min.php"] [unique_id "aryzhk5Phls--iYlcKgfIgAAAS0"]
[Wed Sep 30 01:00:22.298321 2026] [security2:error] [pid 186850:tid 187079] [client 106.214.2.47:10135] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfJwAAAW0"]
[Wed Sep 30 01:00:22.305406 2026] [security2:error] [pid 186850:tid 187079] [client 106.214.2.47:10135] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfJwAAAW0"]
[Wed Sep 30 01:00:22.306978 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.307421 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.333613 2026] [security2:error] [pid 186850:tid 187047] [client 52.172.226.14:32515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/post.php"] [unique_id "aryzhk5Phls--iYlcKgfLAAAAU0"]
[Wed Sep 30 01:00:22.401410 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.401839 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.477704 2026] [security2:error] [pid 186850:tid 186993] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzhk5Phls--iYlcKgfLwAAARc"]
[Wed Sep 30 01:00:22.488406 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.488682 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.525019 2026] [security2:error] [pid 186850:tid 187038] [client 20.194.5.96:35603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/chosen.php"] [unique_id "aryzhk5Phls--iYlcKgfMgAAAUQ"]
[Wed Sep 30 01:00:22.537547 2026] [security2:error] [pid 186850:tid 187071] [client 20.219.2.60:20071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws66.php"] [unique_id "aryzhk5Phls--iYlcKgfNAAAAWU"]
[Wed Sep 30 01:00:22.578750 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.579027 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.590263 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.191.94:23268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/0.php"] [unique_id "aryzhk5Phls--iYlcKgfNgAAAQ4"]
[Wed Sep 30 01:00:22.610972 2026] [security2:error] [pid 186850:tid 186954] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzhk5Phls--iYlcKgfNwABIWc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1665&t=4545
[Wed Sep 30 01:00:22.611005 2026] [security2:error] [pid 186850:tid 186954] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzhk5Phls--iYlcKgfNwABIWc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1665&t=4545
[Wed Sep 30 01:00:22.660169 2026] [security2:error] [pid 186850:tid 187046] [client 43.227.131.37:11549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfOAAAAUw"]
[Wed Sep 30 01:00:22.660311 2026] [security2:error] [pid 186850:tid 187046] [client 43.227.131.37:11549] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfOAAAAUw"]
[Wed Sep 30 01:00:22.673040 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.673484 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.697789 2026] [security2:error] [pid 186850:tid 187035] [client 20.204.42.136:7149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/ff.update.php"] [unique_id "aryzhk5Phls--iYlcKgfPwAAAUE"]
[Wed Sep 30 01:00:22.760440 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.760690 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.800611 2026] [security2:error] [pid 186850:tid 187023] [client 72.255.10.32:55395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfRQAAATU"]
[Wed Sep 30 01:00:22.800723 2026] [security2:error] [pid 186850:tid 187023] [client 72.255.10.32:55395] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzhk5Phls--iYlcKgfRQAAATU"]
[Wed Sep 30 01:00:22.811365 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:22.811781 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:22.820829 2026] [security2:error] [pid 186850:tid 186988] [client 52.172.226.14:32718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/themes.php"] [unique_id "aryzhk5Phls--iYlcKgfTAAAARI"]
[Wed Sep 30 01:00:22.853744 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.854157 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.897532 2026] [security2:error] [pid 186850:tid 187084] [client 186.156.43.108:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzhk5Phls--iYlcKgfVQAAAXI"]
[Wed Sep 30 01:00:22.944691 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:22.944967 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:22.999371 2026] [security2:error] [pid 186850:tid 187042] [client 20.219.2.60:19469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ewe.php"] [unique_id "aryzhk5Phls--iYlcKgfWQAAAUg"]
[Wed Sep 30 01:00:23.003971 2026] [security2:error] [pid 186850:tid 187077] [client 20.214.191.94:23404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/opsh.php"] [unique_id "aryzh05Phls--iYlcKgfWgAAAWs"]
[Wed Sep 30 01:00:23.006540 2026] [security2:error] [pid 186850:tid 187054] [client 104.208.65.139:14291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/sss.php"] [unique_id "aryzh05Phls--iYlcKgfWwAAAVQ"]
[Wed Sep 30 01:00:23.032554 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.032827 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.125432 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.125713 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.158021 2026] [security2:error] [pid 186850:tid 186993] [client 20.204.42.136:7147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/lzlhihzi.php"] [unique_id "aryzh05Phls--iYlcKgfaQAAARc"]
[Wed Sep 30 01:00:23.215573 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.215857 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.259526 2026] [security2:error] [pid 186850:tid 187058] [client 116.72.182.19:55755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzh05Phls--iYlcKgfcQAAAVg"]
[Wed Sep 30 01:00:23.259674 2026] [security2:error] [pid 186850:tid 187058] [client 116.72.182.19:55755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzh05Phls--iYlcKgfcQAAAVg"]
[Wed Sep 30 01:00:23.294738 2026] [security2:error] [pid 186850:tid 186996] [client 52.172.226.14:32740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aryzh05Phls--iYlcKgfdAAAARo"]
[Wed Sep 30 01:00:23.306425 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.306863 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.318261 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:23.318534 2026] [access_compat:error] [pid 186850:tid 187094] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:23.360485 2026] [security2:error] [pid 186850:tid 187021] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzh05Phls--iYlcKgfYQAAATM"]
[Wed Sep 30 01:00:23.397210 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.397475 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:28682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.401995 2026] [security2:error] [pid 186850:tid 186980] [client 20.194.30.107:44254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/images.php"] [unique_id "aryzh05Phls--iYlcKgfegAAAQo"]
[Wed Sep 30 01:00:23.443322 2026] [security2:error] [pid 186850:tid 187000] [client 43.104.4.204:23125] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryzh05Phls--iYlcKgffAAAAR4"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:23.449046 2026] [security2:error] [pid 186850:tid 187096] [client 20.194.30.107:10129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lasvegasrealtor360.com"] [uri "/wp.php"] [unique_id "aryzh05Phls--iYlcKgffQAAAX4"]
[Wed Sep 30 01:00:23.462869 2026] [security2:error] [pid 186850:tid 187107] [client 20.219.2.60:20163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/aboute.php"] [unique_id "aryzh05Phls--iYlcKgffgAAAYk"]
[Wed Sep 30 01:00:23.482190 2026] [security2:error] [pid 186850:tid 187073] [client 216.73.216.46:28682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzh05Phls--iYlcKgfgAAAAWc"]
[Wed Sep 30 01:00:23.558258 2026] [security2:error] [pid 186850:tid 187075] [client 20.194.5.96:35607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/radio.php"] [unique_id "aryzh05Phls--iYlcKgfiAAAAWk"]
[Wed Sep 30 01:00:23.578099 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.578372 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.580263 2026] [security2:error] [pid 186850:tid 187026] [client 49.205.105.16:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzh05Phls--iYlcKgfigAAATg"]
[Wed Sep 30 01:00:23.580409 2026] [security2:error] [pid 186850:tid 187026] [client 49.205.105.16:14333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzh05Phls--iYlcKgfigAAATg"]
[Wed Sep 30 01:00:23.589662 2026] [security2:error] [pid 186850:tid 187043] [client 93.152.84.96:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzh05Phls--iYlcKgfjQAAAUk"]
[Wed Sep 30 01:00:23.589672 2026] [security2:error] [pid 186850:tid 187047] [client 105.112.178.79:38339] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.arvanisocks.com"] [uri "/.env"] [unique_id "aryzh05Phls--iYlcKgfjgAAAU0"]
[Wed Sep 30 01:00:23.595298 2026] [security2:error] [pid 186850:tid 187044] [client 168.196.141.147:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzh05Phls--iYlcKgfkAAAAUo"]
[Wed Sep 30 01:00:23.670502 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.670794 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.682101 2026] [security2:error] [pid 186850:tid 187059] [client 20.204.42.136:7091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/bfdghfgv.php"] [unique_id "aryzh05Phls--iYlcKgflAAAAVk"]
[Wed Sep 30 01:00:23.682878 2026] [security2:error] [pid 186850:tid 186971] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzh05Phls--iYlcKgfkwABUHg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=84670&sid=558b08b808910f583708a6dd00d46767
[Wed Sep 30 01:00:23.682899 2026] [security2:error] [pid 186850:tid 186971] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzh05Phls--iYlcKgfkwABUHg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=84670&sid=558b08b808910f583708a6dd00d46767
[Wed Sep 30 01:00:23.763878 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.764322 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.830605 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:23.830912 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:23.850287 2026] [security2:error] [pid 186850:tid 187092] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/dashboard"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryzh05Phls--iYlcKgffwAAAXo"]
[Wed Sep 30 01:00:23.852265 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.852531 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:23.866878 2026] [security2:error] [pid 186850:tid 187038] [client 52.172.226.14:32108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryzh05Phls--iYlcKgfqQAAAUQ"]
[Wed Sep 30 01:00:23.880774 2026] [security2:error] [pid 186850:tid 187030] [client 43.104.4.204:23125] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "aryzh05Phls--iYlcKgfrAAAATw"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:23.922791 2026] [security2:error] [pid 186850:tid 187013] [client 20.214.191.94:23377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/pass4.php"] [unique_id "aryzh05Phls--iYlcKgfrwAAASs"]
[Wed Sep 30 01:00:23.927221 2026] [security2:error] [pid 186850:tid 187019] [client 20.219.2.60:20085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/x9.php"] [unique_id "aryzh05Phls--iYlcKgfsQAAATE"]
[Wed Sep 30 01:00:23.944939 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:23.945215 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.000116 2026] [security2:error] [pid 186850:tid 187046] [client 103.245.41.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzh05Phls--iYlcKgfvQAAAUw"]
[Wed Sep 30 01:00:24.025279 2026] [core:error] [pid 186850:tid 187083] [client 45.3.52.29:46695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:24.025308 2026] [core:error] [pid 186850:tid 187083] [client 45.3.52.29:46695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:24.034540 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.034853 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.062403 2026] [security2:error] [pid 186850:tid 186980] [client 45.138.12.32:33768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zwi.baf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryziE5Phls--iYlcKgfvwAAAQo"]
[Wed Sep 30 01:00:24.119241 2026] [security2:error] [pid 186850:tid 187075] [client 4.240.25.22:30751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/100.php"] [unique_id "aryziE5Phls--iYlcKgfxQAAAWk"]
[Wed Sep 30 01:00:24.157115 2026] [security2:error] [pid 186850:tid 186940] [remote 114.119.151.233:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayutd.torquayfans.com"] [uri "/"] [unique_id "aryziE5Phls--iYlcKgfxwABJVk"], referer: https://torquayutd.torquayfans.com/
[Wed Sep 30 01:00:24.178009 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.178296 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.184694 2026] [security2:error] [pid 186850:tid 187023] [client 20.204.42.136:7073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/Dss.php"] [unique_id "aryziE5Phls--iYlcKgfzQAAATU"]
[Wed Sep 30 01:00:24.215514 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.215975 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.266013 2026] [security2:error] [pid 186850:tid 187051] [client 45.138.12.32:5360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zvu.bkj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryziE5Phls--iYlcKgf2QAAAVE"]
[Wed Sep 30 01:00:24.290455 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:24.290722 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:24.307862 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.308142 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.380027 2026] [security2:error] [pid 186850:tid 187018] [client 52.172.226.14:32726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/click.php"] [unique_id "aryziE5Phls--iYlcKgf4QAAATA"]
[Wed Sep 30 01:00:24.395590 2026] [security2:error] [pid 186850:tid 187033] [client 20.219.2.60:19498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/an.php"] [unique_id "aryziE5Phls--iYlcKgf4wAAAT8"]
[Wed Sep 30 01:00:24.398406 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.398666 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.425949 2026] [security2:error] [pid 186850:tid 187028] [client 172.232.180.137:49839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-plain.php"] [unique_id "aryziE5Phls--iYlcKgf5AAAATo"], referer: www.google.com
[Wed Sep 30 01:00:24.450803 2026] [security2:error] [pid 186850:tid 186996] [client 116.197.133.25:52934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryziE5Phls--iYlcKgf5wAAARo"]
[Wed Sep 30 01:00:24.450918 2026] [security2:error] [pid 186850:tid 186996] [client 116.197.133.25:52934] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryziE5Phls--iYlcKgf5wAAARo"]
[Wed Sep 30 01:00:24.489986 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.490313 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.545332 2026] [security2:error] [pid 186850:tid 187053] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/dashboard"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/dashboard"] [unique_id "aryziE5Phls--iYlcKgf4AAAAVM"]
[Wed Sep 30 01:00:24.581552 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.581890 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.618847 2026] [security2:error] [pid 186850:tid 186992] [client 85.203.36.126:20933] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/000.php"] [unique_id "aryziE5Phls--iYlcKgf9AAAARY"]
[Wed Sep 30 01:00:24.672187 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.672457 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.675389 2026] [security2:error] [pid 186850:tid 187005] [client 20.204.42.136:7115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/uploaxa1.php"] [unique_id "aryziE5Phls--iYlcKgf9wAAASM"]
[Wed Sep 30 01:00:24.720789 2026] [security2:error] [pid 186850:tid 187062] [client 114.119.133.190:24293] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "petersotiriadis.com"] [uri "/cliprr.com/pureherbal/"] [unique_id "aryziE5Phls--iYlcKgf-gAAAVw"], referer: http://petersotiriadis.com/cliprr.com/pureherbal/?list=images&sort=date_desc&page=1
[Wed Sep 30 01:00:24.737262 2026] [security2:error] [pid 186850:tid 187072] [client 4.196.65.241:19090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/Qdkv4tOtNdefault.php"] [unique_id "aryziE5Phls--iYlcKgf_AAAAWY"]
[Wed Sep 30 01:00:24.738954 2026] [security2:error] [pid 186850:tid 186998] [client 104.208.65.139:14326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/or.php"] [unique_id "aryziE5Phls--iYlcKgf_QAAARw"]
[Wed Sep 30 01:00:24.761902 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.762193 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.779501 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:24.779757 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:24.852930 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.853213 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.857391 2026] [security2:error] [pid 186850:tid 187103] [client 20.219.2.60:20184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/aboutc.php"] [unique_id "aryziE5Phls--iYlcKggCgAAAYU"]
[Wed Sep 30 01:00:24.915989 2026] [security2:error] [pid 186850:tid 186892] [remote 220.181.108.158:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryziE5Phls--iYlcKggDgABSyk"]
[Wed Sep 30 01:00:24.945336 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:24.945601 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:24.968968 2026] [security2:error] [pid 186850:tid 187105] [client 52.172.226.14:32754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/install.php"] [unique_id "aryziE5Phls--iYlcKggEQAAAYc"]
[Wed Sep 30 01:00:25.036443 2026] [security2:error] [pid 186850:tid 187069] [client 20.194.5.96:35636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wp_blog_footer.php"] [unique_id "aryziU5Phls--iYlcKggFwAAAWM"]
[Wed Sep 30 01:00:25.039920 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.040439 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.043951 2026] [security2:error] [pid 186850:tid 186984] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryziE5Phls--iYlcKggBAAAAQ4"]
[Wed Sep 30 01:00:25.051483 2026] [security2:error] [pid 186850:tid 187075] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/contacts"] [unique_id "aryziE5Phls--iYlcKggAAAAAWk"]
[Wed Sep 30 01:00:25.125312 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.125570 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.164913 2026] [security2:error] [pid 186850:tid 187030] [client 20.204.42.136:7019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/uploartg.php"] [unique_id "aryziU5Phls--iYlcKggHwAAATw"]
[Wed Sep 30 01:00:25.217022 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.217300 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.258113 2026] [security2:error] [pid 186850:tid 187017] [client 20.70.173.30:25247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/222.php"] [unique_id "aryziU5Phls--iYlcKggIgAAAS8"]
[Wed Sep 30 01:00:25.284664 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:25.284834 2026] [security2:error] [pid 186850:tid 187078] [client 45.138.12.32:33824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zmz.trv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryziU5Phls--iYlcKggJAAAAWw"]
[Wed Sep 30 01:00:25.284972 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:25.293228 2026] [security2:error] [pid 186850:tid 187053] [client 20.214.191.94:23237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/drttewyh.php"] [unique_id "aryziU5Phls--iYlcKggJgAAAVM"]
[Wed Sep 30 01:00:25.307936 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.308211 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:1491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.324282 2026] [security2:error] [pid 186850:tid 187049] [client 20.219.2.60:20073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gdn.php"] [unique_id "aryziU5Phls--iYlcKggKgAAAU8"]
[Wed Sep 30 01:00:25.393255 2026] [security2:error] [pid 186850:tid 187009] [client 216.73.216.46:1491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryziU5Phls--iYlcKggLAAAASc"]
[Wed Sep 30 01:00:25.489897 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.490173 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.510912 2026] [security2:error] [pid 186850:tid 187016] [client 189.4.110.138:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryziU5Phls--iYlcKggNQAAAS4"]
[Wed Sep 30 01:00:25.543780 2026] [access_compat:error] [pid 186850:tid 187093] [client 47.79.207.216:3758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:00:25.544072 2026] [access_compat:error] [pid 186850:tid 187093] [client 47.79.207.216:3758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:00:25.585484 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.585741 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.598832 2026] [security2:error] [pid 186850:tid 187102] [client 52.172.226.14:32521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/13k.php"] [unique_id "aryziU5Phls--iYlcKggPwAAAYQ"]
[Wed Sep 30 01:00:25.599244 2026] [security2:error] [pid 186850:tid 187044] [client 45.138.12.32:33840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zog.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryziU5Phls--iYlcKggQAAAAUo"]
[Wed Sep 30 01:00:25.696252 2026] [security2:error] [pid 186850:tid 186990] [client 20.204.42.136:7137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/bgbagbcw.php"] [unique_id "aryziU5Phls--iYlcKggQQAAARQ"]
[Wed Sep 30 01:00:25.719233 2026] [access_compat:error] [pid 186850:tid 187106] [client 47.79.206.78:43662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:00:25.719509 2026] [access_compat:error] [pid 186850:tid 187106] [client 47.79.206.78:43662] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:00:25.725043 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.725334 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.764745 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.765028 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.769005 2026] [security2:error] [pid 186850:tid 186985] [client 4.240.25.22:8411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryziU5Phls--iYlcKggSQAAAQ8"]
[Wed Sep 30 01:00:25.807271 2026] [security2:error] [pid 186850:tid 186997] [client 20.219.2.60:20181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/first.php"] [unique_id "aryziU5Phls--iYlcKggSwAAARs"]
[Wed Sep 30 01:00:25.820186 2026] [security2:error] [pid 186850:tid 187023] [client 20.70.173.30:52161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/pJPoKA.php"] [unique_id "aryziU5Phls--iYlcKggTAAAATU"]
[Wed Sep 30 01:00:25.832771 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:25.833039 2026] [access_compat:error] [pid 186850:tid 187050] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:25.854200 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.854454 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:25.897309 2026] [security2:error] [pid 186850:tid 187076] [client 85.203.36.88:55335] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/chosen.php"] [unique_id "aryziU5Phls--iYlcKggUgAAAWo"]
[Wed Sep 30 01:00:25.945347 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:25.945622 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.036198 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.036451 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.089071 2026] [security2:error] [pid 186850:tid 187018] [client 4.196.65.241:64164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/acf1ced8aec2.php"] [unique_id "aryzik5Phls--iYlcKggXQAAATA"]
[Wed Sep 30 01:00:26.116254 2026] [security2:error] [pid 186850:tid 186989] [client 4.240.25.22:38801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/sxxb.php"] [unique_id "aryzik5Phls--iYlcKggYAAAARM"]
[Wed Sep 30 01:00:26.131863 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.132310 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.179618 2026] [security2:error] [pid 186850:tid 187067] [client 52.231.69.245:13653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzik5Phls--iYlcKggZwAAAWE"]
[Wed Sep 30 01:00:26.186547 2026] [security2:error] [pid 186850:tid 187073] [client 198.98.59.181:50663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.59.98.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lalenzza.com"] [uri "/wp-login.php"] [unique_id "aryzik5Phls--iYlcKggZQAAAWc"]
[Wed Sep 30 01:00:26.221513 2026] [security2:error] [pid 186850:tid 187088] [client 20.204.42.136:7068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/tegubsiu.php"] [unique_id "aryzik5Phls--iYlcKggbAAAAXY"]
[Wed Sep 30 01:00:26.222954 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.223240 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.284729 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.2.60:19577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/redixsx.php"] [unique_id "aryzik5Phls--iYlcKggbQAAASQ"]
[Wed Sep 30 01:00:26.311619 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.311908 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.312124 2026] [security2:error] [pid 186850:tid 187027] [client 20.194.5.96:35487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/k.php"] [unique_id "aryzik5Phls--iYlcKggcAAAATk"]
[Wed Sep 30 01:00:26.327188 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:26.327469 2026] [access_compat:error] [pid 186850:tid 187092] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:26.346644 2026] [security2:error] [pid 186850:tid 186963] [remote 57.141.14.113:65116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 113.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "aryzik5Phls--iYlcKggbwABU3A"]
[Wed Sep 30 01:00:26.401969 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.402251 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.440635 2026] [security2:error] [pid 186850:tid 187005] [client 20.214.109.68:11151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzik5Phls--iYlcKggdwAAASM"]
[Wed Sep 30 01:00:26.447439 2026] [security2:error] [pid 186850:tid 187042] [client 52.231.69.245:13456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzik5Phls--iYlcKggeQAAAUg"]
[Wed Sep 30 01:00:26.463972 2026] [security2:error] [pid 186850:tid 186981] [client 20.214.191.94:23491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/sh.php"] [unique_id "aryzik5Phls--iYlcKggewAAAQs"]
[Wed Sep 30 01:00:26.492309 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.492563 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:41848] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.495648 2026] [security2:error] [pid 186850:tid 187107] [client 45.138.12.32:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zxb.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzik5Phls--iYlcKggfQAAAYk"]
[Wed Sep 30 01:00:26.599344 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.599612 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.674542 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.674824 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.690365 2026] [security2:error] [pid 186850:tid 187050] [client 20.204.42.136:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/xxw.php"] [unique_id "aryzik5Phls--iYlcKggjwAAAVA"]
[Wed Sep 30 01:00:26.715212 2026] [security2:error] [pid 186850:tid 187051] [client 104.208.65.139:41026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/b8.php"] [unique_id "aryzik5Phls--iYlcKggkAAAAVE"]
[Wed Sep 30 01:00:26.734750 2026] [security2:error] [pid 186850:tid 187101] [client 20.219.2.60:19522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/cpp2.php"] [unique_id "aryzik5Phls--iYlcKggkwAAAYM"]
[Wed Sep 30 01:00:26.801142 2026] [security2:error] [pid 186850:tid 186989] [client 52.231.69.245:13644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/b.php"] [unique_id "aryzik5Phls--iYlcKggmwAAARM"]
[Wed Sep 30 01:00:26.813722 2026] [security2:error] [pid 186850:tid 187082] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzik5Phls--iYlcKggmgAAAXA"]
[Wed Sep 30 01:00:26.829915 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:26.830190 2026] [access_compat:error] [pid 186850:tid 186995] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:26.864664 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.864941 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.907465 2026] [security2:error] [pid 186850:tid 187104] [client 216.73.216.46:41848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzik5Phls--iYlcKggogAAAYY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk0MDA%3D
[Wed Sep 30 01:00:26.924156 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.924411 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.951418 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:26.951688 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:48483] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:26.972451 2026] [security2:error] [pid 186850:tid 187065] [client 20.214.109.68:11217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzik5Phls--iYlcKggqAAAAV8"]
[Wed Sep 30 01:00:26.980067 2026] [security2:error] [pid 186850:tid 187084] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzik5Phls--iYlcKggpQAAAXI"]
[Wed Sep 30 01:00:27.015792 2026] [security2:error] [pid 186850:tid 187092] [client 20.194.5.96:35632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/133.php"] [unique_id "aryzi05Phls--iYlcKggqwAAAXo"]
[Wed Sep 30 01:00:27.021938 2026] [security2:error] [pid 186850:tid 187038] [client 52.172.226.14:32715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/up.php"] [unique_id "aryzi05Phls--iYlcKggrQAAAUQ"]
[Wed Sep 30 01:00:27.042305 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.042579 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.054436 2026] [security2:error] [pid 186850:tid 186982] [client 20.214.191.94:23271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/groud1.php"] [unique_id "aryzi05Phls--iYlcKggtQAAAQw"]
[Wed Sep 30 01:00:27.074843 2026] [security2:error] [pid 186850:tid 186981] [client 52.231.69.245:13482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/admin.php"] [unique_id "aryzi05Phls--iYlcKgguQAAAQs"]
[Wed Sep 30 01:00:27.077616 2026] [security2:error] [pid 186850:tid 187049] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzi05Phls--iYlcKggsgAAAU8"]
[Wed Sep 30 01:00:27.137057 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.137336 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.138511 2026] [security2:error] [pid 186850:tid 187072] [client 4.240.25.22:8413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzi05Phls--iYlcKggvwAAAWY"]
[Wed Sep 30 01:00:27.177625 2026] [security2:error] [pid 186850:tid 187044] [client 20.204.42.136:7067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/router.php"] [unique_id "aryzi05Phls--iYlcKggwgAAAUo"]
[Wed Sep 30 01:00:27.187413 2026] [security2:error] [pid 186850:tid 186993] [client 20.219.2.60:19559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/admlo.php"] [unique_id "aryzi05Phls--iYlcKggxAAAARc"]
[Wed Sep 30 01:00:27.227793 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.228078 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.240335 2026] [security2:error] [pid 186850:tid 187089] [client 103.159.192.142:54592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKggyQAAAXc"]
[Wed Sep 30 01:00:27.240451 2026] [security2:error] [pid 186850:tid 187089] [client 103.159.192.142:54592] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKggyQAAAXc"]
[Wed Sep 30 01:00:27.301126 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:27.301381 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:27.310599 2026] [security2:error] [pid 186850:tid 187047] [client 4.196.65.241:2090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/chfjgjn.php"] [unique_id "aryzi05Phls--iYlcKggzgAAAU0"]
[Wed Sep 30 01:00:27.325258 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.325524 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.350294 2026] [security2:error] [pid 186850:tid 187081] [client 216.73.216.46:48483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzi05Phls--iYlcKgg0gAAAW8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mzk2L3Bvd2Vy
[Wed Sep 30 01:00:27.393890 2026] [security2:error] [pid 186850:tid 187077] [client 37.41.16.35:16926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg1AAAAWs"]
[Wed Sep 30 01:00:27.393997 2026] [security2:error] [pid 186850:tid 187077] [client 37.41.16.35:16926] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg1AAAAWs"]
[Wed Sep 30 01:00:27.418315 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.418585 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.419241 2026] [security2:error] [pid 186850:tid 186999] [client 52.231.69.245:13474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/fling.php"] [unique_id "aryzi05Phls--iYlcKgg1wAAAR0"]
[Wed Sep 30 01:00:27.461708 2026] [security2:error] [pid 186850:tid 187079] [client 223.181.60.167:17099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg2gAAAW0"]
[Wed Sep 30 01:00:27.461975 2026] [security2:error] [pid 186850:tid 187079] [client 223.181.60.167:17099] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg2gAAAW0"]
[Wed Sep 30 01:00:27.506908 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.507190 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.534035 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.191.94:23411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/bro.php"] [unique_id "aryzi05Phls--iYlcKgg3wAAAWE"]
[Wed Sep 30 01:00:27.548573 2026] [security2:error] [pid 186850:tid 187070] [client 52.172.226.14:32089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/0x1949.php"] [unique_id "aryzi05Phls--iYlcKgg4QAAAWQ"]
[Wed Sep 30 01:00:27.560656 2026] [security2:error] [pid 186850:tid 187088] [client 20.194.5.96:35626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wsd.php"] [unique_id "aryzi05Phls--iYlcKgg4wAAAXY"]
[Wed Sep 30 01:00:27.597959 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.598221 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.624451 2026] [security2:error] [pid 186850:tid 187038] [client 85.203.36.88:53609] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-includes/hp2.php"] [unique_id "aryzi05Phls--iYlcKgg5gAAAUQ"]
[Wed Sep 30 01:00:27.633416 2026] [security2:error] [pid 186850:tid 187031] [client 20.204.42.136:7134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/cibrkysaeng.php"] [unique_id "aryzi05Phls--iYlcKgg5wAAAT0"]
[Wed Sep 30 01:00:27.656361 2026] [security2:error] [pid 186850:tid 187005] [client 20.219.2.60:20203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/admin-ajax.php"] [unique_id "aryzi05Phls--iYlcKgg7AAAASM"]
[Wed Sep 30 01:00:27.688692 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.688960 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.699833 2026] [security2:error] [pid 186850:tid 186985] [client 49.36.41.37:58818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg8wAAAQ8"]
[Wed Sep 30 01:00:27.699913 2026] [security2:error] [pid 186850:tid 186985] [client 49.36.41.37:58818] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg8wAAAQ8"]
[Wed Sep 30 01:00:27.705953 2026] [security2:error] [pid 186850:tid 187018] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzi05Phls--iYlcKgg1QAAATA"]
[Wed Sep 30 01:00:27.781163 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.781452 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.814165 2026] [security2:error] [pid 186850:tid 187032] [client 20.214.191.94:23396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/class-wp-http-client.php"] [unique_id "aryzi05Phls--iYlcKgg-QAAAT4"]
[Wed Sep 30 01:00:27.843970 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:27.844334 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:27.891590 2026] [security2:error] [pid 186850:tid 187086] [client 182.69.182.151:15973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg_wAAAXQ"]
[Wed Sep 30 01:00:27.891704 2026] [security2:error] [pid 186850:tid 187086] [client 182.69.182.151:15973] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzi05Phls--iYlcKgg_wAAAXQ"]
[Wed Sep 30 01:00:27.925054 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.925347 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.946735 2026] [security2:error] [pid 186850:tid 187105] [client 52.231.69.245:13485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryzi05Phls--iYlcKghAgAAAYc"]
[Wed Sep 30 01:00:27.962836 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.963118 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.970699 2026] [access_compat:error] [pid 186850:tid 187096] [client 47.79.200.211:38378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:00:27.970970 2026] [access_compat:error] [pid 186850:tid 187096] [client 47.79.200.211:38378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:00:27.972983 2026] [access_compat:error] [pid 186850:tid 186896] [remote 17.166.20.106:34908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:27.973311 2026] [access_compat:error] [pid 186850:tid 186896] [remote 17.166.20.106:34908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:27.975272 2026] [security2:error] [pid 186850:tid 187081] [client 20.214.109.68:11219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ccs.php"] [unique_id "aryzi05Phls--iYlcKghBQAAAW8"]
[Wed Sep 30 01:00:28.052920 2026] [security2:error] [pid 186850:tid 187039] [client 4.240.25.22:8500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzjE5Phls--iYlcKghDQAAAUU"]
[Wed Sep 30 01:00:28.053925 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.054205 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.068360 2026] [security2:error] [pid 186850:tid 186989] [client 104.208.65.139:14287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/xex.php"] [unique_id "aryzjE5Phls--iYlcKghEQAAARM"]
[Wed Sep 30 01:00:28.075354 2026] [security2:error] [pid 186850:tid 187022] [client 20.194.30.107:34732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-admin/js/index.php"] [unique_id "aryzjE5Phls--iYlcKghEgAAATQ"]
[Wed Sep 30 01:00:28.094593 2026] [security2:error] [pid 186850:tid 187008] [client 150.107.232.159:36283] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghEwAAASY"]
[Wed Sep 30 01:00:28.094714 2026] [security2:error] [pid 186850:tid 187008] [client 150.107.232.159:36283] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghEwAAASY"]
[Wed Sep 30 01:00:28.106934 2026] [security2:error] [pid 186850:tid 187098] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzjE5Phls--iYlcKghCwAAAYA"]
[Wed Sep 30 01:00:28.124340 2026] [security2:error] [pid 186850:tid 186996] [client 20.219.2.60:19510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/amthd.php"] [unique_id "aryzjE5Phls--iYlcKghFAAAARo"]
[Wed Sep 30 01:00:28.130690 2026] [security2:error] [pid 186850:tid 186995] [client 20.204.42.136:7108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.corinthe-rizvi.com"] [uri "/wp-wpbak.php"] [unique_id "aryzjE5Phls--iYlcKghFQAAARk"]
[Wed Sep 30 01:00:28.149564 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.150004 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.173917 2026] [security2:error] [pid 186850:tid 187101] [client 20.214.191.94:23291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/zoo2.php"] [unique_id "aryzjE5Phls--iYlcKghGQAAAYM"]
[Wed Sep 30 01:00:28.195575 2026] [security2:error] [pid 186850:tid 187064] [client 52.172.226.14:32078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/cong.php"] [unique_id "aryzjE5Phls--iYlcKghGgAAAV4"]
[Wed Sep 30 01:00:28.216664 2026] [security2:error] [pid 186850:tid 187017] [client 20.194.5.96:35458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/BDKR28WP.php"] [unique_id "aryzjE5Phls--iYlcKghGwAAAS8"]
[Wed Sep 30 01:00:28.236081 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.236334 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.302869 2026] [security2:error] [pid 186850:tid 187005] [client 52.231.69.245:13659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/adminfuns.php"] [unique_id "aryzjE5Phls--iYlcKghIQAAASM"]
[Wed Sep 30 01:00:28.318470 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:28.318722 2026] [access_compat:error] [pid 186850:tid 186994] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:28.327738 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.328069 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.380005 2026] [security2:error] [pid 186850:tid 187003] [client 223.235.102.107:28222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghJAAAASE"]
[Wed Sep 30 01:00:28.380230 2026] [security2:error] [pid 186850:tid 187003] [client 223.235.102.107:28222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghJAAAASE"]
[Wed Sep 30 01:00:28.409956 2026] [security2:error] [pid 186850:tid 187053] [client 74.7.242.1:42316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzjE5Phls--iYlcKghJQAAAVM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:00:28.418651 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.418929 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.449202 2026] [security2:error] [pid 186850:tid 187066] [client 213.136.69.135:60635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-scripts.php"] [unique_id "aryzjE5Phls--iYlcKghKQAAAWA"], referer: binance.com
[Wed Sep 30 01:00:28.494875 2026] [security2:error] [pid 186850:tid 187018] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzjE5Phls--iYlcKghKAAAATA"]
[Wed Sep 30 01:00:28.508908 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.509342 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.554123 2026] [security2:error] [pid 186850:tid 187103] [client 103.168.67.253:47754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzjE5Phls--iYlcKghNgAAAYU"]
[Wed Sep 30 01:00:28.565302 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:53728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghNQAAAWo"]
[Wed Sep 30 01:00:28.565524 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:53728] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghNQAAAWo"]
[Wed Sep 30 01:00:28.586949 2026] [security2:error] [pid 186850:tid 187058] [client 20.219.2.60:19576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/8xyz.php"] [unique_id "aryzjE5Phls--iYlcKghNwAAAVg"]
[Wed Sep 30 01:00:28.590366 2026] [security2:error] [pid 186850:tid 187027] [client 85.203.36.101:25399] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/gifclass.php"] [unique_id "aryzjE5Phls--iYlcKghOAAAATk"]
[Wed Sep 30 01:00:28.611003 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.611280 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.656520 2026] [security2:error] [pid 186850:tid 187056] [client 103.241.204.139:60145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghOwAAAVY"]
[Wed Sep 30 01:00:28.656715 2026] [security2:error] [pid 186850:tid 187056] [client 103.241.204.139:60145] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghOwAAAVY"]
[Wed Sep 30 01:00:28.676709 2026] [security2:error] [pid 186850:tid 187075] [client 223.181.30.165:15385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghPAAAAWk"]
[Wed Sep 30 01:00:28.676916 2026] [security2:error] [pid 186850:tid 187075] [client 223.181.30.165:15385] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzjE5Phls--iYlcKghPAAAAWk"]
[Wed Sep 30 01:00:28.692144 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.692400 2026] [security2:error] [pid 186850:tid 187071] [client 52.231.69.245:13641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/alfa.php"] [unique_id "aryzjE5Phls--iYlcKghPgAAAWU"]
[Wed Sep 30 01:00:28.692416 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.772724 2026] [security2:error] [pid 186850:tid 187045] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzjE5Phls--iYlcKghMwAAAUs"]
[Wed Sep 30 01:00:28.774543 2026] [security2:error] [pid 186850:tid 187001] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/kontakt"] [unique_id "aryzjE5Phls--iYlcKghLwAAAR8"]
[Wed Sep 30 01:00:28.783564 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.783832 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.809735 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:28.810022 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:28.860145 2026] [security2:error] [pid 186850:tid 187057] [client 20.214.191.94:23273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/zoo1.php"] [unique_id "aryzjE5Phls--iYlcKghRAAAAVc"]
[Wed Sep 30 01:00:28.872974 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.873237 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:28.891304 2026] [security2:error] [pid 186850:tid 186987] [client 160.226.201.164:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/solar-panels"] [unique_id "aryzjE5Phls--iYlcKghSAAAARE"]
[Wed Sep 30 01:00:28.919759 2026] [security2:error] [pid 186850:tid 187008] [client 52.172.226.14:32106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/bs1.php"] [unique_id "aryzjE5Phls--iYlcKghSgAAASY"]
[Wed Sep 30 01:00:28.951316 2026] [security2:error] [pid 186850:tid 186978] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzjE5Phls--iYlcKghSwABDn8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=3a410387d52b5a2e72c659a39245b875&start=105&t=22095
[Wed Sep 30 01:00:28.951351 2026] [security2:error] [pid 186850:tid 186978] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzjE5Phls--iYlcKghSwABDn8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=3a410387d52b5a2e72c659a39245b875&start=105&t=22095
[Wed Sep 30 01:00:28.962793 2026] [security2:error] [pid 186850:tid 187028] [client 52.231.69.245:13648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/222.php"] [unique_id "aryzjE5Phls--iYlcKghTQAAATo"]
[Wed Sep 30 01:00:28.967334 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:28.967593 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.048335 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:20090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/mini.php"] [unique_id "aryzjU5Phls--iYlcKghVAAAAU4"]
[Wed Sep 30 01:00:29.060566 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.061018 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.088458 2026] [security2:error] [pid 186850:tid 187017] [client 20.194.5.96:35529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wmore1.php"] [unique_id "aryzjU5Phls--iYlcKghVwAAAS8"]
[Wed Sep 30 01:00:29.147970 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.148239 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.152503 2026] [security2:error] [pid 186850:tid 187033] [client 20.214.109.68:11146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/set.php"] [unique_id "aryzjU5Phls--iYlcKghXAAAAT8"]
[Wed Sep 30 01:00:29.182363 2026] [security2:error] [pid 186850:tid 187030] [client 45.138.12.32:33822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zms.ysr.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzjU5Phls--iYlcKghXQAAATw"]
[Wed Sep 30 01:00:29.237042 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.237304 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.282665 2026] [security2:error] [pid 186850:tid 187060] [client 52.231.69.245:13640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzjU5Phls--iYlcKghYgAAAVo"]
[Wed Sep 30 01:00:29.329304 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.329574 2026] [access_compat:error] [pid 186850:tid 186985] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.349712 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:29.349983 2026] [access_compat:error] [pid 186850:tid 187072] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:29.377042 2026] [access_compat:error] [pid 186850:tid 186928] [remote 17.166.22.6:47702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.377299 2026] [access_compat:error] [pid 186850:tid 186928] [remote 17.166.22.6:47702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.401749 2026] [security2:error] [pid 186850:tid 187083] [client 20.214.191.94:23245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/class-ajax.php"] [unique_id "aryzjU5Phls--iYlcKghaQAAAXE"]
[Wed Sep 30 01:00:29.420217 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.420486 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.458917 2026] [security2:error] [pid 186850:tid 186910] [remote 38.190.108.55:53968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.108.190.38.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/wp-login.php"] [unique_id "aryzjU5Phls--iYlcKghbQABSTs"], referer: https://mail.shortstaygem.co.uk/
[Wed Sep 30 01:00:29.460203 2026] [security2:error] [pid 186850:tid 187103] [client 52.172.226.14:32759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryzjU5Phls--iYlcKghbAAAAYU"]
[Wed Sep 30 01:00:29.510387 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.510668 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.516835 2026] [security2:error] [pid 186850:tid 187056] [client 20.219.2.60:20083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws68.php"] [unique_id "aryzjU5Phls--iYlcKghdgAAAVY"]
[Wed Sep 30 01:00:29.547302 2026] [autoindex:error] [pid 186850:tid 187011] [client 104.28.222.47:32955] AH01276: Cannot serve directory /home4/wkaybemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:29.611789 2026] [security2:error] [pid 186850:tid 187010] [client 85.203.36.86:34875] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/bless.php"] [unique_id "aryzjU5Phls--iYlcKghfwAAASg"]
[Wed Sep 30 01:00:29.618246 2026] [security2:error] [pid 186850:tid 187089] [client 52.231.69.245:13484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/images.php"] [unique_id "aryzjU5Phls--iYlcKghgAAAAXc"]
[Wed Sep 30 01:00:29.625645 2026] [security2:error] [pid 186850:tid 187039] [client 4.196.65.241:19487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/20.php"] [unique_id "aryzjU5Phls--iYlcKghgQAAAUU"]
[Wed Sep 30 01:00:29.669264 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.669700 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.693624 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.693894 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.786504 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.786765 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.792660 2026] [access_compat:error] [pid 186850:tid 187104] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:29.792972 2026] [access_compat:error] [pid 186850:tid 187104] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:29.816703 2026] [security2:error] [pid 186850:tid 187067] [client 4.196.65.241:27297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/83a907c742index.php"] [unique_id "aryzjU5Phls--iYlcKghjgAAAWE"]
[Wed Sep 30 01:00:29.824917 2026] [security2:error] [pid 186850:tid 187079] [client 104.208.65.139:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/CAE-2.5.php"] [unique_id "aryzjU5Phls--iYlcKghjwAAAW0"]
[Wed Sep 30 01:00:29.841148 2026] [security2:error] [pid 186850:tid 187004] [client 20.194.5.96:35625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/177.php"] [unique_id "aryzjU5Phls--iYlcKghkAAAASI"]
[Wed Sep 30 01:00:29.878712 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.879011 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:29.956143 2026] [security2:error] [pid 186850:tid 187022] [client 103.168.67.253:47772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzjU5Phls--iYlcKghkwAAATQ"]
[Wed Sep 30 01:00:29.969791 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:29.970089 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.036246 2026] [security2:error] [pid 186850:tid 187090] [client 4.240.25.22:20308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/kir.php"] [unique_id "aryzjk5Phls--iYlcKghmwAAAXg"]
[Wed Sep 30 01:00:30.045777 2026] [security2:error] [pid 186850:tid 187003] [client 52.172.226.14:32083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/termps.php"] [unique_id "aryzjk5Phls--iYlcKghnQAAASE"]
[Wed Sep 30 01:00:30.060992 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.061304 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.100766 2026] [security2:error] [pid 186850:tid 187046] [client 20.214.109.68:11260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/mode.php"] [unique_id "aryzjk5Phls--iYlcKghoAAAAUw"]
[Wed Sep 30 01:00:30.146564 2026] [security2:error] [pid 186850:tid 186993] [client 20.70.173.30:2632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/admin.php"] [unique_id "aryzjk5Phls--iYlcKghpgAAARc"]
[Wed Sep 30 01:00:30.150945 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.151221 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.241278 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.241540 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:62035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.262508 2026] [security2:error] [pid 186850:tid 187052] [client 20.214.191.94:23283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gm.php"] [unique_id "aryzjk5Phls--iYlcKghsAAAAVI"]
[Wed Sep 30 01:00:30.295031 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:30.295308 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:30.311699 2026] [security2:error] [pid 186850:tid 187011] [client 20.219.2.60:19527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/xxx.php"] [unique_id "aryzjk5Phls--iYlcKghswAAASk"]
[Wed Sep 30 01:00:30.331474 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.331740 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.423530 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.423803 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.435142 2026] [security2:error] [pid 186850:tid 187051] [client 52.231.69.245:13674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/media.php"] [unique_id "aryzjk5Phls--iYlcKghvAAAAVE"]
[Wed Sep 30 01:00:30.453019 2026] [security2:error] [pid 186850:tid 186929] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzjk5Phls--iYlcKghvQABh04"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D41094
[Wed Sep 30 01:00:30.486689 2026] [security2:error] [pid 186850:tid 187039] [client 45.138.12.32:33968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zvh.jky.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzjk5Phls--iYlcKghvwAAAUU"]
[Wed Sep 30 01:00:30.515708 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.515996 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.574909 2026] [security2:error] [pid 186850:tid 187078] [client 20.214.109.68:11137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ok.php"] [unique_id "aryzjk5Phls--iYlcKghywAAAWw"]
[Wed Sep 30 01:00:30.576485 2026] [security2:error] [pid 186850:tid 187073] [client 20.214.191.94:23270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/class-wp-site-list.php"] [unique_id "aryzjk5Phls--iYlcKghzAAAAWc"]
[Wed Sep 30 01:00:30.606454 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.606723 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.645839 2026] [security2:error] [pid 186850:tid 187002] [client 122.173.27.10:4333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzjk5Phls--iYlcKgh0QAAASA"]
[Wed Sep 30 01:00:30.645988 2026] [security2:error] [pid 186850:tid 187002] [client 122.173.27.10:4333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzjk5Phls--iYlcKgh0QAAASA"]
[Wed Sep 30 01:00:30.656619 2026] [security2:error] [pid 186850:tid 187092] [client 114.119.150.210:42533] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "drebok.com"] [uri "/sexuelle-gewalt-jugendliche"] [unique_id "aryzjk5Phls--iYlcKgh0wAAAXo"], referer: http://drebok.com/sexuelle-gewalt-jugendliche
[Wed Sep 30 01:00:30.661803 2026] [security2:error] [pid 186850:tid 187088] [client 216.73.216.46:62035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzjk5Phls--iYlcKgh1AAAAXY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTE2L25vZGUw
[Wed Sep 30 01:00:30.726303 2026] [security2:error] [pid 186850:tid 187049] [client 20.194.5.96:35740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/ccc.php"] [unique_id "aryzjk5Phls--iYlcKgh2wAAAU8"]
[Wed Sep 30 01:00:30.754575 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.755025 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.768025 2026] [security2:error] [pid 186850:tid 187085] [client 20.219.2.60:19517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/njxjtooj.php"] [unique_id "aryzjk5Phls--iYlcKgh4wAAAXM"]
[Wed Sep 30 01:00:30.776748 2026] [security2:error] [pid 186850:tid 186987] [client 52.231.69.245:13662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/mac.php"] [unique_id "aryzjk5Phls--iYlcKgh5QAAARE"]
[Wed Sep 30 01:00:30.781854 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:30.782272 2026] [access_compat:error] [pid 186850:tid 187000] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:30.787242 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.787496 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.791449 2026] [security2:error] [pid 186850:tid 187040] [client 85.203.36.121:50403] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/goods.php"] [unique_id "aryzjk5Phls--iYlcKgh5wAAAUY"]
[Wed Sep 30 01:00:30.806358 2026] [access_compat:error] [pid 186850:tid 186965] [remote 17.166.23.178:34196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.806611 2026] [access_compat:error] [pid 186850:tid 186965] [remote 17.166.23.178:34196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.831259 2026] [security2:error] [pid 186850:tid 187052] [client 52.172.226.14:32097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/brand.php"] [unique_id "aryzjk5Phls--iYlcKgh7AAAAVI"]
[Wed Sep 30 01:00:30.880415 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.880691 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:30.909029 2026] [security2:error] [pid 186850:tid 187045] [client 20.214.109.68:11239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/zoo.php"] [unique_id "aryzjk5Phls--iYlcKgh9QAAAUs"]
[Wed Sep 30 01:00:30.925211 2026] [security2:error] [pid 186850:tid 187069] [client 110.238.206.222:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzjk5Phls--iYlcKgh-AAAAWM"]
[Wed Sep 30 01:00:30.950067 2026] [security2:error] [pid 186850:tid 187086] [client 4.196.65.241:19101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xrp.php"] [unique_id "aryzjk5Phls--iYlcKgh_gAAAXQ"]
[Wed Sep 30 01:00:30.973905 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:30.974172 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.037253 2026] [security2:error] [pid 186850:tid 187048] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzjk5Phls--iYlcKgiBAAAAU4"]
[Wed Sep 30 01:00:31.042590 2026] [security2:error] [pid 186850:tid 186977] [remote 38.190.108.55:54490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.108.190.38.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiCwABNH4"]
[Wed Sep 30 01:00:31.042769 2026] [security2:error] [pid 186850:tid 187022] [client 38.190.108.55:54490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiCwABNH4"]
[Wed Sep 30 01:00:31.067009 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.067442 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:47778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.069705 2026] [security2:error] [pid 186850:tid 187035] [client 20.194.5.96:35515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/0xD.php"] [unique_id "aryzj05Phls--iYlcKgiEAAAAUE"]
[Wed Sep 30 01:00:31.096708 2026] [security2:error] [pid 186850:tid 187025] [client 200.119.193.236:48694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.193.119.200.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "aryzj05Phls--iYlcKgiDAAAATc"], referer: https://cantrade.com.sg/wp-login.php
[Wed Sep 30 01:00:31.124214 2026] [security2:error] [pid 186850:tid 187095] [client 52.231.69.245:13664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ops.php"] [unique_id "aryzj05Phls--iYlcKgiFAAAAX0"]
[Wed Sep 30 01:00:31.156021 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.156470 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.244407 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.244665 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.267823 2026] [security2:error] [pid 186850:tid 187093] [client 20.219.2.60:20172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws85.php"] [unique_id "aryzj05Phls--iYlcKgiHQAAAXs"]
[Wed Sep 30 01:00:31.295085 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:31.295380 2026] [access_compat:error] [pid 186850:tid 187016] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:31.336180 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.336443 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.406791 2026] [security2:error] [pid 186850:tid 187056] [client 52.231.69.245:13655] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/1.php"] [unique_id "aryzj05Phls--iYlcKgiJwAAAVY"]
[Wed Sep 30 01:00:31.406940 2026] [security2:error] [pid 186850:tid 187056] [client 52.231.69.245:13655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/1.php"] [unique_id "aryzj05Phls--iYlcKgiJwAAAVY"]
[Wed Sep 30 01:00:31.411926 2026] [security2:error] [pid 186850:tid 186981] [client 52.172.226.14:32552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/atomlib.php"] [unique_id "aryzj05Phls--iYlcKgiKAAAAQs"]
[Wed Sep 30 01:00:31.425109 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.425376 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.459200 2026] [security2:error] [pid 186850:tid 186982] [client 20.214.191.94:23274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/asd2.php"] [unique_id "aryzj05Phls--iYlcKgiKwAAAQw"]
[Wed Sep 30 01:00:31.513763 2026] [security2:error] [pid 186850:tid 186988] [client 20.214.109.68:11148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gaza.php"] [unique_id "aryzj05Phls--iYlcKgiMQAAARI"]
[Wed Sep 30 01:00:31.517977 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.518234 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.550642 2026] [security2:error] [pid 186850:tid 187034] [client 45.138.12.32:33974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zlx.xqt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzj05Phls--iYlcKgiNgAAAUA"]
[Wed Sep 30 01:00:31.609528 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.609787 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.628199 2026] [security2:error] [pid 186850:tid 187070] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzj05Phls--iYlcKgiOgAAAWQ"]
[Wed Sep 30 01:00:31.683380 2026] [security2:error] [pid 186850:tid 187004] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzj05Phls--iYlcKgiPQAAASI"]
[Wed Sep 30 01:00:31.699852 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.700134 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.729492 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:19572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws61.php"] [unique_id "aryzj05Phls--iYlcKgiQQAAAU4"]
[Wed Sep 30 01:00:31.730186 2026] [security2:error] [pid 186850:tid 187080] [client 20.70.173.30:63670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/samll.php"] [unique_id "aryzj05Phls--iYlcKgiQgAAAW4"]
[Wed Sep 30 01:00:31.741835 2026] [security2:error] [pid 186850:tid 187022] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzj05Phls--iYlcKgiQwAAATQ"]
[Wed Sep 30 01:00:31.748436 2026] [security2:error] [pid 186850:tid 187046] [client 105.112.178.79:38340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tkv.pxp.mybluehost.me"] [uri "/__ss_probe_d8d13900e13739f6a4127bca7d0f0925__"] [unique_id "aryzj05Phls--iYlcKgiRAAAAUw"]
[Wed Sep 30 01:00:31.789712 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.790013 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.799253 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzj05Phls--iYlcKgiSQABbEg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=165&t=21812
[Wed Sep 30 01:00:31.799288 2026] [security2:error] [pid 186850:tid 186923] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzj05Phls--iYlcKgiSQABbEg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=165&t=21812
[Wed Sep 30 01:00:31.816824 2026] [security2:error] [pid 186850:tid 187096] [client 45.156.62.96:53147] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiSwAAAX4"]
[Wed Sep 30 01:00:31.816947 2026] [security2:error] [pid 186850:tid 187096] [client 45.156.62.96:53147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiSwAAAX4"]
[Wed Sep 30 01:00:31.824171 2026] [security2:error] [pid 186850:tid 187020] [client 116.193.128.26:53734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiTAAAATI"]
[Wed Sep 30 01:00:31.824342 2026] [security2:error] [pid 186850:tid 187020] [client 116.193.128.26:53734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiTAAAATI"]
[Wed Sep 30 01:00:31.833849 2026] [security2:error] [pid 186850:tid 187076] [client 103.159.192.142:55073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiTQAAAWo"]
[Wed Sep 30 01:00:31.833957 2026] [security2:error] [pid 186850:tid 187076] [client 103.159.192.142:55073] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzj05Phls--iYlcKgiTQAAAWo"]
[Wed Sep 30 01:00:31.852249 2026] [security2:error] [pid 186850:tid 187063] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzj05Phls--iYlcKgiOQAAAV0"]
[Wed Sep 30 01:00:31.857241 2026] [security2:error] [pid 186850:tid 187098] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/impressum"] [unique_id "aryzj05Phls--iYlcKgiNAAAAYA"]
[Wed Sep 30 01:00:31.882360 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.882622 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.923855 2026] [security2:error] [pid 186850:tid 187015] [client 45.89.242.89:23527] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/blurbs.php"] [unique_id "aryzj05Phls--iYlcKgiUgAAAS0"]
[Wed Sep 30 01:00:31.968867 2026] [security2:error] [pid 186850:tid 187030] [client 52.172.226.14:32561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/product.php"] [unique_id "aryzj05Phls--iYlcKgiVQAAATw"]
[Wed Sep 30 01:00:31.971207 2026] [security2:error] [pid 186850:tid 187021] [client 20.214.191.94:23262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/cdc.php"] [unique_id "aryzj05Phls--iYlcKgiVgAAATM"]
[Wed Sep 30 01:00:31.977887 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:31.978330 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:31.978724 2026] [security2:error] [pid 186850:tid 187104] [client 20.194.5.96:35634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/sallu.php"] [unique_id "aryzj05Phls--iYlcKgiVwAAAYY"]
[Wed Sep 30 01:00:32.057072 2026] [ssl:error] [pid 186850:tid 187053] [client 91.92.128.112:47046] AH02032: Hostname give.pearlcogop.com provided via SNI and hostname pearlcogop.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://173.254.29.157:443/
[Wed Sep 30 01:00:32.059680 2026] [security2:error] [pid 186850:tid 187001] [client 152.59.165.7:60449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgiYQAAAR8"]
[Wed Sep 30 01:00:32.059804 2026] [security2:error] [pid 186850:tid 187001] [client 152.59.165.7:60449] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgiYQAAAR8"]
[Wed Sep 30 01:00:32.062448 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.062698 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.155276 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.155550 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.225965 2026] [security2:error] [pid 186850:tid 186988] [client 104.208.65.139:41040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/ass.php"] [unique_id "aryzkE5Phls--iYlcKgiagAAARI"]
[Wed Sep 30 01:00:32.226614 2026] [security2:error] [pid 186850:tid 187027] [client 20.219.2.60:19557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/iyy.php"] [unique_id "aryzkE5Phls--iYlcKgiawAAATk"]
[Wed Sep 30 01:00:32.228285 2026] [security2:error] [pid 186850:tid 186991] [client 4.240.25.22:38785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/classwithtostring.php"] [unique_id "aryzkE5Phls--iYlcKgibAAAARU"]
[Wed Sep 30 01:00:32.245299 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.245573 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.273245 2026] [security2:error] [pid 186850:tid 186994] [client 152.59.169.65:62657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgibgAAARg"]
[Wed Sep 30 01:00:32.273361 2026] [security2:error] [pid 186850:tid 186994] [client 152.59.169.65:62657] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgibgAAARg"]
[Wed Sep 30 01:00:32.302962 2026] [security2:error] [pid 186850:tid 186984] [client 20.214.191.94:23244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gulu.php"] [unique_id "aryzkE5Phls--iYlcKgidAAAAQ4"]
[Wed Sep 30 01:00:32.328882 2026] [security2:error] [pid 186850:tid 187019] [client 161.118.214.16:62850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.christylthom.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "aryzkE5Phls--iYlcKgidQAAATE"]
[Wed Sep 30 01:00:32.335899 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.336196 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.412505 2026] [security2:error] [pid 186850:tid 187048] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkE5Phls--iYlcKgigQAAAU4"]
[Wed Sep 30 01:00:32.429954 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.430253 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.432619 2026] [security2:error] [pid 186850:tid 187024] [client 52.172.226.14:32513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/function.php"] [unique_id "aryzkE5Phls--iYlcKgihQAAATY"]
[Wed Sep 30 01:00:32.453402 2026] [security2:error] [pid 186850:tid 186985] [client 203.122.45.246:52779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgiiAAAAQ8"]
[Wed Sep 30 01:00:32.453531 2026] [security2:error] [pid 186850:tid 186985] [client 203.122.45.246:52779] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgiiAAAAQ8"]
[Wed Sep 30 01:00:32.460373 2026] [security2:error] [pid 186850:tid 187020] [client 52.231.69.245:49091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/aaa.php"] [unique_id "aryzkE5Phls--iYlcKgiiQAAATI"]
[Wed Sep 30 01:00:32.519793 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.520083 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.522081 2026] [security2:error] [pid 186850:tid 187010] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkE5Phls--iYlcKgiigAAASg"]
[Wed Sep 30 01:00:32.570655 2026] [security2:error] [pid 186850:tid 187040] [client 202.179.95.79:65161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgilAAAAUY"]
[Wed Sep 30 01:00:32.570824 2026] [security2:error] [pid 186850:tid 187040] [client 202.179.95.79:65161] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgilAAAAUY"]
[Wed Sep 30 01:00:32.571480 2026] [security2:error] [pid 186850:tid 187015] [client 20.214.191.94:23489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/bala.php"] [unique_id "aryzkE5Phls--iYlcKgilQAAAS0"]
[Wed Sep 30 01:00:32.579334 2026] [security2:error] [pid 186850:tid 187030] [client 4.196.65.241:2536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/r5t.php"] [unique_id "aryzkE5Phls--iYlcKgilgAAATw"]
[Wed Sep 30 01:00:32.591196 2026] [security2:error] [pid 186850:tid 187085] [client 85.203.36.111:44971] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/css/goods.php"] [unique_id "aryzkE5Phls--iYlcKgimQAAAXM"]
[Wed Sep 30 01:00:32.611530 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.611836 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.639395 2026] [security2:error] [pid 186850:tid 187041] [client 143.0.48.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzkE5Phls--iYlcKgingAAAUc"]
[Wed Sep 30 01:00:32.657992 2026] [security2:error] [pid 186850:tid 186983] [client 173.254.29.157:27534] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "aryzkE5Phls--iYlcKgioAAAAQ0"]
[Wed Sep 30 01:00:32.693369 2026] [security2:error] [pid 186850:tid 187047] [client 20.219.2.60:19535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/900.php"] [unique_id "aryzkE5Phls--iYlcKgipQAAAU0"]
[Wed Sep 30 01:00:32.697828 2026] [security2:error] [pid 186850:tid 187089] [client 4.196.65.241:64145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/felnggg.php"] [unique_id "aryzkE5Phls--iYlcKgiqAAAAXc"]
[Wed Sep 30 01:00:32.700442 2026] [security2:error] [pid 186850:tid 187069] [client 20.214.109.68:11145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/grsiuk.php"] [unique_id "aryzkE5Phls--iYlcKgiqQAAAWM"]
[Wed Sep 30 01:00:32.701234 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.701509 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.724423 2026] [security2:error] [pid 186850:tid 187016] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/admin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkE5Phls--iYlcKgiqgAAAS4"]
[Wed Sep 30 01:00:32.753225 2026] [security2:error] [pid 186850:tid 187103] [client 52.231.69.245:13490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/chosen.php"] [unique_id "aryzkE5Phls--iYlcKgirQAAAYU"]
[Wed Sep 30 01:00:32.792990 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.793269 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.846477 2026] [security2:error] [pid 186850:tid 187033] [client 20.194.5.96:35483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/ops.php"] [unique_id "aryzkE5Phls--iYlcKgisQAAAT8"]
[Wed Sep 30 01:00:32.866082 2026] [security2:error] [pid 186850:tid 186889] [remote 74.7.227.56:58478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzkE5Phls--iYlcKgisgABRSY"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:00:32.886468 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.886862 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:32.889175 2026] [security2:error] [pid 186850:tid 186991] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/admin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkE5Phls--iYlcKgisAAAARU"]
[Wed Sep 30 01:00:32.931516 2026] [security2:error] [pid 186850:tid 187070] [client 52.172.226.14:32093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/0x.php"] [unique_id "aryzkE5Phls--iYlcKgitgAAAWQ"]
[Wed Sep 30 01:00:32.960741 2026] [security2:error] [pid 186850:tid 187080] [client 106.214.2.47:31353] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgitwAAAW4"]
[Wed Sep 30 01:00:32.960876 2026] [security2:error] [pid 186850:tid 187080] [client 106.214.2.47:31353] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzkE5Phls--iYlcKgitwAAAW4"]
[Wed Sep 30 01:00:32.974665 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:32.974975 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.001765 2026] [security2:error] [pid 186850:tid 187007] [client 20.214.191.94:23364] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.rashed-office.com"] [uri "/c99.php"] [unique_id "aryzkU5Phls--iYlcKgiwgAAASU"]
[Wed Sep 30 01:00:33.023562 2026] [security2:error] [pid 186850:tid 187088] [client 91.92.128.112:47040] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "give.pearlcogop.com"] [uri "/"] [unique_id "aryzkU5Phls--iYlcKgixAAAAXY"]
[Wed Sep 30 01:00:33.046008 2026] [security2:error] [pid 186850:tid 187067] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/admin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkE5Phls--iYlcKgivwAAAWE"]
[Wed Sep 30 01:00:33.064512 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.064786 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.079968 2026] [security2:error] [pid 186850:tid 187015] [client 4.240.25.22:30738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/term.php"] [unique_id "aryzkU5Phls--iYlcKgiygAAAS0"]
[Wed Sep 30 01:00:33.088279 2026] [security2:error] [pid 186850:tid 187026] [client 220.86.115.27:33092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.115.86.220.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryzkU5Phls--iYlcKgiyAAAATg"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:00:33.099655 2026] [security2:error] [pid 186850:tid 187008] [client 52.231.69.245:13503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/2P.php"] [unique_id "aryzkU5Phls--iYlcKgizgAAASY"]
[Wed Sep 30 01:00:33.156465 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.156714 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.177194 2026] [security2:error] [pid 186850:tid 187087] [client 20.219.2.60:19555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/blsvgeyaza.php"] [unique_id "aryzkU5Phls--iYlcKgi2wAAAXU"]
[Wed Sep 30 01:00:33.249601 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.249872 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.267107 2026] [security2:error] [pid 186850:tid 187099] [client 20.194.5.96:35646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/mac.php"] [unique_id "aryzkU5Phls--iYlcKgi3wAAAYE"]
[Wed Sep 30 01:00:33.284477 2026] [security2:error] [pid 186850:tid 187107] [client 20.214.109.68:11246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-act.php"] [unique_id "aryzkU5Phls--iYlcKgi4wAAAYk"]
[Wed Sep 30 01:00:33.293319 2026] [security2:error] [pid 186850:tid 187021] [client 103.168.67.253:42158] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/admin"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/admin"] [unique_id "aryzkU5Phls--iYlcKgi0wAAATM"]
[Wed Sep 30 01:00:33.321449 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:33.321706 2026] [access_compat:error] [pid 186850:tid 187086] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:33.338593 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.338881 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.386952 2026] [security2:error] [pid 186850:tid 187033] [client 104.208.65.139:45371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/felnggg.php"] [unique_id "aryzkU5Phls--iYlcKgi7gAAAT8"]
[Wed Sep 30 01:00:33.404142 2026] [security2:error] [pid 186850:tid 187042] [client 52.231.69.245:13682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/min.php"] [unique_id "aryzkU5Phls--iYlcKgi7wAAAUg"]
[Wed Sep 30 01:00:33.407034 2026] [security2:error] [pid 186850:tid 186996] [client 20.214.191.94:23367] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.rashed-office.com"] [uri "/c99.php"] [unique_id "aryzkU5Phls--iYlcKgi8AAAARo"]
[Wed Sep 30 01:00:33.428513 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.428785 2026] [access_compat:error] [pid 186850:tid 187011] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.435949 2026] [security2:error] [pid 186850:tid 187028] [client 103.172.210.103:51861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi9QAAATo"]
[Wed Sep 30 01:00:33.436083 2026] [security2:error] [pid 186850:tid 187028] [client 103.172.210.103:51861] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi9QAAATo"]
[Wed Sep 30 01:00:33.463143 2026] [security2:error] [pid 186850:tid 186989] [client 52.172.226.14:32562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/index.php"] [unique_id "aryzkU5Phls--iYlcKgi9gAAARM"]
[Wed Sep 30 01:00:33.486295 2026] [security2:error] [pid 186850:tid 187017] [client 43.227.131.37:43222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi-QAAAS8"]
[Wed Sep 30 01:00:33.486396 2026] [security2:error] [pid 186850:tid 187017] [client 43.227.131.37:43222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi-QAAAS8"]
[Wed Sep 30 01:00:33.496129 2026] [security2:error] [pid 186850:tid 187100] [client 72.255.10.32:56012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi-gAAAYI"]
[Wed Sep 30 01:00:33.496224 2026] [security2:error] [pid 186850:tid 187100] [client 72.255.10.32:56012] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgi-gAAAYI"]
[Wed Sep 30 01:00:33.521103 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.521358 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.531994 2026] [security2:error] [pid 186850:tid 187075] [client 103.168.67.253:47782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzkU5Phls--iYlcKgi_wAAAWk"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:33.613964 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.614249 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.653289 2026] [security2:error] [pid 186850:tid 187048] [client 20.194.5.96:35477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/myglu.php"] [unique_id "aryzkU5Phls--iYlcKgjBAAAAU4"]
[Wed Sep 30 01:00:33.662360 2026] [security2:error] [pid 186850:tid 187012] [client 20.219.2.60:19504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gqhyti.php"] [unique_id "aryzkU5Phls--iYlcKgjBQAAASo"]
[Wed Sep 30 01:00:33.679015 2026] [security2:error] [pid 186850:tid 187035] [client 116.72.182.19:56402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgjBgAAAUE"]
[Wed Sep 30 01:00:33.679116 2026] [security2:error] [pid 186850:tid 187035] [client 116.72.182.19:56402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzkU5Phls--iYlcKgjBgAAAUE"]
[Wed Sep 30 01:00:33.702596 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.703043 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.763890 2026] [security2:error] [pid 186850:tid 186995] [client 20.214.191.94:23390] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.rashed-office.com"] [uri "/c99.php"] [unique_id "aryzkU5Phls--iYlcKgjEQAAARk"]
[Wed Sep 30 01:00:33.785155 2026] [security2:error] [pid 186850:tid 186986] [client 85.203.36.108:59259] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/abcd.php"] [unique_id "aryzkU5Phls--iYlcKgjFQAAARA"]
[Wed Sep 30 01:00:33.793678 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.793959 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.839922 2026] [security2:error] [pid 186850:tid 187032] [client 52.231.69.245:13673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/great.php"] [unique_id "aryzkU5Phls--iYlcKgjGQAAAT4"]
[Wed Sep 30 01:00:33.856082 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:33.856357 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:33.883063 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.883334 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:33.890571 2026] [security2:error] [pid 186850:tid 187089] [client 4.240.25.22:8467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/xiugai.php"] [unique_id "aryzkU5Phls--iYlcKgjIgAAAXc"]
[Wed Sep 30 01:00:33.898858 2026] [security2:error] [pid 186850:tid 187107] [client 4.196.65.241:19467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/aboutt.php"] [unique_id "aryzkU5Phls--iYlcKgjJQAAAYk"]
[Wed Sep 30 01:00:33.917392 2026] [security2:error] [pid 186850:tid 187071] [client 200.119.193.236:65234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.193.119.200.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "aryzkU5Phls--iYlcKgjJwAAAWU"], referer: https://cantrade.com.sg/wp-login.php
[Wed Sep 30 01:00:33.958725 2026] [ssl:error] [pid 186850:tid 186990] [client 91.92.128.112:47058] AH02032: Hostname give.pearlcogop.com provided via SNI and hostname pearlcogop.com provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://173.254.29.157:443/access/api/v1/system/ping
[Wed Sep 30 01:00:33.963930 2026] [security2:error] [pid 186850:tid 187082] [client 52.172.226.14:32111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryzkU5Phls--iYlcKgjKQAAAXA"]
[Wed Sep 30 01:00:33.964546 2026] [security2:error] [pid 186850:tid 187084] [client 114.119.145.36:26903] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ybflorida.com"] [uri "/new-construction/listing/99288-41619-1509925"] [unique_id "aryzkU5Phls--iYlcKgjKgAAAXI"], referer: https://ybflorida.com/new-construction/listing/99288-41619-1563229
[Wed Sep 30 01:00:33.974675 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:33.974961 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.064199 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.064452 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.144486 2026] [security2:error] [pid 186850:tid 187028] [client 20.214.191.94:23263] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.rashed-office.com"] [uri "/c99.php"] [unique_id "aryzkk5Phls--iYlcKgjNAAAATo"]
[Wed Sep 30 01:00:34.156838 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.157117 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.169701 2026] [security2:error] [pid 186850:tid 186997] [client 20.219.2.60:20211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/autoxxi.php"] [unique_id "aryzkk5Phls--iYlcKgjNwAAARs"]
[Wed Sep 30 01:00:34.177870 2026] [security2:error] [pid 186850:tid 187080] [client 20.194.5.96:35604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/aboutt.php"] [unique_id "aryzkk5Phls--iYlcKgjOAAAAW4"]
[Wed Sep 30 01:00:34.222078 2026] [security2:error] [pid 186850:tid 187090] [client 49.205.105.16:15079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzkk5Phls--iYlcKgjOwAAAXg"]
[Wed Sep 30 01:00:34.222223 2026] [security2:error] [pid 186850:tid 187090] [client 49.205.105.16:15079] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzkk5Phls--iYlcKgjOwAAAXg"]
[Wed Sep 30 01:00:34.248742 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.249024 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.328382 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:34.328659 2026] [access_compat:error] [pid 186850:tid 187025] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:00:34.345897 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.346349 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.354144 2026] [security2:error] [pid 186850:tid 186895] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzkk5Phls--iYlcKgjRwABTyw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D170688
[Wed Sep 30 01:00:34.354173 2026] [security2:error] [pid 186850:tid 186895] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzkk5Phls--iYlcKgjRwABTyw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D170688
[Wed Sep 30 01:00:34.430008 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.430279 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.447431 2026] [security2:error] [pid 186850:tid 187036] [client 20.214.109.68:11140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/cu.php"] [unique_id "aryzkk5Phls--iYlcKgjUAAAAUI"]
[Wed Sep 30 01:00:34.471133 2026] [security2:error] [pid 186850:tid 187003] [client 20.214.191.94:23261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/ttivnife.php"] [unique_id "aryzkk5Phls--iYlcKgjVAAAASE"]
[Wed Sep 30 01:00:34.525874 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.526305 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.533031 2026] [security2:error] [pid 186850:tid 186995] [client 20.198.74.230:23561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/usr.php"] [unique_id "aryzkk5Phls--iYlcKgjWAAAARk"]
[Wed Sep 30 01:00:34.541431 2026] [security2:error] [pid 186850:tid 187052] [client 52.231.69.245:13452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/BDKR28WP.php"] [unique_id "aryzkk5Phls--iYlcKgjWQAAAVI"]
[Wed Sep 30 01:00:34.544398 2026] [security2:error] [pid 186850:tid 187092] [client 220.86.115.27:16472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.115.86.220.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "aryzkk5Phls--iYlcKgjWgAAAXo"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:00:34.581997 2026] [security2:error] [pid 186850:tid 187089] [client 52.172.226.14:32767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/classwithtostring.php"] [unique_id "aryzkk5Phls--iYlcKgjWwAAAXc"]
[Wed Sep 30 01:00:34.612083 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.612487 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.646246 2026] [security2:error] [pid 186850:tid 187107] [client 20.219.2.60:20039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/1144452145_error_log.php"] [unique_id "aryzkk5Phls--iYlcKgjYAAAAYk"]
[Wed Sep 30 01:00:34.705187 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.705457 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.706616 2026] [security2:error] [pid 186850:tid 187013] [client 20.194.5.96:35497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wp-whe.php"] [unique_id "aryzkk5Phls--iYlcKgjZAAAASs"]
[Wed Sep 30 01:00:34.724723 2026] [core:error] [pid 186850:tid 187051] [client 65.111.22.10:26843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:34.724740 2026] [core:error] [pid 186850:tid 187051] [client 65.111.22.10:26843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:34.746207 2026] [security2:error] [pid 186850:tid 187021] [client 20.214.191.94:23376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/admin.php/2P.php"] [unique_id "aryzkk5Phls--iYlcKgjZgAAATM"]
[Wed Sep 30 01:00:34.798122 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.798574 2026] [access_compat:error] [pid 186850:tid 186994] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.856679 2026] [security2:error] [pid 186850:tid 186991] [client 52.231.69.245:49112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/gigi.php"] [unique_id "aryzkk5Phls--iYlcKgjbQAAARU"]
[Wed Sep 30 01:00:34.858804 2026] [access_compat:error] [pid 186850:tid 187063] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:34.859264 2026] [access_compat:error] [pid 186850:tid 187063] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:34.888338 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.888590 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:34.966315 2026] [security2:error] [pid 186850:tid 186998] [client 103.168.67.253:40810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzkk5Phls--iYlcKgjeQAAARw"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:34.970012 2026] [security2:error] [pid 186850:tid 187023] [client 85.203.36.97:38445] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "aryzkk5Phls--iYlcKgjcgAAATU"]
[Wed Sep 30 01:00:34.982923 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:34.983360 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.020504 2026] [security2:error] [pid 186850:tid 187062] [client 116.197.133.25:53563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzk05Phls--iYlcKgjggAAAVw"]
[Wed Sep 30 01:00:35.020634 2026] [security2:error] [pid 186850:tid 187062] [client 116.197.133.25:53563] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzk05Phls--iYlcKgjggAAAVw"]
[Wed Sep 30 01:00:35.023302 2026] [security2:error] [pid 186850:tid 187017] [client 20.214.191.94:23371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/cord.php"] [unique_id "aryzk05Phls--iYlcKgjgwAAAS8"]
[Wed Sep 30 01:00:35.070278 2026] [security2:error] [pid 186850:tid 187004] [client 104.208.65.139:45344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/felnggg.update.php"] [unique_id "aryzk05Phls--iYlcKgjhgAAASI"]
[Wed Sep 30 01:00:35.074131 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.074562 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.087291 2026] [security2:error] [pid 186850:tid 187025] [client 20.194.5.96:35503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/ssixta.php"] [unique_id "aryzk05Phls--iYlcKgjiAAAATc"]
[Wed Sep 30 01:00:35.103002 2026] [security2:error] [pid 186850:tid 187067] [client 52.172.226.14:32522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/dropdown.php"] [unique_id "aryzk05Phls--iYlcKgjjQAAAWE"]
[Wed Sep 30 01:00:35.115192 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:20426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws48.php"] [unique_id "aryzk05Phls--iYlcKgjjgAAAU4"]
[Wed Sep 30 01:00:35.124241 2026] [security2:error] [pid 186850:tid 187008] [client 52.231.69.245:13486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ant.php"] [unique_id "aryzk05Phls--iYlcKgjkQAAASY"]
[Wed Sep 30 01:00:35.129113 2026] [security2:error] [pid 186850:tid 187042] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzkk5Phls--iYlcKgjbgAAAUg"]
[Wed Sep 30 01:00:35.160937 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.161217 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.171912 2026] [security2:error] [pid 186850:tid 186993] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/imprint"] [unique_id "aryzkk5Phls--iYlcKgjaQAAARc"]
[Wed Sep 30 01:00:35.214648 2026] [security2:error] [pid 186850:tid 186982] [client 4.240.25.22:8457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/sxxb.php"] [unique_id "aryzk05Phls--iYlcKgjlgAAAQw"]
[Wed Sep 30 01:00:35.252600 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.252894 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.305024 2026] [security2:error] [pid 186850:tid 187050] [client 20.214.191.94:23292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/anom.php"] [unique_id "aryzk05Phls--iYlcKgjnAAAAVA"]
[Wed Sep 30 01:00:35.330390 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:35.330663 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:35.341938 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.342198 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.398171 2026] [security2:error] [pid 186850:tid 187101] [client 52.231.69.245:13491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/uejvv.php"] [unique_id "aryzk05Phls--iYlcKgjpQAAAYM"]
[Wed Sep 30 01:00:35.433478 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.433727 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.456667 2026] [security2:error] [pid 186850:tid 187099] [client 173.254.29.157:27586] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzk05Phls--iYlcKgjqQAAAYE"]
[Wed Sep 30 01:00:35.472940 2026] [security2:error] [pid 186850:tid 187095] [client 173.254.29.157:27602] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzk05Phls--iYlcKgjqgAAAX0"]
[Wed Sep 30 01:00:35.487243 2026] [security2:error] [pid 186850:tid 186991] [client 173.254.29.157:27612] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzk05Phls--iYlcKgjqwAAARU"]
[Wed Sep 30 01:00:35.500970 2026] [security2:error] [pid 186850:tid 187054] [client 173.254.29.157:27626] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzk05Phls--iYlcKgjrAAAAVQ"]
[Wed Sep 30 01:00:35.527738 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.528037 2026] [access_compat:error] [pid 186850:tid 187071] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.536158 2026] [security2:error] [pid 186850:tid 187094] [client 20.214.109.68:11228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/8.php"] [unique_id "aryzk05Phls--iYlcKgjsQAAAXw"]
[Wed Sep 30 01:00:35.544260 2026] [security2:error] [pid 186850:tid 186882] [remote 220.181.108.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzk05Phls--iYlcKgjsgABSR8"]
[Wed Sep 30 01:00:35.576337 2026] [security2:error] [pid 186850:tid 187058] [client 20.214.191.94:23384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/plugins.php"] [unique_id "aryzk05Phls--iYlcKgjtAAAAVg"]
[Wed Sep 30 01:00:35.578630 2026] [security2:error] [pid 186850:tid 187004] [client 20.219.2.60:19568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryzk05Phls--iYlcKgjtQAAASI"]
[Wed Sep 30 01:00:35.615537 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.615803 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.622487 2026] [security2:error] [pid 186850:tid 187074] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzk05Phls--iYlcKgjtgAAAWg"]
[Wed Sep 30 01:00:35.663695 2026] [security2:error] [pid 186850:tid 187078] [client 20.194.5.96:35474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/tesla.php"] [unique_id "aryzk05Phls--iYlcKgjvQAAAWw"]
[Wed Sep 30 01:00:35.708698 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.708988 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.737772 2026] [security2:error] [pid 186850:tid 187035] [client 52.172.226.14:32102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/moon.php"] [unique_id "aryzk05Phls--iYlcKgjwgAAAUE"]
[Wed Sep 30 01:00:35.757922 2026] [security2:error] [pid 186850:tid 186890] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzk05Phls--iYlcKgjwwABESc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=390&t=15949
[Wed Sep 30 01:00:35.757948 2026] [security2:error] [pid 186850:tid 186890] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzk05Phls--iYlcKgjwwABESc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=390&t=15949
[Wed Sep 30 01:00:35.802248 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.802558 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.866631 2026] [security2:error] [pid 186850:tid 187041] [client 20.214.191.94:23372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/groud3.php"] [unique_id "aryzk05Phls--iYlcKgjygAAAUc"]
[Wed Sep 30 01:00:35.873104 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:35.873393 2026] [access_compat:error] [pid 186850:tid 186984] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:35.889636 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.889902 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.924674 2026] [security2:error] [pid 186850:tid 187031] [client 4.196.65.241:19482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/SbK7VBNnXJj.php"] [unique_id "aryzk05Phls--iYlcKgjzgAAAT0"]
[Wed Sep 30 01:00:35.982139 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:35.982410 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:35.984485 2026] [security2:error] [pid 186850:tid 187070] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzk05Phls--iYlcKgj0AAAAWQ"]
[Wed Sep 30 01:00:36.044952 2026] [security2:error] [pid 186850:tid 187053] [client 20.214.109.68:11143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws60.php"] [unique_id "aryzlE5Phls--iYlcKgj3AAAAVM"]
[Wed Sep 30 01:00:36.045778 2026] [security2:error] [pid 186850:tid 187107] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgj2wAAAYk"]
[Wed Sep 30 01:00:36.076283 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.076712 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.086587 2026] [security2:error] [pid 186850:tid 186986] [client 20.219.2.60:19540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/schallfuns.php"] [unique_id "aryzlE5Phls--iYlcKgj3gAAARA"]
[Wed Sep 30 01:00:36.115177 2026] [security2:error] [pid 186850:tid 187021] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgj4QAAATM"]
[Wed Sep 30 01:00:36.152766 2026] [security2:error] [pid 186850:tid 186994] [client 137.184.113.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.113.184.137.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "santos.biz"] [uri "/wp-login.php"] [unique_id "aryzlE5Phls--iYlcKgj5QAAARg"], referer: http://santos.biz/wp-login.php
[Wed Sep 30 01:00:36.165145 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.165429 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.201637 2026] [security2:error] [pid 186850:tid 187063] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgj6gAAAV0"]
[Wed Sep 30 01:00:36.216570 2026] [security2:error] [pid 186850:tid 187071] [client 20.214.191.94:23281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gaxby.php"] [unique_id "aryzlE5Phls--iYlcKgj7QAAAWU"]
[Wed Sep 30 01:00:36.222379 2026] [security2:error] [pid 186850:tid 187032] [client 52.172.226.14:32709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/autoload_classmap.php"] [unique_id "aryzlE5Phls--iYlcKgj7gAAAT4"]
[Wed Sep 30 01:00:36.256066 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.256348 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.300283 2026] [security2:error] [pid 186850:tid 187062] [client 137.184.113.151:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.113.184.137.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "santos.biz"] [uri "/wp-login.php"] [unique_id "aryzlE5Phls--iYlcKgj8QAAAVw"], referer: http://santos.biz/wp-login.php
[Wed Sep 30 01:00:36.303407 2026] [security2:error] [pid 186850:tid 187017] [client 85.203.36.110:29603] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/cord.php"] [unique_id "aryzlE5Phls--iYlcKgj8gAAAS8"]
[Wed Sep 30 01:00:36.328572 2026] [security2:error] [pid 186850:tid 187073] [client 20.194.5.96:35512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/222.php"] [unique_id "aryzlE5Phls--iYlcKgj9wAAAWc"]
[Wed Sep 30 01:00:36.330709 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:36.330975 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:36.331149 2026] [security2:error] [pid 186850:tid 187025] [client 52.231.69.245:13660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/file.php"] [unique_id "aryzlE5Phls--iYlcKgj-AAAATc"]
[Wed Sep 30 01:00:36.347924 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.348208 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.437791 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.438076 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.497166 2026] [security2:error] [pid 186850:tid 187057] [client 104.208.65.139:41068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/jybkxer.php"] [unique_id "aryzlE5Phls--iYlcKgj_wAAAVc"]
[Wed Sep 30 01:00:36.526551 2026] [security2:error] [pid 186850:tid 186999] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkAQAAAR0"]
[Wed Sep 30 01:00:36.529377 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.529658 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.563936 2026] [security2:error] [pid 186850:tid 187041] [client 20.219.2.60:19464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/CDX1.php"] [unique_id "aryzlE5Phls--iYlcKgkBQAAAUc"]
[Wed Sep 30 01:00:36.590177 2026] [security2:error] [pid 186850:tid 187036] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkCAAAAUI"]
[Wed Sep 30 01:00:36.590249 2026] [security2:error] [pid 186850:tid 187046] [client 20.214.191.94:23247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/dh9u7.php"] [unique_id "aryzlE5Phls--iYlcKgkCQAAAUw"]
[Wed Sep 30 01:00:36.620001 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.620293 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.660364 2026] [security2:error] [pid 186850:tid 187050] [client 52.231.69.245:13642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/elements.php"] [unique_id "aryzlE5Phls--iYlcKgkDQAAAVA"]
[Wed Sep 30 01:00:36.663079 2026] [security2:error] [pid 186850:tid 187007] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkCwAAASU"]
[Wed Sep 30 01:00:36.691180 2026] [security2:error] [pid 186850:tid 187101] [client 52.172.226.14:32077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/default.php"] [unique_id "aryzlE5Phls--iYlcKgkDwAAAYM"]
[Wed Sep 30 01:00:36.710168 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.710429 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.728645 2026] [security2:error] [pid 186850:tid 187066] [client 161.118.214.16:62239] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "wed.xio.mybluehost.me"] [uri "/"] [unique_id "aryzk05Phls--iYlcKgjxgAAAWA"]
[Wed Sep 30 01:00:36.738094 2026] [security2:error] [pid 186850:tid 187069] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkFAAAAWM"]
[Wed Sep 30 01:00:36.749955 2026] [security2:error] [pid 186850:tid 187035] [client 91.144.33.179:55532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.33.144.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chrisbernabeo.com"] [uri "/xmlrpc.php"] [unique_id "aryzlE5Phls--iYlcKgkEwAAAUE"]
[Wed Sep 30 01:00:36.750047 2026] [security2:error] [pid 186850:tid 187035] [client 91.144.33.179:55532] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "chrisbernabeo.com"] [uri "/xmlrpc.php"] [unique_id "aryzlE5Phls--iYlcKgkEwAAAUE"]
[Wed Sep 30 01:00:36.789517 2026] [security2:error] [pid 186850:tid 187010] [client 152.232.185.220:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzlE5Phls--iYlcKgkGQAAASg"]
[Wed Sep 30 01:00:36.800244 2026] [security2:error] [pid 186850:tid 187093] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkGgAAAXs"]
[Wed Sep 30 01:00:36.828394 2026] [access_compat:error] [pid 186850:tid 187021] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:36.828656 2026] [access_compat:error] [pid 186850:tid 187021] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:36.859617 2026] [security2:error] [pid 186850:tid 187016] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkIAAAAS4"]
[Wed Sep 30 01:00:36.862936 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.863202 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.870139 2026] [security2:error] [pid 186850:tid 187055] [client 49.43.163.212:52156] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzlE5Phls--iYlcKgkIgAAAVU"]
[Wed Sep 30 01:00:36.870253 2026] [security2:error] [pid 186850:tid 187055] [client 49.43.163.212:52156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzlE5Phls--iYlcKgkIgAAAVU"]
[Wed Sep 30 01:00:36.876430 2026] [security2:error] [pid 186850:tid 187027] [client 20.214.109.68:11210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/vanda.php"] [unique_id "aryzlE5Phls--iYlcKgkIwAAATk"]
[Wed Sep 30 01:00:36.901221 2026] [security2:error] [pid 186850:tid 187034] [client 20.214.191.94:23529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/koiy.php"] [unique_id "aryzlE5Phls--iYlcKgkJwAAAUA"]
[Wed Sep 30 01:00:36.927855 2026] [security2:error] [pid 186850:tid 187063] [client 4.196.65.241:27264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ab.php"] [unique_id "aryzlE5Phls--iYlcKgkKQAAAV0"]
[Wed Sep 30 01:00:36.929790 2026] [security2:error] [pid 186850:tid 187094] [client 52.231.69.245:13670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/sitemap.php"] [unique_id "aryzlE5Phls--iYlcKgkKgAAAXw"]
[Wed Sep 30 01:00:36.944771 2026] [security2:error] [pid 186850:tid 187039] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlE5Phls--iYlcKgkLAAAAUU"]
[Wed Sep 30 01:00:36.973771 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.974087 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:36.984821 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:36.985107 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.032704 2026] [security2:error] [pid 186850:tid 187025] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkMQAAATc"]
[Wed Sep 30 01:00:37.037677 2026] [security2:error] [pid 186850:tid 186998] [client 20.194.5.96:35506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/media.php"] [unique_id "aryzlU5Phls--iYlcKgkNAAAARw"]
[Wed Sep 30 01:00:37.040744 2026] [security2:error] [pid 186850:tid 187086] [client 20.219.2.60:20049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/clasa99.php"] [unique_id "aryzlU5Phls--iYlcKgkNgAAAXQ"]
[Wed Sep 30 01:00:37.076641 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.076900 2026] [access_compat:error] [pid 186850:tid 187024] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.105757 2026] [security2:error] [pid 186850:tid 187048] [client 4.240.25.22:30731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/f35.update.php"] [unique_id "aryzlU5Phls--iYlcKgkOgAAAU4"]
[Wed Sep 30 01:00:37.113448 2026] [security2:error] [pid 186850:tid 187077] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkOQAAAWs"]
[Wed Sep 30 01:00:37.166333 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.166579 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.203958 2026] [security2:error] [pid 186850:tid 187005] [client 52.172.226.14:32000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryzlU5Phls--iYlcKgkRAAAASM"]
[Wed Sep 30 01:00:37.258383 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.258658 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.327615 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:49141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/xetmolxr.php"] [unique_id "aryzlU5Phls--iYlcKgkTwAAAUY"]
[Wed Sep 30 01:00:37.343430 2026] [security2:error] [pid 186850:tid 187089] [client 20.214.191.94:23528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wordfence-waf.php"] [unique_id "aryzlU5Phls--iYlcKgkUQAAAXc"]
[Wed Sep 30 01:00:37.350997 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.351408 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.357136 2026] [security2:error] [pid 186850:tid 186995] [client 20.70.173.30:2627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-login.php"] [unique_id "aryzlU5Phls--iYlcKgkTQAAARk"]
[Wed Sep 30 01:00:37.391036 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:37.391330 2026] [access_compat:error] [pid 186850:tid 187052] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:37.439415 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.439717 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.447376 2026] [security2:error] [pid 186850:tid 187035] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkWAAAAUE"]
[Wed Sep 30 01:00:37.456707 2026] [security2:error] [pid 186850:tid 186986] [client 20.198.74.230:24151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/file2.php"] [unique_id "aryzlU5Phls--iYlcKgkWgAAARA"]
[Wed Sep 30 01:00:37.501255 2026] [security2:error] [pid 186850:tid 186981] [client 20.219.2.60:20057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/myfilexxx.php"] [unique_id "aryzlU5Phls--iYlcKgkXQAAAQs"]
[Wed Sep 30 01:00:37.530698 2026] [autoindex:error] [pid 186850:tid 187081] [client 104.28.254.46:41967] AH01276: Cannot serve directory /home4/wkaybemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://wka.ybe.mybluehost.me/
[Wed Sep 30 01:00:37.531783 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.532056 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.534997 2026] [security2:error] [pid 186850:tid 187085] [client 20.214.109.68:11221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/domains.php"] [unique_id "aryzlU5Phls--iYlcKgkYwAAAXM"]
[Wed Sep 30 01:00:37.558096 2026] [security2:error] [pid 186850:tid 187055] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkYQAAAVU"]
[Wed Sep 30 01:00:37.567174 2026] [security2:error] [pid 186850:tid 187094] [client 20.70.173.30:60011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/pfm.php"] [unique_id "aryzlU5Phls--iYlcKgkZgAAAXw"]
[Wed Sep 30 01:00:37.610218 2026] [security2:error] [pid 186850:tid 187030] [client 45.89.242.87:20397] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/dex.php"] [unique_id "aryzlU5Phls--iYlcKgkaAAAATw"]
[Wed Sep 30 01:00:37.621695 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.621990 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.622532 2026] [security2:error] [pid 186850:tid 187091] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkaQAAAXk"]
[Wed Sep 30 01:00:37.643442 2026] [security2:error] [pid 186850:tid 186954] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzlU5Phls--iYlcKgkawABbmc"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D95929
[Wed Sep 30 01:00:37.676044 2026] [security2:error] [pid 186850:tid 187017] [client 20.214.191.94:23251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wp5.php"] [unique_id "aryzlU5Phls--iYlcKgkbQAAAS8"]
[Wed Sep 30 01:00:37.690096 2026] [security2:error] [pid 186850:tid 187062] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzlU5Phls--iYlcKgkbgAAAVw"]
[Wed Sep 30 01:00:37.711707 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.712090 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.717240 2026] [security2:error] [pid 186850:tid 187025] [client 52.172.226.14:32568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/fucku.php"] [unique_id "aryzlU5Phls--iYlcKgkcQAAATc"]
[Wed Sep 30 01:00:37.783289 2026] [security2:error] [pid 186850:tid 187051] [client 105.112.178.79:38341] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tky.nox.mybluehost.me"] [uri "/__ss_probe_dc29de4337ca6344e5abbf72362ed313__"] [unique_id "aryzlU5Phls--iYlcKgkdgAAAVE"]
[Wed Sep 30 01:00:37.805063 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.805474 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.809034 2026] [security2:error] [pid 186850:tid 187077] [client 114.119.152.149:39003] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "masstransins.com"] [uri "/"] [unique_id "aryzlU5Phls--iYlcKgkewAAAWs"], referer: http://masstransins.com/
[Wed Sep 30 01:00:37.812851 2026] [security2:error] [pid 186850:tid 186989] [client 52.231.69.245:13680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/mini.php"] [unique_id "aryzlU5Phls--iYlcKgkfAAAARM"]
[Wed Sep 30 01:00:37.813097 2026] [security2:error] [pid 186850:tid 187029] [client 104.208.65.139:45360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/edit-tags.php"] [unique_id "aryzlU5Phls--iYlcKgkfQAAATs"]
[Wed Sep 30 01:00:37.831581 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:37.831931 2026] [access_compat:error] [pid 186850:tid 187084] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:37.888910 2026] [security2:error] [pid 186850:tid 187053] [client 103.159.192.142:55206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzlU5Phls--iYlcKgkgQAAAVM"]
[Wed Sep 30 01:00:37.889037 2026] [security2:error] [pid 186850:tid 187053] [client 103.159.192.142:55206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzlU5Phls--iYlcKgkgQAAAVM"]
[Wed Sep 30 01:00:37.896211 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.896528 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:37.914057 2026] [security2:error] [pid 186850:tid 187012] [client 37.41.16.35:57640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzlU5Phls--iYlcKgkhAAAASo"]
[Wed Sep 30 01:00:37.914200 2026] [security2:error] [pid 186850:tid 187012] [client 37.41.16.35:57640] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzlU5Phls--iYlcKgkhAAAASo"]
[Wed Sep 30 01:00:37.976650 2026] [security2:error] [pid 186850:tid 187054] [client 45.138.12.43:13698] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.sewbusyfashion.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzlU5Phls--iYlcKgkigAAAVQ"]
[Wed Sep 30 01:00:37.978977 2026] [security2:error] [pid 186850:tid 187037] [client 20.219.2.60:19562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/karma_144a.php"] [unique_id "aryzlU5Phls--iYlcKgkjAAAAUM"]
[Wed Sep 30 01:00:37.986548 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:37.986797 2026] [access_compat:error] [pid 186850:tid 187046] [client 216.73.216.46:56565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.022824 2026] [security2:error] [pid 186850:tid 187049] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzlU5Phls--iYlcKgkeAAAAU8"]
[Wed Sep 30 01:00:38.026694 2026] [security2:error] [pid 186850:tid 187001] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/legal-notice"] [unique_id "aryzlU5Phls--iYlcKgkcwAAAR8"]
[Wed Sep 30 01:00:38.041774 2026] [security2:error] [pid 186850:tid 187101] [client 4.196.65.241:19476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/css.php"] [unique_id "aryzlk5Phls--iYlcKgkkgAAAYM"]
[Wed Sep 30 01:00:38.078973 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.079332 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.091850 2026] [security2:error] [pid 186850:tid 186991] [client 223.181.60.167:27841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkmwAAARU"]
[Wed Sep 30 01:00:38.092012 2026] [security2:error] [pid 186850:tid 186991] [client 223.181.60.167:27841] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkmwAAARU"]
[Wed Sep 30 01:00:38.147753 2026] [security2:error] [pid 186850:tid 186981] [client 20.214.191.94:23421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/em.php"] [unique_id "aryzlk5Phls--iYlcKgknwAAAQs"]
[Wed Sep 30 01:00:38.196863 2026] [security2:error] [pid 186850:tid 187002] [client 52.172.226.14:32747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aryzlk5Phls--iYlcKgkowAAASA"]
[Wed Sep 30 01:00:38.197963 2026] [security2:error] [pid 186850:tid 187028] [client 52.231.69.245:13681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/zwso.php"] [unique_id "aryzlk5Phls--iYlcKgkpAAAATo"]
[Wed Sep 30 01:00:38.219764 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.220230 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.240477 2026] [security2:error] [pid 186850:tid 187032] [client 160.202.54.122:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryzlk5Phls--iYlcKgkqAAAAT4"]
[Wed Sep 30 01:00:38.246464 2026] [security2:error] [pid 186850:tid 187039] [client 4.240.25.22:20305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "aryzlk5Phls--iYlcKgkqQAAAUU"]
[Wed Sep 30 01:00:38.259304 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.259544 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.350235 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.350491 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.379443 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:38.379713 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:38.403160 2026] [security2:error] [pid 186850:tid 186986] [client 182.69.182.151:19007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkrgAAARA"]
[Wed Sep 30 01:00:38.403254 2026] [security2:error] [pid 186850:tid 186986] [client 182.69.182.151:19007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkrgAAARA"]
[Wed Sep 30 01:00:38.420595 2026] [security2:error] [pid 186850:tid 186989] [client 20.214.191.94:23373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/hp.php"] [unique_id "aryzlk5Phls--iYlcKgkrwAAARM"]
[Wed Sep 30 01:00:38.426893 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.5.96:35613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/24.php"] [unique_id "aryzlk5Phls--iYlcKgksAAAATs"]
[Wed Sep 30 01:00:38.439330 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.439586 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.440053 2026] [security2:error] [pid 186850:tid 186987] [client 20.219.2.60:19542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/3586%20b64.php"] [unique_id "aryzlk5Phls--iYlcKgksgAAARE"]
[Wed Sep 30 01:00:38.529537 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.529797 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.540649 2026] [security2:error] [pid 186850:tid 187045] [client 52.231.69.245:13668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/tiny.php"] [unique_id "aryzlk5Phls--iYlcKgkvQAAAUs"]
[Wed Sep 30 01:00:38.543421 2026] [security2:error] [pid 186850:tid 187106] [client 150.107.232.159:35732] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkvgAAAYg"]
[Wed Sep 30 01:00:38.543535 2026] [security2:error] [pid 186850:tid 187106] [client 150.107.232.159:35732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkvgAAAYg"]
[Wed Sep 30 01:00:38.596365 2026] [security2:error] [pid 186850:tid 187044] [client 49.36.41.37:59343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkwAAAAUo"]
[Wed Sep 30 01:00:38.596476 2026] [security2:error] [pid 186850:tid 187044] [client 49.36.41.37:59343] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzlk5Phls--iYlcKgkwAAAAUo"]
[Wed Sep 30 01:00:38.622888 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.623160 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.713095 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.713353 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.730402 2026] [security2:error] [pid 186850:tid 187103] [client 45.89.242.86:61355] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzlk5Phls--iYlcKgkygAAAYU"]
[Wed Sep 30 01:00:38.757985 2026] [security2:error] [pid 186850:tid 187070] [client 20.194.5.96:35609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xwpg.php"] [unique_id "aryzlk5Phls--iYlcKgkzAAAAWQ"]
[Wed Sep 30 01:00:38.780448 2026] [security2:error] [pid 186850:tid 186991] [client 213.136.69.135:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-speculation-rules.php"] [unique_id "aryzlk5Phls--iYlcKgkzQAAARU"], referer: binance.com
[Wed Sep 30 01:00:38.787923 2026] [security2:error] [pid 186850:tid 187035] [client 20.214.191.94:23360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wpuse.php"] [unique_id "aryzlk5Phls--iYlcKgkzgAAAUE"]
[Wed Sep 30 01:00:38.806797 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.807083 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.816565 2026] [security2:error] [pid 186850:tid 187075] [client 52.231.69.245:13441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/simple.php"] [unique_id "aryzlk5Phls--iYlcKgk0wAAAWk"]
[Wed Sep 30 01:00:38.869356 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:38.869793 2026] [access_compat:error] [pid 186850:tid 187081] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:00:38.884713 2026] [security2:error] [pid 186850:tid 186958] [remote 64.23.166.180:15474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.breakthesafe.habeshacontacts.com"] [uri "/.env"] [unique_id "aryzlk5Phls--iYlcKgk1wABC2s"]
[Wed Sep 30 01:00:38.896308 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.896573 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:38.904583 2026] [security2:error] [pid 186850:tid 187002] [client 20.219.2.60:19462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws.php"] [unique_id "aryzlk5Phls--iYlcKgk2QAAASA"]
[Wed Sep 30 01:00:38.914453 2026] [security2:error] [pid 186850:tid 187028] [client 52.172.226.14:32011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/mail.php"] [unique_id "aryzlk5Phls--iYlcKgk2gAAATo"]
[Wed Sep 30 01:00:38.945439 2026] [security2:error] [pid 186850:tid 187083] [client 20.214.109.68:11139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/144.php"] [unique_id "aryzlk5Phls--iYlcKgk3AAAAXE"]
[Wed Sep 30 01:00:38.988950 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:38.989230 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.077555 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.077825 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.081641 2026] [security2:error] [pid 186850:tid 187086] [client 20.214.191.94:23419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/file18x.php"] [unique_id "aryzl05Phls--iYlcKgk7AAAAXQ"]
[Wed Sep 30 01:00:39.082917 2026] [security2:error] [pid 186850:tid 186988] [client 52.231.69.245:13500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/buy.php"] [unique_id "aryzl05Phls--iYlcKgk7QAAARI"]
[Wed Sep 30 01:00:39.151140 2026] [security2:error] [pid 186850:tid 186986] [client 222.167.122.127:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzl05Phls--iYlcKgk8QAAARA"]
[Wed Sep 30 01:00:39.169140 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.169438 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.206206 2026] [security2:error] [pid 186850:tid 187098] [client 20.194.5.96:35584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/blacks.php"] [unique_id "aryzl05Phls--iYlcKgk-AAAAYA"]
[Wed Sep 30 01:00:39.237761 2026] [security2:error] [pid 186850:tid 187060] [client 194.145.118.121:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzl05Phls--iYlcKgk-QAAAVo"]
[Wed Sep 30 01:00:39.249793 2026] [security2:error] [pid 186850:tid 187079] [client 103.241.204.139:60653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKgk-gAAAW0"]
[Wed Sep 30 01:00:39.249882 2026] [security2:error] [pid 186850:tid 187079] [client 103.241.204.139:60653] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKgk-gAAAW0"]
[Wed Sep 30 01:00:39.257606 2026] [security2:error] [pid 186850:tid 186995] [client 223.181.30.165:31474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKgk_AAAARk"]
[Wed Sep 30 01:00:39.257684 2026] [security2:error] [pid 186850:tid 186995] [client 223.181.30.165:31474] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKgk_AAAARk"]
[Wed Sep 30 01:00:39.265935 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.266220 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.347090 2026] [security2:error] [pid 186850:tid 186982] [client 52.231.69.245:13661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ioxi-o.php"] [unique_id "aryzl05Phls--iYlcKglCAAAAQw"]
[Wed Sep 30 01:00:39.350389 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.350730 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.351663 2026] [security2:error] [pid 186850:tid 187040] [client 104.208.65.139:48867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/nauik.php"] [unique_id "aryzl05Phls--iYlcKglCQAAAUY"]
[Wed Sep 30 01:00:39.377468 2026] [security2:error] [pid 186850:tid 187074] [client 20.214.191.94:23295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/123viva.php"] [unique_id "aryzl05Phls--iYlcKglCgAAAWg"]
[Wed Sep 30 01:00:39.388589 2026] [security2:error] [pid 186850:tid 187101] [client 20.219.2.60:19565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bmi.php"] [unique_id "aryzl05Phls--iYlcKglCwAAAYM"]
[Wed Sep 30 01:00:39.399071 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:39.399344 2026] [access_compat:error] [pid 186850:tid 187066] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:39.422168 2026] [security2:error] [pid 186850:tid 187057] [client 20.194.96.176:2446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzl05Phls--iYlcKglDQAAAVc"]
[Wed Sep 30 01:00:39.441920 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.442192 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.451333 2026] [security2:error] [pid 186850:tid 186991] [client 20.214.109.68:11156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/asd.php"] [unique_id "aryzl05Phls--iYlcKglFAAAARU"]
[Wed Sep 30 01:00:39.461602 2026] [security2:error] [pid 186850:tid 187075] [client 52.172.226.14:32525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/sx.php"] [unique_id "aryzl05Phls--iYlcKglFgAAAWk"]
[Wed Sep 30 01:00:39.476652 2026] [security2:error] [pid 186850:tid 187034] [client 223.235.102.107:30839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKglFwAAAUA"]
[Wed Sep 30 01:00:39.476751 2026] [security2:error] [pid 186850:tid 187034] [client 223.235.102.107:30839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzl05Phls--iYlcKglFwAAAUA"]
[Wed Sep 30 01:00:39.481165 2026] [security2:error] [pid 186850:tid 187072] [client 85.203.36.89:25989] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "aryzl05Phls--iYlcKglGAAAAWY"]
[Wed Sep 30 01:00:39.541012 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.541302 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.621736 2026] [security2:error] [pid 186850:tid 187107] [client 52.231.69.245:13445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ans.php"] [unique_id "aryzl05Phls--iYlcKglJQAAAYk"]
[Wed Sep 30 01:00:39.626829 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.627097 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.714493 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:39.714787 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:39.717359 2026] [security2:error] [pid 186850:tid 186996] [client 20.214.191.94:23505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/Components.update.php"] [unique_id "aryzl05Phls--iYlcKglLAAAARo"]
[Wed Sep 30 01:00:39.737751 2026] [security2:error] [pid 186850:tid 186986] [client 20.194.5.96:35628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/class-wp-http-client.php"] [unique_id "aryzl05Phls--iYlcKglLwAAARA"]
[Wed Sep 30 01:00:39.834298 2026] [security2:error] [pid 186850:tid 187011] [client 104.208.65.139:48865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wander.php"] [unique_id "aryzl05Phls--iYlcKglNgAAASk"]
[Wed Sep 30 01:00:39.856681 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:00:39.856951 2026] [access_compat:error] [pid 186850:tid 187053] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:00:39.876854 2026] [security2:error] [pid 186850:tid 187033] [client 20.219.2.60:19558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bypltspd.php"] [unique_id "aryzl05Phls--iYlcKglOwAAAT8"]
[Wed Sep 30 01:00:39.885744 2026] [security2:error] [pid 186850:tid 187015] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzl05Phls--iYlcKglPAAAAS0"]
[Wed Sep 30 01:00:39.894897 2026] [security2:error] [pid 186850:tid 187096] [client 52.231.69.245:13635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/gf.php"] [unique_id "aryzl05Phls--iYlcKglPwAAAX4"]
[Wed Sep 30 01:00:39.948749 2026] [security2:error] [pid 186850:tid 187038] [client 20.214.109.68:11201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/zc-104.php"] [unique_id "aryzl05Phls--iYlcKglQQAAAUQ"]
[Wed Sep 30 01:00:39.982028 2026] [security2:error] [pid 186850:tid 187066] [client 20.214.191.94:23363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/sm.php"] [unique_id "aryzl05Phls--iYlcKglRwAAAWA"]
[Wed Sep 30 01:00:39.990039 2026] [security2:error] [pid 186850:tid 186980] [client 181.189.103.211:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryzl05Phls--iYlcKglSAAAAQo"]
[Wed Sep 30 01:00:40.026181 2026] [security2:error] [pid 186850:tid 187003] [client 52.172.226.14:32528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryzmE5Phls--iYlcKglTAAAASE"]
[Wed Sep 30 01:00:40.046408 2026] [security2:error] [pid 186850:tid 187056] [client 20.70.173.30:2640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wsd.php"] [unique_id "aryzmE5Phls--iYlcKglUQAAAVY"]
[Wed Sep 30 01:00:40.048504 2026] [security2:error] [pid 186850:tid 187089] [client 20.194.5.96:35645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/zoo2.php"] [unique_id "aryzmE5Phls--iYlcKglUwAAAXc"]
[Wed Sep 30 01:00:40.074846 2026] [security2:error] [pid 186850:tid 187007] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzmE5Phls--iYlcKglUgAAASU"]
[Wed Sep 30 01:00:40.113866 2026] [autoindex:error] [pid 186850:tid 187024] [client 85.204.70.112:35804] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:40.175127 2026] [security2:error] [pid 186850:tid 187082] [client 103.168.67.253:40814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzmE5Phls--iYlcKglXAAAAXA"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:40.194452 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.194718 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.214724 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.214977 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.253361 2026] [security2:error] [pid 186850:tid 187039] [client 52.231.69.245:13649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/man.php"] [unique_id "aryzmE5Phls--iYlcKglYQAAAUU"]
[Wed Sep 30 01:00:40.264592 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.264975 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.287208 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.287468 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.288064 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.288346 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:38491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.298405 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.298669 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.351264 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.351524 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.360662 2026] [security2:error] [pid 186850:tid 186988] [client 20.219.2.60:20036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/shell.php"] [unique_id "aryzmE5Phls--iYlcKglagAAARI"]
[Wed Sep 30 01:00:40.370693 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:40.370967 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:40.443554 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.443867 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.490741 2026] [security2:error] [pid 186850:tid 187021] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzmE5Phls--iYlcKglXQAAATM"]
[Wed Sep 30 01:00:40.520495 2026] [security2:error] [pid 186850:tid 186987] [client 52.172.226.14:32095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/article.php"] [unique_id "aryzmE5Phls--iYlcKglcQAAARE"]
[Wed Sep 30 01:00:40.533790 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.534053 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.585048 2026] [autoindex:error] [pid 186850:tid 187087] [client 85.204.70.112:35804] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:40.617446 2026] [security2:error] [pid 186850:tid 187102] [client 52.231.69.245:13455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/dev.php"] [unique_id "aryzmE5Phls--iYlcKglhQAAAYQ"]
[Wed Sep 30 01:00:40.628185 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.628611 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.660537 2026] [security2:error] [pid 186850:tid 187044] [client 104.208.65.139:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wsd.php"] [unique_id "aryzmE5Phls--iYlcKgljQAAAUo"]
[Wed Sep 30 01:00:40.702872 2026] [security2:error] [pid 186850:tid 187041] [client 20.214.191.94:23516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/mknobgkg.php"] [unique_id "aryzmE5Phls--iYlcKglkwAAAUc"]
[Wed Sep 30 01:00:40.707332 2026] [security2:error] [pid 186850:tid 187045] [client 170.239.113.84:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzmE5Phls--iYlcKgllAAAAUs"]
[Wed Sep 30 01:00:40.715336 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.715615 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.780897 2026] [security2:error] [pid 186850:tid 187020] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzmE5Phls--iYlcKglcwAAATI"]
[Wed Sep 30 01:00:40.792562 2026] [security2:error] [pid 186850:tid 187000] [client 20.194.5.96:35624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/zoo1.php"] [unique_id "aryzmE5Phls--iYlcKgllgAAAR4"]
[Wed Sep 30 01:00:40.800735 2026] [security2:error] [pid 186850:tid 187031] [client 45.89.242.87:64219] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/bolt.php"] [unique_id "aryzmE5Phls--iYlcKglmQAAAT0"]
[Wed Sep 30 01:00:40.805621 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.805875 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.826943 2026] [security2:error] [pid 186850:tid 187035] [client 103.168.67.253:40822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzmE5Phls--iYlcKglmwAAAUE"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:40.836127 2026] [security2:error] [pid 186850:tid 187063] [client 20.219.2.60:19552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-links-opml.php"] [unique_id "aryzmE5Phls--iYlcKglnQAAAV0"]
[Wed Sep 30 01:00:40.836859 2026] [security2:error] [pid 186850:tid 186888] [remote 176.28.255.174:0] ModSecurity: Warning. Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "36"] [id "330792"] [rev "2"] [msg "Multipart parser detected a possible unmatched boundary. This may be an impedence mismatch attack, a broken application or a broken connection.  This is not a false positive.  Check your application or client for errors."] [severity "NOTICE"] [tag "no_ar"] [hostname "www.arab-cgt.org"] [uri "/"] [unique_id "aryzkE5Phls--iYlcKgiogABWSU"], referer: https://www.arab-cgt.org/?page_id=7633
[Wed Sep 30 01:00:40.842887 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:00:40.843174 2026] [access_compat:error] [pid 186850:tid 187024] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:00:40.858899 2026] [security2:error] [pid 186850:tid 187008] [client 20.198.74.230:23894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cae2.3.php"] [unique_id "aryzmE5Phls--iYlcKglngAAASY"]
[Wed Sep 30 01:00:40.897085 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.897367 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.914036 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:56460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzmE5Phls--iYlcKglowAAAWo"]
[Wed Sep 30 01:00:40.914180 2026] [security2:error] [pid 186850:tid 187076] [client 155.190.6.18:56460] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzmE5Phls--iYlcKglowAAAWo"]
[Wed Sep 30 01:00:40.914488 2026] [security2:error] [pid 186850:tid 187018] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzmE5Phls--iYlcKglkAAAATA"]
[Wed Sep 30 01:00:40.916306 2026] [security2:error] [pid 186850:tid 187015] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/about"] [unique_id "aryzmE5Phls--iYlcKglhAAAAS0"]
[Wed Sep 30 01:00:40.975113 2026] [security2:error] [pid 186850:tid 187052] [client 20.214.191.94:23365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/dairg.php"] [unique_id "aryzmE5Phls--iYlcKglpAAAAVI"]
[Wed Sep 30 01:00:40.983658 2026] [security2:error] [pid 186850:tid 187092] [client 52.231.69.245:13492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ms-edit.php"] [unique_id "aryzmE5Phls--iYlcKglpwAAAXo"]
[Wed Sep 30 01:00:40.989916 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:40.990284 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:40.991919 2026] [security2:error] [pid 186850:tid 187067] [client 103.172.210.103:52429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzmE5Phls--iYlcKglqQAAAWE"]
[Wed Sep 30 01:00:40.992027 2026] [security2:error] [pid 186850:tid 187067] [client 103.172.210.103:52429] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzmE5Phls--iYlcKglqQAAAWE"]
[Wed Sep 30 01:00:41.000530 2026] [security2:error] [pid 186850:tid 186902] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzmE5Phls--iYlcKglqwABdjM"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=2b02f83a24fd38e0873b6b05c6d1e80c
[Wed Sep 30 01:00:41.000563 2026] [security2:error] [pid 186850:tid 186902] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzmE5Phls--iYlcKglqwABdjM"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=2b02f83a24fd38e0873b6b05c6d1e80c
[Wed Sep 30 01:00:41.059123 2026] [security2:error] [pid 186850:tid 187107] [client 20.194.5.96:8364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzmU5Phls--iYlcKglsAAAAYk"]
[Wed Sep 30 01:00:41.083084 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.083371 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.099790 2026] [security2:error] [pid 186850:tid 187058] [client 20.214.109.68:11238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/rzki.php"] [unique_id "aryzmU5Phls--iYlcKgltwAAAVg"]
[Wed Sep 30 01:00:41.100803 2026] [security2:error] [pid 186850:tid 187014] [client 52.172.226.14:32711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/link.php"] [unique_id "aryzmU5Phls--iYlcKgluAAAASw"]
[Wed Sep 30 01:00:41.139869 2026] [security2:error] [pid 186850:tid 186987] [client 186.237.159.139:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzmU5Phls--iYlcKgluwAAARE"]
[Wed Sep 30 01:00:41.172583 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.172865 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.267142 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.267579 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.284288 2026] [security2:error] [pid 186850:tid 187004] [client 4.196.65.241:19074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/twivahpi.php"] [unique_id "aryzmU5Phls--iYlcKglwwAAASI"]
[Wed Sep 30 01:00:41.317494 2026] [security2:error] [pid 186850:tid 187101] [client 52.231.69.245:49135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/txets.php"] [unique_id "aryzmU5Phls--iYlcKglxQAAAYM"]
[Wed Sep 30 01:00:41.326355 2026] [security2:error] [pid 186850:tid 187065] [client 20.219.2.60:19461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryzmU5Phls--iYlcKglxgAAAV8"]
[Wed Sep 30 01:00:41.349914 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:00:41.350272 2026] [access_compat:error] [pid 186850:tid 187045] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:00:41.353425 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.353706 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.445044 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.445317 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:50339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.482367 2026] [security2:error] [pid 186850:tid 187103] [client 20.70.173.30:59548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/well.php"] [unique_id "aryzmU5Phls--iYlcKglzAAAAYU"]
[Wed Sep 30 01:00:41.484844 2026] [security2:error] [pid 186850:tid 187069] [client 20.194.5.96:35712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/class-ajax.php"] [unique_id "aryzmU5Phls--iYlcKglzQAAAWM"]
[Wed Sep 30 01:00:41.510878 2026] [security2:error] [pid 186850:tid 187041] [client 213.159.1.75:45994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dennis-cooper.com"] [uri "/black-dreams-in-red-website-background-jpg/"] [unique_id "aryzmU5Phls--iYlcKgl0AAAAUc"], referer: https://dennis-cooper.com/black-dreams-in-red-website-background-jpg/?ak_action=reject_mobile
[Wed Sep 30 01:00:41.526298 2026] [security2:error] [pid 186850:tid 186900] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzmU5Phls--iYlcKgl0wABKzE"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=938ea5f7651e562fc1a142645fc25480
[Wed Sep 30 01:00:41.526324 2026] [security2:error] [pid 186850:tid 186900] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzmU5Phls--iYlcKgl0wABKzE"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=938ea5f7651e562fc1a142645fc25480
[Wed Sep 30 01:00:41.534550 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.534912 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.600615 2026] [security2:error] [pid 186850:tid 187031] [client 52.172.226.14:32566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/lock360.php"] [unique_id "aryzmU5Phls--iYlcKgl1gAAAT0"]
[Wed Sep 30 01:00:41.610433 2026] [security2:error] [pid 186850:tid 187026] [client 20.214.191.94:23497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/dronishness.php"] [unique_id "aryzmU5Phls--iYlcKgl2wAAATg"]
[Wed Sep 30 01:00:41.615966 2026] [security2:error] [pid 186850:tid 187024] [client 52.231.69.245:13501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/hao.php"] [unique_id "aryzmU5Phls--iYlcKgl3AAAATY"]
[Wed Sep 30 01:00:41.632037 2026] [security2:error] [pid 186850:tid 187002] [client 216.73.216.46:50339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzmU5Phls--iYlcKgl4AAAASA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy9zY3NpX2Rpc2svMDowOjU6MS9kZXZpY2UvYmxvY2svc2RmL3F1ZXVl
[Wed Sep 30 01:00:41.636210 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.636450 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.677520 2026] [security2:error] [pid 186850:tid 187030] [client 20.194.5.96:61809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzmU5Phls--iYlcKgl4QAAATw"]
[Wed Sep 30 01:00:41.703564 2026] [security2:error] [pid 186850:tid 187037] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzmU5Phls--iYlcKglygAAAUM"]
[Wed Sep 30 01:00:41.719965 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.720449 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.797312 2026] [security2:error] [pid 186850:tid 187006] [client 20.219.2.60:19513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws82.php"] [unique_id "aryzmU5Phls--iYlcKgl7wAAASQ"]
[Wed Sep 30 01:00:41.812030 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.812472 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.828843 2026] [security2:error] [pid 186850:tid 186859] [remote 43.153.35.128:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.35.153.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/wp-signup.php"] [unique_id "aryzmU5Phls--iYlcKgl7QABiQg"], referer: http://sergil.net/wp-signup.php?new=levantsoleil
[Wed Sep 30 01:00:41.870711 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:41.871011 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:41.889285 2026] [security2:error] [pid 186850:tid 187016] [client 52.231.69.245:13498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/33.php"] [unique_id "aryzmU5Phls--iYlcKgl9QAAAS4"]
[Wed Sep 30 01:00:41.899333 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.899597 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:41.940647 2026] [security2:error] [pid 186850:tid 187009] [client 4.240.25.22:11542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/or.php"] [unique_id "aryzmU5Phls--iYlcKgl9wAAASc"]
[Wed Sep 30 01:00:41.993998 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:41.994437 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.009449 2026] [security2:error] [pid 186850:tid 187044] [client 20.214.191.94:23495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/Row_wsoo.php"] [unique_id "aryzmk5Phls--iYlcKgl_gAAAUo"]
[Wed Sep 30 01:00:42.025747 2026] [security2:error] [pid 186850:tid 187028] [client 20.194.5.96:35465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/gm.php"] [unique_id "aryzmk5Phls--iYlcKgmAAAAATo"]
[Wed Sep 30 01:00:42.070366 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:32780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-trackback.php"] [unique_id "aryzmk5Phls--iYlcKgmAgAAAWw"]
[Wed Sep 30 01:00:42.081546 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.081827 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.165216 2026] [security2:error] [pid 186850:tid 186997] [client 52.231.69.245:13470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/adminner.php"] [unique_id "aryzmk5Phls--iYlcKgmBwAAARs"]
[Wed Sep 30 01:00:42.168764 2026] [security2:error] [pid 186850:tid 187067] [client 103.168.67.253:40816] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/account"] [unique_id "aryzmU5Phls--iYlcKgl6QAAAWE"]
[Wed Sep 30 01:00:42.173387 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.173659 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.263094 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.263371 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.279454 2026] [security2:error] [pid 186850:tid 187089] [client 20.219.2.60:19554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/new.php"] [unique_id "aryzmk5Phls--iYlcKgmDgAAAXc"]
[Wed Sep 30 01:00:42.291486 2026] [security2:error] [pid 186850:tid 187038] [client 20.194.96.176:25486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzmk5Phls--iYlcKgmDwAAAUQ"]
[Wed Sep 30 01:00:42.306881 2026] [security2:error] [pid 186850:tid 187007] [client 85.203.36.114:46175] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/css/index.php"] [unique_id "aryzmk5Phls--iYlcKgmEAAAASU"]
[Wed Sep 30 01:00:42.354159 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.354440 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.374078 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:42.374502 2026] [access_compat:error] [pid 186850:tid 187027] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:42.417852 2026] [security2:error] [pid 186850:tid 187096] [client 104.208.65.139:45330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/media.php"] [unique_id "aryzmk5Phls--iYlcKgmGgAAAX4"]
[Wed Sep 30 01:00:42.448205 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.448645 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.479727 2026] [security2:error] [pid 186850:tid 187034] [client 52.231.69.245:13442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/thoms.php"] [unique_id "aryzmk5Phls--iYlcKgmHQAAAUA"]
[Wed Sep 30 01:00:42.510427 2026] [security2:error] [pid 186850:tid 187082] [client 116.193.128.26:54388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmHgAAAXA"]
[Wed Sep 30 01:00:42.510831 2026] [security2:error] [pid 186850:tid 187082] [client 116.193.128.26:54388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmHgAAAXA"]
[Wed Sep 30 01:00:42.526317 2026] [security2:error] [pid 186850:tid 187050] [client 20.214.191.94:22770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/x2.php"] [unique_id "aryzmk5Phls--iYlcKgmIQAAAVA"]
[Wed Sep 30 01:00:42.537224 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.537493 2026] [access_compat:error] [pid 186850:tid 187052] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.575630 2026] [security2:error] [pid 186850:tid 187072] [client 52.172.226.14:32540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/.well-known/index.php"] [unique_id "aryzmk5Phls--iYlcKgmJAAAAWY"]
[Wed Sep 30 01:00:42.604235 2026] [security2:error] [pid 186850:tid 186980] [client 103.159.192.142:55695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmJgAAAQo"]
[Wed Sep 30 01:00:42.604369 2026] [security2:error] [pid 186850:tid 186980] [client 103.159.192.142:55695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmJgAAAQo"]
[Wed Sep 30 01:00:42.606283 2026] [security2:error] [pid 186850:tid 187006] [client 20.194.5.96:35525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/class-wp-site-list.php"] [unique_id "aryzmk5Phls--iYlcKgmJwAAASQ"]
[Wed Sep 30 01:00:42.627301 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.627571 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.722529 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.722960 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.748222 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:19546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/press.php"] [unique_id "aryzmk5Phls--iYlcKgmMQAAAXk"]
[Wed Sep 30 01:00:42.780337 2026] [security2:error] [pid 186850:tid 187012] [client 52.231.69.245:13451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/a.php"] [unique_id "aryzmk5Phls--iYlcKgmMgAAASo"]
[Wed Sep 30 01:00:42.806305 2026] [security2:error] [pid 186850:tid 187066] [client 152.59.165.7:1206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmNAAAAWA"]
[Wed Sep 30 01:00:42.806468 2026] [security2:error] [pid 186850:tid 187066] [client 152.59.165.7:1206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmNAAAAWA"]
[Wed Sep 30 01:00:42.807556 2026] [security2:error] [pid 186850:tid 187022] [client 152.59.169.65:63232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmNQAAATQ"]
[Wed Sep 30 01:00:42.807715 2026] [security2:error] [pid 186850:tid 187022] [client 152.59.169.65:63232] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzmk5Phls--iYlcKgmNQAAATQ"]
[Wed Sep 30 01:00:42.810299 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.810571 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.828842 2026] [security2:error] [pid 186850:tid 187062] [client 20.214.109.68:11254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/xsas.php"] [unique_id "aryzmk5Phls--iYlcKgmNgAAAVw"]
[Wed Sep 30 01:00:42.854372 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:00:42.854632 2026] [access_compat:error] [pid 186850:tid 187087] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:00:42.878667 2026] [security2:error] [pid 186850:tid 187044] [client 4.240.25.22:30761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-blog-header.php"] [unique_id "aryzmk5Phls--iYlcKgmOQAAAUo"]
[Wed Sep 30 01:00:42.900376 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.900672 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:42.937434 2026] [security2:error] [pid 186850:tid 187008] [client 20.214.191.94:23264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/v4.php"] [unique_id "aryzmk5Phls--iYlcKgmPAAAASY"]
[Wed Sep 30 01:00:42.993850 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:42.994214 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.070985 2026] [security2:error] [pid 186850:tid 187045] [client 52.172.226.14:32115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryzm05Phls--iYlcKgmSAAAAUs"]
[Wed Sep 30 01:00:43.084521 2026] [security2:error] [pid 186850:tid 187042] [client 52.231.69.245:13463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/b8.php"] [unique_id "aryzm05Phls--iYlcKgmTAAAAUg"]
[Wed Sep 30 01:00:43.087511 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.087966 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.106420 2026] [security2:error] [pid 186850:tid 187017] [client 202.179.95.79:49348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmTwAAAS8"]
[Wed Sep 30 01:00:43.107058 2026] [security2:error] [pid 186850:tid 187017] [client 202.179.95.79:49348] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmTwAAAS8"]
[Wed Sep 30 01:00:43.129685 2026] [security2:error] [pid 186850:tid 187038] [client 84.39.229.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzm05Phls--iYlcKgmUAAAAUQ"]
[Wed Sep 30 01:00:43.139003 2026] [security2:error] [pid 186850:tid 187024] [client 104.208.65.139:48873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/images.php"] [unique_id "aryzm05Phls--iYlcKgmUQAAATY"]
[Wed Sep 30 01:00:43.174280 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.174534 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.212235 2026] [security2:error] [pid 186850:tid 186995] [client 20.194.5.96:35507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/ttivnife.php"] [unique_id "aryzm05Phls--iYlcKgmVQAAARk"]
[Wed Sep 30 01:00:43.219020 2026] [security2:error] [pid 186850:tid 187004] [client 20.219.2.60:20173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryzm05Phls--iYlcKgmVgAAASI"]
[Wed Sep 30 01:00:43.232438 2026] [security2:error] [pid 186850:tid 186999] [client 203.122.45.246:53411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmWQAAAR0"]
[Wed Sep 30 01:00:43.232537 2026] [security2:error] [pid 186850:tid 186999] [client 203.122.45.246:53411] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmWQAAAR0"]
[Wed Sep 30 01:00:43.251488 2026] [security2:error] [pid 186850:tid 187098] [client 122.173.27.10:31007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmWgAAAYA"]
[Wed Sep 30 01:00:43.252305 2026] [security2:error] [pid 186850:tid 187098] [client 122.173.27.10:31007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzm05Phls--iYlcKgmWgAAAYA"]
[Wed Sep 30 01:00:43.252702 2026] [security2:error] [pid 186850:tid 187035] [client 20.194.5.96:8937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/adminfuns.php"] [unique_id "aryzm05Phls--iYlcKgmXAAAAUE"]
[Wed Sep 30 01:00:43.264357 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.264620 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.357044 2026] [security2:error] [pid 186850:tid 187047] [client 52.231.69.245:13481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/sid.php"] [unique_id "aryzm05Phls--iYlcKgmYAAAAU0"]
[Wed Sep 30 01:00:43.357911 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.358176 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.373130 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:43.373389 2026] [access_compat:error] [pid 186850:tid 187001] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:43.386336 2026] [security2:error] [pid 186850:tid 186980] [client 20.214.191.94:23279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/albin.php"] [unique_id "aryzm05Phls--iYlcKgmYwAAAQo"]
[Wed Sep 30 01:00:43.448108 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.448389 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.457547 2026] [security2:error] [pid 186850:tid 187094] [client 4.196.65.241:53085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/0x.php"] [unique_id "aryzm05Phls--iYlcKgmawAAAXw"]
[Wed Sep 30 01:00:43.476938 2026] [security2:error] [pid 186850:tid 186992] [client 85.203.36.105:23935] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/index.php"] [unique_id "aryzm05Phls--iYlcKgmbgAAARY"]
[Wed Sep 30 01:00:43.515446 2026] [security2:error] [pid 186850:tid 187019] [client 20.70.173.30:24736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/ohct.php"] [unique_id "aryzm05Phls--iYlcKgmgAAAATE"]
[Wed Sep 30 01:00:43.538564 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.538860 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.547517 2026] [security2:error] [pid 186850:tid 187064] [client 52.172.226.14:32542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryzm05Phls--iYlcKgmhQAAAV4"]
[Wed Sep 30 01:00:43.626906 2026] [security2:error] [pid 186850:tid 187070] [client 20.194.5.96:35464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/admin.php/2P.php"] [unique_id "aryzm05Phls--iYlcKgmkQAAAWQ"]
[Wed Sep 30 01:00:43.629373 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.629645 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.646957 2026] [security2:error] [pid 186850:tid 187099] [client 52.231.69.245:13677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/bro.php"] [unique_id "aryzm05Phls--iYlcKgmlAAAAYE"]
[Wed Sep 30 01:00:43.655640 2026] [security2:error] [pid 186850:tid 186981] [client 20.214.191.94:23252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/atkno.php"] [unique_id "aryzm05Phls--iYlcKgmlgAAAQs"]
[Wed Sep 30 01:00:43.701786 2026] [security2:error] [pid 186850:tid 187097] [client 20.219.2.60:19460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryzm05Phls--iYlcKgmmAAAAX8"]
[Wed Sep 30 01:00:43.720925 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.721202 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.787221 2026] [security2:error] [pid 186850:tid 187050] [client 20.194.96.176:59707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/f35.update.php"] [unique_id "aryzm05Phls--iYlcKgmngAAAVA"]
[Wed Sep 30 01:00:43.812985 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.813288 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.821729 2026] [security2:error] [pid 186850:tid 187039] [client 118.193.45.77:33768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.45.193.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol-for-sale.com"] [uri "/wp-login.php"] [unique_id "aryzm05Phls--iYlcKgmnwAAAUU"], referer: https://clenbuterol-for-sale.com/wp-login.php
[Wed Sep 30 01:00:43.870685 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:43.870974 2026] [access_compat:error] [pid 186850:tid 187010] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:43.901468 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.901723 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.943480 2026] [security2:error] [pid 186850:tid 187044] [client 52.231.69.245:13665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/xwpg.php"] [unique_id "aryzm05Phls--iYlcKgmsgAAAUo"]
[Wed Sep 30 01:00:43.994343 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:43.994619 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:43.995083 2026] [security2:error] [pid 186850:tid 187071] [client 20.214.191.94:23490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gptsh.php"] [unique_id "aryzm05Phls--iYlcKgmtwAAAWU"]
[Wed Sep 30 01:00:44.030224 2026] [security2:error] [pid 186850:tid 187022] [client 52.172.226.14:32050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryznE5Phls--iYlcKgmuQAAATQ"]
[Wed Sep 30 01:00:44.087150 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.087410 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.135920 2026] [security2:error] [pid 186850:tid 187088] [client 104.208.65.139:48880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/ops.php"] [unique_id "aryznE5Phls--iYlcKgmwgAAAXY"]
[Wed Sep 30 01:00:44.158979 2026] [security2:error] [pid 186850:tid 186983] [client 116.72.182.19:57051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgmxAAAAQ0"]
[Wed Sep 30 01:00:44.159685 2026] [security2:error] [pid 186850:tid 186983] [client 116.72.182.19:57051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgmxAAAAQ0"]
[Wed Sep 30 01:00:44.172828 2026] [security2:error] [pid 186850:tid 187038] [client 20.219.2.60:19456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws57.php"] [unique_id "aryznE5Phls--iYlcKgmxgAAAUQ"]
[Wed Sep 30 01:00:44.181707 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.182165 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.190986 2026] [security2:error] [pid 186850:tid 186994] [client 20.70.173.30:59520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "aryznE5Phls--iYlcKgmyAAAARg"]
[Wed Sep 30 01:00:44.229389 2026] [security2:error] [pid 186850:tid 187086] [client 103.168.67.253:40834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryznE5Phls--iYlcKgmygAAAXQ"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:44.239164 2026] [security2:error] [pid 186850:tid 187063] [client 4.196.65.241:19480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/gEeSoXdefault.php"] [unique_id "aryznE5Phls--iYlcKgmywAAAV0"]
[Wed Sep 30 01:00:44.252217 2026] [security2:error] [pid 186850:tid 187003] [client 72.255.10.32:56624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgmzgAAASE"]
[Wed Sep 30 01:00:44.252361 2026] [security2:error] [pid 186850:tid 187003] [client 72.255.10.32:56624] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgmzgAAASE"]
[Wed Sep 30 01:00:44.258436 2026] [security2:error] [pid 186850:tid 187029] [client 52.231.69.245:49146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/radio.php"] [unique_id "aryznE5Phls--iYlcKgmzwAAATs"]
[Wed Sep 30 01:00:44.267789 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.268080 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.278760 2026] [security2:error] [pid 186850:tid 187024] [client 20.214.191.94:23514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/rithin.php"] [unique_id "aryznE5Phls--iYlcKgm0gAAATY"]
[Wed Sep 30 01:00:44.285089 2026] [security2:error] [pid 186850:tid 187002] [client 43.227.131.37:33573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgm0wAAASA"]
[Wed Sep 30 01:00:44.285196 2026] [security2:error] [pid 186850:tid 187002] [client 43.227.131.37:33573] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgm0wAAASA"]
[Wed Sep 30 01:00:44.309044 2026] [security2:error] [pid 186850:tid 186982] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryznE5Phls--iYlcKgmwQAAAQw"]
[Wed Sep 30 01:00:44.310995 2026] [security2:error] [pid 186850:tid 187084] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/about-us"] [unique_id "aryznE5Phls--iYlcKgmvgAAAXI"]
[Wed Sep 30 01:00:44.333837 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:00:44.334112 2026] [access_compat:error] [pid 186850:tid 187004] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:00:44.344725 2026] [security2:error] [pid 186850:tid 187104] [client 20.194.5.96:35485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/a.php"] [unique_id "aryznE5Phls--iYlcKgm2gAAAYY"]
[Wed Sep 30 01:00:44.357124 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.357387 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.392990 2026] [security2:error] [pid 186850:tid 187056] [client 172.232.180.137:55147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/njkfaiij.php"] [unique_id "aryznE5Phls--iYlcKgm3gAAAVY"], referer: www.google.com
[Wed Sep 30 01:00:44.429730 2026] [security2:error] [pid 186850:tid 187072] [client 170.254.74.42:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryznE5Phls--iYlcKgm4QAAAWY"]
[Wed Sep 30 01:00:44.448100 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.448371 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.485283 2026] [security2:error] [pid 186850:tid 187010] [client 57.141.2.39:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "aryznE5Phls--iYlcKgm5wAAASg"]
[Wed Sep 30 01:00:44.539922 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.540204 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.576742 2026] [security2:error] [pid 186850:tid 187105] [client 106.214.2.47:16318] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgm6wAAAYc"]
[Wed Sep 30 01:00:44.576882 2026] [security2:error] [pid 186850:tid 187105] [client 106.214.2.47:16318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgm6wAAAYc"]
[Wed Sep 30 01:00:44.582416 2026] [security2:error] [pid 186850:tid 187102] [client 43.104.4.192:62023] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "aryznE5Phls--iYlcKgm8wAAAYQ"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:44.630627 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.631011 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.645215 2026] [security2:error] [pid 186850:tid 187085] [client 20.219.2.60:19574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/.qiodetme.php"] [unique_id "aryznE5Phls--iYlcKgm_QAAAXM"]
[Wed Sep 30 01:00:44.653568 2026] [security2:error] [pid 186850:tid 187059] [client 119.12.205.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryznE5Phls--iYlcKgm_gAAAVk"]
[Wed Sep 30 01:00:44.655272 2026] [security2:error] [pid 186850:tid 187067] [client 20.214.191.94:22721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/il.php"] [unique_id "aryznE5Phls--iYlcKgm_wAAAWE"]
[Wed Sep 30 01:00:44.662817 2026] [security2:error] [pid 186850:tid 187022] [client 52.231.69.245:13690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ccc.php"] [unique_id "aryznE5Phls--iYlcKgnAAAAATQ"]
[Wed Sep 30 01:00:44.677847 2026] [security2:error] [pid 186850:tid 187070] [client 52.172.226.14:32569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryznE5Phls--iYlcKgnAQAAAWQ"]
[Wed Sep 30 01:00:44.723316 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.723582 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.736052 2026] [security2:error] [pid 186850:tid 187073] [client 104.208.65.139:12217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/BDKR28WP.php"] [unique_id "aryznE5Phls--iYlcKgnBAAAAWc"]
[Wed Sep 30 01:00:44.813475 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.813755 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.825986 2026] [security2:error] [pid 186850:tid 187050] [client 49.205.105.16:13794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgnCQAAAVA"]
[Wed Sep 30 01:00:44.826111 2026] [security2:error] [pid 186850:tid 187050] [client 49.205.105.16:13794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryznE5Phls--iYlcKgnCQAAAVA"]
[Wed Sep 30 01:00:44.833222 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:44.833469 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:44.867383 2026] [security2:error] [pid 186850:tid 187052] [client 43.104.4.191:38739] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "aryznE5Phls--iYlcKgnDAAAAVI"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:44.904044 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.904317 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:44.927291 2026] [security2:error] [pid 186850:tid 187090] [client 52.231.69.245:13678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wmore1.php"] [unique_id "aryznE5Phls--iYlcKgnFAAAAXg"]
[Wed Sep 30 01:00:44.989210 2026] [core:error] [pid 186850:tid 187078] [client 65.111.7.130:20767] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:44.989234 2026] [core:error] [pid 186850:tid 187078] [client 65.111.7.130:20767] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:00:44.995073 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:44.995333 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.034773 2026] [security2:error] [pid 186850:tid 187057] [client 20.214.191.94:23413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/1klopedf.php"] [unique_id "aryznU5Phls--iYlcKgnHwAAAVc"]
[Wed Sep 30 01:00:45.088183 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.088453 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.124281 2026] [security2:error] [pid 186850:tid 187068] [client 85.203.36.90:29545] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aryznU5Phls--iYlcKgnJgAAAWI"]
[Wed Sep 30 01:00:45.164205 2026] [security2:error] [pid 186850:tid 187094] [client 43.104.4.191:38739] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "aryznU5Phls--iYlcKgnJwAAAXw"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:45.179259 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.179525 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.183009 2026] [security2:error] [pid 186850:tid 187102] [client 20.219.2.60:20041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/sodas.php"] [unique_id "aryznU5Phls--iYlcKgnKQAAAYQ"]
[Wed Sep 30 01:00:45.204926 2026] [security2:error] [pid 186850:tid 187062] [client 52.172.226.14:32710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryznU5Phls--iYlcKgnKgAAAVw"]
[Wed Sep 30 01:00:45.255349 2026] [security2:error] [pid 186850:tid 187103] [client 103.168.67.253:47538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryznU5Phls--iYlcKgnKwAAAYU"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:45.271101 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.271350 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.304971 2026] [security2:error] [pid 186850:tid 187064] [client 108.160.144.5:35454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.144.160.108.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "graphicdesignmmd.com"] [uri "/wp-login.php"] [unique_id "aryznU5Phls--iYlcKgnLgAAAV4"]
[Wed Sep 30 01:00:45.318831 2026] [security2:error] [pid 186850:tid 187075] [client 20.194.5.96:8958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/av.php"] [unique_id "aryznU5Phls--iYlcKgnMAAAAWk"]
[Wed Sep 30 01:00:45.322959 2026] [security2:error] [pid 186850:tid 187085] [client 52.231.69.245:49117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/function.php"] [unique_id "aryznU5Phls--iYlcKgnMQAAAXM"]
[Wed Sep 30 01:00:45.336522 2026] [security2:error] [pid 186850:tid 187059] [client 20.214.109.68:11262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/d12.php"] [unique_id "aryznU5Phls--iYlcKgnMgAAAVk"]
[Wed Sep 30 01:00:45.361082 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.361350 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.387074 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:00:45.387366 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:00:45.438515 2026] [security2:error] [pid 186850:tid 187069] [client 20.214.191.94:23398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/zv.php"] [unique_id "aryznU5Phls--iYlcKgnOgAAAWM"]
[Wed Sep 30 01:00:45.452425 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.452709 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.474449 2026] [security2:error] [pid 186850:tid 187093] [client 4.240.25.22:20345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-manager.php"] [unique_id "aryznU5Phls--iYlcKgnQQAAAXs"]
[Wed Sep 30 01:00:45.500465 2026] [security2:error] [pid 186850:tid 187104] [client 116.197.133.25:54197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryznU5Phls--iYlcKgnRAAAAYY"]
[Wed Sep 30 01:00:45.500589 2026] [security2:error] [pid 186850:tid 187104] [client 116.197.133.25:54197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryznU5Phls--iYlcKgnRAAAAYY"]
[Wed Sep 30 01:00:45.539561 2026] [security2:error] [pid 186850:tid 187060] [client 118.193.45.77:33072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.45.193.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol-for-sale.com"] [uri "/wp-login.php"] [unique_id "aryznU5Phls--iYlcKgnSAAAAVo"], referer: https://clenbuterol-for-sale.com/wp-login.php
[Wed Sep 30 01:00:45.545106 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.545394 2026] [access_compat:error] [pid 186850:tid 187054] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.634983 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.635300 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.660351 2026] [security2:error] [pid 186850:tid 187090] [client 20.219.2.60:19485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/yw5bi63u.php"] [unique_id "aryznU5Phls--iYlcKgnUAAAAXg"]
[Wed Sep 30 01:00:45.672216 2026] [security2:error] [pid 186850:tid 187008] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznU5Phls--iYlcKgnTwAAASY"]
[Wed Sep 30 01:00:45.703714 2026] [security2:error] [pid 186850:tid 187097] [client 20.194.96.176:59684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/adminfuns.php"] [unique_id "aryznU5Phls--iYlcKgnUQAAAX8"]
[Wed Sep 30 01:00:45.725895 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.726174 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.753426 2026] [security2:error] [pid 186850:tid 187099] [client 20.194.5.96:8323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/dex.php"] [unique_id "aryznU5Phls--iYlcKgnVwAAAYE"]
[Wed Sep 30 01:00:45.763781 2026] [security2:error] [pid 186850:tid 187057] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznU5Phls--iYlcKgnVgAAAVc"]
[Wed Sep 30 01:00:45.763928 2026] [security2:error] [pid 186850:tid 187056] [client 104.28.222.47:53650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wka.ybe.mybluehost.me"] [uri "/wp-config.php"] [unique_id "aryznU5Phls--iYlcKgnWwAAAVY"]
[Wed Sep 30 01:00:45.765420 2026] [security2:error] [pid 186850:tid 187027] [client 104.28.254.46:18172] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wka.ybe.mybluehost.me"] [uri "/wp-config.php.bak"] [unique_id "aryznU5Phls--iYlcKgnXQAAATk"], referer: https://www.google.com/search?q=wka.ybe.mybluehost.me
[Wed Sep 30 01:00:45.791240 2026] [security2:error] [pid 186850:tid 186986] [client 20.214.191.94:23407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/zv.update.php"] [unique_id "aryznU5Phls--iYlcKgnYgAAARA"]
[Wed Sep 30 01:00:45.792282 2026] [security2:error] [pid 186850:tid 186986] [client 20.194.5.96:35511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/cord.php"] [unique_id "aryznU5Phls--iYlcKgnYwAAARA"]
[Wed Sep 30 01:00:45.800396 2026] [security2:error] [pid 186850:tid 187040] [client 104.208.65.139:43337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/mac.php"] [unique_id "aryznU5Phls--iYlcKgnZAAAAUY"]
[Wed Sep 30 01:00:45.815326 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.815585 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.869776 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:45.870049 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:45.897520 2026] [security2:error] [pid 186850:tid 187034] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznU5Phls--iYlcKgnagAAAUA"]
[Wed Sep 30 01:00:45.908084 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:45.908349 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:30911] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:45.944877 2026] [security2:error] [pid 186850:tid 187048] [client 52.172.226.14:32763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-content/themes/about.php"] [unique_id "aryznU5Phls--iYlcKgnbwAAAU4"]
[Wed Sep 30 01:00:45.954036 2026] [security2:error] [pid 186850:tid 187096] [client 4.196.65.241:19079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ebkid.php"] [unique_id "aryznU5Phls--iYlcKgncAAAAX4"]
[Wed Sep 30 01:00:45.969012 2026] [security2:error] [pid 186850:tid 187036] [client 52.231.69.245:13636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ab.php"] [unique_id "aryznU5Phls--iYlcKgndQAAAUI"]
[Wed Sep 30 01:00:46.001798 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.002242 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.083615 2026] [security2:error] [pid 186850:tid 187069] [client 20.214.191.94:22747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/wquosqsi.php"] [unique_id "aryznk5Phls--iYlcKgngQAAAWM"]
[Wed Sep 30 01:00:46.121317 2026] [security2:error] [pid 186850:tid 187065] [client 20.219.2.60:19507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws81.php"] [unique_id "aryznk5Phls--iYlcKgniAAAAV8"]
[Wed Sep 30 01:00:46.141827 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.142110 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.183139 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.183422 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.256873 2026] [security2:error] [pid 186850:tid 186994] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznk5Phls--iYlcKgnjwAAARg"]
[Wed Sep 30 01:00:46.273534 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.273795 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.338258 2026] [security2:error] [pid 186850:tid 187080] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznk5Phls--iYlcKgnlwAAAW4"]
[Wed Sep 30 01:00:46.361876 2026] [security2:error] [pid 186850:tid 187051] [client 20.214.109.68:11257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/okxh.php"] [unique_id "aryznk5Phls--iYlcKgnoAAAAVE"]
[Wed Sep 30 01:00:46.362675 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.362945 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.371772 2026] [security2:error] [pid 186850:tid 186984] [client 104.28.254.46:52844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wka.ybe.mybluehost.me"] [uri "/.env.backup"] [unique_id "aryznk5Phls--iYlcKgnoQAAAQ4"], referer: http://wka.ybe.mybluehost.me/.env.backup
[Wed Sep 30 01:00:46.375018 2026] [security2:error] [pid 186850:tid 187101] [client 190.3.50.143:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "aryznk5Phls--iYlcKgnogAAAYM"]
[Wed Sep 30 01:00:46.381509 2026] [security2:error] [pid 186850:tid 187040] [client 52.231.69.245:13667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/css.php"] [unique_id "aryznk5Phls--iYlcKgnowAAAUY"]
[Wed Sep 30 01:00:46.388829 2026] [security2:error] [pid 186850:tid 187082] [client 45.138.12.43:44336] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.sewbusyfashion.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryznk5Phls--iYlcKgnpgAAAXA"]
[Wed Sep 30 01:00:46.394504 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:46.394777 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:46.401531 2026] [security2:error] [pid 186850:tid 187024] [client 31.58.236.124:47024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.236.58.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "aryznk5Phls--iYlcKgnqAAAATY"], referer: https://spectastore.com.ng/wp-login.php
[Wed Sep 30 01:00:46.419518 2026] [security2:error] [pid 186850:tid 187047] [client 104.208.65.139:45347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wmore1.php"] [unique_id "aryznk5Phls--iYlcKgnqwAAAU0"]
[Wed Sep 30 01:00:46.421567 2026] [security2:error] [pid 186850:tid 187011] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznk5Phls--iYlcKgnqQAAASk"]
[Wed Sep 30 01:00:46.447056 2026] [security2:error] [pid 186850:tid 187081] [client 52.172.226.14:32047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/filemanager/dialog.php"] [unique_id "aryznk5Phls--iYlcKgnrgAAAW8"]
[Wed Sep 30 01:00:46.453992 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.454268 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:65456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.505474 2026] [security2:error] [pid 186850:tid 186992] [client 20.214.191.94:23265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/asset.php"] [unique_id "aryznk5Phls--iYlcKgnsgAAARY"]
[Wed Sep 30 01:00:46.546081 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.546385 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.595102 2026] [security2:error] [pid 186850:tid 187066] [client 104.28.254.46:9710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wka.ybe.mybluehost.me"] [uri "/.env"] [unique_id "aryznk5Phls--iYlcKgnuQAAAWA"], referer: http://wka.ybe.mybluehost.me/.env
[Wed Sep 30 01:00:46.599439 2026] [security2:error] [pid 186850:tid 187058] [client 20.219.2.60:19543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/mh.php"] [unique_id "aryznk5Phls--iYlcKgnuwAAAVg"]
[Wed Sep 30 01:00:46.636229 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.636487 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.648166 2026] [security2:error] [pid 186850:tid 186991] [client 216.73.216.46:65456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryznk5Phls--iYlcKgnwAAAARU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODE%3D
[Wed Sep 30 01:00:46.730089 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.730357 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.754192 2026] [security2:error] [pid 186850:tid 187076] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznk5Phls--iYlcKgnxQAAAWo"]
[Wed Sep 30 01:00:46.782129 2026] [security2:error] [pid 186850:tid 187073] [client 52.231.69.245:49116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryznk5Phls--iYlcKgnxgAAAWc"]
[Wed Sep 30 01:00:46.819534 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.819922 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:46.825708 2026] [security2:error] [pid 186850:tid 186983] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryznk5Phls--iYlcKgnyAAAAQ0"]
[Wed Sep 30 01:00:46.889417 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:46.889689 2026] [access_compat:error] [pid 186850:tid 186985] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:46.901293 2026] [autoindex:error] [pid 186850:tid 186994] [client 185.194.8.181:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/webmexsolutions/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://backlinkproviders.shop/dir/seo-visibility-links-230178
[Wed Sep 30 01:00:46.961421 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:31454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:46.961677 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:31454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.000352 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.000674 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.023888 2026] [security2:error] [pid 186850:tid 187056] [client 20.214.109.68:11231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/55b76.php"] [unique_id "aryzn05Phls--iYlcKgn3AAAAVY"]
[Wed Sep 30 01:00:47.035381 2026] [security2:error] [pid 186850:tid 187027] [client 20.214.191.94:23256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/cued.php"] [unique_id "aryzn05Phls--iYlcKgn3QAAATk"]
[Wed Sep 30 01:00:47.092414 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.092706 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.113267 2026] [security2:error] [pid 186850:tid 187018] [client 20.219.2.60:20048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws88.php"] [unique_id "aryzn05Phls--iYlcKgn5AAAATA"]
[Wed Sep 30 01:00:47.114215 2026] [security2:error] [pid 186850:tid 187091] [client 182.75.216.230:64902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzn05Phls--iYlcKgn4wAAAXk"]
[Wed Sep 30 01:00:47.114306 2026] [security2:error] [pid 186850:tid 187091] [client 182.75.216.230:64902] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzn05Phls--iYlcKgn4wAAAXk"]
[Wed Sep 30 01:00:47.147963 2026] [security2:error] [pid 186850:tid 186986] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzn05Phls--iYlcKgn5wAAARA"]
[Wed Sep 30 01:00:47.183359 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.183663 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.187873 2026] [security2:error] [pid 186850:tid 187032] [client 52.172.226.14:32120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/index/function.php"] [unique_id "aryzn05Phls--iYlcKgn7wAAAT4"]
[Wed Sep 30 01:00:47.213203 2026] [security2:error] [pid 186850:tid 187007] [client 45.89.242.85:55653] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/index.php"] [unique_id "aryzn05Phls--iYlcKgn8AAAASU"]
[Wed Sep 30 01:00:47.265668 2026] [security2:error] [pid 186850:tid 187080] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzn05Phls--iYlcKgn2gAAAW4"]
[Wed Sep 30 01:00:47.275458 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.275708 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.280751 2026] [autoindex:error] [pid 186850:tid 187004] [client 185.247.137.59:50873] AH01276: Cannot serve directory /home4/mrdnupmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://mail.mrd.nup.mybluehost.me
[Wed Sep 30 01:00:47.286391 2026] [security2:error] [pid 186850:tid 187008] [client 20.194.5.96:57956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/chosen.php"] [unique_id "aryzn05Phls--iYlcKgn9QAAASY"]
[Wed Sep 30 01:00:47.309194 2026] [security2:error] [pid 186850:tid 186992] [client 52.231.69.245:13663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryzn05Phls--iYlcKgn9wAAARY"]
[Wed Sep 30 01:00:47.321123 2026] [security2:error] [pid 186850:tid 187103] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/privacy"] [unique_id "aryznk5Phls--iYlcKgn1QAAAYU"]
[Wed Sep 30 01:00:47.341879 2026] [security2:error] [pid 186850:tid 187105] [client 20.214.191.94:23240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/sd.php"] [unique_id "aryzn05Phls--iYlcKgn-wAAAYc"]
[Wed Sep 30 01:00:47.366924 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.367205 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.371307 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:47.371587 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:00:47.394805 2026] [security2:error] [pid 186850:tid 187029] [client 168.144.175.124:37546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/wp-admin/install.php"] [unique_id "aryzn05Phls--iYlcKgn_QAAATs"]
[Wed Sep 30 01:00:47.401944 2026] [security2:error] [pid 186850:tid 187035] [client 103.168.67.253:47552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzn05Phls--iYlcKgoAgAAAUE"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:47.457989 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.458257 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.548614 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.548889 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.577713 2026] [security2:error] [pid 186850:tid 187065] [client 52.231.69.245:13646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-links-opml.php"] [unique_id "aryzn05Phls--iYlcKgoDQAAAV8"]
[Wed Sep 30 01:00:47.581078 2026] [security2:error] [pid 186850:tid 187015] [client 20.219.2.60:20190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws86.php"] [unique_id "aryzn05Phls--iYlcKgoDgAAAS0"]
[Wed Sep 30 01:00:47.638361 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.638614 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.718488 2026] [security2:error] [pid 186850:tid 187078] [client 52.172.226.14:32717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryzn05Phls--iYlcKgoGgAAAWw"]
[Wed Sep 30 01:00:47.735376 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.735795 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.747127 2026] [security2:error] [pid 186850:tid 187070] [client 45.138.12.32:20794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.adv.vev.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzn05Phls--iYlcKgoHAAAAWQ"]
[Wed Sep 30 01:00:47.751266 2026] [security2:error] [pid 186850:tid 186981] [client 168.144.175.124:37554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/wp/wp-admin/install.php"] [unique_id "aryzn05Phls--iYlcKgoHgAAAQs"]
[Wed Sep 30 01:00:47.767645 2026] [security2:error] [pid 186850:tid 187037] [client 20.194.5.96:35475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/anom.php"] [unique_id "aryzn05Phls--iYlcKgoIAAAAUM"]
[Wed Sep 30 01:00:47.768594 2026] [security2:error] [pid 186850:tid 187075] [client 20.214.191.94:23406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/ans.php"] [unique_id "aryzn05Phls--iYlcKgoIQAAAWk"]
[Wed Sep 30 01:00:47.795204 2026] [security2:error] [pid 186850:tid 187098] [client 31.58.236.124:34710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.236.58.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spectastore.com.ng"] [uri "/wp-login.php"] [unique_id "aryzn05Phls--iYlcKgoIgAAAYA"], referer: https://spectastore.com.ng/wp-login.php
[Wed Sep 30 01:00:47.822602 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.822885 2026] [access_compat:error] [pid 186850:tid 187091] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:47.852969 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:47.853255 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:47.857644 2026] [security2:error] [pid 186850:tid 187026] [client 20.214.109.68:11249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tt.php"] [unique_id "aryzn05Phls--iYlcKgoJgAAATg"]
[Wed Sep 30 01:00:47.883837 2026] [security2:error] [pid 186850:tid 187082] [client 52.231.69.245:13317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/hp.php"] [unique_id "aryzn05Phls--iYlcKgoKgAAAXA"]
[Wed Sep 30 01:00:47.888981 2026] [security2:error] [pid 186850:tid 187013] [client 104.208.65.139:41066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wp-ainefgskk.php"] [unique_id "aryzn05Phls--iYlcKgoKwAAASs"]
[Wed Sep 30 01:00:47.913491 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:47.913756 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.006459 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.006742 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.007586 2026] [security2:error] [pid 186850:tid 187008] [client 20.194.5.96:8946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/radio.php"] [unique_id "aryzoE5Phls--iYlcKgoMQAAASY"]
[Wed Sep 30 01:00:48.052130 2026] [security2:error] [pid 186850:tid 187103] [client 20.214.191.94:23387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/cns.php"] [unique_id "aryzoE5Phls--iYlcKgoNgAAAYU"]
[Wed Sep 30 01:00:48.075338 2026] [security2:error] [pid 186850:tid 187062] [client 20.219.2.60:20079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/vx.php"] [unique_id "aryzoE5Phls--iYlcKgoNwAAAVw"]
[Wed Sep 30 01:00:48.095215 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.095482 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.165655 2026] [security2:error] [pid 186850:tid 187016] [client 52.231.69.245:13685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/mo.php"] [unique_id "aryzoE5Phls--iYlcKgoQgAAAS4"]
[Wed Sep 30 01:00:48.193365 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.193648 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.281737 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.281997 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.321887 2026] [security2:error] [pid 186850:tid 187039] [client 168.144.175.124:37560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/new/wp-admin/install.php"] [unique_id "aryzoE5Phls--iYlcKgoUQAAAUU"]
[Wed Sep 30 01:00:48.357189 2026] [security2:error] [pid 186850:tid 187033] [client 216.244.66.239:44946] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/4789-descargar-canal-rcn-para-tv.xml"] [unique_id "aryzoE5Phls--iYlcKgoUgAAAT8"]
[Wed Sep 30 01:00:48.357326 2026] [security2:error] [pid 186850:tid 187033] [client 216.244.66.239:44946] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/4789-descargar-canal-rcn-para-tv.xml"] [unique_id "aryzoE5Phls--iYlcKgoUgAAAT8"]
[Wed Sep 30 01:00:48.369945 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:48.370305 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:48.373829 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.374102 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.378659 2026] [security2:error] [pid 186850:tid 187092] [client 103.168.67.253:47562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzoE5Phls--iYlcKgoVQAAAXo"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:48.406455 2026] [security2:error] [pid 186850:tid 187012] [client 20.194.96.176:2195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzoE5Phls--iYlcKgoWAAAASo"]
[Wed Sep 30 01:00:48.407370 2026] [security2:error] [pid 186850:tid 187078] [client 74.7.242.1:49728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzoE5Phls--iYlcKgoWQAAAWw"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:00:48.420592 2026] [security2:error] [pid 186850:tid 186997] [client 52.172.226.14:32541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryzoE5Phls--iYlcKgoWgAAARs"]
[Wed Sep 30 01:00:48.461640 2026] [security2:error] [pid 186850:tid 186981] [client 52.231.69.245:13457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/ivmirgut.php"] [unique_id "aryzoE5Phls--iYlcKgoXQAAAQs"]
[Wed Sep 30 01:00:48.467394 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.467727 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.483985 2026] [security2:error] [pid 186850:tid 187056] [client 85.203.36.116:24447] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "aryzoE5Phls--iYlcKgoYAAAAVY"]
[Wed Sep 30 01:00:48.519115 2026] [security2:error] [pid 186850:tid 187094] [client 20.194.5.96:8909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wp_blog_footer.php"] [unique_id "aryzoE5Phls--iYlcKgoZAAAAXw"]
[Wed Sep 30 01:00:48.523901 2026] [security2:error] [pid 186850:tid 187084] [client 105.112.178.79:38343] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tkv.pxp.mybluehost.me"] [uri "/.env"] [unique_id "aryzoE5Phls--iYlcKgoZQAAAXI"]
[Wed Sep 30 01:00:48.540866 2026] [security2:error] [pid 186850:tid 187106] [client 20.219.2.60:19533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/dass.php"] [unique_id "aryzoE5Phls--iYlcKgoZwAAAYg"]
[Wed Sep 30 01:00:48.555030 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.555314 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.567911 2026] [security2:error] [pid 186850:tid 187052] [client 37.41.16.35:58246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgoagAAAVI"]
[Wed Sep 30 01:00:48.568001 2026] [security2:error] [pid 186850:tid 187052] [client 37.41.16.35:58246] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgoagAAAVI"]
[Wed Sep 30 01:00:48.645370 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.645664 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.676361 2026] [security2:error] [pid 186850:tid 187105] [client 20.70.173.30:25277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/kj.php"] [unique_id "aryzoE5Phls--iYlcKgocwAAAYc"]
[Wed Sep 30 01:00:48.676881 2026] [security2:error] [pid 186850:tid 187004] [client 168.144.175.124:37576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/old/wp-admin/install.php"] [unique_id "aryzoE5Phls--iYlcKgodAAAASI"]
[Wed Sep 30 01:00:48.696650 2026] [security2:error] [pid 186850:tid 186998] [client 103.159.192.142:55835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgodQAAARw"]
[Wed Sep 30 01:00:48.696741 2026] [security2:error] [pid 186850:tid 186998] [client 103.159.192.142:55835] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgodQAAARw"]
[Wed Sep 30 01:00:48.703822 2026] [security2:error] [pid 186850:tid 187020] [client 49.36.41.37:59866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgodgAAATI"]
[Wed Sep 30 01:00:48.703885 2026] [security2:error] [pid 186850:tid 187020] [client 49.36.41.37:59866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgodgAAATI"]
[Wed Sep 30 01:00:48.718115 2026] [security2:error] [pid 186850:tid 187025] [client 20.194.5.96:35467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/plugins.php"] [unique_id "aryzoE5Phls--iYlcKgodwAAATc"]
[Wed Sep 30 01:00:48.729477 2026] [security2:error] [pid 186850:tid 187062] [client 20.214.191.94:23258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/faiy.php"] [unique_id "aryzoE5Phls--iYlcKgoeAAAAVw"]
[Wed Sep 30 01:00:48.737853 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.738110 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.773425 2026] [security2:error] [pid 186850:tid 186987] [client 223.181.60.167:33044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgoewAAARE"]
[Wed Sep 30 01:00:48.774247 2026] [security2:error] [pid 186850:tid 186987] [client 223.181.60.167:33044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgoewAAARE"]
[Wed Sep 30 01:00:48.786685 2026] [security2:error] [pid 186850:tid 187085] [client 52.231.69.245:49107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/baba.php"] [unique_id "aryzoE5Phls--iYlcKgofAAAAXM"]
[Wed Sep 30 01:00:48.827245 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.827508 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.846986 2026] [security2:error] [pid 186850:tid 187005] [client 62.197.45.211:60265] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:contact-form-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "eccl.co.uk"] [uri "/products/databird/"] [unique_id "aryzoE5Phls--iYlcKgoggAAASM"], referer: http://eccl.co.uk/products/databird/
[Wed Sep 30 01:00:48.864873 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:48.865145 2026] [access_compat:error] [pid 186850:tid 187041] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:48.933038 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:48.933313 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:48.943912 2026] [security2:error] [pid 186850:tid 187086] [client 182.69.182.151:30315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgokQAAAXQ"]
[Wed Sep 30 01:00:48.944023 2026] [security2:error] [pid 186850:tid 187086] [client 182.69.182.151:30315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgokQAAAXQ"]
[Wed Sep 30 01:00:48.946219 2026] [security2:error] [pid 186850:tid 187090] [client 150.107.232.159:35540] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgokgAAAXg"]
[Wed Sep 30 01:00:48.946313 2026] [security2:error] [pid 186850:tid 187090] [client 150.107.232.159:35540] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzoE5Phls--iYlcKgokgAAAXg"]
[Wed Sep 30 01:00:48.970392 2026] [security2:error] [pid 186850:tid 187060] [client 52.172.226.14:32112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryzoE5Phls--iYlcKgolgAAAVo"]
[Wed Sep 30 01:00:49.010875 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.011157 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.022900 2026] [security2:error] [pid 186850:tid 186997] [client 20.219.2.60:20175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/s.php"] [unique_id "aryzoU5Phls--iYlcKgomwAAARs"]
[Wed Sep 30 01:00:49.033482 2026] [security2:error] [pid 186850:tid 187095] [client 168.144.175.124:37580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aryzoU5Phls--iYlcKgonQAAAX0"]
[Wed Sep 30 01:00:49.052334 2026] [security2:error] [pid 186850:tid 187057] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzoU5Phls--iYlcKgooQAAAVc"]
[Wed Sep 30 01:00:49.066632 2026] [security2:error] [pid 186850:tid 187003] [client 20.214.191.94:23366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gecho.php"] [unique_id "aryzoU5Phls--iYlcKgoowAAASE"]
[Wed Sep 30 01:00:49.066892 2026] [security2:error] [pid 186850:tid 187043] [client 4.240.25.22:18790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/file.php"] [unique_id "aryzoU5Phls--iYlcKgopAAAAUk"]
[Wed Sep 30 01:00:49.086550 2026] [security2:error] [pid 186850:tid 187091] [client 20.194.5.96:57975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/k.php"] [unique_id "aryzoU5Phls--iYlcKgopgAAAXk"]
[Wed Sep 30 01:00:49.098275 2026] [security2:error] [pid 186850:tid 187006] [client 20.214.109.68:11186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/maul.php"] [unique_id "aryzoU5Phls--iYlcKgoqQAAASQ"]
[Wed Sep 30 01:00:49.102021 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.102284 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.176443 2026] [security2:error] [pid 186850:tid 187051] [client 62.197.45.211:60332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:contact-form-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "eccl.co.uk"] [uri "/products/databird/"] [unique_id "aryzoU5Phls--iYlcKgorwAAAVE"], referer: http://eccl.co.uk/products/databird/
[Wed Sep 30 01:00:49.192467 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.192736 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.249661 2026] [security2:error] [pid 186850:tid 187022] [client 104.208.65.139:48863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/ab.php"] [unique_id "aryzoU5Phls--iYlcKgotgAAATQ"]
[Wed Sep 30 01:00:49.256712 2026] [security2:error] [pid 186850:tid 187026] [client 20.194.5.96:35617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/groud3.php"] [unique_id "aryzoU5Phls--iYlcKgotwAAATg"]
[Wed Sep 30 01:00:49.282299 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.282562 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.342859 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:49.343138 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:00:49.349136 2026] [security2:error] [pid 186850:tid 187049] [client 20.214.191.94:23277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/gu.php"] [unique_id "aryzoU5Phls--iYlcKgovQAAAU8"]
[Wed Sep 30 01:00:49.364978 2026] [security2:error] [pid 186850:tid 186989] [client 52.231.69.245:13502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/Components.php"] [unique_id "aryzoU5Phls--iYlcKgovgAAARM"]
[Wed Sep 30 01:00:49.375868 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.376130 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.390311 2026] [security2:error] [pid 186850:tid 187077] [client 168.144.175.124:37586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/test/wp-admin/install.php"] [unique_id "aryzoU5Phls--iYlcKgowAAAAWs"]
[Wed Sep 30 01:00:49.464912 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.465192 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.498872 2026] [security2:error] [pid 186850:tid 187024] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzoU5Phls--iYlcKgoswAAATY"]
[Wed Sep 30 01:00:49.527778 2026] [security2:error] [pid 186850:tid 187028] [client 20.219.2.60:20081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/kj.php"] [unique_id "aryzoU5Phls--iYlcKgoxwAAATo"]
[Wed Sep 30 01:00:49.545902 2026] [security2:error] [pid 186850:tid 186982] [client 52.172.226.14:32705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/about/function.php"] [unique_id "aryzoU5Phls--iYlcKgozAAAAQw"]
[Wed Sep 30 01:00:49.558281 2026] [security2:error] [pid 186850:tid 187078] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzoU5Phls--iYlcKgozgAAAWw"]
[Wed Sep 30 01:00:49.578306 2026] [security2:error] [pid 186850:tid 186981] [client 85.203.36.106:58017] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/file.php"] [unique_id "aryzoU5Phls--iYlcKgo0gAAAQs"]
[Wed Sep 30 01:00:49.588102 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzoU5Phls--iYlcKgo0wABcXs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147906&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:00:49.588122 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzoU5Phls--iYlcKgo0wABcXs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147906&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:00:49.599168 2026] [security2:error] [pid 186850:tid 187056] [client 20.194.5.96:35508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/gaxby.php"] [unique_id "aryzoU5Phls--iYlcKgo1QAAAVY"]
[Wed Sep 30 01:00:49.737916 2026] [security2:error] [pid 186850:tid 187017] [client 20.214.191.94:23488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/nck.php"] [unique_id "aryzoU5Phls--iYlcKgo3AAAAS8"]
[Wed Sep 30 01:00:49.744145 2026] [security2:error] [pid 186850:tid 187010] [client 223.181.30.165:15131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzoU5Phls--iYlcKgo3QAAASg"]
[Wed Sep 30 01:00:49.744284 2026] [security2:error] [pid 186850:tid 187010] [client 223.181.30.165:15131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzoU5Phls--iYlcKgo3QAAASg"]
[Wed Sep 30 01:00:49.748247 2026] [security2:error] [pid 186850:tid 187070] [client 168.144.175.124:35494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/blog/wp-admin/install.php"] [unique_id "aryzoU5Phls--iYlcKgo3gAAAWQ"]
[Wed Sep 30 01:00:49.777977 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.778270 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.801127 2026] [security2:error] [pid 186850:tid 187067] [client 103.241.204.139:61177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzoU5Phls--iYlcKgo4gAAAWE"]
[Wed Sep 30 01:00:49.801225 2026] [security2:error] [pid 186850:tid 187067] [client 103.241.204.139:61177] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzoU5Phls--iYlcKgo4gAAAWE"]
[Wed Sep 30 01:00:49.820090 2026] [security2:error] [pid 186850:tid 187038] [client 4.196.65.241:19473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zoo1.php"] [unique_id "aryzoU5Phls--iYlcKgo4wAAAUQ"]
[Wed Sep 30 01:00:49.848676 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:49.848955 2026] [access_compat:error] [pid 186850:tid 187096] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:49.869579 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.869899 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:49.874040 2026] [security2:error] [pid 186850:tid 187076] [client 20.214.109.68:11209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/5b9ac.php"] [unique_id "aryzoU5Phls--iYlcKgo5wAAAWo"]
[Wed Sep 30 01:00:49.893209 2026] [security2:error] [pid 186850:tid 187102] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzoU5Phls--iYlcKgo5gAAAYQ"]
[Wed Sep 30 01:00:49.960260 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:49.960521 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.001833 2026] [security2:error] [pid 186850:tid 187033] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzoU5Phls--iYlcKgo7AAAAT8"]
[Wed Sep 30 01:00:50.014065 2026] [security2:error] [pid 186850:tid 187004] [client 20.194.5.96:35461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/dh9u7.php"] [unique_id "aryzok5Phls--iYlcKgo8wAAASI"]
[Wed Sep 30 01:00:50.023200 2026] [security2:error] [pid 186850:tid 187062] [client 20.219.2.60:20094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws83.php"] [unique_id "aryzok5Phls--iYlcKgo9gAAAVw"]
[Wed Sep 30 01:00:50.051302 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.051607 2026] [access_compat:error] [pid 186850:tid 187026] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.067254 2026] [security2:error] [pid 186850:tid 187031] [client 20.194.30.107:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/blurbs.php"] [unique_id "aryzok5Phls--iYlcKgo-wAAAT0"]
[Wed Sep 30 01:00:50.074947 2026] [security2:error] [pid 186850:tid 187014] [client 52.231.69.245:13469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/aboutt.php"] [unique_id "aryzok5Phls--iYlcKgo_gAAASw"]
[Wed Sep 30 01:00:50.106141 2026] [security2:error] [pid 186850:tid 187045] [client 168.144.175.124:35500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/cms/wp-admin/install.php"] [unique_id "aryzok5Phls--iYlcKgpAgAAAUs"]
[Wed Sep 30 01:00:50.123439 2026] [security2:error] [pid 186850:tid 187009] [client 103.168.67.253:47540] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/auth/callback"] [unique_id "aryzok5Phls--iYlcKgo-QAAASc"]
[Wed Sep 30 01:00:50.143027 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.143348 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.161545 2026] [security2:error] [pid 186850:tid 187055] [client 20.214.191.94:23416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rashed-office.com"] [uri "/xtt.php"] [unique_id "aryzok5Phls--iYlcKgpBgAAAVU"]
[Wed Sep 30 01:00:50.231605 2026] [security2:error] [pid 186850:tid 187028] [client 20.198.74.230:24132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/.cache.php"] [unique_id "aryzok5Phls--iYlcKgpDAAAATo"]
[Wed Sep 30 01:00:50.236159 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.236574 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.251962 2026] [security2:error] [pid 186850:tid 187016] [client 213.159.1.75:45492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "beetreefolkschool.org"] [uri "/jewelry"] [unique_id "aryzok5Phls--iYlcKgpDQAAAS4"], referer: http://beetreefolkschool.org/jewelry
[Wed Sep 30 01:00:50.302052 2026] [security2:error] [pid 186850:tid 187104] [client 4.240.25.22:18811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/as.php"] [unique_id "aryzok5Phls--iYlcKgpDgAAAYY"]
[Wed Sep 30 01:00:50.302873 2026] [security2:error] [pid 186850:tid 187099] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzok5Phls--iYlcKgo-gAAAYE"]
[Wed Sep 30 01:00:50.306904 2026] [security2:error] [pid 186850:tid 187107] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/privacy-policy"] [unique_id "aryzoU5Phls--iYlcKgo7gAAAYk"]
[Wed Sep 30 01:00:50.325896 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.326201 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.338534 2026] [security2:error] [pid 186850:tid 187059] [client 52.172.226.14:32772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryzok5Phls--iYlcKgpEwAAAVk"]
[Wed Sep 30 01:00:50.350047 2026] [security2:error] [pid 186850:tid 186986] [client 223.235.102.107:14598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpFAAAARA"]
[Wed Sep 30 01:00:50.350186 2026] [security2:error] [pid 186850:tid 186986] [client 223.235.102.107:14598] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpFAAAARA"]
[Wed Sep 30 01:00:50.398524 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:00:50.398892 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:00:50.409471 2026] [security2:error] [pid 186850:tid 187013] [client 122.173.27.10:7688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpFgAAASs"]
[Wed Sep 30 01:00:50.409591 2026] [security2:error] [pid 186850:tid 187013] [client 122.173.27.10:7688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpFgAAASs"]
[Wed Sep 30 01:00:50.416245 2026] [security2:error] [pid 186850:tid 187018] [client 4.240.25.22:30779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/fling.php"] [unique_id "aryzok5Phls--iYlcKgpGAAAATA"]
[Wed Sep 30 01:00:50.418429 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.418857 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.429306 2026] [security2:error] [pid 186850:tid 187094] [client 20.194.96.176:25527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryzok5Phls--iYlcKgpHQAAAXw"]
[Wed Sep 30 01:00:50.438013 2026] [security2:error] [pid 186850:tid 186947] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzok5Phls--iYlcKgpHgABe2A"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D19484
[Wed Sep 30 01:00:50.462939 2026] [security2:error] [pid 186850:tid 186991] [client 168.144.175.124:35512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/web/wp-admin/install.php"] [unique_id "aryzok5Phls--iYlcKgpIwAAARU"]
[Wed Sep 30 01:00:50.462959 2026] [fcgid:warn] [pid 186850:tid 187034] (70014)End of file found: [client 66.132.172.34:11970] mod_fcgid: can't get data from http client
[Wed Sep 30 01:00:50.491044 2026] [security2:error] [pid 186850:tid 187037] [client 20.219.2.60:20070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws75.php"] [unique_id "aryzok5Phls--iYlcKgpJAAAAUM"]
[Wed Sep 30 01:00:50.509020 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.509475 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.536353 2026] [security2:error] [pid 186850:tid 187052] [client 20.214.109.68:11206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/hehe.php"] [unique_id "aryzok5Phls--iYlcKgpKwAAAVI"]
[Wed Sep 30 01:00:50.573710 2026] [security2:error] [pid 186850:tid 187051] [client 52.231.69.245:13477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/maint/14.php"] [unique_id "aryzok5Phls--iYlcKgpLwAAAVE"]
[Wed Sep 30 01:00:50.598461 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.598836 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.615404 2026] [security2:error] [pid 186850:tid 187021] [client 20.194.5.96:35608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/yvnqcuic.php"] [unique_id "aryzok5Phls--iYlcKgpMwAAATM"]
[Wed Sep 30 01:00:50.689146 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.689427 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.692347 2026] [security2:error] [pid 186850:tid 186980] [client 20.194.30.107:17442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/chosen.php"] [unique_id "aryzok5Phls--iYlcKgpOQAAAQo"]
[Wed Sep 30 01:00:50.770032 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.5.96:8955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/133.php"] [unique_id "aryzok5Phls--iYlcKgpQQAAAQ0"]
[Wed Sep 30 01:00:50.778922 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.779204 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.785884 2026] [security2:error] [pid 186850:tid 187087] [client 49.43.163.212:52849] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpQAAAAXU"]
[Wed Sep 30 01:00:50.786050 2026] [security2:error] [pid 186850:tid 187087] [client 49.43.163.212:52849] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzok5Phls--iYlcKgpQAAAAXU"]
[Wed Sep 30 01:00:50.846329 2026] [security2:error] [pid 186850:tid 187050] [client 52.231.69.245:13483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/xx.php"] [unique_id "aryzok5Phls--iYlcKgpSwAAAVA"]
[Wed Sep 30 01:00:50.871314 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.871555 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.880367 2026] [security2:error] [pid 186850:tid 187039] [client 52.172.226.14:32527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/admin/function.php"] [unique_id "aryzok5Phls--iYlcKgpTQAAAUU"]
[Wed Sep 30 01:00:50.899944 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:00:50.900231 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:00:50.914580 2026] [security2:error] [pid 186850:tid 187068] [client 20.70.173.30:24760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/wp.php"] [unique_id "aryzok5Phls--iYlcKgpUgAAAWI"]
[Wed Sep 30 01:00:50.919515 2026] [security2:error] [pid 186850:tid 186999] [client 128.140.41.193:7934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "aryzoE5Phls--iYlcKgocAAAAR0"], referer: https://cityofmarional.com
[Wed Sep 30 01:00:50.927376 2026] [security2:error] [pid 186850:tid 187000] [client 4.196.65.241:27288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/accesson.php"] [unique_id "aryzok5Phls--iYlcKgpVAAAAR4"]
[Wed Sep 30 01:00:50.943481 2026] [security2:error] [pid 186850:tid 187059] [client 20.214.109.68:11230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryzok5Phls--iYlcKgpVQAAAVk"]
[Wed Sep 30 01:00:50.962695 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:50.962963 2026] [access_compat:error] [pid 186850:tid 186986] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:50.974962 2026] [security2:error] [pid 186850:tid 187011] [client 20.219.2.60:19569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ms-edit.php"] [unique_id "aryzok5Phls--iYlcKgpWAAAASk"]
[Wed Sep 30 01:00:50.998025 2026] [security2:error] [pid 186850:tid 187018] [client 168.144.175.124:35516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/backup/wp-admin/install.php"] [unique_id "aryzok5Phls--iYlcKgpWwAAATA"]
[Wed Sep 30 01:00:50.999077 2026] [security2:error] [pid 186850:tid 187097] [client 85.203.36.107:23405] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aryzok5Phls--iYlcKgpXAAAAX8"]
[Wed Sep 30 01:00:51.052737 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.053034 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.127737 2026] [security2:error] [pid 186850:tid 187091] [client 20.194.5.96:35484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/koiy.php"] [unique_id "aryzo05Phls--iYlcKgpZwAAAXk"]
[Wed Sep 30 01:00:51.134007 2026] [security2:error] [pid 186850:tid 187051] [client 52.231.69.245:13497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/gelay.php"] [unique_id "aryzo05Phls--iYlcKgpaQAAAVE"]
[Wed Sep 30 01:00:51.149624 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.150094 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.180729 2026] [security2:error] [pid 186850:tid 187105] [client 104.208.65.139:43378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/dairg.php"] [unique_id "aryzo05Phls--iYlcKgpbAAAAYc"]
[Wed Sep 30 01:00:51.221915 2026] [security2:error] [pid 186850:tid 187075] [client 160.251.210.23:49106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.210.251.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adamwoodruff.net"] [uri "/wp-login.php"] [unique_id "aryzo05Phls--iYlcKgpbgAAAWk"], referer: https://adamwoodruff.net/wp-login.php
[Wed Sep 30 01:00:51.234641 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.234929 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.262077 2026] [security2:error] [pid 186850:tid 187045] [client 20.194.96.176:30152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/av.php"] [unique_id "aryzo05Phls--iYlcKgpcAAAAUs"]
[Wed Sep 30 01:00:51.325120 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.325408 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.346019 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:00:51.346308 2026] [access_compat:error] [pid 186850:tid 187005] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:00:51.353769 2026] [security2:error] [pid 186850:tid 187047] [client 168.144.175.124:35526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/site/wp-admin/install.php"] [unique_id "aryzo05Phls--iYlcKgpdwAAAU0"]
[Wed Sep 30 01:00:51.388376 2026] [security2:error] [pid 186850:tid 187031] [client 52.172.226.14:32116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/9.php"] [unique_id "aryzo05Phls--iYlcKgpeQAAAT0"]
[Wed Sep 30 01:00:51.416037 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.416303 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.446840 2026] [security2:error] [pid 186850:tid 187016] [client 20.219.2.60:20177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/abc.php"] [unique_id "aryzo05Phls--iYlcKgpgwAAAS4"]
[Wed Sep 30 01:00:51.450334 2026] [security2:error] [pid 186850:tid 187072] [client 52.231.69.245:13657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/htaccess.php"] [unique_id "aryzo05Phls--iYlcKgphQAAAWY"]
[Wed Sep 30 01:00:51.500633 2026] [security2:error] [pid 186850:tid 186999] [client 20.214.109.68:11141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/varb.php"] [unique_id "aryzo05Phls--iYlcKgpjwAAAR0"]
[Wed Sep 30 01:00:51.512290 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.512738 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.518119 2026] [security2:error] [pid 186850:tid 187073] [client 84.13.142.21:52903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.142.13.84.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "silverlakess.com"] [uri "/wp-links-opml.php"] [unique_id "aryzo05Phls--iYlcKgpkQAAAWc"]
[Wed Sep 30 01:00:51.518201 2026] [security2:error] [pid 186850:tid 187083] [client 45.138.12.32:20850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.afghanjudofederation.af"] [uri "/wp-links-opml.php"] [unique_id "aryzo05Phls--iYlcKgpkwAAAXE"]
[Wed Sep 30 01:00:51.598049 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.598347 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.654873 2026] [security2:error] [pid 186850:tid 187076] [client 20.194.5.96:8347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wsd.php"] [unique_id "aryzo05Phls--iYlcKgpmwAAAWo"]
[Wed Sep 30 01:00:51.673604 2026] [security2:error] [pid 186850:tid 187067] [client 20.194.5.96:35509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wordfence-waf.php"] [unique_id "aryzo05Phls--iYlcKgpnAAAAWE"]
[Wed Sep 30 01:00:51.673844 2026] [security2:error] [pid 186850:tid 187085] [client 45.156.62.96:65285] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpmAAAAXM"]
[Wed Sep 30 01:00:51.673962 2026] [security2:error] [pid 186850:tid 187085] [client 45.156.62.96:65285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpmAAAAXM"]
[Wed Sep 30 01:00:51.689408 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.689677 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.710676 2026] [security2:error] [pid 186850:tid 187051] [client 168.144.175.124:35542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aryzo05Phls--iYlcKgpngAAAVE"]
[Wed Sep 30 01:00:51.723304 2026] [security2:error] [pid 186850:tid 187033] [client 155.190.6.18:38376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpnwAAAT8"]
[Wed Sep 30 01:00:51.723401 2026] [security2:error] [pid 186850:tid 187033] [client 155.190.6.18:38376] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpnwAAAT8"]
[Wed Sep 30 01:00:51.780567 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.780864 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.819921 2026] [security2:error] [pid 186850:tid 186992] [client 52.231.69.245:49137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/readme.php"] [unique_id "aryzo05Phls--iYlcKgpowAAARY"]
[Wed Sep 30 01:00:51.821128 2026] [security2:error] [pid 186850:tid 187062] [client 20.214.109.68:11225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/lm15.php"] [unique_id "aryzo05Phls--iYlcKgppAAAAVw"]
[Wed Sep 30 01:00:51.847581 2026] [security2:error] [pid 186850:tid 187026] [client 213.136.69.135:51465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-styles.php"] [unique_id "aryzo05Phls--iYlcKgppgAAATg"], referer: binance.com
[Wed Sep 30 01:00:51.871543 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.871827 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:51.890575 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:51.890845 2026] [access_compat:error] [pid 186850:tid 187075] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:51.907965 2026] [security2:error] [pid 186850:tid 187096] [client 52.172.226.14:32758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryzo05Phls--iYlcKgpqQAAAX4"]
[Wed Sep 30 01:00:51.950106 2026] [security2:error] [pid 186850:tid 187017] [client 20.219.2.60:20082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/motu.php"] [unique_id "aryzo05Phls--iYlcKgprAAAAS8"]
[Wed Sep 30 01:00:51.961073 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:51.961318 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.010801 2026] [security2:error] [pid 186850:tid 186965] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzpE5Phls--iYlcKgpsgABPXI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=360&t=15949
[Wed Sep 30 01:00:52.010863 2026] [security2:error] [pid 186850:tid 186965] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzpE5Phls--iYlcKgpsgABPXI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cbd2985245a6d9931155f252e6f5e078&start=360&t=15949
[Wed Sep 30 01:00:52.011917 2026] [security2:error] [pid 186850:tid 187010] [client 102.253.38.25:8438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpsQAAASg"]
[Wed Sep 30 01:00:52.012076 2026] [security2:error] [pid 186850:tid 187010] [client 102.253.38.25:8438] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzo05Phls--iYlcKgpsQAAASg"]
[Wed Sep 30 01:00:52.053761 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.054034 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.067328 2026] [security2:error] [pid 186850:tid 187077] [client 168.144.175.124:35544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.175.144.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eventsworth-com-ng.jfootsteps.com"] [uri "/shop/wp-admin/install.php"] [unique_id "aryzpE5Phls--iYlcKgptAAAAWs"]
[Wed Sep 30 01:00:52.094651 2026] [security2:error] [pid 186850:tid 187048] [client 52.231.69.245:13632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/max.php"] [unique_id "aryzpE5Phls--iYlcKgptQAAAU4"]
[Wed Sep 30 01:00:52.147483 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.147780 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.147949 2026] [security2:error] [pid 186850:tid 187022] [client 20.194.5.96:35492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wp5.php"] [unique_id "aryzpE5Phls--iYlcKgpugAAATQ"]
[Wed Sep 30 01:00:52.234493 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.234803 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.264922 2026] [security2:error] [pid 186850:tid 187050] [client 85.203.36.112:50063] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "aryzpE5Phls--iYlcKgpxAAAAVA"]
[Wed Sep 30 01:00:52.307665 2026] [security2:error] [pid 186850:tid 187000] [client 20.194.96.176:30165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/dex.php"] [unique_id "aryzpE5Phls--iYlcKgpyQAAAR4"]
[Wed Sep 30 01:00:52.326960 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.327252 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.341676 2026] [security2:error] [pid 186850:tid 186899] [remote 57.141.14.61:20652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "aryzpE5Phls--iYlcKgpyAABVzA"]
[Wed Sep 30 01:00:52.373468 2026] [access_compat:error] [pid 186850:tid 187106] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:52.373730 2026] [access_compat:error] [pid 186850:tid 187106] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:52.417850 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.418134 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.434948 2026] [security2:error] [pid 186850:tid 187056] [client 20.219.2.60:19483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/inputs.php"] [unique_id "aryzpE5Phls--iYlcKgp2wAAAVY"]
[Wed Sep 30 01:00:52.441312 2026] [autoindex:error] [pid 186850:tid 187064] [client 93.152.209.11:0] AH01276: Cannot serve directory /home4/paintyou/public_html/theshack/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:52.462679 2026] [security2:error] [pid 186850:tid 187082] [client 20.214.109.68:11240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/clss.php"] [unique_id "aryzpE5Phls--iYlcKgp3wAAAXA"]
[Wed Sep 30 01:00:52.488984 2026] [security2:error] [pid 186850:tid 187085] [client 160.251.210.23:48418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.210.251.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adamwoodruff.net"] [uri "/wp-login.php"] [unique_id "aryzpE5Phls--iYlcKgp4AAAAXM"], referer: https://adamwoodruff.net/wp-login.php
[Wed Sep 30 01:00:52.504389 2026] [security2:error] [pid 186850:tid 187091] [client 4.196.65.241:19081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/h86jb6g8.php"] [unique_id "aryzpE5Phls--iYlcKgp4wAAAXk"]
[Wed Sep 30 01:00:52.513704 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.514160 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.518794 2026] [security2:error] [pid 186850:tid 187058] [client 52.231.69.245:49149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/post.php"] [unique_id "aryzpE5Phls--iYlcKgp5QAAAVg"]
[Wed Sep 30 01:00:52.561936 2026] [security2:error] [pid 186850:tid 187007] [client 52.172.226.14:32572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/.well-known/log.php"] [unique_id "aryzpE5Phls--iYlcKgp5wAAASU"]
[Wed Sep 30 01:00:52.602616 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.602911 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.605731 2026] [security2:error] [pid 186850:tid 187081] [client 20.194.30.107:48344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/log.php"] [unique_id "aryzpE5Phls--iYlcKgp6QAAAW8"]
[Wed Sep 30 01:00:52.656253 2026] [security2:error] [pid 186850:tid 187017] [client 20.194.5.96:35756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/em.php"] [unique_id "aryzpE5Phls--iYlcKgp8AAAAS8"]
[Wed Sep 30 01:00:52.692393 2026] [autoindex:error] [pid 186850:tid 187107] [client 31.40.204.182:35082] AH01276: Cannot serve directory /home4/lmcwjamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:52.693279 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.693699 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.694139 2026] [security2:error] [pid 186850:tid 187102] [client 43.104.4.186:12338] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "aryzpE5Phls--iYlcKgp9QAAAYQ"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Casus%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Cstabilizers%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:00:52.749461 2026] [security2:error] [pid 186850:tid 187042] [client 172.195.104.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "webdisk.rhodaalbert.com"] [uri "/___proxy_subdomain_webdisk/___proxy_subdomain_webdisk/"] [unique_id "aryzpE5Phls--iYlcKgp-AAAAUg"]
[Wed Sep 30 01:00:52.782586 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:52.782881 2026] [access_compat:error] [pid 186850:tid 187048] [client 216.73.216.46:45826] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:52.846762 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:52.847045 2026] [access_compat:error] [pid 186850:tid 187029] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:00:52.849939 2026] [security2:error] [pid 186850:tid 186862] [remote 74.7.227.56:37922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzpE5Phls--iYlcKgp_AABRws"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:00:52.865504 2026] [security2:error] [pid 186850:tid 187095] [client 216.73.216.46:45826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzpE5Phls--iYlcKgp_gAAAX0"]
[Wed Sep 30 01:00:52.893864 2026] [security2:error] [pid 186850:tid 186999] [client 20.219.2.60:20092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp9.php"] [unique_id "aryzpE5Phls--iYlcKgqAAAAAR0"]
[Wed Sep 30 01:00:52.985292 2026] [security2:error] [pid 186850:tid 187013] [client 20.194.5.96:61791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/BDKR28WP.php"] [unique_id "aryzpE5Phls--iYlcKgqCwAAASs"]
[Wed Sep 30 01:00:53.000183 2026] [security2:error] [pid 186850:tid 187090] [client 114.119.140.56:42425] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.clenbuterol4you.com"] [uri "/where-to-buy/"] [unique_id "aryzpE5Phls--iYlcKgqDAAAAXg"], referer: https://www.clenbuterol4you.com/
[Wed Sep 30 01:00:53.021999 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:30263] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.022437 2026] [access_compat:error] [pid 186850:tid 187074] [client 216.73.216.46:30263] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.114323 2026] [security2:error] [pid 186850:tid 187032] [client 4.196.65.241:27275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/bn.php"] [unique_id "aryzpU5Phls--iYlcKgqEAAAAT4"]
[Wed Sep 30 01:00:53.126834 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.127121 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.158919 2026] [security2:error] [pid 186850:tid 187091] [client 104.208.65.139:43352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/z60.php"] [unique_id "aryzpU5Phls--iYlcKgqGAAAAXk"]
[Wed Sep 30 01:00:53.189608 2026] [security2:error] [pid 186850:tid 187021] [client 52.231.69.245:13494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/themes.php"] [unique_id "aryzpU5Phls--iYlcKgqHgAAATM"]
[Wed Sep 30 01:00:53.197231 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.197678 2026] [access_compat:error] [pid 186850:tid 186981] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.212539 2026] [security2:error] [pid 186850:tid 187065] [client 85.203.36.109:30425] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/ioxi-o.php"] [unique_id "aryzpU5Phls--iYlcKgqIAAAAV8"]
[Wed Sep 30 01:00:53.237495 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.237755 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.254208 2026] [security2:error] [pid 186850:tid 187024] [client 20.194.5.96:35590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/hp.php"] [unique_id "aryzpU5Phls--iYlcKgqIgAAATY"]
[Wed Sep 30 01:00:53.256853 2026] [security2:error] [pid 186850:tid 187060] [client 103.159.192.142:56321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqJAAAAVo"]
[Wed Sep 30 01:00:53.256995 2026] [security2:error] [pid 186850:tid 187060] [client 103.159.192.142:56321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqJAAAAVo"]
[Wed Sep 30 01:00:53.258357 2026] [security2:error] [pid 186850:tid 187015] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzpU5Phls--iYlcKgqDwAAAS0"]
[Wed Sep 30 01:00:53.260613 2026] [security2:error] [pid 186850:tid 187011] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/press"] [unique_id "aryzpE5Phls--iYlcKgqBgAAASk"]
[Wed Sep 30 01:00:53.290145 2026] [security2:error] [pid 186850:tid 187003] [client 116.193.128.26:55049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqJwAAASE"]
[Wed Sep 30 01:00:53.290243 2026] [security2:error] [pid 186850:tid 187003] [client 116.193.128.26:55049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqJwAAASE"]
[Wed Sep 30 01:00:53.329282 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.329552 2026] [access_compat:error] [pid 186850:tid 187047] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.332526 2026] [security2:error] [pid 186850:tid 186985] [client 20.214.109.68:11222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/44.php"] [unique_id "aryzpU5Phls--iYlcKgqKwAAAQ8"]
[Wed Sep 30 01:00:53.340713 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:53.340992 2026] [access_compat:error] [pid 186850:tid 187107] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:53.358567 2026] [security2:error] [pid 186850:tid 186983] [client 20.219.2.60:20217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/public/vx.php"] [unique_id "aryzpU5Phls--iYlcKgqLQAAAQ0"]
[Wed Sep 30 01:00:53.421323 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.421598 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.511066 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.511351 2026] [access_compat:error] [pid 186850:tid 187044] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.553962 2026] [security2:error] [pid 186850:tid 186982] [client 52.172.226.14:32520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/class.php"] [unique_id "aryzpU5Phls--iYlcKgqPQAAAQw"]
[Wed Sep 30 01:00:53.600556 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.600834 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.630361 2026] [security2:error] [pid 186850:tid 187071] [client 20.194.96.176:25485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/chosen.php"] [unique_id "aryzpU5Phls--iYlcKgqQgAAAWU"]
[Wed Sep 30 01:00:53.637633 2026] [security2:error] [pid 186850:tid 187063] [client 52.231.69.245:49118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aryzpU5Phls--iYlcKgqQwAAAV0"]
[Wed Sep 30 01:00:53.695386 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.695656 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.721261 2026] [security2:error] [pid 186850:tid 187074] [client 74.7.241.170:41064] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.aps.aeb.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzpU5Phls--iYlcKgqTQABaA4"]
[Wed Sep 30 01:00:53.728211 2026] [security2:error] [pid 186850:tid 187080] [client 202.179.95.79:49920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqTgAAAW4"]
[Wed Sep 30 01:00:53.728375 2026] [security2:error] [pid 186850:tid 187080] [client 202.179.95.79:49920] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqTgAAAW4"]
[Wed Sep 30 01:00:53.788400 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.788852 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.807501 2026] [security2:error] [pid 186850:tid 187088] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpU5Phls--iYlcKgqVAAAAXY"]
[Wed Sep 30 01:00:53.820339 2026] [security2:error] [pid 186850:tid 186981] [client 103.168.67.253:47578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzpU5Phls--iYlcKgqWAAAAQs"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:53.845690 2026] [security2:error] [pid 186850:tid 187065] [client 20.219.2.60:20216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/inege.php"] [unique_id "aryzpU5Phls--iYlcKgqWwAAAV8"]
[Wed Sep 30 01:00:53.847881 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:00:53.848292 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:00:53.853587 2026] [security2:error] [pid 186850:tid 187086] [client 203.122.45.246:54048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqXQAAAXQ"]
[Wed Sep 30 01:00:53.853693 2026] [security2:error] [pid 186850:tid 187086] [client 203.122.45.246:54048] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqXQAAAXQ"]
[Wed Sep 30 01:00:53.876753 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.877090 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.893950 2026] [security2:error] [pid 186850:tid 187007] [client 85.203.36.108:58055] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/txets.php"] [unique_id "aryzpU5Phls--iYlcKgqYAAAASU"]
[Wed Sep 30 01:00:53.964906 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:53.965198 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:53.973887 2026] [security2:error] [pid 186850:tid 187054] [client 20.194.5.96:35610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wpuse.php"] [unique_id "aryzpU5Phls--iYlcKgqbAAAAVQ"]
[Wed Sep 30 01:00:54.000892 2026] [security2:error] [pid 186850:tid 187034] [client 52.231.69.245:13684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryzpU5Phls--iYlcKgqbgAAAUA"]
[Wed Sep 30 01:00:54.010919 2026] [security2:error] [pid 186850:tid 186951] [remote 57.141.14.6:52986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/comments/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "aryzpU5Phls--iYlcKgqawABZGQ"]
[Wed Sep 30 01:00:54.022314 2026] [security2:error] [pid 186850:tid 186983] [client 52.172.226.14:32545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/lock360.php"] [unique_id "aryzpk5Phls--iYlcKgqbwAAAQ0"]
[Wed Sep 30 01:00:54.056628 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.056939 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.078436 2026] [security2:error] [pid 186850:tid 187046] [client 106.214.2.47:10480] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqcgAAAUw"]
[Wed Sep 30 01:00:54.079278 2026] [security2:error] [pid 186850:tid 187046] [client 106.214.2.47:10480] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqcgAAAUw"]
[Wed Sep 30 01:00:54.149271 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.149581 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.157679 2026] [security2:error] [pid 186850:tid 186986] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqdAAAARA"]
[Wed Sep 30 01:00:54.220357 2026] [security2:error] [pid 186850:tid 187092] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqeAAAAXo"]
[Wed Sep 30 01:00:54.237563 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.237865 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.288068 2026] [security2:error] [pid 186850:tid 187018] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqewAAATA"]
[Wed Sep 30 01:00:54.298887 2026] [security2:error] [pid 186850:tid 187043] [client 20.214.109.68:11233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/a5e0a.php"] [unique_id "aryzpk5Phls--iYlcKgqfAAAAUk"]
[Wed Sep 30 01:00:54.311299 2026] [security2:error] [pid 186850:tid 187032] [client 20.219.2.60:19541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/nw.php"] [unique_id "aryzpk5Phls--iYlcKgqfQAAAT4"]
[Wed Sep 30 01:00:54.332094 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.332520 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.355250 2026] [security2:error] [pid 186850:tid 187097] [client 20.194.5.96:8346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wmore1.php"] [unique_id "aryzpk5Phls--iYlcKgqggAAAX8"]
[Wed Sep 30 01:00:54.361777 2026] [security2:error] [pid 186850:tid 187037] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqgQAAAUM"]
[Wed Sep 30 01:00:54.367132 2026] [security2:error] [pid 186850:tid 186990] [client 52.231.69.245:13493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/click.php"] [unique_id "aryzpk5Phls--iYlcKgqhAAAARQ"]
[Wed Sep 30 01:00:54.371321 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:54.371594 2026] [access_compat:error] [pid 186850:tid 187056] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:54.424261 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.424699 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.472506 2026] [security2:error] [pid 186850:tid 187099] [client 20.194.5.96:35622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/sm.php"] [unique_id "aryzpk5Phls--iYlcKgqjAAAAYE"]
[Wed Sep 30 01:00:54.511317 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.511579 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.522294 2026] [security2:error] [pid 186850:tid 187050] [client 52.172.226.14:32518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.dkl-hardware.com"] [uri "/system_log.php"] [unique_id "aryzpk5Phls--iYlcKgqkQAAAVA"]
[Wed Sep 30 01:00:54.523533 2026] [security2:error] [pid 186850:tid 186993] [client 20.198.74.230:24139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/motu.php"] [unique_id "aryzpk5Phls--iYlcKgqkgAAARc"]
[Wed Sep 30 01:00:54.602437 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.602692 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.607375 2026] [security2:error] [pid 186850:tid 187034] [client 152.232.185.193:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzpk5Phls--iYlcKgqmgAAAUA"]
[Wed Sep 30 01:00:54.623645 2026] [security2:error] [pid 186850:tid 187026] [client 45.138.12.32:20904] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.masielectric.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzpk5Phls--iYlcKgqmwAAATg"]
[Wed Sep 30 01:00:54.645364 2026] [security2:error] [pid 186850:tid 187022] [client 104.208.65.139:12190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/imageskir.php"] [unique_id "aryzpk5Phls--iYlcKgqnAAAATQ"]
[Wed Sep 30 01:00:54.648820 2026] [security2:error] [pid 186850:tid 187066] [client 116.72.182.19:57708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqnQAAAWA"]
[Wed Sep 30 01:00:54.648914 2026] [security2:error] [pid 186850:tid 187066] [client 116.72.182.19:57708] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqnQAAAWA"]
[Wed Sep 30 01:00:54.676426 2026] [security2:error] [pid 186850:tid 187019] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqoQAAATE"]
[Wed Sep 30 01:00:54.678284 2026] [security2:error] [pid 186850:tid 187033] [client 105.112.178.79:38345] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tky.nox.mybluehost.me"] [uri "/.env"] [unique_id "aryzpk5Phls--iYlcKgqogAAAT8"]
[Wed Sep 30 01:00:54.693466 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.693735 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.749669 2026] [security2:error] [pid 186850:tid 187095] [client 20.214.109.68:11204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bo.php"] [unique_id "aryzpk5Phls--iYlcKgqpwAAAX0"]
[Wed Sep 30 01:00:54.766384 2026] [security2:error] [pid 186850:tid 187048] [client 52.231.69.245:49092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/install.php"] [unique_id "aryzpk5Phls--iYlcKgqqgAAAU4"]
[Wed Sep 30 01:00:54.771014 2026] [security2:error] [pid 186850:tid 186986] [client 20.219.2.60:20191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/t.php"] [unique_id "aryzpk5Phls--iYlcKgqqwAAARA"]
[Wed Sep 30 01:00:54.789179 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.789607 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.800768 2026] [security2:error] [pid 186850:tid 186996] [client 4.196.65.241:2077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/dsfsa.php"] [unique_id "aryzpk5Phls--iYlcKgqrwAAARo"]
[Wed Sep 30 01:00:54.812619 2026] [security2:error] [pid 186850:tid 187053] [client 152.59.165.7:61620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqsgAAAVM"]
[Wed Sep 30 01:00:54.812782 2026] [security2:error] [pid 186850:tid 187053] [client 152.59.165.7:61620] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqsgAAAVM"]
[Wed Sep 30 01:00:54.835923 2026] [security2:error] [pid 186850:tid 187084] [client 152.59.169.65:63814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqtAAAAXI"]
[Wed Sep 30 01:00:54.836013 2026] [security2:error] [pid 186850:tid 187084] [client 152.59.169.65:63814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqtAAAAXI"]
[Wed Sep 30 01:00:54.842211 2026] [security2:error] [pid 186850:tid 187106] [client 43.227.131.37:40367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqtgAAAYg"]
[Wed Sep 30 01:00:54.842299 2026] [security2:error] [pid 186850:tid 187106] [client 43.227.131.37:40367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgqtgAAAYg"]
[Wed Sep 30 01:00:54.858284 2026] [autoindex:error] [pid 186850:tid 186994] [client 212.156.70.154:62849] AH01276: Cannot serve directory /home4/pobvhcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:00:54.871798 2026] [security2:error] [pid 186850:tid 187059] [client 4.240.25.22:30728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/felnggg.php"] [unique_id "aryzpk5Phls--iYlcKgqugAAAVk"]
[Wed Sep 30 01:00:54.873201 2026] [access_compat:error] [pid 186850:tid 187031] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:54.873468 2026] [access_compat:error] [pid 186850:tid 187031] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:54.873613 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.873912 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.876561 2026] [security2:error] [pid 186850:tid 187080] [client 72.255.10.32:57084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.10.255.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgquwAAAW4"]
[Wed Sep 30 01:00:54.876785 2026] [security2:error] [pid 186850:tid 187080] [client 72.255.10.32:57084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "my-muscle-man.com"] [uri "/xmlrpc.php"] [unique_id "aryzpk5Phls--iYlcKgquwAAAW4"]
[Wed Sep 30 01:00:54.888910 2026] [security2:error] [pid 186850:tid 187064] [client 20.194.5.96:35627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/mknobgkg.php"] [unique_id "aryzpk5Phls--iYlcKgqvAAAAV4"]
[Wed Sep 30 01:00:54.904452 2026] [security2:error] [pid 186850:tid 187032] [client 20.194.96.176:2445] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/1.php"] [unique_id "aryzpk5Phls--iYlcKgqvwAAAT4"]
[Wed Sep 30 01:00:54.904540 2026] [security2:error] [pid 186850:tid 187032] [client 20.194.96.176:2445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/1.php"] [unique_id "aryzpk5Phls--iYlcKgqvwAAAT4"]
[Wed Sep 30 01:00:54.951717 2026] [security2:error] [pid 186850:tid 187097] [client 85.203.36.102:20429] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-content/themes/txets.php"] [unique_id "aryzpk5Phls--iYlcKgqwgAAAX8"]
[Wed Sep 30 01:00:54.960708 2026] [security2:error] [pid 186850:tid 186962] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzpk5Phls--iYlcKgqwwABQ28"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302264&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:54.960738 2026] [security2:error] [pid 186850:tid 186962] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzpk5Phls--iYlcKgqwwABQ28"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302264&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:00:54.965229 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:54.965564 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:54.996821 2026] [security2:error] [pid 186850:tid 187072] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzpk5Phls--iYlcKgqyAAAAWY"]
[Wed Sep 30 01:00:55.056311 2026] [security2:error] [pid 186850:tid 187065] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgqygAAAV8"]
[Wed Sep 30 01:00:55.056351 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.056601 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.107561 2026] [security2:error] [pid 186850:tid 186981] [client 20.194.5.96:61764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/177.php"] [unique_id "aryzp05Phls--iYlcKgqzgAAAQs"]
[Wed Sep 30 01:00:55.112594 2026] [security2:error] [pid 186850:tid 187098] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgqzQAAAYA"]
[Wed Sep 30 01:00:55.130341 2026] [security2:error] [pid 186850:tid 187025] [client 34.238.45.183:59615] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.kevinoleary.net"] [uri "/robots.txt"] [unique_id "aryzp05Phls--iYlcKgq0QAAATc"]
[Wed Sep 30 01:00:55.135099 2026] [security2:error] [pid 186850:tid 187069] [client 103.172.210.103:53002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgq0gAAAWM"]
[Wed Sep 30 01:00:55.135196 2026] [security2:error] [pid 186850:tid 187069] [client 103.172.210.103:53002] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgq0gAAAWM"]
[Wed Sep 30 01:00:55.148698 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.149121 2026] [access_compat:error] [pid 186850:tid 187050] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.170360 2026] [security2:error] [pid 186850:tid 187086] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgq1QAAAXQ"]
[Wed Sep 30 01:00:55.227231 2026] [security2:error] [pid 186850:tid 187045] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgq1gAAAUs"]
[Wed Sep 30 01:00:55.231498 2026] [security2:error] [pid 186850:tid 187026] [client 20.219.2.60:20042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryzp05Phls--iYlcKgq1wAAATg"]
[Wed Sep 30 01:00:55.241869 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.242142 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.287408 2026] [security2:error] [pid 186850:tid 187052] [client 20.214.109.68:11147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/56c53.php"] [unique_id "aryzp05Phls--iYlcKgq3AAAAVI"]
[Wed Sep 30 01:00:55.290972 2026] [security2:error] [pid 186850:tid 187028] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgq2gAAATo"]
[Wed Sep 30 01:00:55.326902 2026] [security2:error] [pid 186850:tid 187016] [client 52.231.69.245:13478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/13k.php"] [unique_id "aryzp05Phls--iYlcKgq4AAAAS4"]
[Wed Sep 30 01:00:55.334067 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.334329 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.368883 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:55.369215 2026] [access_compat:error] [pid 186850:tid 187020] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:55.426539 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.426817 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.468816 2026] [security2:error] [pid 186850:tid 187056] [client 49.205.105.16:14463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgq7wAAAVY"]
[Wed Sep 30 01:00:55.468916 2026] [security2:error] [pid 186850:tid 187056] [client 49.205.105.16:14463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgq7wAAAVY"]
[Wed Sep 30 01:00:55.516192 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.516481 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.584581 2026] [security2:error] [pid 186850:tid 187076] [client 144.91.83.1:46844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.83.91.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.eklipza.com"] [uri "/wp-login.php"] [unique_id "aryzp05Phls--iYlcKgq9wAAAWo"]
[Wed Sep 30 01:00:55.608359 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.608643 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.614390 2026] [security2:error] [pid 186850:tid 187083] [client 20.194.5.96:35585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/dairg.php"] [unique_id "aryzp05Phls--iYlcKgq-wAAAXE"]
[Wed Sep 30 01:00:55.641946 2026] [security2:error] [pid 186850:tid 187074] [client 52.231.69.245:49133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/up.php"] [unique_id "aryzp05Phls--iYlcKgq_AAAAWg"]
[Wed Sep 30 01:00:55.700438 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.700708 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.708482 2026] [security2:error] [pid 186850:tid 187097] [client 20.219.2.60:20050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/public/ws49.php"] [unique_id "aryzp05Phls--iYlcKgrAQAAAX8"]
[Wed Sep 30 01:00:55.790163 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.790501 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.829236 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:55.829504 2026] [access_compat:error] [pid 186850:tid 187065] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:00:55.853303 2026] [security2:error] [pid 186850:tid 187051] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgrBwAAAVE"]
[Wed Sep 30 01:00:55.881221 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.881508 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.914794 2026] [security2:error] [pid 186850:tid 186982] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgrDQAAAQw"]
[Wed Sep 30 01:00:55.916017 2026] [security2:error] [pid 186850:tid 187098] [client 20.194.5.96:61783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/ccc.php"] [unique_id "aryzp05Phls--iYlcKgrEQAAAYA"]
[Wed Sep 30 01:00:55.971694 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:55.971988 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:55.978467 2026] [security2:error] [pid 186850:tid 187075] [client 116.197.133.25:54820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgrHAAAAWk"]
[Wed Sep 30 01:00:55.978599 2026] [security2:error] [pid 186850:tid 187075] [client 116.197.133.25:54820] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzp05Phls--iYlcKgrHAAAAWk"]
[Wed Sep 30 01:00:55.980069 2026] [security2:error] [pid 186850:tid 187006] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzp05Phls--iYlcKgrGgAAASQ"]
[Wed Sep 30 01:00:55.982762 2026] [security2:error] [pid 186850:tid 187057] [client 20.214.109.68:11224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tx78.php"] [unique_id "aryzp05Phls--iYlcKgrHQAAAVc"]
[Wed Sep 30 01:00:55.991285 2026] [security2:error] [pid 186850:tid 187058] [client 20.194.96.176:25473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/radio.php"] [unique_id "aryzp05Phls--iYlcKgrHgAAAVg"]
[Wed Sep 30 01:00:56.021236 2026] [security2:error] [pid 186850:tid 187068] [client 4.240.25.22:18780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/simple.php"] [unique_id "aryzqE5Phls--iYlcKgrIAAAAWI"]
[Wed Sep 30 01:00:56.026726 2026] [security2:error] [pid 186850:tid 187107] [client 45.89.242.85:54547] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-admin/txets.php"] [unique_id "aryzqE5Phls--iYlcKgrIQAAAYk"]
[Wed Sep 30 01:00:56.034524 2026] [security2:error] [pid 186850:tid 187066] [client 52.231.69.245:13476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/0x1949.php"] [unique_id "aryzqE5Phls--iYlcKgrJQAAAWA"]
[Wed Sep 30 01:00:56.041889 2026] [security2:error] [pid 186850:tid 187022] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzqE5Phls--iYlcKgrIgAAATQ"]
[Wed Sep 30 01:00:56.064516 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.064774 2026] [access_compat:error] [pid 186850:tid 187103] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.156511 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.156792 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.169039 2026] [security2:error] [pid 186850:tid 187094] [client 20.219.2.60:19509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gifclass.php"] [unique_id "aryzqE5Phls--iYlcKgrMgAAAXw"]
[Wed Sep 30 01:00:56.246398 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.246693 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.299329 2026] [security2:error] [pid 186850:tid 187053] [client 20.194.5.96:35631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/dronishness.php"] [unique_id "aryzqE5Phls--iYlcKgrPAAAAVM"]
[Wed Sep 30 01:00:56.336869 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.337188 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.340436 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:56.340693 2026] [access_compat:error] [pid 186850:tid 187015] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:56.370254 2026] [security2:error] [pid 186850:tid 187067] [client 161.123.180.163:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzqE5Phls--iYlcKgrQgAAAWE"]
[Wed Sep 30 01:00:56.415500 2026] [security2:error] [pid 186850:tid 187051] [client 172.232.180.137:60516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "aryzqE5Phls--iYlcKgrRwAAAVE"]
[Wed Sep 30 01:00:56.431489 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.431930 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.441732 2026] [fcgid:warn] [pid 186850:tid 187098] (70014)End of file found: [client 66.132.172.34:12038] mod_fcgid: can't get data from http client
[Wed Sep 30 01:00:56.459495 2026] [security2:error] [pid 186850:tid 187063] [client 20.214.109.68:11165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws80.php"] [unique_id "aryzqE5Phls--iYlcKgrTgAAAV0"]
[Wed Sep 30 01:00:56.485123 2026] [security2:error] [pid 186850:tid 187102] [client 35.173.18.61:33934] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.kevinoleary.net"] [uri "/"] [unique_id "aryzqE5Phls--iYlcKgrUAAAAYQ"]
[Wed Sep 30 01:00:56.510343 2026] [security2:error] [pid 186850:tid 187034] [client 45.138.12.32:20920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.agv.igm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzqE5Phls--iYlcKgrVgAAAUA"]
[Wed Sep 30 01:00:56.514895 2026] [security2:error] [pid 186850:tid 187008] [client 104.28.254.46:41789] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wka.ybe.mybluehost.me"] [uri "/.env.old"] [unique_id "aryzqE5Phls--iYlcKgrWAAAASY"], referer: http://wka.ybe.mybluehost.me/.env.old
[Wed Sep 30 01:00:56.517630 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.518616 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.547509 2026] [access_compat:error] [pid 186850:tid 186853] [remote 17.166.236.211:54946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.547769 2026] [access_compat:error] [pid 186850:tid 186853] [remote 17.166.236.211:54946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.612995 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.613432 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.636528 2026] [security2:error] [pid 186850:tid 187014] [client 20.219.2.60:20162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/sa.php7"] [unique_id "aryzqE5Phls--iYlcKgreAAAASw"]
[Wed Sep 30 01:00:56.646077 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.5.96:8942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/0xD.php"] [unique_id "aryzqE5Phls--iYlcKgregAAAQ0"]
[Wed Sep 30 01:00:56.719139 2026] [security2:error] [pid 186850:tid 187046] [client 52.231.69.245:13319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/cong.php"] [unique_id "aryzqE5Phls--iYlcKgrfwAAAUw"]
[Wed Sep 30 01:00:56.727104 2026] [security2:error] [pid 186850:tid 186996] [client 20.194.30.107:48380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-the.php"] [unique_id "aryzqE5Phls--iYlcKgrgAAAARo"]
[Wed Sep 30 01:00:56.754436 2026] [security2:error] [pid 186850:tid 187091] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzqE5Phls--iYlcKgrTwAAAXk"]
[Wed Sep 30 01:00:56.756335 2026] [security2:error] [pid 186850:tid 187000] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/media"] [unique_id "aryzqE5Phls--iYlcKgrSwAAAR4"]
[Wed Sep 30 01:00:56.780498 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.780768 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.796537 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.796804 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.827488 2026] [security2:error] [pid 186850:tid 187027] [client 20.194.5.96:35538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/Row_wsoo.php"] [unique_id "aryzqE5Phls--iYlcKgrlAAAATk"]
[Wed Sep 30 01:00:56.832284 2026] [security2:error] [pid 186850:tid 187058] [client 222.167.103.125:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzqE5Phls--iYlcKgrlQAAAVg"]
[Wed Sep 30 01:00:56.868592 2026] [access_compat:error] [pid 186850:tid 187026] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:00:56.869035 2026] [access_compat:error] [pid 186850:tid 187026] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:00:56.882279 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.882580 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.927796 2026] [security2:error] [pid 186850:tid 187080] [client 20.194.30.107:34712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/min.php"] [unique_id "aryzqE5Phls--iYlcKgroAAAAW4"]
[Wed Sep 30 01:00:56.944280 2026] [access_compat:error] [pid 186850:tid 186888] [remote 17.166.150.148:47674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.944709 2026] [access_compat:error] [pid 186850:tid 186888] [remote 17.166.150.148:47674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:56.976912 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:56.977180 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.052345 2026] [security2:error] [pid 186850:tid 187040] [client 45.138.12.32:34450] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.masielectric.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzqU5Phls--iYlcKgrpgAAAUY"]
[Wed Sep 30 01:00:57.064520 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.064975 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.106420 2026] [security2:error] [pid 186850:tid 187105] [client 20.219.2.60:19493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/jp.php"] [unique_id "aryzqU5Phls--iYlcKgrqQAAAYc"]
[Wed Sep 30 01:00:57.161348 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.161822 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.174771 2026] [security2:error] [pid 186850:tid 187076] [client 20.214.109.68:11212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/jga.php"] [unique_id "aryzqU5Phls--iYlcKgrsAAAAWo"]
[Wed Sep 30 01:00:57.182409 2026] [security2:error] [pid 186850:tid 187081] [client 4.240.25.22:8480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/key.php"] [unique_id "aryzqU5Phls--iYlcKgrsQAAAW8"]
[Wed Sep 30 01:00:57.189462 2026] [security2:error] [pid 186850:tid 187086] [client 104.28.254.46:33536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wka.ybe.mybluehost.me"] [uri "/.env.bak"] [unique_id "aryzqU5Phls--iYlcKgrsgAAAXQ"], referer: http://wka.ybe.mybluehost.me/.env.bak
[Wed Sep 30 01:00:57.218780 2026] [security2:error] [pid 186850:tid 186989] [client 4.240.25.22:33299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzqU5Phls--iYlcKgrugAAARM"]
[Wed Sep 30 01:00:57.220803 2026] [security2:error] [pid 186850:tid 186982] [client 85.203.36.108:32309] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-includes/txets.php"] [unique_id "aryzqU5Phls--iYlcKgruwAAAQw"]
[Wed Sep 30 01:00:57.247723 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.248146 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:25258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.292992 2026] [security2:error] [pid 186850:tid 186984] [client 20.194.96.176:30157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/blacks.php"] [unique_id "aryzqU5Phls--iYlcKgrwAAAAQ4"]
[Wed Sep 30 01:00:57.329281 2026] [security2:error] [pid 186850:tid 187006] [client 52.231.69.245:13339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/bs1.php"] [unique_id "aryzqU5Phls--iYlcKgrxAAAASQ"]
[Wed Sep 30 01:00:57.330910 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:00:57.331330 2026] [access_compat:error] [pid 186850:tid 187083] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:00:57.339402 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.339834 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.350181 2026] [security2:error] [pid 186850:tid 187043] [client 20.194.5.96:35520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/x2.php"] [unique_id "aryzqU5Phls--iYlcKgrxgAAAUk"]
[Wed Sep 30 01:00:57.397868 2026] [security2:error] [pid 186850:tid 187047] [client 45.138.12.32:34488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.adv.vev.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzqU5Phls--iYlcKgrygAAAU0"]
[Wed Sep 30 01:00:57.449602 2026] [security2:error] [pid 186850:tid 186985] [client 104.208.65.139:14286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/backup-helper.php"] [unique_id "aryzqU5Phls--iYlcKgrzQAAAQ8"]
[Wed Sep 30 01:00:57.584328 2026] [security2:error] [pid 186850:tid 187029] [client 20.219.2.60:20034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-good.php"] [unique_id "aryzqU5Phls--iYlcKgr2AAAATs"]
[Wed Sep 30 01:00:57.601620 2026] [security2:error] [pid 186850:tid 186876] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzqU5Phls--iYlcKgr2QABSxk"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D83181
[Wed Sep 30 01:00:57.626185 2026] [security2:error] [pid 186850:tid 187048] [client 4.240.25.22:30773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/reop3.php"] [unique_id "aryzqU5Phls--iYlcKgr2wAAAU4"]
[Wed Sep 30 01:00:57.644053 2026] [security2:error] [pid 186850:tid 187040] [client 216.73.216.46:25258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryzqU5Phls--iYlcKgr3AAAAUY"]
[Wed Sep 30 01:00:57.667195 2026] [security2:error] [pid 186850:tid 187057] [client 20.214.109.68:11101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/fs.php"] [unique_id "aryzqU5Phls--iYlcKgr3QAAAVc"]
[Wed Sep 30 01:00:57.728027 2026] [security2:error] [pid 186850:tid 187046] [client 103.168.67.253:43062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryzqU5Phls--iYlcKgr4QAAAUw"], referer: https://dobeservices.com/wp-admin/
[Wed Sep 30 01:00:57.742616 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.742905 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.749846 2026] [security2:error] [pid 186850:tid 186980] [client 20.194.5.96:35493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/v4.php"] [unique_id "aryzqU5Phls--iYlcKgr5QAAAQo"]
[Wed Sep 30 01:00:57.799197 2026] [security2:error] [pid 186850:tid 187076] [client 216.244.66.239:52334] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/deil-karnegi-audioknigi-iazyk-uspekha.xml"] [unique_id "aryzqU5Phls--iYlcKgr6gAAAWo"]
[Wed Sep 30 01:00:57.799279 2026] [security2:error] [pid 186850:tid 187076] [client 216.244.66.239:52334] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/deil-karnegi-audioknigi-iazyk-uspekha.xml"] [unique_id "aryzqU5Phls--iYlcKgr6gAAAWo"]
[Wed Sep 30 01:00:57.806648 2026] [security2:error] [pid 186850:tid 186944] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzqU5Phls--iYlcKgr7AABb10"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D247229
[Wed Sep 30 01:00:57.806668 2026] [security2:error] [pid 186850:tid 186944] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzqU5Phls--iYlcKgr7AABb10"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D247229
[Wed Sep 30 01:00:57.829912 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.830198 2026] [access_compat:error] [pid 186850:tid 187085] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.837024 2026] [security2:error] [pid 186850:tid 187028] [client 4.196.65.241:19125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/chfjgjn.php"] [unique_id "aryzqU5Phls--iYlcKgr7gAAATo"]
[Wed Sep 30 01:00:57.851350 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:57.851619 2026] [access_compat:error] [pid 186850:tid 187032] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:57.861583 2026] [security2:error] [pid 186850:tid 186991] [client 62.3.6.188:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzqU5Phls--iYlcKgr8AAAARU"]
[Wed Sep 30 01:00:57.925535 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:57.925982 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:57.942908 2026] [security2:error] [pid 186850:tid 187098] [client 187.180.212.42:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzqU5Phls--iYlcKgr9QAAAYA"]
[Wed Sep 30 01:00:57.943115 2026] [security2:error] [pid 186850:tid 187065] [client 52.231.69.245:13462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryzqU5Phls--iYlcKgr9AAAAV8"]
[Wed Sep 30 01:00:58.012119 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.012386 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.074780 2026] [security2:error] [pid 186850:tid 187070] [client 20.219.2.60:20045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/a5.php"] [unique_id "aryzqk5Phls--iYlcKgsBAAAAWQ"]
[Wed Sep 30 01:00:58.093370 2026] [security2:error] [pid 186850:tid 186992] [client 20.214.109.68:11259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/byypas.php"] [unique_id "aryzqk5Phls--iYlcKgsBQAAARY"]
[Wed Sep 30 01:00:58.106237 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.106514 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.117331 2026] [security2:error] [pid 186850:tid 187012] [client 103.168.67.253:38002] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzqk5Phls--iYlcKgsBwAAASo"]
[Wed Sep 30 01:00:58.197361 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.197677 2026] [access_compat:error] [pid 186850:tid 187029] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.202150 2026] [security2:error] [pid 186850:tid 186986] [client 190.115.90.140:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzqk5Phls--iYlcKgsDgAAARA"]
[Wed Sep 30 01:00:58.235553 2026] [security2:error] [pid 186850:tid 187094] [client 20.194.5.96:8940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/sallu.php"] [unique_id "aryzqk5Phls--iYlcKgsEAAAAXw"]
[Wed Sep 30 01:00:58.291801 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.292258 2026] [access_compat:error] [pid 186850:tid 187031] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.310192 2026] [security2:error] [pid 186850:tid 187048] [client 52.231.69.245:13342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/termps.php"] [unique_id "aryzqk5Phls--iYlcKgsEwAAAU4"]
[Wed Sep 30 01:00:58.343505 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:58.343757 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:00:58.377802 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.378080 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.404533 2026] [security2:error] [pid 186850:tid 187049] [client 20.194.5.96:35641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/albin.php"] [unique_id "aryzqk5Phls--iYlcKgsHwAAAU8"]
[Wed Sep 30 01:00:58.405260 2026] [access_compat:error] [pid 186850:tid 186961] [remote 17.166.151.25:33770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.405553 2026] [access_compat:error] [pid 186850:tid 186961] [remote 17.166.151.25:33770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.410516 2026] [security2:error] [pid 186850:tid 187055] [client 85.203.36.107:38877] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/goods.php"] [unique_id "aryzqk5Phls--iYlcKgsIQAAAVU"]
[Wed Sep 30 01:00:58.467912 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.468176 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.497259 2026] [security2:error] [pid 186850:tid 187104] [client 20.219.2.60:18864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzqk5Phls--iYlcKgsKwAAAYY"]
[Wed Sep 30 01:00:58.563086 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.563363 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.581801 2026] [security2:error] [pid 186850:tid 187106] [client 20.219.2.60:19564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/amp.php"] [unique_id "aryzqk5Phls--iYlcKgsNAAAAYg"]
[Wed Sep 30 01:00:58.655103 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.655435 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.668920 2026] [security2:error] [pid 186850:tid 187069] [client 20.70.173.30:63663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/users.php"] [unique_id "aryzqk5Phls--iYlcKgsPAAAAWM"]
[Wed Sep 30 01:00:58.697980 2026] [security2:error] [pid 186850:tid 187070] [client 20.214.109.68:11207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/b.php"] [unique_id "aryzqk5Phls--iYlcKgsPwAAAWQ"]
[Wed Sep 30 01:00:58.816617 2026] [security2:error] [pid 186850:tid 186998] [client 20.194.5.96:35519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/atkno.php"] [unique_id "aryzqk5Phls--iYlcKgsSQAAARw"]
[Wed Sep 30 01:00:58.835871 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.836141 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.890873 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.891161 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:58.899198 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:58.899482 2026] [access_compat:error] [pid 186850:tid 187040] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:00:58.926578 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:58.927517 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.017334 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.017597 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.031928 2026] [security2:error] [pid 186850:tid 187090] [client 52.231.69.245:13443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/brand.php"] [unique_id "aryzq05Phls--iYlcKgsXgAAAXg"]
[Wed Sep 30 01:00:59.047349 2026] [security2:error] [pid 186850:tid 187084] [client 20.219.2.60:19506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/abrand.php"] [unique_id "aryzq05Phls--iYlcKgsXwAAAXI"]
[Wed Sep 30 01:00:59.073337 2026] [security2:error] [pid 186850:tid 187052] [client 37.41.16.35:58980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsYAAAAVI"]
[Wed Sep 30 01:00:59.073446 2026] [security2:error] [pid 186850:tid 187052] [client 37.41.16.35:58980] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsYAAAAVI"]
[Wed Sep 30 01:00:59.087953 2026] [security2:error] [pid 186850:tid 186911] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzq05Phls--iYlcKgsYQABXDw"], referer: https://forum.torquayfans.com/viewtopic.php?start=330&t=9562
[Wed Sep 30 01:00:59.087992 2026] [security2:error] [pid 186850:tid 186911] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzq05Phls--iYlcKgsYQABXDw"], referer: https://forum.torquayfans.com/viewtopic.php?start=330&t=9562
[Wed Sep 30 01:00:59.108165 2026] [security2:error] [pid 186850:tid 187068] [client 4.240.25.22:33223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzq05Phls--iYlcKgsYwAAAWI"]
[Wed Sep 30 01:00:59.108472 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.108724 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.165256 2026] [security2:error] [pid 186850:tid 186991] [client 20.194.5.96:8902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/ops.php"] [unique_id "aryzq05Phls--iYlcKgsagAAARU"]
[Wed Sep 30 01:00:59.174832 2026] [security2:error] [pid 186850:tid 187101] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzqk5Phls--iYlcKgsWQAAAYM"]
[Wed Sep 30 01:00:59.177397 2026] [security2:error] [pid 186850:tid 187051] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/support"] [unique_id "aryzqk5Phls--iYlcKgsVQAAAVE"]
[Wed Sep 30 01:00:59.199779 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.200094 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.256020 2026] [security2:error] [pid 186850:tid 187037] [client 45.236.149.153:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzq05Phls--iYlcKgscwAAAUM"]
[Wed Sep 30 01:00:59.258459 2026] [security2:error] [pid 186850:tid 187072] [client 20.214.109.68:11159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws49.php"] [unique_id "aryzq05Phls--iYlcKgsdAAAAWY"]
[Wed Sep 30 01:00:59.292186 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.292600 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.314189 2026] [security2:error] [pid 186850:tid 187086] [client 104.208.65.139:43359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/1xmomo.php"] [unique_id "aryzq05Phls--iYlcKgseAAAAXQ"]
[Wed Sep 30 01:00:59.346796 2026] [security2:error] [pid 186850:tid 187073] [client 103.159.192.142:56456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsegAAAWc"]
[Wed Sep 30 01:00:59.346999 2026] [security2:error] [pid 186850:tid 187073] [client 103.159.192.142:56456] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsegAAAWc"]
[Wed Sep 30 01:00:59.360382 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:59.360657 2026] [access_compat:error] [pid 186850:tid 187070] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:00:59.380505 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.380774 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.434012 2026] [security2:error] [pid 186850:tid 186985] [client 20.194.5.96:35513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/gptsh.php"] [unique_id "aryzq05Phls--iYlcKgshQAAAQ8"]
[Wed Sep 30 01:00:59.462386 2026] [security2:error] [pid 186850:tid 186999] [client 20.194.30.107:17416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/log.php"] [unique_id "aryzq05Phls--iYlcKgshwAAAR0"]
[Wed Sep 30 01:00:59.471470 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.471739 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.475970 2026] [security2:error] [pid 186850:tid 187078] [client 182.69.182.151:8304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsiQAAAWw"]
[Wed Sep 30 01:00:59.476081 2026] [security2:error] [pid 186850:tid 187078] [client 182.69.182.151:8304] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsiQAAAWw"]
[Wed Sep 30 01:00:59.532885 2026] [security2:error] [pid 186850:tid 187036] [client 223.181.60.167:3785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsiwAAAUI"]
[Wed Sep 30 01:00:59.533130 2026] [security2:error] [pid 186850:tid 187036] [client 223.181.60.167:3785] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsiwAAAUI"]
[Wed Sep 30 01:00:59.536530 2026] [security2:error] [pid 186850:tid 187087] [client 20.219.2.60:19538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/init.php"] [unique_id "aryzq05Phls--iYlcKgsjAAAAXU"]
[Wed Sep 30 01:00:59.563873 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.564151 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.581682 2026] [security2:error] [pid 186850:tid 187029] [client 49.36.41.37:60517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsjgAAATs"]
[Wed Sep 30 01:00:59.581761 2026] [security2:error] [pid 186850:tid 187029] [client 49.36.41.37:60517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzq05Phls--iYlcKgsjgAAATs"]
[Wed Sep 30 01:00:59.652777 2026] [security2:error] [pid 186850:tid 187042] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/"] [unique_id "aryzq05Phls--iYlcKgslgAAAUg"]
[Wed Sep 30 01:00:59.652794 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.653068 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.680302 2026] [security2:error] [pid 186850:tid 186933] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzq05Phls--iYlcKgsmwABJlI"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=244846
[Wed Sep 30 01:00:59.680333 2026] [security2:error] [pid 186850:tid 186933] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzq05Phls--iYlcKgsmwABJlI"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=244846
[Wed Sep 30 01:00:59.693554 2026] [security2:error] [pid 186850:tid 187052] [client 20.194.5.96:61765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/mac.php"] [unique_id "aryzq05Phls--iYlcKgsnQAAAVI"]
[Wed Sep 30 01:00:59.744822 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.745100 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.776159 2026] [security2:error] [pid 186850:tid 187100] [client 20.214.109.68:11200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-blog-header.php"] [unique_id "aryzq05Phls--iYlcKgspwAAAYI"]
[Wed Sep 30 01:00:59.813122 2026] [security2:error] [pid 186850:tid 187037] [client 52.231.69.245:49095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/atomlib.php"] [unique_id "aryzq05Phls--iYlcKgsqgAAAUM"]
[Wed Sep 30 01:00:59.836803 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.837149 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.856023 2026] [access_compat:error] [pid 186850:tid 186937] [remote 17.166.150.241:59020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.856303 2026] [access_compat:error] [pid 186850:tid 186937] [remote 17.166.150.241:59020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.862067 2026] [security2:error] [pid 186850:tid 187026] [client 4.240.25.22:18759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/new.php"] [unique_id "aryzq05Phls--iYlcKgsrQAAATg"]
[Wed Sep 30 01:00:59.869058 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:59.869319 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:00:59.881214 2026] [security2:error] [pid 186850:tid 187033] [client 85.203.36.117:29249] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/wp-editor.php"] [unique_id "aryzq05Phls--iYlcKgsrwAAAT8"]
[Wed Sep 30 01:00:59.927738 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:00:59.928054 2026] [access_compat:error] [pid 186850:tid 187081] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:00:59.992781 2026] [security2:error] [pid 186850:tid 187073] [client 20.219.2.60:19544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gettest.php"] [unique_id "aryzq05Phls--iYlcKgsuQAAAWc"]
[Wed Sep 30 01:01:00.001728 2026] [security2:error] [pid 186850:tid 187065] [client 93.152.47.19:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzq05Phls--iYlcKgsugAAAV8"]
[Wed Sep 30 01:01:00.018066 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.018323 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.055717 2026] [security2:error] [pid 186850:tid 187043] [client 104.208.65.139:19322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/almafkew.php"] [unique_id "aryzrE5Phls--iYlcKgsvQAAAUk"]
[Wed Sep 30 01:01:00.064234 2026] [security2:error] [pid 186850:tid 187063] [client 4.240.25.22:8396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/BDKR28WP.php"] [unique_id "aryzrE5Phls--iYlcKgsvgAAAV0"]
[Wed Sep 30 01:01:00.108486 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.108741 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.169152 2026] [security2:error] [pid 186850:tid 187102] [client 4.240.25.22:33312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "aryzrE5Phls--iYlcKgswAAAAYQ"]
[Wed Sep 30 01:01:00.199822 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.200094 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.235949 2026] [security2:error] [pid 186850:tid 187084] [client 223.181.30.165:9110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgsyAAAAXI"]
[Wed Sep 30 01:01:00.236305 2026] [security2:error] [pid 186850:tid 187084] [client 223.181.30.165:9110] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgsyAAAAXI"]
[Wed Sep 30 01:01:00.291065 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.291335 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.319985 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.96.176:25504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/run.php"] [unique_id "aryzrE5Phls--iYlcKgs0AAAATs"]
[Wed Sep 30 01:01:00.372076 2026] [security2:error] [pid 186850:tid 187055] [client 20.194.5.96:57924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/myglu.php"] [unique_id "aryzrE5Phls--iYlcKgs1AAAAVU"]
[Wed Sep 30 01:01:00.373764 2026] [security2:error] [pid 186850:tid 186898] [remote 47.128.119.175:48716] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "www.rhodaalbert.com"] [uri "/robots.txt"] [unique_id "aryzrE5Phls--iYlcKgs1QABSC8"]
[Wed Sep 30 01:01:00.376430 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:00.376674 2026] [access_compat:error] [pid 186850:tid 187014] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:00.378406 2026] [security2:error] [pid 186850:tid 187044] [client 4.196.65.241:53057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wdone1.php"] [unique_id "aryzrE5Phls--iYlcKgs1wAAAUo"]
[Wed Sep 30 01:01:00.383080 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.383330 2026] [access_compat:error] [pid 186850:tid 187009] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.407190 2026] [security2:error] [pid 186850:tid 187089] [client 103.241.204.139:61695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs2wAAAXc"]
[Wed Sep 30 01:01:00.407284 2026] [security2:error] [pid 186850:tid 187089] [client 103.241.204.139:61695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs2wAAAXc"]
[Wed Sep 30 01:01:00.447274 2026] [security2:error] [pid 186850:tid 187032] [client 106.214.3.140:10103] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs0gAAAT4"]
[Wed Sep 30 01:01:00.447459 2026] [security2:error] [pid 186850:tid 187032] [client 106.214.3.140:10103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs0gAAAT4"]
[Wed Sep 30 01:01:00.465522 2026] [security2:error] [pid 186850:tid 187050] [client 20.219.2.60:20198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/myfile.php"] [unique_id "aryzrE5Phls--iYlcKgs3wAAAVA"]
[Wed Sep 30 01:01:00.474373 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.474638 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.499970 2026] [security2:error] [pid 186850:tid 187104] [client 20.194.5.96:35735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/rithin.php"] [unique_id "aryzrE5Phls--iYlcKgs4gAAAYY"]
[Wed Sep 30 01:01:00.533623 2026] [security2:error] [pid 186850:tid 187068] [client 149.19.253.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzrE5Phls--iYlcKgs5AAAAWI"]
[Wed Sep 30 01:01:00.563750 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.564023 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.572368 2026] [security2:error] [pid 186850:tid 187072] [client 20.214.109.68:11198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bgymj.php"] [unique_id "aryzrE5Phls--iYlcKgs6gAAAWY"]
[Wed Sep 30 01:01:00.656648 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.656925 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.664307 2026] [security2:error] [pid 186850:tid 187024] [client 150.107.232.159:35680] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs8wAAATY"]
[Wed Sep 30 01:01:00.665463 2026] [security2:error] [pid 186850:tid 187024] [client 150.107.232.159:35680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzrE5Phls--iYlcKgs8wAAATY"]
[Wed Sep 30 01:01:00.746479 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.746748 2026] [access_compat:error] [pid 186850:tid 186993] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.809674 2026] [security2:error] [pid 186850:tid 187063] [client 103.168.67.253:43076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzrE5Phls--iYlcKgs-gAAAV0"]
[Wed Sep 30 01:01:00.839006 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.839294 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.862899 2026] [security2:error] [pid 186850:tid 187058] [client 45.138.12.32:34474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.aez.yrw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzrE5Phls--iYlcKgtAQAAAVg"]
[Wed Sep 30 01:01:00.870725 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:00.871009 2026] [access_compat:error] [pid 186850:tid 187102] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:00.884901 2026] [security2:error] [pid 186850:tid 187070] [client 52.231.69.245:13471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/product.php"] [unique_id "aryzrE5Phls--iYlcKgtBgAAAWQ"]
[Wed Sep 30 01:01:00.929046 2026] [security2:error] [pid 186850:tid 187083] [client 114.119.130.32:62223] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cityofmarional.com"] [uri "/mc-events/marion-vfw-post-5104/"] [unique_id "aryzrE5Phls--iYlcKgtCgAAAXE"], referer: https://cityofmarional.com/mc-events/marion-vfw-post-5104/?mc_id=2363
[Wed Sep 30 01:01:00.929086 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:00.929346 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:00.947405 2026] [security2:error] [pid 186850:tid 187020] [client 20.219.2.60:20188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/sid3.php"] [unique_id "aryzrE5Phls--iYlcKgtCwAAATI"]
[Wed Sep 30 01:01:00.964879 2026] [security2:error] [pid 186850:tid 187047] [client 20.194.30.107:17505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-the.php"] [unique_id "aryzrE5Phls--iYlcKgtDAAAAU0"]
[Wed Sep 30 01:01:01.020874 2026] [security2:error] [pid 186850:tid 187015] [client 104.208.65.139:48866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/database2.php"] [unique_id "aryzrU5Phls--iYlcKgtEgAAAS0"]
[Wed Sep 30 01:01:01.022043 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.022336 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:18401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.060615 2026] [security2:error] [pid 186850:tid 187099] [client 4.240.25.22:8508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dehnl.php"] [unique_id "aryzrU5Phls--iYlcKgtFQAAAYE"]
[Wed Sep 30 01:01:01.111999 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.112252 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.169774 2026] [security2:error] [pid 186850:tid 187051] [client 20.194.5.96:42643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/aboutt.php"] [unique_id "aryzrU5Phls--iYlcKgtHQAAAVE"]
[Wed Sep 30 01:01:01.194291 2026] [security2:error] [pid 186850:tid 187076] [client 52.231.69.245:13450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/function.php"] [unique_id "aryzrU5Phls--iYlcKgtHgAAAWo"]
[Wed Sep 30 01:01:01.254568 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.254840 2026] [access_compat:error] [pid 186850:tid 187094] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.293222 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.293435 2026] [access_compat:error] [pid 186850:tid 186872] [remote 17.166.155.69:53002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.293497 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.293708 2026] [access_compat:error] [pid 186850:tid 186872] [remote 17.166.155.69:53002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.382838 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.383110 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.384101 2026] [access_compat:error] [pid 186850:tid 187034] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:01.384372 2026] [access_compat:error] [pid 186850:tid 187034] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:01.398263 2026] [security2:error] [pid 186850:tid 187004] [client 20.194.5.96:35757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/il.php"] [unique_id "aryzrU5Phls--iYlcKgtLgAAASI"]
[Wed Sep 30 01:01:01.425460 2026] [security2:error] [pid 186850:tid 187093] [client 223.235.102.107:30519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzrU5Phls--iYlcKgtMgAAAXs"]
[Wed Sep 30 01:01:01.425594 2026] [security2:error] [pid 186850:tid 187093] [client 223.235.102.107:30519] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzrU5Phls--iYlcKgtMgAAAXs"]
[Wed Sep 30 01:01:01.429689 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:20170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/666.php"] [unique_id "aryzrU5Phls--iYlcKgtNQAAAXk"]
[Wed Sep 30 01:01:01.470865 2026] [security2:error] [pid 186850:tid 187102] [client 20.214.109.68:11078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gfd.php"] [unique_id "aryzrU5Phls--iYlcKgtOgAAAYQ"]
[Wed Sep 30 01:01:01.474408 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.474661 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.481525 2026] [security2:error] [pid 186850:tid 187043] [client 52.231.69.245:13658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/0x.php"] [unique_id "aryzrU5Phls--iYlcKgtOwAAAUk"]
[Wed Sep 30 01:01:01.491902 2026] [security2:error] [pid 186850:tid 187070] [client 152.39.169.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryzrU5Phls--iYlcKgtPAAAAWQ"]
[Wed Sep 30 01:01:01.570797 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.571201 2026] [access_compat:error] [pid 186850:tid 187060] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.572508 2026] [security2:error] [pid 186850:tid 186952] [remote 57.141.0.69:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.0.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.favaleconnection.com"] [uri "/Malvaro/geography.php"] [unique_id "aryzrU5Phls--iYlcKgtPgABMWU"]
[Wed Sep 30 01:01:01.595330 2026] [security2:error] [pid 186850:tid 187097] [client 20.194.30.107:17538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/baba.php"] [unique_id "aryzrU5Phls--iYlcKgtRAAAAX8"]
[Wed Sep 30 01:01:01.658345 2026] [security2:error] [pid 186850:tid 186936] [remote 143.14.6.8:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzrU5Phls--iYlcKgtRgABVVU"]
[Wed Sep 30 01:01:01.658381 2026] [security2:error] [pid 186850:tid 186936] [remote 143.14.6.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzrU5Phls--iYlcKgtRgABVVU"]
[Wed Sep 30 01:01:01.661077 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.661499 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.748441 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.748904 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.843845 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.844128 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.850848 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:01.851268 2026] [access_compat:error] [pid 186850:tid 187008] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:01.856480 2026] [security2:error] [pid 186850:tid 187095] [client 103.168.67.253:43102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzrU5Phls--iYlcKgtVAAAAX0"]
[Wed Sep 30 01:01:01.883252 2026] [security2:error] [pid 186850:tid 186984] [client 85.203.36.98:48043] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/lufix.php"] [unique_id "aryzrU5Phls--iYlcKgtVgAAAQ4"]
[Wed Sep 30 01:01:01.900731 2026] [security2:error] [pid 186850:tid 187072] [client 20.219.2.60:19528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/xxw.php"] [unique_id "aryzrU5Phls--iYlcKgtWgAAAWY"]
[Wed Sep 30 01:01:01.929247 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:01.929509 2026] [access_compat:error] [pid 186850:tid 187098] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:01.979791 2026] [security2:error] [pid 186850:tid 187024] [client 51.199.15.224:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzrU5Phls--iYlcKgtZwAAATY"]
[Wed Sep 30 01:01:02.002072 2026] [security2:error] [pid 186850:tid 187107] [client 20.194.96.176:2352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/vpn.php"] [unique_id "aryzrk5Phls--iYlcKgtawAAAYk"]
[Wed Sep 30 01:01:02.005148 2026] [security2:error] [pid 186850:tid 187039] [client 52.231.69.245:13675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/index.php"] [unique_id "aryzrk5Phls--iYlcKgtbAAAAUU"]
[Wed Sep 30 01:01:02.024202 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.024597 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.026332 2026] [security2:error] [pid 186850:tid 187004] [client 20.214.109.68:11234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/callback.php"] [unique_id "aryzrk5Phls--iYlcKgtcAAAASI"]
[Wed Sep 30 01:01:02.113428 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.113702 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.165583 2026] [security2:error] [pid 186850:tid 186909] [remote 143.14.6.8:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzrk5Phls--iYlcKgtdAABcTo"], referer: https://www.torquayfans.com/memberlist.php?first_char=a&start=50
[Wed Sep 30 01:01:02.208676 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.209083 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.241015 2026] [security2:error] [pid 186850:tid 187053] [client 4.196.65.241:19511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/83a907c742index.php"] [unique_id "aryzrk5Phls--iYlcKgtfAAAAVM"]
[Wed Sep 30 01:01:02.250954 2026] [security2:error] [pid 186850:tid 186900] [remote 57.141.14.107:26266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "aryzrk5Phls--iYlcKgtfQABMDE"]
[Wed Sep 30 01:01:02.290185 2026] [security2:error] [pid 186850:tid 187041] [client 193.203.15.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "aryzrU5Phls--iYlcKgtaQAAAUc"]
[Wed Sep 30 01:01:02.298364 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.298802 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.299779 2026] [security2:error] [pid 186850:tid 187036] [client 193.203.15.134:58486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kentraneotitas.org"] [uri "/help"] [unique_id "aryzrU5Phls--iYlcKgtZAAAAUI"]
[Wed Sep 30 01:01:02.348528 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:02.348835 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:02.354175 2026] [security2:error] [pid 186850:tid 187096] [client 20.219.2.60:19398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzrk5Phls--iYlcKgtiwAAAX4"]
[Wed Sep 30 01:01:02.387434 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.387733 2026] [access_compat:error] [pid 186850:tid 187104] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.390547 2026] [security2:error] [pid 186850:tid 187079] [client 20.219.2.60:20180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-png.php"] [unique_id "aryzrk5Phls--iYlcKgtjQAAAW0"]
[Wed Sep 30 01:01:02.394402 2026] [security2:error] [pid 186850:tid 186981] [client 103.172.210.103:51550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzrk5Phls--iYlcKgtjwAAAQs"]
[Wed Sep 30 01:01:02.394539 2026] [security2:error] [pid 186850:tid 186981] [client 103.172.210.103:51550] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzrk5Phls--iYlcKgtjwAAAQs"]
[Wed Sep 30 01:01:02.453493 2026] [security2:error] [pid 186850:tid 187044] [client 45.138.12.32:34612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.masielectric.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzrk5Phls--iYlcKgtkwAAAUo"]
[Wed Sep 30 01:01:02.464686 2026] [security2:error] [pid 186850:tid 187054] [client 52.231.69.245:13467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryzrk5Phls--iYlcKgtlAAAAVQ"]
[Wed Sep 30 01:01:02.479060 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.479320 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.510427 2026] [security2:error] [pid 186850:tid 186996] [client 122.173.27.10:10268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzrk5Phls--iYlcKgtlgAAARo"]
[Wed Sep 30 01:01:02.510557 2026] [security2:error] [pid 186850:tid 186996] [client 122.173.27.10:10268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzrk5Phls--iYlcKgtlgAAARo"]
[Wed Sep 30 01:01:02.548469 2026] [security2:error] [pid 186850:tid 187100] [client 20.194.5.96:42657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wp-whe.php"] [unique_id "aryzrk5Phls--iYlcKgtlwAAAYI"]
[Wed Sep 30 01:01:02.571529 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.571979 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.661836 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.662107 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.677508 2026] [security2:error] [pid 186850:tid 187034] [client 104.208.65.139:12176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/aa.php"] [unique_id "aryzrk5Phls--iYlcKgtoQAAAUA"]
[Wed Sep 30 01:01:02.721975 2026] [security2:error] [pid 186850:tid 187026] [client 20.194.5.96:35494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/1klopedf.php"] [unique_id "aryzrk5Phls--iYlcKgtogAAATg"]
[Wed Sep 30 01:01:02.752472 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.752775 2026] [access_compat:error] [pid 186850:tid 186982] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.764352 2026] [security2:error] [pid 186850:tid 186986] [client 52.231.69.245:49148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/classwithtostring.php"] [unique_id "aryzrk5Phls--iYlcKgtpAAAARA"]
[Wed Sep 30 01:01:02.781539 2026] [security2:error] [pid 186850:tid 187040] [client 213.136.69.135:54989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-textdomain-registry.php"] [unique_id "aryzrk5Phls--iYlcKgtpwAAAUY"], referer: binance.com
[Wed Sep 30 01:01:02.796346 2026] [security2:error] [pid 186850:tid 186993] [client 20.194.96.176:59662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/alfa.php"] [unique_id "aryzrk5Phls--iYlcKgtqQAAARc"]
[Wed Sep 30 01:01:02.840777 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.841068 2026] [access_compat:error] [pid 186850:tid 187002] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.852335 2026] [security2:error] [pid 186850:tid 187019] [client 96.43.168.161:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryzrk5Phls--iYlcKgtswAAATE"]
[Wed Sep 30 01:01:02.864738 2026] [security2:error] [pid 186850:tid 187028] [client 20.219.2.60:19505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/222.php"] [unique_id "aryzrk5Phls--iYlcKgttAAAATo"]
[Wed Sep 30 01:01:02.877065 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:02.877331 2026] [access_compat:error] [pid 186850:tid 187036] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:02.932162 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:02.932509 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:02.955956 2026] [security2:error] [pid 186850:tid 186988] [client 20.214.109.68:11085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/file.php"] [unique_id "aryzrk5Phls--iYlcKgtvQAAARI"]
[Wed Sep 30 01:01:02.992434 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzrk5Phls--iYlcKgtvgABdns"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D266343
[Wed Sep 30 01:01:02.992462 2026] [security2:error] [pid 186850:tid 186974] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzrk5Phls--iYlcKgtvgABdns"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D266343
[Wed Sep 30 01:01:03.031151 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.031433 2026] [access_compat:error] [pid 186850:tid 186989] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.063851 2026] [security2:error] [pid 186850:tid 187106] [client 4.240.25.22:33335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/xiugai.php"] [unique_id "aryzr05Phls--iYlcKgtwwAAAYg"]
[Wed Sep 30 01:01:03.115075 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.115342 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.121005 2026] [security2:error] [pid 186850:tid 187095] [client 20.194.5.96:35470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/zv.php"] [unique_id "aryzr05Phls--iYlcKgtxgAAAX0"]
[Wed Sep 30 01:01:03.206215 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.206494 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.249029 2026] [security2:error] [pid 186850:tid 187047] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzr05Phls--iYlcKgtzwAAAU0"]
[Wed Sep 30 01:01:03.262975 2026] [security2:error] [pid 186850:tid 187004] [client 52.231.69.245:13334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/dropdown.php"] [unique_id "aryzr05Phls--iYlcKgt0AAAASI"]
[Wed Sep 30 01:01:03.269453 2026] [security2:error] [pid 186850:tid 187094] [client 4.196.65.241:2089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/c3c427fa59.php"] [unique_id "aryzr05Phls--iYlcKgt0wAAAXw"]
[Wed Sep 30 01:01:03.292040 2026] [security2:error] [pid 186850:tid 187020] [client 49.43.163.212:53469] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKgt1gAAATI"]
[Wed Sep 30 01:01:03.292152 2026] [security2:error] [pid 186850:tid 187020] [client 49.43.163.212:53469] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKgt1gAAATI"]
[Wed Sep 30 01:01:03.296405 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.296669 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.343547 2026] [security2:error] [pid 186850:tid 187069] [client 20.219.2.60:19491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-blog.php"] [unique_id "aryzr05Phls--iYlcKgt3AAAAWM"]
[Wed Sep 30 01:01:03.349191 2026] [access_compat:error] [pid 186850:tid 186982] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:03.349458 2026] [access_compat:error] [pid 186850:tid 186982] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:03.355504 2026] [security2:error] [pid 186850:tid 187058] [client 20.194.5.96:8920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/ssixta.php"] [unique_id "aryzr05Phls--iYlcKgt3QAAAVg"]
[Wed Sep 30 01:01:03.388466 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.388753 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.439929 2026] [security2:error] [pid 186850:tid 187042] [client 104.208.65.139:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/pJPoKA.php"] [unique_id "aryzr05Phls--iYlcKgt5QAAAUg"]
[Wed Sep 30 01:01:03.479837 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.480123 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.496969 2026] [security2:error] [pid 186850:tid 187028] [client 4.240.25.22:8941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cgi-bin/admin.php"] [unique_id "aryzr05Phls--iYlcKgt6QAAATo"]
[Wed Sep 30 01:01:03.527462 2026] [security2:error] [pid 186850:tid 187053] [client 4.240.25.22:20291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/CAE-2.5.php"] [unique_id "aryzr05Phls--iYlcKgt6wAAAVM"]
[Wed Sep 30 01:01:03.532576 2026] [security2:error] [pid 186850:tid 187071] [client 216.244.66.239:52354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/kartinki-ovoshchi-dlia-detei-cherno-belye.xml"] [unique_id "aryzr05Phls--iYlcKgt7AAAAWU"]
[Wed Sep 30 01:01:03.532714 2026] [security2:error] [pid 186850:tid 187071] [client 216.244.66.239:52354] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/kartinki-ovoshchi-dlia-detei-cherno-belye.xml"] [unique_id "aryzr05Phls--iYlcKgt7AAAAWU"]
[Wed Sep 30 01:01:03.571754 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.572076 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.600429 2026] [security2:error] [pid 186850:tid 187021] [client 20.194.5.96:35502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/zv.update.php"] [unique_id "aryzr05Phls--iYlcKgt8AAAATM"]
[Wed Sep 30 01:01:03.602237 2026] [security2:error] [pid 186850:tid 186999] [client 52.231.69.245:49109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/moon.php"] [unique_id "aryzr05Phls--iYlcKgt8QAAAR0"]
[Wed Sep 30 01:01:03.613202 2026] [security2:error] [pid 186850:tid 187096] [client 20.194.30.107:25858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/100.php"] [unique_id "aryzr05Phls--iYlcKgt8gAAAX4"]
[Wed Sep 30 01:01:03.618911 2026] [security2:error] [pid 186850:tid 187051] [client 155.190.6.18:47070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKgt9AAAAVE"]
[Wed Sep 30 01:01:03.619068 2026] [security2:error] [pid 186850:tid 187051] [client 155.190.6.18:47070] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKgt9AAAAVE"]
[Wed Sep 30 01:01:03.662931 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.663206 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.672525 2026] [security2:error] [pid 186850:tid 187033] [client 20.214.109.68:11250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bolt.php"] [unique_id "aryzr05Phls--iYlcKgt9wAAAT8"]
[Wed Sep 30 01:01:03.688956 2026] [security2:error] [pid 186850:tid 186988] [client 45.138.12.32:34604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.aho.vlz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzr05Phls--iYlcKgt-QAAARI"]
[Wed Sep 30 01:01:03.754200 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.754563 2026] [access_compat:error] [pid 186850:tid 187080] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.819162 2026] [security2:error] [pid 186850:tid 187044] [client 20.219.2.60:58567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryzr05Phls--iYlcKguAwAAAUo"]
[Wed Sep 30 01:01:03.833936 2026] [security2:error] [pid 186850:tid 187006] [client 116.193.128.26:55705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKguBQAAASQ"]
[Wed Sep 30 01:01:03.834086 2026] [security2:error] [pid 186850:tid 187006] [client 116.193.128.26:55705] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKguBQAAASQ"]
[Wed Sep 30 01:01:03.836715 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.5.96:8366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/tesla.php"] [unique_id "aryzr05Phls--iYlcKguBgAAAQ0"]
[Wed Sep 30 01:01:03.843683 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.843968 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.849298 2026] [security2:error] [pid 186850:tid 187014] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzr05Phls--iYlcKguCQAAASw"]
[Wed Sep 30 01:01:03.876544 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:03.876832 2026] [access_compat:error] [pid 186850:tid 186996] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:03.897105 2026] [security2:error] [pid 186850:tid 186995] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzr05Phls--iYlcKguDQAAARk"]
[Wed Sep 30 01:01:03.936198 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:03.936484 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:03.945325 2026] [security2:error] [pid 186850:tid 187000] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzr05Phls--iYlcKguEQAAAR4"]
[Wed Sep 30 01:01:03.969511 2026] [security2:error] [pid 186850:tid 187102] [client 152.59.165.7:62187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKguEwAAAYQ"]
[Wed Sep 30 01:01:03.969608 2026] [security2:error] [pid 186850:tid 187102] [client 152.59.165.7:62187] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzr05Phls--iYlcKguEwAAAYQ"]
[Wed Sep 30 01:01:03.992679 2026] [security2:error] [pid 186850:tid 187034] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzr05Phls--iYlcKguGAAAAUA"]
[Wed Sep 30 01:01:04.023285 2026] [security2:error] [pid 186850:tid 187087] [client 103.159.192.142:56950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguIwAAAXU"]
[Wed Sep 30 01:01:04.023466 2026] [security2:error] [pid 186850:tid 187087] [client 103.159.192.142:56950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguIwAAAXU"]
[Wed Sep 30 01:01:04.038025 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.038480 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.041901 2026] [security2:error] [pid 186850:tid 187001] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzsE5Phls--iYlcKguJgAAAR8"]
[Wed Sep 30 01:01:04.069070 2026] [security2:error] [pid 186850:tid 187025] [client 20.214.109.68:11251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-blogs.php"] [unique_id "aryzsE5Phls--iYlcKguKwAAATc"]
[Wed Sep 30 01:01:04.083580 2026] [security2:error] [pid 186850:tid 187019] [client 85.203.36.125:52185] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "crm.zekri-international.com"] [uri "/style.php"] [unique_id "aryzsE5Phls--iYlcKguLQAAATE"]
[Wed Sep 30 01:01:04.090467 2026] [security2:error] [pid 186850:tid 187060] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzsE5Phls--iYlcKguLgAAAVo"]
[Wed Sep 30 01:01:04.121947 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.122396 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.131154 2026] [security2:error] [pid 186850:tid 187032] [client 20.219.2.60:19420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ccs.php"] [unique_id "aryzsE5Phls--iYlcKguMAAAAT4"]
[Wed Sep 30 01:01:04.171009 2026] [security2:error] [pid 186850:tid 187038] [client 52.231.69.245:13676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/autoload_classmap.php"] [unique_id "aryzsE5Phls--iYlcKguMgAAAUQ"]
[Wed Sep 30 01:01:04.214817 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.215255 2026] [access_compat:error] [pid 186850:tid 187040] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.258697 2026] [security2:error] [pid 186850:tid 187009] [client 20.194.5.96:35714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/wquosqsi.php"] [unique_id "aryzsE5Phls--iYlcKguNgAAASc"]
[Wed Sep 30 01:01:04.299555 2026] [security2:error] [pid 186850:tid 187002] [client 20.219.2.60:19457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/lib.php"] [unique_id "aryzsE5Phls--iYlcKguOgAAASA"]
[Wed Sep 30 01:01:04.304318 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.304715 2026] [access_compat:error] [pid 186850:tid 187016] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.322038 2026] [security2:error] [pid 186850:tid 186989] [client 202.179.95.79:50487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguOwAAARM"]
[Wed Sep 30 01:01:04.322152 2026] [security2:error] [pid 186850:tid 186989] [client 202.179.95.79:50487] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguOwAAARM"]
[Wed Sep 30 01:01:04.383528 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:04.383794 2026] [access_compat:error] [pid 186850:tid 187023] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:04.391225 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.391508 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.459126 2026] [security2:error] [pid 186850:tid 187107] [client 203.122.45.246:54691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguSQAAAYk"]
[Wed Sep 30 01:01:04.459275 2026] [security2:error] [pid 186850:tid 187107] [client 203.122.45.246:54691] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguSQAAAYk"]
[Wed Sep 30 01:01:04.461497 2026] [security2:error] [pid 186850:tid 187008] [client 52.231.69.245:13689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/default.php"] [unique_id "aryzsE5Phls--iYlcKguSgAAASY"]
[Wed Sep 30 01:01:04.482198 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.482473 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.515658 2026] [security2:error] [pid 186850:tid 187000] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzsE5Phls--iYlcKguUQAAAR4"]
[Wed Sep 30 01:01:04.571783 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.572074 2026] [access_compat:error] [pid 186850:tid 187087] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.573220 2026] [security2:error] [pid 186850:tid 187054] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzsE5Phls--iYlcKguVgAAAVQ"]
[Wed Sep 30 01:01:04.600849 2026] [core:error] [pid 186850:tid 187079] [client 104.207.46.50:42829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:04.600879 2026] [core:error] [pid 186850:tid 187079] [client 104.207.46.50:42829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:04.618291 2026] [security2:error] [pid 186850:tid 187042] [client 20.214.109.68:11255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/zlnckdxn.php"] [unique_id "aryzsE5Phls--iYlcKguWQAAAUg"]
[Wed Sep 30 01:01:04.620231 2026] [security2:error] [pid 186850:tid 187045] [client 20.194.5.96:8363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/222.php"] [unique_id "aryzsE5Phls--iYlcKguWgAAAUs"]
[Wed Sep 30 01:01:04.628761 2026] [security2:error] [pid 186850:tid 187097] [client 103.168.67.253:43114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzsE5Phls--iYlcKguWwAAAX8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:04.665098 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.665369 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.762418 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.762879 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.769902 2026] [security2:error] [pid 186850:tid 186985] [client 20.219.2.60:20427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/edit.php"] [unique_id "aryzsE5Phls--iYlcKguYAAAAQ8"]
[Wed Sep 30 01:01:04.784293 2026] [security2:error] [pid 186850:tid 187072] [client 20.194.5.96:35595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/asset.php"] [unique_id "aryzsE5Phls--iYlcKguYwAAAWY"]
[Wed Sep 30 01:01:04.805449 2026] [security2:error] [pid 186850:tid 187093] [client 52.231.69.245:13495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryzsE5Phls--iYlcKguZQAAAXs"]
[Wed Sep 30 01:01:04.813934 2026] [security2:error] [pid 186850:tid 186999] [client 106.214.2.47:4489] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguZgAAAR0"]
[Wed Sep 30 01:01:04.820775 2026] [security2:error] [pid 186850:tid 186999] [client 106.214.2.47:4489] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzsE5Phls--iYlcKguZgAAAR0"]
[Wed Sep 30 01:01:04.852192 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.852647 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:04.886725 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:04.887014 2026] [access_compat:error] [pid 186850:tid 186990] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:04.937226 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:04.937501 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.028493 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.028805 2026] [access_compat:error] [pid 186850:tid 187033] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.110922 2026] [security2:error] [pid 186850:tid 187046] [client 52.231.69.245:13638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/fucku.php"] [unique_id "aryzsU5Phls--iYlcKguegAAAUw"]
[Wed Sep 30 01:01:05.125550 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.125991 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.133710 2026] [security2:error] [pid 186850:tid 187106] [client 104.208.65.139:19289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/24.php"] [unique_id "aryzsU5Phls--iYlcKgufgAAAYg"]
[Wed Sep 30 01:01:05.142608 2026] [security2:error] [pid 186850:tid 186961] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzsU5Phls--iYlcKgufwABT24"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=279226
[Wed Sep 30 01:01:05.142642 2026] [security2:error] [pid 186850:tid 186961] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzsU5Phls--iYlcKgufwABT24"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=279226
[Wed Sep 30 01:01:05.173157 2026] [security2:error] [pid 186850:tid 187060] [client 116.72.182.19:58363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzsU5Phls--iYlcKgugAAAAVo"]
[Wed Sep 30 01:01:05.173305 2026] [security2:error] [pid 186850:tid 187060] [client 116.72.182.19:58363] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzsU5Phls--iYlcKgugAAAAVo"]
[Wed Sep 30 01:01:05.211344 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.211780 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.241724 2026] [security2:error] [pid 186850:tid 186982] [client 20.219.2.60:20067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ioxi-o.php"] [unique_id "aryzsU5Phls--iYlcKguggAAAQw"]
[Wed Sep 30 01:01:05.293355 2026] [security2:error] [pid 186850:tid 187044] [client 20.194.5.96:61767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/media.php"] [unique_id "aryzsU5Phls--iYlcKguhwAAAUo"]
[Wed Sep 30 01:01:05.300859 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.301310 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.326356 2026] [security2:error] [pid 186850:tid 187047] [client 20.219.2.60:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/set.php"] [unique_id "aryzsU5Phls--iYlcKguigAAAU0"]
[Wed Sep 30 01:01:05.387200 2026] [security2:error] [pid 186850:tid 187024] [client 52.231.69.245:49123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aryzsU5Phls--iYlcKgujgAAATY"]
[Wed Sep 30 01:01:05.397745 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.398066 2026] [access_compat:error] [pid 186850:tid 187069] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.399351 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:05.399624 2026] [access_compat:error] [pid 186850:tid 187011] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:05.401776 2026] [security2:error] [pid 186850:tid 186992] [client 20.194.96.176:56124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/w.php"] [unique_id "aryzsU5Phls--iYlcKgukQAAARY"]
[Wed Sep 30 01:01:05.422962 2026] [security2:error] [pid 186850:tid 186983] [client 20.194.5.96:35460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/cued.php"] [unique_id "aryzsU5Phls--iYlcKgukwAAAQ0"]
[Wed Sep 30 01:01:05.488731 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.489040 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.579337 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.579593 2026] [access_compat:error] [pid 186850:tid 187027] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.616949 2026] [security2:error] [pid 186850:tid 187088] [client 43.227.131.37:11233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzsU5Phls--iYlcKgungAAAXY"]
[Wed Sep 30 01:01:05.617140 2026] [security2:error] [pid 186850:tid 187088] [client 43.227.131.37:11233] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzsU5Phls--iYlcKgungAAAXY"]
[Wed Sep 30 01:01:05.645785 2026] [security2:error] [pid 186850:tid 187037] [client 20.214.109.68:11161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/fs6.php"] [unique_id "aryzsU5Phls--iYlcKgunwAAAUM"]
[Wed Sep 30 01:01:05.671432 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.671686 2026] [access_compat:error] [pid 186850:tid 187057] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.673626 2026] [security2:error] [pid 186850:tid 187063] [client 52.231.69.245:13472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/mail.php"] [unique_id "aryzsU5Phls--iYlcKguowAAAV0"]
[Wed Sep 30 01:01:05.736802 2026] [security2:error] [pid 186850:tid 186986] [client 20.219.2.60:19539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ajax.php"] [unique_id "aryzsU5Phls--iYlcKgupgAAARA"]
[Wed Sep 30 01:01:05.766050 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.766324 2026] [access_compat:error] [pid 186850:tid 187065] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.777404 2026] [security2:error] [pid 186850:tid 187067] [client 20.194.5.96:35514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/sd.php"] [unique_id "aryzsU5Phls--iYlcKgurAAAAWE"]
[Wed Sep 30 01:01:05.815381 2026] [security2:error] [pid 186850:tid 186988] [client 4.196.65.241:19474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/r5t.php"] [unique_id "aryzsU5Phls--iYlcKgutAAAARI"]
[Wed Sep 30 01:01:05.858338 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.858618 2026] [access_compat:error] [pid 186850:tid 187101] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.869881 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:05.870311 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:05.904365 2026] [security2:error] [pid 186850:tid 186984] [client 20.194.5.96:8944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/24.php"] [unique_id "aryzsU5Phls--iYlcKguvQAAAQ4"]
[Wed Sep 30 01:01:05.906492 2026] [security2:error] [pid 186850:tid 187006] [client 20.194.30.107:17479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/images.php"] [unique_id "aryzsU5Phls--iYlcKguvgAAASQ"]
[Wed Sep 30 01:01:05.919502 2026] [security2:error] [pid 186850:tid 186991] [client 20.70.173.30:63674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mlvt-dsc.info"] [uri "/cabs.php"] [unique_id "aryzsU5Phls--iYlcKguwgAAARU"]
[Wed Sep 30 01:01:05.952113 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:05.952574 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:05.974543 2026] [security2:error] [pid 186850:tid 187024] [client 52.231.69.245:49147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/sx.php"] [unique_id "aryzsU5Phls--iYlcKguyAAAATY"]
[Wed Sep 30 01:01:06.039460 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.039743 2026] [access_compat:error] [pid 186850:tid 187005] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.089853 2026] [security2:error] [pid 186850:tid 187036] [client 49.205.105.16:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKguzwAAAUI"]
[Wed Sep 30 01:01:06.090000 2026] [security2:error] [pid 186850:tid 187036] [client 49.205.105.16:15261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKguzwAAAUI"]
[Wed Sep 30 01:01:06.115429 2026] [security2:error] [pid 186850:tid 186854] [remote 66.116.251.167:37236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.251.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "aryzsk5Phls--iYlcKgu0AABGgM"]
[Wed Sep 30 01:01:06.130138 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.130417 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.155007 2026] [security2:error] [pid 186850:tid 187072] [client 114.119.135.152:42233] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "uscblogistics.com"] [uri "/wkk3/81suma-colleeb2d812ah2a-11ccfh1a-jkk"] [unique_id "aryzsk5Phls--iYlcKgu1wAAAWY"], referer: http://uscblogistics.com/wkk3/81suma-colleeb2d812ah2a-11ccfh1a-jkk
[Wed Sep 30 01:01:06.194968 2026] [security2:error] [pid 186850:tid 187037] [client 20.219.2.60:20174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/install.php"] [unique_id "aryzsk5Phls--iYlcKgu2wAAAUM"]
[Wed Sep 30 01:01:06.223363 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.223719 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.244553 2026] [security2:error] [pid 186850:tid 187021] [client 104.208.65.139:19284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/42b5827789index.php"] [unique_id "aryzsk5Phls--iYlcKgu4gAAATM"]
[Wed Sep 30 01:01:06.254851 2026] [security2:error] [pid 186850:tid 187050] [client 52.231.69.245:13367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryzsk5Phls--iYlcKgu5AAAAVA"]
[Wed Sep 30 01:01:06.305569 2026] [security2:error] [pid 186850:tid 187078] [client 20.194.5.96:42665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/xwpg.php"] [unique_id "aryzsk5Phls--iYlcKgu6wAAAWw"]
[Wed Sep 30 01:01:06.312929 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.313206 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.369881 2026] [security2:error] [pid 186850:tid 186971] [remote 66.116.251.167:37236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.251.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "aryzsk5Phls--iYlcKgu8wABWXg"], referer: https://rhinoglobalenterprises.com/wp-login.php
[Wed Sep 30 01:01:06.371342 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:06.371612 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:06.381351 2026] [security2:error] [pid 186850:tid 187007] [client 20.194.5.96:35586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/ans.php"] [unique_id "aryzsk5Phls--iYlcKgu9QAAASU"]
[Wed Sep 30 01:01:06.406828 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.407265 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.423294 2026] [security2:error] [pid 186850:tid 187038] [client 45.138.12.32:34670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.afghanjudofederation.af"] [uri "/wp-links-opml.php"] [unique_id "aryzsk5Phls--iYlcKgu_QAAAUQ"]
[Wed Sep 30 01:01:06.456312 2026] [security2:error] [pid 186850:tid 187076] [client 116.197.133.25:55450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvAAAAAWo"]
[Wed Sep 30 01:01:06.456407 2026] [security2:error] [pid 186850:tid 187076] [client 116.197.133.25:55450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvAAAAAWo"]
[Wed Sep 30 01:01:06.495382 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.495659 2026] [access_compat:error] [pid 186850:tid 187075] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.542836 2026] [security2:error] [pid 186850:tid 187032] [client 52.231.69.245:13356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/article.php"] [unique_id "aryzsk5Phls--iYlcKgvBgAAAT4"]
[Wed Sep 30 01:01:06.586715 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.587008 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.626355 2026] [security2:error] [pid 186850:tid 186933] [remote 66.116.251.167:37236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.251.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvCwABhVI"]
[Wed Sep 30 01:01:06.626473 2026] [security2:error] [pid 186850:tid 187103] [client 66.116.251.167:37236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvCwABhVI"]
[Wed Sep 30 01:01:06.645724 2026] [security2:error] [pid 186850:tid 187016] [client 152.59.169.65:64387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvDQAAAS4"]
[Wed Sep 30 01:01:06.645842 2026] [security2:error] [pid 186850:tid 187016] [client 152.59.169.65:64387] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzsk5Phls--iYlcKgvDQAAAS4"]
[Wed Sep 30 01:01:06.671273 2026] [security2:error] [pid 186850:tid 187015] [client 20.219.2.60:19467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/public/wp-blog.php"] [unique_id "aryzsk5Phls--iYlcKgvEwAAAS0"]
[Wed Sep 30 01:01:06.676482 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.676761 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.767916 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.768190 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.846352 2026] [security2:error] [pid 186850:tid 187006] [client 52.231.69.245:13671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/link.php"] [unique_id "aryzsk5Phls--iYlcKgvHQAAASQ"]
[Wed Sep 30 01:01:06.858509 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.858766 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.873647 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:06.873920 2026] [access_compat:error] [pid 186850:tid 187060] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:06.938286 2026] [security2:error] [pid 186850:tid 187038] [client 86.104.192.141:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzsk5Phls--iYlcKgvKAAAAUQ"]
[Wed Sep 30 01:01:06.953748 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:06.954195 2026] [access_compat:error] [pid 186850:tid 187023] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:06.982264 2026] [security2:error] [pid 186850:tid 186999] [client 103.168.67.253:54488] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dobeservices.com"] [uri "/livewire/update"] [unique_id "aryzsk5Phls--iYlcKgvLgAAAR0"]
[Wed Sep 30 01:01:07.045207 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.045473 2026] [access_compat:error] [pid 186850:tid 187034] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.067853 2026] [security2:error] [pid 186850:tid 187036] [client 20.194.5.96:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/blacks.php"] [unique_id "aryzs05Phls--iYlcKgvNgAAAUI"]
[Wed Sep 30 01:01:07.107322 2026] [security2:error] [pid 186850:tid 187039] [client 20.194.30.107:34730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/kir.php"] [unique_id "aryzs05Phls--iYlcKgvOQAAAUU"]
[Wed Sep 30 01:01:07.126924 2026] [security2:error] [pid 186850:tid 187045] [client 20.219.2.60:19394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/mode.php"] [unique_id "aryzs05Phls--iYlcKgvOwAAAUs"]
[Wed Sep 30 01:01:07.132516 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.132773 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.138980 2026] [security2:error] [pid 186850:tid 187080] [client 20.219.2.60:20054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/nw.php"] [unique_id "aryzs05Phls--iYlcKgvPAAAAW4"]
[Wed Sep 30 01:01:07.224375 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.224648 2026] [access_compat:error] [pid 186850:tid 187058] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.227055 2026] [security2:error] [pid 186850:tid 187103] [client 20.214.109.68:11167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/xwzs.php"] [unique_id "aryzs05Phls--iYlcKgvPwAAAYU"]
[Wed Sep 30 01:01:07.252144 2026] [security2:error] [pid 186850:tid 187027] [client 104.208.65.139:19215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/mmq.php"] [unique_id "aryzs05Phls--iYlcKgvQAAAATk"]
[Wed Sep 30 01:01:07.314498 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.314824 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.333937 2026] [security2:error] [pid 186850:tid 187055] [client 20.194.5.96:35630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/cns.php"] [unique_id "aryzs05Phls--iYlcKgvRgAAAVU"]
[Wed Sep 30 01:01:07.337046 2026] [security2:error] [pid 186850:tid 187068] [client 52.231.69.245:13475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/lock360.php"] [unique_id "aryzs05Phls--iYlcKgvRwAAAWI"]
[Wed Sep 30 01:01:07.348037 2026] [access_compat:error] [pid 186850:tid 187074] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:07.348301 2026] [access_compat:error] [pid 186850:tid 187074] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:07.406111 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.406540 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.495529 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.495795 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:58259] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.508970 2026] [security2:error] [pid 186850:tid 187029] [client 20.194.96.176:53434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wp_blog_footer.php"] [unique_id "aryzs05Phls--iYlcKgvVgAAATs"]
[Wed Sep 30 01:01:07.589081 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.589357 2026] [access_compat:error] [pid 186850:tid 187007] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.623119 2026] [security2:error] [pid 186850:tid 187086] [client 20.219.2.60:20059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tool.php"] [unique_id "aryzs05Phls--iYlcKgvXQAAAXQ"]
[Wed Sep 30 01:01:07.626538 2026] [security2:error] [pid 186850:tid 187047] [client 52.231.69.245:49101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-trackback.php"] [unique_id "aryzs05Phls--iYlcKgvXgAAAU0"]
[Wed Sep 30 01:01:07.673619 2026] [security2:error] [pid 186850:tid 187096] [client 216.73.216.46:58259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzs05Phls--iYlcKgvYAAAAX4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTYyL25vZGUwL21lbW9yeTM2OS9ub2RlMC94ODY%3D
[Wed Sep 30 01:01:07.679886 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.680161 2026] [access_compat:error] [pid 186850:tid 186992] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.730159 2026] [security2:error] [pid 186850:tid 187053] [client 4.196.65.241:19097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ab.php"] [unique_id "aryzs05Phls--iYlcKgvZQAAAVM"]
[Wed Sep 30 01:01:07.745720 2026] [security2:error] [pid 186850:tid 186939] [remote 40.77.167.24:36882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalcanvas.ca"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzs05Phls--iYlcKgvZgABaVg"], referer: https://royalcanvas.ca/product/village-in-the-laurentians/
[Wed Sep 30 01:01:07.769503 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.769757 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.801679 2026] [security2:error] [pid 186850:tid 186934] [remote 40.77.167.24:36882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalcanvas.ca"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzs05Phls--iYlcKgvcQABJ1M"], referer: https://royalcanvas.ca/product/village-in-the-laurentians/
[Wed Sep 30 01:01:07.860655 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.860943 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:07.870943 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:07.871274 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:07.878854 2026] [security2:error] [pid 186850:tid 187095] [client 104.208.65.139:43367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/fryvbbn.php"] [unique_id "aryzs05Phls--iYlcKgvewAAAX0"]
[Wed Sep 30 01:01:07.892712 2026] [security2:error] [pid 186850:tid 186889] [remote 74.7.241.5:57652] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzs05Phls--iYlcKgvfAABFSY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1635&t=4545
[Wed Sep 30 01:01:07.892736 2026] [security2:error] [pid 186850:tid 186889] [remote 74.7.241.5:57652] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzs05Phls--iYlcKgvfAABFSY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1635&t=4545
[Wed Sep 30 01:01:07.939660 2026] [security2:error] [pid 186850:tid 187015] [client 38.57.64.182:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzs05Phls--iYlcKgvfwAAAS0"]
[Wed Sep 30 01:01:07.950798 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:07.951084 2026] [access_compat:error] [pid 186850:tid 187037] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.041658 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.041994 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.094280 2026] [security2:error] [pid 186850:tid 187090] [client 20.219.2.60:20165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/drhunthq.php"] [unique_id "aryztE5Phls--iYlcKgvkgAAAXg"]
[Wed Sep 30 01:01:08.138176 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.138613 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.154567 2026] [security2:error] [pid 186850:tid 187077] [client 103.168.67.253:54530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryztE5Phls--iYlcKgvlwAAAWs"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:08.177194 2026] [security2:error] [pid 186850:tid 187000] [client 52.231.69.245:13323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/.well-known/index.php"] [unique_id "aryztE5Phls--iYlcKgvmQAAAR4"]
[Wed Sep 30 01:01:08.178581 2026] [security2:error] [pid 186850:tid 187038] [client 20.194.30.107:47380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/baba.php"] [unique_id "aryztE5Phls--iYlcKgvmgAAAUQ"]
[Wed Sep 30 01:01:08.219461 2026] [security2:error] [pid 186850:tid 186992] [client 20.194.5.96:61808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/class-wp-http-client.php"] [unique_id "aryztE5Phls--iYlcKgvngAAARY"]
[Wed Sep 30 01:01:08.225520 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.225770 2026] [access_compat:error] [pid 186850:tid 187079] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.251420 2026] [security2:error] [pid 186850:tid 187023] [client 105.112.178.79:38346] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fennell-woodbank.co.uk"] [uri "/__ss_probe_6b5d340aa8473b801ea5f39dccfdc50c__"] [unique_id "aryztE5Phls--iYlcKgvoAAAATU"]
[Wed Sep 30 01:01:08.271426 2026] [security2:error] [pid 186850:tid 186982] [client 103.168.67.253:54480] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dobeservices.com"] [uri "/rest/settings"] [unique_id "aryztE5Phls--iYlcKgvogAAAQw"]
[Wed Sep 30 01:01:08.289761 2026] [security2:error] [pid 186850:tid 187064] [client 45.138.12.32:34646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.agv.igm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryztE5Phls--iYlcKgvpwAAAV4"]
[Wed Sep 30 01:01:08.289773 2026] [security2:error] [pid 186850:tid 187031] [client 20.194.5.96:35647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/faiy.php"] [unique_id "aryztE5Phls--iYlcKgvpgAAAT0"]
[Wed Sep 30 01:01:08.315449 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.315713 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.326682 2026] [security2:error] [pid 186850:tid 187075] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryztE5Phls--iYlcKgvrgAAAWk"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:08.377405 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:08.377768 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:08.406141 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.406413 2026] [access_compat:error] [pid 186850:tid 187045] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.437440 2026] [security2:error] [pid 186850:tid 187107] [client 74.7.242.1:46836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryztE5Phls--iYlcKgvtwAAAYk"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:01:08.496856 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.497152 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.571932 2026] [security2:error] [pid 186850:tid 187100] [client 20.219.2.60:19472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/admin/index.php"] [unique_id "aryztE5Phls--iYlcKgvuwAAAYI"]
[Wed Sep 30 01:01:08.574412 2026] [security2:error] [pid 186850:tid 187028] [client 52.231.69.245:13465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryztE5Phls--iYlcKgvvAAAATo"]
[Wed Sep 30 01:01:08.587737 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.588012 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.680874 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.681358 2026] [access_compat:error] [pid 186850:tid 187082] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.770778 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.771101 2026] [access_compat:error] [pid 186850:tid 187102] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.799863 2026] [security2:error] [pid 186850:tid 187090] [client 20.219.2.60:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ok.php"] [unique_id "aryztE5Phls--iYlcKgvzgAAAXg"]
[Wed Sep 30 01:01:08.835293 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:08.835563 2026] [access_compat:error] [pid 186850:tid 187007] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:08.860732 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.861012 2026] [access_compat:error] [pid 186850:tid 187059] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:08.889458 2026] [security2:error] [pid 186850:tid 187005] [client 52.231.69.245:49131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryztE5Phls--iYlcKgv1AAAASM"]
[Wed Sep 30 01:01:08.951327 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:08.951605 2026] [access_compat:error] [pid 186850:tid 187086] [client 216.73.216.46:64760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.007475 2026] [security2:error] [pid 186850:tid 186975] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgv3AABInw"], referer: https://forum.torquayfans.com/viewtopic.php?p=10694
[Wed Sep 30 01:01:09.007509 2026] [security2:error] [pid 186850:tid 186975] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgv3AABInw"], referer: https://forum.torquayfans.com/viewtopic.php?p=10694
[Wed Sep 30 01:01:09.023136 2026] [security2:error] [pid 186850:tid 186995] [client 4.240.25.22:20310] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.offshoremultihull.org"] [uri "/1.php"] [unique_id "aryztU5Phls--iYlcKgv3QAAARk"]
[Wed Sep 30 01:01:09.023228 2026] [security2:error] [pid 186850:tid 186995] [client 4.240.25.22:20310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/1.php"] [unique_id "aryztU5Phls--iYlcKgv3QAAARk"]
[Wed Sep 30 01:01:09.062181 2026] [security2:error] [pid 186850:tid 187032] [client 20.194.5.96:8353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/zoo2.php"] [unique_id "aryztU5Phls--iYlcKgv3gAAAT4"]
[Wed Sep 30 01:01:09.091797 2026] [security2:error] [pid 186850:tid 187031] [client 20.219.2.60:20169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tfm.php"] [unique_id "aryztU5Phls--iYlcKgv4QAAAT0"]
[Wed Sep 30 01:01:09.096604 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.096689 2026] [security2:error] [pid 186850:tid 187064] [client 20.194.5.96:35517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/gecho.php"] [unique_id "aryztU5Phls--iYlcKgv4gAAAV4"]
[Wed Sep 30 01:01:09.096889 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.116570 2026] [security2:error] [pid 186850:tid 186983] [client 20.214.109.68:11189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryztU5Phls--iYlcKgv4wAAAQ0"]
[Wed Sep 30 01:01:09.140005 2026] [security2:error] [pid 186850:tid 187017] [client 216.73.216.46:64760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryztU5Phls--iYlcKgv5gAAAS8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU4
[Wed Sep 30 01:01:09.165419 2026] [security2:error] [pid 186850:tid 187063] [client 52.231.69.245:13347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryztU5Phls--iYlcKgv6AAAAV0"]
[Wed Sep 30 01:01:09.189555 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.189820 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.258994 2026] [security2:error] [pid 186850:tid 186963] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgv9wABRnA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=52980&sid=0cc07c898278be51ce66cd980b449208
[Wed Sep 30 01:01:09.259033 2026] [security2:error] [pid 186850:tid 186963] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgv9wABRnA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=52980&sid=0cc07c898278be51ce66cd980b449208
[Wed Sep 30 01:01:09.273012 2026] [security2:error] [pid 186850:tid 187105] [client 4.196.65.241:27296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/kgblegacy.php"] [unique_id "aryztU5Phls--iYlcKgv-AAAAYc"]
[Wed Sep 30 01:01:09.283618 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.284045 2026] [access_compat:error] [pid 186850:tid 187084] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.320377 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.320833 2026] [access_compat:error] [pid 186850:tid 187056] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.376228 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:09.376686 2026] [access_compat:error] [pid 186850:tid 187058] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:01:09.411279 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.411593 2026] [access_compat:error] [pid 186850:tid 187083] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.431010 2026] [security2:error] [pid 186850:tid 186998] [client 52.231.69.245:49096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryztU5Phls--iYlcKgwAAAAARw"]
[Wed Sep 30 01:01:09.491736 2026] [security2:error] [pid 186850:tid 187065] [client 93.152.84.77:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryztU5Phls--iYlcKgwBgAAAV8"]
[Wed Sep 30 01:01:09.497771 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.498065 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.590167 2026] [security2:error] [pid 186850:tid 187016] [client 20.219.2.60:19550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/a4.php"] [unique_id "aryztU5Phls--iYlcKgwCwAAAS4"]
[Wed Sep 30 01:01:09.590430 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.590681 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.650532 2026] [security2:error] [pid 186850:tid 187026] [client 49.36.41.37:60897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryztU5Phls--iYlcKgwDwAAATg"]
[Wed Sep 30 01:01:09.652456 2026] [security2:error] [pid 186850:tid 187026] [client 49.36.41.37:60897] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryztU5Phls--iYlcKgwDwAAATg"]
[Wed Sep 30 01:01:09.681410 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.681699 2026] [access_compat:error] [pid 186850:tid 187021] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.711253 2026] [security2:error] [pid 186850:tid 186980] [client 52.231.69.245:13666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryztU5Phls--iYlcKgwEgAAAQo"]
[Wed Sep 30 01:01:09.766804 2026] [security2:error] [pid 186850:tid 187106] [client 20.194.5.96:35619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/gu.php"] [unique_id "aryztU5Phls--iYlcKgwFwAAAYg"]
[Wed Sep 30 01:01:09.771751 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.772199 2026] [access_compat:error] [pid 186850:tid 187041] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.788473 2026] [security2:error] [pid 186850:tid 186882] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgwGgABYR8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148259&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:01:09.788506 2026] [security2:error] [pid 186850:tid 186882] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgwGgABYR8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148259&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:01:09.802224 2026] [security2:error] [pid 186850:tid 187094] [client 20.198.74.230:23559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wo.php"] [unique_id "aryztU5Phls--iYlcKgwHgAAAXw"]
[Wed Sep 30 01:01:09.830229 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:09.830492 2026] [access_compat:error] [pid 186850:tid 187051] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:09.863683 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.863953 2026] [access_compat:error] [pid 186850:tid 186984] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.943614 2026] [security2:error] [pid 186850:tid 187025] [client 20.194.5.96:8381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/zoo1.php"] [unique_id "aryztU5Phls--iYlcKgwIgAAATc"]
[Wed Sep 30 01:01:09.954177 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:09.954445 2026] [access_compat:error] [pid 186850:tid 186983] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:09.978447 2026] [security2:error] [pid 186850:tid 187077] [client 4.196.65.241:19130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/0x.php"] [unique_id "aryztU5Phls--iYlcKgwJAAAAWs"]
[Wed Sep 30 01:01:10.005013 2026] [security2:error] [pid 186850:tid 186914] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgwJgABLz8"], referer: https://forum.torquayfans.com/viewtopic.php?p=299113
[Wed Sep 30 01:01:10.005052 2026] [security2:error] [pid 186850:tid 186914] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryztU5Phls--iYlcKgwJgABLz8"], referer: https://forum.torquayfans.com/viewtopic.php?p=299113
[Wed Sep 30 01:01:10.016595 2026] [security2:error] [pid 186850:tid 187010] [client 103.159.192.142:57078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKAAAASg"]
[Wed Sep 30 01:01:10.016705 2026] [security2:error] [pid 186850:tid 187010] [client 103.159.192.142:57078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKAAAASg"]
[Wed Sep 30 01:01:10.016935 2026] [security2:error] [pid 186850:tid 187007] [client 182.69.182.151:14450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKQAAASU"]
[Wed Sep 30 01:01:10.018481 2026] [security2:error] [pid 186850:tid 187007] [client 182.69.182.151:14450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKQAAASU"]
[Wed Sep 30 01:01:10.045609 2026] [security2:error] [pid 186850:tid 187088] [client 37.41.16.35:59772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKwAAAXY"]
[Wed Sep 30 01:01:10.045757 2026] [security2:error] [pid 186850:tid 187088] [client 37.41.16.35:59772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwKwAAAXY"]
[Wed Sep 30 01:01:10.046510 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.046759 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.047342 2026] [security2:error] [pid 186850:tid 187075] [client 20.219.2.60:19570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wen.php"] [unique_id "aryztk5Phls--iYlcKgwLAAAAWk"]
[Wed Sep 30 01:01:10.048539 2026] [security2:error] [pid 186850:tid 187053] [client 52.231.69.245:49136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-content/themes/about.php"] [unique_id "aryztk5Phls--iYlcKgwLQAAAVM"]
[Wed Sep 30 01:01:10.079609 2026] [security2:error] [pid 186850:tid 187039] [client 20.219.2.60:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/zoo.php"] [unique_id "aryztk5Phls--iYlcKgwLgAAAUU"]
[Wed Sep 30 01:01:10.102245 2026] [core:error] [pid 186850:tid 187089] [client 94.74.105.23:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://original.hamaraquetta.com/news/pg/38
[Wed Sep 30 01:01:10.102275 2026] [core:error] [pid 186850:tid 187089] [client 94.74.105.23:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://original.hamaraquetta.com/news/pg/38
[Wed Sep 30 01:01:10.136367 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.136631 2026] [access_compat:error] [pid 186850:tid 187006] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.169659 2026] [security2:error] [pid 186850:tid 186985] [client 150.107.232.159:35977] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwNQAAAQ8"]
[Wed Sep 30 01:01:10.169854 2026] [security2:error] [pid 186850:tid 186985] [client 150.107.232.159:35977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwNQAAAQ8"]
[Wed Sep 30 01:01:10.229073 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.229344 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.305770 2026] [security2:error] [pid 186850:tid 187008] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryztk5Phls--iYlcKgwQgAAASY"]
[Wed Sep 30 01:01:10.318119 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.318465 2026] [access_compat:error] [pid 186850:tid 186991] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.354545 2026] [security2:error] [pid 186850:tid 187062] [client 52.231.69.245:65119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/filemanager/dialog.php"] [unique_id "aryztk5Phls--iYlcKgwRgAAAVw"]
[Wed Sep 30 01:01:10.360137 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:10.360413 2026] [access_compat:error] [pid 186850:tid 187073] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:10.408107 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.408414 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.423861 2026] [security2:error] [pid 186850:tid 187019] [client 20.194.96.176:2177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/robot.php"] [unique_id "aryztk5Phls--iYlcKgwSQAAATE"]
[Wed Sep 30 01:01:10.434382 2026] [security2:error] [pid 186850:tid 187049] [client 114.119.142.156:50867] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.buy-ketotifen.com"] [uri "/"] [unique_id "aryztk5Phls--iYlcKgwSgAAAU8"], referer: http://www.buy-ketotifen.com/
[Wed Sep 30 01:01:10.464090 2026] [security2:error] [pid 186850:tid 186915] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryztk5Phls--iYlcKgwSwABhUA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D87105
[Wed Sep 30 01:01:10.478478 2026] [security2:error] [pid 186850:tid 186998] [client 45.156.62.96:64766] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwTAAAARw"]
[Wed Sep 30 01:01:10.478595 2026] [security2:error] [pid 186850:tid 186998] [client 45.156.62.96:64766] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwTAAAARw"]
[Wed Sep 30 01:01:10.501849 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.502193 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.508265 2026] [security2:error] [pid 186850:tid 186986] [client 104.208.65.139:19226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/ff.update.php"] [unique_id "aryztk5Phls--iYlcKgwUwAAARA"]
[Wed Sep 30 01:01:10.509182 2026] [security2:error] [pid 186850:tid 187099] [client 20.219.2.60:20063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ms.php"] [unique_id "aryztk5Phls--iYlcKgwVAAAAYE"]
[Wed Sep 30 01:01:10.511535 2026] [security2:error] [pid 186850:tid 187090] [client 103.168.67.253:54528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/index.php"] [unique_id "aryztk5Phls--iYlcKgwVgAAAXg"]
[Wed Sep 30 01:01:10.512271 2026] [security2:error] [pid 186850:tid 187014] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryztk5Phls--iYlcKgwVQAAASw"]
[Wed Sep 30 01:01:10.592133 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.592503 2026] [access_compat:error] [pid 186850:tid 187066] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.682494 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.682845 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.716374 2026] [security2:error] [pid 186850:tid 187068] [client 52.231.69.245:13645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/index/function.php"] [unique_id "aryztk5Phls--iYlcKgwYgAAAWI"]
[Wed Sep 30 01:01:10.718882 2026] [security2:error] [pid 186850:tid 187024] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryztk5Phls--iYlcKgwYwAAATY"]
[Wed Sep 30 01:01:10.729938 2026] [security2:error] [pid 186850:tid 187084] [client 223.181.30.165:8914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwZwAAAXI"]
[Wed Sep 30 01:01:10.730054 2026] [security2:error] [pid 186850:tid 187084] [client 223.181.30.165:8914] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwZwAAAXI"]
[Wed Sep 30 01:01:10.774577 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.774868 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.795858 2026] [security2:error] [pid 186850:tid 186984] [client 20.194.5.96:42625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/class-ajax.php"] [unique_id "aryztk5Phls--iYlcKgwagAAAQ4"]
[Wed Sep 30 01:01:10.856025 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:10.856296 2026] [access_compat:error] [pid 186850:tid 187064] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:10.863370 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.863638 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.926030 2026] [security2:error] [pid 186850:tid 187010] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryztk5Phls--iYlcKgwcQAAASg"]
[Wed Sep 30 01:01:10.926181 2026] [security2:error] [pid 186850:tid 187007] [client 20.214.109.68:11142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws66.php"] [unique_id "aryztk5Phls--iYlcKgwcgAAASU"]
[Wed Sep 30 01:01:10.936251 2026] [security2:error] [pid 186850:tid 187001] [client 223.181.60.167:30484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwdAAAAR8"]
[Wed Sep 30 01:01:10.936506 2026] [security2:error] [pid 186850:tid 187001] [client 223.181.60.167:30484] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryztk5Phls--iYlcKgwdAAAAR8"]
[Wed Sep 30 01:01:10.940743 2026] [security2:error] [pid 186850:tid 186992] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryztk5Phls--iYlcKgwdQAAARY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:10.954112 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:10.954374 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:10.987368 2026] [security2:error] [pid 186850:tid 187013] [client 20.219.2.60:58563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/hplfuns.php"] [unique_id "aryztk5Phls--iYlcKgwdwAAASs"]
[Wed Sep 30 01:01:11.007840 2026] [security2:error] [pid 186850:tid 187085] [client 103.241.204.139:62211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzt05Phls--iYlcKgweAAAAXM"]
[Wed Sep 30 01:01:11.007983 2026] [security2:error] [pid 186850:tid 187085] [client 103.241.204.139:62211] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzt05Phls--iYlcKgweAAAAXM"]
[Wed Sep 30 01:01:11.011793 2026] [security2:error] [pid 186850:tid 187038] [client 52.231.69.245:13496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryzt05Phls--iYlcKgweQAAAUQ"]
[Wed Sep 30 01:01:11.045236 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.045511 2026] [access_compat:error] [pid 186850:tid 187043] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.132949 2026] [security2:error] [pid 186850:tid 187072] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzt05Phls--iYlcKgwgAAAAWY"]
[Wed Sep 30 01:01:11.135778 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.136082 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.228630 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.228930 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.318830 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.319108 2026] [access_compat:error] [pid 186850:tid 187073] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.325699 2026] [security2:error] [pid 186850:tid 187049] [client 52.231.69.245:65097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryzt05Phls--iYlcKgwjwAAAU8"]
[Wed Sep 30 01:01:11.339464 2026] [security2:error] [pid 186850:tid 187029] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzt05Phls--iYlcKgwkAAAATs"]
[Wed Sep 30 01:01:11.351844 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:11.352132 2026] [access_compat:error] [pid 186850:tid 186998] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:01:11.402322 2026] [security2:error] [pid 186850:tid 187090] [client 20.194.5.96:8350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/gm.php"] [unique_id "aryzt05Phls--iYlcKgwkwAAAXg"]
[Wed Sep 30 01:01:11.410817 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.411216 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.459493 2026] [security2:error] [pid 186850:tid 187052] [client 20.219.2.60:19532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tfm.php"] [unique_id "aryzt05Phls--iYlcKgwlgAAAVI"]
[Wed Sep 30 01:01:11.501349 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.501625 2026] [access_compat:error] [pid 186850:tid 186980] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.512117 2026] [security2:error] [pid 186850:tid 187066] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzt05Phls--iYlcKgwmwAAAWA"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:11.523379 2026] [security2:error] [pid 186850:tid 186947] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzt05Phls--iYlcKgwnQABcGA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=1685
[Wed Sep 30 01:01:11.523409 2026] [security2:error] [pid 186850:tid 186947] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzt05Phls--iYlcKgwnQABcGA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=1685
[Wed Sep 30 01:01:11.545784 2026] [security2:error] [pid 186850:tid 187068] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzt05Phls--iYlcKgwngAAAWI"]
[Wed Sep 30 01:01:11.558996 2026] [security2:error] [pid 186850:tid 187024] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzt05Phls--iYlcKgwnwAAATY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:11.619579 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.619860 2026] [access_compat:error] [pid 186850:tid 187022] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.626642 2026] [security2:error] [pid 186850:tid 187023] [client 52.231.69.245:49139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryzt05Phls--iYlcKgwpgAAATU"]
[Wed Sep 30 01:01:11.679901 2026] [security2:error] [pid 186850:tid 187048] [client 122.173.27.10:24131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzt05Phls--iYlcKgwqwAAAU4"]
[Wed Sep 30 01:01:11.680041 2026] [security2:error] [pid 186850:tid 187048] [client 122.173.27.10:24131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzt05Phls--iYlcKgwqwAAAU4"]
[Wed Sep 30 01:01:11.683630 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.684179 2026] [access_compat:error] [pid 186850:tid 187018] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.752054 2026] [security2:error] [pid 186850:tid 187088] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzt05Phls--iYlcKgwrwAAAXY"]
[Wed Sep 30 01:01:11.772399 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.772661 2026] [access_compat:error] [pid 186850:tid 187053] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.868413 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.868825 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.869942 2026] [security2:error] [pid 186850:tid 187050] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzt05Phls--iYlcKgwuAAAAVA"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:11.906739 2026] [security2:error] [pid 186850:tid 187077] [client 20.194.5.96:42646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/class-wp-site-list.php"] [unique_id "aryzt05Phls--iYlcKgwugAAAWs"]
[Wed Sep 30 01:01:11.912684 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:11.913120 2026] [access_compat:error] [pid 186850:tid 186981] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:11.915079 2026] [security2:error] [pid 186850:tid 187089] [client 52.231.69.245:65103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/about/function.php"] [unique_id "aryzt05Phls--iYlcKgwuwAAAXc"]
[Wed Sep 30 01:01:11.923785 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:19489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/8573.php"] [unique_id "aryzt05Phls--iYlcKgwvAAAAXk"]
[Wed Sep 30 01:01:11.949788 2026] [security2:error] [pid 186850:tid 187009] [client 20.194.5.96:35725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/nck.php"] [unique_id "aryzt05Phls--iYlcKgwwgAAASc"]
[Wed Sep 30 01:01:11.957579 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:11.957711 2026] [security2:error] [pid 186850:tid 187033] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzt05Phls--iYlcKgwwwAAAT8"]
[Wed Sep 30 01:01:11.958003 2026] [access_compat:error] [pid 186850:tid 187020] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:11.959507 2026] [security2:error] [pid 186850:tid 186985] [client 104.208.65.139:18542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/lzlhihzi.php"] [unique_id "aryzt05Phls--iYlcKgwxAAAAQ8"]
[Wed Sep 30 01:01:11.999511 2026] [security2:error] [pid 186850:tid 187097] [client 172.232.180.137:57858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "aryzt05Phls--iYlcKgwxgAAAX8"]
[Wed Sep 30 01:01:12.048490 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.048756 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.138821 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.139121 2026] [access_compat:error] [pid 186850:tid 187008] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.151992 2026] [security2:error] [pid 186850:tid 186989] [client 20.194.96.176:53405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/sss.php"] [unique_id "aryzuE5Phls--iYlcKgwzgAAARM"]
[Wed Sep 30 01:01:12.157653 2026] [security2:error] [pid 186850:tid 187078] [client 20.219.2.60:19352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gaza.php"] [unique_id "aryzuE5Phls--iYlcKgwzwAAAWw"]
[Wed Sep 30 01:01:12.163832 2026] [security2:error] [pid 186850:tid 186987] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgw0AAAARE"]
[Wed Sep 30 01:01:12.185251 2026] [security2:error] [pid 186850:tid 187055] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzuE5Phls--iYlcKgw0wAAAVU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.191723 2026] [security2:error] [pid 186850:tid 187040] [client 127.0.0.1:60562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzuE5Phls--iYlcKgwzAAAAUY"]
[Wed Sep 30 01:01:12.191787 2026] [security2:error] [pid 186850:tid 187056] [client 127.0.0.1:60548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.cyprusyouth.org"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "aryzuE5Phls--iYlcKgwywAAAVY"]
[Wed Sep 30 01:01:12.192006 2026] [security2:error] [pid 186850:tid 186994] [client 74.7.241.191:51566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.cyprusyouth.org"] [uri "/robots.txt"] [unique_id "aryzuE5Phls--iYlcKgwygABGGo"]
[Wed Sep 30 01:01:12.209586 2026] [security2:error] [pid 186850:tid 187019] [client 52.231.69.245:13352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryzuE5Phls--iYlcKgw1AAAATE"]
[Wed Sep 30 01:01:12.230104 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.230389 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.238969 2026] [security2:error] [pid 186850:tid 187073] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzuE5Phls--iYlcKgw1gAAAWc"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.291748 2026] [security2:error] [pid 186850:tid 187070] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzuE5Phls--iYlcKgw3AAAAWQ"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.292084 2026] [security2:error] [pid 186850:tid 187071] [client 223.235.102.107:16738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzuE5Phls--iYlcKgw3QAAAWU"]
[Wed Sep 30 01:01:12.292172 2026] [security2:error] [pid 186850:tid 187071] [client 223.235.102.107:16738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzuE5Phls--iYlcKgw3QAAAWU"]
[Wed Sep 30 01:01:12.293342 2026] [security2:error] [pid 186850:tid 187070] [client 20.194.5.96:35748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xtt.php"] [unique_id "aryzuE5Phls--iYlcKgw3gAAAWQ"]
[Wed Sep 30 01:01:12.322611 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.322919 2026] [access_compat:error] [pid 186850:tid 186998] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.330425 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:12.330736 2026] [access_compat:error] [pid 186850:tid 186986] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:12.370413 2026] [security2:error] [pid 186850:tid 187026] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgw6wAAATg"]
[Wed Sep 30 01:01:12.381636 2026] [security2:error] [pid 186850:tid 187052] [client 20.219.2.60:19579] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/1.php"] [unique_id "aryzuE5Phls--iYlcKgw7QAAAVI"]
[Wed Sep 30 01:01:12.381734 2026] [security2:error] [pid 186850:tid 187052] [client 20.219.2.60:19579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/1.php"] [unique_id "aryzuE5Phls--iYlcKgw7QAAAVI"]
[Wed Sep 30 01:01:12.414114 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.414526 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.425033 2026] [autoindex:error] [pid 186850:tid 187046] [client 85.204.70.112:50100] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-admin/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:12.435599 2026] [security2:error] [pid 186850:tid 187107] [client 216.244.66.239:33608] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/lechenie_alkogolizma_v_kazani_adresa_25.xml"] [unique_id "aryzuE5Phls--iYlcKgw8AAAAYk"]
[Wed Sep 30 01:01:12.435696 2026] [security2:error] [pid 186850:tid 187107] [client 216.244.66.239:33608] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/lechenie_alkogolizma_v_kazani_adresa_25.xml"] [unique_id "aryzuE5Phls--iYlcKgw8AAAAYk"]
[Wed Sep 30 01:01:12.506945 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.507227 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.520856 2026] [security2:error] [pid 186850:tid 187022] [client 52.231.69.245:13692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/admin/function.php"] [unique_id "aryzuE5Phls--iYlcKgw9QAAATQ"]
[Wed Sep 30 01:01:12.532054 2026] [security2:error] [pid 186850:tid 186912] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzuE5Phls--iYlcKgw9wABgj0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301667&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:01:12.532076 2026] [security2:error] [pid 186850:tid 186912] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzuE5Phls--iYlcKgw9wABgj0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301667&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:01:12.576831 2026] [security2:error] [pid 186850:tid 187032] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgw-AAAAT4"]
[Wed Sep 30 01:01:12.599291 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.601116 2026] [access_compat:error] [pid 186850:tid 187017] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.605391 2026] [security2:error] [pid 186850:tid 186995] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzuE5Phls--iYlcKgw_AAAARk"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.627677 2026] [security2:error] [pid 186850:tid 187085] [client 20.194.5.96:8921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/ttivnife.php"] [unique_id "aryzuE5Phls--iYlcKgxAQAAAXM"]
[Wed Sep 30 01:01:12.651977 2026] [security2:error] [pid 186850:tid 187039] [client 103.168.67.253:54532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzuE5Phls--iYlcKgxAgAAAUU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.683720 2026] [security2:error] [pid 186850:tid 187093] [client 20.194.5.96:35516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/go.php"] [unique_id "aryzuE5Phls--iYlcKgxBAAAAXs"]
[Wed Sep 30 01:01:12.691881 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.692221 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.696800 2026] [security2:error] [pid 186850:tid 187074] [client 114.119.141.116:64399] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ethimexcraftsolutions.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgxBQAAAWg"], referer: https://cashformyhouse.com/sitemap_quality_1.xml
[Wed Sep 30 01:01:12.783226 2026] [security2:error] [pid 186850:tid 187003] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgxDQAAASE"]
[Wed Sep 30 01:01:12.783473 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.783902 2026] [access_compat:error] [pid 186850:tid 187097] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.795171 2026] [security2:error] [pid 186850:tid 187067] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzuE5Phls--iYlcKgxFQAAAWE"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:12.828570 2026] [security2:error] [pid 186850:tid 186987] [client 52.231.69.245:13480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/9.php"] [unique_id "aryzuE5Phls--iYlcKgxHgAAARE"]
[Wed Sep 30 01:01:12.838974 2026] [security2:error] [pid 186850:tid 186994] [client 20.219.2.60:19499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/term.php"] [unique_id "aryzuE5Phls--iYlcKgxHwAAARg"]
[Wed Sep 30 01:01:12.866730 2026] [security2:error] [pid 186850:tid 186911] [remote 74.7.227.56:47980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzuE5Phls--iYlcKgxJQABEzw"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=675
[Wed Sep 30 01:01:12.878767 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.878986 2026] [access_compat:error] [pid 186850:tid 187071] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:12.879224 2026] [access_compat:error] [pid 186850:tid 187070] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.879544 2026] [access_compat:error] [pid 186850:tid 187071] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:12.889265 2026] [security2:error] [pid 186850:tid 187002] [client 20.194.30.107:34706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/term.php"] [unique_id "aryzuE5Phls--iYlcKgxJgAAASA"]
[Wed Sep 30 01:01:12.975761 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:12.976099 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:12.986580 2026] [security2:error] [pid 186850:tid 187046] [client 104.208.65.139:32226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/bfdghfgv.php"] [unique_id "aryzuE5Phls--iYlcKgxKQAAAUw"]
[Wed Sep 30 01:01:12.989907 2026] [security2:error] [pid 186850:tid 187107] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuE5Phls--iYlcKgxKgAAAYk"]
[Wed Sep 30 01:01:13.033655 2026] [security2:error] [pid 186850:tid 187010] [client 20.214.109.68:11153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ewe.php"] [unique_id "aryzuU5Phls--iYlcKgxLwAAASg"]
[Wed Sep 30 01:01:13.067221 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.067639 2026] [access_compat:error] [pid 186850:tid 187032] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.090842 2026] [security2:error] [pid 186850:tid 187088] [client 4.196.65.241:19098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/accesson.php"] [unique_id "aryzuU5Phls--iYlcKgxNAAAAXY"]
[Wed Sep 30 01:01:13.149884 2026] [security2:error] [pid 186850:tid 187053] [client 52.231.69.245:13468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryzuU5Phls--iYlcKgxNQAAAVM"]
[Wed Sep 30 01:01:13.164936 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.165348 2026] [security2:error] [pid 186850:tid 187001] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzuU5Phls--iYlcKgxNwAAAR8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:13.165380 2026] [access_compat:error] [pid 186850:tid 187051] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.195547 2026] [security2:error] [pid 186850:tid 187011] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuU5Phls--iYlcKgxPQAAASk"]
[Wed Sep 30 01:01:13.248928 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.249295 2026] [access_compat:error] [pid 186850:tid 187092] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.297245 2026] [security2:error] [pid 186850:tid 186862] [remote 74.7.227.17:55926] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzuU5Phls--iYlcKgxRAABeQs"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=912cdd0a22b2cfaaddc39d0f2a6ff8b7
[Wed Sep 30 01:01:13.297277 2026] [security2:error] [pid 186850:tid 186862] [remote 74.7.227.17:55926] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzuU5Phls--iYlcKgxRAABeQs"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=912cdd0a22b2cfaaddc39d0f2a6ff8b7
[Wed Sep 30 01:01:13.305202 2026] [security2:error] [pid 186850:tid 187007] [client 102.254.102.41:28302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzuU5Phls--iYlcKgxRQAAASU"]
[Wed Sep 30 01:01:13.305314 2026] [security2:error] [pid 186850:tid 187007] [client 102.254.102.41:28302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzuU5Phls--iYlcKgxRQAAASU"]
[Wed Sep 30 01:01:13.318003 2026] [security2:error] [pid 186850:tid 187054] [client 20.219.2.60:20208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-content/radio.php"] [unique_id "aryzuU5Phls--iYlcKgxRgAAAVQ"]
[Wed Sep 30 01:01:13.342157 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.342582 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.343670 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:13.343990 2026] [access_compat:error] [pid 186850:tid 187097] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:13.394772 2026] [security2:error] [pid 186850:tid 187040] [client 20.194.5.96:42678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/admin.php/2P.php"] [unique_id "aryzuU5Phls--iYlcKgxTQAAAUY"]
[Wed Sep 30 01:01:13.401495 2026] [security2:error] [pid 186850:tid 187073] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuU5Phls--iYlcKgxTgAAAWc"]
[Wed Sep 30 01:01:13.433331 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.433625 2026] [access_compat:error] [pid 186850:tid 187049] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.509955 2026] [security2:error] [pid 186850:tid 187070] [client 52.231.69.245:13968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/.well-known/log.php"] [unique_id "aryzuU5Phls--iYlcKgxVAAAAWQ"]
[Wed Sep 30 01:01:13.515316 2026] [security2:error] [pid 186850:tid 187045] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzuU5Phls--iYlcKgxVQAAAUs"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:13.606337 2026] [security2:error] [pid 186850:tid 186993] [client 20.214.109.68:11213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/aboute.php"] [unique_id "aryzuU5Phls--iYlcKgxWAAAARc"]
[Wed Sep 30 01:01:13.608333 2026] [security2:error] [pid 186850:tid 186988] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuU5Phls--iYlcKgxWQAAARI"]
[Wed Sep 30 01:01:13.734880 2026] [security2:error] [pid 186850:tid 186869] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzuU5Phls--iYlcKgxYwABFBI"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=186327
[Wed Sep 30 01:01:13.734913 2026] [security2:error] [pid 186850:tid 186869] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzuU5Phls--iYlcKgxYwABFBI"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=186327
[Wed Sep 30 01:01:13.783429 2026] [security2:error] [pid 186850:tid 187105] [client 20.219.2.60:19468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/155.php"] [unique_id "aryzuU5Phls--iYlcKgxZwAAAYc"]
[Wed Sep 30 01:01:13.795959 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.796264 2026] [access_compat:error] [pid 186850:tid 187099] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.814673 2026] [security2:error] [pid 186850:tid 187055] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuU5Phls--iYlcKgxagAAAVU"]
[Wed Sep 30 01:01:13.816163 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.816435 2026] [access_compat:error] [pid 186850:tid 187106] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.853921 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.854193 2026] [access_compat:error] [pid 186850:tid 187078] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.859795 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:13.860196 2026] [access_compat:error] [pid 186850:tid 187035] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:13.870085 2026] [security2:error] [pid 186850:tid 187096] [client 69.94.12.46:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzuU5Phls--iYlcKgxbwAAAX4"]
[Wed Sep 30 01:01:13.883053 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.883348 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.905548 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.905995 2026] [access_compat:error] [pid 186850:tid 187107] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:13.909479 2026] [security2:error] [pid 186850:tid 187016] [client 105.112.178.79:38347] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.feq.hpj.mybluehost.me"] [uri "/__ss_probe_444a74c7fa107aab5a8d1711a4207e6e__"] [unique_id "aryzuU5Phls--iYlcKgxdAAAAS4"]
[Wed Sep 30 01:01:13.944788 2026] [security2:error] [pid 186850:tid 187010] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzuU5Phls--iYlcKgxdgAAASg"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:13.977366 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:13.977630 2026] [access_compat:error] [pid 186850:tid 187095] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.022160 2026] [security2:error] [pid 186850:tid 187004] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuk5Phls--iYlcKgxeAAAASI"]
[Wed Sep 30 01:01:14.034306 2026] [security2:error] [pid 186850:tid 187053] [client 20.194.5.96:57978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/a.php"] [unique_id "aryzuk5Phls--iYlcKgxeQAAAVM"]
[Wed Sep 30 01:01:14.067288 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.067557 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.091386 2026] [security2:error] [pid 186850:tid 187051] [client 20.214.109.68:11215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/x9.php"] [unique_id "aryzuk5Phls--iYlcKgxfAAAAVE"]
[Wed Sep 30 01:01:14.143389 2026] [security2:error] [pid 186850:tid 187037] [client 93.180.198.30:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzuk5Phls--iYlcKgxfwAAAUM"]
[Wed Sep 30 01:01:14.158037 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.158308 2026] [access_compat:error] [pid 186850:tid 187068] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.228334 2026] [security2:error] [pid 186850:tid 187091] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuk5Phls--iYlcKgxiAAAAXk"]
[Wed Sep 30 01:01:14.238490 2026] [security2:error] [pid 186850:tid 186981] [client 20.219.2.60:19399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/grsiuk.php"] [unique_id "aryzuk5Phls--iYlcKgxiQAAAQs"]
[Wed Sep 30 01:01:14.247297 2026] [security2:error] [pid 186850:tid 187063] [client 20.219.2.60:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-the.php"] [unique_id "aryzuk5Phls--iYlcKgxiwAAAV0"]
[Wed Sep 30 01:01:14.248168 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.248471 2026] [access_compat:error] [pid 186850:tid 187000] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.248547 2026] [security2:error] [pid 186850:tid 187031] [client 20.194.30.107:45805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/images.php"] [unique_id "aryzuk5Phls--iYlcKgxjAAAAT0"]
[Wed Sep 30 01:01:14.268103 2026] [security2:error] [pid 186850:tid 187054] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzuk5Phls--iYlcKgxjwAAAVQ"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:14.273448 2026] [autoindex:error] [pid 186850:tid 187048] [client 31.40.204.182:46350] AH01276: Cannot serve directory /home4/lmcwjamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:14.278827 2026] [security2:error] [pid 186850:tid 186986] [client 155.190.6.18:32850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxkAAAARA"]
[Wed Sep 30 01:01:14.278964 2026] [security2:error] [pid 186850:tid 186986] [client 155.190.6.18:32850] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxkAAAARA"]
[Wed Sep 30 01:01:14.342175 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.342563 2026] [access_compat:error] [pid 186850:tid 186999] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.378562 2026] [security2:error] [pid 186850:tid 187045] [client 52.231.69.245:13672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/class.php"] [unique_id "aryzuk5Phls--iYlcKgxnAAAAUs"]
[Wed Sep 30 01:01:14.409266 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:14.409544 2026] [access_compat:error] [pid 186850:tid 187069] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:14.434588 2026] [security2:error] [pid 186850:tid 186993] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuk5Phls--iYlcKgxogAAARc"]
[Wed Sep 30 01:01:14.434730 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.435135 2026] [access_compat:error] [pid 186850:tid 187076] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.468996 2026] [security2:error] [pid 186850:tid 186985] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzuk5Phls--iYlcKgxowAAAQ8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:14.521500 2026] [security2:error] [pid 186850:tid 187066] [client 116.193.128.26:56357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxpgAAAWA"]
[Wed Sep 30 01:01:14.521613 2026] [security2:error] [pid 186850:tid 187066] [client 116.193.128.26:56357] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxpgAAAWA"]
[Wed Sep 30 01:01:14.525508 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.525902 2026] [access_compat:error] [pid 186850:tid 187105] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.609350 2026] [security2:error] [pid 186850:tid 187035] [client 20.214.109.68:11252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/an.php"] [unique_id "aryzuk5Phls--iYlcKgxrgAAAUE"]
[Wed Sep 30 01:01:14.613894 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.614310 2026] [access_compat:error] [pid 186850:tid 187062] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.639959 2026] [security2:error] [pid 186850:tid 187095] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuk5Phls--iYlcKgxuAAAAX0"]
[Wed Sep 30 01:01:14.656189 2026] [security2:error] [pid 186850:tid 187057] [client 189.180.155.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzuk5Phls--iYlcKgxvAAAAVc"]
[Wed Sep 30 01:01:14.698875 2026] [security2:error] [pid 186850:tid 187051] [client 20.194.5.96:8336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/cord.php"] [unique_id "aryzuk5Phls--iYlcKgxwAAAAVE"]
[Wed Sep 30 01:01:14.703932 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.704293 2026] [access_compat:error] [pid 186850:tid 187038] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.712171 2026] [security2:error] [pid 186850:tid 187079] [client 52.231.69.245:13447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/lock360.php"] [unique_id "aryzuk5Phls--iYlcKgxwgAAAW0"]
[Wed Sep 30 01:01:14.718442 2026] [security2:error] [pid 186850:tid 187018] [client 20.219.2.60:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp5.php"] [unique_id "aryzuk5Phls--iYlcKgxwwAAATA"]
[Wed Sep 30 01:01:14.793321 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.793586 2026] [access_compat:error] [pid 186850:tid 187063] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.845878 2026] [security2:error] [pid 186850:tid 187019] [client 103.159.192.142:57715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxzAAAATE"]
[Wed Sep 30 01:01:14.845986 2026] [security2:error] [pid 186850:tid 187019] [client 103.159.192.142:57715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgxzAAAATE"]
[Wed Sep 30 01:01:14.846491 2026] [security2:error] [pid 186850:tid 186986] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzuk5Phls--iYlcKgxywAAARA"]
[Wed Sep 30 01:01:14.869415 2026] [security2:error] [pid 186850:tid 186905] [remote 195.178.110.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sergil.net"] [uri "/index.php"] [unique_id "aryzuk5Phls--iYlcKgxzwABETY"]
[Wed Sep 30 01:01:14.871044 2026] [security2:error] [pid 186850:tid 187013] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzuk5Phls--iYlcKgx0AAAASs"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:14.871933 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:14.872198 2026] [access_compat:error] [pid 186850:tid 187022] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:14.883387 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.883644 2026] [access_compat:error] [pid 186850:tid 187064] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:14.890117 2026] [security2:error] [pid 186850:tid 186962] [remote 195.178.110.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sergil.net"] [uri "/index.php"] [unique_id "aryzuk5Phls--iYlcKgx0gABRm8"]
[Wed Sep 30 01:01:14.903637 2026] [security2:error] [pid 186850:tid 187029] [client 202.179.95.79:51048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgx0wAAATs"]
[Wed Sep 30 01:01:14.903730 2026] [security2:error] [pid 186850:tid 187029] [client 202.179.95.79:51048] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzuk5Phls--iYlcKgx0wAAATs"]
[Wed Sep 30 01:01:14.907897 2026] [security2:error] [pid 186850:tid 187085] [client 114.119.154.67:40959] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartsafetycenter.com"] [uri "/product-category/%E0%B8%A3%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%97%E0%B9%89%E0%B8%B2-safety-%E0%B8%A3%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B8%AB%E0%B8%A2%E0%B8%B1%E0%B8%94/"] [unique_id "aryzuk5Phls--iYlcKgx1AAAAXM"], referer: https://www.smartsafetycenter.com/safety-helmet-types-and-selection-guide/
[Wed Sep 30 01:01:14.925125 2026] [security2:error] [pid 186850:tid 187073] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzuk5Phls--iYlcKgx1QAAAWc"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:14.945341 2026] [core:error] [pid 186850:tid 187088] [client 104.207.35.26:15467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:14.945368 2026] [core:error] [pid 186850:tid 187088] [client 104.207.35.26:15467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:14.978929 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:14.979361 2026] [access_compat:error] [pid 186850:tid 187093] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.057529 2026] [security2:error] [pid 186850:tid 187023] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgx2gAAATU"]
[Wed Sep 30 01:01:15.067233 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.067595 2026] [access_compat:error] [pid 186850:tid 187100] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.069040 2026] [security2:error] [pid 186850:tid 187098] [client 52.231.69.245:49127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thaierpnews.wherepointer.com"] [uri "/system_log.php"] [unique_id "aryzu05Phls--iYlcKgx3AAAAYA"]
[Wed Sep 30 01:01:15.136868 2026] [security2:error] [pid 186850:tid 187078] [client 203.122.45.246:55327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgx4AAAAWw"]
[Wed Sep 30 01:01:15.136981 2026] [security2:error] [pid 186850:tid 187078] [client 203.122.45.246:55327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgx4AAAAWw"]
[Wed Sep 30 01:01:15.160388 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.160730 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.195194 2026] [security2:error] [pid 186850:tid 186998] [client 20.219.2.60:20171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-access.php"] [unique_id "aryzu05Phls--iYlcKgx4wAAARw"]
[Wed Sep 30 01:01:15.200396 2026] [security2:error] [pid 186850:tid 187082] [client 104.208.65.139:2105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/Dss.php"] [unique_id "aryzu05Phls--iYlcKgx5AAAAXA"]
[Wed Sep 30 01:01:15.251258 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.251568 2026] [access_compat:error] [pid 186850:tid 187036] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.265176 2026] [security2:error] [pid 186850:tid 187087] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgx6wAAAXU"]
[Wed Sep 30 01:01:15.307597 2026] [security2:error] [pid 186850:tid 187106] [client 4.240.25.22:8488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/mac.php"] [unique_id "aryzu05Phls--iYlcKgx7QAAAYg"]
[Wed Sep 30 01:01:15.339948 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.340240 2026] [access_compat:error] [pid 186850:tid 187035] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.385318 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:15.385574 2026] [access_compat:error] [pid 186850:tid 186983] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:15.436504 2026] [security2:error] [pid 186850:tid 187102] [client 20.194.5.96:8356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/anom.php"] [unique_id "aryzu05Phls--iYlcKgx9wAAAYQ"]
[Wed Sep 30 01:01:15.436644 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.436919 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.444018 2026] [security2:error] [pid 186850:tid 187048] [client 106.214.2.47:8543] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgx-QAAAU4"]
[Wed Sep 30 01:01:15.446279 2026] [security2:error] [pid 186850:tid 187080] [client 213.136.69.135:58483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-theme-json-data.php"] [unique_id "aryzu05Phls--iYlcKgx-wAAAW4"], referer: binance.com
[Wed Sep 30 01:01:15.450198 2026] [security2:error] [pid 186850:tid 187048] [client 106.214.2.47:8543] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgx-QAAAU4"]
[Wed Sep 30 01:01:15.471497 2026] [security2:error] [pid 186850:tid 187026] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgx_wAAATg"]
[Wed Sep 30 01:01:15.477167 2026] [security2:error] [pid 186850:tid 187101] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzu05Phls--iYlcKgyAQAAAYM"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:15.545920 2026] [security2:error] [pid 186850:tid 187058] [client 20.194.96.176:2180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/or.php"] [unique_id "aryzu05Phls--iYlcKgyBQAAAVg"]
[Wed Sep 30 01:01:15.597041 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.597308 2026] [access_compat:error] [pid 186850:tid 187028] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.623729 2026] [security2:error] [pid 186850:tid 187007] [client 4.196.65.241:2537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/NzxXWLD25py.php"] [unique_id "aryzu05Phls--iYlcKgyDAAAASU"]
[Wed Sep 30 01:01:15.625365 2026] [security2:error] [pid 186850:tid 186980] [client 116.72.182.19:59009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgyDgAAAQo"]
[Wed Sep 30 01:01:15.625463 2026] [security2:error] [pid 186850:tid 186980] [client 116.72.182.19:59009] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgyDgAAAQo"]
[Wed Sep 30 01:01:15.656253 2026] [security2:error] [pid 186850:tid 187004] [client 20.219.2.60:20062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/hots.php"] [unique_id "aryzu05Phls--iYlcKgyEwAAASI"]
[Wed Sep 30 01:01:15.678141 2026] [security2:error] [pid 186850:tid 187097] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgyFgAAAX8"]
[Wed Sep 30 01:01:15.705718 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:15.706004 2026] [access_compat:error] [pid 186850:tid 187013] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:15.739446 2026] [security2:error] [pid 186850:tid 187085] [client 20.194.30.107:17430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/0.php"] [unique_id "aryzu05Phls--iYlcKgyHAAAAXM"]
[Wed Sep 30 01:01:15.747584 2026] [security2:error] [pid 186850:tid 186982] [client 152.59.165.7:62739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgyHQAAAQw"]
[Wed Sep 30 01:01:15.747695 2026] [security2:error] [pid 186850:tid 186982] [client 152.59.165.7:62739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzu05Phls--iYlcKgyHQAAAQw"]
[Wed Sep 30 01:01:15.766348 2026] [security2:error] [pid 186850:tid 187104] [client 20.198.74.230:23563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cilus.php"] [unique_id "aryzu05Phls--iYlcKgyHgAAAYY"]
[Wed Sep 30 01:01:15.773064 2026] [security2:error] [pid 186850:tid 187039] [client 103.168.67.253:54554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzu05Phls--iYlcKgyHwAAAUU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:15.789631 2026] [security2:error] [pid 186850:tid 187071] [client 4.240.25.22:18796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ops.php"] [unique_id "aryzu05Phls--iYlcKgyIQAAAWU"]
[Wed Sep 30 01:01:15.818178 2026] [security2:error] [pid 186850:tid 186996] [client 20.214.109.68:11138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/aboutc.php"] [unique_id "aryzu05Phls--iYlcKgyIwAAARo"]
[Wed Sep 30 01:01:15.856519 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:15.856979 2026] [access_compat:error] [pid 186850:tid 187047] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:15.884443 2026] [security2:error] [pid 186850:tid 187002] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgyLgAAASA"]
[Wed Sep 30 01:01:15.891834 2026] [security2:error] [pid 186850:tid 187078] [client 45.171.217.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryzu05Phls--iYlcKgyLwAAAWw"]
[Wed Sep 30 01:01:15.935069 2026] [security2:error] [pid 186850:tid 187001] [client 114.119.129.254:22379] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.loohan.com"] [uri "/"] [unique_id "aryzu05Phls--iYlcKgyMAAAAR8"], referer: https://forum.loohan.com/
[Wed Sep 30 01:01:16.057395 2026] [security2:error] [pid 186850:tid 186887] [remote 195.178.110.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sergil.net"] [uri "/index.php"] [unique_id "aryzvE5Phls--iYlcKgyOwABEyQ"]
[Wed Sep 30 01:01:16.091326 2026] [security2:error] [pid 186850:tid 187009] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyQQAAASc"]
[Wed Sep 30 01:01:16.118599 2026] [security2:error] [pid 186850:tid 187048] [client 20.219.2.60:20439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/admin-footer.php"] [unique_id "aryzvE5Phls--iYlcKgyRgAAAU4"]
[Wed Sep 30 01:01:16.266681 2026] [security2:error] [pid 186850:tid 187088] [client 43.227.131.37:26909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyUQAAAXY"]
[Wed Sep 30 01:01:16.266786 2026] [security2:error] [pid 186850:tid 187088] [client 43.227.131.37:26909] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyUQAAAXY"]
[Wed Sep 30 01:01:16.292921 2026] [security2:error] [pid 186850:tid 186956] [remote 195.178.110.247:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sergil.net"] [uri "/index.php"] [unique_id "aryzvE5Phls--iYlcKgyVAABEGk"]
[Wed Sep 30 01:01:16.296941 2026] [security2:error] [pid 186850:tid 187079] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyVQAAAW0"]
[Wed Sep 30 01:01:16.354513 2026] [security2:error] [pid 186850:tid 187097] [client 20.214.109.68:11182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gdn.php"] [unique_id "aryzvE5Phls--iYlcKgyVgAAAX8"]
[Wed Sep 30 01:01:16.367084 2026] [security2:error] [pid 186850:tid 186981] [client 20.194.5.96:8572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/plugins.php"] [unique_id "aryzvE5Phls--iYlcKgyWQAAAQs"]
[Wed Sep 30 01:01:16.503098 2026] [security2:error] [pid 186850:tid 187052] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyYQAAAVI"]
[Wed Sep 30 01:01:16.576199 2026] [security2:error] [pid 186850:tid 187065] [client 49.43.163.212:54131] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyYgAAAV8"]
[Wed Sep 30 01:01:16.578359 2026] [security2:error] [pid 186850:tid 187065] [client 49.43.163.212:54131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyYgAAAV8"]
[Wed Sep 30 01:01:16.588315 2026] [security2:error] [pid 186850:tid 187098] [client 20.219.2.60:20421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws84.php"] [unique_id "aryzvE5Phls--iYlcKgyZAAAAYA"]
[Wed Sep 30 01:01:16.590552 2026] [security2:error] [pid 186850:tid 187000] [client 4.196.65.241:19465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/bn.php"] [unique_id "aryzvE5Phls--iYlcKgyZQAAAR4"]
[Wed Sep 30 01:01:16.708247 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.708536 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:16.709176 2026] [security2:error] [pid 186850:tid 187078] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgycQAAAWw"]
[Wed Sep 30 01:01:16.717976 2026] [security2:error] [pid 186850:tid 187032] [client 103.168.67.253:25112] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgycgAAAT4"]
[Wed Sep 30 01:01:16.727275 2026] [security2:error] [pid 186850:tid 187107] [client 104.208.65.139:32244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/uploaxa1.php"] [unique_id "aryzvE5Phls--iYlcKgycwAAAYk"]
[Wed Sep 30 01:01:16.792564 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.792859 2026] [access_compat:error] [pid 186850:tid 187072] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:16.798654 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.798946 2026] [access_compat:error] [pid 186850:tid 186990] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:16.826870 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.827290 2026] [access_compat:error] [pid 186850:tid 187001] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:16.831094 2026] [security2:error] [pid 186850:tid 187035] [client 20.194.96.176:2189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/b8.php"] [unique_id "aryzvE5Phls--iYlcKgygAAAAUE"]
[Wed Sep 30 01:01:16.836407 2026] [security2:error] [pid 186850:tid 187033] [client 103.168.67.253:25112] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyfwAAAT8"]
[Wed Sep 30 01:01:16.844262 2026] [security2:error] [pid 186850:tid 187014] [client 49.205.105.16:13958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgygQAAASw"]
[Wed Sep 30 01:01:16.847379 2026] [security2:error] [pid 186850:tid 187014] [client 49.205.105.16:13958] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgygQAAASw"]
[Wed Sep 30 01:01:16.855843 2026] [security2:error] [pid 186850:tid 187024] [client 20.214.109.68:11197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/first.php"] [unique_id "aryzvE5Phls--iYlcKgyggAAATY"]
[Wed Sep 30 01:01:16.894692 2026] [security2:error] [pid 186850:tid 187094] [client 103.168.67.253:25112] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyhQAAAXw"]
[Wed Sep 30 01:01:16.899120 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:16.899466 2026] [access_compat:error] [pid 186850:tid 187009] [client 74.7.243.227:38928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:01:16.915854 2026] [security2:error] [pid 186850:tid 186992] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyigAAARY"]
[Wed Sep 30 01:01:16.920370 2026] [security2:error] [pid 186850:tid 187053] [client 116.197.133.25:56074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyiwAAAVM"]
[Wed Sep 30 01:01:16.920479 2026] [security2:error] [pid 186850:tid 187053] [client 116.197.133.25:56074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzvE5Phls--iYlcKgyiwAAAVM"]
[Wed Sep 30 01:01:16.939268 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.939543 2026] [access_compat:error] [pid 186850:tid 187030] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:16.951332 2026] [security2:error] [pid 186850:tid 187101] [client 103.168.67.253:25112] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvE5Phls--iYlcKgyjgAAAYM"]
[Wed Sep 30 01:01:16.978886 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:16.979171 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.004028 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.004282 2026] [access_compat:error] [pid 186850:tid 187003] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.010692 2026] [security2:error] [pid 186850:tid 187080] [client 103.168.67.253:25112] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgykwAAAW4"]
[Wed Sep 30 01:01:17.049604 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.049869 2026] [access_compat:error] [pid 186850:tid 187077] [client 216.73.216.46:64794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.055937 2026] [security2:error] [pid 186850:tid 187091] [client 20.219.2.60:19463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/bnm.php"] [unique_id "aryzvU5Phls--iYlcKgymwAAAXk"]
[Wed Sep 30 01:01:17.068343 2026] [security2:error] [pid 186850:tid 186907] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzvU5Phls--iYlcKgyngABIzg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D30606
[Wed Sep 30 01:01:17.068366 2026] [security2:error] [pid 186850:tid 186907] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzvU5Phls--iYlcKgyngABIzg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D30606
[Wed Sep 30 01:01:17.069894 2026] [security2:error] [pid 186850:tid 187007] [client 4.240.25.22:8389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/abcd.php"] [unique_id "aryzvU5Phls--iYlcKgyoQAAASU"]
[Wed Sep 30 01:01:17.071335 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.071608 2026] [access_compat:error] [pid 186850:tid 187088] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.072454 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.072706 2026] [access_compat:error] [pid 186850:tid 187090] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.095646 2026] [security2:error] [pid 186850:tid 187089] [client 20.219.2.60:19372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-act.php"] [unique_id "aryzvU5Phls--iYlcKgyowAAAXc"]
[Wed Sep 30 01:01:17.116365 2026] [security2:error] [pid 186850:tid 187050] [client 45.138.12.32:16392] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.mcr.pyt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzvU5Phls--iYlcKgypAAAAVA"]
[Wed Sep 30 01:01:17.120609 2026] [security2:error] [pid 186850:tid 187043] [client 4.240.25.22:30778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/js.php"] [unique_id "aryzvU5Phls--iYlcKgypgAAAUk"]
[Wed Sep 30 01:01:17.121497 2026] [security2:error] [pid 186850:tid 187031] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgypQAAAT0"]
[Wed Sep 30 01:01:17.142850 2026] [security2:error] [pid 186850:tid 186981] [client 82.102.18.126:44382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzvU5Phls--iYlcKgypwAAAQs"]
[Wed Sep 30 01:01:17.153962 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.154231 2026] [access_compat:error] [pid 186850:tid 187004] [client 216.73.216.46:50522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.159927 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.160210 2026] [access_compat:error] [pid 186850:tid 187010] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.174384 2026] [security2:error] [pid 186850:tid 187067] [client 4.240.25.22:33289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/sxxb.php"] [unique_id "aryzvU5Phls--iYlcKgyrQAAAWE"]
[Wed Sep 30 01:01:17.180738 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:13361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.181195 2026] [access_compat:error] [pid 186850:tid 186987] [client 216.73.216.46:13361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.214951 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.215154 2026] [security2:error] [pid 186850:tid 187052] [client 20.194.5.96:8948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/groud3.php"] [unique_id "aryzvU5Phls--iYlcKgysgAAAVI"]
[Wed Sep 30 01:01:17.215230 2026] [access_compat:error] [pid 186850:tid 187019] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.235579 2026] [security2:error] [pid 186850:tid 187037] [client 216.73.216.46:64794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzvU5Phls--iYlcKgytAAAAUM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDExL3Bvd2Vy
[Wed Sep 30 01:01:17.252888 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:13361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.253167 2026] [access_compat:error] [pid 186850:tid 187096] [client 216.73.216.46:13361] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.279709 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.279981 2026] [access_compat:error] [pid 186850:tid 187039] [client 216.73.216.46:63949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.327944 2026] [security2:error] [pid 186850:tid 187078] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgyvQAAAWw"]
[Wed Sep 30 01:01:17.346089 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.346373 2026] [access_compat:error] [pid 186850:tid 187025] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.359396 2026] [security2:error] [pid 186850:tid 187069] [client 152.59.169.65:64952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzvU5Phls--iYlcKgywAAAAWM"]
[Wed Sep 30 01:01:17.363886 2026] [security2:error] [pid 186850:tid 187069] [client 152.59.169.65:64952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzvU5Phls--iYlcKgywAAAAWM"]
[Wed Sep 30 01:01:17.435103 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.435374 2026] [access_compat:error] [pid 186850:tid 187014] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.492394 2026] [security2:error] [pid 186850:tid 186989] [client 82.102.18.126:44392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/xmlrpc.php"] [unique_id "aryzvU5Phls--iYlcKgyywAAARM"]
[Wed Sep 30 01:01:17.524401 2026] [security2:error] [pid 186850:tid 186992] [client 20.194.96.176:30177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/xex.php"] [unique_id "aryzvU5Phls--iYlcKgy0AAAARY"]
[Wed Sep 30 01:01:17.530668 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.530676 2026] [security2:error] [pid 186850:tid 187053] [client 20.219.2.60:20185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/amax.php"] [unique_id "aryzvU5Phls--iYlcKgy0QAAAVM"]
[Wed Sep 30 01:01:17.531119 2026] [access_compat:error] [pid 186850:tid 187015] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.533351 2026] [security2:error] [pid 186850:tid 187006] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgy0gAAASQ"]
[Wed Sep 30 01:01:17.617144 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.617421 2026] [access_compat:error] [pid 186850:tid 186997] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.633190 2026] [security2:error] [pid 186850:tid 186919] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzvU5Phls--iYlcKgy2AABfUQ"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D14844
[Wed Sep 30 01:01:17.713640 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.714100 2026] [access_compat:error] [pid 186850:tid 187089] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.740148 2026] [security2:error] [pid 186850:tid 187056] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgy4AAAAVY"]
[Wed Sep 30 01:01:17.776122 2026] [security2:error] [pid 186850:tid 187043] [client 4.240.25.22:8455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/w.php"] [unique_id "aryzvU5Phls--iYlcKgy4wAAAUk"]
[Wed Sep 30 01:01:17.805290 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.805748 2026] [access_compat:error] [pid 186850:tid 187055] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.889188 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.889448 2026] [access_compat:error] [pid 186850:tid 187067] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:17.950236 2026] [security2:error] [pid 186850:tid 187104] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvU5Phls--iYlcKgy8gAAAYY"]
[Wed Sep 30 01:01:17.974251 2026] [security2:error] [pid 186850:tid 187098] [client 82.102.18.126:44402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzvU5Phls--iYlcKgy8wAAAYA"]
[Wed Sep 30 01:01:17.982215 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:17.982581 2026] [access_compat:error] [pid 186850:tid 186996] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.001168 2026] [security2:error] [pid 186850:tid 186985] [client 20.219.2.60:19458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/66.php"] [unique_id "aryzvU5Phls--iYlcKgy9QAAAQ8"]
[Wed Sep 30 01:01:18.001726 2026] [security2:error] [pid 186850:tid 187047] [client 216.244.66.239:34068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/pokhudenie_po_25_kadru_ne_pomoglo_24.xml"] [unique_id "aryzvk5Phls--iYlcKgy9gAAAU0"]
[Wed Sep 30 01:01:18.001857 2026] [security2:error] [pid 186850:tid 187047] [client 216.244.66.239:34068] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/pokhudenie_po_25_kadru_ne_pomoglo_24.xml"] [unique_id "aryzvk5Phls--iYlcKgy9gAAAU0"]
[Wed Sep 30 01:01:18.084303 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.084569 2026] [access_compat:error] [pid 186850:tid 187042] [client 216.73.216.46:54963] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.095972 2026] [security2:error] [pid 186850:tid 187054] [client 51.38.115.13:34062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.115.38.51.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.silomaq.com"] [uri "/index.php/productos/detectores-de-metales-horizontales"] [unique_id "aryzvk5Phls--iYlcKgy9wAAAVQ"]
[Wed Sep 30 01:01:18.144721 2026] [security2:error] [pid 186850:tid 187076] [client 20.194.96.176:55683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/CAE-2.5.php"] [unique_id "aryzvk5Phls--iYlcKgy_QAAAWo"]
[Wed Sep 30 01:01:18.157091 2026] [security2:error] [pid 186850:tid 187000] [client 84.13.142.21:57466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzvk5Phls--iYlcKgy_gAAAR4"]
[Wed Sep 30 01:01:18.164633 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.164907 2026] [access_compat:error] [pid 186850:tid 186988] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.256417 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.256765 2026] [access_compat:error] [pid 186850:tid 187012] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.306343 2026] [security2:error] [pid 186850:tid 186992] [client 82.102.18.126:44408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzvk5Phls--iYlcKgzCgAAARY"]
[Wed Sep 30 01:01:18.346026 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.346318 2026] [access_compat:error] [pid 186850:tid 186995] [client 216.73.216.46:30486] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.361028 2026] [security2:error] [pid 186850:tid 187073] [client 20.194.5.96:42668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/gaxby.php"] [unique_id "aryzvk5Phls--iYlcKgzDwAAAWc"]
[Wed Sep 30 01:01:18.641764 2026] [security2:error] [pid 186850:tid 187025] [client 103.168.67.253:25116] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzvk5Phls--iYlcKgzEAAAATc"]
[Wed Sep 30 01:01:18.864968 2026] [http2:info] [pid 212454:tid 212454] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:01:18.892318 2026] [security2:error] [pid 212454:tid 212585] [client 20.219.2.60:20436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/public/file.php"] [unique_id "aryzvryZ9IcLq1oV6peaoAAAAAE"]
[Wed Sep 30 01:01:18.893938 2026] [security2:error] [pid 212454:tid 212586] [client 45.138.12.32:16434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcr.pyt.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzvryZ9IcLq1oV6peaogAAAAI"]
[Wed Sep 30 01:01:18.894514 2026] [security2:error] [pid 212454:tid 212592] [client 4.196.65.241:19099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/dsfsa.php"] [unique_id "aryzvryZ9IcLq1oV6peapAAAAAg"]
[Wed Sep 30 01:01:18.895971 2026] [security2:error] [pid 212454:tid 212599] [client 82.102.18.126:44418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzvryZ9IcLq1oV6peapwAAAA8"]
[Wed Sep 30 01:01:18.896357 2026] [security2:error] [pid 212454:tid 212605] [client 20.219.2.60:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/cu.php"] [unique_id "aryzvryZ9IcLq1oV6peaqQAAABU"]
[Wed Sep 30 01:01:18.897213 2026] [security2:error] [pid 212454:tid 212607] [client 20.214.109.68:11175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/redixsx.php"] [unique_id "aryzvryZ9IcLq1oV6peaqgAAABc"]
[Wed Sep 30 01:01:18.900352 2026] [security2:error] [pid 212454:tid 212603] [client 20.194.96.176:25491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/ass.php"] [unique_id "aryzvryZ9IcLq1oV6pearQAAABM"]
[Wed Sep 30 01:01:18.902192 2026] [security2:error] [pid 212454:tid 212609] [client 104.208.65.139:9952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/uploartg.php"] [unique_id "aryzvryZ9IcLq1oV6peargAAABk"]
[Wed Sep 30 01:01:18.909326 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:37650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.909653 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.909661 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:37650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.909720 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:7912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.909883 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:4197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.910040 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.910188 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:7912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.910243 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.910300 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:4197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.910397 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:18.910673 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.910827 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:18.965394 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:1650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.965686 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:1650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:18.985658 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:18.985924 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.076509 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.076797 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.078633 2026] [security2:error] [pid 212454:tid 212636] [client 151.244.33.85:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzv7yZ9IcLq1oV6peayAAAADQ"]
[Wed Sep 30 01:01:19.107891 2026] [security2:error] [pid 212454:tid 212606] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzv7yZ9IcLq1oV6peayQAAABY"]
[Wed Sep 30 01:01:19.121875 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:19.122179 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:19.151203 2026] [security2:error] [pid 212454:tid 212654] [client 216.73.216.46:1650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzv7yZ9IcLq1oV6peazgAAAEY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1MTE%3D
[Wed Sep 30 01:01:19.170873 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.171311 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.224258 2026] [security2:error] [pid 212454:tid 212667] [client 82.102.18.126:44426] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzv7yZ9IcLq1oV6pea0wAAAFM"]
[Wed Sep 30 01:01:19.255975 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.256254 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.271727 2026] [security2:error] [pid 212454:tid 212679] [client 4.240.25.22:30741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/echkm.php"] [unique_id "aryzv7yZ9IcLq1oV6pea2wAAAF8"]
[Wed Sep 30 01:01:19.317058 2026] [security2:error] [pid 212454:tid 212684] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzv7yZ9IcLq1oV6pea3gAAAGQ"]
[Wed Sep 30 01:01:19.346203 2026] [security2:error] [pid 212454:tid 212689] [client 20.219.2.60:20164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/166.php"] [unique_id "aryzv7yZ9IcLq1oV6pea4gAAAGk"]
[Wed Sep 30 01:01:19.347430 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.347694 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.437875 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.438152 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.524729 2026] [security2:error] [pid 212454:tid 212605] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzv7yZ9IcLq1oV6pea7gAAABU"]
[Wed Sep 30 01:01:19.529962 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.530220 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.536624 2026] [security2:error] [pid 212454:tid 212607] [client 82.102.18.126:44428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzv7yZ9IcLq1oV6pea8AAAABc"]
[Wed Sep 30 01:01:19.610776 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:19.611060 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:19.626791 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.627247 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.697042 2026] [security2:error] [pid 212454:tid 212634] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "aryzv7yZ9IcLq1oV6pea_wAAADI"]
[Wed Sep 30 01:01:19.705404 2026] [security2:error] [pid 212454:tid 212618] [client 185.223.41.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzv7yZ9IcLq1oV6pebAAAAACI"]
[Wed Sep 30 01:01:19.718743 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.719204 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.732970 2026] [security2:error] [pid 212454:tid 212642] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzv7yZ9IcLq1oV6pebAgAAADo"]
[Wed Sep 30 01:01:19.807937 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.808202 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.829029 2026] [security2:error] [pid 212454:tid 212620] [client 20.219.2.60:20053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/ws77.php"] [unique_id "aryzv7yZ9IcLq1oV6pebCAAAACQ"]
[Wed Sep 30 01:01:19.880239 2026] [security2:error] [pid 212454:tid 212652] [client 82.102.18.126:44436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzv7yZ9IcLq1oV6pebDwAAAEQ"]
[Wed Sep 30 01:01:19.880944 2026] [security2:error] [pid 212454:tid 212606] [client 62.171.174.208:51596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.174.171.62.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "aryzv7yZ9IcLq1oV6pebDAAAABY"], referer: http://paulmerceronline.com/wp-login.php
[Wed Sep 30 01:01:19.897353 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.897954 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.941942 2026] [security2:error] [pid 212454:tid 212655] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzv7yZ9IcLq1oV6pebEQAAAEc"]
[Wed Sep 30 01:01:19.987091 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:19.987353 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:19.999829 2026] [security2:error] [pid 212454:tid 212656] [client 20.219.2.60:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/8.php"] [unique_id "aryzv7yZ9IcLq1oV6pebFwAAAEg"]
[Wed Sep 30 01:01:20.011729 2026] [security2:error] [pid 212454:tid 212663] [client 4.196.65.241:27314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ded.php"] [unique_id "aryzwLyZ9IcLq1oV6pebGAAAAE8"]
[Wed Sep 30 01:01:20.083218 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.083218 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:20.083660 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.083660 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:20.149519 2026] [security2:error] [pid 212454:tid 212682] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwLyZ9IcLq1oV6pebHwAAAGI"]
[Wed Sep 30 01:01:20.168853 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.169133 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.215318 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.109.68:11162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/cpp2.php"] [unique_id "aryzwLyZ9IcLq1oV6pebIQAAAFA"]
[Wed Sep 30 01:01:20.224011 2026] [security2:error] [pid 212454:tid 212684] [client 82.102.18.126:44438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzwLyZ9IcLq1oV6pebIgAAAGQ"]
[Wed Sep 30 01:01:20.260648 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.260929 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.285640 2026] [security2:error] [pid 212454:tid 212673] [client 20.219.2.60:19479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/www.php"] [unique_id "aryzwLyZ9IcLq1oV6pebJgAAAFk"]
[Wed Sep 30 01:01:20.335862 2026] [security2:error] [pid 212454:tid 212619] [client 216.244.66.239:34074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/retikuliarnyi_varikoz_chem_opasen_20.xml"] [unique_id "aryzwLyZ9IcLq1oV6pebKwAAACM"]
[Wed Sep 30 01:01:20.335968 2026] [security2:error] [pid 212454:tid 212619] [client 216.244.66.239:34074] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/retikuliarnyi_varikoz_chem_opasen_20.xml"] [unique_id "aryzwLyZ9IcLq1oV6pebKwAAACM"]
[Wed Sep 30 01:01:20.353589 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.353887 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.358132 2026] [security2:error] [pid 212454:tid 212697] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwLyZ9IcLq1oV6pebLwAAAHE"]
[Wed Sep 30 01:01:20.446275 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.446534 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.467148 2026] [security2:error] [pid 212454:tid 212696] [client 104.208.65.139:18503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/bgbagbcw.php"] [unique_id "aryzwLyZ9IcLq1oV6pebMgAAAHA"]
[Wed Sep 30 01:01:20.490857 2026] [security2:error] [pid 212454:tid 212643] [client 49.36.41.37:61412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebNQAAADs"]
[Wed Sep 30 01:01:20.491069 2026] [security2:error] [pid 212454:tid 212643] [client 49.36.41.37:61412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebNQAAADs"]
[Wed Sep 30 01:01:20.526897 2026] [security2:error] [pid 212454:tid 212607] [client 20.194.96.176:59677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/felnggg.php"] [unique_id "aryzwLyZ9IcLq1oV6pebNgAAABc"]
[Wed Sep 30 01:01:20.538505 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.538953 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.541309 2026] [security2:error] [pid 212454:tid 212604] [client 82.102.18.126:11148] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzwLyZ9IcLq1oV6pebOAAAABQ"]
[Wed Sep 30 01:01:20.562405 2026] [security2:error] [pid 212454:tid 212689] [client 182.69.182.151:8370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebOQAAAGk"]
[Wed Sep 30 01:01:20.562549 2026] [security2:error] [pid 212454:tid 212689] [client 182.69.182.151:8370] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebOQAAAGk"]
[Wed Sep 30 01:01:20.566447 2026] [security2:error] [pid 212454:tid 212590] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwLyZ9IcLq1oV6pebOgAAAAY"]
[Wed Sep 30 01:01:20.597978 2026] [security2:error] [pid 212454:tid 212628] [client 4.196.65.241:19498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wdone1.php"] [unique_id "aryzwLyZ9IcLq1oV6pebPAAAACw"]
[Wed Sep 30 01:01:20.611217 2026] [security2:error] [pid 212454:tid 212588] [client 103.168.67.253:25100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzwLyZ9IcLq1oV6pebPQAAAAQ"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:20.620445 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:20.620700 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:20.623465 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.623731 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.676526 2026] [security2:error] [pid 212454:tid 212601] [client 95.16.86.92:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/network-cables-networking"] [unique_id "aryzwLyZ9IcLq1oV6pebQwAAABE"]
[Wed Sep 30 01:01:20.717912 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.718336 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.757871 2026] [security2:error] [pid 212454:tid 212610] [client 20.219.2.60:20435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/adoms.php"] [unique_id "aryzwLyZ9IcLq1oV6pebVAAAABo"]
[Wed Sep 30 01:01:20.775609 2026] [security2:error] [pid 212454:tid 212649] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwLyZ9IcLq1oV6pebWAAAAEE"]
[Wed Sep 30 01:01:20.783729 2026] [security2:error] [pid 212454:tid 212627] [client 20.194.5.96:8956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/dh9u7.php"] [unique_id "aryzwLyZ9IcLq1oV6pebWQAAACs"]
[Wed Sep 30 01:01:20.811972 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.812442 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.826563 2026] [security2:error] [pid 212454:tid 212666] [client 103.159.192.142:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebXwAAAFI"]
[Wed Sep 30 01:01:20.826742 2026] [security2:error] [pid 212454:tid 212666] [client 103.159.192.142:57868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzwLyZ9IcLq1oV6pebXwAAAFI"]
[Wed Sep 30 01:01:20.835959 2026] [security2:error] [pid 212454:tid 212654] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzwLyZ9IcLq1oV6pebYQAAAEY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:20.865918 2026] [security2:error] [pid 212454:tid 212646] [client 20.194.30.107:17421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/pJPoKA.php"] [unique_id "aryzwLyZ9IcLq1oV6pebZAAAAD4"]
[Wed Sep 30 01:01:20.878833 2026] [security2:error] [pid 212454:tid 212621] [client 82.102.18.126:44462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzwLyZ9IcLq1oV6pebZgAAACU"]
[Wed Sep 30 01:01:20.897047 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.897309 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:20.985451 2026] [security2:error] [pid 212454:tid 212690] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwLyZ9IcLq1oV6pebcAAAAGo"]
[Wed Sep 30 01:01:20.990269 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:20.990546 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.081101 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.081367 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.147268 2026] [access_compat:error] [pid 212454:tid 212692] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:21.150946 2026] [access_compat:error] [pid 212454:tid 212692] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:21.173261 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.173510 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.193515 2026] [security2:error] [pid 212454:tid 212595] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwbyZ9IcLq1oV6pebfwAAAAs"]
[Wed Sep 30 01:01:21.201555 2026] [security2:error] [pid 212454:tid 212689] [client 74.7.228.45:59192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "eee.llp.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzwbyZ9IcLq1oV6pebgAAAaTo"]
[Wed Sep 30 01:01:21.207573 2026] [security2:error] [pid 212454:tid 212631] [client 82.102.18.126:44468] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzwbyZ9IcLq1oV6pebgwAAAC8"]
[Wed Sep 30 01:01:21.226019 2026] [security2:error] [pid 212454:tid 212700] [client 20.219.2.60:20040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/tymn.php"] [unique_id "aryzwbyZ9IcLq1oV6pebhAAAAHQ"]
[Wed Sep 30 01:01:21.235949 2026] [security2:error] [pid 212454:tid 212601] [client 87.196.81.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "aryzwbyZ9IcLq1oV6pebhQAAABE"]
[Wed Sep 30 01:01:21.249804 2026] [security2:error] [pid 212454:tid 212514] [remote 47.128.113.96:55018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/ncat/14/pg/8/featured"] [unique_id "aryzwbyZ9IcLq1oV6pebiAAAHDs"]
[Wed Sep 30 01:01:21.256956 2026] [security2:error] [pid 212454:tid 212678] [client 4.185.40.215:1349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzwbyZ9IcLq1oV6pebhgAAAF4"]
[Wed Sep 30 01:01:21.263241 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.263678 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.283552 2026] [security2:error] [pid 212454:tid 212626] [client 223.181.30.165:6825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebjQAAACo"]
[Wed Sep 30 01:01:21.283665 2026] [security2:error] [pid 212454:tid 212626] [client 223.181.30.165:6825] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebjQAAACo"]
[Wed Sep 30 01:01:21.342615 2026] [security2:error] [pid 212454:tid 212640] [client 37.41.16.35:60423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebkQAAADg"]
[Wed Sep 30 01:01:21.342786 2026] [security2:error] [pid 212454:tid 212640] [client 37.41.16.35:60423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebkQAAADg"]
[Wed Sep 30 01:01:21.346620 2026] [security2:error] [pid 212454:tid 212625] [client 62.171.174.208:51598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.174.171.62.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "aryzwbyZ9IcLq1oV6peblAAAACk"], referer: http://paulmerceronline.com/wp-login.php
[Wed Sep 30 01:01:21.353126 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.353389 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.401968 2026] [security2:error] [pid 212454:tid 212654] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwbyZ9IcLq1oV6pebmgAAAEY"]
[Wed Sep 30 01:01:21.447897 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.448354 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.475288 2026] [security2:error] [pid 212454:tid 212621] [client 20.214.109.68:11220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/admlo.php"] [unique_id "aryzwbyZ9IcLq1oV6peboAAAACU"]
[Wed Sep 30 01:01:21.536536 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.536805 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.544737 2026] [security2:error] [pid 212454:tid 212684] [client 82.102.18.126:44480] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzwbyZ9IcLq1oV6pebpwAAAGQ"]
[Wed Sep 30 01:01:21.569283 2026] [security2:error] [pid 212454:tid 212656] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzwbyZ9IcLq1oV6pebqAAAAEg"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:21.598904 2026] [security2:error] [pid 212454:tid 212669] [client 45.239.26.208:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryzwbyZ9IcLq1oV6pebrAAAAFU"]
[Wed Sep 30 01:01:21.599970 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:21.600338 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:21.608285 2026] [security2:error] [pid 212454:tid 212650] [client 4.185.40.215:1374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzwbyZ9IcLq1oV6pebrQAAAEI"]
[Wed Sep 30 01:01:21.609802 2026] [security2:error] [pid 212454:tid 212658] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwbyZ9IcLq1oV6pebrgAAAEo"]
[Wed Sep 30 01:01:21.626994 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.627265 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.686111 2026] [security2:error] [pid 212454:tid 212697] [client 20.219.2.60:19516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/eetu.php"] [unique_id "aryzwbyZ9IcLq1oV6pebsgAAAHE"]
[Wed Sep 30 01:01:21.718353 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.718614 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.746994 2026] [security2:error] [pid 212454:tid 212627] [client 103.241.204.139:62742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebtwAAACs"]
[Wed Sep 30 01:01:21.747125 2026] [security2:error] [pid 212454:tid 212627] [client 103.241.204.139:62742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzwbyZ9IcLq1oV6pebtwAAACs"]
[Wed Sep 30 01:01:21.807887 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.808139 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.817639 2026] [security2:error] [pid 212454:tid 212686] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwbyZ9IcLq1oV6pebvgAAAGY"]
[Wed Sep 30 01:01:21.875725 2026] [security2:error] [pid 212454:tid 212700] [client 82.102.18.126:44482] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzwbyZ9IcLq1oV6pebwwAAAHQ"]
[Wed Sep 30 01:01:21.900521 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.900803 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:21.915185 2026] [security2:error] [pid 212454:tid 212670] [client 4.185.40.215:1380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ccs.php"] [unique_id "aryzwbyZ9IcLq1oV6pebxgAAAFY"]
[Wed Sep 30 01:01:21.942978 2026] [security2:error] [pid 212454:tid 212634] [client 20.194.30.107:34718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/f35.update.php"] [unique_id "aryzwbyZ9IcLq1oV6pebxwAAADI"]
[Wed Sep 30 01:01:21.995100 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:21.995357 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.002954 2026] [security2:error] [pid 212454:tid 212644] [client 104.208.65.139:9956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/tegubsiu.php"] [unique_id "aryzwryZ9IcLq1oV6pebyQAAADw"]
[Wed Sep 30 01:01:22.022506 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzwryZ9IcLq1oV6pebzAAAAA8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:22.025651 2026] [security2:error] [pid 212454:tid 212651] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwryZ9IcLq1oV6pebzQAAAEM"]
[Wed Sep 30 01:01:22.082479 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.082759 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.084244 2026] [access_compat:error] [pid 212454:tid 212603] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:22.084507 2026] [access_compat:error] [pid 212454:tid 212603] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:22.161840 2026] [security2:error] [pid 212454:tid 212625] [client 20.219.2.60:19488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/dx.php"] [unique_id "aryzwryZ9IcLq1oV6peb1AAAACk"]
[Wed Sep 30 01:01:22.174796 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.175087 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.195906 2026] [security2:error] [pid 212454:tid 212590] [client 82.102.18.126:44498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryzwryZ9IcLq1oV6peb2gAAAAY"]
[Wed Sep 30 01:01:22.207063 2026] [security2:error] [pid 212454:tid 212597] [client 223.181.60.167:4284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzwryZ9IcLq1oV6peb2QAAAA0"]
[Wed Sep 30 01:01:22.207196 2026] [security2:error] [pid 212454:tid 212597] [client 223.181.60.167:4284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzwryZ9IcLq1oV6peb2QAAAA0"]
[Wed Sep 30 01:01:22.225420 2026] [security2:error] [pid 212454:tid 212665] [client 4.185.40.215:1356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/set.php"] [unique_id "aryzwryZ9IcLq1oV6peb2wAAAFE"]
[Wed Sep 30 01:01:22.234071 2026] [security2:error] [pid 212454:tid 212632] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwryZ9IcLq1oV6peb3AAAADA"]
[Wed Sep 30 01:01:22.246056 2026] [security2:error] [pid 212454:tid 212532] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzwryZ9IcLq1oV6peb4QAATU0"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D30577
[Wed Sep 30 01:01:22.246095 2026] [security2:error] [pid 212454:tid 212532] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzwryZ9IcLq1oV6peb4QAATU0"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D30577
[Wed Sep 30 01:01:22.263920 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.264224 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.336845 2026] [security2:error] [pid 212454:tid 212624] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzwryZ9IcLq1oV6peb6wAAACg"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:22.355605 2026] [security2:error] [pid 212454:tid 212690] [client 20.194.5.96:61803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/yvnqcuic.php"] [unique_id "aryzwryZ9IcLq1oV6peb8QAAAGo"]
[Wed Sep 30 01:01:22.360607 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.360877 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.393980 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.109.68:11096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/admin-ajax.php"] [unique_id "aryzwryZ9IcLq1oV6peb-QAAAHw"]
[Wed Sep 30 01:01:22.429604 2026] [security2:error] [pid 212454:tid 212681] [client 150.107.232.159:36274] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzwryZ9IcLq1oV6peb_QAAAGE"]
[Wed Sep 30 01:01:22.429826 2026] [security2:error] [pid 212454:tid 212681] [client 150.107.232.159:36274] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzwryZ9IcLq1oV6peb_QAAAGE"]
[Wed Sep 30 01:01:22.442447 2026] [security2:error] [pid 212454:tid 212643] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwryZ9IcLq1oV6peb_gAAADs"]
[Wed Sep 30 01:01:22.447837 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.448108 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.533082 2026] [security2:error] [pid 212454:tid 212634] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzwryZ9IcLq1oV6pecBQAAADI"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:22.536799 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.537068 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.540422 2026] [security2:error] [pid 212454:tid 212595] [client 82.102.18.126:44502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzwryZ9IcLq1oV6pecBwAAAAs"]
[Wed Sep 30 01:01:22.542419 2026] [security2:error] [pid 212454:tid 212612] [client 4.185.40.215:1287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/mode.php"] [unique_id "aryzwryZ9IcLq1oV6pecCQAAABw"]
[Wed Sep 30 01:01:22.574499 2026] [security2:error] [pid 212454:tid 212698] [client 4.240.25.22:8458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/aaa.php"] [unique_id "aryzwryZ9IcLq1oV6pecDAAAAHI"]
[Wed Sep 30 01:01:22.603353 2026] [security2:error] [pid 212454:tid 212644] [client 20.219.2.60:18898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws60.php"] [unique_id "aryzwryZ9IcLq1oV6pecDwAAADw"]
[Wed Sep 30 01:01:22.605198 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:22.605662 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:01:22.635585 2026] [security2:error] [pid 212454:tid 212626] [client 20.219.2.60:20186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-kikikoko.php"] [unique_id "aryzwryZ9IcLq1oV6pecFAAAACo"]
[Wed Sep 30 01:01:22.636394 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.636642 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.651037 2026] [security2:error] [pid 212454:tid 212620] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwryZ9IcLq1oV6pecFgAAACQ"]
[Wed Sep 30 01:01:22.703372 2026] [security2:error] [pid 212454:tid 212638] [client 4.196.65.241:19171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/c3c427fa59.php"] [unique_id "aryzwryZ9IcLq1oV6pecGQAAADY"]
[Wed Sep 30 01:01:22.721613 2026] [security2:error] [pid 212454:tid 212665] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzwryZ9IcLq1oV6pecGgAAAFE"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:22.721669 2026] [security2:error] [pid 212454:tid 212642] [client 173.254.29.157:43834] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzwryZ9IcLq1oV6pecGwAAADo"]
[Wed Sep 30 01:01:22.723853 2026] [security2:error] [pid 212454:tid 212648] [client 105.112.178.79:38348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fennell-woodbank.co.uk"] [uri "/.env"] [unique_id "aryzwryZ9IcLq1oV6pecHQAAAEA"]
[Wed Sep 30 01:01:22.727701 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.727955 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.738721 2026] [security2:error] [pid 212454:tid 212672] [client 173.254.29.157:43842] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzwryZ9IcLq1oV6pecIAAAAFg"]
[Wed Sep 30 01:01:22.754537 2026] [security2:error] [pid 212454:tid 212641] [client 173.254.29.157:43852] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzwryZ9IcLq1oV6pecIgAAADk"]
[Wed Sep 30 01:01:22.755096 2026] [security2:error] [pid 212454:tid 212655] [client 20.198.74.230:23931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/myglu.php"] [unique_id "aryzwryZ9IcLq1oV6pecIwAAAEc"]
[Wed Sep 30 01:01:22.775651 2026] [security2:error] [pid 212454:tid 212684] [client 173.254.29.157:43860] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzwryZ9IcLq1oV6pecJAAAAGQ"]
[Wed Sep 30 01:01:22.782931 2026] [security2:error] [pid 212454:tid 212615] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzwryZ9IcLq1oV6pecJQAAAB8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:22.825869 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.826321 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.846443 2026] [security2:error] [pid 212454:tid 212650] [client 4.185.40.215:1362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ok.php"] [unique_id "aryzwryZ9IcLq1oV6pecNAAAAEI"]
[Wed Sep 30 01:01:22.851447 2026] [security2:error] [pid 212454:tid 212593] [client 4.196.65.241:27269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/dex.php"] [unique_id "aryzwryZ9IcLq1oV6pecNQAAAAk"]
[Wed Sep 30 01:01:22.860036 2026] [security2:error] [pid 212454:tid 212611] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzwryZ9IcLq1oV6pecNgAAABs"]
[Wed Sep 30 01:01:22.873022 2026] [security2:error] [pid 212454:tid 212688] [client 82.102.18.126:10726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.h2olifeandstyle.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzwryZ9IcLq1oV6pecNwAAAGg"]
[Wed Sep 30 01:01:22.910082 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:22.910455 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:22.999614 2026] [core:error] [pid 212454:tid 212696] [client 31.40.204.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:22.999634 2026] [core:error] [pid 212454:tid 212696] [client 31.40.204.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:23.002604 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.002908 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.068641 2026] [security2:error] [pid 212454:tid 212620] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzw7yZ9IcLq1oV6pecTQAAACQ"]
[Wed Sep 30 01:01:23.076778 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:23.077108 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:01:23.093757 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.094086 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.113215 2026] [security2:error] [pid 212454:tid 212609] [client 20.219.2.60:20456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/file61.php"] [unique_id "aryzw7yZ9IcLq1oV6pecUwAAABk"]
[Wed Sep 30 01:01:23.127264 2026] [security2:error] [pid 212454:tid 212642] [client 4.240.25.22:18695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/admin.php"] [unique_id "aryzw7yZ9IcLq1oV6pecVAAAADo"]
[Wed Sep 30 01:01:23.175684 2026] [security2:error] [pid 212454:tid 212695] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzw7yZ9IcLq1oV6pecVgAAAG8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.182232 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.182494 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:34299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.275137 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.275390 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.276913 2026] [security2:error] [pid 212454:tid 212613] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzw7yZ9IcLq1oV6pecYQAAAB0"]
[Wed Sep 30 01:01:23.289255 2026] [security2:error] [pid 212454:tid 212615] [client 20.194.96.176:53412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/felnggg.update.php"] [unique_id "aryzw7yZ9IcLq1oV6pecYgAAAB8"]
[Wed Sep 30 01:01:23.325756 2026] [security2:error] [pid 212454:tid 212640] [client 4.185.40.215:1312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/zoo.php"] [unique_id "aryzw7yZ9IcLq1oV6pecZQAAADg"]
[Wed Sep 30 01:01:23.332703 2026] [security2:error] [pid 212454:tid 212584] [client 223.235.102.107:20278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzw7yZ9IcLq1oV6pecZwAAAAA"]
[Wed Sep 30 01:01:23.333304 2026] [security2:error] [pid 212454:tid 212584] [client 223.235.102.107:20278] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzw7yZ9IcLq1oV6pecZwAAAAA"]
[Wed Sep 30 01:01:23.363017 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:34299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzw7yZ9IcLq1oV6pecawAAADQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy9wY2lfYnVzLzAwMDA6MDAvZGV2aWNlLzAwMDA6MDA6MDMuMy9kcml2ZXIvMDAwMDowMDowMy41
[Wed Sep 30 01:01:23.365927 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.366199 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.371395 2026] [security2:error] [pid 212454:tid 212593] [client 20.214.109.68:11176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/amthd.php"] [unique_id "aryzw7yZ9IcLq1oV6pecbQAAAAk"]
[Wed Sep 30 01:01:23.456843 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.457118 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.482360 2026] [security2:error] [pid 212454:tid 212646] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzw7yZ9IcLq1oV6pecdAAAAD4"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.484489 2026] [security2:error] [pid 212454:tid 212596] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzw7yZ9IcLq1oV6pecdQAAAAw"]
[Wed Sep 30 01:01:23.548499 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:25126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzw7yZ9IcLq1oV6pecegAAAC0"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.549202 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.549481 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.580671 2026] [security2:error] [pid 212454:tid 212664] [client 20.194.5.96:8925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/koiy.php"] [unique_id "aryzw7yZ9IcLq1oV6pecfAAAAFA"]
[Wed Sep 30 01:01:23.593766 2026] [security2:error] [pid 212454:tid 212635] [client 20.219.2.60:19567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/xx.php"] [unique_id "aryzw7yZ9IcLq1oV6pecfQAAADM"]
[Wed Sep 30 01:01:23.614054 2026] [access_compat:error] [pid 212454:tid 212663] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:23.614341 2026] [access_compat:error] [pid 212454:tid 212663] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:23.640340 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.640622 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.693417 2026] [security2:error] [pid 212454:tid 212707] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzw7yZ9IcLq1oV6pechwAAAHs"]
[Wed Sep 30 01:01:23.693528 2026] [security2:error] [pid 212454:tid 212599] [client 4.185.40.215:1299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gaza.php"] [unique_id "aryzw7yZ9IcLq1oV6peciAAAAA8"]
[Wed Sep 30 01:01:23.730739 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.731033 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.748567 2026] [security2:error] [pid 212454:tid 212711] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzw7yZ9IcLq1oV6pecjAAAAH8"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.796576 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzw7yZ9IcLq1oV6pecjgAAABc"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.821596 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.821868 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.843038 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzw7yZ9IcLq1oV6peckwAAAFY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.891144 2026] [security2:error] [pid 212454:tid 212597] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzw7yZ9IcLq1oV6peclgAAAA0"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.901107 2026] [security2:error] [pid 212454:tid 212603] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzw7yZ9IcLq1oV6pecmAAAABM"]
[Wed Sep 30 01:01:23.915133 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:23.915394 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:23.939646 2026] [security2:error] [pid 212454:tid 212705] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzw7yZ9IcLq1oV6pecmwAAAHk"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:23.986821 2026] [security2:error] [pid 212454:tid 212624] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzw7yZ9IcLq1oV6pecnQAAACg"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:24.001168 2026] [security2:error] [pid 212454:tid 212678] [client 4.185.40.215:1388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/grsiuk.php"] [unique_id "aryzxLyZ9IcLq1oV6pecnwAAAF4"]
[Wed Sep 30 01:01:24.010895 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.011360 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.035215 2026] [security2:error] [pid 212454:tid 212672] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzxLyZ9IcLq1oV6pecogAAAFg"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:24.063539 2026] [security2:error] [pid 212454:tid 212701] [client 20.219.2.60:19482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/Jcrop.php"] [unique_id "aryzxLyZ9IcLq1oV6pecowAAAHU"]
[Wed Sep 30 01:01:24.083350 2026] [security2:error] [pid 212454:tid 212703] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzxLyZ9IcLq1oV6pecpwAAAHc"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:24.095248 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.095506 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.109470 2026] [security2:error] [pid 212454:tid 212704] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxLyZ9IcLq1oV6pecqwAAAHg"]
[Wed Sep 30 01:01:24.145792 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:01:24.146070 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:01:24.152782 2026] [security2:error] [pid 212454:tid 212643] [client 20.194.30.107:17511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/admin.php"] [unique_id "aryzxLyZ9IcLq1oV6pecrwAAADs"]
[Wed Sep 30 01:01:24.189147 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.189401 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.277482 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.277737 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.317309 2026] [security2:error] [pid 212454:tid 212608] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxLyZ9IcLq1oV6pecuAAAABg"]
[Wed Sep 30 01:01:24.368820 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.369093 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.371213 2026] [security2:error] [pid 212454:tid 212629] [client 4.185.40.215:1367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-act.php"] [unique_id "aryzxLyZ9IcLq1oV6pecvQAAAC0"]
[Wed Sep 30 01:01:24.383688 2026] [security2:error] [pid 212454:tid 212637] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzxLyZ9IcLq1oV6pecwAAAADU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:24.401177 2026] [security2:error] [pid 212454:tid 212663] [client 20.219.2.60:19446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/vanda.php"] [unique_id "aryzxLyZ9IcLq1oV6pecwgAAAE8"]
[Wed Sep 30 01:01:24.404631 2026] [security2:error] [pid 212454:tid 212700] [client 20.214.109.68:11253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/8xyz.php"] [unique_id "aryzxLyZ9IcLq1oV6pecwwAAAHQ"]
[Wed Sep 30 01:01:24.432525 2026] [security2:error] [pid 212454:tid 212595] [client 103.168.67.253:25134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzxLyZ9IcLq1oV6pecxgAAAAs"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:24.459454 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.459711 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.473176 2026] [security2:error] [pid 212454:tid 212659] [client 4.196.65.241:19478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/kgblegacy.php"] [unique_id "aryzxLyZ9IcLq1oV6pecygAAAEs"]
[Wed Sep 30 01:01:24.526662 2026] [security2:error] [pid 212454:tid 212599] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxLyZ9IcLq1oV6peczAAAAA8"]
[Wed Sep 30 01:01:24.550343 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.550382 2026] [security2:error] [pid 212454:tid 212686] [client 20.219.2.60:20166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/rip.php"] [unique_id "aryzxLyZ9IcLq1oV6peczgAAAGY"]
[Wed Sep 30 01:01:24.550614 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.634112 2026] [security2:error] [pid 212454:tid 212614] [client 20.194.96.176:53415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/jybkxer.php"] [unique_id "aryzxLyZ9IcLq1oV6peczwAAAB4"]
[Wed Sep 30 01:01:24.644233 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.644517 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.651091 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:24.651356 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:24.731993 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.732264 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.734424 2026] [security2:error] [pid 212454:tid 212603] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxLyZ9IcLq1oV6pec2QAAABM"]
[Wed Sep 30 01:01:24.747329 2026] [security2:error] [pid 212454:tid 212609] [client 4.185.40.215:1344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/cu.php"] [unique_id "aryzxLyZ9IcLq1oV6pec2wAAABk"]
[Wed Sep 30 01:01:24.798504 2026] [security2:error] [pid 212454:tid 212678] [client 45.138.12.32:21520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ane.ieo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzxLyZ9IcLq1oV6pec4gAAAF4"]
[Wed Sep 30 01:01:24.823258 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.823523 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.845219 2026] [security2:error] [pid 212454:tid 212628] [client 84.17.60.236:59452] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "100schools.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzxLyZ9IcLq1oV6pec6AAAACw"]
[Wed Sep 30 01:01:24.897366 2026] [security2:error] [pid 212454:tid 212596] [client 155.190.6.18:53562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzxLyZ9IcLq1oV6pec6gAAAAw"]
[Wed Sep 30 01:01:24.914388 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:24.914649 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:24.941916 2026] [security2:error] [pid 212454:tid 212688] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxLyZ9IcLq1oV6pec7AAAAGg"]
[Wed Sep 30 01:01:25.005061 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.005325 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.010276 2026] [security2:error] [pid 212454:tid 212588] [client 20.219.2.60:20161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/new4.php"] [unique_id "aryzxbyZ9IcLq1oV6pec7gAAAAQ"]
[Wed Sep 30 01:01:25.032129 2026] [security2:error] [pid 212454:tid 212706] [client 102.253.38.25:8432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pec8AAAAHo"]
[Wed Sep 30 01:01:25.032224 2026] [security2:error] [pid 212454:tid 212706] [client 102.253.38.25:8432] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pec8AAAAHo"]
[Wed Sep 30 01:01:25.047325 2026] [security2:error] [pid 212454:tid 212630] [client 4.185.40.215:1310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/8.php"] [unique_id "aryzxbyZ9IcLq1oV6pec8QAAAC4"]
[Wed Sep 30 01:01:25.088923 2026] [security2:error] [pid 212454:tid 212707] [client 116.193.128.26:57007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pec8wAAAHs"]
[Wed Sep 30 01:01:25.089103 2026] [security2:error] [pid 212454:tid 212707] [client 116.193.128.26:57007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pec8wAAAHs"]
[Wed Sep 30 01:01:25.095368 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.095625 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.107585 2026] [access_compat:error] [pid 212454:tid 212650] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:25.107853 2026] [access_compat:error] [pid 212454:tid 212650] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:25.124724 2026] [security2:error] [pid 212454:tid 212661] [client 45.138.12.43:14758] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.smartsafetycenter.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzxbyZ9IcLq1oV6pec-AAAAE0"]
[Wed Sep 30 01:01:25.149777 2026] [security2:error] [pid 212454:tid 212617] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxbyZ9IcLq1oV6pec-QAAACE"]
[Wed Sep 30 01:01:25.153057 2026] [security2:error] [pid 212454:tid 212674] [client 103.168.67.253:58628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzxbyZ9IcLq1oV6pec-gAAAFo"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:25.172499 2026] [security2:error] [pid 212454:tid 212596] [client 155.190.6.18:53562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzxLyZ9IcLq1oV6pec6gAAAAw"]
[Wed Sep 30 01:01:25.178246 2026] [security2:error] [pid 212454:tid 212700] [client 4.240.25.22:8913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/images.php"] [unique_id "aryzxbyZ9IcLq1oV6pec-wAAAHQ"]
[Wed Sep 30 01:01:25.186635 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.186908 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.279582 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.279848 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.297369 2026] [security2:error] [pid 212454:tid 212652] [client 20.194.5.96:8552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wordfence-waf.php"] [unique_id "aryzxbyZ9IcLq1oV6pedBQAAAEQ"]
[Wed Sep 30 01:01:25.314313 2026] [security2:error] [pid 212454:tid 212607] [client 4.240.25.22:30777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/ccc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedCAAAABc"]
[Wed Sep 30 01:01:25.356994 2026] [security2:error] [pid 212454:tid 212670] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxbyZ9IcLq1oV6pedDAAAAFY"]
[Wed Sep 30 01:01:25.365852 2026] [security2:error] [pid 212454:tid 212603] [client 4.185.40.215:1385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws60.php"] [unique_id "aryzxbyZ9IcLq1oV6pedDgAAABM"]
[Wed Sep 30 01:01:25.369675 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.369944 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.379626 2026] [security2:error] [pid 212454:tid 212710] [client 103.159.192.142:58436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedDwAAAH4"]
[Wed Sep 30 01:01:25.379752 2026] [security2:error] [pid 212454:tid 212710] [client 103.159.192.142:58436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedDwAAAH4"]
[Wed Sep 30 01:01:25.454028 2026] [security2:error] [pid 212454:tid 212643] [client 202.179.95.79:51609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedFQAAADs"]
[Wed Sep 30 01:01:25.454660 2026] [security2:error] [pid 212454:tid 212643] [client 202.179.95.79:51609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedFQAAADs"]
[Wed Sep 30 01:01:25.457969 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.109.68:11211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/mini.php"] [unique_id "aryzxbyZ9IcLq1oV6pedFgAAAAM"]
[Wed Sep 30 01:01:25.460192 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.460446 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.487013 2026] [security2:error] [pid 212454:tid 212624] [client 20.219.2.60:20033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/aa.php"] [unique_id "aryzxbyZ9IcLq1oV6pedFwAAACg"]
[Wed Sep 30 01:01:25.506655 2026] [security2:error] [pid 212454:tid 212696] [client 104.208.65.139:28598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/xxw.php"] [unique_id "aryzxbyZ9IcLq1oV6pedGgAAAHA"]
[Wed Sep 30 01:01:25.528575 2026] [security2:error] [pid 212454:tid 212628] [client 20.194.30.107:64748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "aryzxbyZ9IcLq1oV6pedHQAAACw"]
[Wed Sep 30 01:01:25.551229 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.551487 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.565038 2026] [security2:error] [pid 212454:tid 212593] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxbyZ9IcLq1oV6pedIQAAAAk"]
[Wed Sep 30 01:01:25.632276 2026] [security2:error] [pid 212454:tid 212620] [client 152.59.165.7:63309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedIwAAACQ"]
[Wed Sep 30 01:01:25.632886 2026] [security2:error] [pid 212454:tid 212620] [client 152.59.165.7:63309] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedIwAAACQ"]
[Wed Sep 30 01:01:25.644489 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.644759 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.691106 2026] [security2:error] [pid 212454:tid 212616] [client 4.185.40.215:1354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/vanda.php"] [unique_id "aryzxbyZ9IcLq1oV6pedJwAAACA"]
[Wed Sep 30 01:01:25.696082 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:25.696345 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:25.723302 2026] [security2:error] [pid 212454:tid 212663] [client 203.122.45.246:55967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedKgAAAE8"]
[Wed Sep 30 01:01:25.723450 2026] [security2:error] [pid 212454:tid 212663] [client 203.122.45.246:55967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzxbyZ9IcLq1oV6pedKgAAAE8"]
[Wed Sep 30 01:01:25.736821 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.737070 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.773136 2026] [security2:error] [pid 212454:tid 212611] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxbyZ9IcLq1oV6pedMAAAABs"]
[Wed Sep 30 01:01:25.825597 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.826152 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:21659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:25.831160 2026] [security2:error] [pid 212454:tid 212700] [client 4.240.25.22:18804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/inputs.php"] [unique_id "aryzxbyZ9IcLq1oV6pedOAAAAHQ"]
[Wed Sep 30 01:01:25.838870 2026] [security2:error] [pid 212454:tid 212629] [client 20.194.96.176:53417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/edit-tags.php"] [unique_id "aryzxbyZ9IcLq1oV6pedOgAAAC0"]
[Wed Sep 30 01:01:25.905532 2026] [autoindex:error] [pid 212454:tid 212688] [client 212.156.70.154:9035] AH01276: Cannot serve directory /home4/sdqynomy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:25.949750 2026] [security2:error] [pid 212454:tid 212605] [client 20.219.2.60:58581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/jk.php"] [unique_id "aryzxbyZ9IcLq1oV6pedQwAAABU"]
[Wed Sep 30 01:01:25.980318 2026] [security2:error] [pid 212454:tid 212669] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxbyZ9IcLq1oV6pedRgAAAFU"]
[Wed Sep 30 01:01:25.980710 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:34229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:25.980982 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:34229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.006587 2026] [security2:error] [pid 212454:tid 212645] [client 216.73.216.46:21659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzxryZ9IcLq1oV6pedRwAAAD0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU5
[Wed Sep 30 01:01:26.013483 2026] [security2:error] [pid 212454:tid 212710] [client 4.240.25.22:8435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/chosen.php"] [unique_id "aryzxryZ9IcLq1oV6pedSAAAAH4"]
[Wed Sep 30 01:01:26.043680 2026] [security2:error] [pid 212454:tid 212623] [client 4.185.40.215:1304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/domains.php"] [unique_id "aryzxryZ9IcLq1oV6pedSQAAACc"]
[Wed Sep 30 01:01:26.071753 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.072022 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.086299 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:26.086585 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:01:26.139801 2026] [security2:error] [pid 212454:tid 212667] [client 116.72.182.19:59663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzxryZ9IcLq1oV6pedUgAAAFM"]
[Wed Sep 30 01:01:26.139895 2026] [security2:error] [pid 212454:tid 212667] [client 116.72.182.19:59663] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryzxryZ9IcLq1oV6pedUgAAAFM"]
[Wed Sep 30 01:01:26.160271 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.160531 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.189080 2026] [security2:error] [pid 212454:tid 212585] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxryZ9IcLq1oV6pedVQAAAAE"]
[Wed Sep 30 01:01:26.201685 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:34229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.202016 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:34229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.292591 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.292859 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.364989 2026] [security2:error] [pid 212454:tid 212608] [client 4.185.40.215:1311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/144.php"] [unique_id "aryzxryZ9IcLq1oV6pedZwAAABg"]
[Wed Sep 30 01:01:26.383845 2026] [security2:error] [pid 212454:tid 212613] [client 216.73.216.46:34229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzxryZ9IcLq1oV6pedaAAAAB0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MjExL25vZGUwL21lbW9yeTMwOS9ub2RlMA%3D%3D
[Wed Sep 30 01:01:26.391716 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.392008 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.397361 2026] [security2:error] [pid 212454:tid 212706] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxryZ9IcLq1oV6pedagAAAHo"]
[Wed Sep 30 01:01:26.411523 2026] [security2:error] [pid 212454:tid 212650] [client 20.219.2.60:20193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/gcqoa.php"] [unique_id "aryzxryZ9IcLq1oV6pedawAAAEI"]
[Wed Sep 30 01:01:26.473156 2026] [security2:error] [pid 212454:tid 212685] [client 213.136.69.135:62186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-theme-json-resolver.php"] [unique_id "aryzxryZ9IcLq1oV6pedbgAAAGU"], referer: binance.com
[Wed Sep 30 01:01:26.484545 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.484994 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.522761 2026] [security2:error] [pid 212454:tid 212491] [remote 220.181.108.80:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzxryZ9IcLq1oV6pedcQAANCQ"]
[Wed Sep 30 01:01:26.573733 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.574012 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.605509 2026] [security2:error] [pid 212454:tid 212680] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxryZ9IcLq1oV6peddAAAAGA"]
[Wed Sep 30 01:01:26.635400 2026] [access_compat:error] [pid 212454:tid 212592] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:01:26.635657 2026] [access_compat:error] [pid 212454:tid 212592] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:01:26.665377 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.665642 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.684232 2026] [security2:error] [pid 212454:tid 212681] [client 4.185.40.215:1347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/asd.php"] [unique_id "aryzxryZ9IcLq1oV6pedegAAAGE"]
[Wed Sep 30 01:01:26.757805 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.758096 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.771666 2026] [security2:error] [pid 212454:tid 212689] [client 4.240.25.22:20318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-content/admin.php"] [unique_id "aryzxryZ9IcLq1oV6pedgwAAAGk"]
[Wed Sep 30 01:01:26.813988 2026] [security2:error] [pid 212454:tid 212623] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzxryZ9IcLq1oV6pediAAAACc"]
[Wed Sep 30 01:01:26.815450 2026] [security2:error] [pid 212454:tid 212633] [client 20.219.2.60:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/domains.php"] [unique_id "aryzxryZ9IcLq1oV6pediQAAADE"]
[Wed Sep 30 01:01:26.833959 2026] [security2:error] [pid 212454:tid 212699] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzxryZ9IcLq1oV6pedjAAAAHM"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:26.847797 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.848071 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.855711 2026] [security2:error] [pid 212454:tid 212654] [client 4.240.25.22:8474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/log.php"] [unique_id "aryzxryZ9IcLq1oV6pedjwAAAEY"]
[Wed Sep 30 01:01:26.900796 2026] [security2:error] [pid 212454:tid 212711] [client 20.219.2.60:20443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/plugin-editor.php"] [unique_id "aryzxryZ9IcLq1oV6pedkAAAAH8"]
[Wed Sep 30 01:01:26.915168 2026] [security2:error] [pid 212454:tid 212606] [client 4.196.65.241:2500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/php.php"] [unique_id "aryzxryZ9IcLq1oV6pedkQAAABY"]
[Wed Sep 30 01:01:26.939590 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:26.939873 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:26.975874 2026] [security2:error] [pid 212454:tid 212646] [client 43.227.131.37:41958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzxryZ9IcLq1oV6pedlAAAAD4"]
[Wed Sep 30 01:01:26.976032 2026] [security2:error] [pid 212454:tid 212646] [client 43.227.131.37:41958] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryzxryZ9IcLq1oV6pedlAAAAD4"]
[Wed Sep 30 01:01:26.977087 2026] [security2:error] [pid 212454:tid 212701] [client 20.194.5.96:8926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wp5.php"] [unique_id "aryzxryZ9IcLq1oV6pedlQAAAHU"]
[Wed Sep 30 01:01:27.004504 2026] [security2:error] [pid 212454:tid 212632] [client 4.185.40.215:1370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/zc-104.php"] [unique_id "aryzx7yZ9IcLq1oV6pedmAAAADA"]
[Wed Sep 30 01:01:27.022132 2026] [security2:error] [pid 212454:tid 212695] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzx7yZ9IcLq1oV6pedmwAAAG8"]
[Wed Sep 30 01:01:27.030583 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.030851 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.042315 2026] [security2:error] [pid 212454:tid 212591] [client 20.214.109.68:11158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws68.php"] [unique_id "aryzx7yZ9IcLq1oV6pednwAAAAc"]
[Wed Sep 30 01:01:27.064839 2026] [security2:error] [pid 212454:tid 212700] [client 106.214.2.47:10162] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedoQAAAHQ"]
[Wed Sep 30 01:01:27.064962 2026] [security2:error] [pid 212454:tid 212700] [client 106.214.2.47:10162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedoQAAAHQ"]
[Wed Sep 30 01:01:27.072949 2026] [access_compat:error] [pid 212454:tid 212643] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:27.073201 2026] [access_compat:error] [pid 212454:tid 212643] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:01:27.078187 2026] [security2:error] [pid 212454:tid 212644] [client 20.194.96.176:2464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/nauik.php"] [unique_id "aryzx7yZ9IcLq1oV6pedpQAAADw"]
[Wed Sep 30 01:01:27.121364 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.121647 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.141187 2026] [security2:error] [pid 212454:tid 212616] [client 20.198.74.230:23928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ot.php"] [unique_id "aryzx7yZ9IcLq1oV6pedqAAAACA"]
[Wed Sep 30 01:01:27.217477 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.217921 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.231220 2026] [security2:error] [pid 212454:tid 212683] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzx7yZ9IcLq1oV6pedqwAAAGM"]
[Wed Sep 30 01:01:27.275903 2026] [security2:error] [pid 212454:tid 212618] [client 84.17.60.236:59454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "100schools.org"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedrwAAACI"]
[Wed Sep 30 01:01:27.276041 2026] [security2:error] [pid 212454:tid 212618] [client 84.17.60.236:59454] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "100schools.org"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedrwAAACI"]
[Wed Sep 30 01:01:27.305402 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.305695 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.315560 2026] [security2:error] [pid 212454:tid 212629] [client 4.185.40.215:1300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/rzki.php"] [unique_id "aryzx7yZ9IcLq1oV6pedtgAAAC0"]
[Wed Sep 30 01:01:27.327383 2026] [autoindex:error] [pid 212454:tid 212707] [client 82.102.18.222:0] AH01276: Cannot serve directory /home3/whconsul/public_html/website_6ef7ddcb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:27.328227 2026] [core:error] [pid 212454:tid 212707] [client 82.102.18.222:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:27.359749 2026] [security2:error] [pid 212454:tid 212680] [client 20.70.173.30:2936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/sb.php"] [unique_id "aryzx7yZ9IcLq1oV6pedvQAAAGA"]
[Wed Sep 30 01:01:27.363463 2026] [security2:error] [pid 212454:tid 212624] [client 20.219.2.60:19578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/plugin-install.php"] [unique_id "aryzx7yZ9IcLq1oV6pedvgAAACg"]
[Wed Sep 30 01:01:27.395482 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.395753 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.402027 2026] [security2:error] [pid 212454:tid 212594] [client 116.197.133.25:56696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedxQAAAAo"]
[Wed Sep 30 01:01:27.402139 2026] [security2:error] [pid 212454:tid 212594] [client 116.197.133.25:56696] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6pedxQAAAAo"]
[Wed Sep 30 01:01:27.439406 2026] [security2:error] [pid 212454:tid 212633] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzx7yZ9IcLq1oV6pedygAAADE"]
[Wed Sep 30 01:01:27.449570 2026] [security2:error] [pid 212454:tid 212599] [client 104.208.65.139:2577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/router.php"] [unique_id "aryzx7yZ9IcLq1oV6pedywAAAA8"]
[Wed Sep 30 01:01:27.530604 2026] [autoindex:error] [pid 212454:tid 212657] [client 82.102.18.222:0] AH01276: Cannot serve directory /home3/whconsul/public_html/website_6ef7ddcb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:27.531639 2026] [core:error] [pid 212454:tid 212657] [client 82.102.18.222:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:27.589127 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:27.589385 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:27.601406 2026] [security2:error] [pid 212454:tid 212702] [client 49.205.105.16:14600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6ped1gAAAHY"]
[Wed Sep 30 01:01:27.601507 2026] [security2:error] [pid 212454:tid 212702] [client 49.205.105.16:14600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6ped1gAAAHY"]
[Wed Sep 30 01:01:27.629826 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:1309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/xsas.php"] [unique_id "aryzx7yZ9IcLq1oV6ped2QAAADo"]
[Wed Sep 30 01:01:27.646746 2026] [security2:error] [pid 212454:tid 212596] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzx7yZ9IcLq1oV6ped2gAAAAw"]
[Wed Sep 30 01:01:27.670952 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.671208 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.695939 2026] [security2:error] [pid 212454:tid 212640] [client 82.102.18.222:38898] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzx7yZ9IcLq1oV6ped3wAAADg"]
[Wed Sep 30 01:01:27.717128 2026] [security2:error] [pid 212454:tid 212505] [remote 57.141.14.74:34478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "aryzx7yZ9IcLq1oV6ped3gAACTI"]
[Wed Sep 30 01:01:27.761925 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.762182 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.844750 2026] [security2:error] [pid 212454:tid 212709] [client 20.219.2.60:20476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/profile.php"] [unique_id "aryzx7yZ9IcLq1oV6ped7QAAAH0"]
[Wed Sep 30 01:01:27.855396 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.855755 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:27.856288 2026] [security2:error] [pid 212454:tid 212613] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzx7yZ9IcLq1oV6ped7wAAAB0"]
[Wed Sep 30 01:01:27.886861 2026] [security2:error] [pid 212454:tid 212636] [client 4.240.25.22:20321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/biufile.php"] [unique_id "aryzx7yZ9IcLq1oV6ped8AAAADQ"]
[Wed Sep 30 01:01:27.927316 2026] [security2:error] [pid 212454:tid 212680] [client 20.219.2.60:18862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/144.php"] [unique_id "aryzx7yZ9IcLq1oV6ped8gAAAGA"]
[Wed Sep 30 01:01:27.929900 2026] [security2:error] [pid 212454:tid 212624] [client 4.185.40.215:1302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/d12.php"] [unique_id "aryzx7yZ9IcLq1oV6ped9AAAACg"]
[Wed Sep 30 01:01:27.932395 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzx7yZ9IcLq1oV6ped8wAAAEQ"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:27.943739 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:27.944027 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.022982 2026] [security2:error] [pid 212454:tid 212681] [client 82.102.18.222:38902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/xmlrpc.php"] [unique_id "aryzyLyZ9IcLq1oV6ped9gAAAGE"]
[Wed Sep 30 01:01:28.038503 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.038785 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.064140 2026] [security2:error] [pid 212454:tid 212687] [client 84.13.142.21:65419] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "silverlakess.com"] [uri "/"] [unique_id "aryzyLyZ9IcLq1oV6ped-QAAAGc"]
[Wed Sep 30 01:01:28.083161 2026] [security2:error] [pid 212454:tid 212635] [client 182.75.216.230:49348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzyLyZ9IcLq1oV6ped-gAAADM"]
[Wed Sep 30 01:01:28.083249 2026] [security2:error] [pid 212454:tid 212635] [client 182.75.216.230:49348] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryzyLyZ9IcLq1oV6ped-gAAADM"]
[Wed Sep 30 01:01:28.094409 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.109.68:11248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/xxx.php"] [unique_id "aryzyLyZ9IcLq1oV6ped-wAAADE"]
[Wed Sep 30 01:01:28.119761 2026] [access_compat:error] [pid 212454:tid 212609] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:28.120101 2026] [access_compat:error] [pid 212454:tid 212609] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:28.133514 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.133953 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.220419 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.220729 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.232265 2026] [security2:error] [pid 212454:tid 212673] [client 4.185.40.215:1366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/okxh.php"] [unique_id "aryzyLyZ9IcLq1oV6peeBQAAAFk"]
[Wed Sep 30 01:01:28.267375 2026] [security2:error] [pid 212454:tid 212591] [client 172.232.180.134:63694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aryzyLyZ9IcLq1oV6peeCQAAAAc"], referer: www.google.com
[Wed Sep 30 01:01:28.276764 2026] [security2:error] [pid 212454:tid 212700] [client 172.232.180.134:63743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-plain.php"] [unique_id "aryzyLyZ9IcLq1oV6peeCwAAAHQ"], referer: www.google.com
[Wed Sep 30 01:01:28.297272 2026] [security2:error] [pid 212454:tid 212500] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzyLyZ9IcLq1oV6peeDAAAdi0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=241890&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:28.297302 2026] [security2:error] [pid 212454:tid 212500] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzyLyZ9IcLq1oV6peeDAAAdi0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=241890&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:28.306397 2026] [security2:error] [pid 212454:tid 212643] [client 20.219.2.60:20189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/class-t.api.php"] [unique_id "aryzyLyZ9IcLq1oV6peeDgAAADs"]
[Wed Sep 30 01:01:28.362626 2026] [security2:error] [pid 212454:tid 212669] [client 157.100.151.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/desktops"] [unique_id "aryzyLyZ9IcLq1oV6peeFQAAAFU"]
[Wed Sep 30 01:01:28.391194 2026] [security2:error] [pid 212454:tid 212683] [client 74.7.242.1:40330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryzyLyZ9IcLq1oV6peeGgAAAGM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:01:28.394951 2026] [autoindex:error] [pid 212454:tid 212602] [client 82.102.18.222:0] AH01276: Cannot serve directory /home3/whconsul/public_html/website_6ef7ddcb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:28.395785 2026] [core:error] [pid 212454:tid 212602] [client 82.102.18.222:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:28.395839 2026] [security2:error] [pid 212454:tid 212649] [client 104.208.65.139:18512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/cibrkysaeng.php"] [unique_id "aryzyLyZ9IcLq1oV6peeGwAAAEE"]
[Wed Sep 30 01:01:28.412054 2026] [security2:error] [pid 212454:tid 212610] [client 127.0.0.1:42914] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryzyLyZ9IcLq1oV6peeFAAAABo"]
[Wed Sep 30 01:01:28.412161 2026] [security2:error] [pid 212454:tid 212644] [client 74.7.228.54:49636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.veq.vgm.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryzyLyZ9IcLq1oV6peeEwAAPDw"]
[Wed Sep 30 01:01:28.451739 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.452005 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:37397] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.476356 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.476605 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.519867 2026] [security2:error] [pid 212454:tid 212636] [client 172.232.180.134:63750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "aryzyLyZ9IcLq1oV6peeHgAAADQ"]
[Wed Sep 30 01:01:28.565694 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzyLyZ9IcLq1oV6peeIAAAAEQ"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:28.570897 2026] [security2:error] [pid 212454:tid 212604] [client 20.194.96.176:30159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wander.php"] [unique_id "aryzyLyZ9IcLq1oV6peeIwAAABQ"]
[Wed Sep 30 01:01:28.575317 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.575551 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.578714 2026] [security2:error] [pid 212454:tid 212586] [client 4.185.40.215:1390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/55b76.php"] [unique_id "aryzyLyZ9IcLq1oV6peeJQAAAAI"]
[Wed Sep 30 01:01:28.584084 2026] [security2:error] [pid 212454:tid 212639] [client 82.102.18.222:38908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzyLyZ9IcLq1oV6peeJgAAADc"]
[Wed Sep 30 01:01:28.624395 2026] [security2:error] [pid 212454:tid 212703] [client 4.196.65.241:2057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/xl9.php"] [unique_id "aryzyLyZ9IcLq1oV6peeKwAAAHc"]
[Wed Sep 30 01:01:28.628803 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:28.629077 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:28.639527 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.639815 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.671636 2026] [security2:error] [pid 212454:tid 212705] [client 4.196.65.241:64158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/NzxXWLD25py.php"] [unique_id "aryzyLyZ9IcLq1oV6peeMgAAAHk"]
[Wed Sep 30 01:01:28.679408 2026] [access_compat:error] [pid 212454:tid 212681] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.679679 2026] [access_compat:error] [pid 212454:tid 212681] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.767669 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.767952 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.790928 2026] [security2:error] [pid 212454:tid 212659] [client 20.219.2.60:19459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-links-opml.php"] [unique_id "aryzyLyZ9IcLq1oV6peeOQAAAEs"]
[Wed Sep 30 01:01:28.811872 2026] [security2:error] [pid 212454:tid 212609] [client 4.240.25.22:8502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-the.php"] [unique_id "aryzyLyZ9IcLq1oV6peePQAAABk"]
[Wed Sep 30 01:01:28.832064 2026] [security2:error] [pid 212454:tid 212625] [client 20.214.109.68:11104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/njxjtooj.php"] [unique_id "aryzyLyZ9IcLq1oV6peePgAAACk"]
[Wed Sep 30 01:01:28.857123 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.857390 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:28.902657 2026] [security2:error] [pid 212454:tid 212701] [client 4.185.40.215:1369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tt.php"] [unique_id "aryzyLyZ9IcLq1oV6peeRQAAAHU"]
[Wed Sep 30 01:01:28.914727 2026] [security2:error] [pid 212454:tid 212606] [client 82.102.18.222:38918] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzyLyZ9IcLq1oV6peeSAAAABY"]
[Wed Sep 30 01:01:28.949154 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:28.949426 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.026414 2026] [security2:error] [pid 212454:tid 212691] [client 152.59.169.65:65515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzybyZ9IcLq1oV6peeUwAAAGs"]
[Wed Sep 30 01:01:29.026557 2026] [security2:error] [pid 212454:tid 212691] [client 152.59.169.65:65515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryzybyZ9IcLq1oV6peeUwAAAGs"]
[Wed Sep 30 01:01:29.042671 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.042967 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.081859 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:29.082286 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:29.136768 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.137094 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.174640 2026] [security2:error] [pid 212454:tid 212604] [client 20.70.173.30:52177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/ops.php"] [unique_id "aryzybyZ9IcLq1oV6peeaQAAABQ"]
[Wed Sep 30 01:01:29.213473 2026] [security2:error] [pid 212454:tid 212603] [client 4.185.40.215:1308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/maul.php"] [unique_id "aryzybyZ9IcLq1oV6peeagAAABM"]
[Wed Sep 30 01:01:29.225468 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.225744 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.257321 2026] [security2:error] [pid 212454:tid 212670] [client 82.102.18.222:38924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzybyZ9IcLq1oV6peebwAAAFY"]
[Wed Sep 30 01:01:29.260103 2026] [security2:error] [pid 212454:tid 212584] [client 20.219.2.60:20088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-class-api.php"] [unique_id "aryzybyZ9IcLq1oV6peecAAAAAA"]
[Wed Sep 30 01:01:29.289119 2026] [security2:error] [pid 212454:tid 212648] [client 103.168.67.253:58642] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "aryzybyZ9IcLq1oV6peecwAAAEA"]
[Wed Sep 30 01:01:29.299371 2026] [security2:error] [pid 212454:tid 212659] [client 20.194.96.176:59683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wsd.php"] [unique_id "aryzybyZ9IcLq1oV6peedQAAAEs"]
[Wed Sep 30 01:01:29.317216 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.317607 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.344782 2026] [security2:error] [pid 212454:tid 212639] [client 45.156.62.96:55545] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzybyZ9IcLq1oV6peeeQAAADc"]
[Wed Sep 30 01:01:29.344912 2026] [security2:error] [pid 212454:tid 212639] [client 45.156.62.96:55545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryzybyZ9IcLq1oV6peeeQAAADc"]
[Wed Sep 30 01:01:29.354948 2026] [security2:error] [pid 212454:tid 212666] [client 20.219.2.60:18816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/asd.php"] [unique_id "aryzybyZ9IcLq1oV6peefQAAAFI"]
[Wed Sep 30 01:01:29.361659 2026] [security2:error] [pid 212454:tid 212622] [client 20.194.5.96:8344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/em.php"] [unique_id "aryzybyZ9IcLq1oV6peefgAAACY"]
[Wed Sep 30 01:01:29.406508 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.406797 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.498188 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.498457 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.519361 2026] [security2:error] [pid 212454:tid 212698] [client 45.138.12.43:45016] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.smartsafetycenter.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryzybyZ9IcLq1oV6peehgAAAHI"]
[Wed Sep 30 01:01:29.534456 2026] [security2:error] [pid 212454:tid 212602] [client 4.196.65.241:2559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/584062352875874akp.php"] [unique_id "aryzybyZ9IcLq1oV6peeiAAAABI"]
[Wed Sep 30 01:01:29.563861 2026] [security2:error] [pid 212454:tid 212644] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzybyZ9IcLq1oV6peejAAAADw"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:29.581450 2026] [core:error] [pid 212454:tid 212642] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:29.581468 2026] [core:error] [pid 212454:tid 212642] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:01:29.584044 2026] [security2:error] [pid 212454:tid 212707] [client 82.102.18.222:11162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzybyZ9IcLq1oV6peekgAAAHs"]
[Wed Sep 30 01:01:29.589003 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.589258 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.617331 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:29.617589 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:29.681536 2026] [security2:error] [pid 212454:tid 212611] [client 4.185.40.215:1392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/5b9ac.php"] [unique_id "aryzybyZ9IcLq1oV6peemQAAABs"]
[Wed Sep 30 01:01:29.682830 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.683116 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.730301 2026] [security2:error] [pid 212454:tid 212664] [client 20.219.2.60:20035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-class-atom.php"] [unique_id "aryzybyZ9IcLq1oV6peenQAAAFA"]
[Wed Sep 30 01:01:29.772771 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.773087 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.791484 2026] [security2:error] [pid 212454:tid 212590] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzybyZ9IcLq1oV6peeogAAAAY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:29.822138 2026] [security2:error] [pid 212454:tid 212600] [client 20.214.109.68:11136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws85.php"] [unique_id "aryzybyZ9IcLq1oV6peepAAAABA"]
[Wed Sep 30 01:01:29.848774 2026] [security2:error] [pid 212454:tid 212621] [client 105.112.178.79:38349] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.feq.hpj.mybluehost.me"] [uri "/.env"] [unique_id "aryzybyZ9IcLq1oV6peeqgAAACU"]
[Wed Sep 30 01:01:29.856894 2026] [security2:error] [pid 212454:tid 212672] [client 93.152.80.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryzybyZ9IcLq1oV6peerAAAAFg"]
[Wed Sep 30 01:01:29.861838 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.862112 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.886764 2026] [security2:error] [pid 212454:tid 212555] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzybyZ9IcLq1oV6peeqQAAeWQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=263300
[Wed Sep 30 01:01:29.886795 2026] [security2:error] [pid 212454:tid 212555] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzybyZ9IcLq1oV6peeqQAAeWQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=263300
[Wed Sep 30 01:01:29.890912 2026] [security2:error] [pid 212454:tid 212670] [client 82.102.18.222:38938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzybyZ9IcLq1oV6peerwAAAFY"]
[Wed Sep 30 01:01:29.905236 2026] [security2:error] [pid 212454:tid 212584] [client 20.194.96.176:52464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/media.php"] [unique_id "aryzybyZ9IcLq1oV6peesAAAAAA"]
[Wed Sep 30 01:01:29.929020 2026] [security2:error] [pid 212454:tid 212635] [client 45.138.12.43:45084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.smartsafetycenter.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aryzybyZ9IcLq1oV6peesQAAADM"]
[Wed Sep 30 01:01:29.954836 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:29.955110 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:29.986832 2026] [security2:error] [pid 212454:tid 212633] [client 4.185.40.215:12245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/hehe.php"] [unique_id "aryzybyZ9IcLq1oV6peetQAAADE"]
[Wed Sep 30 01:01:30.047674 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.048143 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.096724 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:30.097173 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:01:30.108518 2026] [security2:error] [pid 212454:tid 212622] [client 162.0.227.195:55824] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/"] [unique_id "aryzyryZ9IcLq1oV6peevwAAACY"]
[Wed Sep 30 01:01:30.120300 2026] [security2:error] [pid 212454:tid 212686] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzyryZ9IcLq1oV6peewAAAAGY"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:30.137871 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.138171 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.203458 2026] [security2:error] [pid 212454:tid 212623] [client 82.102.18.222:38954] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryzyryZ9IcLq1oV6peewwAAACc"]
[Wed Sep 30 01:01:30.221279 2026] [security2:error] [pid 212454:tid 212674] [client 20.219.2.60:19466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-block.php"] [unique_id "aryzyryZ9IcLq1oV6peeyQAAAFo"]
[Wed Sep 30 01:01:30.230017 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.230274 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.299777 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:1393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryzyryZ9IcLq1oV6peezgAAADo"]
[Wed Sep 30 01:01:30.319443 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.319686 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.363537 2026] [security2:error] [pid 212454:tid 212694] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryzyryZ9IcLq1oV6pee1AAAAG4"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:30.365279 2026] [security2:error] [pid 212454:tid 212551] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzyryZ9IcLq1oV6pee1QAAGmA"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=204966
[Wed Sep 30 01:01:30.365326 2026] [security2:error] [pid 212454:tid 212551] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryzyryZ9IcLq1oV6pee1QAAGmA"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=204966
[Wed Sep 30 01:01:30.409951 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.410225 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.482894 2026] [security2:error] [pid 212454:tid 212566] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryzyryZ9IcLq1oV6pee3wAAV28"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D57248
[Wed Sep 30 01:01:30.502137 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.502390 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.516879 2026] [security2:error] [pid 212454:tid 212705] [client 82.102.18.222:38966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzyryZ9IcLq1oV6pee5gAAAHk"]
[Wed Sep 30 01:01:30.542611 2026] [security2:error] [pid 212454:tid 212621] [client 172.232.180.134:52125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aryzyryZ9IcLq1oV6pee6AAAACU"], referer: www.google.com
[Wed Sep 30 01:01:30.578235 2026] [security2:error] [pid 212454:tid 212696] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryzyryZ9IcLq1oV6pee6gAAAHA"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:30.579400 2026] [security2:error] [pid 212454:tid 212627] [client 49.36.41.37:61924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzyryZ9IcLq1oV6pee6wAAACs"]
[Wed Sep 30 01:01:30.579492 2026] [security2:error] [pid 212454:tid 212627] [client 49.36.41.37:61924] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryzyryZ9IcLq1oV6pee6wAAACs"]
[Wed Sep 30 01:01:30.579593 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:30.579840 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:30.590840 2026] [access_compat:error] [pid 212454:tid 212656] [client 47.79.201.199:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:01:30.590973 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.591098 2026] [access_compat:error] [pid 212454:tid 212656] [client 47.79.201.199:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:01:30.591234 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.615951 2026] [security2:error] [pid 212454:tid 212603] [client 4.185.40.215:12229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/varb.php"] [unique_id "aryzyryZ9IcLq1oV6pee7wAAABM"]
[Wed Sep 30 01:01:30.657142 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.109.68:11149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws61.php"] [unique_id "aryzyryZ9IcLq1oV6pee9AAAAAo"]
[Wed Sep 30 01:01:30.663595 2026] [security2:error] [pid 212454:tid 212565] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzyryZ9IcLq1oV6pee9wAABW4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277463&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:30.663621 2026] [security2:error] [pid 212454:tid 212565] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryzyryZ9IcLq1oV6pee9wAABW4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277463&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:30.664871 2026] [security2:error] [pid 212454:tid 212619] [client 4.240.25.22:8414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/baba.php"] [unique_id "aryzyryZ9IcLq1oV6pee-AAAACM"]
[Wed Sep 30 01:01:30.684030 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.684293 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.696694 2026] [security2:error] [pid 212454:tid 212639] [client 20.219.2.60:20202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-signup.php"] [unique_id "aryzyryZ9IcLq1oV6pee-gAAADc"]
[Wed Sep 30 01:01:30.778282 2026] [security2:error] [pid 212454:tid 212646] [client 4.196.65.241:64142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ded.php"] [unique_id "aryzyryZ9IcLq1oV6pee_wAAAD4"]
[Wed Sep 30 01:01:30.781851 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.782110 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.834391 2026] [security2:error] [pid 212454:tid 212612] [client 104.208.65.139:34811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkbuildkits.sa"] [uri "/wp-wpbak.php"] [unique_id "aryzyryZ9IcLq1oV6pefBgAAABw"]
[Wed Sep 30 01:01:30.855846 2026] [security2:error] [pid 212454:tid 212668] [client 82.102.18.222:38974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzyryZ9IcLq1oV6pefBwAAAFQ"]
[Wed Sep 30 01:01:30.861833 2026] [security2:error] [pid 212454:tid 212701] [client 20.198.74.230:24149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/bunks.php"] [unique_id "aryzyryZ9IcLq1oV6pefCQAAAHU"]
[Wed Sep 30 01:01:30.867150 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.867408 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:30.876012 2026] [security2:error] [pid 212454:tid 212674] [client 20.70.173.30:52163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/or.php"] [unique_id "aryzyryZ9IcLq1oV6pefCgAAAFo"]
[Wed Sep 30 01:01:30.914081 2026] [security2:error] [pid 212454:tid 212618] [client 4.185.40.215:1319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/lm15.php"] [unique_id "aryzyryZ9IcLq1oV6pefDQAAACI"]
[Wed Sep 30 01:01:30.959372 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:30.959624 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.022059 2026] [security2:error] [pid 212454:tid 212694] [client 20.194.96.176:25490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/images.php"] [unique_id "aryzy7yZ9IcLq1oV6pefFAAAAG4"]
[Wed Sep 30 01:01:31.033617 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryzy7yZ9IcLq1oV6pefFgAAABo"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:31.040439 2026] [security2:error] [pid 212454:tid 212575] [remote 220.181.108.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefFQAAdHg"]
[Wed Sep 30 01:01:31.053628 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.053990 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.055076 2026] [security2:error] [pid 212454:tid 212600] [client 150.107.232.159:35557] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzyryZ9IcLq1oV6pefEQAAABA"]
[Wed Sep 30 01:01:31.055205 2026] [security2:error] [pid 212454:tid 212600] [client 150.107.232.159:35557] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryzyryZ9IcLq1oV6pefEQAAABA"]
[Wed Sep 30 01:01:31.075520 2026] [security2:error] [pid 212454:tid 212675] [client 20.194.30.107:17567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-login.php"] [unique_id "aryzy7yZ9IcLq1oV6pefFwAAAFs"]
[Wed Sep 30 01:01:31.079169 2026] [security2:error] [pid 212454:tid 212649] [client 103.168.67.253:58636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzy7yZ9IcLq1oV6pefGwAAAEE"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:31.115851 2026] [security2:error] [pid 212454:tid 212617] [client 182.69.182.151:14126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefHQAAACE"]
[Wed Sep 30 01:01:31.115951 2026] [security2:error] [pid 212454:tid 212617] [client 182.69.182.151:14126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefHQAAACE"]
[Wed Sep 30 01:01:31.123872 2026] [access_compat:error] [pid 212454:tid 212664] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:31.124175 2026] [access_compat:error] [pid 212454:tid 212664] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:31.136159 2026] [security2:error] [pid 212454:tid 212577] [remote 220.181.108.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefHgAABHo"]
[Wed Sep 30 01:01:31.141367 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.141644 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.154260 2026] [security2:error] [pid 212454:tid 212579] [remote 220.181.108.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefIQAAY3w"]
[Wed Sep 30 01:01:31.184294 2026] [security2:error] [pid 212454:tid 212597] [client 82.102.18.222:38988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzy7yZ9IcLq1oV6pefIwAAAA0"]
[Wed Sep 30 01:01:31.186533 2026] [security2:error] [pid 212454:tid 212682] [client 20.219.2.60:20221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-xmlsia.php"] [unique_id "aryzy7yZ9IcLq1oV6pefJAAAAGI"]
[Wed Sep 30 01:01:31.231001 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.231297 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.255325 2026] [security2:error] [pid 212454:tid 212656] [client 20.214.109.68:11245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/iyy.php"] [unique_id "aryzy7yZ9IcLq1oV6pefKQAAAEg"]
[Wed Sep 30 01:01:31.304902 2026] [security2:error] [pid 212454:tid 212589] [client 4.185.40.215:1285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/clss.php"] [unique_id "aryzy7yZ9IcLq1oV6pefMgAAAAU"]
[Wed Sep 30 01:01:31.325777 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.326058 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.365194 2026] [security2:error] [pid 212454:tid 212576] [remote 220.181.108.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefNgAARXk"]
[Wed Sep 30 01:01:31.417451 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.417711 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.459918 2026] [security2:error] [pid 212454:tid 212462] [remote 220.181.108.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefOAAAIwc"]
[Wed Sep 30 01:01:31.476315 2026] [security2:error] [pid 212454:tid 212661] [client 103.159.192.142:58578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefOQAAAE0"]
[Wed Sep 30 01:01:31.476432 2026] [security2:error] [pid 212454:tid 212661] [client 103.159.192.142:58578] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefOQAAAE0"]
[Wed Sep 30 01:01:31.488931 2026] [security2:error] [pid 212454:tid 212687] [client 82.102.18.222:38990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryzy7yZ9IcLq1oV6pefOwAAAGc"]
[Wed Sep 30 01:01:31.509018 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.509280 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.530038 2026] [security2:error] [pid 212454:tid 212613] [client 49.43.163.212:54727] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefPQAAAB0"]
[Wed Sep 30 01:01:31.530170 2026] [security2:error] [pid 212454:tid 212613] [client 49.43.163.212:54727] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefPQAAAB0"]
[Wed Sep 30 01:01:31.574107 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:31.574384 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:31.599630 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.599919 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.628572 2026] [security2:error] [pid 212454:tid 212605] [client 20.219.2.60:18828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/zc-104.php"] [unique_id "aryzy7yZ9IcLq1oV6pefQgAAABU"]
[Wed Sep 30 01:01:31.653327 2026] [security2:error] [pid 212454:tid 212607] [client 4.185.40.215:1381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/44.php"] [unique_id "aryzy7yZ9IcLq1oV6pefQwAAABc"]
[Wed Sep 30 01:01:31.677910 2026] [security2:error] [pid 212454:tid 212634] [client 20.219.2.60:20473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hairofsheba.habeshacontacts.com"] [uri "/wp-inic3.php"] [unique_id "aryzy7yZ9IcLq1oV6pefRQAAADI"]
[Wed Sep 30 01:01:31.690493 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.690748 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:51924] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.740557 2026] [security2:error] [pid 212454:tid 212680] [client 20.194.96.176:33535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/ops.php"] [unique_id "aryzy7yZ9IcLq1oV6pefSQAAAGA"]
[Wed Sep 30 01:01:31.781275 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.781530 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.802665 2026] [security2:error] [pid 212454:tid 212675] [client 82.102.18.222:39002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryzy7yZ9IcLq1oV6pefUAAAAFs"]
[Wed Sep 30 01:01:31.802818 2026] [security2:error] [pid 212454:tid 212652] [client 37.41.16.35:61026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefUQAAAEQ"]
[Wed Sep 30 01:01:31.803021 2026] [security2:error] [pid 212454:tid 212652] [client 37.41.16.35:61026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefUQAAAEQ"]
[Wed Sep 30 01:01:31.871925 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.872192 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.906977 2026] [security2:error] [pid 212454:tid 212617] [client 216.73.216.46:51924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryzy7yZ9IcLq1oV6pefVAAAACE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5Mzk2
[Wed Sep 30 01:01:31.917615 2026] [security2:error] [pid 212454:tid 212455] [remote 220.181.108.174:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzy7yZ9IcLq1oV6pefVgAAdAA"]
[Wed Sep 30 01:01:31.936678 2026] [security2:error] [pid 212454:tid 212588] [client 20.214.109.68:11110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/900.php"] [unique_id "aryzy7yZ9IcLq1oV6pefVwAAAAQ"]
[Wed Sep 30 01:01:31.963621 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:31.963928 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:31.982066 2026] [security2:error] [pid 212454:tid 212671] [client 4.185.40.215:12252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/a5e0a.php"] [unique_id "aryzy7yZ9IcLq1oV6pefXAAAAFc"]
[Wed Sep 30 01:01:31.985764 2026] [security2:error] [pid 212454:tid 212612] [client 223.181.30.165:28492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefXQAAABw"]
[Wed Sep 30 01:01:31.985888 2026] [security2:error] [pid 212454:tid 212612] [client 223.181.30.165:28492] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefXQAAABw"]
[Wed Sep 30 01:01:31.997374 2026] [security2:error] [pid 212454:tid 212618] [client 110.76.128.70:57020] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "crictconsulting.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefVQAAACI"]
[Wed Sep 30 01:01:31.998036 2026] [security2:error] [pid 212454:tid 212618] [client 110.76.128.70:57020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "crictconsulting.com"] [uri "/xmlrpc.php"] [unique_id "aryzy7yZ9IcLq1oV6pefVQAAACI"]
[Wed Sep 30 01:01:31.998723 2026] [security2:error] [pid 212454:tid 212641] [client 20.194.5.96:8368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/hp.php"] [unique_id "aryzy7yZ9IcLq1oV6pefXgAAADk"]
[Wed Sep 30 01:01:32.053307 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.053569 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.091194 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:32.091451 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:32.123884 2026] [access_compat:error] [pid 212454:tid 212466] [remote 57.141.8.22:42524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.124143 2026] [access_compat:error] [pid 212454:tid 212466] [remote 57.141.8.22:42524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.139243 2026] [security2:error] [pid 212454:tid 212645] [client 82.102.18.222:39006] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryzzLyZ9IcLq1oV6pefagAAAD0"]
[Wed Sep 30 01:01:32.146670 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.146964 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.235762 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.236046 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.275537 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.151.17:44474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryzzLyZ9IcLq1oV6pefeAAAAHY"]
[Wed Sep 30 01:01:32.328176 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.328491 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.328619 2026] [security2:error] [pid 212454:tid 212623] [client 4.185.40.215:1293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bo.php"] [unique_id "aryzzLyZ9IcLq1oV6pefewAAACc"]
[Wed Sep 30 01:01:32.410493 2026] [security2:error] [pid 212454:tid 212696] [client 103.241.204.139:63263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzzLyZ9IcLq1oV6pefgQAAAHA"]
[Wed Sep 30 01:01:32.410653 2026] [security2:error] [pid 212454:tid 212696] [client 103.241.204.139:63263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryzzLyZ9IcLq1oV6pefgQAAAHA"]
[Wed Sep 30 01:01:32.425153 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.425614 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.439636 2026] [security2:error] [pid 212454:tid 212607] [client 20.219.2.60:18883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/rzki.php"] [unique_id "aryzzLyZ9IcLq1oV6pefhAAAABc"]
[Wed Sep 30 01:01:32.444609 2026] [security2:error] [pid 212454:tid 212614] [client 82.102.18.222:39018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryzzLyZ9IcLq1oV6pefhQAAAB4"]
[Wed Sep 30 01:01:32.547051 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.151.17:35991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryzzLyZ9IcLq1oV6pefjgAAAF8"]
[Wed Sep 30 01:01:32.548267 2026] [security2:error] [pid 212454:tid 212610] [client 84.17.60.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryzzLyZ9IcLq1oV6pefjQAAABo"]
[Wed Sep 30 01:01:32.590096 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.590378 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.603535 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.603783 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.610185 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:32.610437 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:32.634240 2026] [security2:error] [pid 212454:tid 212678] [client 4.185.40.215:1363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/56c53.php"] [unique_id "aryzzLyZ9IcLq1oV6peflAAAAF4"]
[Wed Sep 30 01:01:32.690582 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.690853 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.720800 2026] [security2:error] [pid 212454:tid 212671] [client 84.17.60.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryzzLyZ9IcLq1oV6pefmwAAAFc"]
[Wed Sep 30 01:01:32.772412 2026] [security2:error] [pid 212454:tid 212657] [client 82.102.18.222:39022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryzzLyZ9IcLq1oV6pefnwAAAEk"]
[Wed Sep 30 01:01:32.780921 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.781193 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.825191 2026] [security2:error] [pid 212454:tid 212639] [client 20.214.151.17:52658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/b.php"] [unique_id "aryzzLyZ9IcLq1oV6pefpQAAADc"]
[Wed Sep 30 01:01:32.857437 2026] [security2:error] [pid 212454:tid 212603] [client 4.196.65.241:53097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/909.php"] [unique_id "aryzzLyZ9IcLq1oV6pefpgAAABM"]
[Wed Sep 30 01:01:32.872693 2026] [security2:error] [pid 212454:tid 212480] [remote 74.7.227.56:50222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryzzLyZ9IcLq1oV6pefqQAAZBk"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:01:32.876651 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.876913 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.880785 2026] [security2:error] [pid 212454:tid 212627] [client 20.214.109.68:11163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/blsvgeyaza.php"] [unique_id "aryzzLyZ9IcLq1oV6pefqgAAACs"]
[Wed Sep 30 01:01:32.881737 2026] [security2:error] [pid 212454:tid 212699] [client 84.17.60.236:41636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryzzLyZ9IcLq1oV6pefqwAAAHM"]
[Wed Sep 30 01:01:32.948188 2026] [security2:error] [pid 212454:tid 212672] [client 20.194.96.176:1954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/BDKR28WP.php"] [unique_id "aryzzLyZ9IcLq1oV6pefrAAAAFg"]
[Wed Sep 30 01:01:32.954102 2026] [security2:error] [pid 212454:tid 212659] [client 4.185.40.215:1282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tx78.php"] [unique_id "aryzzLyZ9IcLq1oV6pefrQAAAEs"]
[Wed Sep 30 01:01:32.965212 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:32.965543 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:32.988319 2026] [security2:error] [pid 212454:tid 212473] [remote 220.181.108.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryzzLyZ9IcLq1oV6pefsAAAcRI"]
[Wed Sep 30 01:01:33.018063 2026] [security2:error] [pid 212454:tid 212665] [client 223.181.60.167:12577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzzbyZ9IcLq1oV6pefsQAAAFE"]
[Wed Sep 30 01:01:33.018308 2026] [security2:error] [pid 212454:tid 212665] [client 223.181.60.167:12577] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryzzbyZ9IcLq1oV6pefsQAAAFE"]
[Wed Sep 30 01:01:33.056283 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.056563 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.057878 2026] [security2:error] [pid 212454:tid 212703] [client 122.173.27.10:13504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzzbyZ9IcLq1oV6peftgAAAHc"]
[Wed Sep 30 01:01:33.057985 2026] [security2:error] [pid 212454:tid 212703] [client 122.173.27.10:13504] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryzzbyZ9IcLq1oV6peftgAAAHc"]
[Wed Sep 30 01:01:33.087614 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.151.17:54124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/admin.php"] [unique_id "aryzzbyZ9IcLq1oV6pefuwAAAHY"]
[Wed Sep 30 01:01:33.109884 2026] [security2:error] [pid 212454:tid 212662] [client 82.102.18.222:39032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "website-6ef7ddcb.whconsults.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryzzbyZ9IcLq1oV6pefvwAAAE4"]
[Wed Sep 30 01:01:33.118252 2026] [access_compat:error] [pid 212454:tid 212691] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:33.118519 2026] [access_compat:error] [pid 212454:tid 212691] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:01:33.147423 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.147690 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.201752 2026] [security2:error] [pid 212454:tid 212598] [client 84.17.60.236:41642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "steamif.org"] [uri "/xmlrpc.php"] [unique_id "aryzzbyZ9IcLq1oV6pefwgAAAA4"]
[Wed Sep 30 01:01:33.238708 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.239030 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.295204 2026] [security2:error] [pid 212454:tid 212585] [client 4.240.25.22:30771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/simple.php"] [unique_id "aryzzbyZ9IcLq1oV6pefygAAAAE"]
[Wed Sep 30 01:01:33.314378 2026] [security2:error] [pid 212454:tid 212704] [client 4.185.40.215:1383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws80.php"] [unique_id "aryzzbyZ9IcLq1oV6pefzQAAAHg"]
[Wed Sep 30 01:01:33.320081 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.109.68:11177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gqhyti.php"] [unique_id "aryzzbyZ9IcLq1oV6pefzgAAAH4"]
[Wed Sep 30 01:01:33.332519 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.332792 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.379785 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.151.17:48946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/fling.php"] [unique_id "aryzzbyZ9IcLq1oV6pef0gAAAG4"]
[Wed Sep 30 01:01:33.423826 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.424087 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.513325 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.513629 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.537664 2026] [security2:error] [pid 212454:tid 212603] [client 84.17.60.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryzzbyZ9IcLq1oV6pef6QAAABM"]
[Wed Sep 30 01:01:33.579341 2026] [access_compat:error] [pid 212454:tid 212666] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0L25ldA==
[Wed Sep 30 01:01:33.579608 2026] [access_compat:error] [pid 212454:tid 212666] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0L25ldA==
[Wed Sep 30 01:01:33.604377 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.604638 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.635375 2026] [security2:error] [pid 212454:tid 212584] [client 4.185.40.215:1316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/jga.php"] [unique_id "aryzzbyZ9IcLq1oV6pef7gAAAAA"]
[Wed Sep 30 01:01:33.664699 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.151.17:44438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/themes/index.php"] [unique_id "aryzzbyZ9IcLq1oV6pef8AAAAFg"]
[Wed Sep 30 01:01:33.695315 2026] [access_compat:error] [pid 212454:tid 212706] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.695571 2026] [access_compat:error] [pid 212454:tid 212706] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.700362 2026] [security2:error] [pid 212454:tid 212632] [client 84.17.60.236:41654] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryzzbyZ9IcLq1oV6pef8gAAADA"]
[Wed Sep 30 01:01:33.789771 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.790084 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.792337 2026] [security2:error] [pid 212454:tid 212660] [client 4.196.65.241:19144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/dex.php"] [unique_id "aryzzbyZ9IcLq1oV6pef-gAAAEw"]
[Wed Sep 30 01:01:33.824727 2026] [security2:error] [pid 212454:tid 212681] [client 173.254.29.157:34348] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "aryzzbyZ9IcLq1oV6pef_QAAAGE"]
[Wed Sep 30 01:01:33.837488 2026] [security2:error] [pid 212454:tid 212692] [client 45.138.12.32:35214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ane.ieo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzzbyZ9IcLq1oV6pef_wAAAGw"]
[Wed Sep 30 01:01:33.841494 2026] [security2:error] [pid 212454:tid 212661] [client 173.254.29.157:34362] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "aryzzbyZ9IcLq1oV6pegAAAAAE0"]
[Wed Sep 30 01:01:33.856628 2026] [security2:error] [pid 212454:tid 212598] [client 173.254.29.157:34364] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "aryzzbyZ9IcLq1oV6pegAQAAAA4"]
[Wed Sep 30 01:01:33.870985 2026] [security2:error] [pid 212454:tid 212677] [client 173.254.29.157:34376] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "aryzzbyZ9IcLq1oV6pegAgAAAF0"]
[Wed Sep 30 01:01:33.877975 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.109.68:11241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/autoxxi.php"] [unique_id "aryzzbyZ9IcLq1oV6pegBAAAAAg"]
[Wed Sep 30 01:01:33.878781 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.879060 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:33.930468 2026] [security2:error] [pid 212454:tid 212607] [client 20.214.151.17:44465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/adminfuns.php"] [unique_id "aryzzbyZ9IcLq1oV6pegBQAAABc"]
[Wed Sep 30 01:01:33.945377 2026] [security2:error] [pid 212454:tid 212610] [client 4.185.40.215:1398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/fs.php"] [unique_id "aryzzbyZ9IcLq1oV6pegBgAAABo"]
[Wed Sep 30 01:01:33.971323 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:33.971577 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.027032 2026] [security2:error] [pid 212454:tid 212631] [client 84.17.60.236:41656] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryzzryZ9IcLq1oV6pegCwAAAC8"]
[Wed Sep 30 01:01:34.049140 2026] [security2:error] [pid 212454:tid 212689] [client 103.168.67.253:58652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wp/index.php"] [unique_id "aryzzryZ9IcLq1oV6pegDwAAAGk"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:34.077237 2026] [security2:error] [pid 212454:tid 212617] [client 45.138.12.32:21668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.anl.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzzryZ9IcLq1oV6pegEQAAACE"]
[Wed Sep 30 01:01:34.079539 2026] [security2:error] [pid 212454:tid 212687] [client 20.194.96.176:1972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/mac.php"] [unique_id "aryzzryZ9IcLq1oV6pegEgAAAGc"]
[Wed Sep 30 01:01:34.105792 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:01:34.106239 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:01:34.193846 2026] [security2:error] [pid 212454:tid 212630] [client 20.214.151.17:35986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/alfa.php"] [unique_id "aryzzryZ9IcLq1oV6pegGAAAAC4"]
[Wed Sep 30 01:01:34.247501 2026] [security2:error] [pid 212454:tid 212656] [client 4.185.40.215:1292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/byypas.php"] [unique_id "aryzzryZ9IcLq1oV6pegHAAAAEg"]
[Wed Sep 30 01:01:34.260560 2026] [security2:error] [pid 212454:tid 212633] [client 20.219.2.60:18842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/xsas.php"] [unique_id "aryzzryZ9IcLq1oV6pegHgAAADE"]
[Wed Sep 30 01:01:34.354738 2026] [security2:error] [pid 212454:tid 212690] [client 84.17.60.236:41670] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryzzryZ9IcLq1oV6pegIQAAAGo"]
[Wed Sep 30 01:01:34.375728 2026] [security2:error] [pid 212454:tid 212668] [client 223.235.102.107:22626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzzryZ9IcLq1oV6pegIwAAAFQ"]
[Wed Sep 30 01:01:34.376156 2026] [security2:error] [pid 212454:tid 212668] [client 223.235.102.107:22626] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzzryZ9IcLq1oV6pegIwAAAFQ"]
[Wed Sep 30 01:01:34.453626 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:35978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/222.php"] [unique_id "aryzzryZ9IcLq1oV6pegJAAAADw"]
[Wed Sep 30 01:01:34.554488 2026] [security2:error] [pid 212454:tid 212609] [client 4.185.40.215:1296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/b.php"] [unique_id "aryzzryZ9IcLq1oV6pegKwAAABk"]
[Wed Sep 30 01:01:34.595608 2026] [access_compat:error] [pid 212454:tid 212600] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:01:34.595712 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzzryZ9IcLq1oV6pegLgAAAAA"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:34.595912 2026] [access_compat:error] [pid 212454:tid 212600] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:01:34.643649 2026] [security2:error] [pid 212454:tid 212642] [client 103.172.210.103:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzzryZ9IcLq1oV6pegLwAAADo"]
[Wed Sep 30 01:01:34.643763 2026] [security2:error] [pid 212454:tid 212642] [client 103.172.210.103:51458] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryzzryZ9IcLq1oV6pegLwAAADo"]
[Wed Sep 30 01:01:34.670390 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.670649 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.690770 2026] [security2:error] [pid 212454:tid 212608] [client 84.17.60.236:41684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryzzryZ9IcLq1oV6pegNwAAABg"]
[Wed Sep 30 01:01:34.695892 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.696168 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.717086 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.151.17:36011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryzzryZ9IcLq1oV6pegOQAAAHw"]
[Wed Sep 30 01:01:34.722891 2026] [security2:error] [pid 212454:tid 212598] [client 20.214.109.68:11086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/1144452145_error_log.php"] [unique_id "aryzzryZ9IcLq1oV6pegOgAAAA4"]
[Wed Sep 30 01:01:34.744342 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.744607 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:41405] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.770677 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.770956 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:22173] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.773608 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:4544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.774010 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:4544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.811436 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.811686 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.842057 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.842464 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.845328 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.845574 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.855375 2026] [security2:error] [pid 212454:tid 212585] [client 4.185.40.215:1358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws49.php"] [unique_id "aryzzryZ9IcLq1oV6pegRgAAAAE"]
[Wed Sep 30 01:01:34.864855 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.865290 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.881578 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.881855 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.974116 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:34.974389 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:34.991018 2026] [security2:error] [pid 212454:tid 212652] [client 20.214.151.17:48944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/images.php"] [unique_id "aryzzryZ9IcLq1oV6pegUAAAAEQ"]
[Wed Sep 30 01:01:35.014760 2026] [security2:error] [pid 212454:tid 212628] [client 84.17.60.236:41688] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryzz7yZ9IcLq1oV6pegUgAAACw"]
[Wed Sep 30 01:01:35.039565 2026] [security2:error] [pid 212454:tid 212630] [client 20.194.96.176:30180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wmore1.php"] [unique_id "aryzz7yZ9IcLq1oV6pegVgAAAC4"]
[Wed Sep 30 01:01:35.057937 2026] [security2:error] [pid 212454:tid 212612] [client 105.112.178.79:38350] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tlsaction.com"] [uri "/__ss_probe_2044ca89c11a1d66250ee9a24e626f27__"] [unique_id "aryzz7yZ9IcLq1oV6pegWQAAABw"]
[Wed Sep 30 01:01:35.066094 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.066371 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.127502 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L25ldA==
[Wed Sep 30 01:01:35.127788 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L25ldA==
[Wed Sep 30 01:01:35.154468 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.154731 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.234633 2026] [security2:error] [pid 212454:tid 212590] [client 4.185.40.215:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-blog-header.php"] [unique_id "aryzz7yZ9IcLq1oV6pegYwAAAAY"]
[Wed Sep 30 01:01:35.266625 2026] [security2:error] [pid 212454:tid 212667] [client 20.70.173.30:60030] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "whm.transparentyouth.com"] [uri "/1.php"] [unique_id "aryzz7yZ9IcLq1oV6pegZQAAAFM"]
[Wed Sep 30 01:01:35.266729 2026] [security2:error] [pid 212454:tid 212667] [client 20.70.173.30:60030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/1.php"] [unique_id "aryzz7yZ9IcLq1oV6pegZQAAAFM"]
[Wed Sep 30 01:01:35.288819 2026] [security2:error] [pid 212454:tid 212589] [client 20.214.151.17:48927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/media.php"] [unique_id "aryzz7yZ9IcLq1oV6pegaQAAAAU"]
[Wed Sep 30 01:01:35.305131 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.305432 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.344816 2026] [security2:error] [pid 212454:tid 212621] [client 84.17.60.236:41700] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryzz7yZ9IcLq1oV6pegbgAAACU"]
[Wed Sep 30 01:01:35.361608 2026] [security2:error] [pid 212454:tid 212632] [client 45.138.12.32:21724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apz.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryzz7yZ9IcLq1oV6pegbwAAADA"]
[Wed Sep 30 01:01:35.376842 2026] [security2:error] [pid 212454:tid 212586] [client 106.214.3.140:2999] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegcAAAAAI"]
[Wed Sep 30 01:01:35.378571 2026] [security2:error] [pid 212454:tid 212586] [client 106.214.3.140:2999] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegcAAAAAI"]
[Wed Sep 30 01:01:35.392532 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.392814 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.401381 2026] [security2:error] [pid 212454:tid 212664] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzz7yZ9IcLq1oV6pegcwAAAFA"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:35.449591 2026] [security2:error] [pid 212454:tid 212618] [client 20.194.5.96:8338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wpuse.php"] [unique_id "aryzz7yZ9IcLq1oV6pegdAAAACI"]
[Wed Sep 30 01:01:35.460275 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.460530 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.469011 2026] [security2:error] [pid 212454:tid 212662] [client 4.196.65.241:2505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/BtOCXH4W1V5.php"] [unique_id "aryzz7yZ9IcLq1oV6pegdgAAAE4"]
[Wed Sep 30 01:01:35.486373 2026] [security2:error] [pid 212454:tid 212653] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryzz7yZ9IcLq1oV6pegdwAAAEU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:35.488558 2026] [security2:error] [pid 212454:tid 212691] [client 20.219.2.60:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/d12.php"] [unique_id "aryzz7yZ9IcLq1oV6pegeAAAAGs"]
[Wed Sep 30 01:01:35.525818 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.526084 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.535542 2026] [security2:error] [pid 212454:tid 212705] [client 155.190.6.18:60004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegfQAAAHk"]
[Wed Sep 30 01:01:35.535646 2026] [security2:error] [pid 212454:tid 212705] [client 155.190.6.18:60004] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegfQAAAHk"]
[Wed Sep 30 01:01:35.535838 2026] [security2:error] [pid 212454:tid 212708] [client 4.185.40.215:1382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bgymj.php"] [unique_id "aryzz7yZ9IcLq1oV6pegfAAAAHw"]
[Wed Sep 30 01:01:35.548047 2026] [security2:error] [pid 212454:tid 212677] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzz7yZ9IcLq1oV6pegfwAAAF0"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:35.555656 2026] [security2:error] [pid 212454:tid 212623] [client 20.214.151.17:44448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/mac.php"] [unique_id "aryzz7yZ9IcLq1oV6peggAAAACc"]
[Wed Sep 30 01:01:35.598327 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L25ldA==
[Wed Sep 30 01:01:35.598612 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L25ldA==
[Wed Sep 30 01:01:35.618233 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.618515 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.618753 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "aryzz7yZ9IcLq1oV6peghAAAABc"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:35.667707 2026] [security2:error] [pid 212454:tid 212636] [client 84.17.60.236:41704] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryzz7yZ9IcLq1oV6pegiwAAADQ"]
[Wed Sep 30 01:01:35.669143 2026] [security2:error] [pid 212454:tid 212614] [client 20.214.109.68:11244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws48.php"] [unique_id "aryzz7yZ9IcLq1oV6pegjAAAAB4"]
[Wed Sep 30 01:01:35.674184 2026] [security2:error] [pid 212454:tid 212688] [client 116.193.128.26:57659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegigAAAGg"]
[Wed Sep 30 01:01:35.674316 2026] [security2:error] [pid 212454:tid 212688] [client 116.193.128.26:57659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegigAAAGg"]
[Wed Sep 30 01:01:35.689749 2026] [security2:error] [pid 212454:tid 212613] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "aryzz7yZ9IcLq1oV6pegjQAAAB0"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:35.708409 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.708667 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.806326 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.806606 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.822930 2026] [security2:error] [pid 212454:tid 212695] [client 20.214.151.17:48949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ops.php"] [unique_id "aryzz7yZ9IcLq1oV6peglgAAAG8"]
[Wed Sep 30 01:01:35.840087 2026] [security2:error] [pid 212454:tid 212591] [client 4.185.40.215:12228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gfd.php"] [unique_id "aryzz7yZ9IcLq1oV6pegmAAAAAc"]
[Wed Sep 30 01:01:35.882320 2026] [security2:error] [pid 212454:tid 212626] [client 103.168.67.253:64484] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/login"] [unique_id "aryzz7yZ9IcLq1oV6pegmQAAACo"]
[Wed Sep 30 01:01:35.894743 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.895035 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.961202 2026] [security2:error] [pid 212454:tid 212601] [client 4.196.65.241:64179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/php.php"] [unique_id "aryzz7yZ9IcLq1oV6pegnwAAABE"]
[Wed Sep 30 01:01:35.961208 2026] [security2:error] [pid 212454:tid 212625] [client 202.179.95.79:60627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegngAAACk"]
[Wed Sep 30 01:01:35.961322 2026] [security2:error] [pid 212454:tid 212625] [client 202.179.95.79:60627] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryzz7yZ9IcLq1oV6pegngAAACk"]
[Wed Sep 30 01:01:35.985677 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:35.985953 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:35.999254 2026] [security2:error] [pid 212454:tid 212627] [client 84.17.60.236:41714] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryzz7yZ9IcLq1oV6pegpQAAACs"]
[Wed Sep 30 01:01:36.056515 2026] [security2:error] [pid 212454:tid 212666] [client 20.194.96.176:25512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wp-ainefgskk.php"] [unique_id "aryz0LyZ9IcLq1oV6pegqQAAAFI"]
[Wed Sep 30 01:01:36.088150 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.088432 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.090801 2026] [access_compat:error] [pid 212454:tid 212648] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:36.091101 2026] [access_compat:error] [pid 212454:tid 212648] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:36.091662 2026] [security2:error] [pid 212454:tid 212585] [client 103.159.192.142:59069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegsAAAAAE"]
[Wed Sep 30 01:01:36.091761 2026] [security2:error] [pid 212454:tid 212585] [client 103.159.192.142:59069] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegsAAAAAE"]
[Wed Sep 30 01:01:36.098768 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:54083] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/1.php"] [unique_id "aryz0LyZ9IcLq1oV6pegsQAAADw"]
[Wed Sep 30 01:01:36.098905 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:54083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/1.php"] [unique_id "aryz0LyZ9IcLq1oV6pegsQAAADw"]
[Wed Sep 30 01:01:36.141220 2026] [security2:error] [pid 212454:tid 212697] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "aryz0LyZ9IcLq1oV6pegsgAAAHE"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:36.180324 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.180750 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.185966 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:1371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/callback.php"] [unique_id "aryz0LyZ9IcLq1oV6pegtAAAADo"]
[Wed Sep 30 01:01:36.194863 2026] [security2:error] [pid 212454:tid 212653] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "aryz0LyZ9IcLq1oV6pegtQAAAEU"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:36.226377 2026] [security2:error] [pid 212454:tid 212584] [client 152.59.165.7:63870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegtwAAAAA"]
[Wed Sep 30 01:01:36.226498 2026] [security2:error] [pid 212454:tid 212584] [client 152.59.165.7:63870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegtwAAAAA"]
[Wed Sep 30 01:01:36.247585 2026] [security2:error] [pid 212454:tid 212518] [remote 57.141.14.84:56042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegtgAABD8"]
[Wed Sep 30 01:01:36.268119 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.268372 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.271788 2026] [security2:error] [pid 212454:tid 212652] [client 203.122.45.246:56613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegvAAAAEQ"]
[Wed Sep 30 01:01:36.272054 2026] [security2:error] [pid 212454:tid 212652] [client 203.122.45.246:56613] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6pegvAAAAEQ"]
[Wed Sep 30 01:01:36.331506 2026] [security2:error] [pid 212454:tid 212694] [client 84.17.60.236:41730] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz0LyZ9IcLq1oV6pegwQAAAG4"]
[Wed Sep 30 01:01:36.361899 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.362171 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.374029 2026] [security2:error] [pid 212454:tid 212696] [client 20.214.151.17:35979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/aaa.php"] [unique_id "aryz0LyZ9IcLq1oV6pegxwAAAHA"]
[Wed Sep 30 01:01:36.414934 2026] [security2:error] [pid 212454:tid 212673] [client 142.147.151.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz0LyZ9IcLq1oV6pegzAAAAFk"]
[Wed Sep 30 01:01:36.433695 2026] [security2:error] [pid 212454:tid 212628] [client 20.214.109.68:11090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryz0LyZ9IcLq1oV6pegzQAAACw"]
[Wed Sep 30 01:01:36.453735 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.454198 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.481084 2026] [autoindex:error] [pid 212454:tid 212605] [client 43.135.185.59:0] AH01276: Cannot serve directory /home3/thenerdi/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://thenerdistheword.ca/wp-content/plugins/photo-gallery/booster
[Wed Sep 30 01:01:36.495022 2026] [security2:error] [pid 212454:tid 212639] [client 4.185.40.215:1377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/file.php"] [unique_id "aryz0LyZ9IcLq1oV6peg1QAAADc"]
[Wed Sep 30 01:01:36.513670 2026] [security2:error] [pid 212454:tid 212658] [client 103.168.67.253:64484] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/login"] [unique_id "aryz0LyZ9IcLq1oV6peg1gAAAEo"]
[Wed Sep 30 01:01:36.544369 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.544659 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.572820 2026] [security2:error] [pid 212454:tid 212627] [client 103.168.67.253:64484] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/login"] [unique_id "aryz0LyZ9IcLq1oV6peg3QAAACs"]
[Wed Sep 30 01:01:36.593004 2026] [security2:error] [pid 212454:tid 212668] [client 20.194.96.176:52465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/ab.php"] [unique_id "aryz0LyZ9IcLq1oV6peg3wAAAFQ"]
[Wed Sep 30 01:01:36.603942 2026] [access_compat:error] [pid 212454:tid 212706] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L25ldA==
[Wed Sep 30 01:01:36.604384 2026] [access_compat:error] [pid 212454:tid 212706] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L25ldA==
[Wed Sep 30 01:01:36.607662 2026] [security2:error] [pid 212454:tid 212586] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "aryz0LyZ9IcLq1oV6peg4gAAAAI"], referer: https://glorymfb.com/wp/wp-admin/
[Wed Sep 30 01:01:36.618549 2026] [security2:error] [pid 212454:tid 212683] [client 116.72.182.19:60310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6peg4wAAAGM"]
[Wed Sep 30 01:01:36.618779 2026] [security2:error] [pid 212454:tid 212683] [client 116.72.182.19:60310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6peg4wAAAGM"]
[Wed Sep 30 01:01:36.633928 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:64484] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/login"] [unique_id "aryz0LyZ9IcLq1oV6peg5gAAAFY"]
[Wed Sep 30 01:01:36.636481 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.636740 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.645136 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.151.17:52627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/chosen.php"] [unique_id "aryz0LyZ9IcLq1oV6peg6QAAACI"]
[Wed Sep 30 01:01:36.656432 2026] [security2:error] [pid 212454:tid 212599] [client 84.17.60.236:41732] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryz0LyZ9IcLq1oV6peg6gAAAA8"]
[Wed Sep 30 01:01:36.674579 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:21511] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6peg7QAAAD4"]
[Wed Sep 30 01:01:36.674688 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:21511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz0LyZ9IcLq1oV6peg7QAAAD4"]
[Wed Sep 30 01:01:36.686477 2026] [security2:error] [pid 212454:tid 212623] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/posts/999999"] [unique_id "aryz0LyZ9IcLq1oV6peg8AAAACc"]
[Wed Sep 30 01:01:36.731873 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.732214 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.768598 2026] [security2:error] [pid 212454:tid 212613] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz0LyZ9IcLq1oV6peg_AAAAB0"]
[Wed Sep 30 01:01:36.819573 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.819867 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.849215 2026] [security2:error] [pid 212454:tid 212687] [client 4.185.40.215:1294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bolt.php"] [unique_id "aryz0LyZ9IcLq1oV6pehDwAAAGc"]
[Wed Sep 30 01:01:36.913734 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:36.914019 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:36.919383 2026] [security2:error] [pid 212454:tid 212593] [client 20.214.151.17:54135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/2P.php"] [unique_id "aryz0LyZ9IcLq1oV6pehGgAAAAk"]
[Wed Sep 30 01:01:36.987730 2026] [security2:error] [pid 212454:tid 212627] [client 84.17.60.236:41748] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz0LyZ9IcLq1oV6pehHQAAACs"]
[Wed Sep 30 01:01:37.001196 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.001473 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.012804 2026] [security2:error] [pid 212454:tid 212586] [client 20.219.2.60:18833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/okxh.php"] [unique_id "aryz0byZ9IcLq1oV6pehIQAAAAI"]
[Wed Sep 30 01:01:37.087344 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0L25ldA==
[Wed Sep 30 01:01:37.087712 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0L25ldA==
[Wed Sep 30 01:01:37.092446 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.092869 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.158999 2026] [security2:error] [pid 212454:tid 212708] [client 4.185.40.215:1397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-blogs.php"] [unique_id "aryz0byZ9IcLq1oV6pehNwAAAHw"]
[Wed Sep 30 01:01:37.182224 2026] [security2:error] [pid 212454:tid 212588] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/pages"] [unique_id "aryz0byZ9IcLq1oV6pehOgAAAAQ"]
[Wed Sep 30 01:01:37.183720 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.184343 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.193708 2026] [security2:error] [pid 212454:tid 212607] [client 20.214.151.17:44471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/min.php"] [unique_id "aryz0byZ9IcLq1oV6pehOwAAABc"]
[Wed Sep 30 01:01:37.225334 2026] [security2:error] [pid 212454:tid 212655] [client 20.194.96.176:52432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/dairg.php"] [unique_id "aryz0byZ9IcLq1oV6pehPQAAAEc"]
[Wed Sep 30 01:01:37.273676 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.273945 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.289774 2026] [security2:error] [pid 212454:tid 212647] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz0byZ9IcLq1oV6pehRQAAAD8"]
[Wed Sep 30 01:01:37.290622 2026] [security2:error] [pid 212454:tid 212675] [client 20.214.109.68:11164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/schallfuns.php"] [unique_id "aryz0byZ9IcLq1oV6pehRgAAAFs"]
[Wed Sep 30 01:01:37.322082 2026] [security2:error] [pid 212454:tid 212636] [client 84.17.60.236:41750] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryz0byZ9IcLq1oV6pehSQAAADQ"]
[Wed Sep 30 01:01:37.364962 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.365214 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.382879 2026] [security2:error] [pid 212454:tid 212678] [client 20.198.74.230:23555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/f35.update.php"] [unique_id "aryz0byZ9IcLq1oV6pehWAAAAF4"]
[Wed Sep 30 01:01:37.384849 2026] [security2:error] [pid 212454:tid 212641] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/media"] [unique_id "aryz0byZ9IcLq1oV6pehVwAAADk"]
[Wed Sep 30 01:01:37.417743 2026] [security2:error] [pid 212454:tid 212626] [client 20.194.5.96:57953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/sm.php"] [unique_id "aryz0byZ9IcLq1oV6pehYAAAACo"]
[Wed Sep 30 01:01:37.463404 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.463827 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.487088 2026] [security2:error] [pid 212454:tid 212615] [client 4.185.40.215:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/zlnckdxn.php"] [unique_id "aryz0byZ9IcLq1oV6pehZwAAAB8"]
[Wed Sep 30 01:01:37.550226 2026] [security2:error] [pid 212454:tid 212691] [client 43.227.131.37:7411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz0byZ9IcLq1oV6pehcQAAAGs"]
[Wed Sep 30 01:01:37.550395 2026] [security2:error] [pid 212454:tid 212691] [client 43.227.131.37:7411] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz0byZ9IcLq1oV6pehcQAAAGs"]
[Wed Sep 30 01:01:37.553867 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.554288 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.566664 2026] [security2:error] [pid 212454:tid 212677] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz0byZ9IcLq1oV6pehcwAAAF0"]
[Wed Sep 30 01:01:37.580790 2026] [access_compat:error] [pid 212454:tid 212693] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:37.581073 2026] [access_compat:error] [pid 212454:tid 212693] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:37.620008 2026] [security2:error] [pid 212454:tid 212661] [client 20.214.151.17:35987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/great.php"] [unique_id "aryz0byZ9IcLq1oV6pehfQAAAE0"]
[Wed Sep 30 01:01:37.637195 2026] [security2:error] [pid 212454:tid 212560] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryz0byZ9IcLq1oV6pehgAAAL2k"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D22127
[Wed Sep 30 01:01:37.640962 2026] [security2:error] [pid 212454:tid 212647] [client 92.71.23.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz0byZ9IcLq1oV6pehgQAAAD8"]
[Wed Sep 30 01:01:37.641507 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.641749 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:7121] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.655214 2026] [security2:error] [pid 212454:tid 212614] [client 84.17.60.236:41752] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryz0byZ9IcLq1oV6pehggAAAB4"]
[Wed Sep 30 01:01:37.732562 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.732823 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.787677 2026] [security2:error] [pid 212454:tid 212668] [client 4.185.40.215:1353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/fs6.php"] [unique_id "aryz0byZ9IcLq1oV6pehiwAAAFQ"]
[Wed Sep 30 01:01:37.816954 2026] [security2:error] [pid 212454:tid 212628] [client 216.73.216.46:7121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz0byZ9IcLq1oV6pehjQAAACw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5ODQ%3D
[Wed Sep 30 01:01:37.821145 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.821423 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.863028 2026] [security2:error] [pid 212454:tid 212689] [client 116.197.133.25:57321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz0byZ9IcLq1oV6pehkwAAAGk"]
[Wed Sep 30 01:01:37.863184 2026] [security2:error] [pid 212454:tid 212689] [client 116.197.133.25:57321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz0byZ9IcLq1oV6pehkwAAAGk"]
[Wed Sep 30 01:01:37.875174 2026] [security2:error] [pid 212454:tid 212611] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/categories"] [unique_id "aryz0byZ9IcLq1oV6pehlgAAABs"]
[Wed Sep 30 01:01:37.886544 2026] [security2:error] [pid 212454:tid 212673] [client 103.211.90.220:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz0byZ9IcLq1oV6pehlwAAAFk"]
[Wed Sep 30 01:01:37.912708 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:37.913029 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:37.958766 2026] [security2:error] [pid 212454:tid 212684] [client 45.232.90.38:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz0byZ9IcLq1oV6pehnQAAAGQ"]
[Wed Sep 30 01:01:37.982371 2026] [security2:error] [pid 212454:tid 212711] [client 84.17.60.236:41760] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryz0byZ9IcLq1oV6pehngAAAH8"]
[Wed Sep 30 01:01:38.003160 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.003431 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.024826 2026] [security2:error] [pid 212454:tid 212609] [client 136.242.99.195:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz0ryZ9IcLq1oV6pehpAAAABk"]
[Wed Sep 30 01:01:38.061575 2026] [security2:error] [pid 212454:tid 212661] [client 20.214.151.17:48947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/BDKR28WP.php"] [unique_id "aryz0ryZ9IcLq1oV6pehpwAAAE0"]
[Wed Sep 30 01:01:38.094924 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.095342 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.107982 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:38.108605 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:01:38.116417 2026] [security2:error] [pid 212454:tid 212625] [client 4.185.40.215:1407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/xwzs.php"] [unique_id "aryz0ryZ9IcLq1oV6pehrAAAACk"]
[Wed Sep 30 01:01:38.187000 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.187435 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.199484 2026] [security2:error] [pid 212454:tid 212617] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz0ryZ9IcLq1oV6pehtgAAACE"]
[Wed Sep 30 01:01:38.207976 2026] [security2:error] [pid 212454:tid 212702] [client 49.205.105.16:13396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz0ryZ9IcLq1oV6pehtwAAAHY"]
[Wed Sep 30 01:01:38.208152 2026] [security2:error] [pid 212454:tid 212702] [client 49.205.105.16:13396] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz0ryZ9IcLq1oV6pehtwAAAHY"]
[Wed Sep 30 01:01:38.267932 2026] [security2:error] [pid 212454:tid 212645] [client 20.194.96.176:2450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/z60.php"] [unique_id "aryz0ryZ9IcLq1oV6pehvAAAAD0"]
[Wed Sep 30 01:01:38.270766 2026] [security2:error] [pid 212454:tid 212646] [client 213.136.69.135:49531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-theme-json-schema.php"] [unique_id "aryz0ryZ9IcLq1oV6pehvgAAAD4"], referer: binance.com
[Wed Sep 30 01:01:38.275335 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.275601 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.309802 2026] [security2:error] [pid 212454:tid 212638] [client 84.17.60.236:42490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "steamif.org"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz0ryZ9IcLq1oV6pehwwAAADY"]
[Wed Sep 30 01:01:38.328123 2026] [security2:error] [pid 212454:tid 212649] [client 20.214.151.17:44432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/gigi.php"] [unique_id "aryz0ryZ9IcLq1oV6pehxQAAAEE"]
[Wed Sep 30 01:01:38.348661 2026] [security2:error] [pid 212454:tid 212670] [client 213.188.74.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz0ryZ9IcLq1oV6pehxwAAAFY"]
[Wed Sep 30 01:01:38.366175 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.366447 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.372725 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.109.68:11099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/CDX1.php"] [unique_id "aryz0ryZ9IcLq1oV6pehygAAAFA"]
[Wed Sep 30 01:01:38.438116 2026] [security2:error] [pid 212454:tid 212590] [client 4.185.40.215:12235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-admin/network/users.php"] [unique_id "aryz0ryZ9IcLq1oV6pehzQAAAAY"]
[Wed Sep 30 01:01:38.451359 2026] [security2:error] [pid 212454:tid 212704] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/tags"] [unique_id "aryz0ryZ9IcLq1oV6pehzgAAAHg"]
[Wed Sep 30 01:01:38.457739 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.458010 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.496937 2026] [access_compat:error] [pid 212454:tid 212703] [client 47.79.202.5:31368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:01:38.497249 2026] [access_compat:error] [pid 212454:tid 212703] [client 47.79.202.5:31368] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:01:38.551635 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.552077 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.620724 2026] [security2:error] [pid 212454:tid 212648] [client 20.214.151.17:54101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ant.php"] [unique_id "aryz0ryZ9IcLq1oV6peh4AAAAEA"]
[Wed Sep 30 01:01:38.627040 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:01:38.627359 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:01:38.638588 2026] [security2:error] [pid 212454:tid 212636] [client 4.196.65.241:53101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/jlex.php"] [unique_id "aryz0ryZ9IcLq1oV6peh5gAAADQ"]
[Wed Sep 30 01:01:38.639797 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.640370 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.645430 2026] [security2:error] [pid 212454:tid 212634] [client 20.219.2.60:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/55b76.php"] [unique_id "aryz0ryZ9IcLq1oV6peh6AAAADI"]
[Wed Sep 30 01:01:38.649161 2026] [security2:error] [pid 212454:tid 212690] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz0ryZ9IcLq1oV6peh6QAAAGo"]
[Wed Sep 30 01:01:38.658976 2026] [security2:error] [pid 212454:tid 212641] [client 20.70.173.30:60027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryz0ryZ9IcLq1oV6peh6gAAADk"]
[Wed Sep 30 01:01:38.689377 2026] [security2:error] [pid 212454:tid 212688] [client 20.194.5.96:8575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/mknobgkg.php"] [unique_id "aryz0ryZ9IcLq1oV6peh7AAAAGg"]
[Wed Sep 30 01:01:38.733613 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.734069 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.792929 2026] [security2:error] [pid 212454:tid 212623] [client 4.185.40.215:12274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws66.php"] [unique_id "aryz0ryZ9IcLq1oV6peh9AAAACc"]
[Wed Sep 30 01:01:38.821762 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.822039 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.860527 2026] [security2:error] [pid 212454:tid 212578] [remote 162.240.171.12:44872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "aryz0ryZ9IcLq1oV6peh-QAAcHs"]
[Wed Sep 30 01:01:38.863243 2026] [security2:error] [pid 212454:tid 212581] [remote 162.240.171.12:44872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kawasakiz1.com"] [uri "/wp-login.php"] [unique_id "aryz0ryZ9IcLq1oV6peh-gAAaX4"], referer: https://kawasakiz1.com/wp-login.php
[Wed Sep 30 01:01:38.865671 2026] [security2:error] [pid 212454:tid 212580] [remote 162.240.171.12:44872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "aryz0ryZ9IcLq1oV6peh_AAAZn0"]
[Wed Sep 30 01:01:38.865822 2026] [security2:error] [pid 212454:tid 212686] [client 162.240.171.12:44872] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "kawasakiz1.com"] [uri "/xmlrpc.php"] [unique_id "aryz0ryZ9IcLq1oV6peh_AAAZn0"]
[Wed Sep 30 01:01:38.890919 2026] [ssl:error] [pid 212454:tid 212630] [client 216.25.124.24:28282] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.pof.vlz.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:01:38.916478 2026] [security2:error] [pid 212454:tid 212699] [client 20.214.151.17:52648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/uejvv.php"] [unique_id "aryz0ryZ9IcLq1oV6peh_wAAAHM"]
[Wed Sep 30 01:01:38.917894 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:38.918341 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:38.961004 2026] [security2:error] [pid 212454:tid 212679] [client 85.204.70.112:59040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "aryz0ryZ9IcLq1oV6peiAAAAAF8"]
[Wed Sep 30 01:01:38.996688 2026] [access_compat:error] [pid 212454:tid 212628] [client 47.79.207.170:11736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:01:38.997006 2026] [access_compat:error] [pid 212454:tid 212628] [client 47.79.207.170:11736] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:01:38.997943 2026] [security2:error] [pid 212454:tid 212627] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/posts/999998"] [unique_id "aryz0ryZ9IcLq1oV6peiBgAAACs"]
[Wed Sep 30 01:01:39.005276 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.005526 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.083074 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz07yZ9IcLq1oV6peiDgAAAFs"]
[Wed Sep 30 01:01:39.094834 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.095110 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.097216 2026] [security2:error] [pid 212454:tid 212596] [client 4.185.40.215:1313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ewe.php"] [unique_id "aryz07yZ9IcLq1oV6peiEAAAAAw"]
[Wed Sep 30 01:01:39.110343 2026] [security2:error] [pid 212454:tid 212667] [client 4.196.65.241:19124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xl9.php"] [unique_id "aryz07yZ9IcLq1oV6peiFAAAAFM"]
[Wed Sep 30 01:01:39.125355 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:01:39.125621 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:01:39.186447 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.186706 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.217868 2026] [security2:error] [pid 212454:tid 212688] [client 20.214.109.68:11180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/clasa99.php"] [unique_id "aryz07yZ9IcLq1oV6peiIQAAAGg"]
[Wed Sep 30 01:01:39.220372 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/posts/99999"] [unique_id "aryz07yZ9IcLq1oV6peiIgAAACY"]
[Wed Sep 30 01:01:39.279961 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.280222 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.370748 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.371078 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.401303 2026] [security2:error] [pid 212454:tid 212624] [client 20.194.96.176:25492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/imageskir.php"] [unique_id "aryz07yZ9IcLq1oV6peiMAAAACg"]
[Wed Sep 30 01:01:39.401743 2026] [security2:error] [pid 212454:tid 212676] [client 4.185.40.215:1298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/aboute.php"] [unique_id "aryz07yZ9IcLq1oV6peiMQAAAFw"]
[Wed Sep 30 01:01:39.459521 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.459824 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.489250 2026] [security2:error] [pid 212454:tid 212666] [client 20.214.151.17:34981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/file.php"] [unique_id "aryz07yZ9IcLq1oV6peiOQAAAFI"]
[Wed Sep 30 01:01:39.550105 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.550363 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.575088 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:01:39.575344 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:01:39.640889 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.641164 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:47128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.733465 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.733732 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.750890 2026] [security2:error] [pid 212454:tid 212693] [client 20.214.151.17:44423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/elements.php"] [unique_id "aryz07yZ9IcLq1oV6peiTwAAAG0"]
[Wed Sep 30 01:01:39.758685 2026] [security2:error] [pid 212454:tid 212625] [client 4.185.40.215:1297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/x9.php"] [unique_id "aryz07yZ9IcLq1oV6peiUgAAACk"]
[Wed Sep 30 01:01:39.774847 2026] [security2:error] [pid 212454:tid 212604] [client 20.214.109.68:11247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/myfilexxx.php"] [unique_id "aryz07yZ9IcLq1oV6peiVwAAABQ"]
[Wed Sep 30 01:01:39.774898 2026] [security2:error] [pid 212454:tid 212695] [client 45.7.26.125:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz07yZ9IcLq1oV6peiVgAAAG8"]
[Wed Sep 30 01:01:39.780236 2026] [security2:error] [pid 212454:tid 212631] [client 201.231.101.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz07yZ9IcLq1oV6peiWAAAAC8"]
[Wed Sep 30 01:01:39.814903 2026] [security2:error] [pid 212454:tid 212632] [client 216.73.216.46:47128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz07yZ9IcLq1oV6peiWQAAADA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvbWVtb3J5NDA2L3Bvd2Vy
[Wed Sep 30 01:01:39.825378 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.825649 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.915470 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:39.915730 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:39.919706 2026] [security2:error] [pid 212454:tid 212616] [client 189.29.146.159:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz07yZ9IcLq1oV6peiYwAAACA"]
[Wed Sep 30 01:01:40.006549 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.006816 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.015097 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.151.17:54084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/sitemap.php"] [unique_id "aryz1LyZ9IcLq1oV6peiZQAAAEw"]
[Wed Sep 30 01:01:40.098337 2026] [security2:error] [pid 212454:tid 212696] [client 4.185.40.215:1404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/an.php"] [unique_id "aryz1LyZ9IcLq1oV6peibwAAAHA"]
[Wed Sep 30 01:01:40.098784 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.099093 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.111040 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:40.111299 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:40.189731 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.190088 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.277024 2026] [security2:error] [pid 212454:tid 212590] [client 20.214.151.17:48924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/xetmolxr.php"] [unique_id "aryz1LyZ9IcLq1oV6peifQAAAAY"]
[Wed Sep 30 01:01:40.280412 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.280696 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.331939 2026] [security2:error] [pid 212454:tid 212608] [client 172.234.224.112:61296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.224.234.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "norallahabuzekri.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aryz1LyZ9IcLq1oV6peigwAAABg"]
[Wed Sep 30 01:01:40.333579 2026] [security2:error] [pid 212454:tid 212701] [client 20.194.5.96:47652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/dairg.php"] [unique_id "aryz1LyZ9IcLq1oV6peihAAAAHU"]
[Wed Sep 30 01:01:40.369295 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.369548 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.399080 2026] [security2:error] [pid 212454:tid 212653] [client 4.185.40.215:1303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/aboutc.php"] [unique_id "aryz1LyZ9IcLq1oV6peiiAAAAEU"]
[Wed Sep 30 01:01:40.443009 2026] [security2:error] [pid 212454:tid 212604] [client 20.70.173.30:50758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/baru.php"] [unique_id "aryz1LyZ9IcLq1oV6peiiQAAABQ"]
[Wed Sep 30 01:01:40.462135 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.462397 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.538445 2026] [security2:error] [pid 212454:tid 212631] [client 20.214.151.17:54127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/mini.php"] [unique_id "aryz1LyZ9IcLq1oV6peijgAAAC8"]
[Wed Sep 30 01:01:40.552174 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.552436 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.557954 2026] [security2:error] [pid 212454:tid 212463] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz1LyZ9IcLq1oV6peikAAAHAg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15405&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:01:40.557975 2026] [security2:error] [pid 212454:tid 212463] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz1LyZ9IcLq1oV6peikAAAHAg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15405&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:01:40.601799 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:01:40.602072 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:01:40.642318 2026] [security2:error] [pid 212454:tid 212596] [client 20.214.109.68:11243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/karma_144a.php"] [unique_id "aryz1LyZ9IcLq1oV6peilQAAAAw"]
[Wed Sep 30 01:01:40.644920 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.645203 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.699188 2026] [security2:error] [pid 212454:tid 212621] [client 20.194.5.96:61766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/dronishness.php"] [unique_id "aryz1LyZ9IcLq1oV6peimwAAACU"]
[Wed Sep 30 01:01:40.735335 2026] [security2:error] [pid 212454:tid 212702] [client 4.185.40.215:12215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gdn.php"] [unique_id "aryz1LyZ9IcLq1oV6peinQAAAHY"]
[Wed Sep 30 01:01:40.735789 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.736070 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.798767 2026] [security2:error] [pid 212454:tid 212673] [client 20.214.151.17:35970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/zwso.php"] [unique_id "aryz1LyZ9IcLq1oV6peioAAAAFk"]
[Wed Sep 30 01:01:40.808841 2026] [security2:error] [pid 212454:tid 212598] [client 20.219.2.60:18856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tt.php"] [unique_id "aryz1LyZ9IcLq1oV6peiogAAAA4"]
[Wed Sep 30 01:01:40.825713 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.825998 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:40.918677 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:40.918932 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.015041 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.015481 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.030718 2026] [security2:error] [pid 212454:tid 212695] [client 152.59.169.65:49745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6peitgAAAG8"]
[Wed Sep 30 01:01:41.031194 2026] [security2:error] [pid 212454:tid 212663] [client 20.214.109.68:11134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/3586%20b64.php"] [unique_id "aryz1byZ9IcLq1oV6peitQAAAE8"]
[Wed Sep 30 01:01:41.034582 2026] [security2:error] [pid 212454:tid 212695] [client 152.59.169.65:49745] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6peitgAAAG8"]
[Wed Sep 30 01:01:41.061132 2026] [security2:error] [pid 212454:tid 212675] [client 20.214.151.17:36003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/tiny.php"] [unique_id "aryz1byZ9IcLq1oV6peiuQAAAFs"]
[Wed Sep 30 01:01:41.066054 2026] [security2:error] [pid 212454:tid 212679] [client 4.185.40.215:1379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/first.php"] [unique_id "aryz1byZ9IcLq1oV6peiugAAAF8"]
[Wed Sep 30 01:01:41.087657 2026] [security2:error] [pid 212454:tid 212599] [client 20.194.96.176:17812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryz1byZ9IcLq1oV6peiuwAAAA8"]
[Wed Sep 30 01:01:41.093857 2026] [security2:error] [pid 212454:tid 212632] [client 49.36.41.37:62443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6peivgAAADA"]
[Wed Sep 30 01:01:41.093999 2026] [security2:error] [pid 212454:tid 212632] [client 49.36.41.37:62443] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6peivgAAADA"]
[Wed Sep 30 01:01:41.101295 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:01:41.101764 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:01:41.105982 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.106437 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.149315 2026] [security2:error] [pid 212454:tid 212482] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz1byZ9IcLq1oV6peixAAAXRs"], referer: https://forum.torquayfans.com/viewonline.php?sid=2fec2128e682543b8082cedac2cd9318
[Wed Sep 30 01:01:41.149359 2026] [security2:error] [pid 212454:tid 212482] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz1byZ9IcLq1oV6peixAAAXRs"], referer: https://forum.torquayfans.com/viewonline.php?sid=2fec2128e682543b8082cedac2cd9318
[Wed Sep 30 01:01:41.196855 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.197292 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.202449 2026] [security2:error] [pid 212454:tid 212647] [client 20.194.96.176:1968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/backup-helper.php"] [unique_id "aryz1byZ9IcLq1oV6peixwAAAD8"]
[Wed Sep 30 01:01:41.288167 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.288618 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.315006 2026] [security2:error] [pid 212454:tid 212648] [client 20.194.5.96:42631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/Row_wsoo.php"] [unique_id "aryz1byZ9IcLq1oV6pei0AAAAEA"]
[Wed Sep 30 01:01:41.327853 2026] [security2:error] [pid 212454:tid 212614] [client 20.214.151.17:54082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/simple.php"] [unique_id "aryz1byZ9IcLq1oV6pei0QAAAB4"]
[Wed Sep 30 01:01:41.369572 2026] [security2:error] [pid 212454:tid 212596] [client 4.185.40.215:1365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/redixsx.php"] [unique_id "aryz1byZ9IcLq1oV6pei1AAAAAw"]
[Wed Sep 30 01:01:41.375927 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.376276 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.388705 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.109.68:11168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws.php"] [unique_id "aryz1byZ9IcLq1oV6pei1QAAADk"]
[Wed Sep 30 01:01:41.465234 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.465676 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.535818 2026] [security2:error] [pid 212454:tid 212620] [client 150.107.232.159:36352] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6pei3AAAACQ"]
[Wed Sep 30 01:01:41.535985 2026] [security2:error] [pid 212454:tid 212620] [client 150.107.232.159:36352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6pei3AAAACQ"]
[Wed Sep 30 01:01:41.558781 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.559208 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.589301 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:44456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/buy.php"] [unique_id "aryz1byZ9IcLq1oV6pei4QAAAHg"]
[Wed Sep 30 01:01:41.599306 2026] [security2:error] [pid 212454:tid 212645] [client 20.70.173.30:2918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/a.php"] [unique_id "aryz1byZ9IcLq1oV6pei4gAAAD0"]
[Wed Sep 30 01:01:41.619142 2026] [access_compat:error] [pid 212454:tid 212644] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L25ldA==
[Wed Sep 30 01:01:41.619416 2026] [access_compat:error] [pid 212454:tid 212644] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L25ldA==
[Wed Sep 30 01:01:41.619704 2026] [security2:error] [pid 212454:tid 212607] [client 182.69.182.151:15915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6pei5QAAABc"]
[Wed Sep 30 01:01:41.620206 2026] [security2:error] [pid 212454:tid 212607] [client 182.69.182.151:15915] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz1byZ9IcLq1oV6pei5QAAABc"]
[Wed Sep 30 01:01:41.647152 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.647418 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.674434 2026] [security2:error] [pid 212454:tid 212656] [client 198.13.241.216:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz1byZ9IcLq1oV6pei7gAAAEg"]
[Wed Sep 30 01:01:41.675100 2026] [security2:error] [pid 212454:tid 212662] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz1byZ9IcLq1oV6pei8AAAAE4"]
[Wed Sep 30 01:01:41.713302 2026] [security2:error] [pid 212454:tid 212606] [client 4.185.40.215:1343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/cpp2.php"] [unique_id "aryz1byZ9IcLq1oV6pei8wAAABY"]
[Wed Sep 30 01:01:41.736705 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.736978 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.754540 2026] [security2:error] [pid 212454:tid 212679] [client 4.196.65.241:19492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/584062352875874akp.php"] [unique_id "aryz1byZ9IcLq1oV6pei9gAAAF8"]
[Wed Sep 30 01:01:41.830422 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.830863 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.842626 2026] [security2:error] [pid 212454:tid 212617] [client 20.194.5.96:42659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/x2.php"] [unique_id "aryz1byZ9IcLq1oV6pejBgAAACE"]
[Wed Sep 30 01:01:41.866472 2026] [security2:error] [pid 212454:tid 212705] [client 20.214.151.17:36029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ioxi-o.php"] [unique_id "aryz1byZ9IcLq1oV6pejCgAAAHk"]
[Wed Sep 30 01:01:41.880960 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.109.68:11108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bmi.php"] [unique_id "aryz1byZ9IcLq1oV6pejCwAAAG4"]
[Wed Sep 30 01:01:41.887651 2026] [autoindex:error] [pid 212454:tid 212623] [client 85.204.70.112:59034] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-admin/includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:41.917849 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:41.918134 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:41.959640 2026] [security2:error] [pid 212454:tid 212592] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/posts/9999999"] [unique_id "aryz1byZ9IcLq1oV6pejFgAAAAg"]
[Wed Sep 30 01:01:42.012043 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.012323 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.020298 2026] [security2:error] [pid 212454:tid 212683] [client 4.185.40.215:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/admlo.php"] [unique_id "aryz1ryZ9IcLq1oV6pejGgAAAGM"]
[Wed Sep 30 01:01:42.039630 2026] [security2:error] [pid 212454:tid 212601] [client 20.219.2.60:18840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/maul.php"] [unique_id "aryz1ryZ9IcLq1oV6pejGwAAABE"]
[Wed Sep 30 01:01:42.105018 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.105448 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.107759 2026] [access_compat:error] [pid 212454:tid 212645] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:42.108016 2026] [access_compat:error] [pid 212454:tid 212645] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:42.110608 2026] [security2:error] [pid 212454:tid 212630] [client 103.159.192.142:59218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejIAAAAC4"]
[Wed Sep 30 01:01:42.110748 2026] [security2:error] [pid 212454:tid 212630] [client 103.159.192.142:59218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejIAAAAC4"]
[Wed Sep 30 01:01:42.128590 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.151.17:44453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ans.php"] [unique_id "aryz1ryZ9IcLq1oV6pejIQAAADE"]
[Wed Sep 30 01:01:42.191618 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.191962 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.240058 2026] [security2:error] [pid 212454:tid 212628] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz1ryZ9IcLq1oV6pejKAAAACw"]
[Wed Sep 30 01:01:42.298698 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.298983 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.337767 2026] [security2:error] [pid 212454:tid 212708] [client 4.185.40.215:12267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/admin-ajax.php"] [unique_id "aryz1ryZ9IcLq1oV6pejLgAAAHw"]
[Wed Sep 30 01:01:42.348039 2026] [security2:error] [pid 212454:tid 212505] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz1ryZ9IcLq1oV6pejLwAAUTI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277463&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:42.348069 2026] [security2:error] [pid 212454:tid 212505] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz1ryZ9IcLq1oV6pejLwAAUTI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277463&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:42.356626 2026] [security2:error] [pid 212454:tid 212675] [client 37.41.16.35:61636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejMAAAAFs"]
[Wed Sep 30 01:01:42.356800 2026] [security2:error] [pid 212454:tid 212675] [client 37.41.16.35:61636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejMAAAAFs"]
[Wed Sep 30 01:01:42.374768 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.375037 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:45892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.375705 2026] [security2:error] [pid 212454:tid 212589] [client 20.194.5.96:8916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/v4.php"] [unique_id "aryz1ryZ9IcLq1oV6pejNgAAAAU"]
[Wed Sep 30 01:01:42.383826 2026] [security2:error] [pid 212454:tid 212706] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/wp/v2/users"] [unique_id "aryz1ryZ9IcLq1oV6pejNwAAAHo"]
[Wed Sep 30 01:01:42.399576 2026] [security2:error] [pid 212454:tid 212629] [client 223.181.30.165:27077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejOAAAAC0"]
[Wed Sep 30 01:01:42.399702 2026] [security2:error] [pid 212454:tid 212629] [client 223.181.30.165:27077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz1ryZ9IcLq1oV6pejOAAAAC0"]
[Wed Sep 30 01:01:42.413197 2026] [security2:error] [pid 212454:tid 212690] [client 20.214.109.68:11029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bypltspd.php"] [unique_id "aryz1ryZ9IcLq1oV6pejOQAAAGo"]
[Wed Sep 30 01:01:42.414500 2026] [security2:error] [pid 212454:tid 212643] [client 20.214.151.17:48954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/gf.php"] [unique_id "aryz1ryZ9IcLq1oV6pejOwAAADs"]
[Wed Sep 30 01:01:42.465885 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.466196 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.475312 2026] [security2:error] [pid 212454:tid 212631] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wp/"] [unique_id "aryz1ryZ9IcLq1oV6pejQgAAAC8"]
[Wed Sep 30 01:01:42.531149 2026] [security2:error] [pid 212454:tid 212683] [client 103.168.67.253:58654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz1ryZ9IcLq1oV6pejRQAAAGM"]
[Wed Sep 30 01:01:42.553366 2026] [security2:error] [pid 212454:tid 212619] [client 216.73.216.46:45892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz1ryZ9IcLq1oV6pejSAAAACM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDM4L25vZGUwL2NwdTM%3D
[Wed Sep 30 01:01:42.555509 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.555760 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.587062 2026] [security2:error] [pid 212454:tid 212644] [client 20.194.96.176:2481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/1xmomo.php"] [unique_id "aryz1ryZ9IcLq1oV6pejSwAAADw"]
[Wed Sep 30 01:01:42.598786 2026] [security2:error] [pid 212454:tid 212508] [remote 64.23.166.180:29468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.fnk.fxb.mybluehost.me"] [uri "/.env"] [unique_id "aryz1ryZ9IcLq1oV6pejTQAAFzU"]
[Wed Sep 30 01:01:42.603671 2026] [security2:error] [pid 212454:tid 212687] [client 20.194.96.176:17808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryz1ryZ9IcLq1oV6pejTgAAAGc"]
[Wed Sep 30 01:01:42.615598 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:42.615868 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:42.635903 2026] [security2:error] [pid 212454:tid 212703] [client 4.185.40.215:1359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/amthd.php"] [unique_id "aryz1ryZ9IcLq1oV6pejUgAAAHc"]
[Wed Sep 30 01:01:42.647805 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.648130 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.685255 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.151.17:48917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/man.php"] [unique_id "aryz1ryZ9IcLq1oV6pejVAAAAEo"]
[Wed Sep 30 01:01:42.731293 2026] [security2:error] [pid 212454:tid 212599] [client 198.13.243.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz1ryZ9IcLq1oV6pejWQAAAA8"]
[Wed Sep 30 01:01:42.739207 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.739442 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.831198 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.831465 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.925347 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:42.925715 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:42.965765 2026] [security2:error] [pid 212454:tid 212691] [client 20.214.151.17:54128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/dev.php"] [unique_id "aryz1ryZ9IcLq1oV6pejbgAAAGs"]
[Wed Sep 30 01:01:43.001335 2026] [security2:error] [pid 212454:tid 212699] [client 103.241.204.139:63786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejcAAAAHM"]
[Wed Sep 30 01:01:43.001461 2026] [security2:error] [pid 212454:tid 212699] [client 103.241.204.139:63786] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejcAAAAHM"]
[Wed Sep 30 01:01:43.012551 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.012815 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.103086 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.103356 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.140906 2026] [security2:error] [pid 212454:tid 212518] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz17yZ9IcLq1oV6pejeAAAaD8"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=301301
[Wed Sep 30 01:01:43.140933 2026] [security2:error] [pid 212454:tid 212518] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz17yZ9IcLq1oV6pejeAAAaD8"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=301301
[Wed Sep 30 01:01:43.142747 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:43.143022 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:43.158189 2026] [security2:error] [pid 212454:tid 212657] [client 4.185.40.215:1333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/8xyz.php"] [unique_id "aryz17yZ9IcLq1oV6pejeQAAAEk"]
[Wed Sep 30 01:01:43.194173 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.194556 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.197853 2026] [security2:error] [pid 212454:tid 212621] [client 103.168.67.253:64494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz17yZ9IcLq1oV6pejewAAACU"]
[Wed Sep 30 01:01:43.233173 2026] [security2:error] [pid 212454:tid 212598] [client 20.214.151.17:36008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ms-edit.php"] [unique_id "aryz17yZ9IcLq1oV6pejfwAAAA4"]
[Wed Sep 30 01:01:43.259454 2026] [security2:error] [pid 212454:tid 212607] [client 20.214.109.68:11154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/shell.php"] [unique_id "aryz17yZ9IcLq1oV6pejggAAABc"]
[Wed Sep 30 01:01:43.287609 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.287929 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.377376 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.377722 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.466647 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.466931 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:34289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.478265 2026] [security2:error] [pid 212454:tid 212693] [client 49.43.163.212:55402] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejkQAAAG0"]
[Wed Sep 30 01:01:43.478397 2026] [security2:error] [pid 212454:tid 212693] [client 49.43.163.212:55402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejkQAAAG0"]
[Wed Sep 30 01:01:43.494568 2026] [security2:error] [pid 212454:tid 212695] [client 4.185.40.215:12227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/mini.php"] [unique_id "aryz17yZ9IcLq1oV6pejkgAAAG8"]
[Wed Sep 30 01:01:43.499768 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.151.17:47160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/txets.php"] [unique_id "aryz17yZ9IcLq1oV6pejkwAAAHE"]
[Wed Sep 30 01:01:43.563948 2026] [security2:error] [pid 212454:tid 212703] [client 85.204.70.112:50788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "aryz17yZ9IcLq1oV6pejmAAAAHc"]
[Wed Sep 30 01:01:43.592048 2026] [security2:error] [pid 212454:tid 212676] [client 20.194.96.176:52425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/almafkew.php"] [unique_id "aryz17yZ9IcLq1oV6pejmgAAAFw"]
[Wed Sep 30 01:01:43.609028 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.609295 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.617109 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:43.617541 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:43.648155 2026] [security2:error] [pid 212454:tid 212675] [client 216.73.216.46:34289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz17yZ9IcLq1oV6pejngAAAFs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MC9kcml2ZXIvY3B1MQ%3D%3D
[Wed Sep 30 01:01:43.667761 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz17yZ9IcLq1oV6pejnwAAC0k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65342&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:01:43.667784 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz17yZ9IcLq1oV6pejnwAAC0k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65342&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:01:43.690596 2026] [security2:error] [pid 212454:tid 212666] [client 20.214.109.68:11088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-links-opml.php"] [unique_id "aryz17yZ9IcLq1oV6pejowAAAFI"]
[Wed Sep 30 01:01:43.695463 2026] [security2:error] [pid 212454:tid 212700] [client 20.194.5.96:61782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/albin.php"] [unique_id "aryz17yZ9IcLq1oV6pejpQAAAHQ"]
[Wed Sep 30 01:01:43.705441 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:45187] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.705881 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:45187] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.780034 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:54109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/hao.php"] [unique_id "aryz17yZ9IcLq1oV6pejqgAAACY"]
[Wed Sep 30 01:01:43.782260 2026] [security2:error] [pid 212454:tid 212587] [client 172.232.180.134:57291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/vimazzpy.php"] [unique_id "aryz17yZ9IcLq1oV6pejqwAAAAM"], referer: www.google.com
[Wed Sep 30 01:01:43.783537 2026] [security2:error] [pid 212454:tid 212619] [client 122.173.27.10:19936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejrAAAACM"]
[Wed Sep 30 01:01:43.783599 2026] [security2:error] [pid 212454:tid 212619] [client 122.173.27.10:19936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejrAAAACM"]
[Wed Sep 30 01:01:43.792688 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.793009 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.833443 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.833699 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.923336 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:43.923594 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:43.930919 2026] [core:error] [pid 212454:tid 212684] [client 65.111.15.35:21689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:43.930933 2026] [core:error] [pid 212454:tid 212684] [client 65.111.15.35:21689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:43.939284 2026] [security2:error] [pid 212454:tid 212710] [client 223.181.60.167:2156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejtgAAAH4"]
[Wed Sep 30 01:01:43.939367 2026] [security2:error] [pid 212454:tid 212710] [client 223.181.60.167:2156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz17yZ9IcLq1oV6pejtgAAAH4"]
[Wed Sep 30 01:01:44.015473 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.015733 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.041171 2026] [security2:error] [pid 212454:tid 212670] [client 20.214.151.17:35990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/33.php"] [unique_id "aryz2LyZ9IcLq1oV6pejugAAAFY"]
[Wed Sep 30 01:01:44.046144 2026] [security2:error] [pid 212454:tid 212646] [client 4.185.40.215:1280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws68.php"] [unique_id "aryz2LyZ9IcLq1oV6pejuwAAAD4"]
[Wed Sep 30 01:01:44.064223 2026] [security2:error] [pid 212454:tid 212682] [client 172.232.180.134:56578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "aryz2LyZ9IcLq1oV6pejvAAAAGI"]
[Wed Sep 30 01:01:44.094644 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:01:44.094951 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:01:44.117277 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.117528 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:35235] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.153027 2026] [security2:error] [pid 212454:tid 212613] [client 4.196.65.241:19499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/909.php"] [unique_id "aryz2LyZ9IcLq1oV6pejwgAAAB0"]
[Wed Sep 30 01:01:44.154586 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.109.68:11083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryz2LyZ9IcLq1oV6pejwwAAADE"]
[Wed Sep 30 01:01:44.175713 2026] [autoindex:error] [pid 212454:tid 212586] [client 85.204.70.112:0] AH01276: Cannot serve directory /home4/nysasor1/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:44.195932 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.196190 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.221182 2026] [security2:error] [pid 212454:tid 212678] [client 20.194.96.176:30069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/f35.update.php"] [unique_id "aryz2LyZ9IcLq1oV6pejyQAAAF4"]
[Wed Sep 30 01:01:44.241220 2026] [security2:error] [pid 212454:tid 212536] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz2LyZ9IcLq1oV6pejywAATFE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=241890&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:44.241241 2026] [security2:error] [pid 212454:tid 212536] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz2LyZ9IcLq1oV6pejywAATFE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=241890&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:01:44.287858 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.288135 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.300434 2026] [security2:error] [pid 212454:tid 212585] [client 20.214.151.17:47164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/adminner.php"] [unique_id "aryz2LyZ9IcLq1oV6pej0QAAAAE"]
[Wed Sep 30 01:01:44.359193 2026] [security2:error] [pid 212454:tid 212709] [client 4.185.40.215:12164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/xxx.php"] [unique_id "aryz2LyZ9IcLq1oV6pej1QAAAH0"]
[Wed Sep 30 01:01:44.379164 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.379419 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.472033 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.472281 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.515354 2026] [security2:error] [pid 212454:tid 212691] [client 198.13.211.242:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryz2LyZ9IcLq1oV6pej3QAAAGs"]
[Wed Sep 30 01:01:44.540532 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.109.68:11157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws82.php"] [unique_id "aryz2LyZ9IcLq1oV6pej3gAAAAM"]
[Wed Sep 30 01:01:44.561685 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.562057 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.567041 2026] [security2:error] [pid 212454:tid 212685] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz2LyZ9IcLq1oV6pej4gAAAGU"]
[Wed Sep 30 01:01:44.578921 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:54117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/thoms.php"] [unique_id "aryz2LyZ9IcLq1oV6pej5AAAADk"]
[Wed Sep 30 01:01:44.591560 2026] [security2:error] [pid 212454:tid 212634] [client 20.194.5.96:42674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/atkno.php"] [unique_id "aryz2LyZ9IcLq1oV6pej5QAAADI"]
[Wed Sep 30 01:01:44.602210 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:44.602465 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:01:44.608793 2026] [security2:error] [pid 212454:tid 212543] [remote 57.141.14.97:28272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/comments/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-includes/wlwmanifest.xml"] [unique_id "aryz2LyZ9IcLq1oV6pej5wAAalg"]
[Wed Sep 30 01:01:44.653193 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.653462 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.694777 2026] [security2:error] [pid 212454:tid 212657] [client 45.138.12.48:41588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.100schools.org"] [uri "/wp-links-opml.php"] [unique_id "aryz2LyZ9IcLq1oV6pej7AAAAEk"]
[Wed Sep 30 01:01:44.741903 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.742173 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.777594 2026] [security2:error] [pid 212454:tid 212684] [client 4.185.40.215:1387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/njxjtooj.php"] [unique_id "aryz2LyZ9IcLq1oV6pej8wAAAGQ"]
[Wed Sep 30 01:01:44.784830 2026] [core:error] [pid 212454:tid 212681] [client 104.207.42.238:46655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:44.784854 2026] [core:error] [pid 212454:tid 212681] [client 104.207.42.238:46655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:01:44.835195 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.835460 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.845463 2026] [security2:error] [pid 212454:tid 212651] [client 20.214.151.17:48956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/a.php"] [unique_id "aryz2LyZ9IcLq1oV6pej9QAAAEM"]
[Wed Sep 30 01:01:44.926017 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:44.926304 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:44.985791 2026] [security2:error] [pid 212454:tid 212633] [client 20.194.96.176:53401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/database2.php"] [unique_id "aryz2LyZ9IcLq1oV6pej_QAAADE"]
[Wed Sep 30 01:01:45.016931 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.017220 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.026767 2026] [security2:error] [pid 212454:tid 212649] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz2byZ9IcLq1oV6pekAQAAAEE"]
[Wed Sep 30 01:01:45.031201 2026] [security2:error] [pid 212454:tid 212680] [client 20.70.173.30:60010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/cdc.php"] [unique_id "aryz2byZ9IcLq1oV6pekAwAAAGA"]
[Wed Sep 30 01:01:45.043126 2026] [security2:error] [pid 212454:tid 212620] [client 170.79.77.84:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz2byZ9IcLq1oV6pekBAAAACQ"]
[Wed Sep 30 01:01:45.089436 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:45.089700 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:45.107157 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.107614 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.114826 2026] [security2:error] [pid 212454:tid 212628] [client 20.214.151.17:52660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/b8.php"] [unique_id "aryz2byZ9IcLq1oV6pekCgAAACw"]
[Wed Sep 30 01:01:45.121614 2026] [security2:error] [pid 212454:tid 212699] [client 103.172.210.103:52122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz2byZ9IcLq1oV6pekCQAAAHM"]
[Wed Sep 30 01:01:45.121748 2026] [security2:error] [pid 212454:tid 212699] [client 103.172.210.103:52122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz2byZ9IcLq1oV6pekCQAAAHM"]
[Wed Sep 30 01:01:45.136829 2026] [security2:error] [pid 212454:tid 212592] [client 4.185.40.215:12225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws85.php"] [unique_id "aryz2byZ9IcLq1oV6pekDAAAAAg"]
[Wed Sep 30 01:01:45.183575 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.109.68:11082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/new.php"] [unique_id "aryz2byZ9IcLq1oV6pekDwAAAHw"]
[Wed Sep 30 01:01:45.198108 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.198378 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.288780 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.289055 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.309227 2026] [security2:error] [pid 212454:tid 212614] [client 223.235.102.107:15889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz2byZ9IcLq1oV6pekFgAAAB4"]
[Wed Sep 30 01:01:45.309403 2026] [security2:error] [pid 212454:tid 212614] [client 223.235.102.107:15889] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz2byZ9IcLq1oV6pekFgAAAB4"]
[Wed Sep 30 01:01:45.373615 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.151.17:44473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/sid.php"] [unique_id "aryz2byZ9IcLq1oV6pekGAAAAAo"]
[Wed Sep 30 01:01:45.380862 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.381166 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.412332 2026] [security2:error] [pid 212454:tid 212667] [client 5.58.9.193:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "aryz2byZ9IcLq1oV6pekHwAAAFM"]
[Wed Sep 30 01:01:45.444612 2026] [security2:error] [pid 212454:tid 212634] [client 4.185.40.215:1330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws61.php"] [unique_id "aryz2byZ9IcLq1oV6pekIwAAADI"]
[Wed Sep 30 01:01:45.475073 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.475352 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.489499 2026] [security2:error] [pid 212454:tid 212624] [client 4.240.25.22:30735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/yawa.php"] [unique_id "aryz2byZ9IcLq1oV6pekJwAAACg"]
[Wed Sep 30 01:01:45.546306 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.109.68:11102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/press.php"] [unique_id "aryz2byZ9IcLq1oV6pekKgAAAH4"]
[Wed Sep 30 01:01:45.564637 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.564930 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.610781 2026] [access_compat:error] [pid 212454:tid 212604] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:45.611051 2026] [access_compat:error] [pid 212454:tid 212604] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:45.636629 2026] [security2:error] [pid 212454:tid 212629] [client 20.214.151.17:54090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/bro.php"] [unique_id "aryz2byZ9IcLq1oV6pekLQAAAC0"]
[Wed Sep 30 01:01:45.655152 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.655405 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.744546 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.744832 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.755297 2026] [security2:error] [pid 212454:tid 212646] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz2byZ9IcLq1oV6pekNgAAAD4"]
[Wed Sep 30 01:01:45.781925 2026] [security2:error] [pid 212454:tid 212608] [client 122.14.224.29:44770] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "camera-roll.com"] [uri "/wp-content/uploads/2010/12/truegrit3.jpg"] [unique_id "aryz2byZ9IcLq1oV6pekNwAAABg"]
[Wed Sep 30 01:01:45.838419 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.838702 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.861497 2026] [security2:error] [pid 212454:tid 212636] [client 20.194.96.176:55209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/adminfuns.php"] [unique_id "aryz2byZ9IcLq1oV6pekOQAAADQ"]
[Wed Sep 30 01:01:45.869326 2026] [security2:error] [pid 212454:tid 212616] [client 4.185.40.215:1396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/iyy.php"] [unique_id "aryz2byZ9IcLq1oV6pekOgAAACA"]
[Wed Sep 30 01:01:45.899846 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.151.17:44459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/xwpg.php"] [unique_id "aryz2byZ9IcLq1oV6pekPgAAADE"]
[Wed Sep 30 01:01:45.913655 2026] [security2:error] [pid 212454:tid 212586] [client 4.240.25.22:11936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/a.php"] [unique_id "aryz2byZ9IcLq1oV6pekPwAAAAI"]
[Wed Sep 30 01:01:45.929027 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:45.929309 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:45.943424 2026] [security2:error] [pid 212454:tid 212662] [client 190.5.34.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "aryz2byZ9IcLq1oV6pekQQAAAE4"]
[Wed Sep 30 01:01:45.980865 2026] [security2:error] [pid 212454:tid 212704] [client 20.194.5.96:8957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/gptsh.php"] [unique_id "aryz2byZ9IcLq1oV6pekQgAAAHg"]
[Wed Sep 30 01:01:45.999025 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz2byZ9IcLq1oV6pekQwAAAAA"]
[Wed Sep 30 01:01:46.017249 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.017505 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.079462 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.109.68:11155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryz2ryZ9IcLq1oV6pekRgAAABU"]
[Wed Sep 30 01:01:46.103112 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:46.103399 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:46.108291 2026] [security2:error] [pid 212454:tid 212585] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz2ryZ9IcLq1oV6pekSQAAAAE"]
[Wed Sep 30 01:01:46.109880 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.110150 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.160370 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.151.17:48939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/radio.php"] [unique_id "aryz2ryZ9IcLq1oV6pekSgAAAAg"]
[Wed Sep 30 01:01:46.189227 2026] [security2:error] [pid 212454:tid 212709] [client 4.185.40.215:1301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/900.php"] [unique_id "aryz2ryZ9IcLq1oV6pekSwAAAH0"]
[Wed Sep 30 01:01:46.202212 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.202480 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.212277 2026] [security2:error] [pid 212454:tid 212639] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz2ryZ9IcLq1oV6pekTQAAADc"]
[Wed Sep 30 01:01:46.284005 2026] [security2:error] [pid 212454:tid 212694] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz2ryZ9IcLq1oV6pekUQAAAG4"]
[Wed Sep 30 01:01:46.286386 2026] [security2:error] [pid 212454:tid 212596] [client 116.193.128.26:58313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekUgAAAAw"]
[Wed Sep 30 01:01:46.286511 2026] [security2:error] [pid 212454:tid 212596] [client 116.193.128.26:58313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekUgAAAAw"]
[Wed Sep 30 01:01:46.293743 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.294025 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.328062 2026] [security2:error] [pid 212454:tid 212595] [client 172.232.180.134:64822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-plain.php"] [unique_id "aryz2ryZ9IcLq1oV6pekVgAAAAs"], referer: www.google.com
[Wed Sep 30 01:01:46.354485 2026] [security2:error] [pid 212454:tid 212552] [remote 57.141.14.95:61978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/SouthMing/SouthernLiang/EarlierHan/SouthernLiang/NorthernSong/SouthMing/Tang/SouthernSong/content/manual.php"] [unique_id "aryz2ryZ9IcLq1oV6pekWQAAZmE"]
[Wed Sep 30 01:01:46.355516 2026] [security2:error] [pid 212454:tid 212594] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz2ryZ9IcLq1oV6pekWAAAAAo"]
[Wed Sep 30 01:01:46.362444 2026] [security2:error] [pid 212454:tid 212587] [client 155.190.6.18:51162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekVwAAAAM"]
[Wed Sep 30 01:01:46.383330 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.383598 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.419421 2026] [security2:error] [pid 212454:tid 212591] [client 20.214.151.17:54113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ccc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekXAAAAAc"]
[Wed Sep 30 01:01:46.421665 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:64504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz2ryZ9IcLq1oV6pekXQAAAEQ"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:46.446761 2026] [security2:error] [pid 212454:tid 212624] [client 4.196.65.241:19456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/BtOCXH4W1V5.php"] [unique_id "aryz2ryZ9IcLq1oV6pekXwAAACg"]
[Wed Sep 30 01:01:46.466725 2026] [security2:error] [pid 212454:tid 212647] [client 20.194.96.176:1935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/aa.php"] [unique_id "aryz2ryZ9IcLq1oV6pekYQAAAD8"]
[Wed Sep 30 01:01:46.474188 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.474286 2026] [security2:error] [pid 212454:tid 212547] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz2ryZ9IcLq1oV6pekZAAAOVw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15402&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:01:46.474306 2026] [security2:error] [pid 212454:tid 212547] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz2ryZ9IcLq1oV6pekZAAAOVw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15402&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:01:46.474429 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.479776 2026] [security2:error] [pid 212454:tid 212630] [client 20.214.109.68:11183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryz2ryZ9IcLq1oV6pekZQAAAC4"]
[Wed Sep 30 01:01:46.530385 2026] [security2:error] [pid 212454:tid 212620] [client 202.179.95.79:61199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekZwAAACQ"]
[Wed Sep 30 01:01:46.530507 2026] [security2:error] [pid 212454:tid 212620] [client 202.179.95.79:61199] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekZwAAACQ"]
[Wed Sep 30 01:01:46.532149 2026] [security2:error] [pid 212454:tid 212685] [client 4.185.40.215:1391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/blsvgeyaza.php"] [unique_id "aryz2ryZ9IcLq1oV6pekaAAAAGU"]
[Wed Sep 30 01:01:46.570505 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.570951 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.586115 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:46.586367 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:46.619760 2026] [security2:error] [pid 212454:tid 212587] [client 155.190.6.18:51162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekVwAAAAM"]
[Wed Sep 30 01:01:46.656594 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.656887 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.683136 2026] [security2:error] [pid 212454:tid 212608] [client 20.214.151.17:35975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wmore1.php"] [unique_id "aryz2ryZ9IcLq1oV6pekbwAAABg"]
[Wed Sep 30 01:01:46.712118 2026] [security2:error] [pid 212454:tid 212707] [client 20.70.173.30:59543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/f35.php"] [unique_id "aryz2ryZ9IcLq1oV6pekcAAAAHs"]
[Wed Sep 30 01:01:46.736729 2026] [security2:error] [pid 212454:tid 212603] [client 103.159.192.142:59706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekdgAAABM"]
[Wed Sep 30 01:01:46.736864 2026] [security2:error] [pid 212454:tid 212603] [client 103.159.192.142:59706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekdgAAABM"]
[Wed Sep 30 01:01:46.746552 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.746799 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.838012 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.838274 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.860748 2026] [security2:error] [pid 212454:tid 212665] [client 203.122.45.246:57378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekfAAAAFE"]
[Wed Sep 30 01:01:46.860857 2026] [security2:error] [pid 212454:tid 212665] [client 203.122.45.246:57378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz2ryZ9IcLq1oV6pekfAAAAFE"]
[Wed Sep 30 01:01:46.933485 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:46.933932 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:46.934907 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.109.68:11170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws57.php"] [unique_id "aryz2ryZ9IcLq1oV6pekhQAAAA8"]
[Wed Sep 30 01:01:46.949819 2026] [security2:error] [pid 212454:tid 212593] [client 20.214.151.17:52632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/function.php"] [unique_id "aryz2ryZ9IcLq1oV6pekiAAAAAk"]
[Wed Sep 30 01:01:46.974346 2026] [security2:error] [pid 212454:tid 212627] [client 105.112.178.79:38351] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tlsaction.com"] [uri "/.env"] [unique_id "aryz2ryZ9IcLq1oV6pekiQAAACs"]
[Wed Sep 30 01:01:46.998256 2026] [security2:error] [pid 212454:tid 212592] [client 20.219.2.60:18878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/404.php"] [unique_id "aryz2ryZ9IcLq1oV6pekiwAAAAg"]
[Wed Sep 30 01:01:47.022349 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.022612 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.039356 2026] [security2:error] [pid 212454:tid 212611] [client 116.72.182.19:60965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pekjQAAABs"]
[Wed Sep 30 01:01:47.039486 2026] [security2:error] [pid 212454:tid 212611] [client 116.72.182.19:60965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pekjQAAABs"]
[Wed Sep 30 01:01:47.073428 2026] [security2:error] [pid 212454:tid 212584] [client 114.119.157.239:41471] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "on-mediagroup.com"] [uri "/sitemap_1_9.xml"] [unique_id "aryz27yZ9IcLq1oV6pekjwAAAAA"]
[Wed Sep 30 01:01:47.094852 2026] [security2:error] [pid 212454:tid 212623] [client 4.185.40.215:1284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gqhyti.php"] [unique_id "aryz27yZ9IcLq1oV6pekkQAAACc"]
[Wed Sep 30 01:01:47.111797 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.112089 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.112943 2026] [security2:error] [pid 212454:tid 212696] [client 20.194.5.96:57976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/rithin.php"] [unique_id "aryz27yZ9IcLq1oV6peklAAAAHA"]
[Wed Sep 30 01:01:47.113464 2026] [access_compat:error] [pid 212454:tid 212638] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:47.113709 2026] [access_compat:error] [pid 212454:tid 212638] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:01:47.135281 2026] [security2:error] [pid 212454:tid 212697] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz27yZ9IcLq1oV6peklQAAAHE"]
[Wed Sep 30 01:01:47.203922 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.204268 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.227097 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.151.17:54106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ab.php"] [unique_id "aryz27yZ9IcLq1oV6pekmwAAAFg"]
[Wed Sep 30 01:01:47.227594 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:17528] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pekmgAAAD4"]
[Wed Sep 30 01:01:47.227749 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:17528] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pekmgAAAD4"]
[Wed Sep 30 01:01:47.258662 2026] [security2:error] [pid 212454:tid 212630] [client 20.219.2.60:19424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/5b9ac.php"] [unique_id "aryz27yZ9IcLq1oV6pekoAAAAC4"]
[Wed Sep 30 01:01:47.295517 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.295784 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.395276 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.395540 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.396112 2026] [security2:error] [pid 212454:tid 212635] [client 20.194.96.176:35965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "aryz27yZ9IcLq1oV6pekpQAAADM"]
[Wed Sep 30 01:01:47.442268 2026] [security2:error] [pid 212454:tid 212621] [client 20.194.30.107:17492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wsd.php"] [unique_id "aryz27yZ9IcLq1oV6pekpwAAACU"]
[Wed Sep 30 01:01:47.486334 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.486435 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.151.17:44463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/css.php"] [unique_id "aryz27yZ9IcLq1oV6pekqQAAAAM"]
[Wed Sep 30 01:01:47.486719 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.504092 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.109.68:11114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/.qiodetme.php"] [unique_id "aryz27yZ9IcLq1oV6pekrAAAADI"]
[Wed Sep 30 01:01:47.508149 2026] [security2:error] [pid 212454:tid 212640] [client 4.185.40.215:12260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/autoxxi.php"] [unique_id "aryz27yZ9IcLq1oV6pekrQAAADg"]
[Wed Sep 30 01:01:47.530667 2026] [security2:error] [pid 212454:tid 212608] [client 4.196.65.241:53070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cong.php"] [unique_id "aryz27yZ9IcLq1oV6pekrgAAABg"]
[Wed Sep 30 01:01:47.575223 2026] [security2:error] [pid 212454:tid 212656] [client 20.194.96.176:5324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/pJPoKA.php"] [unique_id "aryz27yZ9IcLq1oV6pekswAAAEg"]
[Wed Sep 30 01:01:47.576925 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.577179 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.581551 2026] [security2:error] [pid 212454:tid 212699] [client 152.59.165.7:64426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pektQAAAHM"]
[Wed Sep 30 01:01:47.581681 2026] [security2:error] [pid 212454:tid 212699] [client 152.59.165.7:64426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz27yZ9IcLq1oV6pektQAAAHM"]
[Wed Sep 30 01:01:47.607281 2026] [access_compat:error] [pid 212454:tid 212706] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:47.607719 2026] [access_compat:error] [pid 212454:tid 212706] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:01:47.669349 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.669593 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.745207 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:52631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryz27yZ9IcLq1oV6pekzAAAACY"]
[Wed Sep 30 01:01:47.762127 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.762385 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.875675 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.875943 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.901956 2026] [security2:error] [pid 212454:tid 212641] [client 4.185.40.215:1355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/1144452145_error_log.php"] [unique_id "aryz27yZ9IcLq1oV6pek1QAAADk"]
[Wed Sep 30 01:01:47.943251 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:47.943518 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:47.981113 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.109.68:11103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/sodas.php"] [unique_id "aryz27yZ9IcLq1oV6pek2QAAAGM"]
[Wed Sep 30 01:01:48.004712 2026] [security2:error] [pid 212454:tid 212597] [client 20.214.151.17:52651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aryz3LyZ9IcLq1oV6pek2gAAAA0"]
[Wed Sep 30 01:01:48.037777 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.038049 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.078748 2026] [access_compat:error] [pid 212454:tid 212624] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:48.079035 2026] [access_compat:error] [pid 212454:tid 212624] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:48.126121 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.126366 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.209922 2026] [security2:error] [pid 212454:tid 212608] [client 4.185.40.215:1360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws48.php"] [unique_id "aryz3LyZ9IcLq1oV6pek3wAAABg"]
[Wed Sep 30 01:01:48.216851 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.217118 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.232894 2026] [security2:error] [pid 212454:tid 212614] [client 43.227.131.37:54931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pek4gAAAB4"]
[Wed Sep 30 01:01:48.233053 2026] [security2:error] [pid 212454:tid 212614] [client 43.227.131.37:54931] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pek4gAAAB4"]
[Wed Sep 30 01:01:48.262804 2026] [security2:error] [pid 212454:tid 212670] [client 20.214.151.17:35996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-links-opml.php"] [unique_id "aryz3LyZ9IcLq1oV6pek5gAAAFY"]
[Wed Sep 30 01:01:48.304010 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.109.68:11194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/yw5bi63u.php"] [unique_id "aryz3LyZ9IcLq1oV6pek7gAAAFA"]
[Wed Sep 30 01:01:48.305784 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.306056 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.397236 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.397609 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.404938 2026] [security2:error] [pid 212454:tid 212631] [client 116.197.133.25:57944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pek-gAAAC8"]
[Wed Sep 30 01:01:48.405045 2026] [security2:error] [pid 212454:tid 212631] [client 116.197.133.25:57944] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pek-gAAAC8"]
[Wed Sep 30 01:01:48.419983 2026] [security2:error] [pid 212454:tid 212701] [client 74.7.242.1:49482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryz3LyZ9IcLq1oV6pek-wAAAHU"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:01:48.428329 2026] [security2:error] [pid 212454:tid 212457] [remote 220.181.108.144:62631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldensnifferproducts.com"] [uri "/gspzcrt/index.php"] [unique_id "aryz3LyZ9IcLq1oV6pek_AAARwI"]
[Wed Sep 30 01:01:48.491078 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.491353 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.511755 2026] [security2:error] [pid 212454:tid 212623] [client 4.185.40.215:1361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-asyn-upload.php"] [unique_id "aryz3LyZ9IcLq1oV6pelBAAAACc"]
[Wed Sep 30 01:01:48.526595 2026] [security2:error] [pid 212454:tid 212600] [client 20.214.151.17:48952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/hp.php"] [unique_id "aryz3LyZ9IcLq1oV6pelBwAAABA"]
[Wed Sep 30 01:01:48.580873 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.581138 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.590252 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:48.590549 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:48.630263 2026] [security2:error] [pid 212454:tid 212673] [client 20.194.5.96:42638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/il.php"] [unique_id "aryz3LyZ9IcLq1oV6pelDgAAAFk"]
[Wed Sep 30 01:01:48.676980 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.677249 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.742588 2026] [security2:error] [pid 212454:tid 212711] [client 45.138.12.32:35492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.anl.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz3LyZ9IcLq1oV6pelGAAAAH8"]
[Wed Sep 30 01:01:48.764945 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.765215 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.772080 2026] [security2:error] [pid 212454:tid 212633] [client 49.205.105.16:14128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pelGgAAADE"]
[Wed Sep 30 01:01:48.772234 2026] [security2:error] [pid 212454:tid 212633] [client 49.205.105.16:14128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz3LyZ9IcLq1oV6pelGgAAADE"]
[Wed Sep 30 01:01:48.789716 2026] [security2:error] [pid 212454:tid 212671] [client 20.214.151.17:44418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/mo.php"] [unique_id "aryz3LyZ9IcLq1oV6pelHgAAAFc"]
[Wed Sep 30 01:01:48.856941 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.857245 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.904256 2026] [security2:error] [pid 212454:tid 212640] [client 4.185.40.215:12180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/schallfuns.php"] [unique_id "aryz3LyZ9IcLq1oV6pelJwAAADg"]
[Wed Sep 30 01:01:48.916298 2026] [security2:error] [pid 212454:tid 212608] [client 20.194.96.176:52421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/24.php"] [unique_id "aryz3LyZ9IcLq1oV6pelKAAAABg"]
[Wed Sep 30 01:01:48.946020 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:48.946293 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:48.954472 2026] [security2:error] [pid 212454:tid 212586] [client 213.136.69.135:53126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-theme-json.php"] [unique_id "aryz3LyZ9IcLq1oV6pelKgAAAAI"], referer: binance.com
[Wed Sep 30 01:01:48.989255 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.109.68:11144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws81.php"] [unique_id "aryz3LyZ9IcLq1oV6pelLAAAAFE"]
[Wed Sep 30 01:01:49.024770 2026] [security2:error] [pid 212454:tid 212679] [client 20.70.173.30:59972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/about.php"] [unique_id "aryz3byZ9IcLq1oV6pelLwAAAF8"]
[Wed Sep 30 01:01:49.026474 2026] [security2:error] [pid 212454:tid 212611] [client 45.156.62.96:57600] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryz3byZ9IcLq1oV6pelLgAAABs"]
[Wed Sep 30 01:01:49.026615 2026] [security2:error] [pid 212454:tid 212611] [client 45.156.62.96:57600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryz3byZ9IcLq1oV6pelLgAAABs"]
[Wed Sep 30 01:01:49.035070 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.035319 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.048961 2026] [security2:error] [pid 212454:tid 212590] [client 20.214.151.17:54103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/ivmirgut.php"] [unique_id "aryz3byZ9IcLq1oV6pelMwAAAAY"]
[Wed Sep 30 01:01:49.127873 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.128181 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.138071 2026] [access_compat:error] [pid 212454:tid 212592] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:49.138312 2026] [access_compat:error] [pid 212454:tid 212592] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:49.218860 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.219122 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.285493 2026] [security2:error] [pid 212454:tid 212672] [client 4.185.40.215:1348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/CDX1.php"] [unique_id "aryz3byZ9IcLq1oV6pelSgAAAFg"]
[Wed Sep 30 01:01:49.291660 2026] [security2:error] [pid 212454:tid 212641] [client 20.219.2.60:18855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/hehe.php"] [unique_id "aryz3byZ9IcLq1oV6pelSwAAADk"]
[Wed Sep 30 01:01:49.308598 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.308870 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.331390 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.151.17:52663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/baba.php"] [unique_id "aryz3byZ9IcLq1oV6pelUgAAAEw"]
[Wed Sep 30 01:01:49.400543 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.400819 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.413859 2026] [security2:error] [pid 212454:tid 212469] [remote 220.181.108.165:12931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldensnifferproducts.com"] [uri "/gspzcrt/index.php"] [unique_id "aryz3byZ9IcLq1oV6pelWwAAaQ4"]
[Wed Sep 30 01:01:49.495136 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.495575 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.549715 2026] [security2:error] [pid 212454:tid 212665] [client 4.196.65.241:19510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/jlex.php"] [unique_id "aryz3byZ9IcLq1oV6pelagAAAFE"]
[Wed Sep 30 01:01:49.582098 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.582377 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.592178 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.151.17:35985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/Components.php"] [unique_id "aryz3byZ9IcLq1oV6pelcgAAAHY"]
[Wed Sep 30 01:01:49.595886 2026] [security2:error] [pid 212454:tid 212626] [client 4.185.40.215:12224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/clasa99.php"] [unique_id "aryz3byZ9IcLq1oV6peldAAAACo"]
[Wed Sep 30 01:01:49.627328 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:49.627755 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:49.675801 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.676264 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.696330 2026] [security2:error] [pid 212454:tid 212674] [client 20.214.109.68:11188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/mh.php"] [unique_id "aryz3byZ9IcLq1oV6pelhQAAAFo"]
[Wed Sep 30 01:01:49.727574 2026] [security2:error] [pid 212454:tid 212622] [client 20.194.5.96:8954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/1klopedf.php"] [unique_id "aryz3byZ9IcLq1oV6pelhgAAACY"]
[Wed Sep 30 01:01:49.763437 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.763688 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.853288 2026] [security2:error] [pid 212454:tid 212589] [client 20.214.151.17:52629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/aboutt.php"] [unique_id "aryz3byZ9IcLq1oV6peljgAAAAU"]
[Wed Sep 30 01:01:49.854513 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.854788 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:38958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:49.961264 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3byZ9IcLq1oV6pelkAAAAAM"]
[Wed Sep 30 01:01:49.962827 2026] [security2:error] [pid 212454:tid 212648] [client 4.185.40.215:1327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/myfilexxx.php"] [unique_id "aryz3byZ9IcLq1oV6pelkgAAAEA"]
[Wed Sep 30 01:01:49.996188 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:59337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:49.996438 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:59337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.022465 2026] [security2:error] [pid 212454:tid 212659] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pelmgAAAEs"]
[Wed Sep 30 01:01:50.026036 2026] [security2:error] [pid 212454:tid 212591] [client 216.73.216.46:38958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz3ryZ9IcLq1oV6pelnwAAAAc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5MTIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:01:50.087620 2026] [security2:error] [pid 212454:tid 212631] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pelogAAAC8"]
[Wed Sep 30 01:01:50.088039 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:50.088391 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:50.088742 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.089014 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.127775 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:59337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.128075 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:59337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.142044 2026] [security2:error] [pid 212454:tid 212666] [client 20.214.151.17:35989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/maint/14.php"] [unique_id "aryz3ryZ9IcLq1oV6pelqAAAAFI"]
[Wed Sep 30 01:01:50.157241 2026] [security2:error] [pid 212454:tid 212654] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pelqQAAAEY"]
[Wed Sep 30 01:01:50.238327 2026] [security2:error] [pid 212454:tid 212643] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pelrQAAADs"]
[Wed Sep 30 01:01:50.266176 2026] [security2:error] [pid 212454:tid 212649] [client 4.185.40.215:1389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/karma_144a.php"] [unique_id "aryz3ryZ9IcLq1oV6pelsQAAAEE"]
[Wed Sep 30 01:01:50.271133 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.271408 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.310414 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.310681 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.315625 2026] [security2:error] [pid 212454:tid 212639] [client 20.194.30.107:17473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/dronishness.php"] [unique_id "aryz3ryZ9IcLq1oV6peltAAAADc"]
[Wed Sep 30 01:01:50.319636 2026] [security2:error] [pid 212454:tid 212625] [client 216.73.216.46:59337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz3ryZ9IcLq1oV6peltgAAACk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvbWVtb3J5ODcvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:01:50.403158 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.403425 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.421496 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:52650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/xx.php"] [unique_id "aryz3ryZ9IcLq1oV6pelvAAAACY"]
[Wed Sep 30 01:01:50.482612 2026] [security2:error] [pid 212454:tid 212488] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryz3ryZ9IcLq1oV6pelwAAAfCE"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D56831
[Wed Sep 30 01:01:50.493392 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.493634 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.551274 2026] [security2:error] [pid 212454:tid 212711] [client 20.194.96.176:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/42b5827789index.php"] [unique_id "aryz3ryZ9IcLq1oV6pelyQAAAH8"]
[Wed Sep 30 01:01:50.553231 2026] [security2:error] [pid 212454:tid 212660] [client 20.194.96.176:1575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/4PJcpMFsD8B.php"] [unique_id "aryz3ryZ9IcLq1oV6pelywAAAEw"]
[Wed Sep 30 01:01:50.565968 2026] [security2:error] [pid 212454:tid 212630] [client 4.185.40.215:1305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/3586%20b64.php"] [unique_id "aryz3ryZ9IcLq1oV6pelzQAAAC4"]
[Wed Sep 30 01:01:50.574964 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pelzAAAABc"]
[Wed Sep 30 01:01:50.581883 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.582161 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.624576 2026] [access_compat:error] [pid 212454:tid 212644] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:50.624877 2026] [access_compat:error] [pid 212454:tid 212644] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:50.673920 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.674207 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.677377 2026] [security2:error] [pid 212454:tid 212690] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pel1wAAAGo"]
[Wed Sep 30 01:01:50.680338 2026] [security2:error] [pid 212454:tid 212707] [client 20.214.151.17:34997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/gelay.php"] [unique_id "aryz3ryZ9IcLq1oV6pel2wAAAHs"]
[Wed Sep 30 01:01:50.748425 2026] [security2:error] [pid 212454:tid 212618] [client 20.219.2.60:18872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "aryz3ryZ9IcLq1oV6pel4AAAACI"]
[Wed Sep 30 01:01:50.764628 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.764899 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.771081 2026] [security2:error] [pid 212454:tid 212604] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pel3wAAABQ"]
[Wed Sep 30 01:01:50.855460 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.855726 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:50.882579 2026] [security2:error] [pid 212454:tid 212625] [client 4.185.40.215:1338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws.php"] [unique_id "aryz3ryZ9IcLq1oV6pel8wAAACk"]
[Wed Sep 30 01:01:50.919515 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.109.68:11193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws88.php"] [unique_id "aryz3ryZ9IcLq1oV6pel9wAAAF8"]
[Wed Sep 30 01:01:50.934461 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz3ryZ9IcLq1oV6pel9gAAAFM"]
[Wed Sep 30 01:01:50.942796 2026] [security2:error] [pid 212454:tid 212657] [client 20.214.151.17:48936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/htaccess.php"] [unique_id "aryz3ryZ9IcLq1oV6pel-QAAAEk"]
[Wed Sep 30 01:01:50.949515 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:50.949775 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.038096 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.038513 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.043762 2026] [security2:error] [pid 212454:tid 212620] [client 20.194.5.96:57983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/zv.php"] [unique_id "aryz37yZ9IcLq1oV6pemAQAAACQ"]
[Wed Sep 30 01:01:51.074398 2026] [access_compat:error] [pid 212454:tid 212680] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:51.074773 2026] [access_compat:error] [pid 212454:tid 212680] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:51.127080 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.127344 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:3351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.156638 2026] [security2:error] [pid 212454:tid 212633] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz37yZ9IcLq1oV6pemBwAAADE"]
[Wed Sep 30 01:01:51.188018 2026] [security2:error] [pid 212454:tid 212606] [client 4.185.40.215:1400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bmi.php"] [unique_id "aryz37yZ9IcLq1oV6pemEwAAABY"]
[Wed Sep 30 01:01:51.212660 2026] [security2:error] [pid 212454:tid 212707] [client 20.214.151.17:47116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/readme.php"] [unique_id "aryz37yZ9IcLq1oV6pemFQAAAHs"]
[Wed Sep 30 01:01:51.219750 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.220070 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.310948 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.311225 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.321042 2026] [security2:error] [pid 212454:tid 212702] [client 216.73.216.46:3351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz37yZ9IcLq1oV6pemGwAAAHY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5NDc0
[Wed Sep 30 01:01:51.401962 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.402253 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.424361 2026] [security2:error] [pid 212454:tid 212639] [client 20.214.109.68:11077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws86.php"] [unique_id "aryz37yZ9IcLq1oV6pemHgAAADc"]
[Wed Sep 30 01:01:51.439603 2026] [security2:error] [pid 212454:tid 212624] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz37yZ9IcLq1oV6pemHwAAACg"]
[Wed Sep 30 01:01:51.481209 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.151.17:54111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/max.php"] [unique_id "aryz37yZ9IcLq1oV6pemIQAAAF8"]
[Wed Sep 30 01:01:51.492711 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.493008 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.502658 2026] [security2:error] [pid 212454:tid 212657] [client 4.185.40.215:1290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bypltspd.php"] [unique_id "aryz37yZ9IcLq1oV6pemJAAAAEk"]
[Wed Sep 30 01:01:51.582943 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.583216 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.614030 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:51.614289 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:51.675166 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.675422 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.759379 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:34977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/post.php"] [unique_id "aryz37yZ9IcLq1oV6pemMQAAACY"]
[Wed Sep 30 01:01:51.769523 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.769953 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.779222 2026] [security2:error] [pid 212454:tid 212609] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz37yZ9IcLq1oV6pemMgAAABk"]
[Wed Sep 30 01:01:51.806168 2026] [security2:error] [pid 212454:tid 212588] [client 4.185.40.215:1376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/shell.php"] [unique_id "aryz37yZ9IcLq1oV6pemMwAAAAQ"]
[Wed Sep 30 01:01:51.839730 2026] [security2:error] [pid 212454:tid 212685] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz37yZ9IcLq1oV6pemNAAAAGU"]
[Wed Sep 30 01:01:51.856358 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.856618 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.874653 2026] [security2:error] [pid 212454:tid 212587] [client 49.36.41.37:62961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz37yZ9IcLq1oV6pemNwAAAAM"]
[Wed Sep 30 01:01:51.874760 2026] [security2:error] [pid 212454:tid 212587] [client 49.36.41.37:62961] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz37yZ9IcLq1oV6pemNwAAAAM"]
[Wed Sep 30 01:01:51.948337 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:51.948583 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:51.971788 2026] [security2:error] [pid 212454:tid 212697] [client 20.194.5.96:61785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/zv.update.php"] [unique_id "aryz37yZ9IcLq1oV6pemOgAAAHE"]
[Wed Sep 30 01:01:52.030262 2026] [security2:error] [pid 212454:tid 212617] [client 20.214.151.17:48943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/themes.php"] [unique_id "aryz4LyZ9IcLq1oV6pemPAAAACE"]
[Wed Sep 30 01:01:52.038608 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.038879 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.106624 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:52.107059 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:52.117906 2026] [security2:error] [pid 212454:tid 212653] [client 4.185.40.215:1295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-links-opml.php"] [unique_id "aryz4LyZ9IcLq1oV6pemQgAAAEU"]
[Wed Sep 30 01:01:52.129647 2026] [security2:error] [pid 212454:tid 212594] [client 150.107.232.159:36291] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemRAAAAAo"]
[Wed Sep 30 01:01:52.129782 2026] [security2:error] [pid 212454:tid 212594] [client 150.107.232.159:36291] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemRAAAAAo"]
[Wed Sep 30 01:01:52.150189 2026] [security2:error] [pid 212454:tid 212601] [client 20.219.2.60:19417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/varb.php"] [unique_id "aryz4LyZ9IcLq1oV6pemRwAAABE"]
[Wed Sep 30 01:01:52.187837 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.188159 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.221262 2026] [security2:error] [pid 212454:tid 212651] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4LyZ9IcLq1oV6pemTAAAAEM"]
[Wed Sep 30 01:01:52.222078 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.222402 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.293486 2026] [security2:error] [pid 212454:tid 212610] [client 20.214.151.17:54122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aryz4LyZ9IcLq1oV6pemUgAAABo"]
[Wed Sep 30 01:01:52.328964 2026] [security2:error] [pid 212454:tid 212635] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/signup"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4LyZ9IcLq1oV6pemUwAAADM"]
[Wed Sep 30 01:01:52.356414 2026] [security2:error] [pid 212454:tid 212675] [client 182.69.182.151:14322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemVAAAAFs"]
[Wed Sep 30 01:01:52.356763 2026] [security2:error] [pid 212454:tid 212675] [client 182.69.182.151:14322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemVAAAAFs"]
[Wed Sep 30 01:01:52.366023 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:38891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.366263 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:38891] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.403344 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.403604 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.417291 2026] [security2:error] [pid 212454:tid 212702] [client 4.185.40.215:1281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aryz4LyZ9IcLq1oV6pemXAAAAHY"]
[Wed Sep 30 01:01:52.444585 2026] [security2:error] [pid 212454:tid 212596] [client 20.194.5.96:42635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/wquosqsi.php"] [unique_id "aryz4LyZ9IcLq1oV6pemXQAAAAw"]
[Wed Sep 30 01:01:52.497090 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.497341 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.545490 2026] [security2:error] [pid 212454:tid 212600] [client 216.73.216.46:38891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz4LyZ9IcLq1oV6pemYAAAABA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDA4L25vZGUwL21lbW9yeTM2OS9ub2RlMC9jcHU2
[Wed Sep 30 01:01:52.555789 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.151.17:44445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aryz4LyZ9IcLq1oV6pemYQAAAFA"]
[Wed Sep 30 01:01:52.580635 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:01:52.580915 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:01:52.586659 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.586946 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.682552 2026] [security2:error] [pid 212454:tid 212608] [client 20.194.96.176:1737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/av.php"] [unique_id "aryz4LyZ9IcLq1oV6pemaAAAABg"]
[Wed Sep 30 01:01:52.683161 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.683586 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.739252 2026] [security2:error] [pid 212454:tid 212586] [client 4.185.40.215:1351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws82.php"] [unique_id "aryz4LyZ9IcLq1oV6pemawAAAAI"]
[Wed Sep 30 01:01:52.768266 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.768539 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.779249 2026] [security2:error] [pid 212454:tid 212682] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4LyZ9IcLq1oV6pembwAAAGI"]
[Wed Sep 30 01:01:52.804276 2026] [security2:error] [pid 212454:tid 212665] [client 103.159.192.142:59839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemdAAAAFE"]
[Wed Sep 30 01:01:52.804402 2026] [security2:error] [pid 212454:tid 212665] [client 103.159.192.142:59839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemdAAAAFE"]
[Wed Sep 30 01:01:52.818507 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:52661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/click.php"] [unique_id "aryz4LyZ9IcLq1oV6pemdQAAACY"]
[Wed Sep 30 01:01:52.863875 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.864317 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.880207 2026] [security2:error] [pid 212454:tid 212703] [client 37.41.16.35:62252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemegAAAHc"]
[Wed Sep 30 01:01:52.880336 2026] [security2:error] [pid 212454:tid 212703] [client 37.41.16.35:62252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemegAAAHc"]
[Wed Sep 30 01:01:52.884725 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.56:45548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryz4LyZ9IcLq1oV6pemewAABEk"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:01:52.885559 2026] [security2:error] [pid 212454:tid 212676] [client 20.214.109.68:11229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/vx.php"] [unique_id "aryz4LyZ9IcLq1oV6pemfAAAAFw"]
[Wed Sep 30 01:01:52.911008 2026] [security2:error] [pid 212454:tid 212591] [client 4.196.65.241:19105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cong.php"] [unique_id "aryz4LyZ9IcLq1oV6pemgAAAAAc"]
[Wed Sep 30 01:01:52.943498 2026] [security2:error] [pid 212454:tid 212687] [client 223.181.30.165:10906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemgQAAAGc"]
[Wed Sep 30 01:01:52.943630 2026] [security2:error] [pid 212454:tid 212687] [client 223.181.30.165:10906] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz4LyZ9IcLq1oV6pemgQAAAGc"]
[Wed Sep 30 01:01:52.950576 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:52.950836 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:52.997978 2026] [security2:error] [pid 212454:tid 212680] [client 4.240.25.22:11530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/m.php"] [unique_id "aryz4LyZ9IcLq1oV6pemhAAAAGA"]
[Wed Sep 30 01:01:53.041226 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.041497 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.046136 2026] [security2:error] [pid 212454:tid 212601] [client 4.185.40.215:1405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/new.php"] [unique_id "aryz4byZ9IcLq1oV6pemiQAAABE"]
[Wed Sep 30 01:01:53.086448 2026] [security2:error] [pid 212454:tid 212659] [client 20.194.5.96:8935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/asset.php"] [unique_id "aryz4byZ9IcLq1oV6pemjQAAAEs"]
[Wed Sep 30 01:01:53.105218 2026] [security2:error] [pid 212454:tid 212709] [client 20.214.151.17:52642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/install.php"] [unique_id "aryz4byZ9IcLq1oV6pemjwAAAH0"]
[Wed Sep 30 01:01:53.115598 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:53.115889 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:01:53.117106 2026] [security2:error] [pid 212454:tid 212701] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz4byZ9IcLq1oV6pemkgAAAHU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:53.131763 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.132044 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.223048 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.223301 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.225742 2026] [security2:error] [pid 212454:tid 212589] [client 45.138.12.32:35578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.apz.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz4byZ9IcLq1oV6pemlgAAAAU"]
[Wed Sep 30 01:01:53.346052 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.346326 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.358446 2026] [security2:error] [pid 212454:tid 212643] [client 4.185.40.215:1291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/press.php"] [unique_id "aryz4byZ9IcLq1oV6pemoAAAADs"]
[Wed Sep 30 01:01:53.371659 2026] [security2:error] [pid 212454:tid 212649] [client 20.214.151.17:48908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/13k.php"] [unique_id "aryz4byZ9IcLq1oV6pemoQAAAEE"]
[Wed Sep 30 01:01:53.444011 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.444273 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.495832 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.496117 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.567787 2026] [security2:error] [pid 212454:tid 212586] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4byZ9IcLq1oV6pemrgAAAAI"]
[Wed Sep 30 01:01:53.579161 2026] [security2:error] [pid 212454:tid 212698] [client 20.194.96.176:30173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/mmq.php"] [unique_id "aryz4byZ9IcLq1oV6pemrwAAAHI"]
[Wed Sep 30 01:01:53.585612 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.109.68:11074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/dass.php"] [unique_id "aryz4byZ9IcLq1oV6pemsQAAABU"]
[Wed Sep 30 01:01:53.587467 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.587719 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.618233 2026] [security2:error] [pid 212454:tid 212616] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4byZ9IcLq1oV6pemsgAAACA"]
[Wed Sep 30 01:01:53.618755 2026] [security2:error] [pid 212454:tid 212693] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz4byZ9IcLq1oV6pemtQAAAG0"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:53.621165 2026] [access_compat:error] [pid 212454:tid 212696] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:53.621411 2026] [access_compat:error] [pid 212454:tid 212696] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:53.630865 2026] [security2:error] [pid 212454:tid 212590] [client 20.214.151.17:52609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/up.php"] [unique_id "aryz4byZ9IcLq1oV6pemuAAAAAY"]
[Wed Sep 30 01:01:53.652714 2026] [security2:error] [pid 212454:tid 212635] [client 103.241.204.139:64303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz4byZ9IcLq1oV6pemvAAAADM"]
[Wed Sep 30 01:01:53.652785 2026] [security2:error] [pid 212454:tid 212635] [client 103.241.204.139:64303] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz4byZ9IcLq1oV6pemvAAAADM"]
[Wed Sep 30 01:01:53.658936 2026] [security2:error] [pid 212454:tid 212585] [client 4.185.40.215:1378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/file-mancvgertdxz.php"] [unique_id "aryz4byZ9IcLq1oV6pemvQAAAAE"]
[Wed Sep 30 01:01:53.678427 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.678684 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.731325 2026] [security2:error] [pid 212454:tid 212680] [client 138.3.211.255:60282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.211.3.138.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wp-links-opml.php"] [unique_id "aryz4byZ9IcLq1oV6pemwAAAAGA"]
[Wed Sep 30 01:01:53.773004 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.773436 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.776405 2026] [security2:error] [pid 212454:tid 212660] [client 20.219.2.60:19422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/lm15.php"] [unique_id "aryz4byZ9IcLq1oV6pemxQAAAEw"]
[Wed Sep 30 01:01:53.867383 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.867626 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.890700 2026] [security2:error] [pid 212454:tid 212626] [client 20.214.151.17:54092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/0x1949.php"] [unique_id "aryz4byZ9IcLq1oV6pem0AAAACo"]
[Wed Sep 30 01:01:53.901914 2026] [security2:error] [pid 212454:tid 212697] [client 43.104.4.211:32998] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "aryz4byZ9IcLq1oV6pem0QAAAHE"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=led-lamp%2Cspeakers
[Wed Sep 30 01:01:53.924282 2026] [security2:error] [pid 212454:tid 212691] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz4byZ9IcLq1oV6pem1QAAAGs"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:53.942618 2026] [security2:error] [pid 212454:tid 212597] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4byZ9IcLq1oV6pem2gAAAA0"]
[Wed Sep 30 01:01:53.957745 2026] [security2:error] [pid 212454:tid 212661] [client 4.185.40.215:1368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryz4byZ9IcLq1oV6pem4AAAAE0"]
[Wed Sep 30 01:01:53.958441 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:53.959017 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:53.969291 2026] [security2:error] [pid 212454:tid 212633] [client 43.104.4.181:51224] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "aryz4byZ9IcLq1oV6pem4gAAADE"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=led-lamp%2Cspeakers
[Wed Sep 30 01:01:53.975273 2026] [security2:error] [pid 212454:tid 212666] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz4byZ9IcLq1oV6pem4wAAAFI"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.043771 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.044054 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.077321 2026] [security2:error] [pid 212454:tid 212658] [client 105.112.178.79:30930] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.ferrari250.com"] [uri "/.env"] [unique_id "aryz4ryZ9IcLq1oV6pem6QAAAEo"]
[Wed Sep 30 01:01:54.097248 2026] [access_compat:error] [pid 212454:tid 212632] [client 47.79.207.66:20440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:01:54.097508 2026] [access_compat:error] [pid 212454:tid 212632] [client 47.79.207.66:20440] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:01:54.101213 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 01:01:54.101502 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMz
[Wed Sep 30 01:01:54.117243 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.109.68:11124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/s.php"] [unique_id "aryz4ryZ9IcLq1oV6pem7QAAAFE"]
[Wed Sep 30 01:01:54.134449 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.134712 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.156511 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:48905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/cong.php"] [unique_id "aryz4ryZ9IcLq1oV6pem8AAAACY"]
[Wed Sep 30 01:01:54.225972 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.226247 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.271171 2026] [security2:error] [pid 212454:tid 212585] [client 20.194.96.176:22085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/dex.php"] [unique_id "aryz4ryZ9IcLq1oV6pem_gAAAAE"]
[Wed Sep 30 01:01:54.286876 2026] [security2:error] [pid 212454:tid 212656] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz4ryZ9IcLq1oV6pem_wAAAEg"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.319114 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.319383 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.327246 2026] [security2:error] [pid 212454:tid 212636] [client 152.59.169.65:50344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penAwAAADQ"]
[Wed Sep 30 01:01:54.327376 2026] [security2:error] [pid 212454:tid 212636] [client 152.59.169.65:50344] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penAwAAADQ"]
[Wed Sep 30 01:01:54.337040 2026] [security2:error] [pid 212454:tid 212625] [client 4.240.25.22:8493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/0.php"] [unique_id "aryz4ryZ9IcLq1oV6penBgAAACk"]
[Wed Sep 30 01:01:54.342163 2026] [security2:error] [pid 212454:tid 212670] [client 4.185.40.215:1373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws57.php"] [unique_id "aryz4ryZ9IcLq1oV6penBwAAAFY"]
[Wed Sep 30 01:01:54.367701 2026] [security2:error] [pid 212454:tid 212620] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz4ryZ9IcLq1oV6penCAAAACQ"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.412261 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.412680 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.423572 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.151.17:54137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/bs1.php"] [unique_id "aryz4ryZ9IcLq1oV6penDgAAAHE"]
[Wed Sep 30 01:01:54.432902 2026] [security2:error] [pid 212454:tid 212635] [client 43.104.4.211:17314] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aryz4ryZ9IcLq1oV6penDwAAADM"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=led-lamp%2Cspeakers
[Wed Sep 30 01:01:54.483448 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.109.68:11080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/kj.php"] [unique_id "aryz4ryZ9IcLq1oV6penEQAAAGM"]
[Wed Sep 30 01:01:54.503872 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.504324 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.543350 2026] [security2:error] [pid 212454:tid 212629] [client 20.194.5.96:42663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/cued.php"] [unique_id "aryz4ryZ9IcLq1oV6penGAAAAC0"]
[Wed Sep 30 01:01:54.574901 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:54.575164 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:54.590228 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.590480 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.643162 2026] [security2:error] [pid 212454:tid 212592] [client 4.185.40.215:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/.qiodetme.php"] [unique_id "aryz4ryZ9IcLq1oV6penIQAAAAg"]
[Wed Sep 30 01:01:54.674346 2026] [security2:error] [pid 212454:tid 212657] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz4ryZ9IcLq1oV6penJAAAAEk"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.682085 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.682355 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.714260 2026] [security2:error] [pid 212454:tid 212609] [client 223.181.60.167:30861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penKQAAABk"]
[Wed Sep 30 01:01:54.714610 2026] [security2:error] [pid 212454:tid 212609] [client 223.181.60.167:30861] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penKQAAABk"]
[Wed Sep 30 01:01:54.737927 2026] [security2:error] [pid 212454:tid 212647] [client 20.214.151.17:54120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aryz4ryZ9IcLq1oV6penJgAAAD8"]
[Wed Sep 30 01:01:54.740671 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz4ryZ9IcLq1oV6penLQAAAAM"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.773419 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.773678 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.806068 2026] [security2:error] [pid 212454:tid 212693] [client 20.194.30.107:17432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp.php"] [unique_id "aryz4ryZ9IcLq1oV6penMwAAAG0"]
[Wed Sep 30 01:01:54.817652 2026] [security2:error] [pid 212454:tid 212664] [client 45.138.12.32:22072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.aud.bwy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz4ryZ9IcLq1oV6penNAAAAFA"]
[Wed Sep 30 01:01:54.846009 2026] [security2:error] [pid 212454:tid 212668] [client 103.168.67.253:20036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz4ryZ9IcLq1oV6penOAAAAFQ"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:54.862576 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.862836 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:21524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.870488 2026] [security2:error] [pid 212454:tid 212603] [client 196.188.100.243:37515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.100.188.196.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgreenphotography.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penNgAAABM"]
[Wed Sep 30 01:01:54.870728 2026] [security2:error] [pid 212454:tid 212603] [client 196.188.100.243:37515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "cgreenphotography.com"] [uri "/xmlrpc.php"] [unique_id "aryz4ryZ9IcLq1oV6penNgAAABM"]
[Wed Sep 30 01:01:54.952683 2026] [security2:error] [pid 212454:tid 212708] [client 4.185.40.215:1401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/sodas.php"] [unique_id "aryz4ryZ9IcLq1oV6penPQAAAHw"]
[Wed Sep 30 01:01:54.959615 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:54.960051 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:54.966120 2026] [security2:error] [pid 212454:tid 212673] [client 45.138.12.32:35592] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.mhx.yqe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryz4ryZ9IcLq1oV6penPwAAAFk"]
[Wed Sep 30 01:01:55.004498 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.151.17:48940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/termps.php"] [unique_id "aryz47yZ9IcLq1oV6penQAAAADQ"]
[Wed Sep 30 01:01:55.025282 2026] [security2:error] [pid 212454:tid 212707] [client 43.165.127.225:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "jlyricz.com"] [uri "/"] [unique_id "aryz47yZ9IcLq1oV6penRgAAAHs"]
[Wed Sep 30 01:01:55.034551 2026] [security2:error] [pid 212454:tid 212628] [client 20.219.2.60:18858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/clss.php"] [unique_id "aryz47yZ9IcLq1oV6penSgAAACw"]
[Wed Sep 30 01:01:55.036725 2026] [security2:error] [pid 212454:tid 212709] [client 20.214.109.68:11166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws83.php"] [unique_id "aryz47yZ9IcLq1oV6penSwAAAH0"]
[Wed Sep 30 01:01:55.046474 2026] [security2:error] [pid 212454:tid 212701] [client 216.73.216.46:21524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz47yZ9IcLq1oV6penTwAAAHU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1Nw%3D%3D
[Wed Sep 30 01:01:55.047929 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.048182 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:63674] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.057090 2026] [security2:error] [pid 212454:tid 212629] [client 20.194.96.176:63908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/chosen.php"] [unique_id "aryz47yZ9IcLq1oV6penUAAAAC0"]
[Wed Sep 30 01:01:55.115935 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:55.116228 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:01:55.131176 2026] [security2:error] [pid 212454:tid 212678] [client 103.168.67.253:20030] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/signup"] [unique_id "aryz4ryZ9IcLq1oV6penAQAAAF4"]
[Wed Sep 30 01:01:55.188514 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.188769 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.239897 2026] [security2:error] [pid 212454:tid 212606] [client 216.73.216.46:63674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz47yZ9IcLq1oV6penWQAAABY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTAvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OQ%3D%3D
[Wed Sep 30 01:01:55.254271 2026] [security2:error] [pid 212454:tid 212675] [client 4.185.40.215:12270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/yw5bi63u.php"] [unique_id "aryz47yZ9IcLq1oV6penWgAAAFs"]
[Wed Sep 30 01:01:55.276965 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.151.17:36015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/brand.php"] [unique_id "aryz47yZ9IcLq1oV6penXgAAAA8"]
[Wed Sep 30 01:01:55.279948 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.280226 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.318648 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.319006 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.362940 2026] [security2:error] [pid 212454:tid 212674] [client 44.219.111.44:52082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.111.219.44.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ypw.vhc.mybluehost.me"] [uri "/index.php"] [unique_id "aryz47yZ9IcLq1oV6penZAAAAFo"]
[Wed Sep 30 01:01:55.408962 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.409231 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.499177 2026] [access_compat:error] [pid 212454:tid 212706] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.499434 2026] [access_compat:error] [pid 212454:tid 212706] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.561868 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.151.17:44470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/atomlib.php"] [unique_id "aryz47yZ9IcLq1oV6pendgAAAFA"]
[Wed Sep 30 01:01:55.581665 2026] [security2:error] [pid 212454:tid 212688] [client 4.185.40.215:1322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws81.php"] [unique_id "aryz47yZ9IcLq1oV6pendwAAAGg"]
[Wed Sep 30 01:01:55.595386 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.595652 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.608743 2026] [access_compat:error] [pid 212454:tid 212640] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:55.609006 2026] [access_compat:error] [pid 212454:tid 212640] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:01:55.636747 2026] [security2:error] [pid 212454:tid 212703] [client 105.112.178.79:30932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.ferrari355spider.com"] [uri "/.env"] [unique_id "aryz47yZ9IcLq1oV6penegAAAHc"]
[Wed Sep 30 01:01:55.665013 2026] [security2:error] [pid 212454:tid 212649] [client 103.172.210.103:51811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz47yZ9IcLq1oV6penewAAAEE"]
[Wed Sep 30 01:01:55.665127 2026] [security2:error] [pid 212454:tid 212649] [client 103.172.210.103:51811] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz47yZ9IcLq1oV6penewAAAEE"]
[Wed Sep 30 01:01:55.682690 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.682980 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.741300 2026] [security2:error] [pid 212454:tid 212710] [client 20.194.96.176:25508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/fryvbbn.php"] [unique_id "aryz47yZ9IcLq1oV6penhAAAAH4"]
[Wed Sep 30 01:01:55.749019 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.109.68:11187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws75.php"] [unique_id "aryz47yZ9IcLq1oV6penhgAAADQ"]
[Wed Sep 30 01:01:55.774481 2026] [security2:error] [pid 212454:tid 212570] [remote 57.141.14.79:37998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "aryz47yZ9IcLq1oV6penggAAI3M"]
[Wed Sep 30 01:01:55.776866 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.777125 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.832551 2026] [security2:error] [pid 212454:tid 212629] [client 20.214.151.17:48950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/product.php"] [unique_id "aryz47yZ9IcLq1oV6penjQAAAC0"]
[Wed Sep 30 01:01:55.835707 2026] [security2:error] [pid 212454:tid 212605] [client 161.118.214.16:55731] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.faa.yqe.mybluehost.me"] [uri "/"] [unique_id "aryz47yZ9IcLq1oV6penjAAAABU"]
[Wed Sep 30 01:01:55.876775 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.877249 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:55.880649 2026] [security2:error] [pid 212454:tid 212670] [client 20.194.30.107:17485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/sb.php"] [unique_id "aryz47yZ9IcLq1oV6penkAAAAFY"]
[Wed Sep 30 01:01:55.891149 2026] [security2:error] [pid 212454:tid 212666] [client 4.185.40.215:12258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/mh.php"] [unique_id "aryz47yZ9IcLq1oV6penkQAAAFI"]
[Wed Sep 30 01:01:55.895779 2026] [security2:error] [pid 212454:tid 212630] [client 20.194.5.96:8936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/sd.php"] [unique_id "aryz47yZ9IcLq1oV6penkgAAAC4"]
[Wed Sep 30 01:01:55.924992 2026] [security2:error] [pid 212454:tid 212623] [client 4.240.25.22:11552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/adminfuns.php"] [unique_id "aryz47yZ9IcLq1oV6penkwAAACc"]
[Wed Sep 30 01:01:55.962470 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:55.962741 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.057143 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.057391 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.092215 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:56.092499 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:47150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:56.123748 2026] [security2:error] [pid 212454:tid 212692] [client 20.214.151.17:35001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/function.php"] [unique_id "aryz5LyZ9IcLq1oV6penpwAAAGw"]
[Wed Sep 30 01:01:56.146202 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.146470 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.186261 2026] [security2:error] [pid 212454:tid 212668] [client 223.235.102.107:31464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz5LyZ9IcLq1oV6penqwAAAFQ"]
[Wed Sep 30 01:01:56.186383 2026] [security2:error] [pid 212454:tid 212668] [client 223.235.102.107:31464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz5LyZ9IcLq1oV6penqwAAAFQ"]
[Wed Sep 30 01:01:56.211372 2026] [security2:error] [pid 212454:tid 212598] [client 4.185.40.215:12255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws88.php"] [unique_id "aryz5LyZ9IcLq1oV6penrAAAAA4"]
[Wed Sep 30 01:01:56.238829 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.239117 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.264922 2026] [security2:error] [pid 212454:tid 212632] [client 20.194.96.176:63687] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.eccl.co.uk"] [uri "/1.php"] [unique_id "aryz5LyZ9IcLq1oV6pentwAAADA"]
[Wed Sep 30 01:01:56.265017 2026] [security2:error] [pid 212454:tid 212632] [client 20.194.96.176:63687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/1.php"] [unique_id "aryz5LyZ9IcLq1oV6pentwAAADA"]
[Wed Sep 30 01:01:56.328737 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.329008 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.396459 2026] [security2:error] [pid 212454:tid 212652] [client 20.214.151.17:44443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/0x.php"] [unique_id "aryz5LyZ9IcLq1oV6penvQAAAEQ"]
[Wed Sep 30 01:01:56.409866 2026] [security2:error] [pid 212454:tid 212628] [client 20.194.5.96:42624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/ans.php"] [unique_id "aryz5LyZ9IcLq1oV6penvwAAACw"]
[Wed Sep 30 01:01:56.422541 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.422792 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.511255 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.511573 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.514476 2026] [security2:error] [pid 212454:tid 212660] [client 4.185.40.215:12281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws86.php"] [unique_id "aryz5LyZ9IcLq1oV6penwwAAAEw"]
[Wed Sep 30 01:01:56.523306 2026] [security2:error] [pid 212454:tid 212678] [client 155.190.6.18:35754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz5LyZ9IcLq1oV6penxAAAAF4"]
[Wed Sep 30 01:01:56.563162 2026] [security2:error] [pid 212454:tid 212666] [client 82.102.18.126:39558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryz5LyZ9IcLq1oV6penxwAAAFI"]
[Wed Sep 30 01:01:56.573224 2026] [autoindex:error] [pid 212454:tid 212690] [client 104.168.98.195:49694] AH01276: Cannot serve directory /home4/pvpdibmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:56.587861 2026] [security2:error] [pid 212454:tid 212689] [client 20.214.109.68:11258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ms-edit.php"] [unique_id "aryz5LyZ9IcLq1oV6penygAAAGk"]
[Wed Sep 30 01:01:56.622506 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.622760 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.659336 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:52665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/index.php"] [unique_id "aryz5LyZ9IcLq1oV6pen1gAAAHg"]
[Wed Sep 30 01:01:56.685122 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:56.685385 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:56.696957 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.697217 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.722020 2026] [security2:error] [pid 212454:tid 212656] [client 4.196.65.241:64184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/xmini4.php"] [unique_id "aryz5LyZ9IcLq1oV6pen3QAAAEg"]
[Wed Sep 30 01:01:56.761295 2026] [security2:error] [pid 212454:tid 212607] [client 84.17.60.236:54486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryz5LyZ9IcLq1oV6pen4AAAABc"]
[Wed Sep 30 01:01:56.788772 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.789057 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.803274 2026] [security2:error] [pid 212454:tid 212678] [client 155.190.6.18:35754] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz5LyZ9IcLq1oV6penxAAAAF4"]
[Wed Sep 30 01:01:56.833496 2026] [security2:error] [pid 212454:tid 212699] [client 4.185.40.215:1283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/vx.php"] [unique_id "aryz5LyZ9IcLq1oV6pen6wAAAHM"]
[Wed Sep 30 01:01:56.886019 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.886281 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:56.951515 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.151.17:52647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aryz5LyZ9IcLq1oV6pen9QAAADI"]
[Wed Sep 30 01:01:56.977181 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:56.977439 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.032338 2026] [security2:error] [pid 212454:tid 212648] [client 82.102.18.126:39568] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6pen-gAAAEA"]
[Wed Sep 30 01:01:57.055514 2026] [security2:error] [pid 212454:tid 212612] [client 116.193.128.26:58964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6pen_AAAABw"]
[Wed Sep 30 01:01:57.055931 2026] [security2:error] [pid 212454:tid 212612] [client 116.193.128.26:58964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6pen_AAAABw"]
[Wed Sep 30 01:01:57.067750 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.068054 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.080855 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:57.081124 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:01:57.081349 2026] [security2:error] [pid 212454:tid 212673] [client 84.17.60.236:54490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mirandacustomsbrokerage.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoAQAAAFk"]
[Wed Sep 30 01:01:57.087214 2026] [security2:error] [pid 212454:tid 212680] [client 152.59.165.7:64967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoAgAAAGA"]
[Wed Sep 30 01:01:57.090594 2026] [security2:error] [pid 212454:tid 212680] [client 152.59.165.7:64967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoAgAAAGA"]
[Wed Sep 30 01:01:57.133428 2026] [security2:error] [pid 212454:tid 212616] [client 4.185.40.215:12197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/dass.php"] [unique_id "aryz5byZ9IcLq1oV6peoBAAAACA"]
[Wed Sep 30 01:01:57.159418 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.159696 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.173601 2026] [security2:error] [pid 212454:tid 212691] [client 202.179.95.79:61775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoCAAAAGs"]
[Wed Sep 30 01:01:57.173713 2026] [security2:error] [pid 212454:tid 212691] [client 202.179.95.79:61775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoCAAAAGs"]
[Wed Sep 30 01:01:57.211831 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.151.17:48901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/classwithtostring.php"] [unique_id "aryz5byZ9IcLq1oV6peoCgAAAF8"]
[Wed Sep 30 01:01:57.249907 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.250163 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.341633 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.341922 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.371916 2026] [security2:error] [pid 212454:tid 212672] [client 82.102.18.126:39572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6peoFAAAAFg"]
[Wed Sep 30 01:01:57.399923 2026] [security2:error] [pid 212454:tid 212606] [client 84.17.60.236:54506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6peoFgAAABY"]
[Wed Sep 30 01:01:57.424577 2026] [security2:error] [pid 212454:tid 212659] [client 20.194.5.96:8900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/cns.php"] [unique_id "aryz5byZ9IcLq1oV6peoGAAAAEs"]
[Wed Sep 30 01:01:57.432861 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.433152 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:1130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.455348 2026] [security2:error] [pid 212454:tid 212620] [client 4.185.40.215:1342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/s.php"] [unique_id "aryz5byZ9IcLq1oV6peoGgAAACQ"]
[Wed Sep 30 01:01:57.471896 2026] [security2:error] [pid 212454:tid 212613] [client 20.214.151.17:35972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/dropdown.php"] [unique_id "aryz5byZ9IcLq1oV6peoGwAAAB0"]
[Wed Sep 30 01:01:57.495535 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:60335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoHwAAAEc"]
[Wed Sep 30 01:01:57.495700 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:60335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoHwAAAEc"]
[Wed Sep 30 01:01:57.547692 2026] [security2:error] [pid 212454:tid 212701] [client 116.72.182.19:61617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoJAAAAHU"]
[Wed Sep 30 01:01:57.547840 2026] [security2:error] [pid 212454:tid 212701] [client 116.72.182.19:61617] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoJAAAAHU"]
[Wed Sep 30 01:01:57.570267 2026] [security2:error] [pid 212454:tid 212637] [client 203.122.45.246:58167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoKAAAADU"]
[Wed Sep 30 01:01:57.570400 2026] [security2:error] [pid 212454:tid 212637] [client 203.122.45.246:58167] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoKAAAADU"]
[Wed Sep 30 01:01:57.573030 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:57.573291 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:01:57.598502 2026] [security2:error] [pid 212454:tid 212465] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryz5byZ9IcLq1oV6peoKQAAWgo"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D54224
[Wed Sep 30 01:01:57.617187 2026] [security2:error] [pid 212454:tid 212687] [client 20.214.109.68:11242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/abc.php"] [unique_id "aryz5byZ9IcLq1oV6peoKwAAAGc"]
[Wed Sep 30 01:01:57.637794 2026] [security2:error] [pid 212454:tid 212656] [client 178.128.122.173:33898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.122.128.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "aryz5byZ9IcLq1oV6peoLQAAAEg"], referer: https://eccl.co.uk/wp-login.php
[Wed Sep 30 01:01:57.674174 2026] [security2:error] [pid 212454:tid 212618] [client 103.168.67.253:30904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz5byZ9IcLq1oV6peoMAAAACI"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:57.675241 2026] [security2:error] [pid 212454:tid 212663] [client 216.73.216.46:1130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz5byZ9IcLq1oV6peoMQAAAE8"]
[Wed Sep 30 01:01:57.675850 2026] [security2:error] [pid 212454:tid 212601] [client 82.102.18.126:39588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6peoMgAAABE"]
[Wed Sep 30 01:01:57.726238 2026] [security2:error] [pid 212454:tid 212625] [client 84.17.60.236:54512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6peoNAAAACk"]
[Wed Sep 30 01:01:57.731637 2026] [security2:error] [pid 212454:tid 212635] [client 20.214.151.17:35007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/moon.php"] [unique_id "aryz5byZ9IcLq1oV6peoNwAAADM"]
[Wed Sep 30 01:01:57.762311 2026] [security2:error] [pid 212454:tid 212593] [client 4.185.40.215:12246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/kj.php"] [unique_id "aryz5byZ9IcLq1oV6peoOQAAAAk"]
[Wed Sep 30 01:01:57.777349 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.777775 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.795802 2026] [security2:error] [pid 212454:tid 212619] [client 106.214.2.47:8143] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoPAAAACM"]
[Wed Sep 30 01:01:57.795943 2026] [security2:error] [pid 212454:tid 212619] [client 106.214.2.47:8143] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz5byZ9IcLq1oV6peoPAAAACM"]
[Wed Sep 30 01:01:57.868026 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:57.868354 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:57.901035 2026] [security2:error] [pid 212454:tid 212682] [client 20.194.5.96:57941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/faiy.php"] [unique_id "aryz5byZ9IcLq1oV6peoSAAAAGI"]
[Wed Sep 30 01:01:57.993282 2026] [security2:error] [pid 212454:tid 212588] [client 82.102.18.126:39592] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryz5byZ9IcLq1oV6peoUwAAAAQ"]
[Wed Sep 30 01:01:57.994036 2026] [security2:error] [pid 212454:tid 212606] [client 20.214.151.17:52612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/autoload_classmap.php"] [unique_id "aryz5byZ9IcLq1oV6peoVAAAABY"]
[Wed Sep 30 01:01:57.996024 2026] [security2:error] [pid 212454:tid 212610] [client 20.194.96.176:52443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/ff.update.php"] [unique_id "aryz5byZ9IcLq1oV6peoVQAAABo"]
[Wed Sep 30 01:01:58.010627 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:43329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.010906 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:43329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.049020 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.049296 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.062119 2026] [security2:error] [pid 212454:tid 212626] [client 84.17.60.236:54516] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peoYAAAACo"]
[Wed Sep 30 01:01:58.064373 2026] [security2:error] [pid 212454:tid 212665] [client 4.185.40.215:1314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws83.php"] [unique_id "aryz5ryZ9IcLq1oV6peoYQAAAFE"]
[Wed Sep 30 01:01:58.089316 2026] [security2:error] [pid 212454:tid 212677] [client 43.157.96.189:41530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cantrade.com.sg"] [uri "/"] [unique_id "aryz5ryZ9IcLq1oV6peoYgAAAF0"]
[Wed Sep 30 01:01:58.117663 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 01:01:58.117972 2026] [access_compat:error] [pid 212454:tid 212651] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2
[Wed Sep 30 01:01:58.127979 2026] [security2:error] [pid 212454:tid 212656] [client 143.110.220.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryz5ryZ9IcLq1oV6peoZgAAAEg"]
[Wed Sep 30 01:01:58.138929 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.139212 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.186244 2026] [security2:error] [pid 212454:tid 212485] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz5ryZ9IcLq1oV6peoaQAAbB4"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D227886
[Wed Sep 30 01:01:58.186282 2026] [security2:error] [pid 212454:tid 212485] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz5ryZ9IcLq1oV6peoaQAAbB4"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D227886
[Wed Sep 30 01:01:58.232269 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.232527 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.251920 2026] [security2:error] [pid 212454:tid 212669] [client 20.214.151.17:35994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/default.php"] [unique_id "aryz5ryZ9IcLq1oV6peocAAAAFU"]
[Wed Sep 30 01:01:58.287058 2026] [security2:error] [pid 212454:tid 212593] [client 143.110.220.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/favicon.ico"] [unique_id "aryz5ryZ9IcLq1oV6peodQAAAAk"], referer: http://steamif.org/
[Wed Sep 30 01:01:58.293189 2026] [security2:error] [pid 212454:tid 212641] [client 20.219.2.60:18847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/44.php"] [unique_id "aryz5ryZ9IcLq1oV6peoeAAAADk"]
[Wed Sep 30 01:01:58.296055 2026] [autoindex:error] [pid 212454:tid 212657] [client 212.156.70.154:22477] AH01276: Cannot serve directory /home4/maljmwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:01:58.306375 2026] [security2:error] [pid 212454:tid 212709] [client 82.102.18.126:39596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peoeQAAAH0"]
[Wed Sep 30 01:01:58.325910 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.326365 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.346779 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.109.68:11171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/motu.php"] [unique_id "aryz5ryZ9IcLq1oV6peofgAAADQ"]
[Wed Sep 30 01:01:58.360602 2026] [security2:error] [pid 212454:tid 212607] [client 4.240.25.22:11906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/ms-edit.php"] [unique_id "aryz5ryZ9IcLq1oV6peofwAAABc"]
[Wed Sep 30 01:01:58.374692 2026] [security2:error] [pid 212454:tid 212649] [client 4.185.40.215:12261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws75.php"] [unique_id "aryz5ryZ9IcLq1oV6peogQAAAEE"]
[Wed Sep 30 01:01:58.401097 2026] [security2:error] [pid 212454:tid 212682] [client 84.17.60.236:35202] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peoggAAAGI"]
[Wed Sep 30 01:01:58.407912 2026] [security2:error] [pid 212454:tid 212708] [client 216.73.216.46:43329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz5ryZ9IcLq1oV6peogwAAAHw"]
[Wed Sep 30 01:01:58.505519 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.505778 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.523535 2026] [security2:error] [pid 212454:tid 212604] [client 20.214.151.17:44444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aryz5ryZ9IcLq1oV6peoigAAABQ"]
[Wed Sep 30 01:01:58.597274 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.597556 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.628818 2026] [security2:error] [pid 212454:tid 212620] [client 82.102.18.126:39610] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peokgAAACQ"]
[Wed Sep 30 01:01:58.637689 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:58.637952 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:01:58.687069 2026] [security2:error] [pid 212454:tid 212668] [client 4.185.40.215:1289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ms-edit.php"] [unique_id "aryz5ryZ9IcLq1oV6peomAAAAFQ"]
[Wed Sep 30 01:01:58.689777 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.690071 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.722455 2026] [security2:error] [pid 212454:tid 212595] [client 49.43.163.212:56133] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peolQAAAAs"]
[Wed Sep 30 01:01:58.723364 2026] [security2:error] [pid 212454:tid 212595] [client 49.43.163.212:56133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peolQAAAAs"]
[Wed Sep 30 01:01:58.730521 2026] [security2:error] [pid 212454:tid 212624] [client 143.110.220.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/"] [unique_id "aryz5ryZ9IcLq1oV6peonQAAACg"]
[Wed Sep 30 01:01:58.736172 2026] [security2:error] [pid 212454:tid 212653] [client 84.17.60.236:35206] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peongAAAEU"]
[Wed Sep 30 01:01:58.772892 2026] [security2:error] [pid 212454:tid 212592] [client 45.138.12.48:37838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.100schools.org"] [uri "/wp-links-opml.php"] [unique_id "aryz5ryZ9IcLq1oV6peoogAAAAg"]
[Wed Sep 30 01:01:58.780657 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.780942 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.788238 2026] [security2:error] [pid 212454:tid 212687] [client 20.194.96.176:63907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/radio.php"] [unique_id "aryz5ryZ9IcLq1oV6peopAAAAGc"]
[Wed Sep 30 01:01:58.794684 2026] [security2:error] [pid 212454:tid 212656] [client 20.214.151.17:34994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/fucku.php"] [unique_id "aryz5ryZ9IcLq1oV6peopQAAAEg"]
[Wed Sep 30 01:01:58.838479 2026] [security2:error] [pid 212454:tid 212670] [client 43.227.131.37:11868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peoqAAAAFY"]
[Wed Sep 30 01:01:58.838618 2026] [security2:error] [pid 212454:tid 212670] [client 43.227.131.37:11868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peoqAAAAFY"]
[Wed Sep 30 01:01:58.844865 2026] [security2:error] [pid 212454:tid 212648] [client 20.214.109.68:11073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/inputs.php"] [unique_id "aryz5ryZ9IcLq1oV6peoqgAAAEA"]
[Wed Sep 30 01:01:58.871931 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.872259 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.873916 2026] [security2:error] [pid 212454:tid 212615] [client 20.194.5.96:8329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/gecho.php"] [unique_id "aryz5ryZ9IcLq1oV6peorAAAAB8"]
[Wed Sep 30 01:01:58.881658 2026] [security2:error] [pid 212454:tid 212587] [client 116.197.133.25:58568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peorgAAAAM"]
[Wed Sep 30 01:01:58.881822 2026] [security2:error] [pid 212454:tid 212587] [client 116.197.133.25:58568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz5ryZ9IcLq1oV6peorgAAAAM"]
[Wed Sep 30 01:01:58.941952 2026] [security2:error] [pid 212454:tid 212584] [client 82.102.18.126:39616] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryz5ryZ9IcLq1oV6peotAAAAAA"]
[Wed Sep 30 01:01:58.963065 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:58.963334 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:1591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:58.992299 2026] [security2:error] [pid 212454:tid 212693] [client 4.185.40.215:1332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/abc.php"] [unique_id "aryz5ryZ9IcLq1oV6peotwAAAG0"]
[Wed Sep 30 01:01:58.993840 2026] [security2:error] [pid 212454:tid 212637] [client 105.112.178.79:38352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.prime-ink.com"] [uri "/__ss_probe_f255471a748b1556d9f678a11fd261c5__"] [unique_id "aryz5ryZ9IcLq1oV6peouAAAADU"]
[Wed Sep 30 01:01:59.056219 2026] [security2:error] [pid 212454:tid 212689] [client 84.17.60.236:35208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6peowQAAAGk"]
[Wed Sep 30 01:01:59.059240 2026] [security2:error] [pid 212454:tid 212635] [client 20.214.151.17:54091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aryz57yZ9IcLq1oV6peowgAAADM"]
[Wed Sep 30 01:01:59.102966 2026] [access_compat:error] [pid 212454:tid 212672] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:59.103230 2026] [access_compat:error] [pid 212454:tid 212672] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:01:59.113264 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.113702 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.125148 2026] [security2:error] [pid 212454:tid 212497] [remote 47.128.114.147:18602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/2592/akbar-bugti-train-detained-at-jacobabad-station"] [unique_id "aryz57yZ9IcLq1oV6peozAAALSo"]
[Wed Sep 30 01:01:59.146510 2026] [security2:error] [pid 212454:tid 212603] [client 216.73.216.46:1591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz57yZ9IcLq1oV6peozgAAABM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWIvcHl0aG9uMy45L3NpdGUtcGFja2FnZXMvcHljcGFyc2Vy
[Wed Sep 30 01:01:59.151841 2026] [security2:error] [pid 212454:tid 212633] [client 178.128.122.173:50154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.122.128.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eccl.co.uk"] [uri "/wp-login.php"] [unique_id "aryz57yZ9IcLq1oV6peozwAAADE"], referer: https://eccl.co.uk/wp-login.php
[Wed Sep 30 01:01:59.206918 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.207375 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.214680 2026] [security2:error] [pid 212454:tid 212624] [client 85.204.70.118:55872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6peo2AAAACg"]
[Wed Sep 30 01:01:59.254934 2026] [security2:error] [pid 212454:tid 212694] [client 82.102.18.126:39620] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6peo3gAAAG4"]
[Wed Sep 30 01:01:59.284767 2026] [security2:error] [pid 212454:tid 212678] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6peo4QAAAF4"]
[Wed Sep 30 01:01:59.296494 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.296939 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.319334 2026] [security2:error] [pid 212454:tid 212659] [client 4.185.40.215:1325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/motu.php"] [unique_id "aryz57yZ9IcLq1oV6peo5AAAAEs"]
[Wed Sep 30 01:01:59.320515 2026] [security2:error] [pid 212454:tid 212706] [client 20.214.151.17:35173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/mail.php"] [unique_id "aryz57yZ9IcLq1oV6peo5QAAAHo"]
[Wed Sep 30 01:01:59.324187 2026] [security2:error] [pid 212454:tid 212593] [client 216.73.216.46:23623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6peo5wAAAAk"]
[Wed Sep 30 01:01:59.349893 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz57yZ9IcLq1oV6peo6AAAABo"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.380084 2026] [security2:error] [pid 212454:tid 212597] [client 84.17.60.236:35212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6peo7AAAAA0"]
[Wed Sep 30 01:01:59.410169 2026] [security2:error] [pid 212454:tid 212637] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6peo8AAAADU"]
[Wed Sep 30 01:01:59.421859 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.422148 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.430093 2026] [security2:error] [pid 212454:tid 212688] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz57yZ9IcLq1oV6peo8wAAAGg"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.462960 2026] [security2:error] [pid 212454:tid 212635] [client 20.214.109.68:11150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp9.php"] [unique_id "aryz57yZ9IcLq1oV6peo9gAAADM"]
[Wed Sep 30 01:01:59.479339 2026] [security2:error] [pid 212454:tid 212639] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz57yZ9IcLq1oV6peo-QAAADc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.510673 2026] [security2:error] [pid 212454:tid 212690] [client 85.204.70.118:13428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryz57yZ9IcLq1oV6peo-wAAAGo"]
[Wed Sep 30 01:01:59.513147 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.513406 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.525207 2026] [security2:error] [pid 212454:tid 212631] [client 49.205.105.16:14921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz57yZ9IcLq1oV6peo_AAAAC8"]
[Wed Sep 30 01:01:59.525377 2026] [security2:error] [pid 212454:tid 212631] [client 49.205.105.16:14921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz57yZ9IcLq1oV6peo_AAAAC8"]
[Wed Sep 30 01:01:59.529337 2026] [security2:error] [pid 212454:tid 212647] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz57yZ9IcLq1oV6peo_QAAAD8"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.536071 2026] [security2:error] [pid 212454:tid 212586] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6peo_gAAAAI"]
[Wed Sep 30 01:01:59.546696 2026] [security2:error] [pid 212454:tid 212501] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz57yZ9IcLq1oV6pepAAAAUy4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131743&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:01:59.546729 2026] [security2:error] [pid 212454:tid 212501] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz57yZ9IcLq1oV6pepAAAAUy4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=131743&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:01:59.572516 2026] [security2:error] [pid 212454:tid 212630] [client 20.219.2.60:18846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/a5e0a.php"] [unique_id "aryz57yZ9IcLq1oV6pepAQAAAC4"]
[Wed Sep 30 01:01:59.582551 2026] [security2:error] [pid 212454:tid 212606] [client 20.214.151.17:35139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/sx.php"] [unique_id "aryz57yZ9IcLq1oV6pepAgAAABY"]
[Wed Sep 30 01:01:59.584435 2026] [security2:error] [pid 212454:tid 212700] [client 82.102.18.126:39636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6pepAwAAAHQ"]
[Wed Sep 30 01:01:59.598053 2026] [security2:error] [pid 212454:tid 212668] [client 20.194.96.176:50637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/lzlhihzi.php"] [unique_id "aryz57yZ9IcLq1oV6pepDgAAAFQ"]
[Wed Sep 30 01:01:59.599068 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:59.599315 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:01:59.622803 2026] [security2:error] [pid 212454:tid 212613] [client 4.185.40.215:1341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/inputs.php"] [unique_id "aryz57yZ9IcLq1oV6pepEAAAAB0"]
[Wed Sep 30 01:01:59.658140 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.658374 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.660589 2026] [security2:error] [pid 212454:tid 212620] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6pepFAAAACQ"]
[Wed Sep 30 01:01:59.693839 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.694119 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.718360 2026] [security2:error] [pid 212454:tid 212617] [client 84.17.60.236:35218] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6pepHQAAACE"]
[Wed Sep 30 01:01:59.785629 2026] [security2:error] [pid 212454:tid 212678] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6pepJAAAAF4"]
[Wed Sep 30 01:01:59.789205 2026] [security2:error] [pid 212454:tid 212587] [client 85.204.70.118:55894] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6pepJQAAAAM"]
[Wed Sep 30 01:01:59.790580 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.791016 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.806709 2026] [security2:error] [pid 212454:tid 212608] [client 1.55.42.80:61265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.42.55.1.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/xmlrpc.php"] [unique_id "aryz57yZ9IcLq1oV6pepIQAAABg"]
[Wed Sep 30 01:01:59.806871 2026] [security2:error] [pid 212454:tid 212608] [client 1.55.42.80:61265] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "crayons-couleur.com"] [uri "/xmlrpc.php"] [unique_id "aryz57yZ9IcLq1oV6pepIQAAABg"]
[Wed Sep 30 01:01:59.843213 2026] [security2:error] [pid 212454:tid 212669] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz57yZ9IcLq1oV6pepVAAAAFU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.862738 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:52626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aryz57yZ9IcLq1oV6pepVgAAADk"]
[Wed Sep 30 01:01:59.878315 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.878575 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.892861 2026] [security2:error] [pid 212454:tid 212684] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz57yZ9IcLq1oV6pepWgAAAGQ"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.912824 2026] [security2:error] [pid 212454:tid 212692] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz57yZ9IcLq1oV6pepWwAAAGw"]
[Wed Sep 30 01:01:59.927508 2026] [security2:error] [pid 212454:tid 212688] [client 82.102.18.126:39652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryz57yZ9IcLq1oV6pepXQAAAGg"]
[Wed Sep 30 01:01:59.929877 2026] [security2:error] [pid 212454:tid 212612] [client 20.214.109.68:11135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/public/vx.php"] [unique_id "aryz57yZ9IcLq1oV6pepXgAAABw"]
[Wed Sep 30 01:01:59.933044 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:12265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp9.php"] [unique_id "aryz57yZ9IcLq1oV6pepXwAAADo"]
[Wed Sep 30 01:01:59.941884 2026] [security2:error] [pid 212454:tid 212589] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz57yZ9IcLq1oV6pepYAAAAAU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:01:59.969532 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:01:59.969779 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:01:59.990449 2026] [security2:error] [pid 212454:tid 212605] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz57yZ9IcLq1oV6pepYwAAABU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:00.042041 2026] [security2:error] [pid 212454:tid 212690] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepaAAAAGo"]
[Wed Sep 30 01:02:00.051375 2026] [security2:error] [pid 212454:tid 212647] [client 84.17.60.236:35230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepagAAAD8"]
[Wed Sep 30 01:02:00.060852 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.061126 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.086013 2026] [security2:error] [pid 212454:tid 212703] [client 85.204.70.118:55904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepbQAAAHc"]
[Wed Sep 30 01:02:00.112069 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 01:02:00.112444 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 01:02:00.128678 2026] [security2:error] [pid 212454:tid 212662] [client 20.214.151.17:48932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/article.php"] [unique_id "aryz6LyZ9IcLq1oV6pepcAAAAE4"]
[Wed Sep 30 01:02:00.153184 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.153455 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.168118 2026] [security2:error] [pid 212454:tid 212702] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepcwAAAHY"]
[Wed Sep 30 01:02:00.238625 2026] [security2:error] [pid 212454:tid 212596] [client 4.185.40.215:1352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/public/vx.php"] [unique_id "aryz6LyZ9IcLq1oV6pepeAAAAAw"]
[Wed Sep 30 01:02:00.238922 2026] [security2:error] [pid 212454:tid 212620] [client 20.194.5.96:42673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/gu.php"] [unique_id "aryz6LyZ9IcLq1oV6pepeQAAACQ"]
[Wed Sep 30 01:02:00.242043 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.242297 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.273992 2026] [security2:error] [pid 212454:tid 212634] [client 82.102.18.126:39658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepewAAADI"]
[Wed Sep 30 01:02:00.289256 2026] [access_compat:error] [pid 212454:tid 212631] [client 193.56.28.25:22447] AH01797: client denied by server configuration: /home3/bradgore/public_html/xmlrpc.php
[Wed Sep 30 01:02:00.292677 2026] [security2:error] [pid 212454:tid 212617] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepfQAAACE"]
[Wed Sep 30 01:02:00.331703 2026] [security2:error] [pid 212454:tid 212679] [client 168.107.70.193:63041] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.my-muscle-man.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "aryz6LyZ9IcLq1oV6pepgAAAAF8"]
[Wed Sep 30 01:02:00.338404 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.338866 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.373693 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.109.68:11261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/inege.php"] [unique_id "aryz6LyZ9IcLq1oV6pepgwAAACI"]
[Wed Sep 30 01:02:00.385211 2026] [security2:error] [pid 212454:tid 212587] [client 85.204.70.118:55908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pephAAAAAM"]
[Wed Sep 30 01:02:00.387133 2026] [security2:error] [pid 212454:tid 212591] [client 84.17.60.236:35240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pephQAAAAc"]
[Wed Sep 30 01:02:00.389732 2026] [security2:error] [pid 212454:tid 212659] [client 20.214.151.17:44436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/link.php"] [unique_id "aryz6LyZ9IcLq1oV6pephgAAAEs"]
[Wed Sep 30 01:02:00.419859 2026] [security2:error] [pid 212454:tid 212686] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepiwAAAGY"]
[Wed Sep 30 01:02:00.428921 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.429372 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:63324] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.480063 2026] [security2:error] [pid 212454:tid 212684] [client 20.219.2.60:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bo.php"] [unique_id "aryz6LyZ9IcLq1oV6pepkAAAAGQ"]
[Wed Sep 30 01:02:00.509860 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:63324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepkgAAADQ"]
[Wed Sep 30 01:02:00.544715 2026] [security2:error] [pid 212454:tid 212642] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6peplgAAADo"]
[Wed Sep 30 01:02:00.562988 2026] [security2:error] [pid 212454:tid 212691] [client 4.185.40.215:12182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/inege.php"] [unique_id "aryz6LyZ9IcLq1oV6peplwAAAGs"]
[Wed Sep 30 01:02:00.590479 2026] [security2:error] [pid 212454:tid 212707] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz6LyZ9IcLq1oV6pepmAAAAHs"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:00.602585 2026] [security2:error] [pid 212454:tid 212647] [client 213.136.69.135:56298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-token-map.php"] [unique_id "aryz6LyZ9IcLq1oV6pepmgAAAD8"], referer: binance.com
[Wed Sep 30 01:02:00.604042 2026] [security2:error] [pid 212454:tid 212655] [client 82.102.18.126:39660] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepnAAAAEc"]
[Wed Sep 30 01:02:00.610876 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.611155 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:49288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.614441 2026] [access_compat:error] [pid 212454:tid 212680] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:02:00.614704 2026] [access_compat:error] [pid 212454:tid 212680] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:02:00.625744 2026] [security2:error] [pid 212454:tid 212667] [client 20.194.30.107:17224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/simple.php"] [unique_id "aryz6LyZ9IcLq1oV6pepoAAAAFM"]
[Wed Sep 30 01:02:00.652830 2026] [security2:error] [pid 212454:tid 212585] [client 20.214.151.17:44472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/lock360.php"] [unique_id "aryz6LyZ9IcLq1oV6pepogAAAAE"]
[Wed Sep 30 01:02:00.669573 2026] [security2:error] [pid 212454:tid 212629] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepowAAAC0"]
[Wed Sep 30 01:02:00.681371 2026] [security2:error] [pid 212454:tid 212627] [client 85.204.70.118:55916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6peppAAAACs"]
[Wed Sep 30 01:02:00.682682 2026] [security2:error] [pid 212454:tid 212654] [client 103.168.67.253:30918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz6LyZ9IcLq1oV6peppQAAAEY"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:00.691777 2026] [security2:error] [pid 212454:tid 212650] [client 216.73.216.46:49288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6peppgAAAEI"]
[Wed Sep 30 01:02:00.707445 2026] [security2:error] [pid 212454:tid 212698] [client 84.17.60.236:35246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6peppwAAAHI"]
[Wed Sep 30 01:02:00.787349 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:00.787603 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:30863] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:00.794354 2026] [security2:error] [pid 212454:tid 212599] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6peptAAAAA8"]
[Wed Sep 30 01:02:00.802447 2026] [security2:error] [pid 212454:tid 212620] [client 143.110.220.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "steamif.org"] [uri "/favicon.ico"] [unique_id "aryz6LyZ9IcLq1oV6peptQAAACQ"], referer: https://steamif.org/
[Wed Sep 30 01:02:00.866513 2026] [security2:error] [pid 212454:tid 212631] [client 4.185.40.215:1286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/nw.php"] [unique_id "aryz6LyZ9IcLq1oV6peptwAAAC8"]
[Wed Sep 30 01:02:00.873317 2026] [security2:error] [pid 212454:tid 212670] [client 216.73.216.46:30863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepuAAAAFY"]
[Wed Sep 30 01:02:00.892555 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.109.68:11116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/nw.php"] [unique_id "aryz6LyZ9IcLq1oV6pepugAAAFE"]
[Wed Sep 30 01:02:00.911930 2026] [security2:error] [pid 212454:tid 212613] [client 20.214.151.17:34951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-trackback.php"] [unique_id "aryz6LyZ9IcLq1oV6pepuwAAAB0"]
[Wed Sep 30 01:02:00.920956 2026] [security2:error] [pid 212454:tid 212673] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6LyZ9IcLq1oV6pepvAAAAFk"]
[Wed Sep 30 01:02:00.932439 2026] [security2:error] [pid 212454:tid 212587] [client 20.194.96.176:63892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/blacks.php"] [unique_id "aryz6LyZ9IcLq1oV6pepvQAAAAM"]
[Wed Sep 30 01:02:00.948855 2026] [security2:error] [pid 212454:tid 212616] [client 82.102.18.126:39668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepvwAAACA"]
[Wed Sep 30 01:02:00.963310 2026] [security2:error] [pid 212454:tid 212664] [client 85.204.70.118:55924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryz6LyZ9IcLq1oV6pepwAAAAFA"]
[Wed Sep 30 01:02:01.016619 2026] [security2:error] [pid 212454:tid 212619] [client 20.194.96.176:5363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/bfdghfgv.php"] [unique_id "aryz6byZ9IcLq1oV6pepwQAAACM"]
[Wed Sep 30 01:02:01.027644 2026] [security2:error] [pid 212454:tid 212609] [client 84.17.60.236:35256] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pepwwAAABk"]
[Wed Sep 30 01:02:01.028542 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:53038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.028795 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:53038] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:01.050211 2026] [security2:error] [pid 212454:tid 212636] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pepxwAAADQ"]
[Wed Sep 30 01:02:01.084639 2026] [security2:error] [pid 212454:tid 212593] [client 20.194.5.96:57977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/nck.php"] [unique_id "aryz6byZ9IcLq1oV6pepywAAAAk"]
[Wed Sep 30 01:02:01.116826 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:01.117265 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:01.123799 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.124243 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:01.168229 2026] [security2:error] [pid 212454:tid 212691] [client 4.185.40.215:12241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/t.php"] [unique_id "aryz6byZ9IcLq1oV6pep0QAAAGs"]
[Wed Sep 30 01:02:01.173329 2026] [security2:error] [pid 212454:tid 212646] [client 20.214.151.17:54104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/.well-known/index.php"] [unique_id "aryz6byZ9IcLq1oV6pep0gAAAD4"]
[Wed Sep 30 01:02:01.175594 2026] [security2:error] [pid 212454:tid 212707] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep0wAAAHs"]
[Wed Sep 30 01:02:01.212116 2026] [security2:error] [pid 212454:tid 212683] [client 216.73.216.46:53038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz6byZ9IcLq1oV6pep1AAAAGM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvcmVkYXgvcGhwODE%3D
[Wed Sep 30 01:02:01.256271 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.256714 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:01.260451 2026] [security2:error] [pid 212454:tid 212629] [client 85.204.70.118:55930] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pep2QAAAC0"]
[Wed Sep 30 01:02:01.293433 2026] [security2:error] [pid 212454:tid 212594] [client 82.102.18.126:39674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dzn.ksu.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pep2wAAAAo"]
[Wed Sep 30 01:02:01.305293 2026] [security2:error] [pid 212454:tid 212709] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep3QAAAH0"]
[Wed Sep 30 01:02:01.346681 2026] [security2:error] [pid 212454:tid 212595] [client 84.17.60.236:35262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pep3wAAAAs"]
[Wed Sep 30 01:02:01.387567 2026] [security2:error] [pid 212454:tid 212458] [remote 57.141.14.26:25738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/feed/xmlrpc.php"] [unique_id "aryz6byZ9IcLq1oV6pep3gAAMQM"]
[Wed Sep 30 01:02:01.388207 2026] [security2:error] [pid 212454:tid 212603] [client 216.73.216.46:39295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep4wAAABM"]
[Wed Sep 30 01:02:01.406937 2026] [security2:error] [pid 212454:tid 212640] [client 45.138.12.32:35728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.aud.bwy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz6byZ9IcLq1oV6pep5AAAADg"]
[Wed Sep 30 01:02:01.431117 2026] [security2:error] [pid 212454:tid 212620] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep6QAAACQ"]
[Wed Sep 30 01:02:01.437338 2026] [security2:error] [pid 212454:tid 212677] [client 20.214.151.17:48937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aryz6byZ9IcLq1oV6pep6wAAAF0"]
[Wed Sep 30 01:02:01.491138 2026] [security2:error] [pid 212454:tid 212697] [client 4.185.40.215:1340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryz6byZ9IcLq1oV6pep7QAAAHE"]
[Wed Sep 30 01:02:01.555343 2026] [security2:error] [pid 212454:tid 212662] [client 85.204.70.118:63856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pep7gAAAE4"]
[Wed Sep 30 01:02:01.557691 2026] [security2:error] [pid 212454:tid 212628] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep7wAAACw"]
[Wed Sep 30 01:02:01.568242 2026] [security2:error] [pid 212454:tid 212617] [client 20.214.109.68:11133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/t.php"] [unique_id "aryz6byZ9IcLq1oV6pep8AAAACE"]
[Wed Sep 30 01:02:01.577590 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.577873 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:01.621662 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:02:01.622109 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:02:01.670363 2026] [security2:error] [pid 212454:tid 212679] [client 84.17.60.236:35278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mirandacustomsbrokerage.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6pep9AAAAF8"]
[Wed Sep 30 01:02:01.671230 2026] [security2:error] [pid 212454:tid 212678] [client 20.70.173.30:59847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/dex.php"] [unique_id "aryz6byZ9IcLq1oV6pep9QAAAF4"]
[Wed Sep 30 01:02:01.684624 2026] [security2:error] [pid 212454:tid 212660] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6pep9gAAAEw"]
[Wed Sep 30 01:02:01.697451 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.151.17:52670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aryz6byZ9IcLq1oV6pep9wAAACI"]
[Wed Sep 30 01:02:01.707240 2026] [security2:error] [pid 212454:tid 212587] [client 20.219.2.60:18851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/56c53.php"] [unique_id "aryz6byZ9IcLq1oV6pep-AAAAAM"]
[Wed Sep 30 01:02:01.726881 2026] [security2:error] [pid 212454:tid 212622] [client 20.194.30.107:17411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/ops.php"] [unique_id "aryz6byZ9IcLq1oV6pep-wAAACY"]
[Wed Sep 30 01:02:01.793709 2026] [security2:error] [pid 212454:tid 212619] [client 4.185.40.215:1346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/public/ws49.php"] [unique_id "aryz6byZ9IcLq1oV6peqAQAAACM"]
[Wed Sep 30 01:02:01.811110 2026] [security2:error] [pid 212454:tid 212636] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6peqAwAAADQ"]
[Wed Sep 30 01:02:01.838258 2026] [security2:error] [pid 212454:tid 212589] [client 85.204.70.118:55958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryz6byZ9IcLq1oV6peqBwAAAAU"]
[Wed Sep 30 01:02:01.895725 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.896024 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:01.937007 2026] [security2:error] [pid 212454:tid 212621] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6byZ9IcLq1oV6peqEQAAACU"]
[Wed Sep 30 01:02:01.956360 2026] [security2:error] [pid 212454:tid 212698] [client 20.214.151.17:52639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aryz6byZ9IcLq1oV6peqEwAAAHI"]
[Wed Sep 30 01:02:01.987237 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:01.987714 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.053361 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.053826 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.063099 2026] [security2:error] [pid 212454:tid 212635] [client 49.36.41.37:63485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqGQAAADM"]
[Wed Sep 30 01:02:02.064487 2026] [security2:error] [pid 212454:tid 212635] [client 49.36.41.37:63485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqGQAAADM"]
[Wed Sep 30 01:02:02.064845 2026] [security2:error] [pid 212454:tid 212680] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqGgAAAGA"]
[Wed Sep 30 01:02:02.079160 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.079416 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:37401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.093611 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:02.093892 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:02.107450 2026] [security2:error] [pid 212454:tid 212603] [client 4.185.40.215:1350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gifclass.php"] [unique_id "aryz6ryZ9IcLq1oV6peqHgAAABM"]
[Wed Sep 30 01:02:02.120947 2026] [security2:error] [pid 212454:tid 212675] [client 85.204.70.118:42328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz6ryZ9IcLq1oV6peqIQAAAFs"]
[Wed Sep 30 01:02:02.168590 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.168854 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.189584 2026] [security2:error] [pid 212454:tid 212695] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqJgAAAG8"]
[Wed Sep 30 01:02:02.216227 2026] [security2:error] [pid 212454:tid 212590] [client 4.240.25.22:8448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/pJPoKA.php"] [unique_id "aryz6ryZ9IcLq1oV6peqJwAAAAY"]
[Wed Sep 30 01:02:02.226013 2026] [security2:error] [pid 212454:tid 212677] [client 20.214.151.17:54115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqKAAAAF0"]
[Wed Sep 30 01:02:02.251929 2026] [security2:error] [pid 212454:tid 212696] [client 20.214.109.68:11117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aryz6ryZ9IcLq1oV6peqKwAAAHA"]
[Wed Sep 30 01:02:02.258970 2026] [security2:error] [pid 212454:tid 212624] [client 20.194.5.96:8914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/xtt.php"] [unique_id "aryz6ryZ9IcLq1oV6peqLgAAACg"]
[Wed Sep 30 01:02:02.262304 2026] [security2:error] [pid 212454:tid 212694] [client 216.73.216.46:37401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz6ryZ9IcLq1oV6peqLwAAAG4"], referer: http://www.homs.co.ke/?action=adminer&p=L29wdC9iYXJ0L2pvYnM%3D
[Wed Sep 30 01:02:02.288922 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.289190 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.314749 2026] [security2:error] [pid 212454:tid 212631] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqMgAAAC8"]
[Wed Sep 30 01:02:02.316055 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.316303 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.342545 2026] [access_compat:error] [pid 212454:tid 212604] [client 220.181.108.82:26401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.342817 2026] [access_compat:error] [pid 212454:tid 212604] [client 220.181.108.82:26401] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.343398 2026] [security2:error] [pid 212454:tid 212678] [client 45.138.12.32:22250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.axa.fme.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz6ryZ9IcLq1oV6peqNgAAAF4"]
[Wed Sep 30 01:02:02.350135 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.350386 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.376008 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.376271 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.417081 2026] [security2:error] [pid 212454:tid 212689] [client 85.204.70.118:59072] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryz6ryZ9IcLq1oV6peqPQAAAGk"]
[Wed Sep 30 01:02:02.418736 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.419025 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.429781 2026] [security2:error] [pid 212454:tid 212626] [client 4.185.40.215:1386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/sa.php7"] [unique_id "aryz6ryZ9IcLq1oV6peqPgAAACo"]
[Wed Sep 30 01:02:02.430005 2026] [security2:error] [pid 212454:tid 212615] [client 20.194.96.176:22091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/run.php"] [unique_id "aryz6ryZ9IcLq1oV6peqPwAAAB8"]
[Wed Sep 30 01:02:02.438583 2026] [security2:error] [pid 212454:tid 212668] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqQgAAAFQ"]
[Wed Sep 30 01:02:02.441954 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.442204 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.449879 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.450340 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.466204 2026] [security2:error] [pid 212454:tid 212667] [client 150.107.232.159:36135] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqQwAAAFM"]
[Wed Sep 30 01:02:02.466487 2026] [security2:error] [pid 212454:tid 212667] [client 150.107.232.159:36135] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "quieromifactura.biz"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqQwAAAFM"]
[Wed Sep 30 01:02:02.493074 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:54143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aryz6ryZ9IcLq1oV6peqRAAAADk"]
[Wed Sep 30 01:02:02.514623 2026] [security2:error] [pid 212454:tid 212672] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz6ryZ9IcLq1oV6peqRQAAAFg"]
[Wed Sep 30 01:02:02.530401 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.530662 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.564968 2026] [security2:error] [pid 212454:tid 212664] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqSgAAAFA"]
[Wed Sep 30 01:02:02.600051 2026] [security2:error] [pid 212454:tid 212638] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz6ryZ9IcLq1oV6peqSwAAADY"]
[Wed Sep 30 01:02:02.615114 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:02:02.615396 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:02:02.622278 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.622569 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.654711 2026] [security2:error] [pid 212454:tid 212707] [client 20.214.109.68:11094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/public/ws49.php"] [unique_id "aryz6ryZ9IcLq1oV6peqUQAAAHs"]
[Wed Sep 30 01:02:02.688972 2026] [security2:error] [pid 212454:tid 212708] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqVQAAAHw"]
[Wed Sep 30 01:02:02.711663 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.711944 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.712887 2026] [security2:error] [pid 212454:tid 212635] [client 85.204.70.118:55990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz6ryZ9IcLq1oV6peqVwAAADM"]
[Wed Sep 30 01:02:02.734755 2026] [security2:error] [pid 212454:tid 212595] [client 20.194.96.176:37963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/Dss.php"] [unique_id "aryz6ryZ9IcLq1oV6peqWQAAAAs"]
[Wed Sep 30 01:02:02.740777 2026] [security2:error] [pid 212454:tid 212675] [client 4.185.40.215:12240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/jp.php"] [unique_id "aryz6ryZ9IcLq1oV6peqWwAAAFs"]
[Wed Sep 30 01:02:02.768023 2026] [security2:error] [pid 212454:tid 212695] [client 20.214.151.17:36007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/themes/about.php"] [unique_id "aryz6ryZ9IcLq1oV6peqXwAAAG8"]
[Wed Sep 30 01:02:02.802664 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.802939 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.814085 2026] [security2:error] [pid 212454:tid 212697] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqZQAAAHE"]
[Wed Sep 30 01:02:02.861922 2026] [security2:error] [pid 212454:tid 212699] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz6ryZ9IcLq1oV6peqaQAAAHM"]
[Wed Sep 30 01:02:02.864372 2026] [security2:error] [pid 212454:tid 212650] [client 182.69.182.151:3268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqaAAAAEI"]
[Wed Sep 30 01:02:02.864484 2026] [security2:error] [pid 212454:tid 212650] [client 182.69.182.151:3268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz6ryZ9IcLq1oV6peqaAAAAEI"]
[Wed Sep 30 01:02:02.896762 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.897056 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.939540 2026] [security2:error] [pid 212454:tid 212601] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz6ryZ9IcLq1oV6peqbwAAABE"]
[Wed Sep 30 01:02:02.986780 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:02.987081 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:27547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:02.993099 2026] [security2:error] [pid 212454:tid 212604] [client 85.204.70.118:56000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryz6ryZ9IcLq1oV6peqcwAAABQ"]
[Wed Sep 30 01:02:03.045840 2026] [security2:error] [pid 212454:tid 212593] [client 20.214.151.17:35968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/filemanager/dialog.php"] [unique_id "aryz67yZ9IcLq1oV6peqeQAAAAk"]
[Wed Sep 30 01:02:03.051034 2026] [security2:error] [pid 212454:tid 212608] [client 4.185.40.215:12259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-good.php"] [unique_id "aryz67yZ9IcLq1oV6peqegAAABg"]
[Wed Sep 30 01:02:03.063025 2026] [security2:error] [pid 212454:tid 212689] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqfQAAAGk"]
[Wed Sep 30 01:02:03.070638 2026] [security2:error] [pid 212454:tid 212613] [client 216.73.216.46:27547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqfgAAAB0"]
[Wed Sep 30 01:02:03.095266 2026] [access_compat:error] [pid 212454:tid 212609] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:02:03.095530 2026] [access_compat:error] [pid 212454:tid 212609] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:02:03.162232 2026] [security2:error] [pid 212454:tid 212627] [client 20.214.109.68:11121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gifclass.php"] [unique_id "aryz67yZ9IcLq1oV6peqhwAAACs"]
[Wed Sep 30 01:02:03.167151 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.167429 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.187755 2026] [security2:error] [pid 212454:tid 212623] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqiwAAACc"]
[Wed Sep 30 01:02:03.249637 2026] [security2:error] [pid 212454:tid 212597] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz67yZ9IcLq1oV6peqkQAAAA0"]
[Wed Sep 30 01:02:03.258978 2026] [security2:error] [pid 212454:tid 212635] [client 151.245.103.129:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/power-products/stabilizers/"] [unique_id "aryz67yZ9IcLq1oV6peqlQAAADM"]
[Wed Sep 30 01:02:03.260535 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.260773 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.276342 2026] [security2:error] [pid 212454:tid 212693] [client 85.204.70.118:34555] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryz67yZ9IcLq1oV6peqlgAAAG0"]
[Wed Sep 30 01:02:03.311945 2026] [security2:error] [pid 212454:tid 212700] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqmgAAAHQ"]
[Wed Sep 30 01:02:03.321975 2026] [security2:error] [pid 212454:tid 212680] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz67yZ9IcLq1oV6peqmQAAAGA"]
[Wed Sep 30 01:02:03.326235 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.151.17:44446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/index/function.php"] [unique_id "aryz67yZ9IcLq1oV6peqmwAAAHE"]
[Wed Sep 30 01:02:03.335438 2026] [security2:error] [pid 212454:tid 212625] [client 20.194.96.176:63732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/vpn.php"] [unique_id "aryz67yZ9IcLq1oV6peqnAAAACk"]
[Wed Sep 30 01:02:03.349728 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.350043 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.374222 2026] [security2:error] [pid 212454:tid 212699] [client 4.185.40.215:12254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/a5.php"] [unique_id "aryz67yZ9IcLq1oV6peqngAAAHM"]
[Wed Sep 30 01:02:03.395568 2026] [security2:error] [pid 212454:tid 212606] [client 37.41.16.35:62859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqoQAAABY"]
[Wed Sep 30 01:02:03.395715 2026] [security2:error] [pid 212454:tid 212606] [client 37.41.16.35:62859] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqoQAAABY"]
[Wed Sep 30 01:02:03.436144 2026] [security2:error] [pid 212454:tid 212711] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqpQAAAH8"]
[Wed Sep 30 01:02:03.439476 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.439736 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.462511 2026] [security2:error] [pid 212454:tid 212631] [client 223.181.30.165:24518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqpgAAAC8"]
[Wed Sep 30 01:02:03.462626 2026] [security2:error] [pid 212454:tid 212631] [client 223.181.30.165:24518] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqpgAAAC8"]
[Wed Sep 30 01:02:03.463754 2026] [security2:error] [pid 212454:tid 212678] [client 4.196.65.241:64187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/n30n.php"] [unique_id "aryz67yZ9IcLq1oV6peqpwAAAF4"]
[Wed Sep 30 01:02:03.529822 2026] [security2:error] [pid 212454:tid 212668] [client 103.159.192.142:60466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqqQAAAFQ"]
[Wed Sep 30 01:02:03.529968 2026] [security2:error] [pid 212454:tid 212668] [client 103.159.192.142:60466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz67yZ9IcLq1oV6peqqQAAAFQ"]
[Wed Sep 30 01:02:03.530888 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.531169 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.561154 2026] [security2:error] [pid 212454:tid 212704] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqqwAAAHg"]
[Wed Sep 30 01:02:03.570759 2026] [security2:error] [pid 212454:tid 212619] [client 85.204.70.118:20889] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.bgx.jky.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz67yZ9IcLq1oV6peqrAAAACM"]
[Wed Sep 30 01:02:03.578929 2026] [access_compat:error] [pid 212454:tid 212677] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:03.579245 2026] [access_compat:error] [pid 212454:tid 212677] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:03.584552 2026] [security2:error] [pid 212454:tid 212593] [client 20.214.151.17:54140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aryz67yZ9IcLq1oV6peqrgAAAAk"]
[Wed Sep 30 01:02:03.621410 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.621653 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.655587 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz67yZ9IcLq1oV6peqtAAAAFY"]
[Wed Sep 30 01:02:03.658418 2026] [security2:error] [pid 212454:tid 212673] [client 20.214.109.68:11043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/sa.php7"] [unique_id "aryz67yZ9IcLq1oV6peqtQAAAFk"]
[Wed Sep 30 01:02:03.688412 2026] [security2:error] [pid 212454:tid 212584] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqtgAAAAA"]
[Wed Sep 30 01:02:03.718477 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.718924 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.726368 2026] [security2:error] [pid 212454:tid 212667] [client 4.185.40.215:1320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/amp.php"] [unique_id "aryz67yZ9IcLq1oV6pequQAAAFM"]
[Wed Sep 30 01:02:03.739240 2026] [security2:error] [pid 212454:tid 212639] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz67yZ9IcLq1oV6pequgAAADc"]
[Wed Sep 30 01:02:03.805375 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.805636 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.812378 2026] [security2:error] [pid 212454:tid 212647] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peqxgAAAD8"]
[Wed Sep 30 01:02:03.844905 2026] [security2:error] [pid 212454:tid 212621] [client 20.214.151.17:48900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aryz67yZ9IcLq1oV6peqyQAAACU"]
[Wed Sep 30 01:02:03.880870 2026] [security2:error] [pid 212454:tid 212588] [client 20.194.5.96:61778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doctoraclown.org"] [uri "/go.php"] [unique_id "aryz67yZ9IcLq1oV6peq0AAAAAQ"]
[Wed Sep 30 01:02:03.881375 2026] [security2:error] [pid 212454:tid 212598] [client 103.168.67.253:30920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz67yZ9IcLq1oV6peq0QAAAA4"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:03.899902 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.900363 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:03.937843 2026] [security2:error] [pid 212454:tid 212595] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz67yZ9IcLq1oV6peq2AAAAAs"]
[Wed Sep 30 01:02:03.986794 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:03.987091 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.032423 2026] [security2:error] [pid 212454:tid 212662] [client 4.185.40.215:1326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/abrand.php"] [unique_id "aryz7LyZ9IcLq1oV6peq2wAAAE4"]
[Wed Sep 30 01:02:04.062892 2026] [security2:error] [pid 212454:tid 212660] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6peq3AAAAEw"]
[Wed Sep 30 01:02:04.080165 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.080601 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.080686 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:04.080938 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:04.105197 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:47140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aryz7LyZ9IcLq1oV6peq3wAAAHg"]
[Wed Sep 30 01:02:04.167709 2026] [security2:error] [pid 212454:tid 212608] [client 20.219.2.60:18874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tx78.php"] [unique_id "aryz7LyZ9IcLq1oV6peq4gAAABg"]
[Wed Sep 30 01:02:04.168364 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.168620 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.187698 2026] [security2:error] [pid 212454:tid 212686] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6peq4wAAAGY"]
[Wed Sep 30 01:02:04.216960 2026] [security2:error] [pid 212454:tid 212525] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz7LyZ9IcLq1oV6peq5AAAB0Y"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=267212&sid=ceaee1662c436e294114b13de5533747
[Wed Sep 30 01:02:04.217007 2026] [security2:error] [pid 212454:tid 212525] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz7LyZ9IcLq1oV6peq5AAAB0Y"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=267212&sid=ceaee1662c436e294114b13de5533747
[Wed Sep 30 01:02:04.257389 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.257639 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.312055 2026] [security2:error] [pid 212454:tid 212644] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6peq6gAAADw"]
[Wed Sep 30 01:02:04.327346 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz7LyZ9IcLq1oV6peq6wAAAFM"]
[Wed Sep 30 01:02:04.341546 2026] [security2:error] [pid 212454:tid 212671] [client 4.185.40.215:1306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/init.php"] [unique_id "aryz7LyZ9IcLq1oV6peq7gAAAFc"]
[Wed Sep 30 01:02:04.348698 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.348969 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:4363] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.387357 2026] [security2:error] [pid 212454:tid 212596] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz7LyZ9IcLq1oV6peq8QAAAAw"]
[Wed Sep 30 01:02:04.388510 2026] [security2:error] [pid 212454:tid 212627] [client 20.214.151.17:50724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/about/function.php"] [unique_id "aryz7LyZ9IcLq1oV6peq9AAAACs"]
[Wed Sep 30 01:02:04.398279 2026] [security2:error] [pid 212454:tid 212650] [client 103.241.204.139:64827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz7LyZ9IcLq1oV6peq9gAAAEI"]
[Wed Sep 30 01:02:04.398366 2026] [security2:error] [pid 212454:tid 212650] [client 103.241.204.139:64827] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz7LyZ9IcLq1oV6peq9gAAAEI"]
[Wed Sep 30 01:02:04.410761 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.109.68:11214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/jp.php"] [unique_id "aryz7LyZ9IcLq1oV6peq9wAAAFA"]
[Wed Sep 30 01:02:04.433644 2026] [security2:error] [pid 212454:tid 212629] [client 216.73.216.46:4363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6peq-QAAAC0"]
[Wed Sep 30 01:02:04.441219 2026] [security2:error] [pid 212454:tid 212692] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6peq-gAAAGw"]
[Wed Sep 30 01:02:04.530937 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.531203 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.566377 2026] [security2:error] [pid 212454:tid 212700] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6perCAAAAHQ"]
[Wed Sep 30 01:02:04.572788 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:02:04.573070 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:02:04.615860 2026] [security2:error] [pid 212454:tid 212622] [client 20.70.173.30:59971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/c.php"] [unique_id "aryz7LyZ9IcLq1oV6perDAAAACY"]
[Wed Sep 30 01:02:04.623507 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.623771 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.642231 2026] [security2:error] [pid 212454:tid 212658] [client 45.138.12.32:35812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.axa.fme.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz7LyZ9IcLq1oV6perEQAAAEo"]
[Wed Sep 30 01:02:04.647439 2026] [security2:error] [pid 212454:tid 212616] [client 20.214.151.17:54110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aryz7LyZ9IcLq1oV6perEgAAACA"]
[Wed Sep 30 01:02:04.648411 2026] [security2:error] [pid 212454:tid 212606] [client 4.185.40.215:12278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gettest.php"] [unique_id "aryz7LyZ9IcLq1oV6perEwAAABY"]
[Wed Sep 30 01:02:04.691356 2026] [security2:error] [pid 212454:tid 212653] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6perFQAAAEU"]
[Wed Sep 30 01:02:04.707905 2026] [security2:error] [pid 212454:tid 212659] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz7LyZ9IcLq1oV6perFgAAAEs"]
[Wed Sep 30 01:02:04.716180 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.716457 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.716741 2026] [security2:error] [pid 212454:tid 212593] [client 152.59.169.65:50936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz7LyZ9IcLq1oV6perGAAAAAk"]
[Wed Sep 30 01:02:04.716850 2026] [security2:error] [pid 212454:tid 212593] [client 152.59.169.65:50936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz7LyZ9IcLq1oV6perGAAAAAk"]
[Wed Sep 30 01:02:04.778039 2026] [security2:error] [pid 212454:tid 212711] [client 103.168.67.253:30936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz7LyZ9IcLq1oV6perGgAAAH8"]
[Wed Sep 30 01:02:04.804651 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.804913 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.821526 2026] [security2:error] [pid 212454:tid 212710] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6perHwAAAH4"]
[Wed Sep 30 01:02:04.831814 2026] [security2:error] [pid 212454:tid 212707] [client 45.3.55.85:44319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.55.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yourkatana.com"] [uri "/wp-login.php"] [unique_id "aryz7LyZ9IcLq1oV6perHgAAAHs"], referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:04.897109 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.897361 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:04.925860 2026] [security2:error] [pid 212454:tid 212689] [client 20.214.151.17:36024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/admin/function.php"] [unique_id "aryz7LyZ9IcLq1oV6perKAAAAGk"]
[Wed Sep 30 01:02:04.946257 2026] [security2:error] [pid 212454:tid 212613] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7LyZ9IcLq1oV6perKQAAAB0"]
[Wed Sep 30 01:02:04.957937 2026] [security2:error] [pid 212454:tid 212615] [client 20.194.96.176:1292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/alfa.php"] [unique_id "aryz7LyZ9IcLq1oV6perKgAAAB8"]
[Wed Sep 30 01:02:04.967592 2026] [security2:error] [pid 212454:tid 212586] [client 4.185.40.215:12205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/myfile.php"] [unique_id "aryz7LyZ9IcLq1oV6perKwAAAAI"]
[Wed Sep 30 01:02:04.993501 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:04.993931 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.071371 2026] [security2:error] [pid 212454:tid 212650] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perMAAAAEI"]
[Wed Sep 30 01:02:05.080521 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.080790 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.134064 2026] [access_compat:error] [pid 212454:tid 212692] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:05.134326 2026] [access_compat:error] [pid 212454:tid 212692] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:05.170789 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.171068 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.194348 2026] [security2:error] [pid 212454:tid 212693] [client 20.214.109.68:11098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-good.php"] [unique_id "aryz7byZ9IcLq1oV6perPQAAAG0"]
[Wed Sep 30 01:02:05.194831 2026] [security2:error] [pid 212454:tid 212609] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perPgAAABk"]
[Wed Sep 30 01:02:05.202353 2026] [security2:error] [pid 212454:tid 212588] [client 20.214.151.17:36013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aryz7byZ9IcLq1oV6perQgAAAAQ"]
[Wed Sep 30 01:02:05.264552 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.264836 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:61272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.269558 2026] [security2:error] [pid 212454:tid 212708] [client 4.185.40.215:12251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/sid3.php"] [unique_id "aryz7byZ9IcLq1oV6perRQAAAHw"]
[Wed Sep 30 01:02:05.309942 2026] [security2:error] [pid 212454:tid 212660] [client 223.181.60.167:24421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz7byZ9IcLq1oV6perRwAAAEw"]
[Wed Sep 30 01:02:05.310224 2026] [security2:error] [pid 212454:tid 212660] [client 223.181.60.167:24421] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz7byZ9IcLq1oV6perRwAAAEw"]
[Wed Sep 30 01:02:05.319345 2026] [security2:error] [pid 212454:tid 212605] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perSAAAABU"]
[Wed Sep 30 01:02:05.346663 2026] [security2:error] [pid 212454:tid 212594] [client 216.73.216.46:61272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perSQAAAAo"]
[Wed Sep 30 01:02:05.443988 2026] [security2:error] [pid 212454:tid 212702] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perTQAAAHY"]
[Wed Sep 30 01:02:05.465523 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.465786 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:14212] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.470370 2026] [security2:error] [pid 212454:tid 212640] [client 20.214.151.17:35002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aryz7byZ9IcLq1oV6perUwAAADg"]
[Wed Sep 30 01:02:05.535759 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.536057 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.569939 2026] [security2:error] [pid 212454:tid 212601] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perWQAAABE"]
[Wed Sep 30 01:02:05.570530 2026] [security2:error] [pid 212454:tid 212614] [client 4.185.40.215:12230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/666.php"] [unique_id "aryz7byZ9IcLq1oV6perWgAAAB4"]
[Wed Sep 30 01:02:05.612828 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:02:05.613100 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:02:05.627852 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.628142 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.652051 2026] [security2:error] [pid 212454:tid 212657] [client 216.73.216.46:14212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz7byZ9IcLq1oV6perXwAAAEk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9kZXYvY2hhci8yMTo0
[Wed Sep 30 01:02:05.665201 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz7byZ9IcLq1oV6perYgAAACY"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:05.690665 2026] [security2:error] [pid 212454:tid 212591] [client 20.214.109.68:11223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/a5.php"] [unique_id "aryz7byZ9IcLq1oV6perYwAAAAc"]
[Wed Sep 30 01:02:05.693947 2026] [security2:error] [pid 212454:tid 212625] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perZAAAACk"]
[Wed Sep 30 01:02:05.717281 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.717535 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.740189 2026] [security2:error] [pid 212454:tid 212668] [client 172.232.180.134:65125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "aryz7byZ9IcLq1oV6perZgAAAFQ"]
[Wed Sep 30 01:02:05.743802 2026] [security2:error] [pid 212454:tid 212632] [client 20.214.151.17:52644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/wp-content/radio.php"] [unique_id "aryz7byZ9IcLq1oV6perZwAAADA"]
[Wed Sep 30 01:02:05.752927 2026] [security2:error] [pid 212454:tid 212673] [client 20.194.96.176:52230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/uploaxa1.php"] [unique_id "aryz7byZ9IcLq1oV6peraAAAAFk"]
[Wed Sep 30 01:02:05.775780 2026] [security2:error] [pid 212454:tid 212608] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz7byZ9IcLq1oV6peraQAAABg"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:05.808446 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.810534 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.818689 2026] [security2:error] [pid 212454:tid 212586] [client 138.3.211.255:61197] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7byZ9IcLq1oV6perawAAAAI"]
[Wed Sep 30 01:02:05.826079 2026] [security2:error] [pid 212454:tid 212639] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz7byZ9IcLq1oV6perbAAAADc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:05.873338 2026] [security2:error] [pid 212454:tid 212627] [client 4.185.40.215:12263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/xxw.php"] [unique_id "aryz7byZ9IcLq1oV6percAAAACs"]
[Wed Sep 30 01:02:05.900042 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.900306 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:05.923132 2026] [security2:error] [pid 212454:tid 212603] [client 122.173.27.10:14328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz7byZ9IcLq1oV6percwAAABM"]
[Wed Sep 30 01:02:05.923274 2026] [security2:error] [pid 212454:tid 212603] [client 122.173.27.10:14328] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz7byZ9IcLq1oV6percwAAABM"]
[Wed Sep 30 01:02:05.961880 2026] [security2:error] [pid 212454:tid 212588] [client 186.19.123.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/power-products/stabilizers/"] [unique_id "aryz7byZ9IcLq1oV6perdgAAAAQ"]
[Wed Sep 30 01:02:05.990070 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:05.990329 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.012922 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.151.17:54105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aryz7ryZ9IcLq1oV6peregAAAGM"]
[Wed Sep 30 01:02:06.081931 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.082252 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.139066 2026] [security2:error] [pid 212454:tid 212626] [client 4.196.65.241:27309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/xmini4.php"] [unique_id "aryz7ryZ9IcLq1oV6pergAAAACo"]
[Wed Sep 30 01:02:06.171781 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.172064 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.174093 2026] [security2:error] [pid 212454:tid 212594] [client 4.185.40.215:12204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-png.php"] [unique_id "aryz7ryZ9IcLq1oV6perhAAAAAo"]
[Wed Sep 30 01:02:06.176752 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:02:06.177023 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:02:06.196862 2026] [security2:error] [pid 212454:tid 212642] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6periAAAADo"]
[Wed Sep 30 01:02:06.234454 2026] [security2:error] [pid 212454:tid 212687] [client 4.196.65.241:19075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/calmjpss.php"] [unique_id "aryz7ryZ9IcLq1oV6periwAAAGc"]
[Wed Sep 30 01:02:06.263149 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.263405 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.279619 2026] [security2:error] [pid 212454:tid 212624] [client 20.214.151.17:35969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/.well-known/log.php"] [unique_id "aryz7ryZ9IcLq1oV6perjQAAACg"]
[Wed Sep 30 01:02:06.303112 2026] [security2:error] [pid 212454:tid 212670] [client 103.172.210.103:52668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz7ryZ9IcLq1oV6perjgAAAFY"]
[Wed Sep 30 01:02:06.303224 2026] [security2:error] [pid 212454:tid 212670] [client 103.172.210.103:52668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz7ryZ9IcLq1oV6perjgAAAFY"]
[Wed Sep 30 01:02:06.321891 2026] [core:error] [pid 212454:tid 212649] [client 65.111.26.118:60935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:06.321914 2026] [core:error] [pid 212454:tid 212649] [client 65.111.26.118:60935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:06.361598 2026] [security2:error] [pid 212454:tid 212641] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6perkQAAADk"]
[Wed Sep 30 01:02:06.407548 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.407791 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.452455 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.452906 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.455073 2026] [security2:error] [pid 212454:tid 212710] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz7ryZ9IcLq1oV6permQAAAH4"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:06.474373 2026] [security2:error] [pid 212454:tid 212672] [client 4.185.40.215:12244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/222.php"] [unique_id "aryz7ryZ9IcLq1oV6permgAAAFg"]
[Wed Sep 30 01:02:06.477451 2026] [security2:error] [pid 212454:tid 212678] [client 20.214.109.68:11199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/amp.php"] [unique_id "aryz7ryZ9IcLq1oV6permwAAAF4"]
[Wed Sep 30 01:02:06.486989 2026] [security2:error] [pid 212454:tid 212612] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6pernAAAABw"]
[Wed Sep 30 01:02:06.502434 2026] [security2:error] [pid 212454:tid 212646] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz7ryZ9IcLq1oV6pernQAAAD4"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:06.538758 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.539034 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.560738 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.151.17:54080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/class.php"] [unique_id "aryz7ryZ9IcLq1oV6peroAAAAAM"]
[Wed Sep 30 01:02:06.610916 2026] [security2:error] [pid 212454:tid 212704] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6perowAAAHg"]
[Wed Sep 30 01:02:06.628654 2026] [security2:error] [pid 212454:tid 212644] [client 103.168.67.253:30950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz7ryZ9IcLq1oV6perpQAAADw"]
[Wed Sep 30 01:02:06.632505 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.632759 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:23496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.637188 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL3Zhcg==
[Wed Sep 30 01:02:06.637458 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL3Zhcg==
[Wed Sep 30 01:02:06.722210 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:06.722498 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:10143] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:06.735512 2026] [security2:error] [pid 212454:tid 212603] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6pertAAAABM"]
[Wed Sep 30 01:02:06.755309 2026] [security2:error] [pid 212454:tid 212662] [client 45.156.62.96:54888] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryz7ryZ9IcLq1oV6perrgAAAE4"]
[Wed Sep 30 01:02:06.755431 2026] [security2:error] [pid 212454:tid 212662] [client 45.156.62.96:54888] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "checkboxdev.com"] [uri "/xmlrpc.php"] [unique_id "aryz7ryZ9IcLq1oV6perrgAAAE4"]
[Wed Sep 30 01:02:06.786018 2026] [security2:error] [pid 212454:tid 212609] [client 4.185.40.215:12233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-blog.php"] [unique_id "aryz7ryZ9IcLq1oV6peruQAAABk"]
[Wed Sep 30 01:02:06.820198 2026] [security2:error] [pid 212454:tid 212588] [client 216.73.216.46:23496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz7ryZ9IcLq1oV6perugAAAAQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9zaGFyZS9wZXJsNS9NYXRo
[Wed Sep 30 01:02:06.823572 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.151.17:54131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/lock360.php"] [unique_id "aryz7ryZ9IcLq1oV6peruwAAAAg"]
[Wed Sep 30 01:02:06.860751 2026] [security2:error] [pid 212454:tid 212671] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6pervAAAAFc"]
[Wed Sep 30 01:02:06.985585 2026] [security2:error] [pid 212454:tid 212599] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz7ryZ9IcLq1oV6perxgAAAA8"]
[Wed Sep 30 01:02:07.034455 2026] [security2:error] [pid 212454:tid 212631] [client 155.190.6.18:54168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6peryAAAAC8"]
[Wed Sep 30 01:02:07.037490 2026] [security2:error] [pid 212454:tid 212597] [client 20.214.109.68:11058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/abrand.php"] [unique_id "aryz77yZ9IcLq1oV6perygAAAA0"]
[Wed Sep 30 01:02:07.038604 2026] [security2:error] [pid 212454:tid 212687] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz77yZ9IcLq1oV6peryQAAAGc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:07.063116 2026] [security2:error] [pid 212454:tid 212680] [client 103.98.152.152:34830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.152.98.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "aryz77yZ9IcLq1oV6perzAAAAGA"], referer: http://clenbuterol4sale.com/wp-login.php
[Wed Sep 30 01:02:07.082756 2026] [security2:error] [pid 212454:tid 212694] [client 4.185.40.215:1329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryz77yZ9IcLq1oV6per1AAAAG4"]
[Wed Sep 30 01:02:07.084039 2026] [security2:error] [pid 212454:tid 212629] [client 20.214.151.17:36027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harmonicaworkshop.com"] [uri "/system_log.php"] [unique_id "aryz77yZ9IcLq1oV6per1gAAAC0"]
[Wed Sep 30 01:02:07.093220 2026] [security2:error] [pid 212454:tid 212617] [client 20.194.96.176:65057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/w.php"] [unique_id "aryz77yZ9IcLq1oV6per2QAAACE"]
[Wed Sep 30 01:02:07.093607 2026] [security2:error] [pid 212454:tid 212696] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz77yZ9IcLq1oV6per1wAAAHA"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:07.109863 2026] [security2:error] [pid 212454:tid 212630] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per2gAAAC4"]
[Wed Sep 30 01:02:07.177056 2026] [security2:error] [pid 212454:tid 212589] [client 223.235.102.107:23124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6per2wAAAAU"]
[Wed Sep 30 01:02:07.177221 2026] [security2:error] [pid 212454:tid 212589] [client 223.235.102.107:23124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6per2wAAAAU"]
[Wed Sep 30 01:02:07.193962 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:02:07.194232 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:02:07.234354 2026] [security2:error] [pid 212454:tid 212698] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per3gAAAHI"]
[Wed Sep 30 01:02:07.262901 2026] [security2:error] [pid 212454:tid 212587] [client 20.194.96.176:37997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/uploartg.php"] [unique_id "aryz77yZ9IcLq1oV6per4QAAAAM"]
[Wed Sep 30 01:02:07.276057 2026] [core:error] [pid 212454:tid 212690] [client 45.3.33.137:59315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:07.276078 2026] [core:error] [pid 212454:tid 212690] [client 45.3.33.137:59315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:07.306409 2026] [security2:error] [pid 212454:tid 212631] [client 155.190.6.18:54168] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6peryAAAAC8"]
[Wed Sep 30 01:02:07.359142 2026] [security2:error] [pid 212454:tid 212668] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per4wAAAFQ"]
[Wed Sep 30 01:02:07.395456 2026] [security2:error] [pid 212454:tid 212608] [client 4.185.40.215:12249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/lib.php"] [unique_id "aryz77yZ9IcLq1oV6per5gAAABg"]
[Wed Sep 30 01:02:07.407870 2026] [security2:error] [pid 212454:tid 212628] [client 20.219.2.60:18860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws80.php"] [unique_id "aryz77yZ9IcLq1oV6per5wAAACw"]
[Wed Sep 30 01:02:07.439371 2026] [security2:error] [pid 212454:tid 212650] [client 216.73.216.46:10143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per6wAAAEI"]
[Wed Sep 30 01:02:07.484104 2026] [security2:error] [pid 212454:tid 212692] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per7AAAAGw"]
[Wed Sep 30 01:02:07.498067 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.498332 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.592899 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.593165 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.595690 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.595987 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.608406 2026] [security2:error] [pid 212454:tid 212683] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6per-gAAAGM"]
[Wed Sep 30 01:02:07.616318 2026] [security2:error] [pid 212454:tid 212641] [client 116.193.128.26:59622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6per_QAAADk"]
[Wed Sep 30 01:02:07.616405 2026] [security2:error] [pid 212454:tid 212641] [client 116.193.128.26:59622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6per_QAAADk"]
[Wed Sep 30 01:02:07.635611 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:07.635889 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:07.682514 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.682777 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.684157 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.684457 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.700868 2026] [security2:error] [pid 212454:tid 212634] [client 4.185.40.215:12129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/edit.php"] [unique_id "aryz77yZ9IcLq1oV6pesBQAAADI"]
[Wed Sep 30 01:02:07.703839 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.704251 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.705134 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.705547 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.732756 2026] [security2:error] [pid 212454:tid 212702] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6pesCgAAAHY"]
[Wed Sep 30 01:02:07.740128 2026] [security2:error] [pid 212454:tid 212646] [client 152.59.165.7:65533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6pesCwAAAD4"]
[Wed Sep 30 01:02:07.740275 2026] [security2:error] [pid 212454:tid 212646] [client 152.59.165.7:65533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6pesCwAAAD4"]
[Wed Sep 30 01:02:07.764315 2026] [security2:error] [pid 212454:tid 212635] [client 202.179.95.79:62344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6pesDQAAADM"]
[Wed Sep 30 01:02:07.764411 2026] [security2:error] [pid 212454:tid 212635] [client 202.179.95.79:62344] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz77yZ9IcLq1oV6pesDQAAADM"]
[Wed Sep 30 01:02:07.775235 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.775499 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.778876 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.779157 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.787531 2026] [security2:error] [pid 212454:tid 212657] [client 20.194.96.176:22121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "aryz77yZ9IcLq1oV6pesEgAAAEk"]
[Wed Sep 30 01:02:07.791778 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:48861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.792043 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:48861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.813847 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.814125 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.820371 2026] [security2:error] [pid 212454:tid 212600] [client 74.7.244.27:56056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.vjv.vpu.mybluehost.me"] [uri "/robots.txt"] [unique_id "aryz77yZ9IcLq1oV6pesFQAAEGI"]
[Wed Sep 30 01:02:07.857647 2026] [security2:error] [pid 212454:tid 212678] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6pesHAAAAF4"]
[Wed Sep 30 01:02:07.894602 2026] [autoindex:error] [pid 212454:tid 212545] [remote 74.7.241.57:50252] AH01276: Cannot serve directory /home4/vjvvpumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:07.907930 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:07.908373 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:55779] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:07.959259 2026] [security2:error] [pid 212454:tid 212627] [client 82.102.18.222:44018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryz77yZ9IcLq1oV6pesJQAAACs"]
[Wed Sep 30 01:02:07.981889 2026] [security2:error] [pid 212454:tid 212613] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6pesKAAAAB0"]
[Wed Sep 30 01:02:07.988671 2026] [security2:error] [pid 212454:tid 212664] [client 216.73.216.46:55779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz77yZ9IcLq1oV6pesKQAAAFA"]
[Wed Sep 30 01:02:08.004062 2026] [security2:error] [pid 212454:tid 212692] [client 4.185.40.215:1337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ioxi-o.php"] [unique_id "aryz8LyZ9IcLq1oV6pesKgAAAGw"]
[Wed Sep 30 01:02:08.012971 2026] [security2:error] [pid 212454:tid 212633] [client 116.72.182.19:62271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesKwAAADE"]
[Wed Sep 30 01:02:08.013110 2026] [security2:error] [pid 212454:tid 212633] [client 116.72.182.19:62271] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesKwAAADE"]
[Wed Sep 30 01:02:08.086337 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.086611 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.107166 2026] [security2:error] [pid 212454:tid 212618] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesMAAAACI"]
[Wed Sep 30 01:02:08.143293 2026] [security2:error] [pid 212454:tid 212590] [client 203.122.45.246:58833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesNAAAAAY"]
[Wed Sep 30 01:02:08.143435 2026] [security2:error] [pid 212454:tid 212590] [client 203.122.45.246:58833] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesNAAAAAY"]
[Wed Sep 30 01:02:08.147586 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:02:08.148027 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:02:08.150519 2026] [security2:error] [pid 212454:tid 212666] [client 20.70.173.30:59539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/adminan.php"] [unique_id "aryz8LyZ9IcLq1oV6pesNQAAAFI"]
[Wed Sep 30 01:02:08.177073 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.177333 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.225546 2026] [security2:error] [pid 212454:tid 212695] [client 103.159.192.142:60959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesOgAAAG8"]
[Wed Sep 30 01:02:08.225668 2026] [security2:error] [pid 212454:tid 212695] [client 103.159.192.142:60959] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesOgAAAG8"]
[Wed Sep 30 01:02:08.231311 2026] [security2:error] [pid 212454:tid 212700] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesOwAAAHQ"]
[Wed Sep 30 01:02:08.268670 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:48861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.268956 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:48861] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.299993 2026] [security2:error] [pid 212454:tid 212640] [client 82.102.18.222:44030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.muranoaviacion.com"] [uri "/xmlrpc.php"] [unique_id "aryz8LyZ9IcLq1oV6pesRAAAADg"]
[Wed Sep 30 01:02:08.311933 2026] [security2:error] [pid 212454:tid 212687] [client 4.185.40.215:1315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ajax.php"] [unique_id "aryz8LyZ9IcLq1oV6pesRQAAAGc"]
[Wed Sep 30 01:02:08.356070 2026] [security2:error] [pid 212454:tid 212660] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesSwAAAEw"]
[Wed Sep 30 01:02:08.361802 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.362254 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.370708 2026] [security2:error] [pid 212454:tid 212707] [client 20.194.96.176:38002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/bgbagbcw.php"] [unique_id "aryz8LyZ9IcLq1oV6pesTAAAAHs"]
[Wed Sep 30 01:02:08.387261 2026] [security2:error] [pid 212454:tid 212657] [client 74.7.242.1:35550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "aryz8LyZ9IcLq1oV6pesUAAAAEk"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:02:08.407131 2026] [security2:error] [pid 212454:tid 212711] [client 4.196.65.241:19157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ilex.php"] [unique_id "aryz8LyZ9IcLq1oV6pesUQAAAH8"]
[Wed Sep 30 01:02:08.412899 2026] [security2:error] [pid 212454:tid 212607] [client 4.240.25.22:8498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/admin.php"] [unique_id "aryz8LyZ9IcLq1oV6pesUgAAABc"]
[Wed Sep 30 01:02:08.480411 2026] [security2:error] [pid 212454:tid 212698] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesWAAAAHI"]
[Wed Sep 30 01:02:08.494595 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.494852 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.526730 2026] [security2:error] [pid 212454:tid 212595] [client 20.198.74.230:23899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ho.php"] [unique_id "aryz8LyZ9IcLq1oV6pesXQAAAAs"]
[Wed Sep 30 01:02:08.540628 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.540924 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.605397 2026] [security2:error] [pid 212454:tid 212627] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesYwAAACs"]
[Wed Sep 30 01:02:08.613267 2026] [security2:error] [pid 212454:tid 212613] [client 4.185.40.215:12196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/install.php"] [unique_id "aryz8LyZ9IcLq1oV6pesZAAAAB0"]
[Wed Sep 30 01:02:08.631749 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.632058 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.658017 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:02:08.658290 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:02:08.659123 2026] [core:error] [pid 212454:tid 212708] [client 104.207.51.4:51091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:08.659137 2026] [core:error] [pid 212454:tid 212708] [client 104.207.51.4:51091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:08.723128 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.723370 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.730456 2026] [security2:error] [pid 212454:tid 212699] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesbQAAAHM"]
[Wed Sep 30 01:02:08.814414 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.814676 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.855527 2026] [security2:error] [pid 212454:tid 212683] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pescQAAAGM"]
[Wed Sep 30 01:02:08.876075 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDI2L2RldmljZQ%3D%3D
[Wed Sep 30 01:02:08.876349 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDI2L2RldmljZQ%3D%3D
[Wed Sep 30 01:02:08.877289 2026] [security2:error] [pid 212454:tid 212700] [client 20.214.109.68:11075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/init.php"] [unique_id "aryz8LyZ9IcLq1oV6pesdAAAAHQ"]
[Wed Sep 30 01:02:08.904508 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.904941 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:08.913289 2026] [security2:error] [pid 212454:tid 212701] [client 4.185.40.215:12225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/public/wp-blog.php"] [unique_id "aryz8LyZ9IcLq1oV6peseQAAAHU"]
[Wed Sep 30 01:02:08.985960 2026] [security2:error] [pid 212454:tid 212688] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8LyZ9IcLq1oV6pesfgAAAGg"]
[Wed Sep 30 01:02:08.995535 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:08.995815 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.021666 2026] [security2:error] [pid 212454:tid 212679] [client 82.102.18.222:44040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryz8byZ9IcLq1oV6pesgAAAAF8"]
[Wed Sep 30 01:02:09.087871 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.088148 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.110691 2026] [security2:error] [pid 212454:tid 212657] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6peshwAAAEk"]
[Wed Sep 30 01:02:09.146667 2026] [access_compat:error] [pid 212454:tid 212709] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:09.146948 2026] [access_compat:error] [pid 212454:tid 212709] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:09.171625 2026] [security2:error] [pid 212454:tid 212600] [client 20.219.2.60:19418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/jga.php"] [unique_id "aryz8byZ9IcLq1oV6pesjgAAABA"]
[Wed Sep 30 01:02:09.177642 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.178406 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:12781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.184781 2026] [security2:error] [pid 212454:tid 212704] [client 106.214.2.47:6976] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz8byZ9IcLq1oV6pesigAAAHg"]
[Wed Sep 30 01:02:09.184893 2026] [security2:error] [pid 212454:tid 212704] [client 106.214.2.47:6976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz8byZ9IcLq1oV6pesigAAAHg"]
[Wed Sep 30 01:02:09.209723 2026] [security2:error] [pid 212454:tid 212614] [client 4.185.40.215:12206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/nw.php"] [unique_id "aryz8byZ9IcLq1oV6peskQAAAB4"]
[Wed Sep 30 01:02:09.235791 2026] [security2:error] [pid 212454:tid 212617] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6peslAAAACE"]
[Wed Sep 30 01:02:09.262966 2026] [security2:error] [pid 212454:tid 212677] [client 216.73.216.46:12781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6peslQAAAF0"]
[Wed Sep 30 01:02:09.309605 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.109.68:11203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gettest.php"] [unique_id "aryz8byZ9IcLq1oV6peslwAAAFg"]
[Wed Sep 30 01:02:09.340961 2026] [security2:error] [pid 212454:tid 212595] [client 82.102.18.222:44044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryz8byZ9IcLq1oV6pesmAAAAAs"]
[Wed Sep 30 01:02:09.360538 2026] [security2:error] [pid 212454:tid 212705] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pesmgAAAHk"]
[Wed Sep 30 01:02:09.361071 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.361336 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.376601 2026] [security2:error] [pid 212454:tid 212644] [client 116.197.133.25:59192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz8byZ9IcLq1oV6pesmwAAADw"]
[Wed Sep 30 01:02:09.376756 2026] [security2:error] [pid 212454:tid 212644] [client 116.197.133.25:59192] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz8byZ9IcLq1oV6pesmwAAADw"]
[Wed Sep 30 01:02:09.456717 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.457048 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.485918 2026] [security2:error] [pid 212454:tid 212608] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pespQAAABg"]
[Wed Sep 30 01:02:09.509405 2026] [security2:error] [pid 212454:tid 212674] [client 4.185.40.215:12194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tool.php"] [unique_id "aryz8byZ9IcLq1oV6pespwAAAFo"]
[Wed Sep 30 01:02:09.510426 2026] [security2:error] [pid 212454:tid 212603] [client 103.98.152.152:34838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.152.98.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "aryz8byZ9IcLq1oV6pesqQAAABM"], referer: http://clenbuterol4sale.com/wp-login.php
[Wed Sep 30 01:02:09.547388 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.547650 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.612015 2026] [security2:error] [pid 212454:tid 212701] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pessgAAAHU"]
[Wed Sep 30 01:02:09.639122 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.639383 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:23035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.654198 2026] [security2:error] [pid 212454:tid 212671] [client 82.102.18.222:44060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aryz8byZ9IcLq1oV6pestgAAAFc"]
[Wed Sep 30 01:02:09.655313 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:02:09.655671 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:02:09.667185 2026] [security2:error] [pid 212454:tid 212687] [client 20.214.109.68:11014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/myfile.php"] [unique_id "aryz8byZ9IcLq1oV6pesuAAAAGc"]
[Wed Sep 30 01:02:09.723215 2026] [security2:error] [pid 212454:tid 212660] [client 216.73.216.46:23035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pesuwAAAEw"]
[Wed Sep 30 01:02:09.736741 2026] [security2:error] [pid 212454:tid 212641] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pesvgAAADk"]
[Wed Sep 30 01:02:09.811147 2026] [security2:error] [pid 212454:tid 212589] [client 4.185.40.215:1384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/drhunthq.php"] [unique_id "aryz8byZ9IcLq1oV6pesxwAAAAU"]
[Wed Sep 30 01:02:09.813787 2026] [security2:error] [pid 212454:tid 212588] [client 216.73.216.46:48861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pesyQAAAAQ"]
[Wed Sep 30 01:02:09.862588 2026] [security2:error] [pid 212454:tid 212612] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6peszAAAABw"]
[Wed Sep 30 01:02:09.914702 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:09.915263 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:09.919675 2026] [security2:error] [pid 212454:tid 212597] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz8byZ9IcLq1oV6pes0AAAAA0"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:09.966271 2026] [security2:error] [pid 212454:tid 212630] [client 82.102.18.222:44064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryz8byZ9IcLq1oV6pes0wAAAC4"]
[Wed Sep 30 01:02:09.987677 2026] [security2:error] [pid 212454:tid 212705] [client 138.3.211.255:52136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/"] [unique_id "aryz8byZ9IcLq1oV6pes1AAAAHk"]
[Wed Sep 30 01:02:10.003882 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.004158 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.018454 2026] [security2:error] [pid 212454:tid 212644] [client 20.194.96.176:50665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/tegubsiu.php"] [unique_id "aryz8ryZ9IcLq1oV6pes1wAAADw"]
[Wed Sep 30 01:02:10.041657 2026] [security2:error] [pid 212454:tid 212692] [client 20.194.96.176:22090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/robot.php"] [unique_id "aryz8ryZ9IcLq1oV6pes2AAAAGw"]
[Wed Sep 30 01:02:10.053273 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.109.68:11202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/sid3.php"] [unique_id "aryz8ryZ9IcLq1oV6pes2QAAABE"]
[Wed Sep 30 01:02:10.094586 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.094859 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.111915 2026] [security2:error] [pid 212454:tid 212591] [client 4.185.40.215:12186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/admin/index.php"] [unique_id "aryz8ryZ9IcLq1oV6pes3wAAAAc"]
[Wed Sep 30 01:02:10.152160 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:10.152432 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:10.187186 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.187469 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.220050 2026] [security2:error] [pid 212454:tid 212675] [client 172.232.180.134:63080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/fivkdwzf.php"] [unique_id "aryz8ryZ9IcLq1oV6pes5wAAAFs"], referer: www.google.com
[Wed Sep 30 01:02:10.248222 2026] [security2:error] [pid 212454:tid 212634] [client 49.205.105.16:13716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes6QAAADI"]
[Wed Sep 30 01:02:10.248349 2026] [security2:error] [pid 212454:tid 212634] [client 49.205.105.16:13716] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes6QAAADI"]
[Wed Sep 30 01:02:10.277388 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.277645 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.295147 2026] [security2:error] [pid 212454:tid 212613] [client 82.102.18.222:44068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryz8ryZ9IcLq1oV6pes7AAAAB0"]
[Wed Sep 30 01:02:10.344909 2026] [security2:error] [pid 212454:tid 212615] [client 20.219.2.60:19440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/fs.php"] [unique_id "aryz8ryZ9IcLq1oV6pes7QAAAB8"]
[Wed Sep 30 01:02:10.367606 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.367887 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.396884 2026] [security2:error] [pid 212454:tid 212679] [client 49.43.163.212:56738] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes9AAAAF8"]
[Wed Sep 30 01:02:10.397046 2026] [security2:error] [pid 212454:tid 212679] [client 49.43.163.212:56738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes9AAAAF8"]
[Wed Sep 30 01:02:10.411815 2026] [security2:error] [pid 212454:tid 212690] [client 4.185.40.215:12266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tfm.php"] [unique_id "aryz8ryZ9IcLq1oV6pes9gAAAGo"]
[Wed Sep 30 01:02:10.452072 2026] [security2:error] [pid 212454:tid 212488] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryz8ryZ9IcLq1oV6pes_AAAaSE"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D30807
[Wed Sep 30 01:02:10.452263 2026] [security2:error] [pid 212454:tid 212628] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz8ryZ9IcLq1oV6pes-wAAACw"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:10.458614 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.458916 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.479759 2026] [security2:error] [pid 212454:tid 212688] [client 20.214.109.68:11195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/666.php"] [unique_id "aryz8ryZ9IcLq1oV6pes_gAAAGg"]
[Wed Sep 30 01:02:10.515888 2026] [security2:error] [pid 212454:tid 212686] [client 43.227.131.37:19787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes_wAAAGY"]
[Wed Sep 30 01:02:10.516009 2026] [security2:error] [pid 212454:tid 212686] [client 43.227.131.37:19787] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6pes_wAAAGY"]
[Wed Sep 30 01:02:10.550383 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.550643 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.565004 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:30950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/api/auth/signin"] [unique_id "aryz8ryZ9IcLq1oV6petAQAAAEQ"]
[Wed Sep 30 01:02:10.569623 2026] [security2:error] [pid 212454:tid 212703] [client 103.168.67.253:30962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz8ryZ9IcLq1oV6petAwAAAHc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:10.632284 2026] [security2:error] [pid 212454:tid 212597] [client 82.102.18.222:44080] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryz8ryZ9IcLq1oV6petDAAAAA0"]
[Wed Sep 30 01:02:10.638494 2026] [access_compat:error] [pid 212454:tid 212677] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:02:10.638761 2026] [access_compat:error] [pid 212454:tid 212677] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:02:10.639093 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.639349 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.712962 2026] [security2:error] [pid 212454:tid 212705] [client 4.185.40.215:12269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/a4.php"] [unique_id "aryz8ryZ9IcLq1oV6petFAAAAHk"]
[Wed Sep 30 01:02:10.717868 2026] [security2:error] [pid 212454:tid 212692] [client 45.138.12.40:59844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.pikarthouse.com"] [uri "/wp-links-opml.php"] [unique_id "aryz8ryZ9IcLq1oV6petFgAAAGw"]
[Wed Sep 30 01:02:10.731428 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.731679 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.821697 2026] [security2:error] [pid 212454:tid 212633] [client 84.17.60.251:60996] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aryz8ryZ9IcLq1oV6petHgAAADE"]
[Wed Sep 30 01:02:10.827533 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.827823 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.870788 2026] [security2:error] [pid 212454:tid 212599] [client 168.138.162.25:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "esvarbon.gov.ng"] [uri "/"] [unique_id "aryz8ryZ9IcLq1oV6petJAAAAA8"]
[Wed Sep 30 01:02:10.898659 2026] [security2:error] [pid 212454:tid 212682] [client 4.240.25.22:8491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-login.php"] [unique_id "aryz8ryZ9IcLq1oV6petJwAAAGI"]
[Wed Sep 30 01:02:10.899765 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.109.68:11105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/xxw.php"] [unique_id "aryz8ryZ9IcLq1oV6petKgAAACI"]
[Wed Sep 30 01:02:10.918972 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:10.919247 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:10.947302 2026] [security2:error] [pid 212454:tid 212628] [client 4.196.65.241:64172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/2c88361384index.php"] [unique_id "aryz8ryZ9IcLq1oV6petLQAAACw"]
[Wed Sep 30 01:02:10.958894 2026] [security2:error] [pid 212454:tid 212701] [client 182.75.216.230:50180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6petLgAAAHU"]
[Wed Sep 30 01:02:10.959033 2026] [security2:error] [pid 212454:tid 212701] [client 182.75.216.230:50180] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "aryz8ryZ9IcLq1oV6petLgAAAHU"]
[Wed Sep 30 01:02:10.976458 2026] [security2:error] [pid 212454:tid 212606] [client 82.102.18.222:44090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryz8ryZ9IcLq1oV6petLwAAABY"]
[Wed Sep 30 01:02:10.978266 2026] [ssl:error] [pid 212454:tid 212605] [client 216.25.124.26:63473] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autoconfig.iem.rru.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:02:11.009498 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.009774 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.014350 2026] [security2:error] [pid 212454:tid 212657] [client 4.185.40.215:12181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wen.php"] [unique_id "aryz87yZ9IcLq1oV6petMgAAAEk"]
[Wed Sep 30 01:02:11.038170 2026] [security2:error] [pid 212454:tid 212598] [client 105.112.178.79:38354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.prime-ink.com"] [uri "/.env"] [unique_id "aryz87yZ9IcLq1oV6petMwAAAA4"]
[Wed Sep 30 01:02:11.040765 2026] [security2:error] [pid 212454:tid 212645] [client 20.194.96.176:22103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/sss.php"] [unique_id "aryz87yZ9IcLq1oV6petNAAAAD0"]
[Wed Sep 30 01:02:11.048088 2026] [security2:error] [pid 212454:tid 212672] [client 103.168.67.253:8874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz87yZ9IcLq1oV6petNwAAAFg"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.099430 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.099684 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.101598 2026] [security2:error] [pid 212454:tid 212656] [client 4.240.25.22:11582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/media.php"] [unique_id "aryz87yZ9IcLq1oV6petQgAAAEg"]
[Wed Sep 30 01:02:11.134841 2026] [security2:error] [pid 212454:tid 212617] [client 84.17.60.251:32780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "aryz87yZ9IcLq1oV6petSwAAACE"]
[Wed Sep 30 01:02:11.173622 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=boot&p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:02:11.174073 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=boot&p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:02:11.193569 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.194064 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.204300 2026] [security2:error] [pid 212454:tid 212631] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz87yZ9IcLq1oV6petWQAAAC8"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.272843 2026] [security2:error] [pid 212454:tid 212634] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz87yZ9IcLq1oV6petXAAAADI"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.281863 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.282133 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.296884 2026] [security2:error] [pid 212454:tid 212637] [client 82.102.18.222:44104] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryz87yZ9IcLq1oV6petXwAAADU"]
[Wed Sep 30 01:02:11.313791 2026] [security2:error] [pid 212454:tid 212618] [client 4.185.40.215:12201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ms.php"] [unique_id "aryz87yZ9IcLq1oV6petYQAAACI"]
[Wed Sep 30 01:02:11.323958 2026] [security2:error] [pid 212454:tid 212710] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz87yZ9IcLq1oV6petYgAAAH4"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.371930 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.372197 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.373314 2026] [security2:error] [pid 212454:tid 212628] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz87yZ9IcLq1oV6petaAAAACw"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.446984 2026] [security2:error] [pid 212454:tid 212648] [client 120.48.142.55:5072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.142.48.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryz87yZ9IcLq1oV6petbgAAAEA"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:02:11.468530 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.468967 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.557654 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.558121 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.618784 2026] [security2:error] [pid 212454:tid 212589] [client 4.185.40.215:12264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/hplfuns.php"] [unique_id "aryz87yZ9IcLq1oV6pethQAAAAU"]
[Wed Sep 30 01:02:11.636283 2026] [security2:error] [pid 212454:tid 212597] [client 82.102.18.222:44120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryz87yZ9IcLq1oV6petiAAAAA0"]
[Wed Sep 30 01:02:11.638043 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:11.638314 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:02:11.646502 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.646742 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.684281 2026] [security2:error] [pid 212454:tid 212626] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz87yZ9IcLq1oV6petigAAACo"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:11.689629 2026] [security2:error] [pid 212454:tid 212685] [client 20.214.109.68:11038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-png.php"] [unique_id "aryz87yZ9IcLq1oV6petjAAAAGU"]
[Wed Sep 30 01:02:11.742541 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.742991 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.795737 2026] [security2:error] [pid 212454:tid 212511] [remote 57.141.14.36:55248] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-includes/wlwmanifest.xml"] [unique_id "aryz87yZ9IcLq1oV6petkQAAeDg"]
[Wed Sep 30 01:02:11.823123 2026] [security2:error] [pid 212454:tid 212672] [client 65.21.47.11:62717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.47.21.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/xmlrpc.php"] [unique_id "aryz87yZ9IcLq1oV6petkgAAAFg"], referer: https://avecs.us/%d0%b0%d0%bd%d0%b0%d0%bb%d1%96%d1%82%d0%b8%d0%ba%d0%b0-%d0%bd%d0%be%d0%b2%d0%b8%d0%bd-%d1%8f%d0%ba-%d1%87%d0%b8%d1%82%d0%b0%d1%82%d0%b8-%d0%bc%d1%96%d0%b6-%d1%80%d1%8f%d0%b4%d0%ba%d1%96%d0%b2/
[Wed Sep 30 01:02:11.823269 2026] [security2:error] [pid 212454:tid 212672] [client 65.21.47.11:62717] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "avecs.us"] [uri "/xmlrpc.php"] [unique_id "aryz87yZ9IcLq1oV6petkgAAAFg"], referer: https://avecs.us/%d0%b0%d0%bd%d0%b0%d0%bb%d1%96%d1%82%d0%b8%d0%ba%d0%b0-%d0%bd%d0%be%d0%b2%d0%b8%d0%bd-%d1%8f%d0%ba-%d1%87%d0%b8%d1%82%d0%b0%d1%82%d0%b8-%d0%bc%d1%96%d0%b6-%d1%80%d1%8f%d0%b4%d0%ba%d1%96%d0%b2/
[Wed Sep 30 01:02:11.827949 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.828227 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.844802 2026] [security2:error] [pid 212454:tid 212613] [client 84.17.60.251:32788] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aryz87yZ9IcLq1oV6petlAAAAB0"]
[Wed Sep 30 01:02:11.853346 2026] [security2:error] [pid 212454:tid 212507] [remote 114.119.157.54:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "arab-cgt.org"] [uri "/robots.txt"] [unique_id "aryz87yZ9IcLq1oV6petlQAAOjQ"], referer: https://arab-cgt.org/robots.txt
[Wed Sep 30 01:02:11.901787 2026] [security2:error] [pid 212454:tid 212506] [remote 74.7.228.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "giantstridemfb.com"] [uri "/robots.txt"] [unique_id "aryz87yZ9IcLq1oV6petmgAAVzM"]
[Wed Sep 30 01:02:11.901999 2026] [security2:error] [pid 212454:tid 212671] [client 74.7.228.58:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "giantstridemfb.com"] [uri "/robots.txt"] [unique_id "aryz87yZ9IcLq1oV6petmgAAVzM"]
[Wed Sep 30 01:02:11.914887 2026] [security2:error] [pid 212454:tid 212701] [client 128.121.254.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryz87yZ9IcLq1oV6petnQAAAHU"]
[Wed Sep 30 01:02:11.918995 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:11.919245 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:11.922962 2026] [security2:error] [pid 212454:tid 212678] [client 4.185.40.215:12237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tfm.php"] [unique_id "aryz87yZ9IcLq1oV6petngAAAF4"]
[Wed Sep 30 01:02:11.954509 2026] [security2:error] [pid 212454:tid 212602] [client 82.102.18.222:44126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz87yZ9IcLq1oV6petoAAAABI"]
[Wed Sep 30 01:02:11.995303 2026] [security2:error] [pid 212454:tid 212661] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz87yZ9IcLq1oV6petowAAAE0"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:12.011306 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.011663 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.055918 2026] [security2:error] [pid 212454:tid 212691] [client 20.214.109.68:11237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/222.php"] [unique_id "aryz9LyZ9IcLq1oV6petpwAAAGs"]
[Wed Sep 30 01:02:12.074076 2026] [security2:error] [pid 212454:tid 212702] [client 20.194.96.176:1946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/xxw.php"] [unique_id "aryz9LyZ9IcLq1oV6petqAAAAHY"]
[Wed Sep 30 01:02:12.110618 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.111239 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.138050 2026] [security2:error] [pid 212454:tid 212680] [client 65.49.1.212:63938] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "50.87.97.137"] [uri "/"] [unique_id "aryz9LyZ9IcLq1oV6petqgAAAGA"]
[Wed Sep 30 01:02:12.155048 2026] [security2:error] [pid 212454:tid 212684] [client 84.17.60.251:32796] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6petrQAAAGQ"]
[Wed Sep 30 01:02:12.164215 2026] [access_compat:error] [pid 212454:tid 212617] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:12.164495 2026] [access_compat:error] [pid 212454:tid 212617] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:12.192179 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.192454 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.223607 2026] [security2:error] [pid 212454:tid 212692] [client 4.185.40.215:1328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/8573.php"] [unique_id "aryz9LyZ9IcLq1oV6petsQAAAGw"]
[Wed Sep 30 01:02:12.234755 2026] [security2:error] [pid 212454:tid 212669] [client 45.138.12.32:35962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.avecs.us"] [uri "/wp-links-opml.php"] [unique_id "aryz9LyZ9IcLq1oV6petsgAAAFU"]
[Wed Sep 30 01:02:12.283080 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.283361 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.308299 2026] [security2:error] [pid 212454:tid 212631] [client 82.102.18.222:44142] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6petuQAAAC8"]
[Wed Sep 30 01:02:12.316157 2026] [security2:error] [pid 212454:tid 212651] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz9LyZ9IcLq1oV6petugAAAEM"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:12.374240 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.374595 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.401904 2026] [security2:error] [pid 212454:tid 212616] [client 20.194.96.176:22099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/or.php"] [unique_id "aryz9LyZ9IcLq1oV6petwwAAACA"]
[Wed Sep 30 01:02:12.448497 2026] [security2:error] [pid 212454:tid 212634] [client 84.17.60.251:32800] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6petyAAAADI"]
[Wed Sep 30 01:02:12.469227 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.470119 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.527756 2026] [security2:error] [pid 212454:tid 212648] [client 49.36.41.37:64000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz9LyZ9IcLq1oV6petzgAAAEA"]
[Wed Sep 30 01:02:12.528969 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:12195] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/1.php"] [unique_id "aryz9LyZ9IcLq1oV6petzwAAADo"]
[Wed Sep 30 01:02:12.529059 2026] [security2:error] [pid 212454:tid 212642] [client 4.185.40.215:12195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/1.php"] [unique_id "aryz9LyZ9IcLq1oV6petzwAAADo"]
[Wed Sep 30 01:02:12.529354 2026] [security2:error] [pid 212454:tid 212648] [client 49.36.41.37:64000] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz9LyZ9IcLq1oV6petzgAAAEA"]
[Wed Sep 30 01:02:12.568492 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.568756 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.635599 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:02:12.636059 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:02:12.662054 2026] [security2:error] [pid 212454:tid 212656] [client 65.21.47.11:62719] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "avecs.us"] [uri "/xmlrpc.php"] [unique_id "aryz9LyZ9IcLq1oV6petzAAAAEg"], referer: https://avecs.us/%d0%b0%d0%bd%d0%b0%d0%bb%d1%96%d1%82%d0%b8%d0%ba%d0%b0-%d0%bd%d0%be%d0%b2%d0%b8%d0%bd-%d1%8f%d0%ba-%d1%87%d0%b8%d1%82%d0%b0%d1%82%d0%b8-%d0%bc%d1%96%d0%b6-%d1%80%d1%8f%d0%b4%d0%ba%d1%96%d0%b2/
[Wed Sep 30 01:02:12.662462 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.662763 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.668843 2026] [security2:error] [pid 212454:tid 212678] [client 82.102.18.222:44146] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6pet2AAAAF4"]
[Wed Sep 30 01:02:12.705973 2026] [security2:error] [pid 212454:tid 212604] [client 4.240.25.22:18763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/222.php"] [unique_id "aryz9LyZ9IcLq1oV6pet2QAAABQ"]
[Wed Sep 30 01:02:12.738508 2026] [security2:error] [pid 212454:tid 212637] [client 4.240.25.22:8481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wsd.php"] [unique_id "aryz9LyZ9IcLq1oV6pet2gAAADU"]
[Wed Sep 30 01:02:12.754076 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.754341 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.755679 2026] [security2:error] [pid 212454:tid 212643] [client 84.17.60.251:32806] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6pet3QAAADs"]
[Wed Sep 30 01:02:12.830170 2026] [security2:error] [pid 212454:tid 212649] [client 4.185.40.215:1288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/term.php"] [unique_id "aryz9LyZ9IcLq1oV6pet3wAAAEE"]
[Wed Sep 30 01:02:12.843533 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.843964 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.878425 2026] [security2:error] [pid 212454:tid 212519] [remote 74.7.227.56:42684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "aryz9LyZ9IcLq1oV6pet5QAAYEA"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:02:12.928342 2026] [security2:error] [pid 212454:tid 212596] [client 213.136.69.135:59954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-url-pattern-prefixer.php"] [unique_id "aryz9LyZ9IcLq1oV6pet8AAAAAw"], referer: binance.com
[Wed Sep 30 01:02:12.931947 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:12.932378 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:55524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:12.985197 2026] [security2:error] [pid 212454:tid 212665] [client 82.102.18.222:44162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryz9LyZ9IcLq1oV6pet8wAAAFE"]
[Wed Sep 30 01:02:13.015215 2026] [security2:error] [pid 212454:tid 212694] [client 216.73.216.46:55524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz9byZ9IcLq1oV6pet9QAAAG4"]
[Wed Sep 30 01:02:13.019334 2026] [security2:error] [pid 212454:tid 212520] [remote 93.152.209.11:56514] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "biocleanze.medredisolutions.com"] [uri "/.env"] [unique_id "aryz9byZ9IcLq1oV6pet9gAAZkE"]
[Wed Sep 30 01:02:13.066800 2026] [security2:error] [pid 212454:tid 212601] [client 84.17.60.251:32812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6pet9wAAABE"]
[Wed Sep 30 01:02:13.113717 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.113987 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:6723] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.133633 2026] [security2:error] [pid 212454:tid 212663] [client 4.185.40.215:1317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-content/radio.php"] [unique_id "aryz9byZ9IcLq1oV6peuAAAAAE8"]
[Wed Sep 30 01:02:13.167418 2026] [security2:error] [pid 212454:tid 212668] [client 86.126.172.242:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryz9byZ9IcLq1oV6peuBgAAAFQ"]
[Wed Sep 30 01:02:13.167470 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 01:02:13.167738 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 01:02:13.189614 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.109.68:11185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-blog.php"] [unique_id "aryz9byZ9IcLq1oV6peuCgAAAHE"]
[Wed Sep 30 01:02:13.250843 2026] [security2:error] [pid 212454:tid 212679] [client 120.48.142.55:48068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.142.48.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryz9byZ9IcLq1oV6peuEAAAAF8"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:02:13.261899 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.262351 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.289092 2026] [security2:error] [pid 212454:tid 212643] [client 216.73.216.46:6723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz9byZ9IcLq1oV6peuEgAAADs"]
[Wed Sep 30 01:02:13.312140 2026] [security2:error] [pid 212454:tid 212609] [client 82.102.18.222:44168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6peuFQAAABk"]
[Wed Sep 30 01:02:13.321443 2026] [security2:error] [pid 212454:tid 212616] [client 65.21.47.11:62721] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "avecs.us"] [uri "/xmlrpc.php"] [unique_id "aryz9byZ9IcLq1oV6peuAwAAACA"], referer: https://avecs.us/xmlrpc.php
[Wed Sep 30 01:02:13.338257 2026] [security2:error] [pid 212454:tid 212650] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz9byZ9IcLq1oV6peuGAAAAEI"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:13.363687 2026] [security2:error] [pid 212454:tid 212703] [client 84.17.60.251:32816] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6peuGQAAAHc"]
[Wed Sep 30 01:02:13.386181 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.386442 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.411255 2026] [security2:error] [pid 212454:tid 212594] [client 20.219.2.60:18843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/byypas.php"] [unique_id "aryz9byZ9IcLq1oV6peuIwAAAAo"]
[Wed Sep 30 01:02:13.432990 2026] [security2:error] [pid 212454:tid 212624] [client 4.185.40.215:12271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/155.php"] [unique_id "aryz9byZ9IcLq1oV6peuJgAAACg"]
[Wed Sep 30 01:02:13.529317 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:34325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.529579 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:34325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.544729 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz9byZ9IcLq1oV6peuLgAAACY"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:13.567728 2026] [security2:error] [pid 212454:tid 212601] [client 45.138.12.32:22378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baf.dnk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz9byZ9IcLq1oV6peuMAAAABE"]
[Wed Sep 30 01:02:13.623459 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.623785 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.637278 2026] [security2:error] [pid 212454:tid 212642] [client 103.168.67.253:8878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz9byZ9IcLq1oV6peuNQAAADo"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:13.653209 2026] [security2:error] [pid 212454:tid 212595] [client 82.102.18.222:44180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.muranoaviacion.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6peuOQAAAAs"]
[Wed Sep 30 01:02:13.655112 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:13.655466 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:13.661223 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:34325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.661457 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:34325] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.669640 2026] [security2:error] [pid 212454:tid 212668] [client 84.17.60.251:32822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6peuPAAAAFQ"]
[Wed Sep 30 01:02:13.725882 2026] [security2:error] [pid 212454:tid 212628] [client 20.194.96.176:37986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/router.php"] [unique_id "aryz9byZ9IcLq1oV6peuQgAAACw"]
[Wed Sep 30 01:02:13.729736 2026] [security2:error] [pid 212454:tid 212693] [client 4.185.40.215:12153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-the.php"] [unique_id "aryz9byZ9IcLq1oV6peuQwAAAG0"]
[Wed Sep 30 01:02:13.755017 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.755295 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.844395 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.844645 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.865112 2026] [security2:error] [pid 212454:tid 212533] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz9byZ9IcLq1oV6peuSQAAQk4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=1928ca65205459cbf8ef5de255142394&start=105&t=360
[Wed Sep 30 01:02:13.865142 2026] [security2:error] [pid 212454:tid 212533] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz9byZ9IcLq1oV6peuSQAAQk4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=1928ca65205459cbf8ef5de255142394&start=105&t=360
[Wed Sep 30 01:02:13.913344 2026] [security2:error] [pid 212454:tid 212588] [client 37.41.16.35:63471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz9byZ9IcLq1oV6peuTwAAAAQ"]
[Wed Sep 30 01:02:13.913492 2026] [security2:error] [pid 212454:tid 212588] [client 37.41.16.35:63471] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "aryz9byZ9IcLq1oV6peuTwAAAAQ"]
[Wed Sep 30 01:02:13.938008 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:13.938457 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:13.938761 2026] [security2:error] [pid 212454:tid 212612] [client 103.168.67.253:8886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz9byZ9IcLq1oV6peuUQAAABw"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:13.996054 2026] [security2:error] [pid 212454:tid 212615] [client 84.17.60.251:32828] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aryz9byZ9IcLq1oV6peuUgAAAB8"]
[Wed Sep 30 01:02:14.018558 2026] [security2:error] [pid 212454:tid 212680] [client 4.240.25.22:38767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/dehnl.php"] [unique_id "aryz9ryZ9IcLq1oV6peuVgAAAGA"]
[Wed Sep 30 01:02:14.027840 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.028279 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.034674 2026] [security2:error] [pid 212454:tid 212692] [client 4.185.40.215:12239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp5.php"] [unique_id "aryz9ryZ9IcLq1oV6peuWAAAAGw"]
[Wed Sep 30 01:02:14.089910 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzEz
[Wed Sep 30 01:02:14.090172 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzEz
[Wed Sep 30 01:02:14.092066 2026] [security2:error] [pid 212454:tid 212607] [client 223.181.30.165:29287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peuZAAAABc"]
[Wed Sep 30 01:02:14.092187 2026] [security2:error] [pid 212454:tid 212607] [client 223.181.30.165:29287] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peuZAAAABc"]
[Wed Sep 30 01:02:14.107664 2026] [security2:error] [pid 212454:tid 212645] [client 216.73.216.46:34325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz9ryZ9IcLq1oV6peuZwAAAD0"]
[Wed Sep 30 01:02:14.135786 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 01:02:14.136071 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 01:02:14.207049 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.207323 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.222529 2026] [security2:error] [pid 212454:tid 212628] [client 20.214.109.68:11089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aryz9ryZ9IcLq1oV6peucgAAACw"]
[Wed Sep 30 01:02:14.275119 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Vzci9saWI2NC9rcmI1
[Wed Sep 30 01:02:14.275547 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Vzci9saWI2NC9rcmI1
[Wed Sep 30 01:02:14.298658 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.298964 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.306039 2026] [security2:error] [pid 212454:tid 212664] [client 84.17.60.251:32842] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aryz9ryZ9IcLq1oV6peueQAAAFA"]
[Wed Sep 30 01:02:14.328127 2026] [security2:error] [pid 212454:tid 212641] [client 114.119.151.82:25243] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "psrecruit.org.uk"] [uri "/robots.txt"] [unique_id "aryz9ryZ9IcLq1oV6peufQAAADk"], referer: https://psrecruit.org.uk/robots.txt
[Wed Sep 30 01:02:14.331871 2026] [security2:error] [pid 212454:tid 212661] [client 103.159.192.142:61089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peufgAAAE0"]
[Wed Sep 30 01:02:14.331952 2026] [security2:error] [pid 212454:tid 212661] [client 103.159.192.142:61089] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peufgAAAE0"]
[Wed Sep 30 01:02:14.336337 2026] [security2:error] [pid 212454:tid 212707] [client 4.185.40.215:12189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-access.php"] [unique_id "aryz9ryZ9IcLq1oV6peufwAAAHs"]
[Wed Sep 30 01:02:14.383378 2026] [security2:error] [pid 212454:tid 212708] [client 65.21.47.11:62725] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "avecs.us"] [uri "/xmlrpc.php"] [unique_id "aryz9byZ9IcLq1oV6peuRgAAAHw"], referer: https://avecs.us/xmlrpc.php
[Wed Sep 30 01:02:14.387831 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.388094 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.414090 2026] [security2:error] [pid 212454:tid 212680] [client 4.196.65.241:64135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/a11.php"] [unique_id "aryz9ryZ9IcLq1oV6peuiQAAAGA"]
[Wed Sep 30 01:02:14.479406 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.479667 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.533063 2026] [security2:error] [pid 212454:tid 212586] [client 52.231.30.175:38824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aryz9ryZ9IcLq1oV6peukQAAAAI"]
[Wed Sep 30 01:02:14.575858 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.576367 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.600784 2026] [security2:error] [pid 212454:tid 212644] [client 84.17.60.251:32854] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aryz9ryZ9IcLq1oV6peulQAAADw"]
[Wed Sep 30 01:02:14.636062 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:14.636308 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:14.637564 2026] [security2:error] [pid 212454:tid 212606] [client 4.185.40.215:1334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/hots.php"] [unique_id "aryz9ryZ9IcLq1oV6peumQAAABY"]
[Wed Sep 30 01:02:14.654332 2026] [security2:error] [pid 212454:tid 212703] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz9ryZ9IcLq1oV6peukwAAAHc"]
[Wed Sep 30 01:02:14.660990 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.661258 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.731899 2026] [security2:error] [pid 212454:tid 212594] [client 106.214.3.140:29527] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peumgAAAAo"]
[Wed Sep 30 01:02:14.732022 2026] [security2:error] [pid 212454:tid 212594] [client 106.214.3.140:29527] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peumgAAAAo"]
[Wed Sep 30 01:02:14.751523 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.751796 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.789852 2026] [security2:error] [pid 212454:tid 212613] [client 182.69.182.151:29379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peuowAAAB0"]
[Wed Sep 30 01:02:14.790002 2026] [security2:error] [pid 212454:tid 212613] [client 182.69.182.151:29379] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "aryz9ryZ9IcLq1oV6peuowAAAB0"]
[Wed Sep 30 01:02:14.790280 2026] [security2:error] [pid 212454:tid 212671] [client 20.219.2.60:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/b.php"] [unique_id "aryz9ryZ9IcLq1oV6peupAAAAFc"]
[Wed Sep 30 01:02:14.812493 2026] [security2:error] [pid 212454:tid 212705] [client 52.231.30.175:38831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "aryz9ryZ9IcLq1oV6peupQAAAHk"]
[Wed Sep 30 01:02:14.844084 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:14.844382 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:20637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:14.899135 2026] [security2:error] [pid 212454:tid 212693] [client 84.17.60.251:32868] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aryz9ryZ9IcLq1oV6peuqAAAAG0"]
[Wed Sep 30 01:02:14.922900 2026] [security2:error] [pid 212454:tid 212584] [client 4.196.65.241:27279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/n30n.php"] [unique_id "aryz9ryZ9IcLq1oV6peuqwAAAAA"]
[Wed Sep 30 01:02:14.927922 2026] [security2:error] [pid 212454:tid 212672] [client 216.73.216.46:20637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz9ryZ9IcLq1oV6peurAAAAFg"]
[Wed Sep 30 01:02:14.935674 2026] [security2:error] [pid 212454:tid 212699] [client 4.185.40.215:12191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/admin-footer.php"] [unique_id "aryz9ryZ9IcLq1oV6peurgAAAHM"]
[Wed Sep 30 01:02:15.026551 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.026865 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.073224 2026] [security2:error] [pid 212454:tid 212641] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz97yZ9IcLq1oV6peusgAAADk"]
[Wed Sep 30 01:02:15.084842 2026] [security2:error] [pid 212454:tid 212620] [client 52.231.30.175:38883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/1ac.php"] [unique_id "aryz97yZ9IcLq1oV6peuuAAAACQ"]
[Wed Sep 30 01:02:15.103258 2026] [security2:error] [pid 212454:tid 212702] [client 103.241.204.139:65345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peuuQAAAHY"]
[Wed Sep 30 01:02:15.103362 2026] [security2:error] [pid 212454:tid 212702] [client 103.241.204.139:65345] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peuuQAAAHY"]
[Wed Sep 30 01:02:15.106381 2026] [security2:error] [pid 212454:tid 212661] [client 127.0.0.1:20676] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryz97yZ9IcLq1oV6peutgAAAE0"]
[Wed Sep 30 01:02:15.106422 2026] [security2:error] [pid 212454:tid 212664] [client 74.7.228.20:60514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bashertcontractors.com"] [uri "/robots.txt"] [unique_id "aryz97yZ9IcLq1oV6peutQAAUGM"]
[Wed Sep 30 01:02:15.135916 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:02:15.136194 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:02:15.140355 2026] [security2:error] [pid 212454:tid 212663] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz97yZ9IcLq1oV6peuvQAAAE8"]
[Wed Sep 30 01:02:15.168214 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.168473 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.229367 2026] [security2:error] [pid 212454:tid 212678] [client 84.17.60.251:32870] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aryz97yZ9IcLq1oV6peuxgAAAF4"]
[Wed Sep 30 01:02:15.235129 2026] [security2:error] [pid 212454:tid 212627] [client 4.185.40.215:1335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws84.php"] [unique_id "aryz97yZ9IcLq1oV6peuxwAAACs"]
[Wed Sep 30 01:02:15.259898 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.260187 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.272929 2026] [security2:error] [pid 212454:tid 212680] [client 127.0.0.1:20688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "aryz97yZ9IcLq1oV6peuwgAAAGA"]
[Wed Sep 30 01:02:15.273001 2026] [security2:error] [pid 212454:tid 212585] [client 74.7.175.155:39600] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.dklhardwareconstruction.com"] [uri "/robots.txt"] [unique_id "aryz97yZ9IcLq1oV6peuwQAAAVw"]
[Wed Sep 30 01:02:15.300285 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.300538 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.329380 2026] [security2:error] [pid 212454:tid 212629] [client 89.41.42.39:29349] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "aryz9byZ9IcLq1oV6pet-wAAAC0"]
[Wed Sep 30 01:02:15.359036 2026] [security2:error] [pid 212454:tid 212696] [client 52.231.30.175:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/flm.php"] [unique_id "aryz97yZ9IcLq1oV6peuzgAAAHA"]
[Wed Sep 30 01:02:15.389452 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.389709 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.467819 2026] [security2:error] [pid 212454:tid 212655] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz97yZ9IcLq1oV6peu2wAAAEc"]
[Wed Sep 30 01:02:15.469115 2026] [security2:error] [pid 212454:tid 212667] [client 152.59.169.65:51514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu3AAAAFM"]
[Wed Sep 30 01:02:15.469206 2026] [security2:error] [pid 212454:tid 212667] [client 152.59.169.65:51514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu3AAAAFM"]
[Wed Sep 30 01:02:15.482608 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.482861 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.531015 2026] [security2:error] [pid 212454:tid 212704] [client 84.17.60.251:32878] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aryz97yZ9IcLq1oV6peu3gAAAHg"]
[Wed Sep 30 01:02:15.535656 2026] [security2:error] [pid 212454:tid 212591] [client 4.185.40.215:12262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/bnm.php"] [unique_id "aryz97yZ9IcLq1oV6peu3wAAAAc"]
[Wed Sep 30 01:02:15.550502 2026] [security2:error] [pid 212454:tid 212688] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz97yZ9IcLq1oV6peu4AAAAGg"]
[Wed Sep 30 01:02:15.577069 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.577643 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.613791 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz97yZ9IcLq1oV6peu5gAAAH0"]
[Wed Sep 30 01:02:15.630947 2026] [security2:error] [pid 212454:tid 212671] [client 52.231.30.175:38887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/40341.php"] [unique_id "aryz97yZ9IcLq1oV6peu5wAAAFc"]
[Wed Sep 30 01:02:15.642574 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:02:15.642851 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:02:15.661635 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.661885 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.720206 2026] [security2:error] [pid 212454:tid 212699] [client 20.194.30.107:17488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/or.php"] [unique_id "aryz97yZ9IcLq1oV6peu6wAAAHM"]
[Wed Sep 30 01:02:15.720788 2026] [security2:error] [pid 212454:tid 212642] [client 20.214.109.68:11008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/lib.php"] [unique_id "aryz97yZ9IcLq1oV6peu7AAAADo"]
[Wed Sep 30 01:02:15.736700 2026] [security2:error] [pid 212454:tid 212623] [client 4.240.25.22:38763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/cgi-bin/admin.php"] [unique_id "aryz97yZ9IcLq1oV6peu7gAAACc"]
[Wed Sep 30 01:02:15.753155 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.753407 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.779019 2026] [security2:error] [pid 212454:tid 212620] [client 20.194.96.176:5934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/b8.php"] [unique_id "aryz97yZ9IcLq1oV6peu8QAAACQ"]
[Wed Sep 30 01:02:15.828892 2026] [security2:error] [pid 212454:tid 212702] [client 84.17.60.251:32884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.gpz.zef.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aryz97yZ9IcLq1oV6peu8wAAAHY"]
[Wed Sep 30 01:02:15.831733 2026] [security2:error] [pid 212454:tid 212649] [client 122.173.27.10:5188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu9AAAAEE"]
[Wed Sep 30 01:02:15.831805 2026] [security2:error] [pid 212454:tid 212649] [client 122.173.27.10:5188] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu9AAAAEE"]
[Wed Sep 30 01:02:15.836192 2026] [security2:error] [pid 212454:tid 212661] [client 4.185.40.215:12242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/amax.php"] [unique_id "aryz97yZ9IcLq1oV6peu9QAAAE0"]
[Wed Sep 30 01:02:15.844491 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.844752 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:15.859546 2026] [security2:error] [pid 212454:tid 212603] [client 223.181.60.167:23093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu9wAAABM"]
[Wed Sep 30 01:02:15.859634 2026] [security2:error] [pid 212454:tid 212603] [client 223.181.60.167:23093] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "aryz97yZ9IcLq1oV6peu9wAAABM"]
[Wed Sep 30 01:02:15.904444 2026] [security2:error] [pid 212454:tid 212612] [client 52.231.30.175:38808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-log.php"] [unique_id "aryz97yZ9IcLq1oV6peu-wAAABw"]
[Wed Sep 30 01:02:15.936114 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:15.936412 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.027510 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.027779 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.118847 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.119119 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.134822 2026] [access_compat:error] [pid 212454:tid 212637] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:02:16.135094 2026] [access_compat:error] [pid 212454:tid 212637] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:02:16.138357 2026] [security2:error] [pid 212454:tid 212670] [client 4.185.40.215:1336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/66.php"] [unique_id "aryz-LyZ9IcLq1oV6pevDwAAAFY"]
[Wed Sep 30 01:02:16.171198 2026] [security2:error] [pid 212454:tid 212694] [client 52.231.30.175:38859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/sehryhv.php"] [unique_id "aryz-LyZ9IcLq1oV6pevFAAAAG4"]
[Wed Sep 30 01:02:16.179804 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9kZXYvYmxvY2svODo2NA%3D%3D
[Wed Sep 30 01:02:16.180114 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9kZXYvYmxvY2svODo2NA%3D%3D
[Wed Sep 30 01:02:16.195008 2026] [security2:error] [pid 212454:tid 212644] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-LyZ9IcLq1oV6pevGAAAADw"]
[Wed Sep 30 01:02:16.200726 2026] [security2:error] [pid 212454:tid 212652] [client 20.194.96.176:37976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/cibrkysaeng.php"] [unique_id "aryz-LyZ9IcLq1oV6pevGgAAAEQ"]
[Wed Sep 30 01:02:16.209157 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.209704 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.240407 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.109.68:11179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/edit.php"] [unique_id "aryz-LyZ9IcLq1oV6pevIAAAABE"]
[Wed Sep 30 01:02:16.247589 2026] [security2:error] [pid 212454:tid 212669] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-LyZ9IcLq1oV6pevIQAAAFU"]
[Wed Sep 30 01:02:16.299884 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-LyZ9IcLq1oV6pevJQAAAFs"]
[Wed Sep 30 01:02:16.300100 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.300363 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.354629 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-LyZ9IcLq1oV6pevKQAAABo"]
[Wed Sep 30 01:02:16.388120 2026] [security2:error] [pid 212454:tid 212705] [client 136.242.96.98:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz-LyZ9IcLq1oV6pevKwAAAHk"]
[Wed Sep 30 01:02:16.393860 2026] [security2:error] [pid 212454:tid 212609] [client 4.196.65.241:19158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cns.php"] [unique_id "aryz-LyZ9IcLq1oV6pevLAAAABk"]
[Wed Sep 30 01:02:16.394589 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.394845 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:38792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.414713 2026] [security2:error] [pid 212454:tid 212616] [client 20.198.74.230:23933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wpx2.php"] [unique_id "aryz-LyZ9IcLq1oV6pevLgAAACA"]
[Wed Sep 30 01:02:16.435956 2026] [security2:error] [pid 212454:tid 212672] [client 52.231.30.175:38852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/yich.php"] [unique_id "aryz-LyZ9IcLq1oV6pevMQAAAFg"]
[Wed Sep 30 01:02:16.449843 2026] [security2:error] [pid 212454:tid 212594] [client 4.185.40.215:12277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/public/file.php"] [unique_id "aryz-LyZ9IcLq1oV6pevMwAAAAo"]
[Wed Sep 30 01:02:16.482224 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.482512 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.573453 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.573722 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.584157 2026] [security2:error] [pid 212454:tid 212654] [client 216.73.216.46:38792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz-LyZ9IcLq1oV6pevPgAAAEY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvb3BlbmV4ci1saWJz
[Wed Sep 30 01:02:16.599505 2026] [security2:error] [pid 212454:tid 212585] [client 20.214.109.68:11095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ioxi-o.php"] [unique_id "aryz-LyZ9IcLq1oV6pevQgAAAAE"]
[Wed Sep 30 01:02:16.607555 2026] [security2:error] [pid 212454:tid 212488] [remote 220.181.108.145:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "aryz-LyZ9IcLq1oV6pevQAAAJiE"]
[Wed Sep 30 01:02:16.665714 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:16.665983 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:43700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:16.666129 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.666411 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.702152 2026] [security2:error] [pid 212454:tid 212677] [client 52.231.30.175:38860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-blink.php"] [unique_id "aryz-LyZ9IcLq1oV6pevTAAAAF0"]
[Wed Sep 30 01:02:16.717823 2026] [security2:error] [pid 212454:tid 212586] [client 103.172.210.103:51864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz-LyZ9IcLq1oV6pevTgAAAAI"]
[Wed Sep 30 01:02:16.717945 2026] [security2:error] [pid 212454:tid 212586] [client 103.172.210.103:51864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "aryz-LyZ9IcLq1oV6pevTgAAAAI"]
[Wed Sep 30 01:02:16.752236 2026] [security2:error] [pid 212454:tid 212626] [client 4.240.25.22:43814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wpxml.php"] [unique_id "aryz-LyZ9IcLq1oV6pevUgAAACo"]
[Wed Sep 30 01:02:16.753242 2026] [security2:error] [pid 212454:tid 212644] [client 4.185.40.215:12257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/166.php"] [unique_id "aryz-LyZ9IcLq1oV6pevUwAAADw"]
[Wed Sep 30 01:02:16.757735 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.758009 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.853893 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.854339 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.870672 2026] [security2:error] [pid 212454:tid 212709] [client 20.194.96.176:52445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.rayfamilyga.com"] [uri "/wp-wpbak.php"] [unique_id "aryz-LyZ9IcLq1oV6pevXQAAAH0"]
[Wed Sep 30 01:02:16.939533 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:16.939847 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:16.962551 2026] [security2:error] [pid 212454:tid 212609] [client 52.231.30.175:38807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-logis.php"] [unique_id "aryz-LyZ9IcLq1oV6pevYAAAABk"]
[Wed Sep 30 01:02:17.029920 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.030196 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.054869 2026] [security2:error] [pid 212454:tid 212672] [client 4.185.40.215:12103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/ws77.php"] [unique_id "aryz-byZ9IcLq1oV6pevYwAAAFg"]
[Wed Sep 30 01:02:17.120262 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.120527 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.137234 2026] [security2:error] [pid 212454:tid 212659] [client 20.214.109.68:10961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ajax.php"] [unique_id "aryz-byZ9IcLq1oV6pevZwAAAEs"]
[Wed Sep 30 01:02:17.143834 2026] [security2:error] [pid 212454:tid 212654] [client 74.7.243.227:43700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz-byZ9IcLq1oV6pevaAAAAEY"], referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L2N3ZC9BYQ==
[Wed Sep 30 01:02:17.209321 2026] [security2:error] [pid 212454:tid 212587] [client 4.240.25.22:38735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/mac.php"] [unique_id "aryz-byZ9IcLq1oV6pevbwAAAAM"]
[Wed Sep 30 01:02:17.211363 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.211607 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.226053 2026] [security2:error] [pid 212454:tid 212607] [client 52.231.30.175:38813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/esc.php"] [unique_id "aryz-byZ9IcLq1oV6pevcAAAABc"]
[Wed Sep 30 01:02:17.280681 2026] [security2:error] [pid 212454:tid 212622] [client 20.219.2.60:19434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws49.php"] [unique_id "aryz-byZ9IcLq1oV6pevdAAAACY"]
[Wed Sep 30 01:02:17.290263 2026] [security2:error] [pid 212454:tid 212586] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "aryz-byZ9IcLq1oV6pevdQAAAAI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:02:17.301467 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.301721 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.353896 2026] [security2:error] [pid 212454:tid 212697] [client 4.185.40.215:12247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/www.php"] [unique_id "aryz-byZ9IcLq1oV6pevewAAAHE"]
[Wed Sep 30 01:02:17.354499 2026] [security2:error] [pid 212454:tid 212687] [client 4.196.65.241:19489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/qnHOQSw8LXV.php"] [unique_id "aryz-byZ9IcLq1oV6pevfAAAAGc"]
[Wed Sep 30 01:02:17.394215 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.394511 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.437453 2026] [security2:error] [pid 212454:tid 212605] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz-byZ9IcLq1oV6pevgwAAABU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.484040 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.484301 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.486768 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:38786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/2.php"] [unique_id "aryz-byZ9IcLq1oV6pevhgAAAHw"]
[Wed Sep 30 01:02:17.518285 2026] [security2:error] [pid 212454:tid 212604] [client 155.190.6.18:59570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz-byZ9IcLq1oV6pevigAAABQ"]
[Wed Sep 30 01:02:17.518368 2026] [security2:error] [pid 212454:tid 212604] [client 155.190.6.18:59570] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz-byZ9IcLq1oV6pevigAAABQ"]
[Wed Sep 30 01:02:17.567056 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz-byZ9IcLq1oV6peviwAAAFs"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.575237 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.575508 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:23611] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.611399 2026] [security2:error] [pid 212454:tid 212491] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "aryz-byZ9IcLq1oV6pevjwAAfSQ"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D66011
[Wed Sep 30 01:02:17.620849 2026] [security2:error] [pid 212454:tid 212613] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz-byZ9IcLq1oV6pevkAAAAB0"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.661246 2026] [security2:error] [pid 212454:tid 212595] [client 45.138.12.32:22542] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.mml.ved.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "aryz-byZ9IcLq1oV6pevlQAAAAs"]
[Wed Sep 30 01:02:17.665917 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.666185 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.667179 2026] [security2:error] [pid 212454:tid 212671] [client 4.185.40.215:1321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/adoms.php"] [unique_id "aryz-byZ9IcLq1oV6pevlgAAAFc"]
[Wed Sep 30 01:02:17.674693 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz-byZ9IcLq1oV6pevmAAAAFM"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.699110 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:02:17.699366 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:02:17.728123 2026] [security2:error] [pid 212454:tid 212672] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz-byZ9IcLq1oV6pevoAAAAFg"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.751139 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:38882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/ba.php"] [unique_id "aryz-byZ9IcLq1oV6pevowAAABM"]
[Wed Sep 30 01:02:17.755920 2026] [security2:error] [pid 212454:tid 212702] [client 216.73.216.46:23611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz-byZ9IcLq1oV6pevpAAAAHY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvcGVybC1HZW8tSVBmcmVl
[Wed Sep 30 01:02:17.784335 2026] [security2:error] [pid 212454:tid 212663] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz-byZ9IcLq1oV6pevpQAAAE8"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:17.810395 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:15445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.810658 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:15445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.849254 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.849516 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.915740 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.109.68:11020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/install.php"] [unique_id "aryz-byZ9IcLq1oV6pevrgAAADI"]
[Wed Sep 30 01:02:17.945030 2026] [security2:error] [pid 212454:tid 212641] [client 15.235.166.88:44786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.166.235.15.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryz-byZ9IcLq1oV6pevsQAAADk"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:02:17.945885 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:15445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:17.946170 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:15445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:17.970256 2026] [security2:error] [pid 212454:tid 212658] [client 4.185.40.215:12212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/tymn.php"] [unique_id "aryz-byZ9IcLq1oV6pevtAAAAEo"]
[Wed Sep 30 01:02:18.015598 2026] [security2:error] [pid 212454:tid 212644] [client 52.231.30.175:32207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/great.php"] [unique_id "aryz-ryZ9IcLq1oV6pevtQAAADw"]
[Wed Sep 30 01:02:18.088337 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.088624 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.096942 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-ryZ9IcLq1oV6pevuwAAAEQ"]
[Wed Sep 30 01:02:18.112801 2026] [security2:error] [pid 212454:tid 212691] [client 223.235.102.107:2977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pevvwAAAGs"]
[Wed Sep 30 01:02:18.112940 2026] [security2:error] [pid 212454:tid 212691] [client 223.235.102.107:2977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pevvwAAAGs"]
[Wed Sep 30 01:02:18.133071 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.133509 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.138714 2026] [security2:error] [pid 212454:tid 212635] [client 216.73.216.46:15445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz-ryZ9IcLq1oV6pevwgAAADM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvYmFrZXIvcGhwNTM%3D
[Wed Sep 30 01:02:18.183294 2026] [security2:error] [pid 212454:tid 212461] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz-ryZ9IcLq1oV6pevxAAALAY"], referer: https://forum.torquayfans.com/viewtopic.php?p=261646
[Wed Sep 30 01:02:18.183326 2026] [security2:error] [pid 212454:tid 212461] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "aryz-ryZ9IcLq1oV6pevxAAALAY"], referer: https://forum.torquayfans.com/viewtopic.php?p=261646
[Wed Sep 30 01:02:18.221395 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.221673 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.243440 2026] [security2:error] [pid 212454:tid 212502] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz-ryZ9IcLq1oV6pevxwAACC8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15409&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:02:18.243463 2026] [security2:error] [pid 212454:tid 212502] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz-ryZ9IcLq1oV6pevxwAACC8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15409&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:02:18.286001 2026] [security2:error] [pid 212454:tid 212648] [client 52.231.30.175:38874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "aryz-ryZ9IcLq1oV6pevywAAAEA"]
[Wed Sep 30 01:02:18.293786 2026] [security2:error] [pid 212454:tid 212690] [client 45.235.36.145:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "aryz-ryZ9IcLq1oV6pevzAAAAGo"]
[Wed Sep 30 01:02:18.310952 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.311339 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.318203 2026] [security2:error] [pid 212454:tid 212683] [client 4.185.40.215:12207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/eetu.php"] [unique_id "aryz-ryZ9IcLq1oV6pev0AAAAGM"]
[Wed Sep 30 01:02:18.333936 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:02:18.334247 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:02:18.347798 2026] [security2:error] [pid 212454:tid 212699] [client 202.179.95.79:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev1wAAAHM"]
[Wed Sep 30 01:02:18.347975 2026] [security2:error] [pid 212454:tid 212699] [client 202.179.95.79:62920] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev1wAAAHM"]
[Wed Sep 30 01:02:18.351120 2026] [security2:error] [pid 212454:tid 212659] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/dashboard"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-ryZ9IcLq1oV6pev1gAAAEs"]
[Wed Sep 30 01:02:18.379363 2026] [security2:error] [pid 212454:tid 212585] [client 116.193.128.26:60273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev2QAAAAE"]
[Wed Sep 30 01:02:18.379752 2026] [security2:error] [pid 212454:tid 212585] [client 116.193.128.26:60273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev2QAAAAE"]
[Wed Sep 30 01:02:18.402048 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.402308 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.407408 2026] [security2:error] [pid 212454:tid 212657] [client 152.59.165.7:49723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev3AAAAEk"]
[Wed Sep 30 01:02:18.407532 2026] [security2:error] [pid 212454:tid 212657] [client 152.59.165.7:49723] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev3AAAAEk"]
[Wed Sep 30 01:02:18.447642 2026] [security2:error] [pid 212454:tid 212697] [client 116.72.182.19:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev3wAAAHE"]
[Wed Sep 30 01:02:18.447799 2026] [security2:error] [pid 212454:tid 212697] [client 116.72.182.19:62920] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pev3wAAAHE"]
[Wed Sep 30 01:02:18.494070 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.494357 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.522474 2026] [security2:error] [pid 212454:tid 212638] [client 103.168.67.253:6432] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/dashboard"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/dashboard"] [unique_id "aryz-ryZ9IcLq1oV6pev3QAAADY"]
[Wed Sep 30 01:02:18.524690 2026] [security2:error] [pid 212454:tid 212634] [client 4.196.65.241:19462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/resp.php"] [unique_id "aryz-ryZ9IcLq1oV6pev4QAAADI"]
[Wed Sep 30 01:02:18.550556 2026] [security2:error] [pid 212454:tid 212641] [client 52.231.30.175:38877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/robots.php"] [unique_id "aryz-ryZ9IcLq1oV6pev4gAAADk"]
[Wed Sep 30 01:02:18.581595 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.581868 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.620454 2026] [security2:error] [pid 212454:tid 212621] [client 4.185.40.215:12200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/dx.php"] [unique_id "aryz-ryZ9IcLq1oV6pev6wAAACU"]
[Wed Sep 30 01:02:18.635346 2026] [security2:error] [pid 212454:tid 212652] [client 20.214.109.68:11030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/public/wp-blog.php"] [unique_id "aryz-ryZ9IcLq1oV6pev7wAAAEQ"]
[Wed Sep 30 01:02:18.673130 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.673386 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.769605 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.770035 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.832026 2026] [security2:error] [pid 212454:tid 212608] [client 52.231.30.175:38788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/k.php"] [unique_id "aryz-ryZ9IcLq1oV6pewBwAAABg"]
[Wed Sep 30 01:02:18.856992 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.857455 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.921199 2026] [security2:error] [pid 212454:tid 212599] [client 4.185.40.215:12283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-kikikoko.php"] [unique_id "aryz-ryZ9IcLq1oV6pewCgAAAA8"]
[Wed Sep 30 01:02:18.936503 2026] [security2:error] [pid 212454:tid 212711] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz-ryZ9IcLq1oV6pewDAAAAH8"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:18.938431 2026] [security2:error] [pid 212454:tid 212704] [client 203.122.45.246:59485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pewDQAAAHg"]
[Wed Sep 30 01:02:18.938527 2026] [security2:error] [pid 212454:tid 212704] [client 203.122.45.246:59485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pewDQAAAHg"]
[Wed Sep 30 01:02:18.947670 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:18.947943 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:18.966418 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:18.966690 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:18.967514 2026] [security2:error] [pid 212454:tid 212710] [client 103.159.192.142:61589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pewEwAAAH4"]
[Wed Sep 30 01:02:18.967625 2026] [security2:error] [pid 212454:tid 212710] [client 103.159.192.142:61589] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "aryz-ryZ9IcLq1oV6pewEwAAAH4"]
[Wed Sep 30 01:02:18.986529 2026] [security2:error] [pid 212454:tid 212639] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz-ryZ9IcLq1oV6pewFAAAADc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:19.037937 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.038220 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.045139 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz-7yZ9IcLq1oV6pewGgAAACY"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:19.074097 2026] [security2:error] [pid 212454:tid 212686] [client 45.138.12.32:36082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ayj.ouz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz-7yZ9IcLq1oV6pewHQAAAGY"]
[Wed Sep 30 01:02:19.093914 2026] [security2:error] [pid 212454:tid 212695] [client 52.231.30.175:38825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/w.php"] [unique_id "aryz-7yZ9IcLq1oV6pewIgAAAG8"]
[Wed Sep 30 01:02:19.130515 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.130782 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.166863 2026] [security2:error] [pid 212454:tid 212691] [client 20.194.30.107:17426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/baru.php"] [unique_id "aryz-7yZ9IcLq1oV6pewJwAAAGs"]
[Wed Sep 30 01:02:19.220270 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.220548 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.231204 2026] [ssl:error] [pid 212454:tid 212619] [client 216.25.124.26:12909] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcalendars.eld.okj.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:02:19.236111 2026] [security2:error] [pid 212454:tid 212709] [client 4.185.40.215:12243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/file61.php"] [unique_id "aryz-7yZ9IcLq1oV6pewKwAAAH0"]
[Wed Sep 30 01:02:19.312017 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.312349 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.323930 2026] [security2:error] [pid 212454:tid 212610] [client 45.138.12.40:2572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.pikarthouse.com"] [uri "/wp-links-opml.php"] [unique_id "aryz-7yZ9IcLq1oV6pewMQAAABo"]
[Wed Sep 30 01:02:19.339149 2026] [security2:error] [pid 212454:tid 212635] [client 4.240.25.22:43811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/media.php"] [unique_id "aryz-7yZ9IcLq1oV6pewMgAAADM"]
[Wed Sep 30 01:02:19.353372 2026] [security2:error] [pid 212454:tid 212592] [client 52.231.30.175:38823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/ccc.php"] [unique_id "aryz-7yZ9IcLq1oV6pewNAAAAAg"]
[Wed Sep 30 01:02:19.388656 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.109.68:11192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/nw.php"] [unique_id "aryz-7yZ9IcLq1oV6pewNwAAAFg"]
[Wed Sep 30 01:02:19.402251 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.402502 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.445083 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:19.445346 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:02:19.452576 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:30763] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz-7yZ9IcLq1oV6pewQAAAAD4"]
[Wed Sep 30 01:02:19.452730 2026] [security2:error] [pid 212454:tid 212646] [client 106.214.2.47:30763] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "aryz-7yZ9IcLq1oV6pewQAAAAD4"]
[Wed Sep 30 01:02:19.495137 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.495412 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.501191 2026] [security2:error] [pid 212454:tid 212663] [client 103.168.67.253:6436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/wordpress/index.php"] [unique_id "aryz-7yZ9IcLq1oV6pewRAAAAE8"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:19.517120 2026] [security2:error] [pid 212454:tid 212654] [client 4.240.25.22:18805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp_blog_footer.php"] [unique_id "aryz-7yZ9IcLq1oV6pewRgAAAEY"]
[Wed Sep 30 01:02:19.557229 2026] [security2:error] [pid 212454:tid 212587] [client 4.185.40.215:1318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/xx.php"] [unique_id "aryz-7yZ9IcLq1oV6pewTAAAAAM"]
[Wed Sep 30 01:02:19.558636 2026] [fcgid:warn] [pid 212454:tid 212655] (70014)End of file found: [client 66.132.172.137:24262] mod_fcgid: can't get data from http client
[Wed Sep 30 01:02:19.568445 2026] [security2:error] [pid 212454:tid 212642] [client 20.194.96.176:1288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/xex.php"] [unique_id "aryz-7yZ9IcLq1oV6pewUAAAADo"]
[Wed Sep 30 01:02:19.589394 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.589838 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.590136 2026] [mime:warn] [pid 212454:tid 212643] AH01602: Cannot get media parameter.
[Wed Sep 30 01:02:19.620067 2026] [security2:error] [pid 212454:tid 212650] [client 4.196.65.241:19471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "aryz-7yZ9IcLq1oV6pewWQAAAEI"]
[Wed Sep 30 01:02:19.634412 2026] [security2:error] [pid 212454:tid 212634] [client 52.231.30.175:38878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/images.php"] [unique_id "aryz-7yZ9IcLq1oV6pewWgAAADI"]
[Wed Sep 30 01:02:19.678306 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.678585 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.694286 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz-7yZ9IcLq1oV6pewXwAAAFY"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:19.706196 2026] [security2:error] [pid 212454:tid 212649] [client 15.235.166.88:59066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.166.235.15.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "aryz-7yZ9IcLq1oV6pewYAAAAEE"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:02:19.769283 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.769569 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.776169 2026] [security2:error] [pid 212454:tid 212701] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz-7yZ9IcLq1oV6pewZAAAAHU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:19.806865 2026] [security2:error] [pid 212454:tid 212689] [client 20.214.109.68:11072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tool.php"] [unique_id "aryz-7yZ9IcLq1oV6pewaQAAAGk"]
[Wed Sep 30 01:02:19.852221 2026] [security2:error] [pid 212454:tid 212611] [client 116.197.133.25:59813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz-7yZ9IcLq1oV6pewawAAABs"]
[Wed Sep 30 01:02:19.852384 2026] [security2:error] [pid 212454:tid 212611] [client 116.197.133.25:59813] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "aryz-7yZ9IcLq1oV6pewawAAABs"]
[Wed Sep 30 01:02:19.859970 2026] [security2:error] [pid 212454:tid 212675] [client 4.185.40.215:12276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/Jcrop.php"] [unique_id "aryz-7yZ9IcLq1oV6pewbAAAAFs"]
[Wed Sep 30 01:02:19.863242 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.863674 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.903062 2026] [security2:error] [pid 212454:tid 212652] [client 52.231.30.175:38867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/alls.php"] [unique_id "aryz-7yZ9IcLq1oV6pewbgAAAEQ"]
[Wed Sep 30 01:02:19.951240 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:19.951494 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:19.966377 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L2N3ZA==
[Wed Sep 30 01:02:19.966641 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L2N3ZA==
[Wed Sep 30 01:02:20.039278 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.039528 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.076176 2026] [security2:error] [pid 212454:tid 212531] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz_LyZ9IcLq1oV6pewdAAAcEw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=1928ca65205459cbf8ef5de255142394&start=15&t=360
[Wed Sep 30 01:02:20.076199 2026] [security2:error] [pid 212454:tid 212531] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "aryz_LyZ9IcLq1oV6pewdAAAcEw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=1928ca65205459cbf8ef5de255142394&start=15&t=360
[Wed Sep 30 01:02:20.132237 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.132500 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.163525 2026] [security2:error] [pid 212454:tid 212632] [client 4.185.40.215:12210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/rip.php"] [unique_id "aryz_LyZ9IcLq1oV6peweQAAADA"]
[Wed Sep 30 01:02:20.183650 2026] [security2:error] [pid 212454:tid 212584] [client 52.231.30.175:38787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/admin.php"] [unique_id "aryz_LyZ9IcLq1oV6pewewAAAAA"]
[Wed Sep 30 01:02:20.226460 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.226896 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.314311 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.314584 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.349266 2026] [security2:error] [pid 212454:tid 212613] [client 20.214.109.68:11263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/drhunthq.php"] [unique_id "aryz_LyZ9IcLq1oV6pewiQAAAB0"]
[Wed Sep 30 01:02:20.377874 2026] [security2:error] [pid 212454:tid 212623] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "aryz_LyZ9IcLq1oV6pewiwAAACc"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:20.395112 2026] [security2:error] [pid 212454:tid 212656] [client 43.227.131.37:57314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz_LyZ9IcLq1oV6pewjAAAAEg"]
[Wed Sep 30 01:02:20.395218 2026] [security2:error] [pid 212454:tid 212656] [client 43.227.131.37:57314] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "aryz_LyZ9IcLq1oV6pewjAAAAEg"]
[Wed Sep 30 01:02:20.409086 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.409510 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.434022 2026] [security2:error] [pid 212454:tid 212685] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz_LyZ9IcLq1oV6pewjwAAAGU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:20.436775 2026] [security2:error] [pid 212454:tid 212670] [client 20.219.2.60:19395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-blog-header.php"] [unique_id "aryz_LyZ9IcLq1oV6pewkAAAAFY"]
[Wed Sep 30 01:02:20.444592 2026] [security2:error] [pid 212454:tid 212692] [client 52.231.30.175:38849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/geck.php"] [unique_id "aryz_LyZ9IcLq1oV6pewkQAAAGw"]
[Wed Sep 30 01:02:20.463899 2026] [security2:error] [pid 212454:tid 212603] [client 4.185.40.215:12041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/new4.php"] [unique_id "aryz_LyZ9IcLq1oV6pewkwAAABM"]
[Wed Sep 30 01:02:20.481777 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 01:02:20.482052 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25ldA==
[Wed Sep 30 01:02:20.495010 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.495276 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.589360 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.589778 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.677528 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.677792 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.725686 2026] [security2:error] [pid 212454:tid 212691] [client 52.231.30.175:38892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/goods.php"] [unique_id "aryz_LyZ9IcLq1oV6pewrAAAAGs"]
[Wed Sep 30 01:02:20.766869 2026] [security2:error] [pid 212454:tid 212592] [client 4.185.40.215:12188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/aa.php"] [unique_id "aryz_LyZ9IcLq1oV6pewsAAAAAg"]
[Wed Sep 30 01:02:20.769162 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.769413 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.862696 2026] [security2:error] [pid 212454:tid 212595] [client 20.214.109.68:11087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/admin/index.php"] [unique_id "aryz_LyZ9IcLq1oV6pewwAAAAAs"]
[Wed Sep 30 01:02:20.907082 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:20.907367 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:20.924280 2026] [security2:error] [pid 212454:tid 212711] [client 45.138.12.32:22550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bck.ujo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz_LyZ9IcLq1oV6pewwwAAAH8"]
[Wed Sep 30 01:02:20.948874 2026] [security2:error] [pid 212454:tid 212599] [client 49.205.105.16:14426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz_LyZ9IcLq1oV6pewxAAAAA8"]
[Wed Sep 30 01:02:20.948984 2026] [security2:error] [pid 212454:tid 212599] [client 49.205.105.16:14426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "aryz_LyZ9IcLq1oV6pewxAAAAA8"]
[Wed Sep 30 01:02:20.960731 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:20.961002 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:20.988575 2026] [security2:error] [pid 212454:tid 212613] [client 52.231.30.175:38818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/dejavu.php"] [unique_id "aryz_LyZ9IcLq1oV6pewxgAAAB0"]
[Wed Sep 30 01:02:21.030713 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.031187 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.040258 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.040798 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.061905 2026] [security2:error] [pid 212454:tid 212634] [client 20.194.96.176:1305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/CAE-2.5.php"] [unique_id "aryz_byZ9IcLq1oV6pewzAAAADI"]
[Wed Sep 30 01:02:21.069832 2026] [security2:error] [pid 212454:tid 212688] [client 4.185.40.215:12166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/jk.php"] [unique_id "aryz_byZ9IcLq1oV6pewzgAAAGg"]
[Wed Sep 30 01:02:21.133722 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.134024 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.205024 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.109.68:11160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tfm.php"] [unique_id "aryz_byZ9IcLq1oV6pew0wAAAG4"]
[Wed Sep 30 01:02:21.223292 2026] [security2:error] [pid 212454:tid 212598] [client 4.240.25.22:18798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/tool.php"] [unique_id "aryz_byZ9IcLq1oV6pew1gAAAA4"]
[Wed Sep 30 01:02:21.224065 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.224321 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.257384 2026] [security2:error] [pid 212454:tid 212658] [client 52.231.30.175:38797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/h02ugyh.php"] [unique_id "aryz_byZ9IcLq1oV6pew1wAAAEo"]
[Wed Sep 30 01:02:21.314833 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.315129 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.370492 2026] [security2:error] [pid 212454:tid 212602] [client 4.185.40.215:12248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/gcqoa.php"] [unique_id "aryz_byZ9IcLq1oV6pew3QAAABI"]
[Wed Sep 30 01:02:21.408766 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.409098 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.467917 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 01:02:21.468517 2026] [access_compat:error] [pid 212454:tid 212610] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL25ldA==
[Wed Sep 30 01:02:21.497517 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.497792 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.519032 2026] [security2:error] [pid 212454:tid 212662] [client 52.231.30.175:38832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/155.php"] [unique_id "aryz_byZ9IcLq1oV6pew6AAAAE4"]
[Wed Sep 30 01:02:21.564724 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL2xvY2tkL3BhcmFtZXRlcnM%3D
[Wed Sep 30 01:02:21.565185 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:53074] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL2xvY2tkL3BhcmFtZXRlcnM%3D
[Wed Sep 30 01:02:21.586666 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.586941 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.630660 2026] [security2:error] [pid 212454:tid 212633] [client 4.196.65.241:19504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/XrdbXydefault.php"] [unique_id "aryz_byZ9IcLq1oV6pew8QAAADE"]
[Wed Sep 30 01:02:21.670261 2026] [security2:error] [pid 212454:tid 212635] [client 4.185.40.215:12169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/plugin-editor.php"] [unique_id "aryz_byZ9IcLq1oV6pew8wAAADM"]
[Wed Sep 30 01:02:21.678614 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.678894 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.769639 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.769971 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.798036 2026] [security2:error] [pid 212454:tid 212682] [client 52.231.30.175:38812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/ops.php"] [unique_id "aryz_byZ9IcLq1oV6pew9wAAAGI"]
[Wed Sep 30 01:02:21.860819 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.861108 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.945677 2026] [security2:error] [pid 212454:tid 212666] [client 20.214.109.68:11039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/a4.php"] [unique_id "aryz_byZ9IcLq1oV6pew_wAAAFI"]
[Wed Sep 30 01:02:21.952058 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:21.952329 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:21.968793 2026] [security2:error] [pid 212454:tid 212685] [client 4.185.40.215:1406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/plugin-install.php"] [unique_id "aryz_byZ9IcLq1oV6pexAAAAAGU"]
[Wed Sep 30 01:02:21.989784 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:21.990231 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:22.005179 2026] [security2:error] [pid 212454:tid 212680] [client 20.70.173.30:41104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/ms-edit.php"] [unique_id "aryz_ryZ9IcLq1oV6pexBAAAAGA"]
[Wed Sep 30 01:02:22.042507 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.042768 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.059637 2026] [security2:error] [pid 212454:tid 212588] [client 52.231.30.175:38855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/mac.php"] [unique_id "aryz_ryZ9IcLq1oV6pexCQAAAAQ"]
[Wed Sep 30 01:02:22.136103 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.136494 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.192937 2026] [security2:error] [pid 212454:tid 212675] [client 20.194.96.176:5931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/ass.php"] [unique_id "aryz_ryZ9IcLq1oV6pexFQAAAFs"]
[Wed Sep 30 01:02:22.226936 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.227365 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.269349 2026] [security2:error] [pid 212454:tid 212601] [client 4.185.40.215:12183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/profile.php"] [unique_id "aryz_ryZ9IcLq1oV6pexGwAAABE"]
[Wed Sep 30 01:02:22.315675 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.315940 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.322532 2026] [security2:error] [pid 212454:tid 212657] [client 52.231.30.175:38834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/makeasmtp.php"] [unique_id "aryz_ryZ9IcLq1oV6pexHgAAAEk"]
[Wed Sep 30 01:02:22.407570 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.407887 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.425840 2026] [security2:error] [pid 212454:tid 212646] [client 45.138.12.32:36146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baf.dnk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "aryz_ryZ9IcLq1oV6pexJgAAAD4"]
[Wed Sep 30 01:02:22.475339 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:22.475604 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:22.491456 2026] [security2:error] [pid 212454:tid 212669] [client 216.73.216.46:53074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "aryz_ryZ9IcLq1oV6pexKgAAAFU"]
[Wed Sep 30 01:02:22.545318 2026] [security2:error] [pid 212454:tid 212633] [client 222.167.110.23:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "aryz_ryZ9IcLq1oV6pexLQAAADE"]
[Wed Sep 30 01:02:22.572741 2026] [security2:error] [pid 212454:tid 212643] [client 4.185.40.215:12097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/class-t.api.php"] [unique_id "aryz_ryZ9IcLq1oV6pexLwAAADs"]
[Wed Sep 30 01:02:22.588212 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.588473 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.594667 2026] [security2:error] [pid 212454:tid 212594] [client 52.231.30.175:38835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/pucci.php"] [unique_id "aryz_ryZ9IcLq1oV6pexNAAAAAo"]
[Wed Sep 30 01:02:22.650190 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzUy
[Wed Sep 30 01:02:22.650457 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzUy
[Wed Sep 30 01:02:22.678474 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.678768 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.747567 2026] [security2:error] [pid 212454:tid 212666] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/Batch/v1"] [unique_id "aryz_ryZ9IcLq1oV6pexQAAAAFI"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:22.771029 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.771294 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.809680 2026] [security2:error] [pid 212454:tid 212692] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1"] [unique_id "aryz_ryZ9IcLq1oV6pexRAAAAGw"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:22.863707 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.863990 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.864596 2026] [security2:error] [pid 212454:tid 212670] [client 52.231.30.175:38794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/puc.php"] [unique_id "aryz_ryZ9IcLq1oV6pexSAAAAFY"]
[Wed Sep 30 01:02:22.873856 2026] [security2:error] [pid 212454:tid 212693] [client 4.185.40.215:12161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-links-opml.php"] [unique_id "aryz_ryZ9IcLq1oV6pexSQAAAG0"]
[Wed Sep 30 01:02:22.957362 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:22.957801 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:22.959937 2026] [security2:error] [pid 212454:tid 212665] [client 49.36.41.37:64545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz_ryZ9IcLq1oV6pexUQAAAFE"]
[Wed Sep 30 01:02:22.960100 2026] [security2:error] [pid 212454:tid 212665] [client 49.36.41.37:64545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "aryz_ryZ9IcLq1oV6pexUQAAAFE"]
[Wed Sep 30 01:02:22.979146 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 01:02:22.979559 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZA==
[Wed Sep 30 01:02:23.045871 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.046179 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.134986 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.135260 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.149730 2026] [security2:error] [pid 212454:tid 212601] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp-json/batch/v1/"] [unique_id "aryz_7yZ9IcLq1oV6pexXQAAABE"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:23.160998 2026] [security2:error] [pid 212454:tid 212615] [client 52.231.30.175:32242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/8.php"] [unique_id "aryz_7yZ9IcLq1oV6pexXgAAAB8"]
[Wed Sep 30 01:02:23.164519 2026] [security2:error] [pid 212454:tid 212695] [client 20.194.96.176:5900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/felnggg.php"] [unique_id "aryz_7yZ9IcLq1oV6pexXwAAAG8"]
[Wed Sep 30 01:02:23.171382 2026] [security2:error] [pid 212454:tid 212616] [client 20.214.109.68:11027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wen.php"] [unique_id "aryz_7yZ9IcLq1oV6pexYQAAACA"]
[Wed Sep 30 01:02:23.176848 2026] [security2:error] [pid 212454:tid 212596] [client 4.185.40.215:12168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-class-api.php"] [unique_id "aryz_7yZ9IcLq1oV6pexYwAAAAw"]
[Wed Sep 30 01:02:23.207535 2026] [security2:error] [pid 212454:tid 212662] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/blog/wp-json/batch/v1"] [unique_id "aryz_7yZ9IcLq1oV6pexZQAAAE4"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:23.209462 2026] [security2:error] [pid 212454:tid 212514] [remote 57.141.14.84:51720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "aryz_7yZ9IcLq1oV6pexZgAAMDs"]
[Wed Sep 30 01:02:23.228188 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.228604 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.290224 2026] [security2:error] [pid 212454:tid 212669] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wordpress/wp-json/batch/v1"] [unique_id "aryz_7yZ9IcLq1oV6pexbQAAAFU"], referer: https://glorymfb.com/wordpress/wp-admin/
[Wed Sep 30 01:02:23.316575 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.316857 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:30158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.361552 2026] [security2:error] [pid 212454:tid 212684] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/posts/999999"] [unique_id "aryz_7yZ9IcLq1oV6pexdwAAAGQ"]
[Wed Sep 30 01:02:23.363388 2026] [security2:error] [pid 212454:tid 212647] [client 20.219.2.60:19449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bgymj.php"] [unique_id "aryz_7yZ9IcLq1oV6pexeAAAAD8"]
[Wed Sep 30 01:02:23.409371 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.409637 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.424971 2026] [security2:error] [pid 212454:tid 212607] [client 52.231.30.175:38863] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.hannahjune.com"] [uri "/1.php"] [unique_id "aryz_7yZ9IcLq1oV6pexfQAAABc"]
[Wed Sep 30 01:02:23.425079 2026] [security2:error] [pid 212454:tid 212607] [client 52.231.30.175:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/1.php"] [unique_id "aryz_7yZ9IcLq1oV6pexfQAAABc"]
[Wed Sep 30 01:02:23.487413 2026] [security2:error] [pid 212454:tid 212656] [client 216.73.216.46:30158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "aryz_7yZ9IcLq1oV6pexhAAAAEg"], referer: http://www.homs.co.ke/?action=adminer&p=L3Byb2MvaXJxLzQxL1BDSWUgYndjdHJs
[Wed Sep 30 01:02:23.493789 2026] [security2:error] [pid 212454:tid 212664] [client 4.185.40.215:12250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-class-atom.php"] [unique_id "aryz_7yZ9IcLq1oV6pexhwAAAFA"]
[Wed Sep 30 01:02:23.499507 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.499787 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.507222 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:23.507537 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:23.591371 2026] [security2:error] [pid 212454:tid 212589] [client 4.240.25.22:8432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dronishness.php"] [unique_id "aryz_7yZ9IcLq1oV6pexlQAAAAU"]
[Wed Sep 30 01:02:23.591789 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.592050 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.653134 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDQw
[Wed Sep 30 01:02:23.653391 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDQw
[Wed Sep 30 01:02:23.689554 2026] [security2:error] [pid 212454:tid 212691] [client 52.231.30.175:38836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/admin.php"] [unique_id "aryz_7yZ9IcLq1oV6pexogAAAGs"]
[Wed Sep 30 01:02:23.707687 2026] [autoindex:error] [pid 212454:tid 212686] [client 185.247.137.86:33909] AH01276: Cannot serve directory /home4/hgskkxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://hgs.kkx.mybluehost.me
[Wed Sep 30 01:02:23.742329 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.742746 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.779315 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.779764 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.806422 2026] [security2:error] [pid 212454:tid 212605] [client 4.185.40.215:12220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-block.php"] [unique_id "aryz_7yZ9IcLq1oV6pexwwAAABU"]
[Wed Sep 30 01:02:23.823360 2026] [security2:error] [pid 212454:tid 212633] [client 4.240.25.22:18786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/az.php"] [unique_id "aryz_7yZ9IcLq1oV6pexxAAAADE"]
[Wed Sep 30 01:02:23.843036 2026] [security2:error] [pid 212454:tid 212703] [client 20.214.109.68:11181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ms.php"] [unique_id "aryz_7yZ9IcLq1oV6pexxwAAAHc"]
[Wed Sep 30 01:02:23.864786 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.865067 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.954883 2026] [security2:error] [pid 212454:tid 212662] [client 43.104.4.190:45756] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "aryz_7yZ9IcLq1oV6pex2gAAAE4"], referer: https://coscharis-tech.com/product-category/computers/desktops/?wlfilter=1&woolentor_product_cat=led-lamp%2Cspeakers
[Wed Sep 30 01:02:23.960103 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:23.960517 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:23.970055 2026] [security2:error] [pid 212454:tid 212680] [client 52.231.30.175:38810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/edit.php"] [unique_id "aryz_7yZ9IcLq1oV6pex3QAAAGA"]
[Wed Sep 30 01:02:24.003445 2026] [access_compat:error] [pid 212454:tid 212661] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:02:24.003873 2026] [access_compat:error] [pid 212454:tid 212661] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:02:24.047077 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.047342 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.106463 2026] [security2:error] [pid 212454:tid 212625] [client 4.185.40.215:12273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-signup.php"] [unique_id "ary0ALyZ9IcLq1oV6pex5AAAACk"]
[Wed Sep 30 01:02:24.137254 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.137533 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.171699 2026] [security2:error] [pid 212454:tid 212610] [client 4.196.65.241:2502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/calmjpss.php"] [unique_id "ary0ALyZ9IcLq1oV6pex6AAAABo"]
[Wed Sep 30 01:02:24.229823 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.230112 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.238204 2026] [security2:error] [pid 212454:tid 212678] [client 52.231.30.175:38829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/inputs.php"] [unique_id "ary0ALyZ9IcLq1oV6pex7gAAAF4"]
[Wed Sep 30 01:02:24.320798 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.321093 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.387935 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzg4
[Wed Sep 30 01:02:24.388390 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzg4
[Wed Sep 30 01:02:24.388408 2026] [security2:error] [pid 212454:tid 212618] [client 181.46.39.212:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0ALyZ9IcLq1oV6pex9wAAACI"]
[Wed Sep 30 01:02:24.412854 2026] [security2:error] [pid 212454:tid 212638] [client 4.185.40.215:12234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-xmlsia.php"] [unique_id "ary0ALyZ9IcLq1oV6pex_AAAADY"]
[Wed Sep 30 01:02:24.413819 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.414261 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.468276 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:24.468542 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:24.498166 2026] [security2:error] [pid 212454:tid 212587] [client 52.231.30.175:38869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/classwithtostring.php"] [unique_id "ary0ALyZ9IcLq1oV6peyBQAAAAM"]
[Wed Sep 30 01:02:24.504496 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.504953 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.515119 2026] [security2:error] [pid 212454:tid 212666] [client 213.188.64.182:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0ALyZ9IcLq1oV6peyCAAAAFI"]
[Wed Sep 30 01:02:24.593184 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.593535 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.618294 2026] [security2:error] [pid 212454:tid 212620] [client 223.181.30.165:7847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0ALyZ9IcLq1oV6peyEwAAACQ"]
[Wed Sep 30 01:02:24.618416 2026] [security2:error] [pid 212454:tid 212620] [client 223.181.30.165:7847] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0ALyZ9IcLq1oV6peyEwAAACQ"]
[Wed Sep 30 01:02:24.659742 2026] [security2:error] [pid 212454:tid 212623] [client 85.204.70.116:56170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0ALyZ9IcLq1oV6peyFgAAACc"]
[Wed Sep 30 01:02:24.684900 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.685203 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.692974 2026] [security2:error] [pid 212454:tid 212683] [client 20.219.2.60:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gfd.php"] [unique_id "ary0ALyZ9IcLq1oV6peyGAAAAGM"]
[Wed Sep 30 01:02:24.740958 2026] [security2:error] [pid 212454:tid 212648] [client 4.185.40.215:1307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.40.185.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.avions-biddingestimates.com"] [uri "/wp-inic3.php"] [unique_id "ary0ALyZ9IcLq1oV6peyGgAAAEA"]
[Wed Sep 30 01:02:24.760699 2026] [security2:error] [pid 212454:tid 212625] [client 52.231.30.175:38817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/adminfuns.php"] [unique_id "ary0ALyZ9IcLq1oV6peyGwAAACk"]
[Wed Sep 30 01:02:24.775296 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.775724 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.835931 2026] [security2:error] [pid 212454:tid 212632] [client 37.41.16.35:64095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ALyZ9IcLq1oV6peyIAAAADA"]
[Wed Sep 30 01:02:24.836072 2026] [security2:error] [pid 212454:tid 212632] [client 37.41.16.35:64095] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ALyZ9IcLq1oV6peyIAAAADA"]
[Wed Sep 30 01:02:24.868211 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.868617 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.955176 2026] [security2:error] [pid 212454:tid 212613] [client 85.204.70.116:56180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0ALyZ9IcLq1oV6peyJwAAAB0"]
[Wed Sep 30 01:02:24.957419 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:24.957892 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:24.972794 2026] [security2:error] [pid 212454:tid 212642] [client 4.196.65.241:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/84300819ebindex.php"] [unique_id "ary0ALyZ9IcLq1oV6peyKwAAADo"]
[Wed Sep 30 01:02:24.998799 2026] [security2:error] [pid 212454:tid 212702] [client 4.240.25.22:18752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/133.php"] [unique_id "ary0ALyZ9IcLq1oV6peyLAAAAHY"]
[Wed Sep 30 01:02:25.006626 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:25.006893 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:25.017989 2026] [security2:error] [pid 212454:tid 212695] [client 20.214.109.68:11174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/hplfuns.php"] [unique_id "ary0AbyZ9IcLq1oV6peyLgAAAG8"]
[Wed Sep 30 01:02:25.040452 2026] [security2:error] [pid 212454:tid 212628] [client 52.231.30.175:38822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/222.php"] [unique_id "ary0AbyZ9IcLq1oV6peyMQAAACw"]
[Wed Sep 30 01:02:25.047076 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.047340 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.051336 2026] [security2:error] [pid 212454:tid 212668] [client 103.159.192.142:61723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0AbyZ9IcLq1oV6peyNAAAAFQ"]
[Wed Sep 30 01:02:25.051433 2026] [security2:error] [pid 212454:tid 212668] [client 103.159.192.142:61723] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0AbyZ9IcLq1oV6peyNAAAAFQ"]
[Wed Sep 30 01:02:25.089894 2026] [security2:error] [pid 212454:tid 212638] [client 45.138.12.32:22662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bdk.etg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0AbyZ9IcLq1oV6peyNQAAADY"]
[Wed Sep 30 01:02:25.138280 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.138546 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.230398 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.230672 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.303430 2026] [security2:error] [pid 212454:tid 212693] [client 52.231.30.175:38884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/BDKR28WP.php"] [unique_id "ary0AbyZ9IcLq1oV6peySAAAAG0"]
[Wed Sep 30 01:02:25.308873 2026] [security2:error] [pid 212454:tid 212710] [client 189.203.104.183:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0AbyZ9IcLq1oV6peySQAAAH4"]
[Wed Sep 30 01:02:25.320469 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.320725 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.342322 2026] [security2:error] [pid 212454:tid 212623] [client 4.240.25.22:8499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp.php"] [unique_id "ary0AbyZ9IcLq1oV6peySwAAACc"]
[Wed Sep 30 01:02:25.398360 2026] [security2:error] [pid 212454:tid 212634] [client 85.204.70.116:56182] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0AbyZ9IcLq1oV6peyTAAAADI"]
[Wed Sep 30 01:02:25.410618 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0AbyZ9IcLq1oV6peyTgAAN0k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65340&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:02:25.410642 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0AbyZ9IcLq1oV6peyTgAAN0k"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65340&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:02:25.413782 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.414202 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.469262 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:25.469529 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:25.504171 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.504423 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.514639 2026] [security2:error] [pid 212454:tid 212687] [client 216.73.216.46:1554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0AbyZ9IcLq1oV6peyVAAAAGc"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWI2NC9wZXJsNS92ZW5kb3JfcGVybC9hdXRvL1Byb2M%3D
[Wed Sep 30 01:02:25.573876 2026] [security2:error] [pid 212454:tid 212596] [client 52.231.30.175:38888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp.php"] [unique_id "ary0AbyZ9IcLq1oV6peyWAAAAAw"]
[Wed Sep 30 01:02:25.594002 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.594269 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.627751 2026] [security2:error] [pid 212454:tid 212688] [client 20.194.96.176:5939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/felnggg.update.php"] [unique_id "ary0AbyZ9IcLq1oV6peyXQAAAGg"]
[Wed Sep 30 01:02:25.653719 2026] [security2:error] [pid 212454:tid 212698] [client 103.241.204.139:49487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0AbyZ9IcLq1oV6peyXwAAAHI"]
[Wed Sep 30 01:02:25.653836 2026] [security2:error] [pid 212454:tid 212698] [client 103.241.204.139:49487] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0AbyZ9IcLq1oV6peyXwAAAHI"]
[Wed Sep 30 01:02:25.686740 2026] [security2:error] [pid 212454:tid 212588] [client 85.204.70.116:58418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0AbyZ9IcLq1oV6peyYgAAAAQ"]
[Wed Sep 30 01:02:25.739718 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:3279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.739999 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:3279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.744782 2026] [security2:error] [pid 212454:tid 212624] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0AbyZ9IcLq1oV6peyaAAAACg"]
[Wed Sep 30 01:02:25.778052 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.778324 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.840179 2026] [security2:error] [pid 212454:tid 212696] [client 52.231.30.175:32205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/simple.php"] [unique_id "ary0AbyZ9IcLq1oV6peybgAAAHA"]
[Wed Sep 30 01:02:25.850705 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/pages"] [unique_id "ary0AbyZ9IcLq1oV6peybwAAAH0"]
[Wed Sep 30 01:02:25.873957 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.874212 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.934123 2026] [security2:error] [pid 212454:tid 212650] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0AbyZ9IcLq1oV6peydwAAAEI"]
[Wed Sep 30 01:02:25.962929 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:25.963197 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:25.973717 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:25.973995 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:25.994142 2026] [security2:error] [pid 212454:tid 212587] [client 85.204.70.116:34636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0AbyZ9IcLq1oV6peygAAAAAM"]
[Wed Sep 30 01:02:26.010200 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/media"] [unique_id "ary0AryZ9IcLq1oV6peygQAAAAA"]
[Wed Sep 30 01:02:26.056232 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.056500 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.083983 2026] [security2:error] [pid 212454:tid 212648] [client 152.59.169.65:52079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyiAAAAEA"]
[Wed Sep 30 01:02:26.084082 2026] [security2:error] [pid 212454:tid 212648] [client 152.59.169.65:52079] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyiAAAAEA"]
[Wed Sep 30 01:02:26.089625 2026] [security2:error] [pid 212454:tid 212601] [client 182.69.182.151:21566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyiQAAABE"]
[Wed Sep 30 01:02:26.090454 2026] [security2:error] [pid 212454:tid 212601] [client 182.69.182.151:21566] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyiQAAABE"]
[Wed Sep 30 01:02:26.107336 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:32155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/chosen.php"] [unique_id "ary0AryZ9IcLq1oV6peyiwAAABM"]
[Wed Sep 30 01:02:26.129067 2026] [proxy:warn] [pid 212454:tid 212664] [client 199.45.154.116:52352] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be admin.dennis-cooper.com for uri /400.shtml
[Wed Sep 30 01:02:26.140282 2026] [security2:error] [pid 212454:tid 212701] [client 20.219.2.60:18877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/callback.php"] [unique_id "ary0AryZ9IcLq1oV6peykAAAAHU"]
[Wed Sep 30 01:02:26.148998 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.149423 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.189019 2026] [security2:error] [pid 212454:tid 212677] [client 213.136.69.135:64009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wp-view-config-data.php"] [unique_id "ary0AryZ9IcLq1oV6peymAAAAF0"], referer: binance.com
[Wed Sep 30 01:02:26.238556 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.238992 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.271358 2026] [security2:error] [pid 212454:tid 212673] [client 85.204.70.116:58440] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0AryZ9IcLq1oV6peypAAAAFk"]
[Wed Sep 30 01:02:26.330887 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.331228 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.353224 2026] [security2:error] [pid 212454:tid 212660] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0AryZ9IcLq1oV6peyrwAAAEw"]
[Wed Sep 30 01:02:26.375440 2026] [security2:error] [pid 212454:tid 212649] [client 52.231.30.175:32234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/als.php"] [unique_id "ary0AryZ9IcLq1oV6peysAAAAEE"]
[Wed Sep 30 01:02:26.428381 2026] [access_compat:error] [pid 212454:tid 212693] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:26.428820 2026] [access_compat:error] [pid 212454:tid 212693] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:26.434525 2026] [security2:error] [pid 212454:tid 212685] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/categories"] [unique_id "ary0AryZ9IcLq1oV6peyuAAAAGU"]
[Wed Sep 30 01:02:26.437019 2026] [security2:error] [pid 212454:tid 212666] [client 122.173.27.10:15030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyuQAAAFI"]
[Wed Sep 30 01:02:26.437154 2026] [security2:error] [pid 212454:tid 212666] [client 122.173.27.10:15030] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyuQAAAFI"]
[Wed Sep 30 01:02:26.456880 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:3279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.457165 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:3279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.518096 2026] [security2:error] [pid 212454:tid 212701] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0AryZ9IcLq1oV6peywQAAAHU"]
[Wed Sep 30 01:02:26.531209 2026] [security2:error] [pid 212454:tid 212596] [client 216.73.216.46:3279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0AryZ9IcLq1oV6peyxAAAAAw"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvZnMvY2dyb3VwL1VTRVJTLzExOTE%3D
[Wed Sep 30 01:02:26.531842 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.532119 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.565353 2026] [security2:error] [pid 212454:tid 212632] [client 85.204.70.116:5847] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0AryZ9IcLq1oV6peyxQAAADA"]
[Wed Sep 30 01:02:26.639234 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.639518 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.639556 2026] [security2:error] [pid 212454:tid 212612] [client 52.231.30.175:32225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/admin.php"] [unique_id "ary0AryZ9IcLq1oV6peyzQAAABw"]
[Wed Sep 30 01:02:26.641197 2026] [security2:error] [pid 212454:tid 212687] [client 223.181.60.167:15139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyzgAAAGc"]
[Wed Sep 30 01:02:26.641556 2026] [security2:error] [pid 212454:tid 212687] [client 223.181.60.167:15139] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0AryZ9IcLq1oV6peyzgAAAGc"]
[Wed Sep 30 01:02:26.745098 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.745363 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.784522 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.784844 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.811905 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.109.68:11093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tfm.php"] [unique_id "ary0AryZ9IcLq1oV6pey2QAAAA8"]
[Wed Sep 30 01:02:26.874577 2026] [security2:error] [pid 212454:tid 212660] [client 85.204.70.116:58458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0AryZ9IcLq1oV6pey3gAAAEw"]
[Wed Sep 30 01:02:26.876227 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.876500 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.903026 2026] [security2:error] [pid 212454:tid 212586] [client 52.231.30.175:38828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/f35.php"] [unique_id "ary0AryZ9IcLq1oV6pey4AAAAAI"]
[Wed Sep 30 01:02:26.958611 2026] [security2:error] [pid 212454:tid 212698] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/tags"] [unique_id "ary0AryZ9IcLq1oV6pey4wAAAHI"]
[Wed Sep 30 01:02:26.966814 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:26.967123 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:26.990984 2026] [access_compat:error] [pid 212454:tid 212685] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:26.991295 2026] [access_compat:error] [pid 212454:tid 212685] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:27.057712 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.058029 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.148517 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.148776 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.168039 2026] [security2:error] [pid 212454:tid 212601] [client 85.204.70.116:58462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0A7yZ9IcLq1oV6pey7gAAABE"]
[Wed Sep 30 01:02:27.184311 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:38820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/aaa.php"] [unique_id "ary0A7yZ9IcLq1oV6pey8AAAABM"]
[Wed Sep 30 01:02:27.240264 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.240560 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:41224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.264313 2026] [security2:error] [pid 212454:tid 212647] [client 20.70.173.30:59979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/chosen.php"] [unique_id "ary0A7yZ9IcLq1oV6pey9QAAAD8"]
[Wed Sep 30 01:02:27.264441 2026] [security2:error] [pid 212454:tid 212688] [client 20.198.74.230:23917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/Qdkv4tOtNdefault.php"] [unique_id "ary0A7yZ9IcLq1oV6pey9gAAAGg"]
[Wed Sep 30 01:02:27.272781 2026] [security2:error] [pid 212454:tid 212659] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pey7wAAAEs"]
[Wed Sep 30 01:02:27.332345 2026] [security2:error] [pid 212454:tid 212672] [client 20.194.96.176:5940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/jybkxer.php"] [unique_id "ary0A7yZ9IcLq1oV6pezAwAAAFg"]
[Wed Sep 30 01:02:27.333922 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.334339 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.336447 2026] [security2:error] [pid 212454:tid 212627] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0A7yZ9IcLq1oV6pezBAAAACs"]
[Wed Sep 30 01:02:27.337855 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezAgAAABo"]
[Wed Sep 30 01:02:27.378924 2026] [security2:error] [pid 212454:tid 212671] [client 130.131.227.119:34900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/alfa.php"] [unique_id "ary0A7yZ9IcLq1oV6pezBQAAAFc"]
[Wed Sep 30 01:02:27.399674 2026] [security2:error] [pid 212454:tid 212604] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezBwAAABQ"]
[Wed Sep 30 01:02:27.421009 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.421275 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.425610 2026] [security2:error] [pid 212454:tid 212679] [client 216.73.216.46:41224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0A7yZ9IcLq1oV6pezDAAAAF8"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvY2xhc3MvdHR5L3R0eTE1L3Bvd2Vy
[Wed Sep 30 01:02:27.427194 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:27.427461 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:27.453941 2026] [security2:error] [pid 212454:tid 212594] [client 52.231.30.175:38900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/gecko.php"] [unique_id "ary0A7yZ9IcLq1oV6pezEAAAAAo"]
[Wed Sep 30 01:02:27.459056 2026] [security2:error] [pid 212454:tid 212692] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezDwAAAGw"]
[Wed Sep 30 01:02:27.464053 2026] [security2:error] [pid 212454:tid 212654] [client 85.204.70.116:58476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0A7yZ9IcLq1oV6pezEQAAAEY"]
[Wed Sep 30 01:02:27.521714 2026] [security2:error] [pid 212454:tid 212621] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezEgAAACU"]
[Wed Sep 30 01:02:27.533213 2026] [security2:error] [pid 212454:tid 212700] [client 103.172.210.103:52621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0A7yZ9IcLq1oV6pezEwAAAHQ"]
[Wed Sep 30 01:02:27.533369 2026] [security2:error] [pid 212454:tid 212700] [client 103.172.210.103:52621] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0A7yZ9IcLq1oV6pezEwAAAHQ"]
[Wed Sep 30 01:02:27.537330 2026] [security2:error] [pid 212454:tid 212660] [client 130.131.227.119:56635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "ary0A7yZ9IcLq1oV6pezFQAAAEw"]
[Wed Sep 30 01:02:27.595979 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.109.68:11191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/8573.php"] [unique_id "ary0A7yZ9IcLq1oV6pezGQAAACY"]
[Wed Sep 30 01:02:27.606299 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezGAAAAFs"]
[Wed Sep 30 01:02:27.609850 2026] [security2:error] [pid 212454:tid 212554] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0A7yZ9IcLq1oV6pezGgAAZWM"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1680&t=4545
[Wed Sep 30 01:02:27.609880 2026] [security2:error] [pid 212454:tid 212554] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0A7yZ9IcLq1oV6pezGgAAZWM"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=c6e409e94bc3ad352470447c536988c6&start=1680&t=4545
[Wed Sep 30 01:02:27.702964 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.703262 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.707359 2026] [security2:error] [pid 212454:tid 212666] [client 130.131.227.119:34932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/lock360.php"] [unique_id "ary0A7yZ9IcLq1oV6pezIwAAAFI"]
[Wed Sep 30 01:02:27.718228 2026] [security2:error] [pid 212454:tid 212663] [client 52.231.30.175:32135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/xiugai.php"] [unique_id "ary0A7yZ9IcLq1oV6pezJAAAAE8"]
[Wed Sep 30 01:02:27.725427 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/posts/999998"] [unique_id "ary0A7yZ9IcLq1oV6pezJgAAAAA"]
[Wed Sep 30 01:02:27.755963 2026] [security2:error] [pid 212454:tid 212701] [client 85.204.70.116:58486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0A7yZ9IcLq1oV6pezKQAAAHU"]
[Wed Sep 30 01:02:27.847266 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:18695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.847528 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:18695] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.856884 2026] [security2:error] [pid 212454:tid 212694] [client 130.131.227.119:56579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/flower.php"] [unique_id "ary0A7yZ9IcLq1oV6pezNgAAAG4"]
[Wed Sep 30 01:02:27.929187 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0A7yZ9IcLq1oV6pezOAAAABo"]
[Wed Sep 30 01:02:27.937417 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:46545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:27.937707 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:46545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:27.969061 2026] [security2:error] [pid 212454:tid 212635] [client 216.73.216.46:18695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0A7yZ9IcLq1oV6pezPgAAADM"]
[Wed Sep 30 01:02:27.971899 2026] [security2:error] [pid 212454:tid 212683] [client 20.219.2.60:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/file.php"] [unique_id "ary0A7yZ9IcLq1oV6pezPwAAAGM"]
[Wed Sep 30 01:02:27.979226 2026] [security2:error] [pid 212454:tid 212620] [client 52.231.30.175:38814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/inx.php"] [unique_id "ary0A7yZ9IcLq1oV6pezQAAAACQ"]
[Wed Sep 30 01:02:27.996628 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2Zk
[Wed Sep 30 01:02:27.996910 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2Zk
[Wed Sep 30 01:02:28.004659 2026] [security2:error] [pid 212454:tid 212605] [client 130.131.227.119:32746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/13.php"] [unique_id "ary0BLyZ9IcLq1oV6pezRAAAABU"]
[Wed Sep 30 01:02:28.043101 2026] [security2:error] [pid 212454:tid 212692] [client 85.204.70.116:18167] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0BLyZ9IcLq1oV6pezRwAAAGw"]
[Wed Sep 30 01:02:28.067582 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.067861 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.098235 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.109.68:11235] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.combatscore.com"] [uri "/1.php"] [unique_id "ary0BLyZ9IcLq1oV6pezTQAAAEw"]
[Wed Sep 30 01:02:28.098337 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.109.68:11235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/1.php"] [unique_id "ary0BLyZ9IcLq1oV6pezTQAAAEw"]
[Wed Sep 30 01:02:28.116573 2026] [security2:error] [pid 212454:tid 212628] [client 155.190.6.18:57556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezUQAAACw"]
[Wed Sep 30 01:02:28.116698 2026] [security2:error] [pid 212454:tid 212628] [client 155.190.6.18:57556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezUQAAACw"]
[Wed Sep 30 01:02:28.161410 2026] [security2:error] [pid 212454:tid 212680] [client 130.131.227.119:16872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/cc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezVgAAAGA"]
[Wed Sep 30 01:02:28.209838 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.210122 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.240768 2026] [security2:error] [pid 212454:tid 212609] [client 52.231.30.175:32197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/11.php"] [unique_id "ary0BLyZ9IcLq1oV6pezWgAAABk"]
[Wed Sep 30 01:02:28.242582 2026] [security2:error] [pid 212454:tid 212693] [client 216.73.216.46:46545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0BLyZ9IcLq1oV6pezWwAAAG0"]
[Wed Sep 30 01:02:28.322778 2026] [security2:error] [pid 212454:tid 212661] [client 130.131.227.119:34909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/gecko-new.php"] [unique_id "ary0BLyZ9IcLq1oV6pezZQAAAE0"]
[Wed Sep 30 01:02:28.325144 2026] [security2:error] [pid 212454:tid 212598] [client 85.204.70.116:58498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0BLyZ9IcLq1oV6pezZgAAAA4"]
[Wed Sep 30 01:02:28.343872 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.344284 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.430229 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.430501 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.446834 2026] [security2:error] [pid 212454:tid 212639] [client 74.7.242.1:47536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0BLyZ9IcLq1oV6pezaQAAADc"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:02:28.462735 2026] [security2:error] [pid 212454:tid 212616] [client 4.196.65.241:64191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/hypo.php"] [unique_id "ary0BLyZ9IcLq1oV6pezbAAAACA"]
[Wed Sep 30 01:02:28.466615 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2Zk
[Wed Sep 30 01:02:28.466892 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2Zk
[Wed Sep 30 01:02:28.476438 2026] [security2:error] [pid 212454:tid 212645] [client 130.131.227.119:34893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-content.php.php"] [unique_id "ary0BLyZ9IcLq1oV6pezbQAAAD0"]
[Wed Sep 30 01:02:28.508239 2026] [security2:error] [pid 212454:tid 212664] [client 52.231.30.175:38816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/File.php"] [unique_id "ary0BLyZ9IcLq1oV6pezbgAAAFA"]
[Wed Sep 30 01:02:28.520746 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.521010 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.561129 2026] [autoindex:error] [pid 212454:tid 212668] [client 170.106.161.78:51060] AH01276: Cannot serve directory /home4/muranoav/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://muranoaviacion.com
[Wed Sep 30 01:02:28.610165 2026] [security2:error] [pid 212454:tid 212683] [client 85.204.70.116:58514] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0BLyZ9IcLq1oV6pezdgAAAGM"]
[Wed Sep 30 01:02:28.613307 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.613571 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.634425 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0BLyZ9IcLq1oV6pezdwAAAH0"]
[Wed Sep 30 01:02:28.635558 2026] [security2:error] [pid 212454:tid 212684] [client 130.131.227.119:56626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/link.php"] [unique_id "ary0BLyZ9IcLq1oV6pezeAAAAGQ"]
[Wed Sep 30 01:02:28.703813 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.704102 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.729112 2026] [security2:error] [pid 212454:tid 212654] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/posts/99999"] [unique_id "ary0BLyZ9IcLq1oV6pezggAAAEY"]
[Wed Sep 30 01:02:28.759133 2026] [security2:error] [pid 212454:tid 212468] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0BLyZ9IcLq1oV6pezhAAAOQ0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65340&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:02:28.759156 2026] [security2:error] [pid 212454:tid 212468] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0BLyZ9IcLq1oV6pezhAAAOQ0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=65340&sid=2304735290e7120c5e3b90e3d9d0b20b
[Wed Sep 30 01:02:28.759856 2026] [core:error] [pid 212454:tid 212634] [client 65.111.22.89:24845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:28.759877 2026] [core:error] [pid 212454:tid 212634] [client 65.111.22.89:24845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:28.768972 2026] [security2:error] [pid 212454:tid 212649] [client 52.231.30.175:38872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0BLyZ9IcLq1oV6pezhwAAAEE"]
[Wed Sep 30 01:02:28.785362 2026] [access_compat:error] [pid 212454:tid 212687] [client 47.79.13.64:34572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:28.785627 2026] [access_compat:error] [pid 212454:tid 212687] [client 47.79.13.64:34572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:28.787940 2026] [security2:error] [pid 212454:tid 212710] [client 130.131.227.119:56622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-fmfile.php"] [unique_id "ary0BLyZ9IcLq1oV6pezigAAAH4"]
[Wed Sep 30 01:02:28.793713 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.794000 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.801298 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0BLyZ9IcLq1oV6peziwAAAC0"]
[Wed Sep 30 01:02:28.819983 2026] [access_compat:error] [pid 212454:tid 212620] [client 47.79.13.1:37268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:28.820301 2026] [access_compat:error] [pid 212454:tid 212620] [client 47.79.13.1:37268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:28.851040 2026] [security2:error] [pid 212454:tid 212691] [client 20.214.109.68:11016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/term.php"] [unique_id "ary0BLyZ9IcLq1oV6pezlgAAAGs"]
[Wed Sep 30 01:02:28.861383 2026] [security2:error] [pid 212454:tid 212589] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0BLyZ9IcLq1oV6pezlwAAAAU"]
[Wed Sep 30 01:02:28.885984 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.886235 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.901979 2026] [security2:error] [pid 212454:tid 212704] [client 85.204.70.116:58526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0BLyZ9IcLq1oV6pezmQAAAHg"]
[Wed Sep 30 01:02:28.914372 2026] [security2:error] [pid 212454:tid 212614] [client 202.179.95.79:63486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezmgAAAB4"]
[Wed Sep 30 01:02:28.914498 2026] [security2:error] [pid 212454:tid 212614] [client 202.179.95.79:63486] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezmgAAAB4"]
[Wed Sep 30 01:02:28.937725 2026] [security2:error] [pid 212454:tid 212702] [client 130.131.227.119:34934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wi.php"] [unique_id "ary0BLyZ9IcLq1oV6pezmwAAAHY"]
[Wed Sep 30 01:02:28.976578 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:28.976844 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:28.988507 2026] [security2:error] [pid 212454:tid 212638] [client 116.72.182.19:63565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezngAAADY"]
[Wed Sep 30 01:02:28.988617 2026] [security2:error] [pid 212454:tid 212638] [client 116.72.182.19:63565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0BLyZ9IcLq1oV6pezngAAADY"]
[Wed Sep 30 01:02:28.994578 2026] [access_compat:error] [pid 212454:tid 212611] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:28.994892 2026] [access_compat:error] [pid 212454:tid 212611] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:29.029744 2026] [security2:error] [pid 212454:tid 212646] [client 52.231.30.175:38857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0BbyZ9IcLq1oV6pezoAAAAD4"]
[Wed Sep 30 01:02:29.063175 2026] [security2:error] [pid 212454:tid 212599] [client 152.59.165.7:50327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezowAAAA8"]
[Wed Sep 30 01:02:29.063336 2026] [security2:error] [pid 212454:tid 212599] [client 152.59.165.7:50327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezowAAAA8"]
[Wed Sep 30 01:02:29.067522 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.067786 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.072086 2026] [security2:error] [pid 212454:tid 212671] [client 4.240.25.22:30734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/mh.php"] [unique_id "ary0BbyZ9IcLq1oV6pezpQAAAFc"]
[Wed Sep 30 01:02:29.112540 2026] [security2:error] [pid 212454:tid 212606] [client 130.131.227.119:16853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/function.php"] [unique_id "ary0BbyZ9IcLq1oV6pezqAAAABY"]
[Wed Sep 30 01:02:29.159743 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.160037 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:29260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.179117 2026] [access_compat:error] [pid 212454:tid 212642] [client 47.79.13.174:50182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:29.179389 2026] [access_compat:error] [pid 212454:tid 212642] [client 47.79.13.174:50182] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:29.183905 2026] [security2:error] [pid 212454:tid 212626] [client 85.204.70.116:58540] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.stz.tcq.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0BbyZ9IcLq1oV6pezsAAAACo"]
[Wed Sep 30 01:02:29.204052 2026] [security2:error] [pid 212454:tid 212711] [client 223.235.102.107:15095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezsQAAAH8"]
[Wed Sep 30 01:02:29.204181 2026] [security2:error] [pid 212454:tid 212711] [client 223.235.102.107:15095] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezsQAAAH8"]
[Wed Sep 30 01:02:29.243710 2026] [security2:error] [pid 212454:tid 212618] [client 216.73.216.46:29260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0BbyZ9IcLq1oV6peztQAAACI"]
[Wed Sep 30 01:02:29.246164 2026] [security2:error] [pid 212454:tid 212610] [client 4.196.65.241:19084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/tvbxn.php"] [unique_id "ary0BbyZ9IcLq1oV6peztgAAABo"]
[Wed Sep 30 01:02:29.269712 2026] [security2:error] [pid 212454:tid 212684] [client 130.131.227.119:44798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-includes/about.php"] [unique_id "ary0BbyZ9IcLq1oV6pezuQAAAGQ"]
[Wed Sep 30 01:02:29.286101 2026] [security2:error] [pid 212454:tid 212615] [client 116.193.128.26:60936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezuwAAAB8"]
[Wed Sep 30 01:02:29.286229 2026] [security2:error] [pid 212454:tid 212615] [client 116.193.128.26:60936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pezuwAAAB8"]
[Wed Sep 30 01:02:29.294191 2026] [security2:error] [pid 212454:tid 212586] [client 52.231.30.175:38906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0BbyZ9IcLq1oV6pezvQAAAAI"]
[Wed Sep 30 01:02:29.342684 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.342964 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.428664 2026] [security2:error] [pid 212454:tid 212687] [client 130.131.227.119:34926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/.well-known/classwithtostring.php"] [unique_id "ary0BbyZ9IcLq1oV6pezyAAAAGc"]
[Wed Sep 30 01:02:29.429088 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.109.68:11236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-content/radio.php"] [unique_id "ary0BbyZ9IcLq1oV6pezyQAAACY"]
[Wed Sep 30 01:02:29.435115 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.435383 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.439074 2026] [security2:error] [pid 212454:tid 212690] [client 20.194.30.107:17532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/a.php"] [unique_id "ary0BbyZ9IcLq1oV6pezygAAAGo"]
[Wed Sep 30 01:02:29.494228 2026] [access_compat:error] [pid 212454:tid 212601] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:29.494500 2026] [access_compat:error] [pid 212454:tid 212601] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:29.532137 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.532576 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.555435 2026] [security2:error] [pid 212454:tid 212651] [client 52.231.30.175:32227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary0BbyZ9IcLq1oV6pez1QAAAEM"]
[Wed Sep 30 01:02:29.618056 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.618334 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.670735 2026] [security2:error] [pid 212454:tid 212683] [client 103.159.192.142:62213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pez3QAAAGM"]
[Wed Sep 30 01:02:29.670905 2026] [security2:error] [pid 212454:tid 212683] [client 103.159.192.142:62213] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pez3QAAAGM"]
[Wed Sep 30 01:02:29.709776 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.710061 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.735575 2026] [security2:error] [pid 212454:tid 212668] [client 203.122.45.246:60130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pez3wAAAFQ"]
[Wed Sep 30 01:02:29.735688 2026] [security2:error] [pid 212454:tid 212668] [client 203.122.45.246:60130] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pez3wAAAFQ"]
[Wed Sep 30 01:02:29.751596 2026] [security2:error] [pid 212454:tid 212633] [client 45.138.12.32:36288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bck.ujo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0BbyZ9IcLq1oV6pez4AAAADE"]
[Wed Sep 30 01:02:29.774300 2026] [security2:error] [pid 212454:tid 212642] [client 130.131.227.119:56618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/403.php"] [unique_id "ary0BbyZ9IcLq1oV6pez4wAAADo"]
[Wed Sep 30 01:02:29.804975 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.805405 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.820418 2026] [security2:error] [pid 212454:tid 212618] [client 52.231.30.175:38880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary0BbyZ9IcLq1oV6pez5gAAACI"]
[Wed Sep 30 01:02:29.824586 2026] [security2:error] [pid 212454:tid 212612] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0BbyZ9IcLq1oV6pez5wAAABw"]
[Wed Sep 30 01:02:29.903978 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.904250 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:29.944056 2026] [security2:error] [pid 212454:tid 212632] [client 130.131.227.119:56593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/input.php"] [unique_id "ary0BbyZ9IcLq1oV6pez7gAAADA"]
[Wed Sep 30 01:02:29.986280 2026] [security2:error] [pid 212454:tid 212603] [client 20.194.96.176:5914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/edit-tags.php"] [unique_id "ary0BbyZ9IcLq1oV6pez8gAAABM"]
[Wed Sep 30 01:02:29.994362 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:29.994631 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.017351 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:30.017618 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:30.040937 2026] [security2:error] [pid 212454:tid 212485] [remote 57.141.14.48:22020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/wp-json/xmlrpc.php"] [unique_id "ary0BbyZ9IcLq1oV6pez9QAASR4"]
[Wed Sep 30 01:02:30.086973 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.087231 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.105191 2026] [security2:error] [pid 212454:tid 212674] [client 52.231.30.175:38854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary0BryZ9IcLq1oV6pe0BAAAAFo"]
[Wed Sep 30 01:02:30.106042 2026] [security2:error] [pid 212454:tid 212639] [client 130.131.227.119:16869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "ary0BryZ9IcLq1oV6pe0BQAAADc"]
[Wed Sep 30 01:02:30.126894 2026] [security2:error] [pid 212454:tid 212601] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/posts/9999999"] [unique_id "ary0BryZ9IcLq1oV6pe0CAAAABE"]
[Wed Sep 30 01:02:30.177234 2026] [security2:error] [pid 212454:tid 212596] [client 106.214.2.47:21051] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0CgAAAAw"]
[Wed Sep 30 01:02:30.177355 2026] [security2:error] [pid 212454:tid 212596] [client 106.214.2.47:21051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0CgAAAAw"]
[Wed Sep 30 01:02:30.215512 2026] [security2:error] [pid 212454:tid 212595] [client 20.219.2.60:19450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bolt.php"] [unique_id "ary0BryZ9IcLq1oV6pe0CwAAAAs"]
[Wed Sep 30 01:02:30.229484 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.229744 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.231989 2026] [core:error] [pid 212454:tid 212672] [client 45.3.55.8:17903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:30.232018 2026] [core:error] [pid 212454:tid 212672] [client 45.3.55.8:17903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:30.245800 2026] [security2:error] [pid 212454:tid 212638] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0BryZ9IcLq1oV6pe0EAAAADY"]
[Wed Sep 30 01:02:30.257767 2026] [security2:error] [pid 212454:tid 212699] [client 130.131.227.119:56607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "ary0BryZ9IcLq1oV6pe0EQAAAHM"]
[Wed Sep 30 01:02:30.269490 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.269769 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.325212 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/wp/v2/users"] [unique_id "ary0BryZ9IcLq1oV6pe0FQAAAB4"]
[Wed Sep 30 01:02:30.360061 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.360332 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.362561 2026] [security2:error] [pid 212454:tid 212636] [client 116.197.133.25:60434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0FwAAADQ"]
[Wed Sep 30 01:02:30.362679 2026] [security2:error] [pid 212454:tid 212636] [client 116.197.133.25:60434] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0FwAAADQ"]
[Wed Sep 30 01:02:30.385060 2026] [security2:error] [pid 212454:tid 212604] [client 52.231.30.175:32204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/media.php"] [unique_id "ary0BryZ9IcLq1oV6pe0GgAAABQ"]
[Wed Sep 30 01:02:30.407418 2026] [security2:error] [pid 212454:tid 212642] [client 130.131.227.119:56609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/01.php"] [unique_id "ary0BryZ9IcLq1oV6pe0HQAAADo"]
[Wed Sep 30 01:02:30.422760 2026] [security2:error] [pid 212454:tid 212512] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0BryZ9IcLq1oV6pe0HgAAfzk"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D64228
[Wed Sep 30 01:02:30.451345 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.451617 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.505335 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:30.505605 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:30.542992 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.543258 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.562239 2026] [security2:error] [pid 212454:tid 212632] [client 130.131.227.119:32750] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "kgamc.com"] [uri "/1.php"] [unique_id "ary0BryZ9IcLq1oV6pe0JQAAADA"]
[Wed Sep 30 01:02:30.562353 2026] [security2:error] [pid 212454:tid 212632] [client 130.131.227.119:32750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/1.php"] [unique_id "ary0BryZ9IcLq1oV6pe0JQAAADA"]
[Wed Sep 30 01:02:30.634488 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.634752 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.664403 2026] [security2:error] [pid 212454:tid 212656] [client 52.231.30.175:38811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/inso.php"] [unique_id "ary0BryZ9IcLq1oV6pe0KwAAAEg"]
[Wed Sep 30 01:02:30.671370 2026] [security2:error] [pid 212454:tid 212594] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/wordpress/"] [unique_id "ary0BryZ9IcLq1oV6pe0LQAAAAo"]
[Wed Sep 30 01:02:30.734844 2026] [security2:error] [pid 212454:tid 212628] [client 130.131.227.119:56599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/lv.php"] [unique_id "ary0BryZ9IcLq1oV6pe0MAAAACw"]
[Wed Sep 30 01:02:30.739408 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.109.68:11100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/155.php"] [unique_id "ary0BryZ9IcLq1oV6pe0MgAAACY"]
[Wed Sep 30 01:02:30.759904 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.760184 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.814998 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.815253 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.846344 2026] [security2:error] [pid 212454:tid 212682] [client 45.138.12.32:22824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bgl.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0BryZ9IcLq1oV6pe0OAAAAGI"]
[Wed Sep 30 01:02:30.895782 2026] [security2:error] [pid 212454:tid 212630] [client 130.131.227.119:56601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/gecko.php"] [unique_id "ary0BryZ9IcLq1oV6pe0PgAAAC4"]
[Wed Sep 30 01:02:30.906321 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.906593 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:30.926264 2026] [security2:error] [pid 212454:tid 212591] [client 52.231.30.175:32215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/shiny.php"] [unique_id "ary0BryZ9IcLq1oV6pe0RQAAAAc"]
[Wed Sep 30 01:02:30.972149 2026] [security2:error] [pid 212454:tid 212669] [client 43.227.131.37:32227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0SQAAAFU"]
[Wed Sep 30 01:02:30.972282 2026] [security2:error] [pid 212454:tid 212669] [client 43.227.131.37:32227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0BryZ9IcLq1oV6pe0SQAAAFU"]
[Wed Sep 30 01:02:30.986273 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:6450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0BryZ9IcLq1oV6pe0SgAAAA8"]
[Wed Sep 30 01:02:30.998076 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:30.998321 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.001070 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:31.001458 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:31.059143 2026] [security2:error] [pid 212454:tid 212645] [client 130.131.227.119:32751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/new.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0TgAAAD0"]
[Wed Sep 30 01:02:31.088714 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.088990 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.179864 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.180140 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.185679 2026] [security2:error] [pid 212454:tid 212646] [client 52.231.30.175:32199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/403dd.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0XAAAAD4"]
[Wed Sep 30 01:02:31.202359 2026] [security2:error] [pid 212454:tid 212647] [client 4.240.25.22:11551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/bthil.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0XgAAAD8"]
[Wed Sep 30 01:02:31.219695 2026] [security2:error] [pid 212454:tid 212692] [client 130.131.227.119:32736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/f35.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0YAAAAGw"]
[Wed Sep 30 01:02:31.266892 2026] [security2:error] [pid 212454:tid 212600] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0B7yZ9IcLq1oV6pe0YQAAABA"]
[Wed Sep 30 01:02:31.271687 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.271972 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.292987 2026] [security2:error] [pid 212454:tid 212632] [client 20.194.96.176:65044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/nauik.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0ZAAAADA"]
[Wed Sep 30 01:02:31.293501 2026] [security2:error] [pid 212454:tid 212684] [client 103.168.67.253:55210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0ZQAAAGQ"]
[Wed Sep 30 01:02:31.344669 2026] [security2:error] [pid 212454:tid 212654] [client 172.232.180.134:49476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "baychiropractic.ca"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ary0B7yZ9IcLq1oV6pe0ZwAAAEY"]
[Wed Sep 30 01:02:31.362856 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.363128 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.372238 2026] [security2:error] [pid 212454:tid 212648] [client 130.131.227.119:33941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/NewFile.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0agAAAEA"]
[Wed Sep 30 01:02:31.405238 2026] [security2:error] [pid 212454:tid 212623] [client 4.196.65.241:19127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wpxml.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0bAAAACc"]
[Wed Sep 30 01:02:31.422309 2026] [security2:error] [pid 212454:tid 212693] [client 20.194.30.107:25875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/felnggg.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0bgAAAG0"]
[Wed Sep 30 01:02:31.442856 2026] [security2:error] [pid 212454:tid 212477] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0cAAAJhY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297992&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:31.442880 2026] [security2:error] [pid 212454:tid 212477] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0cAAAJhY"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297992&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:31.452845 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.453151 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.470864 2026] [security2:error] [pid 212454:tid 212651] [client 52.231.30.175:10980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/baba.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0cgAAAEM"]
[Wed Sep 30 01:02:31.480323 2026] [security2:error] [pid 212454:tid 212606] [client 49.205.105.16:15230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0cwAAABY"]
[Wed Sep 30 01:02:31.480469 2026] [security2:error] [pid 212454:tid 212606] [client 49.205.105.16:15230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0cwAAABY"]
[Wed Sep 30 01:02:31.511213 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:31.511480 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:31.525316 2026] [security2:error] [pid 212454:tid 212613] [client 82.102.18.126:49610] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0B7yZ9IcLq1oV6pe0egAAAB0"]
[Wed Sep 30 01:02:31.544861 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.545146 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.545389 2026] [security2:error] [pid 212454:tid 212701] [client 188.119.119.93:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0B7yZ9IcLq1oV6pe0fgAAAHU"]
[Wed Sep 30 01:02:31.554869 2026] [security2:error] [pid 212454:tid 212702] [client 130.131.227.119:44755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0gAAAAHY"]
[Wed Sep 30 01:02:31.560526 2026] [security2:error] [pid 212454:tid 212608] [client 20.194.30.107:17413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/m.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0ggAAABg"]
[Wed Sep 30 01:02:31.568836 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0B7yZ9IcLq1oV6pe0gwAAAAM"]
[Wed Sep 30 01:02:31.618646 2026] [security2:error] [pid 212454:tid 212599] [client 4.240.25.22:30852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/cycfruf.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0iwAAAA8"]
[Wed Sep 30 01:02:31.635788 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.636095 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.654776 2026] [security2:error] [pid 212454:tid 212671] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0B7yZ9IcLq1oV6pe0jQAAAFc"]
[Wed Sep 30 01:02:31.673617 2026] [core:error] [pid 212454:tid 212650] [client 45.3.45.27:40081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:31.673652 2026] [core:error] [pid 212454:tid 212650] [client 45.3.45.27:40081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:31.687008 2026] [security2:error] [pid 212454:tid 212498] [remote 47.128.114.102:25194] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/4475/tribal-dispute-claims-three-lives"] [unique_id "ary0B7yZ9IcLq1oV6pe0lAAAeCs"]
[Wed Sep 30 01:02:31.697085 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9sb2cvc2FtYmE%3D
[Wed Sep 30 01:02:31.697358 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9sb2cvc2FtYmE%3D
[Wed Sep 30 01:02:31.718037 2026] [security2:error] [pid 212454:tid 212612] [client 130.131.227.119:33921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/xx.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0lwAAABw"]
[Wed Sep 30 01:02:31.727716 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.727989 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.731359 2026] [security2:error] [pid 212454:tid 212652] [client 52.231.30.175:38901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/site.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0mwAAAEQ"]
[Wed Sep 30 01:02:31.818921 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.819200 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.847793 2026] [security2:error] [pid 212454:tid 212602] [client 82.102.18.126:49624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0oAAAABI"]
[Wed Sep 30 01:02:31.876085 2026] [security2:error] [pid 212454:tid 212676] [client 130.131.227.119:44750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/k.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0oQAAAFw"]
[Wed Sep 30 01:02:31.910542 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:31.910796 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:31.962789 2026] [security2:error] [pid 212454:tid 212505] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0pAAATDI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297969&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:31.962833 2026] [security2:error] [pid 212454:tid 212505] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0pAAATDI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297969&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:31.992443 2026] [access_compat:error] [pid 212454:tid 212619] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:31.992690 2026] [access_compat:error] [pid 212454:tid 212619] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:31.994125 2026] [security2:error] [pid 212454:tid 212639] [client 52.231.30.175:38821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/insc.php"] [unique_id "ary0B7yZ9IcLq1oV6pe0qQAAADc"]
[Wed Sep 30 01:02:32.000436 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.000710 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.042289 2026] [security2:error] [pid 212454:tid 212623] [client 130.131.227.119:32732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/plugins.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0qwAAACc"]
[Wed Sep 30 01:02:32.051600 2026] [security2:error] [pid 212454:tid 212651] [client 4.240.25.22:8409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/sb.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0rAAAAEM"]
[Wed Sep 30 01:02:32.090247 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.090521 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.180582 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.180860 2026] [access_compat:error] [pid 212454:tid 212701] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.202130 2026] [security2:error] [pid 212454:tid 212689] [client 130.131.227.119:16868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/xxx.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0uQAAAGk"]
[Wed Sep 30 01:02:32.246438 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0uwAAABc"]
[Wed Sep 30 01:02:32.256287 2026] [security2:error] [pid 212454:tid 212630] [client 52.231.30.175:38871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/file.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0vAAAAC4"]
[Wed Sep 30 01:02:32.273491 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.273781 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:40171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.300516 2026] [security2:error] [pid 212454:tid 212591] [client 4.240.25.22:20304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/gecko.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0vwAAAAc"]
[Wed Sep 30 01:02:32.309710 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0vgAAAAM"]
[Wed Sep 30 01:02:32.353653 2026] [security2:error] [pid 212454:tid 212595] [client 130.131.227.119:16845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/css.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0wAAAAAs"]
[Wed Sep 30 01:02:32.357116 2026] [security2:error] [pid 212454:tid 212645] [client 216.73.216.46:40171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0CLyZ9IcLq1oV6pe0wgAAAD0"]
[Wed Sep 30 01:02:32.381219 2026] [security2:error] [pid 212454:tid 212668] [client 82.102.18.126:49636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0CLyZ9IcLq1oV6pe0xAAAAFQ"]
[Wed Sep 30 01:02:32.385703 2026] [security2:error] [pid 212454:tid 212669] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0wwAAAFU"]
[Wed Sep 30 01:02:32.449257 2026] [security2:error] [pid 212454:tid 212634] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/account"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0yAAAADI"]
[Wed Sep 30 01:02:32.455927 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.456206 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.493128 2026] [access_compat:error] [pid 212454:tid 212646] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:32.493560 2026] [access_compat:error] [pid 212454:tid 212646] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:32.506866 2026] [security2:error] [pid 212454:tid 212618] [client 130.131.227.119:16860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ary0CLyZ9IcLq1oV6pe00AAAACI"]
[Wed Sep 30 01:02:32.508493 2026] [security2:error] [pid 212454:tid 212615] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0zgAAAB8"]
[Wed Sep 30 01:02:32.520970 2026] [security2:error] [pid 212454:tid 212627] [client 52.231.30.175:32158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/dex.php"] [unique_id "ary0CLyZ9IcLq1oV6pe00QAAACs"]
[Wed Sep 30 01:02:32.544900 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.545177 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.562667 2026] [security2:error] [pid 212454:tid 212585] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe01AAAAAE"]
[Wed Sep 30 01:02:32.595174 2026] [core:error] [pid 212454:tid 212601] [client 45.3.50.255:49713] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:32.595212 2026] [core:error] [pid 212454:tid 212601] [client 45.3.50.255:49713] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:02:32.636339 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.636616 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.681127 2026] [security2:error] [pid 212454:tid 212692] [client 20.214.109.68:11010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-the.php"] [unique_id "ary0CLyZ9IcLq1oV6pe04wAAAGw"]
[Wed Sep 30 01:02:32.714889 2026] [security2:error] [pid 212454:tid 212660] [client 82.102.18.126:49640] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0CLyZ9IcLq1oV6pe06QAAAEw"]
[Wed Sep 30 01:02:32.720060 2026] [security2:error] [pid 212454:tid 212654] [client 92.71.12.99:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0CLyZ9IcLq1oV6pe06gAAAEY"]
[Wed Sep 30 01:02:32.726498 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.726758 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.727320 2026] [security2:error] [pid 212454:tid 212628] [client 130.131.227.119:16878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/buy.php"] [unique_id "ary0CLyZ9IcLq1oV6pe08QAAACw"]
[Wed Sep 30 01:02:32.738471 2026] [security2:error] [pid 212454:tid 212623] [client 20.219.2.60:19403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-blogs.php"] [unique_id "ary0CLyZ9IcLq1oV6pe09AAAACc"]
[Wed Sep 30 01:02:32.752504 2026] [security2:error] [pid 212454:tid 212688] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0CLyZ9IcLq1oV6pe09QAAAGg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:02:32.781683 2026] [security2:error] [pid 212454:tid 212701] [client 52.231.30.175:38815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/key.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0-AAAAHU"]
[Wed Sep 30 01:02:32.818979 2026] [security2:error] [pid 212454:tid 212703] [client 4.196.65.241:19509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wefile.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0-gAAAHc"]
[Wed Sep 30 01:02:32.819180 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.819436 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:32.871282 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CLyZ9IcLq1oV6pe0-wAAAAA"]
[Wed Sep 30 01:02:32.879004 2026] [security2:error] [pid 212454:tid 212678] [client 130.131.227.119:34891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/item.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0_QAAAF4"]
[Wed Sep 30 01:02:32.881312 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzMw
[Wed Sep 30 01:02:32.881577 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzMw
[Wed Sep 30 01:02:32.900008 2026] [security2:error] [pid 212454:tid 212543] [remote 74.7.227.56:41718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0CLyZ9IcLq1oV6pe0_wAAdlg"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?sid=5956a4360bc901976265d43414f80981&start=255&t=5556
[Wed Sep 30 01:02:32.955679 2026] [access_compat:error] [pid 212454:tid 212661] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:32.955960 2026] [access_compat:error] [pid 212454:tid 212661] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=2&p=L3Byb2MvNjIwMjk5L2Zk
[Wed Sep 30 01:02:32.960047 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:44593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:32.960311 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:44593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.000898 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.001172 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.036837 2026] [security2:error] [pid 212454:tid 212587] [client 130.131.227.119:16884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/02.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1BQAAAAM"]
[Wed Sep 30 01:02:33.042532 2026] [security2:error] [pid 212454:tid 212645] [client 52.231.30.175:38889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/kir.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1BgAAAD0"]
[Wed Sep 30 01:02:33.042927 2026] [security2:error] [pid 212454:tid 212668] [client 82.102.18.126:49656] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0CbyZ9IcLq1oV6pe1BwAAAFQ"]
[Wed Sep 30 01:02:33.092650 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:44593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.092944 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:44593] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.172179 2026] [security2:error] [pid 212454:tid 212648] [client 93.180.197.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0CbyZ9IcLq1oV6pe1EQAAAEA"]
[Wed Sep 30 01:02:33.176670 2026] [security2:error] [pid 212454:tid 212586] [client 216.73.216.46:44593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0CbyZ9IcLq1oV6pe1EgAAAAI"]
[Wed Sep 30 01:02:33.194333 2026] [security2:error] [pid 212454:tid 212667] [client 130.131.227.119:32720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/x.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1FgAAAFM"]
[Wed Sep 30 01:02:33.200806 2026] [security2:error] [pid 212454:tid 212585] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CbyZ9IcLq1oV6pe1EwAAAAE"]
[Wed Sep 30 01:02:33.249168 2026] [security2:error] [pid 212454:tid 212692] [client 177.132.85.50:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0CbyZ9IcLq1oV6pe1GwAAAGw"]
[Wed Sep 30 01:02:33.275600 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.276172 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.304875 2026] [security2:error] [pid 212454:tid 212651] [client 52.231.30.175:38861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/fling.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1HgAAAEM"]
[Wed Sep 30 01:02:33.353633 2026] [security2:error] [pid 212454:tid 212639] [client 130.131.227.119:44772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/php8.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1IQAAADc"]
[Wed Sep 30 01:02:33.360330 2026] [security2:error] [pid 212454:tid 212619] [client 82.102.18.126:49658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0CbyZ9IcLq1oV6pe1JAAAACM"]
[Wed Sep 30 01:02:33.364315 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.364591 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:62147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.379555 2026] [security2:error] [pid 212454:tid 212622] [client 20.70.173.30:59985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/ty.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1JgAAACY"]
[Wed Sep 30 01:02:33.447135 2026] [access_compat:error] [pid 212454:tid 212703] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2Zk
[Wed Sep 30 01:02:33.447501 2026] [access_compat:error] [pid 212454:tid 212703] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2Zk
[Wed Sep 30 01:02:33.454938 2026] [security2:error] [pid 212454:tid 212592] [client 49.36.41.37:65033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1LAAAAAg"]
[Wed Sep 30 01:02:33.455093 2026] [security2:error] [pid 212454:tid 212592] [client 49.36.41.37:65033] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1LAAAAAg"]
[Wed Sep 30 01:02:33.478480 2026] [security2:error] [pid 212454:tid 212689] [client 20.214.109.68:11130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp5.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1LQAAAGk"]
[Wed Sep 30 01:02:33.500967 2026] [security2:error] [pid 212454:tid 212584] [client 216.73.216.46:55581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0CbyZ9IcLq1oV6pe1LgAAAAA"]
[Wed Sep 30 01:02:33.513078 2026] [security2:error] [pid 212454:tid 212589] [client 130.131.227.119:34899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/fix.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1MAAAAAU"]
[Wed Sep 30 01:02:33.569897 2026] [security2:error] [pid 212454:tid 212596] [client 20.194.96.176:5894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wander.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1MQAAAAw"]
[Wed Sep 30 01:02:33.570986 2026] [security2:error] [pid 212454:tid 212661] [client 52.231.30.175:32193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/btyuio.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1MgAAAE0"]
[Wed Sep 30 01:02:33.600857 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.601136 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.617678 2026] [security2:error] [pid 212454:tid 212684] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/account"] [unique_id "ary0CbyZ9IcLq1oV6pe1HAAAAGQ"]
[Wed Sep 30 01:02:33.669216 2026] [security2:error] [pid 212454:tid 212614] [client 82.102.18.126:8045] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0CbyZ9IcLq1oV6pe1OAAAAB4"]
[Wed Sep 30 01:02:33.673302 2026] [security2:error] [pid 212454:tid 212599] [client 130.131.227.119:44789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/tes.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1OQAAAA8"]
[Wed Sep 30 01:02:33.689014 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.689279 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.694694 2026] [security2:error] [pid 212454:tid 212626] [client 20.194.30.107:17528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/adminfuns.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1OwAAACo"]
[Wed Sep 30 01:02:33.715622 2026] [security2:error] [pid 212454:tid 212680] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0CbyZ9IcLq1oV6pe1PAAAAGA"]
[Wed Sep 30 01:02:33.727256 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.727505 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.793078 2026] [security2:error] [pid 212454:tid 212522] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1PwAAS0M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297994&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:33.793117 2026] [security2:error] [pid 212454:tid 212522] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1PwAAS0M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297994&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:33.823764 2026] [security2:error] [pid 212454:tid 212630] [client 130.131.227.119:34841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/headers.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1QgAAAC4"]
[Wed Sep 30 01:02:33.824400 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.824856 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.834409 2026] [security2:error] [pid 212454:tid 212615] [client 52.231.30.175:38897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/sm.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1QwAAAB8"]
[Wed Sep 30 01:02:33.869940 2026] [security2:error] [pid 212454:tid 212633] [client 216.73.216.46:62147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1SAAAADE"], referer: http://www.homs.co.ke/?action=adminer&p=L2xpYi8uYnVpbGQtaWQvM2I%3D
[Wed Sep 30 01:02:33.954402 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAz
[Wed Sep 30 01:02:33.954665 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAz
[Wed Sep 30 01:02:33.962209 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:35274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:33.962462 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:35274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:33.983378 2026] [security2:error] [pid 212454:tid 212635] [client 130.131.227.119:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/xpw.php"] [unique_id "ary0CbyZ9IcLq1oV6pe1TwAAADM"]
[Wed Sep 30 01:02:33.984750 2026] [security2:error] [pid 212454:tid 212597] [client 82.102.18.126:53846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0CbyZ9IcLq1oV6pe1UQAAAA0"]
[Wed Sep 30 01:02:34.000862 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.001137 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.040893 2026] [security2:error] [pid 212454:tid 212664] [client 4.240.25.22:8503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ops.php"] [unique_id "ary0CryZ9IcLq1oV6pe1VgAAAFA"]
[Wed Sep 30 01:02:34.098606 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.099046 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.099493 2026] [security2:error] [pid 212454:tid 212628] [client 52.231.30.175:38911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/a.php"] [unique_id "ary0CryZ9IcLq1oV6pe1WAAAACw"]
[Wed Sep 30 01:02:34.132461 2026] [security2:error] [pid 212454:tid 212708] [client 130.131.227.119:33982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/array.php"] [unique_id "ary0CryZ9IcLq1oV6pe1XAAAAHw"]
[Wed Sep 30 01:02:34.185391 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.185655 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.275674 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.275973 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:34156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.293021 2026] [security2:error] [pid 212454:tid 212606] [client 130.131.227.119:44749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kgamc.com"] [uri "/wp-cron.php"] [unique_id "ary0CryZ9IcLq1oV6pe1ZAAAABY"]
[Wed Sep 30 01:02:34.313472 2026] [fcgid:warn] [pid 212454:tid 212603] (70014)End of file found: [client 199.45.155.61:45834] mod_fcgid: can't get data from http client
[Wed Sep 30 01:02:34.321552 2026] [security2:error] [pid 212454:tid 212689] [client 82.102.18.126:53850] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0CryZ9IcLq1oV6pe1ZgAAAGk"]
[Wed Sep 30 01:02:34.359096 2026] [security2:error] [pid 212454:tid 212589] [client 216.73.216.46:35274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0CryZ9IcLq1oV6pe1ZwAAAAU"]
[Wed Sep 30 01:02:34.359107 2026] [security2:error] [pid 212454:tid 212702] [client 216.73.216.46:34156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0CryZ9IcLq1oV6pe1aAAAAHY"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9ydW4vY2xvdWQtaW5pdA%3D%3D
[Wed Sep 30 01:02:34.360924 2026] [security2:error] [pid 212454:tid 212637] [client 52.231.30.175:38890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/sb.php"] [unique_id "ary0CryZ9IcLq1oV6pe1aQAAADU"]
[Wed Sep 30 01:02:34.446484 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEx
[Wed Sep 30 01:02:34.446769 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEx
[Wed Sep 30 01:02:34.455310 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.455577 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.550784 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.551245 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.625357 2026] [security2:error] [pid 212454:tid 212690] [client 52.231.30.175:32194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/av.php"] [unique_id "ary0CryZ9IcLq1oV6pe1dQAAAGo"]
[Wed Sep 30 01:02:34.638700 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.638986 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.655238 2026] [security2:error] [pid 212454:tid 212588] [client 82.102.18.126:53858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0CryZ9IcLq1oV6pe1dwAAAAQ"]
[Wed Sep 30 01:02:34.673212 2026] [security2:error] [pid 212454:tid 212608] [client 182.69.182.151:25263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0CryZ9IcLq1oV6pe1eQAAABg"]
[Wed Sep 30 01:02:34.673373 2026] [security2:error] [pid 212454:tid 212608] [client 182.69.182.151:25263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0CryZ9IcLq1oV6pe1eQAAABg"]
[Wed Sep 30 01:02:34.728628 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.728913 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:1035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.732259 2026] [security2:error] [pid 212454:tid 212586] [client 20.194.96.176:1328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wsd.php"] [unique_id "ary0CryZ9IcLq1oV6pe1ggAAAAI"]
[Wed Sep 30 01:02:34.750883 2026] [security2:error] [pid 212454:tid 212644] [client 138.36.46.82:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0CryZ9IcLq1oV6pe1gwAAADw"]
[Wed Sep 30 01:02:34.814210 2026] [security2:error] [pid 212454:tid 212597] [client 216.73.216.46:1035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0CryZ9IcLq1oV6pe1hwAAAA0"]
[Wed Sep 30 01:02:34.892235 2026] [security2:error] [pid 212454:tid 212646] [client 52.231.30.175:32245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/b8.php"] [unique_id "ary0CryZ9IcLq1oV6pe1iQAAAD4"]
[Wed Sep 30 01:02:34.953570 2026] [security2:error] [pid 212454:tid 212549] [remote 57.141.14.83:33750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.celadondragon.com"] [uri "/beta/content/histanddynasties/content/complexity/LaterHan/EarlierHan/EasternJin/EarlierHan/FormerSong/kangxi.php"] [unique_id "ary0CryZ9IcLq1oV6pe1igAATF4"]
[Wed Sep 30 01:02:34.964042 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:34.964502 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:34.990753 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:34.991183 2026] [access_compat:error] [pid 212454:tid 212705] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkxL2Zk
[Wed Sep 30 01:02:35.000309 2026] [security2:error] [pid 212454:tid 212665] [client 82.102.18.126:53874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0CryZ9IcLq1oV6pe1jgAAAFE"]
[Wed Sep 30 01:02:35.027389 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzMx
[Wed Sep 30 01:02:35.027654 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzMx
[Wed Sep 30 01:02:35.036625 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe1kAAAACY"]
[Wed Sep 30 01:02:35.042932 2026] [security2:error] [pid 212454:tid 212599] [client 223.181.30.165:32644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1kQAAAA8"]
[Wed Sep 30 01:02:35.043091 2026] [security2:error] [pid 212454:tid 212599] [client 223.181.30.165:32644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1kQAAAA8"]
[Wed Sep 30 01:02:35.054849 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.055112 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.099427 2026] [security2:error] [pid 212454:tid 212641] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe1mQAAADk"]
[Wed Sep 30 01:02:35.144300 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.144572 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.153227 2026] [security2:error] [pid 212454:tid 212700] [client 20.214.109.68:11232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-access.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1nwAAAHQ"]
[Wed Sep 30 01:02:35.158069 2026] [security2:error] [pid 212454:tid 212650] [client 52.231.30.175:32239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1oQAAAEI"]
[Wed Sep 30 01:02:35.186252 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.186685 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.221767 2026] [security2:error] [pid 212454:tid 212603] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0C7yZ9IcLq1oV6pe1pgAAABM"]
[Wed Sep 30 01:02:35.276078 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.276344 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.287658 2026] [security2:error] [pid 212454:tid 212637] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0C7yZ9IcLq1oV6pe1qwAAADU"]
[Wed Sep 30 01:02:35.328693 2026] [security2:error] [pid 212454:tid 212612] [client 82.102.18.126:53884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0C7yZ9IcLq1oV6pe1rgAAABw"]
[Wed Sep 30 01:02:35.348360 2026] [security2:error] [pid 212454:tid 212591] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0C7yZ9IcLq1oV6pe1sAAAAAc"]
[Wed Sep 30 01:02:35.356702 2026] [security2:error] [pid 212454:tid 212702] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe1rAAAAHY"]
[Wed Sep 30 01:02:35.364061 2026] [security2:error] [pid 212454:tid 212696] [client 4.196.65.241:19173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ebkid.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1sgAAAHA"]
[Wed Sep 30 01:02:35.367093 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.367344 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.404540 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0C7yZ9IcLq1oV6pe1tgAAAAM"]
[Wed Sep 30 01:02:35.420871 2026] [security2:error] [pid 212454:tid 212668] [client 52.231.30.175:32206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/0.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1uAAAAFQ"]
[Wed Sep 30 01:02:35.458390 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.458786 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.458881 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAz
[Wed Sep 30 01:02:35.459298 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAz
[Wed Sep 30 01:02:35.487183 2026] [security2:error] [pid 212454:tid 212673] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe1uwAAAFk"]
[Wed Sep 30 01:02:35.548630 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.548913 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.640418 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.640681 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.643197 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.109.68:11092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/hots.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1xwAAADw"]
[Wed Sep 30 01:02:35.665326 2026] [security2:error] [pid 212454:tid 212636] [client 82.102.18.126:53900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0C7yZ9IcLq1oV6pe1ygAAADQ"]
[Wed Sep 30 01:02:35.668065 2026] [security2:error] [pid 212454:tid 212570] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1yQAAKXM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15409&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:02:35.668098 2026] [security2:error] [pid 212454:tid 212570] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1yQAAKXM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=15409&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:02:35.671464 2026] [security2:error] [pid 212454:tid 212645] [client 52.231.30.175:37972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1zAAAAD0"]
[Wed Sep 30 01:02:35.677704 2026] [security2:error] [pid 212454:tid 212627] [client 103.159.192.142:62340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1zQAAACs"]
[Wed Sep 30 01:02:35.677846 2026] [security2:error] [pid 212454:tid 212627] [client 103.159.192.142:62340] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1zQAAACs"]
[Wed Sep 30 01:02:35.683023 2026] [security2:error] [pid 212454:tid 212671] [client 52.231.30.175:38903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/fms.php"] [unique_id "ary0C7yZ9IcLq1oV6pe1zgAAAFc"]
[Wed Sep 30 01:02:35.700646 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvd3A3MA%3D%3D
[Wed Sep 30 01:02:35.700921 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvd3A3MA%3D%3D
[Wed Sep 30 01:02:35.723759 2026] [security2:error] [pid 212454:tid 212602] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0C7yZ9IcLq1oV6pe10QAAABI"]
[Wed Sep 30 01:02:35.738587 2026] [security2:error] [pid 212454:tid 212630] [client 37.41.16.35:64707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe10gAAAC4"]
[Wed Sep 30 01:02:35.738720 2026] [security2:error] [pid 212454:tid 212630] [client 37.41.16.35:64707] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0C7yZ9IcLq1oV6pe10gAAAC4"]
[Wed Sep 30 01:02:35.774853 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0C7yZ9IcLq1oV6pe11AAAAH0"]
[Wed Sep 30 01:02:35.782964 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.783211 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.817340 2026] [security2:error] [pid 212454:tid 212598] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe11gAAAA4"]
[Wed Sep 30 01:02:35.821744 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.822032 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.827093 2026] [security2:error] [pid 212454:tid 212708] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0C7yZ9IcLq1oV6pe12QAAAHw"]
[Wed Sep 30 01:02:35.876700 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0C7yZ9IcLq1oV6pe13AAAAA8"]
[Wed Sep 30 01:02:35.891785 2026] [security2:error] [pid 212454:tid 212622] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe13QAAACY"]
[Wed Sep 30 01:02:35.913297 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:35.913583 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:35.941436 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:37909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0C7yZ9IcLq1oV6pe14wAAABM"]
[Wed Sep 30 01:02:35.944230 2026] [security2:error] [pid 212454:tid 212584] [client 52.231.30.175:38909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/xyn.php"] [unique_id "ary0C7yZ9IcLq1oV6pe15AAAAAA"]
[Wed Sep 30 01:02:35.953199 2026] [security2:error] [pid 212454:tid 212613] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0C7yZ9IcLq1oV6pe14gAAAB0"]
[Wed Sep 30 01:02:35.990329 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEw
[Wed Sep 30 01:02:35.990598 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEw
[Wed Sep 30 01:02:35.995127 2026] [security2:error] [pid 212454:tid 212623] [client 82.102.18.126:53906] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0C7yZ9IcLq1oV6pe15wAAACc"]
[Wed Sep 30 01:02:36.002943 2026] [security2:error] [pid 212454:tid 212670] [client 20.198.74.230:24146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/acf1ced8aec2.php"] [unique_id "ary0DLyZ9IcLq1oV6pe16QAAAFY"]
[Wed Sep 30 01:02:36.003450 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.003699 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.010532 2026] [security2:error] [pid 212454:tid 212638] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DLyZ9IcLq1oV6pe16gAAADY"]
[Wed Sep 30 01:02:36.066644 2026] [security2:error] [pid 212454:tid 212648] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DLyZ9IcLq1oV6pe17gAAAEA"]
[Wed Sep 30 01:02:36.095453 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.095723 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.182277 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:55226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0DLyZ9IcLq1oV6pe19QAAAC0"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:36.185798 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.186082 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:62142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.204789 2026] [security2:error] [pid 212454:tid 212649] [client 52.231.30.175:32149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/min.php"] [unique_id "ary0DLyZ9IcLq1oV6pe19gAAAEE"]
[Wed Sep 30 01:02:36.205170 2026] [security2:error] [pid 212454:tid 212626] [client 4.240.25.22:11576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/file.php"] [unique_id "ary0DLyZ9IcLq1oV6pe19wAAACo"]
[Wed Sep 30 01:02:36.208065 2026] [security2:error] [pid 212454:tid 212710] [client 52.231.30.175:37963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/1ac.php"] [unique_id "ary0DLyZ9IcLq1oV6pe1-AAAAH4"]
[Wed Sep 30 01:02:36.275971 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.276237 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.299691 2026] [security2:error] [pid 212454:tid 212693] [client 82.102.18.126:53908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0DLyZ9IcLq1oV6pe2BAAAAG0"]
[Wed Sep 30 01:02:36.318638 2026] [security2:error] [pid 212454:tid 212662] [client 103.241.204.139:50018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2BQAAAE4"]
[Wed Sep 30 01:02:36.318761 2026] [security2:error] [pid 212454:tid 212662] [client 103.241.204.139:50018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2BQAAAE4"]
[Wed Sep 30 01:02:36.368313 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.368574 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.383487 2026] [security2:error] [pid 212454:tid 212636] [client 20.194.96.176:63695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/media.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2CAAAADQ"]
[Wed Sep 30 01:02:36.458050 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.458311 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.465490 2026] [access_compat:error] [pid 212454:tid 212621] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:36.465739 2026] [access_compat:error] [pid 212454:tid 212621] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:36.468442 2026] [security2:error] [pid 212454:tid 212602] [client 52.231.30.175:37893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/flm.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2DgAAABI"]
[Wed Sep 30 01:02:36.469243 2026] [security2:error] [pid 212454:tid 212630] [client 52.231.30.175:32150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-whe.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2DwAAAC4"]
[Wed Sep 30 01:02:36.476426 2026] [security2:error] [pid 212454:tid 212672] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0DLyZ9IcLq1oV6pe2EAAAAFg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:02:36.520779 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2Fwcg%3D%3D
[Wed Sep 30 01:02:36.521109 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2Fwcg%3D%3D
[Wed Sep 30 01:02:36.550560 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.550830 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.583506 2026] [security2:error] [pid 212454:tid 212584] [client 20.214.109.68:11063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/admin-footer.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2FwAAAAA"]
[Wed Sep 30 01:02:36.595766 2026] [security2:error] [pid 212454:tid 212641] [client 216.73.216.46:62142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2GQAAADk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9kZXYvY2hhci8yMTo1
[Wed Sep 30 01:02:36.601180 2026] [security2:error] [pid 212454:tid 212623] [client 82.102.18.126:53912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0DLyZ9IcLq1oV6pe2GgAAACc"]
[Wed Sep 30 01:02:36.615779 2026] [security2:error] [pid 212454:tid 212671] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DLyZ9IcLq1oV6pe2GwAAAFc"]
[Wed Sep 30 01:02:36.639743 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.640032 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.664364 2026] [security2:error] [pid 212454:tid 212697] [client 152.59.169.65:52645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2HgAAAHE"]
[Wed Sep 30 01:02:36.664489 2026] [security2:error] [pid 212454:tid 212697] [client 152.59.169.65:52645] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2HgAAAHE"]
[Wed Sep 30 01:02:36.729840 2026] [security2:error] [pid 212454:tid 212661] [client 52.231.30.175:38853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-filemanager1.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2IAAAAE0"]
[Wed Sep 30 01:02:36.731875 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.732134 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.732853 2026] [security2:error] [pid 212454:tid 212702] [client 52.231.30.175:38012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/40341.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2IQAAAHY"]
[Wed Sep 30 01:02:36.811992 2026] [security2:error] [pid 212454:tid 212611] [client 4.240.25.22:8421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/or.php"] [unique_id "ary0DLyZ9IcLq1oV6pe2JQAAABs"]
[Wed Sep 30 01:02:36.822642 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.822960 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.914251 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:36.914516 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:36.930479 2026] [security2:error] [pid 212454:tid 212635] [client 82.102.18.126:53928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.osq.ysf.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0DLyZ9IcLq1oV6pe2LQAAADM"]
[Wed Sep 30 01:02:36.954836 2026] [access_compat:error] [pid 212454:tid 212694] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEx
[Wed Sep 30 01:02:36.955115 2026] [access_compat:error] [pid 212454:tid 212694] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEx
[Wed Sep 30 01:02:36.978411 2026] [security2:error] [pid 212454:tid 212658] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DLyZ9IcLq1oV6pe2LgAAAEo"]
[Wed Sep 30 01:02:37.005228 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.005496 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.010525 2026] [security2:error] [pid 212454:tid 212662] [client 52.231.30.175:38014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-log.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2MwAAAE4"]
[Wed Sep 30 01:02:37.010954 2026] [security2:error] [pid 212454:tid 212691] [client 52.231.30.175:38819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-freya.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2NAAAAGs"]
[Wed Sep 30 01:02:37.038000 2026] [security2:error] [pid 212454:tid 212620] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DbyZ9IcLq1oV6pe2NQAAACQ"]
[Wed Sep 30 01:02:37.093213 2026] [security2:error] [pid 212454:tid 212605] [client 122.173.27.10:32345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2OAAAABU"]
[Wed Sep 30 01:02:37.094332 2026] [security2:error] [pid 212454:tid 212605] [client 122.173.27.10:32345] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2OAAAABU"]
[Wed Sep 30 01:02:37.097082 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.097377 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:50738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.145855 2026] [security2:error] [pid 212454:tid 212675] [client 20.214.109.68:11216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws84.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2OwAAAFs"]
[Wed Sep 30 01:02:37.183644 2026] [security2:error] [pid 212454:tid 212672] [client 216.73.216.46:50738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0DbyZ9IcLq1oV6pe2QQAAAFg"]
[Wed Sep 30 01:02:37.273816 2026] [security2:error] [pid 212454:tid 212598] [client 52.231.30.175:37989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/sehryhv.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2RQAAAA4"]
[Wed Sep 30 01:02:37.274931 2026] [security2:error] [pid 212454:tid 212604] [client 52.231.30.175:32137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/admin.php/admin.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2RgAAABQ"]
[Wed Sep 30 01:02:37.279752 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.280089 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.356235 2026] [security2:error] [pid 212454:tid 212618] [client 49.43.163.212:58049] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2SwAAACI"]
[Wed Sep 30 01:02:37.356354 2026] [security2:error] [pid 212454:tid 212618] [client 49.43.163.212:58049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2SwAAACI"]
[Wed Sep 30 01:02:37.368295 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.368552 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.394482 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DbyZ9IcLq1oV6pe2SgAAABo"]
[Wed Sep 30 01:02:37.438608 2026] [security2:error] [pid 212454:tid 212704] [client 223.181.60.167:20118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2TgAAAHg"]
[Wed Sep 30 01:02:37.438726 2026] [security2:error] [pid 212454:tid 212704] [client 223.181.60.167:20118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2TgAAAHg"]
[Wed Sep 30 01:02:37.461358 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.461625 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:11629] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.474985 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:37.475257 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2Zk
[Wed Sep 30 01:02:37.533841 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DbyZ9IcLq1oV6pe2UQAAAA8"]
[Wed Sep 30 01:02:37.539683 2026] [security2:error] [pid 212454:tid 212689] [client 52.231.30.175:38796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/faiy.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2VgAAAGk"]
[Wed Sep 30 01:02:37.544992 2026] [security2:error] [pid 212454:tid 212627] [client 216.73.216.46:11629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0DbyZ9IcLq1oV6pe2VwAAACs"]
[Wed Sep 30 01:02:37.556263 2026] [security2:error] [pid 212454:tid 212647] [client 52.231.30.175:37994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/yich.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2WAAAAD8"]
[Wed Sep 30 01:02:37.640884 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.641154 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.662663 2026] [security2:error] [pid 212454:tid 212457] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2XgAABQI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D10018
[Wed Sep 30 01:02:37.734510 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.735036 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.742141 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DbyZ9IcLq1oV6pe2WwAAAFM"]
[Wed Sep 30 01:02:37.801453 2026] [security2:error] [pid 212454:tid 212703] [client 52.231.30.175:38793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2YAAAAHc"]
[Wed Sep 30 01:02:37.814177 2026] [security2:error] [pid 212454:tid 212655] [client 20.214.109.68:11256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/bnm.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2YgAAAEc"]
[Wed Sep 30 01:02:37.815119 2026] [security2:error] [pid 212454:tid 212612] [client 52.231.30.175:37996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-blink.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2YwAAABw"]
[Wed Sep 30 01:02:37.822951 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.823220 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.916367 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:37.916646 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:37.950025 2026] [security2:error] [pid 212454:tid 212695] [client 20.194.96.176:1284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/images.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2agAAAG8"]
[Wed Sep 30 01:02:37.962163 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:37.962428 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:37.976044 2026] [autoindex:error] [pid 212454:tid 212626] [client 212.156.70.154:11318] AH01276: Cannot serve directory /home4/unqhdkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:37.984053 2026] [security2:error] [pid 212454:tid 212601] [client 213.136.69.135:51281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/class-wpdb.php"] [unique_id "ary0DbyZ9IcLq1oV6pe2bQAAABE"], referer: binance.com
[Wed Sep 30 01:02:38.004448 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.004718 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.065688 2026] [security2:error] [pid 212454:tid 212701] [client 52.231.30.175:32233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/myglu.php"] [unique_id "ary0DryZ9IcLq1oV6pe2fAAAAHU"]
[Wed Sep 30 01:02:38.079827 2026] [security2:error] [pid 212454:tid 212597] [client 52.231.30.175:37927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-logis.php"] [unique_id "ary0DryZ9IcLq1oV6pe2fgAAAA0"]
[Wed Sep 30 01:02:38.097792 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.098090 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:45002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.146707 2026] [security2:error] [pid 212454:tid 212648] [client 103.172.210.103:53309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0DryZ9IcLq1oV6pe2ggAAAEA"]
[Wed Sep 30 01:02:38.146862 2026] [security2:error] [pid 212454:tid 212648] [client 103.172.210.103:53309] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0DryZ9IcLq1oV6pe2ggAAAEA"]
[Wed Sep 30 01:02:38.172362 2026] [security2:error] [pid 212454:tid 212497] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0DryZ9IcLq1oV6pe2hAAALio"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D251243
[Wed Sep 30 01:02:38.172394 2026] [security2:error] [pid 212454:tid 212497] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0DryZ9IcLq1oV6pe2hAAALio"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D251243
[Wed Sep 30 01:02:38.210157 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.109.68:11169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/amax.php"] [unique_id "ary0DryZ9IcLq1oV6pe2hwAAADE"]
[Wed Sep 30 01:02:38.237966 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.238228 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.265643 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/auth/callback"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DbyZ9IcLq1oV6pe2ZwAAAB4"]
[Wed Sep 30 01:02:38.330866 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.331173 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.336587 2026] [security2:error] [pid 212454:tid 212599] [client 52.231.30.175:38799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/bnmtp.php"] [unique_id "ary0DryZ9IcLq1oV6pe2lAAAAA8"]
[Wed Sep 30 01:02:38.340020 2026] [security2:error] [pid 212454:tid 212689] [client 52.231.30.175:37900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/esc.php"] [unique_id "ary0DryZ9IcLq1oV6pe2lgAAAGk"]
[Wed Sep 30 01:02:38.370302 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.370566 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.430505 2026] [security2:error] [pid 212454:tid 212638] [client 20.219.2.60:18941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/zlnckdxn.php"] [unique_id "ary0DryZ9IcLq1oV6pe2mgAAADY"]
[Wed Sep 30 01:02:38.446990 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 01:02:38.447267 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 01:02:38.506066 2026] [security2:error] [pid 212454:tid 212710] [client 216.73.216.46:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0DryZ9IcLq1oV6pe2nQAAAH4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvamNvdy9pbWFnZXM%3D
[Wed Sep 30 01:02:38.513402 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.513655 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.553774 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.554087 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.600958 2026] [security2:error] [pid 212454:tid 212695] [client 52.231.30.175:38003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/2.php"] [unique_id "ary0DryZ9IcLq1oV6pe2pwAAAG8"]
[Wed Sep 30 01:02:38.605609 2026] [security2:error] [pid 212454:tid 212626] [client 52.231.30.175:38839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/zeta.php"] [unique_id "ary0DryZ9IcLq1oV6pe2qAAAACo"]
[Wed Sep 30 01:02:38.607502 2026] [security2:error] [pid 212454:tid 212645] [client 20.214.109.68:11123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/66.php"] [unique_id "ary0DryZ9IcLq1oV6pe2qQAAAD0"]
[Wed Sep 30 01:02:38.620261 2026] [security2:error] [pid 212454:tid 212600] [client 155.190.6.18:36562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0DryZ9IcLq1oV6pe2qwAAABA"]
[Wed Sep 30 01:02:38.622950 2026] [security2:error] [pid 212454:tid 212615] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0DryZ9IcLq1oV6pe2qgAAAB8"]
[Wed Sep 30 01:02:38.643928 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.644205 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.735204 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.735473 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.767791 2026] [security2:error] [pid 212454:tid 212480] [remote 103.154.177.135:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0DryZ9IcLq1oV6pe2uAAALhk"]
[Wed Sep 30 01:02:38.827158 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.827421 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.835949 2026] [security2:error] [pid 212454:tid 212698] [client 4.196.65.241:64185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/edorxrr.php"] [unique_id "ary0DryZ9IcLq1oV6pe2vgAAAHI"]
[Wed Sep 30 01:02:38.880254 2026] [security2:error] [pid 212454:tid 212639] [client 52.231.30.175:37967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/ba.php"] [unique_id "ary0DryZ9IcLq1oV6pe2xQAAADc"]
[Wed Sep 30 01:02:38.890490 2026] [security2:error] [pid 212454:tid 212625] [client 52.231.30.175:38795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary0DryZ9IcLq1oV6pe2xgAAACk"]
[Wed Sep 30 01:02:38.909102 2026] [security2:error] [pid 212454:tid 212600] [client 155.190.6.18:36562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0DryZ9IcLq1oV6pe2qwAAABA"]
[Wed Sep 30 01:02:38.918785 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:38.919078 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:38.973197 2026] [security2:error] [pid 212454:tid 212711] [client 103.168.67.253:7210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0DryZ9IcLq1oV6pe2zAAAAH8"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:38.994545 2026] [access_compat:error] [pid 212454:tid 212642] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:38.994856 2026] [access_compat:error] [pid 212454:tid 212642] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2Zk
[Wed Sep 30 01:02:38.995310 2026] [security2:error] [pid 212454:tid 212627] [client 185.243.53.182:52994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.53.243.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "devinmooredesign.com"] [uri "/wp-login.php"] [unique_id "ary0DryZ9IcLq1oV6pe2zwAAACs"], referer: http://devinmooredesign.com/wp-login.php
[Wed Sep 30 01:02:39.008950 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.009207 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.045048 2026] [security2:error] [pid 212454:tid 212589] [client 20.219.2.60:18929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/fs6.php"] [unique_id "ary0D7yZ9IcLq1oV6pe22QAAAAU"]
[Wed Sep 30 01:02:39.101175 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.101458 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.141668 2026] [security2:error] [pid 212454:tid 212667] [client 52.231.30.175:37988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/great.php"] [unique_id "ary0D7yZ9IcLq1oV6pe23wAAAFM"]
[Wed Sep 30 01:02:39.144117 2026] [security2:error] [pid 212454:tid 212710] [client 20.194.96.176:5892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/ops.php"] [unique_id "ary0D7yZ9IcLq1oV6pe24AAAAH4"]
[Wed Sep 30 01:02:39.172938 2026] [security2:error] [pid 212454:tid 212659] [client 52.231.30.175:32148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary0D7yZ9IcLq1oV6pe25QAAAEs"]
[Wed Sep 30 01:02:39.192176 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.192452 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:23876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.231746 2026] [security2:error] [pid 212454:tid 212615] [client 45.138.12.32:36414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bgl.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0D7yZ9IcLq1oV6pe27QAAAB8"]
[Wed Sep 30 01:02:39.236627 2026] [security2:error] [pid 212454:tid 212650] [client 45.138.12.32:22980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bjw.uhw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0D7yZ9IcLq1oV6pe27wAAAEI"]
[Wed Sep 30 01:02:39.275991 2026] [security2:error] [pid 212454:tid 212657] [client 216.73.216.46:23876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0D7yZ9IcLq1oV6pe28wAAAEk"]
[Wed Sep 30 01:02:39.406295 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.406558 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.429947 2026] [security2:error] [pid 212454:tid 212655] [client 52.231.30.175:37908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary0D7yZ9IcLq1oV6pe2_gAAAEc"]
[Wed Sep 30 01:02:39.440508 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:39.440769 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:39.456514 2026] [security2:error] [pid 212454:tid 212656] [client 52.231.30.175:38790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3AAAAAEg"]
[Wed Sep 30 01:02:39.463282 2026] [security2:error] [pid 212454:tid 212609] [client 116.72.182.19:64212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3AgAAABk"]
[Wed Sep 30 01:02:39.463375 2026] [security2:error] [pid 212454:tid 212609] [client 116.72.182.19:64212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3AgAAABk"]
[Wed Sep 30 01:02:39.468050 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.468480 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:11813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.488269 2026] [security2:error] [pid 212454:tid 212670] [client 202.179.95.79:54781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3CQAAAFY"]
[Wed Sep 30 01:02:39.488349 2026] [security2:error] [pid 212454:tid 212670] [client 202.179.95.79:54781] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3CQAAAFY"]
[Wed Sep 30 01:02:39.560208 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.560649 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.640072 2026] [security2:error] [pid 212454:tid 212584] [client 216.73.216.46:11813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0D7yZ9IcLq1oV6pe3HAAAAAA"]
[Wed Sep 30 01:02:39.647748 2026] [security2:error] [pid 212454:tid 212587] [client 152.59.165.7:50886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3IAAAAAM"]
[Wed Sep 30 01:02:39.647848 2026] [security2:error] [pid 212454:tid 212587] [client 152.59.165.7:50886] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3IAAAAAM"]
[Wed Sep 30 01:02:39.650933 2026] [security2:error] [pid 212454:tid 212662] [client 31.42.112.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0D7yZ9IcLq1oV6pe3HgAAAE4"]
[Wed Sep 30 01:02:39.690241 2026] [security2:error] [pid 212454:tid 212653] [client 52.231.30.175:37957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/robots.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3IgAAAEU"]
[Wed Sep 30 01:02:39.700994 2026] [security2:error] [pid 212454:tid 212498] [remote 103.154.177.135:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3JAAANSs"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:02:39.724970 2026] [security2:error] [pid 212454:tid 212612] [client 52.231.30.175:38851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/flamini.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3JgAAABw"]
[Wed Sep 30 01:02:39.737244 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.737512 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.746037 2026] [security2:error] [pid 212454:tid 212678] [client 20.214.109.68:11178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/public/file.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3KQAAAF4"]
[Wed Sep 30 01:02:39.828200 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.828467 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.862289 2026] [security2:error] [pid 212454:tid 212656] [client 20.194.96.176:5927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/BDKR28WP.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3OgAAAEg"]
[Wed Sep 30 01:02:39.919993 2026] [security2:error] [pid 212454:tid 212575] [remote 103.154.177.135:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.177.154.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3PgAAEXg"]
[Wed Sep 30 01:02:39.920164 2026] [security2:error] [pid 212454:tid 212601] [client 103.154.177.135:34688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3PgAAEXg"]
[Wed Sep 30 01:02:39.920296 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:39.920547 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:39.927276 2026] [security2:error] [pid 212454:tid 212664] [client 116.193.128.26:61594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3QAAAAFA"]
[Wed Sep 30 01:02:39.927494 2026] [security2:error] [pid 212454:tid 212664] [client 116.193.128.26:61594] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3QAAAAFA"]
[Wed Sep 30 01:02:39.949840 2026] [security2:error] [pid 212454:tid 212665] [client 52.231.30.175:37902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/k.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3QwAAAFE"]
[Wed Sep 30 01:02:39.987305 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:39.987594 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:39.999041 2026] [security2:error] [pid 212454:tid 212667] [client 52.231.30.175:32192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/myglu.php"] [unique_id "ary0D7yZ9IcLq1oV6pe3SQAAAFM"]
[Wed Sep 30 01:02:40.008778 2026] [security2:error] [pid 212454:tid 212710] [client 20.219.2.60:18878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/xwzs.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3SwAAAH4"]
[Wed Sep 30 01:02:40.011217 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.011473 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.078681 2026] [security2:error] [pid 212454:tid 212693] [client 171.25.193.79:27994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.193.25.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3UQAAAG0"]
[Wed Sep 30 01:02:40.078796 2026] [security2:error] [pid 212454:tid 212693] [client 171.25.193.79:27994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3UQAAAG0"]
[Wed Sep 30 01:02:40.102233 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.102498 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.129189 2026] [autoindex:error] [pid 212454:tid 212705] [client 212.156.70.154:63862] AH01276: Cannot serve directory /home4/sycjhemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:40.164987 2026] [security2:error] [pid 212454:tid 212615] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0ELyZ9IcLq1oV6pe3VAAAAB8"]
[Wed Sep 30 01:02:40.191819 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.192080 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:55920] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.237690 2026] [security2:error] [pid 212454:tid 212682] [client 52.231.30.175:37895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/w.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3YQAAAGI"]
[Wed Sep 30 01:02:40.258892 2026] [security2:error] [pid 212454:tid 212611] [client 52.231.30.175:38898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/alfa.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3YwAAABs"]
[Wed Sep 30 01:02:40.264107 2026] [security2:error] [pid 212454:tid 212642] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0ELyZ9IcLq1oV6pe3ZAAAADo"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:40.292521 2026] [security2:error] [pid 212454:tid 212704] [client 203.122.45.246:60769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3ZwAAAHg"]
[Wed Sep 30 01:02:40.292642 2026] [security2:error] [pid 212454:tid 212704] [client 203.122.45.246:60769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3ZwAAAHg"]
[Wed Sep 30 01:02:40.336087 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.336374 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.354177 2026] [security2:error] [pid 212454:tid 212603] [client 223.235.102.107:10147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3aQAAABM"]
[Wed Sep 30 01:02:40.354564 2026] [security2:error] [pid 212454:tid 212603] [client 223.235.102.107:10147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3aQAAABM"]
[Wed Sep 30 01:02:40.360177 2026] [security2:error] [pid 212454:tid 212688] [client 185.243.53.182:53010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.53.243.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "devinmooredesign.com"] [uri "/wp-login.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3agAAAGg"], referer: http://devinmooredesign.com/wp-login.php
[Wed Sep 30 01:02:40.367508 2026] [security2:error] [pid 212454:tid 212697] [client 103.159.192.142:62825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3bAAAAHE"]
[Wed Sep 30 01:02:40.367600 2026] [security2:error] [pid 212454:tid 212697] [client 103.159.192.142:62825] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3bAAAAHE"]
[Wed Sep 30 01:02:40.367919 2026] [security2:error] [pid 212454:tid 212644] [client 216.73.216.46:55920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0ELyZ9IcLq1oV6pe3bQAAADw"]
[Wed Sep 30 01:02:40.398221 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtVGltZS1Mb2NhbA%3D%3D
[Wed Sep 30 01:02:40.398495 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtVGltZS1Mb2NhbA%3D%3D
[Wed Sep 30 01:02:40.445717 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2Zk
[Wed Sep 30 01:02:40.446000 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2Zk
[Wed Sep 30 01:02:40.466110 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.466371 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.505772 2026] [security2:error] [pid 212454:tid 212676] [client 52.231.30.175:38004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/ccc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3dwAAAFw"]
[Wed Sep 30 01:02:40.543641 2026] [security2:error] [pid 212454:tid 212672] [client 52.231.30.175:38845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/index.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3eQAAAFg"]
[Wed Sep 30 01:02:40.556416 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.556684 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.648102 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.648384 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.724195 2026] [security2:error] [pid 212454:tid 212662] [client 20.214.109.68:11079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/166.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3hAAAAE4"]
[Wed Sep 30 01:02:40.729410 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0ELyZ9IcLq1oV6pe3hQAAAAM"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:40.738187 2026] [security2:error] [pid 212454:tid 212652] [client 45.138.12.32:22976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bjo.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3hwAAAEQ"]
[Wed Sep 30 01:02:40.755223 2026] [security2:error] [pid 212454:tid 212600] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0ELyZ9IcLq1oV6pe3iQAAABA"]
[Wed Sep 30 01:02:40.777293 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0ELyZ9IcLq1oV6pe3igAAABo"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:40.786855 2026] [security2:error] [pid 212454:tid 212584] [client 52.231.30.175:37986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/images.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3iwAAAAA"]
[Wed Sep 30 01:02:40.794243 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.794496 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.811448 2026] [security2:error] [pid 212454:tid 212694] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0ELyZ9IcLq1oV6pe3jwAAAG4"]
[Wed Sep 30 01:02:40.823904 2026] [security2:error] [pid 212454:tid 212605] [client 52.231.30.175:38894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3kQAAABU"]
[Wed Sep 30 01:02:40.832429 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.832700 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.836385 2026] [security2:error] [pid 212454:tid 212592] [client 116.197.133.25:61056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3kwAAAAg"]
[Wed Sep 30 01:02:40.836472 2026] [security2:error] [pid 212454:tid 212592] [client 116.197.133.25:61056] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0ELyZ9IcLq1oV6pe3kwAAAAg"]
[Wed Sep 30 01:02:40.922157 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:40.922432 2026] [access_compat:error] [pid 212454:tid 212692] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:40.994064 2026] [security2:error] [pid 212454:tid 212598] [client 187.200.21.165:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0ELyZ9IcLq1oV6pe3pAAAAA4"]
[Wed Sep 30 01:02:41.012088 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.012373 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.019670 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:41.019962 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:41.067634 2026] [security2:error] [pid 212454:tid 212627] [client 52.231.30.175:37938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/alls.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3rAAAACs"]
[Wed Sep 30 01:02:41.103193 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.103530 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.177802 2026] [security2:error] [pid 212454:tid 212647] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0EbyZ9IcLq1oV6pe3tQAAAD8"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.195633 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.195918 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:7991] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.196788 2026] [security2:error] [pid 212454:tid 212608] [client 20.194.96.176:63713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/mac.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3uQAAABg"]
[Wed Sep 30 01:02:41.243183 2026] [security2:error] [pid 212454:tid 212649] [client 106.214.2.47:8491] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3vgAAAEE"]
[Wed Sep 30 01:02:41.250264 2026] [security2:error] [pid 212454:tid 212671] [client 20.214.109.68:11076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/ws77.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3wAAAAFc"]
[Wed Sep 30 01:02:41.251301 2026] [security2:error] [pid 212454:tid 212649] [client 106.214.2.47:8491] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3vgAAAEE"]
[Wed Sep 30 01:02:41.283925 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.284190 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.297368 2026] [security2:error] [pid 212454:tid 212655] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0ELyZ9IcLq1oV6pe3lwAAAEc"]
[Wed Sep 30 01:02:41.349779 2026] [security2:error] [pid 212454:tid 212673] [client 52.231.30.175:37954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/admin.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3xgAAAFk"]
[Wed Sep 30 01:02:41.367355 2026] [security2:error] [pid 212454:tid 212619] [client 20.198.74.230:23905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/20.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3yAAAACM"]
[Wed Sep 30 01:02:41.376219 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.376493 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.380016 2026] [security2:error] [pid 212454:tid 212652] [client 52.231.30.175:38868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3ywAAAEQ"]
[Wed Sep 30 01:02:41.458921 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:41.459181 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:41.466135 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.466395 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.522799 2026] [security2:error] [pid 212454:tid 212476] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0EbyZ9IcLq1oV6pe30AAAMhU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=283470&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:02:41.522848 2026] [security2:error] [pid 212454:tid 212476] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0EbyZ9IcLq1oV6pe30AAAMhU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=283470&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:02:41.557966 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.558227 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.566383 2026] [security2:error] [pid 212454:tid 212693] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0EbyZ9IcLq1oV6pe31QAAAG0"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.613899 2026] [security2:error] [pid 212454:tid 212598] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0EbyZ9IcLq1oV6pe33gAAAA4"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.614283 2026] [security2:error] [pid 212454:tid 212602] [client 216.73.216.46:7991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0EbyZ9IcLq1oV6pe33wAAABI"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvcnVuL2NyeXB0c2V0dXA%3D
[Wed Sep 30 01:02:41.631423 2026] [security2:error] [pid 212454:tid 212704] [client 52.231.30.175:37898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/geck.php"] [unique_id "ary0EbyZ9IcLq1oV6pe34wAAAHg"]
[Wed Sep 30 01:02:41.643148 2026] [security2:error] [pid 212454:tid 212659] [client 52.231.30.175:38841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/admin.php"] [unique_id "ary0EbyZ9IcLq1oV6pe35gAAAEs"]
[Wed Sep 30 01:02:41.649459 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.649729 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.661374 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0EbyZ9IcLq1oV6pe36AAAABc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.702407 2026] [security2:error] [pid 212454:tid 212623] [client 43.227.131.37:45701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0EbyZ9IcLq1oV6pe36gAAACc"]
[Wed Sep 30 01:02:41.702572 2026] [security2:error] [pid 212454:tid 212623] [client 43.227.131.37:45701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0EbyZ9IcLq1oV6pe36gAAACc"]
[Wed Sep 30 01:02:41.713265 2026] [security2:error] [pid 212454:tid 212627] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0EbyZ9IcLq1oV6pe36wAAACs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.740461 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.740734 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:10787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.747130 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0EbyZ9IcLq1oV6pe37gAAaGE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297907&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:41.747152 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0EbyZ9IcLq1oV6pe37gAAaGE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297907&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:02:41.761666 2026] [security2:error] [pid 212454:tid 212625] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0EbyZ9IcLq1oV6pe38AAAACk"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.808961 2026] [security2:error] [pid 212454:tid 212612] [client 103.168.67.253:7216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0EbyZ9IcLq1oV6pe38wAAABw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:41.835943 2026] [security2:error] [pid 212454:tid 212696] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0EbyZ9IcLq1oV6pe3xwAAAHA"]
[Wed Sep 30 01:02:41.882439 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.882691 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:41.889055 2026] [security2:error] [pid 212454:tid 212648] [client 20.214.109.68:11018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/www.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3-gAAAEA"]
[Wed Sep 30 01:02:41.900473 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:37892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/goods.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3-wAAAHw"]
[Wed Sep 30 01:02:41.924691 2026] [security2:error] [pid 212454:tid 212661] [client 52.231.30.175:38806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0EbyZ9IcLq1oV6pe3_QAAAE0"]
[Wed Sep 30 01:02:41.952589 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:41.952919 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL2Zk
[Wed Sep 30 01:02:41.974297 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:41.974569 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.032503 2026] [autoindex:error] [pid 212454:tid 212618] [client 85.204.70.116:51208] AH01276: Cannot serve directory /home4/sgnjcamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:42.065917 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:18341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.066187 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:18341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.103931 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.104190 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.153848 2026] [security2:error] [pid 212454:tid 212611] [client 49.205.105.16:13982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4DQAAABs"]
[Wed Sep 30 01:02:42.154061 2026] [security2:error] [pid 212454:tid 212611] [client 49.205.105.16:13982] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4DQAAABs"]
[Wed Sep 30 01:02:42.169518 2026] [security2:error] [pid 212454:tid 212702] [client 52.231.30.175:37952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/dejavu.php"] [unique_id "ary0EryZ9IcLq1oV6pe4EQAAAHY"]
[Wed Sep 30 01:02:42.171515 2026] [security2:error] [pid 212454:tid 212703] [client 85.204.70.116:51208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0EryZ9IcLq1oV6pe4EgAAAHc"]
[Wed Sep 30 01:02:42.191294 2026] [security2:error] [pid 212454:tid 212592] [client 216.73.216.46:10787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0EryZ9IcLq1oV6pe4FQAAAAg"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9zaGFyZS9wZXJsNS9VUkk%3D
[Wed Sep 30 01:02:42.193622 2026] [security2:error] [pid 212454:tid 212711] [client 52.231.30.175:38866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0EryZ9IcLq1oV6pe4FgAAAH8"]
[Wed Sep 30 01:02:42.195072 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.195491 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.285673 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.285962 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:50328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.291186 2026] [security2:error] [pid 212454:tid 212602] [client 4.196.65.241:64132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/Q7iw6mOdefault.php"] [unique_id "ary0EryZ9IcLq1oV6pe4HAAAABI"]
[Wed Sep 30 01:02:42.309097 2026] [security2:error] [pid 212454:tid 212616] [client 20.194.30.107:64741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/reop3.php"] [unique_id "ary0EryZ9IcLq1oV6pe4HgAAACA"]
[Wed Sep 30 01:02:42.376834 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.377104 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.432791 2026] [security2:error] [pid 212454:tid 212597] [client 52.231.30.175:38000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/h02ugyh.php"] [unique_id "ary0EryZ9IcLq1oV6pe4IQAAAA0"]
[Wed Sep 30 01:02:42.467233 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.467490 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.472717 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAy
[Wed Sep 30 01:02:42.473027 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAy
[Wed Sep 30 01:02:42.477971 2026] [security2:error] [pid 212454:tid 212644] [client 52.231.30.175:32246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/cgi-bin/index.php"] [unique_id "ary0EryZ9IcLq1oV6pe4JQAAADw"]
[Wed Sep 30 01:02:42.558304 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:42.558562 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:59529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:42.649459 2026] [security2:error] [pid 212454:tid 212613] [client 216.73.216.46:59529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0EryZ9IcLq1oV6pe4MgAAAB0"]
[Wed Sep 30 01:02:42.676759 2026] [security2:error] [pid 212454:tid 212666] [client 14.102.49.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary0EryZ9IcLq1oV6pe4NAAAAFI"]
[Wed Sep 30 01:02:42.700667 2026] [security2:error] [pid 212454:tid 212604] [client 52.231.30.175:37916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/155.php"] [unique_id "ary0EryZ9IcLq1oV6pe4NgAAABQ"]
[Wed Sep 30 01:02:42.710545 2026] [security2:error] [pid 212454:tid 212588] [client 171.25.193.79:10802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.193.25.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4OAAAAAQ"]
[Wed Sep 30 01:02:42.710633 2026] [security2:error] [pid 212454:tid 212588] [client 171.25.193.79:10802] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4OAAAAAQ"]
[Wed Sep 30 01:02:42.718139 2026] [security2:error] [pid 212454:tid 212586] [client 20.219.2.60:18876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary0EryZ9IcLq1oV6pe4OgAAAAI"]
[Wed Sep 30 01:02:42.738616 2026] [security2:error] [pid 212454:tid 212622] [client 52.231.30.175:10984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-manager.php"] [unique_id "ary0EryZ9IcLq1oV6pe4PgAAACY"]
[Wed Sep 30 01:02:42.740799 2026] [security2:error] [pid 212454:tid 212698] [client 85.204.70.116:44648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sgn.jca.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4QAAAAHI"]
[Wed Sep 30 01:02:42.745686 2026] [security2:error] [pid 212454:tid 212660] [client 216.73.216.46:50328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0EryZ9IcLq1oV6pe4QQAAAEw"]
[Wed Sep 30 01:02:42.756543 2026] [security2:error] [pid 212454:tid 212557] [remote 57.141.14.11:34054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/comments/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "ary0EryZ9IcLq1oV6pe4NQAAL2Y"]
[Wed Sep 30 01:02:42.769966 2026] [security2:error] [pid 212454:tid 212694] [client 103.168.67.253:55200] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/auth/callback"] [unique_id "ary0EryZ9IcLq1oV6pe4FwAAAG4"]
[Wed Sep 30 01:02:42.835799 2026] [security2:error] [pid 212454:tid 212592] [client 20.194.96.176:5897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wmore1.php"] [unique_id "ary0EryZ9IcLq1oV6pe4TgAAAAg"]
[Wed Sep 30 01:02:42.836421 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:18341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0EryZ9IcLq1oV6pe4TwAAADQ"]
[Wed Sep 30 01:02:42.866186 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.109.68:11120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/adoms.php"] [unique_id "ary0EryZ9IcLq1oV6pe4UwAAAAM"]
[Wed Sep 30 01:02:42.962044 2026] [security2:error] [pid 212454:tid 212646] [client 52.231.30.175:37894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/ops.php"] [unique_id "ary0EryZ9IcLq1oV6pe4VwAAAD4"]
[Wed Sep 30 01:02:42.978883 2026] [security2:error] [pid 212454:tid 212669] [client 216.73.216.46:59856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0EryZ9IcLq1oV6pe4WQAAAFU"]
[Wed Sep 30 01:02:42.982695 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Q=
[Wed Sep 30 01:02:42.982981 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Q=
[Wed Sep 30 01:02:43.080178 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.080624 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.103688 2026] [security2:error] [pid 212454:tid 212647] [client 52.231.30.175:32235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4ZAAAAD8"]
[Wed Sep 30 01:02:43.131087 2026] [security2:error] [pid 212454:tid 212590] [client 102.254.102.41:41718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4ZQAAAAY"]
[Wed Sep 30 01:02:43.131256 2026] [security2:error] [pid 212454:tid 212590] [client 102.254.102.41:41718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4ZQAAAAY"]
[Wed Sep 30 01:02:43.167714 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.167986 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.207486 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.207773 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.211087 2026] [autoindex:error] [pid 212454:tid 212657] [client 212.156.70.154:63938] AH01276: Cannot serve directory /home4/urhvcgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:43.241241 2026] [security2:error] [pid 212454:tid 212648] [client 52.231.30.175:37975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/mac.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4cAAAAEA"]
[Wed Sep 30 01:02:43.298155 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.298462 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.312979 2026] [autoindex:error] [pid 212454:tid 212659] [client 85.204.70.116:51218] AH01276: Cannot serve directory /home4/sgnjcamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:43.381283 2026] [security2:error] [pid 212454:tid 212676] [client 52.231.30.175:32222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4egAAAFw"]
[Wed Sep 30 01:02:43.389652 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.389931 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.452647 2026] [security2:error] [pid 212454:tid 212643] [client 85.204.70.116:51218] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0E7yZ9IcLq1oV6pe4gAAAADs"]
[Wed Sep 30 01:02:43.457231 2026] [access_compat:error] [pid 212454:tid 212637] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAx
[Wed Sep 30 01:02:43.457489 2026] [access_compat:error] [pid 212454:tid 212637] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAx
[Wed Sep 30 01:02:43.480040 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.480312 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.503589 2026] [security2:error] [pid 212454:tid 212664] [client 45.138.12.43:16348] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.svr.yrw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0E7yZ9IcLq1oV6pe4ggAAAFA"]
[Wed Sep 30 01:02:43.506654 2026] [security2:error] [pid 212454:tid 212709] [client 52.231.30.175:37992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/makeasmtp.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4gwAAAH0"]
[Wed Sep 30 01:02:43.574587 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.575027 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.667021 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.667293 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.686651 2026] [security2:error] [pid 212454:tid 212585] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0E7yZ9IcLq1oV6pe4nAAAAAE"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:43.693109 2026] [security2:error] [pid 212454:tid 212696] [client 169.40.142.134:54390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sco.igm.mybluehost.me"] [uri "/index.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4mwAAAHA"]
[Wed Sep 30 01:02:43.754472 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.754717 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.772504 2026] [security2:error] [pid 212454:tid 212597] [client 52.231.30.175:37918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/pucci.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4oQAAAA0"]
[Wed Sep 30 01:02:43.839252 2026] [security2:error] [pid 212454:tid 212682] [client 85.18.143.41:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary0E7yZ9IcLq1oV6pe4qAAAAGI"]
[Wed Sep 30 01:02:43.845500 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.845766 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.852436 2026] [security2:error] [pid 212454:tid 212657] [client 20.70.173.30:60006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4qgAAAEk"]
[Wed Sep 30 01:02:43.871743 2026] [security2:error] [pid 212454:tid 212665] [client 4.240.25.22:8477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/baru.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4qwAAAFE"]
[Wed Sep 30 01:02:43.927932 2026] [security2:error] [pid 212454:tid 212698] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0E7yZ9IcLq1oV6pe4rgAAAHI"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:43.934459 2026] [security2:error] [pid 212454:tid 212599] [client 49.36.41.37:49171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4sAAAAA8"]
[Wed Sep 30 01:02:43.934548 2026] [security2:error] [pid 212454:tid 212599] [client 49.36.41.37:49171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0E7yZ9IcLq1oV6pe4sAAAAA8"]
[Wed Sep 30 01:02:43.939030 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:43.939283 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:43.977568 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Q=
[Wed Sep 30 01:02:43.977842 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:48032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Q=
[Wed Sep 30 01:02:44.026488 2026] [security2:error] [pid 212454:tid 212625] [client 85.204.70.116:51228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0FLyZ9IcLq1oV6pe4vQAAACk"]
[Wed Sep 30 01:02:44.029779 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.030083 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.031198 2026] [security2:error] [pid 212454:tid 212703] [client 20.214.109.68:11036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/tymn.php"] [unique_id "ary0FLyZ9IcLq1oV6pe4vgAAAHc"]
[Wed Sep 30 01:02:44.032564 2026] [security2:error] [pid 212454:tid 212703] [client 52.231.30.175:37978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/puc.php"] [unique_id "ary0FLyZ9IcLq1oV6pe4vwAAAHc"]
[Wed Sep 30 01:02:44.091650 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0FLyZ9IcLq1oV6pe4xQAAABc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.121101 2026] [security2:error] [pid 212454:tid 212701] [client 52.231.30.175:38838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0FLyZ9IcLq1oV6pe4xwAAAHU"]
[Wed Sep 30 01:02:44.122616 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.122924 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.214936 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.215341 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.250314 2026] [security2:error] [pid 212454:tid 212674] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0FLyZ9IcLq1oV6pe4zwAAAFo"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.293159 2026] [security2:error] [pid 212454:tid 212606] [client 52.231.30.175:37907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/8.php"] [unique_id "ary0FLyZ9IcLq1oV6pe40AAAABY"]
[Wed Sep 30 01:02:44.304633 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.304931 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.368964 2026] [lsapi:warn] [pid 212454:tid 212512] [remote 216.73.216.20:46747] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 01:02:44.368992 2026] [lsapi:warn] [pid 212454:tid 212512] [remote 216.73.216.20:46747] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 01:02:44.386705 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0FLyZ9IcLq1oV6pe42gAAAEQ"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.396895 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.397170 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.435534 2026] [security2:error] [pid 212454:tid 212657] [client 74.7.243.227:48032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0FLyZ9IcLq1oV6pe43wAAAEk"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 01:02:44.436531 2026] [security2:error] [pid 212454:tid 212645] [client 52.231.30.175:38833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary0FLyZ9IcLq1oV6pe44AAAAD0"]
[Wed Sep 30 01:02:44.459066 2026] [security2:error] [pid 212454:tid 212700] [client 20.194.96.176:5918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wp-ainefgskk.php"] [unique_id "ary0FLyZ9IcLq1oV6pe44gAAAHQ"]
[Wed Sep 30 01:02:44.468513 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.109.68:11227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/eetu.php"] [unique_id "ary0FLyZ9IcLq1oV6pe44wAAAFE"]
[Wed Sep 30 01:02:44.489629 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.489916 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.535968 2026] [security2:error] [pid 212454:tid 212660] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0FLyZ9IcLq1oV6pe45QAAAEw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.553734 2026] [security2:error] [pid 212454:tid 212683] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FLyZ9IcLq1oV6pe45wAAAGM"]
[Wed Sep 30 01:02:44.567621 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:37904] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.kbm-realty.com"] [uri "/1.php"] [unique_id "ary0FLyZ9IcLq1oV6pe46AAAAHw"]
[Wed Sep 30 01:02:44.567723 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:37904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/1.php"] [unique_id "ary0FLyZ9IcLq1oV6pe46AAAAHw"]
[Wed Sep 30 01:02:44.583253 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.583680 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.589148 2026] [lsapi:warn] [pid 212454:tid 212471] [remote 216.73.216.20:46747] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 01:02:44.589166 2026] [lsapi:warn] [pid 212454:tid 212471] [remote 216.73.216.20:46747] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 01:02:44.593656 2026] [security2:error] [pid 212454:tid 212651] [client 85.204.70.116:51236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0FLyZ9IcLq1oV6pe47QAAAEM"]
[Wed Sep 30 01:02:44.626803 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0FLyZ9IcLq1oV6pe47wAAAFY"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.670873 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.671145 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.696575 2026] [security2:error] [pid 212454:tid 212643] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0FLyZ9IcLq1oV6pe4-AAAADs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.762350 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.762614 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.791130 2026] [security2:error] [pid 212454:tid 212623] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0FLyZ9IcLq1oV6pe4_AAAACc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:44.831935 2026] [security2:error] [pid 212454:tid 212614] [client 52.231.30.175:37981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/admin.php"] [unique_id "ary0FLyZ9IcLq1oV6pe4_QAAAB4"]
[Wed Sep 30 01:02:44.852778 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.853063 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.945673 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:44.945989 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:44.991229 2026] [security2:error] [pid 212454:tid 212611] [client 52.231.30.175:10944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/matcha.php"] [unique_id "ary0FLyZ9IcLq1oV6pe5DwAAABs"]
[Wed Sep 30 01:02:45.011603 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL3Jvb3Q=
[Wed Sep 30 01:02:45.011882 2026] [access_compat:error] [pid 212454:tid 212667] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL3Jvb3Q=
[Wed Sep 30 01:02:45.025870 2026] [security2:error] [pid 212454:tid 212628] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5EQAAACw"]
[Wed Sep 30 01:02:45.031421 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.109.68:11106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/dx.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5EwAAAAo"]
[Wed Sep 30 01:02:45.036795 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.037086 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.091988 2026] [security2:error] [pid 212454:tid 212678] [client 52.231.30.175:37962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/edit.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5GwAAAF4"]
[Wed Sep 30 01:02:45.099456 2026] [security2:error] [pid 212454:tid 212700] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5HAAAAHQ"]
[Wed Sep 30 01:02:45.126817 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.127088 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.168297 2026] [security2:error] [pid 212454:tid 212687] [client 85.204.70.116:9582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0FbyZ9IcLq1oV6pe5IAAAAGc"]
[Wed Sep 30 01:02:45.171671 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5HwAAAA8"]
[Wed Sep 30 01:02:45.179564 2026] [security2:error] [pid 212454:tid 212698] [client 20.219.2.60:18857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws66.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5IQAAAHI"]
[Wed Sep 30 01:02:45.192907 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtVmFyaWFibGUtTWFnaWM%3D
[Wed Sep 30 01:02:45.193355 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtVmFyaWFibGUtTWFnaWM%3D
[Wed Sep 30 01:02:45.199523 2026] [security2:error] [pid 212454:tid 212604] [client 171.25.193.79:10816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.193.25.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5IwAAABQ"]
[Wed Sep 30 01:02:45.199652 2026] [security2:error] [pid 212454:tid 212604] [client 171.25.193.79:10816] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5IwAAABQ"]
[Wed Sep 30 01:02:45.217590 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.217856 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.239598 2026] [security2:error] [pid 212454:tid 212710] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5JwAAAH4"]
[Wed Sep 30 01:02:45.260354 2026] [security2:error] [pid 212454:tid 212637] [client 52.231.30.175:38804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/aboutt.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5KQAAADU"]
[Wed Sep 30 01:02:45.264826 2026] [security2:error] [pid 212454:tid 212612] [client 182.69.182.151:12996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5KgAAABw"]
[Wed Sep 30 01:02:45.264965 2026] [security2:error] [pid 212454:tid 212612] [client 182.69.182.151:12996] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5KgAAABw"]
[Wed Sep 30 01:02:45.277020 2026] [security2:error] [pid 212454:tid 212632] [client 103.168.67.253:7220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5KwAAADA"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:45.295999 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5LQAAAH0"]
[Wed Sep 30 01:02:45.308638 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.308935 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.345307 2026] [security2:error] [pid 212454:tid 212646] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5MQAAAD4"]
[Wed Sep 30 01:02:45.359766 2026] [security2:error] [pid 212454:tid 212623] [client 52.231.30.175:37901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/inputs.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5MwAAACc"]
[Wed Sep 30 01:02:45.378155 2026] [security2:error] [pid 212454:tid 212677] [client 20.214.109.68:61174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5NQAAAF0"]
[Wed Sep 30 01:02:45.399433 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5NgAAAC0"]
[Wed Sep 30 01:02:45.400816 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.401175 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.413747 2026] [security2:error] [pid 212454:tid 212672] [client 20.194.96.176:34249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/ab.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5PgAAAFg"]
[Wed Sep 30 01:02:45.453433 2026] [security2:error] [pid 212454:tid 212606] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5PwAAABY"]
[Wed Sep 30 01:02:45.491645 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.491945 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:18811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.513313 2026] [security2:error] [pid 212454:tid 212676] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5QQAAAFw"]
[Wed Sep 30 01:02:45.530550 2026] [security2:error] [pid 212454:tid 212602] [client 52.231.30.175:38895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/opsh.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5QgAAABI"]
[Wed Sep 30 01:02:45.570507 2026] [security2:error] [pid 212454:tid 212610] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5RQAAABo"]
[Wed Sep 30 01:02:45.571185 2026] [security2:error] [pid 212454:tid 212705] [client 103.168.67.253:36338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5SAAAAHk"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:45.575697 2026] [security2:error] [pid 212454:tid 212613] [client 216.73.216.46:18811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5SQAAAB0"]
[Wed Sep 30 01:02:45.628112 2026] [security2:error] [pid 212454:tid 212628] [client 52.231.30.175:37912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/classwithtostring.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5TQAAACw"]
[Wed Sep 30 01:02:45.672975 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.673239 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.676556 2026] [security2:error] [pid 212454:tid 212600] [client 20.214.109.68:11172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-kikikoko.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5UQAAABA"]
[Wed Sep 30 01:02:45.693715 2026] [access_compat:error] [pid 212454:tid 212586] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 01:02:45.694162 2026] [access_compat:error] [pid 212454:tid 212586] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L3Jvb3Q=
[Wed Sep 30 01:02:45.709829 2026] [security2:error] [pid 212454:tid 212697] [client 223.181.30.165:30099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5UwAAAHE"]
[Wed Sep 30 01:02:45.709949 2026] [security2:error] [pid 212454:tid 212697] [client 223.181.30.165:30099] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5UwAAAHE"]
[Wed Sep 30 01:02:45.763132 2026] [security2:error] [pid 212454:tid 212615] [client 85.204.70.116:51264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0FbyZ9IcLq1oV6pe5WgAAAB8"]
[Wed Sep 30 01:02:45.764045 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.764286 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.809371 2026] [security2:error] [pid 212454:tid 212683] [client 52.231.30.175:38899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/photo.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5WwAAAGM"]
[Wed Sep 30 01:02:45.856455 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:45.856724 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:5268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:45.859185 2026] [security2:error] [pid 212454:tid 212631] [client 37.41.16.35:65315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5YAAAAC8"]
[Wed Sep 30 01:02:45.859371 2026] [security2:error] [pid 212454:tid 212631] [client 37.41.16.35:65315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5YAAAAC8"]
[Wed Sep 30 01:02:45.861862 2026] [security2:error] [pid 212454:tid 212621] [client 4.196.65.241:64144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zoo2.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5YQAAACU"]
[Wed Sep 30 01:02:45.898470 2026] [core:error] [pid 212454:tid 212640] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:45.898494 2026] [core:error] [pid 212454:tid 212640] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:45.910837 2026] [security2:error] [pid 212454:tid 212695] [client 52.231.30.175:37320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/adminfuns.php"] [unique_id "ary0FbyZ9IcLq1oV6pe5ZwAAAG8"]
[Wed Sep 30 01:02:45.940352 2026] [security2:error] [pid 212454:tid 212709] [client 216.73.216.46:5268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0FbyZ9IcLq1oV6pe5bAAAAH0"]
[Wed Sep 30 01:02:46.026714 2026] [security2:error] [pid 212454:tid 212707] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0FryZ9IcLq1oV6pe5bgAAAHs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.081091 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0FryZ9IcLq1oV6pe5bwAAAB4"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.089610 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.089910 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.135232 2026] [security2:error] [pid 212454:tid 212591] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0FryZ9IcLq1oV6pe5dQAAAAc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.181462 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.181726 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.190706 2026] [security2:error] [pid 212454:tid 212679] [client 52.231.30.175:37966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/222.php"] [unique_id "ary0FryZ9IcLq1oV6pe5eQAAAF8"]
[Wed Sep 30 01:02:46.191015 2026] [security2:error] [pid 212454:tid 212627] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0FryZ9IcLq1oV6pe5eAAAACs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.214314 2026] [security2:error] [pid 212454:tid 212676] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5egAAAFw"]
[Wed Sep 30 01:02:46.245507 2026] [security2:error] [pid 212454:tid 212692] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0FryZ9IcLq1oV6pe5ewAAAGw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.265069 2026] [security2:error] [pid 212454:tid 212705] [client 216.73.216.46:37040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5fAAAAHk"]
[Wed Sep 30 01:02:46.266203 2026] [security2:error] [pid 212454:tid 212613] [client 52.231.30.175:32253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-fxxxx.php"] [unique_id "ary0FryZ9IcLq1oV6pe5fQAAAB0"]
[Wed Sep 30 01:02:46.269186 2026] [security2:error] [pid 212454:tid 212608] [client 4.196.65.241:2102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/2c88361384index.php"] [unique_id "ary0FryZ9IcLq1oV6pe5fwAAABg"]
[Wed Sep 30 01:02:46.287092 2026] [security2:error] [pid 212454:tid 212642] [client 212.93.128.65:37599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "mail.arvanisocks.com"] [uri "/wp-login.php"] [unique_id "ary0FLyZ9IcLq1oV6pe5AwAAOjU"], referer: https://mail.arvanisocks.com/wp-login.php
[Wed Sep 30 01:02:46.297590 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL3Jvb3Q=
[Wed Sep 30 01:02:46.297899 2026] [access_compat:error] [pid 212454:tid 212630] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL3Jvb3Q=
[Wed Sep 30 01:02:46.302996 2026] [security2:error] [pid 212454:tid 212689] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5fgAAAGk"]
[Wed Sep 30 01:02:46.303195 2026] [security2:error] [pid 212454:tid 212620] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0FryZ9IcLq1oV6pe5hQAAACQ"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.308958 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.309207 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.339279 2026] [security2:error] [pid 212454:tid 212680] [client 85.204.70.116:57736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0FryZ9IcLq1oV6pe5igAAAGA"]
[Wed Sep 30 01:02:46.371840 2026] [security2:error] [pid 212454:tid 212586] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0FryZ9IcLq1oV6pe5jgAAAAI"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.400506 2026] [security2:error] [pid 212454:tid 212600] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5iwAAABA"]
[Wed Sep 30 01:02:46.401285 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.401577 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.427405 2026] [security2:error] [pid 212454:tid 212708] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0FryZ9IcLq1oV6pe5kwAAAHw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.428795 2026] [security2:error] [pid 212454:tid 212703] [client 103.159.192.142:62955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0FryZ9IcLq1oV6pe5lAAAAHc"]
[Wed Sep 30 01:02:46.428932 2026] [security2:error] [pid 212454:tid 212703] [client 103.159.192.142:62955] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0FryZ9IcLq1oV6pe5lAAAAHc"]
[Wed Sep 30 01:02:46.455379 2026] [security2:error] [pid 212454:tid 212621] [client 52.231.30.175:37993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/BDKR28WP.php"] [unique_id "ary0FryZ9IcLq1oV6pe5lQAAACU"]
[Wed Sep 30 01:02:46.483606 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0FryZ9IcLq1oV6pe5lwAAAFY"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.492192 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.492449 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:1062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.504682 2026] [security2:error] [pid 212454:tid 212696] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5lgAAAHA"]
[Wed Sep 30 01:02:46.537454 2026] [security2:error] [pid 212454:tid 212682] [client 103.168.67.253:36344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0FryZ9IcLq1oV6pe5mgAAAGI"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:46.557850 2026] [security2:error] [pid 212454:tid 212596] [client 52.231.30.175:32212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary0FryZ9IcLq1oV6pe5nQAAAAw"]
[Wed Sep 30 01:02:46.576829 2026] [security2:error] [pid 212454:tid 212650] [client 216.73.216.46:1062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5oAAAAEI"]
[Wed Sep 30 01:02:46.581583 2026] [security2:error] [pid 212454:tid 212625] [client 20.214.109.68:11118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/file61.php"] [unique_id "ary0FryZ9IcLq1oV6pe5oQAAACk"]
[Wed Sep 30 01:02:46.607112 2026] [security2:error] [pid 212454:tid 212709] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5ngAAAH0"]
[Wed Sep 30 01:02:46.652787 2026] [security2:error] [pid 212454:tid 212616] [client 20.194.96.176:22095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/dairg.php"] [unique_id "ary0FryZ9IcLq1oV6pe5qAAAACA"]
[Wed Sep 30 01:02:46.674017 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.674268 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.676103 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0FryZ9IcLq1oV6pe5qQAAAB4"]
[Wed Sep 30 01:02:46.724800 2026] [security2:error] [pid 212454:tid 212666] [client 52.231.30.175:37921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp.php"] [unique_id "ary0FryZ9IcLq1oV6pe5rAAAAFI"]
[Wed Sep 30 01:02:46.746011 2026] [security2:error] [pid 212454:tid 212507] [remote 91.244.197.105:50500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ary0FryZ9IcLq1oV6pe5rQAAKDQ"]
[Wed Sep 30 01:02:46.792966 2026] [security2:error] [pid 212454:tid 212679] [client 45.138.12.43:46132] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.svr.yrw.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0FryZ9IcLq1oV6pe5rwAAAF8"]
[Wed Sep 30 01:02:46.793844 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Q=
[Wed Sep 30 01:02:46.794115 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Q=
[Wed Sep 30 01:02:46.816408 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.816656 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.818004 2026] [security2:error] [pid 212454:tid 212602] [client 52.231.30.175:32231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/ffl.php"] [unique_id "ary0FryZ9IcLq1oV6pe5sgAAABI"]
[Wed Sep 30 01:02:46.857145 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.857417 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.898322 2026] [security2:error] [pid 212454:tid 212632] [client 85.204.70.116:3233] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0FryZ9IcLq1oV6pe5uAAAADA"]
[Wed Sep 30 01:02:46.906935 2026] [security2:error] [pid 212454:tid 212515] [remote 91.244.197.105:50500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ary0FryZ9IcLq1oV6pe5uQAAGjw"], referer: https://rhinoglobalenterprises.com/wp-login.php
[Wed Sep 30 01:02:46.948425 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:46.948704 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:46.980995 2026] [security2:error] [pid 212454:tid 212637] [client 103.241.204.139:50544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0FryZ9IcLq1oV6pe5vAAAADU"]
[Wed Sep 30 01:02:46.981085 2026] [security2:error] [pid 212454:tid 212637] [client 103.241.204.139:50544] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0FryZ9IcLq1oV6pe5vAAAADU"]
[Wed Sep 30 01:02:46.989042 2026] [security2:error] [pid 212454:tid 212617] [client 52.231.30.175:37347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/simple.php"] [unique_id "ary0FryZ9IcLq1oV6pe5vQAAACE"]
[Wed Sep 30 01:02:47.033078 2026] [security2:error] [pid 212454:tid 212628] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0F7yZ9IcLq1oV6pe5vgAAACw"]
[Wed Sep 30 01:02:47.039199 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.039458 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.066668 2026] [security2:error] [pid 212454:tid 212516] [remote 91.244.197.105:50500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5wwAAdD0"]
[Wed Sep 30 01:02:47.066835 2026] [security2:error] [pid 212454:tid 212700] [client 91.244.197.105:50500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5wwAAdD0"]
[Wed Sep 30 01:02:47.109836 2026] [security2:error] [pid 212454:tid 212615] [client 20.214.109.68:9440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5ywAAAB8"]
[Wed Sep 30 01:02:47.125022 2026] [security2:error] [pid 212454:tid 212698] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0F7yZ9IcLq1oV6pe5yQAAAHI"]
[Wed Sep 30 01:02:47.127635 2026] [security2:error] [pid 212454:tid 212584] [client 20.214.109.68:10950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/xx.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5zQAAAAA"]
[Wed Sep 30 01:02:47.128693 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.128972 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.223735 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.224010 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.226207 2026] [security2:error] [pid 212454:tid 212596] [client 52.231.30.175:38865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/koiy.php"] [unique_id "ary0F7yZ9IcLq1oV6pe50wAAAAw"]
[Wed Sep 30 01:02:47.228939 2026] [security2:error] [pid 212454:tid 212649] [client 152.59.169.65:53208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe51AAAAEE"]
[Wed Sep 30 01:02:47.229029 2026] [security2:error] [pid 212454:tid 212649] [client 152.59.169.65:53208] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe51AAAAEE"]
[Wed Sep 30 01:02:47.264007 2026] [security2:error] [pid 212454:tid 212694] [client 52.231.30.175:37960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/chosen.php"] [unique_id "ary0F7yZ9IcLq1oV6pe51gAAAG4"]
[Wed Sep 30 01:02:47.305929 2026] [security2:error] [pid 212454:tid 212678] [client 171.25.193.79:10828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.193.25.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe51wAAAF4"]
[Wed Sep 30 01:02:47.306033 2026] [security2:error] [pid 212454:tid 212678] [client 171.25.193.79:10828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe51wAAAF4"]
[Wed Sep 30 01:02:47.312462 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.312715 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:6030] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.318324 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:47.318622 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Q=
[Wed Sep 30 01:02:47.403154 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.403429 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:35577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.456729 2026] [security2:error] [pid 212454:tid 212621] [client 85.204.70.116:57754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0F7yZ9IcLq1oV6pe56AAAACU"]
[Wed Sep 30 01:02:47.488010 2026] [security2:error] [pid 212454:tid 212666] [client 216.73.216.46:35577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0F7yZ9IcLq1oV6pe56QAAAFI"]
[Wed Sep 30 01:02:47.491232 2026] [security2:error] [pid 212454:tid 212624] [client 52.231.30.175:32249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/bnmtp.php"] [unique_id "ary0F7yZ9IcLq1oV6pe56gAAACg"]
[Wed Sep 30 01:02:47.525142 2026] [security2:error] [pid 212454:tid 212658] [client 52.231.30.175:37964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/als.php"] [unique_id "ary0F7yZ9IcLq1oV6pe57QAAAEo"]
[Wed Sep 30 01:02:47.579828 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:6030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0F7yZ9IcLq1oV6pe58QAAADQ"]
[Wed Sep 30 01:02:47.727285 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.727542 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.761493 2026] [security2:error] [pid 212454:tid 212657] [client 52.231.30.175:32131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/cwclass.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5_gAAAEk"]
[Wed Sep 30 01:02:47.780202 2026] [security2:error] [pid 212454:tid 212615] [client 20.214.109.68:11084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/Jcrop.php"] [unique_id "ary0F7yZ9IcLq1oV6pe5_wAAAB8"]
[Wed Sep 30 01:02:47.786639 2026] [security2:error] [pid 212454:tid 212630] [client 52.231.30.175:37926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/admin.php"] [unique_id "ary0F7yZ9IcLq1oV6pe6AQAAAC4"]
[Wed Sep 30 01:02:47.806976 2026] [security2:error] [pid 212454:tid 212698] [client 4.196.65.241:64190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/1b.php"] [unique_id "ary0F7yZ9IcLq1oV6pe6AgAAAHI"]
[Wed Sep 30 01:02:47.811198 2026] [security2:error] [pid 212454:tid 212599] [client 122.173.27.10:14632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe6AwAAAA8"]
[Wed Sep 30 01:02:47.811304 2026] [security2:error] [pid 212454:tid 212599] [client 122.173.27.10:14632] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0F7yZ9IcLq1oV6pe6AwAAAA8"]
[Wed Sep 30 01:02:47.821404 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.821766 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.827816 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Q=
[Wed Sep 30 01:02:47.828186 2026] [access_compat:error] [pid 212454:tid 212683] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Q=
[Wed Sep 30 01:02:47.910165 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.910423 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:47.950102 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:47.950381 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.025870 2026] [security2:error] [pid 212454:tid 212700] [client 85.204.70.116:57758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0GLyZ9IcLq1oV6pe6FQAAAHQ"]
[Wed Sep 30 01:02:48.035515 2026] [security2:error] [pid 212454:tid 212587] [client 4.240.25.22:8497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/a.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6GAAAAAM"]
[Wed Sep 30 01:02:48.038401 2026] [security2:error] [pid 212454:tid 212594] [client 52.231.30.175:38809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/123viva.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6GgAAAAo"]
[Wed Sep 30 01:02:48.040130 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.040381 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.044801 2026] [security2:error] [pid 212454:tid 212661] [client 103.168.67.253:36354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6GwAAAE0"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:48.069565 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:37991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/f35.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6HgAAABM"]
[Wed Sep 30 01:02:48.072874 2026] [security2:error] [pid 212454:tid 212671] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GLyZ9IcLq1oV6pe6HQAAAFc"]
[Wed Sep 30 01:02:48.131456 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.131707 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.223710 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.223984 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.225275 2026] [security2:error] [pid 212454:tid 212628] [client 223.181.60.167:21276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6LAAAACw"]
[Wed Sep 30 01:02:48.225669 2026] [security2:error] [pid 212454:tid 212628] [client 223.181.60.167:21276] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6LAAAACw"]
[Wed Sep 30 01:02:48.293382 2026] [access_compat:error] [pid 212454:tid 212641] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:48.293650 2026] [access_compat:error] [pid 212454:tid 212641] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:48.312950 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.313211 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.321736 2026] [security2:error] [pid 212454:tid 212619] [client 52.231.30.175:32216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/wso2024.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6MwAAACM"]
[Wed Sep 30 01:02:48.330309 2026] [security2:error] [pid 212454:tid 212680] [client 52.231.30.175:37923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/aaa.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6NAAAAGA"]
[Wed Sep 30 01:02:48.363056 2026] [security2:error] [pid 212454:tid 212476] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6NQAAQxU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148242&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:02:48.363111 2026] [security2:error] [pid 212454:tid 212476] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6NQAAQxU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148242&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:02:48.403378 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.403631 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.408391 2026] [security2:error] [pid 212454:tid 212620] [client 74.7.242.1:50090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6OAAAACQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:02:48.419009 2026] [security2:error] [pid 212454:tid 212692] [client 20.214.109.68:11034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/rip.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6OQAAAGw"]
[Wed Sep 30 01:02:48.495327 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.495593 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.582871 2026] [security2:error] [pid 212454:tid 212660] [client 52.231.30.175:32232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/scora.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6QQAAAEw"]
[Wed Sep 30 01:02:48.583927 2026] [security2:error] [pid 212454:tid 212602] [client 85.204.70.116:57770] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0GLyZ9IcLq1oV6pe6QgAAABI"]
[Wed Sep 30 01:02:48.592664 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.593115 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.594428 2026] [security2:error] [pid 212454:tid 212656] [client 52.231.30.175:37974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/gecko.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6QwAAAEg"]
[Wed Sep 30 01:02:48.679196 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.679459 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.769604 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.769902 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.793177 2026] [security2:error] [pid 212454:tid 212627] [client 20.214.109.68:9912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ccs.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6TwAAACs"]
[Wed Sep 30 01:02:48.805560 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Q=
[Wed Sep 30 01:02:48.805829 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Q=
[Wed Sep 30 01:02:48.833574 2026] [security2:error] [pid 212454:tid 212690] [client 45.138.12.32:36578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bjw.uhw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6UQAAAGo"]
[Wed Sep 30 01:02:48.861361 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.861663 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.863130 2026] [security2:error] [pid 212454:tid 212666] [client 52.231.30.175:32169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.hannahjune.com"] [uri "/404.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6WAAAAFI"]
[Wed Sep 30 01:02:48.863650 2026] [security2:error] [pid 212454:tid 212654] [client 52.231.30.175:37998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/xiugai.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6WQAAAEY"]
[Wed Sep 30 01:02:48.868798 2026] [security2:error] [pid 212454:tid 212635] [client 181.17.247.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "ary0GLyZ9IcLq1oV6pe6WgAAADM"]
[Wed Sep 30 01:02:48.884385 2026] [security2:error] [pid 212454:tid 212675] [client 20.194.96.176:63911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/z60.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6XgAAAFs"]
[Wed Sep 30 01:02:48.953412 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:48.953681 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:48.972831 2026] [security2:error] [pid 212454:tid 212689] [client 103.172.210.103:51852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6ZAAAAGk"]
[Wed Sep 30 01:02:48.972977 2026] [security2:error] [pid 212454:tid 212689] [client 103.172.210.103:51852] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6ZAAAAGk"]
[Wed Sep 30 01:02:48.987988 2026] [security2:error] [pid 212454:tid 212674] [client 20.219.2.60:19401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ewe.php"] [unique_id "ary0GLyZ9IcLq1oV6pe6ZgAAAFo"]
[Wed Sep 30 01:02:49.041397 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.041663 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.077319 2026] [security2:error] [pid 212454:tid 212632] [client 49.43.163.212:58631] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6awAAADA"]
[Wed Sep 30 01:02:49.077460 2026] [security2:error] [pid 212454:tid 212632] [client 49.43.163.212:58631] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6awAAADA"]
[Wed Sep 30 01:02:49.093995 2026] [security2:error] [pid 212454:tid 212538] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.aws/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe6bwAAJlM"]
[Wed Sep 30 01:02:49.095032 2026] [security2:error] [pid 212454:tid 212553] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.aws/credentials.bak"] [unique_id "ary0GbyZ9IcLq1oV6pe6cgAAJmI"]
[Wed Sep 30 01:02:49.127453 2026] [security2:error] [pid 212454:tid 212703] [client 52.231.30.175:37891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/inx.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6ewAAAHc"]
[Wed Sep 30 01:02:49.131578 2026] [security2:error] [pid 212454:tid 212692] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0GbyZ9IcLq1oV6pe6fQAAAGw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:49.133263 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.133516 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.146399 2026] [security2:error] [pid 212454:tid 212591] [client 85.204.70.116:57786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0GbyZ9IcLq1oV6pe6ggAAAAc"]
[Wed Sep 30 01:02:49.147880 2026] [security2:error] [pid 212454:tid 212650] [client 155.190.6.18:48096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6gwAAAEI"]
[Wed Sep 30 01:02:49.147986 2026] [security2:error] [pid 212454:tid 212650] [client 155.190.6.18:48096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6gwAAAEI"]
[Wed Sep 30 01:02:49.227250 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.227501 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.243715 2026] [security2:error] [pid 212454:tid 212668] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0GbyZ9IcLq1oV6pe6jAAAAFQ"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:49.272365 2026] [security2:error] [pid 212454:tid 212561] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.docker/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe6kAAAJmo"]
[Wed Sep 30 01:02:49.272397 2026] [security2:error] [pid 212454:tid 212523] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe6kwAAJkQ"]
[Wed Sep 30 01:02:49.272800 2026] [security2:error] [pid 212454:tid 212547] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe6jgAAJlw"]
[Wed Sep 30 01:02:49.300209 2026] [security2:error] [pid 212454:tid 212630] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0GbyZ9IcLq1oV6pe6mQAAAC4"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:49.319094 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.319344 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.321527 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GbyZ9IcLq1oV6pe6eAAAAAA"]
[Wed Sep 30 01:02:49.324255 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Q=
[Wed Sep 30 01:02:49.324528 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Q=
[Wed Sep 30 01:02:49.391465 2026] [security2:error] [pid 212454:tid 212690] [client 52.231.30.175:37977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/11.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6pAAAAGo"]
[Wed Sep 30 01:02:49.406263 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.406575 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.409173 2026] [security2:error] [pid 212454:tid 212455] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env.bak"] [unique_id "ary0GbyZ9IcLq1oV6pe6qgAAJgA"]
[Wed Sep 30 01:02:49.409188 2026] [security2:error] [pid 212454:tid 212580] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env.backup"] [unique_id "ary0GbyZ9IcLq1oV6pe6qQAAJn0"]
[Wed Sep 30 01:02:49.498082 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.498358 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.547084 2026] [security2:error] [pid 212454:tid 212460] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env.old"] [unique_id "ary0GbyZ9IcLq1oV6pe6tQAAJgU"]
[Wed Sep 30 01:02:49.588456 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.588740 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:36339] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.600945 2026] [security2:error] [pid 212454:tid 212482] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.132.140.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/.env.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6uwAAJhs"]
[Wed Sep 30 01:02:49.604454 2026] [security2:error] [pid 212454:tid 212609] [client 171.25.193.79:53528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.193.25.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6vAAAABk"]
[Wed Sep 30 01:02:49.604574 2026] [security2:error] [pid 212454:tid 212609] [client 171.25.193.79:53528] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hairofsheba.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6vAAAABk"]
[Wed Sep 30 01:02:49.657217 2026] [security2:error] [pid 212454:tid 212620] [client 52.231.30.175:37980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/File.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6yQAAACQ"]
[Wed Sep 30 01:02:49.673245 2026] [security2:error] [pid 212454:tid 212696] [client 216.73.216.46:36339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0GbyZ9IcLq1oV6pe6zAAAAHA"]
[Wed Sep 30 01:02:49.685119 2026] [security2:error] [pid 212454:tid 212480] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env.swp"] [unique_id "ary0GbyZ9IcLq1oV6pe6zQAAJhk"]
[Wed Sep 30 01:02:49.702783 2026] [security2:error] [pid 212454:tid 212703] [client 20.214.109.68:11218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/new4.php"] [unique_id "ary0GbyZ9IcLq1oV6pe6zwAAAHc"]
[Wed Sep 30 01:02:49.714040 2026] [security2:error] [pid 212454:tid 212597] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GbyZ9IcLq1oV6pe6pQAAAA0"]
[Wed Sep 30 01:02:49.715602 2026] [security2:error] [pid 212454:tid 212710] [client 85.204.70.116:57792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0GbyZ9IcLq1oV6pe60AAAAH4"]
[Wed Sep 30 01:02:49.734571 2026] [security2:error] [pid 212454:tid 212471] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/.env~"] [unique_id "ary0GbyZ9IcLq1oV6pe60wAAJhA"]
[Wed Sep 30 01:02:49.771449 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.771742 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.796065 2026] [security2:error] [pid 212454:tid 212655] [client 20.214.109.68:9450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/set.php"] [unique_id "ary0GbyZ9IcLq1oV6pe63wAAAEc"]
[Wed Sep 30 01:02:49.827720 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 01:02:49.827995 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L25ldA==
[Wed Sep 30 01:02:49.862360 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.862630 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:49.871727 2026] [security2:error] [pid 212454:tid 212494] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/api/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe67AAAJic"]
[Wed Sep 30 01:02:49.921540 2026] [security2:error] [pid 212454:tid 212685] [client 52.231.30.175:38001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0GbyZ9IcLq1oV6pe67gAAAGU"]
[Wed Sep 30 01:02:49.934468 2026] [security2:error] [pid 212454:tid 212463] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.132.140.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/api/phpinfo.php"] [unique_id "ary0GbyZ9IcLq1oV6pe68AAAfwg"]
[Wed Sep 30 01:02:49.936391 2026] [security2:error] [pid 212454:tid 212489] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/app/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe68wAAXiI"]
[Wed Sep 30 01:02:49.937623 2026] [security2:error] [pid 212454:tid 212607] [client 116.72.182.19:64862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe68QAAABc"]
[Wed Sep 30 01:02:49.937795 2026] [security2:error] [pid 212454:tid 212607] [client 116.72.182.19:64862] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0GbyZ9IcLq1oV6pe68QAAABc"]
[Wed Sep 30 01:02:49.938995 2026] [security2:error] [pid 212454:tid 212461] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/application/.env"] [unique_id "ary0GbyZ9IcLq1oV6pe69AAAXgY"]
[Wed Sep 30 01:02:49.950806 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:49.951085 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.005650 2026] [security2:error] [pid 212454:tid 212477] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/back/.env"] [unique_id "ary0GryZ9IcLq1oV6pe6_wAAXhY"]
[Wed Sep 30 01:02:50.005650 2026] [security2:error] [pid 212454:tid 212575] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/backend/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7AAAAXng"]
[Wed Sep 30 01:02:50.008794 2026] [security2:error] [pid 212454:tid 212525] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/backup/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7AQAAXkY"]
[Wed Sep 30 01:02:50.012323 2026] [security2:error] [pid 212454:tid 212464] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/cms/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7AgAAXgk"]
[Wed Sep 30 01:02:50.045561 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.046034 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.072366 2026] [security2:error] [pid 212454:tid 212542] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.132.140.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/config.php"] [unique_id "ary0GryZ9IcLq1oV6pe7DQAAXlc"]
[Wed Sep 30 01:02:50.117215 2026] [security2:error] [pid 212454:tid 212645] [client 173.254.29.157:23048] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary0GryZ9IcLq1oV6pe7EQAAAD0"]
[Wed Sep 30 01:02:50.133681 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.133973 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.142239 2026] [security2:error] [pid 212454:tid 212543] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/config/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7GAAAXlg"]
[Wed Sep 30 01:02:50.147237 2026] [security2:error] [pid 212454:tid 212520] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/core/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7GgAAXkE"]
[Wed Sep 30 01:02:50.154218 2026] [security2:error] [pid 212454:tid 212537] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/database.sql"] [unique_id "ary0GryZ9IcLq1oV6pe7HgAAXlI"]
[Wed Sep 30 01:02:50.157377 2026] [security2:error] [pid 212454:tid 212700] [client 213.136.69.135:54792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/compat-utf8.php"] [unique_id "ary0GryZ9IcLq1oV6pe7HwAAAHQ"], referer: binance.com
[Wed Sep 30 01:02:50.169918 2026] [security2:error] [pid 212454:tid 212674] [client 20.214.109.68:11113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/aa.php"] [unique_id "ary0GryZ9IcLq1oV6pe7IQAAAFo"]
[Wed Sep 30 01:02:50.183421 2026] [security2:error] [pid 212454:tid 212621] [client 20.194.96.176:63726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/imageskir.php"] [unique_id "ary0GryZ9IcLq1oV6pe7JgAAACU"]
[Wed Sep 30 01:02:50.193253 2026] [security2:error] [pid 212454:tid 212660] [client 52.231.30.175:37903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0GryZ9IcLq1oV6pe7KQAAAEw"]
[Wed Sep 30 01:02:50.204104 2026] [security2:error] [pid 212454:tid 212702] [client 82.102.18.126:42028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0GryZ9IcLq1oV6pe7KwAAAHY"]
[Wed Sep 30 01:02:50.209506 2026] [security2:error] [pid 212454:tid 212522] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/dev/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7LAAAXkM"]
[Wed Sep 30 01:02:50.227177 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.227543 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.238767 2026] [security2:error] [pid 212454:tid 212618] [client 45.138.12.32:36572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bjo.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0GryZ9IcLq1oV6pe7LgAAACI"]
[Wed Sep 30 01:02:50.291625 2026] [security2:error] [pid 212454:tid 212605] [client 85.204.70.116:57804] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0GryZ9IcLq1oV6pe7NQAAABU"]
[Wed Sep 30 01:02:50.295433 2026] [security2:error] [pid 212454:tid 212591] [client 152.59.165.7:51449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7MQAAAAc"]
[Wed Sep 30 01:02:50.295549 2026] [security2:error] [pid 212454:tid 212591] [client 152.59.165.7:51449] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7MQAAAAc"]
[Wed Sep 30 01:02:50.303165 2026] [security2:error] [pid 212454:tid 212650] [client 202.179.95.79:55347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7NAAAAEI"]
[Wed Sep 30 01:02:50.303281 2026] [security2:error] [pid 212454:tid 212650] [client 202.179.95.79:55347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7NAAAAEI"]
[Wed Sep 30 01:02:50.319122 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.319586 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.325914 2026] [access_compat:error] [pid 212454:tid 212586] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Q=
[Wed Sep 30 01:02:50.326177 2026] [access_compat:error] [pid 212454:tid 212586] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Q=
[Wed Sep 30 01:02:50.330057 2026] [security2:error] [pid 212454:tid 212555] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/frontend/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7OgAAXmQ"]
[Wed Sep 30 01:02:50.346360 2026] [security2:error] [pid 212454:tid 212476] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.132.140.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/info.php"] [unique_id "ary0GryZ9IcLq1oV6pe7PAAAXhU"]
[Wed Sep 30 01:02:50.355969 2026] [security2:error] [pid 212454:tid 212533] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/laravel/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7PgAAXk4"]
[Wed Sep 30 01:02:50.389419 2026] [security2:error] [pid 212454:tid 212635] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GryZ9IcLq1oV6pe7CQAAADM"]
[Wed Sep 30 01:02:50.389842 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0GryZ9IcLq1oV6pe7QgAAAC0"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.395999 2026] [security2:error] [pid 212454:tid 212544] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/media/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7QwAAXlk"]
[Wed Sep 30 01:02:50.408142 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.408414 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.413580 2026] [security2:error] [pid 212454:tid 212530] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/new/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7RwAAXks"]
[Wed Sep 30 01:02:50.437167 2026] [security2:error] [pid 212454:tid 212556] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0GryZ9IcLq1oV6pe7SQAAfWU"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D87103
[Wed Sep 30 01:02:50.450718 2026] [security2:error] [pid 212454:tid 212546] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/old/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7SgAAXls"]
[Wed Sep 30 01:02:50.452787 2026] [security2:error] [pid 212454:tid 212610] [client 52.231.30.175:37973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0GryZ9IcLq1oV6pe7SwAAABo"]
[Wed Sep 30 01:02:50.465494 2026] [security2:error] [pid 212454:tid 212637] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0GryZ9IcLq1oV6pe7TgAAADU"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.465997 2026] [security2:error] [pid 212454:tid 212552] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.132.140.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/phpinfo.php"] [unique_id "ary0GryZ9IcLq1oV6pe7TwAAXmE"]
[Wed Sep 30 01:02:50.471001 2026] [security2:error] [pid 212454:tid 212536] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/production/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7UAAAXlE"]
[Wed Sep 30 01:02:50.479170 2026] [security2:error] [pid 212454:tid 212549] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/public/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7UQAAXl4"]
[Wed Sep 30 01:02:50.503197 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.503632 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.522339 2026] [security2:error] [pid 212454:tid 212550] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/server/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7VwAAXl8"]
[Wed Sep 30 01:02:50.552577 2026] [security2:error] [pid 212454:tid 212568] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/src/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7WwAAXnE"]
[Wed Sep 30 01:02:50.579983 2026] [security2:error] [pid 212454:tid 212672] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0GryZ9IcLq1oV6pe7XgAAAFg"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.587432 2026] [security2:error] [pid 212454:tid 212557] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/staging/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7YAAAXmY"]
[Wed Sep 30 01:02:50.589021 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.589292 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.603728 2026] [security2:error] [pid 212454:tid 212576] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/test/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7YwAAXnk"]
[Wed Sep 30 01:02:50.607831 2026] [security2:error] [pid 212454:tid 212472] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/v1/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7ZAAAXhE"]
[Wed Sep 30 01:02:50.612019 2026] [security2:error] [pid 212454:tid 212538] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/v2/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7ZQAAXlM"]
[Wed Sep 30 01:02:50.616919 2026] [security2:error] [pid 212454:tid 212558] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "gbepy.com"] [uri "/wp-config.php.bak"] [unique_id "ary0GryZ9IcLq1oV6pe7aQAAXmc"]
[Wed Sep 30 01:02:50.617456 2026] [security2:error] [pid 212454:tid 212540] [remote 34.140.132.132:43200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "gbepy.com"] [uri "/web/.env"] [unique_id "ary0GryZ9IcLq1oV6pe7aAAAXlU"]
[Wed Sep 30 01:02:50.654825 2026] [security2:error] [pid 212454:tid 212646] [client 116.193.128.26:62255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7bgAAAD4"]
[Wed Sep 30 01:02:50.654938 2026] [security2:error] [pid 212454:tid 212646] [client 116.193.128.26:62255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7bgAAAD4"]
[Wed Sep 30 01:02:50.699406 2026] [security2:error] [pid 212454:tid 212669] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0GryZ9IcLq1oV6pe7eAAAAFU"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.710021 2026] [security2:error] [pid 212454:tid 212663] [client 82.102.18.126:42040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0GryZ9IcLq1oV6pe7egAAAE8"]
[Wed Sep 30 01:02:50.712735 2026] [security2:error] [pid 212454:tid 212676] [client 52.231.30.175:37965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary0GryZ9IcLq1oV6pe7ewAAAFw"]
[Wed Sep 30 01:02:50.733986 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.734253 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.772939 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.773210 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.790359 2026] [security2:error] [pid 212454:tid 212674] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0GryZ9IcLq1oV6pe7hgAAAFo"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.812463 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GryZ9IcLq1oV6pe7TAAAAA8"]
[Wed Sep 30 01:02:50.821047 2026] [access_compat:error] [pid 212454:tid 212621] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 01:02:50.821312 2026] [access_compat:error] [pid 212454:tid 212621] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L25ldA==
[Wed Sep 30 01:02:50.843455 2026] [security2:error] [pid 212454:tid 212692] [client 203.122.45.246:61400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7iAAAAGw"]
[Wed Sep 30 01:02:50.843618 2026] [security2:error] [pid 212454:tid 212692] [client 203.122.45.246:61400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7iAAAAGw"]
[Wed Sep 30 01:02:50.849545 2026] [security2:error] [pid 212454:tid 212639] [client 85.204.70.116:57810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0GryZ9IcLq1oV6pe7iQAAADc"]
[Wed Sep 30 01:02:50.861161 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0GryZ9IcLq1oV6pe7jQAAAFs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.864437 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.864702 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.874920 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GryZ9IcLq1oV6pe7iwAAAFM"]
[Wed Sep 30 01:02:50.891005 2026] [security2:error] [pid 212454:tid 212634] [client 103.159.192.142:63435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7kwAAADI"]
[Wed Sep 30 01:02:50.891101 2026] [security2:error] [pid 212454:tid 212634] [client 103.159.192.142:63435] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0GryZ9IcLq1oV6pe7kwAAADI"]
[Wed Sep 30 01:02:50.921173 2026] [security2:error] [pid 212454:tid 212586] [client 103.168.67.253:36366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0GryZ9IcLq1oV6pe7lwAAAAI"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:50.939490 2026] [security2:error] [pid 212454:tid 212632] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GryZ9IcLq1oV6pe7oAAAADA"]
[Wed Sep 30 01:02:50.943060 2026] [security2:error] [pid 212454:tid 212698] [client 4.196.65.241:19493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/curldect.php"] [unique_id "ary0GryZ9IcLq1oV6pe7tQAAAHI"]
[Wed Sep 30 01:02:50.952157 2026] [security2:error] [pid 212454:tid 212680] [client 20.194.96.176:1306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/backup-helper.php"] [unique_id "ary0GryZ9IcLq1oV6pe7twAAAGA"]
[Wed Sep 30 01:02:50.953514 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:50.953775 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:50.993958 2026] [security2:error] [pid 212454:tid 212585] [client 52.231.30.175:37890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary0GryZ9IcLq1oV6pe7uQAAAAE"]
[Wed Sep 30 01:02:51.001357 2026] [security2:error] [pid 212454:tid 212648] [client 103.168.67.253:46820] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dobeservices.com"] [uri "/"] [unique_id "ary0GryZ9IcLq1oV6pe7uAAAAEA"]
[Wed Sep 30 01:02:51.042674 2026] [security2:error] [pid 212454:tid 212644] [client 82.102.18.126:42054] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0G7yZ9IcLq1oV6pe7vgAAADw"]
[Wed Sep 30 01:02:51.049447 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.049883 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.138436 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.138823 2026] [access_compat:error] [pid 212454:tid 212700] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.168888 2026] [security2:error] [pid 212454:tid 212651] [client 20.214.109.68:61120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/mode.php"] [unique_id "ary0G7yZ9IcLq1oV6pe7zAAAAEM"]
[Wed Sep 30 01:02:51.177795 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.109.68:11021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/jk.php"] [unique_id "ary0G7yZ9IcLq1oV6pe7zQAAAHY"]
[Wed Sep 30 01:02:51.192501 2026] [security2:error] [pid 212454:tid 212633] [client 223.235.102.107:13015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0G7yZ9IcLq1oV6pe7zwAAADE"]
[Wed Sep 30 01:02:51.192617 2026] [security2:error] [pid 212454:tid 212633] [client 223.235.102.107:13015] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0G7yZ9IcLq1oV6pe7zwAAADE"]
[Wed Sep 30 01:02:51.226706 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.226980 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.255307 2026] [security2:error] [pid 212454:tid 212680] [client 52.231.30.175:37939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary0G7yZ9IcLq1oV6pe71gAAAGA"]
[Wed Sep 30 01:02:51.307832 2026] [access_compat:error] [pid 212454:tid 212627] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Q=
[Wed Sep 30 01:02:51.308126 2026] [access_compat:error] [pid 212454:tid 212627] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Q=
[Wed Sep 30 01:02:51.316607 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.316893 2026] [access_compat:error] [pid 212454:tid 212663] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.327974 2026] [security2:error] [pid 212454:tid 212620] [client 116.197.133.25:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0G7yZ9IcLq1oV6pe74QAAACQ"]
[Wed Sep 30 01:02:51.328066 2026] [security2:error] [pid 212454:tid 212620] [client 116.197.133.25:61676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0G7yZ9IcLq1oV6pe74QAAACQ"]
[Wed Sep 30 01:02:51.350455 2026] [security2:error] [pid 212454:tid 212665] [client 4.240.25.22:38799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/w.php"] [unique_id "ary0G7yZ9IcLq1oV6pe75AAAAFE"]
[Wed Sep 30 01:02:51.353878 2026] [security2:error] [pid 212454:tid 212671] [client 82.102.18.126:42060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0G7yZ9IcLq1oV6pe75QAAAFc"]
[Wed Sep 30 01:02:51.409485 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.409753 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.413213 2026] [security2:error] [pid 212454:tid 212643] [client 85.204.70.116:57826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sgn.jca.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0G7yZ9IcLq1oV6pe76AAAADs"]
[Wed Sep 30 01:02:51.464497 2026] [security2:error] [pid 212454:tid 212607] [client 20.194.96.176:5943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/1xmomo.php"] [unique_id "ary0G7yZ9IcLq1oV6pe77QAAABc"]
[Wed Sep 30 01:02:51.501045 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.501444 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.517328 2026] [security2:error] [pid 212454:tid 212690] [client 52.231.30.175:37971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/media.php"] [unique_id "ary0G7yZ9IcLq1oV6pe77wAAAGo"]
[Wed Sep 30 01:02:51.530963 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:36380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0G7yZ9IcLq1oV6pe78AAAAAA"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:51.591146 2026] [security2:error] [pid 212454:tid 212599] [client 173.254.29.157:23084] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0G7yZ9IcLq1oV6pe79QAAAA8"]
[Wed Sep 30 01:02:51.592805 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.593124 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.611545 2026] [security2:error] [pid 212454:tid 212597] [client 173.254.29.157:23094] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0G7yZ9IcLq1oV6pe79gAAAA0"]
[Wed Sep 30 01:02:51.628106 2026] [security2:error] [pid 212454:tid 212604] [client 173.254.29.157:23098] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0G7yZ9IcLq1oV6pe7-QAAABQ"]
[Wed Sep 30 01:02:51.643413 2026] [security2:error] [pid 212454:tid 212693] [client 173.254.29.157:23108] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0G7yZ9IcLq1oV6pe7_AAAAG0"]
[Wed Sep 30 01:02:51.659668 2026] [security2:error] [pid 212454:tid 212702] [client 82.102.18.126:42070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0G7yZ9IcLq1oV6pe7_gAAAHY"]
[Wed Sep 30 01:02:51.682984 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.683355 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.777024 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.777478 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:50351] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.778405 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:37889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/inso.php"] [unique_id "ary0G7yZ9IcLq1oV6pe8CwAAAHw"]
[Wed Sep 30 01:02:51.792719 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:02:51.793090 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:02:51.863977 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.864262 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.926745 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzQ4
[Wed Sep 30 01:02:51.927043 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWIvLmJ1aWxkLWlkLzQ4
[Wed Sep 30 01:02:51.946607 2026] [security2:error] [pid 212454:tid 212671] [client 20.194.96.176:65069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/almafkew.php"] [unique_id "ary0G7yZ9IcLq1oV6pe8EQAAAFc"]
[Wed Sep 30 01:02:51.959591 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:51.959873 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:51.973578 2026] [security2:error] [pid 212454:tid 212634] [client 82.102.18.126:42082] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0G7yZ9IcLq1oV6pe8FAAAADI"]
[Wed Sep 30 01:02:52.042022 2026] [security2:error] [pid 212454:tid 212616] [client 52.231.30.175:37917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/shiny.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8GAAAACA"]
[Wed Sep 30 01:02:52.046162 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.046437 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.049222 2026] [security2:error] [pid 212454:tid 212647] [client 20.214.109.68:11041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/gcqoa.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8GQAAAD8"]
[Wed Sep 30 01:02:52.141653 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.142105 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:42797] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.203479 2026] [security2:error] [pid 212454:tid 212692] [client 216.73.216.46:50351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8JAAAAGw"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvaWNlaHJtL3BocDU2
[Wed Sep 30 01:02:52.223242 2026] [security2:error] [pid 212454:tid 212602] [client 43.227.131.37:27867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8JQAAABI"]
[Wed Sep 30 01:02:52.223395 2026] [security2:error] [pid 212454:tid 212602] [client 43.227.131.37:27867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8JQAAABI"]
[Wed Sep 30 01:02:52.228415 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.228683 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.256216 2026] [security2:error] [pid 212454:tid 212611] [client 135.136.66.6:52515] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8LAAAABs"]
[Wed Sep 30 01:02:52.256306 2026] [security2:error] [pid 212454:tid 212611] [client 135.136.66.6:52515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8LAAAABs"]
[Wed Sep 30 01:02:52.259566 2026] [security2:error] [pid 212454:tid 212654] [client 135.136.66.6:58477] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8NwAAAEY"]
[Wed Sep 30 01:02:52.259663 2026] [security2:error] [pid 212454:tid 212654] [client 135.136.66.6:58477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8NwAAAEY"]
[Wed Sep 30 01:02:52.289998 2026] [security2:error] [pid 212454:tid 212695] [client 82.102.18.126:42092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0HLyZ9IcLq1oV6pe8RQAAAG8"]
[Wed Sep 30 01:02:52.309555 2026] [security2:error] [pid 212454:tid 212588] [client 52.231.30.175:37321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/403dd.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8SAAAAAQ"]
[Wed Sep 30 01:02:52.325974 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:02:52.326576 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:02:52.330112 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.330585 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.341616 2026] [security2:error] [pid 212454:tid 212682] [client 74.7.230.28:41980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.yqd.bxz.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0HLyZ9IcLq1oV6pe8SgAAYhA"]
[Wed Sep 30 01:02:52.415508 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvdW5h
[Wed Sep 30 01:02:52.416028 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvdW5h
[Wed Sep 30 01:02:52.417909 2026] [security2:error] [pid 212454:tid 212662] [client 216.73.216.46:42797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0HLyZ9IcLq1oV6pe8UgAAAE4"]
[Wed Sep 30 01:02:52.421054 2026] [security2:error] [pid 212454:tid 212668] [client 20.70.173.30:44689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wpxml.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8UwAAAFQ"]
[Wed Sep 30 01:02:52.458571 2026] [security2:error] [pid 212454:tid 212605] [client 135.136.66.6:41627] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8GwAAABU"]
[Wed Sep 30 01:02:52.462686 2026] [security2:error] [pid 212454:tid 212667] [client 135.136.66.6:47955] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8PgAAAFM"]
[Wed Sep 30 01:02:52.465118 2026] [security2:error] [pid 212454:tid 212587] [client 135.136.66.6:63279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8KAAAAAM"]
[Wed Sep 30 01:02:52.467885 2026] [security2:error] [pid 212454:tid 212670] [client 135.136.66.6:33179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8GgAAAFY"]
[Wed Sep 30 01:02:52.477882 2026] [security2:error] [pid 212454:tid 212621] [client 135.136.66.6:61297] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8PAAAACU"]
[Wed Sep 30 01:02:52.482818 2026] [security2:error] [pid 212454:tid 212586] [client 135.136.66.6:60321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8OQAAAAI"]
[Wed Sep 30 01:02:52.485158 2026] [security2:error] [pid 212454:tid 212595] [client 135.136.66.6:23967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8NQAAAAs"]
[Wed Sep 30 01:02:52.495462 2026] [security2:error] [pid 212454:tid 212626] [client 135.136.66.6:34637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8LgAAACo"]
[Wed Sep 30 01:02:52.498818 2026] [security2:error] [pid 212454:tid 212618] [client 135.136.66.6:27801] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8QQAAACI"]
[Wed Sep 30 01:02:52.500606 2026] [security2:error] [pid 212454:tid 212633] [client 135.136.66.6:34533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8PQAAADE"]
[Wed Sep 30 01:02:52.504009 2026] [security2:error] [pid 212454:tid 212677] [client 135.136.66.6:42715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8MwAAAF0"]
[Wed Sep 30 01:02:52.506314 2026] [security2:error] [pid 212454:tid 212639] [client 135.136.66.6:55449] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8OgAAADc"]
[Wed Sep 30 01:02:52.515213 2026] [security2:error] [pid 212454:tid 212655] [client 135.136.66.6:24843] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8OAAAAEc"]
[Wed Sep 30 01:02:52.515273 2026] [security2:error] [pid 212454:tid 212589] [client 135.136.66.6:34379] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8OwAAAAU"]
[Wed Sep 30 01:02:52.515288 2026] [security2:error] [pid 212454:tid 212624] [client 135.136.66.6:49481] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8PwAAACg"]
[Wed Sep 30 01:02:52.522563 2026] [security2:error] [pid 212454:tid 212707] [client 135.136.66.6:22397] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8NgAAAHs"]
[Wed Sep 30 01:02:52.530287 2026] [security2:error] [pid 212454:tid 212702] [client 135.136.66.6:49257] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8NAAAAHY"]
[Wed Sep 30 01:02:52.555255 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.555552 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.571937 2026] [security2:error] [pid 212454:tid 212694] [client 52.231.30.175:37897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/baba.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8WQAAAG4"]
[Wed Sep 30 01:02:52.587170 2026] [security2:error] [pid 212454:tid 212607] [client 106.214.2.47:16914] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8WgAAABc"]
[Wed Sep 30 01:02:52.587307 2026] [security2:error] [pid 212454:tid 212607] [client 106.214.2.47:16914] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8WgAAABc"]
[Wed Sep 30 01:02:52.595427 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.595746 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.614900 2026] [security2:error] [pid 212454:tid 212690] [client 82.102.18.126:42100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0HLyZ9IcLq1oV6pe8XAAAAGo"]
[Wed Sep 30 01:02:52.662595 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.109.68:11127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/plugin-editor.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8ZQAAAEw"]
[Wed Sep 30 01:02:52.672154 2026] [security2:error] [pid 212454:tid 212601] [client 135.136.66.6:47805] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8MQAAABE"]
[Wed Sep 30 01:02:52.675838 2026] [security2:error] [pid 212454:tid 212609] [client 135.136.66.6:56261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8LQAAABk"]
[Wed Sep 30 01:02:52.687552 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.687900 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.690941 2026] [security2:error] [pid 212454:tid 212693] [client 135.136.66.6:46463] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8LwAAAG0"]
[Wed Sep 30 01:02:52.693627 2026] [access_compat:error] [pid 212454:tid 212645] [client 47.79.13.1:33400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:52.693628 2026] [security2:error] [pid 212454:tid 212612] [client 135.136.66.6:39011] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8KwAAABw"]
[Wed Sep 30 01:02:52.694031 2026] [access_compat:error] [pid 212454:tid 212645] [client 47.79.13.1:33400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:52.719079 2026] [security2:error] [pid 212454:tid 212703] [client 135.136.66.6:35427] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8KgAAAHc"]
[Wed Sep 30 01:02:52.722739 2026] [security2:error] [pid 212454:tid 212604] [client 49.205.105.16:14673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8bAAAABQ"]
[Wed Sep 30 01:02:52.722890 2026] [security2:error] [pid 212454:tid 212604] [client 49.205.105.16:14673] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8bAAAABQ"]
[Wed Sep 30 01:02:52.727918 2026] [security2:error] [pid 212454:tid 212678] [client 135.136.66.6:38249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8QAAAAF4"]
[Wed Sep 30 01:02:52.730591 2026] [security2:error] [pid 212454:tid 212638] [client 135.136.66.6:20333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "beetreeaudio.org"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8MgAAADY"]
[Wed Sep 30 01:02:52.778653 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.778991 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.836258 2026] [security2:error] [pid 212454:tid 212665] [client 52.231.30.175:37334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/site.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8eAAAAFE"]
[Wed Sep 30 01:02:52.842163 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3Blcmw1L2F1dG8vSU8%3D
[Wed Sep 30 01:02:52.842423 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3Blcmw1L2F1dG8vSU8%3D
[Wed Sep 30 01:02:52.850349 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Q=
[Wed Sep 30 01:02:52.850620 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Q=
[Wed Sep 30 01:02:52.853868 2026] [security2:error] [pid 212454:tid 212610] [client 106.214.3.140:13438] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8fAAAABo"]
[Wed Sep 30 01:02:52.853975 2026] [security2:error] [pid 212454:tid 212610] [client 106.214.3.140:13438] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8fAAAABo"]
[Wed Sep 30 01:02:52.857518 2026] [security2:error] [pid 212454:tid 212582] [remote 74.7.227.56:42146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8fQAAVn8"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=675
[Wed Sep 30 01:02:52.867769 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.868035 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.908295 2026] [security2:error] [pid 212454:tid 212634] [client 20.70.173.30:39137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8fwAAADI"]
[Wed Sep 30 01:02:52.940752 2026] [security2:error] [pid 212454:tid 212694] [client 82.102.18.126:42108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0HLyZ9IcLq1oV6pe8gAAAAG4"]
[Wed Sep 30 01:02:52.941539 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:36392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8gQAAABc"]
[Wed Sep 30 01:02:52.959373 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:52.959625 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:52.972824 2026] [security2:error] [pid 212454:tid 212593] [client 20.219.2.60:18829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/aboute.php"] [unique_id "ary0HLyZ9IcLq1oV6pe8gwAAAAk"]
[Wed Sep 30 01:02:53.049660 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.049961 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:39262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.100840 2026] [security2:error] [pid 212454:tid 212608] [client 52.231.30.175:37968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/insc.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8iQAAABg"]
[Wed Sep 30 01:02:53.142424 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.142696 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.154588 2026] [security2:error] [pid 212454:tid 212594] [client 20.194.96.176:63901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/database2.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8jgAAAAo"]
[Wed Sep 30 01:02:53.177156 2026] [security2:error] [pid 212454:tid 212691] [client 20.214.109.68:11050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/plugin-install.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8kgAAAGs"]
[Wed Sep 30 01:02:53.225207 2026] [security2:error] [pid 212454:tid 212612] [client 216.73.216.46:39262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0HbyZ9IcLq1oV6pe8mwAAABw"]
[Wed Sep 30 01:02:53.253337 2026] [security2:error] [pid 212454:tid 212668] [client 82.102.18.126:42122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0HbyZ9IcLq1oV6pe8oAAAAFQ"]
[Wed Sep 30 01:02:53.295384 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L25ldA==
[Wed Sep 30 01:02:53.295663 2026] [access_compat:error] [pid 212454:tid 212625] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L25ldA==
[Wed Sep 30 01:02:53.329487 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.329946 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:63750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.361866 2026] [security2:error] [pid 212454:tid 212603] [client 52.231.30.175:37982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/file.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8pwAAABM"]
[Wed Sep 30 01:02:53.469589 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:2019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.470018 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:2019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.498216 2026] [security2:error] [pid 212454:tid 212670] [client 216.73.216.46:63750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0HbyZ9IcLq1oV6pe8rQAAAFY"]
[Wed Sep 30 01:02:53.558265 2026] [security2:error] [pid 212454:tid 212633] [client 82.102.18.126:33348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0HbyZ9IcLq1oV6pe8sAAAADE"]
[Wed Sep 30 01:02:53.589512 2026] [security2:error] [pid 212454:tid 212586] [client 216.73.216.46:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0HbyZ9IcLq1oV6pe8tAAAAAI"]
[Wed Sep 30 01:02:53.622637 2026] [security2:error] [pid 212454:tid 212671] [client 52.231.30.175:37899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/dex.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8uQAAAFc"]
[Wed Sep 30 01:02:53.725141 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0HbyZ9IcLq1oV6pe8wAAAAAA"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:53.739106 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.739378 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.805675 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Q=
[Wed Sep 30 01:02:53.806130 2026] [access_compat:error] [pid 212454:tid 212591] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Q=
[Wed Sep 30 01:02:53.829630 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.829940 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.858522 2026] [autoindex:error] [pid 212454:tid 212630] [client 87.236.176.158:57867] AH01276: Cannot serve directory /home4/udfaebmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:02:53.867510 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.867764 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:53.887711 2026] [security2:error] [pid 212454:tid 212693] [client 52.231.30.175:37337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/key.php"] [unique_id "ary0HbyZ9IcLq1oV6pe8yAAAAG0"]
[Wed Sep 30 01:02:53.896860 2026] [security2:error] [pid 212454:tid 212585] [client 82.102.18.126:33360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0HbyZ9IcLq1oV6pe8yQAAAAE"]
[Wed Sep 30 01:02:53.959463 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:53.959745 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.016821 2026] [security2:error] [pid 212454:tid 212645] [client 45.138.12.32:23208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bng.hyx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0HryZ9IcLq1oV6pe8zwAAAD0"]
[Wed Sep 30 01:02:54.053932 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.054214 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.140844 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.141122 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.164700 2026] [security2:error] [pid 212454:tid 212637] [client 52.231.30.175:38009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/kir.php"] [unique_id "ary0HryZ9IcLq1oV6pe83AAAADU"]
[Wed Sep 30 01:02:54.182109 2026] [security2:error] [pid 212454:tid 212673] [client 20.214.109.68:9460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ok.php"] [unique_id "ary0HryZ9IcLq1oV6pe83wAAAFk"]
[Wed Sep 30 01:02:54.217059 2026] [security2:error] [pid 212454:tid 212587] [client 82.102.18.126:33368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0HryZ9IcLq1oV6pe84wAAAAM"]
[Wed Sep 30 01:02:54.233216 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.233479 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.239936 2026] [security2:error] [pid 212454:tid 212621] [client 20.214.109.68:11115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/profile.php"] [unique_id "ary0HryZ9IcLq1oV6pe85gAAACU"]
[Wed Sep 30 01:02:54.253772 2026] [security2:error] [pid 212454:tid 212657] [client 45.138.12.32:23270] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.msl.svd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0HryZ9IcLq1oV6pe85wAAAEk"]
[Wed Sep 30 01:02:54.320067 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 01:02:54.320506 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L25ldA==
[Wed Sep 30 01:02:54.323168 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.323423 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.375979 2026] [security2:error] [pid 212454:tid 212615] [client 169.40.142.134:35232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sco.igm.mybluehost.me"] [uri "/index.php"] [unique_id "ary0HryZ9IcLq1oV6pe88wAAAB8"]
[Wed Sep 30 01:02:54.400975 2026] [security2:error] [pid 212454:tid 212584] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0HryZ9IcLq1oV6pe89gAAAAA"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:54.414170 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.414452 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.428543 2026] [security2:error] [pid 212454:tid 212662] [client 49.36.41.37:49715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0HryZ9IcLq1oV6pe8-QAAAE4"]
[Wed Sep 30 01:02:54.428655 2026] [security2:error] [pid 212454:tid 212662] [client 49.36.41.37:49715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0HryZ9IcLq1oV6pe8-QAAAE4"]
[Wed Sep 30 01:02:54.429163 2026] [security2:error] [pid 212454:tid 212619] [client 52.231.30.175:38015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/fling.php"] [unique_id "ary0HryZ9IcLq1oV6pe8-gAAACM"]
[Wed Sep 30 01:02:54.459253 2026] [security2:error] [pid 212454:tid 212676] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0HryZ9IcLq1oV6pe8_wAAAFw"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:54.511585 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.512032 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:61644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.560555 2026] [security2:error] [pid 212454:tid 212693] [client 82.102.18.126:33374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0HryZ9IcLq1oV6pe9CwAAAG0"]
[Wed Sep 30 01:02:54.598783 2026] [security2:error] [pid 212454:tid 212645] [client 20.214.109.68:9866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/zoo.php"] [unique_id "ary0HryZ9IcLq1oV6pe9DwAAAD0"]
[Wed Sep 30 01:02:54.602396 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.602850 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.664152 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2RuZg%3D%3D
[Wed Sep 30 01:02:54.664430 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2RuZg%3D%3D
[Wed Sep 30 01:02:54.681889 2026] [security2:error] [pid 212454:tid 212688] [client 216.73.216.46:61644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0HryZ9IcLq1oV6pe9GgAAAGg"]
[Wed Sep 30 01:02:54.697637 2026] [security2:error] [pid 212454:tid 212669] [client 52.231.30.175:37905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/btyuio.php"] [unique_id "ary0HryZ9IcLq1oV6pe9HQAAAFU"]
[Wed Sep 30 01:02:54.727934 2026] [security2:error] [pid 212454:tid 212605] [client 4.196.65.241:19104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zwso.php"] [unique_id "ary0HryZ9IcLq1oV6pe9HwAAABU"]
[Wed Sep 30 01:02:54.733244 2026] [security2:error] [pid 212454:tid 212698] [client 45.138.12.48:38658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.allmattingsolutions.com.au"] [uri "/wp-links-opml.php"] [unique_id "ary0HryZ9IcLq1oV6pe9IAAAAHI"]
[Wed Sep 30 01:02:54.782459 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.782727 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.834907 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Q=
[Wed Sep 30 01:02:54.835205 2026] [access_compat:error] [pid 212454:tid 212636] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Q=
[Wed Sep 30 01:02:54.867327 2026] [security2:error] [pid 212454:tid 212595] [client 82.102.18.126:33390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.qfs.zav.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0HryZ9IcLq1oV6pe9JQAAAAs"]
[Wed Sep 30 01:02:54.883307 2026] [security2:error] [pid 212454:tid 212610] [client 20.214.109.68:11097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/class-t.api.php"] [unique_id "ary0HryZ9IcLq1oV6pe9JgAAABo"]
[Wed Sep 30 01:02:54.921932 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.922381 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.960959 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:54.961225 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:54.962112 2026] [security2:error] [pid 212454:tid 212655] [client 52.231.30.175:37354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/sm.php"] [unique_id "ary0HryZ9IcLq1oV6pe9LgAAAEc"]
[Wed Sep 30 01:02:55.052582 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.053009 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.144007 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.144452 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:45949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.227065 2026] [security2:error] [pid 212454:tid 212698] [client 52.231.30.175:37326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/a.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9TgAAAHI"]
[Wed Sep 30 01:02:55.227369 2026] [security2:error] [pid 212454:tid 212591] [client 216.73.216.46:45949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0H7yZ9IcLq1oV6pe9TwAAAAc"]
[Wed Sep 30 01:02:55.305037 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0L25ldA==
[Wed Sep 30 01:02:55.305298 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0L25ldA==
[Wed Sep 30 01:02:55.316028 2026] [security2:error] [pid 212454:tid 212610] [client 20.194.30.107:17394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/ops.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9VAAAABo"]
[Wed Sep 30 01:02:55.324591 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.324869 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.420122 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.420374 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.489796 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvbmZzL3Y0cmVjb3Zlcnk%3D
[Wed Sep 30 01:02:55.490253 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvbmZzL3Y0cmVjb3Zlcnk%3D
[Wed Sep 30 01:02:55.507642 2026] [security2:error] [pid 212454:tid 212628] [client 52.231.30.175:37312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/sb.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9ZQAAACw"]
[Wed Sep 30 01:02:55.553296 2026] [security2:error] [pid 212454:tid 212615] [client 216.73.216.46:16215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0H7yZ9IcLq1oV6pe9aQAAAB8"]
[Wed Sep 30 01:02:55.562082 2026] [security2:error] [pid 212454:tid 212671] [client 20.194.96.176:63690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/aa.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9agAAAFc"]
[Wed Sep 30 01:02:55.598694 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.598957 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.609983 2026] [security2:error] [pid 212454:tid 212634] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0H7yZ9IcLq1oV6pe9bAAAADI"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:55.617614 2026] [security2:error] [pid 212454:tid 212535] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9bQAAalA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211556&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:02:55.617638 2026] [security2:error] [pid 212454:tid 212535] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9bQAAalA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211556&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:02:55.660232 2026] [security2:error] [pid 212454:tid 212585] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0H7yZ9IcLq1oV6pe9cAAAAAE"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:55.688746 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.689130 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:9492] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.733197 2026] [security2:error] [pid 212454:tid 212631] [client 64.62.156.94:58238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "50.87.100.211"] [uri "/"] [unique_id "ary0H7yZ9IcLq1oV6pe9eAAAAC8"]
[Wed Sep 30 01:02:55.733236 2026] [security2:error] [pid 212454:tid 212675] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0H7yZ9IcLq1oV6pe9dwAAAFs"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:55.788078 2026] [security2:error] [pid 212454:tid 212665] [client 52.231.30.175:37317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/av.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9egAAAFE"]
[Wed Sep 30 01:02:55.796352 2026] [security2:error] [pid 212454:tid 212670] [client 182.69.182.151:21509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9ewAAAFY"]
[Wed Sep 30 01:02:55.796476 2026] [security2:error] [pid 212454:tid 212670] [client 182.69.182.151:21509] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9ewAAAFY"]
[Wed Sep 30 01:02:55.827606 2026] [security2:error] [pid 212454:tid 212587] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0H7yZ9IcLq1oV6pe9gAAAAAM"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:55.828515 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 01:02:55.828792 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L25ldA==
[Wed Sep 30 01:02:55.832525 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.832880 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.837288 2026] [security2:error] [pid 212454:tid 212621] [client 20.214.109.68:11122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-links-opml.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9gQAAACU"]
[Wed Sep 30 01:02:55.881851 2026] [security2:error] [pid 212454:tid 212532] [remote 57.141.14.16:55486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary0H7yZ9IcLq1oV6pe9fgAABk0"]
[Wed Sep 30 01:02:55.923627 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.923922 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:55.927451 2026] [security2:error] [pid 212454:tid 212655] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0H7yZ9IcLq1oV6pe9hwAAAEc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:55.961234 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:55.961642 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.013116 2026] [security2:error] [pid 212454:tid 212619] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0ILyZ9IcLq1oV6pe9kQAAACM"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:56.054846 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.055103 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.059000 2026] [security2:error] [pid 212454:tid 212618] [client 52.231.30.175:37958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/b8.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9kwAAACI"]
[Wed Sep 30 01:02:56.083795 2026] [security2:error] [pid 212454:tid 212697] [client 103.168.67.253:36396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9lAAAAHE"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:56.122530 2026] [security2:error] [pid 212454:tid 212625] [client 161.118.214.16:59137] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.cityofmarional.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary0ILyZ9IcLq1oV6pe9lwAAACk"]
[Wed Sep 30 01:02:56.132016 2026] [security2:error] [pid 212454:tid 212657] [client 223.181.30.165:22253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9mAAAAEk"]
[Wed Sep 30 01:02:56.132145 2026] [security2:error] [pid 212454:tid 212657] [client 223.181.30.165:22253] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9mAAAAEk"]
[Wed Sep 30 01:02:56.149907 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.150337 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.231245 2026] [security2:error] [pid 212454:tid 212669] [client 216.73.216.46:9492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0ILyZ9IcLq1oV6pe9pQAAAFU"]
[Wed Sep 30 01:02:56.241816 2026] [core:error] [pid 212454:tid 212585] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:56.241858 2026] [core:error] [pid 212454:tid 212585] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:56.320783 2026] [security2:error] [pid 212454:tid 212695] [client 52.231.30.175:37342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9pwAAAG8"]
[Wed Sep 30 01:02:56.329722 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.330209 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.331802 2026] [security2:error] [pid 212454:tid 212649] [client 37.41.16.35:49544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9qQAAAEE"]
[Wed Sep 30 01:02:56.331965 2026] [security2:error] [pid 212454:tid 212649] [client 37.41.16.35:49544] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9qQAAAEE"]
[Wed Sep 30 01:02:56.380750 2026] [security2:error] [pid 212454:tid 212650] [client 20.214.109.68:9882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gaza.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9qwAAAEI"]
[Wed Sep 30 01:02:56.420172 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.420440 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.515059 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.515743 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.584924 2026] [security2:error] [pid 212454:tid 212618] [client 52.231.30.175:37944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/0.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9vgAAACI"]
[Wed Sep 30 01:02:56.587040 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.109.68:11112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-class-api.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9wAAAAG4"]
[Wed Sep 30 01:02:56.595379 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:02:56.595749 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:02:56.597911 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzYx
[Wed Sep 30 01:02:56.598353 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzYx
[Wed Sep 30 01:02:56.605252 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.605582 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.616467 2026] [access_compat:error] [pid 212454:tid 212685] [client 47.79.13.75:49138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:56.616911 2026] [access_compat:error] [pid 212454:tid 212685] [client 47.79.13.75:49138] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:56.626749 2026] [access_compat:error] [pid 212454:tid 212691] [client 47.79.13.174:58228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:02:56.627144 2026] [access_compat:error] [pid 212454:tid 212691] [client 47.79.13.174:58228] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:02:56.695072 2026] [security2:error] [pid 212454:tid 212690] [client 103.168.67.253:23856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glorymfb.com"] [uri "/blog/index.php"] [unique_id "ary0ILyZ9IcLq1oV6pe9zAAAAGo"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:56.697007 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.697258 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.795463 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:56.795937 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:18096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:56.796406 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L25ldA==
[Wed Sep 30 01:02:56.796645 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L25ldA==
[Wed Sep 30 01:02:56.799317 2026] [security2:error] [pid 212454:tid 212608] [client 20.194.96.176:58751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/pJPoKA.php"] [unique_id "ary0ILyZ9IcLq1oV6pe90QAAABg"]
[Wed Sep 30 01:02:56.816570 2026] [security2:error] [pid 212454:tid 212641] [client 20.219.2.60:18854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/x9.php"] [unique_id "ary0ILyZ9IcLq1oV6pe90gAAADk"]
[Wed Sep 30 01:02:56.869427 2026] [security2:error] [pid 212454:tid 212642] [client 52.231.30.175:37983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/fms.php"] [unique_id "ary0ILyZ9IcLq1oV6pe91AAAADo"]
[Wed Sep 30 01:02:56.871655 2026] [security2:error] [pid 212454:tid 212620] [client 216.73.216.46:18096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0ILyZ9IcLq1oV6pe91QAAACQ"]
[Wed Sep 30 01:02:56.894318 2026] [security2:error] [pid 212454:tid 212654] [client 4.196.65.241:19483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/js.php"] [unique_id "ary0ILyZ9IcLq1oV6pe91gAAAEY"]
[Wed Sep 30 01:02:56.991603 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:63571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe93wAAAEc"]
[Wed Sep 30 01:02:56.991735 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:63571] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ILyZ9IcLq1oV6pe93wAAAEc"]
[Wed Sep 30 01:02:57.002089 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.002347 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.115825 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:19549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.116220 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:19549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.151786 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.152077 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.153585 2026] [security2:error] [pid 212454:tid 212627] [client 52.231.30.175:37352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/xyn.php"] [unique_id "ary0IbyZ9IcLq1oV6pe96gAAACs"]
[Wed Sep 30 01:02:57.245630 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.246078 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.306700 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:57.307000 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:57.335758 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.336051 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.343483 2026] [security2:error] [pid 212454:tid 212678] [client 20.214.109.68:11025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-class-atom.php"] [unique_id "ary0IbyZ9IcLq1oV6pe9-gAAAF4"]
[Wed Sep 30 01:02:57.416703 2026] [security2:error] [pid 212454:tid 212662] [client 52.231.30.175:37315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/min.php"] [unique_id "ary0IbyZ9IcLq1oV6pe9_wAAAE4"]
[Wed Sep 30 01:02:57.423511 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.423758 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:23246] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.574495 2026] [security2:error] [pid 212454:tid 212590] [client 103.241.204.139:51065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-CAAAAAY"]
[Wed Sep 30 01:02:57.574726 2026] [security2:error] [pid 212454:tid 212590] [client 103.241.204.139:51065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-CAAAAAY"]
[Wed Sep 30 01:02:57.586566 2026] [security2:error] [pid 212454:tid 212696] [client 68.167.156.254:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0IbyZ9IcLq1oV6pe-CQAAAHA"]
[Wed Sep 30 01:02:57.631131 2026] [security2:error] [pid 212454:tid 212467] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-DwAAJAw"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D49447
[Wed Sep 30 01:02:57.677678 2026] [security2:error] [pid 212454:tid 212650] [client 52.231.30.175:37327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-whe.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-FgAAAEI"]
[Wed Sep 30 01:02:57.724244 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:19549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.724492 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:19549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.825971 2026] [security2:error] [pid 212454:tid 212604] [client 216.73.216.46:23246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-IwAAABQ"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL2lycS8zMC9QQ0llIGJ3Y3RybA%3D%3D
[Wed Sep 30 01:02:57.847117 2026] [security2:error] [pid 212454:tid 212647] [client 20.214.109.68:10958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-block.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-JAAAAD8"]
[Wed Sep 30 01:02:57.854830 2026] [security2:error] [pid 212454:tid 212614] [client 20.194.30.107:17500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/media.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-JwAAAB4"]
[Wed Sep 30 01:02:57.861261 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:02:57.861519 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:02:57.872241 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:15409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.872660 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:15409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.941677 2026] [security2:error] [pid 212454:tid 212689] [client 52.231.30.175:37936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-filemanager1.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-KwAAAGk"]
[Wed Sep 30 01:02:57.949525 2026] [security2:error] [pid 212454:tid 212599] [client 152.59.169.65:53775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-LAAAAA8"]
[Wed Sep 30 01:02:57.949646 2026] [security2:error] [pid 212454:tid 212599] [client 152.59.169.65:53775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-LAAAAA8"]
[Wed Sep 30 01:02:57.960108 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:57.960360 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:57.985150 2026] [security2:error] [pid 212454:tid 212659] [client 20.194.96.176:1768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/24.php"] [unique_id "ary0IbyZ9IcLq1oV6pe-MgAAAEs"]
[Wed Sep 30 01:02:58.000040 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:15409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.000321 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:15409] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.019508 2026] [security2:error] [pid 212454:tid 212710] [client 20.70.173.30:41955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/media.php"] [unique_id "ary0IryZ9IcLq1oV6pe-NQAAAH4"]
[Wed Sep 30 01:02:58.022380 2026] [security2:error] [pid 212454:tid 212584] [client 182.75.216.230:50981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0IryZ9IcLq1oV6pe-NwAAAAA"]
[Wed Sep 30 01:02:58.023026 2026] [security2:error] [pid 212454:tid 212584] [client 182.75.216.230:50981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0IryZ9IcLq1oV6pe-NwAAAAA"]
[Wed Sep 30 01:02:58.125139 2026] [security2:error] [pid 212454:tid 212663] [client 20.198.74.230:23878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/xrp.php"] [unique_id "ary0IryZ9IcLq1oV6pe-OwAAAE8"]
[Wed Sep 30 01:02:58.142024 2026] [security2:error] [pid 212454:tid 212641] [client 216.73.216.46:19549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0IryZ9IcLq1oV6pe-PwAAADk"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9pbmNsdWRlL3Byb3RvYnVmLWM%3D
[Wed Sep 30 01:02:58.142654 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.142918 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.147470 2026] [cgid:error] [pid 212454:tid 212674] [client 143.198.118.130:43744] AH01265: stderr from /home1/odeonsi1/public_html/cgi-bin/: attempt to invoke directory as script
[Wed Sep 30 01:02:58.187743 2026] [proxy:warn] [pid 212454:tid 212654] [client 199.45.154.116:41440] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be admin.dennis-cooper.com for uri /400.shtml
[Wed Sep 30 01:02:58.222368 2026] [security2:error] [pid 212454:tid 212658] [client 52.231.30.175:38002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-freya.php"] [unique_id "ary0IryZ9IcLq1oV6pe-TAAAAEo"]
[Wed Sep 30 01:02:58.226149 2026] [security2:error] [pid 212454:tid 212643] [client 216.73.216.46:43604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0IryZ9IcLq1oV6pe-TQAAADs"]
[Wed Sep 30 01:02:58.256425 2026] [security2:error] [pid 212454:tid 212514] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0IryZ9IcLq1oV6pe-SAAAJzs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=249480
[Wed Sep 30 01:02:58.256453 2026] [security2:error] [pid 212454:tid 212514] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0IryZ9IcLq1oV6pe-SAAAJzs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=249480
[Wed Sep 30 01:02:58.271887 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.272170 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.288101 2026] [security2:error] [pid 212454:tid 212684] [client 20.219.2.60:18817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/an.php"] [unique_id "ary0IryZ9IcLq1oV6pe-UgAAAGQ"]
[Wed Sep 30 01:02:58.325824 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 01:02:58.326254 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZA==
[Wed Sep 30 01:02:58.328936 2026] [security2:error] [pid 212454:tid 212601] [client 128.121.237.115:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0IryZ9IcLq1oV6pe-VAAAABE"]
[Wed Sep 30 01:02:58.333475 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9wZXJsNS92ZW5kb3JfcGVybC9EYXRh
[Wed Sep 30 01:02:58.333760 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9wZXJsNS92ZW5kb3JfcGVybC9EYXRh
[Wed Sep 30 01:02:58.364701 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.365145 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.397579 2026] [security2:error] [pid 212454:tid 212667] [client 216.73.216.46:15409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0IryZ9IcLq1oV6pe-YQAAAFM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvem9uZWluZm8vRXVyb3Bl
[Wed Sep 30 01:02:58.413045 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0IryZ9IcLq1oV6pe-YgAAAB4"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.431613 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL2RybS9ub3Rlcw%3D%3D
[Wed Sep 30 01:02:58.432065 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvbW9kdWxlL2RybS9ub3Rlcw%3D%3D
[Wed Sep 30 01:02:58.453978 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.454255 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.467035 2026] [security2:error] [pid 212454:tid 212689] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0IryZ9IcLq1oV6pe-aAAAAGk"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.486619 2026] [security2:error] [pid 212454:tid 212605] [client 52.231.30.175:37331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/admin.php/admin.php"] [unique_id "ary0IryZ9IcLq1oV6pe-aQAAABU"]
[Wed Sep 30 01:02:58.515343 2026] [security2:error] [pid 212454:tid 212625] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0IryZ9IcLq1oV6pe-bgAAACk"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.516988 2026] [core:error] [pid 212454:tid 212607] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:58.517006 2026] [core:error] [pid 212454:tid 212607] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:58.522480 2026] [security2:error] [pid 212454:tid 212634] [client 122.173.27.10:18014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0IryZ9IcLq1oV6pe-cAAAADI"]
[Wed Sep 30 01:02:58.522575 2026] [security2:error] [pid 212454:tid 212634] [client 122.173.27.10:18014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0IryZ9IcLq1oV6pe-cAAAADI"]
[Wed Sep 30 01:02:58.543602 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.543886 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.564162 2026] [security2:error] [pid 212454:tid 212670] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0IryZ9IcLq1oV6pe-eQAAAFY"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.612207 2026] [security2:error] [pid 212454:tid 212633] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/Batch/v1"] [unique_id "ary0IryZ9IcLq1oV6pe-fQAAADE"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.636569 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.636834 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.659729 2026] [security2:error] [pid 212454:tid 212591] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1"] [unique_id "ary0IryZ9IcLq1oV6pe-hAAAAAc"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.707009 2026] [security2:error] [pid 212454:tid 212683] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp-json/batch/v1/"] [unique_id "ary0IryZ9IcLq1oV6pe-iwAAAGM"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.727115 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.727374 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.746927 2026] [security2:error] [pid 212454:tid 212679] [client 52.231.30.175:37910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/faiy.php"] [unique_id "ary0IryZ9IcLq1oV6pe-kQAAAF8"]
[Wed Sep 30 01:02:58.752369 2026] [security2:error] [pid 212454:tid 212652] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/blog/wp-json/batch/v1"] [unique_id "ary0IryZ9IcLq1oV6pe-kwAAAEQ"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:58.761545 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.109.68:11190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-signup.php"] [unique_id "ary0IryZ9IcLq1oV6pe-lAAAAAo"]
[Wed Sep 30 01:02:58.811186 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:58.811461 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:02:58.816491 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.816756 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:58.907759 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:58.908038 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.001034 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.001374 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.021455 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.109.68:9870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/grsiuk.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-owAAAA8"]
[Wed Sep 30 01:02:59.026597 2026] [security2:error] [pid 212454:tid 212644] [client 52.231.30.175:37946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-pAAAADw"]
[Wed Sep 30 01:02:59.070021 2026] [security2:error] [pid 212454:tid 212661] [client 103.168.67.253:23876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wordpress/wp-json/batch/v1"] [unique_id "ary0I7yZ9IcLq1oV6pe-pgAAAE0"], referer: https://glorymfb.com/blog/wp-admin/
[Wed Sep 30 01:02:59.089658 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.089943 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.154158 2026] [security2:error] [pid 212454:tid 212605] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/posts/999999"] [unique_id "ary0I7yZ9IcLq1oV6pe-qgAAABU"]
[Wed Sep 30 01:02:59.160088 2026] [security2:error] [pid 212454:tid 212613] [client 223.181.60.167:6124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-qwAAAB0"]
[Wed Sep 30 01:02:59.160180 2026] [security2:error] [pid 212454:tid 212613] [client 223.181.60.167:6124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-qwAAAB0"]
[Wed Sep 30 01:02:59.182199 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.182468 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.189613 2026] [security2:error] [pid 212454:tid 212493] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-rgAAKSY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=095300f78b22756cfd6bc0242e304c02
[Wed Sep 30 01:02:59.189635 2026] [security2:error] [pid 212454:tid 212493] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-rgAAKSY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=095300f78b22756cfd6bc0242e304c02
[Wed Sep 30 01:02:59.221054 2026] [security2:error] [pid 212454:tid 212597] [client 45.138.12.41:65070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nso.mim.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-rwAAAA0"]
[Wed Sep 30 01:02:59.263458 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.109.68:11044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-xmlsia.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-sQAAADQ"]
[Wed Sep 30 01:02:59.272201 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.272483 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.306141 2026] [security2:error] [pid 212454:tid 212632] [client 52.231.30.175:37922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/myglu.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-tAAAADA"]
[Wed Sep 30 01:02:59.312635 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:02:59.312902 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:02:59.334570 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2p3aG9pcw%3D%3D
[Wed Sep 30 01:02:59.334865 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvZG9jL2p3aG9pcw%3D%3D
[Wed Sep 30 01:02:59.362727 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.362994 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.370259 2026] [security2:error] [pid 212454:tid 212592] [client 154.212.7.54:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0I7yZ9IcLq1oV6pe-vAAAAAg"]
[Wed Sep 30 01:02:59.454634 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.454957 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.498074 2026] [security2:error] [pid 212454:tid 212630] [client 20.219.2.60:18830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/aboutc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-xwAAAC4"]
[Wed Sep 30 01:02:59.540418 2026] [security2:error] [pid 212454:tid 212646] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0I7yZ9IcLq1oV6pe-ygAAAD4"]
[Wed Sep 30 01:02:59.545187 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.545452 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.565002 2026] [security2:error] [pid 212454:tid 212628] [client 103.172.210.103:52511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-zQAAACw"]
[Wed Sep 30 01:02:59.565100 2026] [security2:error] [pid 212454:tid 212628] [client 103.172.210.103:52511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-zQAAACw"]
[Wed Sep 30 01:02:59.566535 2026] [security2:error] [pid 212454:tid 212684] [client 52.231.30.175:37319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/bnmtp.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-zwAAAGQ"]
[Wed Sep 30 01:02:59.582929 2026] [security2:error] [pid 212454:tid 212459] [remote 52.167.144.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-0AAABQQ"]
[Wed Sep 30 01:02:59.636334 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.636602 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.650068 2026] [security2:error] [pid 212454:tid 212599] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/pages"] [unique_id "ary0I7yZ9IcLq1oV6pe-3gAAAA8"]
[Wed Sep 30 01:02:59.724243 2026] [security2:error] [pid 212454:tid 212650] [client 155.190.6.18:52342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-6QAAAEI"]
[Wed Sep 30 01:02:59.724351 2026] [security2:error] [pid 212454:tid 212650] [client 155.190.6.18:52342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-6QAAAEI"]
[Wed Sep 30 01:02:59.728234 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.728490 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.738082 2026] [core:error] [pid 212454:tid 212609] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:59.738100 2026] [core:error] [pid 212454:tid 212609] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:59.745369 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0I7yZ9IcLq1oV6pe-8AAAAFM"]
[Wed Sep 30 01:02:59.749121 2026] [core:error] [pid 212454:tid 212690] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:59.749134 2026] [core:error] [pid 212454:tid 212690] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:02:59.779017 2026] [security2:error] [pid 212454:tid 212670] [client 20.194.30.107:17385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/admin.php"] [unique_id "ary0I7yZ9IcLq1oV6pe-9QAAAFY"]
[Wed Sep 30 01:02:59.798765 2026] [security2:error] [pid 212454:tid 212710] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0I7yZ9IcLq1oV6pe-9gAAAH4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:02:59.806400 2026] [access_compat:error] [pid 212454:tid 212641] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:59.806727 2026] [access_compat:error] [pid 212454:tid 212641] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:02:59.815566 2026] [security2:error] [pid 212454:tid 212606] [client 4.240.25.22:8511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/m.php"] [unique_id "ary0I7yZ9IcLq1oV6pe--QAAABY"]
[Wed Sep 30 01:02:59.820772 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.821070 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:02:59.847711 2026] [security2:error] [pid 212454:tid 212590] [client 52.231.30.175:37906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/zeta.php"] [unique_id "ary0I7yZ9IcLq1oV6pe--gAAAAY"]
[Wed Sep 30 01:02:59.883550 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.109.68:11019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.combatscore.com"] [uri "/wp-inic3.php"] [unique_id "ary0I7yZ9IcLq1oV6pe_AAAAAEo"]
[Wed Sep 30 01:02:59.909994 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:02:59.910272 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:8147] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.001698 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.001984 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.087433 2026] [security2:error] [pid 212454:tid 212617] [client 20.198.74.230:23882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/felnggg.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_EAAAACE"]
[Wed Sep 30 01:03:00.092453 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.092715 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.106024 2026] [security2:error] [pid 212454:tid 212629] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/media"] [unique_id "ary0JLyZ9IcLq1oV6pe_EgAAAC0"]
[Wed Sep 30 01:03:00.119590 2026] [security2:error] [pid 212454:tid 212661] [client 52.231.30.175:37961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_EwAAAE0"]
[Wed Sep 30 01:03:00.185493 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.186018 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.229720 2026] [security2:error] [pid 212454:tid 212690] [client 20.194.30.107:17455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wpxml.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_GgAAAGo"]
[Wed Sep 30 01:03:00.276301 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.276566 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.307885 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:03:00.308145 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:03:00.330443 2026] [security2:error] [pid 212454:tid 212613] [client 216.73.216.46:8147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_IQAAAB0"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvY2FjaGUvbW9uYXJ4LWFnZW50
[Wed Sep 30 01:03:00.333222 2026] [security2:error] [pid 212454:tid 212464] [remote 52.167.144.179:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_IgAAMAk"]
[Wed Sep 30 01:03:00.365295 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.365538 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.383673 2026] [security2:error] [pid 212454:tid 212592] [client 52.231.30.175:37269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_KgAAAAg"]
[Wed Sep 30 01:03:00.433237 2026] [security2:error] [pid 212454:tid 212623] [client 116.72.182.19:65259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.182.72.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_LgAAACc"]
[Wed Sep 30 01:03:00.433349 2026] [security2:error] [pid 212454:tid 212623] [client 116.72.182.19:65259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bellmoremerrickchildcare.com"] [uri "/xmlrpc.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_LgAAACc"]
[Wed Sep 30 01:03:00.459805 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.460122 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.461648 2026] [security2:error] [pid 212454:tid 212616] [client 168.107.70.193:53382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "odf.ujo.mybluehost.me"] [uri "/"] [unique_id "ary0JLyZ9IcLq1oV6pe_MQAAACA"]
[Wed Sep 30 01:03:00.462339 2026] [security2:error] [pid 212454:tid 212640] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0JLyZ9IcLq1oV6pe_NQAAADg"]
[Wed Sep 30 01:03:00.573487 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.573935 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.647581 2026] [security2:error] [pid 212454:tid 212679] [client 52.231.30.175:37314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_TAAAAF8"]
[Wed Sep 30 01:03:00.654395 2026] [security2:error] [pid 212454:tid 212650] [client 4.196.65.241:2525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/a11.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_TgAAAEI"]
[Wed Sep 30 01:03:00.655973 2026] [security2:error] [pid 212454:tid 212634] [client 103.168.67.253:23868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_TwAAADI"]
[Wed Sep 30 01:03:00.693111 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.693367 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.729028 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.729291 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:11978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.814903 2026] [security2:error] [pid 212454:tid 212671] [client 216.73.216.46:11978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0JLyZ9IcLq1oV6pe_XgAAAFc"]
[Wed Sep 30 01:03:00.836296 2026] [access_compat:error] [pid 212454:tid 212606] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:03:00.836580 2026] [access_compat:error] [pid 212454:tid 212606] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:03:00.855626 2026] [security2:error] [pid 212454:tid 212607] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/categories"] [unique_id "ary0JLyZ9IcLq1oV6pe_YwAAABc"]
[Wed Sep 30 01:03:00.907625 2026] [security2:error] [pid 212454:tid 212620] [client 52.231.30.175:37913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/flamini.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_agAAACQ"]
[Wed Sep 30 01:03:00.912156 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:00.912419 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:00.932280 2026] [security2:error] [pid 212454:tid 212684] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0JLyZ9IcLq1oV6pe_bgAAAGQ"]
[Wed Sep 30 01:03:00.979261 2026] [security2:error] [pid 212454:tid 212633] [client 152.59.165.7:52082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_cgAAADE"]
[Wed Sep 30 01:03:00.979367 2026] [security2:error] [pid 212454:tid 212633] [client 152.59.165.7:52082] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0JLyZ9IcLq1oV6pe_cgAAADE"]
[Wed Sep 30 01:03:01.002603 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.002884 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.144974 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.145378 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.161780 2026] [security2:error] [pid 212454:tid 212661] [client 202.179.95.79:52137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_gAAAAE0"]
[Wed Sep 30 01:03:01.161870 2026] [security2:error] [pid 212454:tid 212661] [client 202.179.95.79:52137] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_gAAAAE0"]
[Wed Sep 30 01:03:01.171169 2026] [security2:error] [pid 212454:tid 212594] [client 52.231.30.175:37929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/myglu.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_gQAAAAo"]
[Wed Sep 30 01:03:01.183727 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.183993 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:59606] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.246905 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.109.68:9457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-act.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_hgAAACY"]
[Wed Sep 30 01:03:01.269457 2026] [security2:error] [pid 212454:tid 212666] [client 216.73.216.46:59606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0JbyZ9IcLq1oV6pe_igAAAFI"]
[Wed Sep 30 01:03:01.281973 2026] [security2:error] [pid 212454:tid 212604] [client 40.77.167.55:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/solar-panels/"] [unique_id "ary0JbyZ9IcLq1oV6pe_iwAAABQ"]
[Wed Sep 30 01:03:01.302174 2026] [security2:error] [pid 212454:tid 212690] [client 213.136.69.135:58153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/connectors.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_jAAAAGo"], referer: binance.com
[Wed Sep 30 01:03:01.326710 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:01.327002 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:01.342852 2026] [security2:error] [pid 212454:tid 212659] [client 116.193.128.26:62903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_kAAAAEs"]
[Wed Sep 30 01:03:01.342943 2026] [security2:error] [pid 212454:tid 212659] [client 116.193.128.26:62903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_kAAAAEs"]
[Wed Sep 30 01:03:01.343370 2026] [access_compat:error] [pid 212454:tid 212632] [client 119.249.100.43:57688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.343763 2026] [access_compat:error] [pid 212454:tid 212632] [client 119.249.100.43:57688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.365731 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.366011 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.396434 2026] [security2:error] [pid 212454:tid 212700] [client 203.122.45.246:62039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_kwAAAHQ"]
[Wed Sep 30 01:03:01.396540 2026] [security2:error] [pid 212454:tid 212700] [client 203.122.45.246:62039] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_kwAAAHQ"]
[Wed Sep 30 01:03:01.428144 2026] [security2:error] [pid 212454:tid 212516] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_lAAAeT0"], referer: https://torquayfans.com/viewtopic.php?p=95571
[Wed Sep 30 01:03:01.428178 2026] [security2:error] [pid 212454:tid 212516] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_lAAAeT0"], referer: https://torquayfans.com/viewtopic.php?p=95571
[Wed Sep 30 01:03:01.440581 2026] [security2:error] [pid 212454:tid 212611] [client 52.231.30.175:37360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/alfa.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_mAAAABs"]
[Wed Sep 30 01:03:01.514174 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:18542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.514575 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:18542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.542884 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:64046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_pAAAAEc"]
[Wed Sep 30 01:03:01.544026 2026] [security2:error] [pid 212454:tid 212655] [client 103.159.192.142:64046] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_pAAAAEc"]
[Wed Sep 30 01:03:01.548799 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.549092 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.634093 2026] [security2:error] [pid 212454:tid 212652] [client 216.73.216.46:18542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0JbyZ9IcLq1oV6pe_qwAAAEQ"]
[Wed Sep 30 01:03:01.647399 2026] [security2:error] [pid 212454:tid 212477] [remote 207.46.13.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_rgAAZBY"]
[Wed Sep 30 01:03:01.676147 2026] [security2:error] [pid 212454:tid 212609] [client 66.249.65.99:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.digitise.africa"] [uri "/robots.txt"] [unique_id "ary0JbyZ9IcLq1oV6pe_sgAAABk"]
[Wed Sep 30 01:03:01.705677 2026] [security2:error] [pid 212454:tid 212631] [client 52.231.30.175:37945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/index.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_twAAAC8"]
[Wed Sep 30 01:03:01.730252 2026] [security2:error] [pid 212454:tid 212651] [client 20.194.30.107:17400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/inputs.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_uAAAAEM"]
[Wed Sep 30 01:03:01.760346 2026] [security2:error] [pid 212454:tid 212697] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/tags"] [unique_id "ary0JbyZ9IcLq1oV6pe_uQAAAHE"]
[Wed Sep 30 01:03:01.782452 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.782726 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.797790 2026] [security2:error] [pid 212454:tid 212591] [client 116.197.133.25:62296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_vQAAAAc"]
[Wed Sep 30 01:03:01.797917 2026] [security2:error] [pid 212454:tid 212591] [client 116.197.133.25:62296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_vQAAAAc"]
[Wed Sep 30 01:03:01.808010 2026] [access_compat:error] [pid 212454:tid 212603] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L25ldA==
[Wed Sep 30 01:03:01.808274 2026] [access_compat:error] [pid 212454:tid 212603] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0L25ldA==
[Wed Sep 30 01:03:01.845248 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9wZXJsNS9hdXRvL1RpbWU%3D
[Wed Sep 30 01:03:01.845514 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9saWI2NC9wZXJsNS9hdXRvL1RpbWU%3D
[Wed Sep 30 01:03:01.874669 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.874939 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.911993 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:01.912260 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:49449] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:01.935244 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvY3lydXMtc2FzbC1saWI%3D
[Wed Sep 30 01:03:01.935518 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvY3lydXMtc2FzbC1saWI%3D
[Wed Sep 30 01:03:01.969884 2026] [security2:error] [pid 212454:tid 212636] [client 52.231.30.175:38007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_ygAAADQ"]
[Wed Sep 30 01:03:01.985973 2026] [security2:error] [pid 212454:tid 212690] [client 4.240.25.22:8431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/adminfuns.php"] [unique_id "ary0JbyZ9IcLq1oV6pe_zQAAAGo"]
[Wed Sep 30 01:03:02.003098 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.003467 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.005578 2026] [core:error] [pid 212454:tid 212588] [client 104.207.58.228:39571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:02.005598 2026] [core:error] [pid 212454:tid 212588] [client 104.207.58.228:39571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:02.095283 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.095544 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:49441] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.186358 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.186628 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.197436 2026] [security2:error] [pid 212454:tid 212658] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0JryZ9IcLq1oV6pe_6QAAAEo"]
[Wed Sep 30 01:03:02.228848 2026] [security2:error] [pid 212454:tid 212633] [client 223.235.102.107:18626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pe_7AAAADE"]
[Wed Sep 30 01:03:02.230530 2026] [security2:error] [pid 212454:tid 212633] [client 223.235.102.107:18626] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pe_7AAAADE"]
[Wed Sep 30 01:03:02.282046 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.282462 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:7776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.311989 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:02.312418 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:02.318672 2026] [security2:error] [pid 212454:tid 212595] [client 20.194.96.176:65032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/42b5827789index.php"] [unique_id "ary0JryZ9IcLq1oV6pe_9gAAAAs"]
[Wed Sep 30 01:03:02.333676 2026] [security2:error] [pid 212454:tid 212635] [client 216.73.216.46:49449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0JryZ9IcLq1oV6pe_-AAAADM"], referer: http://www.homs.co.ke/?action=adminer&p=L2xpYjY0L2dpcmVwb3NpdG9yeS0xLjA%3D
[Wed Sep 30 01:03:02.353092 2026] [security2:error] [pid 212454:tid 212645] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/posts/999998"] [unique_id "ary0JryZ9IcLq1oV6pe_-QAAAD0"]
[Wed Sep 30 01:03:02.406549 2026] [security2:error] [pid 212454:tid 212683] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0JryZ9IcLq1oV6pe__wAAAGM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:02.423342 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.423611 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.455231 2026] [security2:error] [pid 212454:tid 212675] [client 216.73.216.46:7776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0JryZ9IcLq1oV6pfAAwAAAFs"]
[Wed Sep 30 01:03:02.476606 2026] [security2:error] [pid 212454:tid 212588] [client 4.196.65.241:64181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zuk.php"] [unique_id "ary0JryZ9IcLq1oV6pfABwAAAAQ"]
[Wed Sep 30 01:03:02.499678 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0JryZ9IcLq1oV6pfADQAAIkk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=30d4ed719f436dec11da092c326c37f2
[Wed Sep 30 01:03:02.499699 2026] [security2:error] [pid 212454:tid 212528] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0JryZ9IcLq1oV6pfADQAAIkk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=30d4ed719f436dec11da092c326c37f2
[Wed Sep 30 01:03:02.502464 2026] [security2:error] [pid 212454:tid 212660] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0JryZ9IcLq1oV6pfADgAAAEw"]
[Wed Sep 30 01:03:02.509679 2026] [security2:error] [pid 212454:tid 212677] [client 216.73.216.46:49441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0JryZ9IcLq1oV6pfADwAAAF0"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9saWIvaXNjc2kvaXNucw%3D%3D
[Wed Sep 30 01:03:02.522666 2026] [security2:error] [pid 212454:tid 212695] [client 52.231.30.175:38013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary0JryZ9IcLq1oV6pfAEAAAAG8"]
[Wed Sep 30 01:03:02.550489 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.554744 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.692554 2026] [security2:error] [pid 212454:tid 212602] [client 45.138.12.32:23408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bri.ujo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0JryZ9IcLq1oV6pfAGAAAABI"]
[Wed Sep 30 01:03:02.693473 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.693781 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.733823 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.734139 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.750868 2026] [security2:error] [pid 212454:tid 212671] [client 45.138.12.32:36748] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.msl.svd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0JryZ9IcLq1oV6pfAHwAAAFc"]
[Wed Sep 30 01:03:02.755517 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliL3VkZXYvcnVsZXMuZA%3D%3D
[Wed Sep 30 01:03:02.755927 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3IvbGliL3VkZXYvcnVsZXMuZA%3D%3D
[Wed Sep 30 01:03:02.787282 2026] [security2:error] [pid 212454:tid 212623] [client 52.231.30.175:37970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/admin.php"] [unique_id "ary0JryZ9IcLq1oV6pfAIwAAACc"]
[Wed Sep 30 01:03:02.818008 2026] [security2:error] [pid 212454:tid 212641] [client 119.47.88.254:38680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.88.47.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taracom.net"] [uri "/wp-login.php"] [unique_id "ary0JryZ9IcLq1oV6pfAJAAAADk"], referer: https://taracom.net/wp-login.php
[Wed Sep 30 01:03:02.820959 2026] [security2:error] [pid 212454:tid 212605] [client 49.43.163.212:59320] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pfAJgAAABU"]
[Wed Sep 30 01:03:02.821933 2026] [security2:error] [pid 212454:tid 212605] [client 49.43.163.212:59320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pfAJgAAABU"]
[Wed Sep 30 01:03:02.823605 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.823906 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.834931 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:02.835234 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:02.918385 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:02.918634 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:02.941449 2026] [security2:error] [pid 212454:tid 212597] [client 43.227.131.37:19371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pfANQAAAA0"]
[Wed Sep 30 01:03:02.941552 2026] [security2:error] [pid 212454:tid 212597] [client 43.227.131.37:19371] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0JryZ9IcLq1oV6pfANQAAAA0"]
[Wed Sep 30 01:03:03.008657 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.008950 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.022999 2026] [security2:error] [pid 212454:tid 212651] [client 110.172.144.47:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0J7yZ9IcLq1oV6pfAPQAAAEM"]
[Wed Sep 30 01:03:03.029117 2026] [security2:error] [pid 212454:tid 212688] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/posts/99999"] [unique_id "ary0J7yZ9IcLq1oV6pfAPgAAAGg"]
[Wed Sep 30 01:03:03.056119 2026] [security2:error] [pid 212454:tid 212622] [client 52.231.30.175:37324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAQAAAACY"]
[Wed Sep 30 01:03:03.096089 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.096370 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.130854 2026] [security2:error] [pid 212454:tid 212608] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0J7yZ9IcLq1oV6pfARwAAABg"]
[Wed Sep 30 01:03:03.131942 2026] [security2:error] [pid 212454:tid 212685] [client 20.194.96.176:63728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/mmq.php"] [unique_id "ary0J7yZ9IcLq1oV6pfASAAAAGU"]
[Wed Sep 30 01:03:03.240554 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.240859 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.279160 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.279419 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.306734 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:03:03.307010 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:03:03.317181 2026] [security2:error] [pid 212454:tid 212693] [client 52.231.30.175:37987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAUwAAAG0"]
[Wed Sep 30 01:03:03.370323 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.370591 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.403474 2026] [security2:error] [pid 212454:tid 212596] [client 106.214.2.47:14987] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAWgAAAAw"]
[Wed Sep 30 01:03:03.403616 2026] [security2:error] [pid 212454:tid 212596] [client 106.214.2.47:14987] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAWgAAAAw"]
[Wed Sep 30 01:03:03.439384 2026] [security2:error] [pid 212454:tid 212629] [client 49.205.105.16:13414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAXgAAAC0"]
[Wed Sep 30 01:03:03.439609 2026] [security2:error] [pid 212454:tid 212629] [client 49.205.105.16:13414] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAXgAAAC0"]
[Wed Sep 30 01:03:03.460450 2026] [security2:error] [pid 212454:tid 212658] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/posts/9999999"] [unique_id "ary0J7yZ9IcLq1oV6pfAYQAAAEo"]
[Wed Sep 30 01:03:03.461524 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.461824 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.474752 2026] [security2:error] [pid 212454:tid 212644] [client 20.219.2.60:18824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gdn.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAZAAAADw"]
[Wed Sep 30 01:03:03.534114 2026] [security2:error] [pid 212454:tid 212678] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0J7yZ9IcLq1oV6pfAaQAAAF4"]
[Wed Sep 30 01:03:03.553003 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.553509 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.581036 2026] [security2:error] [pid 212454:tid 212587] [client 52.231.30.175:37896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/cgi-bin/index.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAawAAAAM"]
[Wed Sep 30 01:03:03.613938 2026] [security2:error] [pid 212454:tid 212704] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/wp/v2/users"] [unique_id "ary0J7yZ9IcLq1oV6pfAcQAAAHg"]
[Wed Sep 30 01:03:03.643122 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.643389 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.673374 2026] [access_compat:error] [pid 212454:tid 212661] [client 47.79.201.49:36572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:03:03.673644 2026] [access_compat:error] [pid 212454:tid 212661] [client 47.79.201.49:36572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:03:03.680820 2026] [cgid:error] [pid 212454:tid 212593] [client 143.198.139.94:34182] AH01265: stderr from /home1/odeonsi1/public_html/cgi-bin/: attempt to invoke directory as script
[Wed Sep 30 01:03:03.696152 2026] [security2:error] [pid 212454:tid 212666] [client 103.168.67.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/blog/"] [unique_id "ary0J7yZ9IcLq1oV6pfAewAAAFI"]
[Wed Sep 30 01:03:03.708962 2026] [security2:error] [pid 212454:tid 212676] [client 45.138.12.32:36834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.msl.svd.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAfgAAAFw"]
[Wed Sep 30 01:03:03.740086 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.740534 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.826877 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.827131 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.846639 2026] [security2:error] [pid 212454:tid 212708] [client 52.231.30.175:37911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-manager.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAjwAAAHw"]
[Wed Sep 30 01:03:03.866511 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:03.866763 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:03.886772 2026] [security2:error] [pid 212454:tid 212653] [client 20.194.96.176:63694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/fryvbbn.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAlAAAAEU"]
[Wed Sep 30 01:03:03.920693 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:03.921140 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:03.925319 2026] [security2:error] [pid 212454:tid 212682] [client 103.168.67.253:23890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0J7yZ9IcLq1oV6pfAlwAAAGI"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:04.006887 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.007182 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.067615 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvY2xhc3MvdHR5L3R0eTE3
[Wed Sep 30 01:03:04.067904 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvY2xhc3MvdHR5L3R0eTE3
[Wed Sep 30 01:03:04.097509 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.097765 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.108342 2026] [security2:error] [pid 212454:tid 212613] [client 52.231.30.175:37933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0KLyZ9IcLq1oV6pfApwAAAB0"]
[Wed Sep 30 01:03:04.119160 2026] [security2:error] [pid 212454:tid 212627] [client 66.249.74.14:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary0KLyZ9IcLq1oV6pfAqwAAACs"]
[Wed Sep 30 01:03:04.139638 2026] [security2:error] [pid 212454:tid 212455] [remote 207.46.13.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAsAAACgA"]
[Wed Sep 30 01:03:04.157593 2026] [security2:error] [pid 212454:tid 212678] [client 103.168.67.253:23896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAsQAAAF4"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:04.192418 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.192865 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.195366 2026] [security2:error] [pid 212454:tid 212509] [remote 207.46.13.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAtgAAJjY"]
[Wed Sep 30 01:03:04.281238 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.281692 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:10320] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.320942 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L2N3ZA==
[Wed Sep 30 01:03:04.321275 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:55514] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L2N3ZA==
[Wed Sep 30 01:03:04.352412 2026] [security2:error] [pid 212454:tid 212611] [client 20.214.109.68:9913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/cu.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAwwAAABs"]
[Wed Sep 30 01:03:04.365198 2026] [security2:error] [pid 212454:tid 212685] [client 216.73.216.46:10320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KLyZ9IcLq1oV6pfAxQAAAGU"]
[Wed Sep 30 01:03:04.368441 2026] [security2:error] [pid 212454:tid 212585] [client 52.231.30.175:37924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAxgAAAAE"]
[Wed Sep 30 01:03:04.436624 2026] [security2:error] [pid 212454:tid 212621] [client 119.47.88.254:34274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.88.47.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taracom.net"] [uri "/wp-login.php"] [unique_id "ary0KLyZ9IcLq1oV6pfAzgAAACU"], referer: https://taracom.net/wp-login.php
[Wed Sep 30 01:03:04.462732 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.463019 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:42560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.556436 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.556864 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.695301 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:12343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.695572 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:12343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.723614 2026] [security2:error] [pid 212454:tid 212624] [client 189.113.34.206:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0KLyZ9IcLq1oV6pfA4AAAACg"]
[Wed Sep 30 01:03:04.734241 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.734496 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.792870 2026] [security2:error] [pid 212454:tid 212678] [client 20.194.30.107:64717] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.steaminnovationfoundation.org"] [uri "/1.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA6AAAAF4"]
[Wed Sep 30 01:03:04.793031 2026] [security2:error] [pid 212454:tid 212678] [client 20.194.30.107:64717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/1.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA6AAAAF4"]
[Wed Sep 30 01:03:04.827949 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.828216 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.828781 2026] [security2:error] [pid 212454:tid 212622] [client 74.7.243.227:55514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KLyZ9IcLq1oV6pfA6wAAACY"], referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9BYQ==
[Wed Sep 30 01:03:04.862875 2026] [security2:error] [pid 212454:tid 212680] [client 216.73.216.46:42560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA7QAAAGA"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvYXV0b21ha2U%3D
[Wed Sep 30 01:03:04.878057 2026] [security2:error] [pid 212454:tid 212655] [client 49.36.41.37:50216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA7gAAAEc"]
[Wed Sep 30 01:03:04.878163 2026] [security2:error] [pid 212454:tid 212655] [client 49.36.41.37:50216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA7gAAAEc"]
[Wed Sep 30 01:03:04.881399 2026] [security2:error] [pid 212454:tid 212684] [client 20.194.30.107:17288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/one.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA8AAAAGQ"]
[Wed Sep 30 01:03:04.917001 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:04.917266 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:04.949049 2026] [security2:error] [pid 212454:tid 212460] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA-AAAWgU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=d5b672f1a7ce60da339aedd8b18beebe&start=75&t=21548
[Wed Sep 30 01:03:04.949083 2026] [security2:error] [pid 212454:tid 212460] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0KLyZ9IcLq1oV6pfA-AAAWgU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=d5b672f1a7ce60da339aedd8b18beebe&start=75&t=21548
[Wed Sep 30 01:03:05.009414 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.009684 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.055800 2026] [security2:error] [pid 212454:tid 212708] [client 20.194.96.176:22087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/ff.update.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBAAAAAHw"]
[Wed Sep 30 01:03:05.061978 2026] [security2:error] [pid 212454:tid 212632] [client 20.214.109.68:61162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/8.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBAgAAADA"]
[Wed Sep 30 01:03:05.062026 2026] [security2:error] [pid 212454:tid 212457] [remote 207.46.13.130:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBAQAAQAI"]
[Wed Sep 30 01:03:05.089709 2026] [security2:error] [pid 212454:tid 212659] [client 4.240.25.22:33333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/cgi-bin/admin.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBBQAAAEs"]
[Wed Sep 30 01:03:05.099686 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.099984 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:25701] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.115174 2026] [security2:error] [pid 212454:tid 212671] [client 52.231.30.175:37999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBCwAAAFc"]
[Wed Sep 30 01:03:05.183979 2026] [security2:error] [pid 212454:tid 212667] [client 216.73.216.46:25701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KbyZ9IcLq1oV6pfBEgAAAFM"]
[Wed Sep 30 01:03:05.217442 2026] [security2:error] [pid 212454:tid 212616] [client 4.196.65.241:19459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/faze.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBEwAAACA"]
[Wed Sep 30 01:03:05.220584 2026] [security2:error] [pid 212454:tid 212600] [client 69.165.68.154:55328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.68.165.69.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.diazmedical.com"] [uri "/index.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBFAAAABA"], referer: https://mail.diazmedical.com
[Wed Sep 30 01:03:05.281867 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:12343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.282139 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:12343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.284891 2026] [security2:error] [pid 212454:tid 212709] [client 45.138.12.32:23468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bsj.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBFwAAAH0"]
[Wed Sep 30 01:03:05.354573 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:05.355030 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:05.399968 2026] [security2:error] [pid 212454:tid 212625] [client 52.231.30.175:37373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBHgAAACk"]
[Wed Sep 30 01:03:05.422714 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.423008 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.474164 2026] [security2:error] [pid 212454:tid 212654] [client 20.70.173.30:3251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBKQAAAEY"]
[Wed Sep 30 01:03:05.513525 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.513794 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.547728 2026] [security2:error] [pid 212454:tid 212703] [client 216.73.216.46:12343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KbyZ9IcLq1oV6pfBLAAAAHc"]
[Wed Sep 30 01:03:05.646103 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.646370 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.735586 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.735880 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.827126 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.827381 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.854755 2026] [security2:error] [pid 212454:tid 212474] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBQgAAXxM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148242&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:03:05.854780 2026] [security2:error] [pid 212454:tid 212474] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBQgAAXxM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=148242&sid=d19bcad4a5cd04778b8ad48417117599
[Wed Sep 30 01:03:05.922392 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:05.922862 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:59253] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:05.932918 2026] [security2:error] [pid 212454:tid 212597] [client 20.194.96.176:63743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/lzlhihzi.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBSQAAAA0"]
[Wed Sep 30 01:03:05.946182 2026] [security2:error] [pid 212454:tid 212618] [client 52.231.30.175:38005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/matcha.php"] [unique_id "ary0KbyZ9IcLq1oV6pfBSwAAACI"]
[Wed Sep 30 01:03:06.007962 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.008226 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.080275 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:06.080568 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:06.099651 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.099951 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.134776 2026] [security2:error] [pid 212454:tid 212649] [client 20.214.109.68:61144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws60.php"] [unique_id "ary0KryZ9IcLq1oV6pfBXAAAAEE"]
[Wed Sep 30 01:03:06.193678 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.193968 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.212608 2026] [security2:error] [pid 212454:tid 212644] [client 52.231.30.175:37969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/aboutt.php"] [unique_id "ary0KryZ9IcLq1oV6pfBYwAAADw"]
[Wed Sep 30 01:03:06.283056 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.283322 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:24209] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.339664 2026] [security2:error] [pid 212454:tid 212654] [client 216.73.216.46:59253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0KryZ9IcLq1oV6pfBbAAAAEY"], referer: http://www.homs.co.ke/?action=adminer&p=L2V0Yy9yYy5kL3JjMi5k
[Wed Sep 30 01:03:06.367438 2026] [security2:error] [pid 212454:tid 212688] [client 216.73.216.46:24209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KryZ9IcLq1oV6pfBbgAAAGg"]
[Wed Sep 30 01:03:06.384457 2026] [security2:error] [pid 212454:tid 212709] [client 182.69.182.151:22869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBbwAAAH0"]
[Wed Sep 30 01:03:06.384878 2026] [security2:error] [pid 212454:tid 212709] [client 182.69.182.151:22869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBbwAAAH0"]
[Wed Sep 30 01:03:06.473821 2026] [security2:error] [pid 212454:tid 212593] [client 52.231.30.175:37934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/opsh.php"] [unique_id "ary0KryZ9IcLq1oV6pfBdgAAAAk"]
[Wed Sep 30 01:03:06.515614 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:30941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.515898 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:30941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.523915 2026] [security2:error] [pid 212454:tid 212648] [client 20.219.2.60:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/first.php"] [unique_id "ary0KryZ9IcLq1oV6pfBeQAAAEA"]
[Wed Sep 30 01:03:06.563971 2026] [security2:error] [pid 212454:tid 212710] [client 20.194.96.176:63883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/bfdghfgv.php"] [unique_id "ary0KryZ9IcLq1oV6pfBfQAAAH4"]
[Wed Sep 30 01:03:06.600436 2026] [security2:error] [pid 212454:tid 212587] [client 216.73.216.46:60960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KryZ9IcLq1oV6pfBgQAAAAM"]
[Wed Sep 30 01:03:06.622059 2026] [security2:error] [pid 212454:tid 212602] [client 223.181.30.165:33210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBggAAABI"]
[Wed Sep 30 01:03:06.622159 2026] [security2:error] [pid 212454:tid 212602] [client 223.181.30.165:33210] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBggAAABI"]
[Wed Sep 30 01:03:06.685554 2026] [access_compat:error] [pid 212454:tid 212696] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:03:06.685828 2026] [access_compat:error] [pid 212454:tid 212696] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:03:06.691991 2026] [security2:error] [pid 212454:tid 212707] [client 216.73.216.46:52070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0KryZ9IcLq1oV6pfBiQAAAHs"]
[Wed Sep 30 01:03:06.740411 2026] [security2:error] [pid 212454:tid 212616] [client 52.231.30.175:37953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/photo.php"] [unique_id "ary0KryZ9IcLq1oV6pfBigAAACA"]
[Wed Sep 30 01:03:06.790662 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.791052 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.835354 2026] [security2:error] [pid 212454:tid 212622] [client 37.41.16.35:50162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBkQAAACY"]
[Wed Sep 30 01:03:06.835467 2026] [security2:error] [pid 212454:tid 212622] [client 37.41.16.35:50162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0KryZ9IcLq1oV6pfBkQAAACY"]
[Wed Sep 30 01:03:06.880165 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.880432 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.919255 2026] [security2:error] [pid 212454:tid 212596] [client 216.73.216.46:30941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0KryZ9IcLq1oV6pfBnAAAAAw"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvbW9kdWxlL2hpZC9wYXJhbWV0ZXJz
[Wed Sep 30 01:03:06.919486 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:06.919765 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:06.920801 2026] [security2:error] [pid 212454:tid 212704] [client 4.196.65.241:2070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cns.php"] [unique_id "ary0KryZ9IcLq1oV6pfBnQAAAHg"]
[Wed Sep 30 01:03:07.001366 2026] [security2:error] [pid 212454:tid 212675] [client 52.231.30.175:37340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-fxxxx.php"] [unique_id "ary0KryZ9IcLq1oV6pfBoQAAAFs"]
[Wed Sep 30 01:03:07.011940 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.012264 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.037268 2026] [security2:error] [pid 212454:tid 212614] [client 20.214.109.68:9408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/vanda.php"] [unique_id "ary0K7yZ9IcLq1oV6pfBpQAAAB4"]
[Wed Sep 30 01:03:07.102433 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.102717 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.194925 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.195198 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.198207 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:07.198477 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:07.266046 2026] [security2:error] [pid 212454:tid 212647] [client 52.231.30.175:37332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary0K7yZ9IcLq1oV6pfBswAAAD8"]
[Wed Sep 30 01:03:07.285091 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.285342 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.355216 2026] [security2:error] [pid 212454:tid 212636] [client 20.194.30.107:17369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/222.php"] [unique_id "ary0K7yZ9IcLq1oV6pfBvQAAADQ"]
[Wed Sep 30 01:03:07.378173 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.378594 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.466189 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.466442 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.529987 2026] [security2:error] [pid 212454:tid 212591] [client 52.231.30.175:37366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/ffl.php"] [unique_id "ary0K7yZ9IcLq1oV6pfBzgAAAAc"]
[Wed Sep 30 01:03:07.557156 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.557417 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.647379 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.647638 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.667998 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:07.668263 2026] [access_compat:error] [pid 212454:tid 212595] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:07.711221 2026] [security2:error] [pid 212454:tid 212641] [client 4.196.65.241:19174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/mar.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB4AAAADk"]
[Wed Sep 30 01:03:07.738447 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.738718 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.743483 2026] [security2:error] [pid 212454:tid 212602] [client 103.159.192.142:64190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB5QAAABI"]
[Wed Sep 30 01:03:07.743595 2026] [security2:error] [pid 212454:tid 212602] [client 103.159.192.142:64190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB5QAAABI"]
[Wed Sep 30 01:03:07.776240 2026] [security2:error] [pid 212454:tid 212609] [client 20.219.2.60:19455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/redixsx.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB6QAAABk"]
[Wed Sep 30 01:03:07.791038 2026] [security2:error] [pid 212454:tid 212594] [client 52.231.30.175:37292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/koiy.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB6gAAAAo"]
[Wed Sep 30 01:03:07.794158 2026] [security2:error] [pid 212454:tid 212631] [client 103.168.67.253:22116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB6wAAAC8"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:07.822017 2026] [security2:error] [pid 212454:tid 212559] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB7QAAd2g"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297920&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:07.822048 2026] [security2:error] [pid 212454:tid 212559] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB7QAAd2g"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297920&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:07.829829 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.830100 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:07.866631 2026] [security2:error] [pid 212454:tid 212683] [client 20.194.96.176:63727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/Dss.php"] [unique_id "ary0K7yZ9IcLq1oV6pfB8wAAAGM"]
[Wed Sep 30 01:03:07.926588 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:07.927042 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.013844 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.014151 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.075731 2026] [security2:error] [pid 212454:tid 212630] [client 52.231.30.175:37322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/bnmtp.php"] [unique_id "ary0LLyZ9IcLq1oV6pfB9wAAAC4"]
[Wed Sep 30 01:03:08.102641 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.102947 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.107185 2026] [security2:error] [pid 212454:tid 212643] [client 20.214.109.68:9430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/domains.php"] [unique_id "ary0LLyZ9IcLq1oV6pfB-gAAADs"]
[Wed Sep 30 01:03:08.157889 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:08.158163 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:08.187531 2026] [security2:error] [pid 212454:tid 212607] [client 4.240.25.22:8496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ms-edit.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCAgAAABc"]
[Wed Sep 30 01:03:08.193884 2026] [security2:error] [pid 212454:tid 212598] [client 103.241.204.139:51821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCBAAAAA4"]
[Wed Sep 30 01:03:08.194006 2026] [security2:error] [pid 212454:tid 212598] [client 103.241.204.139:51821] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCBAAAAA4"]
[Wed Sep 30 01:03:08.195540 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.195788 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:38685] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.288071 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.288499 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.300608 2026] [security2:error] [pid 212454:tid 212695] [client 85.25.46.192:36690] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "coimage.net"] [uri "/"] [unique_id "ary0LLyZ9IcLq1oV6pfCDwAAAG8"]
[Wed Sep 30 01:03:08.336270 2026] [security2:error] [pid 212454:tid 212591] [client 52.231.30.175:37995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/cwclass.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCFgAAAAc"]
[Wed Sep 30 01:03:08.370348 2026] [security2:error] [pid 212454:tid 212709] [client 216.73.216.46:19634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LLyZ9IcLq1oV6pfCHgAAAH0"]
[Wed Sep 30 01:03:08.385120 2026] [security2:error] [pid 212454:tid 212595] [client 4.240.25.22:18782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/pfm.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCHwAAAAs"]
[Wed Sep 30 01:03:08.387968 2026] [security2:error] [pid 212454:tid 212667] [client 74.7.242.1:42876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCIAAAAFM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:03:08.462003 2026] [security2:error] [pid 212454:tid 212703] [client 216.73.216.46:38685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LLyZ9IcLq1oV6pfCKQAAAHc"]
[Wed Sep 30 01:03:08.523865 2026] [security2:error] [pid 212454:tid 212666] [client 103.168.67.253:22124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCLwAAAFI"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:08.550920 2026] [security2:error] [pid 212454:tid 212693] [client 152.59.169.65:54340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCMAAAAG0"]
[Wed Sep 30 01:03:08.551101 2026] [security2:error] [pid 212454:tid 212693] [client 152.59.169.65:54340] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCMAAAAG0"]
[Wed Sep 30 01:03:08.597854 2026] [security2:error] [pid 212454:tid 212628] [client 52.231.30.175:37942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/123viva.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCMwAAACw"]
[Wed Sep 30 01:03:08.605451 2026] [security2:error] [pid 212454:tid 212597] [client 216.73.216.46:34396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LLyZ9IcLq1oV6pfCNAAAAA0"]
[Wed Sep 30 01:03:08.676183 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:08.676608 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:08.701785 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.702068 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.710211 2026] [security2:error] [pid 212454:tid 212691] [client 45.138.12.40:61416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.retalviewelsokhna.com"] [uri "/wp-links-opml.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCOwAAAGs"]
[Wed Sep 30 01:03:08.794107 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:60272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.794381 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:60272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.833879 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.834154 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.862611 2026] [security2:error] [pid 212454:tid 212589] [client 52.231.30.175:38008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/wso2024.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCRAAAAAU"]
[Wed Sep 30 01:03:08.927142 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:08.927406 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:08.956930 2026] [security2:error] [pid 212454:tid 212480] [remote 207.46.13.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0LLyZ9IcLq1oV6pfCUgAAchk"]
[Wed Sep 30 01:03:09.012549 2026] [security2:error] [pid 212454:tid 212473] [remote 207.46.13.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCYAAAGBI"]
[Wed Sep 30 01:03:09.016085 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:60272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.016463 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:60272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.017412 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.109.68:9431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/144.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCYQAAABE"]
[Wed Sep 30 01:03:09.055954 2026] [security2:error] [pid 212454:tid 212623] [client 139.159.215.28:42018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCZgAAACc"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:03:09.080345 2026] [security2:error] [pid 212454:tid 212665] [client 31.189.214.146:55130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCaAAAAFE"]
[Wed Sep 30 01:03:09.080501 2026] [security2:error] [pid 212454:tid 212665] [client 31.189.214.146:55130] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCaAAAAFE"]
[Wed Sep 30 01:03:09.109135 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.109567 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.128510 2026] [security2:error] [pid 212454:tid 212654] [client 52.231.30.175:37282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/scora.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCcAAAAEY"]
[Wed Sep 30 01:03:09.182165 2026] [security2:error] [pid 212454:tid 212689] [client 45.138.12.32:36904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bng.hyx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCcgAAAGk"]
[Wed Sep 30 01:03:09.189511 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:09.189766 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:09.252432 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.252686 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.254668 2026] [security2:error] [pid 212454:tid 212616] [client 122.173.27.10:30795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCfQAAACA"]
[Wed Sep 30 01:03:09.255448 2026] [security2:error] [pid 212454:tid 212616] [client 122.173.27.10:30795] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCfQAAACA"]
[Wed Sep 30 01:03:09.286684 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.287107 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.342161 2026] [security2:error] [pid 212454:tid 212610] [client 104.208.65.139:34321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0LbyZ9IcLq1oV6pfChQAAABo"]
[Wed Sep 30 01:03:09.353197 2026] [security2:error] [pid 212454:tid 212620] [client 57.141.6.22:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary0LbyZ9IcLq1oV6pfChgAAACQ"]
[Wed Sep 30 01:03:09.379888 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.380186 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:6354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.395927 2026] [security2:error] [pid 212454:tid 212666] [client 52.231.30.175:37323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kbm-realty.com"] [uri "/404.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCiQAAAFI"]
[Wed Sep 30 01:03:09.409020 2026] [security2:error] [pid 212454:tid 212589] [client 85.25.46.192:36700] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "coimage.net"] [uri "/"] [unique_id "ary0LbyZ9IcLq1oV6pfCigAAAAU"]
[Wed Sep 30 01:03:09.420231 2026] [security2:error] [pid 212454:tid 212614] [client 216.73.216.46:60272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCiwAAAB4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvZmluZHV0aWxz
[Wed Sep 30 01:03:09.463358 2026] [security2:error] [pid 212454:tid 212656] [client 216.73.216.46:6354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LbyZ9IcLq1oV6pfCjgAAAEg"]
[Wed Sep 30 01:03:09.565772 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.566240 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.652956 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.653282 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.716358 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:09.716616 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:09.794445 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:45171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.794702 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:45171] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.835241 2026] [security2:error] [pid 212454:tid 212705] [client 103.168.67.253:22132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCqwAAAHk"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:09.885278 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.885530 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:09.925930 2026] [security2:error] [pid 212454:tid 212588] [client 20.194.96.176:22109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/uploaxa1.php"] [unique_id "ary0LbyZ9IcLq1oV6pfCrgAAAAQ"]
[Wed Sep 30 01:03:09.978590 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:44341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:09.978884 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:44341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.016789 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.017079 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.031151 2026] [security2:error] [pid 212454:tid 212639] [client 95.108.213.251:33056] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.an-ime.com"] [uri "/robots.txt"] [unique_id "ary0LryZ9IcLq1oV6pfCtQAAADc"]
[Wed Sep 30 01:03:10.046772 2026] [security2:error] [pid 212454:tid 212604] [client 4.240.25.22:33343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/mac.php"] [unique_id "ary0LryZ9IcLq1oV6pfCtgAAABQ"]
[Wed Sep 30 01:03:10.116560 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.116883 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.154998 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0LryZ9IcLq1oV6pfCuAAAL2E"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=b2726bc6a91f1e3582eb99222bfd64dd
[Wed Sep 30 01:03:10.155027 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0LryZ9IcLq1oV6pfCuAAAL2E"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=b2726bc6a91f1e3582eb99222bfd64dd
[Wed Sep 30 01:03:10.209586 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.210080 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.217535 2026] [security2:error] [pid 212454:tid 212652] [client 216.73.216.46:45171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0LryZ9IcLq1oV6pfCvgAAAEQ"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWIvcHl0aG9uMy45L3NpdGUtcGFja2FnZXMvb2NpL29jZS9fX3B5Y2FjaGVfXw%3D%3D
[Wed Sep 30 01:03:10.221395 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:10.221658 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:10.226322 2026] [security2:error] [pid 212454:tid 212671] [client 103.172.210.103:53177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfCwgAAAFc"]
[Wed Sep 30 01:03:10.226466 2026] [security2:error] [pid 212454:tid 212671] [client 103.172.210.103:53177] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfCwgAAAFc"]
[Wed Sep 30 01:03:10.227013 2026] [core:error] [pid 212454:tid 212645] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:10.227026 2026] [core:error] [pid 212454:tid 212645] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:10.233262 2026] [security2:error] [pid 212454:tid 212669] [client 155.190.6.18:37302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfCwwAAAFU"]
[Wed Sep 30 01:03:10.290633 2026] [security2:error] [pid 212454:tid 212704] [client 216.73.216.46:61076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LryZ9IcLq1oV6pfCyQAAAHg"]
[Wed Sep 30 01:03:10.298220 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.109.68:9438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/asd.php"] [unique_id "ary0LryZ9IcLq1oV6pfCygAAAAg"]
[Wed Sep 30 01:03:10.389095 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:44341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.389359 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:44341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.412874 2026] [security2:error] [pid 212454:tid 212642] [client 4.240.25.22:8460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/media.php"] [unique_id "ary0LryZ9IcLq1oV6pfC1gAAADo"]
[Wed Sep 30 01:03:10.425196 2026] [security2:error] [pid 212454:tid 212455] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0LryZ9IcLq1oV6pfC1wAAKQA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D86482
[Wed Sep 30 01:03:10.473306 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:44341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0LryZ9IcLq1oV6pfC2AAAADQ"]
[Wed Sep 30 01:03:10.496583 2026] [security2:error] [pid 212454:tid 212691] [client 139.159.215.28:25896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary0LryZ9IcLq1oV6pfC3AAAAGs"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:03:10.509133 2026] [security2:error] [pid 212454:tid 212669] [client 155.190.6.18:37302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfCwwAAAFU"]
[Wed Sep 30 01:03:10.554147 2026] [security2:error] [pid 212454:tid 212678] [client 45.138.12.32:36952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bri.ujo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0LryZ9IcLq1oV6pfC4AAAAF4"]
[Wed Sep 30 01:03:10.571397 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.571733 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.661213 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.661479 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.662957 2026] [security2:error] [pid 212454:tid 212689] [client 193.250.245.239:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television"] [unique_id "ary0LryZ9IcLq1oV6pfC6gAAAGk"]
[Wed Sep 30 01:03:10.699245 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:10.699585 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:10.702710 2026] [security2:error] [pid 212454:tid 212653] [client 4.196.65.241:64136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/abde5e1996index.php"] [unique_id "ary0LryZ9IcLq1oV6pfC8AAAAEU"]
[Wed Sep 30 01:03:10.751957 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.752224 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.866714 2026] [security2:error] [pid 212454:tid 212654] [client 223.181.60.167:17772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfC_wAAAEY"]
[Wed Sep 30 01:03:10.866881 2026] [security2:error] [pid 212454:tid 212654] [client 223.181.60.167:17772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0LryZ9IcLq1oV6pfC_wAAAEY"]
[Wed Sep 30 01:03:10.898083 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.898341 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:10.939694 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:10.939963 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.029852 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.030129 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.074196 2026] [security2:error] [pid 212454:tid 212651] [client 4.240.25.22:43781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/new.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDCgAAAEM"]
[Wed Sep 30 01:03:11.121213 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.121467 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.186271 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:11.186540 2026] [access_compat:error] [pid 212454:tid 212594] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:11.212023 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.212288 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.274327 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2Mvc2VsZi9yb290L2hvbWUx
[Wed Sep 30 01:03:11.274655 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2Mvc2VsZi9yb290L2hvbWUx
[Wed Sep 30 01:03:11.303057 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.303329 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.397496 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.397758 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.408433 2026] [security2:error] [pid 212454:tid 212677] [client 20.194.96.176:1322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/uploartg.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDHgAAAF0"]
[Wed Sep 30 01:03:11.427293 2026] [access_compat:error] [pid 212454:tid 212600] [client 47.79.200.114:16108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:03:11.427579 2026] [access_compat:error] [pid 212454:tid 212600] [client 47.79.200.114:16108] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:03:11.487928 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.488202 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.578593 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.578876 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.644759 2026] [security2:error] [pid 212454:tid 212611] [client 20.194.30.107:17510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/media.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDPwAAABs"]
[Wed Sep 30 01:03:11.672462 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.672727 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.683606 2026] [security2:error] [pid 212454:tid 212587] [client 152.59.165.7:52795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDRwAAAAM"]
[Wed Sep 30 01:03:11.683736 2026] [security2:error] [pid 212454:tid 212587] [client 152.59.165.7:52795] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDRwAAAAM"]
[Wed Sep 30 01:03:11.712702 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:11.713182 2026] [access_compat:error] [pid 212454:tid 212633] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:11.763058 2026] [security2:error] [pid 212454:tid 212458] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDTgAAfwM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301671&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:03:11.763085 2026] [security2:error] [pid 212454:tid 212458] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDTgAAfwM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301671&sid=0a7056aa64681508e681146d7edb7edc
[Wed Sep 30 01:03:11.764670 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.764982 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.817008 2026] [security2:error] [pid 212454:tid 212642] [client 202.179.95.79:52705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDVAAAADo"]
[Wed Sep 30 01:03:11.817125 2026] [security2:error] [pid 212454:tid 212642] [client 202.179.95.79:52705] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDVAAAADo"]
[Wed Sep 30 01:03:11.855476 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.855762 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.946179 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:11.946442 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:11.972542 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.109.68:62436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/zc-104.php"] [unique_id "ary0L7yZ9IcLq1oV6pfDYAAAAHg"]
[Wed Sep 30 01:03:12.018260 2026] [security2:error] [pid 212454:tid 212494] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDYQAAMic"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297928&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:12.018289 2026] [security2:error] [pid 212454:tid 212494] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDYQAAMic"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297928&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:12.036577 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.036860 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.040237 2026] [security2:error] [pid 212454:tid 212591] [client 4.240.25.22:18708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/well.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDZQAAAAc"]
[Wed Sep 30 01:03:12.047163 2026] [security2:error] [pid 212454:tid 212620] [client 105.112.178.79:54447] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tmx.wef.mybluehost.me"] [uri "/.env"] [unique_id "ary0MLyZ9IcLq1oV6pfDZgAAACQ"]
[Wed Sep 30 01:03:12.071755 2026] [security2:error] [pid 212454:tid 212693] [client 104.208.65.139:50742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDZwAAAG0"]
[Wed Sep 30 01:03:12.094434 2026] [security2:error] [pid 212454:tid 212638] [client 20.219.2.60:18869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/cpp2.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDaAAAADY"]
[Wed Sep 30 01:03:12.126126 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.126387 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.133029 2026] [security2:error] [pid 212454:tid 212709] [client 20.194.30.107:25866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/js.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDawAAAH0"]
[Wed Sep 30 01:03:12.149315 2026] [security2:error] [pid 212454:tid 212702] [client 203.122.45.246:62669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDbAAAAHY"]
[Wed Sep 30 01:03:12.149502 2026] [security2:error] [pid 212454:tid 212702] [client 203.122.45.246:62669] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDbAAAAHY"]
[Wed Sep 30 01:03:12.189400 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:12.189796 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:12.215000 2026] [security2:error] [pid 212454:tid 212631] [client 103.159.192.142:64661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDcAAAAC8"]
[Wed Sep 30 01:03:12.215119 2026] [security2:error] [pid 212454:tid 212631] [client 103.159.192.142:64661] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDcAAAAC8"]
[Wed Sep 30 01:03:12.272910 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.273883 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.275068 2026] [security2:error] [pid 212454:tid 212586] [client 116.197.133.25:62915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDcwAAAAI"]
[Wed Sep 30 01:03:12.275196 2026] [security2:error] [pid 212454:tid 212586] [client 116.197.133.25:62915] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDcwAAAAI"]
[Wed Sep 30 01:03:12.324281 2026] [security2:error] [pid 212454:tid 212683] [client 4.196.65.241:19780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/000.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDdQAAAGM"]
[Wed Sep 30 01:03:12.360864 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.361131 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.397867 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.398141 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:1921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.483261 2026] [security2:error] [pid 212454:tid 212628] [client 216.73.216.46:1921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MLyZ9IcLq1oV6pfDgQAAACw"]
[Wed Sep 30 01:03:12.551497 2026] [security2:error] [pid 212454:tid 212587] [client 4.240.25.22:33336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/abcd.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDhgAAAAM"]
[Wed Sep 30 01:03:12.580666 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.580946 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.619623 2026] [security2:error] [pid 212454:tid 212622] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0MLyZ9IcLq1oV6pfDjAAAACY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:12.622547 2026] [security2:error] [pid 212454:tid 212632] [client 201.32.215.149:8673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDiAAAADA"]
[Wed Sep 30 01:03:12.622681 2026] [security2:error] [pid 212454:tid 212632] [client 201.32.215.149:8673] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDiAAAADA"]
[Wed Sep 30 01:03:12.646749 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:12.647026 2026] [access_compat:error] [pid 212454:tid 212674] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:12.672761 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.673058 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.762757 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.763036 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.802538 2026] [security2:error] [pid 212454:tid 212639] [client 20.194.96.176:5909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/bgbagbcw.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDlgAAADc"]
[Wed Sep 30 01:03:12.858195 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.858443 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.866016 2026] [security2:error] [pid 212454:tid 212501] [remote 74.7.227.56:49808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDnAAAJy4"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:03:12.921462 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9wcm9jL3NlbGYvbWFwX2ZpbGVz
[Wed Sep 30 01:03:12.921741 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:63100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9wcm9jL3NlbGYvbWFwX2ZpbGVz
[Wed Sep 30 01:03:12.944927 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:12.945197 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:12.946332 2026] [security2:error] [pid 212454:tid 212621] [client 14.1.65.240:64478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.65.1.14.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "costechacademy.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDnQAAACU"]
[Wed Sep 30 01:03:12.946449 2026] [security2:error] [pid 212454:tid 212621] [client 14.1.65.240:64478] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "costechacademy.com"] [uri "/xmlrpc.php"] [unique_id "ary0MLyZ9IcLq1oV6pfDnQAAACU"]
[Wed Sep 30 01:03:13.007146 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDExL2RldmljZQ%3D%3D
[Wed Sep 30 01:03:13.007430 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDExL2RldmljZQ%3D%3D
[Wed Sep 30 01:03:13.088242 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:12893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.088604 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:12893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.127310 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.127578 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.167477 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:13.167757 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:13.217943 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.218224 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:7089] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.243452 2026] [security2:error] [pid 212454:tid 212640] [client 223.235.102.107:23327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0MbyZ9IcLq1oV6pfDuwAAADg"]
[Wed Sep 30 01:03:13.244053 2026] [security2:error] [pid 212454:tid 212640] [client 223.235.102.107:23327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0MbyZ9IcLq1oV6pfDuwAAADg"]
[Wed Sep 30 01:03:13.281898 2026] [security2:error] [pid 212454:tid 212657] [client 20.194.30.107:17287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0MbyZ9IcLq1oV6pfDwQAAAEk"]
[Wed Sep 30 01:03:13.302511 2026] [security2:error] [pid 212454:tid 212633] [client 216.73.216.46:7089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MbyZ9IcLq1oV6pfDxAAAADE"]
[Wed Sep 30 01:03:13.359313 2026] [security2:error] [pid 212454:tid 212604] [client 20.214.151.17:9781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0MbyZ9IcLq1oV6pfDygAAABQ"]
[Wed Sep 30 01:03:13.393365 2026] [security2:error] [pid 212454:tid 212629] [client 216.73.216.46:12893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MbyZ9IcLq1oV6pfDzAAAAC0"]
[Wed Sep 30 01:03:13.483895 2026] [security2:error] [pid 212454:tid 212679] [client 216.73.216.46:63100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MbyZ9IcLq1oV6pfDzQAAAF8"]
[Wed Sep 30 01:03:13.564317 2026] [security2:error] [pid 212454:tid 212522] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD0AAAdEM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293244&sid=4cf43c35f335f70b44134817d1f1ae44
[Wed Sep 30 01:03:13.564349 2026] [security2:error] [pid 212454:tid 212522] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD0AAAdEM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293244&sid=4cf43c35f335f70b44134817d1f1ae44
[Wed Sep 30 01:03:13.582847 2026] [security2:error] [pid 212454:tid 212670] [client 20.194.96.176:63887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/tegubsiu.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD0QAAAFY"]
[Wed Sep 30 01:03:13.633919 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.634187 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.663716 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:13.664061 2026] [access_compat:error] [pid 212454:tid 212623] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:13.665474 2026] [security2:error] [pid 212454:tid 212703] [client 43.227.131.37:1353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD1AAAAHc"]
[Wed Sep 30 01:03:13.665655 2026] [security2:error] [pid 212454:tid 212703] [client 43.227.131.37:1353] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD1AAAAHc"]
[Wed Sep 30 01:03:13.717470 2026] [security2:error] [pid 212454:tid 212645] [client 216.73.216.46:30113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MbyZ9IcLq1oV6pfD1wAAAD0"]
[Wed Sep 30 01:03:13.756047 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.109.68:61177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/rzki.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD2QAAAHg"]
[Wed Sep 30 01:03:13.763829 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.764114 2026] [access_compat:error] [pid 212454:tid 212655] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.789603 2026] [security2:error] [pid 212454:tid 212618] [client 4.196.65.241:19072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wp5.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD3QAAACI"]
[Wed Sep 30 01:03:13.854387 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.854643 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:13.924249 2026] [security2:error] [pid 212454:tid 212661] [client 20.214.151.17:14488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0MbyZ9IcLq1oV6pfD6QAAAE0"]
[Wed Sep 30 01:03:13.944927 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:13.945196 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.031173 2026] [security2:error] [pid 212454:tid 212708] [client 49.205.105.16:14178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0MryZ9IcLq1oV6pfD7wAAAHw"]
[Wed Sep 30 01:03:14.031343 2026] [security2:error] [pid 212454:tid 212708] [client 49.205.105.16:14178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0MryZ9IcLq1oV6pfD7wAAAHw"]
[Wed Sep 30 01:03:14.036971 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.037252 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.121694 2026] [security2:error] [pid 212454:tid 212585] [client 106.214.2.47:23480] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0MryZ9IcLq1oV6pfD8AAAAAE"]
[Wed Sep 30 01:03:14.121842 2026] [security2:error] [pid 212454:tid 212585] [client 106.214.2.47:23480] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0MryZ9IcLq1oV6pfD8AAAAAE"]
[Wed Sep 30 01:03:14.127591 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.127862 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.164400 2026] [security2:error] [pid 212454:tid 212635] [client 173.254.29.157:12416] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0MryZ9IcLq1oV6pfD-wAAADM"]
[Wed Sep 30 01:03:14.183545 2026] [security2:error] [pid 212454:tid 212657] [client 173.254.29.157:12422] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0MryZ9IcLq1oV6pfD_AAAAEk"]
[Wed Sep 30 01:03:14.199584 2026] [security2:error] [pid 212454:tid 212653] [client 173.254.29.157:12432] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0MryZ9IcLq1oV6pfD_gAAAEU"]
[Wed Sep 30 01:03:14.199847 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:14.200111 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:14.216578 2026] [security2:error] [pid 212454:tid 212684] [client 173.254.29.157:12438] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0MryZ9IcLq1oV6pfEAAAAAGQ"]
[Wed Sep 30 01:03:14.219064 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.219324 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.312223 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.312577 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:29218] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.324480 2026] [security2:error] [pid 212454:tid 212603] [client 104.208.65.139:41001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/f35.update.php"] [unique_id "ary0MryZ9IcLq1oV6pfEBgAAABM"]
[Wed Sep 30 01:03:14.382506 2026] [security2:error] [pid 212454:tid 212642] [client 20.214.151.17:9768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/b.php"] [unique_id "ary0MryZ9IcLq1oV6pfEBwAAADo"]
[Wed Sep 30 01:03:14.398627 2026] [security2:error] [pid 212454:tid 212644] [client 20.219.2.60:18871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/admlo.php"] [unique_id "ary0MryZ9IcLq1oV6pfECQAAADw"]
[Wed Sep 30 01:03:14.453224 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.453497 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.487057 2026] [security2:error] [pid 212454:tid 212709] [client 216.73.216.46:29218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MryZ9IcLq1oV6pfEEgAAAH0"]
[Wed Sep 30 01:03:14.540543 2026] [security2:error] [pid 212454:tid 212670] [client 4.240.25.22:18787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0MryZ9IcLq1oV6pfEGAAAAFY"]
[Wed Sep 30 01:03:14.585184 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.585459 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.674569 2026] [access_compat:error] [pid 212454:tid 212702] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:14.674872 2026] [access_compat:error] [pid 212454:tid 212702] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:14.694239 2026] [security2:error] [pid 212454:tid 212662] [client 20.214.109.68:62441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/xsas.php"] [unique_id "ary0MryZ9IcLq1oV6pfEKQAAAE4"]
[Wed Sep 30 01:03:14.703339 2026] [security2:error] [pid 212454:tid 212627] [client 20.214.151.17:9741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/admin.php"] [unique_id "ary0MryZ9IcLq1oV6pfELQAAACs"]
[Wed Sep 30 01:03:14.722051 2026] [security2:error] [pid 212454:tid 212617] [client 216.73.216.46:23294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0MryZ9IcLq1oV6pfELwAAACE"]
[Wed Sep 30 01:03:14.770517 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.770966 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.858801 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.859096 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.949560 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:14.949838 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:1627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:14.974884 2026] [security2:error] [pid 212454:tid 212690] [client 20.194.96.176:22088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/xxw.php"] [unique_id "ary0MryZ9IcLq1oV6pfERgAAAGo"]
[Wed Sep 30 01:03:15.011456 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.151.17:9732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/fling.php"] [unique_id "ary0M7yZ9IcLq1oV6pfESQAAABU"]
[Wed Sep 30 01:03:15.011602 2026] [core:error] [pid 212454:tid 212611] [client 45.138.12.41:62962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:15.011613 2026] [core:error] [pid 212454:tid 212611] [client 45.138.12.41:62962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:15.091164 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:8614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.091435 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:8614] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.183676 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:60868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.183967 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:60868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.186537 2026] [security2:error] [pid 212454:tid 212639] [client 213.136.69.135:61995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/fonts.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEYwAAADc"], referer: binance.com
[Wed Sep 30 01:03:15.192731 2026] [lsapi:warn] [pid 212454:tid 212624] [client 43.162.114.69:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n
[Wed Sep 30 01:03:15.192753 2026] [lsapi:warn] [pid 212454:tid 212624] [client 43.162.114.69:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n
[Wed Sep 30 01:03:15.204182 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:15.204446 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:15.258381 2026] [security2:error] [pid 212454:tid 212616] [client 45.138.12.40:3498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.retalviewelsokhna.com"] [uri "/wp-links-opml.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEZwAAACA"]
[Wed Sep 30 01:03:15.267541 2026] [security2:error] [pid 212454:tid 212604] [client 74.7.175.186:57614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mirandacustomsbrokerage.com"] [uri "/robots.txt"] [unique_id "ary0M7yZ9IcLq1oV6pfEUQAAFBU"]
[Wed Sep 30 01:03:15.275661 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.275974 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.306683 2026] [security2:error] [pid 212454:tid 212606] [client 216.73.216.46:60868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0M7yZ9IcLq1oV6pfEbQAAABY"]
[Wed Sep 30 01:03:15.361558 2026] [security2:error] [pid 212454:tid 212661] [client 216.73.216.46:1627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEdQAAAE0"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3IvbGliL2tiZC9rZXltYXBzL2xlZ2FjeQ%3D%3D
[Wed Sep 30 01:03:15.368921 2026] [security2:error] [pid 212454:tid 212612] [client 20.194.30.107:17519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/bthil.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEdwAAABw"]
[Wed Sep 30 01:03:15.368926 2026] [security2:error] [pid 212454:tid 212598] [client 49.36.41.37:50948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEeAAAAA4"]
[Wed Sep 30 01:03:15.369017 2026] [security2:error] [pid 212454:tid 212598] [client 49.36.41.37:50948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEeAAAAA4"]
[Wed Sep 30 01:03:15.376419 2026] [security2:error] [pid 212454:tid 212688] [client 103.168.67.253:22140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEeQAAAGg"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:15.408920 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.409348 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.483552 2026] [security2:error] [pid 212454:tid 212667] [client 216.73.216.46:8614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEgQAAAFM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvYnVzL3VzYi9kcml2ZXJz
[Wed Sep 30 01:03:15.541101 2026] [security2:error] [pid 212454:tid 212663] [client 216.73.216.46:31252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0M7yZ9IcLq1oV6pfEgwAAAE8"]
[Wed Sep 30 01:03:15.638407 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:36087] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.638849 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:36087] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.667237 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:15.667505 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:15.730597 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.730868 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.768865 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.769137 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:38789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.810320 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:9770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEmQAAADw"]
[Wed Sep 30 01:03:15.860326 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.860590 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:15.894407 2026] [security2:error] [pid 212454:tid 212606] [client 20.214.109.68:62410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/d12.php"] [unique_id "ary0M7yZ9IcLq1oV6pfEnQAAABY"]
[Wed Sep 30 01:03:15.951382 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:15.951676 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.046391 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.046654 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.133184 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.133443 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.164232 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:16.164683 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:16.167359 2026] [security2:error] [pid 212454:tid 212640] [client 216.73.216.46:38789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0NLyZ9IcLq1oV6pfEswAAADg"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvemxpYg%3D%3D
[Wed Sep 30 01:03:16.196896 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3Blcmw1L2F1dG8vUGVybElP
[Wed Sep 30 01:03:16.197138 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYjY0L3Blcmw1L2F1dG8vUGVybElP
[Wed Sep 30 01:03:16.208147 2026] [security2:error] [pid 212454:tid 212638] [client 4.196.65.241:19486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/new.php"] [unique_id "ary0NLyZ9IcLq1oV6pfEtwAAADY"]
[Wed Sep 30 01:03:16.217075 2026] [security2:error] [pid 212454:tid 212636] [client 216.73.216.46:36087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0NLyZ9IcLq1oV6pfEuAAAADQ"]
[Wed Sep 30 01:03:16.320273 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.320681 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:24445] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.373114 2026] [security2:error] [pid 212454:tid 212605] [client 20.194.96.176:1280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/router.php"] [unique_id "ary0NLyZ9IcLq1oV6pfEzgAAABU"]
[Wed Sep 30 01:03:16.399745 2026] [security2:error] [pid 212454:tid 212648] [client 216.73.216.46:24445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0NLyZ9IcLq1oV6pfE0QAAAEA"]
[Wed Sep 30 01:03:16.528971 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.151.17:14495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/adminfuns.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE2AAAAHE"]
[Wed Sep 30 01:03:16.549460 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.549721 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.590720 2026] [security2:error] [pid 212454:tid 212617] [client 20.219.2.60:18835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/admin-ajax.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE2gAAACE"]
[Wed Sep 30 01:03:16.641246 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.641503 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.641795 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:16.642098 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:16.681381 2026] [security2:error] [pid 212454:tid 212634] [client 49.43.163.212:59911] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE2wAAADI"]
[Wed Sep 30 01:03:16.681579 2026] [security2:error] [pid 212454:tid 212634] [client 49.43.163.212:59911] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE2wAAADI"]
[Wed Sep 30 01:03:16.684769 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.685198 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.771051 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.771314 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.829237 2026] [security2:error] [pid 212454:tid 212455] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE5QAANQA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297920&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:16.829268 2026] [security2:error] [pid 212454:tid 212455] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE5QAANQA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297920&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:16.861975 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.862230 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.888536 2026] [security2:error] [pid 212454:tid 212664] [client 182.69.182.151:19549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE6wAAAFA"]
[Wed Sep 30 01:03:16.888661 2026] [security2:error] [pid 212454:tid 212664] [client 182.69.182.151:19549] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE6wAAAFA"]
[Wed Sep 30 01:03:16.952359 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:16.952843 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:16.974343 2026] [security2:error] [pid 212454:tid 212604] [client 172.232.97.149:65039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-plain.php"] [unique_id "ary0NLyZ9IcLq1oV6pfE9gAAABQ"], referer: www.google.com
[Wed Sep 30 01:03:16.990797 2026] [access_compat:error] [pid 212454:tid 212695] [client 47.79.13.234:39750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:16.991255 2026] [access_compat:error] [pid 212454:tid 212695] [client 47.79.13.234:39750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:17.003607 2026] [security2:error] [pid 212454:tid 212665] [client 172.232.97.149:65106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFDwAAAFE"], referer: www.google.com
[Wed Sep 30 01:03:17.044432 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.044693 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.135021 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.135289 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:48226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.173121 2026] [security2:error] [pid 212454:tid 212632] [client 20.194.96.176:22113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/cibrkysaeng.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFIAAAADA"]
[Wed Sep 30 01:03:17.182559 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:17.182834 2026] [access_compat:error] [pid 212454:tid 212605] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:17.227727 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.228151 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.316940 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.317211 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.325169 2026] [security2:error] [pid 212454:tid 212674] [client 93.152.52.170:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/mercury/"] [unique_id "ary0NbyZ9IcLq1oV6pfFLwAAAFo"]
[Wed Sep 30 01:03:17.350256 2026] [security2:error] [pid 212454:tid 212594] [client 37.41.16.35:50772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFMQAAAAo"]
[Wed Sep 30 01:03:17.350376 2026] [security2:error] [pid 212454:tid 212594] [client 37.41.16.35:50772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFMQAAAAo"]
[Wed Sep 30 01:03:17.366613 2026] [access_compat:error] [pid 212454:tid 212622] [client 47.79.13.213:40406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:17.366912 2026] [access_compat:error] [pid 212454:tid 212622] [client 47.79.13.213:40406] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:17.392937 2026] [security2:error] [pid 212454:tid 212661] [client 223.181.30.165:29982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFOQAAAE0"]
[Wed Sep 30 01:03:17.393038 2026] [security2:error] [pid 212454:tid 212661] [client 223.181.30.165:29982] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFOQAAAE0"]
[Wed Sep 30 01:03:17.402088 2026] [security2:error] [pid 212454:tid 212654] [client 4.240.25.22:38914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/images.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFPAAAAEY"]
[Wed Sep 30 01:03:17.407225 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.407477 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.487427 2026] [security2:error] [pid 212454:tid 212647] [client 4.240.25.22:41700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/ops.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFQgAAAD8"]
[Wed Sep 30 01:03:17.499112 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.499365 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.501281 2026] [security2:error] [pid 212454:tid 212609] [client 20.194.96.176:1324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eccl.co.uk"] [uri "/wp-wpbak.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFRgAAABk"]
[Wed Sep 30 01:03:17.590138 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.590395 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.640509 2026] [security2:error] [pid 212454:tid 212465] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFVAAADgo"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D99294
[Wed Sep 30 01:03:17.681210 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.681470 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.723257 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:17.723517 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:17.765905 2026] [security2:error] [pid 212454:tid 212689] [client 216.73.216.46:48226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0NbyZ9IcLq1oV6pfFYwAAAGk"]
[Wed Sep 30 01:03:17.822901 2026] [security2:error] [pid 212454:tid 212653] [client 198.64.231.251:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/mercury/"] [unique_id "ary0NbyZ9IcLq1oV6pfFaQAAAEU"]
[Wed Sep 30 01:03:17.921094 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:62398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.921513 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:62398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:17.946589 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.151.17:9763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/alfa.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFdgAAAHw"]
[Wed Sep 30 01:03:17.955861 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:17.956251 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.047063 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.047362 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.139666 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.140096 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.145952 2026] [security2:error] [pid 212454:tid 212608] [client 104.208.65.139:18892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/adminfuns.php"] [unique_id "ary0NryZ9IcLq1oV6pfFjQAAABg"]
[Wed Sep 30 01:03:18.187021 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:18.187300 2026] [access_compat:error] [pid 212454:tid 212689] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:18.228479 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.228940 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:41965] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.308968 2026] [security2:error] [pid 212454:tid 212592] [client 20.219.2.60:18825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/amthd.php"] [unique_id "ary0NryZ9IcLq1oV6pfFmQAAAAg"]
[Wed Sep 30 01:03:18.311553 2026] [security2:error] [pid 212454:tid 212602] [client 216.73.216.46:41965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0NryZ9IcLq1oV6pfFmgAAABI"]
[Wed Sep 30 01:03:18.325053 2026] [security2:error] [pid 212454:tid 212709] [client 45.138.12.41:53800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nso.mim.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0NryZ9IcLq1oV6pfFmwAAAH0"]
[Wed Sep 30 01:03:18.351702 2026] [security2:error] [pid 212454:tid 212644] [client 103.159.192.142:64803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0NryZ9IcLq1oV6pfFngAAADw"]
[Wed Sep 30 01:03:18.351884 2026] [security2:error] [pid 212454:tid 212644] [client 103.159.192.142:64803] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0NryZ9IcLq1oV6pfFngAAADw"]
[Wed Sep 30 01:03:18.372881 2026] [security2:error] [pid 212454:tid 212646] [client 20.214.109.68:61127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/okxh.php"] [unique_id "ary0NryZ9IcLq1oV6pfFnwAAAD4"]
[Wed Sep 30 01:03:18.410980 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.411250 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:62398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.442096 2026] [security2:error] [pid 212454:tid 212565] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NryZ9IcLq1oV6pfFogAAVW4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10184&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:18.442124 2026] [security2:error] [pid 212454:tid 212565] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NryZ9IcLq1oV6pfFogAAVW4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10184&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:18.506769 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.151.17:9749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/222.php"] [unique_id "ary0NryZ9IcLq1oV6pfFpQAAADI"]
[Wed Sep 30 01:03:18.553223 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:16041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.553486 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:16041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.645169 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.645425 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.657342 2026] [security2:error] [pid 212454:tid 212589] [client 4.240.25.22:33218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/w.php"] [unique_id "ary0NryZ9IcLq1oV6pfFsgAAAAU"]
[Wed Sep 30 01:03:18.663301 2026] [security2:error] [pid 212454:tid 212606] [client 4.240.25.22:18795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ccc.php"] [unique_id "ary0NryZ9IcLq1oV6pfFswAAABY"]
[Wed Sep 30 01:03:18.677887 2026] [security2:error] [pid 212454:tid 212619] [client 216.73.216.46:16041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0NryZ9IcLq1oV6pfFtAAAACM"]
[Wed Sep 30 01:03:18.690931 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:18.691396 2026] [access_compat:error] [pid 212454:tid 212588] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:18.778435 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.778687 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.830050 2026] [security2:error] [pid 212454:tid 212683] [client 216.73.216.46:62398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0NryZ9IcLq1oV6pfFwwAAAGM"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9ydW4vcmVzdGFydHNydg%3D%3D
[Wed Sep 30 01:03:18.869540 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:18.869829 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:18.887597 2026] [security2:error] [pid 212454:tid 212626] [client 20.214.151.17:9752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0NryZ9IcLq1oV6pfFygAAACo"]
[Wed Sep 30 01:03:18.891471 2026] [security2:error] [pid 212454:tid 212656] [client 103.241.204.139:52494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0NryZ9IcLq1oV6pfFywAAAEg"]
[Wed Sep 30 01:03:18.891594 2026] [security2:error] [pid 212454:tid 212656] [client 103.241.204.139:52494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0NryZ9IcLq1oV6pfFywAAAEg"]
[Wed Sep 30 01:03:18.930569 2026] [security2:error] [pid 212454:tid 212590] [client 45.138.12.32:37096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bsj.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0NryZ9IcLq1oV6pfFzgAAAAY"]
[Wed Sep 30 01:03:18.941000 2026] [security2:error] [pid 212454:tid 212555] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NryZ9IcLq1oV6pfF0QAAVGQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302271&sid=35180810abb6b068c87287ae7b06c3bb
[Wed Sep 30 01:03:18.941037 2026] [security2:error] [pid 212454:tid 212555] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0NryZ9IcLq1oV6pfF0QAAVGQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302271&sid=35180810abb6b068c87287ae7b06c3bb
[Wed Sep 30 01:03:19.013381 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.013651 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.108411 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.108869 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.143251 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.143508 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.152838 2026] [security2:error] [pid 212454:tid 212702] [client 152.59.169.65:55005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0N7yZ9IcLq1oV6pfF5AAAAHY"]
[Wed Sep 30 01:03:19.152976 2026] [security2:error] [pid 212454:tid 212702] [client 152.59.169.65:55005] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0N7yZ9IcLq1oV6pfF5AAAAHY"]
[Wed Sep 30 01:03:19.165872 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:19.166144 2026] [access_compat:error] [pid 212454:tid 212597] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:19.207938 2026] [security2:error] [pid 212454:tid 212593] [client 74.7.244.32:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.kentraneotitas.org"] [uri "/index.php"] [unique_id "ary0NbyZ9IcLq1oV6pfFHwAAAAk"]
[Wed Sep 30 01:03:19.228470 2026] [security2:error] [pid 212454:tid 212711] [client 74.7.244.32:46450] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ary0NbyZ9IcLq1oV6pfFGAAAfxM"]
[Wed Sep 30 01:03:19.237355 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.237620 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.323588 2026] [autoindex:error] [pid 212454:tid 212705] [client 212.156.70.154:57522] AH01276: Cannot serve directory /home4/wgyqjdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:19.333126 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.333569 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:36022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.359984 2026] [security2:error] [pid 212454:tid 212679] [client 31.189.214.146:55706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0N7yZ9IcLq1oV6pfF8QAAAF8"]
[Wed Sep 30 01:03:19.360757 2026] [security2:error] [pid 212454:tid 212679] [client 31.189.214.146:55706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0N7yZ9IcLq1oV6pfF8QAAAF8"]
[Wed Sep 30 01:03:19.412378 2026] [security2:error] [pid 212454:tid 212662] [client 216.73.216.46:36022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0N7yZ9IcLq1oV6pfF-gAAAE4"]
[Wed Sep 30 01:03:19.488242 2026] [security2:error] [pid 212454:tid 212612] [client 20.214.109.68:62419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/55b76.php"] [unique_id "ary0N7yZ9IcLq1oV6pfGBwAAABw"]
[Wed Sep 30 01:03:19.514664 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.515108 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.516584 2026] [security2:error] [pid 212454:tid 212688] [client 4.240.25.22:33235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/aaa.php"] [unique_id "ary0N7yZ9IcLq1oV6pfGCwAAAGg"]
[Wed Sep 30 01:03:19.529318 2026] [security2:error] [pid 212454:tid 212638] [client 192.141.19.132:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/mercury/"] [unique_id "ary0N7yZ9IcLq1oV6pfGDAAAADY"]
[Wed Sep 30 01:03:19.600681 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.600960 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.611145 2026] [security2:error] [pid 212454:tid 212614] [client 74.7.244.32:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "ary0N7yZ9IcLq1oV6pfF9gAAAB4"], referer: https://www.kentraneotitas.org/robots.txt
[Wed Sep 30 01:03:19.622658 2026] [security2:error] [pid 212454:tid 212673] [client 74.7.244.32:46452] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ary0N7yZ9IcLq1oV6pfF8AAAWTw"], referer: https://www.kentraneotitas.org/robots.txt
[Wed Sep 30 01:03:19.644879 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:19.645154 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:19.667550 2026] [security2:error] [pid 212454:tid 212621] [client 4.196.65.241:19512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/ava.php"] [unique_id "ary0N7yZ9IcLq1oV6pfGEgAAACU"]
[Wed Sep 30 01:03:19.696513 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.696951 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.785466 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.785918 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.818419 2026] [security2:error] [pid 212454:tid 212616] [client 20.214.151.17:9751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/images.php"] [unique_id "ary0N7yZ9IcLq1oV6pfGJQAAACA"]
[Wed Sep 30 01:03:19.876360 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:19.876651 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:19.890893 2026] [security2:error] [pid 212454:tid 212619] [client 20.70.173.30:39131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary0N7yZ9IcLq1oV6pfGKAAAACM"]
[Wed Sep 30 01:03:20.005317 2026] [security2:error] [pid 212454:tid 212609] [client 122.173.27.10:16521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGKgAAABk"]
[Wed Sep 30 01:03:20.005576 2026] [security2:error] [pid 212454:tid 212609] [client 122.173.27.10:16521] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGKgAAABk"]
[Wed Sep 30 01:03:20.021924 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.022360 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.084844 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.085217 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.145041 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:20.145475 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:20.146358 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.146642 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.201476 2026] [security2:error] [pid 212454:tid 212677] [client 20.194.30.107:34733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/echkm.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGSwAAAF0"]
[Wed Sep 30 01:03:20.237703 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.237982 2026] [access_compat:error] [pid 212454:tid 212612] [client 216.73.216.46:13231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.329477 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.329773 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.420684 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.420980 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.510988 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.511255 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.602917 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.603211 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.656419 2026] [security2:error] [pid 212454:tid 212593] [client 216.73.216.46:13231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGaAAAAAk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9kZXYvY2hhci80OjM2
[Wed Sep 30 01:03:20.662606 2026] [access_compat:error] [pid 212454:tid 212640] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:20.662879 2026] [access_compat:error] [pid 212454:tid 212640] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:20.695372 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.695823 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.756672 2026] [security2:error] [pid 212454:tid 212630] [client 155.190.6.18:48492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGdAAAAC4"]
[Wed Sep 30 01:03:20.784685 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.784973 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.876453 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.876779 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.939574 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Vzci9zaGFyZS9kb2MvZ2Rpc2s%3D
[Wed Sep 30 01:03:20.939857 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Vzci9zaGFyZS9kb2MvZ2Rpc2s%3D
[Wed Sep 30 01:03:20.968203 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:20.968472 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:20.970986 2026] [security2:error] [pid 212454:tid 212622] [client 103.172.210.103:51790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGgwAAACY"]
[Wed Sep 30 01:03:20.971151 2026] [security2:error] [pid 212454:tid 212622] [client 103.172.210.103:51790] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGgwAAACY"]
[Wed Sep 30 01:03:20.999427 2026] [security2:error] [pid 212454:tid 212635] [client 172.232.97.149:52202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGhwAAADM"], referer: www.google.com
[Wed Sep 30 01:03:21.031448 2026] [security2:error] [pid 212454:tid 212688] [client 20.70.173.30:51320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/file.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGigAAAGg"]
[Wed Sep 30 01:03:21.036924 2026] [security2:error] [pid 212454:tid 212630] [client 155.190.6.18:48492] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0OLyZ9IcLq1oV6pfGdAAAAC4"]
[Wed Sep 30 01:03:21.062931 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.063361 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.150711 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.151040 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.166925 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:21.167192 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:21.222864 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.151.17:9764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/media.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGlAAAADE"]
[Wed Sep 30 01:03:21.244581 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.245023 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.251714 2026] [security2:error] [pid 212454:tid 212584] [client 20.219.2.60:18882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/8xyz.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGmQAAAAA"]
[Wed Sep 30 01:03:21.336414 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.336873 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.428236 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.428663 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:2758] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.471773 2026] [security2:error] [pid 212454:tid 212667] [client 103.168.67.253:19732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGogAAAFM"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:21.506595 2026] [security2:error] [pid 212454:tid 212644] [client 216.73.216.46:2758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0ObyZ9IcLq1oV6pfGowAAADw"]
[Wed Sep 30 01:03:21.570658 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.109.68:62429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tt.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGpgAAACI"]
[Wed Sep 30 01:03:21.605295 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.605624 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.693859 2026] [access_compat:error] [pid 212454:tid 212643] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:21.694482 2026] [access_compat:error] [pid 212454:tid 212643] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:21.699312 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.699733 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:43676] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.708185 2026] [core:error] [pid 212454:tid 212619] [client 45.138.12.41:63104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:21.708205 2026] [core:error] [pid 212454:tid 212619] [client 45.138.12.41:63104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:21.819921 2026] [security2:error] [pid 212454:tid 212593] [client 223.181.60.167:15572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGuwAAAAk"]
[Wed Sep 30 01:03:21.820932 2026] [security2:error] [pid 212454:tid 212593] [client 223.181.60.167:15572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGuwAAAAk"]
[Wed Sep 30 01:03:21.839945 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.840369 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.893683 2026] [security2:error] [pid 212454:tid 212508] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGvgAAXTU"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=220085
[Wed Sep 30 01:03:21.893709 2026] [security2:error] [pid 212454:tid 212508] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0ObyZ9IcLq1oV6pfGvgAAXTU"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=220085
[Wed Sep 30 01:03:21.930525 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.930761 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:21.972421 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:21.972692 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.015353 2026] [autoindex:error] [pid 212454:tid 212638] [client 165.227.3.36:62786] AH01276: Cannot serve directory /home4/syfsrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:22.063606 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.063876 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.077216 2026] [security2:error] [pid 212454:tid 212608] [client 43.104.4.208:31818] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary0OryZ9IcLq1oV6pfGzgAAABg"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=batteries%2Cdesktops%2Csolid-works-software
[Wed Sep 30 01:03:22.078534 2026] [security2:error] [pid 212454:tid 212665] [client 43.104.4.198:3323] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary0OryZ9IcLq1oV6pfGzwAAAFE"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=batteries%2Cdesktops%2Csolid-works-software
[Wed Sep 30 01:03:22.119256 2026] [security2:error] [pid 212454:tid 212611] [client 216.73.216.46:43676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0OryZ9IcLq1oV6pfG0AAAABs"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9zaGFyZS9tYW4vcHQvbWFuNQ%3D%3D
[Wed Sep 30 01:03:22.152199 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.152480 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.156157 2026] [security2:error] [pid 212454:tid 212607] [client 165.227.3.36:62802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.3.227.165.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.syf.srv.mybluehost.me"] [uri "/index.php"] [unique_id "ary0OryZ9IcLq1oV6pfG0wAAABc"]
[Wed Sep 30 01:03:22.156170 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:22.156456 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:22.233650 2026] [security2:error] [pid 212454:tid 212653] [client 152.59.165.7:53433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG2gAAAEU"]
[Wed Sep 30 01:03:22.233796 2026] [security2:error] [pid 212454:tid 212653] [client 152.59.165.7:53433] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG2gAAAEU"]
[Wed Sep 30 01:03:22.239868 2026] [security2:error] [pid 212454:tid 212700] [client 4.240.25.22:33231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/images.php"] [unique_id "ary0OryZ9IcLq1oV6pfG3AAAAHQ"]
[Wed Sep 30 01:03:22.246275 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.246551 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.271919 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.151.17:9744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/mac.php"] [unique_id "ary0OryZ9IcLq1oV6pfG3wAAAFA"]
[Wed Sep 30 01:03:22.337719 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.338192 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.348031 2026] [security2:error] [pid 212454:tid 212624] [client 202.179.95.79:53273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG7AAAACg"]
[Wed Sep 30 01:03:22.348525 2026] [security2:error] [pid 212454:tid 212624] [client 202.179.95.79:53273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG7AAAACg"]
[Wed Sep 30 01:03:22.424224 2026] [security2:error] [pid 212454:tid 212627] [client 116.193.128.26:63872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG9QAAACs"]
[Wed Sep 30 01:03:22.424351 2026] [security2:error] [pid 212454:tid 212627] [client 116.193.128.26:63872] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfG9QAAACs"]
[Wed Sep 30 01:03:22.430125 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.430504 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.519892 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.520295 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.609247 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.609522 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.655521 2026] [access_compat:error] [pid 212454:tid 212710] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:22.655972 2026] [access_compat:error] [pid 212454:tid 212710] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:22.701752 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.702158 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.736543 2026] [security2:error] [pid 212454:tid 212601] [client 116.197.133.25:63531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHDwAAABE"]
[Wed Sep 30 01:03:22.736663 2026] [security2:error] [pid 212454:tid 212601] [client 116.197.133.25:63531] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHDwAAABE"]
[Wed Sep 30 01:03:22.756274 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.151.17:14500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ops.php"] [unique_id "ary0OryZ9IcLq1oV6pfHEQAAAG4"]
[Wed Sep 30 01:03:22.771027 2026] [autoindex:error] [pid 212454:tid 212585] [client 165.227.3.36:62830] AH01276: Cannot serve directory /home4/syfsrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:22.775786 2026] [security2:error] [pid 212454:tid 212677] [client 161.118.214.16:53616] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.aps.aeb.mybluehost.me"] [uri "/"] [unique_id "ary0OryZ9IcLq1oV6pfHFQAAAF0"]
[Wed Sep 30 01:03:22.829005 2026] [security2:error] [pid 212454:tid 212709] [client 203.122.45.246:63301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHGAAAAH0"]
[Wed Sep 30 01:03:22.829191 2026] [security2:error] [pid 212454:tid 212709] [client 203.122.45.246:63301] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHGAAAAH0"]
[Wed Sep 30 01:03:22.844183 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.844431 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.859710 2026] [security2:error] [pid 212454:tid 212610] [client 165.227.3.36:23056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.3.227.165.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.syf.srv.mybluehost.me"] [uri "/index.php"] [unique_id "ary0OryZ9IcLq1oV6pfHHgAAABo"]
[Wed Sep 30 01:03:22.871480 2026] [security2:error] [pid 212454:tid 212605] [client 20.194.30.107:17483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/file.php"] [unique_id "ary0OryZ9IcLq1oV6pfHIAAAABU"]
[Wed Sep 30 01:03:22.890932 2026] [security2:error] [pid 212454:tid 212647] [client 103.159.192.142:65281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHIQAAAD8"]
[Wed Sep 30 01:03:22.891038 2026] [security2:error] [pid 212454:tid 212647] [client 103.159.192.142:65281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0OryZ9IcLq1oV6pfHIQAAAD8"]
[Wed Sep 30 01:03:22.936565 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.936875 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:22.975712 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:22.975980 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:61954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.021023 2026] [security2:error] [pid 212454:tid 212504] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHMQAAZzE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=7361533c84ff0d335193297b45823c33&start=15&t=22112
[Wed Sep 30 01:03:23.021056 2026] [security2:error] [pid 212454:tid 212504] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHMQAAZzE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=7361533c84ff0d335193297b45823c33&start=15&t=22112
[Wed Sep 30 01:03:23.032722 2026] [security2:error] [pid 212454:tid 212613] [client 4.196.65.241:2049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/qnHOQSw8LXV.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHMwAAAB0"]
[Wed Sep 30 01:03:23.058432 2026] [security2:error] [pid 212454:tid 212593] [client 216.73.216.46:61954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0O7yZ9IcLq1oV6pfHOAAAAAk"]
[Wed Sep 30 01:03:23.149664 2026] [access_compat:error] [pid 212454:tid 212654] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:23.150105 2026] [access_compat:error] [pid 212454:tid 212654] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:23.159428 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.159877 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.224337 2026] [security2:error] [pid 212454:tid 212497] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHRAAANCo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297798&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:23.224363 2026] [security2:error] [pid 212454:tid 212497] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHRAAANCo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297798&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:23.247274 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.247546 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.321365 2026] [security2:error] [pid 212454:tid 212665] [client 4.196.65.241:64139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHRwAAAFE"]
[Wed Sep 30 01:03:23.339027 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.339334 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.467436 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.467709 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.504140 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.151.17:14474] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "staging.graphicdesignmmd.com"] [uri "/1.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHUgAAAEo"]
[Wed Sep 30 01:03:23.504234 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.151.17:14474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/1.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHUgAAAEo"]
[Wed Sep 30 01:03:23.557750 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.558076 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.635441 2026] [security2:error] [pid 212454:tid 212612] [client 103.168.67.253:19748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHWwAAABw"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:23.648787 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.649072 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.671063 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:23.671455 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:23.743202 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.743625 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.775313 2026] [security2:error] [pid 212454:tid 212709] [client 110.76.128.70:59604] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "crictideas.com"] [uri "/xmlrpc.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHYAAAAH0"]
[Wed Sep 30 01:03:23.775443 2026] [security2:error] [pid 212454:tid 212709] [client 110.76.128.70:59604] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "crictideas.com"] [uri "/xmlrpc.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHYAAAAH0"]
[Wed Sep 30 01:03:23.834308 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.834602 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:23.843650 2026] [security2:error] [pid 212454:tid 212598] [client 20.214.109.68:59896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/maul.php"] [unique_id "ary0O7yZ9IcLq1oV6pfHcAAAAA4"]
[Wed Sep 30 01:03:23.924210 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:23.924495 2026] [access_compat:error] [pid 212454:tid 212636] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.019899 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.020344 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.105479 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.105747 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.157886 2026] [security2:error] [pid 212454:tid 212670] [client 20.219.2.60:18852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/mini.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHgQAAAFY"]
[Wed Sep 30 01:03:24.166601 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:24.166888 2026] [access_compat:error] [pid 212454:tid 212660] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:24.196376 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.196633 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.288999 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.289256 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.338372 2026] [security2:error] [pid 212454:tid 212635] [client 4.196.65.241:64151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/2fa307c31b.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHlwAAADM"]
[Wed Sep 30 01:03:24.358012 2026] [security2:error] [pid 212454:tid 212669] [client 43.227.131.37:31554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHmgAAAFU"]
[Wed Sep 30 01:03:24.358149 2026] [security2:error] [pid 212454:tid 212669] [client 43.227.131.37:31554] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHmgAAAFU"]
[Wed Sep 30 01:03:24.362224 2026] [security2:error] [pid 212454:tid 212584] [client 4.240.25.22:43820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/admin.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHmwAAAAA"]
[Wed Sep 30 01:03:24.383200 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.383634 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.450165 2026] [security2:error] [pid 212454:tid 212703] [client 223.235.102.107:5019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHowAAAHc"]
[Wed Sep 30 01:03:24.450316 2026] [security2:error] [pid 212454:tid 212703] [client 223.235.102.107:5019] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHowAAAHc"]
[Wed Sep 30 01:03:24.468421 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.468677 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.502565 2026] [security2:error] [pid 212454:tid 212632] [client 20.214.151.17:9767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/aaa.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHpgAAADA"]
[Wed Sep 30 01:03:24.513790 2026] [security2:error] [pid 212454:tid 212615] [client 20.194.30.107:17417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/as.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHqAAAAB8"]
[Wed Sep 30 01:03:24.521737 2026] [access_compat:error] [pid 212454:tid 212639] [client 47.79.13.71:32806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:24.522045 2026] [access_compat:error] [pid 212454:tid 212639] [client 47.79.13.71:32806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:24.529248 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L29wdC9hbHQvYW9t
[Wed Sep 30 01:03:24.529503 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L29wdC9hbHQvYW9t
[Wed Sep 30 01:03:24.561457 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.561733 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.640519 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:24.640785 2026] [access_compat:error] [pid 212454:tid 212628] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:24.651877 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.652132 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.703188 2026] [security2:error] [pid 212454:tid 212643] [client 49.205.105.16:14852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHtgAAADs"]
[Wed Sep 30 01:03:24.703344 2026] [security2:error] [pid 212454:tid 212643] [client 49.205.105.16:14852] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHtgAAADs"]
[Wed Sep 30 01:03:24.709416 2026] [security2:error] [pid 212454:tid 212679] [client 106.214.2.47:29173] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHtwAAAF8"]
[Wed Sep 30 01:03:24.709588 2026] [security2:error] [pid 212454:tid 212679] [client 106.214.2.47:29173] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHtwAAAF8"]
[Wed Sep 30 01:03:24.716017 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3IvbGliL2xvY2FsZS9lbl9TQy51dGY4
[Wed Sep 30 01:03:24.716422 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3IvbGliL2xvY2FsZS9lbl9TQy51dGY4
[Wed Sep 30 01:03:24.743046 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.743310 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.834615 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.834890 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.847684 2026] [security2:error] [pid 212454:tid 212461] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHwwAAVgY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=e993d1242ea3a0479d29ee418ab04b04
[Wed Sep 30 01:03:24.847709 2026] [security2:error] [pid 212454:tid 212461] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHwwAAVgY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=e993d1242ea3a0479d29ee418ab04b04
[Wed Sep 30 01:03:24.899830 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.151.17:10027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/chosen.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHxgAAAEw"]
[Wed Sep 30 01:03:24.925982 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:24.926243 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:24.930044 2026] [security2:error] [pid 212454:tid 212595] [client 20.70.173.30:3220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/xiugai.php"] [unique_id "ary0PLyZ9IcLq1oV6pfHygAAAAs"]
[Wed Sep 30 01:03:25.017564 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.018015 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.054350 2026] [security2:error] [pid 212454:tid 212635] [client 4.196.65.241:2527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/resp.php"] [unique_id "ary0PbyZ9IcLq1oV6pfH1gAAADM"]
[Wed Sep 30 01:03:25.060999 2026] [access_compat:error] [pid 212454:tid 212607] [client 47.79.13.65:55954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:25.061239 2026] [access_compat:error] [pid 212454:tid 212607] [client 47.79.13.65:55954] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:25.108224 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.108490 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.166566 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:25.167036 2026] [access_compat:error] [pid 212454:tid 212631] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:25.199210 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.199465 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:14217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.289099 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.289368 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.382329 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.382679 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.395581 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.109.68:62421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/5b9ac.php"] [unique_id "ary0PbyZ9IcLq1oV6pfH7wAAADQ"]
[Wed Sep 30 01:03:25.472058 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.472328 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.540308 2026] [security2:error] [pid 212454:tid 212589] [client 20.214.151.17:14473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/2P.php"] [unique_id "ary0PbyZ9IcLq1oV6pfH-QAAAAU"]
[Wed Sep 30 01:03:25.565307 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.565747 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.600730 2026] [security2:error] [pid 212454:tid 212698] [client 216.73.216.46:14217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0PbyZ9IcLq1oV6pfH_AAAAHI"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvY2xhc3MvZ3JhcGhpY3MvZmIw
[Wed Sep 30 01:03:25.645221 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:25.645560 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:25.652092 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.652354 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.659935 2026] [security2:error] [pid 212454:tid 212520] [remote 47.128.114.162:45928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/1595/former-kp-police-chief-remanded-to-nab-in-weapons-scam"] [unique_id "ary0PbyZ9IcLq1oV6pfIBQAANUE"]
[Wed Sep 30 01:03:25.682461 2026] [security2:error] [pid 212454:tid 212590] [client 20.194.30.107:17408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/simple.php"] [unique_id "ary0PbyZ9IcLq1oV6pfICQAAAAY"]
[Wed Sep 30 01:03:25.743461 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.743721 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.816627 2026] [security2:error] [pid 212454:tid 212645] [client 49.36.41.37:51580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIEgAAAD0"]
[Wed Sep 30 01:03:25.816751 2026] [security2:error] [pid 212454:tid 212645] [client 49.36.41.37:51580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIEgAAAD0"]
[Wed Sep 30 01:03:25.835327 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.835571 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.895963 2026] [security2:error] [pid 212454:tid 212703] [client 20.198.74.230:23904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/SbK7VBNnXJj.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIHgAAAHc"]
[Wed Sep 30 01:03:25.923978 2026] [security2:error] [pid 212454:tid 212593] [client 152.232.187.188:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0PbyZ9IcLq1oV6pfIIAAAAAk"]
[Wed Sep 30 01:03:25.927017 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:25.927886 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:25.949300 2026] [security2:error] [pid 212454:tid 212700] [client 201.32.215.149:5068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIIwAAAHQ"]
[Wed Sep 30 01:03:25.949399 2026] [security2:error] [pid 212454:tid 212700] [client 201.32.215.149:5068] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIIwAAAHQ"]
[Wed Sep 30 01:03:25.980063 2026] [security2:error] [pid 212454:tid 212680] [client 104.208.65.139:18890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0PbyZ9IcLq1oV6pfIJQAAAGA"]
[Wed Sep 30 01:03:26.007852 2026] [security2:error] [pid 212454:tid 212705] [client 172.232.97.149:53163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.central-fuerth.de"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "ary0PryZ9IcLq1oV6pfIJgAAAHk"]
[Wed Sep 30 01:03:26.016279 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.016533 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.107829 2026] [security2:error] [pid 212454:tid 212702] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0PryZ9IcLq1oV6pfIMgAAAHY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:26.109186 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.109444 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:57217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.173155 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 01:03:26.173424 2026] [access_compat:error] [pid 212454:tid 212711] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 01:03:26.202845 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.203267 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.207617 2026] [security2:error] [pid 212454:tid 212698] [client 103.168.67.253:19752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0PryZ9IcLq1oV6pfIQwAAAHI"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:26.291346 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.291627 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.387111 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.387545 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.414381 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.109.68:9447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/hehe.php"] [unique_id "ary0PryZ9IcLq1oV6pfISgAAABE"]
[Wed Sep 30 01:03:26.428100 2026] [security2:error] [pid 212454:tid 212591] [client 20.219.2.60:18865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws68.php"] [unique_id "ary0PryZ9IcLq1oV6pfITQAAAAc"]
[Wed Sep 30 01:03:26.474084 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.474333 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.524461 2026] [security2:error] [pid 212454:tid 212649] [client 216.73.216.46:57217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0PryZ9IcLq1oV6pfIUgAAAEE"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvbGliL2ZpcmViaXJkL3N5c3RlbQ%3D%3D
[Wed Sep 30 01:03:26.563764 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.564107 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.655274 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.655540 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.694861 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:26.695286 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:26.723954 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDE4
[Wed Sep 30 01:03:26.724410 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDE4
[Wed Sep 30 01:03:26.744948 2026] [security2:error] [pid 212454:tid 212651] [client 20.214.151.17:9739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/min.php"] [unique_id "ary0PryZ9IcLq1oV6pfIZgAAAEM"]
[Wed Sep 30 01:03:26.800669 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:15953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.800988 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:15953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.843277 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.843728 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:26.849983 2026] [security2:error] [pid 212454:tid 212631] [client 103.168.67.253:1866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0PryZ9IcLq1oV6pfIbQAAAC8"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:26.931483 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:26.931735 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.023614 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.024092 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.103760 2026] [security2:error] [pid 212454:tid 212699] [client 216.73.216.46:15953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0P7yZ9IcLq1oV6pfIeQAAAHM"]
[Wed Sep 30 01:03:27.166760 2026] [security2:error] [pid 212454:tid 212586] [client 213.136.69.135:49457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/global-styles-and-settings.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIfAAAAAI"], referer: binance.com
[Wed Sep 30 01:03:27.190610 2026] [access_compat:error] [pid 212454:tid 212638] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:27.190896 2026] [access_compat:error] [pid 212454:tid 212638] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:27.209182 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.209620 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:42247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.262251 2026] [security2:error] [pid 212454:tid 212634] [client 45.138.12.32:23998] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.myw.mly.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0P7yZ9IcLq1oV6pfIiQAAADI"]
[Wed Sep 30 01:03:27.286727 2026] [security2:error] [pid 212454:tid 212590] [client 216.73.216.46:42247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0P7yZ9IcLq1oV6pfIigAAAAY"]
[Wed Sep 30 01:03:27.403622 2026] [security2:error] [pid 212454:tid 212678] [client 182.69.182.151:29867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIjAAAAF4"]
[Wed Sep 30 01:03:27.403744 2026] [security2:error] [pid 212454:tid 212678] [client 182.69.182.151:29867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIjAAAAF4"]
[Wed Sep 30 01:03:27.435813 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.436097 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.527682 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.527975 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.656702 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:27.657017 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:27.753121 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.753391 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.787127 2026] [security2:error] [pid 212454:tid 212648] [client 223.181.30.165:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIpgAAAEA"]
[Wed Sep 30 01:03:27.787350 2026] [security2:error] [pid 212454:tid 212648] [client 223.181.30.165:19508] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIpgAAAEA"]
[Wed Sep 30 01:03:27.843092 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.843360 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.869237 2026] [security2:error] [pid 212454:tid 212642] [client 45.138.12.32:42892] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.mzx.auz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0P7yZ9IcLq1oV6pfIqAAAADo"]
[Wed Sep 30 01:03:27.892735 2026] [security2:error] [pid 212454:tid 212694] [client 37.41.16.35:51392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIrwAAAG4"]
[Wed Sep 30 01:03:27.892869 2026] [security2:error] [pid 212454:tid 212694] [client 37.41.16.35:51392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIrwAAAG4"]
[Wed Sep 30 01:03:27.911284 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.151.17:9738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/great.php"] [unique_id "ary0P7yZ9IcLq1oV6pfIsQAAACI"]
[Wed Sep 30 01:03:27.937833 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:27.938265 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:27.948480 2026] [security2:error] [pid 212454:tid 212584] [client 4.196.65.241:64186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/aqotrjkg.php"] [unique_id "ary0P7yZ9IcLq1oV6pfItgAAAAA"]
[Wed Sep 30 01:03:28.025055 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.025323 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.120168 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.120601 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.146237 2026] [access_compat:error] [pid 212454:tid 212637] [client 47.79.13.65:55956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:28.146509 2026] [access_compat:error] [pid 212454:tid 212637] [client 47.79.13.65:55956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:28.173195 2026] [access_compat:error] [pid 212454:tid 212650] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:28.173500 2026] [access_compat:error] [pid 212454:tid 212650] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:28.211540 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.211780 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.219523 2026] [security2:error] [pid 212454:tid 212654] [client 20.214.151.17:9783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/BDKR28WP.php"] [unique_id "ary0QLyZ9IcLq1oV6pfIygAAAEY"]
[Wed Sep 30 01:03:28.257457 2026] [security2:error] [pid 212454:tid 212640] [client 167.234.112.235:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0QLyZ9IcLq1oV6pfI0gAAADg"]
[Wed Sep 30 01:03:28.352362 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.352636 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.361336 2026] [security2:error] [pid 212454:tid 212664] [client 4.240.25.22:41706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/inputs.php"] [unique_id "ary0QLyZ9IcLq1oV6pfI3AAAAFA"]
[Wed Sep 30 01:03:28.376368 2026] [security2:error] [pid 212454:tid 212695] [client 74.7.242.1:45642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0QLyZ9IcLq1oV6pfI3QAAAG8"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:03:28.388502 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.388771 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.459604 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.109.68:9439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary0QLyZ9IcLq1oV6pfI6wAAAGM"]
[Wed Sep 30 01:03:28.478919 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.479197 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.488847 2026] [security2:error] [pid 212454:tid 212608] [client 20.214.151.17:14516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/gigi.php"] [unique_id "ary0QLyZ9IcLq1oV6pfI8AAAABg"]
[Wed Sep 30 01:03:28.541052 2026] [security2:error] [pid 212454:tid 212610] [client 85.204.70.104:45628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0QLyZ9IcLq1oV6pfI9AAAABo"]
[Wed Sep 30 01:03:28.570124 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.570395 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:50398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.631380 2026] [security2:error] [pid 212454:tid 212670] [client 20.70.173.30:3229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/sxxb.php"] [unique_id "ary0QLyZ9IcLq1oV6pfI_AAAAFY"]
[Wed Sep 30 01:03:28.645844 2026] [access_compat:error] [pid 212454:tid 212654] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:28.646128 2026] [access_compat:error] [pid 212454:tid 212654] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:28.657758 2026] [security2:error] [pid 212454:tid 212639] [client 216.73.216.46:50398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0QLyZ9IcLq1oV6pfJAAAAADc"]
[Wed Sep 30 01:03:28.723435 2026] [security2:error] [pid 212454:tid 212661] [client 106.214.3.140:29464] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJAQAAAE0"]
[Wed Sep 30 01:03:28.723648 2026] [security2:error] [pid 212454:tid 212661] [client 106.214.3.140:29464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJAQAAAE0"]
[Wed Sep 30 01:03:28.753906 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.754242 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.791359 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:14468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ant.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJBgAAACY"]
[Wed Sep 30 01:03:28.832790 2026] [security2:error] [pid 212454:tid 212691] [client 104.208.65.139:18904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJCAAAAGs"]
[Wed Sep 30 01:03:28.843139 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.843412 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.882870 2026] [security2:error] [pid 212454:tid 212621] [client 4.196.65.241:53078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJDAAAACU"]
[Wed Sep 30 01:03:28.904564 2026] [security2:error] [pid 212454:tid 212656] [client 85.204.70.104:45638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJDQAAAEg"]
[Wed Sep 30 01:03:28.932011 2026] [security2:error] [pid 212454:tid 212660] [client 20.219.2.60:19409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/xxx.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJEgAAAEw"]
[Wed Sep 30 01:03:28.935480 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:28.935777 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:28.996750 2026] [security2:error] [pid 212454:tid 212667] [client 103.159.192.142:65414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJEwAAAFM"]
[Wed Sep 30 01:03:28.996876 2026] [security2:error] [pid 212454:tid 212667] [client 103.159.192.142:65414] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0QLyZ9IcLq1oV6pfJEwAAAFM"]
[Wed Sep 30 01:03:29.026338 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.026588 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.123614 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.124080 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.148777 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:29.149071 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:29.210276 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.210556 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:54076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.222963 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.151.17:9733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/uejvv.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJMQAAAHw"]
[Wed Sep 30 01:03:29.306905 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.307323 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.387022 2026] [security2:error] [pid 212454:tid 212606] [client 216.73.216.46:54076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0QbyZ9IcLq1oV6pfJOgAAABY"]
[Wed Sep 30 01:03:29.390725 2026] [security2:error] [pid 212454:tid 212617] [client 103.241.204.139:53036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJOwAAACE"]
[Wed Sep 30 01:03:29.390836 2026] [security2:error] [pid 212454:tid 212617] [client 103.241.204.139:53036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJOwAAACE"]
[Wed Sep 30 01:03:29.441126 2026] [security2:error] [pid 212454:tid 212604] [client 20.214.109.68:62440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/varb.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJPgAAABQ"]
[Wed Sep 30 01:03:29.482315 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.482574 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.513253 2026] [security2:error] [pid 212454:tid 212481] [remote 122.14.227.27:31270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.camera-roll.com"] [uri "/"] [unique_id "ary0QbyZ9IcLq1oV6pfJQgAAaxo"]
[Wed Sep 30 01:03:29.574678 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.574970 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:59096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.584419 2026] [security2:error] [pid 212454:tid 212470] [remote 212.156.70.154:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.tribalzsolar.com"] [uri "/"] [unique_id "ary0QbyZ9IcLq1oV6pfJRgAAUA8"]
[Wed Sep 30 01:03:29.634248 2026] [security2:error] [pid 212454:tid 212667] [client 85.204.70.104:45646] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0QbyZ9IcLq1oV6pfJTgAAAFM"]
[Wed Sep 30 01:03:29.659327 2026] [security2:error] [pid 212454:tid 212598] [client 216.73.216.46:59096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0QbyZ9IcLq1oV6pfJTwAAAA4"]
[Wed Sep 30 01:03:29.686346 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:29.686602 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:29.696344 2026] [security2:error] [pid 212454:tid 212636] [client 168.107.70.193:64351] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.mymindandbaby.co.uk"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "ary0QbyZ9IcLq1oV6pfJUAAAADQ"]
[Wed Sep 30 01:03:29.718492 2026] [security2:error] [pid 212454:tid 212623] [client 108.129.168.168:56654] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "gkmasterson.libertyrestored.net"] [uri "/"] [unique_id "ary0QbyZ9IcLq1oV6pfJWAAAACc"]
[Wed Sep 30 01:03:29.781548 2026] [security2:error] [pid 212454:tid 212615] [client 143.0.229.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0QbyZ9IcLq1oV6pfJXgAAAB8"]
[Wed Sep 30 01:03:29.808476 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.808732 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.852777 2026] [security2:error] [pid 212454:tid 212650] [client 4.196.65.241:19089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/632e19b36dindex.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJYQAAAEI"]
[Wed Sep 30 01:03:29.891760 2026] [security2:error] [pid 212454:tid 212670] [client 152.59.169.65:40781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJZQAAAFY"]
[Wed Sep 30 01:03:29.891930 2026] [security2:error] [pid 212454:tid 212670] [client 152.59.169.65:40781] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJZQAAAFY"]
[Wed Sep 30 01:03:29.900172 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:25289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.900424 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:25289] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.940074 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:29.940314 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:29.966138 2026] [security2:error] [pid 212454:tid 212698] [client 45.138.12.41:63204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.opryidaho.com"] [uri "/wp-links-opml.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJbwAAAHI"]
[Wed Sep 30 01:03:29.983313 2026] [security2:error] [pid 212454:tid 212638] [client 85.204.70.104:45662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0QbyZ9IcLq1oV6pfJcgAAADY"]
[Wed Sep 30 01:03:29.991859 2026] [security2:error] [pid 212454:tid 212590] [client 31.189.214.146:56439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJcwAAAAY"]
[Wed Sep 30 01:03:29.992435 2026] [security2:error] [pid 212454:tid 212590] [client 31.189.214.146:56439] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0QbyZ9IcLq1oV6pfJcwAAAAY"]
[Wed Sep 30 01:03:30.028850 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.029115 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.082953 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.151.17:14494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/file.php"] [unique_id "ary0QryZ9IcLq1oV6pfJeQAAABU"]
[Wed Sep 30 01:03:30.119231 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.119638 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.140012 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:30.140265 2026] [access_compat:error] [pid 212454:tid 212647] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:30.212165 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.212582 2026] [access_compat:error] [pid 212454:tid 212684] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.238636 2026] [security2:error] [pid 212454:tid 212493] [remote 83.135.243.255:32439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.243.135.83.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ary0QryZ9IcLq1oV6pfJiAAAZSY"], referer: https://scholarsofsharlayan.com/wp-login.php
[Wed Sep 30 01:03:30.277536 2026] [security2:error] [pid 212454:tid 212688] [client 49.43.163.212:60499] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0QryZ9IcLq1oV6pfJkQAAAGg"]
[Wed Sep 30 01:03:30.277649 2026] [security2:error] [pid 212454:tid 212688] [client 49.43.163.212:60499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0QryZ9IcLq1oV6pfJkQAAAGg"]
[Wed Sep 30 01:03:30.281267 2026] [security2:error] [pid 212454:tid 212602] [client 85.204.70.104:45678] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0QryZ9IcLq1oV6pfJkwAAABI"]
[Wed Sep 30 01:03:30.307398 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.307813 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.394633 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.394929 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.465538 2026] [security2:error] [pid 212454:tid 212506] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0QryZ9IcLq1oV6pfJngAACjM"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D32786
[Wed Sep 30 01:03:30.476509 2026] [security2:error] [pid 212454:tid 212620] [client 108.129.168.168:56674] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "gkmasterson.com"] [uri "/"] [unique_id "ary0QryZ9IcLq1oV6pfJnwAAACQ"]
[Wed Sep 30 01:03:30.478561 2026] [security2:error] [pid 212454:tid 212649] [client 216.73.216.46:25289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0QryZ9IcLq1oV6pfJoAAAAEE"]
[Wed Sep 30 01:03:30.575613 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.575886 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.579574 2026] [security2:error] [pid 212454:tid 212634] [client 85.204.70.104:45694] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0QryZ9IcLq1oV6pfJpwAAADI"]
[Wed Sep 30 01:03:30.595229 2026] [security2:error] [pid 212454:tid 212643] [client 122.173.27.10:26437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0QryZ9IcLq1oV6pfJqAAAADs"]
[Wed Sep 30 01:03:30.595308 2026] [security2:error] [pid 212454:tid 212643] [client 122.173.27.10:26437] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0QryZ9IcLq1oV6pfJqAAAADs"]
[Wed Sep 30 01:03:30.600322 2026] [security2:error] [pid 212454:tid 212612] [client 20.214.151.17:9782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/elements.php"] [unique_id "ary0QryZ9IcLq1oV6pfJqQAAABw"]
[Wed Sep 30 01:03:30.640600 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:30.640866 2026] [access_compat:error] [pid 212454:tid 212668] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:30.668141 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.668406 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.679929 2026] [security2:error] [pid 212454:tid 212711] [client 108.129.168.168:56674] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.libertyrestored.net"] [uri "/wp-content/plugins/backup-backup/readme.txt"] [unique_id "ary0QryZ9IcLq1oV6pfJsQAAAH8"]
[Wed Sep 30 01:03:30.810235 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.810507 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.851593 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.851880 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.898337 2026] [security2:error] [pid 212454:tid 212642] [client 85.204.70.104:45708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0QryZ9IcLq1oV6pfJvQAAADo"]
[Wed Sep 30 01:03:30.912659 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:9740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/sitemap.php"] [unique_id "ary0QryZ9IcLq1oV6pfJvgAAADw"]
[Wed Sep 30 01:03:30.940788 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:30.941084 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:30.994990 2026] [security2:error] [pid 212454:tid 212687] [client 4.240.25.22:18756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/memberfuns.php"] [unique_id "ary0QryZ9IcLq1oV6pfJxAAAAGc"]
[Wed Sep 30 01:03:31.033372 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.033645 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.053625 2026] [security2:error] [pid 212454:tid 212595] [client 108.129.168.168:56654] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.libertyrestored.net"] [uri "/wp-content/plugins/backup-migration/readme.txt"] [unique_id "ary0Q7yZ9IcLq1oV6pfJxwAAAAs"]
[Wed Sep 30 01:03:31.111530 2026] [security2:error] [pid 212454:tid 212623] [client 20.214.109.68:62407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/lm15.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJywAAACc"]
[Wed Sep 30 01:03:31.121847 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.122107 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.170378 2026] [access_compat:error] [pid 212454:tid 212618] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:31.170638 2026] [access_compat:error] [pid 212454:tid 212618] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:31.198569 2026] [security2:error] [pid 212454:tid 212601] [client 85.204.70.104:45716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ0AAAABE"]
[Wed Sep 30 01:03:31.213911 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.214167 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.235306 2026] [security2:error] [pid 212454:tid 212694] [client 108.129.168.168:56676] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.libertyrestored.net"] [uri "/wp-content/plugins/jetformbuilder/readme.txt"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ1AAAAG4"]
[Wed Sep 30 01:03:31.262651 2026] [core:error] [pid 212454:tid 212700] [client 45.3.39.125:34329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:31.262675 2026] [core:error] [pid 212454:tid 212700] [client 45.3.39.125:34329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:31.286430 2026] [security2:error] [pid 212454:tid 212626] [client 20.214.151.17:9742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/xetmolxr.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ1gAAACo"]
[Wed Sep 30 01:03:31.305749 2026] [security2:error] [pid 212454:tid 212590] [client 155.190.6.18:56794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ2gAAAAY"]
[Wed Sep 30 01:03:31.305875 2026] [security2:error] [pid 212454:tid 212590] [client 155.190.6.18:56794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ2gAAAAY"]
[Wed Sep 30 01:03:31.308007 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.308266 2026] [access_compat:error] [pid 212454:tid 212621] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.395682 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.395987 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:45569] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.407760 2026] [security2:error] [pid 212454:tid 212645] [client 105.112.178.79:38357] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.asn.hfj.mybluehost.me"] [uri "/__ss_probe_572b0c27e27da9bcd168a8fe5670a902__"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ5AAAAD0"]
[Wed Sep 30 01:03:31.459690 2026] [security2:error] [pid 212454:tid 212698] [client 20.219.2.60:19404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/njxjtooj.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ5gAAAHI"]
[Wed Sep 30 01:03:31.479835 2026] [security2:error] [pid 212454:tid 212606] [client 216.73.216.46:45569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ5wAAABY"]
[Wed Sep 30 01:03:31.481749 2026] [security2:error] [pid 212454:tid 212689] [client 103.172.210.103:52460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ6AAAAGk"]
[Wed Sep 30 01:03:31.481872 2026] [security2:error] [pid 212454:tid 212689] [client 103.172.210.103:52460] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ6AAAAGk"]
[Wed Sep 30 01:03:31.499886 2026] [security2:error] [pid 212454:tid 212625] [client 45.138.12.32:18248] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.mzx.auz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ6gAAACk"]
[Wed Sep 30 01:03:31.552731 2026] [security2:error] [pid 212454:tid 212699] [client 103.168.67.253:1878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ7QAAAHM"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:31.563948 2026] [security2:error] [pid 212454:tid 212679] [client 85.204.70.104:45720] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ7gAAAF8"]
[Wed Sep 30 01:03:31.577494 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.577759 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:19381] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.586958 2026] [security2:error] [pid 212454:tid 212640] [client 105.112.178.79:38355] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fgc.epx.mybluehost.me"] [uri "/__ss_probe_5979f8fda83cedb499ff29c9c2ee01fb__"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ8gAAADg"]
[Wed Sep 30 01:03:31.592409 2026] [security2:error] [pid 212454:tid 212603] [client 20.214.151.17:14480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/mini.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ8wAAABM"]
[Wed Sep 30 01:03:31.691652 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:31.691962 2026] [access_compat:error] [pid 212454:tid 212635] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:31.720402 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.720671 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.726367 2026] [security2:error] [pid 212454:tid 212490] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ-wAAdyM"], referer: https://torquayfans.com/posting.php?mode=quote&p=284727
[Wed Sep 30 01:03:31.726388 2026] [security2:error] [pid 212454:tid 212490] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ-wAAdyM"], referer: https://torquayfans.com/posting.php?mode=quote&p=284727
[Wed Sep 30 01:03:31.748092 2026] [security2:error] [pid 212454:tid 212634] [client 108.129.168.168:56684] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.com"] [uri "/wp-content/plugins/backup-backup/readme.txt"] [unique_id "ary0Q7yZ9IcLq1oV6pfJ_wAAADI"]
[Wed Sep 30 01:03:31.816103 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:41849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:31.816492 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:41849] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:31.894380 2026] [security2:error] [pid 212454:tid 212683] [client 85.204.70.104:45734] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0Q7yZ9IcLq1oV6pfKBAAAAGM"]
[Wed Sep 30 01:03:31.901572 2026] [security2:error] [pid 212454:tid 212598] [client 216.73.216.46:4302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0Q7yZ9IcLq1oV6pfKBQAAAA4"]
[Wed Sep 30 01:03:31.911743 2026] [security2:error] [pid 212454:tid 212629] [client 20.214.151.17:10002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/zwso.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfKBgAAAC0"]
[Wed Sep 30 01:03:31.935690 2026] [security2:error] [pid 212454:tid 212615] [client 216.73.216.46:41849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0Q7yZ9IcLq1oV6pfKCQAAAB8"]
[Wed Sep 30 01:03:31.991443 2026] [security2:error] [pid 212454:tid 212700] [client 216.73.216.46:19381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0Q7yZ9IcLq1oV6pfKCwAAAHQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9saWI2NC9nYW1lcw%3D%3D
[Wed Sep 30 01:03:32.053933 2026] [security2:error] [pid 212454:tid 212708] [client 104.208.65.139:50772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/av.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKEAAAAHw"]
[Wed Sep 30 01:03:32.069493 2026] [security2:error] [pid 212454:tid 212619] [client 103.168.67.253:1892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wp/index.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKEQAAACM"], referer: https://dobeservices.com/wp/wp-admin/
[Wed Sep 30 01:03:32.089374 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.089637 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.166575 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.166864 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.189097 2026] [security2:error] [pid 212454:tid 212711] [client 20.214.151.17:9735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/tiny.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKGQAAAH8"]
[Wed Sep 30 01:03:32.205386 2026] [security2:error] [pid 212454:tid 212585] [client 85.204.70.104:45742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0RLyZ9IcLq1oV6pfKGwAAAAE"]
[Wed Sep 30 01:03:32.211260 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:32.211523 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:32.273574 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:26782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.273984 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:26782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.308425 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.308693 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.367162 2026] [security2:error] [pid 212454:tid 212625] [client 113.183.166.225:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "ary0RLyZ9IcLq1oV6pfKJgAAACk"]
[Wed Sep 30 01:03:32.399362 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.399619 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.421512 2026] [security2:error] [pid 212454:tid 212617] [client 108.129.168.168:56700] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.com"] [uri "/wp-content/plugins/backup-migration/readme.txt"] [unique_id "ary0RLyZ9IcLq1oV6pfKKwAAACE"]
[Wed Sep 30 01:03:32.488611 2026] [security2:error] [pid 212454:tid 212591] [client 85.204.70.104:45750] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0RLyZ9IcLq1oV6pfKLgAAAAc"]
[Wed Sep 30 01:03:32.490037 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.490468 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:9272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.560606 2026] [security2:error] [pid 212454:tid 212676] [client 20.214.151.17:14482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/simple.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKMAAAAFw"]
[Wed Sep 30 01:03:32.579601 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.579884 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.667482 2026] [core:error] [pid 212454:tid 212653] [client 65.111.27.35:61881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:32.667506 2026] [core:error] [pid 212454:tid 212653] [client 65.111.27.35:61881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:32.670311 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.670572 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.674105 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:32.674436 2026] [access_compat:error] [pid 212454:tid 212593] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:32.762683 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.762961 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.828623 2026] [security2:error] [pid 212454:tid 212711] [client 3.87.122.32:20664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "xfactorbaseballleague.com"] [uri "/mtba/forums/phpBB3/app.php/feed/forum/21"] [unique_id "ary0RLyZ9IcLq1oV6pfKTgAAAH8"]
[Wed Sep 30 01:03:32.854133 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.854390 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:32.864350 2026] [security2:error] [pid 212454:tid 212606] [client 85.204.70.104:45762] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0RLyZ9IcLq1oV6pfKVQAAABY"]
[Wed Sep 30 01:03:32.876061 2026] [security2:error] [pid 212454:tid 212619] [client 108.129.168.168:56702] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "gkmasterson.com"] [uri "/wp-content/plugins/jetformbuilder/readme.txt"] [unique_id "ary0RLyZ9IcLq1oV6pfKVgAAACM"]
[Wed Sep 30 01:03:32.895309 2026] [security2:error] [pid 212454:tid 212516] [remote 74.7.227.56:57028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKWQAACj0"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:03:32.905191 2026] [security2:error] [pid 212454:tid 212680] [client 216.73.216.46:9272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKWwAAAGA"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9ydW4vYXBhY2hlMg%3D%3D
[Wed Sep 30 01:03:32.913645 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.151.17:14503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/buy.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKXwAAAF8"]
[Wed Sep 30 01:03:32.939188 2026] [security2:error] [pid 212454:tid 212652] [client 152.59.165.7:54002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKYgAAAEQ"]
[Wed Sep 30 01:03:32.939296 2026] [security2:error] [pid 212454:tid 212652] [client 152.59.165.7:54002] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0RLyZ9IcLq1oV6pfKYgAAAEQ"]
[Wed Sep 30 01:03:32.944853 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:32.945142 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.023850 2026] [security2:error] [pid 212454:tid 212614] [client 202.179.95.79:53841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKawAAAB4"]
[Wed Sep 30 01:03:33.024003 2026] [security2:error] [pid 212454:tid 212614] [client 202.179.95.79:53841] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKawAAAB4"]
[Wed Sep 30 01:03:33.035139 2026] [security2:error] [pid 212454:tid 212635] [client 116.193.128.26:64439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKbwAAADM"]
[Wed Sep 30 01:03:33.035269 2026] [security2:error] [pid 212454:tid 212635] [client 116.193.128.26:64439] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKbwAAADM"]
[Wed Sep 30 01:03:33.036619 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.036920 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.109429 2026] [security2:error] [pid 212454:tid 212628] [client 98.80.224.116:38420] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "xfactorbaseballleague.com"] [uri "/mtba/forums/phpBB3/app.php/feed/forum/21"] [unique_id "ary0RbyZ9IcLq1oV6pfKcwAALDY"]
[Wed Sep 30 01:03:33.126694 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.126988 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.135862 2026] [security2:error] [pid 212454:tid 212674] [client 201.32.215.149:5364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKeQAAAFo"]
[Wed Sep 30 01:03:33.136547 2026] [security2:error] [pid 212454:tid 212674] [client 201.32.215.149:5364] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKeQAAAFo"]
[Wed Sep 30 01:03:33.150824 2026] [security2:error] [pid 212454:tid 212691] [client 223.181.60.167:5878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKewAAAGs"]
[Wed Sep 30 01:03:33.151106 2026] [security2:error] [pid 212454:tid 212691] [client 223.181.60.167:5878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKewAAAGs"]
[Wed Sep 30 01:03:33.190586 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:33.191064 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:33.198110 2026] [security2:error] [pid 212454:tid 212645] [client 85.204.70.104:45766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0RbyZ9IcLq1oV6pfKgwAAAD0"]
[Wed Sep 30 01:03:33.212329 2026] [security2:error] [pid 212454:tid 212586] [client 116.197.133.25:64141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKiAAAAAI"]
[Wed Sep 30 01:03:33.212452 2026] [security2:error] [pid 212454:tid 212586] [client 116.197.133.25:64141] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKiAAAAAI"]
[Wed Sep 30 01:03:33.226629 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.227112 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.227208 2026] [security2:error] [pid 212454:tid 212585] [client 20.214.151.17:14487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ioxi-o.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKjQAAAAE"]
[Wed Sep 30 01:03:33.288128 2026] [security2:error] [pid 212454:tid 212638] [client 54.84.235.131:45102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "xfactorbaseballleague.com"] [uri "/mtba/forums/phpBB3/app.php/feed/forum/21"] [unique_id "ary0RbyZ9IcLq1oV6pfKkAAAADY"]
[Wed Sep 30 01:03:33.291825 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvbW9kdWxlL25mX3JlamVjdF9pcHY2
[Wed Sep 30 01:03:33.292090 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:43135] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvbW9kdWxlL25mX3JlamVjdF9pcHY2
[Wed Sep 30 01:03:33.337704 2026] [security2:error] [pid 212454:tid 212623] [client 105.112.178.79:38358] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.aso.qlp.mybluehost.me"] [uri "/__ss_probe_20da3a78611c52921c1faeb6aecf0a17__"] [unique_id "ary0RbyZ9IcLq1oV6pfKlAAAACc"]
[Wed Sep 30 01:03:33.389685 2026] [security2:error] [pid 212454:tid 212693] [client 203.122.45.246:63937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKlwAAAG0"]
[Wed Sep 30 01:03:33.389834 2026] [security2:error] [pid 212454:tid 212693] [client 203.122.45.246:63937] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKlwAAAG0"]
[Wed Sep 30 01:03:33.394529 2026] [security2:error] [pid 212454:tid 212654] [client 216.73.216.46:43135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0RbyZ9IcLq1oV6pfKmAAAAEY"]
[Wed Sep 30 01:03:33.475031 2026] [security2:error] [pid 212454:tid 212688] [client 216.73.216.46:26782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0RbyZ9IcLq1oV6pfKnAAAAGg"]
[Wed Sep 30 01:03:33.484656 2026] [security2:error] [pid 212454:tid 212667] [client 85.204.70.104:55846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0RbyZ9IcLq1oV6pfKnQAAAFM"]
[Wed Sep 30 01:03:33.541834 2026] [security2:error] [pid 212454:tid 212604] [client 98.91.228.191:53052] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "xfactorbaseballleague.com"] [uri "/cgi-sys/404.html"] [unique_id "ary0RbyZ9IcLq1oV6pfKngAAABQ"]
[Wed Sep 30 01:03:33.554331 2026] [security2:error] [pid 212454:tid 212595] [client 4.196.65.241:2585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/XrdbXydefault.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKogAAAAs"]
[Wed Sep 30 01:03:33.561137 2026] [security2:error] [pid 212454:tid 212615] [client 20.214.151.17:14467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ans.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKowAAAB8"]
[Wed Sep 30 01:03:33.572672 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.572965 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.596962 2026] [security2:error] [pid 212454:tid 212628] [client 20.214.109.68:9448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/clss.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKpgAAACw"]
[Wed Sep 30 01:03:33.608018 2026] [core:error] [pid 212454:tid 212618] [client 45.3.38.176:29939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:33.608036 2026] [core:error] [pid 212454:tid 212618] [client 45.3.38.176:29939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:33.633406 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.633654 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.635864 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9saWIvZHJhY3V0L21vZHVsZXMuZC85MHFlbXU%3D
[Wed Sep 30 01:03:33.636145 2026] [access_compat:error] [pid 212454:tid 212674] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9saWIvZHJhY3V0L21vZHVsZXMuZC85MHFlbXU%3D
[Wed Sep 30 01:03:33.646484 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:33.646921 2026] [access_compat:error] [pid 212454:tid 212662] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:33.647873 2026] [security2:error] [pid 212454:tid 212672] [client 103.159.192.142:49515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKrAAAAFg"]
[Wed Sep 30 01:03:33.647971 2026] [security2:error] [pid 212454:tid 212672] [client 103.159.192.142:49515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKrAAAAFg"]
[Wed Sep 30 01:03:33.726918 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:26706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.727191 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:26706] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.763851 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.764108 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.773642 2026] [security2:error] [pid 212454:tid 212646] [client 105.112.178.79:38356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.ffu.bzy.mybluehost.me"] [uri "/__ss_probe_70d01e2c93cb15ffc144793249f8e1e7__"] [unique_id "ary0RbyZ9IcLq1oV6pfKtgAAAD4"]
[Wed Sep 30 01:03:33.803553 2026] [security2:error] [pid 212454:tid 212585] [client 85.204.70.104:55854] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0RbyZ9IcLq1oV6pfKuQAAAAE"]
[Wed Sep 30 01:03:33.846109 2026] [security2:error] [pid 212454:tid 212711] [client 20.214.151.17:9748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/gf.php"] [unique_id "ary0RbyZ9IcLq1oV6pfKugAAAH8"]
[Wed Sep 30 01:03:33.856946 2026] [autoindex:error] [pid 212454:tid 212605] [client 212.156.70.154:15867] AH01276: Cannot serve directory /home4/udfaebmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:33.857453 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:33.857903 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:33.940038 2026] [security2:error] [pid 212454:tid 212621] [client 216.73.216.46:26706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0RbyZ9IcLq1oV6pfKvgAAACU"]
[Wed Sep 30 01:03:34.036327 2026] [security2:error] [pid 212454:tid 212510] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0RryZ9IcLq1oV6pfKwQAACjc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297725&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:34.036353 2026] [security2:error] [pid 212454:tid 212510] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0RryZ9IcLq1oV6pfKwQAACjc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297725&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:34.038384 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.038644 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.092934 2026] [security2:error] [pid 212454:tid 212643] [client 173.254.29.157:29740] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0RryZ9IcLq1oV6pfKxgAAADs"]
[Wed Sep 30 01:03:34.100476 2026] [security2:error] [pid 212454:tid 212623] [client 20.198.74.230:23913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/css.php"] [unique_id "ary0RryZ9IcLq1oV6pfKyAAAACc"]
[Wed Sep 30 01:03:34.103888 2026] [security2:error] [pid 212454:tid 212642] [client 85.204.70.104:55858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0RryZ9IcLq1oV6pfKyQAAADo"]
[Wed Sep 30 01:03:34.109944 2026] [security2:error] [pid 212454:tid 212602] [client 173.254.29.157:29742] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0RryZ9IcLq1oV6pfKygAAABI"]
[Wed Sep 30 01:03:34.125108 2026] [security2:error] [pid 212454:tid 212670] [client 173.254.29.157:29750] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0RryZ9IcLq1oV6pfKzAAAAFY"]
[Wed Sep 30 01:03:34.130548 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.130826 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.137162 2026] [security2:error] [pid 212454:tid 212654] [client 20.214.151.17:14498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/man.php"] [unique_id "ary0RryZ9IcLq1oV6pfKzwAAAEY"]
[Wed Sep 30 01:03:34.140493 2026] [security2:error] [pid 212454:tid 212617] [client 173.254.29.157:29762] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0RryZ9IcLq1oV6pfK0AAAACE"]
[Wed Sep 30 01:03:34.195560 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:34.195874 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:34.218439 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.218752 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.310372 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.310628 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.352402 2026] [security2:error] [pid 212454:tid 212592] [client 20.194.30.107:64759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/ccc.php"] [unique_id "ary0RryZ9IcLq1oV6pfK3wAAAAg"]
[Wed Sep 30 01:03:34.399892 2026] [security2:error] [pid 212454:tid 212674] [client 85.204.70.104:55874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.zrg.dnk.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0RryZ9IcLq1oV6pfK5QAAAFo"]
[Wed Sep 30 01:03:34.400840 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.401110 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.407404 2026] [security2:error] [pid 212454:tid 212662] [client 20.214.151.17:9746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/dev.php"] [unique_id "ary0RryZ9IcLq1oV6pfK5gAAAE4"]
[Wed Sep 30 01:03:34.492830 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.493102 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.506877 2026] [core:error] [pid 212454:tid 212687] [client 45.3.41.157:16505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:34.506894 2026] [core:error] [pid 212454:tid 212687] [client 45.3.41.157:16505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:34.584216 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.584472 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:1733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.623957 2026] [security2:error] [pid 212454:tid 212711] [client 20.70.173.30:3250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/classwithtostring.php"] [unique_id "ary0RryZ9IcLq1oV6pfK8QAAAH8"]
[Wed Sep 30 01:03:34.658860 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:34.659128 2026] [access_compat:error] [pid 212454:tid 212697] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:34.667985 2026] [security2:error] [pid 212454:tid 212626] [client 216.73.216.46:1733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0RryZ9IcLq1oV6pfK-AAAACo"]
[Wed Sep 30 01:03:34.758539 2026] [security2:error] [pid 212454:tid 212679] [client 4.196.65.241:19488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/82.php"] [unique_id "ary0RryZ9IcLq1oV6pfK_gAAAF8"]
[Wed Sep 30 01:03:34.800553 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.151.17:14527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ms-edit.php"] [unique_id "ary0RryZ9IcLq1oV6pfLAAAAAHw"]
[Wed Sep 30 01:03:34.818124 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:26702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.818432 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:26702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.866547 2026] [security2:error] [pid 212454:tid 212705] [client 20.214.109.68:62437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/44.php"] [unique_id "ary0RryZ9IcLq1oV6pfLBQAAAHk"]
[Wed Sep 30 01:03:34.902067 2026] [security2:error] [pid 212454:tid 212654] [client 20.219.2.60:18907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws85.php"] [unique_id "ary0RryZ9IcLq1oV6pfLBwAAAEY"]
[Wed Sep 30 01:03:34.910259 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.910578 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:34.919078 2026] [security2:error] [pid 212454:tid 212637] [client 20.194.30.107:17435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/new.php"] [unique_id "ary0RryZ9IcLq1oV6pfLCQAAADU"]
[Wed Sep 30 01:03:34.951759 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:26702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:34.952206 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:26702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.039612 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.040071 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.046924 2026] [security2:error] [pid 212454:tid 212645] [client 43.227.131.37:40310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLEgAAAD0"]
[Wed Sep 30 01:03:35.047163 2026] [security2:error] [pid 212454:tid 212645] [client 43.227.131.37:40310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLEgAAAD0"]
[Wed Sep 30 01:03:35.079429 2026] [security2:error] [pid 212454:tid 212657] [client 20.214.151.17:10000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/txets.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLEwAAAEk"]
[Wed Sep 30 01:03:35.130449 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.130731 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.174601 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:03:35.174876 2026] [access_compat:error] [pid 212454:tid 212620] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:03:35.218926 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.219191 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.311588 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.311879 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.347508 2026] [security2:error] [pid 212454:tid 212687] [client 20.214.151.17:9762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/hao.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLJAAAAGc"]
[Wed Sep 30 01:03:35.389338 2026] [security2:error] [pid 212454:tid 212699] [client 49.205.105.16:13610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLJgAAAHM"]
[Wed Sep 30 01:03:35.389438 2026] [security2:error] [pid 212454:tid 212699] [client 49.205.105.16:13610] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLJgAAAHM"]
[Wed Sep 30 01:03:35.402371 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.402633 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.494212 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.494484 2026] [access_compat:error] [pid 212454:tid 212616] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.515044 2026] [security2:error] [pid 212454:tid 212591] [client 223.235.102.107:2234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLLAAAAAc"]
[Wed Sep 30 01:03:35.515270 2026] [security2:error] [pid 212454:tid 212591] [client 223.235.102.107:2234] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLLAAAAAc"]
[Wed Sep 30 01:03:35.586618 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.586911 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:47476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.659936 2026] [security2:error] [pid 212454:tid 212680] [client 20.214.151.17:14465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/33.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLNgAAAGA"]
[Wed Sep 30 01:03:35.670285 2026] [security2:error] [pid 212454:tid 212659] [client 216.73.216.46:47476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0R7yZ9IcLq1oV6pfLOAAAAEs"]
[Wed Sep 30 01:03:35.671613 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:35.671909 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:35.767405 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.767680 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.858462 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.858735 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.891425 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.109.68:9872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/a5e0a.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLSQAAACY"]
[Wed Sep 30 01:03:35.937634 2026] [security2:error] [pid 212454:tid 212661] [client 222.167.111.157:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0R7yZ9IcLq1oV6pfLVAAAAE0"]
[Wed Sep 30 01:03:35.955011 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:35.955298 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:35.957062 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.151.17:9766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/adminner.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLWAAAAAg"]
[Wed Sep 30 01:03:36.048294 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.048560 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.105984 2026] [core:error] [pid 212454:tid 212632] [client 151.123.177.157:9275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:36.106016 2026] [core:error] [pid 212454:tid 212632] [client 151.123.177.157:9275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:36.143908 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.144333 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.165354 2026] [access_compat:error] [pid 212454:tid 212691] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:36.165619 2026] [access_compat:error] [pid 212454:tid 212691] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:36.230777 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.231075 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:7949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.293084 2026] [security2:error] [pid 212454:tid 212599] [client 49.36.41.37:52109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLawAAAA8"]
[Wed Sep 30 01:03:36.293269 2026] [security2:error] [pid 212454:tid 212599] [client 49.36.41.37:52109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLawAAAA8"]
[Wed Sep 30 01:03:36.314429 2026] [security2:error] [pid 212454:tid 212696] [client 216.73.216.46:26702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0SLyZ9IcLq1oV6pfLbAAAAHA"]
[Wed Sep 30 01:03:36.349081 2026] [security2:error] [pid 212454:tid 212653] [client 20.214.151.17:9780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/thoms.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLbwAAAEU"]
[Wed Sep 30 01:03:36.444724 2026] [security2:error] [pid 212454:tid 212643] [client 20.219.2.60:18820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws61.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLdwAAADs"]
[Wed Sep 30 01:03:36.464570 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.464839 2026] [access_compat:error] [pid 212454:tid 212647] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.558177 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:36582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.558448 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:36582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.580268 2026] [security2:error] [pid 212454:tid 212667] [client 161.118.214.16:57956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "weddingsbyleigh.com"] [uri "/"] [unique_id "ary0SLyZ9IcLq1oV6pfLfgAAAFM"]
[Wed Sep 30 01:03:36.627980 2026] [security2:error] [pid 212454:tid 212676] [client 216.73.216.46:7949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLhAAAAFw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9ibG9jay9zZGQvYmRp
[Wed Sep 30 01:03:36.646916 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.647181 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.665106 2026] [security2:error] [pid 212454:tid 212640] [client 20.214.109.68:9427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bo.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLiwAAADg"]
[Wed Sep 30 01:03:36.682306 2026] [access_compat:error] [pid 212454:tid 212707] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:36.682587 2026] [access_compat:error] [pid 212454:tid 212707] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:36.686958 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.687219 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.711736 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvanN6aXAvcGhwODE%3D
[Wed Sep 30 01:03:36.712036 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvanN6aXAvcGhwODE%3D
[Wed Sep 30 01:03:36.777357 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.777688 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.858071 2026] [security2:error] [pid 212454:tid 212631] [client 20.214.151.17:9787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/a.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLoQAAAC8"]
[Wed Sep 30 01:03:36.866823 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.867120 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.895636 2026] [security2:error] [pid 212454:tid 212617] [client 106.214.2.47:25250] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0R7yZ9IcLq1oV6pfLLQAAACE"]
[Wed Sep 30 01:03:36.955929 2026] [security2:error] [pid 212454:tid 212674] [client 45.3.50.156:14849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.50.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yourkatana.com"] [uri "/wp-login.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLqQAAAFo"], referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:36.963107 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:36.963544 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:36.968265 2026] [security2:error] [pid 212454:tid 212696] [client 216.73.216.46:36582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0SLyZ9IcLq1oV6pfLqwAAAHA"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvY2xhc3MvYXRhX2xpbmsvbGluazIvcG93ZXI%3D
[Wed Sep 30 01:03:37.048529 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.048804 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.070997 2026] [security2:error] [pid 212454:tid 212659] [client 20.194.30.107:17513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/ops.php"] [unique_id "ary0SbyZ9IcLq1oV6pfLsAAAAEs"]
[Wed Sep 30 01:03:37.140190 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.140467 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.183264 2026] [access_compat:error] [pid 212454:tid 212669] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:37.183525 2026] [access_compat:error] [pid 212454:tid 212669] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:37.198872 2026] [security2:error] [pid 212454:tid 212688] [client 20.214.151.17:14513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/b8.php"] [unique_id "ary0SbyZ9IcLq1oV6pfLvAAAAGg"]
[Wed Sep 30 01:03:37.231410 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.231686 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.318285 2026] [security2:error] [pid 212454:tid 212589] [client 104.208.65.139:35925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/dex.php"] [unique_id "ary0SbyZ9IcLq1oV6pfLxgAAAAU"]
[Wed Sep 30 01:03:37.322454 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.322852 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.404361 2026] [security2:error] [pid 212454:tid 212672] [client 43.104.4.213:24261] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary0SbyZ9IcLq1oV6pfLzQAAAFg"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cnetwork-cables-networking%2Cpower-banks%2Crouters-networking%2Csamsung%2Csmart-ups%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:03:37.410406 2026] [security2:error] [pid 212454:tid 212700] [client 195.2.67.184:63811] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "195.2.67.184" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1096"] [id "900925"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "accessart.af"] [uri "/contact.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL0AAAAHQ"], referer: https://accessart.af/contact.php
[Wed Sep 30 01:03:37.412105 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.412589 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:31520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.452683 2026] [security2:error] [pid 212454:tid 212600] [client 4.196.65.241:53081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/84300819ebindex.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL1gAAABA"]
[Wed Sep 30 01:03:37.494598 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:14497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/sid.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL2QAAADk"]
[Wed Sep 30 01:03:37.503436 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.503682 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.598922 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.599175 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:57843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.603392 2026] [security2:error] [pid 212454:tid 212592] [client 216.194.90.150:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0SbyZ9IcLq1oV6pfL4gAAAAg"]
[Wed Sep 30 01:03:37.624832 2026] [security2:error] [pid 212454:tid 212457] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL5AAABgI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D91291
[Wed Sep 30 01:03:37.656091 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:37.656343 2026] [access_compat:error] [pid 212454:tid 212599] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:37.671739 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.109.68:9451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/56c53.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL5gAAAAM"]
[Wed Sep 30 01:03:37.678647 2026] [security2:error] [pid 212454:tid 212624] [client 216.73.216.46:57843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0SbyZ9IcLq1oV6pfL5wAAACg"]
[Wed Sep 30 01:03:37.796545 2026] [security2:error] [pid 212454:tid 212644] [client 20.214.151.17:10040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/bro.php"] [unique_id "ary0SbyZ9IcLq1oV6pfL7AAAADw"]
[Wed Sep 30 01:03:37.829569 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.829861 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:37.915851 2026] [security2:error] [pid 212454:tid 212603] [client 216.73.216.46:22400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0SbyZ9IcLq1oV6pfL9AAAABM"]
[Wed Sep 30 01:03:37.961195 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:37.961460 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:34086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.039695 2026] [security2:error] [pid 212454:tid 212643] [client 182.69.182.151:30483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfL-AAAADs"]
[Wed Sep 30 01:03:38.040346 2026] [security2:error] [pid 212454:tid 212643] [client 182.69.182.151:30483] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfL-AAAADs"]
[Wed Sep 30 01:03:38.067524 2026] [security2:error] [pid 212454:tid 212657] [client 20.219.2.60:18904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/iyy.php"] [unique_id "ary0SryZ9IcLq1oV6pfL-QAAAEk"]
[Wed Sep 30 01:03:38.101884 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.102139 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.135903 2026] [security2:error] [pid 212454:tid 212675] [client 216.73.216.46:34086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0SryZ9IcLq1oV6pfL_wAAAFs"]
[Wed Sep 30 01:03:38.149372 2026] [access_compat:error] [pid 212454:tid 212600] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:38.149639 2026] [access_compat:error] [pid 212454:tid 212600] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:38.232911 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.233170 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.325290 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.325584 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:63322] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.372220 2026] [security2:error] [pid 212454:tid 212690] [client 45.232.89.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0SryZ9IcLq1oV6pfMEwAAAGo"]
[Wed Sep 30 01:03:38.397046 2026] [security2:error] [pid 212454:tid 212673] [client 20.70.173.30:3261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/key.php"] [unique_id "ary0SryZ9IcLq1oV6pfMGAAAAFk"]
[Wed Sep 30 01:03:38.399469 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.151.17:9761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/xwpg.php"] [unique_id "ary0SryZ9IcLq1oV6pfMGQAAAH4"]
[Wed Sep 30 01:03:38.409211 2026] [security2:error] [pid 212454:tid 212610] [client 216.73.216.46:63322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0SryZ9IcLq1oV6pfMGgAAABo"]
[Wed Sep 30 01:03:38.415765 2026] [security2:error] [pid 212454:tid 212588] [client 223.181.30.165:3664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfMGwAAAAQ"]
[Wed Sep 30 01:03:38.415779 2026] [security2:error] [pid 212454:tid 212647] [client 37.41.16.35:52012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfMHAAAAD8"]
[Wed Sep 30 01:03:38.415885 2026] [security2:error] [pid 212454:tid 212647] [client 37.41.16.35:52012] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfMHAAAAD8"]
[Wed Sep 30 01:03:38.415886 2026] [security2:error] [pid 212454:tid 212588] [client 223.181.30.165:3664] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0SryZ9IcLq1oV6pfMGwAAAAQ"]
[Wed Sep 30 01:03:38.559596 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.559868 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.649575 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.649860 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.689094 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.689371 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.690518 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.151.17:10009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/radio.php"] [unique_id "ary0SryZ9IcLq1oV6pfMKwAAAFg"]
[Wed Sep 30 01:03:38.715057 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:38.715320 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:38.736965 2026] [security2:error] [pid 212454:tid 212661] [client 4.240.25.22:30740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/dex.php"] [unique_id "ary0SryZ9IcLq1oV6pfMMAAAAE0"]
[Wed Sep 30 01:03:38.779843 2026] [security2:error] [pid 212454:tid 212627] [client 213.136.69.135:52947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/https-detection.php"] [unique_id "ary0SryZ9IcLq1oV6pfMNgAAACs"], referer: binance.com
[Wed Sep 30 01:03:38.784239 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.784681 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.851032 2026] [security2:error] [pid 212454:tid 212662] [client 20.194.30.107:34742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-content/admin.php"] [unique_id "ary0SryZ9IcLq1oV6pfMOQAAAE4"]
[Wed Sep 30 01:03:38.871466 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:38.871736 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:38.903722 2026] [security2:error] [pid 212454:tid 212609] [client 4.196.65.241:64141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/yyjBRcdefault.php"] [unique_id "ary0SryZ9IcLq1oV6pfMPAAAABk"]
[Wed Sep 30 01:03:38.925934 2026] [security2:error] [pid 212454:tid 212572] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0SryZ9IcLq1oV6pfMPQAAG3U"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298099&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:38.925961 2026] [security2:error] [pid 212454:tid 212572] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0SryZ9IcLq1oV6pfMPQAAG3U"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298099&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:38.957069 2026] [security2:error] [pid 212454:tid 212628] [client 20.214.151.17:14493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ccc.php"] [unique_id "ary0SryZ9IcLq1oV6pfMPwAAACw"]
[Wed Sep 30 01:03:39.014368 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.014643 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.102734 2026] [security2:error] [pid 212454:tid 212631] [client 24.152.19.152:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0S7yZ9IcLq1oV6pfMSAAAAC8"]
[Wed Sep 30 01:03:39.107979 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.108402 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.148240 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.148673 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.182536 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:39.182815 2026] [access_compat:error] [pid 212454:tid 212673] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L3Jvb3QvcHJvYw==
[Wed Sep 30 01:03:39.236402 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.236687 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.278496 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.151.17:10061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wmore1.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMWQAAAEo"]
[Wed Sep 30 01:03:39.325256 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.325528 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.379131 2026] [security2:error] [pid 212454:tid 212582] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMXQAAQH8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297749&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:39.379168 2026] [security2:error] [pid 212454:tid 212582] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMXQAAQH8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297749&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:39.402859 2026] [security2:error] [pid 212454:tid 212657] [client 20.214.109.68:61143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tx78.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMXwAAAEk"]
[Wed Sep 30 01:03:39.415918 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.416175 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.506877 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.507143 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:42953] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.591779 2026] [security2:error] [pid 212454:tid 212598] [client 216.73.216.46:42953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0S7yZ9IcLq1oV6pfMbQAAAA4"]
[Wed Sep 30 01:03:39.620280 2026] [security2:error] [pid 212454:tid 212630] [client 20.214.151.17:14489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/function.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMbwAAAC4"]
[Wed Sep 30 01:03:39.628781 2026] [security2:error] [pid 212454:tid 212610] [client 103.159.192.142:49648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMcAAAABo"]
[Wed Sep 30 01:03:39.628970 2026] [security2:error] [pid 212454:tid 212610] [client 103.159.192.142:49648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMcAAAABo"]
[Wed Sep 30 01:03:39.666777 2026] [access_compat:error] [pid 212454:tid 212645] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:39.667070 2026] [access_compat:error] [pid 212454:tid 212645] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:39.688775 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.689076 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.704404 2026] [core:error] [pid 212454:tid 212621] [client 45.138.12.41:63336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:39.704421 2026] [core:error] [pid 212454:tid 212621] [client 45.138.12.41:63336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:39.781185 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.781468 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.869423 2026] [security2:error] [pid 212454:tid 212594] [client 103.168.67.253:1906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMfgAAAAo"]
[Wed Sep 30 01:03:39.871842 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.872122 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.894142 2026] [security2:error] [pid 212454:tid 212693] [client 20.214.151.17:14466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ab.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMgAAAAG0"]
[Wed Sep 30 01:03:39.934206 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYnVzL2F1eGlsaWFyeS9kcml2ZXJz
[Wed Sep 30 01:03:39.934469 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvYnVzL2F1eGlsaWFyeS9kcml2ZXJz
[Wed Sep 30 01:03:39.965408 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:39.965850 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:39.999497 2026] [security2:error] [pid 212454:tid 212664] [client 103.241.204.139:53569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMhAAAAFA"]
[Wed Sep 30 01:03:39.999650 2026] [security2:error] [pid 212454:tid 212664] [client 103.241.204.139:53569] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0S7yZ9IcLq1oV6pfMhAAAAFA"]
[Wed Sep 30 01:03:40.055512 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.055773 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.110698 2026] [security2:error] [pid 212454:tid 212603] [client 152.232.244.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary0TLyZ9IcLq1oV6pfMiQAAABM"]
[Wed Sep 30 01:03:40.147335 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.147611 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.228963 2026] [access_compat:error] [pid 212454:tid 212648] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:03:40.229227 2026] [access_compat:error] [pid 212454:tid 212648] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:03:40.237424 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.237693 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.258850 2026] [security2:error] [pid 212454:tid 212700] [client 20.194.30.107:17491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/admin.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMkQAAAHQ"]
[Wed Sep 30 01:03:40.300382 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzcx
[Wed Sep 30 01:03:40.300642 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzcx
[Wed Sep 30 01:03:40.329392 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.329644 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.330822 2026] [security2:error] [pid 212454:tid 212668] [client 20.214.151.17:9736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/css.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMngAAAFQ"]
[Wed Sep 30 01:03:40.345399 2026] [security2:error] [pid 212454:tid 212691] [client 146.103.110.101:57236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.103.146.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-comments-post.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMnwAAAGs"], referer: https://nelsonfarmstn.com/product/youre-so-vain/
[Wed Sep 30 01:03:40.345537 2026] [security2:error] [pid 212454:tid 212691] [client 146.103.110.101:57236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "nelsonfarmstn.com"] [uri "/wp-comments-post.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMnwAAAGs"], referer: https://nelsonfarmstn.com/product/youre-so-vain/
[Wed Sep 30 01:03:40.420933 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.421217 2026] [access_compat:error] [pid 212454:tid 212602] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.436390 2026] [security2:error] [pid 212454:tid 212675] [client 20.219.2.60:19402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/900.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMoQAAAFs"]
[Wed Sep 30 01:03:40.451390 2026] [security2:error] [pid 212454:tid 212694] [client 74.7.241.149:47250] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.npo.rxf.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0TLyZ9IcLq1oV6pfMogAAbgs"]
[Wed Sep 30 01:03:40.493497 2026] [security2:error] [pid 212454:tid 212600] [client 45.128.21.192:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary0TLyZ9IcLq1oV6pfMpgAAABA"]
[Wed Sep 30 01:03:40.508954 2026] [security2:error] [pid 212454:tid 212630] [client 20.70.173.30:3227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/BDKR28WP.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMqAAAAC4"]
[Wed Sep 30 01:03:40.510621 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.510897 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.557684 2026] [security2:error] [pid 212454:tid 212604] [client 182.75.216.230:51774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMqQAAABQ"]
[Wed Sep 30 01:03:40.557898 2026] [security2:error] [pid 212454:tid 212604] [client 182.75.216.230:51774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMqQAAABQ"]
[Wed Sep 30 01:03:40.572285 2026] [autoindex:error] [pid 212454:tid 212505] [remote 74.7.243.237:38572] AH01276: Cannot serve directory /home4/nporxfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:40.587376 2026] [security2:error] [pid 212454:tid 212622] [client 31.189.214.146:57040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMqwAAACY"]
[Wed Sep 30 01:03:40.587731 2026] [security2:error] [pid 212454:tid 212622] [client 31.189.214.146:57040] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMqwAAACY"]
[Wed Sep 30 01:03:40.603634 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.603919 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.644458 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:03:40.644735 2026] [access_compat:error] [pid 212454:tid 212596] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:03:40.678249 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.109.68:61136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws80.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMsQAAADI"]
[Wed Sep 30 01:03:40.694114 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.694398 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.721136 2026] [security2:error] [pid 212454:tid 212588] [client 152.59.169.65:56191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMtAAAAAQ"]
[Wed Sep 30 01:03:40.721252 2026] [security2:error] [pid 212454:tid 212588] [client 152.59.169.65:56191] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMtAAAAAQ"]
[Wed Sep 30 01:03:40.768070 2026] [security2:error] [pid 212454:tid 212599] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0TLyZ9IcLq1oV6pfMuQAAAA8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:40.783605 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.783912 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.874720 2026] [security2:error] [pid 212454:tid 212664] [client 44.219.111.44:43176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.111.219.44.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ypw.vhc.mybluehost.me"] [uri "/index.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMvwAAAFA"]
[Wed Sep 30 01:03:40.879804 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.880246 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.898783 2026] [security2:error] [pid 212454:tid 212647] [client 4.196.65.241:64161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/gix.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMwgAAAD8"]
[Wed Sep 30 01:03:40.965464 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:40.965731 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:23007] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:40.977983 2026] [security2:error] [pid 212454:tid 212652] [client 20.214.151.17:14481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0TLyZ9IcLq1oV6pfMywAAAEQ"]
[Wed Sep 30 01:03:41.056683 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.056968 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.148331 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.148603 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.172023 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:41.172475 2026] [access_compat:error] [pid 212454:tid 212585] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:41.219848 2026] [security2:error] [pid 212454:tid 212675] [client 20.219.2.60:18867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/blsvgeyaza.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM2QAAAFs"]
[Wed Sep 30 01:03:41.229468 2026] [security2:error] [pid 212454:tid 212659] [client 103.168.67.253:24812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM2gAAAEs"]
[Wed Sep 30 01:03:41.241115 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.241351 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.267955 2026] [security2:error] [pid 212454:tid 212619] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0TbyZ9IcLq1oV6pfM4QAAACM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:41.269488 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:9730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM4gAAADk"]
[Wed Sep 30 01:03:41.272399 2026] [security2:error] [pid 212454:tid 212682] [client 49.43.163.212:61135] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM4wAAAGI"]
[Wed Sep 30 01:03:41.272505 2026] [security2:error] [pid 212454:tid 212682] [client 49.43.163.212:61135] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM4wAAAGI"]
[Wed Sep 30 01:03:41.330318 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.330584 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:48547] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.358427 2026] [security2:error] [pid 212454:tid 212634] [client 216.73.216.46:23007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM6wAAADI"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvZG9jL3BlcmwtQ2xhc3MtU2luZ2xldG9u
[Wed Sep 30 01:03:41.367832 2026] [security2:error] [pid 212454:tid 212690] [client 122.173.27.10:10495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM7AAAAGo"]
[Wed Sep 30 01:03:41.367918 2026] [security2:error] [pid 212454:tid 212690] [client 122.173.27.10:10495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM7AAAAGo"]
[Wed Sep 30 01:03:41.401414 2026] [security2:error] [pid 212454:tid 212588] [client 4.240.25.22:30755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/mac.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM7gAAAAQ"]
[Wed Sep 30 01:03:41.418053 2026] [security2:error] [pid 212454:tid 212653] [client 216.73.216.46:48547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0TbyZ9IcLq1oV6pfM8AAAAEU"]
[Wed Sep 30 01:03:41.477052 2026] [security2:error] [pid 212454:tid 212697] [client 104.208.65.139:50787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/chosen.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM9QAAAHE"]
[Wed Sep 30 01:03:41.506525 2026] [security2:error] [pid 212454:tid 212594] [client 216.73.216.46:31520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0TbyZ9IcLq1oV6pfM9gAAAAo"]
[Wed Sep 30 01:03:41.605031 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.605308 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.625437 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:14464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-links-opml.php"] [unique_id "ary0TbyZ9IcLq1oV6pfM_QAAAHg"]
[Wed Sep 30 01:03:41.647861 2026] [security2:error] [pid 212454:tid 212644] [client 45.138.12.41:23240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.opryidaho.com"] [uri "/wp-links-opml.php"] [unique_id "ary0TbyZ9IcLq1oV6pfNAAAAADw"]
[Wed Sep 30 01:03:41.690648 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:41.690949 2026] [access_compat:error] [pid 212454:tid 212679] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:41.693512 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.693823 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.694605 2026] [security2:error] [pid 212454:tid 212668] [client 20.194.30.107:34701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/biufile.php"] [unique_id "ary0TbyZ9IcLq1oV6pfNDAAAAFQ"]
[Wed Sep 30 01:03:41.786514 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.787010 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.877082 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.877345 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.902081 2026] [security2:error] [pid 212454:tid 212604] [client 155.190.6.18:34578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfNGgAAABQ"]
[Wed Sep 30 01:03:41.902201 2026] [security2:error] [pid 212454:tid 212604] [client 155.190.6.18:34578] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0TbyZ9IcLq1oV6pfNGgAAABQ"]
[Wed Sep 30 01:03:41.969915 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:41.970204 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:41.989822 2026] [security2:error] [pid 212454:tid 212590] [client 161.118.214.16:58922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "weddingsbyleigh.h2olifeandstyle.com"] [uri "/"] [unique_id "ary0TbyZ9IcLq1oV6pfM0QAAAAY"]
[Wed Sep 30 01:03:42.023262 2026] [security2:error] [pid 212454:tid 212634] [client 20.214.151.17:14469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/hp.php"] [unique_id "ary0TryZ9IcLq1oV6pfNHQAAADI"]
[Wed Sep 30 01:03:42.059127 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.059386 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.113138 2026] [security2:error] [pid 212454:tid 212588] [client 20.214.109.68:9918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/jga.php"] [unique_id "ary0TryZ9IcLq1oV6pfNIQAAAAQ"]
[Wed Sep 30 01:03:42.120121 2026] [security2:error] [pid 212454:tid 212621] [client 4.240.25.22:18721] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.davidtech.us"] [uri "/1.php"] [unique_id "ary0TryZ9IcLq1oV6pfNIgAAACU"]
[Wed Sep 30 01:03:42.120229 2026] [security2:error] [pid 212454:tid 212621] [client 4.240.25.22:18721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/1.php"] [unique_id "ary0TryZ9IcLq1oV6pfNIgAAACU"]
[Wed Sep 30 01:03:42.149586 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.149860 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.150264 2026] [access_compat:error] [pid 212454:tid 212646] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:42.150530 2026] [access_compat:error] [pid 212454:tid 212646] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:42.154571 2026] [security2:error] [pid 212454:tid 212678] [client 20.194.30.107:17353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/az.php"] [unique_id "ary0TryZ9IcLq1oV6pfNJgAAAF4"]
[Wed Sep 30 01:03:42.239316 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.239597 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.286469 2026] [security2:error] [pid 212454:tid 212654] [client 103.172.210.103:52869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.210.172.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0TryZ9IcLq1oV6pfNMAAAAEY"]
[Wed Sep 30 01:03:42.290817 2026] [security2:error] [pid 212454:tid 212654] [client 103.172.210.103:52869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sunshinemanage.com"] [uri "/xmlrpc.php"] [unique_id "ary0TryZ9IcLq1oV6pfNMAAAAEY"]
[Wed Sep 30 01:03:42.307641 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:9750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/mo.php"] [unique_id "ary0TryZ9IcLq1oV6pfNMQAAAHg"]
[Wed Sep 30 01:03:42.376106 2026] [security2:error] [pid 212454:tid 212620] [client 191.84.211.79:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary0TryZ9IcLq1oV6pfNOgAAACQ"]
[Wed Sep 30 01:03:42.384338 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:26956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.384599 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:26956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.400049 2026] [security2:error] [pid 212454:tid 212584] [client 93.180.202.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary0TryZ9IcLq1oV6pfNPgAAAAA"]
[Wed Sep 30 01:03:42.422334 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.422737 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.424566 2026] [security2:error] [pid 212454:tid 212535] [remote 57.141.14.92:63220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-json/xmlrpc.php"] [unique_id "ary0TryZ9IcLq1oV6pfNOQAARFA"]
[Wed Sep 30 01:03:42.569047 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.569321 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.606907 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.607189 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.646705 2026] [access_compat:error] [pid 212454:tid 212666] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:42.647157 2026] [access_compat:error] [pid 212454:tid 212666] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:42.697798 2026] [security2:error] [pid 212454:tid 212600] [client 20.219.2.60:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gqhyti.php"] [unique_id "ary0TryZ9IcLq1oV6pfNTAAAABA"]
[Wed Sep 30 01:03:42.697969 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.698239 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.786846 2026] [security2:error] [pid 212454:tid 212585] [client 216.73.216.46:26956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0TryZ9IcLq1oV6pfNUQAAAAE"]
[Wed Sep 30 01:03:42.889081 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.889500 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:42.914312 2026] [security2:error] [pid 212454:tid 212596] [client 45.138.12.41:1160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.pfq.why.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0TryZ9IcLq1oV6pfNVgAAAAw"]
[Wed Sep 30 01:03:42.948263 2026] [security2:error] [pid 212454:tid 212707] [client 4.240.25.22:30783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/txets.php"] [unique_id "ary0TryZ9IcLq1oV6pfNWQAAAHs"]
[Wed Sep 30 01:03:42.969036 2026] [security2:error] [pid 212454:tid 212709] [client 43.104.4.212:9119] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary0TryZ9IcLq1oV6pfNWwAAAH0"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cnetwork-cables-networking%2Cpower-banks%2Crouters-networking%2Csamsung%2Csmart-ups%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:03:42.975260 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:42.975528 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.038299 2026] [security2:error] [pid 212454:tid 212697] [client 20.214.109.68:61172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/fs.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNYQAAAHE"]
[Wed Sep 30 01:03:43.068253 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.068516 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.069460 2026] [security2:error] [pid 212454:tid 212696] [client 20.214.151.17:14485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/ivmirgut.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNYwAAAHA"]
[Wed Sep 30 01:03:43.071251 2026] [security2:error] [pid 212454:tid 212594] [client 4.196.65.241:64188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/dot.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNZQAAAAo"]
[Wed Sep 30 01:03:43.157876 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.158145 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.189291 2026] [access_compat:error] [pid 212454:tid 212617] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:43.189556 2026] [access_compat:error] [pid 212454:tid 212617] [client 74.7.243.227:41686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:43.249275 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.249542 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.319034 2026] [security2:error] [pid 212454:tid 212626] [client 20.198.74.230:23876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/twivahpi.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNfgAAACo"]
[Wed Sep 30 01:03:43.341439 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.341716 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.385512 2026] [security2:error] [pid 212454:tid 212619] [client 20.214.151.17:9774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/baba.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNgAAAACM"]
[Wed Sep 30 01:03:43.431110 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.431365 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.453389 2026] [security2:error] [pid 212454:tid 212613] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0T7yZ9IcLq1oV6pfNhQAAAB0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:43.482992 2026] [security2:error] [pid 212454:tid 212611] [client 152.59.165.7:54559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNiQAAABs"]
[Wed Sep 30 01:03:43.483153 2026] [security2:error] [pid 212454:tid 212611] [client 152.59.165.7:54559] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNiQAAABs"]
[Wed Sep 30 01:03:43.522571 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.522889 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.529867 2026] [security2:error] [pid 212454:tid 212621] [client 47.128.114.123:13030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forum.codeproblem.com"] [uri "/gallery/pg/28/31"] [unique_id "ary0T7yZ9IcLq1oV6pfNjwAAACU"]
[Wed Sep 30 01:03:43.616226 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.616491 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.635921 2026] [security2:error] [pid 212454:tid 212558] [remote 89.246.164.146:33308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.164.246.89.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNkQAADWc"], referer: https://scholarsofsharlayan.com/
[Wed Sep 30 01:03:43.675249 2026] [security2:error] [pid 212454:tid 212647] [client 202.179.95.79:54406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNkgAAAD8"]
[Wed Sep 30 01:03:43.675686 2026] [security2:error] [pid 212454:tid 212647] [client 202.179.95.79:54406] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNkgAAAD8"]
[Wed Sep 30 01:03:43.697570 2026] [security2:error] [pid 212454:tid 212667] [client 116.197.133.25:64754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNlgAAAFM"]
[Wed Sep 30 01:03:43.697691 2026] [security2:error] [pid 212454:tid 212667] [client 116.197.133.25:64754] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNlgAAAFM"]
[Wed Sep 30 01:03:43.705226 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.705484 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:60565] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.718172 2026] [access_compat:error] [pid 212454:tid 212612] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:03:43.718461 2026] [access_compat:error] [pid 212454:tid 212612] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:03:43.724335 2026] [security2:error] [pid 212454:tid 212641] [client 201.32.215.149:5803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNmgAAADk"]
[Wed Sep 30 01:03:43.724437 2026] [security2:error] [pid 212454:tid 212641] [client 201.32.215.149:5803] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNmgAAADk"]
[Wed Sep 30 01:03:43.772532 2026] [security2:error] [pid 212454:tid 212586] [client 116.193.128.26:65102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNnwAAAAI"]
[Wed Sep 30 01:03:43.772620 2026] [security2:error] [pid 212454:tid 212586] [client 116.193.128.26:65102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNnwAAAAI"]
[Wed Sep 30 01:03:43.772833 2026] [security2:error] [pid 212454:tid 212643] [client 20.214.151.17:10007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/Components.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNoAAAADs"]
[Wed Sep 30 01:03:43.790213 2026] [security2:error] [pid 212454:tid 212651] [client 216.73.216.46:60565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0T7yZ9IcLq1oV6pfNogAAAEM"]
[Wed Sep 30 01:03:43.794463 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.109.68:9463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/byypas.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNowAAABU"]
[Wed Sep 30 01:03:43.886332 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.886594 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.912295 2026] [security2:error] [pid 212454:tid 212666] [client 94.142.179.143:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary0T7yZ9IcLq1oV6pfNrwAAAFI"]
[Wed Sep 30 01:03:43.947468 2026] [security2:error] [pid 212454:tid 212603] [client 203.122.45.246:64565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNsQAAABM"]
[Wed Sep 30 01:03:43.947612 2026] [security2:error] [pid 212454:tid 212603] [client 203.122.45.246:64565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNsQAAABM"]
[Wed Sep 30 01:03:43.984263 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:43.984705 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:43.996846 2026] [security2:error] [pid 212454:tid 212682] [client 223.181.60.167:1461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNtQAAAGI"]
[Wed Sep 30 01:03:43.996972 2026] [security2:error] [pid 212454:tid 212682] [client 223.181.60.167:1461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0T7yZ9IcLq1oV6pfNtQAAAGI"]
[Wed Sep 30 01:03:44.069546 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.069842 2026] [access_compat:error] [pid 212454:tid 212630] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.078683 2026] [security2:error] [pid 212454:tid 212699] [client 20.214.151.17:14496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/aboutt.php"] [unique_id "ary0ULyZ9IcLq1oV6pfNugAAAHM"]
[Wed Sep 30 01:03:44.152773 2026] [access_compat:error] [pid 212454:tid 212707] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:44.153090 2026] [access_compat:error] [pid 212454:tid 212707] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:44.212958 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.213220 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.256996 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.257266 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.347375 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.347632 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.348475 2026] [access_compat:error] [pid 212454:tid 212709] [client 47.79.13.213:47840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:44.348758 2026] [access_compat:error] [pid 212454:tid 212709] [client 47.79.13.213:47840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:44.377440 2026] [security2:error] [pid 212454:tid 212631] [client 103.159.192.142:50140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN0wAAAC8"]
[Wed Sep 30 01:03:44.377555 2026] [security2:error] [pid 212454:tid 212631] [client 103.159.192.142:50140] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN0wAAAC8"]
[Wed Sep 30 01:03:44.438894 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.439168 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.458003 2026] [security2:error] [pid 212454:tid 212680] [client 152.232.242.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0ULyZ9IcLq1oV6pfN3AAAAGA"]
[Wed Sep 30 01:03:44.529062 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.529324 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:37433] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.532046 2026] [security2:error] [pid 212454:tid 212603] [client 20.214.109.68:62450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/b.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN5wAAABM"]
[Wed Sep 30 01:03:44.532440 2026] [security2:error] [pid 212454:tid 212619] [client 20.214.151.17:9778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN6AAAACM"]
[Wed Sep 30 01:03:44.614176 2026] [security2:error] [pid 212454:tid 212660] [client 216.73.216.46:37433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0ULyZ9IcLq1oV6pfN7wAAAEw"]
[Wed Sep 30 01:03:44.668087 2026] [access_compat:error] [pid 212454:tid 212618] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:03:44.668345 2026] [access_compat:error] [pid 212454:tid 212618] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:03:44.710778 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.711077 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.711708 2026] [security2:error] [pid 212454:tid 212630] [client 104.208.65.139:35913] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.jugglepro.org"] [uri "/1.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN-QAAAC4"]
[Wed Sep 30 01:03:44.711832 2026] [security2:error] [pid 212454:tid 212630] [client 104.208.65.139:35913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/1.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN-QAAAC4"]
[Wed Sep 30 01:03:44.712982 2026] [security2:error] [pid 212454:tid 212707] [client 20.70.173.30:3259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/dehnl.php"] [unique_id "ary0ULyZ9IcLq1oV6pfN-wAAAHs"]
[Wed Sep 30 01:03:44.805675 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.805959 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.882714 2026] [security2:error] [pid 212454:tid 212696] [client 4.240.25.22:30856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/cilus.php"] [unique_id "ary0ULyZ9IcLq1oV6pfOBwAAAHA"]
[Wed Sep 30 01:03:44.892662 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.892967 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:44.985033 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:44.985283 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.054722 2026] [security2:error] [pid 212454:tid 212648] [client 20.214.151.17:9784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/xx.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOFAAAAEA"]
[Wed Sep 30 01:03:45.076571 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.076854 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.105337 2026] [security2:error] [pid 212454:tid 212705] [client 20.219.2.60:19451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/autoxxi.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOGQAAAHk"]
[Wed Sep 30 01:03:45.166136 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:03:45.166425 2026] [access_compat:error] [pid 212454:tid 212584] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:03:45.172304 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.172730 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.191192 2026] [access_compat:error] [pid 212454:tid 212587] [client 17.166.234.204:58768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.191614 2026] [access_compat:error] [pid 212454:tid 212587] [client 17.166.234.204:58768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.258870 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.259179 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.294928 2026] [security2:error] [pid 212454:tid 212459] [remote 62.27.213.194:56041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.213.27.62.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/xmlrpc.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOKwAAHwQ"]
[Wed Sep 30 01:03:45.295155 2026] [security2:error] [pid 212454:tid 212615] [client 62.27.213.194:56041] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scholarsofsharlayan.com"] [uri "/xmlrpc.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOKwAAHwQ"]
[Wed Sep 30 01:03:45.297437 2026] [security2:error] [pid 212454:tid 212708] [client 45.78.80.81:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0UbyZ9IcLq1oV6pfOLQAAAHw"]
[Wed Sep 30 01:03:45.349084 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.349385 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.439500 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.439758 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:27867] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.525237 2026] [security2:error] [pid 212454:tid 212654] [client 20.214.109.68:61132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws49.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOPwAAAEY"]
[Wed Sep 30 01:03:45.582844 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.583141 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.663025 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:03:45.663298 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:03:45.678253 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.678683 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.711391 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.711652 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.724820 2026] [security2:error] [pid 212454:tid 212698] [client 20.214.151.17:9765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/gelay.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOUwAAAHI"]
[Wed Sep 30 01:03:45.741341 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvb3N0aWMvcGhwODE%3D
[Wed Sep 30 01:03:45.741600 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvb3N0aWMvcGhwODE%3D
[Wed Sep 30 01:03:45.750420 2026] [security2:error] [pid 212454:tid 212617] [client 216.73.216.46:27867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOVwAAACE"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL2lycS8yNC9hZXJkcnY%3D
[Wed Sep 30 01:03:45.775191 2026] [security2:error] [pid 212454:tid 212683] [client 43.227.131.37:64981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOWAAAAGM"]
[Wed Sep 30 01:03:45.775291 2026] [security2:error] [pid 212454:tid 212683] [client 43.227.131.37:64981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOWAAAAGM"]
[Wed Sep 30 01:03:45.855393 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.855645 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.877515 2026] [security2:error] [pid 212454:tid 212604] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0UbyZ9IcLq1oV6pfOXwAAABQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:45.896391 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.896657 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:45.901612 2026] [security2:error] [pid 212454:tid 212618] [client 20.214.109.68:61125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-blog-header.php"] [unique_id "ary0UbyZ9IcLq1oV6pfOYQAAACI"]
[Wed Sep 30 01:03:45.989905 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:45.990178 2026] [access_compat:error] [pid 212454:tid 212672] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.079168 2026] [security2:error] [pid 212454:tid 212686] [client 20.214.151.17:14492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/htaccess.php"] [unique_id "ary0UryZ9IcLq1oV6pfOawAAAGY"]
[Wed Sep 30 01:03:46.082397 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.082675 2026] [access_compat:error] [pid 212454:tid 212634] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.134954 2026] [security2:error] [pid 212454:tid 212591] [client 49.205.105.16:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOcAAAAAc"]
[Wed Sep 30 01:03:46.135097 2026] [security2:error] [pid 212454:tid 212591] [client 49.205.105.16:14315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOcAAAAAc"]
[Wed Sep 30 01:03:46.174894 2026] [security2:error] [pid 212454:tid 212610] [client 23.182.128.16:39732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.128.182.23.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "ary0UryZ9IcLq1oV6pfOcwAAABo"], referer: https://izubaplanners.com/wp-login.php
[Wed Sep 30 01:03:46.175756 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.176038 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.183245 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:46.183519 2026] [access_compat:error] [pid 212454:tid 212700] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:03:46.253747 2026] [security2:error] [pid 212454:tid 212705] [client 106.214.2.47:5751] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOeQAAAHk"]
[Wed Sep 30 01:03:46.268269 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.268569 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.360950 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.361209 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.392921 2026] [security2:error] [pid 212454:tid 212647] [client 4.196.65.241:19529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wp-9p3vdgw.php"] [unique_id "ary0UryZ9IcLq1oV6pfOgwAAAD8"]
[Wed Sep 30 01:03:46.423162 2026] [security2:error] [pid 212454:tid 212458] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0UryZ9IcLq1oV6pfOhQAAfQM"], referer: https://torquayfans.com/posting.php?mode=quote&p=208944&sid=bc177bf0b7e77bc07fa9d5ce527b389f
[Wed Sep 30 01:03:46.423193 2026] [security2:error] [pid 212454:tid 212458] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0UryZ9IcLq1oV6pfOhQAAfQM"], referer: https://torquayfans.com/posting.php?mode=quote&p=208944&sid=bc177bf0b7e77bc07fa9d5ce527b389f
[Wed Sep 30 01:03:46.450571 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.450836 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.454961 2026] [security2:error] [pid 212454:tid 212698] [client 20.219.2.60:19416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/1144452145_error_log.php"] [unique_id "ary0UryZ9IcLq1oV6pfOiAAAAHI"]
[Wed Sep 30 01:03:46.543592 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.543868 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.556894 2026] [security2:error] [pid 212454:tid 212675] [client 223.235.102.107:6225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOlgAAAFs"]
[Wed Sep 30 01:03:46.557461 2026] [security2:error] [pid 212454:tid 212675] [client 223.235.102.107:6225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOlgAAAFs"]
[Wed Sep 30 01:03:46.575339 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.151.17:9779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/readme.php"] [unique_id "ary0UryZ9IcLq1oV6pfOlwAAABE"]
[Wed Sep 30 01:03:46.581261 2026] [security2:error] [pid 212454:tid 212679] [client 20.70.173.30:54825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/simple.php"] [unique_id "ary0UryZ9IcLq1oV6pfOmAAAAF8"]
[Wed Sep 30 01:03:46.590492 2026] [security2:error] [pid 212454:tid 212676] [client 103.168.67.253:24814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0UryZ9IcLq1oV6pfOmQAAAFw"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:46.602029 2026] [security2:error] [pid 212454:tid 212685] [client 20.214.109.68:61158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bgymj.php"] [unique_id "ary0UryZ9IcLq1oV6pfOmgAAAGU"]
[Wed Sep 30 01:03:46.610720 2026] [security2:error] [pid 212454:tid 212648] [client 20.70.173.30:3239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary0UryZ9IcLq1oV6pfOmwAAAEA"]
[Wed Sep 30 01:03:46.642538 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.642797 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.686937 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:03:46.687203 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:03:46.700956 2026] [security2:error] [pid 212454:tid 212642] [client 177.33.85.138:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0UryZ9IcLq1oV6pfOogAAADo"]
[Wed Sep 30 01:03:46.724854 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.725112 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.814728 2026] [security2:error] [pid 212454:tid 212590] [client 49.36.41.37:52622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOqQAAAAY"]
[Wed Sep 30 01:03:46.814903 2026] [security2:error] [pid 212454:tid 212590] [client 49.36.41.37:52622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0UryZ9IcLq1oV6pfOqQAAAAY"]
[Wed Sep 30 01:03:46.843119 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.843378 2026] [access_compat:error] [pid 212454:tid 212594] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:46.933118 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:46.933382 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.025724 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.026016 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.037886 2026] [security2:error] [pid 212454:tid 212607] [client 127.0.0.1:16992] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary0UryZ9IcLq1oV6pfOtwAAABc"]
[Wed Sep 30 01:03:47.038675 2026] [security2:error] [pid 212454:tid 212649] [client 74.7.228.43:37850] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.osq.ysf.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0UryZ9IcLq1oV6pfOtQAAQUE"]
[Wed Sep 30 01:03:47.114836 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.115126 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.119662 2026] [security2:error] [pid 212454:tid 212662] [client 20.214.151.17:10005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/max.php"] [unique_id "ary0U7yZ9IcLq1oV6pfOxAAAAE4"]
[Wed Sep 30 01:03:47.133076 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.109.68:62408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gfd.php"] [unique_id "ary0U7yZ9IcLq1oV6pfOxgAAABE"]
[Wed Sep 30 01:03:47.175283 2026] [access_compat:error] [pid 212454:tid 212604] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:03:47.175691 2026] [access_compat:error] [pid 212454:tid 212604] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgz
[Wed Sep 30 01:03:47.204314 2026] [security2:error] [pid 212454:tid 212537] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0U7yZ9IcLq1oV6pfOzgAAf1I"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=157157&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:03:47.204349 2026] [security2:error] [pid 212454:tid 212537] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0U7yZ9IcLq1oV6pfOzgAAf1I"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=157157&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:03:47.206099 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.206344 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.219864 2026] [security2:error] [pid 212454:tid 212605] [client 43.159.149.216:56652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.149.159.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ary0U7yZ9IcLq1oV6pfOzwAAABU"]
[Wed Sep 30 01:03:47.230700 2026] [security2:error] [pid 212454:tid 212602] [client 23.182.128.16:39402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.128.182.23.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/wp-login.php"] [unique_id "ary0U7yZ9IcLq1oV6pfO0AAAABI"], referer: https://izubaplanners.com/wp-login.php
[Wed Sep 30 01:03:47.283078 2026] [security2:error] [pid 212454:tid 212628] [client 4.196.65.241:2076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/hypo.php"] [unique_id "ary0U7yZ9IcLq1oV6pfO0QAAACw"]
[Wed Sep 30 01:03:47.297249 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.297505 2026] [access_compat:error] [pid 212454:tid 212644] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.301652 2026] [security2:error] [pid 212454:tid 212636] [client 172.232.97.138:59366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "helenloo.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary0U7yZ9IcLq1oV6pfO0wAAADQ"]
[Wed Sep 30 01:03:47.389219 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.389486 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.451560 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvcnJkdG9vbA%3D%3D
[Wed Sep 30 01:03:47.451843 2026] [access_compat:error] [pid 212454:tid 212707] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly91c3Ivc2hhcmUvcnJkdG9vbA%3D%3D
[Wed Sep 30 01:03:47.462737 2026] [security2:error] [pid 212454:tid 212618] [client 74.7.230.5:41914] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.kox.sul.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0U7yZ9IcLq1oV6pfO5AAAIkg"]
[Wed Sep 30 01:03:47.477503 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.477748 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.478135 2026] [access_compat:error] [pid 212454:tid 212639] [client 47.79.13.65:57680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:47.478559 2026] [access_compat:error] [pid 212454:tid 212639] [client 47.79.13.65:57680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:47.577494 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.577770 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.646098 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDE2
[Wed Sep 30 01:03:47.646367 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:18444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMvY2xhc3Mvd2FrZXVwL3dha2V1cDE2
[Wed Sep 30 01:03:47.650107 2026] [security2:error] [pid 212454:tid 212614] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/surge-protectors/"] [unique_id "ary0U7yZ9IcLq1oV6pfO9AAAAB4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:47.660835 2026] [security2:error] [pid 212454:tid 212625] [client 82.102.18.126:52164] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0U7yZ9IcLq1oV6pfO9wAAACk"]
[Wed Sep 30 01:03:47.667527 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.667857 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.688860 2026] [access_compat:error] [pid 212454:tid 212627] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:03:47.689277 2026] [access_compat:error] [pid 212454:tid 212627] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:03:47.760471 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.760744 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.823687 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvWDExL2xvY2FsZS9rb2k4LXU%3D
[Wed Sep 30 01:03:47.823966 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvWDExL2xvY2FsZS9rb2k4LXU%3D
[Wed Sep 30 01:03:47.826274 2026] [access_compat:error] [pid 212454:tid 212647] [client 47.79.13.64:42216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:47.826710 2026] [access_compat:error] [pid 212454:tid 212647] [client 47.79.13.64:42216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:47.844164 2026] [security2:error] [pid 212454:tid 212648] [client 216.73.216.46:18444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0U7yZ9IcLq1oV6pfPBQAAAEA"]
[Wed Sep 30 01:03:47.945377 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:47.945767 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:47.971179 2026] [security2:error] [pid 212454:tid 212657] [client 20.214.109.68:9899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/callback.php"] [unique_id "ary0U7yZ9IcLq1oV6pfPDgAAAEk"]
[Wed Sep 30 01:03:48.003411 2026] [security2:error] [pid 212454:tid 212589] [client 82.102.18.126:52180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.kingdomsafe.com"] [uri "/xmlrpc.php"] [unique_id "ary0U7yZ9IcLq1oV6pfPEwAAAAU"]
[Wed Sep 30 01:03:48.035660 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.036103 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.123676 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.123956 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.175020 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:03:48.175299 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:03:48.214480 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.214750 2026] [access_compat:error] [pid 212454:tid 212597] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.239552 2026] [security2:error] [pid 212454:tid 212596] [client 20.219.2.60:18848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws48.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPHwAAAAw"]
[Wed Sep 30 01:03:48.306699 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.307016 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.307211 2026] [security2:error] [pid 212454:tid 212585] [client 82.102.18.126:52184] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0VLyZ9IcLq1oV6pfPJAAAAAE"]
[Wed Sep 30 01:03:48.396901 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.397169 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.409736 2026] [security2:error] [pid 212454:tid 212650] [client 74.7.242.1:37384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPKgAAAEI"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:03:48.432766 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPLQAAaGE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=287393&sid=3292d472d9cc4d6750c73951d6cd5b5c
[Wed Sep 30 01:03:48.432806 2026] [security2:error] [pid 212454:tid 212552] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPLQAAaGE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=287393&sid=3292d472d9cc4d6750c73951d6cd5b5c
[Wed Sep 30 01:03:48.488958 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.489254 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.578664 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.578933 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.593698 2026] [security2:error] [pid 212454:tid 212677] [client 20.70.173.30:52140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/new.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPOgAAAF0"]
[Wed Sep 30 01:03:48.619847 2026] [security2:error] [pid 212454:tid 212666] [client 82.102.18.126:52188] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0VLyZ9IcLq1oV6pfPOwAAAFI"]
[Wed Sep 30 01:03:48.621846 2026] [security2:error] [pid 212454:tid 212659] [client 182.69.182.151:13468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPPAAAAEs"]
[Wed Sep 30 01:03:48.622269 2026] [security2:error] [pid 212454:tid 212659] [client 182.69.182.151:13468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPPAAAAEs"]
[Wed Sep 30 01:03:48.647800 2026] [security2:error] [pid 212454:tid 212696] [client 20.214.151.17:9773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/post.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPPQAAAHA"]
[Wed Sep 30 01:03:48.658773 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:48.659058 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:48.668584 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.668864 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:19279] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.688040 2026] [security2:error] [pid 212454:tid 212584] [client 213.136.69.135:56258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/https-migration.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPQAAAAAA"], referer: binance.com
[Wed Sep 30 01:03:48.753752 2026] [security2:error] [pid 212454:tid 212587] [client 216.73.216.46:19279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0VLyZ9IcLq1oV6pfPQwAAAAM"]
[Wed Sep 30 01:03:48.773600 2026] [security2:error] [pid 212454:tid 212648] [client 186.70.95.46:58234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.95.70.186.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "coldroomrental.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPQQAAAEA"]
[Wed Sep 30 01:03:48.773714 2026] [security2:error] [pid 212454:tid 212648] [client 186.70.95.46:58234] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "coldroomrental.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPQQAAAEA"]
[Wed Sep 30 01:03:48.851504 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.851762 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.894114 2026] [security2:error] [pid 212454:tid 212702] [client 223.181.30.165:27643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPSwAAAHY"]
[Wed Sep 30 01:03:48.894235 2026] [security2:error] [pid 212454:tid 212702] [client 223.181.30.165:27643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPSwAAAHY"]
[Wed Sep 30 01:03:48.894371 2026] [security2:error] [pid 212454:tid 212699] [client 37.41.16.35:52628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPSgAAAHM"]
[Wed Sep 30 01:03:48.894460 2026] [security2:error] [pid 212454:tid 212699] [client 37.41.16.35:52628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPSgAAAHM"]
[Wed Sep 30 01:03:48.932894 2026] [security2:error] [pid 212454:tid 212672] [client 82.102.18.126:52196] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0VLyZ9IcLq1oV6pfPUQAAAFg"]
[Wed Sep 30 01:03:48.941022 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:48.941290 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:48.946960 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.151.17:9775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/themes.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPUwAAAHw"]
[Wed Sep 30 01:03:48.972692 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.109.68:62449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/file.php"] [unique_id "ary0VLyZ9IcLq1oV6pfPVQAAAH4"]
[Wed Sep 30 01:03:49.033372 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.033655 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.124984 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.125251 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.176620 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:03:49.176947 2026] [access_compat:error] [pid 212454:tid 212614] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3
[Wed Sep 30 01:03:49.268919 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.269186 2026] [access_compat:error] [pid 212454:tid 212678] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.270972 2026] [security2:error] [pid 212454:tid 212662] [client 82.102.18.126:52204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0VbyZ9IcLq1oV6pfPagAAAE4"]
[Wed Sep 30 01:03:49.306655 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.306927 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.341601 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.151.17:9745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPcgAAADE"]
[Wed Sep 30 01:03:49.400671 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.401109 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.445252 2026] [security2:error] [pid 212454:tid 212709] [client 4.196.65.241:19080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/UuAFIYGYKdefault.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPdgAAAH0"]
[Wed Sep 30 01:03:49.490524 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.490788 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.581723 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.582032 2026] [access_compat:error] [pid 212454:tid 212657] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.602652 2026] [security2:error] [pid 212454:tid 212644] [client 82.102.18.126:52208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0VbyZ9IcLq1oV6pfPhAAAADw"]
[Wed Sep 30 01:03:49.609056 2026] [security2:error] [pid 212454:tid 212615] [client 104.208.65.139:18886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/radio.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPhQAAAB8"]
[Wed Sep 30 01:03:49.614073 2026] [security2:error] [pid 212454:tid 212592] [client 20.214.151.17:14517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPhgAAAAg"]
[Wed Sep 30 01:03:49.668754 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:49.669078 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:03:49.673771 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.674163 2026] [access_compat:error] [pid 212454:tid 212645] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.765171 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.765431 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.856561 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.856851 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.907489 2026] [security2:error] [pid 212454:tid 212630] [client 82.102.18.126:52210] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0VbyZ9IcLq1oV6pfPlgAAAC4"]
[Wed Sep 30 01:03:49.926457 2026] [security2:error] [pid 212454:tid 212590] [client 20.214.151.17:9760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/click.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPlwAAAAY"]
[Wed Sep 30 01:03:49.926984 2026] [security2:error] [pid 212454:tid 212660] [client 20.214.109.68:9873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bolt.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPmAAAAEw"]
[Wed Sep 30 01:03:49.949055 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:49.949363 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:49.984951 2026] [security2:error] [pid 212454:tid 212472] [remote 91.244.197.105:51752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0VbyZ9IcLq1oV6pfPngAABBE"]
[Wed Sep 30 01:03:50.011194 2026] [security2:error] [pid 212454:tid 212698] [client 84.17.60.236:55348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0VryZ9IcLq1oV6pfPogAAAHI"]
[Wed Sep 30 01:03:50.048011 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.048282 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.144481 2026] [security2:error] [pid 212454:tid 212581] [remote 91.244.197.105:51752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0VryZ9IcLq1oV6pfPqQAARH4"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:03:50.157389 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:03:50.157650 2026] [access_compat:error] [pid 212454:tid 212678] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:03:50.158473 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.158742 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.242949 2026] [security2:error] [pid 212454:tid 212666] [client 82.102.18.126:52212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0VryZ9IcLq1oV6pfPsgAAAFI"]
[Wed Sep 30 01:03:50.248994 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.249247 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.303171 2026] [security2:error] [pid 212454:tid 212557] [remote 91.244.197.105:51752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfPtgAAEmY"]
[Wed Sep 30 01:03:50.303358 2026] [security2:error] [pid 212454:tid 212602] [client 91.244.197.105:51752] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfPtgAAEmY"]
[Wed Sep 30 01:03:50.304783 2026] [security2:error] [pid 212454:tid 212680] [client 20.214.151.17:9756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/install.php"] [unique_id "ary0VryZ9IcLq1oV6pfPtwAAAGA"]
[Wed Sep 30 01:03:50.361368 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.361801 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.407335 2026] [autoindex:error] [pid 212454:tid 212580] [remote 74.7.243.222:42524] AH01276: Cannot serve directory /home4/zxbnbbmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:50.442511 2026] [security2:error] [pid 212454:tid 212634] [client 103.159.192.142:50275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfPvQAAADI"]
[Wed Sep 30 01:03:50.442669 2026] [security2:error] [pid 212454:tid 212634] [client 103.159.192.142:50275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfPvQAAADI"]
[Wed Sep 30 01:03:50.457964 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.458279 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.466794 2026] [security2:error] [pid 212454:tid 212476] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0VryZ9IcLq1oV6pfPwAAAZRU"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D57394
[Wed Sep 30 01:03:50.512707 2026] [security2:error] [pid 212454:tid 212665] [client 4.196.65.241:19110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/gif.php"] [unique_id "ary0VryZ9IcLq1oV6pfPxAAAAFE"]
[Wed Sep 30 01:03:50.545615 2026] [security2:error] [pid 212454:tid 212622] [client 82.102.18.126:52228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0VryZ9IcLq1oV6pfPyAAAACY"]
[Wed Sep 30 01:03:50.545820 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.546074 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.635044 2026] [security2:error] [pid 212454:tid 212608] [client 103.241.204.139:54109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfP1wAAABg"]
[Wed Sep 30 01:03:50.635210 2026] [security2:error] [pid 212454:tid 212608] [client 103.241.204.139:54109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfP1wAAABg"]
[Wed Sep 30 01:03:50.640989 2026] [security2:error] [pid 212454:tid 212649] [client 20.194.30.107:25869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/simple.php"] [unique_id "ary0VryZ9IcLq1oV6pfP2gAAAEE"]
[Wed Sep 30 01:03:50.650184 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.650623 2026] [access_compat:error] [pid 212454:tid 212667] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.679979 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:03:50.680433 2026] [access_compat:error] [pid 212454:tid 212632] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:03:50.681004 2026] [security2:error] [pid 212454:tid 212687] [client 74.7.175.156:33584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "zxb.nbb.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0VryZ9IcLq1oV6pfP4gAAZ3A"]
[Wed Sep 30 01:03:50.681948 2026] [security2:error] [pid 212454:tid 212690] [client 84.17.60.236:55352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "upnorthcon.com"] [uri "/xmlrpc.php"] [unique_id "ary0VryZ9IcLq1oV6pfP3QAAAGo"]
[Wed Sep 30 01:03:50.739440 2026] [security2:error] [pid 212454:tid 212642] [client 20.214.151.17:9772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/13k.php"] [unique_id "ary0VryZ9IcLq1oV6pfP6QAAADo"]
[Wed Sep 30 01:03:50.740008 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.740355 2026] [access_compat:error] [pid 212454:tid 212601] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.831849 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.832144 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:50.855412 2026] [security2:error] [pid 212454:tid 212628] [client 82.102.18.126:52230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0VryZ9IcLq1oV6pfP7gAAACw"]
[Wed Sep 30 01:03:50.878711 2026] [core:error] [pid 212454:tid 212654] [client 44.219.111.44:54270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:50.878736 2026] [core:error] [pid 212454:tid 212654] [client 44.219.111.44:54270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:03:50.922787 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:50.923071 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.016936 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.017317 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.031131 2026] [security2:error] [pid 212454:tid 212597] [client 20.219.2.60:19397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary0V7yZ9IcLq1oV6pfP_AAAAA0"]
[Wed Sep 30 01:03:51.039917 2026] [security2:error] [pid 212454:tid 212675] [client 20.214.151.17:9788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/up.php"] [unique_id "ary0V7yZ9IcLq1oV6pfP_gAAAFs"]
[Wed Sep 30 01:03:51.103520 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.103789 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.167285 2026] [security2:error] [pid 212454:tid 212622] [client 82.102.18.126:52236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0V7yZ9IcLq1oV6pfQAwAAACY"]
[Wed Sep 30 01:03:51.190498 2026] [access_compat:error] [pid 212454:tid 212590] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:03:51.190753 2026] [access_compat:error] [pid 212454:tid 212590] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3
[Wed Sep 30 01:03:51.194157 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.194412 2026] [access_compat:error] [pid 212454:tid 212660] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.236152 2026] [security2:error] [pid 212454:tid 212479] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQBwAAQRg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302246&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:51.236180 2026] [security2:error] [pid 212454:tid 212479] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQBwAAQRg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302246&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:51.244972 2026] [security2:error] [pid 212454:tid 212614] [client 152.59.169.65:56759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQCAAAAB4"]
[Wed Sep 30 01:03:51.245121 2026] [security2:error] [pid 212454:tid 212614] [client 152.59.169.65:56759] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQCAAAAB4"]
[Wed Sep 30 01:03:51.264746 2026] [security2:error] [pid 212454:tid 212667] [client 20.214.109.68:9887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-blogs.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQCQAAAFM"]
[Wed Sep 30 01:03:51.285436 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.285698 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.323081 2026] [security2:error] [pid 212454:tid 212640] [client 84.17.60.236:55362] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0V7yZ9IcLq1oV6pfQDAAAADg"]
[Wed Sep 30 01:03:51.377231 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.377491 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.468274 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.468531 2026] [access_compat:error] [pid 212454:tid 212697] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.481625 2026] [security2:error] [pid 212454:tid 212511] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQEgAAVDg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297725&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:51.481650 2026] [security2:error] [pid 212454:tid 212511] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQEgAAVDg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297725&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:51.482161 2026] [security2:error] [pid 212454:tid 212705] [client 82.102.18.126:52238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0V7yZ9IcLq1oV6pfQEwAAAHk"]
[Wed Sep 30 01:03:51.491514 2026] [security2:error] [pid 212454:tid 212600] [client 20.198.74.230:23884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/gEeSoXdefault.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQFAAAABA"]
[Wed Sep 30 01:03:51.559324 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.559586 2026] [access_compat:error] [pid 212454:tid 212682] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.615025 2026] [security2:error] [pid 212454:tid 212631] [client 20.214.151.17:10011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/0x1949.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQGQAAAC8"]
[Wed Sep 30 01:03:51.651263 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.651574 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.660449 2026] [access_compat:error] [pid 212454:tid 212629] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 01:03:51.660711 2026] [access_compat:error] [pid 212454:tid 212629] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 01:03:51.711734 2026] [security2:error] [pid 212454:tid 212603] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0V7yZ9IcLq1oV6pfQJQAAABM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:51.739965 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.740236 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.783368 2026] [security2:error] [pid 212454:tid 212469] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQKQAAUg4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301849&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:03:51.783395 2026] [security2:error] [pid 212454:tid 212469] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQKQAAUg4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301849&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:03:51.791411 2026] [security2:error] [pid 212454:tid 212651] [client 82.102.18.126:52244] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0V7yZ9IcLq1oV6pfQKgAAAEM"]
[Wed Sep 30 01:03:51.836910 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.837187 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.856843 2026] [security2:error] [pid 212454:tid 212607] [client 172.232.97.149:60742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.central-fuerth.de"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "ary0V7yZ9IcLq1oV6pfQLAAAABc"]
[Wed Sep 30 01:03:51.927376 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:51.927626 2026] [access_compat:error] [pid 212454:tid 212679] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:51.972527 2026] [security2:error] [pid 212454:tid 212688] [client 84.17.60.236:55376] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0V7yZ9IcLq1oV6pfQOwAAAGg"]
[Wed Sep 30 01:03:52.018511 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.018767 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.033598 2026] [security2:error] [pid 212454:tid 212650] [client 122.173.27.10:12128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQQQAAAEI"]
[Wed Sep 30 01:03:52.033675 2026] [security2:error] [pid 212454:tid 212650] [client 122.173.27.10:12128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQQQAAAEI"]
[Wed Sep 30 01:03:52.110696 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.111062 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.126017 2026] [security2:error] [pid 212454:tid 212703] [client 82.102.18.126:52246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0WLyZ9IcLq1oV6pfQRwAAAHc"]
[Wed Sep 30 01:03:52.141100 2026] [access_compat:error] [pid 212454:tid 212652] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:52.141360 2026] [access_compat:error] [pid 212454:tid 212652] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:52.200841 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.201125 2026] [access_compat:error] [pid 212454:tid 212586] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.291713 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.292018 2026] [access_compat:error] [pid 212454:tid 212676] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.323543 2026] [security2:error] [pid 212454:tid 212677] [client 20.214.109.68:61167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/zlnckdxn.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQTgAAAF0"]
[Wed Sep 30 01:03:52.383022 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.383384 2026] [access_compat:error] [pid 212454:tid 212606] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.420049 2026] [security2:error] [pid 212454:tid 212662] [client 155.190.6.18:56730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQUwAAAE4"]
[Wed Sep 30 01:03:52.444344 2026] [security2:error] [pid 212454:tid 212682] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary0WLyZ9IcLq1oV6pfQVgAAAGI"]
[Wed Sep 30 01:03:52.466616 2026] [security2:error] [pid 212454:tid 212696] [client 82.102.18.126:52256] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0WLyZ9IcLq1oV6pfQWAAAAHA"]
[Wed Sep 30 01:03:52.472508 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.472790 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.518756 2026] [security2:error] [pid 212454:tid 212671] [client 20.214.151.17:14505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/cong.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQXAAAAFc"]
[Wed Sep 30 01:03:52.566272 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.566527 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:15027] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.631670 2026] [security2:error] [pid 212454:tid 212705] [client 84.17.60.236:55380] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0WLyZ9IcLq1oV6pfQYQAAAHk"]
[Wed Sep 30 01:03:52.651018 2026] [security2:error] [pid 212454:tid 212587] [client 216.73.216.46:15027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WLyZ9IcLq1oV6pfQYgAAAAM"]
[Wed Sep 30 01:03:52.691508 2026] [security2:error] [pid 212454:tid 212591] [client 142.147.145.185:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0WLyZ9IcLq1oV6pfQaAAAAAc"]
[Wed Sep 30 01:03:52.694032 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:03:52.694333 2026] [access_compat:error] [pid 212454:tid 212615] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIz
[Wed Sep 30 01:03:52.702551 2026] [security2:error] [pid 212454:tid 212662] [client 155.190.6.18:56730] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQUwAAAE4"]
[Wed Sep 30 01:03:52.748648 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.748913 2026] [access_compat:error] [pid 212454:tid 212635] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.814058 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvbGliL3N5c3RlbWQ%3D
[Wed Sep 30 01:03:52.814324 2026] [access_compat:error] [pid 212454:tid 212686] [client 216.73.216.46:19033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvbGliL3N5c3RlbWQ%3D
[Wed Sep 30 01:03:52.814658 2026] [security2:error] [pid 212454:tid 212680] [client 4.240.25.22:30730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQcgAAAGA"]
[Wed Sep 30 01:03:52.823364 2026] [security2:error] [pid 212454:tid 212700] [client 82.102.18.126:52260] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.kingdomsafe.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0WLyZ9IcLq1oV6pfQcwAAAHQ"]
[Wed Sep 30 01:03:52.846061 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.151.17:14520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/bs1.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQdQAAACY"]
[Wed Sep 30 01:03:52.854679 2026] [security2:error] [pid 212454:tid 212505] [remote 74.7.227.56:46464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0WLyZ9IcLq1oV6pfQeAAAPTI"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:03:52.893375 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:52.893636 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:52.926507 2026] [security2:error] [pid 212454:tid 212649] [client 216.73.216.46:19033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WLyZ9IcLq1oV6pfQewAAAEE"]
[Wed Sep 30 01:03:52.954855 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvY2xvY2tldmVudHM%3D
[Wed Sep 30 01:03:52.955114 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvY2xvY2tldmVudHM%3D
[Wed Sep 30 01:03:53.044567 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.044872 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.135485 2026] [security2:error] [pid 212454:tid 212693] [client 103.168.67.253:14886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQhQAAAG0"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:53.165784 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:32277] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.166061 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:32277] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.173513 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:53.173796 2026] [access_compat:error] [pid 212454:tid 212608] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:53.240595 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.151.17:14501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQiQAAAAo"]
[Wed Sep 30 01:03:53.261547 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:52022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.261994 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:52022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.282792 2026] [security2:error] [pid 212454:tid 212625] [client 103.168.67.253:14900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQjAAAACk"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:53.286232 2026] [security2:error] [pid 212454:tid 212667] [client 84.17.60.236:55384] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0WbyZ9IcLq1oV6pfQjQAAAFM"]
[Wed Sep 30 01:03:53.342566 2026] [security2:error] [pid 212454:tid 212631] [client 216.73.216.46:22117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WbyZ9IcLq1oV6pfQmAAAAC8"]
[Wed Sep 30 01:03:53.342589 2026] [security2:error] [pid 212454:tid 212697] [client 216.73.216.46:32277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQmQAAAHE"], referer: http://www.homs.co.ke/?action=adminer&p=L2xpYjY0L3Nzc2QvbW9kdWxlcw%3D%3D
[Wed Sep 30 01:03:53.354973 2026] [security2:error] [pid 212454:tid 212669] [client 105.112.178.79:38360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fgc.epx.mybluehost.me"] [uri "/.env"] [unique_id "ary0WbyZ9IcLq1oV6pfQnAAAAFU"]
[Wed Sep 30 01:03:53.388452 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.388721 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.485424 2026] [security2:error] [pid 212454:tid 212598] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0WbyZ9IcLq1oV6pfQoQAAAA4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:53.487402 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.487675 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.530005 2026] [security2:error] [pid 212454:tid 212591] [client 20.214.151.17:9757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/termps.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQowAAAAc"]
[Wed Sep 30 01:03:53.548736 2026] [security2:error] [pid 212454:tid 212623] [client 4.196.65.241:64167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/0mzrlfdt.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQpgAAACc"]
[Wed Sep 30 01:03:53.578219 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.578490 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:34157] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.594486 2026] [security2:error] [pid 212454:tid 212621] [client 20.214.109.68:62411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/fs6.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQqQAAACU"]
[Wed Sep 30 01:03:53.663802 2026] [security2:error] [pid 212454:tid 212657] [client 216.73.216.46:52022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WbyZ9IcLq1oV6pfQsAAAAEk"]
[Wed Sep 30 01:03:53.724528 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 01:03:53.724792 2026] [access_compat:error] [pid 212454:tid 212695] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 01:03:53.765237 2026] [security2:error] [pid 212454:tid 212609] [client 216.73.216.46:34157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQugAAABk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvd2lyZXBsdW1iZXIvc2NyaXB0cy9saWI%3D
[Wed Sep 30 01:03:53.813040 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.813300 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.827038 2026] [security2:error] [pid 212454:tid 212611] [client 20.214.151.17:14472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/brand.php"] [unique_id "ary0WbyZ9IcLq1oV6pfQvwAAABs"]
[Wed Sep 30 01:03:53.904638 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:23166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.904941 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:23166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:53.937958 2026] [security2:error] [pid 212454:tid 212683] [client 84.17.60.236:55398] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0WbyZ9IcLq1oV6pfQzAAAAGM"]
[Wed Sep 30 01:03:53.944898 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:53.945213 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.032450 2026] [security2:error] [pid 212454:tid 212678] [client 20.214.145.90:38368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ0QAAAF4"]
[Wed Sep 30 01:03:54.034308 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.034550 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.125677 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.125994 2026] [access_compat:error] [pid 212454:tid 212603] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.141594 2026] [access_compat:error] [pid 212454:tid 212629] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:03:54.141875 2026] [access_compat:error] [pid 212454:tid 212629] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:03:54.143490 2026] [security2:error] [pid 212454:tid 212606] [client 20.214.151.17:14479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/atomlib.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ1wAAABY"]
[Wed Sep 30 01:03:54.159857 2026] [security2:error] [pid 212454:tid 212680] [client 116.197.133.25:65371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ2QAAAGA"]
[Wed Sep 30 01:03:54.159964 2026] [security2:error] [pid 212454:tid 212680] [client 116.197.133.25:65371] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ2QAAAGA"]
[Wed Sep 30 01:03:54.212845 2026] [security2:error] [pid 212454:tid 212598] [client 181.87.139.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0WryZ9IcLq1oV6pfQ3wAAAA4"]
[Wed Sep 30 01:03:54.216439 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.216699 2026] [access_compat:error] [pid 212454:tid 212690] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.228684 2026] [security2:error] [pid 212454:tid 212672] [client 105.112.178.79:38363] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tnv.imz.mybluehost.me"] [uri "/__ss_probe_fbd4a9ecb01bee647cfcb0a4ff578545__"] [unique_id "ary0WryZ9IcLq1oV6pfQ4AAAAFg"]
[Wed Sep 30 01:03:54.242242 2026] [security2:error] [pid 212454:tid 212689] [client 152.59.165.7:55131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ4gAAAGk"]
[Wed Sep 30 01:03:54.242327 2026] [security2:error] [pid 212454:tid 212689] [client 152.59.165.7:55131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ4gAAAGk"]
[Wed Sep 30 01:03:54.281680 2026] [security2:error] [pid 212454:tid 212639] [client 202.179.95.79:55049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ6QAAADc"]
[Wed Sep 30 01:03:54.281763 2026] [security2:error] [pid 212454:tid 212639] [client 202.179.95.79:55049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ6QAAADc"]
[Wed Sep 30 01:03:54.296352 2026] [security2:error] [pid 212454:tid 212594] [client 201.32.215.149:6231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ6gAAAAo"]
[Wed Sep 30 01:03:54.296427 2026] [security2:error] [pid 212454:tid 212594] [client 201.32.215.149:6231] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ6gAAAAo"]
[Wed Sep 30 01:03:54.307428 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.307707 2026] [access_compat:error] [pid 212454:tid 212654] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.312461 2026] [security2:error] [pid 212454:tid 212686] [client 20.214.145.90:43429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ7QAAAGY"]
[Wed Sep 30 01:03:54.317350 2026] [security2:error] [pid 212454:tid 212616] [client 20.214.109.68:9428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/xwzs.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ7gAAACA"]
[Wed Sep 30 01:03:54.397086 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:23166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.397350 2026] [access_compat:error] [pid 212454:tid 212590] [client 216.73.216.46:23166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.424518 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.151.17:9791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/product.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ9gAAADQ"]
[Wed Sep 30 01:03:54.436802 2026] [security2:error] [pid 212454:tid 212677] [client 151.242.30.238:59236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "graphicdesignmmd.com"] [uri "/.env"] [unique_id "ary0WryZ9IcLq1oV6pfQ9wAAAF0"]
[Wed Sep 30 01:03:54.465389 2026] [security2:error] [pid 212454:tid 212685] [client 116.193.128.26:49517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ-AAAAGU"]
[Wed Sep 30 01:03:54.465469 2026] [security2:error] [pid 212454:tid 212685] [client 116.193.128.26:49517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfQ-AAAAGU"]
[Wed Sep 30 01:03:54.485682 2026] [security2:error] [pid 212454:tid 212673] [client 64.227.188.205:57006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0WryZ9IcLq1oV6pfQ-gAAAFk"]
[Wed Sep 30 01:03:54.539960 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.540234 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.547686 2026] [security2:error] [pid 212454:tid 212631] [client 223.181.60.167:1371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRAwAAAC8"]
[Wed Sep 30 01:03:54.547788 2026] [security2:error] [pid 212454:tid 212631] [client 223.181.60.167:1371] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRAwAAAC8"]
[Wed Sep 30 01:03:54.576445 2026] [security2:error] [pid 212454:tid 212625] [client 216.73.216.46:23166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0WryZ9IcLq1oV6pfRBgAAACk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbGljZW5zZXMvZ2RibS1saWJz
[Wed Sep 30 01:03:54.583272 2026] [security2:error] [pid 212454:tid 212623] [client 84.17.60.236:55410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0WryZ9IcLq1oV6pfRBwAAACc"]
[Wed Sep 30 01:03:54.625481 2026] [security2:error] [pid 212454:tid 212588] [client 20.214.145.90:43395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/atomlib.php"] [unique_id "ary0WryZ9IcLq1oV6pfRCAAAAAQ"]
[Wed Sep 30 01:03:54.626317 2026] [security2:error] [pid 212454:tid 212596] [client 216.73.216.46:1769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WryZ9IcLq1oV6pfRCQAAAAw"]
[Wed Sep 30 01:03:54.633854 2026] [security2:error] [pid 212454:tid 212682] [client 203.122.45.246:65194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRCgAAAGI"]
[Wed Sep 30 01:03:54.633939 2026] [security2:error] [pid 212454:tid 212682] [client 203.122.45.246:65194] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRCgAAAGI"]
[Wed Sep 30 01:03:54.671399 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.671668 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.680439 2026] [access_compat:error] [pid 212454:tid 212612] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:03:54.680698 2026] [access_compat:error] [pid 212454:tid 212612] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:03:54.766584 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.767027 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:35770] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.786484 2026] [security2:error] [pid 212454:tid 212637] [client 20.214.151.17:14477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/function.php"] [unique_id "ary0WryZ9IcLq1oV6pfRGQAAADU"]
[Wed Sep 30 01:03:54.847799 2026] [security2:error] [pid 212454:tid 212601] [client 216.73.216.46:35770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0WryZ9IcLq1oV6pfRHQAAABE"]
[Wed Sep 30 01:03:54.862515 2026] [security2:error] [pid 212454:tid 212660] [client 49.43.163.212:61789] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRHgAAAEw"]
[Wed Sep 30 01:03:54.862626 2026] [security2:error] [pid 212454:tid 212660] [client 49.43.163.212:61789] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0WryZ9IcLq1oV6pfRHgAAAEw"]
[Wed Sep 30 01:03:54.939665 2026] [security2:error] [pid 212454:tid 212617] [client 20.214.145.90:43443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/a.php"] [unique_id "ary0WryZ9IcLq1oV6pfRIwAAACE"]
[Wed Sep 30 01:03:54.949795 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:54.950229 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:54.958276 2026] [security2:error] [pid 212454:tid 212616] [client 20.219.2.60:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/schallfuns.php"] [unique_id "ary0WryZ9IcLq1oV6pfRJQAAACA"]
[Wed Sep 30 01:03:55.036794 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.037076 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.099153 2026] [security2:error] [pid 212454:tid 212707] [client 103.159.192.142:50759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRLwAAAHs"]
[Wed Sep 30 01:03:55.099244 2026] [security2:error] [pid 212454:tid 212707] [client 103.159.192.142:50759] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRLwAAAHs"]
[Wed Sep 30 01:03:55.178959 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.179212 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.182914 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:03:55.183171 2026] [access_compat:error] [pid 212454:tid 212653] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:03:55.191163 2026] [autoindex:error] [pid 212454:tid 212538] [remote 74.7.241.13:41412] AH01276: Cannot serve directory /home4/koxsulmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:03:55.198208 2026] [security2:error] [pid 212454:tid 212676] [client 64.227.188.205:57022] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0W7yZ9IcLq1oV6pfRNQAAAFw"]
[Wed Sep 30 01:03:55.225350 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.225616 2026] [access_compat:error] [pid 212454:tid 212685] [client 216.73.216.46:22382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.239255 2026] [security2:error] [pid 212454:tid 212594] [client 84.17.60.236:55418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0W7yZ9IcLq1oV6pfROgAAAAo"]
[Wed Sep 30 01:03:55.251937 2026] [security2:error] [pid 212454:tid 212608] [client 20.214.145.90:43436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/v.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRPQAAABg"]
[Wed Sep 30 01:03:55.318415 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.318680 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.340211 2026] [security2:error] [pid 212454:tid 212695] [client 20.214.151.17:14508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/0x.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRSAAAAG8"]
[Wed Sep 30 01:03:55.405794 2026] [security2:error] [pid 212454:tid 212638] [client 216.73.216.46:22382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRTAAAADY"], referer: http://www.homs.co.ke/?action=adminer&p=L3Vzci9saWIvZmlyZXdhbGxkL3pvbmVz
[Wed Sep 30 01:03:55.411478 2026] [security2:error] [pid 212454:tid 212661] [client 4.196.65.241:64147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/nmd.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRTQAAAE0"]
[Wed Sep 30 01:03:55.466277 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.466705 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.471269 2026] [security2:error] [pid 212454:tid 212672] [client 20.214.109.68:61140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRUQAAAFg"]
[Wed Sep 30 01:03:55.499976 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.500231 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.517260 2026] [security2:error] [pid 212454:tid 212689] [client 20.214.145.90:43446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/d2.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRUwAAAGk"]
[Wed Sep 30 01:03:55.577221 2026] [security2:error] [pid 212454:tid 212660] [client 104.208.65.139:40996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/blacks.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRWAAAAEw"]
[Wed Sep 30 01:03:55.590255 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.590519 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.682644 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.682921 2026] [access_compat:error] [pid 212454:tid 212641] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.688981 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:03:55.689248 2026] [access_compat:error] [pid 212454:tid 212708] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:03:55.777747 2026] [security2:error] [pid 212454:tid 212656] [client 103.168.67.253:14904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRZAAAAEg"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:55.778311 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.778757 2026] [access_compat:error] [pid 212454:tid 212604] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.862052 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.862311 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.872101 2026] [security2:error] [pid 212454:tid 212653] [client 20.214.145.90:43392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/xc.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRbAAAAEU"]
[Wed Sep 30 01:03:55.883871 2026] [security2:error] [pid 212454:tid 212601] [client 84.17.60.236:55422] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0W7yZ9IcLq1oV6pfRbQAAABE"]
[Wed Sep 30 01:03:55.887523 2026] [security2:error] [pid 212454:tid 212650] [client 64.227.188.205:57036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0W7yZ9IcLq1oV6pfRbgAAAEI"]
[Wed Sep 30 01:03:55.906967 2026] [security2:error] [pid 212454:tid 212676] [client 20.198.74.230:24129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ebkid.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRbwAAAFw"]
[Wed Sep 30 01:03:55.954464 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:55.954813 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:55.963207 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.109.68:61162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws66.php"] [unique_id "ary0W7yZ9IcLq1oV6pfRdgAAAA8"]
[Wed Sep 30 01:03:55.973270 2026] [security2:error] [pid 212454:tid 212652] [client 20.194.30.107:17524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/inputs.php"] [unique_id "ary0W7yZ9IcLq1oV6pfReAAAAEQ"]
[Wed Sep 30 01:03:56.046973 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.047408 2026] [access_compat:error] [pid 212454:tid 212613] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.092208 2026] [security2:error] [pid 212454:tid 212699] [client 103.168.67.253:22098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRfgAAAHM"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:56.135107 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.135355 2026] [access_compat:error] [pid 212454:tid 212629] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.138985 2026] [lsapi:warn] [pid 212454:tid 212545] [remote 40.77.167.230:62038] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 01:03:56.139296 2026] [lsapi:warn] [pid 212454:tid 212545] [remote 40.77.167.230:62038] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 01:03:56.166069 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.145.90:38381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/g.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRhgAAAGM"]
[Wed Sep 30 01:03:56.182135 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:03:56.182396 2026] [access_compat:error] [pid 212454:tid 212587] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3
[Wed Sep 30 01:03:56.226920 2026] [security2:error] [pid 212454:tid 212624] [client 20.214.151.17:14476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/index.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRiwAAACg"]
[Wed Sep 30 01:03:56.228713 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.229042 2026] [access_compat:error] [pid 212454:tid 212633] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.261406 2026] [security2:error] [pid 212454:tid 212606] [client 4.240.25.22:20337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/reviall.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRjQAAABY"]
[Wed Sep 30 01:03:56.317586 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.317864 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.332496 2026] [access_compat:error] [pid 212454:tid 212570] [remote 17.166.23.165:36232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.332967 2026] [access_compat:error] [pid 212454:tid 212570] [remote 17.166.23.165:36232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.343694 2026] [access_compat:error] [pid 212454:tid 212588] [client 47.79.13.75:43274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:56.344109 2026] [access_compat:error] [pid 212454:tid 212588] [client 47.79.13.75:43274] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:56.392115 2026] [core:error] [pid 212454:tid 212709] [client 104.207.47.127:33917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:56.392134 2026] [core:error] [pid 212454:tid 212709] [client 104.207.47.127:33917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:56.410085 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.410350 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.452660 2026] [security2:error] [pid 212454:tid 212707] [client 20.214.145.90:38392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/gmo.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRnwAAAHs"]
[Wed Sep 30 01:03:56.500593 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.500893 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.506615 2026] [security2:error] [pid 212454:tid 212695] [client 43.227.131.37:28500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRogAAAG8"]
[Wed Sep 30 01:03:56.506741 2026] [security2:error] [pid 212454:tid 212695] [client 43.227.131.37:28500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRogAAAG8"]
[Wed Sep 30 01:03:56.545664 2026] [security2:error] [pid 212454:tid 212637] [client 84.17.60.236:55434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0XLyZ9IcLq1oV6pfRowAAADU"]
[Wed Sep 30 01:03:56.596597 2026] [security2:error] [pid 212454:tid 212686] [client 64.227.188.205:57038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0XLyZ9IcLq1oV6pfRpQAAAGY"]
[Wed Sep 30 01:03:56.618110 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.618393 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.671286 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:03:56.671759 2026] [access_compat:error] [pid 212454:tid 212589] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:03:56.695295 2026] [security2:error] [pid 212454:tid 212601] [client 180.92.158.152:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary0XLyZ9IcLq1oV6pfRsQAAABE"]
[Wed Sep 30 01:03:56.700115 2026] [security2:error] [pid 212454:tid 212677] [client 43.132.215.237:40668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.215.132.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRrwAAAF0"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 01:03:56.736048 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:7947] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.736305 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:7947] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.769732 2026] [security2:error] [pid 212454:tid 212649] [client 20.214.145.90:38366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/11.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRtQAAAEE"]
[Wed Sep 30 01:03:56.775191 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.775449 2026] [access_compat:error] [pid 212454:tid 212623] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.812044 2026] [security2:error] [pid 212454:tid 212660] [client 49.205.105.16:14992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRvgAAAEw"]
[Wed Sep 30 01:03:56.812164 2026] [security2:error] [pid 212454:tid 212660] [client 49.205.105.16:14992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRvgAAAEw"]
[Wed Sep 30 01:03:56.826958 2026] [security2:error] [pid 212454:tid 212689] [client 106.214.2.47:4886] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRuAAAAGk"]
[Wed Sep 30 01:03:56.865244 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:56.865509 2026] [access_compat:error] [pid 212454:tid 212670] [client 216.73.216.46:1951] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:56.867094 2026] [security2:error] [pid 212454:tid 212696] [client 20.219.2.60:18893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/CDX1.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRxAAAAHA"]
[Wed Sep 30 01:03:56.920952 2026] [security2:error] [pid 212454:tid 212646] [client 105.112.178.79:38362] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.ffu.bzy.mybluehost.me"] [uri "/.env"] [unique_id "ary0XLyZ9IcLq1oV6pfRxwAAAD4"]
[Wed Sep 30 01:03:56.949713 2026] [security2:error] [pid 212454:tid 212665] [client 216.73.216.46:1951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0XLyZ9IcLq1oV6pfRyAAAAFE"]
[Wed Sep 30 01:03:56.996345 2026] [security2:error] [pid 212454:tid 212671] [client 20.214.109.68:61147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ewe.php"] [unique_id "ary0XLyZ9IcLq1oV6pfRygAAAFc"]
[Wed Sep 30 01:03:57.041472 2026] [security2:error] [pid 212454:tid 212639] [client 216.73.216.46:7947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0XbyZ9IcLq1oV6pfRzQAAADc"]
[Wed Sep 30 01:03:57.131539 2026] [security2:error] [pid 212454:tid 212688] [client 20.214.145.90:38380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/20.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR0QAAAGg"]
[Wed Sep 30 01:03:57.139618 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.139925 2026] [access_compat:error] [pid 212454:tid 212595] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.190101 2026] [access_compat:error] [pid 212454:tid 212619] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:03:57.190359 2026] [access_compat:error] [pid 212454:tid 212619] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:03:57.192440 2026] [security2:error] [pid 212454:tid 212600] [client 84.17.60.236:55444] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0XbyZ9IcLq1oV6pfR1gAAABA"]
[Wed Sep 30 01:03:57.229789 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.230083 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.240127 2026] [core:error] [pid 212454:tid 212606] [client 65.111.6.57:56905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:57.240143 2026] [core:error] [pid 212454:tid 212606] [client 65.111.6.57:56905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:57.262978 2026] [security2:error] [pid 212454:tid 212678] [client 49.36.41.37:53137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR2QAAAF4"]
[Wed Sep 30 01:03:57.263067 2026] [security2:error] [pid 212454:tid 212678] [client 49.36.41.37:53137] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR2QAAAF4"]
[Wed Sep 30 01:03:57.303946 2026] [security2:error] [pid 212454:tid 212586] [client 64.227.188.205:57042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0XbyZ9IcLq1oV6pfR3AAAAAI"]
[Wed Sep 30 01:03:57.320403 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.320711 2026] [access_compat:error] [pid 212454:tid 212695] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.366649 2026] [security2:error] [pid 212454:tid 212682] [client 223.235.102.107:12434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR4AAAAGI"]
[Wed Sep 30 01:03:57.366835 2026] [security2:error] [pid 212454:tid 212682] [client 223.235.102.107:12434] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR4AAAAGI"]
[Wed Sep 30 01:03:57.410453 2026] [security2:error] [pid 212454:tid 212589] [client 20.214.145.90:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/f35.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR5QAAAAU"]
[Wed Sep 30 01:03:57.412296 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.412578 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.422494 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.151.17:9758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR5gAAAHY"]
[Wed Sep 30 01:03:57.503967 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.504266 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.618700 2026] [security2:error] [pid 212454:tid 212457] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR8QAAEgI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D64660
[Wed Sep 30 01:03:57.659395 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:03:57.659649 2026] [access_compat:error] [pid 212454:tid 212598] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:03:57.705758 2026] [security2:error] [pid 212454:tid 212684] [client 20.214.145.90:38393] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/1.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR9QAAAGQ"]
[Wed Sep 30 01:03:57.705873 2026] [security2:error] [pid 212454:tid 212684] [client 20.214.145.90:38393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/1.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR9QAAAGQ"]
[Wed Sep 30 01:03:57.773849 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.774122 2026] [access_compat:error] [pid 212454:tid 212611] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.820617 2026] [security2:error] [pid 212454:tid 212592] [client 45.138.12.48:39596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ata.hfj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR_wAAAAg"]
[Wed Sep 30 01:03:57.837777 2026] [security2:error] [pid 212454:tid 212635] [client 84.17.60.236:55458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0XbyZ9IcLq1oV6pfSBAAAADM"]
[Wed Sep 30 01:03:57.867020 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.867442 2026] [access_compat:error] [pid 212454:tid 212643] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.894755 2026] [security2:error] [pid 212454:tid 212644] [client 213.135.6.58:34228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.6.135.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kshar.net"] [uri "/wp-login.php"] [unique_id "ary0XbyZ9IcLq1oV6pfSDQAAADw"]
[Wed Sep 30 01:03:57.901676 2026] [security2:error] [pid 212454:tid 212616] [client 20.214.151.17:14471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/classwithtostring.php"] [unique_id "ary0XbyZ9IcLq1oV6pfSDgAAACA"]
[Wed Sep 30 01:03:57.954925 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:57.955194 2026] [access_compat:error] [pid 212454:tid 212632] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:57.973441 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.145.90:43432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/c.php"] [unique_id "ary0XbyZ9IcLq1oV6pfSEgAAAH4"]
[Wed Sep 30 01:03:57.995025 2026] [security2:error] [pid 212454:tid 212703] [client 64.227.188.205:38330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0XbyZ9IcLq1oV6pfSEwAAAHc"]
[Wed Sep 30 01:03:58.046570 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.046851 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.055732 2026] [security2:error] [pid 212454:tid 212677] [client 74.7.244.52:35424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "dse.net"] [uri "/index.php"] [unique_id "ary0XbyZ9IcLq1oV6pfR6gAAXWw"]
[Wed Sep 30 01:03:58.101982 2026] [security2:error] [pid 212454:tid 212679] [client 58.127.77.173:57380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.77.127.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary0XryZ9IcLq1oV6pfSGQAAAF8"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:03:58.124957 2026] [core:error] [pid 212454:tid 212621] [client 65.111.0.159:40183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:58.124977 2026] [core:error] [pid 212454:tid 212621] [client 65.111.0.159:40183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:03:58.138863 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.139161 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.168198 2026] [security2:error] [pid 212454:tid 212597] [client 20.214.151.17:10097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/dropdown.php"] [unique_id "ary0XryZ9IcLq1oV6pfSHwAAAA0"]
[Wed Sep 30 01:03:58.191184 2026] [access_compat:error] [pid 212454:tid 212694] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:58.191475 2026] [access_compat:error] [pid 212454:tid 212694] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:03:58.201293 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMva2VybmVsL3NsYWIvbWFwbGVfbm9kZQ%3D%3D
[Wed Sep 30 01:03:58.201562 2026] [access_compat:error] [pid 212454:tid 212584] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9zeXMva2VybmVsL3NsYWIvbWFwbGVfbm9kZQ%3D%3D
[Wed Sep 30 01:03:58.211701 2026] [security2:error] [pid 212454:tid 212686] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0XryZ9IcLq1oV6pfSJAAAAGY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:58.244109 2026] [security2:error] [pid 212454:tid 212667] [client 4.196.65.241:19457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/dhlcu.php"] [unique_id "ary0XryZ9IcLq1oV6pfSJwAAAFM"]
[Wed Sep 30 01:03:58.268856 2026] [security2:error] [pid 212454:tid 212614] [client 103.168.67.253:22110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0XryZ9IcLq1oV6pfSKAAAAB4"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:58.281225 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.281501 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.297571 2026] [security2:error] [pid 212454:tid 212463] [remote 74.7.227.17:46816] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0XryZ9IcLq1oV6pfSKgAAJwg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10166&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:58.297602 2026] [security2:error] [pid 212454:tid 212463] [remote 74.7.227.17:46816] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0XryZ9IcLq1oV6pfSKgAAJwg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=10166&sid=9e9507e0e3ca07ed3ad831e205932e37
[Wed Sep 30 01:03:58.320671 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.320973 2026] [access_compat:error] [pid 212454:tid 212609] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.340765 2026] [security2:error] [pid 212454:tid 212613] [client 20.214.145.90:43422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/build.php"] [unique_id "ary0XryZ9IcLq1oV6pfSLQAAAB0"]
[Wed Sep 30 01:03:58.364782 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.109.68:62403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/aboute.php"] [unique_id "ary0XryZ9IcLq1oV6pfSMAAAAHw"]
[Wed Sep 30 01:03:58.411154 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.411425 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.456619 2026] [security2:error] [pid 212454:tid 212699] [client 20.214.151.17:14475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/moon.php"] [unique_id "ary0XryZ9IcLq1oV6pfSNwAAAHM"]
[Wed Sep 30 01:03:58.484048 2026] [security2:error] [pid 212454:tid 212611] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0XryZ9IcLq1oV6pfSOQAAABs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:03:58.486322 2026] [security2:error] [pid 212454:tid 212682] [client 84.17.60.236:38666] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0XryZ9IcLq1oV6pfSOgAAAGI"]
[Wed Sep 30 01:03:58.499151 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvdGFza2ZyZWFr
[Wed Sep 30 01:03:58.499426 2026] [access_compat:error] [pid 212454:tid 212659] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=Ly92YXIvc29mdGFjdWxvdXMvdGFza2ZyZWFr
[Wed Sep 30 01:03:58.501431 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.501700 2026] [access_compat:error] [pid 212454:tid 212642] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.595079 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.595362 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.630313 2026] [security2:error] [pid 212454:tid 212696] [client 180.191.51.162:56984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.51.191.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "concretechn.net"] [uri "/xmlrpc.php"] [unique_id "ary0XryZ9IcLq1oV6pfSSQAAAHA"]
[Wed Sep 30 01:03:58.630427 2026] [security2:error] [pid 212454:tid 212696] [client 180.191.51.162:56984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "concretechn.net"] [uri "/xmlrpc.php"] [unique_id "ary0XryZ9IcLq1oV6pfSSQAAAHA"]
[Wed Sep 30 01:03:58.650170 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.145.90:38390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/bless.php"] [unique_id "ary0XryZ9IcLq1oV6pfSTAAAADE"]
[Wed Sep 30 01:03:58.667148 2026] [access_compat:error] [pid 212454:tid 212664] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:03:58.667405 2026] [access_compat:error] [pid 212454:tid 212664] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1
[Wed Sep 30 01:03:58.684517 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.684825 2026] [access_compat:error] [pid 212454:tid 212710] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.688514 2026] [security2:error] [pid 212454:tid 212697] [client 103.168.67.253:22116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0XryZ9IcLq1oV6pfSUQAAAHE"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:58.708565 2026] [security2:error] [pid 212454:tid 212646] [client 64.227.188.205:38336] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0XryZ9IcLq1oV6pfSUgAAAD4"]
[Wed Sep 30 01:03:58.777075 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.777499 2026] [access_compat:error] [pid 212454:tid 212640] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.867744 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.868043 2026] [access_compat:error] [pid 212454:tid 212680] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:58.870838 2026] [security2:error] [pid 212454:tid 212625] [client 20.214.151.17:14486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/autoload_classmap.php"] [unique_id "ary0XryZ9IcLq1oV6pfSYwAAACk"]
[Wed Sep 30 01:03:58.891182 2026] [security2:error] [pid 212454:tid 212485] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0XryZ9IcLq1oV6pfSZgAAXB4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297785&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:58.891222 2026] [security2:error] [pid 212454:tid 212485] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0XryZ9IcLq1oV6pfSZgAAXB4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297785&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:03:58.930168 2026] [security2:error] [pid 212454:tid 212637] [client 20.214.145.90:38343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/admin/upload/css.php"] [unique_id "ary0XryZ9IcLq1oV6pfSaQAAADU"]
[Wed Sep 30 01:03:58.942988 2026] [security2:error] [pid 212454:tid 212645] [client 20.219.2.60:19414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/clasa99.php"] [unique_id "ary0XryZ9IcLq1oV6pfSbAAAAD0"]
[Wed Sep 30 01:03:58.960802 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:58.961094 2026] [access_compat:error] [pid 212454:tid 212668] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.019293 2026] [security2:error] [pid 212454:tid 212708] [client 20.194.30.107:25877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/yawa.php"] [unique_id "ary0X7yZ9IcLq1oV6pfScQAAAHw"]
[Wed Sep 30 01:03:59.024874 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzgw
[Wed Sep 30 01:03:59.025144 2026] [access_compat:error] [pid 212454:tid 212627] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvaXJxLzgw
[Wed Sep 30 01:03:59.050400 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.050645 2026] [access_compat:error] [pid 212454:tid 212596] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.130582 2026] [security2:error] [pid 212454:tid 212679] [client 84.17.60.236:38678] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0X7yZ9IcLq1oV6pfSeAAAAF8"]
[Wed Sep 30 01:03:59.144412 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.144856 2026] [access_compat:error] [pid 212454:tid 212620] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.158000 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:03:59.158261 2026] [access_compat:error] [pid 212454:tid 212622] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:03:59.221095 2026] [security2:error] [pid 212454:tid 212666] [client 182.69.182.151:27225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSigAAAFI"]
[Wed Sep 30 01:03:59.221422 2026] [security2:error] [pid 212454:tid 212666] [client 182.69.182.151:27225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSigAAAFI"]
[Wed Sep 30 01:03:59.234234 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.234578 2026] [access_compat:error] [pid 212454:tid 212651] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.239055 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.145.90:38371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/lock360.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSjQAAAFE"]
[Wed Sep 30 01:03:59.320861 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.321144 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.347270 2026] [security2:error] [pid 212454:tid 212610] [client 20.214.109.68:61152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/x9.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSlgAAABo"]
[Wed Sep 30 01:03:59.381478 2026] [security2:error] [pid 212454:tid 212694] [client 213.136.69.135:59741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/icons.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSnQAAAG4"], referer: binance.com
[Wed Sep 30 01:03:59.396933 2026] [security2:error] [pid 212454:tid 212608] [client 20.214.151.17:14515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/default.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSoAAAABg"]
[Wed Sep 30 01:03:59.412622 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.412912 2026] [access_compat:error] [pid 212454:tid 212638] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.420220 2026] [security2:error] [pid 212454:tid 212624] [client 64.227.188.205:38342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0X7yZ9IcLq1oV6pfSogAAACg"]
[Wed Sep 30 01:03:59.453727 2026] [security2:error] [pid 212454:tid 212670] [client 45.138.12.43:47336] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.thenerdistheword.ca"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0X7yZ9IcLq1oV6pfSpAAAAFY"]
[Wed Sep 30 01:03:59.456666 2026] [security2:error] [pid 212454:tid 212698] [client 223.181.30.165:32482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSpQAAAHI"]
[Wed Sep 30 01:03:59.456786 2026] [security2:error] [pid 212454:tid 212698] [client 223.181.30.165:32482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSpQAAAHI"]
[Wed Sep 30 01:03:59.502852 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.503114 2026] [access_compat:error] [pid 212454:tid 212708] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.572166 2026] [security2:error] [pid 212454:tid 212653] [client 103.168.67.253:22130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSrwAAAEU"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:59.582678 2026] [access_compat:error] [pid 212454:tid 212643] [client 47.79.13.175:38768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:59.583132 2026] [access_compat:error] [pid 212454:tid 212643] [client 47.79.13.175:38768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:59.583969 2026] [security2:error] [pid 212454:tid 212611] [client 20.214.145.90:38365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/4.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSsQAAABs"]
[Wed Sep 30 01:03:59.595647 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.596098 2026] [access_compat:error] [pid 212454:tid 212671] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.600527 2026] [security2:error] [pid 212454:tid 212669] [client 58.127.77.173:44880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.77.127.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSswAAAFU"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:03:59.642739 2026] [security2:error] [pid 212454:tid 212598] [client 37.41.16.35:53249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfStgAAAA4"]
[Wed Sep 30 01:03:59.642870 2026] [security2:error] [pid 212454:tid 212598] [client 37.41.16.35:53249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0X7yZ9IcLq1oV6pfStgAAAA4"]
[Wed Sep 30 01:03:59.672608 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:03:59.672891 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgy
[Wed Sep 30 01:03:59.685595 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.685879 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.699876 2026] [security2:error] [pid 212454:tid 212587] [client 20.214.151.17:10017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSvgAAAAM"]
[Wed Sep 30 01:03:59.777516 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.777781 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.785482 2026] [security2:error] [pid 212454:tid 212667] [client 84.17.60.236:38692] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0X7yZ9IcLq1oV6pfSxAAAAFM"]
[Wed Sep 30 01:03:59.817993 2026] [security2:error] [pid 212454:tid 212585] [client 172.232.97.149:58677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/gruymtuy.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSxwAAAAE"], referer: www.google.com
[Wed Sep 30 01:03:59.821252 2026] [access_compat:error] [pid 212454:tid 212691] [client 47.79.13.78:50988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:03:59.821534 2026] [access_compat:error] [pid 212454:tid 212691] [client 47.79.13.78:50988] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:03:59.828382 2026] [security2:error] [pid 212454:tid 212664] [client 103.168.67.253:22134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSyQAAAFA"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:03:59.868510 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.868801 2026] [access_compat:error] [pid 212454:tid 212652] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.900944 2026] [security2:error] [pid 212454:tid 212658] [client 20.214.145.90:38339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/about.php"] [unique_id "ary0X7yZ9IcLq1oV6pfSzgAAAEo"]
[Wed Sep 30 01:03:59.960462 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:03:59.960728 2026] [access_compat:error] [pid 212454:tid 212624] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:03:59.962634 2026] [security2:error] [pid 212454:tid 212625] [client 198.13.195.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0X7yZ9IcLq1oV6pfS0gAAACk"]
[Wed Sep 30 01:03:59.977186 2026] [security2:error] [pid 212454:tid 212695] [client 20.214.151.17:10013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary0X7yZ9IcLq1oV6pfS0wAAAG8"]
[Wed Sep 30 01:04:00.137376 2026] [security2:error] [pid 212454:tid 212677] [client 64.227.188.205:38346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0YLyZ9IcLq1oV6pfS5QAAAF0"]
[Wed Sep 30 01:04:00.182841 2026] [security2:error] [pid 212454:tid 212599] [client 20.214.145.90:38364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/r.php"] [unique_id "ary0YLyZ9IcLq1oV6pfS6gAAAA8"]
[Wed Sep 30 01:04:00.221124 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.221377 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.226907 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:04:00.227171 2026] [access_compat:error] [pid 212454:tid 212682] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk0
[Wed Sep 30 01:04:00.373414 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.373691 2026] [access_compat:error] [pid 212454:tid 212600] [client 216.73.216.46:1140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.378670 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.379138 2026] [access_compat:error] [pid 212454:tid 212665] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.441890 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:7278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.442148 2026] [access_compat:error] [pid 212454:tid 212662] [client 216.73.216.46:7278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.442264 2026] [security2:error] [pid 212454:tid 212596] [client 84.17.60.236:38702] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0YLyZ9IcLq1oV6pfS-gAAAAw"]
[Wed Sep 30 01:04:00.455392 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.455644 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.462938 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.109.68:9878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/an.php"] [unique_id "ary0YLyZ9IcLq1oV6pfS_wAAAH4"]
[Wed Sep 30 01:04:00.469740 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.470181 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.558972 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.559250 2026] [access_compat:error] [pid 212454:tid 212591] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.573127 2026] [security2:error] [pid 212454:tid 212633] [client 103.168.67.253:22142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0YLyZ9IcLq1oV6pfTBQAAADE"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:04:00.577127 2026] [security2:error] [pid 212454:tid 212678] [client 20.214.145.90:38345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/v4.php"] [unique_id "ary0YLyZ9IcLq1oV6pfTBgAAAF4"]
[Wed Sep 30 01:04:00.618305 2026] [access_compat:error] [pid 212454:tid 212636] [client 220.181.108.112:39786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.618568 2026] [access_compat:error] [pid 212454:tid 212636] [client 220.181.108.112:39786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.623426 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.151.17:10092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary0YLyZ9IcLq1oV6pfTCAAAAG4"]
[Wed Sep 30 01:04:00.649186 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.649457 2026] [access_compat:error] [pid 212454:tid 212589] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.664646 2026] [security2:error] [pid 212454:tid 212615] [client 20.219.2.60:19442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/myfilexxx.php"] [unique_id "ary0YLyZ9IcLq1oV6pfTDAAAAB8"]
[Wed Sep 30 01:04:00.726848 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:04:00.727143 2026] [access_compat:error] [pid 212454:tid 212670] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:04:00.743877 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.744315 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.830154 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.830419 2026] [access_compat:error] [pid 212454:tid 212626] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:00.850748 2026] [security2:error] [pid 212454:tid 212700] [client 64.227.188.205:38358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0YLyZ9IcLq1oV6pfTGgAAAHQ"]
[Wed Sep 30 01:04:00.910941 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.145.90:43453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-22.php"] [unique_id "ary0YLyZ9IcLq1oV6pfTHAAAAHY"]
[Wed Sep 30 01:04:00.922118 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:00.922409 2026] [access_compat:error] [pid 212454:tid 212699] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.004316 2026] [security2:error] [pid 212454:tid 212598] [client 20.194.30.107:64744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/sym.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTIgAAAA4"]
[Wed Sep 30 01:04:01.012698 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.012977 2026] [access_compat:error] [pid 212454:tid 212703] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.045476 2026] [security2:error] [pid 212454:tid 212606] [client 103.159.192.142:50891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTJQAAABY"]
[Wed Sep 30 01:04:01.045622 2026] [security2:error] [pid 212454:tid 212606] [client 103.159.192.142:50891] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTJQAAABY"]
[Wed Sep 30 01:04:01.100707 2026] [security2:error] [pid 212454:tid 212686] [client 84.17.60.236:38712] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "upnorthcon.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0YbyZ9IcLq1oV6pfTKQAAAGY"]
[Wed Sep 30 01:04:01.104010 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.104455 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.123341 2026] [security2:error] [pid 212454:tid 212631] [client 201.225.235.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0YbyZ9IcLq1oV6pfTKwAAAC8"]
[Wed Sep 30 01:04:01.193790 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.194063 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.206490 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 01:04:01.206763 2026] [access_compat:error] [pid 212454:tid 212649] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAz
[Wed Sep 30 01:04:01.234974 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.145.90:38388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/makeasmtp.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTMgAAAH4"]
[Wed Sep 30 01:04:01.249648 2026] [autoindex:error] [pid 212454:tid 212682] [client 212.156.70.154:62627] AH01276: Cannot serve directory /home4/xoaxccmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:01.253261 2026] [security2:error] [pid 212454:tid 212639] [client 103.241.204.139:54646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTNAAAADc"]
[Wed Sep 30 01:04:01.254003 2026] [security2:error] [pid 212454:tid 212639] [client 103.241.204.139:54646] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTNAAAADc"]
[Wed Sep 30 01:04:01.260961 2026] [security2:error] [pid 212454:tid 212604] [client 52.231.69.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "peoplecapitalglobal.com"] [uri "/.well-known/index.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTNQAAABQ"]
[Wed Sep 30 01:04:01.291655 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.292112 2026] [access_compat:error] [pid 212454:tid 212605] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.349247 2026] [security2:error] [pid 212454:tid 212694] [client 20.214.151.17:14509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/mail.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTPwAAAG4"]
[Wed Sep 30 01:04:01.359662 2026] [security2:error] [pid 212454:tid 212455] [remote 52.167.144.156:57573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-content/cache/autoptimize/autoptimize_single_659b4eeb6e70b8e71e3e4561773a1eb4.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTOwAAZwA"], referer: https://kcd-global.com/product/rtp-cleaner-and-disinfectant-pack-of-6/
[Wed Sep 30 01:04:01.376264 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.376533 2026] [access_compat:error] [pid 212454:tid 212709] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.468124 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.468383 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.525653 2026] [security2:error] [pid 212454:tid 212678] [client 172.232.97.149:56200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-plain.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTSwAAAF4"], referer: www.google.com
[Wed Sep 30 01:04:01.551662 2026] [security2:error] [pid 212454:tid 212629] [client 20.214.145.90:43450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/system_log.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTTAAAAC0"]
[Wed Sep 30 01:04:01.556967 2026] [security2:error] [pid 212454:tid 212688] [client 64.227.188.205:38362] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0YbyZ9IcLq1oV6pfTTgAAAGg"]
[Wed Sep 30 01:04:01.563321 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.563730 2026] [access_compat:error] [pid 212454:tid 212691] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.564961 2026] [security2:error] [pid 212454:tid 212592] [client 4.196.65.241:2084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/tvbxn.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTTwAAAAg"]
[Wed Sep 30 01:04:01.620134 2026] [security2:error] [pid 212454:tid 212624] [client 20.214.151.17:14526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/sx.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTUgAAACg"]
[Wed Sep 30 01:04:01.654080 2026] [security2:error] [pid 212454:tid 212593] [client 52.231.69.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "peoplecapitalglobal.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTVAAAAAk"]
[Wed Sep 30 01:04:01.657397 2026] [security2:error] [pid 212454:tid 212643] [client 20.219.2.60:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/karma_144a.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTVQAAADs"]
[Wed Sep 30 01:04:01.664643 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.664948 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.707035 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:04:01.707289 2026] [access_compat:error] [pid 212454:tid 212671] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:04:01.741763 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.742051 2026] [access_compat:error] [pid 212454:tid 212683] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.770954 2026] [security2:error] [pid 212454:tid 212500] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTYAAADy0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297897&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:01.770991 2026] [security2:error] [pid 212454:tid 212500] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTYAAADy0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297897&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:01.807934 2026] [security2:error] [pid 212454:tid 212642] [client 4.196.65.241:64178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/go.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTYgAAADo"]
[Wed Sep 30 01:04:01.838431 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.838898 2026] [access_compat:error] [pid 212454:tid 212648] [client 216.73.216.46:61358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.861893 2026] [security2:error] [pid 212454:tid 212596] [client 20.214.145.90:38363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/NewFile.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTZQAAAAw"]
[Wed Sep 30 01:04:01.884974 2026] [security2:error] [pid 212454:tid 212649] [client 52.231.69.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "peoplecapitalglobal.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTaAAAAEE"]
[Wed Sep 30 01:04:01.924966 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:01.925245 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:01.967528 2026] [security2:error] [pid 212454:tid 212594] [client 20.214.151.17:9988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary0YbyZ9IcLq1oV6pfTbQAAAAo"]
[Wed Sep 30 01:04:02.019311 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.019613 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.024728 2026] [security2:error] [pid 212454:tid 212694] [client 216.73.216.46:61358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0YryZ9IcLq1oV6pfTcgAAAG4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OC90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:04:02.070926 2026] [security2:error] [pid 212454:tid 212620] [client 152.59.169.65:57331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTdQAAACQ"]
[Wed Sep 30 01:04:02.071029 2026] [security2:error] [pid 212454:tid 212620] [client 152.59.169.65:57331] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTdQAAACQ"]
[Wed Sep 30 01:04:02.104303 2026] [security2:error] [pid 212454:tid 212710] [client 103.168.67.253:22144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/wordpress/index.php"] [unique_id "ary0YryZ9IcLq1oV6pfTeQAAAH4"], referer: https://dobeservices.com/wordpress/wp-admin/
[Wed Sep 30 01:04:02.107101 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.107361 2026] [access_compat:error] [pid 212454:tid 212656] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.173339 2026] [security2:error] [pid 212454:tid 212637] [client 52.231.69.245:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "peoplecapitalglobal.com"] [uri "/.well-known/log.php"] [unique_id "ary0YryZ9IcLq1oV6pfTewAAADU"]
[Wed Sep 30 01:04:02.173498 2026] [security2:error] [pid 212454:tid 212612] [client 20.214.145.90:28225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/t.php"] [unique_id "ary0YryZ9IcLq1oV6pfTfAAAABw"]
[Wed Sep 30 01:04:02.202155 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.202413 2026] [access_compat:error] [pid 212454:tid 212677] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.207245 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:04:02.207484 2026] [access_compat:error] [pid 212454:tid 212688] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEy
[Wed Sep 30 01:04:02.240893 2026] [security2:error] [pid 212454:tid 212669] [client 20.214.151.17:14506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/article.php"] [unique_id "ary0YryZ9IcLq1oV6pfTiQAAAFU"]
[Wed Sep 30 01:04:02.266565 2026] [security2:error] [pid 212454:tid 212654] [client 64.227.188.205:38378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0YryZ9IcLq1oV6pfTjgAAAEY"]
[Wed Sep 30 01:04:02.288668 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.288959 2026] [access_compat:error] [pid 212454:tid 212614] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.380798 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.381132 2026] [access_compat:error] [pid 212454:tid 212622] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.443538 2026] [security2:error] [pid 212454:tid 212635] [client 20.214.109.68:61157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/aboutc.php"] [unique_id "ary0YryZ9IcLq1oV6pfToQAAADM"]
[Wed Sep 30 01:04:02.469444 2026] [security2:error] [pid 212454:tid 212625] [client 20.214.145.90:38382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/ee.php"] [unique_id "ary0YryZ9IcLq1oV6pfTowAAACk"]
[Wed Sep 30 01:04:02.472054 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.472327 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.509093 2026] [security2:error] [pid 212454:tid 212704] [client 20.214.151.17:9776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/link.php"] [unique_id "ary0YryZ9IcLq1oV6pfTpAAAAHg"]
[Wed Sep 30 01:04:02.562642 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.562956 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.653368 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.653691 2026] [access_compat:error] [pid 212454:tid 212588] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.724641 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:04:02.724929 2026] [access_compat:error] [pid 212454:tid 212698] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:04:02.745623 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.746104 2026] [access_compat:error] [pid 212454:tid 212653] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.752917 2026] [security2:error] [pid 212454:tid 212612] [client 20.194.30.107:17380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-filemannger.php"] [unique_id "ary0YryZ9IcLq1oV6pfTtgAAABw"]
[Wed Sep 30 01:04:02.783773 2026] [security2:error] [pid 212454:tid 212691] [client 122.173.27.10:13134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTuAAAAGs"]
[Wed Sep 30 01:04:02.783890 2026] [security2:error] [pid 212454:tid 212691] [client 122.173.27.10:13134] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTuAAAAGs"]
[Wed Sep 30 01:04:02.799785 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.145.90:28304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/2.php"] [unique_id "ary0YryZ9IcLq1oV6pfTuwAAADk"]
[Wed Sep 30 01:04:02.817763 2026] [security2:error] [pid 212454:tid 212700] [client 20.214.151.17:9754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/lock360.php"] [unique_id "ary0YryZ9IcLq1oV6pfTvAAAAHQ"]
[Wed Sep 30 01:04:02.835875 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.836125 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.886624 2026] [security2:error] [pid 212454:tid 212686] [client 155.190.6.18:42212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTvwAAAGY"]
[Wed Sep 30 01:04:02.927943 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:02.928199 2026] [access_compat:error] [pid 212454:tid 212593] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:02.975102 2026] [security2:error] [pid 212454:tid 212618] [client 64.227.188.205:38390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0YryZ9IcLq1oV6pfTyAAAACI"]
[Wed Sep 30 01:04:03.020150 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.020435 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.035834 2026] [security2:error] [pid 212454:tid 212683] [client 20.214.109.68:9411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gdn.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfTygAAAGM"]
[Wed Sep 30 01:04:03.103236 2026] [security2:error] [pid 212454:tid 212585] [client 20.214.151.17:9737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-trackback.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfTzwAAAAE"]
[Wed Sep 30 01:04:03.109933 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.110226 2026] [access_compat:error] [pid 212454:tid 212649] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.113302 2026] [security2:error] [pid 212454:tid 212601] [client 20.214.145.90:38347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/gmo.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfT0AAAABE"]
[Wed Sep 30 01:04:03.168030 2026] [security2:error] [pid 212454:tid 212686] [client 155.190.6.18:42212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0YryZ9IcLq1oV6pfTvwAAAGY"]
[Wed Sep 30 01:04:03.199372 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.199637 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.206189 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:04:03.206450 2026] [access_compat:error] [pid 212454:tid 212658] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5
[Wed Sep 30 01:04:03.225407 2026] [security2:error] [pid 212454:tid 212621] [client 20.219.2.60:18919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/3586%20b64.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfT3QAAACU"]
[Wed Sep 30 01:04:03.290457 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.290721 2026] [access_compat:error] [pid 212454:tid 212666] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.382443 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.382720 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.385300 2026] [security2:error] [pid 212454:tid 212656] [client 20.214.145.90:43434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/6.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfT7gAAAEg"]
[Wed Sep 30 01:04:03.474063 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.474329 2026] [access_compat:error] [pid 212454:tid 212592] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.477562 2026] [security2:error] [pid 212454:tid 212641] [client 20.214.151.17:10071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/.well-known/index.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfT8gAAADk"]
[Wed Sep 30 01:04:03.566589 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.567019 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.656644 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.657015 2026] [access_compat:error] [pid 212454:tid 212618] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.667292 2026] [security2:error] [pid 212454:tid 212651] [client 20.214.145.90:43394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/12.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfUAgAAAEM"]
[Wed Sep 30 01:04:03.671184 2026] [security2:error] [pid 212454:tid 212691] [client 64.227.188.205:38398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0Y7yZ9IcLq1oV6pfUAwAAAGs"]
[Wed Sep 30 01:04:03.707516 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:04:03.707796 2026] [access_compat:error] [pid 212454:tid 212665] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:04:03.748273 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.748782 2026] [access_compat:error] [pid 212454:tid 212705] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.836629 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.836958 2026] [access_compat:error] [pid 212454:tid 212711] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.928815 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:03.929087 2026] [access_compat:error] [pid 212454:tid 212585] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:03.947930 2026] [security2:error] [pid 212454:tid 212682] [client 20.214.109.68:9907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/first.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfUEQAAAGI"]
[Wed Sep 30 01:04:03.952957 2026] [security2:error] [pid 212454:tid 212664] [client 20.214.151.17:9753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfUEgAAAFA"]
[Wed Sep 30 01:04:03.964308 2026] [security2:error] [pid 212454:tid 212622] [client 20.214.145.90:43431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/0.php"] [unique_id "ary0Y7yZ9IcLq1oV6pfUEwAAACY"]
[Wed Sep 30 01:04:04.020818 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.021106 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.035658 2026] [security2:error] [pid 212454:tid 212590] [client 106.214.3.140:2008] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUFwAAAAY"]
[Wed Sep 30 01:04:04.035835 2026] [security2:error] [pid 212454:tid 212590] [client 106.214.3.140:2008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "cantrade.com.sg"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUFwAAAAY"]
[Wed Sep 30 01:04:04.109783 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.110060 2026] [access_compat:error] [pid 212454:tid 212658] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.200358 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.200647 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.207073 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:04:04.207340 2026] [access_compat:error] [pid 212454:tid 212704] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:04:04.257167 2026] [security2:error] [pid 212454:tid 212656] [client 20.214.145.90:38370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUKwAAAEg"]
[Wed Sep 30 01:04:04.287108 2026] [security2:error] [pid 212454:tid 212597] [client 45.138.12.32:24672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.clg.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfULgAAAA0"]
[Wed Sep 30 01:04:04.296801 2026] [security2:error] [pid 212454:tid 212598] [client 20.214.151.17:10107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUMAAAAA4"]
[Wed Sep 30 01:04:04.297302 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.297545 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.384840 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.385113 2026] [access_compat:error] [pid 212454:tid 212639] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.389665 2026] [security2:error] [pid 212454:tid 212604] [client 64.227.188.205:38414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ZLyZ9IcLq1oV6pfUNwAAABQ"]
[Wed Sep 30 01:04:04.391228 2026] [security2:error] [pid 212454:tid 212676] [client 185.252.170.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0ZLyZ9IcLq1oV6pfUOAAAAFw"]
[Wed Sep 30 01:04:04.458254 2026] [security2:error] [pid 212454:tid 212678] [client 104.208.65.139:13711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/run.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUOwAAAF4"]
[Wed Sep 30 01:04:04.473986 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.474241 2026] [access_compat:error] [pid 212454:tid 212693] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.556577 2026] [security2:error] [pid 212454:tid 212628] [client 4.196.65.241:64162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/3.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUSQAAACw"]
[Wed Sep 30 01:04:04.564743 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.565014 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.591245 2026] [security2:error] [pid 212454:tid 212595] [client 20.214.145.90:43401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUTAAAAAs"]
[Wed Sep 30 01:04:04.604063 2026] [security2:error] [pid 212454:tid 212702] [client 20.214.151.17:9789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUTgAAAHY"]
[Wed Sep 30 01:04:04.631051 2026] [security2:error] [pid 212454:tid 212650] [client 4.240.25.22:33686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/wp-the.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUTwAAAEI"]
[Wed Sep 30 01:04:04.656013 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.656287 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.691027 2026] [security2:error] [pid 212454:tid 212634] [client 43.132.215.237:3046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.215.132.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUWgAAADI"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 01:04:04.729950 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:04:04.730218 2026] [access_compat:error] [pid 212454:tid 212607] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:04:04.748196 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.748582 2026] [access_compat:error] [pid 212454:tid 212687] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.840438 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.840697 2026] [access_compat:error] [pid 212454:tid 212698] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.895927 2026] [security2:error] [pid 212454:tid 212598] [client 20.214.151.17:10037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUZAAAAA4"]
[Wed Sep 30 01:04:04.904542 2026] [security2:error] [pid 212454:tid 212679] [client 20.214.145.90:38338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/02.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUZQAAAF8"]
[Wed Sep 30 01:04:04.929905 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:04.930170 2026] [access_compat:error] [pid 212454:tid 212608] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:04.935495 2026] [security2:error] [pid 212454:tid 212596] [client 202.179.95.79:55688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUZwAAAAw"]
[Wed Sep 30 01:04:04.935624 2026] [security2:error] [pid 212454:tid 212596] [client 202.179.95.79:55688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUZwAAAAw"]
[Wed Sep 30 01:04:04.940420 2026] [security2:error] [pid 212454:tid 212657] [client 201.32.215.149:6630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUaQAAAEk"]
[Wed Sep 30 01:04:04.940506 2026] [security2:error] [pid 212454:tid 212657] [client 201.32.215.149:6630] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUaQAAAEk"]
[Wed Sep 30 01:04:04.953371 2026] [security2:error] [pid 212454:tid 212700] [client 152.59.165.7:55694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUagAAAHQ"]
[Wed Sep 30 01:04:04.953473 2026] [security2:error] [pid 212454:tid 212700] [client 152.59.165.7:55694] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUagAAAHQ"]
[Wed Sep 30 01:04:04.987381 2026] [security2:error] [pid 212454:tid 212653] [client 45.138.12.43:47414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thenerdistheword.ca"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0ZLyZ9IcLq1oV6pfUbQAAAEU"]
[Wed Sep 30 01:04:05.020704 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.021000 2026] [access_compat:error] [pid 212454:tid 212694] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.103706 2026] [security2:error] [pid 212454:tid 212656] [client 64.227.188.205:38418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ZbyZ9IcLq1oV6pfUdgAAAEg"]
[Wed Sep 30 01:04:05.111887 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.112151 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.146986 2026] [security2:error] [pid 212454:tid 212644] [client 116.193.128.26:50243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUeAAAADw"]
[Wed Sep 30 01:04:05.147096 2026] [security2:error] [pid 212454:tid 212644] [client 116.193.128.26:50243] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUeAAAADw"]
[Wed Sep 30 01:04:05.160621 2026] [autoindex:error] [pid 212454:tid 212671] [client 212.156.70.154:12770] AH01276: Cannot serve directory /home4/ypwvhcmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:05.186191 2026] [security2:error] [pid 212454:tid 212647] [client 20.214.145.90:38344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/go.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUfQAAAD8"]
[Wed Sep 30 01:04:05.204743 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.205197 2026] [access_compat:error] [pid 212454:tid 212628] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.208413 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:05.208665 2026] [access_compat:error] [pid 212454:tid 212659] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:05.234199 2026] [security2:error] [pid 212454:tid 212633] [client 20.214.151.17:9989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUgAAAADE"]
[Wed Sep 30 01:04:05.292502 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.292757 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.293053 2026] [security2:error] [pid 212454:tid 212702] [client 20.219.2.60:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUhAAAAHY"]
[Wed Sep 30 01:04:05.297827 2026] [security2:error] [pid 212454:tid 212690] [client 203.122.45.246:49445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUggAAAGo"]
[Wed Sep 30 01:04:05.298029 2026] [security2:error] [pid 212454:tid 212690] [client 203.122.45.246:49445] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUggAAAGo"]
[Wed Sep 30 01:04:05.363124 2026] [security2:error] [pid 212454:tid 212584] [client 223.181.60.167:6636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUhgAAAAA"]
[Wed Sep 30 01:04:05.363478 2026] [security2:error] [pid 212454:tid 212584] [client 223.181.60.167:6636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUhgAAAAA"]
[Wed Sep 30 01:04:05.383922 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.384202 2026] [access_compat:error] [pid 212454:tid 212650] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.458049 2026] [security2:error] [pid 212454:tid 212682] [client 20.214.109.68:62420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/redixsx.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUjQAAAGI"]
[Wed Sep 30 01:04:05.471992 2026] [security2:error] [pid 212454:tid 212591] [client 20.214.145.90:43423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/ee.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUkAAAAAc"]
[Wed Sep 30 01:04:05.474603 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.474912 2026] [access_compat:error] [pid 212454:tid 212619] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.485510 2026] [security2:error] [pid 212454:tid 212658] [client 20.194.30.107:64713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/mh.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUkQAAAEo"]
[Wed Sep 30 01:04:05.565223 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.565483 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.586565 2026] [security2:error] [pid 212454:tid 212648] [client 20.214.151.17:10012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUnAAAAEA"]
[Wed Sep 30 01:04:05.657304 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.657579 2026] [access_compat:error] [pid 212454:tid 212688] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.658001 2026] [security2:error] [pid 212454:tid 212693] [client 116.197.133.25:49600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUoAAAAG0"]
[Wed Sep 30 01:04:05.658140 2026] [security2:error] [pid 212454:tid 212693] [client 116.197.133.25:49600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUoAAAAG0"]
[Wed Sep 30 01:04:05.716393 2026] [security2:error] [pid 212454:tid 212595] [client 103.159.192.142:51383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUqAAAAAs"]
[Wed Sep 30 01:04:05.716507 2026] [security2:error] [pid 212454:tid 212595] [client 103.159.192.142:51383] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUqAAAAAs"]
[Wed Sep 30 01:04:05.724382 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:05.724652 2026] [access_compat:error] [pid 212454:tid 212676] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:05.749757 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.750054 2026] [access_compat:error] [pid 212454:tid 212646] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.764911 2026] [security2:error] [pid 212454:tid 212645] [client 20.214.145.90:38351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/an.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUrgAAAD0"]
[Wed Sep 30 01:04:05.777908 2026] [security2:error] [pid 212454:tid 212631] [client 20.198.74.230:23935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zoo1.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUsAAAAC8"]
[Wed Sep 30 01:04:05.813951 2026] [security2:error] [pid 212454:tid 212679] [client 64.227.188.205:38426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ZbyZ9IcLq1oV6pfUtAAAAF8"]
[Wed Sep 30 01:04:05.839273 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.839544 2026] [access_compat:error] [pid 212454:tid 212661] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.931282 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:05.931551 2026] [access_compat:error] [pid 212454:tid 212673] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:05.977069 2026] [security2:error] [pid 212454:tid 212659] [client 20.214.151.17:10076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/filemanager/dialog.php"] [unique_id "ary0ZbyZ9IcLq1oV6pfUvgAAAEs"]
[Wed Sep 30 01:04:06.021743 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.022037 2026] [access_compat:error] [pid 212454:tid 212615] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.058000 2026] [security2:error] [pid 212454:tid 212690] [client 20.214.145.90:28296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp.php"] [unique_id "ary0ZryZ9IcLq1oV6pfUwgAAAGo"]
[Wed Sep 30 01:04:06.112315 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.112585 2026] [access_compat:error] [pid 212454:tid 212617] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.204524 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.204796 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.210956 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:06.211206 2026] [access_compat:error] [pid 212454:tid 212675] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:06.240549 2026] [security2:error] [pid 212454:tid 212654] [client 20.214.151.17:9987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/index/function.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU1wAAAEY"]
[Wed Sep 30 01:04:06.281086 2026] [security2:error] [pid 212454:tid 212710] [client 20.214.109.68:61180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/cpp2.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU2QAAAH4"]
[Wed Sep 30 01:04:06.296044 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.296310 2026] [access_compat:error] [pid 212454:tid 212598] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.297140 2026] [security2:error] [pid 212454:tid 212624] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0ZryZ9IcLq1oV6pfU2wAAACg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:06.334797 2026] [security2:error] [pid 212454:tid 212677] [client 20.214.145.90:43419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU3gAAAF0"]
[Wed Sep 30 01:04:06.387159 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.387425 2026] [access_compat:error] [pid 212454:tid 212625] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.445674 2026] [security2:error] [pid 212454:tid 212694] [client 103.168.67.253:22156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU5gAAAG4"]
[Wed Sep 30 01:04:06.476282 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.476541 2026] [access_compat:error] [pid 212454:tid 212631] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.497470 2026] [security2:error] [pid 212454:tid 212667] [client 64.227.188.205:38436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ZryZ9IcLq1oV6pfU6wAAAFM"]
[Wed Sep 30 01:04:06.544703 2026] [security2:error] [pid 212454:tid 212665] [client 20.214.151.17:10026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU8AAAAFE"]
[Wed Sep 30 01:04:06.568060 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.568314 2026] [access_compat:error] [pid 212454:tid 212702] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.621613 2026] [security2:error] [pid 212454:tid 212573] [remote 47.128.98.159:43182] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "accessart.af"] [uri "/aboutus.php"] [unique_id "ary0ZryZ9IcLq1oV6pfU-gAAHnY"]
[Wed Sep 30 01:04:06.622300 2026] [security2:error] [pid 212454:tid 212711] [client 85.174.199.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary0ZryZ9IcLq1oV6pfU-QAAAH8"]
[Wed Sep 30 01:04:06.658468 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.658735 2026] [access_compat:error] [pid 212454:tid 212587] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.696316 2026] [security2:error] [pid 212454:tid 212708] [client 20.214.145.90:38396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/admin.php"] [unique_id "ary0ZryZ9IcLq1oV6pfVAQAAAHw"]
[Wed Sep 30 01:04:06.716577 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:04:06.717031 2026] [access_compat:error] [pid 212454:tid 212634] [client 74.7.243.227:51650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:04:06.753147 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.753578 2026] [access_compat:error] [pid 212454:tid 212664] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.762517 2026] [security2:error] [pid 212454:tid 212606] [client 8.219.117.146:52385] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.mmccray.com"] [uri "/wp-json/batch/v1"] [unique_id "ary0ZryZ9IcLq1oV6pfVBgAAABY"]
[Wed Sep 30 01:04:06.777986 2026] [security2:error] [pid 212454:tid 212644] [client 4.240.25.22:33310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/baba.php"] [unique_id "ary0ZryZ9IcLq1oV6pfVBwAAADw"]
[Wed Sep 30 01:04:06.837499 2026] [security2:error] [pid 212454:tid 212620] [client 20.214.151.17:10090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary0ZryZ9IcLq1oV6pfVCQAAACQ"]
[Wed Sep 30 01:04:06.842917 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.843171 2026] [access_compat:error] [pid 212454:tid 212675] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.878104 2026] [security2:error] [pid 212454:tid 212656] [client 82.102.18.126:50942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0ZryZ9IcLq1oV6pfVCgAAAEg"]
[Wed Sep 30 01:04:06.933542 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:06.933822 2026] [access_compat:error] [pid 212454:tid 212669] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:06.933918 2026] [security2:error] [pid 212454:tid 212597] [client 186.189.89.81:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0ZryZ9IcLq1oV6pfVEAAAAA0"]
[Wed Sep 30 01:04:06.960324 2026] [security2:error] [pid 212454:tid 212537] [remote 52.167.144.234:5434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-content/cache/autoptimize/autoptimize_single_4ce4f046b3ae2c530d621e8a9df63468.php"] [unique_id "ary0ZryZ9IcLq1oV6pfVEgAASlI"], referer: https://kcd-global.com/product/rtp-cleaner-and-disinfectant-pack-of-6/
[Wed Sep 30 01:04:06.988368 2026] [security2:error] [pid 212454:tid 212680] [client 20.219.2.60:19412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bmi.php"] [unique_id "ary0ZryZ9IcLq1oV6pfVEwAAAGA"]
[Wed Sep 30 01:04:07.008446 2026] [security2:error] [pid 212454:tid 212685] [client 20.214.145.90:28302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/admin.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVFAAAAGU"]
[Wed Sep 30 01:04:07.025741 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.026028 2026] [access_compat:error] [pid 212454:tid 212610] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.097208 2026] [security2:error] [pid 212454:tid 212652] [client 49.43.163.212:62426] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVGwAAAEQ"]
[Wed Sep 30 01:04:07.097314 2026] [security2:error] [pid 212454:tid 212652] [client 49.43.163.212:62426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVGwAAAEQ"]
[Wed Sep 30 01:04:07.118303 2026] [security2:error] [pid 212454:tid 212651] [client 20.214.151.17:10003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVHgAAAEM"]
[Wed Sep 30 01:04:07.118325 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.118626 2026] [access_compat:error] [pid 212454:tid 212689] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.192468 2026] [security2:error] [pid 212454:tid 212633] [client 82.102.18.126:50952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVJwAAADE"]
[Wed Sep 30 01:04:07.194459 2026] [security2:error] [pid 212454:tid 212662] [client 64.227.188.205:38444] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0Z7yZ9IcLq1oV6pfVKAAAAE4"]
[Wed Sep 30 01:04:07.206546 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.206803 2026] [access_compat:error] [pid 212454:tid 212696] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.231740 2026] [security2:error] [pid 212454:tid 212614] [client 74.7.243.227:51650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0Z7yZ9IcLq1oV6pfVKwAAAB4"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 01:04:07.232828 2026] [security2:error] [pid 212454:tid 212626] [client 169.40.142.190:46308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.oki.fme.mybluehost.me"] [uri "/index.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVKgAAACo"]
[Wed Sep 30 01:04:07.269330 2026] [security2:error] [pid 212454:tid 212630] [client 43.227.131.37:11377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVLAAAAC4"]
[Wed Sep 30 01:04:07.269518 2026] [security2:error] [pid 212454:tid 212630] [client 43.227.131.37:11377] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVLAAAAC4"]
[Wed Sep 30 01:04:07.278549 2026] [security2:error] [pid 212454:tid 212587] [client 45.138.12.32:24754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cnb.dnk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVLQAAAAM"]
[Wed Sep 30 01:04:07.294339 2026] [security2:error] [pid 212454:tid 212636] [client 20.214.145.90:43420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVLwAAADQ"]
[Wed Sep 30 01:04:07.302043 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.302306 2026] [access_compat:error] [pid 212454:tid 212599] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.309715 2026] [security2:error] [pid 212454:tid 212650] [client 20.214.109.68:61138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/admlo.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVMAAAAEI"]
[Wed Sep 30 01:04:07.383004 2026] [security2:error] [pid 212454:tid 212643] [client 49.205.105.16:13740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVMgAAADs"]
[Wed Sep 30 01:04:07.383111 2026] [security2:error] [pid 212454:tid 212643] [client 49.205.105.16:13740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVMgAAADs"]
[Wed Sep 30 01:04:07.384916 2026] [security2:error] [pid 212454:tid 212605] [client 20.214.151.17:9777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/about/function.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVNAAAABU"]
[Wed Sep 30 01:04:07.390025 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.390302 2026] [access_compat:error] [pid 212454:tid 212637] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.425999 2026] [security2:error] [pid 212454:tid 212602] [client 106.214.2.47:8151] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVNQAAABI"]
[Wed Sep 30 01:04:07.488672 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.488979 2026] [access_compat:error] [pid 212454:tid 212704] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.531146 2026] [security2:error] [pid 212454:tid 212529] [remote 74.7.241.5:45614] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVPQAAG0o"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297897&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:07.531171 2026] [security2:error] [pid 212454:tid 212529] [remote 74.7.241.5:45614] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVPQAAG0o"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297897&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:07.573416 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:07.573682 2026] [access_compat:error] [pid 212454:tid 212607] [client 216.73.216.46:17893] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:07.734886 2026] [security2:error] [pid 212454:tid 212629] [client 49.36.41.37:53713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVQwAAAC0"]
[Wed Sep 30 01:04:07.735050 2026] [security2:error] [pid 212454:tid 212629] [client 49.36.41.37:53713] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0Z7yZ9IcLq1oV6pfVQwAAAC0"]
[Wed Sep 30 01:04:08.051512 2026] [http2:info] [pid 251754:tid 251754] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:04:08.073215 2026] [security2:error] [pid 251754:tid 251888] [client 20.214.151.17:14491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary0aJOnWJRlb5xgkk3cvAAAAIc"]
[Wed Sep 30 01:04:08.073226 2026] [security2:error] [pid 251754:tid 251886] [client 20.214.145.90:28243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/index/function.php"] [unique_id "ary0aJOnWJRlb5xgkk3cvQAAAIU"]
[Wed Sep 30 01:04:08.074645 2026] [security2:error] [pid 251754:tid 251893] [client 74.7.243.227:35212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0aJOnWJRlb5xgkk3cvwAAAIw"], referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 01:04:08.076592 2026] [security2:error] [pid 251754:tid 251903] [client 95.142.47.113:60338] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "95.142.47.113" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "kshar.net"] [uri "/wp-comments-post.php"] [unique_id "ary0aJOnWJRlb5xgkk3cwgAAAJY"], referer: http://kshar.net/gift-wrap/
[Wed Sep 30 01:04:08.076675 2026] [security2:error] [pid 251754:tid 251901] [client 82.102.18.126:50972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0aJOnWJRlb5xgkk3cwwAAAJQ"]
[Wed Sep 30 01:04:08.088950 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:14803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.089119 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:17771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.089203 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:14803] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.089478 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:17771] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.091214 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:41496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.091531 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.091800 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:41496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.091969 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.093003 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.093354 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.117791 2026] [security2:error] [pid 251754:tid 251903] [client 95.142.47.113:60338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "kshar.net"] [uri "/wp-comments-post.php"] [unique_id "ary0aJOnWJRlb5xgkk3cwgAAAJY"], referer: http://kshar.net/gift-wrap/
[Wed Sep 30 01:04:08.182003 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:25969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.182268 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:25969] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.226530 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.227051 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.304566 2026] [security2:error] [pid 251754:tid 251892] [client 64.227.188.205:35222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0aJOnWJRlb5xgkk3c5AAAAIs"]
[Wed Sep 30 01:04:08.311915 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.312187 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.360336 2026] [security2:error] [pid 251754:tid 251964] [client 20.214.151.17:9986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/admin/function.php"] [unique_id "ary0aJOnWJRlb5xgkk3c5gAAANM"]
[Wed Sep 30 01:04:08.362007 2026] [security2:error] [pid 251754:tid 251965] [client 20.214.145.90:43398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary0aJOnWJRlb5xgkk3c5wAAANQ"]
[Wed Sep 30 01:04:08.379011 2026] [security2:error] [pid 251754:tid 251969] [client 74.7.242.1:47576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0aJOnWJRlb5xgkk3c6QAAANg"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:04:08.403697 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.404124 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.411566 2026] [security2:error] [pid 251754:tid 251975] [client 82.102.18.126:50982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0aJOnWJRlb5xgkk3c7gAAAN4"]
[Wed Sep 30 01:04:08.437032 2026] [security2:error] [pid 251754:tid 251980] [client 74.7.243.227:35216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0aJOnWJRlb5xgkk3c7wAAAOM"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 01:04:08.469833 2026] [security2:error] [pid 251754:tid 251982] [client 4.196.65.241:64177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/mentos.php"] [unique_id "ary0aJOnWJRlb5xgkk3c8AAAAOU"]
[Wed Sep 30 01:04:08.485121 2026] [security2:error] [pid 251754:tid 251954] [client 103.168.67.253:38370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0aJOnWJRlb5xgkk3c8QAAAMk"]
[Wed Sep 30 01:04:08.496952 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.497363 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.570363 2026] [security2:error] [pid 251754:tid 251997] [client 20.198.74.230:24181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/h86jb6g8.php"] [unique_id "ary0aJOnWJRlb5xgkk3c_AAAAPQ"]
[Wed Sep 30 01:04:08.585008 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.585418 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.638350 2026] [security2:error] [pid 251754:tid 251900] [client 223.235.102.107:1861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0aJOnWJRlb5xgkk3dAAAAAJM"]
[Wed Sep 30 01:04:08.638515 2026] [security2:error] [pid 251754:tid 251900] [client 223.235.102.107:1861] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0aJOnWJRlb5xgkk3dAAAAAJM"]
[Wed Sep 30 01:04:08.649066 2026] [security2:error] [pid 251754:tid 252006] [client 20.214.151.17:9755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/9.php"] [unique_id "ary0aJOnWJRlb5xgkk3dAQAAAP0"]
[Wed Sep 30 01:04:08.674550 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.674827 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.678832 2026] [security2:error] [pid 251754:tid 252011] [client 20.214.145.90:38376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/license.php"] [unique_id "ary0aJOnWJRlb5xgkk3dBgAAAQI"]
[Wed Sep 30 01:04:08.752834 2026] [security2:error] [pid 251754:tid 251896] [client 82.102.18.126:50986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0aJOnWJRlb5xgkk3dDQAAAI8"]
[Wed Sep 30 01:04:08.769000 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.769417 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.776179 2026] [security2:error] [pid 251754:tid 251908] [client 168.100.149.32:55376] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0aJOnWJRlb5xgkk3c2AAAmwc"]
[Wed Sep 30 01:04:08.820620 2026] [security2:error] [pid 251754:tid 251931] [client 4.196.65.241:2101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wpxml.php"] [unique_id "ary0aJOnWJRlb5xgkk3dFgAAALI"]
[Wed Sep 30 01:04:08.824366 2026] [security2:error] [pid 251754:tid 251913] [client 20.70.173.30:45573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/admin.php"] [unique_id "ary0aJOnWJRlb5xgkk3dFwAAAKA"]
[Wed Sep 30 01:04:08.841333 2026] [security2:error] [pid 251754:tid 251939] [client 20.214.109.68:61121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/admin-ajax.php"] [unique_id "ary0aJOnWJRlb5xgkk3dGgAAALo"]
[Wed Sep 30 01:04:08.860533 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.860970 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.941254 2026] [security2:error] [pid 251754:tid 251956] [client 52.231.30.175:37362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0aJOnWJRlb5xgkk3dIwAAAMs"]
[Wed Sep 30 01:04:08.948831 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:08.949098 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:08.975920 2026] [security2:error] [pid 251754:tid 251930] [client 20.214.145.90:38367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/radio.php"] [unique_id "ary0aJOnWJRlb5xgkk3dKAAAALE"]
[Wed Sep 30 01:04:08.994678 2026] [security2:error] [pid 251754:tid 251910] [client 64.227.188.205:35228] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0aJOnWJRlb5xgkk3dKQAAAJ0"]
[Wed Sep 30 01:04:09.013702 2026] [security2:error] [pid 251754:tid 251782] [remote 24.233.201.36:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0aJOnWJRlb5xgkk3dJwAAzRk"]
[Wed Sep 30 01:04:09.013776 2026] [security2:error] [pid 251754:tid 251782] [remote 24.233.201.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0aJOnWJRlb5xgkk3dJwAAzRk"]
[Wed Sep 30 01:04:09.048300 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.048581 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.064453 2026] [security2:error] [pid 251754:tid 251979] [client 20.214.151.17:10025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary0aZOnWJRlb5xgkk3dMQAAAOI"]
[Wed Sep 30 01:04:09.081452 2026] [security2:error] [pid 251754:tid 251980] [client 82.102.18.126:50990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0aZOnWJRlb5xgkk3dMwAAAOM"]
[Wed Sep 30 01:04:09.086753 2026] [security2:error] [pid 251754:tid 251932] [client 45.138.12.32:24790] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nhg.jhe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0aZOnWJRlb5xgkk3dNAAAALM"]
[Wed Sep 30 01:04:09.135530 2026] [security2:error] [pid 251754:tid 251954] [client 168.100.149.172:60736] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/robots.txt"] [unique_id "ary0aZOnWJRlb5xgkk3dOAAAAMk"]
[Wed Sep 30 01:04:09.140454 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.140859 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.206206 2026] [security2:error] [pid 251754:tid 251967] [client 52.231.30.175:37267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0aZOnWJRlb5xgkk3dOwAAANY"]
[Wed Sep 30 01:04:09.229404 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.229822 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.251061 2026] [autoindex:error] [pid 251754:tid 251978] [client 212.156.70.154:63709] AH01276: Cannot serve directory /home4/yyxbxzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:09.296869 2026] [security2:error] [pid 251754:tid 252010] [client 20.214.145.90:38337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/info.php"] [unique_id "ary0aZOnWJRlb5xgkk3dQgAAAQE"]
[Wed Sep 30 01:04:09.318999 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.319258 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.384977 2026] [security2:error] [pid 251754:tid 251927] [client 82.102.18.126:51004] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0aZOnWJRlb5xgkk3dSQAAAK4"]
[Wed Sep 30 01:04:09.411118 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.411389 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.445436 2026] [security2:error] [pid 251754:tid 251912] [client 169.40.142.190:51646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.oki.fme.mybluehost.me"] [uri "/index.php"] [unique_id "ary0aZOnWJRlb5xgkk3dTwAAAJ8"]
[Wed Sep 30 01:04:09.482005 2026] [security2:error] [pid 251754:tid 251946] [client 52.231.30.175:37949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/1ac.php"] [unique_id "ary0aZOnWJRlb5xgkk3dUAAAAME"]
[Wed Sep 30 01:04:09.501999 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.502285 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.527130 2026] [security2:error] [pid 251754:tid 251945] [client 20.219.2.60:18845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bypltspd.php"] [unique_id "ary0aZOnWJRlb5xgkk3dUwAAAMA"]
[Wed Sep 30 01:04:09.533049 2026] [security2:error] [pid 251754:tid 251928] [client 20.214.151.17:10089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/.well-known/log.php"] [unique_id "ary0aZOnWJRlb5xgkk3dVAAAAK8"]
[Wed Sep 30 01:04:09.572019 2026] [access_compat:error] [pid 251754:tid 251943] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:09.572220 2026] [security2:error] [pid 251754:tid 251942] [client 20.214.145.90:28318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/alfanew.php"] [unique_id "ary0aZOnWJRlb5xgkk3dVgAAAL0"]
[Wed Sep 30 01:04:09.572288 2026] [access_compat:error] [pid 251754:tid 251943] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:04:09.596240 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.596667 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.686214 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.686597 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.690504 2026] [security2:error] [pid 251754:tid 251963] [client 82.102.18.126:51016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0aZOnWJRlb5xgkk3dYAAAANI"]
[Wed Sep 30 01:04:09.691140 2026] [security2:error] [pid 251754:tid 251926] [client 64.227.188.205:35236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0aZOnWJRlb5xgkk3dYQAAAK0"]
[Wed Sep 30 01:04:09.748307 2026] [security2:error] [pid 251754:tid 251992] [client 52.231.30.175:37278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/flm.php"] [unique_id "ary0aZOnWJRlb5xgkk3dZgAAAO8"]
[Wed Sep 30 01:04:09.776188 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.776461 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.809668 2026] [security2:error] [pid 251754:tid 251949] [client 182.69.182.151:14436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0aZOnWJRlb5xgkk3daQAAAMQ"]
[Wed Sep 30 01:04:09.809799 2026] [security2:error] [pid 251754:tid 251949] [client 182.69.182.151:14436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0aZOnWJRlb5xgkk3daQAAAMQ"]
[Wed Sep 30 01:04:09.857924 2026] [security2:error] [pid 251754:tid 251982] [client 20.214.145.90:38377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/inputs.php"] [unique_id "ary0aZOnWJRlb5xgkk3dbAAAAOU"]
[Wed Sep 30 01:04:09.859136 2026] [security2:error] [pid 251754:tid 251980] [client 20.214.151.17:14484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/class.php"] [unique_id "ary0aZOnWJRlb5xgkk3dbQAAAOM"]
[Wed Sep 30 01:04:09.866408 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.866686 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.896864 2026] [security2:error] [pid 251754:tid 251796] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0aZOnWJRlb5xgkk3ddAAAwic"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:04:09.896893 2026] [security2:error] [pid 251754:tid 251796] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0aZOnWJRlb5xgkk3ddAAAwic"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302278&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:04:09.896941 2026] [security2:error] [pid 251754:tid 251983] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0aZOnWJRlb5xgkk3dcwAAAOY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:09.935411 2026] [autoindex:error] [pid 251754:tid 251929] [client 85.204.70.104:34806] AH01276: Cannot serve directory /home4/pagumhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:09.957892 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:09.958170 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:09.974582 2026] [security2:error] [pid 251754:tid 252000] [client 4.240.25.22:8930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/file.php"] [unique_id "ary0aZOnWJRlb5xgkk3dewAAAPc"]
[Wed Sep 30 01:04:10.010264 2026] [security2:error] [pid 251754:tid 251900] [client 52.231.30.175:37316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/40341.php"] [unique_id "ary0apOnWJRlb5xgkk3dfgAAAJM"]
[Wed Sep 30 01:04:10.011720 2026] [security2:error] [pid 251754:tid 251939] [client 223.181.30.165:14938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0apOnWJRlb5xgkk3dfwAAALo"]
[Wed Sep 30 01:04:10.011846 2026] [security2:error] [pid 251754:tid 251939] [client 223.181.30.165:14938] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0apOnWJRlb5xgkk3dfwAAALo"]
[Wed Sep 30 01:04:10.014110 2026] [security2:error] [pid 251754:tid 251893] [client 82.102.18.126:51022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0apOnWJRlb5xgkk3dgAAAAIw"]
[Wed Sep 30 01:04:10.048396 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.048669 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.129789 2026] [security2:error] [pid 251754:tid 252005] [client 85.204.70.104:34806] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0apOnWJRlb5xgkk3dhwAAAPw"]
[Wed Sep 30 01:04:10.137864 2026] [security2:error] [pid 251754:tid 251951] [client 37.41.16.35:53868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0apOnWJRlb5xgkk3diwAAAMY"]
[Wed Sep 30 01:04:10.137988 2026] [security2:error] [pid 251754:tid 251951] [client 37.41.16.35:53868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0apOnWJRlb5xgkk3diwAAAMY"]
[Wed Sep 30 01:04:10.139622 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.139912 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.231720 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.232017 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.254063 2026] [security2:error] [pid 251754:tid 252001] [client 20.214.145.90:43408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/admin/function.php"] [unique_id "ary0apOnWJRlb5xgkk3dkwAAAPg"]
[Wed Sep 30 01:04:10.290393 2026] [security2:error] [pid 251754:tid 251912] [client 52.231.30.175:37914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-log.php"] [unique_id "ary0apOnWJRlb5xgkk3dlQAAAJ8"]
[Wed Sep 30 01:04:10.318861 2026] [security2:error] [pid 251754:tid 251888] [client 82.102.18.126:51038] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0apOnWJRlb5xgkk3dlwAAAIc"]
[Wed Sep 30 01:04:10.324271 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.324528 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.339841 2026] [security2:error] [pid 251754:tid 251928] [client 20.214.151.17:10059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/lock360.php"] [unique_id "ary0apOnWJRlb5xgkk3dmQAAAK8"]
[Wed Sep 30 01:04:10.339869 2026] [security2:error] [pid 251754:tid 251975] [client 168.100.149.174:41284] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.mngroup.com.au"] [uri "/index.php"] [unique_id "ary0aZOnWJRlb5xgkk3dawAA3iU"]
[Wed Sep 30 01:04:10.403896 2026] [security2:error] [pid 251754:tid 251997] [client 64.227.188.205:35244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0apOnWJRlb5xgkk3dpQAAAPQ"]
[Wed Sep 30 01:04:10.415971 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.416404 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:31937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.447564 2026] [security2:error] [pid 251754:tid 251820] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0apOnWJRlb5xgkk3dsQAAqz8"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D75349
[Wed Sep 30 01:04:10.511746 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.512231 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.529711 2026] [access_compat:error] [pid 251754:tid 251985] [client 47.79.13.174:55172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:10.530215 2026] [access_compat:error] [pid 251754:tid 251985] [client 47.79.13.174:55172] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:10.557085 2026] [security2:error] [pid 251754:tid 251983] [client 52.231.30.175:37888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/sehryhv.php"] [unique_id "ary0apOnWJRlb5xgkk3dtwAAAOY"]
[Wed Sep 30 01:04:10.596533 2026] [security2:error] [pid 251754:tid 251999] [client 20.214.145.90:43435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ary0apOnWJRlb5xgkk3dugAAAPY"]
[Wed Sep 30 01:04:10.597247 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.597522 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.636913 2026] [security2:error] [pid 251754:tid 252004] [client 82.102.18.126:51044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0apOnWJRlb5xgkk3duwAAAPs"]
[Wed Sep 30 01:04:10.688768 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.688926 2026] [security2:error] [pid 251754:tid 251964] [client 168.100.149.12:44432] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.mngroup.com.au"] [uri "/robots.txt"] [unique_id "ary0apOnWJRlb5xgkk3dvgAAANM"]
[Wed Sep 30 01:04:10.689061 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.702063 2026] [security2:error] [pid 251754:tid 251976] [client 172.232.97.149:49561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.central-fuerth.de"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ary0apOnWJRlb5xgkk3dvwAAAN8"]
[Wed Sep 30 01:04:10.769824 2026] [security2:error] [pid 251754:tid 251904] [client 85.204.70.104:34808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pag.umh.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0apOnWJRlb5xgkk3dwAAAAJc"]
[Wed Sep 30 01:04:10.778299 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.778563 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.835708 2026] [security2:error] [pid 251754:tid 251903] [client 20.214.109.68:9454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/amthd.php"] [unique_id "ary0apOnWJRlb5xgkk3dygAAAJY"]
[Wed Sep 30 01:04:10.846805 2026] [security2:error] [pid 251754:tid 252002] [client 52.231.30.175:37985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/yich.php"] [unique_id "ary0apOnWJRlb5xgkk3dzQAAAPk"]
[Wed Sep 30 01:04:10.868835 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.869107 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.894377 2026] [security2:error] [pid 251754:tid 251898] [client 20.214.145.90:43447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ary0apOnWJRlb5xgkk3d0wAAAJE"]
[Wed Sep 30 01:04:10.902353 2026] [security2:error] [pid 251754:tid 251991] [client 20.214.151.17:14521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.graphicdesignmmd.com"] [uri "/system_log.php"] [unique_id "ary0apOnWJRlb5xgkk3d1QAAAO4"]
[Wed Sep 30 01:04:10.950706 2026] [security2:error] [pid 251754:tid 251909] [client 82.102.18.126:51046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0apOnWJRlb5xgkk3d3AAAAJw"]
[Wed Sep 30 01:04:10.959028 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:10.959287 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:10.960994 2026] [security2:error] [pid 251754:tid 252007] [client 20.219.2.60:19411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/shell.php"] [unique_id "ary0apOnWJRlb5xgkk3d3gAAAP4"]
[Wed Sep 30 01:04:10.992661 2026] [security2:error] [pid 251754:tid 251902] [client 103.168.67.253:38386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0apOnWJRlb5xgkk3d3wAAAJU"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:11.050846 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.051113 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.082027 2026] [security2:error] [pid 251754:tid 251910] [client 168.100.149.161:34296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/sitemap.xml"] [unique_id "ary0a5OnWJRlb5xgkk3d5QAAAJ0"]
[Wed Sep 30 01:04:11.099768 2026] [security2:error] [pid 251754:tid 251968] [client 168.100.149.159:42106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/sitemap_index.xml"] [unique_id "ary0a5OnWJRlb5xgkk3d5gAAANc"]
[Wed Sep 30 01:04:11.109657 2026] [security2:error] [pid 251754:tid 251981] [client 64.227.188.205:35254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0a5OnWJRlb5xgkk3d5wAAAOQ"]
[Wed Sep 30 01:04:11.119830 2026] [security2:error] [pid 251754:tid 251957] [client 52.231.30.175:37318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-blink.php"] [unique_id "ary0a5OnWJRlb5xgkk3d6QAAAMw"]
[Wed Sep 30 01:04:11.144369 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.144825 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.175590 2026] [autoindex:error] [pid 251754:tid 251997] [client 212.156.70.154:62573] AH01276: Cannot serve directory /home4/vtgauhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:11.212295 2026] [security2:error] [pid 251754:tid 251958] [client 20.214.145.90:43397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/default.php"] [unique_id "ary0a5OnWJRlb5xgkk3d-AAAAM0"]
[Wed Sep 30 01:04:11.219928 2026] [access_compat:error] [pid 251754:tid 251926] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 01:04:11.220204 2026] [access_compat:error] [pid 251754:tid 251926] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMy
[Wed Sep 30 01:04:11.234195 2026] [security2:error] [pid 251754:tid 251832] [remote 24.233.201.36:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0a5OnWJRlb5xgkk3d9gAA6Es"], referer: https://torquayfans.com/memberlist.php?g=8&first_char=m&sid=17c52533b7638d99e9fddd4617548cc7&start=50
[Wed Sep 30 01:04:11.235937 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.236215 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.249747 2026] [security2:error] [pid 251754:tid 251983] [client 8.219.117.146:52413] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "drebok.com"] [uri "/wp-json/batch/v1"] [unique_id "ary0a5OnWJRlb5xgkk3d-gAAAOY"]
[Wed Sep 30 01:04:11.277442 2026] [security2:error] [pid 251754:tid 251993] [client 87.199.197.121:28239] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:hb_contact_message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "medredisolutions.com"] [uri "/"] [unique_id "ary0a5OnWJRlb5xgkk3d-wAAAPA"], referer: https://medredisolutions.com/
[Wed Sep 30 01:04:11.286517 2026] [security2:error] [pid 251754:tid 251989] [client 82.102.18.126:51048] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0a5OnWJRlb5xgkk3d_AAAAOw"]
[Wed Sep 30 01:04:11.324529 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.324918 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.386518 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.30.175:37997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-logis.php"] [unique_id "ary0a5OnWJRlb5xgkk3eCAAAANM"]
[Wed Sep 30 01:04:11.417062 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.417346 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.432615 2026] [security2:error] [pid 251754:tid 251918] [client 103.168.67.253:38396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0a5OnWJRlb5xgkk3eDQAAAKU"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:11.436085 2026] [autoindex:error] [pid 251754:tid 251943] [client 85.204.70.104:34812] AH01276: Cannot serve directory /home4/pagumhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:11.509742 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.510214 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.527970 2026] [security2:error] [pid 251754:tid 252006] [client 20.214.145.90:28345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/lv.php"] [unique_id "ary0a5OnWJRlb5xgkk3eEgAAAP0"]
[Wed Sep 30 01:04:11.589857 2026] [security2:error] [pid 251754:tid 251898] [client 82.102.18.126:51062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.gzt.xnn.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0a5OnWJRlb5xgkk3eFQAAAJE"]
[Wed Sep 30 01:04:11.603904 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.604360 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.625804 2026] [security2:error] [pid 251754:tid 251888] [client 85.204.70.104:34812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0a5OnWJRlb5xgkk3eGQAAAIc"]
[Wed Sep 30 01:04:11.630630 2026] [security2:error] [pid 251754:tid 251945] [client 20.214.109.68:62433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/8xyz.php"] [unique_id "ary0a5OnWJRlb5xgkk3eGgAAAMA"]
[Wed Sep 30 01:04:11.648679 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:37206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/esc.php"] [unique_id "ary0a5OnWJRlb5xgkk3eGwAAAPU"]
[Wed Sep 30 01:04:11.652970 2026] [security2:error] [pid 251754:tid 251932] [client 168.100.149.196:42854] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0a5OnWJRlb5xgkk3d7wAAs0k"]
[Wed Sep 30 01:04:11.653000 2026] [security2:error] [pid 251754:tid 251979] [client 168.100.149.193:59772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0a5OnWJRlb5xgkk3d8AAA4ko"]
[Wed Sep 30 01:04:11.678024 2026] [security2:error] [pid 251754:tid 251941] [client 213.136.69.135:63476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/json-schema.php"] [unique_id "ary0a5OnWJRlb5xgkk3eHQAAALw"], referer: binance.com
[Wed Sep 30 01:04:11.693216 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.693655 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.780066 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.780337 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.795070 2026] [security2:error] [pid 251754:tid 251907] [client 103.159.192.142:51511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0a5OnWJRlb5xgkk3eIwAAAJo"]
[Wed Sep 30 01:04:11.795221 2026] [security2:error] [pid 251754:tid 251907] [client 103.159.192.142:51511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0a5OnWJRlb5xgkk3eIwAAAJo"]
[Wed Sep 30 01:04:11.801127 2026] [security2:error] [pid 251754:tid 252001] [client 64.227.188.205:35262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0a5OnWJRlb5xgkk3eJAAAAPg"]
[Wed Sep 30 01:04:11.806700 2026] [security2:error] [pid 251754:tid 251925] [client 20.214.145.90:38374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary0a5OnWJRlb5xgkk3eJQAAAKw"]
[Wed Sep 30 01:04:11.846283 2026] [security2:error] [pid 251754:tid 252005] [client 87.199.197.121:28293] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:hb_contact_message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "medredisolutions.com"] [uri "/"] [unique_id "ary0a5OnWJRlb5xgkk3eJwAAAPw"], referer: https://medredisolutions.com/
[Wed Sep 30 01:04:11.870188 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.870464 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.877241 2026] [security2:error] [pid 251754:tid 251936] [client 20.194.30.107:34726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/cycfruf.php"] [unique_id "ary0a5OnWJRlb5xgkk3eKQAAALc"]
[Wed Sep 30 01:04:11.887969 2026] [security2:error] [pid 251754:tid 251894] [client 103.241.204.139:55176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0a5OnWJRlb5xgkk3eKgAAAI0"]
[Wed Sep 30 01:04:11.888096 2026] [security2:error] [pid 251754:tid 251894] [client 103.241.204.139:55176] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0a5OnWJRlb5xgkk3eKgAAAI0"]
[Wed Sep 30 01:04:11.911167 2026] [security2:error] [pid 251754:tid 251948] [client 52.231.30.175:37950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/2.php"] [unique_id "ary0a5OnWJRlb5xgkk3eLQAAAMM"]
[Wed Sep 30 01:04:11.966955 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:11.967394 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:11.983234 2026] [security2:error] [pid 251754:tid 252009] [client 168.100.149.29:44686] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0a5OnWJRlb5xgkk3eDwABAFM"]
[Wed Sep 30 01:04:11.998633 2026] [security2:error] [pid 251754:tid 251996] [client 168.100.149.168:20234] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0a5OnWJRlb5xgkk3eEAAA81Q"]
[Wed Sep 30 01:04:12.052510 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.052791 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.119573 2026] [security2:error] [pid 251754:tid 251989] [client 20.214.145.90:43455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/marijuana.php"] [unique_id "ary0bJOnWJRlb5xgkk3eNwAAAOw"]
[Wed Sep 30 01:04:12.143788 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.144073 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.182777 2026] [security2:error] [pid 251754:tid 251972] [client 52.231.30.175:37990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/ba.php"] [unique_id "ary0bJOnWJRlb5xgkk3eOgAAANs"]
[Wed Sep 30 01:04:12.234303 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.234556 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.267120 2026] [security2:error] [pid 251754:tid 251984] [client 85.204.70.104:34824] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0bJOnWJRlb5xgkk3eQAAAAOc"]
[Wed Sep 30 01:04:12.329937 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.330371 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.400418 2026] [security2:error] [pid 251754:tid 252008] [client 20.219.2.60:19415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-links-opml.php"] [unique_id "ary0bJOnWJRlb5xgkk3eSgAAAP8"]
[Wed Sep 30 01:04:12.406691 2026] [security2:error] [pid 251754:tid 252003] [client 20.214.145.90:43406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary0bJOnWJRlb5xgkk3eSwAAAPo"]
[Wed Sep 30 01:04:12.416464 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.416735 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.448593 2026] [security2:error] [pid 251754:tid 251918] [client 52.231.30.175:37270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/great.php"] [unique_id "ary0bJOnWJRlb5xgkk3eUwAAAKU"]
[Wed Sep 30 01:04:12.486608 2026] [security2:error] [pid 251754:tid 251923] [client 64.227.188.205:35264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0bJOnWJRlb5xgkk3eVwAAAKo"]
[Wed Sep 30 01:04:12.513104 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.513554 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.520801 2026] [security2:error] [pid 251754:tid 251997] [client 168.100.149.9:58740] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0bJOnWJRlb5xgkk3eNAAA9Fs"]
[Wed Sep 30 01:04:12.530990 2026] [security2:error] [pid 251754:tid 251930] [client 168.100.149.31:58482] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0bJOnWJRlb5xgkk3eNQAAsVw"]
[Wed Sep 30 01:04:12.577037 2026] [security2:error] [pid 251754:tid 251978] [client 20.214.109.68:62438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/mini.php"] [unique_id "ary0bJOnWJRlb5xgkk3eWgAAAOE"]
[Wed Sep 30 01:04:12.583422 2026] [security2:error] [pid 251754:tid 251970] [client 152.59.169.65:57905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0bJOnWJRlb5xgkk3eXAAAANk"]
[Wed Sep 30 01:04:12.587320 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:04:12.587564 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvdGFzay8xMDQwNA==
[Wed Sep 30 01:04:12.592108 2026] [security2:error] [pid 251754:tid 251970] [client 152.59.169.65:57905] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0bJOnWJRlb5xgkk3eXAAAANk"]
[Wed Sep 30 01:04:12.599029 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.599303 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.690304 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.690586 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.710401 2026] [security2:error] [pid 251754:tid 251920] [client 52.231.30.175:37263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary0bJOnWJRlb5xgkk3eZQAAAKc"]
[Wed Sep 30 01:04:12.730859 2026] [security2:error] [pid 251754:tid 251961] [client 20.214.145.90:43399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-content/403.php"] [unique_id "ary0bJOnWJRlb5xgkk3eaAAAANA"]
[Wed Sep 30 01:04:12.782566 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.782879 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.842749 2026] [security2:error] [pid 251754:tid 251864] [remote 74.7.227.56:40848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0bJOnWJRlb5xgkk3ecgAAmms"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=675
[Wed Sep 30 01:04:12.867292 2026] [security2:error] [pid 251754:tid 251910] [client 4.196.65.241:19468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zejjyvzu.php"] [unique_id "ary0bJOnWJRlb5xgkk3edAAAAJ0"]
[Wed Sep 30 01:04:12.868029 2026] [security2:error] [pid 251754:tid 252012] [client 168.100.149.99:30232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0bJOnWJRlb5xgkk3eRgABA2E"]
[Wed Sep 30 01:04:12.873406 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.873672 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.910039 2026] [security2:error] [pid 251754:tid 251986] [client 168.100.149.44:25850] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0bJOnWJRlb5xgkk3eTgAA6WM"]
[Wed Sep 30 01:04:12.963696 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:12.964002 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:12.971293 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.30.175:37348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/robots.php"] [unique_id "ary0bJOnWJRlb5xgkk3efwAAAMQ"]
[Wed Sep 30 01:04:13.016653 2026] [security2:error] [pid 251754:tid 252000] [client 103.168.67.253:38400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0bZOnWJRlb5xgkk3eggAAAPc"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:13.027511 2026] [security2:error] [pid 251754:tid 251927] [client 85.204.70.104:34830] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0bZOnWJRlb5xgkk3egwAAAK4"]
[Wed Sep 30 01:04:13.046895 2026] [security2:error] [pid 251754:tid 251984] [client 20.214.145.90:38341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/css/colors/coffee/index.php"] [unique_id "ary0bZOnWJRlb5xgkk3ehQAAAOc"]
[Wed Sep 30 01:04:13.056152 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.056554 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.145780 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.146106 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.199242 2026] [security2:error] [pid 251754:tid 251906] [client 64.227.188.205:35280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0bZOnWJRlb5xgkk3eiQAAAJk"]
[Wed Sep 30 01:04:13.232193 2026] [security2:error] [pid 251754:tid 251931] [client 52.231.30.175:37313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/k.php"] [unique_id "ary0bZOnWJRlb5xgkk3ejQAAALI"]
[Wed Sep 30 01:04:13.235368 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.235628 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.259487 2026] [security2:error] [pid 251754:tid 251937] [client 81.56.30.130:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.thehomeinsulationcompany.co.uk"] [uri "/wp-login.php"] [unique_id "ary0bJOnWJRlb5xgkk3eagAAuGg"], referer: https://www.thehomeinsulationcompany.co.uk/wp-login.php
[Wed Sep 30 01:04:13.325859 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.326136 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.362960 2026] [security2:error] [pid 251754:tid 251886] [client 20.214.145.90:38395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/css.php"] [unique_id "ary0bZOnWJRlb5xgkk3elwAAAIU"]
[Wed Sep 30 01:04:13.413890 2026] [security2:error] [pid 251754:tid 251891] [client 155.190.6.18:36404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0bZOnWJRlb5xgkk3emgAAAIo"]
[Wed Sep 30 01:04:13.414005 2026] [security2:error] [pid 251754:tid 251891] [client 155.190.6.18:36404] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0bZOnWJRlb5xgkk3emgAAAIo"]
[Wed Sep 30 01:04:13.417010 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.417269 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.493774 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.30.175:37367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/w.php"] [unique_id "ary0bZOnWJRlb5xgkk3engAAAJs"]
[Wed Sep 30 01:04:13.509440 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.509719 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.510755 2026] [security2:error] [pid 251754:tid 251982] [client 122.173.27.10:8089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0bZOnWJRlb5xgkk3eowAAAOU"]
[Wed Sep 30 01:04:13.510883 2026] [security2:error] [pid 251754:tid 251982] [client 122.173.27.10:8089] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0bZOnWJRlb5xgkk3eowAAAOU"]
[Wed Sep 30 01:04:13.588209 2026] [security2:error] [pid 251754:tid 251939] [client 103.168.67.253:38416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0bZOnWJRlb5xgkk3eqgAAALo"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:13.598511 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.598785 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.624799 2026] [security2:error] [pid 251754:tid 251960] [client 20.214.145.90:28348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ary0bZOnWJRlb5xgkk3erAAAAM8"]
[Wed Sep 30 01:04:13.634467 2026] [access_compat:error] [pid 251754:tid 251962] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL2N3ZA==
[Wed Sep 30 01:04:13.634767 2026] [access_compat:error] [pid 251754:tid 251962] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL2N3ZA==
[Wed Sep 30 01:04:13.674443 2026] [security2:error] [pid 251754:tid 251938] [client 85.204.70.104:34840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0bZOnWJRlb5xgkk3esAAAALk"]
[Wed Sep 30 01:04:13.689529 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.689798 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.762886 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.30.175:37295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/ccc.php"] [unique_id "ary0bZOnWJRlb5xgkk3eugAAAPA"]
[Wed Sep 30 01:04:13.784783 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.785385 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.840557 2026] [security2:error] [pid 251754:tid 251969] [client 4.240.25.22:12427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp_blog_footer.php"] [unique_id "ary0bZOnWJRlb5xgkk3evQAAANg"]
[Wed Sep 30 01:04:13.848751 2026] [security2:error] [pid 251754:tid 251997] [client 168.100.149.182:41732] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0bZOnWJRlb5xgkk3ekQAA9G8"]
[Wed Sep 30 01:04:13.875916 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.876261 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:13.898290 2026] [security2:error] [pid 251754:tid 252004] [client 20.214.145.90:43451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/about.php"] [unique_id "ary0bZOnWJRlb5xgkk3ewQAAAPs"]
[Wed Sep 30 01:04:13.910481 2026] [security2:error] [pid 251754:tid 251947] [client 64.227.188.205:35286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0bZOnWJRlb5xgkk3ewgAAAMI"]
[Wed Sep 30 01:04:13.964192 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:13.964671 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.027147 2026] [security2:error] [pid 251754:tid 251977] [client 222.167.99.40:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0bpOnWJRlb5xgkk3ezAAAAOA"]
[Wed Sep 30 01:04:14.038335 2026] [security2:error] [pid 251754:tid 251935] [client 52.231.30.175:37356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/images.php"] [unique_id "ary0bpOnWJRlb5xgkk3ezgAAALY"]
[Wed Sep 30 01:04:14.055292 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.055546 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.103318 2026] [security2:error] [pid 251754:tid 251891] [client 20.214.109.68:9426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws68.php"] [unique_id "ary0bpOnWJRlb5xgkk3e0QAAAIo"]
[Wed Sep 30 01:04:14.146843 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.147131 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.231046 2026] [security2:error] [pid 251754:tid 251911] [client 20.214.145.90:38346] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/1.php"] [unique_id "ary0bpOnWJRlb5xgkk3e2wAAAJ4"]
[Wed Sep 30 01:04:14.231133 2026] [security2:error] [pid 251754:tid 251911] [client 20.214.145.90:38346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/1.php"] [unique_id "ary0bpOnWJRlb5xgkk3e2wAAAJ4"]
[Wed Sep 30 01:04:14.236816 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.237087 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.249990 2026] [security2:error] [pid 251754:tid 251988] [client 104.208.65.139:3748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/vpn.php"] [unique_id "ary0bpOnWJRlb5xgkk3e3AAAAOs"]
[Wed Sep 30 01:04:14.301576 2026] [security2:error] [pid 251754:tid 251902] [client 52.231.30.175:37359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/alls.php"] [unique_id "ary0bpOnWJRlb5xgkk3e4gAAAJU"]
[Wed Sep 30 01:04:14.326972 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.327238 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.336115 2026] [security2:error] [pid 251754:tid 251923] [client 85.204.70.104:60146] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0bpOnWJRlb5xgkk3e5gAAAKo"]
[Wed Sep 30 01:04:14.340237 2026] [access_compat:error] [pid 251754:tid 251999] [client 47.79.13.65:33400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:14.340487 2026] [access_compat:error] [pid 251754:tid 251999] [client 47.79.13.65:33400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:14.419643 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.420037 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.510785 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.511056 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.546933 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:04:14.547219 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:04:14.552476 2026] [security2:error] [pid 251754:tid 251968] [client 20.214.145.90:38394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/marijuana.php"] [unique_id "ary0bpOnWJRlb5xgkk3e8QAAANc"]
[Wed Sep 30 01:04:14.564370 2026] [security2:error] [pid 251754:tid 251980] [client 20.28.180.172:62342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0bpOnWJRlb5xgkk3e8gAAAOM"]
[Wed Sep 30 01:04:14.564577 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:37925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/admin.php"] [unique_id "ary0bpOnWJRlb5xgkk3e8wAAAPU"]
[Wed Sep 30 01:04:14.601463 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.601726 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.613510 2026] [security2:error] [pid 251754:tid 251890] [client 64.227.188.205:35298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0bpOnWJRlb5xgkk3e-AAAAIk"]
[Wed Sep 30 01:04:14.693384 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.693650 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.784178 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.784461 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.823493 2026] [security2:error] [pid 251754:tid 251965] [client 20.214.145.90:28224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/about/function.php"] [unique_id "ary0bpOnWJRlb5xgkk3fBQAAANQ"]
[Wed Sep 30 01:04:14.825482 2026] [security2:error] [pid 251754:tid 251953] [client 4.196.65.241:64163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/pqfpcelx.php"] [unique_id "ary0bpOnWJRlb5xgkk3fBgAAAMg"]
[Wed Sep 30 01:04:14.828574 2026] [security2:error] [pid 251754:tid 251984] [client 52.231.30.175:37928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/geck.php"] [unique_id "ary0bpOnWJRlb5xgkk3fBwAAAOc"]
[Wed Sep 30 01:04:14.833625 2026] [security2:error] [pid 251754:tid 251977] [client 20.219.2.60:18908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary0bpOnWJRlb5xgkk3fCAAAAOA"]
[Wed Sep 30 01:04:14.843279 2026] [security2:error] [pid 251754:tid 251955] [client 20.198.74.230:24134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/chfjgjn.php"] [unique_id "ary0bpOnWJRlb5xgkk3fCQAAAMo"]
[Wed Sep 30 01:04:14.875509 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.875787 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:14.967491 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:14.967877 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.025915 2026] [security2:error] [pid 251754:tid 251915] [client 85.204.70.104:60160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0b5OnWJRlb5xgkk3fEgAAAKI"]
[Wed Sep 30 01:04:15.055259 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.055514 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.102537 2026] [security2:error] [pid 251754:tid 251899] [client 20.214.145.90:43410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/simple.php"] [unique_id "ary0b5OnWJRlb5xgkk3fGAAAAJI"]
[Wed Sep 30 01:04:15.122279 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.30.175:37256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/goods.php"] [unique_id "ary0b5OnWJRlb5xgkk3fGQAAAM8"]
[Wed Sep 30 01:04:15.146948 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.147206 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.153426 2026] [security2:error] [pid 251754:tid 251995] [client 116.197.133.25:50404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fGwAAAPI"]
[Wed Sep 30 01:04:15.153515 2026] [security2:error] [pid 251754:tid 251995] [client 116.197.133.25:50404] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fGwAAAPI"]
[Wed Sep 30 01:04:15.237622 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.237888 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.246079 2026] [security2:error] [pid 251754:tid 251770] [remote 52.167.144.19:17056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-content/cache/autoptimize/autoptimize_single_1c81c84b3d97c7b18dbb95d45d2b0e71.php"] [unique_id "ary0b5OnWJRlb5xgkk3fIQAA0Q0"], referer: https://kcd-global.com/product/rtp-cleaner-and-disinfectant-pack-of-6/
[Wed Sep 30 01:04:15.304385 2026] [security2:error] [pid 251754:tid 251908] [client 64.227.188.205:35302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0b5OnWJRlb5xgkk3fJgAAAJs"]
[Wed Sep 30 01:04:15.306767 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:15.307047 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:15.322791 2026] [security2:error] [pid 251754:tid 251905] [client 104.208.65.139:13737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/alfa.php"] [unique_id "ary0b5OnWJRlb5xgkk3fKAAAAJg"]
[Wed Sep 30 01:04:15.329326 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.329597 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.390883 2026] [security2:error] [pid 251754:tid 251966] [client 52.231.30.175:37931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/dejavu.php"] [unique_id "ary0b5OnWJRlb5xgkk3fLAAAANU"]
[Wed Sep 30 01:04:15.391824 2026] [security2:error] [pid 251754:tid 251990] [client 20.214.145.90:28336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/goat1.php"] [unique_id "ary0b5OnWJRlb5xgkk3fLQAAAO0"]
[Wed Sep 30 01:04:15.420743 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.421028 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.471255 2026] [security2:error] [pid 251754:tid 251975] [client 201.32.215.149:7075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fNwAAAN4"]
[Wed Sep 30 01:04:15.471407 2026] [security2:error] [pid 251754:tid 251975] [client 201.32.215.149:7075] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fNwAAAN4"]
[Wed Sep 30 01:04:15.511794 2026] [access_compat:error] [pid 251754:tid 251926] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.512074 2026] [access_compat:error] [pid 251754:tid 251926] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.532391 2026] [security2:error] [pid 251754:tid 251904] [client 202.179.95.79:61574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fOwAAAJc"]
[Wed Sep 30 01:04:15.532562 2026] [security2:error] [pid 251754:tid 251904] [client 202.179.95.79:61574] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fOwAAAJc"]
[Wed Sep 30 01:04:15.535041 2026] [security2:error] [pid 251754:tid 251986] [client 20.70.173.30:50733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/inputs.php"] [unique_id "ary0b5OnWJRlb5xgkk3fPAAAAOk"]
[Wed Sep 30 01:04:15.569340 2026] [security2:error] [pid 251754:tid 252007] [client 152.59.165.7:56277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fQAAAAP4"]
[Wed Sep 30 01:04:15.569437 2026] [security2:error] [pid 251754:tid 252007] [client 152.59.165.7:56277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fQAAAAP4"]
[Wed Sep 30 01:04:15.581719 2026] [security2:error] [pid 251754:tid 252005] [client 179.108.213.153:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0b5OnWJRlb5xgkk3fQQAAAPw"]
[Wed Sep 30 01:04:15.603749 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.604189 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.612176 2026] [security2:error] [pid 251754:tid 251965] [client 20.214.109.68:9889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/xxx.php"] [unique_id "ary0b5OnWJRlb5xgkk3fRAAAANQ"]
[Wed Sep 30 01:04:15.667287 2026] [security2:error] [pid 251754:tid 251993] [client 85.204.70.104:60166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0b5OnWJRlb5xgkk3fSAAAAPA"]
[Wed Sep 30 01:04:15.688330 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.30.175:37951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/h02ugyh.php"] [unique_id "ary0b5OnWJRlb5xgkk3fSwAAALE"]
[Wed Sep 30 01:04:15.698688 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.699150 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.726084 2026] [security2:error] [pid 251754:tid 251932] [client 20.214.145.90:28335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/chosen.php"] [unique_id "ary0b5OnWJRlb5xgkk3fTgAAALM"]
[Wed Sep 30 01:04:15.750530 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:15.750820 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:15.780906 2026] [security2:error] [pid 251754:tid 251943] [client 8.162.11.86:34618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ary0b5OnWJRlb5xgkk3fUwAAAL4"], referer: https://makulapictures.com/wp-login.php
[Wed Sep 30 01:04:15.784961 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.785223 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.821715 2026] [security2:error] [pid 251754:tid 251901] [client 190.111.144.145:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/software/3d-design-animation-software"] [unique_id "ary0b5OnWJRlb5xgkk3fVgAAAJQ"]
[Wed Sep 30 01:04:15.830965 2026] [security2:error] [pid 251754:tid 251956] [client 168.100.149.72:44650] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0b5OnWJRlb5xgkk3fJwAAyww"]
[Wed Sep 30 01:04:15.874847 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.875114 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.878055 2026] [security2:error] [pid 251754:tid 252011] [client 116.193.128.26:50890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fXwAAAQI"]
[Wed Sep 30 01:04:15.878179 2026] [security2:error] [pid 251754:tid 252011] [client 116.193.128.26:50890] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0b5OnWJRlb5xgkk3fXwAAAQI"]
[Wed Sep 30 01:04:15.952410 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.30.175:37299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/155.php"] [unique_id "ary0b5OnWJRlb5xgkk3fZwAAAMc"]
[Wed Sep 30 01:04:15.965547 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:15.965830 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:15.992363 2026] [security2:error] [pid 251754:tid 251931] [client 20.194.30.107:17415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/222.php"] [unique_id "ary0b5OnWJRlb5xgkk3fbQAAALI"]
[Wed Sep 30 01:04:16.008881 2026] [security2:error] [pid 251754:tid 251959] [client 20.214.145.90:43424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-cron.php"] [unique_id "ary0cJOnWJRlb5xgkk3fbwAAAM4"]
[Wed Sep 30 01:04:16.024800 2026] [security2:error] [pid 251754:tid 252010] [client 64.227.188.205:35310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0cJOnWJRlb5xgkk3fcAAAAQE"]
[Wed Sep 30 01:04:16.041071 2026] [security2:error] [pid 251754:tid 251998] [client 203.122.45.246:50088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fcQAAAPU"]
[Wed Sep 30 01:04:16.041189 2026] [security2:error] [pid 251754:tid 251998] [client 203.122.45.246:50088] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fcQAAAPU"]
[Wed Sep 30 01:04:16.058459 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.058724 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.138043 2026] [security2:error] [pid 251754:tid 251921] [client 223.181.60.167:10940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fdgAAAKg"]
[Wed Sep 30 01:04:16.138153 2026] [security2:error] [pid 251754:tid 251921] [client 223.181.60.167:10940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fdgAAAKg"]
[Wed Sep 30 01:04:16.148338 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.148590 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.161647 2026] [security2:error] [pid 251754:tid 251968] [client 4.240.25.22:8471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/as.php"] [unique_id "ary0cJOnWJRlb5xgkk3ffAAAANc"]
[Wed Sep 30 01:04:16.177573 2026] [security2:error] [pid 251754:tid 251910] [client 20.214.109.68:61176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/njxjtooj.php"] [unique_id "ary0cJOnWJRlb5xgkk3ffgAAAJ0"]
[Wed Sep 30 01:04:16.216635 2026] [security2:error] [pid 251754:tid 251929] [client 52.231.30.175:37341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/ops.php"] [unique_id "ary0cJOnWJRlb5xgkk3fgQAAALA"]
[Wed Sep 30 01:04:16.239571 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.239854 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.286104 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDYvcm9vdA==
[Wed Sep 30 01:04:16.286363 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDYvcm9vdA==
[Wed Sep 30 01:04:16.323825 2026] [security2:error] [pid 251754:tid 251992] [client 20.214.145.90:28248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/yanz.php"] [unique_id "ary0cJOnWJRlb5xgkk3fjwAAAO8"]
[Wed Sep 30 01:04:16.327071 2026] [security2:error] [pid 251754:tid 251914] [client 85.204.70.104:60170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0cJOnWJRlb5xgkk3fkQAAAKE"]
[Wed Sep 30 01:04:16.334731 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.335188 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.349482 2026] [security2:error] [pid 251754:tid 251961] [client 20.219.2.60:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws82.php"] [unique_id "ary0cJOnWJRlb5xgkk3fkgAAANA"]
[Wed Sep 30 01:04:16.424052 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.424339 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.492368 2026] [security2:error] [pid 251754:tid 251922] [client 103.159.192.142:52000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fnAAAAKk"]
[Wed Sep 30 01:04:16.492494 2026] [security2:error] [pid 251754:tid 251922] [client 103.159.192.142:52000] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0cJOnWJRlb5xgkk3fnAAAAKk"]
[Wed Sep 30 01:04:16.505152 2026] [security2:error] [pid 251754:tid 251911] [client 52.231.30.175:37261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/mac.php"] [unique_id "ary0cJOnWJRlb5xgkk3fnQAAAJ4"]
[Wed Sep 30 01:04:16.515213 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.515496 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.555115 2026] [security2:error] [pid 251754:tid 251950] [client 20.28.180.172:61215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0cJOnWJRlb5xgkk3fogAAAMU"]
[Wed Sep 30 01:04:16.566697 2026] [access_compat:error] [pid 251754:tid 251902] [client 43.172.194.113:44880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.567023 2026] [access_compat:error] [pid 251754:tid 251902] [client 43.172.194.113:44880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.607133 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.607410 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.698320 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.698590 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.704650 2026] [security2:error] [pid 251754:tid 251889] [client 4.196.65.241:19187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/df.php"] [unique_id "ary0cJOnWJRlb5xgkk3fqgAAAIg"]
[Wed Sep 30 01:04:16.718234 2026] [security2:error] [pid 251754:tid 251917] [client 64.227.188.205:35316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0cJOnWJRlb5xgkk3frQAAAKQ"]
[Wed Sep 30 01:04:16.766174 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:37343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/makeasmtp.php"] [unique_id "ary0cJOnWJRlb5xgkk3fsgAAAJc"]
[Wed Sep 30 01:04:16.766751 2026] [security2:error] [pid 251754:tid 251983] [client 20.214.145.90:43441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/config.php"] [unique_id "ary0cJOnWJRlb5xgkk3fswAAAOY"]
[Wed Sep 30 01:04:16.785839 2026] [access_compat:error] [pid 251754:tid 252007] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:16.785983 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.786090 2026] [access_compat:error] [pid 251754:tid 252007] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:16.786218 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.829007 2026] [security2:error] [pid 251754:tid 251887] [client 45.138.12.32:38040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.clg.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0cJOnWJRlb5xgkk3ftwAAAIY"]
[Wed Sep 30 01:04:16.879292 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.879538 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:16.931852 2026] [security2:error] [pid 251754:tid 252000] [client 20.214.109.68:62414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws85.php"] [unique_id "ary0cJOnWJRlb5xgkk3fvQAAAPc"]
[Wed Sep 30 01:04:16.968660 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:16.969104 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.001393 2026] [security2:error] [pid 251754:tid 251894] [client 193.70.64.67:53146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.64.70.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "ary0cJOnWJRlb5xgkk3fyQAAAI0"]
[Wed Sep 30 01:04:17.027950 2026] [security2:error] [pid 251754:tid 251959] [client 85.204.70.104:60178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0cZOnWJRlb5xgkk3f0gAAAM4"]
[Wed Sep 30 01:04:17.059915 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:37296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/pucci.php"] [unique_id "ary0cZOnWJRlb5xgkk3f1QAAANA"]
[Wed Sep 30 01:04:17.067196 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.067540 2026] [security2:error] [pid 251754:tid 252004] [client 20.214.145.90:38397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/network.php"] [unique_id "ary0cZOnWJRlb5xgkk3f1gAAAPs"]
[Wed Sep 30 01:04:17.067626 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.150788 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.151067 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:2207] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.291116 2026] [access_compat:error] [pid 251754:tid 251967] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:04:17.291384 2026] [access_compat:error] [pid 251754:tid 251967] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:04:17.293123 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.293374 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.333578 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.30.175:37338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/puc.php"] [unique_id "ary0cZOnWJRlb5xgkk3f5gAAAPY"]
[Wed Sep 30 01:04:17.370223 2026] [security2:error] [pid 251754:tid 251940] [client 20.214.145.90:28316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-2019.php"] [unique_id "ary0cZOnWJRlb5xgkk3f6QAAALs"]
[Wed Sep 30 01:04:17.383528 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:51829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.383800 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:51829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.390666 2026] [security2:error] [pid 251754:tid 251921] [client 47.128.20.253:18178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mirandacustomsbrokerage.com"] [uri "/contact-us"] [unique_id "ary0cZOnWJRlb5xgkk3f7AAAAKg"]
[Wed Sep 30 01:04:17.417220 2026] [security2:error] [pid 251754:tid 252007] [client 8.162.11.86:44654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "makulapictures.com"] [uri "/wp-login.php"] [unique_id "ary0cZOnWJRlb5xgkk3f7wAAAP4"], referer: https://makulapictures.com/wp-login.php
[Wed Sep 30 01:04:17.424854 2026] [security2:error] [pid 251754:tid 251924] [client 64.227.188.205:35330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0cZOnWJRlb5xgkk3f8QAAAKs"]
[Wed Sep 30 01:04:17.426740 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.427017 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.494489 2026] [security2:error] [pid 251754:tid 251977] [client 20.70.173.30:48111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/one.php"] [unique_id "ary0cZOnWJRlb5xgkk3f-QAAAOA"]
[Wed Sep 30 01:04:17.520063 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.520517 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.576737 2026] [security2:error] [pid 251754:tid 251972] [client 216.73.216.46:51829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0cZOnWJRlb5xgkk3gAwAAANs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTI0
[Wed Sep 30 01:04:17.598863 2026] [security2:error] [pid 251754:tid 251997] [client 20.28.180.172:62341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ccs.php"] [unique_id "ary0cZOnWJRlb5xgkk3gBQAAAPQ"]
[Wed Sep 30 01:04:17.622158 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:37357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/8.php"] [unique_id "ary0cZOnWJRlb5xgkk3gCAAAANA"]
[Wed Sep 30 01:04:17.651995 2026] [security2:error] [pid 251754:tid 251836] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0cZOnWJRlb5xgkk3gDQAAi08"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D48828
[Wed Sep 30 01:04:17.657717 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.658032 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.669805 2026] [security2:error] [pid 251754:tid 251927] [client 85.204.70.104:60194] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0cZOnWJRlb5xgkk3gEAAAAK4"]
[Wed Sep 30 01:04:17.679873 2026] [security2:error] [pid 251754:tid 251942] [client 20.214.145.90:43444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/bypass.php"] [unique_id "ary0cZOnWJRlb5xgkk3gEQAAAL0"]
[Wed Sep 30 01:04:17.705839 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.706262 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.729889 2026] [security2:error] [pid 251754:tid 252009] [client 103.168.67.253:31570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0cZOnWJRlb5xgkk3gFgAAAQA"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:17.783610 2026] [access_compat:error] [pid 251754:tid 251981] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZA==
[Wed Sep 30 01:04:17.783905 2026] [access_compat:error] [pid 251754:tid 251981] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZA==
[Wed Sep 30 01:04:17.789104 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.789497 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.828947 2026] [security2:error] [pid 251754:tid 251996] [client 173.254.29.157:35980] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0cZOnWJRlb5xgkk3gGQAAAPM"]
[Wed Sep 30 01:04:17.848738 2026] [security2:error] [pid 251754:tid 251923] [client 173.254.29.157:35984] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0cZOnWJRlb5xgkk3gGgAAAKo"]
[Wed Sep 30 01:04:17.851909 2026] [security2:error] [pid 251754:tid 251904] [client 43.227.131.37:44837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0cZOnWJRlb5xgkk3gGwAAAJc"]
[Wed Sep 30 01:04:17.852014 2026] [security2:error] [pid 251754:tid 251904] [client 43.227.131.37:44837] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0cZOnWJRlb5xgkk3gGwAAAJc"]
[Wed Sep 30 01:04:17.866002 2026] [security2:error] [pid 251754:tid 251941] [client 173.254.29.157:35998] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0cZOnWJRlb5xgkk3gHAAAALw"]
[Wed Sep 30 01:04:17.882680 2026] [security2:error] [pid 251754:tid 251998] [client 168.100.149.66:44358] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0cZOnWJRlb5xgkk3f5QAA9T4"]
[Wed Sep 30 01:04:17.882995 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.883444 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.883835 2026] [security2:error] [pid 251754:tid 251952] [client 173.254.29.157:36000] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0cZOnWJRlb5xgkk3gHgAAAMc"]
[Wed Sep 30 01:04:17.890006 2026] [security2:error] [pid 251754:tid 251962] [client 52.231.30.175:37330] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/1.php"] [unique_id "ary0cZOnWJRlb5xgkk3gIAAAANE"]
[Wed Sep 30 01:04:17.890099 2026] [security2:error] [pid 251754:tid 251962] [client 52.231.30.175:37330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/1.php"] [unique_id "ary0cZOnWJRlb5xgkk3gIAAAANE"]
[Wed Sep 30 01:04:17.914357 2026] [security2:error] [pid 251754:tid 251916] [client 20.219.2.60:19407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/new.php"] [unique_id "ary0cZOnWJRlb5xgkk3gIwAAAKM"]
[Wed Sep 30 01:04:17.933170 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.13.28:58904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:17.933610 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.13.28:58904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:17.969663 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:17.969975 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:17.984888 2026] [security2:error] [pid 251754:tid 251999] [client 20.214.145.90:38369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary0cZOnWJRlb5xgkk3gKAAAAPY"]
[Wed Sep 30 01:04:18.062836 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.063087 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.081370 2026] [security2:error] [pid 251754:tid 251980] [client 20.214.109.68:9880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws61.php"] [unique_id "ary0cpOnWJRlb5xgkk3gLAAAAOM"]
[Wed Sep 30 01:04:18.121551 2026] [security2:error] [pid 251754:tid 251898] [client 64.227.188.205:60962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0cpOnWJRlb5xgkk3gLwAAAJE"]
[Wed Sep 30 01:04:18.151066 2026] [security2:error] [pid 251754:tid 251977] [client 52.231.30.175:37308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/admin.php"] [unique_id "ary0cpOnWJRlb5xgkk3gNAAAAOA"]
[Wed Sep 30 01:04:18.154010 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.154254 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.160056 2026] [security2:error] [pid 251754:tid 251964] [client 106.214.2.47:14304] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0cpOnWJRlb5xgkk3gMQAAANM"]
[Wed Sep 30 01:04:18.226347 2026] [security2:error] [pid 251754:tid 251945] [client 49.36.41.37:54230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0cpOnWJRlb5xgkk3gOAAAAMA"]
[Wed Sep 30 01:04:18.226550 2026] [security2:error] [pid 251754:tid 251945] [client 49.36.41.37:54230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0cpOnWJRlb5xgkk3gOAAAAMA"]
[Wed Sep 30 01:04:18.233084 2026] [security2:error] [pid 251754:tid 251944] [client 49.205.105.16:14410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0cpOnWJRlb5xgkk3gOgAAAL8"]
[Wed Sep 30 01:04:18.233249 2026] [security2:error] [pid 251754:tid 251944] [client 49.205.105.16:14410] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0cpOnWJRlb5xgkk3gOgAAAL8"]
[Wed Sep 30 01:04:18.246677 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.247019 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.285220 2026] [access_compat:error] [pid 251754:tid 251917] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 01:04:18.285470 2026] [access_compat:error] [pid 251754:tid 251917] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 01:04:18.327769 2026] [security2:error] [pid 251754:tid 251940] [client 85.204.70.104:60196] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0cpOnWJRlb5xgkk3gPwAAALs"]
[Wed Sep 30 01:04:18.335164 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.335427 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.410321 2026] [security2:error] [pid 251754:tid 251906] [client 20.214.145.90:43433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary0cpOnWJRlb5xgkk3gRgAAAJk"]
[Wed Sep 30 01:04:18.415841 2026] [security2:error] [pid 251754:tid 252013] [client 52.231.30.175:37250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/edit.php"] [unique_id "ary0cpOnWJRlb5xgkk3gSwAAAQQ"]
[Wed Sep 30 01:04:18.424842 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.425117 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.494381 2026] [security2:error] [pid 251754:tid 251903] [client 94.176.85.117:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0cpOnWJRlb5xgkk3gUQAAAJY"]
[Wed Sep 30 01:04:18.520484 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.520910 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.578408 2026] [security2:error] [pid 251754:tid 252012] [client 20.214.109.68:61149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/iyy.php"] [unique_id "ary0cpOnWJRlb5xgkk3gWAAAAQM"]
[Wed Sep 30 01:04:18.609715 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.609999 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.646838 2026] [security2:error] [pid 251754:tid 251975] [client 103.168.67.253:31586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0cpOnWJRlb5xgkk3gWwAAAN4"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:18.671454 2026] [security2:error] [pid 251754:tid 251841] [remote 52.167.144.19:17056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-content/cache/autoptimize/autoptimize_single_c05ecc309c3849f400d11060e7068207.php"] [unique_id "ary0cpOnWJRlb5xgkk3gXgAAvlQ"], referer: https://kcd-global.com/product/rtp-cleaner-and-disinfectant-pack-of-6/
[Wed Sep 30 01:04:18.684606 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.30.175:37351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/inputs.php"] [unique_id "ary0cpOnWJRlb5xgkk3gXwAAAPY"]
[Wed Sep 30 01:04:18.698617 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.698929 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:1412] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.756383 2026] [security2:error] [pid 251754:tid 251893] [client 104.208.65.139:13732] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.jugglepro.org"] [uri "/wp-content/uploads/"] [unique_id "ary0cpOnWJRlb5xgkk3gZAAAAIw"]
[Wed Sep 30 01:04:18.778845 2026] [security2:error] [pid 251754:tid 251980] [client 20.214.145.90:38358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/tiny.php"] [unique_id "ary0cpOnWJRlb5xgkk3gZgAAAOM"]
[Wed Sep 30 01:04:18.790967 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.791231 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.799417 2026] [security2:error] [pid 251754:tid 251929] [client 4.240.25.22:8504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/simple.php"] [unique_id "ary0cpOnWJRlb5xgkk3gaAAAALA"]
[Wed Sep 30 01:04:18.810983 2026] [access_compat:error] [pid 251754:tid 251971] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 01:04:18.811254 2026] [access_compat:error] [pid 251754:tid 251971] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 01:04:18.831877 2026] [security2:error] [pid 251754:tid 251963] [client 64.227.188.205:60972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0cpOnWJRlb5xgkk3gagAAANI"]
[Wed Sep 30 01:04:18.883543 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.883802 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:18.888030 2026] [security2:error] [pid 251754:tid 251945] [client 216.73.216.46:1412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0cpOnWJRlb5xgkk3gcQAAAMA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAzL25vZGUwL21lbW9yeTM3OS9ub2RlMC9jcHU4
[Wed Sep 30 01:04:18.929048 2026] [security2:error] [pid 251754:tid 251967] [client 85.204.70.104:60200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0cpOnWJRlb5xgkk3gdAAAANY"]
[Wed Sep 30 01:04:18.936417 2026] [security2:error] [pid 251754:tid 252007] [client 62.3.29.151:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0cpOnWJRlb5xgkk3gdQAAAP4"]
[Wed Sep 30 01:04:18.953889 2026] [security2:error] [pid 251754:tid 252008] [client 52.231.30.175:37915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/classwithtostring.php"] [unique_id "ary0cpOnWJRlb5xgkk3gegAAAP8"]
[Wed Sep 30 01:04:18.970891 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:18.971146 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.046557 2026] [security2:error] [pid 251754:tid 251955] [client 20.198.74.230:24150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/83a907c742index.php"] [unique_id "ary0c5OnWJRlb5xgkk3gfwAAAMo"]
[Wed Sep 30 01:04:19.061630 2026] [security2:error] [pid 251754:tid 252013] [client 103.206.162.20:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0c5OnWJRlb5xgkk3ggQAAAQQ"]
[Wed Sep 30 01:04:19.063800 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.064119 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.121915 2026] [security2:error] [pid 251754:tid 251922] [client 20.214.145.90:43415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/lock.php"] [unique_id "ary0c5OnWJRlb5xgkk3ghgAAAKk"]
[Wed Sep 30 01:04:19.154180 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.154447 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.239237 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.30.175:37336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/adminfuns.php"] [unique_id "ary0c5OnWJRlb5xgkk3gjQAAAJQ"]
[Wed Sep 30 01:04:19.246008 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.246274 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.283970 2026] [access_compat:error] [pid 251754:tid 251916] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:19.284234 2026] [access_compat:error] [pid 251754:tid 251916] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:19.335938 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.336347 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.403022 2026] [security2:error] [pid 251754:tid 251863] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0c5OnWJRlb5xgkk3glwAA3mo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297509&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:19.403052 2026] [security2:error] [pid 251754:tid 251863] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0c5OnWJRlb5xgkk3glwAA3mo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297509&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:19.426156 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.426425 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.430707 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.65:52772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:19.431024 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.65:52772] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:19.445945 2026] [security2:error] [pid 251754:tid 251964] [client 223.235.102.107:8313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0c5OnWJRlb5xgkk3gnAAAANM"]
[Wed Sep 30 01:04:19.446066 2026] [security2:error] [pid 251754:tid 251964] [client 223.235.102.107:8313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0c5OnWJRlb5xgkk3gnAAAANM"]
[Wed Sep 30 01:04:19.452910 2026] [security2:error] [pid 251754:tid 251957] [client 20.219.2.60:18870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/press.php"] [unique_id "ary0c5OnWJRlb5xgkk3gnQAAAMw"]
[Wed Sep 30 01:04:19.459875 2026] [security2:error] [pid 251754:tid 251913] [client 20.214.109.68:61129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/900.php"] [unique_id "ary0c5OnWJRlb5xgkk3gnwAAAKA"]
[Wed Sep 30 01:04:19.462402 2026] [security2:error] [pid 251754:tid 251924] [client 20.214.145.90:43430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/mail.php"] [unique_id "ary0c5OnWJRlb5xgkk3goAAAAKs"]
[Wed Sep 30 01:04:19.503858 2026] [security2:error] [pid 251754:tid 251929] [client 52.231.30.175:37339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/222.php"] [unique_id "ary0c5OnWJRlb5xgkk3gowAAALA"]
[Wed Sep 30 01:04:19.515820 2026] [security2:error] [pid 251754:tid 251958] [client 64.227.188.205:60974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0c5OnWJRlb5xgkk3gpgAAAM0"]
[Wed Sep 30 01:04:19.521546 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.521989 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.565707 2026] [security2:error] [pid 251754:tid 251962] [client 85.204.70.104:60214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0c5OnWJRlb5xgkk3gqgAAANE"]
[Wed Sep 30 01:04:19.611055 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.611456 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.700049 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.700320 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.734670 2026] [security2:error] [pid 251754:tid 252008] [client 4.196.65.241:62396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wefile.php"] [unique_id "ary0c5OnWJRlb5xgkk3guQAAAP8"]
[Wed Sep 30 01:04:19.749192 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAxL2N3ZA==
[Wed Sep 30 01:04:19.749457 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAxL2N3ZA==
[Wed Sep 30 01:04:19.758123 2026] [security2:error] [pid 251754:tid 251965] [client 20.214.145.90:43412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "ary0c5OnWJRlb5xgkk3gvQAAANQ"]
[Wed Sep 30 01:04:19.789414 2026] [security2:error] [pid 251754:tid 251910] [client 52.231.30.175:37273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/BDKR28WP.php"] [unique_id "ary0c5OnWJRlb5xgkk3gwAAAAJ0"]
[Wed Sep 30 01:04:19.794669 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.795125 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.871253 2026] [security2:error] [pid 251754:tid 251925] [client 168.100.149.17:18810] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0c5OnWJRlb5xgkk3gkAAArFw"]
[Wed Sep 30 01:04:19.884344 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:19.884767 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:19.890914 2026] [security2:error] [pid 251754:tid 252004] [client 20.214.109.68:9917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/blsvgeyaza.php"] [unique_id "ary0c5OnWJRlb5xgkk3gzwAAAPs"]
[Wed Sep 30 01:04:19.907285 2026] [security2:error] [pid 251754:tid 251903] [client 93.176.43.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0c5OnWJRlb5xgkk3g0AAAAJY"]
[Wed Sep 30 01:04:20.055393 2026] [security2:error] [pid 251754:tid 251913] [client 52.231.30.175:37979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp.php"] [unique_id "ary0dJOnWJRlb5xgkk3g2wAAAKA"]
[Wed Sep 30 01:04:20.076889 2026] [security2:error] [pid 251754:tid 251986] [client 20.214.145.90:28292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/file.php"] [unique_id "ary0dJOnWJRlb5xgkk3g3QAAAOk"]
[Wed Sep 30 01:04:20.228396 2026] [security2:error] [pid 251754:tid 251999] [client 64.227.188.205:60986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0dJOnWJRlb5xgkk3g4gAAAPY"]
[Wed Sep 30 01:04:20.229588 2026] [security2:error] [pid 251754:tid 252009] [client 85.204.70.104:60220] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0dJOnWJRlb5xgkk3g4wAAAQA"]
[Wed Sep 30 01:04:20.248879 2026] [access_compat:error] [pid 251754:tid 252011] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:20.249150 2026] [access_compat:error] [pid 251754:tid 252011] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjczNDM3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:20.320701 2026] [security2:error] [pid 251754:tid 251895] [client 52.231.30.175:37358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/simple.php"] [unique_id "ary0dJOnWJRlb5xgkk3g6wAAAI4"]
[Wed Sep 30 01:04:20.347183 2026] [security2:error] [pid 251754:tid 251889] [client 84.47.63.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0dJOnWJRlb5xgkk3g7gAAAIg"]
[Wed Sep 30 01:04:20.370240 2026] [security2:error] [pid 251754:tid 251938] [client 182.69.182.151:19542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g8gAAALk"]
[Wed Sep 30 01:04:20.370720 2026] [security2:error] [pid 251754:tid 251938] [client 182.69.182.151:19542] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g8gAAALk"]
[Wed Sep 30 01:04:20.415506 2026] [security2:error] [pid 251754:tid 251920] [client 103.168.67.253:31594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0dJOnWJRlb5xgkk3g9QAAAKc"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:20.419304 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.419542 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.428209 2026] [security2:error] [pid 251754:tid 251910] [client 20.214.145.90:43428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary0dJOnWJRlb5xgkk3g9gAAAJ0"]
[Wed Sep 30 01:04:20.435980 2026] [security2:error] [pid 251754:tid 251904] [client 223.181.30.165:8109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g9wAAAJc"]
[Wed Sep 30 01:04:20.436113 2026] [security2:error] [pid 251754:tid 251904] [client 223.181.30.165:8109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g9wAAAJc"]
[Wed Sep 30 01:04:20.442136 2026] [security2:error] [pid 251754:tid 251921] [client 102.254.102.41:28291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g-AAAAKg"]
[Wed Sep 30 01:04:20.442249 2026] [security2:error] [pid 251754:tid 251921] [client 102.254.102.41:28291] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3g-AAAAKg"]
[Wed Sep 30 01:04:20.500944 2026] [security2:error] [pid 251754:tid 251896] [client 20.194.30.107:17391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/well.php"] [unique_id "ary0dJOnWJRlb5xgkk3g-wAAAI8"]
[Wed Sep 30 01:04:20.506385 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.506669 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.531820 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.532166 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.583883 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.584154 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.586047 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:37941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/chosen.php"] [unique_id "ary0dJOnWJRlb5xgkk3g_wAAAOU"]
[Wed Sep 30 01:04:20.615764 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.616067 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.622973 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:12808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.623220 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:12808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.658173 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.658435 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.717050 2026] [security2:error] [pid 251754:tid 251937] [client 201.219.160.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0dJOnWJRlb5xgkk3hDwAAALg"]
[Wed Sep 30 01:04:20.758550 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.758840 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.782524 2026] [security2:error] [pid 251754:tid 251900] [client 37.41.16.35:54485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3hFwAAAJM"]
[Wed Sep 30 01:04:20.782659 2026] [security2:error] [pid 251754:tid 251900] [client 37.41.16.35:54485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0dJOnWJRlb5xgkk3hFwAAAJM"]
[Wed Sep 30 01:04:20.794145 2026] [access_compat:error] [pid 251754:tid 251929] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:20.794409 2026] [access_compat:error] [pid 251754:tid 251929] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:20.796483 2026] [security2:error] [pid 251754:tid 251970] [client 20.214.145.90:43445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary0dJOnWJRlb5xgkk3hGwAAANk"]
[Wed Sep 30 01:04:20.796510 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.796749 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.817190 2026] [security2:error] [pid 251754:tid 251969] [client 216.73.216.46:12808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0dJOnWJRlb5xgkk3hHAAAANg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDcvbm9kZTAvbWVtb3J5MTA3
[Wed Sep 30 01:04:20.852463 2026] [security2:error] [pid 251754:tid 251968] [client 52.231.30.175:37193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/als.php"] [unique_id "ary0dJOnWJRlb5xgkk3hHQAAANc"]
[Wed Sep 30 01:04:20.888791 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.889064 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.920714 2026] [security2:error] [pid 251754:tid 251984] [client 64.227.188.205:60998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0dJOnWJRlb5xgkk3hIwAAAOc"]
[Wed Sep 30 01:04:20.925326 2026] [security2:error] [pid 251754:tid 251923] [client 85.204.70.104:60222] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pag.umh.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0dJOnWJRlb5xgkk3hJAAAAKo"]
[Wed Sep 30 01:04:20.980802 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:20.981091 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:20.994889 2026] [security2:error] [pid 251754:tid 251757] [remote 47.128.114.119:62276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/2592/akbar-bugti-train-detained-at-jacobabad-station"] [unique_id "ary0dJOnWJRlb5xgkk3hLAAA4wA"]
[Wed Sep 30 01:04:21.034720 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.035044 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.046182 2026] [security2:error] [pid 251754:tid 251930] [client 20.214.109.68:9417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gqhyti.php"] [unique_id "ary0dZOnWJRlb5xgkk3hMgAAALE"]
[Wed Sep 30 01:04:21.048579 2026] [security2:error] [pid 251754:tid 251918] [client 20.251.39.228:5561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0dZOnWJRlb5xgkk3hNAAAAKU"]
[Wed Sep 30 01:04:21.071920 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.072188 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.115554 2026] [security2:error] [pid 251754:tid 251940] [client 20.214.145.90:43427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/manager.php"] [unique_id "ary0dZOnWJRlb5xgkk3hOgAAALs"]
[Wed Sep 30 01:04:21.119544 2026] [security2:error] [pid 251754:tid 252008] [client 52.231.30.175:37203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/admin.php"] [unique_id "ary0dZOnWJRlb5xgkk3hOwAAAP8"]
[Wed Sep 30 01:04:21.168429 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.168682 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.193381 2026] [security2:error] [pid 251754:tid 251935] [client 20.219.2.60:18902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0dZOnWJRlb5xgkk3hQAAAALY"]
[Wed Sep 30 01:04:21.260364 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.260806 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:12549] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.266713 2026] [security2:error] [pid 251754:tid 251775] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0dZOnWJRlb5xgkk3hTAAAoBI"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=179f62ec3bca563b0b33249bd1b1b64c
[Wed Sep 30 01:04:21.266749 2026] [security2:error] [pid 251754:tid 251775] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0dZOnWJRlb5xgkk3hTAAAoBI"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=179f62ec3bca563b0b33249bd1b1b64c
[Wed Sep 30 01:04:21.347688 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:21.347964 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:21.348015 2026] [security2:error] [pid 251754:tid 251900] [client 161.123.178.0:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0dZOnWJRlb5xgkk3hUgAAAJM"]
[Wed Sep 30 01:04:21.350072 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.350331 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.378185 2026] [security2:error] [pid 251754:tid 251958] [client 45.138.12.41:60396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.qhw.axl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0dZOnWJRlb5xgkk3hVQAAAM0"]
[Wed Sep 30 01:04:21.387669 2026] [security2:error] [pid 251754:tid 251927] [client 52.231.30.175:37920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/f35.php"] [unique_id "ary0dZOnWJRlb5xgkk3hVgAAAK4"]
[Wed Sep 30 01:04:21.413926 2026] [security2:error] [pid 251754:tid 251956] [client 20.214.145.90:38389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "ary0dZOnWJRlb5xgkk3hWgAAAMs"]
[Wed Sep 30 01:04:21.440426 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.440694 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.452301 2026] [security2:error] [pid 251754:tid 251987] [client 216.73.216.46:12549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0dZOnWJRlb5xgkk3hXgAAAOo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvbWVtb3J5NDU1
[Wed Sep 30 01:04:21.464128 2026] [core:error] [pid 251754:tid 251923] [client 44.219.111.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.464153 2026] [core:error] [pid 251754:tid 251923] [client 44.219.111.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.532973 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.533245 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.616190 2026] [security2:error] [pid 251754:tid 251906] [client 64.227.188.205:32768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0dZOnWJRlb5xgkk3haAAAAJk"]
[Wed Sep 30 01:04:21.622572 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.622864 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.644233 2026] [security2:error] [pid 251754:tid 251997] [client 20.251.39.228:32863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0dZOnWJRlb5xgkk3hbgAAAPQ"]
[Wed Sep 30 01:04:21.660634 2026] [security2:error] [pid 251754:tid 252007] [client 52.231.30.175:37374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/aaa.php"] [unique_id "ary0dZOnWJRlb5xgkk3hcQAAAP4"]
[Wed Sep 30 01:04:21.669787 2026] [core:error] [pid 251754:tid 251895] [client 100.29.7.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.669818 2026] [core:error] [pid 251754:tid 251895] [client 100.29.7.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.715229 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.715487 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.730278 2026] [security2:error] [pid 251754:tid 251903] [client 20.214.145.90:28325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-configs.php"] [unique_id "ary0dZOnWJRlb5xgkk3heQAAAJY"]
[Wed Sep 30 01:04:21.755303 2026] [core:error] [pid 251754:tid 251784] [remote 100.29.7.37:51186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.755322 2026] [core:error] [pid 251754:tid 251784] [remote 100.29.7.37:51186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:21.806367 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.806647 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:54099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.861004 2026] [security2:error] [pid 251754:tid 251891] [client 168.100.149.35:49256] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0dZOnWJRlb5xgkk3hTwAAihQ"]
[Wed Sep 30 01:04:21.864871 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdA==
[Wed Sep 30 01:04:21.865298 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdA==
[Wed Sep 30 01:04:21.866207 2026] [security2:error] [pid 251754:tid 252000] [client 172.232.97.149:51526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/xbzbylqa.php"] [unique_id "ary0dZOnWJRlb5xgkk3hjQAAAPc"], referer: www.google.com
[Wed Sep 30 01:04:21.897015 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.897284 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.922197 2026] [security2:error] [pid 251754:tid 251941] [client 52.231.30.175:38011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/gecko.php"] [unique_id "ary0dZOnWJRlb5xgkk3hkAAAALw"]
[Wed Sep 30 01:04:21.987439 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:21.987717 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:21.994765 2026] [security2:error] [pid 251754:tid 251902] [client 216.73.216.46:54099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0dZOnWJRlb5xgkk3hmgAAAJU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1NA%3D%3D
[Wed Sep 30 01:04:22.045411 2026] [security2:error] [pid 251754:tid 251994] [client 20.251.39.228:29238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ccs.php"] [unique_id "ary0dpOnWJRlb5xgkk3hmwAAAPE"]
[Wed Sep 30 01:04:22.056755 2026] [security2:error] [pid 251754:tid 251925] [client 20.214.145.90:28232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary0dpOnWJRlb5xgkk3hnQAAAKw"]
[Wed Sep 30 01:04:22.078361 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.078642 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:26742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.133435 2026] [security2:error] [pid 251754:tid 251899] [client 20.194.30.107:34721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/gecko.php"] [unique_id "ary0dpOnWJRlb5xgkk3howAAAJI"]
[Wed Sep 30 01:04:22.140612 2026] [security2:error] [pid 251754:tid 251974] [client 103.168.67.253:31602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0dpOnWJRlb5xgkk3hpQAAAN0"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:22.163578 2026] [security2:error] [pid 251754:tid 251920] [client 216.73.216.46:26742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0dpOnWJRlb5xgkk3hpwAAAKc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTkyL25vZGUwL2NwdTM%3D
[Wed Sep 30 01:04:22.172323 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.172577 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.187678 2026] [security2:error] [pid 251754:tid 251932] [client 52.231.30.175:37305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/xiugai.php"] [unique_id "ary0dpOnWJRlb5xgkk3hqAAAALM"]
[Wed Sep 30 01:04:22.235016 2026] [security2:error] [pid 251754:tid 251977] [client 49.43.163.212:63064] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hrQAAAOA"]
[Wed Sep 30 01:04:22.235169 2026] [security2:error] [pid 251754:tid 251977] [client 49.43.163.212:63064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hrQAAAOA"]
[Wed Sep 30 01:04:22.267113 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.267387 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.271200 2026] [access_compat:error] [pid 251754:tid 251903] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:22.271462 2026] [access_compat:error] [pid 251754:tid 251903] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:22.300721 2026] [security2:error] [pid 251754:tid 251954] [client 20.214.109.68:61171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/autoxxi.php"] [unique_id "ary0dpOnWJRlb5xgkk3hsgAAAMk"]
[Wed Sep 30 01:04:22.325425 2026] [security2:error] [pid 251754:tid 251998] [client 64.227.188.205:32778] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0dpOnWJRlb5xgkk3htgAAAPU"]
[Wed Sep 30 01:04:22.348726 2026] [security2:error] [pid 251754:tid 251935] [client 107.23.198.238:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary0dpOnWJRlb5xgkk3huAAAALY"]
[Wed Sep 30 01:04:22.361211 2026] [security2:error] [pid 251754:tid 252004] [client 103.168.67.253:31604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0dpOnWJRlb5xgkk3hugAAAPs"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:22.363519 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.363970 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.371421 2026] [security2:error] [pid 251754:tid 251983] [client 20.214.145.90:43438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary0dpOnWJRlb5xgkk3huwAAAOY"]
[Wed Sep 30 01:04:22.398948 2026] [security2:error] [pid 251754:tid 251913] [client 20.194.30.107:17406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0dpOnWJRlb5xgkk3hvAAAAKA"]
[Wed Sep 30 01:04:22.450827 2026] [security2:error] [pid 251754:tid 252000] [client 52.231.30.175:37297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/inx.php"] [unique_id "ary0dpOnWJRlb5xgkk3hwAAAAPc"]
[Wed Sep 30 01:04:22.451937 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.452195 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.452195 2026] [security2:error] [pid 251754:tid 251950] [client 20.251.39.228:48638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/set.php"] [unique_id "ary0dpOnWJRlb5xgkk3hwQAAAMU"]
[Wed Sep 30 01:04:22.463145 2026] [security2:error] [pid 251754:tid 251970] [client 103.241.204.139:55697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hxAAAANk"]
[Wed Sep 30 01:04:22.463309 2026] [security2:error] [pid 251754:tid 251970] [client 103.241.204.139:55697] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hxAAAANk"]
[Wed Sep 30 01:04:22.481719 2026] [security2:error] [pid 251754:tid 251923] [client 107.23.198.238:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary0dpOnWJRlb5xgkk3hyQAAAKo"]
[Wed Sep 30 01:04:22.511226 2026] [security2:error] [pid 251754:tid 251942] [client 103.159.192.142:52151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hygAAAL0"]
[Wed Sep 30 01:04:22.511329 2026] [security2:error] [pid 251754:tid 251942] [client 103.159.192.142:52151] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3hygAAAL0"]
[Wed Sep 30 01:04:22.542106 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.542382 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.632706 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.632994 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.649691 2026] [security2:error] [pid 251754:tid 251759] [remote 52.167.144.19:17056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kcd-global.com"] [uri "/wp-content/cache/autoptimize/autoptimize_single_1383e4d0ef1c4475d3a93c24c1d5e906.php"] [unique_id "ary0dpOnWJRlb5xgkk3hzQAAtwI"], referer: https://kcd-global.com/product/rtp-cleaner-and-disinfectant-pack-of-6/
[Wed Sep 30 01:04:22.696615 2026] [security2:error] [pid 251754:tid 251939] [client 20.214.145.90:28275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary0dpOnWJRlb5xgkk3h1QAAALo"]
[Wed Sep 30 01:04:22.723258 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.723643 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.739783 2026] [security2:error] [pid 251754:tid 251944] [client 52.231.30.175:37955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/11.php"] [unique_id "ary0dpOnWJRlb5xgkk3h2AAAAL8"]
[Wed Sep 30 01:04:22.784762 2026] [access_compat:error] [pid 251754:tid 251940] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 01:04:22.785202 2026] [access_compat:error] [pid 251754:tid 251940] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9ydW4=
[Wed Sep 30 01:04:22.816041 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.816319 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.906765 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.907202 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:22.940354 2026] [security2:error] [pid 251754:tid 251948] [client 182.75.216.230:52593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3h3wAAAMM"]
[Wed Sep 30 01:04:22.940509 2026] [security2:error] [pid 251754:tid 251948] [client 182.75.216.230:52593] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0dpOnWJRlb5xgkk3h3wAAAMM"]
[Wed Sep 30 01:04:22.950899 2026] [security2:error] [pid 251754:tid 251982] [client 104.208.65.139:19377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/w.php"] [unique_id "ary0dpOnWJRlb5xgkk3h4QAAAOU"]
[Wed Sep 30 01:04:22.963345 2026] [security2:error] [pid 251754:tid 252002] [client 20.251.39.228:28517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/mode.php"] [unique_id "ary0dpOnWJRlb5xgkk3h4wAAAPk"]
[Wed Sep 30 01:04:22.998570 2026] [security2:error] [pid 251754:tid 252007] [client 213.159.1.75:46744] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "harmonicabootcamp.com"] [uri "/license.txt"] [unique_id "ary0dpOnWJRlb5xgkk3h5gAAAP4"]
[Wed Sep 30 01:04:22.998961 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:22.999236 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.016484 2026] [security2:error] [pid 251754:tid 251957] [client 52.231.30.175:37253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/File.php"] [unique_id "ary0d5OnWJRlb5xgkk3h6QAAAMw"]
[Wed Sep 30 01:04:23.033727 2026] [security2:error] [pid 251754:tid 251997] [client 64.227.188.205:32784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0d5OnWJRlb5xgkk3h6gAAAPQ"]
[Wed Sep 30 01:04:23.068889 2026] [security2:error] [pid 251754:tid 251937] [client 20.214.145.90:38350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/index/fucku.php"] [unique_id "ary0d5OnWJRlb5xgkk3h7AAAALg"]
[Wed Sep 30 01:04:23.088100 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.088356 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.180077 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.180337 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.188826 2026] [security2:error] [pid 251754:tid 251965] [client 4.196.65.241:27299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ebkid.php"] [unique_id "ary0d5OnWJRlb5xgkk3h9AAAANQ"]
[Wed Sep 30 01:04:23.254936 2026] [access_compat:error] [pid 251754:tid 251966] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:23.255264 2026] [access_compat:error] [pid 251754:tid 251966] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:23.276492 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.276773 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.339631 2026] [security2:error] [pid 251754:tid 252005] [client 168.100.149.156:19656] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mngroup.com.au"] [uri "/video1.xml"] [unique_id "ary0d5OnWJRlb5xgkk3iBwAA_D8"]
[Wed Sep 30 01:04:23.343524 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.30.175:38006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0d5OnWJRlb5xgkk3iCQAAAKE"]
[Wed Sep 30 01:04:23.347133 2026] [security2:error] [pid 251754:tid 251928] [client 20.214.145.90:43414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/upload/wp-info.php"] [unique_id "ary0d5OnWJRlb5xgkk3iCgAAAK8"]
[Wed Sep 30 01:04:23.356466 2026] [security2:error] [pid 251754:tid 252009] [client 152.59.169.65:45303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0d5OnWJRlb5xgkk3iCwAAAQA"]
[Wed Sep 30 01:04:23.370939 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.371323 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.373292 2026] [security2:error] [pid 251754:tid 252009] [client 152.59.169.65:45303] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0d5OnWJRlb5xgkk3iCwAAAQA"]
[Wed Sep 30 01:04:23.431951 2026] [security2:error] [pid 251754:tid 251925] [client 20.251.39.228:29192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ok.php"] [unique_id "ary0d5OnWJRlb5xgkk3iDgAAAKw"]
[Wed Sep 30 01:04:23.458722 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.459004 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.532285 2026] [security2:error] [pid 251754:tid 251898] [client 93.152.80.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0d5OnWJRlb5xgkk3iFgAAAJE"]
[Wed Sep 30 01:04:23.603671 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.603982 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.606699 2026] [security2:error] [pid 251754:tid 251926] [client 52.231.30.175:37940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0d5OnWJRlb5xgkk3iIAAAAK0"]
[Wed Sep 30 01:04:23.639161 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.639425 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.671175 2026] [security2:error] [pid 251754:tid 251957] [client 20.214.109.68:9824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/1144452145_error_log.php"] [unique_id "ary0d5OnWJRlb5xgkk3iJgAAAMw"]
[Wed Sep 30 01:04:23.675368 2026] [security2:error] [pid 251754:tid 251997] [client 20.214.145.90:43400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/post.php"] [unique_id "ary0d5OnWJRlb5xgkk3iJwAAAPQ"]
[Wed Sep 30 01:04:23.696744 2026] [security2:error] [pid 251754:tid 251904] [client 20.194.30.107:34689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/8.php"] [unique_id "ary0d5OnWJRlb5xgkk3iKAAAAJc"]
[Wed Sep 30 01:04:23.731153 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.731408 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.746902 2026] [security2:error] [pid 251754:tid 251974] [client 64.227.188.205:32796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0d5OnWJRlb5xgkk3iLgAAAN0"]
[Wed Sep 30 01:04:23.769689 2026] [access_compat:error] [pid 251754:tid 251988] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 01:04:23.770142 2026] [access_compat:error] [pid 251754:tid 251988] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 01:04:23.825451 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.825720 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.872744 2026] [security2:error] [pid 251754:tid 251907] [client 52.231.30.175:37251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0d5OnWJRlb5xgkk3iOgAAAJo"]
[Wed Sep 30 01:04:23.915519 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:23.915566 2026] [security2:error] [pid 251754:tid 251996] [client 45.138.12.32:38188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nhg.jhe.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0d5OnWJRlb5xgkk3iPwAAAPM"]
[Wed Sep 30 01:04:23.915798 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:23.936054 2026] [security2:error] [pid 251754:tid 251963] [client 155.190.6.18:35618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0d5OnWJRlb5xgkk3iQAAAANI"]
[Wed Sep 30 01:04:23.945968 2026] [security2:error] [pid 251754:tid 251952] [client 20.219.2.60:18837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0d5OnWJRlb5xgkk3iQQAAAMc"]
[Wed Sep 30 01:04:23.966001 2026] [security2:error] [pid 251754:tid 251893] [client 20.214.145.90:28300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary0d5OnWJRlb5xgkk3iQwAAAIw"]
[Wed Sep 30 01:04:23.992842 2026] [security2:error] [pid 251754:tid 251914] [client 151.244.47.169:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0d5OnWJRlb5xgkk3iSQAAAKE"]
[Wed Sep 30 01:04:24.007607 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.007944 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.103624 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.104083 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.139901 2026] [security2:error] [pid 251754:tid 251992] [client 52.231.30.175:37345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary0eJOnWJRlb5xgkk3iXQAAAO8"]
[Wed Sep 30 01:04:24.149568 2026] [security2:error] [pid 251754:tid 251957] [client 20.251.39.228:5542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/zoo.php"] [unique_id "ary0eJOnWJRlb5xgkk3iXgAAAMw"]
[Wed Sep 30 01:04:24.187181 2026] [security2:error] [pid 251754:tid 251961] [client 122.173.27.10:20910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0eJOnWJRlb5xgkk3iagAAANA"]
[Wed Sep 30 01:04:24.187340 2026] [security2:error] [pid 251754:tid 251961] [client 122.173.27.10:20910] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0eJOnWJRlb5xgkk3iagAAANA"]
[Wed Sep 30 01:04:24.193540 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.194009 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.224981 2026] [security2:error] [pid 251754:tid 251963] [client 155.190.6.18:35618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0d5OnWJRlb5xgkk3iQAAAANI"]
[Wed Sep 30 01:04:24.246039 2026] [security2:error] [pid 251754:tid 251902] [client 43.104.4.200:51583] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary0eJOnWJRlb5xgkk3ibwAAAJU"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cnetwork-cables-networking%2Cpower-banks%2Crouters-networking%2Csamsung%2Csmart-ups%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:04:24.277742 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:24.278019 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:24.288416 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.288681 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.296368 2026] [security2:error] [pid 251754:tid 251976] [client 20.214.145.90:38399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/adminfuns.php"] [unique_id "ary0eJOnWJRlb5xgkk3idQAAAN8"]
[Wed Sep 30 01:04:24.300301 2026] [security2:error] [pid 251754:tid 251962] [client 103.168.67.253:31616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0eJOnWJRlb5xgkk3idgAAANE"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:24.345861 2026] [security2:error] [pid 251754:tid 251952] [client 74.7.244.54:34776] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.zas.asl.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0eJOnWJRlb5xgkk3ieQAAx1c"]
[Wed Sep 30 01:04:24.376677 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.376951 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.382111 2026] [security2:error] [pid 251754:tid 251842] [remote 47.128.46.150:42754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mrbradgoreski.com"] [uri "/"] [unique_id "ary0eJOnWJRlb5xgkk3ifAAAsVU"]
[Wed Sep 30 01:04:24.415071 2026] [security2:error] [pid 251754:tid 251968] [client 161.0.255.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0eJOnWJRlb5xgkk3ifwAAANc"]
[Wed Sep 30 01:04:24.430827 2026] [security2:error] [pid 251754:tid 251919] [client 52.231.30.175:37271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary0eJOnWJRlb5xgkk3igQAAAKY"]
[Wed Sep 30 01:04:24.442627 2026] [security2:error] [pid 251754:tid 252003] [client 20.194.30.107:17378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/ccc.php"] [unique_id "ary0eJOnWJRlb5xgkk3iggAAAPo"]
[Wed Sep 30 01:04:24.464761 2026] [security2:error] [pid 251754:tid 252012] [client 64.227.188.205:32812] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0eJOnWJRlb5xgkk3ihAAAAQM"]
[Wed Sep 30 01:04:24.468577 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.468863 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.476744 2026] [access_compat:error] [pid 251754:tid 251912] [client 47.79.13.28:45054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:24.477039 2026] [access_compat:error] [pid 251754:tid 251912] [client 47.79.13.28:45054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:24.561145 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.561394 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.578841 2026] [security2:error] [pid 251754:tid 251936] [client 52.172.226.14:40542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0eJOnWJRlb5xgkk3iiwAAALc"]
[Wed Sep 30 01:04:24.583303 2026] [security2:error] [pid 251754:tid 251923] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0eJOnWJRlb5xgkk3ijAAAAKo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:24.585357 2026] [security2:error] [pid 251754:tid 252002] [client 20.214.145.90:28228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/about.php"] [unique_id "ary0eJOnWJRlb5xgkk3ijgAAAPk"]
[Wed Sep 30 01:04:24.653922 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.654169 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.691455 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:37294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary0eJOnWJRlb5xgkk3ilgAAANA"]
[Wed Sep 30 01:04:24.704443 2026] [access_compat:error] [pid 251754:tid 251899] [client 47.79.13.28:45058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:24.704694 2026] [access_compat:error] [pid 251754:tid 251899] [client 47.79.13.28:45058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:24.744774 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.745084 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.772455 2026] [security2:error] [pid 251754:tid 251997] [client 20.251.39.228:23993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gaza.php"] [unique_id "ary0eJOnWJRlb5xgkk3iogAAAPQ"]
[Wed Sep 30 01:04:24.773886 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:24.774149 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:24.774730 2026] [security2:error] [pid 251754:tid 251999] [client 213.136.69.135:50893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/robots-template.php"] [unique_id "ary0eJOnWJRlb5xgkk3iowAAAPY"], referer: binance.com
[Wed Sep 30 01:04:24.830995 2026] [security2:error] [pid 251754:tid 251932] [client 66.249.74.14:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary0eJOnWJRlb5xgkk3iqAAAALM"]
[Wed Sep 30 01:04:24.835583 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.836036 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.934674 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:24.935096 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:24.970628 2026] [security2:error] [pid 251754:tid 251962] [client 52.231.30.175:37223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/media.php"] [unique_id "ary0eJOnWJRlb5xgkk3irAAAANE"]
[Wed Sep 30 01:04:24.983452 2026] [security2:error] [pid 251754:tid 251998] [client 43.104.4.190:35198] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary0eJOnWJRlb5xgkk3irQAAAPU"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cnetwork-cables-networking%2Cpower-banks%2Crouters-networking%2Csamsung%2Csmart-ups%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:04:25.023218 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.023485 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.067445 2026] [security2:error] [pid 251754:tid 251893] [client 20.214.145.90:28255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/BDKR28WP.php"] [unique_id "ary0eZOnWJRlb5xgkk3isgAAAIw"]
[Wed Sep 30 01:04:25.104642 2026] [security2:error] [pid 251754:tid 251960] [client 52.172.226.14:40539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0eZOnWJRlb5xgkk3itAAAAM8"]
[Wed Sep 30 01:04:25.114681 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.114961 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.175759 2026] [security2:error] [pid 251754:tid 251946] [client 64.227.188.205:32816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0eZOnWJRlb5xgkk3iuAAAAME"]
[Wed Sep 30 01:04:25.190436 2026] [security2:error] [pid 251754:tid 251973] [client 20.251.39.228:5532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/grsiuk.php"] [unique_id "ary0eZOnWJRlb5xgkk3iuQAAANw"]
[Wed Sep 30 01:04:25.194492 2026] [security2:error] [pid 251754:tid 251850] [remote 57.141.14.107:51604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/comments/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary0eZOnWJRlb5xgkk3itwAAyl0"]
[Wed Sep 30 01:04:25.206339 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.206598 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.254583 2026] [security2:error] [pid 251754:tid 251905] [client 52.231.30.175:37325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/inso.php"] [unique_id "ary0eZOnWJRlb5xgkk3ivAAAAJg"]
[Wed Sep 30 01:04:25.289454 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:25.289835 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:25.301145 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.301403 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.305437 2026] [security2:error] [pid 251754:tid 251953] [client 20.214.109.68:61153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws48.php"] [unique_id "ary0eZOnWJRlb5xgkk3iwAAAAMg"]
[Wed Sep 30 01:04:25.390522 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.390799 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.454186 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MS9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1My9kcml2ZXI%3D
[Wed Sep 30 01:04:25.454454 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MS9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1My9kcml2ZXI%3D
[Wed Sep 30 01:04:25.483409 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.483434 2026] [security2:error] [pid 251754:tid 251993] [client 20.214.145.90:28305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/file5.php"] [unique_id "ary0eZOnWJRlb5xgkk3iygAAAPA"]
[Wed Sep 30 01:04:25.483729 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.519139 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.30.175:37344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/shiny.php"] [unique_id "ary0eZOnWJRlb5xgkk3izQAAAJQ"]
[Wed Sep 30 01:04:25.576967 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.577402 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.644496 2026] [security2:error] [pid 251754:tid 251894] [client 116.197.133.25:51159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0eZOnWJRlb5xgkk3i1AAAAI0"]
[Wed Sep 30 01:04:25.644603 2026] [security2:error] [pid 251754:tid 251894] [client 116.197.133.25:51159] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0eZOnWJRlb5xgkk3i1AAAAI0"]
[Wed Sep 30 01:04:25.660170 2026] [access_compat:error] [pid 251754:tid 252002] [client 47.79.13.1:58204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:25.660451 2026] [access_compat:error] [pid 251754:tid 252002] [client 47.79.13.1:58204] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:25.662928 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.663209 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.671864 2026] [security2:error] [pid 251754:tid 252008] [client 20.194.30.107:25874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/b8.php"] [unique_id "ary0eZOnWJRlb5xgkk3i2AAAAP8"]
[Wed Sep 30 01:04:25.677005 2026] [security2:error] [pid 251754:tid 251932] [remote 168.100.149.234:18084] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0eZOnWJRlb5xgkk3izwAA4lI"]
[Wed Sep 30 01:04:25.677412 2026] [security2:error] [pid 251754:tid 251904] [client 20.194.96.176:43150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0eZOnWJRlb5xgkk3i2gAAAJc"]
[Wed Sep 30 01:04:25.756698 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.757160 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.760625 2026] [security2:error] [pid 251754:tid 251971] [client 20.214.145.90:38383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/b8.php"] [unique_id "ary0eZOnWJRlb5xgkk3i4AAAANo"]
[Wed Sep 30 01:04:25.777354 2026] [security2:error] [pid 251754:tid 251962] [client 20.28.180.172:18323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/set.php"] [unique_id "ary0eZOnWJRlb5xgkk3i5gAAANE"]
[Wed Sep 30 01:04:25.782642 2026] [security2:error] [pid 251754:tid 251893] [client 52.231.30.175:37298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/403dd.php"] [unique_id "ary0eZOnWJRlb5xgkk3i6AAAAIw"]
[Wed Sep 30 01:04:25.783655 2026] [access_compat:error] [pid 251754:tid 251916] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:25.784039 2026] [access_compat:error] [pid 251754:tid 251916] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:25.826532 2026] [security2:error] [pid 251754:tid 251928] [client 52.172.226.14:40625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/b.php"] [unique_id "ary0eZOnWJRlb5xgkk3i6gAAAK8"]
[Wed Sep 30 01:04:25.844572 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.37:34794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:25.845032 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.37:34794] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:25.845255 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.845514 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.886846 2026] [security2:error] [pid 251754:tid 251997] [client 64.227.188.205:32822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0eZOnWJRlb5xgkk3i7gAAAPQ"]
[Wed Sep 30 01:04:25.886998 2026] [security2:error] [pid 251754:tid 251892] [client 103.168.67.253:10906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobeservices.com"] [uri "/blog/index.php"] [unique_id "ary0eZOnWJRlb5xgkk3i7wAAAIs"], referer: https://dobeservices.com/blog/wp-admin/
[Wed Sep 30 01:04:25.940990 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:25.941433 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:25.983867 2026] [security2:error] [pid 251754:tid 252009] [client 20.251.39.228:6006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-act.php"] [unique_id "ary0eZOnWJRlb5xgkk3i8gAAAQA"]
[Wed Sep 30 01:04:26.009990 2026] [security2:error] [pid 251754:tid 251959] [client 201.32.215.149:7501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i8wAAAM4"]
[Wed Sep 30 01:04:26.010078 2026] [security2:error] [pid 251754:tid 251959] [client 201.32.215.149:7501] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i8wAAAM4"]
[Wed Sep 30 01:04:26.028054 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.028327 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.037205 2026] [security2:error] [pid 251754:tid 251918] [client 20.214.145.90:28326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/133.php"] [unique_id "ary0epOnWJRlb5xgkk3i9QAAAKU"]
[Wed Sep 30 01:04:26.125779 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.126065 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.131185 2026] [security2:error] [pid 251754:tid 251933] [client 202.179.95.79:62138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i_AAAALQ"]
[Wed Sep 30 01:04:26.131590 2026] [security2:error] [pid 251754:tid 251933] [client 202.179.95.79:62138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i_AAAALQ"]
[Wed Sep 30 01:04:26.155975 2026] [security2:error] [pid 251754:tid 252000] [client 152.59.165.7:56844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i_QAAAPc"]
[Wed Sep 30 01:04:26.156070 2026] [security2:error] [pid 251754:tid 252000] [client 152.59.165.7:56844] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3i_QAAAPc"]
[Wed Sep 30 01:04:26.217625 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.217925 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.242125 2026] [security2:error] [pid 251754:tid 251957] [client 85.204.70.118:34242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0epOnWJRlb5xgkk3jAQAAAMw"]
[Wed Sep 30 01:04:26.307184 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.307431 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.307547 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:26.307832 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:26.318044 2026] [security2:error] [pid 251754:tid 251992] [client 20.214.145.90:43449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/ano.php"] [unique_id "ary0epOnWJRlb5xgkk3jCQAAAO8"]
[Wed Sep 30 01:04:26.353195 2026] [security2:error] [pid 251754:tid 251936] [client 52.172.226.14:40604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/admin.php"] [unique_id "ary0epOnWJRlb5xgkk3jCwAAALc"]
[Wed Sep 30 01:04:26.397826 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.398097 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.486485 2026] [security2:error] [pid 251754:tid 251931] [client 20.219.2.60:18823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws57.php"] [unique_id "ary0epOnWJRlb5xgkk3jHwAAALI"]
[Wed Sep 30 01:04:26.490125 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.490411 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.531294 2026] [security2:error] [pid 251754:tid 251916] [client 85.204.70.118:34244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jIgAAAKM"]
[Wed Sep 30 01:04:26.549766 2026] [security2:error] [pid 251754:tid 251988] [client 20.251.39.228:32835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/cu.php"] [unique_id "ary0epOnWJRlb5xgkk3jJQAAAOs"]
[Wed Sep 30 01:04:26.583322 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.583590 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:26114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.596009 2026] [security2:error] [pid 251754:tid 251925] [client 64.227.188.205:32826] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0epOnWJRlb5xgkk3jLAAAAKw"]
[Wed Sep 30 01:04:26.614849 2026] [security2:error] [pid 251754:tid 251994] [client 116.193.128.26:51543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jLQAAAPE"]
[Wed Sep 30 01:04:26.615368 2026] [security2:error] [pid 251754:tid 251994] [client 116.193.128.26:51543] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jLQAAAPE"]
[Wed Sep 30 01:04:26.622650 2026] [security2:error] [pid 251754:tid 251966] [client 20.214.109.68:9876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary0epOnWJRlb5xgkk3jLgAAANU"]
[Wed Sep 30 01:04:26.622685 2026] [security2:error] [pid 251754:tid 251930] [client 20.194.96.176:43831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0epOnWJRlb5xgkk3jLwAAALE"]
[Wed Sep 30 01:04:26.626219 2026] [security2:error] [pid 251754:tid 251974] [client 181.208.220.3:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0epOnWJRlb5xgkk3jMAAAAN0"]
[Wed Sep 30 01:04:26.660540 2026] [security2:error] [pid 251754:tid 251989] [client 20.214.145.90:28301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/sf.php"] [unique_id "ary0epOnWJRlb5xgkk3jMwAAAOw"]
[Wed Sep 30 01:04:26.674534 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.674801 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.727579 2026] [security2:error] [pid 251754:tid 251987] [client 203.122.45.246:50725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jOwAAAOo"]
[Wed Sep 30 01:04:26.727707 2026] [security2:error] [pid 251754:tid 251987] [client 203.122.45.246:50725] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jOwAAAOo"]
[Wed Sep 30 01:04:26.749982 2026] [security2:error] [pid 251754:tid 251933] [client 52.231.30.175:37227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/baba.php"] [unique_id "ary0epOnWJRlb5xgkk3jPgAAALQ"]
[Wed Sep 30 01:04:26.762677 2026] [security2:error] [pid 251754:tid 251915] [client 216.73.216.46:26114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0epOnWJRlb5xgkk3jQQAAAKI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjA3
[Wed Sep 30 01:04:26.769611 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.770068 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.782641 2026] [access_compat:error] [pid 251754:tid 251947] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:26.782935 2026] [access_compat:error] [pid 251754:tid 251947] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:26.857856 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.858116 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.903332 2026] [security2:error] [pid 251754:tid 251944] [client 223.181.60.167:15242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jSQAAAL8"]
[Wed Sep 30 01:04:26.903588 2026] [security2:error] [pid 251754:tid 251944] [client 223.181.60.167:15242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0epOnWJRlb5xgkk3jSQAAAL8"]
[Wed Sep 30 01:04:26.948064 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:26.948321 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:26.953454 2026] [core:error] [pid 251754:tid 251946] [client 65.111.21.119:54875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:26.953481 2026] [core:error] [pid 251754:tid 251946] [client 65.111.21.119:54875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:26.966212 2026] [security2:error] [pid 251754:tid 251936] [client 20.214.145.90:28269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/xx.php"] [unique_id "ary0epOnWJRlb5xgkk3jTwAAALc"]
[Wed Sep 30 01:04:26.973063 2026] [security2:error] [pid 251754:tid 251929] [client 85.204.70.118:34256] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0epOnWJRlb5xgkk3jUAAAALA"]
[Wed Sep 30 01:04:27.011079 2026] [security2:error] [pid 251754:tid 251986] [client 52.231.30.175:37275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/site.php"] [unique_id "ary0e5OnWJRlb5xgkk3jVQAAAOk"]
[Wed Sep 30 01:04:27.039794 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.040083 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.089543 2026] [security2:error] [pid 251754:tid 251871] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0e5OnWJRlb5xgkk3jXAAAuHI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290259&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:27.089579 2026] [security2:error] [pid 251754:tid 251871] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0e5OnWJRlb5xgkk3jXAAAuHI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290259&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:27.130750 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.131024 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.138892 2026] [security2:error] [pid 251754:tid 251916] [client 20.198.74.230:23916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/r5t.php"] [unique_id "ary0e5OnWJRlb5xgkk3jXwAAAKM"]
[Wed Sep 30 01:04:27.191043 2026] [security2:error] [pid 251754:tid 251907] [client 52.172.226.14:40536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/fling.php"] [unique_id "ary0e5OnWJRlb5xgkk3jaAAAAJo"]
[Wed Sep 30 01:04:27.224873 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.225133 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.258570 2026] [security2:error] [pid 251754:tid 251923] [client 103.159.192.142:52641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0e5OnWJRlb5xgkk3jdAAAAKo"]
[Wed Sep 30 01:04:27.258682 2026] [security2:error] [pid 251754:tid 251923] [client 103.159.192.142:52641] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0e5OnWJRlb5xgkk3jdAAAAKo"]
[Wed Sep 30 01:04:27.263086 2026] [security2:error] [pid 251754:tid 251905] [client 85.204.70.118:34264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0e5OnWJRlb5xgkk3jeAAAAJg"]
[Wed Sep 30 01:04:27.289529 2026] [access_compat:error] [pid 251754:tid 252005] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:27.289798 2026] [access_compat:error] [pid 251754:tid 252005] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:27.298061 2026] [security2:error] [pid 251754:tid 251954] [client 52.231.30.175:37365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/insc.php"] [unique_id "ary0e5OnWJRlb5xgkk3jfgAAAMk"]
[Wed Sep 30 01:04:27.307367 2026] [security2:error] [pid 251754:tid 251896] [client 64.227.188.205:32832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0e5OnWJRlb5xgkk3jfwAAAI8"]
[Wed Sep 30 01:04:27.319179 2026] [security2:error] [pid 251754:tid 251915] [client 20.214.145.90:43439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/file2.php"] [unique_id "ary0e5OnWJRlb5xgkk3jgQAAAKI"]
[Wed Sep 30 01:04:27.337233 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.337533 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.452575 2026] [security2:error] [pid 251754:tid 252012] [client 43.104.4.190:35198] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary0e5OnWJRlb5xgkk3jiAAAAQM"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cnetwork-cables-networking%2Cpower-banks%2Crouters-networking%2Csamsung%2Csmart-ups%2Csurveillance-cameras%2Cswitches-networking%2Ctoners
[Wed Sep 30 01:04:27.457750 2026] [security2:error] [pid 251754:tid 251927] [client 20.251.39.228:13526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/8.php"] [unique_id "ary0e5OnWJRlb5xgkk3jigAAAK4"]
[Wed Sep 30 01:04:27.465560 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:53939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.465994 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:53939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.526673 2026] [security2:error] [pid 251754:tid 251929] [client 216.73.216.46:53939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0e5OnWJRlb5xgkk3jjgAAALA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDM4
[Wed Sep 30 01:04:27.530045 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.71:43816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:27.530474 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.71:43816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:27.542409 2026] [security2:error] [pid 251754:tid 251900] [client 20.194.96.176:36564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/f35.update.php"] [unique_id "ary0e5OnWJRlb5xgkk3jjwAAAJM"]
[Wed Sep 30 01:04:27.553126 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.553377 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.559292 2026] [security2:error] [pid 251754:tid 251894] [client 85.204.70.118:34266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0e5OnWJRlb5xgkk3jkwAAAI0"]
[Wed Sep 30 01:04:27.569030 2026] [security2:error] [pid 251754:tid 251903] [client 52.231.30.175:37943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/file.php"] [unique_id "ary0e5OnWJRlb5xgkk3jlgAAAJY"]
[Wed Sep 30 01:04:27.606139 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.606511 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.651965 2026] [security2:error] [pid 251754:tid 251950] [client 20.214.145.90:38361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/m.php"] [unique_id "ary0e5OnWJRlb5xgkk3jnQAAAMU"]
[Wed Sep 30 01:04:27.662323 2026] [security2:error] [pid 251754:tid 251976] [client 52.172.226.14:40606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0e5OnWJRlb5xgkk3jngAAAN8"]
[Wed Sep 30 01:04:27.705696 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.705980 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.767750 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:27.768027 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:27.807966 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.808235 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.828703 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.30.175:37947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/dex.php"] [unique_id "ary0e5OnWJRlb5xgkk3jqwAAAKE"]
[Wed Sep 30 01:04:27.856410 2026] [security2:error] [pid 251754:tid 251954] [client 85.204.70.118:34270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0e5OnWJRlb5xgkk3jrQAAAMk"]
[Wed Sep 30 01:04:27.898659 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.898944 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:27.974643 2026] [security2:error] [pid 251754:tid 251906] [client 20.214.145.90:43396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/33.php"] [unique_id "ary0e5OnWJRlb5xgkk3juAAAAJk"]
[Wed Sep 30 01:04:27.995183 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:27.995455 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.022652 2026] [security2:error] [pid 251754:tid 252010] [client 64.227.188.205:33998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0fJOnWJRlb5xgkk3jwwAAAQE"]
[Wed Sep 30 01:04:28.085910 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.086178 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.100669 2026] [security2:error] [pid 251754:tid 251980] [client 20.251.39.228:27310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws60.php"] [unique_id "ary0fJOnWJRlb5xgkk3jywAAAOM"]
[Wed Sep 30 01:04:28.107781 2026] [security2:error] [pid 251754:tid 252007] [client 52.231.30.175:38010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/key.php"] [unique_id "ary0fJOnWJRlb5xgkk3jzAAAAP4"]
[Wed Sep 30 01:04:28.136855 2026] [security2:error] [pid 251754:tid 251975] [client 85.204.70.118:34274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0fJOnWJRlb5xgkk3j0gAAAN4"]
[Wed Sep 30 01:04:28.179983 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.180238 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.193315 2026] [security2:error] [pid 251754:tid 251976] [client 104.208.65.139:9613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wp_blog_footer.php"] [unique_id "ary0fJOnWJRlb5xgkk3j2AAAAN8"]
[Wed Sep 30 01:04:28.224680 2026] [security2:error] [pid 251754:tid 251960] [client 4.196.65.241:19177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/or.php"] [unique_id "ary0fJOnWJRlb5xgkk3j4gAAAM8"]
[Wed Sep 30 01:04:28.240723 2026] [security2:error] [pid 251754:tid 251786] [remote 122.14.227.58:24524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.captpeacock.com"] [uri "/img/new_albun/itinerary.pdf"] [unique_id "ary0fJOnWJRlb5xgkk3j5gAA0x0"]
[Wed Sep 30 01:04:28.246959 2026] [security2:error] [pid 251754:tid 252009] [client 20.194.96.176:56220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/adminfuns.php"] [unique_id "ary0fJOnWJRlb5xgkk3j6QAAAQA"]
[Wed Sep 30 01:04:28.253250 2026] [access_compat:error] [pid 251754:tid 251907] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:28.253646 2026] [access_compat:error] [pid 251754:tid 251907] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:28.275932 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.276361 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.362514 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.362786 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.379927 2026] [security2:error] [pid 251754:tid 251982] [client 52.172.226.14:40614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/adminfuns.php"] [unique_id "ary0fJOnWJRlb5xgkk3j_gAAAOU"]
[Wed Sep 30 01:04:28.393692 2026] [autoindex:error] [pid 251754:tid 251906] [client 20.194.30.107:0] AH01276: Cannot serve directory /home3/habeshac/public_html/hairofsheba/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:28.410862 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.30.175:37328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/kir.php"] [unique_id "ary0fJOnWJRlb5xgkk3kAwAAAOI"]
[Wed Sep 30 01:04:28.414787 2026] [security2:error] [pid 251754:tid 251993] [client 74.7.242.1:42742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0fJOnWJRlb5xgkk3kBAAAAPA"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:04:28.416564 2026] [security2:error] [pid 251754:tid 251944] [client 85.204.70.118:34278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0fJOnWJRlb5xgkk3kBQAAAL8"]
[Wed Sep 30 01:04:28.435098 2026] [security2:error] [pid 251754:tid 251947] [client 43.227.131.37:21958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kBwAAAMI"]
[Wed Sep 30 01:04:28.435229 2026] [security2:error] [pid 251754:tid 251947] [client 43.227.131.37:21958] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kBwAAAMI"]
[Wed Sep 30 01:04:28.451362 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.451616 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.478245 2026] [security2:error] [pid 251754:tid 251929] [client 20.214.145.90:38387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/ccc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kCgAAALA"]
[Wed Sep 30 01:04:28.504560 2026] [security2:error] [pid 251754:tid 251927] [client 20.219.2.60:18844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/.qiodetme.php"] [unique_id "ary0fJOnWJRlb5xgkk3kDgAAAK4"]
[Wed Sep 30 01:04:28.507093 2026] [security2:error] [pid 251754:tid 251903] [client 20.251.39.228:17647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/vanda.php"] [unique_id "ary0fJOnWJRlb5xgkk3kDwAAAJY"]
[Wed Sep 30 01:04:28.541596 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.541892 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.557014 2026] [security2:error] [pid 251754:tid 251985] [client 92.71.61.209:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0fJOnWJRlb5xgkk3kFwAAAOg"]
[Wed Sep 30 01:04:28.612541 2026] [security2:error] [pid 251754:tid 252000] [client 146.103.109.89:51104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:wpforms[fields][2]. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "pikarthouse.com"] [uri "/"] [unique_id "ary0fJOnWJRlb5xgkk3kGQAAAPc"], referer: https://pikarthouse.com/
[Wed Sep 30 01:04:28.633223 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.633498 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.651429 2026] [security2:error] [pid 251754:tid 251950] [client 49.36.41.37:54712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.41.36.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kHAAAAMU"]
[Wed Sep 30 01:04:28.651515 2026] [security2:error] [pid 251754:tid 251950] [client 49.36.41.37:54712] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kHAAAAMU"]
[Wed Sep 30 01:04:28.681935 2026] [security2:error] [pid 251754:tid 251923] [client 52.231.30.175:37276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/fling.php"] [unique_id "ary0fJOnWJRlb5xgkk3kIAAAAKo"]
[Wed Sep 30 01:04:28.700411 2026] [security2:error] [pid 251754:tid 251996] [client 85.204.70.118:34286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0fJOnWJRlb5xgkk3kIgAAAPM"]
[Wed Sep 30 01:04:28.709141 2026] [security2:error] [pid 251754:tid 251895] [client 64.227.188.205:34002] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0fJOnWJRlb5xgkk3kJQAAAI4"]
[Wed Sep 30 01:04:28.722344 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.722585 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.747546 2026] [security2:error] [pid 251754:tid 251796] [remote 57.141.14.56:53576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kIwAAkic"]
[Wed Sep 30 01:04:28.761676 2026] [security2:error] [pid 251754:tid 251948] [client 20.194.96.176:39112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0fJOnWJRlb5xgkk3kKwAAAMM"]
[Wed Sep 30 01:04:28.769286 2026] [security2:error] [pid 251754:tid 251909] [client 106.214.2.47:12798] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kHQAAAJw"]
[Wed Sep 30 01:04:28.799168 2026] [access_compat:error] [pid 251754:tid 251951] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:28.799422 2026] [access_compat:error] [pid 251754:tid 251951] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:28.815743 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.816003 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.828436 2026] [security2:error] [pid 251754:tid 251921] [client 20.214.145.90:38359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/file15.php"] [unique_id "ary0fJOnWJRlb5xgkk3kLwAAAKg"]
[Wed Sep 30 01:04:28.868294 2026] [security2:error] [pid 251754:tid 251997] [client 45.138.12.41:1874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.qjx.zlo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0fJOnWJRlb5xgkk3kMQAAAPQ"]
[Wed Sep 30 01:04:28.908154 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:28.908427 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:51640] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:28.919192 2026] [security2:error] [pid 251754:tid 252003] [client 52.172.226.14:40528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/alfa.php"] [unique_id "ary0fJOnWJRlb5xgkk3kNQAAAPo"]
[Wed Sep 30 01:04:28.931148 2026] [security2:error] [pid 251754:tid 251953] [client 49.205.105.16:15130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kNwAAAMg"]
[Wed Sep 30 01:04:28.931258 2026] [security2:error] [pid 251754:tid 251953] [client 49.205.105.16:15130] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0fJOnWJRlb5xgkk3kNwAAAMg"]
[Wed Sep 30 01:04:28.940578 2026] [security2:error] [pid 251754:tid 251990] [client 20.251.39.228:13507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/domains.php"] [unique_id "ary0fJOnWJRlb5xgkk3kOQAAAO0"]
[Wed Sep 30 01:04:28.941961 2026] [security2:error] [pid 251754:tid 251887] [client 52.231.30.175:37335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/btyuio.php"] [unique_id "ary0fJOnWJRlb5xgkk3kOgAAAIY"]
[Wed Sep 30 01:04:29.000212 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.000553 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.004399 2026] [security2:error] [pid 251754:tid 251945] [client 85.204.70.118:34290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0fZOnWJRlb5xgkk3kQQAAAMA"]
[Wed Sep 30 01:04:29.091045 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.091478 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.120900 2026] [security2:error] [pid 251754:tid 252007] [client 20.214.145.90:28351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/82.php"] [unique_id "ary0fZOnWJRlb5xgkk3kSgAAAP4"]
[Wed Sep 30 01:04:29.149912 2026] [security2:error] [pid 251754:tid 251960] [client 20.214.109.68:9823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/schallfuns.php"] [unique_id "ary0fZOnWJRlb5xgkk3kSwAAAM8"]
[Wed Sep 30 01:04:29.208319 2026] [security2:error] [pid 251754:tid 251894] [client 52.231.30.175:37935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/sm.php"] [unique_id "ary0fZOnWJRlb5xgkk3kUAAAAI0"]
[Wed Sep 30 01:04:29.222912 2026] [security2:error] [pid 251754:tid 251969] [client 146.103.109.89:51174] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:wpforms[fields][2]. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "pikarthouse.com"] [uri "/"] [unique_id "ary0fZOnWJRlb5xgkk3kUgAAANg"], referer: https://pikarthouse.com/
[Wed Sep 30 01:04:29.231038 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:30275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.231300 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:30275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.272138 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.272426 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.299434 2026] [security2:error] [pid 251754:tid 251910] [client 85.204.70.118:34306] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0fZOnWJRlb5xgkk3kWwAAAJ0"]
[Wed Sep 30 01:04:29.305339 2026] [access_compat:error] [pid 251754:tid 251899] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:29.305591 2026] [access_compat:error] [pid 251754:tid 251899] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:29.363293 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.363616 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.399257 2026] [security2:error] [pid 251754:tid 252001] [client 64.227.188.205:34014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0fZOnWJRlb5xgkk3kYwAAAPg"]
[Wed Sep 30 01:04:29.414583 2026] [security2:error] [pid 251754:tid 251921] [client 20.194.96.176:26746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0fZOnWJRlb5xgkk3kZQAAAKg"]
[Wed Sep 30 01:04:29.439913 2026] [security2:error] [pid 251754:tid 251930] [client 168.100.149.218:49274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/"] [unique_id "ary0fZOnWJRlb5xgkk3kZwAAALE"]
[Wed Sep 30 01:04:29.458270 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.458708 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.468995 2026] [security2:error] [pid 251754:tid 251953] [client 52.231.30.175:37255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/a.php"] [unique_id "ary0fZOnWJRlb5xgkk3kbAAAAMg"]
[Wed Sep 30 01:04:29.479654 2026] [security2:error] [pid 251754:tid 251990] [client 20.214.145.90:28261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/admin.php/nope.php"] [unique_id "ary0fZOnWJRlb5xgkk3kbQAAAO0"]
[Wed Sep 30 01:04:29.514896 2026] [access_compat:error] [pid 251754:tid 251905] [client 47.79.13.172:43096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:29.515174 2026] [access_compat:error] [pid 251754:tid 251905] [client 47.79.13.172:43096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:29.517317 2026] [security2:error] [pid 251754:tid 251978] [client 52.172.226.14:40615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/222.php"] [unique_id "ary0fZOnWJRlb5xgkk3kcQAAAOE"]
[Wed Sep 30 01:04:29.545417 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.545690 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.577366 2026] [security2:error] [pid 251754:tid 251913] [client 20.28.180.172:62385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/mode.php"] [unique_id "ary0fZOnWJRlb5xgkk3kdQAAAKA"]
[Wed Sep 30 01:04:29.582278 2026] [security2:error] [pid 251754:tid 251901] [client 85.204.70.118:34322] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0fZOnWJRlb5xgkk3kdgAAAJQ"]
[Wed Sep 30 01:04:29.635417 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.635688 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.638792 2026] [security2:error] [pid 251754:tid 252012] [client 104.208.65.139:2636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/robot.php"] [unique_id "ary0fZOnWJRlb5xgkk3kfgAAAQM"]
[Wed Sep 30 01:04:29.666595 2026] [core:error] [pid 251754:tid 251898] [client 17.166.24.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:29.666619 2026] [core:error] [pid 251754:tid 251898] [client 17.166.24.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:29.727240 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:29.727533 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:29.749570 2026] [security2:error] [pid 251754:tid 251959] [client 4.240.25.22:8450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/new.php"] [unique_id "ary0fZOnWJRlb5xgkk3khwAAAM4"]
[Wed Sep 30 01:04:29.765668 2026] [security2:error] [pid 251754:tid 251999] [client 20.214.145.90:38362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/222.php"] [unique_id "ary0fZOnWJRlb5xgkk3kiQAAAPY"]
[Wed Sep 30 01:04:29.769430 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:29.769703 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:29.774444 2026] [security2:error] [pid 251754:tid 251972] [client 52.231.30.175:37272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/sb.php"] [unique_id "ary0fZOnWJRlb5xgkk3kigAAANs"]
[Wed Sep 30 01:04:29.796148 2026] [security2:error] [pid 251754:tid 251893] [client 20.251.39.228:27290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/144.php"] [unique_id "ary0fZOnWJRlb5xgkk3kjQAAAIw"]
[Wed Sep 30 01:04:29.863967 2026] [security2:error] [pid 251754:tid 252008] [client 85.204.70.118:34328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0fZOnWJRlb5xgkk3kkgAAAP8"]
[Wed Sep 30 01:04:29.888395 2026] [security2:error] [pid 251754:tid 251985] [client 45.138.12.32:25152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cqz.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0fZOnWJRlb5xgkk3kkwAAAOg"]
[Wed Sep 30 01:04:29.912282 2026] [security2:error] [pid 251754:tid 251812] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0fZOnWJRlb5xgkk3klQAA2Tc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290279&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:29.912309 2026] [security2:error] [pid 251754:tid 251812] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0fZOnWJRlb5xgkk3klQAA2Tc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290279&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:29.984077 2026] [security2:error] [pid 251754:tid 252002] [client 52.172.226.14:40593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0fZOnWJRlb5xgkk3klwAAAPk"]
[Wed Sep 30 01:04:30.034311 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.034571 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.045333 2026] [security2:error] [pid 251754:tid 251981] [client 52.231.30.175:37194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/av.php"] [unique_id "ary0fpOnWJRlb5xgkk3knQAAAOQ"]
[Wed Sep 30 01:04:30.046899 2026] [security2:error] [pid 251754:tid 252000] [client 151.244.41.248:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary0fpOnWJRlb5xgkk3knAAAAPc"]
[Wed Sep 30 01:04:30.116544 2026] [security2:error] [pid 251754:tid 251888] [client 64.227.188.205:34024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0fpOnWJRlb5xgkk3knwAAAIc"]
[Wed Sep 30 01:04:30.118718 2026] [security2:error] [pid 251754:tid 251931] [client 20.214.145.90:38340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/sallu.php"] [unique_id "ary0fpOnWJRlb5xgkk3koQAAALI"]
[Wed Sep 30 01:04:30.125008 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.125275 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.132156 2026] [security2:error] [pid 251754:tid 252011] [client 20.194.96.176:36548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/av.php"] [unique_id "ary0fpOnWJRlb5xgkk3kogAAAQI"]
[Wed Sep 30 01:04:30.144086 2026] [security2:error] [pid 251754:tid 251995] [client 85.204.70.118:34332] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0fpOnWJRlb5xgkk3kowAAAPI"]
[Wed Sep 30 01:04:30.205953 2026] [access_compat:error] [pid 251754:tid 251951] [client 47.82.11.32:47384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:30.206221 2026] [access_compat:error] [pid 251754:tid 251951] [client 47.82.11.32:47384] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:30.218742 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.219188 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.264083 2026] [access_compat:error] [pid 251754:tid 252003] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:30.264351 2026] [access_compat:error] [pid 251754:tid 252003] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:30.305627 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.30.175:37361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/b8.php"] [unique_id "ary0fpOnWJRlb5xgkk3krAAAAJQ"]
[Wed Sep 30 01:04:30.307760 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.308036 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.353752 2026] [security2:error] [pid 251754:tid 251984] [client 223.235.102.107:28486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0fpOnWJRlb5xgkk3krwAAAOc"]
[Wed Sep 30 01:04:30.353873 2026] [security2:error] [pid 251754:tid 251984] [client 223.235.102.107:28486] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0fpOnWJRlb5xgkk3krwAAAOc"]
[Wed Sep 30 01:04:30.383217 2026] [security2:error] [pid 251754:tid 251889] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0fpOnWJRlb5xgkk3ksgAAAIg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:30.397840 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.398110 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.411273 2026] [security2:error] [pid 251754:tid 251927] [client 20.214.145.90:38372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/k.php"] [unique_id "ary0fpOnWJRlb5xgkk3ktAAAAK4"]
[Wed Sep 30 01:04:30.425379 2026] [security2:error] [pid 251754:tid 251908] [client 85.204.70.118:34348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0fpOnWJRlb5xgkk3ktwAAAJs"]
[Wed Sep 30 01:04:30.435275 2026] [security2:error] [pid 251754:tid 251825] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0fpOnWJRlb5xgkk3kuAAA40Q"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D61838
[Wed Sep 30 01:04:30.472713 2026] [security2:error] [pid 251754:tid 252004] [client 52.172.226.14:40616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/images.php"] [unique_id "ary0fpOnWJRlb5xgkk3kuwAAAPs"]
[Wed Sep 30 01:04:30.490748 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.491044 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.506079 2026] [security2:error] [pid 251754:tid 251976] [client 20.214.109.68:9884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/CDX1.php"] [unique_id "ary0fpOnWJRlb5xgkk3kwAAAAN8"]
[Wed Sep 30 01:04:30.580702 2026] [security2:error] [pid 251754:tid 251902] [client 52.231.30.175:37303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp_blog_footer.php"] [unique_id "ary0fpOnWJRlb5xgkk3kwwAAAJU"]
[Wed Sep 30 01:04:30.585177 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.585618 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.595976 2026] [security2:error] [pid 251754:tid 251998] [client 45.138.12.41:54018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.qhw.axl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0fpOnWJRlb5xgkk3kxAAAAPU"]
[Wed Sep 30 01:04:30.671641 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.671926 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.708949 2026] [security2:error] [pid 251754:tid 251900] [client 85.204.70.118:34356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0fpOnWJRlb5xgkk3kygAAAJM"]
[Wed Sep 30 01:04:30.753180 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:30.753599 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA5MDgyL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:30.756086 2026] [security2:error] [pid 251754:tid 252001] [client 20.214.145.90:28235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/24.php"] [unique_id "ary0fpOnWJRlb5xgkk3k0AAAAPg"]
[Wed Sep 30 01:04:30.764180 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.764587 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.810548 2026] [security2:error] [pid 251754:tid 251914] [client 20.194.96.176:50408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary0fpOnWJRlb5xgkk3k0wAAAKE"]
[Wed Sep 30 01:04:30.829908 2026] [security2:error] [pid 251754:tid 251966] [client 64.227.188.205:34026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0fpOnWJRlb5xgkk3k1QAAANU"]
[Wed Sep 30 01:04:30.850854 2026] [security2:error] [pid 251754:tid 251954] [client 52.231.30.175:37284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/0.php"] [unique_id "ary0fpOnWJRlb5xgkk3k1wAAAMk"]
[Wed Sep 30 01:04:30.853138 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.853402 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.887928 2026] [security2:error] [pid 251754:tid 251912] [client 182.69.182.151:20520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0fpOnWJRlb5xgkk3k2AAAAJ8"]
[Wed Sep 30 01:04:30.888149 2026] [security2:error] [pid 251754:tid 251912] [client 182.69.182.151:20520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0fpOnWJRlb5xgkk3k2AAAAJ8"]
[Wed Sep 30 01:04:30.906052 2026] [security2:error] [pid 251754:tid 251931] [client 20.251.39.228:48619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/asd.php"] [unique_id "ary0fpOnWJRlb5xgkk3k2QAAALI"]
[Wed Sep 30 01:04:30.945167 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:30.945430 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:30.970068 2026] [security2:error] [pid 251754:tid 251907] [client 52.172.226.14:40537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/media.php"] [unique_id "ary0fpOnWJRlb5xgkk3k3QAAAJo"]
[Wed Sep 30 01:04:31.003216 2026] [security2:error] [pid 251754:tid 251997] [client 85.204.70.118:34372] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.wrq.llp.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0f5OnWJRlb5xgkk3k3wAAAPQ"]
[Wed Sep 30 01:04:31.023156 2026] [security2:error] [pid 251754:tid 251940] [client 223.181.30.165:20001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0f5OnWJRlb5xgkk3k4AAAALs"]
[Wed Sep 30 01:04:31.023249 2026] [security2:error] [pid 251754:tid 251940] [client 223.181.30.165:20001] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0f5OnWJRlb5xgkk3k4AAAALs"]
[Wed Sep 30 01:04:31.036390 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.036653 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.096169 2026] [security2:error] [pid 251754:tid 251834] [remote 202.46.62.101:2608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ary0f5OnWJRlb5xgkk3k4gAAtk0"]
[Wed Sep 30 01:04:31.110506 2026] [security2:error] [pid 251754:tid 251956] [client 20.214.145.90:38385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/blacks.php"] [unique_id "ary0f5OnWJRlb5xgkk3k4wAAAMs"]
[Wed Sep 30 01:04:31.117370 2026] [security2:error] [pid 251754:tid 251905] [client 52.231.30.175:37189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/fms.php"] [unique_id "ary0f5OnWJRlb5xgkk3k5AAAAJg"]
[Wed Sep 30 01:04:31.126885 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.127151 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.221044 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.221431 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.309695 2026] [security2:error] [pid 251754:tid 251908] [client 20.194.96.176:26522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary0f5OnWJRlb5xgkk3k8wAAAJs"]
[Wed Sep 30 01:04:31.311502 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:31.311957 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:31.313455 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.313698 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.316143 2026] [security2:error] [pid 251754:tid 252009] [client 37.41.16.35:55102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0f5OnWJRlb5xgkk3k9AAAAQA"]
[Wed Sep 30 01:04:31.316250 2026] [security2:error] [pid 251754:tid 252009] [client 37.41.16.35:55102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0f5OnWJRlb5xgkk3k9AAAAQA"]
[Wed Sep 30 01:04:31.382322 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.30.175:37260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/xyn.php"] [unique_id "ary0f5OnWJRlb5xgkk3k-wAAAPY"]
[Wed Sep 30 01:04:31.402322 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.402588 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.446951 2026] [security2:error] [pid 251754:tid 251976] [client 20.214.145.90:38378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/anom.php"] [unique_id "ary0f5OnWJRlb5xgkk3k_gAAAN8"]
[Wed Sep 30 01:04:31.479228 2026] [security2:error] [pid 251754:tid 251975] [client 52.172.226.14:40583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/mac.php"] [unique_id "ary0f5OnWJRlb5xgkk3k_wAAAN4"]
[Wed Sep 30 01:04:31.492655 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.492970 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.514794 2026] [security2:error] [pid 251754:tid 251933] [client 64.227.188.205:34036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0f5OnWJRlb5xgkk3lAgAAALQ"]
[Wed Sep 30 01:04:31.584388 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.584662 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.592317 2026] [access_compat:error] [pid 251754:tid 251959] [client 47.79.13.176:48960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:31.592592 2026] [access_compat:error] [pid 251754:tid 251959] [client 47.79.13.176:48960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:31.646665 2026] [security2:error] [pid 251754:tid 251966] [client 52.231.30.175:37123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/min.php"] [unique_id "ary0f5OnWJRlb5xgkk3lDgAAANU"]
[Wed Sep 30 01:04:31.679287 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.679553 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.705246 2026] [security2:error] [pid 251754:tid 251931] [client 20.251.39.228:48620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/zc-104.php"] [unique_id "ary0f5OnWJRlb5xgkk3lEgAAALI"]
[Wed Sep 30 01:04:31.712981 2026] [security2:error] [pid 251754:tid 251941] [client 20.214.145.90:28274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/groud3.php"] [unique_id "ary0f5OnWJRlb5xgkk3lFAAAALw"]
[Wed Sep 30 01:04:31.751786 2026] [access_compat:error] [pid 251754:tid 251995] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:31.752217 2026] [access_compat:error] [pid 251754:tid 251995] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:31.765055 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.765316 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.855627 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.855943 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.911334 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.30.175:37262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-whe.php"] [unique_id "ary0f5OnWJRlb5xgkk3lJwAAAIk"]
[Wed Sep 30 01:04:31.944658 2026] [security2:error] [pid 251754:tid 251969] [client 20.194.30.107:17305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/memberfuns.php"] [unique_id "ary0f5OnWJRlb5xgkk3lKwAAANg"]
[Wed Sep 30 01:04:31.948306 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:31.948716 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:31.958563 2026] [security2:error] [pid 251754:tid 251973] [client 20.194.96.176:64373] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.checkboxdev.com"] [uri "/1.php"] [unique_id "ary0f5OnWJRlb5xgkk3lLQAAANw"]
[Wed Sep 30 01:04:31.958673 2026] [security2:error] [pid 251754:tid 251973] [client 20.194.96.176:64373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/1.php"] [unique_id "ary0f5OnWJRlb5xgkk3lLQAAANw"]
[Wed Sep 30 01:04:31.969228 2026] [security2:error] [pid 251754:tid 251939] [client 45.234.103.35:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary0f5OnWJRlb5xgkk3lLwAAALo"]
[Wed Sep 30 01:04:32.030327 2026] [security2:error] [pid 251754:tid 251891] [client 20.214.145.90:28625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/gaxby.php"] [unique_id "ary0gJOnWJRlb5xgkk3lMQAAAIo"]
[Wed Sep 30 01:04:32.041390 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.041671 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.048220 2026] [security2:error] [pid 251754:tid 251970] [client 52.172.226.14:40611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ops.php"] [unique_id "ary0gJOnWJRlb5xgkk3lNQAAANk"]
[Wed Sep 30 01:04:32.071880 2026] [security2:error] [pid 251754:tid 251902] [client 168.100.149.108:62788] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.mngroup.com.au"] [uri "/index.php"] [unique_id "ary0f5OnWJRlb5xgkk3lAwAAlUM"]
[Wed Sep 30 01:04:32.123934 2026] [security2:error] [pid 251754:tid 251896] [client 102.253.38.25:35192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0gJOnWJRlb5xgkk3lOQAAAI8"]
[Wed Sep 30 01:04:32.124067 2026] [security2:error] [pid 251754:tid 251896] [client 102.253.38.25:35192] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0gJOnWJRlb5xgkk3lOQAAAI8"]
[Wed Sep 30 01:04:32.130509 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.130778 2026] [access_compat:error] [pid 251754:tid 251946] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.172010 2026] [security2:error] [pid 251754:tid 251986] [client 52.231.30.175:37937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-filemanager1.php"] [unique_id "ary0gJOnWJRlb5xgkk3lPQAAAOk"]
[Wed Sep 30 01:04:32.197785 2026] [security2:error] [pid 251754:tid 251953] [client 20.251.39.228:35111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/rzki.php"] [unique_id "ary0gJOnWJRlb5xgkk3lPgAAAMg"]
[Wed Sep 30 01:04:32.211572 2026] [security2:error] [pid 251754:tid 251918] [client 64.227.188.205:34046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0gJOnWJRlb5xgkk3lQQAAAKU"]
[Wed Sep 30 01:04:32.222485 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.222757 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.258205 2026] [security2:error] [pid 251754:tid 251965] [client 20.194.96.176:26718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/radio.php"] [unique_id "ary0gJOnWJRlb5xgkk3lRwAAANQ"]
[Wed Sep 30 01:04:32.282749 2026] [access_compat:error] [pid 251754:tid 251945] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:32.283039 2026] [access_compat:error] [pid 251754:tid 251945] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:32.287499 2026] [security2:error] [pid 251754:tid 251956] [client 20.219.2.60:18834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/sodas.php"] [unique_id "ary0gJOnWJRlb5xgkk3lTwAAAMs"]
[Wed Sep 30 01:04:32.304249 2026] [security2:error] [pid 251754:tid 251984] [client 20.214.145.90:28311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/dh9u7.php"] [unique_id "ary0gJOnWJRlb5xgkk3lVAAAAOc"]
[Wed Sep 30 01:04:32.313394 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.313705 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.334770 2026] [security2:error] [pid 251754:tid 251898] [client 20.194.30.107:53381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/amax.php"] [unique_id "ary0gJOnWJRlb5xgkk3lXgAAAJE"]
[Wed Sep 30 01:04:32.404680 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.405037 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.414385 2026] [core:error] [pid 251754:tid 251908] [client 64.62.156.94:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:32.414405 2026] [core:error] [pid 251754:tid 251908] [client 64.62.156.94:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:32.435193 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:37948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-freya.php"] [unique_id "ary0gJOnWJRlb5xgkk3lZgAAAPU"]
[Wed Sep 30 01:04:32.470471 2026] [security2:error] [pid 251754:tid 251932] [client 104.223.70.222:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0gJOnWJRlb5xgkk3laQAAALM"]
[Wed Sep 30 01:04:32.484577 2026] [security2:error] [pid 251754:tid 251929] [client 20.214.109.68:62416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/clasa99.php"] [unique_id "ary0gJOnWJRlb5xgkk3lagAAALA"]
[Wed Sep 30 01:04:32.495147 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.495424 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.529518 2026] [security2:error] [pid 251754:tid 251988] [client 52.172.226.14:40609] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/1.php"] [unique_id "ary0gJOnWJRlb5xgkk3lbgAAAOs"]
[Wed Sep 30 01:04:32.529618 2026] [security2:error] [pid 251754:tid 251988] [client 52.172.226.14:40609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/1.php"] [unique_id "ary0gJOnWJRlb5xgkk3lbgAAAOs"]
[Wed Sep 30 01:04:32.534185 2026] [security2:error] [pid 251754:tid 251902] [client 20.70.173.30:45608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/222.php"] [unique_id "ary0gJOnWJRlb5xgkk3lcAAAAJU"]
[Wed Sep 30 01:04:32.549343 2026] [security2:error] [pid 251754:tid 252002] [client 4.196.65.241:2514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/edorxrr.php"] [unique_id "ary0gJOnWJRlb5xgkk3ldAAAAPk"]
[Wed Sep 30 01:04:32.585507 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.585786 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.600705 2026] [security2:error] [pid 251754:tid 251954] [client 20.214.145.90:38379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/koiy.php"] [unique_id "ary0gJOnWJRlb5xgkk3leQAAAMk"]
[Wed Sep 30 01:04:32.604815 2026] [security2:error] [pid 251754:tid 251993] [client 20.194.96.176:56196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/blacks.php"] [unique_id "ary0gJOnWJRlb5xgkk3legAAAPA"]
[Wed Sep 30 01:04:32.677013 2026] [security2:error] [pid 251754:tid 251867] [remote 64.23.166.180:54228] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.ghe.emf.mybluehost.me"] [uri "/.env"] [unique_id "ary0gJOnWJRlb5xgkk3lgwAAmG4"]
[Wed Sep 30 01:04:32.679546 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.679826 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.682438 2026] [security2:error] [pid 251754:tid 251992] [client 76.145.131.92:48922] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary0gJOnWJRlb5xgkk3lcgAA72c"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:04:32.703508 2026] [security2:error] [pid 251754:tid 251994] [client 20.251.39.228:13985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/xsas.php"] [unique_id "ary0gJOnWJRlb5xgkk3lhwAAAPE"]
[Wed Sep 30 01:04:32.706553 2026] [security2:error] [pid 251754:tid 252012] [client 52.231.30.175:37277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/admin.php/admin.php"] [unique_id "ary0gJOnWJRlb5xgkk3liAAAAQM"]
[Wed Sep 30 01:04:32.756697 2026] [access_compat:error] [pid 251754:tid 251958] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:32.757000 2026] [access_compat:error] [pid 251754:tid 251958] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:32.767886 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.768217 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.861369 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.861764 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.898560 2026] [security2:error] [pid 251754:tid 251879] [remote 47.128.98.13:39144] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "accessart.af"] [uri "/aboutus.php"] [unique_id "ary0gJOnWJRlb5xgkk3lmwAAs3o"]
[Wed Sep 30 01:04:32.898818 2026] [security2:error] [pid 251754:tid 251936] [client 20.214.145.90:28257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wordfence-waf.php"] [unique_id "ary0gJOnWJRlb5xgkk3lmgAAALc"]
[Wed Sep 30 01:04:32.899334 2026] [security2:error] [pid 251754:tid 251961] [client 172.232.97.149:57062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.97.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.central-fuerth.de"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ary0gJOnWJRlb5xgkk3lnAAAANA"]
[Wed Sep 30 01:04:32.916396 2026] [security2:error] [pid 251754:tid 251949] [client 74.7.230.57:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.concretechn.net"] [uri "/cgi-sys/404.html"] [unique_id "ary0gJOnWJRlb5xgkk3lngAAAMQ"]
[Wed Sep 30 01:04:32.922530 2026] [security2:error] [pid 251754:tid 251998] [client 74.7.230.57:46326] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.concretechn.net"] [uri "/robots.txt"] [unique_id "ary0gJOnWJRlb5xgkk3lmAAA9XE"]
[Wed Sep 30 01:04:32.926976 2026] [security2:error] [pid 251754:tid 251951] [client 64.227.188.205:34050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0gJOnWJRlb5xgkk3lnwAAAMY"]
[Wed Sep 30 01:04:32.942479 2026] [security2:error] [pid 251754:tid 251895] [client 20.28.180.172:61212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ok.php"] [unique_id "ary0gJOnWJRlb5xgkk3loAAAAI4"]
[Wed Sep 30 01:04:32.951272 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:32.951528 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:32.960648 2026] [security2:error] [pid 251754:tid 251871] [remote 74.7.227.56:58232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0gJOnWJRlb5xgkk3lowAAsHI"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:04:32.971010 2026] [security2:error] [pid 251754:tid 251983] [client 52.231.30.175:37371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/faiy.php"] [unique_id "ary0gJOnWJRlb5xgkk3lpAAAAOY"]
[Wed Sep 30 01:04:33.001966 2026] [security2:error] [pid 251754:tid 251987] [client 4.196.65.241:19085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/wmore1.php"] [unique_id "ary0gZOnWJRlb5xgkk3lpQAAAOo"]
[Wed Sep 30 01:04:33.042254 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.042564 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.083546 2026] [access_compat:error] [pid 251754:tid 251875] [remote 17.166.151.177:49850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.083833 2026] [access_compat:error] [pid 251754:tid 251875] [remote 17.166.151.177:49850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.112791 2026] [security2:error] [pid 251754:tid 251948] [client 52.172.226.14:40578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/aaa.php"] [unique_id "ary0gZOnWJRlb5xgkk3lsAAAAMM"]
[Wed Sep 30 01:04:33.126968 2026] [security2:error] [pid 251754:tid 251995] [client 20.251.39.228:48591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/d12.php"] [unique_id "ary0gZOnWJRlb5xgkk3lswAAAPI"]
[Wed Sep 30 01:04:33.137713 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.138172 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.148967 2026] [security2:error] [pid 251754:tid 251984] [client 103.241.204.139:56228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0gZOnWJRlb5xgkk3ltgAAAOc"]
[Wed Sep 30 01:04:33.149072 2026] [security2:error] [pid 251754:tid 251984] [client 103.241.204.139:56228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0gZOnWJRlb5xgkk3ltgAAAOc"]
[Wed Sep 30 01:04:33.150065 2026] [security2:error] [pid 251754:tid 252000] [client 103.159.192.142:52768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0gZOnWJRlb5xgkk3ltwAAAPc"]
[Wed Sep 30 01:04:33.150144 2026] [security2:error] [pid 251754:tid 252000] [client 103.159.192.142:52768] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0gZOnWJRlb5xgkk3ltwAAAPc"]
[Wed Sep 30 01:04:33.169593 2026] [security2:error] [pid 251754:tid 252012] [client 20.194.96.176:35587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/run.php"] [unique_id "ary0gZOnWJRlb5xgkk3luAAAAQM"]
[Wed Sep 30 01:04:33.196982 2026] [security2:error] [pid 251754:tid 251974] [client 104.208.65.139:13756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/sss.php"] [unique_id "ary0gZOnWJRlb5xgkk3luQAAAN0"]
[Wed Sep 30 01:04:33.224241 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.224515 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.234293 2026] [security2:error] [pid 251754:tid 251939] [client 52.231.30.175:37287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0gZOnWJRlb5xgkk3lvgAAALo"]
[Wed Sep 30 01:04:33.281678 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:33.281953 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2L3Jvb3Qvc2Jpbg==
[Wed Sep 30 01:04:33.288687 2026] [security2:error] [pid 251754:tid 251945] [client 20.214.145.90:28290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/em.php"] [unique_id "ary0gZOnWJRlb5xgkk3lwwAAAMA"]
[Wed Sep 30 01:04:33.318831 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.319245 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.408475 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.408747 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.445938 2026] [security2:error] [pid 251754:tid 251998] [client 168.100.149.82:58510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.mngroup.com.au"] [uri "/"] [unique_id "ary0gZOnWJRlb5xgkk3lzwAAAPU"]
[Wed Sep 30 01:04:33.495168 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.495422 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.500163 2026] [security2:error] [pid 251754:tid 252002] [client 52.231.30.175:37307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/myglu.php"] [unique_id "ary0gZOnWJRlb5xgkk3l0wAAAPk"]
[Wed Sep 30 01:04:33.529208 2026] [security2:error] [pid 251754:tid 251946] [client 20.194.96.176:43335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/vpn.php"] [unique_id "ary0gZOnWJRlb5xgkk3l2AAAAME"]
[Wed Sep 30 01:04:33.569801 2026] [security2:error] [pid 251754:tid 251910] [client 20.214.145.90:38391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/hp.php"] [unique_id "ary0gZOnWJRlb5xgkk3l2wAAAJ0"]
[Wed Sep 30 01:04:33.587906 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.588195 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.614705 2026] [security2:error] [pid 251754:tid 251952] [client 64.227.188.205:34060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0gZOnWJRlb5xgkk3l4AAAAMc"]
[Wed Sep 30 01:04:33.633209 2026] [security2:error] [pid 251754:tid 251995] [client 20.251.39.228:29954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/okxh.php"] [unique_id "ary0gZOnWJRlb5xgkk3l4gAAAPI"]
[Wed Sep 30 01:04:33.679130 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.679405 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.704608 2026] [security2:error] [pid 251754:tid 252012] [client 52.172.226.14:40603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/chosen.php"] [unique_id "ary0gZOnWJRlb5xgkk3l5gAAAQM"]
[Wed Sep 30 01:04:33.760953 2026] [security2:error] [pid 251754:tid 251943] [client 52.231.30.175:37375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/bnmtp.php"] [unique_id "ary0gZOnWJRlb5xgkk3l6AAAAL4"]
[Wed Sep 30 01:04:33.769076 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.769345 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.774579 2026] [access_compat:error] [pid 251754:tid 251968] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:33.774858 2026] [access_compat:error] [pid 251754:tid 251968] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:33.825920 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0gZOnWJRlb5xgkk3l6wAA1QE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297527&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:33.825947 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0gZOnWJRlb5xgkk3l6wAA1QE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297527&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:33.859423 2026] [security2:error] [pid 251754:tid 251888] [client 20.194.96.176:64336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/alfa.php"] [unique_id "ary0gZOnWJRlb5xgkk3l7wAAAIc"]
[Wed Sep 30 01:04:33.860229 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.860521 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:33.930344 2026] [security2:error] [pid 251754:tid 251898] [client 20.214.145.90:28227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tjmcgroup.com.au"] [uri "/wpuse.php"] [unique_id "ary0gZOnWJRlb5xgkk3l8QAAAJE"]
[Wed Sep 30 01:04:33.950706 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:33.950993 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.031562 2026] [security2:error] [pid 251754:tid 252004] [client 52.231.30.175:37274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/zeta.php"] [unique_id "ary0gpOnWJRlb5xgkk3l_AAAAPs"]
[Wed Sep 30 01:04:34.042826 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.043082 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.133910 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.134207 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.148291 2026] [security2:error] [pid 251754:tid 251929] [client 20.251.39.228:17627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/55b76.php"] [unique_id "ary0gpOnWJRlb5xgkk3mAwAAALA"]
[Wed Sep 30 01:04:34.212965 2026] [security2:error] [pid 251754:tid 251954] [client 152.59.169.65:59060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mBwAAAMk"]
[Wed Sep 30 01:04:34.213129 2026] [security2:error] [pid 251754:tid 251954] [client 152.59.169.65:59060] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mBwAAAMk"]
[Wed Sep 30 01:04:34.225671 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.225953 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.251094 2026] [access_compat:error] [pid 251754:tid 251996] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTg=
[Wed Sep 30 01:04:34.251349 2026] [access_compat:error] [pid 251754:tid 251996] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTg=
[Wed Sep 30 01:04:34.305361 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:37222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary0gpOnWJRlb5xgkk3mEQAAAOU"]
[Wed Sep 30 01:04:34.315800 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.316081 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.316647 2026] [security2:error] [pid 251754:tid 251955] [client 64.227.188.205:34068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0gpOnWJRlb5xgkk3mFAAAAMo"]
[Wed Sep 30 01:04:34.349957 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.158:51670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:34.350263 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.158:51670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:34.353202 2026] [security2:error] [pid 251754:tid 251928] [client 20.198.74.230:24140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ab.php"] [unique_id "ary0gpOnWJRlb5xgkk3mGQAAAK8"]
[Wed Sep 30 01:04:34.358655 2026] [http2:warn] [pid 212454:tid 212701] [client 40.77.167.224:59983] h2_stream(212454-984-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:04:34.401733 2026] [security2:error] [pid 251754:tid 251974] [client 52.172.226.14:40626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/2P.php"] [unique_id "ary0gpOnWJRlb5xgkk3mHAAAAN0"]
[Wed Sep 30 01:04:34.406737 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.407019 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.466101 2026] [security2:error] [pid 251754:tid 251940] [client 213.136.69.135:54187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/script-modules.php"] [unique_id "ary0gpOnWJRlb5xgkk3mHwAAALs"], referer: binance.com
[Wed Sep 30 01:04:34.473378 2026] [security2:error] [pid 251754:tid 251985] [client 20.194.96.176:39550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/w.php"] [unique_id "ary0gpOnWJRlb5xgkk3mIQAAAOg"]
[Wed Sep 30 01:04:34.497469 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.497757 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.505572 2026] [security2:error] [pid 251754:tid 251919] [client 155.190.6.18:34962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mIwAAAKY"]
[Wed Sep 30 01:04:34.505669 2026] [security2:error] [pid 251754:tid 251919] [client 155.190.6.18:34962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mIwAAAKY"]
[Wed Sep 30 01:04:34.565393 2026] [security2:error] [pid 251754:tid 251898] [client 52.231.30.175:37184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary0gpOnWJRlb5xgkk3mJQAAAJE"]
[Wed Sep 30 01:04:34.574614 2026] [security2:error] [pid 251754:tid 251924] [client 20.251.39.228:13996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tt.php"] [unique_id "ary0gpOnWJRlb5xgkk3mJgAAAKs"]
[Wed Sep 30 01:04:34.588335 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.588628 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.680665 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.680956 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.769367 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.769638 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.770194 2026] [access_compat:error] [pid 251754:tid 251998] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTE=
[Wed Sep 30 01:04:34.770642 2026] [access_compat:error] [pid 251754:tid 251998] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTE=
[Wed Sep 30 01:04:34.834048 2026] [security2:error] [pid 251754:tid 251923] [client 52.231.30.175:37202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary0gpOnWJRlb5xgkk3mNgAAAKo"]
[Wed Sep 30 01:04:34.862945 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.863202 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:34.904523 2026] [security2:error] [pid 251754:tid 251979] [client 122.173.27.10:22464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mPAAAAOI"]
[Wed Sep 30 01:04:34.904679 2026] [security2:error] [pid 251754:tid 251979] [client 122.173.27.10:22464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mPAAAAOI"]
[Wed Sep 30 01:04:34.911681 2026] [security2:error] [pid 251754:tid 251954] [client 52.172.226.14:40592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/min.php"] [unique_id "ary0gpOnWJRlb5xgkk3mPgAAAMk"]
[Wed Sep 30 01:04:34.954021 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:34.954439 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.005024 2026] [security2:error] [pid 251754:tid 251969] [client 49.43.163.212:63697] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mPwAAANg"]
[Wed Sep 30 01:04:35.005208 2026] [security2:error] [pid 251754:tid 251969] [client 49.43.163.212:63697] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0gpOnWJRlb5xgkk3mPwAAANg"]
[Wed Sep 30 01:04:35.024147 2026] [security2:error] [pid 251754:tid 252005] [client 64.227.188.205:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0g5OnWJRlb5xgkk3mQwAAAPw"]
[Wed Sep 30 01:04:35.047198 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.047458 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.091701 2026] [security2:error] [pid 251754:tid 251955] [client 20.251.39.228:35079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/maul.php"] [unique_id "ary0g5OnWJRlb5xgkk3mSQAAAMo"]
[Wed Sep 30 01:04:35.135440 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.135731 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.139353 2026] [security2:error] [pid 251754:tid 251928] [client 52.231.30.175:37265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/flamini.php"] [unique_id "ary0g5OnWJRlb5xgkk3mTwAAAK8"]
[Wed Sep 30 01:04:35.150648 2026] [security2:error] [pid 251754:tid 251956] [client 20.214.109.68:9916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/myfilexxx.php"] [unique_id "ary0g5OnWJRlb5xgkk3mUAAAAMs"]
[Wed Sep 30 01:04:35.187774 2026] [security2:error] [pid 251754:tid 251988] [client 20.194.96.176:43376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0g5OnWJRlb5xgkk3mUQAAAOs"]
[Wed Sep 30 01:04:35.228628 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.228893 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.271037 2026] [security2:error] [pid 251754:tid 251887] [client 200.100.237.16:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0g5OnWJRlb5xgkk3mWwAAAIY"]
[Wed Sep 30 01:04:35.293633 2026] [access_compat:error] [pid 251754:tid 251963] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:35.293970 2026] [access_compat:error] [pid 251754:tid 251963] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:35.314944 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.315201 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.367486 2026] [security2:error] [pid 251754:tid 251901] [client 52.172.226.14:40540] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/css/"] [unique_id "ary0g5OnWJRlb5xgkk3mYQAAAJQ"]
[Wed Sep 30 01:04:35.368112 2026] [security2:error] [pid 251754:tid 251990] [client 104.208.65.139:2671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/or.php"] [unique_id "ary0g5OnWJRlb5xgkk3mYgAAAO0"]
[Wed Sep 30 01:04:35.408742 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.409029 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.427037 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.30.175:37959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/myglu.php"] [unique_id "ary0g5OnWJRlb5xgkk3mZgAAAKs"]
[Wed Sep 30 01:04:35.498165 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.498439 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.514841 2026] [security2:error] [pid 251754:tid 251919] [client 43.104.4.195:12244] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary0g5OnWJRlb5xgkk3mcAAAAKY"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:04:35.583164 2026] [security2:error] [pid 251754:tid 251899] [client 4.196.65.241:19517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/kerang.php"] [unique_id "ary0g5OnWJRlb5xgkk3mdAAAAJI"]
[Wed Sep 30 01:04:35.590380 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.590634 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.605305 2026] [security2:error] [pid 251754:tid 251900] [remote 168.100.149.82:18660] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0g5OnWJRlb5xgkk3mbwAAtxE"]
[Wed Sep 30 01:04:35.629990 2026] [security2:error] [pid 251754:tid 251996] [client 43.172.194.88:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers"] [unique_id "ary0g5OnWJRlb5xgkk3mfAAAAPM"]
[Wed Sep 30 01:04:35.682685 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.683019 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.695972 2026] [security2:error] [pid 251754:tid 251955] [client 52.231.30.175:37919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/alfa.php"] [unique_id "ary0g5OnWJRlb5xgkk3mgwAAAMo"]
[Wed Sep 30 01:04:35.700389 2026] [security2:error] [pid 251754:tid 251989] [client 20.194.96.176:39533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/robot.php"] [unique_id "ary0g5OnWJRlb5xgkk3mhAAAAOw"]
[Wed Sep 30 01:04:35.716711 2026] [security2:error] [pid 251754:tid 251941] [client 64.227.188.205:34096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0g5OnWJRlb5xgkk3mhQAAALw"]
[Wed Sep 30 01:04:35.771546 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.771826 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.842191 2026] [access_compat:error] [pid 251754:tid 251890] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:04:35.842648 2026] [access_compat:error] [pid 251754:tid 251890] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:04:35.849332 2026] [security2:error] [pid 251754:tid 251940] [client 20.251.39.228:13966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/5b9ac.php"] [unique_id "ary0g5OnWJRlb5xgkk3mkwAAALs"]
[Wed Sep 30 01:04:35.867238 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.867655 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.887587 2026] [security2:error] [pid 251754:tid 251985] [client 52.172.226.14:40515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/great.php"] [unique_id "ary0g5OnWJRlb5xgkk3mlwAAAOg"]
[Wed Sep 30 01:04:35.954507 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:35.954780 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:35.977425 2026] [security2:error] [pid 251754:tid 251990] [client 52.231.30.175:37291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/index.php"] [unique_id "ary0g5OnWJRlb5xgkk3mnAAAAO0"]
[Wed Sep 30 01:04:35.986136 2026] [security2:error] [pid 251754:tid 251924] [client 20.219.2.60:19447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/yw5bi63u.php"] [unique_id "ary0g5OnWJRlb5xgkk3mnQAAAKs"]
[Wed Sep 30 01:04:36.045089 2026] [security2:error] [pid 251754:tid 251961] [client 45.138.12.32:38372] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.njx.mds.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0hJOnWJRlb5xgkk3mpQAAANA"]
[Wed Sep 30 01:04:36.045170 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.045448 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:6091] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.077746 2026] [security2:error] [pid 251754:tid 251904] [client 20.194.96.176:5303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/sss.php"] [unique_id "ary0hJOnWJRlb5xgkk3mqQAAAJc"]
[Wed Sep 30 01:04:36.119950 2026] [security2:error] [pid 251754:tid 251946] [client 116.197.133.25:51781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3mrAAAAME"]
[Wed Sep 30 01:04:36.120034 2026] [security2:error] [pid 251754:tid 251946] [client 116.197.133.25:51781] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3mrAAAAME"]
[Wed Sep 30 01:04:36.186114 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.186372 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.238904 2026] [security2:error] [pid 251754:tid 251911] [client 20.251.39.228:5865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/hehe.php"] [unique_id "ary0hJOnWJRlb5xgkk3muQAAAJ4"]
[Wed Sep 30 01:04:36.264817 2026] [access_compat:error] [pid 251754:tid 252002] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:36.265086 2026] [access_compat:error] [pid 251754:tid 252002] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:36.275335 2026] [security2:error] [pid 251754:tid 251987] [client 52.231.30.175:37280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0hJOnWJRlb5xgkk3mvwAAAOo"]
[Wed Sep 30 01:04:36.280234 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.280505 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.320338 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.320622 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.343550 2026] [security2:error] [pid 251754:tid 251905] [client 45.138.12.32:25284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.csn.htc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0hJOnWJRlb5xgkk3mwwAAAJg"]
[Wed Sep 30 01:04:36.400264 2026] [security2:error] [pid 251754:tid 251999] [client 64.227.188.205:34098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0hJOnWJRlb5xgkk3mxwAAAPY"]
[Wed Sep 30 01:04:36.408333 2026] [security2:error] [pid 251754:tid 251995] [client 52.172.226.14:40530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/BDKR28WP.php"] [unique_id "ary0hJOnWJRlb5xgkk3myQAAAPI"]
[Wed Sep 30 01:04:36.412072 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.412473 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.422905 2026] [security2:error] [pid 251754:tid 251988] [client 4.240.25.22:8957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ops.php"] [unique_id "ary0hJOnWJRlb5xgkk3mygAAAOs"]
[Wed Sep 30 01:04:36.472981 2026] [security2:error] [pid 251754:tid 251984] [client 45.138.12.32:25274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.csa.hct.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0hJOnWJRlb5xgkk3mywAAAOc"]
[Wed Sep 30 01:04:36.478152 2026] [security2:error] [pid 251754:tid 251939] [client 201.32.215.149:7952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3mzAAAALo"]
[Wed Sep 30 01:04:36.478319 2026] [security2:error] [pid 251754:tid 251939] [client 201.32.215.149:7952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3mzAAAALo"]
[Wed Sep 30 01:04:36.502912 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.503276 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.517478 2026] [security2:error] [pid 251754:tid 251902] [client 20.194.96.176:39522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/or.php"] [unique_id "ary0hJOnWJRlb5xgkk3m0gAAAJU"]
[Wed Sep 30 01:04:36.564362 2026] [security2:error] [pid 251754:tid 251962] [client 20.194.30.107:32712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/dex.php"] [unique_id "ary0hJOnWJRlb5xgkk3m1wAAANE"]
[Wed Sep 30 01:04:36.595249 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.595513 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:40456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.683803 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.684080 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.711614 2026] [security2:error] [pid 251754:tid 251981] [client 4.196.65.241:19106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/local.php"] [unique_id "ary0hJOnWJRlb5xgkk3m5gAAAOQ"]
[Wed Sep 30 01:04:36.735385 2026] [security2:error] [pid 251754:tid 251923] [client 152.59.165.7:57402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3m6AAAAKo"]
[Wed Sep 30 01:04:36.735480 2026] [security2:error] [pid 251754:tid 251923] [client 152.59.165.7:57402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3m6AAAAKo"]
[Wed Sep 30 01:04:36.762557 2026] [access_compat:error] [pid 251754:tid 251957] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:36.762850 2026] [access_compat:error] [pid 251754:tid 251957] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:36.774850 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.775108 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.776560 2026] [security2:error] [pid 251754:tid 251987] [client 20.28.180.172:62343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/zoo.php"] [unique_id "ary0hJOnWJRlb5xgkk3m7wAAAOo"]
[Wed Sep 30 01:04:36.806192 2026] [security2:error] [pid 251754:tid 251950] [client 191.85.24.57:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0hJOnWJRlb5xgkk3m8wAAAMU"]
[Wed Sep 30 01:04:36.813901 2026] [security2:error] [pid 251754:tid 251947] [client 202.179.95.79:62716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3m9gAAAMI"]
[Wed Sep 30 01:04:36.814016 2026] [security2:error] [pid 251754:tid 251947] [client 202.179.95.79:62716] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0hJOnWJRlb5xgkk3m9gAAAMI"]
[Wed Sep 30 01:04:36.852485 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.30.175:37302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-admin/js/index.php"] [unique_id "ary0hJOnWJRlb5xgkk3m9wAAAMc"]
[Wed Sep 30 01:04:36.871372 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.871646 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.957430 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:36.957683 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:36.970771 2026] [security2:error] [pid 251754:tid 252011] [client 52.172.226.14:40601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/gigi.php"] [unique_id "ary0hJOnWJRlb5xgkk3m_QAAAQI"]
[Wed Sep 30 01:04:36.994017 2026] [security2:error] [pid 251754:tid 251887] [client 20.251.39.228:14014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary0hJOnWJRlb5xgkk3m_gAAAIY"]
[Wed Sep 30 01:04:37.048333 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.048626 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.077936 2026] [security2:error] [pid 251754:tid 251949] [client 14.102.21.86:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0hZOnWJRlb5xgkk3nAwAAAMQ"]
[Wed Sep 30 01:04:37.087662 2026] [security2:error] [pid 251754:tid 251977] [client 20.194.96.176:43432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/b8.php"] [unique_id "ary0hZOnWJRlb5xgkk3nBAAAAOA"]
[Wed Sep 30 01:04:37.090022 2026] [security2:error] [pid 251754:tid 251971] [client 64.227.188.205:34104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0hZOnWJRlb5xgkk3nBQAAANo"]
[Wed Sep 30 01:04:37.123148 2026] [security2:error] [pid 251754:tid 251985] [client 52.231.30.175:37188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/admin.php"] [unique_id "ary0hZOnWJRlb5xgkk3nCQAAAOg"]
[Wed Sep 30 01:04:37.128524 2026] [core:error] [pid 251754:tid 252005] [client 104.207.36.129:46955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:37.128541 2026] [core:error] [pid 251754:tid 252005] [client 104.207.36.129:46955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:37.138354 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.138619 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.221208 2026] [security2:error] [pid 251754:tid 251806] [remote 47.128.114.144:60508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/1649/saudi-embassy-launches-new-visa-processing-centre"] [unique_id "ary0hZOnWJRlb5xgkk3nDwAA7TE"]
[Wed Sep 30 01:04:37.230459 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.230734 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.271279 2026] [access_compat:error] [pid 251754:tid 251933] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:37.271549 2026] [access_compat:error] [pid 251754:tid 251933] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:37.321910 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.322175 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.386179 2026] [security2:error] [pid 251754:tid 251905] [client 203.122.45.246:51367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nFwAAAJg"]
[Wed Sep 30 01:04:37.386293 2026] [security2:error] [pid 251754:tid 251905] [client 203.122.45.246:51367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nFwAAAJg"]
[Wed Sep 30 01:04:37.396827 2026] [security2:error] [pid 251754:tid 251897] [client 52.231.30.175:37213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/themes/index.php"] [unique_id "ary0hZOnWJRlb5xgkk3nGAAAAJA"]
[Wed Sep 30 01:04:37.406178 2026] [security2:error] [pid 251754:tid 251938] [client 20.194.96.176:44088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/xex.php"] [unique_id "ary0hZOnWJRlb5xgkk3nGQAAALk"]
[Wed Sep 30 01:04:37.406485 2026] [security2:error] [pid 251754:tid 251969] [client 116.193.128.26:52184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nGgAAANg"]
[Wed Sep 30 01:04:37.406565 2026] [security2:error] [pid 251754:tid 251969] [client 116.193.128.26:52184] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nGgAAANg"]
[Wed Sep 30 01:04:37.432895 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.433155 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.503817 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.504076 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.574346 2026] [security2:error] [pid 251754:tid 251910] [client 52.172.226.14:40585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ant.php"] [unique_id "ary0hZOnWJRlb5xgkk3nJgAAAJ0"]
[Wed Sep 30 01:04:37.579387 2026] [security2:error] [pid 251754:tid 251942] [client 188.215.233.162:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0hZOnWJRlb5xgkk3nJwAAAL0"]
[Wed Sep 30 01:04:37.593667 2026] [security2:error] [pid 251754:tid 251827] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0hZOnWJRlb5xgkk3nKgAA1kY"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D88438
[Wed Sep 30 01:04:37.595877 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.596285 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.605833 2026] [security2:error] [pid 251754:tid 251988] [client 20.251.39.228:35088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/varb.php"] [unique_id "ary0hZOnWJRlb5xgkk3nKwAAAOs"]
[Wed Sep 30 01:04:37.625034 2026] [security2:error] [pid 251754:tid 251909] [remote 168.100.149.233:53588] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0hZOnWJRlb5xgkk3nIgAAyjU"]
[Wed Sep 30 01:04:37.666961 2026] [security2:error] [pid 251754:tid 251978] [client 52.231.30.175:37245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-content/themes/index.php"] [unique_id "ary0hZOnWJRlb5xgkk3nMQAAAOE"]
[Wed Sep 30 01:04:37.687207 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.687484 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.691751 2026] [ssl:error] [pid 251754:tid 251984] [client 216.25.124.26:5951] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcontacts.idv.qlp.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:04:37.691784 2026] [security2:error] [pid 251754:tid 251888] [client 223.181.60.167:24199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nNAAAAIc"]
[Wed Sep 30 01:04:37.692599 2026] [security2:error] [pid 251754:tid 251888] [client 223.181.60.167:24199] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nNAAAAIc"]
[Wed Sep 30 01:04:37.742068 2026] [security2:error] [pid 251754:tid 251929] [client 189.29.151.130:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/led-lamp/"] [unique_id "ary0hZOnWJRlb5xgkk3nOQAAALA"]
[Wed Sep 30 01:04:37.774329 2026] [access_compat:error] [pid 251754:tid 252005] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:37.774596 2026] [access_compat:error] [pid 251754:tid 252005] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:37.776913 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.777181 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.795614 2026] [security2:error] [pid 251754:tid 251948] [client 64.227.188.205:58902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0hZOnWJRlb5xgkk3nPwAAAMM"]
[Wed Sep 30 01:04:37.796169 2026] [security2:error] [pid 251754:tid 251944] [client 20.214.109.68:9844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/karma_144a.php"] [unique_id "ary0hZOnWJRlb5xgkk3nQAAAAL8"]
[Wed Sep 30 01:04:37.874098 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.874556 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.945081 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.30.175:37254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/cgi-bin/index.php"] [unique_id "ary0hZOnWJRlb5xgkk3nQgAAAKs"]
[Wed Sep 30 01:04:37.959215 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:37.959483 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:37.978642 2026] [security2:error] [pid 251754:tid 251947] [client 103.159.192.142:53275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nRAAAAMI"]
[Wed Sep 30 01:04:37.978768 2026] [security2:error] [pid 251754:tid 251947] [client 103.159.192.142:53275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0hZOnWJRlb5xgkk3nRAAAAMI"]
[Wed Sep 30 01:04:38.010048 2026] [security2:error] [pid 251754:tid 252010] [client 20.194.96.176:43374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/CAE-2.5.php"] [unique_id "ary0hpOnWJRlb5xgkk3nRQAAAQE"]
[Wed Sep 30 01:04:38.012833 2026] [security2:error] [pid 251754:tid 252004] [client 4.196.65.241:19132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/Jcrop.php"] [unique_id "ary0hpOnWJRlb5xgkk3nRgAAAPs"]
[Wed Sep 30 01:04:38.034161 2026] [security2:error] [pid 251754:tid 251981] [client 52.172.226.14:40586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/uejvv.php"] [unique_id "ary0hpOnWJRlb5xgkk3nSAAAAOQ"]
[Wed Sep 30 01:04:38.049340 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.049612 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.140460 2026] [security2:error] [pid 251754:tid 252009] [client 20.251.39.228:32264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/lm15.php"] [unique_id "ary0hpOnWJRlb5xgkk3nVAAAAQA"]
[Wed Sep 30 01:04:38.141556 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.141831 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.198497 2026] [mime:warn] [pid 251754:tid 251956] AH01602: Cannot get media parameter.
[Wed Sep 30 01:04:38.221003 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.30.175:37226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-manager.php"] [unique_id "ary0hpOnWJRlb5xgkk3nXAAAAPA"]
[Wed Sep 30 01:04:38.231143 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.231428 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.314495 2026] [access_compat:error] [pid 251754:tid 251983] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:38.314856 2026] [access_compat:error] [pid 251754:tid 251983] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:38.317199 2026] [security2:error] [pid 251754:tid 252011] [client 104.208.65.139:13748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/b8.php"] [unique_id "ary0hpOnWJRlb5xgkk3nZgAAAQI"]
[Wed Sep 30 01:04:38.318528 2026] [security2:error] [pid 251754:tid 251964] [client 20.194.96.176:43445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/ass.php"] [unique_id "ary0hpOnWJRlb5xgkk3nZwAAANM"]
[Wed Sep 30 01:04:38.323880 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.324154 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.399281 2026] [security2:error] [pid 251754:tid 251917] [client 45.138.12.32:25300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cti.pwx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0hpOnWJRlb5xgkk3nawAAAKQ"]
[Wed Sep 30 01:04:38.415305 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.415563 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.500344 2026] [security2:error] [pid 251754:tid 252008] [client 52.231.30.175:37248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0hpOnWJRlb5xgkk3ndwAAAP8"]
[Wed Sep 30 01:04:38.504181 2026] [security2:error] [pid 251754:tid 251978] [client 64.227.188.205:58916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0hpOnWJRlb5xgkk3neQAAAOE"]
[Wed Sep 30 01:04:38.505097 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.505351 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.546531 2026] [security2:error] [pid 251754:tid 251924] [client 20.194.30.107:49109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/a.php"] [unique_id "ary0hpOnWJRlb5xgkk3newAAAKs"]
[Wed Sep 30 01:04:38.549544 2026] [security2:error] [pid 251754:tid 251927] [client 173.254.29.157:14986] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0hpOnWJRlb5xgkk3nfAAAAK4"]
[Wed Sep 30 01:04:38.549553 2026] [security2:error] [pid 251754:tid 251932] [client 52.172.226.14:40612] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ary0hpOnWJRlb5xgkk3nfQAAALM"]
[Wed Sep 30 01:04:38.567779 2026] [security2:error] [pid 251754:tid 251933] [client 173.254.29.157:14990] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0hpOnWJRlb5xgkk3ngAAAALQ"]
[Wed Sep 30 01:04:38.574204 2026] [security2:error] [pid 251754:tid 251845] [remote 40.77.167.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0hpOnWJRlb5xgkk3nfgAAzlg"]
[Wed Sep 30 01:04:38.585274 2026] [security2:error] [pid 251754:tid 251981] [client 173.254.29.157:15000] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0hpOnWJRlb5xgkk3ngQAAAOQ"]
[Wed Sep 30 01:04:38.595890 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.596163 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.600532 2026] [security2:error] [pid 251754:tid 251969] [client 173.254.29.157:15006] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0hpOnWJRlb5xgkk3nhgAAANg"]
[Wed Sep 30 01:04:38.617844 2026] [security2:error] [pid 251754:tid 252009] [client 20.194.30.107:17377] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.kgamc.com"] [uri "/1.php"] [unique_id "ary0hpOnWJRlb5xgkk3nhwAAAQA"]
[Wed Sep 30 01:04:38.617965 2026] [security2:error] [pid 251754:tid 252009] [client 20.194.30.107:17377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/1.php"] [unique_id "ary0hpOnWJRlb5xgkk3nhwAAAQA"]
[Wed Sep 30 01:04:38.633108 2026] [security2:error] [pid 251754:tid 251955] [client 20.194.96.176:48876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/felnggg.php"] [unique_id "ary0hpOnWJRlb5xgkk3niQAAAMo"]
[Wed Sep 30 01:04:38.686986 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.687293 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.722584 2026] [security2:error] [pid 251754:tid 251783] [remote 64.23.166.180:39888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.giftedcompositions.com"] [uri "/.env"] [unique_id "ary0hpOnWJRlb5xgkk3njwAAkRo"]
[Wed Sep 30 01:04:38.763148 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.30.175:37363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/cgi-bin/admin.php"] [unique_id "ary0hpOnWJRlb5xgkk3nlQAAAN8"]
[Wed Sep 30 01:04:38.778581 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.778869 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.798471 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:38.798745 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:38.871303 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.871584 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.932198 2026] [security2:error] [pid 251754:tid 251971] [client 4.240.25.22:63656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0hpOnWJRlb5xgkk3nnwAAANo"]
[Wed Sep 30 01:04:38.954332 2026] [security2:error] [pid 251754:tid 251985] [client 20.251.39.228:32300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/clss.php"] [unique_id "ary0hpOnWJRlb5xgkk3nowAAAOg"]
[Wed Sep 30 01:04:38.960429 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:38.960698 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:38.970300 2026] [security2:error] [pid 251754:tid 251999] [client 4.196.65.241:64160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/php8.php"] [unique_id "ary0hpOnWJRlb5xgkk3npQAAAPY"]
[Wed Sep 30 01:04:38.982018 2026] [security2:error] [pid 251754:tid 251998] [client 43.227.131.37:9777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0hpOnWJRlb5xgkk3npwAAAPU"]
[Wed Sep 30 01:04:38.982133 2026] [security2:error] [pid 251754:tid 251998] [client 43.227.131.37:9777] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0hpOnWJRlb5xgkk3npwAAAPU"]
[Wed Sep 30 01:04:39.051408 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.051674 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.100126 2026] [security2:error] [pid 251754:tid 251932] [client 20.194.96.176:44066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/felnggg.update.php"] [unique_id "ary0h5OnWJRlb5xgkk3nrAAAALM"]
[Wed Sep 30 01:04:39.143434 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.143722 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.194837 2026] [security2:error] [pid 251754:tid 251940] [client 64.227.188.205:58928] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0h5OnWJRlb5xgkk3ntQAAALs"]
[Wed Sep 30 01:04:39.234093 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.234489 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.311671 2026] [security2:error] [pid 251754:tid 251912] [client 106.214.2.47:31477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0h5OnWJRlb5xgkk3nvQAAAJ8"]
[Wed Sep 30 01:04:39.312706 2026] [access_compat:error] [pid 251754:tid 251910] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:39.312990 2026] [access_compat:error] [pid 251754:tid 251910] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:04:39.325082 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.325361 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.417461 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.417874 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.457330 2026] [security2:error] [pid 251754:tid 251965] [client 52.231.30.175:37147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0h5OnWJRlb5xgkk3nyAAAANQ"]
[Wed Sep 30 01:04:39.465587 2026] [security2:error] [pid 251754:tid 251929] [client 52.172.226.14:40596] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ary0h5OnWJRlb5xgkk3nyQAAALA"]
[Wed Sep 30 01:04:39.497992 2026] [security2:error] [pid 251754:tid 251917] [client 20.194.96.176:44060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/jybkxer.php"] [unique_id "ary0h5OnWJRlb5xgkk3nzAAAAKQ"]
[Wed Sep 30 01:04:39.501423 2026] [security2:error] [pid 251754:tid 251911] [client 200.104.224.43:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0h5OnWJRlb5xgkk3nzQAAAJ4"]
[Wed Sep 30 01:04:39.507130 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.507404 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.579082 2026] [security2:error] [pid 251754:tid 251953] [client 49.205.105.16:13858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0h5OnWJRlb5xgkk3n0QAAAMg"]
[Wed Sep 30 01:04:39.579201 2026] [security2:error] [pid 251754:tid 251953] [client 49.205.105.16:13858] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0h5OnWJRlb5xgkk3n0QAAAMg"]
[Wed Sep 30 01:04:39.597042 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.597316 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.622172 2026] [security2:error] [pid 251754:tid 251938] [remote 168.100.149.238:36436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0h5OnWJRlb5xgkk3nzwABAlI"]
[Wed Sep 30 01:04:39.689047 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.689315 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.718414 2026] [security2:error] [pid 251754:tid 251936] [client 52.231.30.175:37279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-admin/maint/index.php"] [unique_id "ary0h5OnWJRlb5xgkk3n3AAAALc"]
[Wed Sep 30 01:04:39.738818 2026] [security2:error] [pid 251754:tid 251943] [client 202.46.62.88:60009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ary0h5OnWJRlb5xgkk3n2QAAAL4"]
[Wed Sep 30 01:04:39.780340 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.780603 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.782754 2026] [security2:error] [pid 251754:tid 251939] [client 20.251.39.228:32345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/44.php"] [unique_id "ary0h5OnWJRlb5xgkk3n4gAAALo"]
[Wed Sep 30 01:04:39.783479 2026] [access_compat:error] [pid 251754:tid 251945] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 01:04:39.783776 2026] [access_compat:error] [pid 251754:tid 251945] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 01:04:39.792322 2026] [security2:error] [pid 251754:tid 251933] [client 43.104.4.195:12244] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary0h5OnWJRlb5xgkk3n4wAAALQ"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:04:39.833335 2026] [security2:error] [pid 251754:tid 252010] [client 102.254.102.41:41718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.102.254.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0h5OnWJRlb5xgkk3n5gAAAQE"]
[Wed Sep 30 01:04:39.833480 2026] [security2:error] [pid 251754:tid 252010] [client 102.254.102.41:41718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0h5OnWJRlb5xgkk3n5gAAAQE"]
[Wed Sep 30 01:04:39.843491 2026] [security2:error] [pid 251754:tid 251904] [client 20.28.180.172:61187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gaza.php"] [unique_id "ary0h5OnWJRlb5xgkk3n6AAAAJc"]
[Wed Sep 30 01:04:39.871154 2026] [security2:error] [pid 251754:tid 251951] [client 20.194.96.176:43378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/edit-tags.php"] [unique_id "ary0h5OnWJRlb5xgkk3n6QAAAMY"]
[Wed Sep 30 01:04:39.890698 2026] [security2:error] [pid 251754:tid 251978] [client 64.227.188.205:58932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0h5OnWJRlb5xgkk3n6wAAAOE"]
[Wed Sep 30 01:04:39.896073 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:39.896358 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:39.936060 2026] [access_compat:error] [pid 251754:tid 251916] [client 47.79.13.64:43870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:39.936311 2026] [access_compat:error] [pid 251754:tid 251916] [client 47.79.13.64:43870] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:39.954829 2026] [security2:error] [pid 251754:tid 251969] [client 216.73.216.46:40456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0h5OnWJRlb5xgkk3n8QAAANg"]
[Wed Sep 30 01:04:39.963896 2026] [security2:error] [pid 251754:tid 251923] [client 20.214.109.68:9449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/3586%20b64.php"] [unique_id "ary0h5OnWJRlb5xgkk3n8gAAAKo"]
[Wed Sep 30 01:04:40.052455 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.052733 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.079215 2026] [security2:error] [pid 251754:tid 251914] [client 52.172.226.14:40618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/file.php"] [unique_id "ary0iJOnWJRlb5xgkk3n-wAAAKE"]
[Wed Sep 30 01:04:40.086839 2026] [security2:error] [pid 251754:tid 251937] [client 45.138.12.32:25324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cuk.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0iJOnWJRlb5xgkk3n_AAAALg"]
[Wed Sep 30 01:04:40.108890 2026] [access_compat:error] [pid 251754:tid 251895] [client 47.79.13.176:43154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:40.109333 2026] [access_compat:error] [pid 251754:tid 251895] [client 47.79.13.176:43154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:40.143762 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.144141 2026] [access_compat:error] [pid 251754:tid 251965] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.180477 2026] [security2:error] [pid 251754:tid 251942] [client 104.208.65.139:9620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/xex.php"] [unique_id "ary0iJOnWJRlb5xgkk3oBgAAAL0"]
[Wed Sep 30 01:04:40.227169 2026] [security2:error] [pid 251754:tid 251921] [client 20.194.96.176:43402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/nauik.php"] [unique_id "ary0iJOnWJRlb5xgkk3oCwAAAKg"]
[Wed Sep 30 01:04:40.233773 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.234069 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.282437 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:37355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/matcha.php"] [unique_id "ary0iJOnWJRlb5xgkk3oEAAAANA"]
[Wed Sep 30 01:04:40.287208 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 01:04:40.287480 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 01:04:40.301420 2026] [security2:error] [pid 251754:tid 251936] [client 20.251.39.228:44459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/a5e0a.php"] [unique_id "ary0iJOnWJRlb5xgkk3oEQAAALc"]
[Wed Sep 30 01:04:40.310939 2026] [security2:error] [pid 251754:tid 251963] [client 4.196.65.241:64137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/coffe.php"] [unique_id "ary0iJOnWJRlb5xgkk3oFQAAANI"]
[Wed Sep 30 01:04:40.319094 2026] [security2:error] [pid 251754:tid 251984] [client 4.240.25.22:8408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/admin.php"] [unique_id "ary0iJOnWJRlb5xgkk3oGAAAAOc"]
[Wed Sep 30 01:04:40.324227 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.324480 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.369440 2026] [security2:error] [pid 251754:tid 252008] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0iJOnWJRlb5xgkk3oHwAAAP8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:40.419042 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.419407 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.509999 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.510436 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.558134 2026] [security2:error] [pid 251754:tid 251914] [client 52.172.226.14:40622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/elements.php"] [unique_id "ary0iJOnWJRlb5xgkk3oOAAAAKE"]
[Wed Sep 30 01:04:40.583893 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.30.175:37350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/aboutt.php"] [unique_id "ary0iJOnWJRlb5xgkk3oPQAAAN8"]
[Wed Sep 30 01:04:40.605895 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.606231 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.607172 2026] [security2:error] [pid 251754:tid 251902] [client 64.227.188.205:58946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0iJOnWJRlb5xgkk3oQgAAAJU"]
[Wed Sep 30 01:04:40.726766 2026] [security2:error] [pid 251754:tid 251930] [client 47.15.235.137:50231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.235.15.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0iJOnWJRlb5xgkk3oRQAAALE"]
[Wed Sep 30 01:04:40.727002 2026] [security2:error] [pid 251754:tid 251930] [client 47.15.235.137:50231] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0iJOnWJRlb5xgkk3oRQAAALE"]
[Wed Sep 30 01:04:40.748561 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:40.748844 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:40.759823 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:51905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.760093 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:51905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.765015 2026] [security2:error] [pid 251754:tid 251945] [client 20.194.96.176:43407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wander.php"] [unique_id "ary0iJOnWJRlb5xgkk3oTQAAAMA"]
[Wed Sep 30 01:04:40.780370 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.780643 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.825011 2026] [core:error] [pid 251754:tid 251894] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:40.825030 2026] [core:error] [pid 251754:tid 251894] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:40.827691 2026] [security2:error] [pid 251754:tid 251981] [client 20.251.39.228:27270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bo.php"] [unique_id "ary0iJOnWJRlb5xgkk3oVQAAAOQ"]
[Wed Sep 30 01:04:40.849211 2026] [security2:error] [pid 251754:tid 251893] [client 52.231.30.175:37370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/opsh.php"] [unique_id "ary0iJOnWJRlb5xgkk3oWAAAAIw"]
[Wed Sep 30 01:04:40.850075 2026] [security2:error] [pid 251754:tid 252009] [client 20.219.2.60:18861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws81.php"] [unique_id "ary0iJOnWJRlb5xgkk3oWQAAAQA"]
[Wed Sep 30 01:04:40.870848 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.871107 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:40.964012 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:40.964303 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.029520 2026] [security2:error] [pid 251754:tid 252007] [client 52.172.226.14:40532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/sitemap.php"] [unique_id "ary0iZOnWJRlb5xgkk3oYgAAAP4"]
[Wed Sep 30 01:04:41.053417 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.053682 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.111576 2026] [security2:error] [pid 251754:tid 251929] [client 52.231.30.175:37281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/photo.php"] [unique_id "ary0iZOnWJRlb5xgkk3oZQAAALA"]
[Wed Sep 30 01:04:41.115734 2026] [security2:error] [pid 251754:tid 251911] [client 20.194.96.176:43433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wsd.php"] [unique_id "ary0iZOnWJRlb5xgkk3oZgAAAJ4"]
[Wed Sep 30 01:04:41.143800 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.144075 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.171902 2026] [security2:error] [pid 251754:tid 251910] [client 4.196.65.241:64165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/zpslrqry.php"] [unique_id "ary0iZOnWJRlb5xgkk3oagAAAJ0"]
[Wed Sep 30 01:04:41.235321 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.235597 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.272985 2026] [access_compat:error] [pid 251754:tid 251994] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 01:04:41.273232 2026] [access_compat:error] [pid 251754:tid 251994] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 01:04:41.322181 2026] [security2:error] [pid 251754:tid 251976] [client 64.227.188.205:58950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0iZOnWJRlb5xgkk3oeQAAAN8"]
[Wed Sep 30 01:04:41.325194 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.325446 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.379193 2026] [security2:error] [pid 251754:tid 252012] [client 20.251.39.228:5534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/56c53.php"] [unique_id "ary0iZOnWJRlb5xgkk3ofgAAAQM"]
[Wed Sep 30 01:04:41.417693 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.418014 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.422309 2026] [security2:error] [pid 251754:tid 251896] [client 52.231.30.175:37122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-fxxxx.php"] [unique_id "ary0iZOnWJRlb5xgkk3oggAAAI8"]
[Wed Sep 30 01:04:41.440566 2026] [security2:error] [pid 251754:tid 251982] [client 223.235.102.107:26629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3ohAAAAOU"]
[Wed Sep 30 01:04:41.440696 2026] [security2:error] [pid 251754:tid 251982] [client 223.235.102.107:26629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3ohAAAAOU"]
[Wed Sep 30 01:04:41.478134 2026] [security2:error] [pid 251754:tid 251950] [client 4.196.65.241:2095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/Q7iw6mOdefault.php"] [unique_id "ary0iZOnWJRlb5xgkk3ojAAAAMU"]
[Wed Sep 30 01:04:41.508015 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.508015 2026] [security2:error] [pid 251754:tid 251958] [client 20.194.96.176:43502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/media.php"] [unique_id "ary0iZOnWJRlb5xgkk3okQAAAM0"]
[Wed Sep 30 01:04:41.508300 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.520369 2026] [security2:error] [pid 251754:tid 251977] [client 182.69.182.151:2404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3okgAAAOA"]
[Wed Sep 30 01:04:41.520698 2026] [security2:error] [pid 251754:tid 251977] [client 182.69.182.151:2404] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3okgAAAOA"]
[Wed Sep 30 01:04:41.550666 2026] [security2:error] [pid 251754:tid 251899] [client 223.181.30.165:6609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3olAAAAJI"]
[Wed Sep 30 01:04:41.550851 2026] [security2:error] [pid 251754:tid 251899] [client 223.181.30.165:6609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3olAAAAJI"]
[Wed Sep 30 01:04:41.625220 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.625476 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.690852 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:51905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.691127 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:51905] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.702482 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.30.175:37288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp-filemannger4h.php"] [unique_id "ary0iZOnWJRlb5xgkk3onwAAAKs"]
[Wed Sep 30 01:04:41.773995 2026] [security2:error] [pid 251754:tid 251978] [client 52.172.226.14:40608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/xetmolxr.php"] [unique_id "ary0iZOnWJRlb5xgkk3opAAAAOE"]
[Wed Sep 30 01:04:41.774691 2026] [security2:error] [pid 251754:tid 251946] [client 216.73.216.46:51905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0iZOnWJRlb5xgkk3opQAAAME"]
[Wed Sep 30 01:04:41.792448 2026] [access_compat:error] [pid 251754:tid 251998] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:41.792731 2026] [access_compat:error] [pid 251754:tid 251998] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:41.826075 2026] [security2:error] [pid 251754:tid 251999] [client 37.41.16.35:55721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3oqAAAAPY"]
[Wed Sep 30 01:04:41.826261 2026] [security2:error] [pid 251754:tid 251999] [client 37.41.16.35:55721] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0iZOnWJRlb5xgkk3oqAAAAPY"]
[Wed Sep 30 01:04:41.872124 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.872446 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.872468 2026] [security2:error] [pid 251754:tid 251889] [remote 168.100.149.138:33990] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0iZOnWJRlb5xgkk3oowAA7xM"]
[Wed Sep 30 01:04:41.954129 2026] [security2:error] [pid 251754:tid 251931] [client 20.194.96.176:43385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/images.php"] [unique_id "ary0iZOnWJRlb5xgkk3orQAAALI"]
[Wed Sep 30 01:04:41.966856 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:41.967141 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:41.978943 2026] [security2:error] [pid 251754:tid 252005] [client 52.231.30.175:37932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/ffl.php"] [unique_id "ary0iZOnWJRlb5xgkk3orwAAAPw"]
[Wed Sep 30 01:04:42.014595 2026] [security2:error] [pid 251754:tid 251908] [client 64.227.188.205:58964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ipOnWJRlb5xgkk3otAAAAJs"]
[Wed Sep 30 01:04:42.059646 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.059943 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.134372 2026] [security2:error] [pid 251754:tid 251968] [client 20.198.74.230:24148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/0x.php"] [unique_id "ary0ipOnWJRlb5xgkk3oxAAAANc"]
[Wed Sep 30 01:04:42.149162 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.149425 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.153070 2026] [security2:error] [pid 251754:tid 252009] [client 187.136.186.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0ipOnWJRlb5xgkk3oxwAAAQA"]
[Wed Sep 30 01:04:42.242023 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.242364 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.250402 2026] [security2:error] [pid 251754:tid 251927] [client 52.172.226.14:3848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/mini.php"] [unique_id "ary0ipOnWJRlb5xgkk3ozQAAAK4"]
[Wed Sep 30 01:04:42.251107 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.30.175:37368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/wp5.php"] [unique_id "ary0ipOnWJRlb5xgkk3ozgAAALE"]
[Wed Sep 30 01:04:42.303342 2026] [access_compat:error] [pid 251754:tid 251892] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:42.303477 2026] [security2:error] [pid 251754:tid 251924] [client 4.196.65.241:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/w1px.php"] [unique_id "ary0ipOnWJRlb5xgkk3o0gAAAKs"]
[Wed Sep 30 01:04:42.303597 2026] [access_compat:error] [pid 251754:tid 251892] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:42.341371 2026] [security2:error] [pid 251754:tid 251985] [client 20.194.96.176:43519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/ops.php"] [unique_id "ary0ipOnWJRlb5xgkk3o2QAAAOg"]
[Wed Sep 30 01:04:42.346916 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.347178 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.359434 2026] [security2:error] [pid 251754:tid 251916] [client 20.251.39.228:32261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tx78.php"] [unique_id "ary0ipOnWJRlb5xgkk3o2gAAAKM"]
[Wed Sep 30 01:04:42.442073 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.442357 2026] [access_compat:error] [pid 251754:tid 251992] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.530378 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.530632 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.536159 2026] [security2:error] [pid 251754:tid 251983] [client 52.231.30.175:37300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/koiy.php"] [unique_id "ary0ipOnWJRlb5xgkk3o4AAAAOY"]
[Wed Sep 30 01:04:42.552048 2026] [http2:warn] [pid 212454:tid 212692] [client 40.77.167.130:23928] h2_stream(212454-1050-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:04:42.620754 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.621042 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.622008 2026] [security2:error] [pid 251754:tid 251889] [client 20.214.109.68:9456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws.php"] [unique_id "ary0ipOnWJRlb5xgkk3o4gAAAIg"]
[Wed Sep 30 01:04:42.654157 2026] [security2:error] [pid 251754:tid 251896] [client 4.240.25.22:63616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0ipOnWJRlb5xgkk3o5gAAAI8"]
[Wed Sep 30 01:04:42.687143 2026] [security2:error] [pid 251754:tid 251908] [client 20.194.96.176:43329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/BDKR28WP.php"] [unique_id "ary0ipOnWJRlb5xgkk3o6AAAAJs"]
[Wed Sep 30 01:04:42.712454 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.712735 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.731038 2026] [security2:error] [pid 251754:tid 251888] [client 64.227.188.205:58974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ipOnWJRlb5xgkk3o7gAAAIc"]
[Wed Sep 30 01:04:42.742032 2026] [security2:error] [pid 251754:tid 251950] [client 52.172.226.14:40634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/zwso.php"] [unique_id "ary0ipOnWJRlb5xgkk3o7wAAAMU"]
[Wed Sep 30 01:04:42.783992 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTI=
[Wed Sep 30 01:04:42.784255 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTI=
[Wed Sep 30 01:04:42.801964 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.30.175:37208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/bnmtp.php"] [unique_id "ary0ipOnWJRlb5xgkk3o-AAAAN8"]
[Wed Sep 30 01:04:42.804778 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.805069 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.808192 2026] [security2:error] [pid 251754:tid 251887] [client 20.194.30.107:17281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0ipOnWJRlb5xgkk3o-QAAAIY"]
[Wed Sep 30 01:04:42.867662 2026] [security2:error] [pid 251754:tid 251958] [client 104.208.65.139:16341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/CAE-2.5.php"] [unique_id "ary0ipOnWJRlb5xgkk3o_AAAAM0"]
[Wed Sep 30 01:04:42.893126 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.893415 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.919367 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.168:54008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:42.919625 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.168:54008] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:42.979950 2026] [security2:error] [pid 251754:tid 251968] [client 45.138.12.43:18142] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.trendylinedesign.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0ipOnWJRlb5xgkk3pCQAAANc"]
[Wed Sep 30 01:04:42.985685 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:42.986057 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:42.996284 2026] [security2:error] [pid 251754:tid 251973] [client 4.240.25.22:8487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/inputs.php"] [unique_id "ary0ipOnWJRlb5xgkk3pCwAAANw"]
[Wed Sep 30 01:04:43.004381 2026] [autoindex:error] [pid 251754:tid 251969] [client 212.156.70.154:35177] AH01276: Cannot serve directory /home4/wxhtrvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:43.076898 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.077191 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.092432 2026] [security2:error] [pid 251754:tid 251892] [client 20.194.96.176:43349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/mac.php"] [unique_id "ary0i5OnWJRlb5xgkk3pEAAAAIs"]
[Wed Sep 30 01:04:43.103105 2026] [security2:error] [pid 251754:tid 251985] [client 52.231.30.175:37264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/abbi.php"] [unique_id "ary0i5OnWJRlb5xgkk3pEgAAAOg"]
[Wed Sep 30 01:04:43.167479 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.167776 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.259970 2026] [access_compat:error] [pid 251754:tid 251983] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:43.260381 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.260416 2026] [access_compat:error] [pid 251754:tid 251983] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:43.260803 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.314689 2026] [security2:error] [pid 251754:tid 251990] [client 45.138.12.32:25384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cxb.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0i5OnWJRlb5xgkk3pHwAAAO0"]
[Wed Sep 30 01:04:43.348783 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.349104 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.357746 2026] [security2:error] [pid 251754:tid 251908] [client 52.172.226.14:40550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/tiny.php"] [unique_id "ary0i5OnWJRlb5xgkk3pJgAAAJs"]
[Wed Sep 30 01:04:43.367154 2026] [security2:error] [pid 251754:tid 251981] [client 20.251.39.228:5139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws80.php"] [unique_id "ary0i5OnWJRlb5xgkk3pKQAAAOQ"]
[Wed Sep 30 01:04:43.428525 2026] [security2:error] [pid 251754:tid 251971] [client 52.231.30.175:37268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.quieromifactura.biz"] [uri "/asw.php"] [unique_id "ary0i5OnWJRlb5xgkk3pLAAAANo"]
[Wed Sep 30 01:04:43.439784 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.440047 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.447033 2026] [security2:error] [pid 251754:tid 251951] [client 64.227.188.205:58986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0i5OnWJRlb5xgkk3pLgAAAMY"]
[Wed Sep 30 01:04:43.449260 2026] [security2:error] [pid 251754:tid 251938] [client 20.194.96.176:43415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wmore1.php"] [unique_id "ary0i5OnWJRlb5xgkk3pLwAAALk"]
[Wed Sep 30 01:04:43.503250 2026] [access_compat:error] [pid 251754:tid 251902] [client 47.79.13.73:33070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:43.503517 2026] [access_compat:error] [pid 251754:tid 251902] [client 47.79.13.73:33070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:43.531121 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.531391 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.627649 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.628097 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:55462] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.665849 2026] [security2:error] [pid 251754:tid 251964] [client 4.196.65.241:19166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/Isadore.php"] [unique_id "ary0i5OnWJRlb5xgkk3pRAAAANM"]
[Wed Sep 30 01:04:43.768676 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.769145 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.773673 2026] [core:alert] [pid 251754:tid 251957] [client 43.153.49.151:35806] /home3/mypoolpl/public_html/.htaccess: php_value takes two arguments, PHP Value
[Wed Sep 30 01:04:43.777963 2026] [access_compat:error] [pid 251754:tid 251929] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:43.778212 2026] [access_compat:error] [pid 251754:tid 251929] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:43.779564 2026] [security2:error] [pid 251754:tid 251961] [client 103.241.204.139:56763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0i5OnWJRlb5xgkk3pTwAAANA"]
[Wed Sep 30 01:04:43.779667 2026] [security2:error] [pid 251754:tid 251961] [client 103.241.204.139:56763] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0i5OnWJRlb5xgkk3pTwAAANA"]
[Wed Sep 30 01:04:43.789746 2026] [security2:error] [pid 251754:tid 251983] [client 20.194.96.176:44077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-ainefgskk.php"] [unique_id "ary0i5OnWJRlb5xgkk3pUAAAAOY"]
[Wed Sep 30 01:04:43.851872 2026] [security2:error] [pid 251754:tid 251908] [client 52.172.226.14:40638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/simple.php"] [unique_id "ary0i5OnWJRlb5xgkk3pVwAAAJs"]
[Wed Sep 30 01:04:43.857449 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.857715 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.873473 2026] [security2:error] [pid 251754:tid 252010] [client 103.159.192.142:53401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0i5OnWJRlb5xgkk3pWQAAAQE"]
[Wed Sep 30 01:04:43.873662 2026] [security2:error] [pid 251754:tid 252010] [client 103.159.192.142:53401] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0i5OnWJRlb5xgkk3pWQAAAQE"]
[Wed Sep 30 01:04:43.903138 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:43.903617 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:43.911970 2026] [security2:error] [pid 251754:tid 251972] [remote 168.100.149.205:58878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0i5OnWJRlb5xgkk3pTQAAqDc"]
[Wed Sep 30 01:04:44.031526 2026] [security2:error] [pid 251754:tid 251902] [client 20.214.109.68:59885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bmi.php"] [unique_id "ary0jJOnWJRlb5xgkk3pYAAAAJU"]
[Wed Sep 30 01:04:44.056982 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.057247 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.079429 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.079721 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.095315 2026] [security2:error] [pid 251754:tid 251952] [client 45.138.12.32:25440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cuo.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0jJOnWJRlb5xgkk3pZgAAAMc"]
[Wed Sep 30 01:04:44.161891 2026] [security2:error] [pid 251754:tid 251974] [client 64.227.188.205:58996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0jJOnWJRlb5xgkk3pagAAAN0"]
[Wed Sep 30 01:04:44.167039 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.167290 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.189215 2026] [security2:error] [pid 251754:tid 251888] [client 20.194.96.176:43348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/ab.php"] [unique_id "ary0jJOnWJRlb5xgkk3pbQAAAIc"]
[Wed Sep 30 01:04:44.267555 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.268014 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.299116 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:44.299392 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:44.354650 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.355108 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.416947 2026] [security2:error] [pid 251754:tid 251999] [client 52.172.226.14:40630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/buy.php"] [unique_id "ary0jJOnWJRlb5xgkk3pdgAAAPY"]
[Wed Sep 30 01:04:44.442260 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.442540 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.491696 2026] [security2:error] [pid 251754:tid 251889] [client 79.177.135.67:15533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary0jJOnWJRlb5xgkk3pZwAAiDg"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:04:44.532476 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.532766 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.623931 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.624218 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.637515 2026] [security2:error] [pid 251754:tid 251990] [client 20.251.39.228:5127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/jga.php"] [unique_id "ary0jJOnWJRlb5xgkk3pgwAAAO0"]
[Wed Sep 30 01:04:44.718434 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.718711 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.744262 2026] [security2:error] [pid 251754:tid 251905] [client 20.194.96.176:48886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/dairg.php"] [unique_id "ary0jJOnWJRlb5xgkk3piQAAAJg"]
[Wed Sep 30 01:04:44.791441 2026] [access_compat:error] [pid 251754:tid 252003] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:44.791699 2026] [access_compat:error] [pid 251754:tid 252003] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:44.808020 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.808450 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.863075 2026] [security2:error] [pid 251754:tid 251932] [client 64.227.188.205:59006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0jJOnWJRlb5xgkk3pkgAAALM"]
[Wed Sep 30 01:04:44.896513 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.896789 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:44.899465 2026] [security2:error] [pid 251754:tid 251916] [client 152.59.169.65:59755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0jJOnWJRlb5xgkk3plQAAAKM"]
[Wed Sep 30 01:04:44.899576 2026] [security2:error] [pid 251754:tid 251916] [client 152.59.169.65:59755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0jJOnWJRlb5xgkk3plQAAAKM"]
[Wed Sep 30 01:04:44.909238 2026] [security2:error] [pid 251754:tid 251924] [client 155.190.6.18:58610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0jJOnWJRlb5xgkk3plgAAAKs"]
[Wed Sep 30 01:04:44.994089 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:44.994537 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.001828 2026] [security2:error] [pid 251754:tid 251902] [client 52.172.226.14:3863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ioxi-o.php"] [unique_id "ary0jZOnWJRlb5xgkk3pmgAAAJU"]
[Wed Sep 30 01:04:45.059337 2026] [security2:error] [pid 251754:tid 251952] [client 105.174.17.50:16169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.17.174.105.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ary0jZOnWJRlb5xgkk3pmwAAAMc"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 01:04:45.079481 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.079772 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.094325 2026] [security2:error] [pid 251754:tid 251955] [client 4.196.65.241:64170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/samll.php"] [unique_id "ary0jZOnWJRlb5xgkk3pnwAAAMo"]
[Wed Sep 30 01:04:45.169040 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.169317 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.173651 2026] [security2:error] [pid 251754:tid 251895] [client 213.136.69.135:57880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/speculative-loading.php"] [unique_id "ary0jZOnWJRlb5xgkk3pqwAAAI4"], referer: binance.com
[Wed Sep 30 01:04:45.190738 2026] [security2:error] [pid 251754:tid 251924] [client 155.190.6.18:58610] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0jJOnWJRlb5xgkk3plgAAAKs"]
[Wed Sep 30 01:04:45.259079 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.259343 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.274895 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:45.275164 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:45.306654 2026] [security2:error] [pid 251754:tid 251946] [client 20.194.30.107:47312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/m.php"] [unique_id "ary0jZOnWJRlb5xgkk3ptwAAAME"]
[Wed Sep 30 01:04:45.350174 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.350429 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.357150 2026] [security2:error] [pid 251754:tid 251845] [remote 57.141.14.53:47792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "ary0jZOnWJRlb5xgkk3puAAA0Fg"]
[Wed Sep 30 01:04:45.368330 2026] [security2:error] [pid 251754:tid 252001] [client 20.251.39.228:32333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/fs.php"] [unique_id "ary0jZOnWJRlb5xgkk3pvQAAAPg"]
[Wed Sep 30 01:04:45.427485 2026] [security2:error] [pid 251754:tid 251979] [client 4.240.25.22:46294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary0jZOnWJRlb5xgkk3pvgAAAOI"]
[Wed Sep 30 01:04:45.442044 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.442305 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.488673 2026] [security2:error] [pid 251754:tid 251935] [client 181.172.246.69:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0jZOnWJRlb5xgkk3pxQAAALY"]
[Wed Sep 30 01:04:45.491389 2026] [security2:error] [pid 251754:tid 251943] [client 52.172.226.14:40613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ans.php"] [unique_id "ary0jZOnWJRlb5xgkk3pxgAAAL4"]
[Wed Sep 30 01:04:45.500452 2026] [security2:error] [pid 251754:tid 251938] [client 20.214.109.68:62401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bypltspd.php"] [unique_id "ary0jZOnWJRlb5xgkk3pxwAAALk"]
[Wed Sep 30 01:04:45.520923 2026] [security2:error] [pid 251754:tid 251945] [client 20.194.96.176:43463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/z60.php"] [unique_id "ary0jZOnWJRlb5xgkk3pygAAAMA"]
[Wed Sep 30 01:04:45.536897 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.537173 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.571186 2026] [security2:error] [pid 251754:tid 251994] [client 64.227.188.205:59020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0jZOnWJRlb5xgkk3pzAAAAPE"]
[Wed Sep 30 01:04:45.583653 2026] [security2:error] [pid 251754:tid 251944] [client 4.240.25.22:8464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/one.php"] [unique_id "ary0jZOnWJRlb5xgkk3pzQAAAL8"]
[Wed Sep 30 01:04:45.627126 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.627392 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.657027 2026] [security2:error] [pid 251754:tid 252009] [client 104.208.65.139:9607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/ass.php"] [unique_id "ary0jZOnWJRlb5xgkk3p1QAAAQA"]
[Wed Sep 30 01:04:45.720175 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.720458 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.778598 2026] [access_compat:error] [pid 251754:tid 251962] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:45.778885 2026] [access_compat:error] [pid 251754:tid 251962] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:45.810905 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.811185 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.847290 2026] [security2:error] [pid 251754:tid 251986] [client 4.196.65.241:19501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/abde5e1996.php"] [unique_id "ary0jZOnWJRlb5xgkk3p3wAAAOk"]
[Wed Sep 30 01:04:45.853177 2026] [security2:error] [pid 251754:tid 251946] [client 20.194.96.176:43488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/imageskir.php"] [unique_id "ary0jZOnWJRlb5xgkk3p4QAAAME"]
[Wed Sep 30 01:04:45.854121 2026] [security2:error] [pid 251754:tid 251929] [client 122.173.27.10:16124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0jZOnWJRlb5xgkk3p4gAAALA"]
[Wed Sep 30 01:04:45.854287 2026] [security2:error] [pid 251754:tid 251929] [client 122.173.27.10:16124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0jZOnWJRlb5xgkk3p4gAAALA"]
[Wed Sep 30 01:04:45.886409 2026] [security2:error] [pid 251754:tid 251891] [remote 168.100.149.172:52426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0jZOnWJRlb5xgkk3p3QAAoUk"]
[Wed Sep 30 01:04:45.902677 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.902959 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:45.993412 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:45.993685 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.007675 2026] [security2:error] [pid 251754:tid 251982] [client 52.172.226.14:40520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/gf.php"] [unique_id "ary0jpOnWJRlb5xgkk3p6QAAAOU"]
[Wed Sep 30 01:04:46.017281 2026] [security2:error] [pid 251754:tid 251967] [client 105.112.178.79:38365] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fhg.svw.mybluehost.me"] [uri "/__ss_probe_2e1be96a1c0b9f25d5680d456be3d850__"] [unique_id "ary0jpOnWJRlb5xgkk3p6gAAANY"]
[Wed Sep 30 01:04:46.087263 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.087529 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.111587 2026] [access_compat:error] [pid 251754:tid 251918] [client 47.79.13.177:57126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:46.111883 2026] [access_compat:error] [pid 251754:tid 251918] [client 47.79.13.177:57126] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:46.178270 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.178630 2026] [access_compat:error] [pid 251754:tid 251943] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.180035 2026] [security2:error] [pid 251754:tid 251896] [client 20.251.39.228:32343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/byypas.php"] [unique_id "ary0jpOnWJRlb5xgkk3p8gAAAI8"]
[Wed Sep 30 01:04:46.188166 2026] [security2:error] [pid 251754:tid 251945] [client 20.194.96.176:44093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/backup-helper.php"] [unique_id "ary0jpOnWJRlb5xgkk3p9AAAAMA"]
[Wed Sep 30 01:04:46.264486 2026] [security2:error] [pid 251754:tid 251961] [client 64.227.188.205:59024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0jpOnWJRlb5xgkk3p-wAAANA"]
[Wed Sep 30 01:04:46.269603 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.269927 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.291531 2026] [access_compat:error] [pid 251754:tid 251897] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:46.291814 2026] [access_compat:error] [pid 251754:tid 251897] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:46.359960 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.360231 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.451328 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.451590 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.478631 2026] [security2:error] [pid 251754:tid 251916] [client 52.172.226.14:40629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/man.php"] [unique_id "ary0jpOnWJRlb5xgkk3qAgAAAKM"]
[Wed Sep 30 01:04:46.518584 2026] [security2:error] [pid 251754:tid 251954] [client 105.174.17.50:53010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.17.174.105.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ary0jpOnWJRlb5xgkk3qBQAAAMk"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 01:04:46.541907 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.542187 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.559112 2026] [security2:error] [pid 251754:tid 251979] [client 116.197.133.25:52395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0jpOnWJRlb5xgkk3qCwAAAOI"]
[Wed Sep 30 01:04:46.559385 2026] [security2:error] [pid 251754:tid 251979] [client 116.197.133.25:52395] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0jpOnWJRlb5xgkk3qCwAAAOI"]
[Wed Sep 30 01:04:46.562235 2026] [security2:error] [pid 251754:tid 251962] [client 20.251.39.228:32277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/b.php"] [unique_id "ary0jpOnWJRlb5xgkk3qDAAAANE"]
[Wed Sep 30 01:04:46.635186 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.635461 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.711258 2026] [security2:error] [pid 251754:tid 251841] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0jpOnWJRlb5xgkk3qFgAAi1Q"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293169&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:04:46.711287 2026] [security2:error] [pid 251754:tid 251841] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0jpOnWJRlb5xgkk3qFgAAi1Q"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293169&sid=4c945d2f226a2d243552d2d3ca7a5501
[Wed Sep 30 01:04:46.726090 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.726358 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.755794 2026] [access_compat:error] [pid 251754:tid 251904] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:46.756140 2026] [access_compat:error] [pid 251754:tid 251904] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:46.815125 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:46.815395 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:46.880667 2026] [security2:error] [pid 251754:tid 251981] [client 4.196.65.241:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisamiastudios.com"] [uri "/cjhnp.php"] [unique_id "ary0jpOnWJRlb5xgkk3qIgAAAOQ"]
[Wed Sep 30 01:04:46.900482 2026] [security2:error] [pid 251754:tid 251935] [client 216.73.216.46:53768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0jpOnWJRlb5xgkk3qIwAAALY"]
[Wed Sep 30 01:04:46.937356 2026] [security2:error] [pid 251754:tid 251984] [client 20.194.30.107:53421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/mac.php"] [unique_id "ary0jpOnWJRlb5xgkk3qJAAAAOc"]
[Wed Sep 30 01:04:46.968207 2026] [security2:error] [pid 251754:tid 251910] [client 64.227.188.205:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0jpOnWJRlb5xgkk3qJwAAAJ0"]
[Wed Sep 30 01:04:47.000087 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.000388 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.022256 2026] [security2:error] [pid 251754:tid 251961] [client 52.172.226.14:40531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/dev.php"] [unique_id "ary0j5OnWJRlb5xgkk3qMAAAANA"]
[Wed Sep 30 01:04:47.047326 2026] [security2:error] [pid 251754:tid 251978] [client 20.194.96.176:39532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/1xmomo.php"] [unique_id "ary0j5OnWJRlb5xgkk3qMgAAAOE"]
[Wed Sep 30 01:04:47.048735 2026] [security2:error] [pid 251754:tid 251912] [client 201.32.215.149:8500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qMwAAAJ8"]
[Wed Sep 30 01:04:47.048885 2026] [security2:error] [pid 251754:tid 251912] [client 201.32.215.149:8500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qMwAAAJ8"]
[Wed Sep 30 01:04:47.091982 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.092333 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.098080 2026] [security2:error] [pid 251754:tid 251823] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0j5OnWJRlb5xgkk3qNgABAEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290259&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:47.098104 2026] [security2:error] [pid 251754:tid 251823] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0j5OnWJRlb5xgkk3qNgABAEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=290259&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:47.181733 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.181988 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.229115 2026] [security2:error] [pid 251754:tid 251998] [client 20.251.39.228:5858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws49.php"] [unique_id "ary0j5OnWJRlb5xgkk3qPQAAAPU"]
[Wed Sep 30 01:04:47.254264 2026] [security2:error] [pid 251754:tid 252011] [client 4.196.65.241:2591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zoo2.php"] [unique_id "ary0j5OnWJRlb5xgkk3qQAAAAQI"]
[Wed Sep 30 01:04:47.273817 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.274248 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.276397 2026] [access_compat:error] [pid 251754:tid 251921] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:47.276872 2026] [access_compat:error] [pid 251754:tid 251921] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:47.295064 2026] [security2:error] [pid 251754:tid 251966] [client 152.59.165.7:57968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qRwAAANU"]
[Wed Sep 30 01:04:47.295165 2026] [security2:error] [pid 251754:tid 251966] [client 152.59.165.7:57968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qRwAAANU"]
[Wed Sep 30 01:04:47.328821 2026] [core:error] [pid 251754:tid 251953] [client 45.3.46.14:61687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:47.328853 2026] [core:error] [pid 251754:tid 251953] [client 45.3.46.14:61687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:04:47.362254 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.362548 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.455573 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.455855 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.510831 2026] [security2:error] [pid 251754:tid 251994] [client 202.179.95.79:63275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qWQAAAPE"]
[Wed Sep 30 01:04:47.511295 2026] [security2:error] [pid 251754:tid 251994] [client 202.179.95.79:63275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qWQAAAPE"]
[Wed Sep 30 01:04:47.550447 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.550899 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.574787 2026] [security2:error] [pid 251754:tid 251948] [client 52.172.226.14:40512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ms-edit.php"] [unique_id "ary0j5OnWJRlb5xgkk3qYAAAAMM"]
[Wed Sep 30 01:04:47.640379 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.640647 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.675417 2026] [security2:error] [pid 251754:tid 251937] [client 64.227.188.205:37252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0j5OnWJRlb5xgkk3qZwAAALg"]
[Wed Sep 30 01:04:47.726710 2026] [security2:error] [pid 251754:tid 251927] [client 82.102.18.126:43282] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0j5OnWJRlb5xgkk3qbAAAAK4"]
[Wed Sep 30 01:04:47.735134 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.735573 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.744160 2026] [security2:error] [pid 251754:tid 251970] [client 49.43.163.212:64342] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qbQAAANk"]
[Wed Sep 30 01:04:47.744298 2026] [security2:error] [pid 251754:tid 251970] [client 49.43.163.212:64342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qbQAAANk"]
[Wed Sep 30 01:04:47.799897 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:47.800243 2026] [access_compat:error] [pid 251754:tid 251919] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:47.821789 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.822093 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.849333 2026] [security2:error] [pid 251754:tid 251887] [client 20.251.39.228:44460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-blog-header.php"] [unique_id "ary0j5OnWJRlb5xgkk3qdQAAAIY"]
[Wed Sep 30 01:04:47.867323 2026] [security2:error] [pid 251754:tid 251944] [remote 168.100.149.246:51282] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0j5OnWJRlb5xgkk3qbgAAkHE"]
[Wed Sep 30 01:04:47.878654 2026] [security2:error] [pid 251754:tid 251951] [client 45.138.12.32:38606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cuk.vgm.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0j5OnWJRlb5xgkk3qdgAAAMY"]
[Wed Sep 30 01:04:47.913657 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:47.913957 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:47.948944 2026] [security2:error] [pid 251754:tid 251920] [client 203.122.45.246:52006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qeAAAAKc"]
[Wed Sep 30 01:04:47.949073 2026] [security2:error] [pid 251754:tid 251920] [client 203.122.45.246:52006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0j5OnWJRlb5xgkk3qeAAAAKc"]
[Wed Sep 30 01:04:48.007482 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.007798 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.096821 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.097104 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.107585 2026] [security2:error] [pid 251754:tid 251969] [client 20.194.96.176:44033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/almafkew.php"] [unique_id "ary0kJOnWJRlb5xgkk3qhAAAANg"]
[Wed Sep 30 01:04:48.133327 2026] [security2:error] [pid 251754:tid 252002] [client 20.214.109.68:59881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/shell.php"] [unique_id "ary0kJOnWJRlb5xgkk3qhQAAAPk"]
[Wed Sep 30 01:04:48.188589 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.188918 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.194386 2026] [security2:error] [pid 251754:tid 251984] [client 116.193.128.26:52824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qiAAAAOc"]
[Wed Sep 30 01:04:48.194599 2026] [security2:error] [pid 251754:tid 251984] [client 116.193.128.26:52824] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qiAAAAOc"]
[Wed Sep 30 01:04:48.233498 2026] [security2:error] [pid 251754:tid 251909] [client 82.102.18.126:43284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0kJOnWJRlb5xgkk3qiQAAAJw"]
[Wed Sep 30 01:04:48.253800 2026] [access_compat:error] [pid 251754:tid 251986] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:48.254087 2026] [access_compat:error] [pid 251754:tid 251986] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:48.279966 2026] [security2:error] [pid 251754:tid 251942] [client 13.70.4.78:45124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0kJOnWJRlb5xgkk3qjQAAAL0"]
[Wed Sep 30 01:04:48.284917 2026] [security2:error] [pid 251754:tid 251981] [client 20.251.39.228:19633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bgymj.php"] [unique_id "ary0kJOnWJRlb5xgkk3qjgAAAOQ"]
[Wed Sep 30 01:04:48.285910 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.286158 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.369932 2026] [security2:error] [pid 251754:tid 251889] [client 64.227.188.205:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0kJOnWJRlb5xgkk3qkgAAAIg"]
[Wed Sep 30 01:04:48.374223 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.374481 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.394309 2026] [security2:error] [pid 251754:tid 251989] [client 52.172.226.14:40529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/txets.php"] [unique_id "ary0kJOnWJRlb5xgkk3qmgAAAOw"]
[Wed Sep 30 01:04:48.415956 2026] [security2:error] [pid 251754:tid 251982] [client 43.172.197.20:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/interactive-smart-panels"] [unique_id "ary0kJOnWJRlb5xgkk3qnAAAAOU"]
[Wed Sep 30 01:04:48.466424 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.466679 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.544075 2026] [security2:error] [pid 251754:tid 251932] [client 20.194.96.176:44069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/database2.php"] [unique_id "ary0kJOnWJRlb5xgkk3qpAAAALM"]
[Wed Sep 30 01:04:48.551568 2026] [security2:error] [pid 251754:tid 251966] [client 223.181.60.167:3655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qpgAAANU"]
[Wed Sep 30 01:04:48.552246 2026] [security2:error] [pid 251754:tid 251966] [client 223.181.60.167:3655] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qpgAAANU"]
[Wed Sep 30 01:04:48.557486 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.557759 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.563129 2026] [security2:error] [pid 251754:tid 251924] [client 82.102.18.126:43300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0kJOnWJRlb5xgkk3qqAAAAKs"]
[Wed Sep 30 01:04:48.649257 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.649691 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.673563 2026] [security2:error] [pid 251754:tid 251904] [client 103.159.192.142:53899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qsAAAAJc"]
[Wed Sep 30 01:04:48.673682 2026] [security2:error] [pid 251754:tid 251904] [client 103.159.192.142:53899] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0kJOnWJRlb5xgkk3qsAAAAJc"]
[Wed Sep 30 01:04:48.702845 2026] [security2:error] [pid 251754:tid 252011] [client 74.7.242.1:35160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0kJOnWJRlb5xgkk3qsQAAAQI"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:04:48.739377 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.739655 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.770016 2026] [security2:error] [pid 251754:tid 251977] [client 13.70.4.78:45176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0kJOnWJRlb5xgkk3quAAAAOA"]
[Wed Sep 30 01:04:48.818538 2026] [access_compat:error] [pid 251754:tid 251901] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:48.818778 2026] [security2:error] [pid 251754:tid 251997] [client 20.251.39.228:5141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gfd.php"] [unique_id "ary0kJOnWJRlb5xgkk3qvAAAAPQ"]
[Wed Sep 30 01:04:48.818822 2026] [access_compat:error] [pid 251754:tid 251901] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:48.830282 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.830551 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.891037 2026] [security2:error] [pid 251754:tid 251939] [client 82.102.18.126:43310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0kJOnWJRlb5xgkk3qwgAAALo"]
[Wed Sep 30 01:04:48.911248 2026] [security2:error] [pid 251754:tid 252012] [client 52.172.226.14:3840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/hao.php"] [unique_id "ary0kJOnWJRlb5xgkk3qxwAAAQM"]
[Wed Sep 30 01:04:48.913031 2026] [security2:error] [pid 251754:tid 251903] [client 104.167.22.135:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0kJOnWJRlb5xgkk3qxgAAAJY"]
[Wed Sep 30 01:04:48.918376 2026] [security2:error] [pid 251754:tid 251986] [client 4.240.25.22:63623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/xiugai.php"] [unique_id "ary0kJOnWJRlb5xgkk3qyQAAAOk"]
[Wed Sep 30 01:04:48.919618 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:48.919908 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:48.964854 2026] [security2:error] [pid 251754:tid 251983] [client 20.194.96.176:50414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/aa.php"] [unique_id "ary0kJOnWJRlb5xgkk3qzAAAAOY"]
[Wed Sep 30 01:04:49.012575 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.012854 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.068638 2026] [security2:error] [pid 251754:tid 251980] [client 64.227.188.205:37274] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0kZOnWJRlb5xgkk3q1AAAAOM"]
[Wed Sep 30 01:04:49.102640 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.102945 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.198523 2026] [security2:error] [pid 251754:tid 251920] [client 82.102.18.126:43324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0kZOnWJRlb5xgkk3q6QAAAKc"]
[Wed Sep 30 01:04:49.199309 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.199753 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.203588 2026] [security2:error] [pid 251754:tid 251906] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0kZOnWJRlb5xgkk3q6gAAAJk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:49.277827 2026] [access_compat:error] [pid 251754:tid 251923] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:49.278266 2026] [access_compat:error] [pid 251754:tid 251923] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:49.283574 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.283866 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:10362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.298304 2026] [security2:error] [pid 251754:tid 251901] [client 20.251.39.228:19618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/callback.php"] [unique_id "ary0kZOnWJRlb5xgkk3q8AAAAJQ"]
[Wed Sep 30 01:04:49.369082 2026] [security2:error] [pid 251754:tid 251887] [client 216.73.216.46:10362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0kZOnWJRlb5xgkk3q8QAAAIY"]
[Wed Sep 30 01:04:49.399801 2026] [security2:error] [pid 251754:tid 251910] [client 20.198.74.230:24138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/accesson.php"] [unique_id "ary0kZOnWJRlb5xgkk3q8gAAAJ0"]
[Wed Sep 30 01:04:49.400436 2026] [security2:error] [pid 251754:tid 251930] [client 13.70.4.78:45139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/b.php"] [unique_id "ary0kZOnWJRlb5xgkk3q8wAAALE"]
[Wed Sep 30 01:04:49.421055 2026] [security2:error] [pid 251754:tid 251946] [client 52.172.226.14:40627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/33.php"] [unique_id "ary0kZOnWJRlb5xgkk3q9AAAAME"]
[Wed Sep 30 01:04:49.432106 2026] [security2:error] [pid 251754:tid 251918] [client 20.194.96.176:44035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/pJPoKA.php"] [unique_id "ary0kZOnWJRlb5xgkk3q9QAAAKU"]
[Wed Sep 30 01:04:49.466882 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.467153 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.479798 2026] [security2:error] [pid 251754:tid 251914] [client 74.7.230.28:42690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.rlq.tyy.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary0kZOnWJRlb5xgkk3q-gAAoQg"]
[Wed Sep 30 01:04:49.530079 2026] [security2:error] [pid 251754:tid 251893] [client 161.118.214.16:52520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lvt.onr.mybluehost.me"] [uri "/"] [unique_id "ary0kZOnWJRlb5xgkk3q_QAAAIw"]
[Wed Sep 30 01:04:49.532919 2026] [security2:error] [pid 251754:tid 251942] [client 82.102.18.126:43334] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0kZOnWJRlb5xgkk3q_gAAAL0"]
[Wed Sep 30 01:04:49.557250 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.557501 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.585854 2026] [security2:error] [pid 251754:tid 251884] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0kZOnWJRlb5xgkk3rBAAA238"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=83584&sid=b60d78e1cd8b019b4688698b037c44b0
[Wed Sep 30 01:04:49.585886 2026] [security2:error] [pid 251754:tid 251884] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0kZOnWJRlb5xgkk3rBAAA238"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=83584&sid=b60d78e1cd8b019b4688698b037c44b0
[Wed Sep 30 01:04:49.648585 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.648888 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.659846 2026] [ssl:error] [pid 251754:tid 251962] [client 216.25.124.26:19132] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpanel.xqc.sdz.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:04:49.738654 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.739004 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.762082 2026] [security2:error] [pid 251754:tid 251981] [client 64.227.188.205:37284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0kZOnWJRlb5xgkk3rFAAAAOQ"]
[Wed Sep 30 01:04:49.809956 2026] [access_compat:error] [pid 251754:tid 251902] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:49.810218 2026] [access_compat:error] [pid 251754:tid 251902] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:49.830763 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.831051 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.834936 2026] [security2:error] [pid 251754:tid 251944] [client 43.227.131.37:22060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0kZOnWJRlb5xgkk3rGQAAAL8"]
[Wed Sep 30 01:04:49.835059 2026] [security2:error] [pid 251754:tid 251944] [client 43.227.131.37:22060] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0kZOnWJRlb5xgkk3rGQAAAL8"]
[Wed Sep 30 01:04:49.841160 2026] [security2:error] [pid 251754:tid 251955] [client 13.70.4.78:6128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/admin.php"] [unique_id "ary0kZOnWJRlb5xgkk3rGgAAAMo"]
[Wed Sep 30 01:04:49.864379 2026] [security2:error] [pid 251754:tid 251985] [remote 168.100.149.133:21922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0kZOnWJRlb5xgkk3rEwAAxxE"]
[Wed Sep 30 01:04:49.873477 2026] [security2:error] [pid 251754:tid 251966] [client 82.102.18.126:43338] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0kZOnWJRlb5xgkk3rHAAAANU"]
[Wed Sep 30 01:04:49.926774 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:49.927230 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:49.968683 2026] [security2:error] [pid 251754:tid 251939] [client 106.214.2.47:15164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0kZOnWJRlb5xgkk3rJgAAALo"]
[Wed Sep 30 01:04:49.996323 2026] [security2:error] [pid 251754:tid 251896] [client 20.28.180.172:62346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/grsiuk.php"] [unique_id "ary0kZOnWJRlb5xgkk3rKwAAAI8"]
[Wed Sep 30 01:04:50.016229 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.016649 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.055244 2026] [security2:error] [pid 251754:tid 251909] [client 52.172.226.14:40577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/adminner.php"] [unique_id "ary0kpOnWJRlb5xgkk3rMQAAAJw"]
[Wed Sep 30 01:04:50.102517 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.102793 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.178176 2026] [security2:error] [pid 251754:tid 251987] [client 20.194.96.176:60387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/24.php"] [unique_id "ary0kpOnWJRlb5xgkk3rNwAAAOo"]
[Wed Sep 30 01:04:50.180803 2026] [security2:error] [pid 251754:tid 252003] [client 45.138.12.32:38524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.csn.htc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0kpOnWJRlb5xgkk3rOAAAAPo"]
[Wed Sep 30 01:04:50.194715 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.195099 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.203886 2026] [security2:error] [pid 251754:tid 251989] [client 20.251.39.228:19623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/file.php"] [unique_id "ary0kpOnWJRlb5xgkk3rOgAAAOw"]
[Wed Sep 30 01:04:50.215291 2026] [security2:error] [pid 251754:tid 251996] [client 82.102.18.126:43354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0kpOnWJRlb5xgkk3rOwAAAPM"]
[Wed Sep 30 01:04:50.217607 2026] [security2:error] [pid 251754:tid 251970] [client 13.70.4.78:45129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/fling.php"] [unique_id "ary0kpOnWJRlb5xgkk3rPAAAANk"]
[Wed Sep 30 01:04:50.245104 2026] [access_compat:error] [pid 251754:tid 251897] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:50.245362 2026] [access_compat:error] [pid 251754:tid 251897] [client 74.7.243.227:35224] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:50.286894 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.287357 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.292013 2026] [security2:error] [pid 251754:tid 251944] [client 104.208.65.139:16337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/felnggg.php"] [unique_id "ary0kpOnWJRlb5xgkk3rSAAAAL8"]
[Wed Sep 30 01:04:50.293924 2026] [security2:error] [pid 251754:tid 251980] [client 89.151.21.217:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0kpOnWJRlb5xgkk3rRgAAAOM"]
[Wed Sep 30 01:04:50.294477 2026] [security2:error] [pid 251754:tid 251982] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0kpOnWJRlb5xgkk3rSQAAAOU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:50.378880 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.379317 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.402903 2026] [security2:error] [pid 251754:tid 252007] [client 49.205.105.16:14505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0kpOnWJRlb5xgkk3rTQAAAP4"]
[Wed Sep 30 01:04:50.403063 2026] [security2:error] [pid 251754:tid 252007] [client 49.205.105.16:14505] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0kpOnWJRlb5xgkk3rTQAAAP4"]
[Wed Sep 30 01:04:50.413981 2026] [security2:error] [pid 251754:tid 251957] [client 20.70.173.30:59534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary0kpOnWJRlb5xgkk3rTgAAAMw"]
[Wed Sep 30 01:04:50.441787 2026] [security2:error] [pid 251754:tid 251789] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0kpOnWJRlb5xgkk3rUAAA4CA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D87365
[Wed Sep 30 01:04:50.456169 2026] [security2:error] [pid 251754:tid 251975] [client 64.227.188.205:37300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0kpOnWJRlb5xgkk3rUwAAAN4"]
[Wed Sep 30 01:04:50.469739 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.470021 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.521254 2026] [security2:error] [pid 251754:tid 251910] [client 52.172.226.14:40525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/thoms.php"] [unique_id "ary0kpOnWJRlb5xgkk3rVwAAAJ0"]
[Wed Sep 30 01:04:50.533906 2026] [security2:error] [pid 251754:tid 251896] [client 82.102.18.126:43356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0kpOnWJRlb5xgkk3rWQAAAI8"]
[Wed Sep 30 01:04:50.560061 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.560328 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.572770 2026] [security2:error] [pid 251754:tid 251795] [remote 57.141.14.105:22486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "ary0kpOnWJRlb5xgkk3rVgAApCY"]
[Wed Sep 30 01:04:50.573220 2026] [security2:error] [pid 251754:tid 251916] [client 13.70.4.78:6098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0kpOnWJRlb5xgkk3rXQAAAKM"]
[Wed Sep 30 01:04:50.575647 2026] [security2:error] [pid 251754:tid 251919] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0kpOnWJRlb5xgkk3rXAAAAKY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:50.630157 2026] [security2:error] [pid 251754:tid 251898] [client 45.138.12.41:53500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.retaldevelopments.com"] [uri "/wp-links-opml.php"] [unique_id "ary0kpOnWJRlb5xgkk3rYwAAAJE"]
[Wed Sep 30 01:04:50.649876 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.650145 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.747724 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.748319 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.771946 2026] [security2:error] [pid 251754:tid 251888] [client 20.214.109.68:9796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-links-opml.php"] [unique_id "ary0kpOnWJRlb5xgkk3raAAAAIc"]
[Wed Sep 30 01:04:50.789660 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:50.789953 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:50.831970 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.832270 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.848647 2026] [security2:error] [pid 251754:tid 251960] [client 20.251.39.228:32293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bolt.php"] [unique_id "ary0kpOnWJRlb5xgkk3rbwAAAM8"]
[Wed Sep 30 01:04:50.875036 2026] [security2:error] [pid 251754:tid 251987] [client 82.102.18.126:43368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0kpOnWJRlb5xgkk3rcAAAAOo"]
[Wed Sep 30 01:04:50.879127 2026] [security2:error] [pid 251754:tid 252003] [client 20.28.180.172:61232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-act.php"] [unique_id "ary0kpOnWJRlb5xgkk3rcQAAAPo"]
[Wed Sep 30 01:04:50.924324 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:50.924608 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:50.926244 2026] [security2:error] [pid 251754:tid 251981] [client 20.194.96.176:43386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/42b5827789index.php"] [unique_id "ary0kpOnWJRlb5xgkk3rdAAAAOQ"]
[Wed Sep 30 01:04:51.015400 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.015673 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.042658 2026] [security2:error] [pid 251754:tid 251902] [client 13.70.4.78:6093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/adminfuns.php"] [unique_id "ary0k5OnWJRlb5xgkk3rewAAAJU"]
[Wed Sep 30 01:04:51.107738 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.108031 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.144610 2026] [security2:error] [pid 251754:tid 252007] [client 52.172.226.14:40584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/a.php"] [unique_id "ary0k5OnWJRlb5xgkk3rhQAAAP4"]
[Wed Sep 30 01:04:51.146401 2026] [security2:error] [pid 251754:tid 251946] [client 122.161.50.96:29718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.50.161.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cityofmarional.com"] [uri "/xmlrpc.php"] [unique_id "ary0k5OnWJRlb5xgkk3rgwAAAME"]
[Wed Sep 30 01:04:51.146498 2026] [security2:error] [pid 251754:tid 251973] [client 64.227.188.205:37306] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0k5OnWJRlb5xgkk3rhgAAANw"]
[Wed Sep 30 01:04:51.146627 2026] [security2:error] [pid 251754:tid 251946] [client 122.161.50.96:29718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "cityofmarional.com"] [uri "/xmlrpc.php"] [unique_id "ary0k5OnWJRlb5xgkk3rgwAAAME"]
[Wed Sep 30 01:04:51.194784 2026] [security2:error] [pid 251754:tid 251977] [client 82.102.18.126:43378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0k5OnWJRlb5xgkk3riwAAAOA"]
[Wed Sep 30 01:04:51.208366 2026] [security2:error] [pid 251754:tid 251908] [client 20.70.173.30:3037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/tool.php"] [unique_id "ary0k5OnWJRlb5xgkk3rjQAAAJs"]
[Wed Sep 30 01:04:51.214612 2026] [access_compat:error] [pid 251754:tid 251948] [client 47.82.11.32:37842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.214922 2026] [access_compat:error] [pid 251754:tid 251948] [client 47.82.11.32:37842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.254782 2026] [access_compat:error] [pid 251754:tid 251901] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:51.255059 2026] [access_compat:error] [pid 251754:tid 251901] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:51.263647 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.263963 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.279164 2026] [security2:error] [pid 251754:tid 251941] [client 4.196.65.241:2536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/1b.php"] [unique_id "ary0k5OnWJRlb5xgkk3rkQAAALw"]
[Wed Sep 30 01:04:51.287739 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.288032 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.380026 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.380288 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.386851 2026] [security2:error] [pid 251754:tid 251909] [client 173.254.29.157:49828] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0k5OnWJRlb5xgkk3rmgAAAJw"]
[Wed Sep 30 01:04:51.403416 2026] [security2:error] [pid 251754:tid 251993] [client 173.254.29.157:49842] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0k5OnWJRlb5xgkk3rnAAAAPA"]
[Wed Sep 30 01:04:51.420217 2026] [security2:error] [pid 251754:tid 252012] [client 173.254.29.157:49848] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0k5OnWJRlb5xgkk3rngAAAQM"]
[Wed Sep 30 01:04:51.428603 2026] [security2:error] [pid 251754:tid 251995] [client 20.194.96.176:44087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/mmq.php"] [unique_id "ary0k5OnWJRlb5xgkk3rnwAAAPI"]
[Wed Sep 30 01:04:51.438108 2026] [security2:error] [pid 251754:tid 251959] [client 173.254.29.157:49852] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0k5OnWJRlb5xgkk3roAAAAM4"]
[Wed Sep 30 01:04:51.442801 2026] [security2:error] [pid 251754:tid 251892] [client 20.251.39.228:13498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-blogs.php"] [unique_id "ary0k5OnWJRlb5xgkk3roQAAAIs"]
[Wed Sep 30 01:04:51.457405 2026] [security2:error] [pid 251754:tid 251818] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0k5OnWJRlb5xgkk3rogAAiT0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297909&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:51.457425 2026] [security2:error] [pid 251754:tid 251818] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0k5OnWJRlb5xgkk3rogAAiT0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297909&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:04:51.469702 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.469981 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.514290 2026] [security2:error] [pid 251754:tid 251938] [client 13.70.4.78:45127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/alfa.php"] [unique_id "ary0k5OnWJRlb5xgkk3rpQAAALk"]
[Wed Sep 30 01:04:51.535675 2026] [security2:error] [pid 251754:tid 251996] [client 82.102.18.126:43382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0k5OnWJRlb5xgkk3rpgAAAPM"]
[Wed Sep 30 01:04:51.562598 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.562883 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.616847 2026] [security2:error] [pid 251754:tid 251981] [client 173.254.29.157:49854] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary0k5OnWJRlb5xgkk3rqAAAAOQ"]
[Wed Sep 30 01:04:51.653285 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.653555 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.657844 2026] [access_compat:error] [pid 251754:tid 251894] [client 47.79.13.65:33234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.658117 2026] [access_compat:error] [pid 251754:tid 251894] [client 47.79.13.65:33234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.743156 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.743416 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.771826 2026] [access_compat:error] [pid 251754:tid 251906] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:51.772082 2026] [access_compat:error] [pid 251754:tid 251906] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:51.775111 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.75:33898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.775372 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.75:33898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:51.835021 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.835288 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.837006 2026] [security2:error] [pid 251754:tid 251936] [client 64.227.188.205:37320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0k5OnWJRlb5xgkk3rsgAAALc"]
[Wed Sep 30 01:04:51.870892 2026] [security2:error] [pid 251754:tid 251973] [client 82.102.18.126:54047] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0k5OnWJRlb5xgkk3rswAAANw"]
[Wed Sep 30 01:04:51.875612 2026] [security2:error] [pid 251754:tid 251927] [remote 168.100.149.214:27662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0k5OnWJRlb5xgkk3rsAAA6C4"]
[Wed Sep 30 01:04:51.926020 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:51.926284 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:51.926406 2026] [security2:error] [pid 251754:tid 251983] [client 20.214.109.68:61150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary0k5OnWJRlb5xgkk3rtgAAAOY"]
[Wed Sep 30 01:04:51.951242 2026] [security2:error] [pid 251754:tid 251903] [client 20.194.96.176:5282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/fryvbbn.php"] [unique_id "ary0k5OnWJRlb5xgkk3rtwAAAJY"]
[Wed Sep 30 01:04:51.991375 2026] [security2:error] [pid 251754:tid 251975] [client 52.172.226.14:40543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/b8.php"] [unique_id "ary0k5OnWJRlb5xgkk3rwAAAAN4"]
[Wed Sep 30 01:04:52.019269 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.019703 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.027493 2026] [security2:error] [pid 251754:tid 251914] [client 223.181.30.165:25468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3rxgAAAKE"]
[Wed Sep 30 01:04:52.027670 2026] [security2:error] [pid 251754:tid 251914] [client 223.181.30.165:25468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3rxgAAAKE"]
[Wed Sep 30 01:04:52.104204 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.4.78:45165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/222.php"] [unique_id "ary0lJOnWJRlb5xgkk3r1wAAAKU"]
[Wed Sep 30 01:04:52.108160 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.108416 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.115649 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.1:58602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:52.115935 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.1:58602] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:52.133202 2026] [security2:error] [pid 251754:tid 251984] [client 207.46.13.150:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0lJOnWJRlb5xgkk3r2gAAAOc"]
[Wed Sep 30 01:04:52.138639 2026] [security2:error] [pid 251754:tid 251997] [client 45.138.12.32:25628] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nrf.tfd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0lJOnWJRlb5xgkk3r3AAAAPQ"]
[Wed Sep 30 01:04:52.163337 2026] [security2:error] [pid 251754:tid 251963] [client 182.69.182.151:4623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3r3QAAANI"]
[Wed Sep 30 01:04:52.163413 2026] [security2:error] [pid 251754:tid 251963] [client 182.69.182.151:4623] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3r3QAAANI"]
[Wed Sep 30 01:04:52.189436 2026] [security2:error] [pid 251754:tid 251887] [client 82.102.18.126:43398] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0lJOnWJRlb5xgkk3r3gAAAIY"]
[Wed Sep 30 01:04:52.197856 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.198130 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.249953 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:52.250245 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:52.255633 2026] [security2:error] [pid 251754:tid 252000] [client 45.138.12.32:44486] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nso.mim.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0lJOnWJRlb5xgkk3r6QAAAPc"]
[Wed Sep 30 01:04:52.288575 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.288860 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.339673 2026] [security2:error] [pid 251754:tid 252003] [client 137.184.230.10:49262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.230.184.137.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ary0lJOnWJRlb5xgkk3r7AAAAPo"]
[Wed Sep 30 01:04:52.379888 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.380158 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.427043 2026] [security2:error] [pid 251754:tid 251936] [client 45.138.12.32:38672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cti.pwx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0lJOnWJRlb5xgkk3r_QAAALc"]
[Wed Sep 30 01:04:52.471996 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.472282 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.501171 2026] [security2:error] [pid 251754:tid 251945] [client 223.235.102.107:7158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3sAwAAAMA"]
[Wed Sep 30 01:04:52.501543 2026] [security2:error] [pid 251754:tid 251945] [client 223.235.102.107:7158] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3sAwAAAMA"]
[Wed Sep 30 01:04:52.530757 2026] [security2:error] [pid 251754:tid 251999] [client 82.102.18.126:43408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0lJOnWJRlb5xgkk3sBQAAAPY"]
[Wed Sep 30 01:04:52.538374 2026] [security2:error] [pid 251754:tid 251939] [client 13.70.4.78:6083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0lJOnWJRlb5xgkk3sCAAAALo"]
[Wed Sep 30 01:04:52.555803 2026] [security2:error] [pid 251754:tid 251889] [client 64.227.188.205:37328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0lJOnWJRlb5xgkk3sCgAAAIg"]
[Wed Sep 30 01:04:52.561226 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.561485 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.609284 2026] [security2:error] [pid 251754:tid 251891] [client 37.41.16.35:56345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3sDgAAAIo"]
[Wed Sep 30 01:04:52.609445 2026] [security2:error] [pid 251754:tid 251891] [client 37.41.16.35:56345] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0lJOnWJRlb5xgkk3sDgAAAIo"]
[Wed Sep 30 01:04:52.653416 2026] [security2:error] [pid 251754:tid 251957] [client 20.194.96.176:48870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/ff.update.php"] [unique_id "ary0lJOnWJRlb5xgkk3sEAAAAMw"]
[Wed Sep 30 01:04:52.657054 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.657325 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.674421 2026] [security2:error] [pid 251754:tid 251977] [client 20.251.39.228:44458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/zlnckdxn.php"] [unique_id "ary0lJOnWJRlb5xgkk3sEQAAAOA"]
[Wed Sep 30 01:04:52.746696 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.746971 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.784515 2026] [security2:error] [pid 251754:tid 251993] [client 52.172.226.14:40517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/sid.php"] [unique_id "ary0lJOnWJRlb5xgkk3sGgAAAPA"]
[Wed Sep 30 01:04:52.807893 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:52.808332 2026] [access_compat:error] [pid 251754:tid 251898] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:52.837440 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.837731 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.840851 2026] [security2:error] [pid 251754:tid 252012] [client 82.102.18.126:43414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0lJOnWJRlb5xgkk3sHgAAAQM"]
[Wed Sep 30 01:04:52.891529 2026] [access_compat:error] [pid 251754:tid 251842] [remote 17.166.21.30:41678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.891821 2026] [access_compat:error] [pid 251754:tid 251842] [remote 17.166.21.30:41678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.928486 2026] [security2:error] [pid 251754:tid 251783] [remote 74.7.227.56:51838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0lJOnWJRlb5xgkk3sJwAA-Bo"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:04:52.930746 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:52.931163 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:52.941068 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:45164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/images.php"] [unique_id "ary0lJOnWJRlb5xgkk3sKQAAAJo"]
[Wed Sep 30 01:04:52.954372 2026] [security2:error] [pid 251754:tid 251961] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0lJOnWJRlb5xgkk3sKgAAANA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:53.019565 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.019831 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.111178 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.111447 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.145834 2026] [security2:error] [pid 251754:tid 252003] [client 43.104.4.204:24622] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary0lZOnWJRlb5xgkk3sNQAAAPo"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:04:53.154000 2026] [security2:error] [pid 251754:tid 251901] [client 82.102.18.126:43422] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.zlx.xqt.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary0lZOnWJRlb5xgkk3sNgAAAJQ"]
[Wed Sep 30 01:04:53.164739 2026] [security2:error] [pid 251754:tid 251912] [client 20.251.39.228:19184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/fs6.php"] [unique_id "ary0lZOnWJRlb5xgkk3sNwAAAJ8"]
[Wed Sep 30 01:04:53.201231 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.201490 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.244169 2026] [security2:error] [pid 251754:tid 251980] [client 52.172.226.14:40514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/bro.php"] [unique_id "ary0lZOnWJRlb5xgkk3sPQAAAOM"]
[Wed Sep 30 01:04:53.245403 2026] [security2:error] [pid 251754:tid 252010] [client 180.92.144.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary0lZOnWJRlb5xgkk3sPAAAAQE"]
[Wed Sep 30 01:04:53.260223 2026] [security2:error] [pid 251754:tid 251903] [client 64.227.188.205:37330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0lZOnWJRlb5xgkk3sPgAAAJY"]
[Wed Sep 30 01:04:53.291763 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.292041 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.297586 2026] [access_compat:error] [pid 251754:tid 251944] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:53.297850 2026] [access_compat:error] [pid 251754:tid 251944] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:53.384900 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.385167 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.432892 2026] [security2:error] [pid 251754:tid 251972] [client 13.70.4.78:45171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/media.php"] [unique_id "ary0lZOnWJRlb5xgkk3sUgAAANs"]
[Wed Sep 30 01:04:53.471186 2026] [security2:error] [pid 251754:tid 251918] [client 43.104.4.179:51249] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary0lZOnWJRlb5xgkk3sVAAAAKU"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:04:53.474390 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.474648 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.567375 2026] [security2:error] [pid 251754:tid 251937] [client 20.251.39.228:49226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/xwzs.php"] [unique_id "ary0lZOnWJRlb5xgkk3sXQAAALg"]
[Wed Sep 30 01:04:53.567738 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.568005 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.657623 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.657953 2026] [access_compat:error] [pid 251754:tid 251988] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.746826 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.747092 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.764364 2026] [access_compat:error] [pid 251754:tid 251950] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:53.764617 2026] [access_compat:error] [pid 251754:tid 251950] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:53.777094 2026] [security2:error] [pid 251754:tid 251989] [client 13.70.4.78:45159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/mac.php"] [unique_id "ary0lZOnWJRlb5xgkk3sagAAAOw"]
[Wed Sep 30 01:04:53.824730 2026] [security2:error] [pid 251754:tid 251999] [client 52.172.226.14:40619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/xwpg.php"] [unique_id "ary0lZOnWJRlb5xgkk3sbwAAAPY"]
[Wed Sep 30 01:04:53.837906 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.838178 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.889632 2026] [security2:error] [pid 251754:tid 251948] [remote 168.100.149.172:48048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0lZOnWJRlb5xgkk3saAAA7m4"]
[Wed Sep 30 01:04:53.928827 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:53.929088 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:53.947040 2026] [security2:error] [pid 251754:tid 251897] [client 64.227.188.205:37340] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0lZOnWJRlb5xgkk3segAAAJA"]
[Wed Sep 30 01:04:53.967050 2026] [security2:error] [pid 251754:tid 251980] [client 20.251.39.228:13454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary0lZOnWJRlb5xgkk3sfAAAAOM"]
[Wed Sep 30 01:04:54.000559 2026] [security2:error] [pid 251754:tid 252005] [client 45.138.12.32:25652] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nup.ysf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0lZOnWJRlb5xgkk3sfwAAAPw"]
[Wed Sep 30 01:04:54.021200 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.021465 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.069401 2026] [security2:error] [pid 251754:tid 251923] [client 34.62.88.163:48132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "dkl-hardware.com"] [uri "/"] [unique_id "ary0lpOnWJRlb5xgkk3sgQAAAKo"]
[Wed Sep 30 01:04:54.081351 2026] [security2:error] [pid 251754:tid 251910] [client 20.219.2.60:18915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/mh.php"] [unique_id "ary0lpOnWJRlb5xgkk3sggAAAJ0"]
[Wed Sep 30 01:04:54.112945 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.113230 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.174779 2026] [security2:error] [pid 251754:tid 251933] [client 13.70.4.78:45151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ops.php"] [unique_id "ary0lpOnWJRlb5xgkk3siAAAALQ"]
[Wed Sep 30 01:04:54.198961 2026] [security2:error] [pid 251754:tid 251900] [client 34.62.88.163:47274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "dkl-hardware.com"] [uri "/"] [unique_id "ary0lpOnWJRlb5xgkk3sigAAAJM"]
[Wed Sep 30 01:04:54.206932 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.207367 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.293495 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.293774 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.303013 2026] [access_compat:error] [pid 251754:tid 251918] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:54.303838 2026] [access_compat:error] [pid 251754:tid 251918] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:54.317850 2026] [security2:error] [pid 251754:tid 252012] [client 20.214.109.68:61178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws82.php"] [unique_id "ary0lpOnWJRlb5xgkk3skgAAAQM"]
[Wed Sep 30 01:04:54.324562 2026] [security2:error] [pid 251754:tid 252007] [client 161.118.214.16:54069] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lvv.xqt.mybluehost.me"] [uri "/"] [unique_id "ary0lpOnWJRlb5xgkk3sjgAAAP4"]
[Wed Sep 30 01:04:54.369410 2026] [security2:error] [pid 251754:tid 252002] [client 103.241.204.139:57278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0lpOnWJRlb5xgkk3slQAAAPk"]
[Wed Sep 30 01:04:54.369508 2026] [security2:error] [pid 251754:tid 252002] [client 103.241.204.139:57278] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0lpOnWJRlb5xgkk3slQAAAPk"]
[Wed Sep 30 01:04:54.385460 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.385722 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.387794 2026] [access_compat:error] [pid 251754:tid 251945] [client 47.79.206.95:57962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:04:54.388069 2026] [access_compat:error] [pid 251754:tid 251945] [client 47.79.206.95:57962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:04:54.404931 2026] [security2:error] [pid 251754:tid 251866] [remote 220.181.108.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torquayutd.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0lpOnWJRlb5xgkk3slwAA8m0"]
[Wed Sep 30 01:04:54.431885 2026] [security2:error] [pid 251754:tid 251886] [client 20.194.96.176:43506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/lzlhihzi.php"] [unique_id "ary0lpOnWJRlb5xgkk3smAAAAIU"]
[Wed Sep 30 01:04:54.475023 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.475286 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.497473 2026] [security2:error] [pid 251754:tid 251989] [client 52.172.226.14:3861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/radio.php"] [unique_id "ary0lpOnWJRlb5xgkk3spQAAAOw"]
[Wed Sep 30 01:04:54.497609 2026] [security2:error] [pid 251754:tid 252008] [client 45.138.12.32:38694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cuo.nox.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0lpOnWJRlb5xgkk3spgAAAP8"]
[Wed Sep 30 01:04:54.511839 2026] [security2:error] [pid 251754:tid 251952] [client 13.70.4.78:45157] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/1.php"] [unique_id "ary0lpOnWJRlb5xgkk3sqAAAAMc"]
[Wed Sep 30 01:04:54.511946 2026] [security2:error] [pid 251754:tid 251952] [client 13.70.4.78:45157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/1.php"] [unique_id "ary0lpOnWJRlb5xgkk3sqAAAAMc"]
[Wed Sep 30 01:04:54.542953 2026] [security2:error] [pid 251754:tid 251967] [client 103.159.192.142:54025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0lpOnWJRlb5xgkk3sqwAAANY"]
[Wed Sep 30 01:04:54.543083 2026] [security2:error] [pid 251754:tid 251967] [client 103.159.192.142:54025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0lpOnWJRlb5xgkk3sqwAAANY"]
[Wed Sep 30 01:04:54.559027 2026] [security2:error] [pid 251754:tid 251941] [client 20.28.180.172:61207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/cu.php"] [unique_id "ary0lpOnWJRlb5xgkk3srgAAALw"]
[Wed Sep 30 01:04:54.566950 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.567212 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.598540 2026] [security2:error] [pid 251754:tid 251994] [client 20.251.39.228:13483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws66.php"] [unique_id "ary0lpOnWJRlb5xgkk3stQAAAPE"]
[Wed Sep 30 01:04:54.635944 2026] [security2:error] [pid 251754:tid 252001] [client 64.227.188.205:37342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0lpOnWJRlb5xgkk3suAAAAPg"]
[Wed Sep 30 01:04:54.656625 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.656914 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.679342 2026] [security2:error] [pid 251754:tid 251933] [client 138.204.211.98:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0lpOnWJRlb5xgkk3svgAAALQ"]
[Wed Sep 30 01:04:54.680093 2026] [core:error] [pid 251754:tid 251997] [client 172.195.104.24:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:54.680113 2026] [core:error] [pid 251754:tid 251997] [client 172.195.104.24:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:04:54.701350 2026] [security2:error] [pid 251754:tid 251878] [remote 47.128.114.151:16774] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/city/190/ncat/7/pg/2"] [unique_id "ary0lpOnWJRlb5xgkk3swAAA23k"]
[Wed Sep 30 01:04:54.747667 2026] [access_compat:error] [pid 251754:tid 251966] [client 47.79.13.172:55500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:04:54.747955 2026] [access_compat:error] [pid 251754:tid 251966] [client 47.79.13.172:55500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:04:54.751424 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.751879 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.770773 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:54.771071 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:54.838598 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.838900 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:54.930406 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:54.930674 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.019246 2026] [security2:error] [pid 251754:tid 251999] [client 13.70.4.78:6105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/aaa.php"] [unique_id "ary0l5OnWJRlb5xgkk3s0wAAAPY"]
[Wed Sep 30 01:04:55.021952 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.022220 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.075597 2026] [security2:error] [pid 251754:tid 251948] [client 20.251.39.228:40045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ewe.php"] [unique_id "ary0l5OnWJRlb5xgkk3s1gAAAMM"]
[Wed Sep 30 01:04:55.112007 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.112271 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.178672 2026] [security2:error] [pid 251754:tid 251973] [client 52.172.226.14:40632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ccc.php"] [unique_id "ary0l5OnWJRlb5xgkk3s4gAAANw"]
[Wed Sep 30 01:04:55.202651 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.203112 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.295088 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.295345 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.300218 2026] [access_compat:error] [pid 251754:tid 251985] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:55.300673 2026] [access_compat:error] [pid 251754:tid 251985] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:55.328194 2026] [security2:error] [pid 251754:tid 251919] [client 64.227.188.205:37350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0l5OnWJRlb5xgkk3s6wAAAKY"]
[Wed Sep 30 01:04:55.387362 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.387622 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.456828 2026] [security2:error] [pid 251754:tid 252002] [client 20.251.39.228:40007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/aboute.php"] [unique_id "ary0l5OnWJRlb5xgkk3s-AAAAPk"]
[Wed Sep 30 01:04:55.466036 2026] [security2:error] [pid 251754:tid 251990] [client 155.190.6.18:54984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0l5OnWJRlb5xgkk3s-QAAAO0"]
[Wed Sep 30 01:04:55.466210 2026] [security2:error] [pid 251754:tid 251990] [client 155.190.6.18:54984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0l5OnWJRlb5xgkk3s-QAAAO0"]
[Wed Sep 30 01:04:55.479486 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.479764 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.568349 2026] [security2:error] [pid 251754:tid 251998] [client 152.59.169.65:60382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0l5OnWJRlb5xgkk3s_gAAAPU"]
[Wed Sep 30 01:04:55.570058 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.570422 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.572517 2026] [security2:error] [pid 251754:tid 251998] [client 152.59.169.65:60382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0l5OnWJRlb5xgkk3s_gAAAPU"]
[Wed Sep 30 01:04:55.632973 2026] [security2:error] [pid 251754:tid 251909] [client 13.70.4.78:6104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/chosen.php"] [unique_id "ary0l5OnWJRlb5xgkk3tAAAAAJw"]
[Wed Sep 30 01:04:55.661612 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.661912 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.663938 2026] [security2:error] [pid 251754:tid 251890] [client 213.136.69.135:61376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/style-engine.php"] [unique_id "ary0l5OnWJRlb5xgkk3tBQAAAIk"], referer: binance.com
[Wed Sep 30 01:04:55.749217 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.749480 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:13934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.789956 2026] [access_compat:error] [pid 251754:tid 251912] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:55.790280 2026] [access_compat:error] [pid 251754:tid 251912] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:55.793378 2026] [security2:error] [pid 251754:tid 251973] [client 52.172.226.14:40546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wmore1.php"] [unique_id "ary0l5OnWJRlb5xgkk3tDQAAANw"]
[Wed Sep 30 01:04:55.815521 2026] [security2:error] [pid 251754:tid 251939] [client 20.251.39.228:16721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/x9.php"] [unique_id "ary0l5OnWJRlb5xgkk3tDgAAALo"]
[Wed Sep 30 01:04:55.827202 2026] [security2:error] [pid 251754:tid 251969] [client 105.112.178.79:38366] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fhp.icg.mybluehost.me"] [uri "/__ss_probe_d52253f5fffd54118d8e20ccbf45cf16__"] [unique_id "ary0l5OnWJRlb5xgkk3tDwAAANg"]
[Wed Sep 30 01:04:55.842613 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.842925 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.872023 2026] [security2:error] [pid 251754:tid 251982] [remote 168.100.149.242:15578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0l5OnWJRlb5xgkk3tCwAAtw0"]
[Wed Sep 30 01:04:55.933147 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:55.933418 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:55.990782 2026] [security2:error] [pid 251754:tid 252011] [client 13.70.4.78:6124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/2P.php"] [unique_id "ary0l5OnWJRlb5xgkk3tHQAAAQI"]
[Wed Sep 30 01:04:56.015160 2026] [security2:error] [pid 251754:tid 252003] [client 64.227.188.205:37366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0mJOnWJRlb5xgkk3tHwAAAPo"]
[Wed Sep 30 01:04:56.023030 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.023307 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.094586 2026] [security2:error] [pid 251754:tid 252007] [client 104.208.65.139:3749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/felnggg.update.php"] [unique_id "ary0mJOnWJRlb5xgkk3tJgAAAP4"]
[Wed Sep 30 01:04:56.117000 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.117440 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.156914 2026] [security2:error] [pid 251754:tid 251954] [client 44.219.111.44:49080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.111.219.44.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesoapmage.com"] [uri "/index.php"] [unique_id "ary0mJOnWJRlb5xgkk3tLQAAAMk"]
[Wed Sep 30 01:04:56.207398 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.207655 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.283408 2026] [access_compat:error] [pid 251754:tid 251961] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:56.283673 2026] [access_compat:error] [pid 251754:tid 251961] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:56.295044 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.295299 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.313762 2026] [security2:error] [pid 251754:tid 251996] [client 52.172.226.14:40605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/function.php"] [unique_id "ary0mJOnWJRlb5xgkk3tNgAAAPM"]
[Wed Sep 30 01:04:56.323079 2026] [security2:error] [pid 251754:tid 252010] [client 105.112.178.79:38367] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fhg.svw.mybluehost.me"] [uri "/.env"] [unique_id "ary0mJOnWJRlb5xgkk3tNwAAAQE"]
[Wed Sep 30 01:04:56.333582 2026] [security2:error] [pid 251754:tid 251987] [client 122.173.27.10:2111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0mJOnWJRlb5xgkk3tOAAAAOo"]
[Wed Sep 30 01:04:56.333730 2026] [security2:error] [pid 251754:tid 251987] [client 122.173.27.10:2111] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0mJOnWJRlb5xgkk3tOAAAAOo"]
[Wed Sep 30 01:04:56.387975 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.388233 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.413671 2026] [security2:error] [pid 251754:tid 251948] [client 20.251.39.228:16879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/an.php"] [unique_id "ary0mJOnWJRlb5xgkk3tQQAAAMM"]
[Wed Sep 30 01:04:56.416454 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.4.78:6134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/min.php"] [unique_id "ary0mJOnWJRlb5xgkk3tQgAAAQA"]
[Wed Sep 30 01:04:56.531127 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.531393 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.570546 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.570833 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.661212 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.661505 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.700801 2026] [security2:error] [pid 251754:tid 251993] [client 4.240.25.22:63639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/sxxb.php"] [unique_id "ary0mJOnWJRlb5xgkk3tVwAAAPA"]
[Wed Sep 30 01:04:56.704003 2026] [security2:error] [pid 251754:tid 251903] [client 64.227.188.205:37374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0mJOnWJRlb5xgkk3tWAAAAJY"]
[Wed Sep 30 01:04:56.755738 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.756014 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.785132 2026] [security2:error] [pid 251754:tid 251910] [client 20.194.96.176:43408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/bfdghfgv.php"] [unique_id "ary0mJOnWJRlb5xgkk3tZAAAAJ0"]
[Wed Sep 30 01:04:56.786845 2026] [access_compat:error] [pid 251754:tid 252004] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=license.txt&p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 01:04:56.787282 2026] [access_compat:error] [pid 251754:tid 252004] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=license.txt&p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 01:04:56.842368 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.842620 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.860543 2026] [autoindex:error] [pid 251754:tid 251940] [client 13.70.4.78:45166] AH01276: Cannot serve directory /home4/paintyou/public_html/vaidenfield/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:56.903410 2026] [security2:error] [pid 251754:tid 251789] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0mJOnWJRlb5xgkk3tbwAAwCA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302218&sid=7e51dc04cfe87371515b0ee07218d140
[Wed Sep 30 01:04:56.903439 2026] [security2:error] [pid 251754:tid 251789] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0mJOnWJRlb5xgkk3tbwAAwCA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302218&sid=7e51dc04cfe87371515b0ee07218d140
[Wed Sep 30 01:04:56.934492 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:56.934780 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:56.941277 2026] [security2:error] [pid 251754:tid 251998] [client 20.251.39.228:19645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/aboutc.php"] [unique_id "ary0mJOnWJRlb5xgkk3tcwAAAPU"]
[Wed Sep 30 01:04:57.016186 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:45166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/great.php"] [unique_id "ary0mZOnWJRlb5xgkk3tdQAAAJo"]
[Wed Sep 30 01:04:57.020553 2026] [security2:error] [pid 251754:tid 251954] [client 51.195.6.20:46506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.6.195.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-login.php"] [unique_id "ary0mZOnWJRlb5xgkk3tdwAAAMk"], referer: https://taetaebobateashop.com/wp-login.php
[Wed Sep 30 01:04:57.026056 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.026303 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.064799 2026] [security2:error] [pid 251754:tid 251924] [client 52.172.226.14:40576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ab.php"] [unique_id "ary0mZOnWJRlb5xgkk3tfQAAAKs"]
[Wed Sep 30 01:04:57.097790 2026] [security2:error] [pid 251754:tid 251948] [client 45.138.12.32:38746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.cxb.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0mZOnWJRlb5xgkk3tgAAAAMM"]
[Wed Sep 30 01:04:57.102034 2026] [security2:error] [pid 251754:tid 251933] [client 116.197.133.25:53015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3tgQAAALQ"]
[Wed Sep 30 01:04:57.102179 2026] [security2:error] [pid 251754:tid 251933] [client 116.197.133.25:53015] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3tgQAAALQ"]
[Wed Sep 30 01:04:57.123241 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.123662 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:26431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.206266 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.206650 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.231253 2026] [security2:error] [pid 251754:tid 251953] [client 20.214.109.68:62428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/new.php"] [unique_id "ary0mZOnWJRlb5xgkk3tiAAAAMg"]
[Wed Sep 30 01:04:57.267010 2026] [access_compat:error] [pid 251754:tid 251955] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:04:57.267454 2026] [access_compat:error] [pid 251754:tid 251955] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:04:57.297424 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.297700 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.301148 2026] [security2:error] [pid 251754:tid 252001] [client 181.122.37.230:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary0mZOnWJRlb5xgkk3tjwAAAPg"]
[Wed Sep 30 01:04:57.373370 2026] [security2:error] [pid 251754:tid 252007] [client 20.251.39.228:44466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gdn.php"] [unique_id "ary0mZOnWJRlb5xgkk3tlgAAAP4"]
[Wed Sep 30 01:04:57.373706 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.4.78:6125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/BDKR28WP.php"] [unique_id "ary0mZOnWJRlb5xgkk3tlwAAAJs"]
[Wed Sep 30 01:04:57.390039 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.390724 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.419335 2026] [security2:error] [pid 251754:tid 251911] [client 64.227.188.205:37380] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0mZOnWJRlb5xgkk3tmQAAAJ4"]
[Wed Sep 30 01:04:57.478647 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.478951 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.523486 2026] [security2:error] [pid 251754:tid 251886] [client 20.194.96.176:48871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/Dss.php"] [unique_id "ary0mZOnWJRlb5xgkk3towAAAIU"]
[Wed Sep 30 01:04:57.530767 2026] [security2:error] [pid 251754:tid 251954] [client 52.172.226.14:40633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/css.php"] [unique_id "ary0mZOnWJRlb5xgkk3tpAAAAMk"]
[Wed Sep 30 01:04:57.555883 2026] [security2:error] [pid 251754:tid 251917] [client 201.32.215.149:9010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3tpwAAAKQ"]
[Wed Sep 30 01:04:57.555998 2026] [security2:error] [pid 251754:tid 251917] [client 201.32.215.149:9010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3tpwAAAKQ"]
[Wed Sep 30 01:04:57.570500 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.570790 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.623634 2026] [security2:error] [pid 251754:tid 251818] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0mZOnWJRlb5xgkk3trgAAsT0"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D19611
[Wed Sep 30 01:04:57.663940 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.664198 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.752232 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.752487 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.753311 2026] [access_compat:error] [pid 251754:tid 251990] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:57.753683 2026] [access_compat:error] [pid 251754:tid 251990] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:04:57.817682 2026] [security2:error] [pid 251754:tid 251941] [client 20.214.109.68:9860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/press.php"] [unique_id "ary0mZOnWJRlb5xgkk3twAAAALw"]
[Wed Sep 30 01:04:57.820567 2026] [security2:error] [pid 251754:tid 251979] [client 13.70.4.78:45154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gigi.php"] [unique_id "ary0mZOnWJRlb5xgkk3twQAAAOI"]
[Wed Sep 30 01:04:57.846215 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.846476 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.894377 2026] [security2:error] [pid 251754:tid 252007] [remote 168.100.149.223:39714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0mZOnWJRlb5xgkk3tuQAAtzU"]
[Wed Sep 30 01:04:57.927707 2026] [security2:error] [pid 251754:tid 251967] [client 20.194.96.176:43486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/uploaxa1.php"] [unique_id "ary0mZOnWJRlb5xgkk3t2wAAANY"]
[Wed Sep 30 01:04:57.936883 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:57.937169 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:57.940790 2026] [security2:error] [pid 251754:tid 251889] [client 20.251.39.228:32348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/first.php"] [unique_id "ary0mZOnWJRlb5xgkk3t3gAAAIg"]
[Wed Sep 30 01:04:57.957685 2026] [security2:error] [pid 251754:tid 252002] [client 152.59.165.7:58535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3t3wAAAPk"]
[Wed Sep 30 01:04:57.957827 2026] [security2:error] [pid 251754:tid 252002] [client 152.59.165.7:58535] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0mZOnWJRlb5xgkk3t3wAAAPk"]
[Wed Sep 30 01:04:57.983611 2026] [security2:error] [pid 251754:tid 251994] [client 47.238.249.137:35694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.249.238.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary0mZOnWJRlb5xgkk3t4AAAAPE"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:04:58.004864 2026] [security2:error] [pid 251754:tid 251982] [client 52.172.226.14:40624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0mpOnWJRlb5xgkk3t4QAAAOU"]
[Wed Sep 30 01:04:58.026894 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.027186 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.123152 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.123582 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.127999 2026] [security2:error] [pid 251754:tid 251908] [client 64.227.188.205:35662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0mpOnWJRlb5xgkk3t7gAAAJs"]
[Wed Sep 30 01:04:58.155439 2026] [security2:error] [pid 251754:tid 251938] [client 13.70.4.78:6089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ant.php"] [unique_id "ary0mpOnWJRlb5xgkk3t8QAAALk"]
[Wed Sep 30 01:04:58.213477 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.213910 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.242621 2026] [access_compat:error] [pid 251754:tid 252009] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:58.242913 2026] [access_compat:error] [pid 251754:tid 252009] [client 74.7.243.227:43340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:04:58.299317 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.299578 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.299997 2026] [security2:error] [pid 251754:tid 251913] [client 202.179.95.79:63872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uAwAAAKA"]
[Wed Sep 30 01:04:58.300535 2026] [security2:error] [pid 251754:tid 251913] [client 202.179.95.79:63872] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uAwAAAKA"]
[Wed Sep 30 01:04:58.309694 2026] [security2:error] [pid 251754:tid 251989] [client 20.251.39.228:16864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/redixsx.php"] [unique_id "ary0mpOnWJRlb5xgkk3uBQAAAOw"]
[Wed Sep 30 01:04:58.377702 2026] [security2:error] [pid 251754:tid 251997] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0mpOnWJRlb5xgkk3uDAAAAPQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:04:58.390353 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.390607 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.485557 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.486025 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.492404 2026] [security2:error] [pid 251754:tid 251974] [client 20.194.96.176:43361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/uploartg.php"] [unique_id "ary0mpOnWJRlb5xgkk3uFwAAAN0"]
[Wed Sep 30 01:04:58.496364 2026] [security2:error] [pid 251754:tid 251954] [client 4.196.65.241:27305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/curldect.php"] [unique_id "ary0mpOnWJRlb5xgkk3uGAAAAMk"]
[Wed Sep 30 01:04:58.498322 2026] [security2:error] [pid 251754:tid 251907] [client 45.138.12.32:38730] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nup.ysf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0mpOnWJRlb5xgkk3uGQAAAJo"]
[Wed Sep 30 01:04:58.561966 2026] [security2:error] [pid 251754:tid 251928] [client 13.70.4.78:5643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/uejvv.php"] [unique_id "ary0mpOnWJRlb5xgkk3uHAAAAK8"]
[Wed Sep 30 01:04:58.578631 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.578939 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.598890 2026] [security2:error] [pid 251754:tid 251886] [client 203.122.45.246:52646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uIgAAAIU"]
[Wed Sep 30 01:04:58.599037 2026] [security2:error] [pid 251754:tid 251886] [client 203.122.45.246:52646] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uIgAAAIU"]
[Wed Sep 30 01:04:58.600646 2026] [security2:error] [pid 251754:tid 251924] [client 52.172.226.14:40639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0mpOnWJRlb5xgkk3uIwAAAKs"]
[Wed Sep 30 01:04:58.671535 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.671815 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.723618 2026] [security2:error] [pid 251754:tid 251958] [client 51.195.6.20:54908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.6.195.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-login.php"] [unique_id "ary0mpOnWJRlb5xgkk3uKgAAAM0"], referer: https://taetaebobateashop.com/wp-login.php
[Wed Sep 30 01:04:58.748011 2026] [security2:error] [pid 251754:tid 251948] [client 20.70.173.30:47324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/az.php"] [unique_id "ary0mpOnWJRlb5xgkk3uKwAAAMM"]
[Wed Sep 30 01:04:58.759754 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.760072 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.817634 2026] [security2:error] [pid 251754:tid 251985] [client 74.7.243.227:43340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0mpOnWJRlb5xgkk3uMwAAAOg"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvODkyNDAzL2N3ZA==
[Wed Sep 30 01:04:58.843774 2026] [security2:error] [pid 251754:tid 251905] [client 64.227.188.205:35674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0mpOnWJRlb5xgkk3uNAAAAJg"]
[Wed Sep 30 01:04:58.851908 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.852194 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.906571 2026] [security2:error] [pid 251754:tid 252013] [client 45.138.12.32:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nup.ysf.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0mpOnWJRlb5xgkk3uOAAAAQQ"]
[Wed Sep 30 01:04:58.945423 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:58.945868 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:58.975201 2026] [security2:error] [pid 251754:tid 251962] [client 116.193.128.26:53473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uQAAAANE"]
[Wed Sep 30 01:04:58.975330 2026] [security2:error] [pid 251754:tid 251962] [client 116.193.128.26:53473] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0mpOnWJRlb5xgkk3uQAAAANE"]
[Wed Sep 30 01:04:58.996972 2026] [autoindex:error] [pid 251754:tid 251978] [client 13.70.4.78:45172] AH01276: Cannot serve directory /home4/paintyou/public_html/vaidenfield/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:59.010268 2026] [security2:error] [pid 251754:tid 251906] [client 182.75.216.230:53370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uQgAAAJk"]
[Wed Sep 30 01:04:59.010445 2026] [security2:error] [pid 251754:tid 251906] [client 182.75.216.230:53370] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uQgAAAJk"]
[Wed Sep 30 01:04:59.038187 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.038686 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.101402 2026] [security2:error] [pid 251754:tid 251955] [client 20.194.96.176:44053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/bgbagbcw.php"] [unique_id "ary0m5OnWJRlb5xgkk3uRgAAAMo"]
[Wed Sep 30 01:04:59.117344 2026] [security2:error] [pid 251754:tid 251982] [client 52.172.226.14:40574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-links-opml.php"] [unique_id "ary0m5OnWJRlb5xgkk3uRwAAAOU"]
[Wed Sep 30 01:04:59.124602 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.124889 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.147094 2026] [security2:error] [pid 251754:tid 251987] [client 20.251.39.228:13543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/cpp2.php"] [unique_id "ary0m5OnWJRlb5xgkk3uSwAAAOo"]
[Wed Sep 30 01:04:59.169687 2026] [security2:error] [pid 251754:tid 251991] [client 52.167.144.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0m5OnWJRlb5xgkk3uTgAAAO4"]
[Wed Sep 30 01:04:59.194141 2026] [autoindex:error] [pid 251754:tid 251923] [client 212.156.70.154:19429] AH01276: Cannot serve directory /home4/ymylrqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:59.204388 2026] [autoindex:error] [pid 251754:tid 251972] [client 13.70.4.78:45172] AH01276: Cannot serve directory /home4/paintyou/public_html/vaidenfield/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:04:59.214107 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.214362 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.325353 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.325618 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.334873 2026] [security2:error] [pid 251754:tid 251940] [client 74.7.243.227:60152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0m5OnWJRlb5xgkk3uWgAAALs"], referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZA==
[Wed Sep 30 01:04:59.371711 2026] [security2:error] [pid 251754:tid 251892] [client 13.70.4.78:45172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/file.php"] [unique_id "ary0m5OnWJRlb5xgkk3uXQAAAIs"]
[Wed Sep 30 01:04:59.374641 2026] [security2:error] [pid 251754:tid 252007] [client 103.159.192.142:54509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uXgAAAP4"]
[Wed Sep 30 01:04:59.374759 2026] [security2:error] [pid 251754:tid 252007] [client 103.159.192.142:54509] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uXgAAAP4"]
[Wed Sep 30 01:04:59.396600 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.397114 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.439589 2026] [security2:error] [pid 251754:tid 251949] [client 223.181.60.167:16036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uYgAAAMQ"]
[Wed Sep 30 01:04:59.439731 2026] [security2:error] [pid 251754:tid 251949] [client 223.181.60.167:16036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0m5OnWJRlb5xgkk3uYgAAAMQ"]
[Wed Sep 30 01:04:59.486787 2026] [security2:error] [pid 251754:tid 251936] [client 66.249.73.161:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.steamif.org"] [uri "/robots.txt"] [unique_id "ary0m5OnWJRlb5xgkk3uagAAALc"]
[Wed Sep 30 01:04:59.489106 2026] [security2:error] [pid 251754:tid 251935] [client 20.214.109.68:61170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0m5OnWJRlb5xgkk3uawAAALY"]
[Wed Sep 30 01:04:59.489495 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.489744 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.517889 2026] [security2:error] [pid 251754:tid 251959] [client 20.251.39.228:16833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/admlo.php"] [unique_id "ary0m5OnWJRlb5xgkk3ubgAAAM4"]
[Wed Sep 30 01:04:59.558767 2026] [security2:error] [pid 251754:tid 251921] [client 64.227.188.205:35684] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0m5OnWJRlb5xgkk3ucAAAAKg"]
[Wed Sep 30 01:04:59.563738 2026] [security2:error] [pid 251754:tid 251913] [client 47.238.249.137:47358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.249.238.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary0m5OnWJRlb5xgkk3ucQAAAKA"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:04:59.569557 2026] [security2:error] [pid 251754:tid 251919] [client 52.172.226.14:40516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/hp.php"] [unique_id "ary0m5OnWJRlb5xgkk3ucgAAAKY"]
[Wed Sep 30 01:04:59.588296 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.588740 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.679777 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.680057 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.725462 2026] [security2:error] [pid 251754:tid 251978] [client 13.70.4.78:6082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/elements.php"] [unique_id "ary0m5OnWJRlb5xgkk3uegAAAOE"]
[Wed Sep 30 01:04:59.768101 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:04:59.768373 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:04:59.884468 2026] [security2:error] [pid 251754:tid 251903] [remote 168.100.149.134:62136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0m5OnWJRlb5xgkk3ufgAAlHQ"]
[Wed Sep 30 01:04:59.969209 2026] [security2:error] [pid 251754:tid 251923] [client 20.194.96.176:60378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/tegubsiu.php"] [unique_id "ary0m5OnWJRlb5xgkk3ujAAAAKo"]
[Wed Sep 30 01:05:00.038585 2026] [access_compat:error] [pid 251754:tid 251899] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:05:00.038892 2026] [access_compat:error] [pid 251754:tid 251899] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:05:00.065084 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.065332 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.113177 2026] [security2:error] [pid 251754:tid 251983] [client 13.70.4.78:6088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/sitemap.php"] [unique_id "ary0nJOnWJRlb5xgkk3ulAAAAOY"]
[Wed Sep 30 01:05:00.117923 2026] [security2:error] [pid 251754:tid 251908] [client 52.172.226.14:40637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/FAQ.php"] [unique_id "ary0nJOnWJRlb5xgkk3ulQAAAJs"]
[Wed Sep 30 01:05:00.154688 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.154995 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.224920 2026] [security2:error] [pid 251754:tid 251993] [client 20.251.39.228:43704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/admin-ajax.php"] [unique_id "ary0nJOnWJRlb5xgkk3umgAAAPA"]
[Wed Sep 30 01:05:00.244817 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.245101 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.250959 2026] [security2:error] [pid 251754:tid 251897] [client 64.227.188.205:35692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0nJOnWJRlb5xgkk3unAAAAJA"]
[Wed Sep 30 01:05:00.274047 2026] [security2:error] [pid 251754:tid 251878] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0nJOnWJRlb5xgkk3uoQAA63k"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=84008
[Wed Sep 30 01:05:00.274070 2026] [security2:error] [pid 251754:tid 251878] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0nJOnWJRlb5xgkk3uoQAA63k"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=84008
[Wed Sep 30 01:05:00.315296 2026] [security2:error] [pid 251754:tid 251968] [client 139.159.215.28:55326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary0nJOnWJRlb5xgkk3upgAAANc"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:05:00.336417 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.336694 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.341386 2026] [security2:error] [pid 251754:tid 251962] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0nJOnWJRlb5xgkk3urAAAANE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:00.430618 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.430970 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.478993 2026] [security2:error] [pid 251754:tid 251984] [client 13.70.4.78:6107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xetmolxr.php"] [unique_id "ary0nJOnWJRlb5xgkk3urgAAAOc"]
[Wed Sep 30 01:05:00.508664 2026] [security2:error] [pid 251754:tid 251924] [client 43.227.131.37:13885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3usgAAAKs"]
[Wed Sep 30 01:05:00.508781 2026] [security2:error] [pid 251754:tid 251924] [client 43.227.131.37:13885] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3usgAAAKs"]
[Wed Sep 30 01:05:00.534418 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.534709 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.579423 2026] [security2:error] [pid 251754:tid 251894] [client 49.43.163.212:64990] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3utAAAAI0"]
[Wed Sep 30 01:05:00.579632 2026] [security2:error] [pid 251754:tid 251894] [client 49.43.163.212:64990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3utAAAAI0"]
[Wed Sep 30 01:05:00.627909 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.628169 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.646965 2026] [security2:error] [pid 251754:tid 252010] [client 106.214.2.47:9582] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3utQAAAQE"]
[Wed Sep 30 01:05:00.719962 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.720384 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.741640 2026] [security2:error] [pid 251754:tid 251912] [client 52.172.226.14:40538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/mo.php"] [unique_id "ary0nJOnWJRlb5xgkk3uvAAAAJ8"]
[Wed Sep 30 01:05:00.742255 2026] [security2:error] [pid 251754:tid 251987] [client 45.138.12.41:31224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.retaldevelopments.com"] [uri "/wp-links-opml.php"] [unique_id "ary0nJOnWJRlb5xgkk3uvQAAAOo"]
[Wed Sep 30 01:05:00.775212 2026] [security2:error] [pid 251754:tid 251942] [client 20.251.39.228:16744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/amthd.php"] [unique_id "ary0nJOnWJRlb5xgkk3uwAAAAL0"]
[Wed Sep 30 01:05:00.808404 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.808837 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.869619 2026] [security2:error] [pid 251754:tid 251973] [client 13.70.4.78:6143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/mini.php"] [unique_id "ary0nJOnWJRlb5xgkk3uxwAAANw"]
[Wed Sep 30 01:05:00.901562 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.902029 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:00.951921 2026] [security2:error] [pid 251754:tid 251914] [client 20.194.96.176:5294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/xxw.php"] [unique_id "ary0nJOnWJRlb5xgkk3uzAAAAKE"]
[Wed Sep 30 01:05:00.957125 2026] [security2:error] [pid 251754:tid 252004] [client 64.227.188.205:35700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0nJOnWJRlb5xgkk3uzQAAAPs"]
[Wed Sep 30 01:05:00.978998 2026] [security2:error] [pid 251754:tid 251990] [client 49.205.105.16:15235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3uzgAAAO0"]
[Wed Sep 30 01:05:00.979172 2026] [security2:error] [pid 251754:tid 251990] [client 49.205.105.16:15235] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0nJOnWJRlb5xgkk3uzgAAAO0"]
[Wed Sep 30 01:05:00.992155 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:00.992557 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.024690 2026] [security2:error] [pid 251754:tid 251948] [client 20.214.109.68:9885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0nZOnWJRlb5xgkk3u0gAAAMM"]
[Wed Sep 30 01:05:01.067771 2026] [security2:error] [pid 251754:tid 251931] [client 130.131.227.119:28266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/ahax.php"] [unique_id "ary0nZOnWJRlb5xgkk3u2AAAALI"]
[Wed Sep 30 01:05:01.083978 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.084256 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.147484 2026] [access_compat:error] [pid 251754:tid 251952] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 01:05:01.147906 2026] [access_compat:error] [pid 251754:tid 251952] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 01:05:01.177652 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.178102 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.241518 2026] [security2:error] [pid 251754:tid 251997] [client 130.131.227.119:30719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/breads1.php"] [unique_id "ary0nZOnWJRlb5xgkk3u6gAAAPQ"]
[Wed Sep 30 01:05:01.253349 2026] [security2:error] [pid 251754:tid 252010] [client 20.251.39.228:44448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/8xyz.php"] [unique_id "ary0nZOnWJRlb5xgkk3u7gAAAQE"]
[Wed Sep 30 01:05:01.266837 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.267104 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.295365 2026] [security2:error] [pid 251754:tid 251909] [client 52.172.226.14:40573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/ivmirgut.php"] [unique_id "ary0nZOnWJRlb5xgkk3u-QAAAJw"]
[Wed Sep 30 01:05:01.317057 2026] [security2:error] [pid 251754:tid 252000] [client 13.70.4.78:6081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/zwso.php"] [unique_id "ary0nZOnWJRlb5xgkk3u-wAAAPc"]
[Wed Sep 30 01:05:01.367848 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.368117 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.395519 2026] [security2:error] [pid 251754:tid 251969] [client 4.240.25.22:30739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/xkSudf.php"] [unique_id "ary0nZOnWJRlb5xgkk3vAwAAANg"]
[Wed Sep 30 01:05:01.396856 2026] [security2:error] [pid 251754:tid 251938] [client 104.208.65.139:2673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/jybkxer.php"] [unique_id "ary0nZOnWJRlb5xgkk3vBAAAALk"]
[Wed Sep 30 01:05:01.418095 2026] [security2:error] [pid 251754:tid 251899] [client 130.131.227.119:64384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/must.php"] [unique_id "ary0nZOnWJRlb5xgkk3vBQAAAJI"]
[Wed Sep 30 01:05:01.452175 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.452435 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.516680 2026] [autoindex:error] [pid 251754:tid 252012] [client 212.156.70.154:10236] AH01276: Cannot serve directory /home4/xxkqmhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:01.535281 2026] [security2:error] [pid 251754:tid 252009] [client 20.214.109.68:9861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws57.php"] [unique_id "ary0nZOnWJRlb5xgkk3vDAAAAQA"]
[Wed Sep 30 01:05:01.546428 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.546701 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.571597 2026] [security2:error] [pid 251754:tid 251932] [client 130.131.227.119:37088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/up.php"] [unique_id "ary0nZOnWJRlb5xgkk3vEQAAALM"]
[Wed Sep 30 01:05:01.608560 2026] [security2:error] [pid 251754:tid 251944] [client 20.194.30.107:34709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/txets.php"] [unique_id "ary0nZOnWJRlb5xgkk3vEgAAAL8"]
[Wed Sep 30 01:05:01.640908 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.641177 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.649017 2026] [security2:error] [pid 251754:tid 251900] [client 43.173.181.63:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-spirit-plus-solar-hybrid-inverter"] [unique_id "ary0nZOnWJRlb5xgkk3vFgAAAJM"]
[Wed Sep 30 01:05:01.678691 2026] [security2:error] [pid 251754:tid 251956] [client 64.227.188.205:35716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0nZOnWJRlb5xgkk3vGAAAAMs"]
[Wed Sep 30 01:05:01.682222 2026] [security2:error] [pid 251754:tid 251961] [client 45.138.12.32:38790] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.nrf.tfd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0nZOnWJRlb5xgkk3vGQAAANA"]
[Wed Sep 30 01:05:01.687167 2026] [security2:error] [pid 251754:tid 251913] [client 20.251.39.228:19612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/mini.php"] [unique_id "ary0nZOnWJRlb5xgkk3vGgAAAKA"]
[Wed Sep 30 01:05:01.723542 2026] [security2:error] [pid 251754:tid 251967] [client 20.198.74.230:23911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/bn.php"] [unique_id "ary0nZOnWJRlb5xgkk3vHAAAANY"]
[Wed Sep 30 01:05:01.734328 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.734793 2026] [access_compat:error] [pid 251754:tid 251997] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.761925 2026] [security2:error] [pid 251754:tid 251981] [client 13.70.4.78:6129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/tiny.php"] [unique_id "ary0nZOnWJRlb5xgkk3vIQAAAOQ"]
[Wed Sep 30 01:05:01.792952 2026] [security2:error] [pid 251754:tid 251929] [client 130.131.227.119:30682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/155.php"] [unique_id "ary0nZOnWJRlb5xgkk3vJQAAALA"]
[Wed Sep 30 01:05:01.818519 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.818816 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.898277 2026] [security2:error] [pid 251754:tid 251942] [remote 168.100.149.47:15066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0nZOnWJRlb5xgkk3vIgAAuhc"]
[Wed Sep 30 01:05:01.910157 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:01.910435 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:01.955310 2026] [security2:error] [pid 251754:tid 251969] [client 130.131.227.119:8370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-update.php"] [unique_id "ary0nZOnWJRlb5xgkk3vMQAAANg"]
[Wed Sep 30 01:05:01.979499 2026] [security2:error] [pid 251754:tid 251947] [client 114.119.136.148:59613] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "homs.co.ke"] [uri "/"] [unique_id "ary0nZOnWJRlb5xgkk3vMwAAAMI"]
[Wed Sep 30 01:05:02.002280 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.002558 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.045704 2026] [security2:error] [pid 251754:tid 251950] [client 52.172.226.14:40590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/baba.php"] [unique_id "ary0npOnWJRlb5xgkk3vNwAAAMU"]
[Wed Sep 30 01:05:02.058518 2026] [access_compat:error] [pid 251754:tid 251953] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 01:05:02.058804 2026] [access_compat:error] [pid 251754:tid 251953] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 01:05:02.091538 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.091841 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.106889 2026] [security2:error] [pid 251754:tid 252008] [client 130.131.227.119:28258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/xmrlpc.php"] [unique_id "ary0npOnWJRlb5xgkk3vPAAAAP8"]
[Wed Sep 30 01:05:02.109928 2026] [security2:error] [pid 251754:tid 251933] [client 13.70.4.78:45128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/simple.php"] [unique_id "ary0npOnWJRlb5xgkk3vPQAAALQ"]
[Wed Sep 30 01:05:02.129857 2026] [security2:error] [pid 251754:tid 251988] [client 20.251.39.228:16746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws68.php"] [unique_id "ary0npOnWJRlb5xgkk3vPwAAAOs"]
[Wed Sep 30 01:05:02.145888 2026] [security2:error] [pid 251754:tid 251958] [client 45.138.12.43:18536] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.tzq.ved.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0npOnWJRlb5xgkk3vQAAAAM0"]
[Wed Sep 30 01:05:02.176104 2026] [security2:error] [pid 251754:tid 252013] [client 20.194.96.176:43439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/router.php"] [unique_id "ary0npOnWJRlb5xgkk3vQQAAAQQ"]
[Wed Sep 30 01:05:02.183895 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.184163 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.251214 2026] [security2:error] [pid 251754:tid 251963] [client 139.159.215.28:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.215.159.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary0npOnWJRlb5xgkk3vRgAAANI"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:05:02.276711 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.277153 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.280121 2026] [security2:error] [pid 251754:tid 251957] [client 130.131.227.119:30667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/about/function.php"] [unique_id "ary0npOnWJRlb5xgkk3vSQAAAMw"]
[Wed Sep 30 01:05:02.369085 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.369515 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.408282 2026] [security2:error] [pid 251754:tid 251951] [client 64.227.188.205:35722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0npOnWJRlb5xgkk3vUwAAAMY"]
[Wed Sep 30 01:05:02.435494 2026] [security2:error] [pid 251754:tid 251916] [client 130.131.227.119:8353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/an.php"] [unique_id "ary0npOnWJRlb5xgkk3vVQAAAKM"]
[Wed Sep 30 01:05:02.437527 2026] [autoindex:error] [pid 251754:tid 252003] [client 212.156.70.154:7643] AH01276: Cannot serve directory /home4/ybabzymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:02.447770 2026] [security2:error] [pid 251754:tid 251936] [client 13.70.4.78:6141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/buy.php"] [unique_id "ary0npOnWJRlb5xgkk3vVgAAALc"]
[Wed Sep 30 01:05:02.455069 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.455325 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.548556 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.549013 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.552657 2026] [security2:error] [pid 251754:tid 251912] [client 52.172.226.14:40551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/Components.php"] [unique_id "ary0npOnWJRlb5xgkk3vXQAAAJ8"]
[Wed Sep 30 01:05:02.566391 2026] [security2:error] [pid 251754:tid 251971] [client 223.181.30.165:18451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0npOnWJRlb5xgkk3vXwAAANo"]
[Wed Sep 30 01:05:02.566512 2026] [security2:error] [pid 251754:tid 251971] [client 223.181.30.165:18451] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0npOnWJRlb5xgkk3vXwAAANo"]
[Wed Sep 30 01:05:02.640543 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.640838 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.647876 2026] [security2:error] [pid 251754:tid 251894] [client 130.131.227.119:64429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/asw.php"] [unique_id "ary0npOnWJRlb5xgkk3vZwAAAI0"]
[Wed Sep 30 01:05:02.719232 2026] [security2:error] [pid 251754:tid 252000] [client 182.69.182.151:12551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0npOnWJRlb5xgkk3vcQAAAPc"]
[Wed Sep 30 01:05:02.719677 2026] [security2:error] [pid 251754:tid 252000] [client 182.69.182.151:12551] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0npOnWJRlb5xgkk3vcQAAAPc"]
[Wed Sep 30 01:05:02.731346 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.731647 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.742549 2026] [security2:error] [pid 251754:tid 252009] [client 20.251.39.228:13450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/xxx.php"] [unique_id "ary0npOnWJRlb5xgkk3vdgAAAQA"]
[Wed Sep 30 01:05:02.790778 2026] [security2:error] [pid 251754:tid 251986] [client 20.28.180.172:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/8.php"] [unique_id "ary0npOnWJRlb5xgkk3veQAAAOk"]
[Wed Sep 30 01:05:02.792344 2026] [security2:error] [pid 251754:tid 251932] [client 13.70.4.78:6103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ioxi-o.php"] [unique_id "ary0npOnWJRlb5xgkk3vegAAALM"]
[Wed Sep 30 01:05:02.822382 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.822655 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:02.831679 2026] [access_compat:error] [pid 251754:tid 251900] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:05:02.832119 2026] [access_compat:error] [pid 251754:tid 251900] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:05:02.832597 2026] [security2:error] [pid 251754:tid 251933] [client 130.131.227.119:64412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/item.php"] [unique_id "ary0npOnWJRlb5xgkk3vgAAAALQ"]
[Wed Sep 30 01:05:02.833685 2026] [security2:error] [pid 251754:tid 252005] [client 20.70.173.30:59524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/k.php"] [unique_id "ary0npOnWJRlb5xgkk3vgQAAAPw"]
[Wed Sep 30 01:05:02.915232 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:02.915692 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.009945 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.010334 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.011236 2026] [security2:error] [pid 251754:tid 251892] [client 176.29.17.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/routers-networking"] [unique_id "ary0n5OnWJRlb5xgkk3vkgAAAIs"]
[Wed Sep 30 01:05:03.013576 2026] [security2:error] [pid 251754:tid 251907] [client 130.131.227.119:28272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/jga.php"] [unique_id "ary0n5OnWJRlb5xgkk3vkwAAAJo"]
[Wed Sep 30 01:05:03.065361 2026] [security2:error] [pid 251754:tid 251979] [client 52.172.226.14:40636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/aboutt.php"] [unique_id "ary0n5OnWJRlb5xgkk3vlAAAAOI"]
[Wed Sep 30 01:05:03.096724 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.097045 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.108940 2026] [security2:error] [pid 251754:tid 251913] [client 64.227.188.205:35738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0n5OnWJRlb5xgkk3vlwAAAKA"]
[Wed Sep 30 01:05:03.142944 2026] [security2:error] [pid 251754:tid 251932] [client 13.70.4.78:6106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ans.php"] [unique_id "ary0n5OnWJRlb5xgkk3vmwAAALM"]
[Wed Sep 30 01:05:03.183940 2026] [security2:error] [pid 251754:tid 251988] [client 130.131.227.119:37067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/mac.php"] [unique_id "ary0n5OnWJRlb5xgkk3voAAAAOs"]
[Wed Sep 30 01:05:03.190120 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.190556 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.217554 2026] [security2:error] [pid 251754:tid 251887] [client 20.251.39.228:40034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/njxjtooj.php"] [unique_id "ary0n5OnWJRlb5xgkk3vowAAAIY"]
[Wed Sep 30 01:05:03.267095 2026] [security2:error] [pid 251754:tid 251993] [client 4.196.65.241:2067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zwso.php"] [unique_id "ary0n5OnWJRlb5xgkk3vpgAAAPA"]
[Wed Sep 30 01:05:03.278200 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.278470 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.307689 2026] [security2:error] [pid 251754:tid 251804] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0n5OnWJRlb5xgkk3vqwAA5S8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297993&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:03.307719 2026] [security2:error] [pid 251754:tid 251804] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0n5OnWJRlb5xgkk3vqwAA5S8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297993&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:03.344034 2026] [security2:error] [pid 251754:tid 251935] [client 130.131.227.119:8369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/images/index.php"] [unique_id "ary0n5OnWJRlb5xgkk3vrgAAALY"]
[Wed Sep 30 01:05:03.351559 2026] [security2:error] [pid 251754:tid 251969] [client 20.214.109.68:62418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/.qiodetme.php"] [unique_id "ary0n5OnWJRlb5xgkk3vrwAAANg"]
[Wed Sep 30 01:05:03.368129 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.368395 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:24939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.383008 2026] [access_compat:error] [pid 251754:tid 251941] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 01:05:03.383271 2026] [access_compat:error] [pid 251754:tid 251941] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4
[Wed Sep 30 01:05:03.483974 2026] [security2:error] [pid 251754:tid 251963] [client 20.194.96.176:43518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/cibrkysaeng.php"] [unique_id "ary0n5OnWJRlb5xgkk3vtgAAANI"]
[Wed Sep 30 01:05:03.512670 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.512966 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.527693 2026] [security2:error] [pid 251754:tid 251937] [client 130.131.227.119:8365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ary0n5OnWJRlb5xgkk3vuwAAALg"]
[Wed Sep 30 01:05:03.527750 2026] [security2:error] [pid 251754:tid 251964] [client 13.70.4.78:60727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gf.php"] [unique_id "ary0n5OnWJRlb5xgkk3vvAAAANM"]
[Wed Sep 30 01:05:03.584627 2026] [security2:error] [pid 251754:tid 251977] [client 37.41.16.35:56964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0n5OnWJRlb5xgkk3vvgAAAOA"]
[Wed Sep 30 01:05:03.584783 2026] [security2:error] [pid 251754:tid 251977] [client 37.41.16.35:56964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0n5OnWJRlb5xgkk3vvgAAAOA"]
[Wed Sep 30 01:05:03.604284 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.604555 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.642520 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.642804 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.658895 2026] [security2:error] [pid 251754:tid 251897] [client 223.235.102.107:25466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0n5OnWJRlb5xgkk3vxgAAAJA"]
[Wed Sep 30 01:05:03.659010 2026] [security2:error] [pid 251754:tid 251897] [client 223.235.102.107:25466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0n5OnWJRlb5xgkk3vxgAAAJA"]
[Wed Sep 30 01:05:03.674269 2026] [security2:error] [pid 251754:tid 252007] [client 52.172.226.14:3850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary0n5OnWJRlb5xgkk3vyAAAAP4"]
[Wed Sep 30 01:05:03.676033 2026] [security2:error] [pid 251754:tid 251939] [client 20.251.39.228:19194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws85.php"] [unique_id "ary0n5OnWJRlb5xgkk3vyQAAALo"]
[Wed Sep 30 01:05:03.700958 2026] [security2:error] [pid 251754:tid 251913] [client 130.131.227.119:36379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/zafir1.php"] [unique_id "ary0n5OnWJRlb5xgkk3vygAAAKA"]
[Wed Sep 30 01:05:03.787331 2026] [security2:error] [pid 251754:tid 251970] [client 64.227.188.205:35752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0n5OnWJRlb5xgkk3v0QAAANk"]
[Wed Sep 30 01:05:03.803397 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.803784 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.811321 2026] [security2:error] [pid 251754:tid 251892] [client 161.118.214.16:57071] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lvz.vgm.mybluehost.me"] [uri "/"] [unique_id "ary0n5OnWJRlb5xgkk3v0wAAAIs"]
[Wed Sep 30 01:05:03.823432 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.823703 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.877843 2026] [security2:error] [pid 251754:tid 251967] [client 130.131.227.119:37113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/abc.php"] [unique_id "ary0n5OnWJRlb5xgkk3v3QAAANY"]
[Wed Sep 30 01:05:03.898569 2026] [access_compat:error] [pid 251754:tid 251904] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:05:03.898876 2026] [access_compat:error] [pid 251754:tid 251904] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:05:03.904878 2026] [security2:error] [pid 251754:tid 251947] [remote 168.100.149.132:49060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0n5OnWJRlb5xgkk3v0gAA5jU"]
[Wed Sep 30 01:05:03.914968 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:03.915248 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:03.928442 2026] [security2:error] [pid 251754:tid 251960] [client 13.70.4.78:6113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/man.php"] [unique_id "ary0n5OnWJRlb5xgkk3v4AAAAM8"]
[Wed Sep 30 01:05:03.988556 2026] [security2:error] [pid 251754:tid 251918] [client 4.196.65.241:2541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/js.php"] [unique_id "ary0n5OnWJRlb5xgkk3v4wAAAKU"]
[Wed Sep 30 01:05:04.011195 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.011650 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.044689 2026] [security2:error] [pid 251754:tid 251919] [client 130.131.227.119:28251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/c1.php"] [unique_id "ary0oJOnWJRlb5xgkk3v5wAAAKY"]
[Wed Sep 30 01:05:04.097247 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.097524 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.165888 2026] [security2:error] [pid 251754:tid 251914] [client 20.251.39.228:19586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws61.php"] [unique_id "ary0oJOnWJRlb5xgkk3v-QAAAKE"]
[Wed Sep 30 01:05:04.192472 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.192922 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.204964 2026] [security2:error] [pid 251754:tid 251894] [client 130.131.227.119:49098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/index.php/feed/atom/"] [unique_id "ary0oJOnWJRlb5xgkk3v-wAAAI0"]
[Wed Sep 30 01:05:04.228777 2026] [access_compat:error] [pid 251754:tid 251942] [client 47.79.13.28:42558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:04.229042 2026] [access_compat:error] [pid 251754:tid 251942] [client 47.79.13.28:42558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:04.250140 2026] [security2:error] [pid 251754:tid 251901] [client 20.194.96.176:43536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-wpbak.php"] [unique_id "ary0oJOnWJRlb5xgkk3wAQAAAJQ"]
[Wed Sep 30 01:05:04.280375 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.280635 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.320274 2026] [access_compat:error] [pid 251754:tid 251972] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 01:05:04.320563 2026] [access_compat:error] [pid 251754:tid 251972] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0
[Wed Sep 30 01:05:04.328938 2026] [security2:error] [pid 251754:tid 251985] [client 104.208.65.139:13715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/edit-tags.php"] [unique_id "ary0oJOnWJRlb5xgkk3wBgAAAOg"]
[Wed Sep 30 01:05:04.370891 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.371175 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.387487 2026] [security2:error] [pid 251754:tid 251931] [client 130.131.227.119:36414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/root.php"] [unique_id "ary0oJOnWJRlb5xgkk3wDgAAALI"]
[Wed Sep 30 01:05:04.408357 2026] [security2:error] [pid 251754:tid 251947] [client 13.70.4.78:5679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/dev.php"] [unique_id "ary0oJOnWJRlb5xgkk3wEgAAAMI"]
[Wed Sep 30 01:05:04.461297 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.461572 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.508610 2026] [security2:error] [pid 251754:tid 251970] [client 64.227.188.205:35768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0oJOnWJRlb5xgkk3wHwAAANk"]
[Wed Sep 30 01:05:04.545104 2026] [security2:error] [pid 251754:tid 251940] [client 173.254.29.157:22158] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0oJOnWJRlb5xgkk3wIgAAALs"]
[Wed Sep 30 01:05:04.552435 2026] [security2:error] [pid 251754:tid 252008] [client 52.172.226.14:3893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/xx.php"] [unique_id "ary0oJOnWJRlb5xgkk3wKAAAAP8"]
[Wed Sep 30 01:05:04.555935 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.556369 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.565623 2026] [security2:error] [pid 251754:tid 251886] [client 173.254.29.157:22166] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0oJOnWJRlb5xgkk3wKQAAAIU"]
[Wed Sep 30 01:05:04.568387 2026] [security2:error] [pid 251754:tid 251977] [client 20.251.39.228:13443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/iyy.php"] [unique_id "ary0oJOnWJRlb5xgkk3wLgAAAOA"]
[Wed Sep 30 01:05:04.586461 2026] [security2:error] [pid 251754:tid 252012] [client 173.254.29.157:22180] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0oJOnWJRlb5xgkk3wMAAAAQM"]
[Wed Sep 30 01:05:04.606156 2026] [security2:error] [pid 251754:tid 251981] [client 173.254.29.157:22194] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0oJOnWJRlb5xgkk3wNAAAAOQ"]
[Wed Sep 30 01:05:04.646364 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.646784 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.674759 2026] [security2:error] [pid 251754:tid 251972] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0oJOnWJRlb5xgkk3wQQAAANs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:04.688426 2026] [security2:error] [pid 251754:tid 251894] [client 130.131.227.119:36364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/shell.php"] [unique_id "ary0oJOnWJRlb5xgkk3wQgAAAI0"]
[Wed Sep 30 01:05:04.738872 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.739311 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.750550 2026] [security2:error] [pid 251754:tid 251944] [client 13.70.4.78:45183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ms-edit.php"] [unique_id "ary0oJOnWJRlb5xgkk3wSAAAAL8"]
[Wed Sep 30 01:05:04.792949 2026] [access_compat:error] [pid 251754:tid 251933] [client 47.79.13.167:40806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:04.793330 2026] [access_compat:error] [pid 251754:tid 251933] [client 47.79.13.167:40806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:04.825334 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.825637 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.849504 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 01:05:04.849777 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3
[Wed Sep 30 01:05:04.895166 2026] [security2:error] [pid 251754:tid 251940] [client 130.131.227.119:36391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/user/index.php"] [unique_id "ary0oJOnWJRlb5xgkk3wWgAAALs"]
[Wed Sep 30 01:05:04.904325 2026] [security2:error] [pid 251754:tid 251971] [client 74.225.148.80:13342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0oJOnWJRlb5xgkk3wWwAAANo"]
[Wed Sep 30 01:05:04.919287 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:04.919690 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:04.919884 2026] [security2:error] [pid 251754:tid 251961] [client 103.241.204.139:57807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0oJOnWJRlb5xgkk3wXAAAANA"]
[Wed Sep 30 01:05:04.919989 2026] [security2:error] [pid 251754:tid 251961] [client 103.241.204.139:57807] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0oJOnWJRlb5xgkk3wXAAAANA"]
[Wed Sep 30 01:05:05.013295 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.013725 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.014641 2026] [security2:error] [pid 251754:tid 251991] [client 168.107.70.193:50189] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.arvanisocks.com"] [uri "/"] [unique_id "ary0oJOnWJRlb5xgkk3wYQAAAO4"]
[Wed Sep 30 01:05:05.075237 2026] [security2:error] [pid 251754:tid 251906] [client 52.172.226.14:3851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/gelay.php"] [unique_id "ary0oZOnWJRlb5xgkk3wZQAAAJk"]
[Wed Sep 30 01:05:05.085589 2026] [security2:error] [pid 251754:tid 251975] [client 130.131.227.119:37084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ary0oZOnWJRlb5xgkk3waAAAAN4"]
[Wed Sep 30 01:05:05.086557 2026] [security2:error] [pid 251754:tid 251895] [client 13.70.4.78:6112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/txets.php"] [unique_id "ary0oZOnWJRlb5xgkk3waQAAAI4"]
[Wed Sep 30 01:05:05.102803 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.103224 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.103375 2026] [core:error] [pid 251754:tid 251954] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:05.103385 2026] [core:error] [pid 251754:tid 251954] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:05.189374 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.189637 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.227957 2026] [security2:error] [pid 251754:tid 251945] [client 64.227.188.205:35782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0oZOnWJRlb5xgkk3wdQAAAMA"]
[Wed Sep 30 01:05:05.242399 2026] [security2:error] [pid 251754:tid 251964] [client 130.131.227.119:8339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-header-json.php"] [unique_id "ary0oZOnWJRlb5xgkk3wdgAAANM"]
[Wed Sep 30 01:05:05.279995 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.280251 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.297468 2026] [security2:error] [pid 251754:tid 252008] [client 103.159.192.142:54645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0oZOnWJRlb5xgkk3wfQAAAP8"]
[Wed Sep 30 01:05:05.297597 2026] [security2:error] [pid 251754:tid 252008] [client 103.159.192.142:54645] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0oZOnWJRlb5xgkk3wfQAAAP8"]
[Wed Sep 30 01:05:05.324389 2026] [security2:error] [pid 251754:tid 251999] [client 167.234.99.161:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0oZOnWJRlb5xgkk3wfgAAAPY"]
[Wed Sep 30 01:05:05.329428 2026] [access_compat:error] [pid 251754:tid 251956] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=pwnkit&p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 01:05:05.329694 2026] [access_compat:error] [pid 251754:tid 251956] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=pwnkit&p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 01:05:05.371731 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.372010 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.395346 2026] [security2:error] [pid 251754:tid 251981] [client 20.251.39.228:19197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/900.php"] [unique_id "ary0oZOnWJRlb5xgkk3whQAAAOQ"]
[Wed Sep 30 01:05:05.414054 2026] [security2:error] [pid 251754:tid 251937] [client 130.131.227.119:30691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/zup.php"] [unique_id "ary0oZOnWJRlb5xgkk3wigAAALg"]
[Wed Sep 30 01:05:05.463755 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.464035 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.469429 2026] [security2:error] [pid 251754:tid 251917] [client 13.70.4.78:45136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/hao.php"] [unique_id "ary0oZOnWJRlb5xgkk3wlAAAAKQ"]
[Wed Sep 30 01:05:05.486181 2026] [security2:error] [pid 251754:tid 252000] [client 20.214.109.68:62432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/sodas.php"] [unique_id "ary0oZOnWJRlb5xgkk3wlQAAAPc"]
[Wed Sep 30 01:05:05.542584 2026] [security2:error] [pid 251754:tid 251990] [client 173.254.29.157:22228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary0oZOnWJRlb5xgkk3wmAAAAO0"]
[Wed Sep 30 01:05:05.558890 2026] [security2:error] [pid 251754:tid 251929] [client 173.254.29.157:22238] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary0oZOnWJRlb5xgkk3wmgAAALA"]
[Wed Sep 30 01:05:05.563854 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.564134 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.576079 2026] [security2:error] [pid 251754:tid 251950] [client 173.254.29.157:22250] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary0oZOnWJRlb5xgkk3wnQAAAMU"]
[Wed Sep 30 01:05:05.591362 2026] [security2:error] [pid 251754:tid 251942] [client 130.131.227.119:37105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/a9.php"] [unique_id "ary0oZOnWJRlb5xgkk3wnwAAAL0"]
[Wed Sep 30 01:05:05.593161 2026] [security2:error] [pid 251754:tid 252003] [client 173.254.29.157:22252] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary0oZOnWJRlb5xgkk3woAAAAPo"]
[Wed Sep 30 01:05:05.599792 2026] [security2:error] [pid 251754:tid 251900] [client 74.225.148.80:13326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0oZOnWJRlb5xgkk3wpQAAAJM"]
[Wed Sep 30 01:05:05.602384 2026] [security2:error] [pid 251754:tid 251924] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0oZOnWJRlb5xgkk3wpAAAAKs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:05.631191 2026] [security2:error] [pid 251754:tid 251909] [client 20.28.180.172:18343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws60.php"] [unique_id "ary0oZOnWJRlb5xgkk3wqQAAAJw"]
[Wed Sep 30 01:05:05.638968 2026] [security2:error] [pid 251754:tid 251928] [client 52.172.226.14:40575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/htaccess.php"] [unique_id "ary0oZOnWJRlb5xgkk3wqgAAAK8"]
[Wed Sep 30 01:05:05.651353 2026] [http2:warn] [pid 212454:tid 212655] [client 52.167.144.206:62254] h2_stream(212454-1309-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:05:05.654085 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.654361 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.734742 2026] [security2:error] [pid 251754:tid 251936] [client 20.251.39.228:35557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/blsvgeyaza.php"] [unique_id "ary0oZOnWJRlb5xgkk3wsQAAALc"]
[Wed Sep 30 01:05:05.749607 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.750069 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.759244 2026] [security2:error] [pid 251754:tid 252008] [client 130.131.227.119:28231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/admin/index.php"] [unique_id "ary0oZOnWJRlb5xgkk3wtgAAAP8"]
[Wed Sep 30 01:05:05.802493 2026] [security2:error] [pid 251754:tid 251919] [client 20.194.30.107:32725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/cilus.php"] [unique_id "ary0oZOnWJRlb5xgkk3wwQAAAKY"]
[Wed Sep 30 01:05:05.815330 2026] [access_compat:error] [pid 251754:tid 251937] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4MTc3
[Wed Sep 30 01:05:05.815743 2026] [access_compat:error] [pid 251754:tid 251937] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4MTc3
[Wed Sep 30 01:05:05.837551 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.837787 2026] [security2:error] [pid 251754:tid 251935] [client 13.70.4.78:5682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/33.php"] [unique_id "ary0oZOnWJRlb5xgkk3wxQAAALY"]
[Wed Sep 30 01:05:05.837864 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.867056 2026] [security2:error] [pid 251754:tid 251910] [client 20.70.173.30:48643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/133.php"] [unique_id "ary0oZOnWJRlb5xgkk3wxgAAAJ0"]
[Wed Sep 30 01:05:05.878500 2026] [security2:error] [pid 251754:tid 252001] [remote 168.100.149.31:16868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0oZOnWJRlb5xgkk3wuwAAhTo"]
[Wed Sep 30 01:05:05.926834 2026] [security2:error] [pid 251754:tid 251904] [client 155.190.6.18:50206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0oZOnWJRlb5xgkk3wyQAAAJc"]
[Wed Sep 30 01:05:05.932928 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:05.933375 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:05.935776 2026] [security2:error] [pid 251754:tid 252009] [client 64.227.188.205:35788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0oZOnWJRlb5xgkk3wygAAAQA"]
[Wed Sep 30 01:05:05.939586 2026] [security2:error] [pid 251754:tid 251990] [client 130.131.227.119:28246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/makeasmtp.php"] [unique_id "ary0oZOnWJRlb5xgkk3wywAAAO0"]
[Wed Sep 30 01:05:06.017559 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.017842 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.035009 2026] [security2:error] [pid 251754:tid 251983] [client 20.70.173.30:60007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/blurbs.php"] [unique_id "ary0opOnWJRlb5xgkk3w0AAAAOY"]
[Wed Sep 30 01:05:06.107913 2026] [security2:error] [pid 251754:tid 251897] [client 130.131.227.119:37087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/paku.php"] [unique_id "ary0opOnWJRlb5xgkk3w2wAAAJA"]
[Wed Sep 30 01:05:06.114440 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.114905 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.124104 2026] [security2:error] [pid 251754:tid 251936] [client 52.172.226.14:40572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/readme.php"] [unique_id "ary0opOnWJRlb5xgkk3w3QAAALc"]
[Wed Sep 30 01:05:06.177203 2026] [security2:error] [pid 251754:tid 251899] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0opOnWJRlb5xgkk3w5AAAAJI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:06.203746 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.204195 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.206238 2026] [security2:error] [pid 251754:tid 251904] [client 155.190.6.18:50206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0oZOnWJRlb5xgkk3wyQAAAJc"]
[Wed Sep 30 01:05:06.292421 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.292676 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.307936 2026] [security2:error] [pid 251754:tid 251986] [client 130.131.227.119:36362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/rtx.php"] [unique_id "ary0opOnWJRlb5xgkk3w7AAAAOk"]
[Wed Sep 30 01:05:06.315527 2026] [security2:error] [pid 251754:tid 251937] [client 13.70.4.78:45121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/adminner.php"] [unique_id "ary0opOnWJRlb5xgkk3w7QAAALg"]
[Wed Sep 30 01:05:06.338601 2026] [access_compat:error] [pid 251754:tid 251974] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 01:05:06.338887 2026] [access_compat:error] [pid 251754:tid 251974] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 01:05:06.357351 2026] [security2:error] [pid 251754:tid 251935] [client 20.251.39.228:16758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gqhyti.php"] [unique_id "ary0opOnWJRlb5xgkk3w7wAAALY"]
[Wed Sep 30 01:05:06.382605 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.382906 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.402679 2026] [security2:error] [pid 251754:tid 251940] [client 152.59.169.65:60961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0opOnWJRlb5xgkk3w9AAAALs"]
[Wed Sep 30 01:05:06.402777 2026] [security2:error] [pid 251754:tid 251940] [client 152.59.169.65:60961] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0opOnWJRlb5xgkk3w9AAAALs"]
[Wed Sep 30 01:05:06.422840 2026] [autoindex:error] [pid 251754:tid 251948] [client 195.63.31.92:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/miesa_qr/.git/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:06.474454 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.474727 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.516377 2026] [security2:error] [pid 251754:tid 251977] [client 130.131.227.119:30702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/update/da222.php"] [unique_id "ary0opOnWJRlb5xgkk3w-QAAAOA"]
[Wed Sep 30 01:05:06.561484 2026] [security2:error] [pid 251754:tid 251954] [client 74.225.148.80:13334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/b.php"] [unique_id "ary0opOnWJRlb5xgkk3w_AAAAMk"]
[Wed Sep 30 01:05:06.565241 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.565515 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.593829 2026] [security2:error] [pid 251754:tid 252003] [client 52.172.226.14:40599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/max.php"] [unique_id "ary0opOnWJRlb5xgkk3w_wAAAPo"]
[Wed Sep 30 01:05:06.644699 2026] [security2:error] [pid 251754:tid 252000] [client 64.227.188.205:35804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0opOnWJRlb5xgkk3xBAAAAPc"]
[Wed Sep 30 01:05:06.652105 2026] [security2:error] [pid 251754:tid 251931] [client 45.138.12.48:60820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bxh.hsg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0opOnWJRlb5xgkk3xAgAAALI"]
[Wed Sep 30 01:05:06.655976 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.656362 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.745497 2026] [security2:error] [pid 251754:tid 251999] [client 13.70.4.78:45141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/thoms.php"] [unique_id "ary0opOnWJRlb5xgkk3xDgAAAPY"]
[Wed Sep 30 01:05:06.746601 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.746872 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.799481 2026] [security2:error] [pid 251754:tid 251923] [client 65.111.11.103:22831] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/wp-content/gallery/inauguration-of-disciliplinary/thumbs/thumbs_dsc_0111-daf62f25-c0c7-4927-8580-3d4b696bfecb.jpg"] [unique_id "ary0opOnWJRlb5xgkk3xFAAAAKo"]
[Wed Sep 30 01:05:06.813254 2026] [security2:error] [pid 251754:tid 252012] [client 20.251.39.228:19613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/autoxxi.php"] [unique_id "ary0opOnWJRlb5xgkk3xFgAAAQM"]
[Wed Sep 30 01:05:06.838393 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.838675 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:06.859969 2026] [access_compat:error] [pid 251754:tid 252008] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:05:06.860421 2026] [access_compat:error] [pid 251754:tid 252008] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:05:06.878305 2026] [security2:error] [pid 251754:tid 251904] [client 130.131.227.119:9172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/min.php"] [unique_id "ary0opOnWJRlb5xgkk3xHQAAAJc"]
[Wed Sep 30 01:05:06.883230 2026] [security2:error] [pid 251754:tid 251901] [client 152.232.184.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary0opOnWJRlb5xgkk3xHgAAAJQ"]
[Wed Sep 30 01:05:06.908228 2026] [security2:error] [pid 251754:tid 251966] [client 4.240.25.22:33229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/pJPoKA.php"] [unique_id "ary0opOnWJRlb5xgkk3xHwAAANU"]
[Wed Sep 30 01:05:06.934725 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:06.935188 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.021823 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.022082 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.065333 2026] [security2:error] [pid 251754:tid 251917] [client 130.131.227.119:1856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "ary0o5OnWJRlb5xgkk3xJwAAAKQ"]
[Wed Sep 30 01:05:07.076471 2026] [security2:error] [pid 251754:tid 251903] [client 74.225.148.80:11300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/admin.php"] [unique_id "ary0o5OnWJRlb5xgkk3xKAAAAJY"]
[Wed Sep 30 01:05:07.081902 2026] [security2:error] [pid 251754:tid 251993] [client 122.173.27.10:32380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0o5OnWJRlb5xgkk3xKQAAAPA"]
[Wed Sep 30 01:05:07.082026 2026] [security2:error] [pid 251754:tid 251993] [client 122.173.27.10:32380] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0o5OnWJRlb5xgkk3xKQAAAPA"]
[Wed Sep 30 01:05:07.112023 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.112307 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.155349 2026] [security2:error] [pid 251754:tid 251954] [client 13.70.4.78:6122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/a.php"] [unique_id "ary0o5OnWJRlb5xgkk3xMAAAAMk"]
[Wed Sep 30 01:05:07.202486 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.202786 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.235084 2026] [security2:error] [pid 251754:tid 251953] [client 52.172.226.14:3853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/post.php"] [unique_id "ary0o5OnWJRlb5xgkk3xPAAAAMg"]
[Wed Sep 30 01:05:07.237711 2026] [security2:error] [pid 251754:tid 251942] [client 130.131.227.119:28282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/themes/min.php"] [unique_id "ary0o5OnWJRlb5xgkk3xQAAAAL0"]
[Wed Sep 30 01:05:07.247428 2026] [security2:error] [pid 251754:tid 251941] [client 136.242.107.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary0o5OnWJRlb5xgkk3xQQAAALw"]
[Wed Sep 30 01:05:07.265385 2026] [security2:error] [pid 251754:tid 251890] [client 20.251.39.228:33829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/1144452145_error_log.php"] [unique_id "ary0o5OnWJRlb5xgkk3xRAAAAIk"]
[Wed Sep 30 01:05:07.293891 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.294146 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.304149 2026] [security2:error] [pid 251754:tid 252012] [client 20.214.109.68:62439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/yw5bi63u.php"] [unique_id "ary0o5OnWJRlb5xgkk3xRwAAAQM"]
[Wed Sep 30 01:05:07.326925 2026] [security2:error] [pid 251754:tid 251967] [client 4.196.65.241:27285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zuk.php"] [unique_id "ary0o5OnWJRlb5xgkk3xSAAAANY"]
[Wed Sep 30 01:05:07.360675 2026] [security2:error] [pid 251754:tid 251901] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0o5OnWJRlb5xgkk3xTAAAAJQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:07.361683 2026] [access_compat:error] [pid 251754:tid 251892] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 01:05:07.361958 2026] [access_compat:error] [pid 251754:tid 251892] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 01:05:07.366072 2026] [security2:error] [pid 251754:tid 252009] [client 64.227.188.205:35806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0o5OnWJRlb5xgkk3xTgAAAQA"]
[Wed Sep 30 01:05:07.383777 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.384040 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:3329] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.408580 2026] [security2:error] [pid 251754:tid 251904] [client 130.131.227.119:28229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "ary0o5OnWJRlb5xgkk3xUAAAAJc"]
[Wed Sep 30 01:05:07.487226 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.487487 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.498312 2026] [security2:error] [pid 251754:tid 251937] [client 68.167.73.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0o5OnWJRlb5xgkk3xWAAAALg"]
[Wed Sep 30 01:05:07.529449 2026] [security2:error] [pid 251754:tid 251977] [client 13.70.4.78:45180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/b8.php"] [unique_id "ary0o5OnWJRlb5xgkk3xWwAAAOA"]
[Wed Sep 30 01:05:07.537293 2026] [security2:error] [pid 251754:tid 251954] [client 20.70.173.30:60011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/min.php"] [unique_id "ary0o5OnWJRlb5xgkk3xXQAAAMk"]
[Wed Sep 30 01:05:07.568526 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.568970 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.575678 2026] [security2:error] [pid 251754:tid 252010] [client 116.197.133.25:53634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0o5OnWJRlb5xgkk3xYAAAAQE"]
[Wed Sep 30 01:05:07.575797 2026] [security2:error] [pid 251754:tid 252010] [client 116.197.133.25:53634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0o5OnWJRlb5xgkk3xYAAAAQE"]
[Wed Sep 30 01:05:07.605939 2026] [security2:error] [pid 251754:tid 251893] [client 158.47.230.146:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0o5OnWJRlb5xgkk3xYwAAAIw"]
[Wed Sep 30 01:05:07.657293 2026] [security2:error] [pid 251754:tid 251975] [client 74.225.148.80:11299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/fling.php"] [unique_id "ary0o5OnWJRlb5xgkk3xZgAAAN4"]
[Wed Sep 30 01:05:07.657966 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.658234 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.717611 2026] [security2:error] [pid 251754:tid 251962] [client 130.131.227.119:1916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ary0o5OnWJRlb5xgkk3xbQAAANE"]
[Wed Sep 30 01:05:07.727018 2026] [security2:error] [pid 251754:tid 251968] [client 20.251.39.228:5860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws48.php"] [unique_id "ary0o5OnWJRlb5xgkk3xbgAAANc"]
[Wed Sep 30 01:05:07.733977 2026] [security2:error] [pid 251754:tid 251760] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0o5OnWJRlb5xgkk3xbwAAiQM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=13373&sid=4d4651876e8337d339ffdb1335b82ffe
[Wed Sep 30 01:05:07.733999 2026] [security2:error] [pid 251754:tid 251760] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0o5OnWJRlb5xgkk3xbwAAiQM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=13373&sid=4d4651876e8337d339ffdb1335b82ffe
[Wed Sep 30 01:05:07.747941 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.748212 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.846988 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.847406 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.859262 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:05:07.859541 2026] [access_compat:error] [pid 251754:tid 251908] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:05:07.883911 2026] [security2:error] [pid 251754:tid 251945] [client 216.73.216.46:3329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0o5OnWJRlb5xgkk3xlwAAAMA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL2NwdTExL2RyaXZlcg%3D%3D
[Wed Sep 30 01:05:07.895728 2026] [security2:error] [pid 251754:tid 251954] [remote 168.100.149.140:29908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0o5OnWJRlb5xgkk3xiAAAnRI"]
[Wed Sep 30 01:05:07.901562 2026] [security2:error] [pid 251754:tid 251960] [client 130.131.227.119:37103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-info.php"] [unique_id "ary0o5OnWJRlb5xgkk3xmQAAAM8"]
[Wed Sep 30 01:05:07.931199 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:07.931513 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:07.944156 2026] [security2:error] [pid 251754:tid 251906] [client 13.70.4.78:60681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/sid.php"] [unique_id "ary0o5OnWJRlb5xgkk3xnQAAAJk"]
[Wed Sep 30 01:05:07.948926 2026] [security2:error] [pid 251754:tid 251891] [client 52.172.226.14:40571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/themes.php"] [unique_id "ary0o5OnWJRlb5xgkk3xngAAAIo"]
[Wed Sep 30 01:05:07.950959 2026] [security2:error] [pid 251754:tid 252008] [client 20.213.164.196:29702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0o5OnWJRlb5xgkk3xnwAAAP8"]
[Wed Sep 30 01:05:07.988889 2026] [http2:warn] [pid 212454:tid 212663] [client 52.167.144.25:42381] h2_stream(212454-1349-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:05:08.004236 2026] [security2:error] [pid 251754:tid 251990] [client 213.136.69.135:65040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/template-canvas.php"] [unique_id "ary0pJOnWJRlb5xgkk3xogAAAO0"], referer: binance.com
[Wed Sep 30 01:05:08.023254 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.023523 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.044719 2026] [security2:error] [pid 251754:tid 251895] [client 20.194.30.107:47849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/ms-edit.php"] [unique_id "ary0pJOnWJRlb5xgkk3xpAAAAI4"]
[Wed Sep 30 01:05:08.067624 2026] [security2:error] [pid 251754:tid 251961] [client 130.131.227.119:1883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-wordfence-waf.php"] [unique_id "ary0pJOnWJRlb5xgkk3xpQAAANA"]
[Wed Sep 30 01:05:08.075956 2026] [security2:error] [pid 251754:tid 251979] [client 64.227.188.205:49882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0pJOnWJRlb5xgkk3xqgAAAOI"]
[Wed Sep 30 01:05:08.113064 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.113319 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.148223 2026] [security2:error] [pid 251754:tid 251987] [client 201.32.215.149:5418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3xuwAAAOo"]
[Wed Sep 30 01:05:08.148326 2026] [security2:error] [pid 251754:tid 251987] [client 201.32.215.149:5418] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3xuwAAAOo"]
[Wed Sep 30 01:05:08.158148 2026] [security2:error] [pid 251754:tid 251904] [client 20.28.180.172:62358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/vanda.php"] [unique_id "ary0pJOnWJRlb5xgkk3xvAAAAJc"]
[Wed Sep 30 01:05:08.205136 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.205575 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.219934 2026] [security2:error] [pid 251754:tid 252007] [client 20.251.39.228:35559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary0pJOnWJRlb5xgkk3xwgAAAP4"]
[Wed Sep 30 01:05:08.250430 2026] [security2:error] [pid 251754:tid 251911] [client 130.131.227.119:9167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/ws49.php"] [unique_id "ary0pJOnWJRlb5xgkk3xxAAAAJ4"]
[Wed Sep 30 01:05:08.294828 2026] [security2:error] [pid 251754:tid 251894] [client 74.225.148.80:13356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0pJOnWJRlb5xgkk3xyAAAAI0"]
[Wed Sep 30 01:05:08.295407 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.295650 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.315863 2026] [access_compat:error] [pid 251754:tid 251949] [client 47.79.13.213:37148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:08.316120 2026] [access_compat:error] [pid 251754:tid 251949] [client 47.79.13.213:37148] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:08.334098 2026] [security2:error] [pid 251754:tid 251891] [client 13.70.4.78:6100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/bro.php"] [unique_id "ary0pJOnWJRlb5xgkk3xzwAAAIo"]
[Wed Sep 30 01:05:08.336763 2026] [security2:error] [pid 251754:tid 251784] [remote 220.181.108.175:44852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldensnifferproducts.com"] [uri "/gspzcrt/index.php"] [unique_id "ary0pJOnWJRlb5xgkk3xzQAAhxs"]
[Wed Sep 30 01:05:08.343006 2026] [security2:error] [pid 251754:tid 251889] [client 20.214.109.68:9836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws81.php"] [unique_id "ary0pJOnWJRlb5xgkk3x0gAAAIg"]
[Wed Sep 30 01:05:08.343067 2026] [security2:error] [pid 251754:tid 252008] [client 20.70.173.30:47342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-filemannger.php"] [unique_id "ary0pJOnWJRlb5xgkk3x0wAAAP8"]
[Wed Sep 30 01:05:08.344868 2026] [access_compat:error] [pid 251754:tid 251972] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 01:05:08.345121 2026] [access_compat:error] [pid 251754:tid 251972] [client 74.7.243.227:60164] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1
[Wed Sep 30 01:05:08.361578 2026] [security2:error] [pid 251754:tid 252010] [client 20.58.177.98:3584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0pJOnWJRlb5xgkk3x1AAAAQE"]
[Wed Sep 30 01:05:08.389678 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.390094 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.397843 2026] [security2:error] [pid 251754:tid 251793] [remote 220.181.108.167:40240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldensnifferproducts.com"] [uri "/gspzcrt/index.php"] [unique_id "ary0pJOnWJRlb5xgkk3x2gAAkCQ"]
[Wed Sep 30 01:05:08.399030 2026] [security2:error] [pid 251754:tid 251981] [client 74.7.242.1:55658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0pJOnWJRlb5xgkk3x3gAAAOQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:05:08.407753 2026] [security2:error] [pid 251754:tid 251895] [client 20.213.164.196:30014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0pJOnWJRlb5xgkk3x4AAAAI4"]
[Wed Sep 30 01:05:08.431603 2026] [security2:error] [pid 251754:tid 251927] [client 130.131.227.119:8996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/xxx.php"] [unique_id "ary0pJOnWJRlb5xgkk3x5QAAAK4"]
[Wed Sep 30 01:05:08.435850 2026] [security2:error] [pid 251754:tid 251980] [client 104.208.65.139:16349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/nauik.php"] [unique_id "ary0pJOnWJRlb5xgkk3x5wAAAOM"]
[Wed Sep 30 01:05:08.446958 2026] [security2:error] [pid 251754:tid 251942] [client 181.199.60.35:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary0pJOnWJRlb5xgkk3x6AAAAL0"]
[Wed Sep 30 01:05:08.478507 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.478766 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.483087 2026] [security2:error] [pid 251754:tid 251957] [client 52.172.226.14:3872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "ary0pJOnWJRlb5xgkk3x7AAAAMw"]
[Wed Sep 30 01:05:08.570296 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.570576 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.607061 2026] [security2:error] [pid 251754:tid 251915] [client 130.131.227.119:9166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/0x.php"] [unique_id "ary0pJOnWJRlb5xgkk3x9AAAAKI"]
[Wed Sep 30 01:05:08.628246 2026] [security2:error] [pid 251754:tid 251941] [client 152.59.165.7:5497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3x-QAAALw"]
[Wed Sep 30 01:05:08.628364 2026] [security2:error] [pid 251754:tid 251941] [client 152.59.165.7:5497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3x-QAAALw"]
[Wed Sep 30 01:05:08.661150 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.661419 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.673686 2026] [security2:error] [pid 251754:tid 252007] [client 20.58.177.98:3622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0pJOnWJRlb5xgkk3x-wAAAP4"]
[Wed Sep 30 01:05:08.688775 2026] [security2:error] [pid 251754:tid 251800] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0pJOnWJRlb5xgkk3x_gAA2Ss"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298529&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:08.688798 2026] [security2:error] [pid 251754:tid 251800] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0pJOnWJRlb5xgkk3x_gAA2Ss"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298529&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:08.747723 2026] [security2:error] [pid 251754:tid 251960] [client 20.213.164.196:29723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/adminfuns.php"] [unique_id "ary0pJOnWJRlb5xgkk3yBQAAAM8"]
[Wed Sep 30 01:05:08.750451 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.750720 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.764934 2026] [security2:error] [pid 251754:tid 251909] [client 20.251.39.228:43699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/schallfuns.php"] [unique_id "ary0pJOnWJRlb5xgkk3yBgAAAJw"]
[Wed Sep 30 01:05:08.765197 2026] [security2:error] [pid 251754:tid 251913] [client 130.131.227.119:36356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/CDX1.php"] [unique_id "ary0pJOnWJRlb5xgkk3yBwAAAKA"]
[Wed Sep 30 01:05:08.816133 2026] [security2:error] [pid 251754:tid 251987] [client 64.227.188.205:49884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0pJOnWJRlb5xgkk3yCAAAAOo"]
[Wed Sep 30 01:05:08.817065 2026] [security2:error] [pid 251754:tid 251949] [client 13.70.4.78:60672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xwpg.php"] [unique_id "ary0pJOnWJRlb5xgkk3yCQAAAMQ"]
[Wed Sep 30 01:05:08.828010 2026] [security2:error] [pid 251754:tid 251888] [client 74.7.243.227:60164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0pJOnWJRlb5xgkk3yCgAAAIc"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 01:05:08.844032 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.844299 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.933376 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:08.933760 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:08.969091 2026] [security2:error] [pid 251754:tid 252001] [client 130.131.227.119:36382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/akcc.php"] [unique_id "ary0pJOnWJRlb5xgkk3yEwAAAPg"]
[Wed Sep 30 01:05:08.972861 2026] [security2:error] [pid 251754:tid 251924] [client 202.179.95.79:52667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3yFAAAAKs"]
[Wed Sep 30 01:05:08.972987 2026] [security2:error] [pid 251754:tid 251924] [client 202.179.95.79:52667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0pJOnWJRlb5xgkk3yFAAAAKs"]
[Wed Sep 30 01:05:08.982839 2026] [security2:error] [pid 251754:tid 251942] [client 52.172.226.14:3875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary0pJOnWJRlb5xgkk3yFQAAAL0"]
[Wed Sep 30 01:05:09.001477 2026] [security2:error] [pid 251754:tid 251963] [client 20.58.177.98:3402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0pZOnWJRlb5xgkk3yFwAAANI"]
[Wed Sep 30 01:05:09.006951 2026] [security2:error] [pid 251754:tid 251999] [client 74.225.148.80:11297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/adminfuns.php"] [unique_id "ary0pZOnWJRlb5xgkk3yGAAAAPY"]
[Wed Sep 30 01:05:09.024976 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.025241 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.116074 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.116341 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.148554 2026] [security2:error] [pid 251754:tid 251988] [client 130.131.227.119:36370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ary0pZOnWJRlb5xgkk3yMAAAAOs"]
[Wed Sep 30 01:05:09.198264 2026] [security2:error] [pid 251754:tid 251960] [client 20.213.164.196:30013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/av.php"] [unique_id "ary0pZOnWJRlb5xgkk3yMgAAAM8"]
[Wed Sep 30 01:05:09.207619 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.207915 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:32321] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.297286 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.297559 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.319535 2026] [security2:error] [pid 251754:tid 251996] [client 20.58.177.98:3403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/aa.php"] [unique_id "ary0pZOnWJRlb5xgkk3yPgAAAPM"]
[Wed Sep 30 01:05:09.339298 2026] [security2:error] [pid 251754:tid 251939] [client 130.131.227.119:36411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/s.php"] [unique_id "ary0pZOnWJRlb5xgkk3yQAAAALo"]
[Wed Sep 30 01:05:09.346767 2026] [security2:error] [pid 251754:tid 251933] [client 203.122.45.246:53280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0pZOnWJRlb5xgkk3yQQAAALQ"]
[Wed Sep 30 01:05:09.346875 2026] [security2:error] [pid 251754:tid 251933] [client 203.122.45.246:53280] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0pZOnWJRlb5xgkk3yQQAAALQ"]
[Wed Sep 30 01:05:09.381288 2026] [access_compat:error] [pid 251754:tid 251914] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 01:05:09.381556 2026] [access_compat:error] [pid 251754:tid 251914] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 01:05:09.387160 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.387424 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.451773 2026] [security2:error] [pid 251754:tid 251952] [client 20.70.173.30:60016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/100.php"] [unique_id "ary0pZOnWJRlb5xgkk3yRgAAAMc"]
[Wed Sep 30 01:05:09.498800 2026] [security2:error] [pid 251754:tid 251957] [client 52.172.226.14:40588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary0pZOnWJRlb5xgkk3yRwAAAMw"]
[Wed Sep 30 01:05:09.505425 2026] [security2:error] [pid 251754:tid 251931] [client 130.131.227.119:9162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/sagax.php"] [unique_id "ary0pZOnWJRlb5xgkk3ySAAAALI"]
[Wed Sep 30 01:05:09.517429 2026] [security2:error] [pid 251754:tid 251902] [client 4.196.65.241:2555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/faze.php"] [unique_id "ary0pZOnWJRlb5xgkk3ySQAAAJU"]
[Wed Sep 30 01:05:09.531867 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.532198 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.540554 2026] [security2:error] [pid 251754:tid 251895] [client 64.227.188.205:49896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0pZOnWJRlb5xgkk3ySwAAAI4"]
[Wed Sep 30 01:05:09.570736 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.571019 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.625086 2026] [security2:error] [pid 251754:tid 251950] [client 216.73.216.46:32321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0pZOnWJRlb5xgkk3yVAAAAMU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mzk%3D
[Wed Sep 30 01:05:09.640595 2026] [security2:error] [pid 251754:tid 251930] [client 20.58.177.98:3429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/z70.php"] [unique_id "ary0pZOnWJRlb5xgkk3yVQAAALE"]
[Wed Sep 30 01:05:09.662830 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.663105 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.695960 2026] [security2:error] [pid 251754:tid 251947] [client 74.225.148.80:13327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/alfa.php"] [unique_id "ary0pZOnWJRlb5xgkk3yXAAAAMI"]
[Wed Sep 30 01:05:09.711318 2026] [security2:error] [pid 251754:tid 252002] [client 116.193.128.26:54118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0pZOnWJRlb5xgkk3yXgAAAPk"]
[Wed Sep 30 01:05:09.711415 2026] [security2:error] [pid 251754:tid 252002] [client 116.193.128.26:54118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0pZOnWJRlb5xgkk3yXgAAAPk"]
[Wed Sep 30 01:05:09.748217 2026] [security2:error] [pid 251754:tid 251974] [client 130.131.227.119:9177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ary0pZOnWJRlb5xgkk3yYwAAAN0"]
[Wed Sep 30 01:05:09.759626 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.760071 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.799022 2026] [security2:error] [pid 251754:tid 251935] [client 20.214.109.68:59847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/mh.php"] [unique_id "ary0pZOnWJRlb5xgkk3yZAAAALY"]
[Wed Sep 30 01:05:09.846354 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.846618 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.857435 2026] [security2:error] [pid 251754:tid 252010] [client 13.70.4.78:5670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/radio.php"] [unique_id "ary0pZOnWJRlb5xgkk3yZwAAAQE"]
[Wed Sep 30 01:05:09.888496 2026] [security2:error] [pid 251754:tid 251989] [client 20.213.164.196:29978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/dex.php"] [unique_id "ary0pZOnWJRlb5xgkk3yaAAAAOw"]
[Wed Sep 30 01:05:09.917620 2026] [security2:error] [pid 251754:tid 251905] [remote 168.100.149.113:55632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0pZOnWJRlb5xgkk3yZQAA2z8"]
[Wed Sep 30 01:05:09.932031 2026] [security2:error] [pid 251754:tid 251887] [client 130.131.227.119:37090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "ary0pZOnWJRlb5xgkk3ybgAAAIY"]
[Wed Sep 30 01:05:09.937930 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:09.938370 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:09.957097 2026] [security2:error] [pid 251754:tid 251927] [client 20.58.177.98:3454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/f35.php"] [unique_id "ary0pZOnWJRlb5xgkk3ybwAAAK4"]
[Wed Sep 30 01:05:10.023712 2026] [security2:error] [pid 251754:tid 252012] [client 103.159.192.142:55127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ppOnWJRlb5xgkk3ycQAAAQM"]
[Wed Sep 30 01:05:10.023849 2026] [security2:error] [pid 251754:tid 252012] [client 103.159.192.142:55127] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0ppOnWJRlb5xgkk3ycQAAAQM"]
[Wed Sep 30 01:05:10.027124 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.027533 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.037687 2026] [security2:error] [pid 251754:tid 251904] [client 89.248.172.10:32014] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "goldensnifferproducts.com"] [uri "/"] [unique_id "ary0ppOnWJRlb5xgkk3ycgAAAJc"]
[Wed Sep 30 01:05:10.038635 2026] [proxy:warn] [pid 251754:tid 251904] [client 89.248.172.10:32014] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be goldensnifferproducts.com for uri /
[Wed Sep 30 01:05:10.040224 2026] [security2:error] [pid 251754:tid 251952] [client 52.172.226.14:3842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/click.php"] [unique_id "ary0ppOnWJRlb5xgkk3ycwAAAMc"]
[Wed Sep 30 01:05:10.052330 2026] [security2:error] [pid 251754:tid 251918] [client 20.251.39.228:16715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/CDX1.php"] [unique_id "ary0ppOnWJRlb5xgkk3ydgAAAKU"]
[Wed Sep 30 01:05:10.069439 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 01:05:10.069738 2026] [access_compat:error] [pid 251754:tid 252000] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 01:05:10.090945 2026] [security2:error] [pid 251754:tid 251993] [client 223.181.60.167:16265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ppOnWJRlb5xgkk3yeAAAAPA"]
[Wed Sep 30 01:05:10.091096 2026] [security2:error] [pid 251754:tid 251993] [client 223.181.60.167:16265] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0ppOnWJRlb5xgkk3yeAAAAPA"]
[Wed Sep 30 01:05:10.120030 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.120283 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.165365 2026] [security2:error] [pid 251754:tid 251919] [client 130.131.227.119:1860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/z.php"] [unique_id "ary0ppOnWJRlb5xgkk3ygAAAAKY"]
[Wed Sep 30 01:05:10.172134 2026] [security2:error] [pid 251754:tid 252005] [client 74.225.148.80:11282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/222.php"] [unique_id "ary0ppOnWJRlb5xgkk3ygQAAAPw"]
[Wed Sep 30 01:05:10.213419 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.213830 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.232422 2026] [security2:error] [pid 251754:tid 252009] [client 64.227.188.205:49898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ppOnWJRlb5xgkk3yhgAAAQA"]
[Wed Sep 30 01:05:10.280864 2026] [security2:error] [pid 251754:tid 251896] [client 20.58.177.98:3460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/adminfuns.php"] [unique_id "ary0ppOnWJRlb5xgkk3yiAAAAI8"]
[Wed Sep 30 01:05:10.303287 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.303598 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.353362 2026] [security2:error] [pid 251754:tid 251974] [client 130.131.227.119:1897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/f35.php"] [unique_id "ary0ppOnWJRlb5xgkk3yigAAAN0"]
[Wed Sep 30 01:05:10.393019 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.393412 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.397101 2026] [security2:error] [pid 251754:tid 251941] [client 20.213.164.196:29732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/chosen.php"] [unique_id "ary0ppOnWJRlb5xgkk3yjAAAALw"]
[Wed Sep 30 01:05:10.413373 2026] [security2:error] [pid 251754:tid 251973] [client 105.112.178.79:38369] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fhp.icg.mybluehost.me"] [uri "/.env"] [unique_id "ary0ppOnWJRlb5xgkk3yjQAAANw"]
[Wed Sep 30 01:05:10.463194 2026] [security2:error] [pid 251754:tid 251834] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0ppOnWJRlb5xgkk3ymAAAzk0"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D25738
[Wed Sep 30 01:05:10.484892 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.485193 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.525876 2026] [security2:error] [pid 251754:tid 251983] [client 52.172.226.14:40602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/install.php"] [unique_id "ary0ppOnWJRlb5xgkk3yrQAAAOY"]
[Wed Sep 30 01:05:10.556276 2026] [security2:error] [pid 251754:tid 251989] [client 130.131.227.119:9205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/file61.php"] [unique_id "ary0ppOnWJRlb5xgkk3ysAAAAOw"]
[Wed Sep 30 01:05:10.573689 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.573986 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.601730 2026] [security2:error] [pid 251754:tid 251948] [client 20.58.177.98:3419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/av.php"] [unique_id "ary0ppOnWJRlb5xgkk3ytgAAAMM"]
[Wed Sep 30 01:05:10.618593 2026] [security2:error] [pid 251754:tid 252005] [client 20.251.39.228:40048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/clasa99.php"] [unique_id "ary0ppOnWJRlb5xgkk3yuwAAAPw"]
[Wed Sep 30 01:05:10.666757 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.667054 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.702865 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 01:05:10.703141 2026] [access_compat:error] [pid 251754:tid 251964] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDg0
[Wed Sep 30 01:05:10.709835 2026] [security2:error] [pid 251754:tid 251896] [client 13.70.4.78:6092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ccc.php"] [unique_id "ary0ppOnWJRlb5xgkk3yxgAAAI8"]
[Wed Sep 30 01:05:10.712105 2026] [security2:error] [pid 251754:tid 251960] [client 4.240.25.22:33264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/admin.php"] [unique_id "ary0ppOnWJRlb5xgkk3yxwAAAM8"]
[Wed Sep 30 01:05:10.759537 2026] [autoindex:error] [pid 251754:tid 251962] [client 212.156.70.154:27158] AH01276: Cannot serve directory /home4/zlhmwumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:10.761535 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.761996 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.778190 2026] [security2:error] [pid 251754:tid 251900] [client 130.131.227.119:1907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/mah.php"] [unique_id "ary0ppOnWJRlb5xgkk3yygAAAJM"]
[Wed Sep 30 01:05:10.780541 2026] [security2:error] [pid 251754:tid 251961] [client 20.213.164.196:29958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/radio.php"] [unique_id "ary0ppOnWJRlb5xgkk3yywAAANA"]
[Wed Sep 30 01:05:10.845951 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.846228 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.867574 2026] [security2:error] [pid 251754:tid 251979] [client 74.225.148.80:11325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0ppOnWJRlb5xgkk3y5QAAAOI"]
[Wed Sep 30 01:05:10.913547 2026] [security2:error] [pid 251754:tid 251967] [client 20.58.177.98:3477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/dex.php"] [unique_id "ary0ppOnWJRlb5xgkk3y5gAAANY"]
[Wed Sep 30 01:05:10.931052 2026] [security2:error] [pid 251754:tid 251977] [client 64.227.188.205:49908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0ppOnWJRlb5xgkk3y6AAAAOA"]
[Wed Sep 30 01:05:10.937205 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:10.937462 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:10.958121 2026] [security2:error] [pid 251754:tid 251901] [client 130.131.227.119:36403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/mini.php"] [unique_id "ary0ppOnWJRlb5xgkk3y7AAAAJQ"]
[Wed Sep 30 01:05:11.030185 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.030447 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.046638 2026] [security2:error] [pid 251754:tid 251990] [client 4.240.25.22:41726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/133.php"] [unique_id "ary0p5OnWJRlb5xgkk3y9wAAAO0"]
[Wed Sep 30 01:05:11.054800 2026] [security2:error] [pid 251754:tid 251915] [client 52.172.226.14:40521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/13k.php"] [unique_id "ary0p5OnWJRlb5xgkk3y-AAAAKI"]
[Wed Sep 30 01:05:11.059555 2026] [security2:error] [pid 251754:tid 252009] [client 20.214.109.68:61142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws88.php"] [unique_id "ary0p5OnWJRlb5xgkk3y-QAAAQA"]
[Wed Sep 30 01:05:11.125716 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.126175 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.128814 2026] [security2:error] [pid 251754:tid 252008] [client 130.131.227.119:36371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/v.php"] [unique_id "ary0p5OnWJRlb5xgkk3zAAAAAP8"]
[Wed Sep 30 01:05:11.202156 2026] [security2:error] [pid 251754:tid 251999] [client 20.70.173.30:59537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/kir.php"] [unique_id "ary0p5OnWJRlb5xgkk3zHgAAAPY"]
[Wed Sep 30 01:05:11.211547 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.211913 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.212521 2026] [access_compat:error] [pid 251754:tid 251935] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 01:05:11.212957 2026] [access_compat:error] [pid 251754:tid 251935] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1
[Wed Sep 30 01:05:11.231296 2026] [security2:error] [pid 251754:tid 251924] [client 20.58.177.98:3506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/chosen.php"] [unique_id "ary0p5OnWJRlb5xgkk3zIgAAAKs"]
[Wed Sep 30 01:05:11.300063 2026] [security2:error] [pid 251754:tid 251918] [client 130.131.227.119:37115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ary0p5OnWJRlb5xgkk3zJwAAAKU"]
[Wed Sep 30 01:05:11.303504 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.303787 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.303821 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.71:58116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:11.304096 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.71:58116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:11.355450 2026] [security2:error] [pid 251754:tid 251978] [client 20.213.164.196:29701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0p5OnWJRlb5xgkk3zKQAAAOE"]
[Wed Sep 30 01:05:11.390972 2026] [security2:error] [pid 251754:tid 251970] [client 74.225.148.80:13345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/images.php"] [unique_id "ary0p5OnWJRlb5xgkk3zLQAAANk"]
[Wed Sep 30 01:05:11.399955 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.400367 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.484342 2026] [security2:error] [pid 251754:tid 251923] [client 130.131.227.119:64436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary0p5OnWJRlb5xgkk3zNQAAAKo"]
[Wed Sep 30 01:05:11.488337 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.488666 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.558902 2026] [security2:error] [pid 251754:tid 251889] [client 20.58.177.98:3417] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "geyserjz.com"] [uri "/1.php"] [unique_id "ary0p5OnWJRlb5xgkk3zTQAAAIg"]
[Wed Sep 30 01:05:11.559013 2026] [security2:error] [pid 251754:tid 251889] [client 20.58.177.98:3417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/1.php"] [unique_id "ary0p5OnWJRlb5xgkk3zTQAAAIg"]
[Wed Sep 30 01:05:11.576620 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.576888 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.606684 2026] [security2:error] [pid 251754:tid 252003] [client 49.205.105.16:13954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0p5OnWJRlb5xgkk3zVQAAAPo"]
[Wed Sep 30 01:05:11.606776 2026] [security2:error] [pid 251754:tid 252003] [client 49.205.105.16:13954] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0p5OnWJRlb5xgkk3zVQAAAPo"]
[Wed Sep 30 01:05:11.631781 2026] [security2:error] [pid 251754:tid 251990] [client 64.227.188.205:49920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0p5OnWJRlb5xgkk3zWAAAAO0"]
[Wed Sep 30 01:05:11.646131 2026] [security2:error] [pid 251754:tid 251945] [client 130.131.227.119:37081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-includes/Text/index.php"] [unique_id "ary0p5OnWJRlb5xgkk3zWgAAAMA"]
[Wed Sep 30 01:05:11.667084 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.667355 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.687081 2026] [security2:error] [pid 251754:tid 251912] [client 13.70.4.78:60708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wmore1.php"] [unique_id "ary0p5OnWJRlb5xgkk3zYAAAAJ8"]
[Wed Sep 30 01:05:11.696441 2026] [security2:error] [pid 251754:tid 251978] [client 52.172.226.14:40535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/up.php"] [unique_id "ary0p5OnWJRlb5xgkk3zYQAAAOE"]
[Wed Sep 30 01:05:11.730718 2026] [access_compat:error] [pid 251754:tid 251948] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 01:05:11.731148 2026] [access_compat:error] [pid 251754:tid 251948] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0
[Wed Sep 30 01:05:11.748019 2026] [security2:error] [pid 251754:tid 251894] [client 20.251.39.228:13471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/myfilexxx.php"] [unique_id "ary0p5OnWJRlb5xgkk3zZgAAAI0"]
[Wed Sep 30 01:05:11.759619 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.759921 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.801171 2026] [security2:error] [pid 251754:tid 252007] [client 20.28.180.172:62373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/domains.php"] [unique_id "ary0p5OnWJRlb5xgkk3zaQAAAP4"]
[Wed Sep 30 01:05:11.811746 2026] [security2:error] [pid 251754:tid 251980] [client 4.196.65.241:2090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/mar.php"] [unique_id "ary0p5OnWJRlb5xgkk3zbgAAAOM"]
[Wed Sep 30 01:05:11.818179 2026] [security2:error] [pid 251754:tid 252010] [client 20.214.109.68:60558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws86.php"] [unique_id "ary0p5OnWJRlb5xgkk3zcQAAAQE"]
[Wed Sep 30 01:05:11.851532 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.851802 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.893421 2026] [security2:error] [pid 251754:tid 251960] [client 20.58.177.98:3504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/radio.php"] [unique_id "ary0p5OnWJRlb5xgkk3zhQAAAM8"]
[Wed Sep 30 01:05:11.899367 2026] [security2:error] [pid 251754:tid 251964] [client 74.225.148.80:11305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/media.php"] [unique_id "ary0p5OnWJRlb5xgkk3zhwAAANM"]
[Wed Sep 30 01:05:11.919189 2026] [security2:error] [pid 251754:tid 251935] [remote 168.100.149.108:39994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0p5OnWJRlb5xgkk3zawABAGU"]
[Wed Sep 30 01:05:11.939159 2026] [security2:error] [pid 251754:tid 251990] [client 20.213.164.196:29728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/k.php"] [unique_id "ary0p5OnWJRlb5xgkk3zjQAAAO0"]
[Wed Sep 30 01:05:11.944714 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:11.944994 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:11.988842 2026] [security2:error] [pid 251754:tid 251895] [client 130.131.227.119:28277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/wp-index.php"] [unique_id "ary0p5OnWJRlb5xgkk3zkAAAAI4"]
[Wed Sep 30 01:05:11.995412 2026] [security2:error] [pid 251754:tid 251945] [client 20.194.30.107:17393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/f35.php"] [unique_id "ary0p5OnWJRlb5xgkk3zkQAAAMA"]
[Wed Sep 30 01:05:12.038012 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.038310 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:58613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.044519 2026] [security2:error] [pid 251754:tid 251931] [client 20.194.30.107:32713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0qJOnWJRlb5xgkk3zlwAAALI"]
[Wed Sep 30 01:05:12.098430 2026] [security2:error] [pid 251754:tid 251971] [client 20.198.74.230:23880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/dsfsa.php"] [unique_id "ary0qJOnWJRlb5xgkk3znAAAANo"]
[Wed Sep 30 01:05:12.125120 2026] [security2:error] [pid 251754:tid 251981] [client 13.70.4.78:60712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/function.php"] [unique_id "ary0qJOnWJRlb5xgkk3zoAAAAOQ"]
[Wed Sep 30 01:05:12.126910 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.127275 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.165614 2026] [security2:error] [pid 251754:tid 252009] [client 130.131.227.119:9202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/ww2.php"] [unique_id "ary0qJOnWJRlb5xgkk3zogAAAQA"]
[Wed Sep 30 01:05:12.170253 2026] [security2:error] [pid 251754:tid 251973] [client 52.172.226.14:40552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/0x1949.php"] [unique_id "ary0qJOnWJRlb5xgkk3zpAAAANw"]
[Wed Sep 30 01:05:12.179379 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 01:05:12.179645 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4
[Wed Sep 30 01:05:12.195391 2026] [security2:error] [pid 251754:tid 251974] [client 43.245.12.75:12732] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "302"] [hostname "crishuffman.com"] [uri "/xmlrpc.php"] [unique_id "ary0qJOnWJRlb5xgkk3znQAAAN0"]
[Wed Sep 30 01:05:12.210890 2026] [security2:error] [pid 251754:tid 251977] [client 20.58.177.98:3635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/blacks.php"] [unique_id "ary0qJOnWJRlb5xgkk3zqgAAAOA"]
[Wed Sep 30 01:05:12.213587 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.213872 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.305739 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.306028 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.335701 2026] [security2:error] [pid 251754:tid 251998] [client 64.227.188.205:49934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0qJOnWJRlb5xgkk3ztQAAAPU"]
[Wed Sep 30 01:05:12.343470 2026] [security2:error] [pid 251754:tid 251979] [client 130.131.227.119:36393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/7logs.php"] [unique_id "ary0qJOnWJRlb5xgkk3ztwAAAOI"]
[Wed Sep 30 01:05:12.372483 2026] [security2:error] [pid 251754:tid 251902] [client 20.251.39.228:16734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/karma_144a.php"] [unique_id "ary0qJOnWJRlb5xgkk3zugAAAJU"]
[Wed Sep 30 01:05:12.377685 2026] [security2:error] [pid 251754:tid 251985] [client 20.213.164.196:29752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/133.php"] [unique_id "ary0qJOnWJRlb5xgkk3zvAAAAOg"]
[Wed Sep 30 01:05:12.395531 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.395788 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.451412 2026] [security2:error] [pid 251754:tid 251940] [client 216.73.216.46:58613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0qJOnWJRlb5xgkk3z0QAAALs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMC9kcml2ZXIvY3B1My9kcml2ZXIvY3B1MTc%3D
[Wed Sep 30 01:05:12.486617 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.486920 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.506697 2026] [security2:error] [pid 251754:tid 251945] [client 130.131.227.119:1875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/ac.php"] [unique_id "ary0qJOnWJRlb5xgkk3z3AAAAMA"]
[Wed Sep 30 01:05:12.529473 2026] [security2:error] [pid 251754:tid 251971] [client 74.225.148.80:13314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/mac.php"] [unique_id "ary0qJOnWJRlb5xgkk3z4AAAANo"]
[Wed Sep 30 01:05:12.548116 2026] [security2:error] [pid 251754:tid 251923] [client 104.208.65.139:19354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wander.php"] [unique_id "ary0qJOnWJRlb5xgkk3z4gAAAKo"]
[Wed Sep 30 01:05:12.548400 2026] [security2:error] [pid 251754:tid 252009] [client 20.58.177.98:3619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/alfa.php"] [unique_id "ary0qJOnWJRlb5xgkk3z4wAAAQA"]
[Wed Sep 30 01:05:12.578715 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.579006 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.631391 2026] [security2:error] [pid 251754:tid 251977] [client 52.172.226.14:3883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/cong.php"] [unique_id "ary0qJOnWJRlb5xgkk30AwAAAOA"]
[Wed Sep 30 01:05:12.661119 2026] [security2:error] [pid 251754:tid 251963] [client 130.131.227.119:36388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/ctex1.php"] [unique_id "ary0qJOnWJRlb5xgkk30CgAAANI"]
[Wed Sep 30 01:05:12.673626 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.674019 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:05:12.674074 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.674435 2026] [access_compat:error] [pid 251754:tid 251960] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:05:12.745540 2026] [security2:error] [pid 251754:tid 252003] [client 13.70.4.78:60680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ab.php"] [unique_id "ary0qJOnWJRlb5xgkk30EAAAAPo"]
[Wed Sep 30 01:05:12.758581 2026] [security2:error] [pid 251754:tid 251994] [client 43.227.131.37:5890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0qJOnWJRlb5xgkk30EwAAAPE"]
[Wed Sep 30 01:05:12.758700 2026] [security2:error] [pid 251754:tid 251994] [client 43.227.131.37:5890] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0qJOnWJRlb5xgkk30EwAAAPE"]
[Wed Sep 30 01:05:12.760118 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.760409 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.765536 2026] [security2:error] [pid 251754:tid 251908] [client 20.213.164.196:29736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wsd.php"] [unique_id "ary0qJOnWJRlb5xgkk30FAAAAJs"]
[Wed Sep 30 01:05:12.788495 2026] [security2:error] [pid 251754:tid 251899] [client 20.70.173.30:47350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/pfm.php"] [unique_id "ary0qJOnWJRlb5xgkk30GQAAAJI"]
[Wed Sep 30 01:05:12.858211 2026] [security2:error] [pid 251754:tid 251917] [client 106.214.2.47:16190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0qJOnWJRlb5xgkk30GwAAAKQ"]
[Wed Sep 30 01:05:12.863402 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.863679 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:12.866588 2026] [security2:error] [pid 251754:tid 252013] [client 130.131.227.119:36372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/defaults.php"] [unique_id "ary0qJOnWJRlb5xgkk30HQAAAQQ"]
[Wed Sep 30 01:05:12.872943 2026] [security2:error] [pid 251754:tid 251990] [client 20.58.177.98:3596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0qJOnWJRlb5xgkk30HgAAAO0"]
[Wed Sep 30 01:05:12.879136 2026] [security2:error] [pid 251754:tid 251884] [remote 74.7.227.56:43702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0qJOnWJRlb5xgkk30HwAA2H8"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:05:12.942536 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:12.942832 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.000162 2026] [security2:error] [pid 251754:tid 252010] [client 20.251.39.228:43695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/3586%20b64.php"] [unique_id "ary0qJOnWJRlb5xgkk30JAAAAQE"]
[Wed Sep 30 01:05:13.006043 2026] [core:error] [pid 251754:tid 251907] [client 100.29.7.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://mail.itware.org/
[Wed Sep 30 01:05:13.006057 2026] [core:error] [pid 251754:tid 251907] [client 100.29.7.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://mail.itware.org/
[Wed Sep 30 01:05:13.026413 2026] [security2:error] [pid 251754:tid 251900] [client 64.227.188.205:49938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0qZOnWJRlb5xgkk30KAAAAJM"]
[Wed Sep 30 01:05:13.027594 2026] [security2:error] [pid 251754:tid 251903] [client 130.131.227.119:9208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/domains.php"] [unique_id "ary0qZOnWJRlb5xgkk30KQAAAJY"]
[Wed Sep 30 01:05:13.035045 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.035310 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.069112 2026] [security2:error] [pid 251754:tid 251941] [client 13.70.4.78:60703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/css.php"] [unique_id "ary0qZOnWJRlb5xgkk30LAAAALw"]
[Wed Sep 30 01:05:13.124964 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.125380 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.161204 2026] [security2:error] [pid 251754:tid 251896] [client 52.172.226.14:3938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/bs1.php"] [unique_id "ary0qZOnWJRlb5xgkk30OgAAAI8"]
[Wed Sep 30 01:05:13.163863 2026] [access_compat:error] [pid 251754:tid 251886] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:05:13.164161 2026] [access_compat:error] [pid 251754:tid 251886] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:05:13.178197 2026] [security2:error] [pid 251754:tid 251904] [client 130.131.227.119:37063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/dropdown.php"] [unique_id "ary0qZOnWJRlb5xgkk30PAAAAJc"]
[Wed Sep 30 01:05:13.180919 2026] [security2:error] [pid 251754:tid 251897] [client 20.213.164.196:29949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/BDKR28WP.php"] [unique_id "ary0qZOnWJRlb5xgkk30PQAAAJA"]
[Wed Sep 30 01:05:13.184839 2026] [security2:error] [pid 251754:tid 251966] [client 74.225.148.80:11314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ops.php"] [unique_id "ary0qZOnWJRlb5xgkk30PgAAANU"]
[Wed Sep 30 01:05:13.193707 2026] [security2:error] [pid 251754:tid 251892] [client 20.58.177.98:3672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/b8.php"] [unique_id "ary0qZOnWJRlb5xgkk30PwAAAIs"]
[Wed Sep 30 01:05:13.217010 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.217269 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:32525] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.217695 2026] [security2:error] [pid 251754:tid 251939] [client 20.214.109.68:9469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/vx.php"] [unique_id "ary0qZOnWJRlb5xgkk30QQAAALo"]
[Wed Sep 30 01:05:13.280632 2026] [security2:error] [pid 251754:tid 251933] [client 182.69.182.151:22933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30RAAAALQ"]
[Wed Sep 30 01:05:13.281248 2026] [security2:error] [pid 251754:tid 251933] [client 182.69.182.151:22933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30RAAAALQ"]
[Wed Sep 30 01:05:13.342816 2026] [security2:error] [pid 251754:tid 251940] [client 130.131.227.119:37097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/files/index.php"] [unique_id "ary0qZOnWJRlb5xgkk30RgAAALs"]
[Wed Sep 30 01:05:13.360845 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:43402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.361130 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:43402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.398931 2026] [security2:error] [pid 251754:tid 251962] [client 20.251.39.228:16834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws.php"] [unique_id "ary0qZOnWJRlb5xgkk30SAAAANE"]
[Wed Sep 30 01:05:13.406627 2026] [security2:error] [pid 251754:tid 251959] [client 13.70.4.78:60719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0qZOnWJRlb5xgkk30SQAAAM4"]
[Wed Sep 30 01:05:13.415003 2026] [security2:error] [pid 251754:tid 251888] [client 4.240.25.22:8406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp_blog_footer.php"] [unique_id "ary0qZOnWJRlb5xgkk30SwAAAIc"]
[Wed Sep 30 01:05:13.451847 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.452118 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.465908 2026] [security2:error] [pid 251754:tid 252005] [client 223.181.30.165:5878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30TQAAAPw"]
[Wed Sep 30 01:05:13.466049 2026] [security2:error] [pid 251754:tid 252005] [client 223.181.30.165:5878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30TQAAAPw"]
[Wed Sep 30 01:05:13.510734 2026] [security2:error] [pid 251754:tid 251937] [client 20.58.177.98:3598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/xex.php"] [unique_id "ary0qZOnWJRlb5xgkk30UwAAALg"]
[Wed Sep 30 01:05:13.511016 2026] [security2:error] [pid 251754:tid 251915] [client 130.131.227.119:28247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.adbadvertising.com"] [uri "/flower.php"] [unique_id "ary0qZOnWJRlb5xgkk30VAAAAKI"]
[Wed Sep 30 01:05:13.535050 2026] [security2:error] [pid 251754:tid 251889] [client 20.213.164.196:29729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wmore1.php"] [unique_id "ary0qZOnWJRlb5xgkk30VQAAAIg"]
[Wed Sep 30 01:05:13.544102 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.544364 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.582098 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:43402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.582360 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:43402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.634353 2026] [security2:error] [pid 251754:tid 251935] [client 216.73.216.46:32525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0qZOnWJRlb5xgkk30ZAAAALY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MS9ub2RlMC9jcHUxMi90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:05:13.640738 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0qZOnWJRlb5xgkk30aAAAxwU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=60340
[Wed Sep 30 01:05:13.641061 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0qZOnWJRlb5xgkk30aAAAxwU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=60340
[Wed Sep 30 01:05:13.674266 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.674685 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.683795 2026] [security2:error] [pid 251754:tid 252000] [client 52.172.226.14:3918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary0qZOnWJRlb5xgkk30agAAAPc"]
[Wed Sep 30 01:05:13.711560 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 01:05:13.711989 2026] [access_compat:error] [pid 251754:tid 252013] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2
[Wed Sep 30 01:05:13.737669 2026] [security2:error] [pid 251754:tid 251947] [client 64.227.188.205:49942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0qZOnWJRlb5xgkk30hAAAAMI"]
[Wed Sep 30 01:05:13.752101 2026] [security2:error] [pid 251754:tid 251927] [client 49.43.163.212:49252] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30hQAAAK4"]
[Wed Sep 30 01:05:13.752242 2026] [security2:error] [pid 251754:tid 251927] [client 49.43.163.212:49252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0qZOnWJRlb5xgkk30hQAAAK4"]
[Wed Sep 30 01:05:13.755470 2026] [security2:error] [pid 251754:tid 251890] [client 20.28.180.172:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/144.php"] [unique_id "ary0qZOnWJRlb5xgkk30hgAAAIk"]
[Wed Sep 30 01:05:13.756033 2026] [security2:error] [pid 251754:tid 252005] [client 74.225.148.80:13336] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.thestandchurch.com"] [uri "/1.php"] [unique_id "ary0qZOnWJRlb5xgkk30hwAAAPw"]
[Wed Sep 30 01:05:13.756103 2026] [security2:error] [pid 251754:tid 252005] [client 74.225.148.80:13336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/1.php"] [unique_id "ary0qZOnWJRlb5xgkk30hwAAAPw"]
[Wed Sep 30 01:05:13.766059 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.766343 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.790549 2026] [security2:error] [pid 251754:tid 252010] [client 20.198.74.230:24153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wdone1.php"] [unique_id "ary0qZOnWJRlb5xgkk30iwAAAQE"]
[Wed Sep 30 01:05:13.802572 2026] [security2:error] [pid 251754:tid 251889] [client 13.70.4.78:45146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0qZOnWJRlb5xgkk30jQAAAIg"]
[Wed Sep 30 01:05:13.845281 2026] [security2:error] [pid 251754:tid 251949] [client 20.58.177.98:3433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/ass.php"] [unique_id "ary0qZOnWJRlb5xgkk30kwAAAMQ"]
[Wed Sep 30 01:05:13.856836 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.857122 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.899709 2026] [security2:error] [pid 251754:tid 251892] [remote 168.100.149.58:57926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0qZOnWJRlb5xgkk30iQAAhy8"]
[Wed Sep 30 01:05:13.953900 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:13.954353 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:13.985086 2026] [security2:error] [pid 251754:tid 251970] [client 20.213.164.196:29713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/177.php"] [unique_id "ary0qZOnWJRlb5xgkk30sQAAANk"]
[Wed Sep 30 01:05:14.013572 2026] [security2:error] [pid 251754:tid 251956] [client 45.138.12.32:26062] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odf.ujo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0qpOnWJRlb5xgkk30twAAAMs"]
[Wed Sep 30 01:05:14.038502 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.038776 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.052791 2026] [security2:error] [pid 251754:tid 251890] [client 20.251.39.228:16888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bmi.php"] [unique_id "ary0qpOnWJRlb5xgkk30wgAAAIk"]
[Wed Sep 30 01:05:14.136203 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.136672 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.141499 2026] [security2:error] [pid 251754:tid 251900] [client 13.70.4.78:45163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-links-opml.php"] [unique_id "ary0qpOnWJRlb5xgkk300wAAAJM"]
[Wed Sep 30 01:05:14.158722 2026] [security2:error] [pid 251754:tid 251961] [client 20.58.177.98:3606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wsd.php"] [unique_id "ary0qpOnWJRlb5xgkk301wAAANA"]
[Wed Sep 30 01:05:14.183298 2026] [security2:error] [pid 251754:tid 251899] [client 52.172.226.14:40562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/termps.php"] [unique_id "ary0qpOnWJRlb5xgkk303gAAAJI"]
[Wed Sep 30 01:05:14.208998 2026] [access_compat:error] [pid 251754:tid 251986] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 01:05:14.209441 2026] [access_compat:error] [pid 251754:tid 251986] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1
[Wed Sep 30 01:05:14.215373 2026] [security2:error] [pid 251754:tid 251917] [client 74.225.148.80:13344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/aaa.php"] [unique_id "ary0qpOnWJRlb5xgkk304gAAAKQ"]
[Wed Sep 30 01:05:14.227317 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.227769 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.315789 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.316079 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.329226 2026] [security2:error] [pid 251754:tid 251825] [remote 57.141.14.86:33276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/comments/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "ary0qpOnWJRlb5xgkk305QAAnUQ"]
[Wed Sep 30 01:05:14.381044 2026] [security2:error] [pid 251754:tid 251928] [client 20.194.30.107:1517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/media.php"] [unique_id "ary0qpOnWJRlb5xgkk30_QAAAK8"]
[Wed Sep 30 01:05:14.405509 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.405932 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.474833 2026] [security2:error] [pid 251754:tid 252009] [client 20.214.109.68:61133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/dass.php"] [unique_id "ary0qpOnWJRlb5xgkk31DgAAAQA"]
[Wed Sep 30 01:05:14.477608 2026] [security2:error] [pid 251754:tid 251935] [client 20.251.39.228:25578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bypltspd.php"] [unique_id "ary0qpOnWJRlb5xgkk31DwAAALY"]
[Wed Sep 30 01:05:14.478953 2026] [security2:error] [pid 251754:tid 251999] [client 20.58.177.98:3505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/BDKR28WP.php"] [unique_id "ary0qpOnWJRlb5xgkk31EAAAAPY"]
[Wed Sep 30 01:05:14.495376 2026] [security2:error] [pid 251754:tid 251904] [client 37.41.16.35:57594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0qpOnWJRlb5xgkk31EgAAAJc"]
[Wed Sep 30 01:05:14.495474 2026] [security2:error] [pid 251754:tid 251904] [client 37.41.16.35:57594] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0qpOnWJRlb5xgkk31EgAAAJc"]
[Wed Sep 30 01:05:14.500094 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.500382 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.505752 2026] [security2:error] [pid 251754:tid 252012] [client 20.213.164.196:29974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/ccc.php"] [unique_id "ary0qpOnWJRlb5xgkk31FAAAAQM"]
[Wed Sep 30 01:05:14.517101 2026] [security2:error] [pid 251754:tid 251945] [client 64.227.188.205:49958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0qpOnWJRlb5xgkk31GQAAAMA"]
[Wed Sep 30 01:05:14.561708 2026] [autoindex:error] [pid 251754:tid 251932] [client 3.151.194.164:40761] AH01276: Cannot serve directory /home4/accessar/public_html/easytrack/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:14.588326 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.588597 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.595432 2026] [security2:error] [pid 251754:tid 251847] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0qpOnWJRlb5xgkk31RwAAxFo"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=e72c6ed50c68b788dd4ca812b14289f0
[Wed Sep 30 01:05:14.595457 2026] [security2:error] [pid 251754:tid 251847] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0qpOnWJRlb5xgkk31RwAAxFo"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=e72c6ed50c68b788dd4ca812b14289f0
[Wed Sep 30 01:05:14.617110 2026] [security2:error] [pid 251754:tid 252007] [client 223.235.102.107:16943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0qpOnWJRlb5xgkk31VgAAAP4"]
[Wed Sep 30 01:05:14.617794 2026] [security2:error] [pid 251754:tid 252007] [client 223.235.102.107:16943] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0qpOnWJRlb5xgkk31VgAAAP4"]
[Wed Sep 30 01:05:14.621396 2026] [security2:error] [pid 251754:tid 251962] [client 13.70.4.78:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/hp.php"] [unique_id "ary0qpOnWJRlb5xgkk31WQAAANE"]
[Wed Sep 30 01:05:14.627041 2026] [core:error] [pid 251754:tid 251978] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.627062 2026] [core:error] [pid 251754:tid 251978] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.630329 2026] [core:error] [pid 251754:tid 251963] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.630347 2026] [core:error] [pid 251754:tid 251963] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.633420 2026] [core:error] [pid 251754:tid 251945] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.633438 2026] [core:error] [pid 251754:tid 251945] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.639263 2026] [autoindex:error] [pid 251754:tid 251956] [client 3.151.194.164:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/taetae_app/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:14.669013 2026] [security2:error] [pid 251754:tid 251902] [client 52.172.226.14:40533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/brand.php"] [unique_id "ary0qpOnWJRlb5xgkk31ZgAAAJU"]
[Wed Sep 30 01:05:14.677055 2026] [security2:error] [pid 251754:tid 251941] [client 20.70.173.30:60002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/term.php"] [unique_id "ary0qpOnWJRlb5xgkk31awAAALw"]
[Wed Sep 30 01:05:14.678541 2026] [core:error] [pid 251754:tid 251912] [client 74.7.230.49:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.678557 2026] [core:error] [pid 251754:tid 251912] [client 74.7.230.49:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:14.678794 2026] [security2:error] [pid 251754:tid 251912] [client 74.7.230.49:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcalendars.tywallace.com"] [uri "/___proxy_subdomain_cpcalendars/index.php"] [unique_id "ary0qpOnWJRlb5xgkk31aQAAAJ8"]
[Wed Sep 30 01:05:14.682244 2026] [security2:error] [pid 251754:tid 252009] [client 74.7.230.49:37454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcalendars.tywallace.com"] [uri "/___proxy_subdomain_cpcalendars/robots.txt"] [unique_id "ary0qpOnWJRlb5xgkk31YgABAEk"]
[Wed Sep 30 01:05:14.682817 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.683258 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:38220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.711143 2026] [security2:error] [pid 251754:tid 251900] [client 74.225.148.80:11280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/chosen.php"] [unique_id "ary0qpOnWJRlb5xgkk31fwAAAJM"]
[Wed Sep 30 01:05:14.715175 2026] [autoindex:error] [pid 251754:tid 251991] [client 3.151.194.164:0] AH01276: Cannot serve directory /home3/magiaveg/public_html/carlynnmazon.com/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:14.740844 2026] [access_compat:error] [pid 251754:tid 251955] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:14.741268 2026] [access_compat:error] [pid 251754:tid 251955] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:14.774681 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.775070 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.810794 2026] [security2:error] [pid 251754:tid 251935] [client 20.58.177.98:3591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wmore1.php"] [unique_id "ary0qpOnWJRlb5xgkk31jwAAALY"]
[Wed Sep 30 01:05:14.818390 2026] [security2:error] [pid 251754:tid 251954] [client 20.251.39.228:35570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/shell.php"] [unique_id "ary0qpOnWJRlb5xgkk31kQAAAMk"]
[Wed Sep 30 01:05:14.864518 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.864987 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.879985 2026] [security2:error] [pid 251754:tid 251888] [client 20.213.164.196:29733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/0xD.php"] [unique_id "ary0qpOnWJRlb5xgkk31mQAAAIc"]
[Wed Sep 30 01:05:14.953256 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:14.953557 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:14.990532 2026] [mime:warn] [pid 251754:tid 251987] AH01602: Cannot get media parameter.
[Wed Sep 30 01:05:15.019947 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:60717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/mo.php"] [unique_id "ary0q5OnWJRlb5xgkk31sAAAAJo"]
[Wed Sep 30 01:05:15.045294 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.045624 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.096242 2026] [security2:error] [pid 251754:tid 251947] [client 216.73.216.46:38220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0q5OnWJRlb5xgkk31vAAAAMI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXIvY3B1Nw%3D%3D
[Wed Sep 30 01:05:15.118101 2026] [security2:error] [pid 251754:tid 251984] [client 20.214.109.68:62404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/s.php"] [unique_id "ary0q5OnWJRlb5xgkk31wgAAAOc"]
[Wed Sep 30 01:05:15.134747 2026] [security2:error] [pid 251754:tid 251973] [client 20.58.177.98:3500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/z60.php"] [unique_id "ary0q5OnWJRlb5xgkk31xQAAANw"]
[Wed Sep 30 01:05:15.147379 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.147687 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.147941 2026] [security2:error] [pid 251754:tid 252012] [client 52.172.226.14:40527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/cong.php"] [unique_id "ary0q5OnWJRlb5xgkk31xwAAAQM"]
[Wed Sep 30 01:05:15.209977 2026] [security2:error] [pid 251754:tid 251896] [client 64.227.188.205:49966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0q5OnWJRlb5xgkk31yQAAAI8"]
[Wed Sep 30 01:05:15.217852 2026] [access_compat:error] [pid 251754:tid 251993] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 01:05:15.218271 2026] [access_compat:error] [pid 251754:tid 251993] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2
[Wed Sep 30 01:05:15.239494 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.239799 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.241204 2026] [security2:error] [pid 251754:tid 251927] [client 20.251.39.228:25587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-links-opml.php"] [unique_id "ary0q5OnWJRlb5xgkk31zwAAAK4"]
[Wed Sep 30 01:05:15.253491 2026] [security2:error] [pid 251754:tid 251960] [client 20.70.173.30:3263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/abcd.php"] [unique_id "ary0q5OnWJRlb5xgkk310AAAAM8"]
[Wed Sep 30 01:05:15.333795 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.334235 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.338106 2026] [security2:error] [pid 251754:tid 251972] [client 36.36.91.126:20547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.91.36.36.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "silverlakess.com"] [uri "/blog/86cyg.php"] [unique_id "ary0q5OnWJRlb5xgkk310gAAANs"], referer: https://silverlakess.com/blog/86cyg.php?id=richmond-times-dispatch-login-d23bac
[Wed Sep 30 01:05:15.374565 2026] [security2:error] [pid 251754:tid 251893] [client 43.104.4.200:10004] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary0q5OnWJRlb5xgkk314gAAAIw"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:05:15.387499 2026] [security2:error] [pid 251754:tid 251991] [client 13.70.4.78:45140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/ivmirgut.php"] [unique_id "ary0q5OnWJRlb5xgkk314wAAAO4"]
[Wed Sep 30 01:05:15.418361 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.418651 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.450357 2026] [security2:error] [pid 251754:tid 251959] [client 20.58.177.98:3495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/24.php"] [unique_id "ary0q5OnWJRlb5xgkk317wAAAM4"]
[Wed Sep 30 01:05:15.457332 2026] [security2:error] [pid 251754:tid 251905] [client 45.138.12.43:18726] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.uge.tkn.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0q5OnWJRlb5xgkk319AAAAJg"]
[Wed Sep 30 01:05:15.461669 2026] [security2:error] [pid 251754:tid 251841] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0q5OnWJRlb5xgkk319QAAtlQ"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271375
[Wed Sep 30 01:05:15.461701 2026] [security2:error] [pid 251754:tid 251841] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0q5OnWJRlb5xgkk319QAAtlQ"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271375
[Wed Sep 30 01:05:15.472670 2026] [security2:error] [pid 251754:tid 251980] [client 74.225.148.80:11308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/2P.php"] [unique_id "ary0q5OnWJRlb5xgkk319wAAAOM"]
[Wed Sep 30 01:05:15.511235 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.511496 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.561927 2026] [security2:error] [pid 251754:tid 251982] [client 20.213.164.196:30005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/sallu.php"] [unique_id "ary0q5OnWJRlb5xgkk32AwAAAOU"]
[Wed Sep 30 01:05:15.603519 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.603830 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.631619 2026] [security2:error] [pid 251754:tid 251914] [client 20.251.39.228:16725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary0q5OnWJRlb5xgkk32DgAAAKE"]
[Wed Sep 30 01:05:15.638555 2026] [security2:error] [pid 251754:tid 252001] [client 4.196.65.241:2055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/abde5e1996index.php"] [unique_id "ary0q5OnWJRlb5xgkk32DwAAAPg"]
[Wed Sep 30 01:05:15.685856 2026] [access_compat:error] [pid 251754:tid 251930] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:15.686127 2026] [access_compat:error] [pid 251754:tid 251930] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:15.692544 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.692832 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.730322 2026] [security2:error] [pid 251754:tid 251984] [client 52.172.226.14:3880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/atomlib.php"] [unique_id "ary0q5OnWJRlb5xgkk32JgAAAOc"]
[Wed Sep 30 01:05:15.733020 2026] [ssl:error] [pid 251754:tid 251933] [client 3.151.194.164:56317] AH02032: Hostname madagascar-america-foundation.org provided via SNI and hostname www.madagascar-foundation.org provided via HTTP have no compatible SSL setup for policy 'secure', referer: http://www.madagascar-foundation.org/
[Wed Sep 30 01:05:15.745981 2026] [security2:error] [pid 251754:tid 251996] [client 103.241.204.139:58350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0q5OnWJRlb5xgkk32KAAAAPM"]
[Wed Sep 30 01:05:15.746107 2026] [security2:error] [pid 251754:tid 251996] [client 103.241.204.139:58350] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0q5OnWJRlb5xgkk32KAAAAPM"]
[Wed Sep 30 01:05:15.767229 2026] [security2:error] [pid 251754:tid 251954] [client 20.58.177.98:3612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/xxw.php"] [unique_id "ary0q5OnWJRlb5xgkk32LgAAAMk"]
[Wed Sep 30 01:05:15.785445 2026] [security2:error] [pid 251754:tid 251904] [client 45.138.12.40:64992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thetreespirit.com"] [uri "/wp-links-opml.php"] [unique_id "ary0q5OnWJRlb5xgkk32NwAAAJc"]
[Wed Sep 30 01:05:15.786429 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.786744 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.791867 2026] [security2:error] [pid 251754:tid 251960] [client 13.70.4.78:60735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/baba.php"] [unique_id "ary0q5OnWJRlb5xgkk32OgAAAM8"]
[Wed Sep 30 01:05:15.808043 2026] [security2:error] [pid 251754:tid 251928] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0q5OnWJRlb5xgkk32OwAAAK8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:15.849079 2026] [security2:error] [pid 251754:tid 251963] [client 20.28.180.172:62398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/asd.php"] [unique_id "ary0q5OnWJRlb5xgkk32PgAAANI"]
[Wed Sep 30 01:05:15.867667 2026] [security2:error] [pid 251754:tid 252010] [client 20.214.109.68:61169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/kj.php"] [unique_id "ary0q5OnWJRlb5xgkk32QwAAAQE"]
[Wed Sep 30 01:05:15.877857 2026] [security2:error] [pid 251754:tid 251915] [remote 168.100.149.40:52030] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0q5OnWJRlb5xgkk32MAAA2lw"]
[Wed Sep 30 01:05:15.877996 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.878400 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.902736 2026] [security2:error] [pid 251754:tid 251941] [client 103.159.192.142:55261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0q5OnWJRlb5xgkk32RgAAALw"]
[Wed Sep 30 01:05:15.902875 2026] [security2:error] [pid 251754:tid 251941] [client 103.159.192.142:55261] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0q5OnWJRlb5xgkk32RgAAALw"]
[Wed Sep 30 01:05:15.915412 2026] [security2:error] [pid 251754:tid 251991] [client 64.227.188.205:49976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0q5OnWJRlb5xgkk32SgAAAO4"]
[Wed Sep 30 01:05:15.943237 2026] [security2:error] [pid 251754:tid 251912] [client 43.104.4.200:10004] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary0q5OnWJRlb5xgkk32TQAAAJ8"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:05:15.959025 2026] [security2:error] [pid 251754:tid 251893] [client 20.251.39.228:13465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws82.php"] [unique_id "ary0q5OnWJRlb5xgkk32TgAAAIw"]
[Wed Sep 30 01:05:15.960622 2026] [security2:error] [pid 251754:tid 251898] [client 4.240.25.22:20291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/red.php"] [unique_id "ary0q5OnWJRlb5xgkk32UAAAAJE"]
[Wed Sep 30 01:05:15.971108 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:15.971543 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:15.979612 2026] [security2:error] [pid 251754:tid 252007] [client 74.225.148.80:11294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/min.php"] [unique_id "ary0q5OnWJRlb5xgkk32UQAAAP4"]
[Wed Sep 30 01:05:16.057445 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.057720 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.075518 2026] [lsapi:error] [pid 251754:tid 251919] [client 3.151.194.164:0] [host www.dev.naturistavanessa.com] Backend fatal error: PHP Fatal error:  Uncaught PDOException: SQLSTATE[HY000] [1045] Access denied for user 'geyserjz_devnaturista'@'localhost' (using password: YES) in /home4/geyserjz/public_html/NatusitaStoreDev/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnection.php:39\nStack trace:\n#0 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnection.php(39): PDO->__construct('mysql:host=127....', 'geyserjz_devnat...', 'Dn+T=0PcI&;]o[D...', Array)\n#1 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connectors/Connector.php(67): Doctrine\\DBAL\\Driver\\PDOConnection->__construct('mysql:host=127....', 'geyserjz_devnat...', 'Dn+T=0PcI&;]o[D...', Array)\n#2 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connectors/Connector.php(46): Illuminate\\Database\\Connectors\\Connector->createPdoConnection('mysql:host=127....', 'geyserjz_devnat...', 'Dn+T=0PcI&;]o[D...', Array)\n#3 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connectors/MySqlConnector.php(24): Illuminate\\Database\\Connectors\\Connector->createConnection('mysql:host=127....', Array, Array)\n#4 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connectors/ConnectionFactory.php(184): Illuminate\\Database\\Connectors\\MySqlConnector->connect(Array)\n#5 [internal function]: Illuminate\\Database\\Connectors\\ConnectionFactory->Illuminate\\Database\\Connectors\\{closure}()\n#6 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(997): call_user_func(Object(Closure))\n#7 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(1033): Illuminate\\Database\\Connection->getPdo()\n#8 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(426): Illuminate\\Database\\Connection->getReadPdo()\n#9 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(352): Illuminate\\Database\\Connection->getPdoForSelect(true)\n#10 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(685): Illuminate\\Database\\Connection->Illuminate\\Database\\{closure}('select * from `...', Array)\n#11 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(652): Illuminate\\Database\\Connection->runQueryCallback('select * from `...', Array, Object(Closure))\n#12 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Connection.php(360): Illuminate\\Database\\Connection->run('select * from `...', Array, Object(Closure))\n#13 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Query/Builder.php(2350): Illuminate\\Database\\Connection->select('select * from `...', Array, true)\n#14 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Query/Builder.php(2338): Illuminate\\Database\\Query\\Builder->runSelect()\n#15 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Query/Builder.php(2872): Illuminate\\Database\\Query\\Builder->Illuminate\\Database\\Query\\{closure}()\n#16 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Query/Builder.php(2339): Illuminate\\Database\\Query\\Builder->onceWithColumns(Array, Object(Closure))\n#17 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Builder.php(602): Illuminate\\Database\\Query\\Builder->get(Array)\n#18 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Builder.php(586): Illuminate\\Database\\Eloquent\\Builder->getModels(Array)\n#19 /home4/geyserjz/public_html/NatusitaStoreDev/Modules/Translation/TranslationLoader.php(110): Illuminate\\Database\\Eloquent\\Builder->get()\n#20 /home4/geyserjz/public_html/NatusitaStoreDev/Modules/Translation/TranslationLoader.php(54): Modules\\Translation\\TranslationLoader->databaseTranslations('en', '*', '*')\n#21 /home4/geyserjz/public_html/NatusitaStoreDev/Modules/Translation/TranslationLoader.php(37): Modules\\Translation\\TranslationLoader->getTranslations('en', '*', '*')\n#22 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Cache/Repository.php(420): Modules\\Translation\\TranslationLoader->Modules\\Translation\\{closure}()\n#23 /home4/geyserjz/public_html/NatusitaStoreDev/Modules/Translation/TranslationLoader.php(38): Illuminate\\Cache\\Repository->rememberForever('69791d7c44f3af7...', Object(Closure))\n#24 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Translation/Translator.php(279): Modules\\Translation\\TranslationLoader->load('en', '*', '*')\n#25 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Translation/Translator.php(109): Illuminate\\Translation\\Translator->load('*', '*', 'en')\n#26 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Foundation/helpers.php(822): Illuminate\\Translation\\Translator->get('Server Error', Array, 'en')\n#27 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Foundation/helpers.php(857): trans('Server Error', Array, NULL)\n#28 /home4/geyserjz/public_html/NatusitaStoreDev/storage/framework/views/24ae17fa6cfd847f10036f15bcd721291e65f353.php(1): __('Server Error')\n#29 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(107): require('/home4/geyserjz...')\n#30 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php(108): Illuminate\\Filesystem\\Filesystem::Illuminate\\Filesystem\\{closure}()\n#31 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/View/Engines/PhpEngine.php(58): Illuminate\\Filesystem\\Filesystem->getRequire('/home4/geyserjz...', Array)\n#32 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/View/Engines/CompilerEngine.php(61): Illuminate\\View\\Engines\\PhpEngine->evaluatePath('/home4/geyserjz...', Array)\n#33 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/facade/ignition/src/Views/Engines/CompilerEngine.php(37): Illuminate\\View\\Engines\\CompilerEngine->get('/home4/geyserjz...', Array)\n#34 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/View/View.php(139): Facade\\Ignition\\Views\\Engines\\CompilerEngine->get('/home4/geyserjz...', Array)\n#35 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/View/View.php(122): Illuminate\\View\\View->getContents()\n#36 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/View/View.php(91): Illuminate\\View\\View->renderContents()\n#37 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Http/Response.php(69): Illuminate\\View\\View->render()\n#38 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Http/Response.php(35): Illuminate\\Http\\Response->setContent(Object(Illuminate\\View\\View))\n#39 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Routing/ResponseFactory.php(55): Illuminate\\Http\\Response->__construct(Object(Illuminate\\View\\View), 500, Array)\n#40 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Routing/ResponseFactory.php(85): Illuminate\\Routing\\ResponseFactory->make(Object(Illuminate\\View\\View), 500, Array)\n#41 /home4/geyserjz/public_html/NatusitaStoreDev/vendor/laravel/framework/src/Illuminate/Foundation/Exceptions/Handler.php(571): Illuminate\\Routing\\Res
[Wed Sep 30 01:05:16.084725 2026] [security2:error] [pid 251754:tid 251993] [client 20.58.177.98:3603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/bnmtp.php"] [unique_id "ary0rJOnWJRlb5xgkk32aAAAAPA"]
[Wed Sep 30 01:05:16.088369 2026] [security2:error] [pid 251754:tid 251953] [client 45.138.12.43:18772] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.umo.ieo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0rJOnWJRlb5xgkk32agAAAMg"]
[Wed Sep 30 01:05:16.149021 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.149280 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.194574 2026] [core:error] [pid 251754:tid 252013] [client 65.111.21.119:9517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:05:16.194596 2026] [core:error] [pid 251754:tid 252013] [client 65.111.21.119:9517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:05:16.197793 2026] [security2:error] [pid 251754:tid 251887] [client 52.172.226.14:3879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/product.php"] [unique_id "ary0rJOnWJRlb5xgkk32gAAAAIY"]
[Wed Sep 30 01:05:16.198716 2026] [access_compat:error] [pid 251754:tid 252004] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:16.199177 2026] [access_compat:error] [pid 251754:tid 252004] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:16.239866 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.240187 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.242455 2026] [security2:error] [pid 251754:tid 251911] [client 20.213.164.196:29996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/ops.php"] [unique_id "ary0rJOnWJRlb5xgkk32gwAAAJ4"]
[Wed Sep 30 01:05:16.329815 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.330088 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.402989 2026] [security2:error] [pid 251754:tid 251998] [client 20.58.177.98:3466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/ebkid.php"] [unique_id "ary0rJOnWJRlb5xgkk32jwAAAPU"]
[Wed Sep 30 01:05:16.410734 2026] [security2:error] [pid 251754:tid 251956] [client 20.251.39.228:33837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/new.php"] [unique_id "ary0rJOnWJRlb5xgkk32kwAAAMs"]
[Wed Sep 30 01:05:16.413762 2026] [security2:error] [pid 251754:tid 251901] [client 13.70.4.78:45142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/Components.php"] [unique_id "ary0rJOnWJRlb5xgkk32lAAAAJQ"]
[Wed Sep 30 01:05:16.420869 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.421133 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.425788 2026] [security2:error] [pid 251754:tid 252009] [client 155.190.6.18:44540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk32mQAAAQA"]
[Wed Sep 30 01:05:16.510913 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.511194 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.515557 2026] [access_compat:error] [pid 251754:tid 251900] [client 47.79.13.167:40354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:16.515844 2026] [access_compat:error] [pid 251754:tid 251900] [client 47.79.13.167:40354] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:16.605850 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.606224 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.625128 2026] [security2:error] [pid 251754:tid 251905] [client 64.227.188.205:49986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0rJOnWJRlb5xgkk32uQAAAJg"]
[Wed Sep 30 01:05:16.637175 2026] [security2:error] [pid 251754:tid 251961] [client 168.107.70.193:54711] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "odl.qjd.mybluehost.me"] [uri "/"] [unique_id "ary0rJOnWJRlb5xgkk32uAAAANA"]
[Wed Sep 30 01:05:16.651379 2026] [security2:error] [pid 251754:tid 251931] [client 20.194.30.107:34690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/reviall.php"] [unique_id "ary0rJOnWJRlb5xgkk32vwAAALI"]
[Wed Sep 30 01:05:16.658683 2026] [security2:error] [pid 251754:tid 251985] [client 20.70.173.30:39120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/w.php"] [unique_id "ary0rJOnWJRlb5xgkk32wwAAAOg"]
[Wed Sep 30 01:05:16.663452 2026] [access_compat:error] [pid 251754:tid 251921] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 01:05:16.663712 2026] [access_compat:error] [pid 251754:tid 251921] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM0
[Wed Sep 30 01:05:16.668146 2026] [security2:error] [pid 251754:tid 251983] [client 20.213.164.196:29745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/mac.php"] [unique_id "ary0rJOnWJRlb5xgkk32xAAAAOY"]
[Wed Sep 30 01:05:16.688324 2026] [security2:error] [pid 251754:tid 252002] [client 31.189.214.146:62586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk32xQAAAPk"]
[Wed Sep 30 01:05:16.688428 2026] [security2:error] [pid 251754:tid 252002] [client 31.189.214.146:62586] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk32xQAAAPk"]
[Wed Sep 30 01:05:16.693525 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.693792 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.715145 2026] [security2:error] [pid 251754:tid 252009] [client 155.190.6.18:44540] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk32mQAAAQA"]
[Wed Sep 30 01:05:16.722887 2026] [security2:error] [pid 251754:tid 251927] [client 20.58.177.98:3462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/133.php"] [unique_id "ary0rJOnWJRlb5xgkk32zwAAAK4"]
[Wed Sep 30 01:05:16.750139 2026] [security2:error] [pid 251754:tid 251902] [client 52.172.226.14:3856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/function.php"] [unique_id "ary0rJOnWJRlb5xgkk321QAAAJU"]
[Wed Sep 30 01:05:16.785051 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.785307 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.831977 2026] [security2:error] [pid 251754:tid 251922] [client 74.225.148.80:13330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/great.php"] [unique_id "ary0rJOnWJRlb5xgkk324wAAAKk"]
[Wed Sep 30 01:05:16.874748 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.875016 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.922217 2026] [security2:error] [pid 251754:tid 251910] [client 152.59.169.65:61538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk327wAAAJ0"]
[Wed Sep 30 01:05:16.922335 2026] [security2:error] [pid 251754:tid 251910] [client 152.59.169.65:61538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0rJOnWJRlb5xgkk327wAAAJ0"]
[Wed Sep 30 01:05:16.966692 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:16.966990 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:16.992409 2026] [security2:error] [pid 251754:tid 252007] [client 20.213.164.196:29986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/myglu.php"] [unique_id "ary0rJOnWJRlb5xgkk329wAAAP4"]
[Wed Sep 30 01:05:17.019411 2026] [security2:error] [pid 251754:tid 251955] [client 20.251.39.228:33831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/press.php"] [unique_id "ary0rZOnWJRlb5xgkk32-wAAAMo"]
[Wed Sep 30 01:05:17.038966 2026] [security2:error] [pid 251754:tid 251956] [client 20.58.177.98:3435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/x33.php"] [unique_id "ary0rZOnWJRlb5xgkk33AAAAAMs"]
[Wed Sep 30 01:05:17.058067 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.058362 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.150100 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.150378 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.164642 2026] [access_compat:error] [pid 251754:tid 251935] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:17.164921 2026] [access_compat:error] [pid 251754:tid 251935] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:17.166160 2026] [security2:error] [pid 251754:tid 251948] [client 13.70.4.78:45138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/aboutt.php"] [unique_id "ary0rZOnWJRlb5xgkk33GwAAAMM"]
[Wed Sep 30 01:05:17.185163 2026] [security2:error] [pid 251754:tid 252005] [client 20.214.109.68:61182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws83.php"] [unique_id "ary0rZOnWJRlb5xgkk33IQAAAPw"]
[Wed Sep 30 01:05:17.239222 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.239495 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.254382 2026] [security2:error] [pid 251754:tid 251973] [client 52.172.226.14:40620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/0x.php"] [unique_id "ary0rZOnWJRlb5xgkk33KgAAANw"]
[Wed Sep 30 01:05:17.302026 2026] [access_compat:error] [pid 251754:tid 252003] [client 47.79.13.37:37268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:17.302308 2026] [access_compat:error] [pid 251754:tid 252003] [client 47.79.13.37:37268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:17.331162 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.331421 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.346399 2026] [security2:error] [pid 251754:tid 251996] [client 64.227.188.205:49988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0rZOnWJRlb5xgkk33LwAAAPM"]
[Wed Sep 30 01:05:17.356358 2026] [security2:error] [pid 251754:tid 251889] [client 20.58.177.98:3519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/cae.php"] [unique_id "ary0rZOnWJRlb5xgkk33MQAAAIg"]
[Wed Sep 30 01:05:17.357610 2026] [security2:error] [pid 251754:tid 251966] [client 20.213.164.196:29696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/aboutt.php"] [unique_id "ary0rZOnWJRlb5xgkk33MgAAANU"]
[Wed Sep 30 01:05:17.425746 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.426200 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.441499 2026] [security2:error] [pid 251754:tid 251956] [client 74.225.148.80:13341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/BDKR28WP.php"] [unique_id "ary0rZOnWJRlb5xgkk33PQAAAMs"]
[Wed Sep 30 01:05:17.491289 2026] [security2:error] [pid 251754:tid 251924] [client 45.138.12.32:36078] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odw.nqt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0rZOnWJRlb5xgkk33SwAAAKs"]
[Wed Sep 30 01:05:17.511773 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.512053 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.605073 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.605355 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.641276 2026] [security2:error] [pid 251754:tid 251856] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0rZOnWJRlb5xgkk33bAAAvWM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D18155
[Wed Sep 30 01:05:17.673083 2026] [security2:error] [pid 251754:tid 251985] [client 20.58.177.98:3486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/txets.php"] [unique_id "ary0rZOnWJRlb5xgkk33bwAAAOg"]
[Wed Sep 30 01:05:17.694466 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.694723 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.710989 2026] [access_compat:error] [pid 251754:tid 251912] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 01:05:17.711343 2026] [access_compat:error] [pid 251754:tid 251912] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3
[Wed Sep 30 01:05:17.736318 2026] [security2:error] [pid 251754:tid 251938] [client 122.173.27.10:3873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0rZOnWJRlb5xgkk33cwAAALk"]
[Wed Sep 30 01:05:17.736445 2026] [security2:error] [pid 251754:tid 251938] [client 122.173.27.10:3873] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0rZOnWJRlb5xgkk33cwAAALk"]
[Wed Sep 30 01:05:17.743403 2026] [security2:error] [pid 251754:tid 252012] [client 20.251.39.228:25591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0rZOnWJRlb5xgkk33dAAAAQM"]
[Wed Sep 30 01:05:17.752401 2026] [security2:error] [pid 251754:tid 251984] [client 20.198.74.230:23889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/c3c427fa59.php"] [unique_id "ary0rZOnWJRlb5xgkk33dgAAAOc"]
[Wed Sep 30 01:05:17.785118 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.785649 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.794172 2026] [security2:error] [pid 251754:tid 251902] [client 52.172.226.14:3906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/index.php"] [unique_id "ary0rZOnWJRlb5xgkk33ggAAAJU"]
[Wed Sep 30 01:05:17.847602 2026] [security2:error] [pid 251754:tid 251962] [client 169.40.142.133:41722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.cecacel.com"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "ary0rZOnWJRlb5xgkk33kwAAANE"]
[Wed Sep 30 01:05:17.880110 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.880540 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.925376 2026] [security2:error] [pid 251754:tid 251952] [remote 168.100.149.106:46678] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0rZOnWJRlb5xgkk33igAAjG4"]
[Wed Sep 30 01:05:17.946259 2026] [security2:error] [pid 251754:tid 251941] [client 45.138.12.32:39090] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odf.ujo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0rZOnWJRlb5xgkk33owAAALw"]
[Wed Sep 30 01:05:17.963359 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:60701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary0rZOnWJRlb5xgkk33pgAAAJo"]
[Wed Sep 30 01:05:17.969479 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:17.969738 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:17.980735 2026] [security2:error] [pid 251754:tid 251964] [client 4.196.65.241:2074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/000.php"] [unique_id "ary0rZOnWJRlb5xgkk33qwAAANM"]
[Wed Sep 30 01:05:17.989481 2026] [security2:error] [pid 251754:tid 251929] [client 20.58.177.98:3438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wp-update.php"] [unique_id "ary0rZOnWJRlb5xgkk33rQAAALA"]
[Wed Sep 30 01:05:18.046818 2026] [security2:error] [pid 251754:tid 251894] [client 169.40.142.133:41722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.cecacel.com"] [uri "/___proxy_subdomain_cpcalendars/.env.old"] [unique_id "ary0rpOnWJRlb5xgkk33sQAAAI0"]
[Wed Sep 30 01:05:18.057060 2026] [security2:error] [pid 251754:tid 251970] [client 20.213.164.196:29719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wp-whe.php"] [unique_id "ary0rpOnWJRlb5xgkk33tQAAANk"]
[Wed Sep 30 01:05:18.059686 2026] [security2:error] [pid 251754:tid 251968] [client 64.227.188.205:36528] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0rpOnWJRlb5xgkk33tgAAANc"]
[Wed Sep 30 01:05:18.065736 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.066199 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.067721 2026] [security2:error] [pid 251754:tid 251901] [client 20.28.180.172:62356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/zc-104.php"] [unique_id "ary0rpOnWJRlb5xgkk33twAAAJQ"]
[Wed Sep 30 01:05:18.119601 2026] [security2:error] [pid 251754:tid 251986] [client 116.197.133.25:54269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0rpOnWJRlb5xgkk33vgAAAOk"]
[Wed Sep 30 01:05:18.119727 2026] [security2:error] [pid 251754:tid 251986] [client 116.197.133.25:54269] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0rpOnWJRlb5xgkk33vgAAAOk"]
[Wed Sep 30 01:05:18.128261 2026] [security2:error] [pid 251754:tid 251922] [client 74.225.148.80:13367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/gigi.php"] [unique_id "ary0rpOnWJRlb5xgkk33wAAAAKk"]
[Wed Sep 30 01:05:18.150708 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.151011 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.172240 2026] [access_compat:error] [pid 251754:tid 251886] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:18.172489 2026] [access_compat:error] [pid 251754:tid 251886] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:18.245237 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.245238 2026] [access_compat:error] [pid 251754:tid 251889] [client 47.79.13.175:44424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:18.245702 2026] [access_compat:error] [pid 251754:tid 251889] [client 47.79.13.175:44424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:18.245702 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.248286 2026] [security2:error] [pid 251754:tid 251896] [client 169.40.142.133:41730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.cecacel.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "ary0rpOnWJRlb5xgkk333wAAAI8"]
[Wed Sep 30 01:05:18.248660 2026] [security2:error] [pid 251754:tid 251944] [client 169.40.142.133:41766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.cecacel.com"] [uri "/___proxy_subdomain_cpcalendars/.env.backup"] [unique_id "ary0rpOnWJRlb5xgkk334AAAAL8"]
[Wed Sep 30 01:05:18.249064 2026] [security2:error] [pid 251754:tid 251983] [client 169.40.142.133:41744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcalendars.cecacel.com"] [uri "/___proxy_subdomain_cpcalendars/.env.swp"] [unique_id "ary0rpOnWJRlb5xgkk332QAAAOY"]
[Wed Sep 30 01:05:18.255291 2026] [security2:error] [pid 251754:tid 251899] [client 20.251.39.228:40009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0rpOnWJRlb5xgkk336gAAAJI"]
[Wed Sep 30 01:05:18.299131 2026] [security2:error] [pid 251754:tid 251908] [client 52.172.226.14:40600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary0rpOnWJRlb5xgkk33-QAAAJs"]
[Wed Sep 30 01:05:18.306494 2026] [security2:error] [pid 251754:tid 251922] [client 20.58.177.98:3407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/177.php"] [unique_id "ary0rpOnWJRlb5xgkk33_AAAAKk"]
[Wed Sep 30 01:05:18.334279 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.334546 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.427614 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.427955 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.502887 2026] [security2:error] [pid 251754:tid 252012] [client 20.213.164.196:29969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/ssixta.php"] [unique_id "ary0rpOnWJRlb5xgkk34FgAAAQM"]
[Wed Sep 30 01:05:18.517705 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.517978 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.549707 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:45125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/xx.php"] [unique_id "ary0rpOnWJRlb5xgkk34IQAAAJo"]
[Wed Sep 30 01:05:18.614833 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.615268 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.628017 2026] [security2:error] [pid 251754:tid 252005] [client 20.58.177.98:3480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/ccc.php"] [unique_id "ary0rpOnWJRlb5xgkk34KAAAAPw"]
[Wed Sep 30 01:05:18.700345 2026] [access_compat:error] [pid 251754:tid 251991] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4MTc3
[Wed Sep 30 01:05:18.700848 2026] [access_compat:error] [pid 251754:tid 251991] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4MTc3
[Wed Sep 30 01:05:18.702907 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.703336 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.744707 2026] [security2:error] [pid 251754:tid 251987] [client 201.32.215.149:5858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0rpOnWJRlb5xgkk34MwAAAOo"]
[Wed Sep 30 01:05:18.744832 2026] [security2:error] [pid 251754:tid 251987] [client 201.32.215.149:5858] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0rpOnWJRlb5xgkk34MwAAAOo"]
[Wed Sep 30 01:05:18.773605 2026] [security2:error] [pid 251754:tid 251975] [client 64.227.188.205:36530] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "taetaebobateashop.com"] [uri "/"] [unique_id "ary0rpOnWJRlb5xgkk34NgAAAN4"]
[Wed Sep 30 01:05:18.791630 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.791944 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.808347 2026] [security2:error] [pid 251754:tid 251920] [client 20.251.39.228:16743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws57.php"] [unique_id "ary0rpOnWJRlb5xgkk34PgAAAKc"]
[Wed Sep 30 01:05:18.882158 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.882425 2026] [access_compat:error] [pid 251754:tid 251931] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:18.929804 2026] [security2:error] [pid 251754:tid 251894] [client 52.172.226.14:3927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/classwithtostring.php"] [unique_id "ary0rpOnWJRlb5xgkk34UAAAAI0"]
[Wed Sep 30 01:05:18.943004 2026] [security2:error] [pid 251754:tid 251959] [client 20.58.177.98:3427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/0xD.php"] [unique_id "ary0rpOnWJRlb5xgkk34VAAAAM4"]
[Wed Sep 30 01:05:18.972951 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:18.973240 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.007604 2026] [security2:error] [pid 251754:tid 251902] [client 74.225.148.80:13457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ant.php"] [unique_id "ary0r5OnWJRlb5xgkk34XgAAAJU"]
[Wed Sep 30 01:05:19.057037 2026] [security2:error] [pid 251754:tid 251919] [client 20.213.164.196:30006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/tesla.php"] [unique_id "ary0r5OnWJRlb5xgkk34ZAAAAKY"]
[Wed Sep 30 01:05:19.064414 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.064683 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.096069 2026] [security2:error] [pid 251754:tid 251981] [client 20.214.109.68:10182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws75.php"] [unique_id "ary0r5OnWJRlb5xgkk34aAAAAOQ"]
[Wed Sep 30 01:05:19.155463 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.155896 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.157687 2026] [security2:error] [pid 251754:tid 251871] [remote 122.14.224.88:33666] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/crazy-rich-asians-movie-review/"] [unique_id "ary0r5OnWJRlb5xgkk34dgAAjnI"]
[Wed Sep 30 01:05:19.166785 2026] [security2:error] [pid 251754:tid 251933] [client 45.138.12.40:5510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thetreespirit.com"] [uri "/wp-links-opml.php"] [unique_id "ary0r5OnWJRlb5xgkk34eAAAALQ"]
[Wed Sep 30 01:05:19.170255 2026] [access_compat:error] [pid 251754:tid 251987] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:19.170522 2026] [access_compat:error] [pid 251754:tid 251987] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:19.242184 2026] [security2:error] [pid 251754:tid 251922] [client 152.59.165.7:59696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk34fgAAAKk"]
[Wed Sep 30 01:05:19.242329 2026] [security2:error] [pid 251754:tid 251922] [client 152.59.165.7:59696] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk34fgAAAKk"]
[Wed Sep 30 01:05:19.254036 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.254287 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:11096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.258656 2026] [security2:error] [pid 251754:tid 252012] [client 20.58.177.98:3424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/sallu.php"] [unique_id "ary0r5OnWJRlb5xgkk34gwAAAQM"]
[Wed Sep 30 01:05:19.268479 2026] [security2:error] [pid 251754:tid 251889] [client 13.70.4.78:60692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/gelay.php"] [unique_id "ary0r5OnWJRlb5xgkk34hAAAAIg"]
[Wed Sep 30 01:05:19.316540 2026] [security2:error] [pid 251754:tid 251983] [client 20.251.39.228:25574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/.qiodetme.php"] [unique_id "ary0r5OnWJRlb5xgkk34kAAAAOY"]
[Wed Sep 30 01:05:19.357756 2026] [security2:error] [pid 251754:tid 251892] [client 45.138.12.32:39104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.odf.ujo.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0r5OnWJRlb5xgkk34lgAAAIs"]
[Wed Sep 30 01:05:19.393515 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.393820 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.400880 2026] [security2:error] [pid 251754:tid 251952] [client 104.208.65.139:9647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wsd.php"] [unique_id "ary0r5OnWJRlb5xgkk34nAAAAMc"]
[Wed Sep 30 01:05:19.407094 2026] [security2:error] [pid 251754:tid 251905] [client 52.172.226.14:40545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/dropdown.php"] [unique_id "ary0r5OnWJRlb5xgkk34nQAAAJg"]
[Wed Sep 30 01:05:19.417618 2026] [security2:error] [pid 251754:tid 251976] [client 20.70.173.30:59555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/f35.update.php"] [unique_id "ary0r5OnWJRlb5xgkk34ngAAAN8"]
[Wed Sep 30 01:05:19.448216 2026] [security2:error] [pid 251754:tid 251911] [client 20.213.164.196:29994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/222.php"] [unique_id "ary0r5OnWJRlb5xgkk34pQAAAJ4"]
[Wed Sep 30 01:05:19.452898 2026] [security2:error] [pid 251754:tid 251938] [client 82.102.18.126:53854] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary0r5OnWJRlb5xgkk34pgAAALk"]
[Wed Sep 30 01:05:19.484913 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.485193 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.489353 2026] [security2:error] [pid 251754:tid 251973] [client 74.225.148.80:11312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/uejvv.php"] [unique_id "ary0r5OnWJRlb5xgkk34rQAAANw"]
[Wed Sep 30 01:05:19.571466 2026] [security2:error] [pid 251754:tid 251954] [client 20.58.177.98:3441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/xwpg.php"] [unique_id "ary0r5OnWJRlb5xgkk34vQAAAMk"]
[Wed Sep 30 01:05:19.574511 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:53288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.574767 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:53288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.615818 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.616196 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.627473 2026] [security2:error] [pid 251754:tid 251931] [client 13.70.4.78:6118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/htaccess.php"] [unique_id "ary0r5OnWJRlb5xgkk34wQAAALI"]
[Wed Sep 30 01:05:19.662952 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=sys&p=L3Byb2MvODM4MzcyL2N3ZA==
[Wed Sep 30 01:05:19.663215 2026] [access_compat:error] [pid 251754:tid 252001] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=sys&p=L3Byb2MvODM4MzcyL2N3ZA==
[Wed Sep 30 01:05:19.674934 2026] [security2:error] [pid 251754:tid 251892] [client 216.73.216.46:11096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0r5OnWJRlb5xgkk34yAAAAIs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTIvbm9kZTAvbWVtb3J5OTI%3D
[Wed Sep 30 01:05:19.681874 2026] [security2:error] [pid 251754:tid 251901] [client 213.136.69.135:52173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/theme-previews.php"] [unique_id "ary0r5OnWJRlb5xgkk34ygAAAJQ"], referer: binance.com
[Wed Sep 30 01:05:19.682258 2026] [security2:error] [pid 251754:tid 251888] [client 202.179.95.79:53319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk34yQAAAIc"]
[Wed Sep 30 01:05:19.682353 2026] [security2:error] [pid 251754:tid 251888] [client 202.179.95.79:53319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk34yQAAAIc"]
[Wed Sep 30 01:05:19.688851 2026] [security2:error] [pid 251754:tid 251921] [client 45.138.12.43:48560] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.umo.ieo.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0r5OnWJRlb5xgkk34ywAAAKg"]
[Wed Sep 30 01:05:19.704326 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.704586 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.745542 2026] [security2:error] [pid 251754:tid 251968] [client 20.251.39.228:25592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/sodas.php"] [unique_id "ary0r5OnWJRlb5xgkk340gAAANc"]
[Wed Sep 30 01:05:19.750815 2026] [access_compat:error] [pid 251754:tid 251945] [client 47.79.13.64:56032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:19.751113 2026] [access_compat:error] [pid 251754:tid 251945] [client 47.79.13.64:56032] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:19.797603 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.797899 2026] [security2:error] [pid 251754:tid 251967] [client 4.240.25.22:20302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/classwithtostring.php"] [unique_id "ary0r5OnWJRlb5xgkk344AAAANY"]
[Wed Sep 30 01:05:19.798021 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.800097 2026] [security2:error] [pid 251754:tid 251893] [client 82.102.18.126:53864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk343gAAAIw"]
[Wed Sep 30 01:05:19.811721 2026] [security2:error] [pid 251754:tid 251972] [client 20.213.164.196:29714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/media.php"] [unique_id "ary0r5OnWJRlb5xgkk344gAAANs"]
[Wed Sep 30 01:05:19.836500 2026] [security2:error] [pid 251754:tid 251998] [client 180.92.129.124:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0r5OnWJRlb5xgkk345QAAAPU"]
[Wed Sep 30 01:05:19.885995 2026] [security2:error] [pid 251754:tid 251999] [client 20.58.177.98:3442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/flamini.php"] [unique_id "ary0r5OnWJRlb5xgkk347QAAAPY"]
[Wed Sep 30 01:05:19.892471 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.892836 2026] [security2:error] [pid 251754:tid 251937] [remote 168.100.149.47:31856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0r5OnWJRlb5xgkk342gAAoi4"]
[Wed Sep 30 01:05:19.892918 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.909143 2026] [security2:error] [pid 251754:tid 251969] [client 52.172.226.14:40518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/0x.php"] [unique_id "ary0r5OnWJRlb5xgkk348QAAANg"]
[Wed Sep 30 01:05:19.916255 2026] [security2:error] [pid 251754:tid 251887] [client 203.122.45.246:53907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk348AAAAIY"]
[Wed Sep 30 01:05:19.916357 2026] [security2:error] [pid 251754:tid 251887] [client 203.122.45.246:53907] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0r5OnWJRlb5xgkk348AAAAIY"]
[Wed Sep 30 01:05:19.933952 2026] [security2:error] [pid 251754:tid 251944] [client 20.194.30.107:17424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/tool.php"] [unique_id "ary0r5OnWJRlb5xgkk348wAAAL8"]
[Wed Sep 30 01:05:19.974380 2026] [security2:error] [pid 251754:tid 251952] [client 13.70.4.78:45122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/readme.php"] [unique_id "ary0r5OnWJRlb5xgkk34-QAAAMc"]
[Wed Sep 30 01:05:19.989382 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:19.989675 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:19.999825 2026] [security2:error] [pid 251754:tid 251977] [client 45.3.38.82:33869] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/esv_resources/gallery/38th-induction-ceremony/thumbs/thumbs_dsc8372.jpg"] [unique_id "ary0r5OnWJRlb5xgkk34_gAAAOA"]
[Wed Sep 30 01:05:20.053893 2026] [access_compat:error] [pid 251754:tid 251940] [client 47.79.13.178:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:20.054332 2026] [access_compat:error] [pid 251754:tid 251940] [client 47.79.13.178:56310] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:20.070195 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.070491 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.111965 2026] [security2:error] [pid 251754:tid 251941] [client 20.251.39.228:22977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/yw5bi63u.php"] [unique_id "ary0sJOnWJRlb5xgkk35EwAAALw"]
[Wed Sep 30 01:05:20.113268 2026] [security2:error] [pid 251754:tid 251974] [client 45.138.12.43:48604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.umo.ieo.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0sJOnWJRlb5xgkk35FAAAAN0"]
[Wed Sep 30 01:05:20.160195 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.160653 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.201458 2026] [security2:error] [pid 251754:tid 251973] [client 20.58.177.98:3608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/themes.php"] [unique_id "ary0sJOnWJRlb5xgkk35HwAAANw"]
[Wed Sep 30 01:05:20.213338 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvMzQwODA2L2N3ZA==
[Wed Sep 30 01:05:20.213607 2026] [access_compat:error] [pid 251754:tid 251959] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvMzQwODA2L2N3ZA==
[Wed Sep 30 01:05:20.250619 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.250925 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.286078 2026] [security2:error] [pid 251754:tid 251950] [client 82.102.18.126:53872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0sJOnWJRlb5xgkk35LAAAAMU"]
[Wed Sep 30 01:05:20.340986 2026] [security2:error] [pid 251754:tid 252001] [client 20.213.164.196:29957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/24.php"] [unique_id "ary0sJOnWJRlb5xgkk35MwAAAPg"]
[Wed Sep 30 01:05:20.341075 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.341327 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.367211 2026] [security2:error] [pid 251754:tid 251919] [client 13.70.4.78:45147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/max.php"] [unique_id "ary0sJOnWJRlb5xgkk35OgAAAKY"]
[Wed Sep 30 01:05:20.374604 2026] [access_compat:error] [pid 251754:tid 251929] [client 47.79.13.65:56552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:20.374885 2026] [access_compat:error] [pid 251754:tid 251929] [client 47.79.13.65:56552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:20.433300 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.433567 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.436468 2026] [security2:error] [pid 251754:tid 251991] [client 20.214.109.68:9470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ms-edit.php"] [unique_id "ary0sJOnWJRlb5xgkk35RwAAAO4"]
[Wed Sep 30 01:05:20.468835 2026] [security2:error] [pid 251754:tid 251935] [client 116.193.128.26:54774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0sJOnWJRlb5xgkk35SQAAALY"]
[Wed Sep 30 01:05:20.468962 2026] [security2:error] [pid 251754:tid 251935] [client 116.193.128.26:54774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0sJOnWJRlb5xgkk35SQAAALY"]
[Wed Sep 30 01:05:20.523987 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.524268 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.552234 2026] [security2:error] [pid 251754:tid 252005] [client 20.58.177.98:3491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/0.php"] [unique_id "ary0sJOnWJRlb5xgkk35VAAAAPw"]
[Wed Sep 30 01:05:20.576121 2026] [security2:error] [pid 251754:tid 251895] [client 74.225.148.80:13374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/file.php"] [unique_id "ary0sJOnWJRlb5xgkk35VgAAAI4"]
[Wed Sep 30 01:05:20.616114 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.616424 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.624364 2026] [security2:error] [pid 251754:tid 251910] [client 82.102.18.126:53886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary0sJOnWJRlb5xgkk35WgAAAJ0"]
[Wed Sep 30 01:05:20.656839 2026] [security2:error] [pid 251754:tid 251933] [client 52.172.226.14:3915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/moon.php"] [unique_id "ary0sJOnWJRlb5xgkk35YwAAALQ"]
[Wed Sep 30 01:05:20.700957 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:20.701224 2026] [access_compat:error] [pid 251754:tid 251984] [client 74.7.243.227:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2L3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:20.706045 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.706319 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.708990 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.4.78:45145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/post.php"] [unique_id "ary0sJOnWJRlb5xgkk35bwAAAJs"]
[Wed Sep 30 01:05:20.741936 2026] [security2:error] [pid 251754:tid 251922] [client 103.159.192.142:55754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0sJOnWJRlb5xgkk35dAAAAKk"]
[Wed Sep 30 01:05:20.742028 2026] [security2:error] [pid 251754:tid 251922] [client 103.159.192.142:55754] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0sJOnWJRlb5xgkk35dAAAAKk"]
[Wed Sep 30 01:05:20.787801 2026] [security2:error] [pid 251754:tid 251964] [client 20.251.39.228:43664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws81.php"] [unique_id "ary0sJOnWJRlb5xgkk35egAAANM"]
[Wed Sep 30 01:05:20.794242 2026] [security2:error] [pid 251754:tid 251981] [client 20.213.164.196:29724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/xwpg.php"] [unique_id "ary0sJOnWJRlb5xgkk35fAAAAOQ"]
[Wed Sep 30 01:05:20.796586 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.796838 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.869408 2026] [security2:error] [pid 251754:tid 251935] [client 20.58.177.98:3621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/opsh.php"] [unique_id "ary0sJOnWJRlb5xgkk35ggAAALY"]
[Wed Sep 30 01:05:20.887631 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.887915 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:20.951151 2026] [security2:error] [pid 251754:tid 251897] [client 82.102.18.126:53890] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary0sJOnWJRlb5xgkk35iwAAAJA"]
[Wed Sep 30 01:05:20.952263 2026] [security2:error] [pid 251754:tid 251971] [client 40.77.167.132:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/shop/"] [unique_id "ary0sJOnWJRlb5xgkk35igAAANo"]
[Wed Sep 30 01:05:20.977511 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:20.977831 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.057929 2026] [security2:error] [pid 251754:tid 251955] [client 20.28.180.172:62387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/rzki.php"] [unique_id "ary0sZOnWJRlb5xgkk35qQAAAMo"]
[Wed Sep 30 01:05:21.067080 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.067346 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.077961 2026] [security2:error] [pid 251754:tid 251990] [client 45.138.12.32:9976] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.odw.nqt.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0sZOnWJRlb5xgkk35rAAAAO0"]
[Wed Sep 30 01:05:21.100418 2026] [security2:error] [pid 251754:tid 251968] [client 13.70.4.78:60694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/themes.php"] [unique_id "ary0sZOnWJRlb5xgkk35rgAAANc"]
[Wed Sep 30 01:05:21.116610 2026] [security2:error] [pid 251754:tid 251958] [client 223.181.60.167:27203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0sZOnWJRlb5xgkk35sAAAAM0"]
[Wed Sep 30 01:05:21.117431 2026] [security2:error] [pid 251754:tid 251958] [client 223.181.60.167:27203] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0sZOnWJRlb5xgkk35sAAAAM0"]
[Wed Sep 30 01:05:21.123259 2026] [security2:error] [pid 251754:tid 251905] [client 74.225.148.80:13349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/elements.php"] [unique_id "ary0sZOnWJRlb5xgkk35sQAAAJg"]
[Wed Sep 30 01:05:21.166253 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.166685 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.187258 2026] [security2:error] [pid 251754:tid 251935] [client 20.58.177.98:3432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/pass4.php"] [unique_id "ary0sZOnWJRlb5xgkk35swAAALY"]
[Wed Sep 30 01:05:21.197426 2026] [security2:error] [pid 251754:tid 251931] [client 20.251.39.228:25552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/mh.php"] [unique_id "ary0sZOnWJRlb5xgkk35tAAAALI"]
[Wed Sep 30 01:05:21.207380 2026] [security2:error] [pid 251754:tid 251951] [client 74.7.243.227:51284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0sZOnWJRlb5xgkk35tgAAAMY"], referer: http://www.homs.co.ke/?del=error_log&p=L3Byb2MvMzc1NDg0L2N3ZA==
[Wed Sep 30 01:05:21.253500 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.253766 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.290278 2026] [security2:error] [pid 251754:tid 252013] [client 20.213.164.196:29976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/blacks.php"] [unique_id "ary0sZOnWJRlb5xgkk35wQAAAQQ"]
[Wed Sep 30 01:05:21.297040 2026] [security2:error] [pid 251754:tid 251975] [client 52.172.226.14:3890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/autoload_classmap.php"] [unique_id "ary0sZOnWJRlb5xgkk35wgAAAN4"]
[Wed Sep 30 01:05:21.316728 2026] [security2:error] [pid 251754:tid 251959] [client 82.102.18.126:53892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary0sZOnWJRlb5xgkk35xAAAAM4"]
[Wed Sep 30 01:05:21.344039 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.344313 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.433344 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.433617 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.495368 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.4.78:60679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary0sZOnWJRlb5xgkk353AAAAKU"]
[Wed Sep 30 01:05:21.508974 2026] [security2:error] [pid 251754:tid 252004] [client 20.58.177.98:3708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/drttewyh.php"] [unique_id "ary0sZOnWJRlb5xgkk353QAAAPs"]
[Wed Sep 30 01:05:21.525482 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.525749 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.612898 2026] [security2:error] [pid 251754:tid 251998] [client 20.251.39.228:25597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws88.php"] [unique_id "ary0sZOnWJRlb5xgkk358gAAAPU"]
[Wed Sep 30 01:05:21.617209 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.617467 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:26811] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.642153 2026] [security2:error] [pid 251754:tid 251901] [client 74.225.148.80:11290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/sitemap.php"] [unique_id "ary0sZOnWJRlb5xgkk359QAAAJQ"]
[Wed Sep 30 01:05:21.659672 2026] [security2:error] [pid 251754:tid 251983] [client 82.102.18.126:53896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary0sZOnWJRlb5xgkk35_QAAAOY"]
[Wed Sep 30 01:05:21.674432 2026] [security2:error] [pid 251754:tid 251927] [client 20.213.164.196:29963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/class-wp-http-client.php"] [unique_id "ary0sZOnWJRlb5xgkk36AAAAAK4"]
[Wed Sep 30 01:05:21.707125 2026] [access_compat:error] [pid 251754:tid 251933] [client 74.7.243.227:40546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:05:21.707385 2026] [access_compat:error] [pid 251754:tid 251933] [client 74.7.243.227:40546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4Mzcy
[Wed Sep 30 01:05:21.708965 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.709231 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.803132 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.803552 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.828884 2026] [security2:error] [pid 251754:tid 252009] [client 20.58.177.98:3470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/sh.php"] [unique_id "ary0sZOnWJRlb5xgkk36DQAAAQA"]
[Wed Sep 30 01:05:21.836086 2026] [security2:error] [pid 251754:tid 251928] [client 13.70.4.78:5640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary0sZOnWJRlb5xgkk36DwAAAK8"]
[Wed Sep 30 01:05:21.862991 2026] [security2:error] [pid 251754:tid 251895] [client 106.214.2.47:1568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0sZOnWJRlb5xgkk36DgAAAI4"]
[Wed Sep 30 01:05:21.890190 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.890466 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:21.896156 2026] [security2:error] [pid 251754:tid 252008] [remote 168.100.149.94:49852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0sZOnWJRlb5xgkk36CgABAzQ"]
[Wed Sep 30 01:05:21.942337 2026] [security2:error] [pid 251754:tid 251894] [client 52.172.226.14:40541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/default.php"] [unique_id "ary0sZOnWJRlb5xgkk36HgAAAI0"]
[Wed Sep 30 01:05:21.975770 2026] [security2:error] [pid 251754:tid 251911] [client 82.102.18.126:53912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary0sZOnWJRlb5xgkk36IgAAAJ4"]
[Wed Sep 30 01:05:21.982490 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:21.982771 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.032424 2026] [security2:error] [pid 251754:tid 251957] [client 216.73.216.46:26811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0spOnWJRlb5xgkk36NQAAAMw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvbWVtb3J5OTE%3D
[Wed Sep 30 01:05:22.033149 2026] [security2:error] [pid 251754:tid 251975] [client 45.138.12.32:10060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.odw.nqt.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary0spOnWJRlb5xgkk36NgAAAN4"]
[Wed Sep 30 01:05:22.046562 2026] [security2:error] [pid 251754:tid 251947] [client 20.251.39.228:19610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws86.php"] [unique_id "ary0spOnWJRlb5xgkk36OgAAAMI"]
[Wed Sep 30 01:05:22.054076 2026] [security2:error] [pid 251754:tid 251954] [client 20.214.109.68:9914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/abc.php"] [unique_id "ary0spOnWJRlb5xgkk36PgAAAMk"]
[Wed Sep 30 01:05:22.075069 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.075503 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.095241 2026] [security2:error] [pid 251754:tid 251904] [client 43.227.131.37:21739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0spOnWJRlb5xgkk36RAAAAJc"]
[Wed Sep 30 01:05:22.095346 2026] [security2:error] [pid 251754:tid 251904] [client 43.227.131.37:21739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0spOnWJRlb5xgkk36RAAAAJc"]
[Wed Sep 30 01:05:22.121019 2026] [security2:error] [pid 251754:tid 251912] [client 20.213.164.196:30089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/zoo2.php"] [unique_id "ary0spOnWJRlb5xgkk36SAAAAJ8"]
[Wed Sep 30 01:05:22.145242 2026] [security2:error] [pid 251754:tid 251903] [client 20.58.177.98:3670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/groud1.php"] [unique_id "ary0spOnWJRlb5xgkk36SwAAAJY"]
[Wed Sep 30 01:05:22.156398 2026] [security2:error] [pid 251754:tid 251895] [client 74.225.148.80:13347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/xetmolxr.php"] [unique_id "ary0spOnWJRlb5xgkk36TAAAAI4"]
[Wed Sep 30 01:05:22.167151 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.167566 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.186369 2026] [security2:error] [pid 251754:tid 252002] [client 13.70.4.78:45173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/click.php"] [unique_id "ary0spOnWJRlb5xgkk36UQAAAPk"]
[Wed Sep 30 01:05:22.205665 2026] [security2:error] [pid 251754:tid 251942] [client 49.205.105.16:14579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0spOnWJRlb5xgkk36VQAAAL0"]
[Wed Sep 30 01:05:22.205824 2026] [security2:error] [pid 251754:tid 251942] [client 49.205.105.16:14579] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0spOnWJRlb5xgkk36VQAAAL0"]
[Wed Sep 30 01:05:22.211854 2026] [security2:error] [pid 251754:tid 251922] [client 72.51.111.44:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0spOnWJRlb5xgkk36VgAAAKk"]
[Wed Sep 30 01:05:22.254760 2026] [access_compat:error] [pid 251754:tid 251996] [client 47.79.13.234:59394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:22.255034 2026] [access_compat:error] [pid 251754:tid 251996] [client 47.79.13.234:59394] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:22.255742 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.256059 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.277001 2026] [security2:error] [pid 251754:tid 251892] [client 20.194.30.107:17422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/az.php"] [unique_id "ary0spOnWJRlb5xgkk36YQAAAIs"]
[Wed Sep 30 01:05:22.313117 2026] [security2:error] [pid 251754:tid 251936] [client 82.102.18.126:53924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0spOnWJRlb5xgkk36ZAAAALc"]
[Wed Sep 30 01:05:22.345736 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.346015 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.419003 2026] [security2:error] [pid 251754:tid 251921] [client 52.172.226.14:40524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary0spOnWJRlb5xgkk36fQAAAKg"]
[Wed Sep 30 01:05:22.420747 2026] [security2:error] [pid 251754:tid 251913] [client 74.7.243.227:40546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0spOnWJRlb5xgkk36fgAAAKA"], referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2N3ZA==
[Wed Sep 30 01:05:22.440987 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.441427 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.457694 2026] [security2:error] [pid 251754:tid 252007] [client 20.58.177.98:3693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/bro.php"] [unique_id "ary0spOnWJRlb5xgkk36gwAAAP4"]
[Wed Sep 30 01:05:22.470500 2026] [security2:error] [pid 251754:tid 252001] [client 20.213.164.196:29717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/zoo1.php"] [unique_id "ary0spOnWJRlb5xgkk36hQAAAPg"]
[Wed Sep 30 01:05:22.500456 2026] [security2:error] [pid 251754:tid 251939] [client 13.70.4.78:45156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/install.php"] [unique_id "ary0spOnWJRlb5xgkk36hgAAALo"]
[Wed Sep 30 01:05:22.511428 2026] [security2:error] [pid 251754:tid 251894] [client 20.251.39.228:43665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/vx.php"] [unique_id "ary0spOnWJRlb5xgkk36hwAAAI0"]
[Wed Sep 30 01:05:22.527655 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.528059 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.621670 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.622108 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.642482 2026] [security2:error] [pid 251754:tid 251893] [client 74.225.148.80:11279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/mini.php"] [unique_id "ary0spOnWJRlb5xgkk36ogAAAIw"]
[Wed Sep 30 01:05:22.647338 2026] [security2:error] [pid 251754:tid 251947] [client 82.102.18.126:53932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0spOnWJRlb5xgkk36pAAAAMI"]
[Wed Sep 30 01:05:22.655025 2026] [security2:error] [pid 251754:tid 251848] [remote 57.141.14.82:25366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary0spOnWJRlb5xgkk36mQAAi1s"]
[Wed Sep 30 01:05:22.711153 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.711410 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.775061 2026] [security2:error] [pid 251754:tid 251989] [client 20.58.177.98:3705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/class-wp-http-client.php"] [unique_id "ary0spOnWJRlb5xgkk36vAAAAOw"]
[Wed Sep 30 01:05:22.804286 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.804731 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.851541 2026] [security2:error] [pid 251754:tid 251968] [client 13.70.4.78:45143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/13k.php"] [unique_id "ary0spOnWJRlb5xgkk36xwAAANc"]
[Wed Sep 30 01:05:22.859537 2026] [security2:error] [pid 251754:tid 251768] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0spOnWJRlb5xgkk36yAAAuAs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=125769
[Wed Sep 30 01:05:22.859564 2026] [security2:error] [pid 251754:tid 251768] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0spOnWJRlb5xgkk36yAAAuAs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=125769
[Wed Sep 30 01:05:22.894146 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.894534 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:22.898708 2026] [security2:error] [pid 251754:tid 251945] [client 20.213.164.196:29965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/class-ajax.php"] [unique_id "ary0spOnWJRlb5xgkk36zQAAAMA"]
[Wed Sep 30 01:05:22.914657 2026] [security2:error] [pid 251754:tid 251975] [client 52.172.226.14:40570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary0spOnWJRlb5xgkk36zwAAAN4"]
[Wed Sep 30 01:05:22.931032 2026] [security2:error] [pid 251754:tid 251933] [client 20.251.39.228:16878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/dass.php"] [unique_id "ary0spOnWJRlb5xgkk361AAAALQ"]
[Wed Sep 30 01:05:22.956436 2026] [security2:error] [pid 251754:tid 251961] [client 82.102.18.126:53948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0spOnWJRlb5xgkk362gAAANA"]
[Wed Sep 30 01:05:22.976920 2026] [security2:error] [pid 251754:tid 251862] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0spOnWJRlb5xgkk364QAA6mk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:05:22.976948 2026] [security2:error] [pid 251754:tid 251862] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0spOnWJRlb5xgkk364QAA6mk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=cad2594d254eb4594048f22f9259cc07
[Wed Sep 30 01:05:22.985611 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:22.985909 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.074570 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.074856 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.086080 2026] [security2:error] [pid 251754:tid 251989] [client 20.58.177.98:55061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/zoo2.php"] [unique_id "ary0s5OnWJRlb5xgkk369gAAAOw"]
[Wed Sep 30 01:05:23.106237 2026] [security2:error] [pid 251754:tid 251898] [client 74.7.243.227:40554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0s5OnWJRlb5xgkk36-AAAAJE"], referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 01:05:23.165449 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.165704 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.177763 2026] [security2:error] [pid 251754:tid 251970] [client 74.225.148.80:11287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/zwso.php"] [unique_id "ary0s5OnWJRlb5xgkk36_AAAANk"]
[Wed Sep 30 01:05:23.204837 2026] [security2:error] [pid 251754:tid 251948] [client 13.70.4.78:6114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/up.php"] [unique_id "ary0s5OnWJRlb5xgkk36_gAAAMM"]
[Wed Sep 30 01:05:23.244025 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.30.175:33121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0s5OnWJRlb5xgkk37BAAAANM"]
[Wed Sep 30 01:05:23.256380 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.256657 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.269741 2026] [security2:error] [pid 251754:tid 251933] [client 82.102.18.126:53962] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0s5OnWJRlb5xgkk37CQAAALQ"]
[Wed Sep 30 01:05:23.306205 2026] [security2:error] [pid 251754:tid 251872] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0s5OnWJRlb5xgkk37EAAA1XM"], referer: https://forum.torquayfans.com/viewtopic.php?p=82696
[Wed Sep 30 01:05:23.306236 2026] [security2:error] [pid 251754:tid 251872] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0s5OnWJRlb5xgkk37EAAA1XM"], referer: https://forum.torquayfans.com/viewtopic.php?p=82696
[Wed Sep 30 01:05:23.329862 2026] [security2:error] [pid 251754:tid 251983] [client 20.213.164.196:29985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/gm.php"] [unique_id "ary0s5OnWJRlb5xgkk37FwAAAOY"]
[Wed Sep 30 01:05:23.352530 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.352992 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.404335 2026] [security2:error] [pid 251754:tid 251913] [client 52.172.226.14:3841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary0s5OnWJRlb5xgkk37HgAAAKA"]
[Wed Sep 30 01:05:23.405208 2026] [security2:error] [pid 251754:tid 251984] [client 20.58.177.98:55050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/zoo1.php"] [unique_id "ary0s5OnWJRlb5xgkk37HwAAAOc"]
[Wed Sep 30 01:05:23.433613 2026] [security2:error] [pid 251754:tid 251767] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0s5OnWJRlb5xgkk37IwAA5Qo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=13373&sid=4d4651876e8337d339ffdb1335b82ffe
[Wed Sep 30 01:05:23.433636 2026] [security2:error] [pid 251754:tid 251767] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0s5OnWJRlb5xgkk37IwAA5Qo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=13373&sid=4d4651876e8337d339ffdb1335b82ffe
[Wed Sep 30 01:05:23.438003 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.438266 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.471659 2026] [security2:error] [pid 251754:tid 251928] [client 20.251.39.228:19585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/s.php"] [unique_id "ary0s5OnWJRlb5xgkk37JwAAAK8"]
[Wed Sep 30 01:05:23.496083 2026] [security2:error] [pid 251754:tid 251960] [client 20.28.180.172:61198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/xsas.php"] [unique_id "ary0s5OnWJRlb5xgkk37KAAAAM8"]
[Wed Sep 30 01:05:23.505411 2026] [security2:error] [pid 251754:tid 251945] [client 52.231.30.175:32761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0s5OnWJRlb5xgkk37KQAAAMA"]
[Wed Sep 30 01:05:23.532544 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.532833 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.594421 2026] [security2:error] [pid 251754:tid 251914] [client 13.70.4.78:6133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/0x1949.php"] [unique_id "ary0s5OnWJRlb5xgkk37OQAAAKE"]
[Wed Sep 30 01:05:23.605974 2026] [security2:error] [pid 251754:tid 252002] [client 82.102.18.126:36524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary0s5OnWJRlb5xgkk37PgAAAPk"]
[Wed Sep 30 01:05:23.616777 2026] [security2:error] [pid 251754:tid 251923] [client 223.181.30.165:3286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37QQAAAKo"]
[Wed Sep 30 01:05:23.616894 2026] [security2:error] [pid 251754:tid 251923] [client 223.181.30.165:3286] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37QQAAAKo"]
[Wed Sep 30 01:05:23.621279 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.621532 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.711677 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.711956 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.717503 2026] [security2:error] [pid 251754:tid 251959] [client 20.213.164.196:29725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/class-wp-site-list.php"] [unique_id "ary0s5OnWJRlb5xgkk37UQAAAM4"]
[Wed Sep 30 01:05:23.727315 2026] [security2:error] [pid 251754:tid 251985] [client 20.58.177.98:3517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/class-ajax.php"] [unique_id "ary0s5OnWJRlb5xgkk37UgAAAOg"]
[Wed Sep 30 01:05:23.757572 2026] [security2:error] [pid 251754:tid 251990] [client 102.253.38.25:52246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37VAAAAO0"]
[Wed Sep 30 01:05:23.761771 2026] [security2:error] [pid 251754:tid 251990] [client 102.253.38.25:52246] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37VAAAAO0"]
[Wed Sep 30 01:05:23.763395 2026] [security2:error] [pid 251754:tid 251974] [client 74.225.148.80:11313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/tiny.php"] [unique_id "ary0s5OnWJRlb5xgkk37VQAAAN0"]
[Wed Sep 30 01:05:23.778541 2026] [security2:error] [pid 251754:tid 251984] [client 52.231.30.175:32806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/1ac.php"] [unique_id "ary0s5OnWJRlb5xgkk37VgAAAOc"]
[Wed Sep 30 01:05:23.801403 2026] [security2:error] [pid 251754:tid 251888] [client 4.240.25.22:30744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0s5OnWJRlb5xgkk37XQAAAIc"]
[Wed Sep 30 01:05:23.803683 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.803959 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.822721 2026] [security2:error] [pid 251754:tid 251937] [client 182.69.182.151:20069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37XgAAALg"]
[Wed Sep 30 01:05:23.823271 2026] [security2:error] [pid 251754:tid 251937] [client 182.69.182.151:20069] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0s5OnWJRlb5xgkk37XgAAALg"]
[Wed Sep 30 01:05:23.851015 2026] [security2:error] [pid 251754:tid 251989] [client 20.251.39.228:19196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/kj.php"] [unique_id "ary0s5OnWJRlb5xgkk37YQAAAOw"]
[Wed Sep 30 01:05:23.895631 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.896099 2026] [access_compat:error] [pid 251754:tid 252013] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:23.910653 2026] [security2:error] [pid 251754:tid 251942] [remote 168.100.149.144:41636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0s5OnWJRlb5xgkk37XAAAsXw"]
[Wed Sep 30 01:05:23.923282 2026] [security2:error] [pid 251754:tid 251887] [client 82.102.18.126:36526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary0s5OnWJRlb5xgkk37aQAAAIY"]
[Wed Sep 30 01:05:23.929628 2026] [security2:error] [pid 251754:tid 251928] [client 13.70.4.78:6121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/cong.php"] [unique_id "ary0s5OnWJRlb5xgkk37agAAAK8"]
[Wed Sep 30 01:05:23.960955 2026] [security2:error] [pid 251754:tid 251945] [client 52.172.226.14:3894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/mail.php"] [unique_id "ary0s5OnWJRlb5xgkk37bwAAAMA"]
[Wed Sep 30 01:05:23.984000 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:23.984260 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.001065 2026] [security2:error] [pid 251754:tid 251933] [client 74.7.243.227:40566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0tJOnWJRlb5xgkk37eQAAALQ"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvNjIwMzAzL2N3ZA==
[Wed Sep 30 01:05:24.053021 2026] [security2:error] [pid 251754:tid 251891] [client 52.231.30.175:32772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/flm.php"] [unique_id "ary0tJOnWJRlb5xgkk37gAAAAIo"]
[Wed Sep 30 01:05:24.053038 2026] [security2:error] [pid 251754:tid 251963] [client 20.58.177.98:3601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gm.php"] [unique_id "ary0tJOnWJRlb5xgkk37gQAAANI"]
[Wed Sep 30 01:05:24.075396 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.075714 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.089672 2026] [security2:error] [pid 251754:tid 251969] [client 20.194.30.107:17350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/about.php"] [unique_id "ary0tJOnWJRlb5xgkk37hAAAANg"]
[Wed Sep 30 01:05:24.117856 2026] [security2:error] [pid 251754:tid 252009] [client 20.213.164.196:29961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/ttivnife.php"] [unique_id "ary0tJOnWJRlb5xgkk37hQAAAQA"]
[Wed Sep 30 01:05:24.169530 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.169953 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.180458 2026] [security2:error] [pid 251754:tid 252010] [client 187.123.136.229:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0tJOnWJRlb5xgkk37jgAAAQE"]
[Wed Sep 30 01:05:24.236612 2026] [security2:error] [pid 251754:tid 251989] [client 82.102.18.126:36540] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0tJOnWJRlb5xgkk37kgAAAOw"]
[Wed Sep 30 01:05:24.257647 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.257929 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.259121 2026] [security2:error] [pid 251754:tid 251902] [client 20.251.39.228:33811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws83.php"] [unique_id "ary0tJOnWJRlb5xgkk37mQAAAJU"]
[Wed Sep 30 01:05:24.261782 2026] [security2:error] [pid 251754:tid 251924] [client 13.70.4.78:5651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/bs1.php"] [unique_id "ary0tJOnWJRlb5xgkk37mgAAAKs"]
[Wed Sep 30 01:05:24.318181 2026] [security2:error] [pid 251754:tid 251939] [client 52.231.30.175:32714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/40341.php"] [unique_id "ary0tJOnWJRlb5xgkk37qgAAALo"]
[Wed Sep 30 01:05:24.348707 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.349003 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.375341 2026] [security2:error] [pid 251754:tid 251910] [client 20.58.177.98:3422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/class-wp-site-list.php"] [unique_id "ary0tJOnWJRlb5xgkk37tgAAAJ0"]
[Wed Sep 30 01:05:24.435163 2026] [security2:error] [pid 251754:tid 251897] [client 20.70.173.30:60023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary0tJOnWJRlb5xgkk37uAAAAJA"]
[Wed Sep 30 01:05:24.444818 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.445266 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.531544 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.531831 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.533033 2026] [security2:error] [pid 251754:tid 252009] [client 52.172.226.14:3846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/sx.php"] [unique_id "ary0tJOnWJRlb5xgkk37xQAAAQA"]
[Wed Sep 30 01:05:24.560024 2026] [security2:error] [pid 251754:tid 251990] [client 82.102.18.126:36550] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nve.qlp.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0tJOnWJRlb5xgkk37yAAAAO0"]
[Wed Sep 30 01:05:24.583216 2026] [security2:error] [pid 251754:tid 251899] [client 52.231.30.175:32740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-log.php"] [unique_id "ary0tJOnWJRlb5xgkk37ygAAAJI"]
[Wed Sep 30 01:05:24.598970 2026] [security2:error] [pid 251754:tid 251999] [client 20.213.164.196:29972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/admin.php/2P.php"] [unique_id "ary0tJOnWJRlb5xgkk37zgAAAPY"]
[Wed Sep 30 01:05:24.622946 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.623409 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.695281 2026] [security2:error] [pid 251754:tid 251909] [client 20.58.177.98:3593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/asd2.php"] [unique_id "ary0tJOnWJRlb5xgkk374wAAAJw"]
[Wed Sep 30 01:05:24.712519 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.712783 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.807635 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.808133 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.825372 2026] [security2:error] [pid 251754:tid 251897] [client 74.225.148.80:13354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/simple.php"] [unique_id "ary0tJOnWJRlb5xgkk377wAAAJA"]
[Wed Sep 30 01:05:24.836134 2026] [security2:error] [pid 251754:tid 251970] [client 13.70.4.78:45158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary0tJOnWJRlb5xgkk377gAAANk"]
[Wed Sep 30 01:05:24.845472 2026] [security2:error] [pid 251754:tid 251983] [client 52.231.30.175:33088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/sehryhv.php"] [unique_id "ary0tJOnWJRlb5xgkk378gAAAOY"]
[Wed Sep 30 01:05:24.887601 2026] [security2:error] [pid 251754:tid 251905] [client 20.251.39.228:16869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws75.php"] [unique_id "ary0tJOnWJRlb5xgkk379gAAAJg"]
[Wed Sep 30 01:05:24.888969 2026] [security2:error] [pid 251754:tid 251940] [client 20.214.109.68:9890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/motu.php"] [unique_id "ary0tJOnWJRlb5xgkk37-AAAALs"]
[Wed Sep 30 01:05:24.896221 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.896495 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:24.959415 2026] [security2:error] [pid 251754:tid 251899] [client 20.213.164.196:30010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/a.php"] [unique_id "ary0tJOnWJRlb5xgkk38AgAAAJI"]
[Wed Sep 30 01:05:24.986586 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:24.986910 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.008233 2026] [security2:error] [pid 251754:tid 251993] [client 4.240.25.22:12432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-filemannger.php"] [unique_id "ary0tZOnWJRlb5xgkk38EgAAAPA"]
[Wed Sep 30 01:05:25.012286 2026] [security2:error] [pid 251754:tid 251774] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38FAAAuRE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297924&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:25.012317 2026] [security2:error] [pid 251754:tid 251774] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38FAAAuRE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297924&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:25.020290 2026] [security2:error] [pid 251754:tid 251986] [client 20.58.177.98:55084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/cdc.php"] [unique_id "ary0tZOnWJRlb5xgkk38FwAAAOk"]
[Wed Sep 30 01:05:25.024997 2026] [security2:error] [pid 251754:tid 251911] [client 52.172.226.14:40534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary0tZOnWJRlb5xgkk38GAAAAJ4"]
[Wed Sep 30 01:05:25.078516 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.078785 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.089830 2026] [security2:error] [pid 251754:tid 251976] [client 37.41.16.35:58226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0tZOnWJRlb5xgkk38HAAAAN8"]
[Wed Sep 30 01:05:25.089941 2026] [security2:error] [pid 251754:tid 251976] [client 37.41.16.35:58226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0tZOnWJRlb5xgkk38HAAAAN8"]
[Wed Sep 30 01:05:25.118278 2026] [security2:error] [pid 251754:tid 251967] [client 52.231.30.175:32803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/yich.php"] [unique_id "ary0tZOnWJRlb5xgkk38HQAAANY"]
[Wed Sep 30 01:05:25.169728 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.170006 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.262982 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.263408 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.308973 2026] [security2:error] [pid 251754:tid 251969] [client 13.70.4.78:6095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/termps.php"] [unique_id "ary0tZOnWJRlb5xgkk38NQAAANg"]
[Wed Sep 30 01:05:25.324973 2026] [security2:error] [pid 251754:tid 251941] [client 74.7.243.227:40574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0tZOnWJRlb5xgkk38OAAAALw"], referer: http://www.homs.co.ke/?del=error_log&p=L3Byb2MvMzc1NDg0L2N3ZA==
[Wed Sep 30 01:05:25.337993 2026] [security2:error] [pid 251754:tid 251922] [client 20.58.177.98:3510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gulu.php"] [unique_id "ary0tZOnWJRlb5xgkk38PAAAAKk"]
[Wed Sep 30 01:05:25.351386 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.351666 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.383443 2026] [security2:error] [pid 251754:tid 251938] [client 52.231.30.175:32745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-blink.php"] [unique_id "ary0tZOnWJRlb5xgkk38RgAAALk"]
[Wed Sep 30 01:05:25.390281 2026] [security2:error] [pid 251754:tid 251998] [client 20.213.164.196:30002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/cord.php"] [unique_id "ary0tZOnWJRlb5xgkk38RwAAAPU"]
[Wed Sep 30 01:05:25.390357 2026] [security2:error] [pid 251754:tid 251986] [client 20.251.39.228:19162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ms-edit.php"] [unique_id "ary0tZOnWJRlb5xgkk38SAAAAOk"]
[Wed Sep 30 01:05:25.397346 2026] [security2:error] [pid 251754:tid 251939] [client 74.225.148.80:13333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/buy.php"] [unique_id "ary0tZOnWJRlb5xgkk38SQAAALo"]
[Wed Sep 30 01:05:25.443501 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.443769 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.454077 2026] [security2:error] [pid 251754:tid 251771] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38TgAA4A4"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:25.454104 2026] [security2:error] [pid 251754:tid 251771] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38TgAA4A4"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:25.504486 2026] [security2:error] [pid 251754:tid 251793] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38UwAAriQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211545&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:05:25.504512 2026] [security2:error] [pid 251754:tid 251793] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0tZOnWJRlb5xgkk38UwAAriQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211545&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:05:25.512164 2026] [security2:error] [pid 251754:tid 251933] [client 52.172.226.14:40559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/article.php"] [unique_id "ary0tZOnWJRlb5xgkk38VgAAALQ"]
[Wed Sep 30 01:05:25.533476 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.533653 2026] [security2:error] [pid 251754:tid 251970] [client 4.240.25.22:20305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/222.php"] [unique_id "ary0tZOnWJRlb5xgkk38WQAAANk"]
[Wed Sep 30 01:05:25.533749 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.624062 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.624322 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.645957 2026] [security2:error] [pid 251754:tid 251888] [client 52.231.30.175:32738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-logis.php"] [unique_id "ary0tZOnWJRlb5xgkk38bwAAAIc"]
[Wed Sep 30 01:05:25.664529 2026] [security2:error] [pid 251754:tid 251895] [client 20.58.177.98:55041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/bala.php"] [unique_id "ary0tZOnWJRlb5xgkk38cQAAAI4"]
[Wed Sep 30 01:05:25.692972 2026] [security2:error] [pid 251754:tid 251928] [client 20.198.74.230:23589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/kgblegacy.php"] [unique_id "ary0tZOnWJRlb5xgkk38eAAAAK8"]
[Wed Sep 30 01:05:25.715277 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.715540 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.726011 2026] [security2:error] [pid 251754:tid 251993] [client 13.70.4.78:45177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/brand.php"] [unique_id "ary0tZOnWJRlb5xgkk38fAAAAPA"]
[Wed Sep 30 01:05:25.805182 2026] [security2:error] [pid 251754:tid 251938] [client 20.251.39.228:13457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/abc.php"] [unique_id "ary0tZOnWJRlb5xgkk38gwAAALk"]
[Wed Sep 30 01:05:25.810938 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.811403 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.859302 2026] [security2:error] [pid 251754:tid 252013] [client 35.241.233.26:53288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary0tZOnWJRlb5xgkk38hQAAAQQ"]
[Wed Sep 30 01:05:25.862632 2026] [security2:error] [pid 251754:tid 251937] [client 223.235.102.107:11526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0tZOnWJRlb5xgkk38hwAAALg"]
[Wed Sep 30 01:05:25.862788 2026] [security2:error] [pid 251754:tid 251937] [client 223.235.102.107:11526] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0tZOnWJRlb5xgkk38hwAAALg"]
[Wed Sep 30 01:05:25.889058 2026] [security2:error] [pid 251754:tid 252003] [client 20.213.164.196:30001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/anom.php"] [unique_id "ary0tZOnWJRlb5xgkk38igAAAPo"]
[Wed Sep 30 01:05:25.889322 2026] [security2:error] [pid 251754:tid 251924] [client 74.225.148.80:13318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ioxi-o.php"] [unique_id "ary0tZOnWJRlb5xgkk38iwAAAKs"]
[Wed Sep 30 01:05:25.898175 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.898436 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:25.909790 2026] [security2:error] [pid 251754:tid 251906] [client 52.231.30.175:32741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/esc.php"] [unique_id "ary0tZOnWJRlb5xgkk38kAAAAJk"]
[Wed Sep 30 01:05:25.911165 2026] [security2:error] [pid 251754:tid 251987] [remote 168.100.149.17:43076] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0tZOnWJRlb5xgkk38gQAAiCs"]
[Wed Sep 30 01:05:25.980091 2026] [security2:error] [pid 251754:tid 251935] [client 20.58.177.98:55051] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "geyserjz.com"] [uri "/c99.php"] [unique_id "ary0tZOnWJRlb5xgkk38mwAAALY"]
[Wed Sep 30 01:05:25.988412 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:25.988683 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.047782 2026] [security2:error] [pid 251754:tid 251912] [client 52.172.226.14:3849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/link.php"] [unique_id "ary0tpOnWJRlb5xgkk38pwAAAJ8"]
[Wed Sep 30 01:05:26.080225 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.080487 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.118758 2026] [security2:error] [pid 251754:tid 251974] [client 45.138.12.32:26160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dje.okj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0tpOnWJRlb5xgkk38qgAAAN0"]
[Wed Sep 30 01:05:26.122538 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.4.78:6108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/atomlib.php"] [unique_id "ary0tpOnWJRlb5xgkk38qwAAAKU"]
[Wed Sep 30 01:05:26.125393 2026] [security2:error] [pid 251754:tid 251797] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tpOnWJRlb5xgkk38rAAAxSg"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=212702
[Wed Sep 30 01:05:26.125413 2026] [security2:error] [pid 251754:tid 251797] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tpOnWJRlb5xgkk38rAAAxSg"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=212702
[Wed Sep 30 01:05:26.139829 2026] [security2:error] [pid 251754:tid 251991] [client 31.189.214.146:63205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk38rgAAAO4"]
[Wed Sep 30 01:05:26.140596 2026] [security2:error] [pid 251754:tid 251991] [client 31.189.214.146:63205] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk38rgAAAO4"]
[Wed Sep 30 01:05:26.160862 2026] [security2:error] [pid 251754:tid 251955] [client 35.241.233.26:61786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary0tpOnWJRlb5xgkk38sAAAAMo"]
[Wed Sep 30 01:05:26.171909 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.172178 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.172591 2026] [security2:error] [pid 251754:tid 252007] [client 52.231.30.175:32765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/2.php"] [unique_id "ary0tpOnWJRlb5xgkk38swAAAP4"]
[Wed Sep 30 01:05:26.263651 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.263970 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.295661 2026] [security2:error] [pid 251754:tid 251890] [client 20.58.177.98:3586] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "geyserjz.com"] [uri "/c99.php"] [unique_id "ary0tpOnWJRlb5xgkk38xAAAAIk"]
[Wed Sep 30 01:05:26.347630 2026] [security2:error] [pid 251754:tid 252012] [client 20.213.164.196:30095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/plugins.php"] [unique_id "ary0tpOnWJRlb5xgkk380AAAAQM"]
[Wed Sep 30 01:05:26.348252 2026] [security2:error] [pid 251754:tid 251972] [client 20.251.39.228:20503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/motu.php"] [unique_id "ary0tpOnWJRlb5xgkk380QAAANs"]
[Wed Sep 30 01:05:26.360936 2026] [security2:error] [pid 251754:tid 251960] [client 103.241.204.139:58885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk381QAAAM8"]
[Wed Sep 30 01:05:26.361024 2026] [security2:error] [pid 251754:tid 251960] [client 103.241.204.139:58885] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk381QAAAM8"]
[Wed Sep 30 01:05:26.363681 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.363953 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.396077 2026] [security2:error] [pid 251754:tid 251887] [client 4.196.65.241:2065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wp5.php"] [unique_id "ary0tpOnWJRlb5xgkk383gAAAIY"]
[Wed Sep 30 01:05:26.416089 2026] [security2:error] [pid 251754:tid 251953] [client 74.225.148.80:13441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ans.php"] [unique_id "ary0tpOnWJRlb5xgkk384gAAAMg"]
[Wed Sep 30 01:05:26.435762 2026] [security2:error] [pid 251754:tid 251955] [client 52.231.30.175:32724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/ba.php"] [unique_id "ary0tpOnWJRlb5xgkk385gAAAMo"]
[Wed Sep 30 01:05:26.446733 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.447013 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.448142 2026] [security2:error] [pid 251754:tid 252007] [client 35.241.233.26:56884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary0tpOnWJRlb5xgkk386gAAAP4"]
[Wed Sep 30 01:05:26.457210 2026] [security2:error] [pid 251754:tid 251996] [client 13.70.4.78:6085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/product.php"] [unique_id "ary0tpOnWJRlb5xgkk386wAAAPM"]
[Wed Sep 30 01:05:26.499570 2026] [core:error] [pid 251754:tid 251892] [client 45.3.34.67:57783] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:05:26.499590 2026] [core:error] [pid 251754:tid 251892] [client 45.3.34.67:57783] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://yourkatana.com/wp-login.php
[Wed Sep 30 01:05:26.543111 2026] [security2:error] [pid 251754:tid 251906] [client 52.172.226.14:40628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/lock360.php"] [unique_id "ary0tpOnWJRlb5xgkk389AAAAJk"]
[Wed Sep 30 01:05:26.610663 2026] [security2:error] [pid 251754:tid 251961] [client 20.58.177.98:3452] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "geyserjz.com"] [uri "/c99.php"] [unique_id "ary0tpOnWJRlb5xgkk38_gAAANA"]
[Wed Sep 30 01:05:26.667404 2026] [security2:error] [pid 251754:tid 251975] [client 103.159.192.142:55883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk39CAAAAN4"]
[Wed Sep 30 01:05:26.667529 2026] [security2:error] [pid 251754:tid 251975] [client 103.159.192.142:55883] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk39CAAAAN4"]
[Wed Sep 30 01:05:26.700408 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.30.175:33092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/great.php"] [unique_id "ary0tpOnWJRlb5xgkk39EgAAAMc"]
[Wed Sep 30 01:05:26.702158 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.702692 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.721787 2026] [security2:error] [pid 251754:tid 251907] [client 20.194.30.107:53376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/666.php"] [unique_id "ary0tpOnWJRlb5xgkk39GgAAAJo"]
[Wed Sep 30 01:05:26.756157 2026] [security2:error] [pid 251754:tid 251991] [client 35.241.233.26:49256] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary0tpOnWJRlb5xgkk39IAAAAO4"]
[Wed Sep 30 01:05:26.759763 2026] [security2:error] [pid 251754:tid 251986] [client 20.251.39.228:23005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/inputs.php"] [unique_id "ary0tpOnWJRlb5xgkk39IQAAAOk"]
[Wed Sep 30 01:05:26.776923 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.777204 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.795993 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.796255 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.805945 2026] [security2:error] [pid 251754:tid 251790] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tpOnWJRlb5xgkk39KAAA5yE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D315%26t%3D7996
[Wed Sep 30 01:05:26.805979 2026] [security2:error] [pid 251754:tid 251790] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0tpOnWJRlb5xgkk39KAAA5yE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D315%26t%3D7996
[Wed Sep 30 01:05:26.806522 2026] [security2:error] [pid 251754:tid 251939] [client 13.70.4.78:60675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/function.php"] [unique_id "ary0tpOnWJRlb5xgkk39KwAAALo"]
[Wed Sep 30 01:05:26.812647 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.812997 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.845143 2026] [security2:error] [pid 251754:tid 251945] [client 20.213.164.196:29749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/zlwvxiyp.php"] [unique_id "ary0tpOnWJRlb5xgkk39LgAAAMA"]
[Wed Sep 30 01:05:26.910219 2026] [security2:error] [pid 251754:tid 252005] [client 20.214.109.68:9468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/inputs.php"] [unique_id "ary0tpOnWJRlb5xgkk39NAAAAPw"]
[Wed Sep 30 01:05:26.924798 2026] [security2:error] [pid 251754:tid 251998] [client 74.225.148.80:13479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/gf.php"] [unique_id "ary0tpOnWJRlb5xgkk39NwAAAPU"]
[Wed Sep 30 01:05:26.925970 2026] [security2:error] [pid 251754:tid 251947] [client 20.58.177.98:3434] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "geyserjz.com"] [uri "/c99.php"] [unique_id "ary0tpOnWJRlb5xgkk39OAAAAMI"]
[Wed Sep 30 01:05:26.953931 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.954204 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:26.972871 2026] [security2:error] [pid 251754:tid 251969] [client 155.190.6.18:43968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk39RAAAANg"]
[Wed Sep 30 01:05:26.986108 2026] [security2:error] [pid 251754:tid 251910] [client 52.231.30.175:32810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary0tpOnWJRlb5xgkk39RgAAAJ0"]
[Wed Sep 30 01:05:26.992661 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:26.992949 2026] [access_compat:error] [pid 251754:tid 251902] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.049731 2026] [security2:error] [pid 251754:tid 251987] [client 35.241.233.26:60492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary0t5OnWJRlb5xgkk39UQAAAOo"]
[Wed Sep 30 01:05:27.072189 2026] [security2:error] [pid 251754:tid 251982] [client 52.172.226.14:3868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-trackback.php"] [unique_id "ary0t5OnWJRlb5xgkk39VwAAAOU"]
[Wed Sep 30 01:05:27.084356 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.084604 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.151603 2026] [security2:error] [pid 251754:tid 252010] [client 13.70.4.78:6123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/0x.php"] [unique_id "ary0t5OnWJRlb5xgkk39XQAAAQE"]
[Wed Sep 30 01:05:27.158459 2026] [security2:error] [pid 251754:tid 251895] [client 43.104.4.217:31241] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary0t5OnWJRlb5xgkk39XgAAAI4"], referer: https://coscharis-tech.com/product-category/software/3d-design-animation-software/?wlfilter=1&woolentor_product_cat=computers%2Cinteractive-smart-panels
[Wed Sep 30 01:05:27.176514 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.176841 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.242190 2026] [security2:error] [pid 251754:tid 252009] [client 20.58.177.98:3401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/ttivnife.php"] [unique_id "ary0t5OnWJRlb5xgkk39bwAAAQA"]
[Wed Sep 30 01:05:27.250325 2026] [security2:error] [pid 251754:tid 251920] [client 52.231.30.175:33098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/robots.php"] [unique_id "ary0t5OnWJRlb5xgkk39cwAAAKc"]
[Wed Sep 30 01:05:27.262155 2026] [security2:error] [pid 251754:tid 251969] [client 155.190.6.18:43968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0tpOnWJRlb5xgkk39RAAAANg"]
[Wed Sep 30 01:05:27.271612 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.272233 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.296027 2026] [security2:error] [pid 251754:tid 251990] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0t5OnWJRlb5xgkk39gAAAAO0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:27.357998 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.358268 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.368753 2026] [security2:error] [pid 251754:tid 251945] [client 20.251.39.228:16893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp9.php"] [unique_id "ary0t5OnWJRlb5xgkk39kAAAAMA"]
[Wed Sep 30 01:05:27.376396 2026] [security2:error] [pid 251754:tid 252012] [client 35.241.233.26:60758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary0t5OnWJRlb5xgkk39kQAAAQM"]
[Wed Sep 30 01:05:27.377735 2026] [security2:error] [pid 251754:tid 251932] [client 20.213.164.196:29758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary0t5OnWJRlb5xgkk39kgAAALM"]
[Wed Sep 30 01:05:27.400668 2026] [security2:error] [pid 251754:tid 252005] [client 74.225.148.80:11304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/man.php"] [unique_id "ary0t5OnWJRlb5xgkk39mQAAAPw"]
[Wed Sep 30 01:05:27.401509 2026] [security2:error] [pid 251754:tid 252009] [client 74.7.243.227:40586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0t5OnWJRlb5xgkk39mgAAAQA"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvNDg1MzI1L2N3ZA==
[Wed Sep 30 01:05:27.447426 2026] [security2:error] [pid 251754:tid 252008] [client 20.194.30.107:17481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/133.php"] [unique_id "ary0t5OnWJRlb5xgkk39oQAAAP8"]
[Wed Sep 30 01:05:27.450083 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.450339 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.491103 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.4.78:60706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/index.php"] [unique_id "ary0t5OnWJRlb5xgkk39pgAAAO0"]
[Wed Sep 30 01:05:27.513083 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTg%3D
[Wed Sep 30 01:05:27.513351 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTg%3D
[Wed Sep 30 01:05:27.515448 2026] [security2:error] [pid 251754:tid 251891] [client 52.231.30.175:33100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/k.php"] [unique_id "ary0t5OnWJRlb5xgkk39qgAAAIo"]
[Wed Sep 30 01:05:27.546730 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.547202 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.566378 2026] [security2:error] [pid 251754:tid 251998] [client 20.58.177.98:3494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/admin.php/2P.php"] [unique_id "ary0t5OnWJRlb5xgkk39rQAAAPU"]
[Wed Sep 30 01:05:27.566908 2026] [security2:error] [pid 251754:tid 251944] [client 52.172.226.14:40635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/.well-known/index.php"] [unique_id "ary0t5OnWJRlb5xgkk39rgAAAL8"]
[Wed Sep 30 01:05:27.583558 2026] [security2:error] [pid 251754:tid 251981] [client 52.231.69.245:38634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0t5OnWJRlb5xgkk39rwAAAOQ"]
[Wed Sep 30 01:05:27.632081 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.632349 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.686156 2026] [security2:error] [pid 251754:tid 251980] [client 20.28.180.172:61205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/d12.php"] [unique_id "ary0t5OnWJRlb5xgkk39vAAAAOM"]
[Wed Sep 30 01:05:27.721665 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.721963 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.725753 2026] [security2:error] [pid 251754:tid 251968] [client 35.241.233.26:60059] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary0t5OnWJRlb5xgkk39yAAAANc"]
[Wed Sep 30 01:05:27.747565 2026] [security2:error] [pid 251754:tid 251920] [client 20.213.164.196:29744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary0t5OnWJRlb5xgkk39ywAAAKc"]
[Wed Sep 30 01:05:27.779860 2026] [security2:error] [pid 251754:tid 251914] [client 152.59.169.65:62112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0t5OnWJRlb5xgkk39zwAAAKE"]
[Wed Sep 30 01:05:27.779968 2026] [security2:error] [pid 251754:tid 251914] [client 152.59.169.65:62112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0t5OnWJRlb5xgkk39zwAAAKE"]
[Wed Sep 30 01:05:27.781733 2026] [security2:error] [pid 251754:tid 251975] [client 52.231.30.175:32817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/w.php"] [unique_id "ary0t5OnWJRlb5xgkk390AAAAN4"]
[Wed Sep 30 01:05:27.814625 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.814901 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.850475 2026] [security2:error] [pid 251754:tid 251906] [client 52.231.69.245:38636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0t5OnWJRlb5xgkk392gAAAJk"]
[Wed Sep 30 01:05:27.885037 2026] [security2:error] [pid 251754:tid 251966] [client 20.58.177.98:3662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/cord.php"] [unique_id "ary0t5OnWJRlb5xgkk393QAAANU"]
[Wed Sep 30 01:05:27.896522 2026] [security2:error] [pid 251754:tid 251983] [client 13.70.4.78:6109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary0t5OnWJRlb5xgkk393wAAAOY"]
[Wed Sep 30 01:05:27.897761 2026] [security2:error] [pid 251754:tid 251977] [remote 168.100.149.105:26796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0t5OnWJRlb5xgkk390wAA8hU"]
[Wed Sep 30 01:05:27.899233 2026] [security2:error] [pid 251754:tid 251831] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0t5OnWJRlb5xgkk394QAAx0o"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D62794
[Wed Sep 30 01:05:27.899264 2026] [security2:error] [pid 251754:tid 251831] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0t5OnWJRlb5xgkk394QAAx0o"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D62794
[Wed Sep 30 01:05:27.906456 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.906728 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:27.956243 2026] [security2:error] [pid 251754:tid 251931] [client 104.208.65.139:3727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/media.php"] [unique_id "ary0t5OnWJRlb5xgkk395gAAALI"]
[Wed Sep 30 01:05:27.960632 2026] [security2:error] [pid 251754:tid 251991] [client 20.194.30.107:17314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/dex.php"] [unique_id "ary0t5OnWJRlb5xgkk395wAAAO4"]
[Wed Sep 30 01:05:27.998047 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:27.998308 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.001570 2026] [security2:error] [pid 251754:tid 251993] [client 74.225.148.80:11274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/dev.php"] [unique_id "ary0uJOnWJRlb5xgkk398AAAAPA"]
[Wed Sep 30 01:05:28.018278 2026] [security2:error] [pid 251754:tid 251922] [client 35.241.233.26:61955] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/test/wp-includes/wlwmanifest.xml"] [unique_id "ary0uJOnWJRlb5xgkk399gAAAKk"]
[Wed Sep 30 01:05:28.023138 2026] [security2:error] [pid 251754:tid 251932] [client 52.172.226.14:3885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary0uJOnWJRlb5xgkk399wAAALM"]
[Wed Sep 30 01:05:28.033392 2026] [security2:error] [pid 251754:tid 252002] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0uJOnWJRlb5xgkk39-QAAAPk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:28.047160 2026] [security2:error] [pid 251754:tid 252009] [client 52.231.30.175:32828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/ccc.php"] [unique_id "ary0uJOnWJRlb5xgkk39-wAAAQA"]
[Wed Sep 30 01:05:28.062763 2026] [security2:error] [pid 251754:tid 251948] [client 20.219.2.60:19393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws86.php"] [unique_id "ary0uJOnWJRlb5xgkk39_wAAAMM"]
[Wed Sep 30 01:05:28.090726 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.091041 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.099694 2026] [security2:error] [pid 251754:tid 251995] [client 20.213.164.196:29977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/admin.php/c.php"] [unique_id "ary0uJOnWJRlb5xgkk3-BwAAAPI"]
[Wed Sep 30 01:05:28.106172 2026] [security2:error] [pid 251754:tid 251912] [client 20.251.39.228:23031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/public/vx.php"] [unique_id "ary0uJOnWJRlb5xgkk3-CQAAAJ8"]
[Wed Sep 30 01:05:28.123140 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.69.245:38595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/b.php"] [unique_id "ary0uJOnWJRlb5xgkk3-CwAAAJQ"]
[Wed Sep 30 01:05:28.149145 2026] [http2:warn] [pid 212454:tid 212674] [client 52.167.144.211:58556] h2_stream(212454-1522-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:05:28.185900 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.186336 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.195536 2026] [security2:error] [pid 251754:tid 251981] [client 4.240.25.22:20300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/samll.php"] [unique_id "ary0uJOnWJRlb5xgkk3-GAAAAOQ"]
[Wed Sep 30 01:05:28.206052 2026] [security2:error] [pid 251754:tid 251929] [client 20.58.177.98:3639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/anom.php"] [unique_id "ary0uJOnWJRlb5xgkk3-GwAAALA"]
[Wed Sep 30 01:05:28.234531 2026] [security2:error] [pid 251754:tid 251938] [client 13.70.4.78:60715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/classwithtostring.php"] [unique_id "ary0uJOnWJRlb5xgkk3-HAAAALk"]
[Wed Sep 30 01:05:28.272242 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.272526 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.276414 2026] [security2:error] [pid 251754:tid 251851] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0uJOnWJRlb5xgkk3-IAAAyV4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255495&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:05:28.276452 2026] [security2:error] [pid 251754:tid 251851] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0uJOnWJRlb5xgkk3-IAAAyV4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255495&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:05:28.314609 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:32792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/images.php"] [unique_id "ary0uJOnWJRlb5xgkk3-JwAAAOU"]
[Wed Sep 30 01:05:28.337170 2026] [security2:error] [pid 251754:tid 251989] [client 35.241.233.26:62506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/site/wp-includes/wlwmanifest.xml"] [unique_id "ary0uJOnWJRlb5xgkk3-KwAAAOw"]
[Wed Sep 30 01:05:28.362920 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.363176 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.391237 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.69.245:38983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/admin.php"] [unique_id "ary0uJOnWJRlb5xgkk3-MwAAAPo"]
[Wed Sep 30 01:05:28.433154 2026] [security2:error] [pid 251754:tid 251904] [client 74.7.242.1:43118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0uJOnWJRlb5xgkk3-OgAAAJc"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:05:28.453336 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.453629 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.491087 2026] [security2:error] [pid 251754:tid 252007] [client 122.173.27.10:11230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0uJOnWJRlb5xgkk3-QAAAAP4"]
[Wed Sep 30 01:05:28.491987 2026] [security2:error] [pid 251754:tid 252007] [client 122.173.27.10:11230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0uJOnWJRlb5xgkk3-QAAAAP4"]
[Wed Sep 30 01:05:28.498951 2026] [security2:error] [pid 251754:tid 251952] [client 74.225.148.80:13353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ms-edit.php"] [unique_id "ary0uJOnWJRlb5xgkk3-RQAAAMc"]
[Wed Sep 30 01:05:28.512240 2026] [security2:error] [pid 251754:tid 251919] [client 52.172.226.14:4177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary0uJOnWJRlb5xgkk3-RgAAAKY"]
[Wed Sep 30 01:05:28.522397 2026] [security2:error] [pid 251754:tid 251929] [client 20.58.177.98:3488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/plugins.php"] [unique_id "ary0uJOnWJRlb5xgkk3-SQAAALA"]
[Wed Sep 30 01:05:28.545790 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.546079 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.556529 2026] [security2:error] [pid 251754:tid 251938] [client 20.251.39.228:13451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/inege.php"] [unique_id "ary0uJOnWJRlb5xgkk3-TgAAALk"]
[Wed Sep 30 01:05:28.577226 2026] [security2:error] [pid 251754:tid 251894] [client 116.197.133.25:54883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0uJOnWJRlb5xgkk3-UQAAAI0"]
[Wed Sep 30 01:05:28.577337 2026] [security2:error] [pid 251754:tid 251894] [client 116.197.133.25:54883] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0uJOnWJRlb5xgkk3-UQAAAI0"]
[Wed Sep 30 01:05:28.579705 2026] [security2:error] [pid 251754:tid 251907] [client 52.231.30.175:33129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/alls.php"] [unique_id "ary0uJOnWJRlb5xgkk3-UgAAAJo"]
[Wed Sep 30 01:05:28.598716 2026] [security2:error] [pid 251754:tid 251916] [client 20.70.173.30:60021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-blog-header.php"] [unique_id "ary0uJOnWJRlb5xgkk3-VAAAAKM"]
[Wed Sep 30 01:05:28.611259 2026] [security2:error] [pid 251754:tid 251917] [client 13.70.4.78:6101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/dropdown.php"] [unique_id "ary0uJOnWJRlb5xgkk3-VQAAAKQ"]
[Wed Sep 30 01:05:28.644609 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.644918 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.651569 2026] [security2:error] [pid 251754:tid 251974] [client 52.231.69.245:38642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/fling.php"] [unique_id "ary0uJOnWJRlb5xgkk3-VwAAAN0"]
[Wed Sep 30 01:05:28.695469 2026] [security2:error] [pid 251754:tid 252012] [client 35.241.233.26:61509] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "fitcorp.wmxone.com"] [uri "/login/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary0uJOnWJRlb5xgkk3-WwAAAQM"]
[Wed Sep 30 01:05:28.702300 2026] [security2:error] [pid 251754:tid 251948] [client 20.213.164.196:29959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/admin.php/go.php"] [unique_id "ary0uJOnWJRlb5xgkk3-XwAAAMM"]
[Wed Sep 30 01:05:28.733095 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.733541 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.753260 2026] [security2:error] [pid 251754:tid 251843] [remote 40.77.167.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0uJOnWJRlb5xgkk3-ZgAAp1Y"]
[Wed Sep 30 01:05:28.822334 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.822785 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.835250 2026] [security2:error] [pid 251754:tid 251892] [client 20.58.177.98:3512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/groud3.php"] [unique_id "ary0uJOnWJRlb5xgkk3-bgAAAIs"]
[Wed Sep 30 01:05:28.840545 2026] [security2:error] [pid 251754:tid 251893] [client 52.231.30.175:32768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/admin.php"] [unique_id "ary0uJOnWJRlb5xgkk3-cAAAAIw"]
[Wed Sep 30 01:05:28.856664 2026] [security2:error] [pid 251754:tid 251968] [client 43.104.4.199:57882] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary0uJOnWJRlb5xgkk3-cwAAANc"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:05:28.880350 2026] [security2:error] [pid 251754:tid 252009] [client 43.104.4.193:2197] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary0uJOnWJRlb5xgkk3-fAAAAQA"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:05:28.892434 2026] [security2:error] [pid 251754:tid 251947] [client 43.104.4.216:54161] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary0uJOnWJRlb5xgkk3-gAAAAMI"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:05:28.913004 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:28.913302 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:28.915714 2026] [security2:error] [pid 251754:tid 251950] [client 52.231.69.245:38618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ary0uJOnWJRlb5xgkk3-hgAAAMU"]
[Wed Sep 30 01:05:28.964424 2026] [security2:error] [pid 251754:tid 252004] [client 13.70.4.78:60731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/moon.php"] [unique_id "ary0uJOnWJRlb5xgkk3-iAAAAPs"]
[Wed Sep 30 01:05:29.000229 2026] [security2:error] [pid 251754:tid 251933] [client 74.225.148.80:13329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/txets.php"] [unique_id "ary0uJOnWJRlb5xgkk3-iwAAALQ"]
[Wed Sep 30 01:05:29.003160 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.003503 2026] [security2:error] [pid 251754:tid 251848] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0uJOnWJRlb5xgkk3-igAA3Vs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297557&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:29.003537 2026] [security2:error] [pid 251754:tid 251848] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0uJOnWJRlb5xgkk3-igAA3Vs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297557&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:29.003562 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.040990 2026] [security2:error] [pid 251754:tid 251930] [client 52.172.226.14:3903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0uZOnWJRlb5xgkk3-jQAAALE"]
[Wed Sep 30 01:05:29.091853 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.092156 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.105713 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.30.175:32762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/geck.php"] [unique_id "ary0uZOnWJRlb5xgkk3-lwAAANM"]
[Wed Sep 30 01:05:29.123366 2026] [security2:error] [pid 251754:tid 251932] [client 20.251.39.228:19140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/nw.php"] [unique_id "ary0uZOnWJRlb5xgkk3-nAAAALM"]
[Wed Sep 30 01:05:29.147537 2026] [security2:error] [pid 251754:tid 251939] [client 20.58.177.98:3459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gaxby.php"] [unique_id "ary0uZOnWJRlb5xgkk3-nwAAALo"]
[Wed Sep 30 01:05:29.176964 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.69.245:39001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/adminfuns.php"] [unique_id "ary0uZOnWJRlb5xgkk3-pAAAAM8"]
[Wed Sep 30 01:05:29.183232 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.183513 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.273734 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.274003 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.289891 2026] [security2:error] [pid 251754:tid 251945] [client 157.66.27.54:47118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.27.66.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cityofmarional.com"] [uri "/wp-login.php"] [unique_id "ary0uZOnWJRlb5xgkk3-swAAAMA"]
[Wed Sep 30 01:05:29.291397 2026] [security2:error] [pid 251754:tid 251977] [client 20.213.164.196:29919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/groud3.php"] [unique_id "ary0uZOnWJRlb5xgkk3-ugAAAOA"]
[Wed Sep 30 01:05:29.312089 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:6135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/autoload_classmap.php"] [unique_id "ary0uZOnWJRlb5xgkk3-vAAAAJo"]
[Wed Sep 30 01:05:29.350033 2026] [security2:error] [pid 251754:tid 251886] [client 201.32.215.149:6288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0uZOnWJRlb5xgkk3-vQAAAIU"]
[Wed Sep 30 01:05:29.350202 2026] [security2:error] [pid 251754:tid 251886] [client 201.32.215.149:6288] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0uZOnWJRlb5xgkk3-vQAAAIU"]
[Wed Sep 30 01:05:29.366896 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.30.175:33112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/goods.php"] [unique_id "ary0uZOnWJRlb5xgkk3-wAAAAN8"]
[Wed Sep 30 01:05:29.367142 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.367506 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.439921 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.69.245:39009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/alfa.php"] [unique_id "ary0uZOnWJRlb5xgkk3-wgAAAJQ"]
[Wed Sep 30 01:05:29.456133 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.456382 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.462282 2026] [security2:error] [pid 251754:tid 251905] [client 20.58.177.98:55095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/dh9u7.php"] [unique_id "ary0uZOnWJRlb5xgkk3-yQAAAJg"]
[Wed Sep 30 01:05:29.463123 2026] [security2:error] [pid 251754:tid 252005] [client 20.214.109.68:62417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp9.php"] [unique_id "ary0uZOnWJRlb5xgkk3-ygAAAPw"]
[Wed Sep 30 01:05:29.547437 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.547711 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.548159 2026] [security2:error] [pid 251754:tid 251869] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0uZOnWJRlb5xgkk3-0wAAoXA"], referer: https://forum.torquayfans.com/viewtopic.php?p=36613
[Wed Sep 30 01:05:29.548179 2026] [security2:error] [pid 251754:tid 251869] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0uZOnWJRlb5xgkk3-0wAAoXA"], referer: https://forum.torquayfans.com/viewtopic.php?p=36613
[Wed Sep 30 01:05:29.552431 2026] [security2:error] [pid 251754:tid 251902] [client 52.172.226.14:40522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary0uZOnWJRlb5xgkk3-3gAAAJU"]
[Wed Sep 30 01:05:29.588482 2026] [security2:error] [pid 251754:tid 251823] [remote 64.23.166.180:17002] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.goldensnifferproducts.com"] [uri "/.env"] [unique_id "ary0uZOnWJRlb5xgkk3-5AAA1UI"]
[Wed Sep 30 01:05:29.631820 2026] [security2:error] [pid 251754:tid 251945] [client 52.231.30.175:32747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/dejavu.php"] [unique_id "ary0uZOnWJRlb5xgkk3-9gAAAMA"]
[Wed Sep 30 01:05:29.639213 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.639481 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.661931 2026] [security2:error] [pid 251754:tid 251907] [client 74.225.148.80:13348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/hao.php"] [unique_id "ary0uZOnWJRlb5xgkk3-_gAAAJo"]
[Wed Sep 30 01:05:29.688105 2026] [security2:error] [pid 251754:tid 251949] [client 20.251.39.228:40019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/t.php"] [unique_id "ary0uZOnWJRlb5xgkk3-_wAAAMQ"]
[Wed Sep 30 01:05:29.689949 2026] [security2:error] [pid 251754:tid 251950] [client 13.70.4.78:60682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/default.php"] [unique_id "ary0uZOnWJRlb5xgkk3_AAAAAMU"]
[Wed Sep 30 01:05:29.691683 2026] [security2:error] [pid 251754:tid 251886] [client 20.70.173.30:59983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-manager.php"] [unique_id "ary0uZOnWJRlb5xgkk3_AQAAAIU"]
[Wed Sep 30 01:05:29.700668 2026] [security2:error] [pid 251754:tid 251969] [client 52.231.69.245:38621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/222.php"] [unique_id "ary0uZOnWJRlb5xgkk3_AwAAANg"]
[Wed Sep 30 01:05:29.762470 2026] [security2:error] [pid 251754:tid 252003] [client 20.213.164.196:29967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/gaxby.php"] [unique_id "ary0uZOnWJRlb5xgkk3_BQAAAPo"]
[Wed Sep 30 01:05:29.763167 2026] [security2:error] [pid 251754:tid 251905] [client 45.138.12.32:36348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.djl.aze.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0uZOnWJRlb5xgkk3_BgAAAJg"]
[Wed Sep 30 01:05:29.776628 2026] [security2:error] [pid 251754:tid 252005] [client 20.58.177.98:3465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/koiy.php"] [unique_id "ary0uZOnWJRlb5xgkk3_CAAAAPw"]
[Wed Sep 30 01:05:29.797008 2026] [security2:error] [pid 251754:tid 251910] [client 152.59.165.7:60267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0uZOnWJRlb5xgkk3_DgAAAJ0"]
[Wed Sep 30 01:05:29.797121 2026] [security2:error] [pid 251754:tid 251910] [client 152.59.165.7:60267] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0uZOnWJRlb5xgkk3_DgAAAJ0"]
[Wed Sep 30 01:05:29.850316 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.850560 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.884190 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:29.884580 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:29.893307 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.30.175:33145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/h02ugyh.php"] [unique_id "ary0uZOnWJRlb5xgkk3_HwAAAM8"]
[Wed Sep 30 01:05:29.899208 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.178:59544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:29.899648 2026] [access_compat:error] [pid 251754:tid 251978] [client 47.79.13.178:59544] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:29.902392 2026] [security2:error] [pid 251754:tid 251971] [remote 168.100.149.146:25140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0uZOnWJRlb5xgkk3_DAAA-2k"]
[Wed Sep 30 01:05:29.964959 2026] [security2:error] [pid 251754:tid 251937] [client 52.231.69.245:38652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0uZOnWJRlb5xgkk3_JQAAALg"]
[Wed Sep 30 01:05:30.041187 2026] [security2:error] [pid 251754:tid 251906] [client 52.172.226.14:3884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary0upOnWJRlb5xgkk3_LwAAAJk"]
[Wed Sep 30 01:05:30.044750 2026] [security2:error] [pid 251754:tid 251972] [client 13.70.4.78:5638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary0upOnWJRlb5xgkk3_MAAAANs"]
[Wed Sep 30 01:05:30.066444 2026] [security2:error] [pid 251754:tid 251802] [remote 57.141.14.55:32740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary0upOnWJRlb5xgkk3_LAAApS0"]
[Wed Sep 30 01:05:30.078681 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.079126 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.095353 2026] [security2:error] [pid 251754:tid 251969] [client 20.58.177.98:3597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wordfence-waf.php"] [unique_id "ary0upOnWJRlb5xgkk3_OQAAANg"]
[Wed Sep 30 01:05:30.100043 2026] [security2:error] [pid 251754:tid 251901] [client 20.213.164.196:29954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/dh9u7.php"] [unique_id "ary0upOnWJRlb5xgkk3_OgAAAJQ"]
[Wed Sep 30 01:05:30.137745 2026] [security2:error] [pid 251754:tid 251910] [client 104.208.65.139:9608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/images.php"] [unique_id "ary0upOnWJRlb5xgkk3_QAAAAJ0"]
[Wed Sep 30 01:05:30.174622 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.175089 2026] [access_compat:error] [pid 251754:tid 252004] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.177234 2026] [security2:error] [pid 251754:tid 251996] [client 52.231.30.175:32823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/155.php"] [unique_id "ary0upOnWJRlb5xgkk3_SAAAAPM"]
[Wed Sep 30 01:05:30.231844 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.69.245:38622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/images.php"] [unique_id "ary0upOnWJRlb5xgkk3_TgAAAMY"]
[Wed Sep 30 01:05:30.260112 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.260405 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.270763 2026] [security2:error] [pid 251754:tid 251980] [client 213.136.69.135:55625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/theme-templates.php"] [unique_id "ary0upOnWJRlb5xgkk3_VgAAAOM"], referer: binance.com
[Wed Sep 30 01:05:30.339351 2026] [security2:error] [pid 251754:tid 251986] [client 74.225.148.80:13451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/33.php"] [unique_id "ary0upOnWJRlb5xgkk3_YgAAAOk"]
[Wed Sep 30 01:05:30.349396 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.349663 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.363981 2026] [security2:error] [pid 251754:tid 251887] [client 13.70.4.78:6080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary0upOnWJRlb5xgkk3_ZwAAAIY"]
[Wed Sep 30 01:05:30.386878 2026] [security2:error] [pid 251754:tid 251918] [client 20.251.39.228:33800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary0upOnWJRlb5xgkk3_aAAAAKU"]
[Wed Sep 30 01:05:30.402885 2026] [security2:error] [pid 251754:tid 251902] [client 202.179.95.79:53955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0upOnWJRlb5xgkk3_aQAAAJU"]
[Wed Sep 30 01:05:30.402989 2026] [security2:error] [pid 251754:tid 251902] [client 202.179.95.79:53955] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0upOnWJRlb5xgkk3_aQAAAJU"]
[Wed Sep 30 01:05:30.413430 2026] [security2:error] [pid 251754:tid 251933] [client 20.58.177.98:55102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wp5.php"] [unique_id "ary0upOnWJRlb5xgkk3_awAAALQ"]
[Wed Sep 30 01:05:30.427770 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:40600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:30.428042 2026] [access_compat:error] [pid 251754:tid 251949] [client 74.7.243.227:40600] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:05:30.429375 2026] [security2:error] [pid 251754:tid 251861] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0upOnWJRlb5xgkk3_bQAAu2g"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D12861
[Wed Sep 30 01:05:30.441856 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.442143 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.443923 2026] [security2:error] [pid 251754:tid 251969] [client 52.231.30.175:32808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/ops.php"] [unique_id "ary0upOnWJRlb5xgkk3_bwAAANg"]
[Wed Sep 30 01:05:30.459035 2026] [security2:error] [pid 251754:tid 251968] [client 203.122.45.246:54538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0upOnWJRlb5xgkk3_cAAAANc"]
[Wed Sep 30 01:05:30.459152 2026] [security2:error] [pid 251754:tid 251968] [client 203.122.45.246:54538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0upOnWJRlb5xgkk3_cAAAANc"]
[Wed Sep 30 01:05:30.522117 2026] [security2:error] [pid 251754:tid 251921] [client 52.231.69.245:38641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/media.php"] [unique_id "ary0upOnWJRlb5xgkk3_eAAAAKg"]
[Wed Sep 30 01:05:30.531367 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.531626 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.545148 2026] [security2:error] [pid 251754:tid 251931] [client 20.213.164.196:29981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/yvnqcuic.php"] [unique_id "ary0upOnWJRlb5xgkk3_fgAAALI"]
[Wed Sep 30 01:05:30.627723 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.628171 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.655256 2026] [security2:error] [pid 251754:tid 251938] [client 20.194.30.107:32733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/xkSudf.php"] [unique_id "ary0upOnWJRlb5xgkk3_jwAAALk"]
[Wed Sep 30 01:05:30.713911 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.714177 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:8649] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.730856 2026] [security2:error] [pid 251754:tid 251923] [client 20.58.177.98:3498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/em.php"] [unique_id "ary0upOnWJRlb5xgkk3_mwAAAKo"]
[Wed Sep 30 01:05:30.750167 2026] [autoindex:error] [pid 251754:tid 251977] [client 43.157.181.189:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/serviciosnevarez/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:30.761901 2026] [security2:error] [pid 251754:tid 251906] [client 52.231.30.175:32758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/mac.php"] [unique_id "ary0upOnWJRlb5xgkk3_oQAAAJk"]
[Wed Sep 30 01:05:30.788085 2026] [security2:error] [pid 251754:tid 251974] [client 52.231.69.245:38631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/mac.php"] [unique_id "ary0upOnWJRlb5xgkk3_ogAAAN0"]
[Wed Sep 30 01:05:30.806931 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.807249 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.811538 2026] [security2:error] [pid 251754:tid 251933] [client 13.70.4.78:5641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary0upOnWJRlb5xgkk3_pAAAALQ"]
[Wed Sep 30 01:05:30.818883 2026] [security2:error] [pid 251754:tid 251940] [client 20.28.180.172:18315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/okxh.php"] [unique_id "ary0upOnWJRlb5xgkk3_pQAAALs"]
[Wed Sep 30 01:05:30.876514 2026] [security2:error] [pid 251754:tid 251968] [client 52.172.226.14:3847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary0upOnWJRlb5xgkk3_qAAAANc"]
[Wed Sep 30 01:05:30.895730 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.896036 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:42197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:30.915501 2026] [security2:error] [pid 251754:tid 251927] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0upOnWJRlb5xgkk3_rgAAAK4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:30.930006 2026] [security2:error] [pid 251754:tid 251909] [client 20.213.164.196:30003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/koiy.php"] [unique_id "ary0upOnWJRlb5xgkk3_sgAAAJw"]
[Wed Sep 30 01:05:30.955723 2026] [security2:error] [pid 251754:tid 251889] [client 20.251.39.228:19193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/public/ws49.php"] [unique_id "ary0upOnWJRlb5xgkk3_twAAAIg"]
[Wed Sep 30 01:05:30.987479 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:30.987754 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.003910 2026] [security2:error] [pid 251754:tid 251971] [client 20.214.109.68:62451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/public/vx.php"] [unique_id "ary0u5OnWJRlb5xgkk3_vwAAANo"]
[Wed Sep 30 01:05:31.006303 2026] [security2:error] [pid 251754:tid 251912] [client 74.225.148.80:13325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/adminner.php"] [unique_id "ary0u5OnWJRlb5xgkk3_wQAAAJ8"]
[Wed Sep 30 01:05:31.048817 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.30.175:33111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/makeasmtp.php"] [unique_id "ary0u5OnWJRlb5xgkk3_xgAAAMc"]
[Wed Sep 30 01:05:31.051804 2026] [security2:error] [pid 251754:tid 251898] [client 20.58.177.98:3509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/hp.php"] [unique_id "ary0u5OnWJRlb5xgkk3_yAAAAJE"]
[Wed Sep 30 01:05:31.052205 2026] [security2:error] [pid 251754:tid 251900] [client 52.231.69.245:38639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ops.php"] [unique_id "ary0u5OnWJRlb5xgkk3_yQAAAJM"]
[Wed Sep 30 01:05:31.079226 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.079474 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.081989 2026] [security2:error] [pid 251754:tid 252010] [client 116.193.128.26:55422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk3_1QAAAQE"]
[Wed Sep 30 01:05:31.082117 2026] [security2:error] [pid 251754:tid 252010] [client 116.193.128.26:55422] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk3_1QAAAQE"]
[Wed Sep 30 01:05:31.125356 2026] [security2:error] [pid 251754:tid 251998] [client 216.73.216.46:8649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0u5OnWJRlb5xgkk3_2QAAAPU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTIvbm9kZTAvbWVtb3J5MjEy
[Wed Sep 30 01:05:31.170039 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.170476 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.177114 2026] [security2:error] [pid 251754:tid 251954] [client 13.70.4.78:6132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/mail.php"] [unique_id "ary0u5OnWJRlb5xgkk3_2wAAAMk"]
[Wed Sep 30 01:05:31.260320 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.260625 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.316329 2026] [security2:error] [pid 251754:tid 251968] [client 52.231.69.245:39035] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/1.php"] [unique_id "ary0u5OnWJRlb5xgkk3_4wAAANc"]
[Wed Sep 30 01:05:31.316418 2026] [security2:error] [pid 251754:tid 251968] [client 52.231.69.245:39035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/1.php"] [unique_id "ary0u5OnWJRlb5xgkk3_4wAAANc"]
[Wed Sep 30 01:05:31.317360 2026] [security2:error] [pid 251754:tid 251922] [client 216.73.216.46:42197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0u5OnWJRlb5xgkk3_5AAAAKk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvbm9kZTAvbWVtb3J5MjQx
[Wed Sep 30 01:05:31.323427 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:32999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/pucci.php"] [unique_id "ary0u5OnWJRlb5xgkk3_5QAAAOU"]
[Wed Sep 30 01:05:31.350709 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.350983 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.367490 2026] [security2:error] [pid 251754:tid 251916] [client 20.251.39.228:33854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gifclass.php"] [unique_id "ary0u5OnWJRlb5xgkk3_6wAAAKM"]
[Wed Sep 30 01:05:31.368991 2026] [security2:error] [pid 251754:tid 251951] [client 20.58.177.98:3615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wpuse.php"] [unique_id "ary0u5OnWJRlb5xgkk3_7AAAAMY"]
[Wed Sep 30 01:05:31.379357 2026] [security2:error] [pid 251754:tid 252008] [client 103.159.192.142:56373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk3_7wAAAP8"]
[Wed Sep 30 01:05:31.379456 2026] [security2:error] [pid 251754:tid 252008] [client 103.159.192.142:56373] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk3_7wAAAP8"]
[Wed Sep 30 01:05:31.444266 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.444717 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.516374 2026] [security2:error] [pid 251754:tid 251961] [client 52.172.226.14:40597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/filemanager/dialog.php"] [unique_id "ary0u5OnWJRlb5xgkk3_-gAAANA"]
[Wed Sep 30 01:05:31.531308 2026] [security2:error] [pid 251754:tid 251939] [client 74.225.148.80:11283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/thoms.php"] [unique_id "ary0u5OnWJRlb5xgkk3__AAAALo"]
[Wed Sep 30 01:05:31.534770 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.535052 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.569656 2026] [security2:error] [pid 251754:tid 251936] [client 4.240.25.22:12470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0u5OnWJRlb5xgkk0ABAAAALc"]
[Wed Sep 30 01:05:31.579618 2026] [security2:error] [pid 251754:tid 251938] [client 52.231.69.245:38600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/aaa.php"] [unique_id "ary0u5OnWJRlb5xgkk0ABQAAALk"]
[Wed Sep 30 01:05:31.589328 2026] [security2:error] [pid 251754:tid 251952] [client 20.213.164.196:29988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wordfence-waf.php"] [unique_id "ary0u5OnWJRlb5xgkk0ABwAAAMc"]
[Wed Sep 30 01:05:31.598082 2026] [security2:error] [pid 251754:tid 251937] [client 13.70.4.78:6120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/sx.php"] [unique_id "ary0u5OnWJRlb5xgkk0ACAAAALg"]
[Wed Sep 30 01:05:31.598418 2026] [security2:error] [pid 251754:tid 251898] [client 52.231.30.175:32751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/puc.php"] [unique_id "ary0u5OnWJRlb5xgkk0ACQAAAJE"]
[Wed Sep 30 01:05:31.624697 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.624992 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.655448 2026] [security2:error] [pid 251754:tid 252001] [client 45.138.12.40:65516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tourcomusa.com"] [uri "/wp-links-opml.php"] [unique_id "ary0u5OnWJRlb5xgkk0AEAAAAPg"]
[Wed Sep 30 01:05:31.684736 2026] [security2:error] [pid 251754:tid 251897] [client 20.58.177.98:3497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/file18x.php"] [unique_id "ary0u5OnWJRlb5xgkk0AEwAAAJA"]
[Wed Sep 30 01:05:31.718347 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.718616 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.807331 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.807778 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.839875 2026] [security2:error] [pid 251754:tid 251995] [client 20.251.39.228:16718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/sa.php7"] [unique_id "ary0u5OnWJRlb5xgkk0AIgAAAPI"]
[Wed Sep 30 01:05:31.852466 2026] [security2:error] [pid 251754:tid 251921] [client 52.231.69.245:38654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/chosen.php"] [unique_id "ary0u5OnWJRlb5xgkk0AIwAAAKg"]
[Wed Sep 30 01:05:31.872734 2026] [security2:error] [pid 251754:tid 251920] [client 223.181.60.167:21595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk0AJAAAAKc"]
[Wed Sep 30 01:05:31.872983 2026] [security2:error] [pid 251754:tid 251920] [client 223.181.60.167:21595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0u5OnWJRlb5xgkk0AJAAAAKc"]
[Wed Sep 30 01:05:31.881299 2026] [security2:error] [pid 251754:tid 251950] [client 52.231.30.175:32873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/8.php"] [unique_id "ary0u5OnWJRlb5xgkk0AJQAAAMU"]
[Wed Sep 30 01:05:31.900094 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.900522 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:31.910209 2026] [security2:error] [pid 251754:tid 252008] [remote 168.100.149.101:22360] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0u5OnWJRlb5xgkk0AGAAA9iw"]
[Wed Sep 30 01:05:31.975053 2026] [security2:error] [pid 251754:tid 251998] [client 161.118.214.16:49556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.apz.fah.mybluehost.me"] [uri "/"] [unique_id "ary0u5OnWJRlb5xgkk0AKwAAAPU"]
[Wed Sep 30 01:05:31.992108 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:31.992550 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.001509 2026] [security2:error] [pid 251754:tid 251901] [client 52.172.226.14:3913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/index/function.php"] [unique_id "ary0vJOnWJRlb5xgkk0APQAAAJQ"]
[Wed Sep 30 01:05:32.003137 2026] [security2:error] [pid 251754:tid 251901] [client 20.58.177.98:3474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/123viva.php"] [unique_id "ary0vJOnWJRlb5xgkk0APgAAAJQ"]
[Wed Sep 30 01:05:32.019200 2026] [security2:error] [pid 251754:tid 251898] [client 13.70.4.78:6127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary0vJOnWJRlb5xgkk0AQQAAAJE"]
[Wed Sep 30 01:05:32.020713 2026] [security2:error] [pid 251754:tid 251900] [client 74.225.148.80:11277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/a.php"] [unique_id "ary0vJOnWJRlb5xgkk0AQgAAAJM"]
[Wed Sep 30 01:05:32.086774 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.087216 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.109752 2026] [security2:error] [pid 251754:tid 251966] [client 20.213.164.196:30121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wp5.php"] [unique_id "ary0vJOnWJRlb5xgkk0ASwAAANU"]
[Wed Sep 30 01:05:32.129926 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.69.245:38989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/2P.php"] [unique_id "ary0vJOnWJRlb5xgkk0ATQAAAQI"]
[Wed Sep 30 01:05:32.153717 2026] [security2:error] [pid 251754:tid 251887] [client 52.231.30.175:33117] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/1.php"] [unique_id "ary0vJOnWJRlb5xgkk0AUQAAAIY"]
[Wed Sep 30 01:05:32.153847 2026] [security2:error] [pid 251754:tid 251887] [client 52.231.30.175:33117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/1.php"] [unique_id "ary0vJOnWJRlb5xgkk0AUQAAAIY"]
[Wed Sep 30 01:05:32.171614 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.171904 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.181794 2026] [security2:error] [pid 251754:tid 251932] [client 162.222.196.165:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0vJOnWJRlb5xgkk0AVwAAALM"]
[Wed Sep 30 01:05:32.268535 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.269008 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.322743 2026] [security2:error] [pid 251754:tid 251951] [client 20.58.177.98:3392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/Components.update.php"] [unique_id "ary0vJOnWJRlb5xgkk0AWQAAAMY"]
[Wed Sep 30 01:05:32.355624 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.355947 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.389786 2026] [security2:error] [pid 251754:tid 251892] [client 20.251.39.228:19191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/jp.php"] [unique_id "ary0vJOnWJRlb5xgkk0AXQAAAIs"]
[Wed Sep 30 01:05:32.392465 2026] [security2:error] [pid 251754:tid 251936] [client 52.231.69.245:39003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/min.php"] [unique_id "ary0vJOnWJRlb5xgkk0AXgAAALc"]
[Wed Sep 30 01:05:32.426894 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.30.175:32861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/admin.php"] [unique_id "ary0vJOnWJRlb5xgkk0AXwAAAJQ"]
[Wed Sep 30 01:05:32.445278 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.445528 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:32570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.476840 2026] [security2:error] [pid 251754:tid 251993] [client 20.213.164.196:29910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/em.php"] [unique_id "ary0vJOnWJRlb5xgkk0AYgAAAPA"]
[Wed Sep 30 01:05:32.479206 2026] [security2:error] [pid 251754:tid 252009] [client 20.214.109.68:62424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/inege.php"] [unique_id "ary0vJOnWJRlb5xgkk0AYwAAAQA"]
[Wed Sep 30 01:05:32.521347 2026] [security2:error] [pid 251754:tid 251980] [client 52.172.226.14:40631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary0vJOnWJRlb5xgkk0AZQAAAOM"]
[Wed Sep 30 01:05:32.536168 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.536466 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.545381 2026] [security2:error] [pid 251754:tid 251931] [client 106.214.2.47:21317] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AaAAAALI"]
[Wed Sep 30 01:05:32.552353 2026] [security2:error] [pid 251754:tid 251931] [client 106.214.2.47:21317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AaAAAALI"]
[Wed Sep 30 01:05:32.559837 2026] [security2:error] [pid 251754:tid 252010] [client 74.225.148.80:13346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/b8.php"] [unique_id "ary0vJOnWJRlb5xgkk0AagAAAQE"]
[Wed Sep 30 01:05:32.619439 2026] [security2:error] [pid 251754:tid 251966] [client 13.70.4.78:45174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/article.php"] [unique_id "ary0vJOnWJRlb5xgkk0AcQAAANU"]
[Wed Sep 30 01:05:32.627927 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.628228 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.652556 2026] [security2:error] [pid 251754:tid 252001] [client 20.58.177.98:3645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/sm.php"] [unique_id "ary0vJOnWJRlb5xgkk0AdAAAAPg"]
[Wed Sep 30 01:05:32.704148 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.30.175:32746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/edit.php"] [unique_id "ary0vJOnWJRlb5xgkk0AegAAAIk"]
[Wed Sep 30 01:05:32.717607 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.717896 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.731211 2026] [security2:error] [pid 251754:tid 251915] [client 43.227.131.37:27933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AfQAAAKI"]
[Wed Sep 30 01:05:32.731330 2026] [security2:error] [pid 251754:tid 251915] [client 43.227.131.37:27933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AfQAAAKI"]
[Wed Sep 30 01:05:32.810308 2026] [security2:error] [pid 251754:tid 251987] [client 52.231.69.245:38991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/great.php"] [unique_id "ary0vJOnWJRlb5xgkk0AgAAAAOo"]
[Wed Sep 30 01:05:32.827386 2026] [security2:error] [pid 251754:tid 251916] [client 49.205.105.16:15338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AggAAAKM"]
[Wed Sep 30 01:05:32.827621 2026] [security2:error] [pid 251754:tid 251916] [client 49.205.105.16:15338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AggAAAKM"]
[Wed Sep 30 01:05:32.847105 2026] [security2:error] [pid 251754:tid 251781] [remote 74.7.227.56:43062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0vJOnWJRlb5xgkk0AhAAA9hg"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=750
[Wed Sep 30 01:05:32.850266 2026] [security2:error] [pid 251754:tid 251887] [client 20.251.39.228:16837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-good.php"] [unique_id "ary0vJOnWJRlb5xgkk0AhQAAAIY"]
[Wed Sep 30 01:05:32.853904 2026] [security2:error] [pid 251754:tid 251961] [client 216.73.216.46:32570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0vJOnWJRlb5xgkk0AhgAAANA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTk%3D
[Wed Sep 30 01:05:32.862707 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:15372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.863012 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:15372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.902902 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.903175 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:32.948766 2026] [security2:error] [pid 251754:tid 251903] [client 20.213.164.196:29892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/hp.php"] [unique_id "ary0vJOnWJRlb5xgkk0AigAAAJY"]
[Wed Sep 30 01:05:32.974366 2026] [security2:error] [pid 251754:tid 251978] [client 52.231.30.175:32767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/inputs.php"] [unique_id "ary0vJOnWJRlb5xgkk0AjAAAAOE"]
[Wed Sep 30 01:05:32.991821 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:32.991901 2026] [security2:error] [pid 251754:tid 251977] [client 20.58.177.98:3456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/mknobgkg.php"] [unique_id "ary0vJOnWJRlb5xgkk0AjwAAAOA"]
[Wed Sep 30 01:05:32.992104 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.000160 2026] [security2:error] [pid 251754:tid 251971] [client 52.172.226.14:40569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary0vJOnWJRlb5xgkk0AkQAAANo"]
[Wed Sep 30 01:05:33.026926 2026] [security2:error] [pid 251754:tid 251790] [remote 57.141.14.34:65386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/oembed/1.0/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary0vJOnWJRlb5xgkk0AiwAA3SE"]
[Wed Sep 30 01:05:33.071531 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.69.245:39008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/BDKR28WP.php"] [unique_id "ary0vZOnWJRlb5xgkk0AmQAAAJQ"]
[Wed Sep 30 01:05:33.085092 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.085514 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.126626 2026] [security2:error] [pid 251754:tid 251880] [remote 57.141.14.24:63208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/electric-vehicles/page/2/"] [unique_id "ary0vZOnWJRlb5xgkk0AnQAAr3s"]
[Wed Sep 30 01:05:33.162191 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.4.78:45150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/link.php"] [unique_id "ary0vZOnWJRlb5xgkk0AngAAAJs"]
[Wed Sep 30 01:05:33.173482 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.173748 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.207325 2026] [security2:error] [pid 251754:tid 251982] [client 104.208.65.139:2650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/ops.php"] [unique_id "ary0vZOnWJRlb5xgkk0AoQAAAOU"]
[Wed Sep 30 01:05:33.260066 2026] [security2:error] [pid 251754:tid 252001] [client 52.231.30.175:33110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/classwithtostring.php"] [unique_id "ary0vZOnWJRlb5xgkk0ApwAAAPg"]
[Wed Sep 30 01:05:33.263358 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.263617 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.307927 2026] [security2:error] [pid 251754:tid 251896] [client 20.58.177.98:3626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/dairg.php"] [unique_id "ary0vZOnWJRlb5xgkk0AqwAAAI8"]
[Wed Sep 30 01:05:33.332047 2026] [access_compat:error] [pid 251754:tid 251951] [client 47.79.13.27:43786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:33.332316 2026] [access_compat:error] [pid 251754:tid 251951] [client 47.79.13.27:43786] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:33.344612 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:38630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gigi.php"] [unique_id "ary0vZOnWJRlb5xgkk0AsAAAAKI"]
[Wed Sep 30 01:05:33.354960 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.355150 2026] [security2:error] [pid 251754:tid 251923] [client 74.225.148.80:13317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/sid.php"] [unique_id "ary0vZOnWJRlb5xgkk0AsgAAAKo"]
[Wed Sep 30 01:05:33.355226 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.357054 2026] [security2:error] [pid 251754:tid 251986] [client 20.28.180.172:18311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/55b76.php"] [unique_id "ary0vZOnWJRlb5xgkk0AswAAAOk"]
[Wed Sep 30 01:05:33.411410 2026] [security2:error] [pid 251754:tid 251999] [client 20.251.39.228:16851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/a5.php"] [unique_id "ary0vZOnWJRlb5xgkk0AtAAAAPY"]
[Wed Sep 30 01:05:33.446471 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.446750 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.529092 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.30.175:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/adminfuns.php"] [unique_id "ary0vZOnWJRlb5xgkk0AwwAAAQI"]
[Wed Sep 30 01:05:33.536959 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.537386 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.566301 2026] [security2:error] [pid 251754:tid 251919] [client 13.70.4.78:60683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/lock360.php"] [unique_id "ary0vZOnWJRlb5xgkk0AxQAAAKY"]
[Wed Sep 30 01:05:33.573236 2026] [security2:error] [pid 251754:tid 252003] [client 20.213.164.196:29747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "retalviewelsokhna.com.retalview-northcoast.com"] [uri "/wpuse.php"] [unique_id "ary0vZOnWJRlb5xgkk0AxgAAAPo"]
[Wed Sep 30 01:05:33.576590 2026] [security2:error] [pid 251754:tid 251969] [client 52.172.226.14:40558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary0vZOnWJRlb5xgkk0AxwAAANg"]
[Wed Sep 30 01:05:33.609905 2026] [security2:error] [pid 251754:tid 251941] [client 52.231.69.245:38597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ant.php"] [unique_id "ary0vZOnWJRlb5xgkk0AyAAAALw"]
[Wed Sep 30 01:05:33.628405 2026] [security2:error] [pid 251754:tid 251834] [remote 220.181.108.167:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0vZOnWJRlb5xgkk0AygAApE0"]
[Wed Sep 30 01:05:33.628751 2026] [security2:error] [pid 251754:tid 251949] [client 20.58.177.98:3405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/dronishness.php"] [unique_id "ary0vZOnWJRlb5xgkk0AywAAAMQ"]
[Wed Sep 30 01:05:33.629696 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.630009 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.721419 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.721694 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.801550 2026] [security2:error] [pid 251754:tid 251947] [client 52.231.30.175:33107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/222.php"] [unique_id "ary0vZOnWJRlb5xgkk0A1QAAAMI"]
[Wed Sep 30 01:05:33.813915 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.814254 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.817974 2026] [security2:error] [pid 251754:tid 251998] [client 158.172.226.98:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0vZOnWJRlb5xgkk0A2AAAAPU"]
[Wed Sep 30 01:05:33.860595 2026] [security2:error] [pid 251754:tid 251888] [client 74.225.148.80:11302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/bro.php"] [unique_id "ary0vZOnWJRlb5xgkk0A2gAAAIc"]
[Wed Sep 30 01:05:33.890779 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.69.245:38601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/uejvv.php"] [unique_id "ary0vZOnWJRlb5xgkk0A2wAAAMY"]
[Wed Sep 30 01:05:33.903699 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.903975 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:33.908536 2026] [security2:error] [pid 251754:tid 251990] [remote 168.100.149.171:35540] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0vZOnWJRlb5xgkk0A1gAAv0Y"]
[Wed Sep 30 01:05:33.933846 2026] [security2:error] [pid 251754:tid 251923] [client 20.251.39.228:35521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/amp.php"] [unique_id "ary0vZOnWJRlb5xgkk0A3QAAAKo"]
[Wed Sep 30 01:05:33.947593 2026] [security2:error] [pid 251754:tid 251930] [client 20.58.177.98:3416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/Row_wsoo.php"] [unique_id "ary0vZOnWJRlb5xgkk0A3gAAALE"]
[Wed Sep 30 01:05:33.966678 2026] [access_compat:error] [pid 251754:tid 252012] [client 47.79.13.172:44352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:33.966982 2026] [access_compat:error] [pid 251754:tid 252012] [client 47.79.13.172:44352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:33.995354 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:33.995620 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.000237 2026] [security2:error] [pid 251754:tid 251899] [client 20.198.74.230:23881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/NzxXWLD25py.php"] [unique_id "ary0vZOnWJRlb5xgkk0A4gAAAJI"]
[Wed Sep 30 01:05:34.026668 2026] [access_compat:error] [pid 251754:tid 251931] [client 47.79.13.172:44362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:34.026939 2026] [access_compat:error] [pid 251754:tid 251931] [client 47.79.13.172:44362] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:34.077920 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.30.175:32716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/BDKR28WP.php"] [unique_id "ary0vpOnWJRlb5xgkk0A6gAAAPA"]
[Wed Sep 30 01:05:34.085995 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.086273 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.089559 2026] [security2:error] [pid 251754:tid 252004] [client 52.172.226.14:40595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/about/function.php"] [unique_id "ary0vpOnWJRlb5xgkk0A7wAAAPs"]
[Wed Sep 30 01:05:34.092472 2026] [core:error] [pid 251754:tid 251959] [client 17.166.151.144:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:34.092496 2026] [core:error] [pid 251754:tid 251959] [client 17.166.151.144:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:34.141607 2026] [security2:error] [pid 251754:tid 251981] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0vpOnWJRlb5xgkk0A9AAAAOQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:34.178245 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.178520 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.205461 2026] [security2:error] [pid 251754:tid 251978] [client 223.181.30.165:16259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0A-AAAAOE"]
[Wed Sep 30 01:05:34.205609 2026] [security2:error] [pid 251754:tid 251978] [client 223.181.30.165:16259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0A-AAAAOE"]
[Wed Sep 30 01:05:34.220515 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.4.78:5635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-trackback.php"] [unique_id "ary0vpOnWJRlb5xgkk0A-wAAAQA"]
[Wed Sep 30 01:05:34.260317 2026] [security2:error] [pid 251754:tid 251947] [client 20.58.177.98:3450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/x2.php"] [unique_id "ary0vpOnWJRlb5xgkk0A_QAAAMI"]
[Wed Sep 30 01:05:34.268405 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.268692 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.338303 2026] [security2:error] [pid 251754:tid 251912] [client 182.69.182.151:8240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BBQAAAJ8"]
[Wed Sep 30 01:05:34.338982 2026] [security2:error] [pid 251754:tid 251912] [client 182.69.182.151:8240] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BBQAAAJ8"]
[Wed Sep 30 01:05:34.350248 2026] [security2:error] [pid 251754:tid 251982] [client 74.225.148.80:13312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/xwpg.php"] [unique_id "ary0vpOnWJRlb5xgkk0BBgAAAOU"]
[Wed Sep 30 01:05:34.353981 2026] [security2:error] [pid 251754:tid 251887] [client 104.208.65.139:13736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/BDKR28WP.php"] [unique_id "ary0vpOnWJRlb5xgkk0BCAAAAIY"]
[Wed Sep 30 01:05:34.358747 2026] [http2:warn] [pid 212454:tid 212701] [client 40.77.167.224:59983] h2_stream(212454-984-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:05:34.361596 2026] [security2:error] [pid 251754:tid 251928] [client 52.231.30.175:32826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp.php"] [unique_id "ary0vpOnWJRlb5xgkk0BCQAAAK8"]
[Wed Sep 30 01:05:34.364413 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.364859 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.410383 2026] [security2:error] [pid 251754:tid 252001] [client 20.214.109.68:9915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/nw.php"] [unique_id "ary0vpOnWJRlb5xgkk0BCwAAAPg"]
[Wed Sep 30 01:05:34.432509 2026] [security2:error] [pid 251754:tid 251888] [client 20.251.39.228:33841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/abrand.php"] [unique_id "ary0vpOnWJRlb5xgkk0BDAAAAIc"]
[Wed Sep 30 01:05:34.444032 2026] [security2:error] [pid 251754:tid 251972] [client 13.70.1.101:19064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0vpOnWJRlb5xgkk0BDgAAANs"]
[Wed Sep 30 01:05:34.450388 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.450669 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.455931 2026] [security2:error] [pid 251754:tid 251991] [client 52.231.69.245:38627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/file.php"] [unique_id "ary0vpOnWJRlb5xgkk0BDwAAAO4"]
[Wed Sep 30 01:05:34.519209 2026] [security2:error] [pid 251754:tid 251830] [remote 95.111.193.11:41042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.193.111.95.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary0vpOnWJRlb5xgkk0BEQAA7Ek"]
[Wed Sep 30 01:05:34.520403 2026] [security2:error] [pid 251754:tid 251939] [client 20.28.180.172:18313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tt.php"] [unique_id "ary0vpOnWJRlb5xgkk0BEgAAALo"]
[Wed Sep 30 01:05:34.540493 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.540777 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.564694 2026] [security2:error] [pid 251754:tid 251930] [client 52.172.226.14:40544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary0vpOnWJRlb5xgkk0BGQAAALE"]
[Wed Sep 30 01:05:34.572897 2026] [security2:error] [pid 251754:tid 252012] [client 20.58.177.98:3588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/v4.php"] [unique_id "ary0vpOnWJRlb5xgkk0BGwAAAQM"]
[Wed Sep 30 01:05:34.632509 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.632794 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.647998 2026] [security2:error] [pid 251754:tid 251967] [client 13.70.4.78:6110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/.well-known/index.php"] [unique_id "ary0vpOnWJRlb5xgkk0BHgAAANY"]
[Wed Sep 30 01:05:34.693399 2026] [security2:error] [pid 251754:tid 251886] [client 52.231.30.175:33116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/simple.php"] [unique_id "ary0vpOnWJRlb5xgkk0BHwAAAIU"]
[Wed Sep 30 01:05:34.721191 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.69.245:38607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/elements.php"] [unique_id "ary0vpOnWJRlb5xgkk0BIQAAAN8"]
[Wed Sep 30 01:05:34.725973 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.726225 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.732944 2026] [security2:error] [pid 251754:tid 251836] [remote 95.111.193.11:41042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.193.111.95.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary0vpOnWJRlb5xgkk0BIwAA_E8"], referer: https://britishclassicmotorcycles.com/wp-login.php
[Wed Sep 30 01:05:34.779887 2026] [security2:error] [pid 251754:tid 251924] [client 13.70.1.101:19058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0vpOnWJRlb5xgkk0BJwAAAKs"]
[Wed Sep 30 01:05:34.817329 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.817767 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.837921 2026] [security2:error] [pid 251754:tid 251905] [client 20.251.39.228:20522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/init.php"] [unique_id "ary0vpOnWJRlb5xgkk0BKQAAAJg"]
[Wed Sep 30 01:05:34.860379 2026] [security2:error] [pid 251754:tid 251908] [client 182.75.216.230:54156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BLAAAAJs"]
[Wed Sep 30 01:05:34.860528 2026] [security2:error] [pid 251754:tid 251908] [client 182.75.216.230:54156] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BLAAAAJs"]
[Wed Sep 30 01:05:34.889079 2026] [security2:error] [pid 251754:tid 251892] [client 20.58.177.98:3457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/albin.php"] [unique_id "ary0vpOnWJRlb5xgkk0BLwAAAIs"]
[Wed Sep 30 01:05:34.906575 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.906869 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:34.919620 2026] [security2:error] [pid 251754:tid 251972] [client 74.225.148.80:13465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/radio.php"] [unique_id "ary0vpOnWJRlb5xgkk0BMwAAANs"]
[Wed Sep 30 01:05:34.921427 2026] [security2:error] [pid 251754:tid 251896] [client 74.7.243.227:40600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0vpOnWJRlb5xgkk0BNAAAAI8"], referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1L2N3ZA==
[Wed Sep 30 01:05:34.950734 2026] [security2:error] [pid 251754:tid 251824] [remote 95.111.193.11:41042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.193.111.95.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BNQAA_kM"]
[Wed Sep 30 01:05:34.951012 2026] [security2:error] [pid 251754:tid 252007] [client 95.111.193.11:41042] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0vpOnWJRlb5xgkk0BNQAA_kM"]
[Wed Sep 30 01:05:34.997142 2026] [security2:error] [pid 251754:tid 251989] [client 52.231.69.245:38996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/sitemap.php"] [unique_id "ary0vpOnWJRlb5xgkk0BOAAAAOw"]
[Wed Sep 30 01:05:34.997468 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:34.997747 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.020649 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.30.175:33000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/chosen.php"] [unique_id "ary0v5OnWJRlb5xgkk0BOwAAALE"]
[Wed Sep 30 01:05:35.038594 2026] [core:error] [pid 251754:tid 251979] [client 44.219.111.44:35714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:35.038620 2026] [core:error] [pid 251754:tid 251979] [client 44.219.111.44:35714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:35.079828 2026] [security2:error] [pid 251754:tid 251954] [client 13.70.4.78:6094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary0v5OnWJRlb5xgkk0BSgAAAMk"]
[Wed Sep 30 01:05:35.089680 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.090144 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.101663 2026] [security2:error] [pid 251754:tid 252004] [client 13.70.1.101:18607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/b.php"] [unique_id "ary0v5OnWJRlb5xgkk0BTwAAAPs"]
[Wed Sep 30 01:05:35.130608 2026] [security2:error] [pid 251754:tid 251889] [client 38.154.30.112:49011] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0vpOnWJRlb5xgkk0BCgAAAIg"], referer: http://thenerdistheword.ca/wp-login.php?redirect_to=http%3A%2F%2Fthenerdistheword.ca%2Fregister%2F
[Wed Sep 30 01:05:35.147956 2026] [security2:error] [pid 251754:tid 251984] [client 45.138.12.32:39350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dje.okj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0v5OnWJRlb5xgkk0BVgAAAOc"]
[Wed Sep 30 01:05:35.178983 2026] [security2:error] [pid 251754:tid 251886] [client 52.172.226.14:3925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/admin/function.php"] [unique_id "ary0v5OnWJRlb5xgkk0BWwAAAIU"]
[Wed Sep 30 01:05:35.179382 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.179771 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.201964 2026] [security2:error] [pid 251754:tid 251981] [client 20.58.177.98:3440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/atkno.php"] [unique_id "ary0v5OnWJRlb5xgkk0BXgAAAOQ"]
[Wed Sep 30 01:05:35.256611 2026] [security2:error] [pid 251754:tid 251918] [client 20.194.30.107:17346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/c.php"] [unique_id "ary0v5OnWJRlb5xgkk0BXwAAAKU"]
[Wed Sep 30 01:05:35.259572 2026] [security2:error] [pid 251754:tid 251950] [client 52.231.69.245:38614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xetmolxr.php"] [unique_id "ary0v5OnWJRlb5xgkk0BYQAAAMU"]
[Wed Sep 30 01:05:35.267898 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.268170 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.361042 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.361311 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.405576 2026] [security2:error] [pid 251754:tid 251920] [client 52.231.30.175:32719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/als.php"] [unique_id "ary0v5OnWJRlb5xgkk0BbAAAAKc"]
[Wed Sep 30 01:05:35.429275 2026] [security2:error] [pid 251754:tid 251913] [client 13.70.1.101:18574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/admin.php"] [unique_id "ary0v5OnWJRlb5xgkk0BbQAAAKA"]
[Wed Sep 30 01:05:35.451847 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.452115 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.472713 2026] [security2:error] [pid 251754:tid 251850] [remote 64.23.166.180:33624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ebl.otn.mybluehost.me"] [uri "/.env"] [unique_id "ary0v5OnWJRlb5xgkk0BcAAA-l0"]
[Wed Sep 30 01:05:35.475039 2026] [security2:error] [pid 251754:tid 251989] [client 74.225.148.80:13442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ccc.php"] [unique_id "ary0v5OnWJRlb5xgkk0BcQAAAOw"]
[Wed Sep 30 01:05:35.479184 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.4.78:5687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary0v5OnWJRlb5xgkk0BcgAAAO0"]
[Wed Sep 30 01:05:35.521384 2026] [security2:error] [pid 251754:tid 251933] [client 20.58.177.98:55072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gptsh.php"] [unique_id "ary0v5OnWJRlb5xgkk0BdQAAALQ"]
[Wed Sep 30 01:05:35.541248 2026] [security2:error] [pid 251754:tid 251921] [client 52.231.69.245:38625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/mini.php"] [unique_id "ary0v5OnWJRlb5xgkk0BdwAAAKg"]
[Wed Sep 30 01:05:35.541781 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.542043 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.586408 2026] [security2:error] [pid 251754:tid 251953] [client 4.240.25.22:30774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/ohct.php"] [unique_id "ary0v5OnWJRlb5xgkk0BewAAAMg"]
[Wed Sep 30 01:05:35.622954 2026] [security2:error] [pid 251754:tid 251983] [client 37.41.16.35:58969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0v5OnWJRlb5xgkk0BhQAAAOY"]
[Wed Sep 30 01:05:35.623046 2026] [security2:error] [pid 251754:tid 251983] [client 37.41.16.35:58969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0v5OnWJRlb5xgkk0BhQAAAOY"]
[Wed Sep 30 01:05:35.631506 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.631766 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.671566 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.30.175:33127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/admin.php"] [unique_id "ary0v5OnWJRlb5xgkk0BjQAAAMQ"]
[Wed Sep 30 01:05:35.724589 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.724888 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.745151 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.1.101:18578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/fling.php"] [unique_id "ary0v5OnWJRlb5xgkk0BkAAAAQA"]
[Wed Sep 30 01:05:35.759456 2026] [security2:error] [pid 251754:tid 252008] [client 20.251.39.228:19639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gettest.php"] [unique_id "ary0v5OnWJRlb5xgkk0BkgAAAP8"]
[Wed Sep 30 01:05:35.802674 2026] [security2:error] [pid 251754:tid 251971] [client 52.231.69.245:38646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/zwso.php"] [unique_id "ary0v5OnWJRlb5xgkk0BlwAAANo"]
[Wed Sep 30 01:05:35.817099 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.817362 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.838669 2026] [security2:error] [pid 251754:tid 251892] [client 20.58.177.98:55047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/rithin.php"] [unique_id "ary0v5OnWJRlb5xgkk0BmgAAAIs"]
[Wed Sep 30 01:05:35.840162 2026] [security2:error] [pid 251754:tid 251913] [client 13.70.4.78:6136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary0v5OnWJRlb5xgkk0BmwAAAKA"]
[Wed Sep 30 01:05:35.870669 2026] [security2:error] [pid 251754:tid 251991] [client 45.138.12.32:10222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.djl.aze.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0v5OnWJRlb5xgkk0BnAAAAO4"]
[Wed Sep 30 01:05:35.894426 2026] [security2:error] [pid 251754:tid 251912] [remote 168.100.149.1:53082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0v5OnWJRlb5xgkk0BkwAAqws"]
[Wed Sep 30 01:05:35.907247 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.907531 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:35.945544 2026] [security2:error] [pid 251754:tid 251895] [client 45.138.12.32:39362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dix.zdx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0v5OnWJRlb5xgkk0BoQAAAI4"]
[Wed Sep 30 01:05:35.985037 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.30.175:32802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/f35.php"] [unique_id "ary0v5OnWJRlb5xgkk0BpQAAAPo"]
[Wed Sep 30 01:05:35.986538 2026] [security2:error] [pid 251754:tid 251915] [client 43.104.4.214:61539] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary0v5OnWJRlb5xgkk0BpAAAAKI"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:05:35.997373 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:35.997639 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.034379 2026] [security2:error] [pid 251754:tid 251947] [client 216.109.180.243:52024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.180.109.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0wJOnWJRlb5xgkk0BrQAAAMI"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:05:36.066259 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.69.245:39004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/tiny.php"] [unique_id "ary0wJOnWJRlb5xgkk0BsgAAAKE"]
[Wed Sep 30 01:05:36.067519 2026] [security2:error] [pid 251754:tid 251960] [client 13.70.1.101:18572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0wJOnWJRlb5xgkk0BswAAAM8"]
[Wed Sep 30 01:05:36.076154 2026] [security2:error] [pid 251754:tid 251970] [client 52.172.226.14:40579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ary0wJOnWJRlb5xgkk0BtQAAANk"]
[Wed Sep 30 01:05:36.089732 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.090032 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.140299 2026] [access_compat:error] [pid 251754:tid 251927] [client 47.79.13.175:45500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:36.140566 2026] [access_compat:error] [pid 251754:tid 251927] [client 47.79.13.175:45500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:36.158493 2026] [security2:error] [pid 251754:tid 251931] [client 20.58.177.98:3408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/il.php"] [unique_id "ary0wJOnWJRlb5xgkk0BuQAAALI"]
[Wed Sep 30 01:05:36.163405 2026] [security2:error] [pid 251754:tid 252013] [client 20.219.2.60:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/vx.php"] [unique_id "ary0wJOnWJRlb5xgkk0BugAAAQQ"]
[Wed Sep 30 01:05:36.169382 2026] [security2:error] [pid 251754:tid 251995] [client 20.251.39.228:22982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/myfile.php"] [unique_id "ary0wJOnWJRlb5xgkk0BuwAAAPI"]
[Wed Sep 30 01:05:36.180739 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.181011 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.258814 2026] [security2:error] [pid 251754:tid 251975] [client 52.231.30.175:32753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/aaa.php"] [unique_id "ary0wJOnWJRlb5xgkk0BvQAAAN4"]
[Wed Sep 30 01:05:36.270021 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.270285 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.308962 2026] [security2:error] [pid 251754:tid 251919] [client 13.70.4.78:45175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0BwAAAAKY"]
[Wed Sep 30 01:05:36.326848 2026] [security2:error] [pid 251754:tid 251902] [client 52.231.69.245:38990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/simple.php"] [unique_id "ary0wJOnWJRlb5xgkk0BwgAAAJU"]
[Wed Sep 30 01:05:36.334202 2026] [security2:error] [pid 251754:tid 252009] [client 74.225.148.80:11321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wmore1.php"] [unique_id "ary0wJOnWJRlb5xgkk0BwwAAAQA"]
[Wed Sep 30 01:05:36.362759 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.363020 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.372301 2026] [security2:error] [pid 251754:tid 251945] [client 45.138.12.40:5760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tourcomusa.com"] [uri "/wp-links-opml.php"] [unique_id "ary0wJOnWJRlb5xgkk0ByQAAAMA"]
[Wed Sep 30 01:05:36.375161 2026] [security2:error] [pid 251754:tid 252010] [client 20.214.109.68:9466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/t.php"] [unique_id "ary0wJOnWJRlb5xgkk0BygAAAQE"]
[Wed Sep 30 01:05:36.399212 2026] [security2:error] [pid 251754:tid 251932] [client 13.70.1.101:18610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/adminfuns.php"] [unique_id "ary0wJOnWJRlb5xgkk0BywAAALM"]
[Wed Sep 30 01:05:36.449076 2026] [security2:error] [pid 251754:tid 251972] [client 20.70.173.30:46210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0wJOnWJRlb5xgkk0B0AAAANs"]
[Wed Sep 30 01:05:36.451623 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.451916 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.475335 2026] [security2:error] [pid 251754:tid 251912] [client 20.58.177.98:3410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/1klopedf.php"] [unique_id "ary0wJOnWJRlb5xgkk0B0gAAAJ8"]
[Wed Sep 30 01:05:36.530017 2026] [security2:error] [pid 251754:tid 251959] [client 52.231.30.175:32771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/gecko.php"] [unique_id "ary0wJOnWJRlb5xgkk0B1QAAAM4"]
[Wed Sep 30 01:05:36.533781 2026] [security2:error] [pid 251754:tid 251904] [client 20.251.39.228:13455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/sid3.php"] [unique_id "ary0wJOnWJRlb5xgkk0B1gAAAJc"]
[Wed Sep 30 01:05:36.542163 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.542421 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.563520 2026] [security2:error] [pid 251754:tid 251915] [client 20.194.30.107:17290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/adminan.php"] [unique_id "ary0wJOnWJRlb5xgkk0B2QAAAKI"]
[Wed Sep 30 01:05:36.587328 2026] [security2:error] [pid 251754:tid 251990] [client 52.231.69.245:38626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/buy.php"] [unique_id "ary0wJOnWJRlb5xgkk0B3AAAAO0"]
[Wed Sep 30 01:05:36.617288 2026] [security2:error] [pid 251754:tid 251973] [client 52.172.226.14:3865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-admin/setup-config.php"] [unique_id "ary0wJOnWJRlb5xgkk0B4AAAANw"]
[Wed Sep 30 01:05:36.633383 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.633641 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.676134 2026] [security2:error] [pid 251754:tid 251911] [client 13.70.4.78:5673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary0wJOnWJRlb5xgkk0B5QAAAJ4"]
[Wed Sep 30 01:05:36.717824 2026] [security2:error] [pid 251754:tid 251914] [client 13.70.1.101:18587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/alfa.php"] [unique_id "ary0wJOnWJRlb5xgkk0B6AAAAKE"]
[Wed Sep 30 01:05:36.725087 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.725352 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.755537 2026] [security2:error] [pid 251754:tid 251906] [client 31.189.214.146:63823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0B7QAAAJk"]
[Wed Sep 30 01:05:36.755664 2026] [security2:error] [pid 251754:tid 251906] [client 31.189.214.146:63823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0B7QAAAJk"]
[Wed Sep 30 01:05:36.797642 2026] [security2:error] [pid 251754:tid 251908] [client 20.58.177.98:3702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/zv.php"] [unique_id "ary0wJOnWJRlb5xgkk0B8gAAAJs"]
[Wed Sep 30 01:05:36.815539 2026] [security2:error] [pid 251754:tid 251931] [client 52.231.30.175:32807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/xiugai.php"] [unique_id "ary0wJOnWJRlb5xgkk0B9AAAALI"]
[Wed Sep 30 01:05:36.817800 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.818078 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.819504 2026] [security2:error] [pid 251754:tid 252007] [client 4.240.25.22:38800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wp-login.php"] [unique_id "ary0wJOnWJRlb5xgkk0B7gAAAP4"]
[Wed Sep 30 01:05:36.832518 2026] [security2:error] [pid 251754:tid 251900] [client 74.225.148.80:13508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/function.php"] [unique_id "ary0wJOnWJRlb5xgkk0B-AAAAJM"]
[Wed Sep 30 01:05:36.839445 2026] [security2:error] [pid 251754:tid 251929] [client 20.194.30.107:17534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-filemannger.php"] [unique_id "ary0wJOnWJRlb5xgkk0B-gAAALA"]
[Wed Sep 30 01:05:36.868968 2026] [security2:error] [pid 251754:tid 251975] [client 52.231.69.245:39015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ioxi-o.php"] [unique_id "ary0wJOnWJRlb5xgkk0B_QAAAN4"]
[Wed Sep 30 01:05:36.908539 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.908820 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:36.922019 2026] [security2:error] [pid 251754:tid 251950] [client 223.235.102.107:21798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0CAgAAAMU"]
[Wed Sep 30 01:05:36.922135 2026] [security2:error] [pid 251754:tid 251950] [client 223.235.102.107:21798] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0CAgAAAMU"]
[Wed Sep 30 01:05:36.932238 2026] [security2:error] [pid 251754:tid 251902] [client 104.208.65.139:9635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/mac.php"] [unique_id "ary0wJOnWJRlb5xgkk0CBAAAAJU"]
[Wed Sep 30 01:05:36.936090 2026] [access_compat:error] [pid 251754:tid 251928] [client 47.79.13.178:59566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:36.936348 2026] [access_compat:error] [pid 251754:tid 251928] [client 47.79.13.178:59566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:36.990039 2026] [security2:error] [pid 251754:tid 251920] [client 20.251.39.228:33848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/666.php"] [unique_id "ary0wJOnWJRlb5xgkk0CCQAAAKc"]
[Wed Sep 30 01:05:36.997994 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:36.998248 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.041329 2026] [security2:error] [pid 251754:tid 251951] [client 13.70.1.101:18597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/222.php"] [unique_id "ary0wZOnWJRlb5xgkk0CDQAAAMY"]
[Wed Sep 30 01:05:37.047306 2026] [security2:error] [pid 251754:tid 251942] [client 103.241.204.139:59429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0CEAAAAL0"]
[Wed Sep 30 01:05:37.047427 2026] [security2:error] [pid 251754:tid 251942] [client 103.241.204.139:59429] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0CEAAAAL0"]
[Wed Sep 30 01:05:37.056877 2026] [security2:error] [pid 251754:tid 251924] [client 179.105.122.52:64541] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0wJOnWJRlb5xgkk0B8AAAAKs"]
[Wed Sep 30 01:05:37.065886 2026] [security2:error] [pid 251754:tid 251966] [client 13.70.4.78:5650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary0wZOnWJRlb5xgkk0CEgAAANU"]
[Wed Sep 30 01:05:37.085974 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.30.175:32788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/inx.php"] [unique_id "ary0wZOnWJRlb5xgkk0CFAAAAQI"]
[Wed Sep 30 01:05:37.091543 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.091797 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.109151 2026] [security2:error] [pid 251754:tid 251982] [client 20.58.177.98:3414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/zv.update.php"] [unique_id "ary0wZOnWJRlb5xgkk0CFgAAAOU"]
[Wed Sep 30 01:05:37.110675 2026] [security2:error] [pid 251754:tid 252004] [client 52.172.226.14:40554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/wp-content/radio.php"] [unique_id "ary0wZOnWJRlb5xgkk0CFwAAAPs"]
[Wed Sep 30 01:05:37.132313 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.69.245:38980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ans.php"] [unique_id "ary0wZOnWJRlb5xgkk0CGAAAAMc"]
[Wed Sep 30 01:05:37.181550 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.181825 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.201423 2026] [security2:error] [pid 251754:tid 251916] [client 103.159.192.142:56500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0CIQAAAKM"]
[Wed Sep 30 01:05:37.201526 2026] [security2:error] [pid 251754:tid 251916] [client 103.159.192.142:56500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0CIQAAAKM"]
[Wed Sep 30 01:05:37.272270 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.272555 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.299003 2026] [security2:error] [pid 251754:tid 251937] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0wZOnWJRlb5xgkk0CKAAAALg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:37.304940 2026] [security2:error] [pid 251754:tid 251905] [client 74.225.148.80:11276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ab.php"] [unique_id "ary0wZOnWJRlb5xgkk0CKQAAAJg"]
[Wed Sep 30 01:05:37.347543 2026] [security2:error] [pid 251754:tid 252009] [client 20.28.180.172:18319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/maul.php"] [unique_id "ary0wZOnWJRlb5xgkk0CLAAAAQA"]
[Wed Sep 30 01:05:37.365610 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.365893 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.367974 2026] [security2:error] [pid 251754:tid 251989] [client 20.219.2.60:18899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/dass.php"] [unique_id "ary0wZOnWJRlb5xgkk0CLgAAAOw"]
[Wed Sep 30 01:05:37.372094 2026] [security2:error] [pid 251754:tid 251945] [client 13.70.1.101:18560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0wZOnWJRlb5xgkk0CLwAAAMA"]
[Wed Sep 30 01:05:37.384617 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.30.175:32837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/11.php"] [unique_id "ary0wZOnWJRlb5xgkk0CMAAAALs"]
[Wed Sep 30 01:05:37.397723 2026] [security2:error] [pid 251754:tid 251967] [client 52.231.69.245:38620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gf.php"] [unique_id "ary0wZOnWJRlb5xgkk0CMgAAANY"]
[Wed Sep 30 01:05:37.400323 2026] [access_compat:error] [pid 251754:tid 251908] [client 47.79.13.37:47930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:37.400647 2026] [access_compat:error] [pid 251754:tid 251908] [client 47.79.13.37:47930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:37.418611 2026] [security2:error] [pid 251754:tid 252008] [client 20.251.39.228:40013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/xxw.php"] [unique_id "ary0wZOnWJRlb5xgkk0CMwAAAP8"]
[Wed Sep 30 01:05:37.420606 2026] [security2:error] [pid 251754:tid 251993] [client 20.58.177.98:3420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/wquosqsi.php"] [unique_id "ary0wZOnWJRlb5xgkk0CNAAAAPA"]
[Wed Sep 30 01:05:37.430073 2026] [security2:error] [pid 251754:tid 251920] [client 20.198.74.230:23576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ded.php"] [unique_id "ary0wZOnWJRlb5xgkk0CNgAAAKc"]
[Wed Sep 30 01:05:37.456327 2026] [security2:error] [pid 251754:tid 251980] [client 13.70.4.78:60686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/filemanager/dialog.php"] [unique_id "ary0wZOnWJRlb5xgkk0COAAAAOM"]
[Wed Sep 30 01:05:37.458872 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.459288 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.464797 2026] [security2:error] [pid 251754:tid 251981] [client 155.190.6.18:52734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0COQAAAOQ"]
[Wed Sep 30 01:05:37.544603 2026] [security2:error] [pid 251754:tid 251968] [client 216.109.180.243:53772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.180.109.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary0wZOnWJRlb5xgkk0CPgAAANc"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:05:37.545793 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.546173 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.610715 2026] [security2:error] [pid 251754:tid 251873] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0wZOnWJRlb5xgkk0CQgAAznQ"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D31151
[Wed Sep 30 01:05:37.638970 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.639230 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.677022 2026] [security2:error] [pid 251754:tid 251973] [client 52.231.30.175:32718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/File.php"] [unique_id "ary0wZOnWJRlb5xgkk0CRgAAANw"]
[Wed Sep 30 01:05:37.678397 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.69.245:39039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/man.php"] [unique_id "ary0wZOnWJRlb5xgkk0CRwAAAIk"]
[Wed Sep 30 01:05:37.695650 2026] [security2:error] [pid 251754:tid 251970] [client 13.70.1.101:19364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/images.php"] [unique_id "ary0wZOnWJRlb5xgkk0CSgAAANk"]
[Wed Sep 30 01:05:37.731595 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.731880 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.737337 2026] [security2:error] [pid 251754:tid 251888] [client 20.58.177.98:3602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/asset.php"] [unique_id "ary0wZOnWJRlb5xgkk0CTwAAAIc"]
[Wed Sep 30 01:05:37.741107 2026] [security2:error] [pid 251754:tid 251981] [client 155.190.6.18:52734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0wZOnWJRlb5xgkk0COQAAAOQ"]
[Wed Sep 30 01:05:37.747463 2026] [security2:error] [pid 251754:tid 251927] [client 45.138.12.32:26426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dor.fiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0wZOnWJRlb5xgkk0CUgAAAK4"]
[Wed Sep 30 01:05:37.765490 2026] [security2:error] [pid 251754:tid 251983] [client 52.172.226.14:40617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary0wZOnWJRlb5xgkk0CVQAAAOY"]
[Wed Sep 30 01:05:37.806781 2026] [security2:error] [pid 251754:tid 251987] [client 74.225.148.80:11273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/css.php"] [unique_id "ary0wZOnWJRlb5xgkk0CWAAAAOo"]
[Wed Sep 30 01:05:37.821272 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.821555 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.832925 2026] [security2:error] [pid 251754:tid 251922] [client 13.70.4.78:45160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/index/function.php"] [unique_id "ary0wZOnWJRlb5xgkk0CXQAAAKk"]
[Wed Sep 30 01:05:37.878155 2026] [security2:error] [pid 251754:tid 251941] [client 20.194.30.107:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-content/"] [unique_id "ary0wZOnWJRlb5xgkk0CZQAAALw"]
[Wed Sep 30 01:05:37.916471 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:37.916728 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:37.929434 2026] [security2:error] [pid 251754:tid 251980] [remote 168.100.149.64:15684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0wZOnWJRlb5xgkk0CWwAAkmA"]
[Wed Sep 30 01:05:37.941374 2026] [security2:error] [pid 251754:tid 251995] [client 52.231.69.245:39170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/dev.php"] [unique_id "ary0wZOnWJRlb5xgkk0CaAAAAPI"]
[Wed Sep 30 01:05:37.943701 2026] [security2:error] [pid 251754:tid 251972] [client 20.194.30.107:17482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/pfm.php"] [unique_id "ary0wZOnWJRlb5xgkk0CaQAAANs"]
[Wed Sep 30 01:05:37.944303 2026] [security2:error] [pid 251754:tid 251894] [client 52.231.30.175:33124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0wZOnWJRlb5xgkk0CagAAAI0"]
[Wed Sep 30 01:05:37.956464 2026] [security2:error] [pid 251754:tid 251991] [client 20.251.39.228:40029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-png.php"] [unique_id "ary0wZOnWJRlb5xgkk0CawAAAO4"]
[Wed Sep 30 01:05:38.003443 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.003718 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.014064 2026] [security2:error] [pid 251754:tid 251949] [client 13.70.1.101:18608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/media.php"] [unique_id "ary0wpOnWJRlb5xgkk0CbgAAAMQ"]
[Wed Sep 30 01:05:38.054406 2026] [security2:error] [pid 251754:tid 251901] [client 20.58.177.98:3415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/cued.php"] [unique_id "ary0wpOnWJRlb5xgkk0CcAAAAJQ"]
[Wed Sep 30 01:05:38.099949 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.100212 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.165648 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.4.78:62863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary0wpOnWJRlb5xgkk0CdQAAAJo"]
[Wed Sep 30 01:05:38.192736 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.193188 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.205551 2026] [security2:error] [pid 251754:tid 251970] [client 52.231.69.245:38611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ms-edit.php"] [unique_id "ary0wpOnWJRlb5xgkk0CeQAAANk"]
[Wed Sep 30 01:05:38.223689 2026] [security2:error] [pid 251754:tid 252007] [client 52.231.30.175:32829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0wpOnWJRlb5xgkk0CfQAAAP4"]
[Wed Sep 30 01:05:38.282512 2026] [security2:error] [pid 251754:tid 251921] [client 74.225.148.80:13509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0wpOnWJRlb5xgkk0CgAAAAKg"]
[Wed Sep 30 01:05:38.284138 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.284570 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.298819 2026] [security2:error] [pid 251754:tid 251998] [client 52.172.226.14:40556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/.well-known/log.php"] [unique_id "ary0wpOnWJRlb5xgkk0CgQAAAPU"]
[Wed Sep 30 01:05:38.342180 2026] [security2:error] [pid 251754:tid 251900] [client 13.70.1.101:19010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/mac.php"] [unique_id "ary0wpOnWJRlb5xgkk0CgwAAAJM"]
[Wed Sep 30 01:05:38.342517 2026] [security2:error] [pid 251754:tid 251931] [client 152.59.169.65:62693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.169.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0wpOnWJRlb5xgkk0CggAAALI"]
[Wed Sep 30 01:05:38.342754 2026] [security2:error] [pid 251754:tid 251931] [client 152.59.169.65:62693] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gkmasterson.com"] [uri "/xmlrpc.php"] [unique_id "ary0wpOnWJRlb5xgkk0CggAAALI"]
[Wed Sep 30 01:05:38.370481 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.370773 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.385739 2026] [security2:error] [pid 251754:tid 252002] [client 20.58.177.98:3395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/sd.php"] [unique_id "ary0wpOnWJRlb5xgkk0ChgAAAPk"]
[Wed Sep 30 01:05:38.387893 2026] [security2:error] [pid 251754:tid 251960] [client 4.240.25.22:13066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0wpOnWJRlb5xgkk0CiAAAAM8"]
[Wed Sep 30 01:05:38.422991 2026] [security2:error] [pid 251754:tid 251888] [client 114.119.128.237:29405] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.viniteca.pe"] [uri "/sitemap3.xml"] [unique_id "ary0wpOnWJRlb5xgkk0CiQAAAIc"]
[Wed Sep 30 01:05:38.437111 2026] [security2:error] [pid 251754:tid 251919] [client 20.251.39.228:40055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/222.php"] [unique_id "ary0wpOnWJRlb5xgkk0CigAAAKY"]
[Wed Sep 30 01:05:38.446173 2026] [security2:error] [pid 251754:tid 251996] [client 20.194.30.107:53430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/red.php"] [unique_id "ary0wpOnWJRlb5xgkk0CiwAAAPM"]
[Wed Sep 30 01:05:38.462453 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.462923 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.464558 2026] [security2:error] [pid 251754:tid 251899] [client 52.231.69.245:38645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/txets.php"] [unique_id "ary0wpOnWJRlb5xgkk0CjgAAAJI"]
[Wed Sep 30 01:05:38.520449 2026] [security2:error] [pid 251754:tid 251947] [client 52.231.30.175:32835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0wpOnWJRlb5xgkk0CkAAAAMI"]
[Wed Sep 30 01:05:38.540106 2026] [security2:error] [pid 251754:tid 251773] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0wpOnWJRlb5xgkk0CkQAAwBA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=228303
[Wed Sep 30 01:05:38.540141 2026] [security2:error] [pid 251754:tid 251773] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0wpOnWJRlb5xgkk0CkQAAwBA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=228303
[Wed Sep 30 01:05:38.542914 2026] [security2:error] [pid 251754:tid 251952] [client 13.70.4.78:60723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary0wpOnWJRlb5xgkk0CkgAAAMc"]
[Wed Sep 30 01:05:38.553974 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.554237 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.588783 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:46860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=boot&p=L3Byb2MvODAwNjg2L2N3ZA==
[Wed Sep 30 01:05:38.589221 2026] [access_compat:error] [pid 251754:tid 251896] [client 74.7.243.227:46860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=boot&p=L3Byb2MvODAwNjg2L2N3ZA==
[Wed Sep 30 01:05:38.597709 2026] [security2:error] [pid 251754:tid 251985] [client 20.70.173.30:60014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/fling.php"] [unique_id "ary0wpOnWJRlb5xgkk0CmQAAAOg"]
[Wed Sep 30 01:05:38.621940 2026] [access_compat:error] [pid 251754:tid 251987] [client 47.79.13.37:47940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:38.622210 2026] [access_compat:error] [pid 251754:tid 251987] [client 47.79.13.37:47940] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:38.643502 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.643794 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.669116 2026] [security2:error] [pid 251754:tid 252005] [client 13.70.1.101:19059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ops.php"] [unique_id "ary0wpOnWJRlb5xgkk0CnwAAAPw"]
[Wed Sep 30 01:05:38.703005 2026] [security2:error] [pid 251754:tid 251897] [client 20.58.177.98:3625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/ans.php"] [unique_id "ary0wpOnWJRlb5xgkk0CowAAAJA"]
[Wed Sep 30 01:05:38.727005 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.69.245:39083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/hao.php"] [unique_id "ary0wpOnWJRlb5xgkk0CpgAAAKs"]
[Wed Sep 30 01:05:38.756318 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.756600 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.783351 2026] [security2:error] [pid 251754:tid 251951] [client 20.214.109.68:60565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary0wpOnWJRlb5xgkk0CrgAAAMY"]
[Wed Sep 30 01:05:38.802361 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.30.175:33102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary0wpOnWJRlb5xgkk0CrwAAAIk"]
[Wed Sep 30 01:05:38.824244 2026] [security2:error] [pid 251754:tid 251990] [client 74.225.148.80:11322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0wpOnWJRlb5xgkk0CsgAAAO0"]
[Wed Sep 30 01:05:38.834302 2026] [security2:error] [pid 251754:tid 252011] [client 20.251.39.228:16762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-blog.php"] [unique_id "ary0wpOnWJRlb5xgkk0CswAAAQI"]
[Wed Sep 30 01:05:38.847528 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.847825 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.849907 2026] [security2:error] [pid 251754:tid 252012] [client 4.196.65.241:27310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/new.php"] [unique_id "ary0wpOnWJRlb5xgkk0CtgAAAQM"]
[Wed Sep 30 01:05:38.905943 2026] [security2:error] [pid 251754:tid 251973] [client 13.70.4.78:5644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary0wpOnWJRlb5xgkk0CugAAANw"]
[Wed Sep 30 01:05:38.906495 2026] [security2:error] [pid 251754:tid 252010] [client 4.240.25.22:43776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/pfm.php"] [unique_id "ary0wpOnWJRlb5xgkk0CuwAAAQE"]
[Wed Sep 30 01:05:38.918087 2026] [security2:error] [pid 251754:tid 251887] [client 52.172.226.14:3959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/class.php"] [unique_id "ary0wpOnWJRlb5xgkk0CvQAAAIY"]
[Wed Sep 30 01:05:38.939222 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:38.939515 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:38.986423 2026] [security2:error] [pid 251754:tid 251927] [client 13.70.1.101:18595] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.yourkatana.com"] [uri "/1.php"] [unique_id "ary0wpOnWJRlb5xgkk0CvwAAAK4"]
[Wed Sep 30 01:05:38.986543 2026] [security2:error] [pid 251754:tid 251927] [client 13.70.1.101:18595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/1.php"] [unique_id "ary0wpOnWJRlb5xgkk0CvwAAAK4"]
[Wed Sep 30 01:05:38.987185 2026] [security2:error] [pid 251754:tid 251903] [client 52.231.69.245:39086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/33.php"] [unique_id "ary0wpOnWJRlb5xgkk0CwAAAAJY"]
[Wed Sep 30 01:05:38.991376 2026] [security2:error] [pid 251754:tid 251936] [client 49.43.163.212:50645] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0wpOnWJRlb5xgkk0CwQAAALc"]
[Wed Sep 30 01:05:38.991584 2026] [security2:error] [pid 251754:tid 251936] [client 49.43.163.212:50645] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0wpOnWJRlb5xgkk0CwQAAALc"]
[Wed Sep 30 01:05:39.017938 2026] [security2:error] [pid 251754:tid 251983] [client 20.58.177.98:3444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/cns.php"] [unique_id "ary0w5OnWJRlb5xgkk0CwgAAAOY"]
[Wed Sep 30 01:05:39.029740 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.030021 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.044943 2026] [security2:error] [pid 251754:tid 251974] [client 116.197.133.25:55497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0w5OnWJRlb5xgkk0CxgAAAN0"]
[Wed Sep 30 01:05:39.045072 2026] [security2:error] [pid 251754:tid 251974] [client 116.197.133.25:55497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0w5OnWJRlb5xgkk0CxgAAAN0"]
[Wed Sep 30 01:05:39.083064 2026] [security2:error] [pid 251754:tid 251954] [client 52.231.30.175:32799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary0w5OnWJRlb5xgkk0CyQAAAMk"]
[Wed Sep 30 01:05:39.120867 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.121123 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.180961 2026] [security2:error] [pid 251754:tid 251894] [client 104.208.65.139:2654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wmore1.php"] [unique_id "ary0w5OnWJRlb5xgkk0C3AAAAI0"]
[Wed Sep 30 01:05:39.196760 2026] [security2:error] [pid 251754:tid 251994] [client 20.194.30.107:17407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/fling.php"] [unique_id "ary0w5OnWJRlb5xgkk0C4QAAAPE"]
[Wed Sep 30 01:05:39.197452 2026] [security2:error] [pid 251754:tid 251889] [client 122.173.27.10:24799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0w5OnWJRlb5xgkk0C4gAAAIg"]
[Wed Sep 30 01:05:39.197578 2026] [security2:error] [pid 251754:tid 251889] [client 122.173.27.10:24799] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0w5OnWJRlb5xgkk0C4gAAAIg"]
[Wed Sep 30 01:05:39.214718 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.215050 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:48133] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.229562 2026] [security2:error] [pid 251754:tid 251929] [client 13.70.4.78:45181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/about/function.php"] [unique_id "ary0w5OnWJRlb5xgkk0C6gAAALA"]
[Wed Sep 30 01:05:39.255674 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:39028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/adminner.php"] [unique_id "ary0w5OnWJRlb5xgkk0C7QAAAKI"]
[Wed Sep 30 01:05:39.304829 2026] [security2:error] [pid 251754:tid 251973] [client 13.70.1.101:18584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/aaa.php"] [unique_id "ary0w5OnWJRlb5xgkk0C7wAAANw"]
[Wed Sep 30 01:05:39.336371 2026] [security2:error] [pid 251754:tid 251906] [client 20.58.177.98:3666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/faiy.php"] [unique_id "ary0w5OnWJRlb5xgkk0C8wAAAJk"]
[Wed Sep 30 01:05:39.337698 2026] [security2:error] [pid 251754:tid 251918] [client 74.225.148.80:11315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-links-opml.php"] [unique_id "ary0w5OnWJRlb5xgkk0C9AAAAKU"]
[Wed Sep 30 01:05:39.358695 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.358974 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.364184 2026] [security2:error] [pid 251754:tid 251893] [client 52.231.30.175:32822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary0w5OnWJRlb5xgkk0C9gAAAIw"]
[Wed Sep 30 01:05:39.410361 2026] [security2:error] [pid 251754:tid 251919] [client 20.219.2.60:11360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0w5OnWJRlb5xgkk0C-AAAAKY"]
[Wed Sep 30 01:05:39.412050 2026] [security2:error] [pid 251754:tid 251975] [client 20.251.39.228:19138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary0w5OnWJRlb5xgkk0C-QAAAN4"]
[Wed Sep 30 01:05:39.423502 2026] [security2:error] [pid 251754:tid 251977] [client 43.104.4.214:61539] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary0w5OnWJRlb5xgkk0C-gAAAOA"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:05:39.457786 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.458078 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.497563 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.497878 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.506375 2026] [security2:error] [pid 251754:tid 251910] [client 52.172.226.14:3896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/lock360.php"] [unique_id "ary0w5OnWJRlb5xgkk0DAAAAAJ0"]
[Wed Sep 30 01:05:39.524774 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.69.245:39033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/thoms.php"] [unique_id "ary0w5OnWJRlb5xgkk0DAQAAAJs"]
[Wed Sep 30 01:05:39.570564 2026] [security2:error] [pid 251754:tid 251994] [client 13.70.4.78:45149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary0w5OnWJRlb5xgkk0DAwAAAPE"]
[Wed Sep 30 01:05:39.589401 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.589681 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.620897 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.1.101:19060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/chosen.php"] [unique_id "ary0w5OnWJRlb5xgkk0DCwAAAQA"]
[Wed Sep 30 01:05:39.635441 2026] [security2:error] [pid 251754:tid 251929] [client 52.231.30.175:32842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/media.php"] [unique_id "ary0w5OnWJRlb5xgkk0DDQAAALA"]
[Wed Sep 30 01:05:39.653879 2026] [security2:error] [pid 251754:tid 252001] [client 20.58.177.98:3692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gecho.php"] [unique_id "ary0w5OnWJRlb5xgkk0DDgAAAPg"]
[Wed Sep 30 01:05:39.678953 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.679220 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.705152 2026] [access_compat:error] [pid 251754:tid 251920] [client 47.79.13.71:44096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:39.705416 2026] [access_compat:error] [pid 251754:tid 251920] [client 47.79.13.71:44096] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:39.770402 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.770675 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.793415 2026] [security2:error] [pid 251754:tid 251957] [client 52.231.69.245:39036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/a.php"] [unique_id "ary0w5OnWJRlb5xgkk0DGwAAAMw"]
[Wed Sep 30 01:05:39.817337 2026] [security2:error] [pid 251754:tid 251924] [client 20.214.109.68:59890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/public/ws49.php"] [unique_id "ary0w5OnWJRlb5xgkk0DHwAAAKs"]
[Wed Sep 30 01:05:39.832258 2026] [security2:error] [pid 251754:tid 251956] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0w5OnWJRlb5xgkk0DIAAAAMs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:39.868262 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.868592 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.884450 2026] [security2:error] [pid 251754:tid 251969] [client 20.251.39.228:20524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/lib.php"] [unique_id "ary0w5OnWJRlb5xgkk0DIgAAANg"]
[Wed Sep 30 01:05:39.898206 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.30.175:32849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/inso.php"] [unique_id "ary0w5OnWJRlb5xgkk0DIwAAAPY"]
[Wed Sep 30 01:05:39.918271 2026] [security2:error] [pid 251754:tid 251933] [client 13.70.4.78:60696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/admin/function.php"] [unique_id "ary0w5OnWJRlb5xgkk0DJAAAALQ"]
[Wed Sep 30 01:05:39.927525 2026] [security2:error] [pid 251754:tid 251897] [client 74.225.148.80:13473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/hp.php"] [unique_id "ary0w5OnWJRlb5xgkk0DJQAAAJA"]
[Wed Sep 30 01:05:39.938290 2026] [security2:error] [pid 251754:tid 252002] [client 13.70.1.101:19055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/2P.php"] [unique_id "ary0w5OnWJRlb5xgkk0DJgAAAPk"]
[Wed Sep 30 01:05:39.961852 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:39.962124 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:39.970079 2026] [security2:error] [pid 251754:tid 251977] [client 20.58.177.98:3655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/gu.php"] [unique_id "ary0w5OnWJRlb5xgkk0DLAAAAOA"]
[Wed Sep 30 01:05:40.001957 2026] [security2:error] [pid 251754:tid 251922] [client 52.172.226.14:3878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.taetaebobateashop.com"] [uri "/system_log.php"] [unique_id "ary0xJOnWJRlb5xgkk0DMQAAAKk"]
[Wed Sep 30 01:05:40.054323 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.054700 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.059520 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.69.245:38982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/b8.php"] [unique_id "ary0xJOnWJRlb5xgkk0DOQAAAPo"]
[Wed Sep 30 01:05:40.097551 2026] [security2:error] [pid 251754:tid 251971] [client 201.32.215.149:6715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0xJOnWJRlb5xgkk0DPQAAANo"]
[Wed Sep 30 01:05:40.097651 2026] [security2:error] [pid 251754:tid 251971] [client 201.32.215.149:6715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0xJOnWJRlb5xgkk0DPQAAANo"]
[Wed Sep 30 01:05:40.130327 2026] [security2:error] [pid 251754:tid 251939] [remote 168.100.149.177:23396] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0xJOnWJRlb5xgkk0DMwAAzzw"]
[Wed Sep 30 01:05:40.143635 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.143922 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.159451 2026] [security2:error] [pid 251754:tid 252004] [client 52.231.30.175:32976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/shiny.php"] [unique_id "ary0xJOnWJRlb5xgkk0DRgAAAPs"]
[Wed Sep 30 01:05:40.236071 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.236350 2026] [access_compat:error] [pid 251754:tid 251979] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.266175 2026] [security2:error] [pid 251754:tid 251889] [client 13.70.1.101:18563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/min.php"] [unique_id "ary0xJOnWJRlb5xgkk0DTQAAAIg"]
[Wed Sep 30 01:05:40.288043 2026] [security2:error] [pid 251754:tid 252011] [client 20.58.177.98:3492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/nck.php"] [unique_id "ary0xJOnWJRlb5xgkk0DTgAAAQI"]
[Wed Sep 30 01:05:40.324787 2026] [security2:error] [pid 251754:tid 251932] [client 13.70.4.78:6091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ary0xJOnWJRlb5xgkk0DUQAAALM"]
[Wed Sep 30 01:05:40.327998 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.328265 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:40203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.339832 2026] [security2:error] [pid 251754:tid 251970] [client 52.231.69.245:38633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/sid.php"] [unique_id "ary0xJOnWJRlb5xgkk0DVAAAANk"]
[Wed Sep 30 01:05:40.419520 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.419788 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.426991 2026] [security2:error] [pid 251754:tid 251886] [client 52.231.30.175:32735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/403dd.php"] [unique_id "ary0xJOnWJRlb5xgkk0DWQAAAIU"]
[Wed Sep 30 01:05:40.449873 2026] [security2:error] [pid 251754:tid 251982] [client 20.251.39.228:25559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/edit.php"] [unique_id "ary0xJOnWJRlb5xgkk0DXAAAAOU"]
[Wed Sep 30 01:05:40.468509 2026] [security2:error] [pid 251754:tid 251928] [client 74.225.148.80:11295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/mo.php"] [unique_id "ary0xJOnWJRlb5xgkk0DXgAAAK8"]
[Wed Sep 30 01:05:40.483660 2026] [security2:error] [pid 251754:tid 251972] [client 152.59.165.7:60829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0xJOnWJRlb5xgkk0DXwAAANs"]
[Wed Sep 30 01:05:40.483815 2026] [security2:error] [pid 251754:tid 251972] [client 152.59.165.7:60829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0xJOnWJRlb5xgkk0DXwAAANs"]
[Wed Sep 30 01:05:40.509148 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.509417 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.559073 2026] [security2:error] [pid 251754:tid 251918] [client 20.28.180.172:61221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/5b9ac.php"] [unique_id "ary0xJOnWJRlb5xgkk0DZAAAAKU"]
[Wed Sep 30 01:05:40.601210 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.69.245:39096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/bro.php"] [unique_id "ary0xJOnWJRlb5xgkk0DagAAALE"]
[Wed Sep 30 01:05:40.601718 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.602006 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.607139 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.13.234:41732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:40.607506 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.13.234:41732] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:40.610898 2026] [security2:error] [pid 251754:tid 251980] [client 20.198.74.230:24154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/dex.php"] [unique_id "ary0xJOnWJRlb5xgkk0DbAAAAOM"]
[Wed Sep 30 01:05:40.612270 2026] [security2:error] [pid 251754:tid 251940] [client 20.58.177.98:3638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/xtt.php"] [unique_id "ary0xJOnWJRlb5xgkk0DbQAAALs"]
[Wed Sep 30 01:05:40.658362 2026] [security2:error] [pid 251754:tid 251945] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0xJOnWJRlb5xgkk0DdQAAAMA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:40.691688 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.691712 2026] [security2:error] [pid 251754:tid 251976] [client 52.231.30.175:33122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/baba.php"] [unique_id "ary0xJOnWJRlb5xgkk0DegAAAN8"]
[Wed Sep 30 01:05:40.691987 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.730498 2026] [security2:error] [pid 251754:tid 251917] [client 13.70.4.78:60700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-admin/setup-config.php"] [unique_id "ary0xJOnWJRlb5xgkk0DewAAAKQ"]
[Wed Sep 30 01:05:40.778937 2026] [security2:error] [pid 251754:tid 251896] [client 13.70.1.101:19030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/great.php"] [unique_id "ary0xJOnWJRlb5xgkk0DfgAAAI8"]
[Wed Sep 30 01:05:40.783647 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.783937 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.815910 2026] [security2:error] [pid 251754:tid 251968] [client 216.73.216.46:40203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0xJOnWJRlb5xgkk0DfwAAANc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MS9ub2RlMC9jcHUxMi9ub2RlMA%3D%3D
[Wed Sep 30 01:05:40.858917 2026] [security2:error] [pid 251754:tid 251836] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0xJOnWJRlb5xgkk0DgAAA-E8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=79740
[Wed Sep 30 01:05:40.858948 2026] [security2:error] [pid 251754:tid 251836] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0xJOnWJRlb5xgkk0DgAAA-E8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=79740
[Wed Sep 30 01:05:40.866749 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.69.245:39029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xwpg.php"] [unique_id "ary0xJOnWJRlb5xgkk0DgQAAAOI"]
[Wed Sep 30 01:05:40.866760 2026] [security2:error] [pid 251754:tid 251920] [client 20.219.2.60:11389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0xJOnWJRlb5xgkk0DggAAAKc"]
[Wed Sep 30 01:05:40.874383 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.874657 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.876033 2026] [security2:error] [pid 251754:tid 252011] [client 20.251.39.228:19621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ioxi-o.php"] [unique_id "ary0xJOnWJRlb5xgkk0DhAAAAQI"]
[Wed Sep 30 01:05:40.929713 2026] [security2:error] [pid 251754:tid 251932] [client 20.58.177.98:3400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "geyserjz.com"] [uri "/go.php"] [unique_id "ary0xJOnWJRlb5xgkk0DhwAAALM"]
[Wed Sep 30 01:05:40.958479 2026] [security2:error] [pid 251754:tid 251973] [client 52.231.30.175:32715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/site.php"] [unique_id "ary0xJOnWJRlb5xgkk0DiAAAANw"]
[Wed Sep 30 01:05:40.966849 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:40.967121 2026] [access_compat:error] [pid 251754:tid 251953] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:40.974529 2026] [security2:error] [pid 251754:tid 252005] [client 213.136.69.135:59249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/utf8.php"] [unique_id "ary0xJOnWJRlb5xgkk0DiwAAAPw"], referer: binance.com
[Wed Sep 30 01:05:40.993108 2026] [security2:error] [pid 251754:tid 251982] [client 74.225.148.80:11284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/ivmirgut.php"] [unique_id "ary0xJOnWJRlb5xgkk0DkAAAAOU"]
[Wed Sep 30 01:05:41.045985 2026] [security2:error] [pid 251754:tid 251888] [client 202.179.95.79:54598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DlAAAAIc"]
[Wed Sep 30 01:05:41.046578 2026] [security2:error] [pid 251754:tid 251888] [client 202.179.95.79:54598] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DlAAAAIc"]
[Wed Sep 30 01:05:41.056983 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.057238 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.072759 2026] [security2:error] [pid 251754:tid 251989] [client 203.122.45.246:55166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DlwAAAOw"]
[Wed Sep 30 01:05:41.072919 2026] [security2:error] [pid 251754:tid 251989] [client 203.122.45.246:55166] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DlwAAAOw"]
[Wed Sep 30 01:05:41.089119 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.1.101:18575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/BDKR28WP.php"] [unique_id "ary0xZOnWJRlb5xgkk0DmAAAAJs"]
[Wed Sep 30 01:05:41.116982 2026] [security2:error] [pid 251754:tid 251933] [client 13.70.4.78:5663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/wp-content/radio.php"] [unique_id "ary0xZOnWJRlb5xgkk0DmwAAALQ"]
[Wed Sep 30 01:05:41.142211 2026] [security2:error] [pid 251754:tid 251981] [client 52.231.69.245:39017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/radio.php"] [unique_id "ary0xZOnWJRlb5xgkk0DnwAAAOQ"]
[Wed Sep 30 01:05:41.149409 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.149701 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.227371 2026] [security2:error] [pid 251754:tid 251910] [client 52.231.30.175:32789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/insc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DpQAAAJ0"]
[Wed Sep 30 01:05:41.241647 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.241926 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.331325 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.331599 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.374187 2026] [autoindex:error] [pid 251754:tid 251986] [client 72.155.72.2:54980] AH01276: Cannot serve directory /home4/inplaced/public_html/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Sep 30 01:05:41.408641 2026] [security2:error] [pid 251754:tid 252013] [client 52.231.69.245:38598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ccc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DrwAAAQQ"]
[Wed Sep 30 01:05:41.422120 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.422392 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.424598 2026] [security2:error] [pid 251754:tid 251937] [client 13.70.1.101:18582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gigi.php"] [unique_id "ary0xZOnWJRlb5xgkk0DsQAAALg"]
[Wed Sep 30 01:05:41.471193 2026] [security2:error] [pid 251754:tid 251895] [client 13.70.4.78:45179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary0xZOnWJRlb5xgkk0DtQAAAI4"]
[Wed Sep 30 01:05:41.495121 2026] [security2:error] [pid 251754:tid 251909] [client 52.231.30.175:32982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/file.php"] [unique_id "ary0xZOnWJRlb5xgkk0DtgAAAJw"]
[Wed Sep 30 01:05:41.513308 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.513570 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.567081 2026] [security2:error] [pid 251754:tid 251955] [client 74.225.148.80:11292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/baba.php"] [unique_id "ary0xZOnWJRlb5xgkk0DuQAAAMo"]
[Wed Sep 30 01:05:41.607684 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.607968 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.660913 2026] [security2:error] [pid 251754:tid 251897] [client 116.193.128.26:56059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DwQAAAJA"]
[Wed Sep 30 01:05:41.661045 2026] [security2:error] [pid 251754:tid 251897] [client 116.193.128.26:56059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0xZOnWJRlb5xgkk0DwQAAAJA"]
[Wed Sep 30 01:05:41.676897 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.69.245:39020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wmore1.php"] [unique_id "ary0xZOnWJRlb5xgkk0DxgAAAKs"]
[Wed Sep 30 01:05:41.695763 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.696114 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.707692 2026] [security2:error] [pid 251754:tid 251915] [client 45.138.12.40:1360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tty.gfl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0xZOnWJRlb5xgkk0DywAAAKI"]
[Wed Sep 30 01:05:41.736606 2026] [security2:error] [pid 251754:tid 251989] [client 13.70.1.101:18585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ant.php"] [unique_id "ary0xZOnWJRlb5xgkk0DzAAAAOw"]
[Wed Sep 30 01:05:41.776138 2026] [security2:error] [pid 251754:tid 251908] [client 20.251.39.228:49258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ajax.php"] [unique_id "ary0xZOnWJRlb5xgkk0DzwAAAJs"]
[Wed Sep 30 01:05:41.776897 2026] [security2:error] [pid 251754:tid 251969] [client 52.231.30.175:32791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/dex.php"] [unique_id "ary0xZOnWJRlb5xgkk0D0AAAANg"]
[Wed Sep 30 01:05:41.787824 2026] [security2:error] [pid 251754:tid 251933] [client 20.214.109.68:9864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gifclass.php"] [unique_id "ary0xZOnWJRlb5xgkk0D0gAAALQ"]
[Wed Sep 30 01:05:41.793471 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.793784 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.852708 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.4.78:60674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/.well-known/log.php"] [unique_id "ary0xZOnWJRlb5xgkk0D2AAAAKU"]
[Wed Sep 30 01:05:41.878905 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.879162 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:41.950544 2026] [security2:error] [pid 251754:tid 251977] [client 52.231.69.245:38628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/function.php"] [unique_id "ary0xZOnWJRlb5xgkk0D3QAAAOA"]
[Wed Sep 30 01:05:41.970516 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:41.970789 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.000168 2026] [security2:error] [pid 251754:tid 251974] [client 57.141.14.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0xZOnWJRlb5xgkk0D4QAAAN0"]
[Wed Sep 30 01:05:42.037743 2026] [security2:error] [pid 251754:tid 251956] [client 52.231.30.175:32713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/key.php"] [unique_id "ary0xpOnWJRlb5xgkk0D6QAAAMs"]
[Wed Sep 30 01:05:42.041199 2026] [security2:error] [pid 251754:tid 251952] [client 20.194.30.107:53426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/classwithtostring.php"] [unique_id "ary0xpOnWJRlb5xgkk0D6gAAAMc"]
[Wed Sep 30 01:05:42.061824 2026] [security2:error] [pid 251754:tid 252008] [client 13.70.1.101:18604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/uejvv.php"] [unique_id "ary0xpOnWJRlb5xgkk0D7AAAAP8"]
[Wed Sep 30 01:05:42.064305 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.064715 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.078910 2026] [security2:error] [pid 251754:tid 251996] [client 20.194.30.107:17293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/chosen.php"] [unique_id "ary0xpOnWJRlb5xgkk0D7QAAAPM"]
[Wed Sep 30 01:05:42.090581 2026] [security2:error] [pid 251754:tid 251940] [client 74.225.148.80:11310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/Components.php"] [unique_id "ary0xpOnWJRlb5xgkk0D7wAAALs"]
[Wed Sep 30 01:05:42.111311 2026] [security2:error] [pid 251754:tid 251898] [client 103.159.192.142:56993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0xpOnWJRlb5xgkk0D8AAAAJE"]
[Wed Sep 30 01:05:42.111485 2026] [security2:error] [pid 251754:tid 251898] [client 103.159.192.142:56993] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0xpOnWJRlb5xgkk0D8AAAAJE"]
[Wed Sep 30 01:05:42.143354 2026] [security2:error] [pid 251754:tid 251891] [remote 168.100.149.231:23496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0xpOnWJRlb5xgkk0D6AAA9VM"]
[Wed Sep 30 01:05:42.151577 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.151607 2026] [access_compat:error] [pid 251754:tid 251921] [client 47.79.13.65:54418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:42.151987 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.152061 2026] [access_compat:error] [pid 251754:tid 251921] [client 47.79.13.65:54418] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:42.159176 2026] [security2:error] [pid 251754:tid 251968] [client 20.251.39.228:25589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/install.php"] [unique_id "ary0xpOnWJRlb5xgkk0D9gAAANc"]
[Wed Sep 30 01:05:42.159196 2026] [security2:error] [pid 251754:tid 251955] [client 45.138.12.32:26534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dtb.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0xpOnWJRlb5xgkk0D9wAAAMo"]
[Wed Sep 30 01:05:42.217177 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.69.245:38596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ab.php"] [unique_id "ary0xpOnWJRlb5xgkk0D_QAAAOU"]
[Wed Sep 30 01:05:42.243522 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.243802 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:16408] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.251318 2026] [security2:error] [pid 251754:tid 251961] [client 13.70.4.78:6126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/class.php"] [unique_id "ary0xpOnWJRlb5xgkk0D_wAAANA"]
[Wed Sep 30 01:05:42.310224 2026] [security2:error] [pid 251754:tid 251892] [client 52.231.30.175:32800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/kir.php"] [unique_id "ary0xpOnWJRlb5xgkk0EBQAAAIs"]
[Wed Sep 30 01:05:42.317831 2026] [security2:error] [pid 251754:tid 251991] [client 184.154.76.34:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "fredrocker.com"] [uri "/cgi-sys/404.html"] [unique_id "ary0xpOnWJRlb5xgkk0ECAAAAO4"]
[Wed Sep 30 01:05:42.320031 2026] [security2:error] [pid 251754:tid 251889] [client 184.154.76.34:50612] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "fredrocker.com"] [uri "/th1s_1s_a_4o4.html"] [unique_id "ary0xpOnWJRlb5xgkk0EAAAAAIg"]
[Wed Sep 30 01:05:42.359737 2026] [security2:error] [pid 251754:tid 252007] [client 20.219.2.60:11366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ccs.php"] [unique_id "ary0xpOnWJRlb5xgkk0EDAAAAP4"]
[Wed Sep 30 01:05:42.387046 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.387391 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.453951 2026] [security2:error] [pid 251754:tid 251942] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary0xpOnWJRlb5xgkk0EFQAAAL0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:42.478297 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.478562 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.480461 2026] [security2:error] [pid 251754:tid 251974] [client 52.231.69.245:39050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/css.php"] [unique_id "ary0xpOnWJRlb5xgkk0EGAAAAN0"]
[Wed Sep 30 01:05:42.496487 2026] [security2:error] [pid 251754:tid 251954] [client 20.251.39.228:19148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/public/wp-blog.php"] [unique_id "ary0xpOnWJRlb5xgkk0EGQAAAMk"]
[Wed Sep 30 01:05:42.498412 2026] [security2:error] [pid 251754:tid 251950] [client 20.28.180.172:61190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/hehe.php"] [unique_id "ary0xpOnWJRlb5xgkk0EGgAAAMU"]
[Wed Sep 30 01:05:42.569660 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.569955 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.605478 2026] [security2:error] [pid 251754:tid 251898] [client 74.225.148.80:13478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/aboutt.php"] [unique_id "ary0xpOnWJRlb5xgkk0EIgAAAJE"]
[Wed Sep 30 01:05:42.611579 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.612047 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.619002 2026] [security2:error] [pid 251754:tid 252001] [client 52.231.30.175:32755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/fling.php"] [unique_id "ary0xpOnWJRlb5xgkk0EJwAAAPg"]
[Wed Sep 30 01:05:42.631280 2026] [security2:error] [pid 251754:tid 251986] [client 20.70.173.30:59545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/felnggg.php"] [unique_id "ary0xpOnWJRlb5xgkk0EKAAAAOk"]
[Wed Sep 30 01:05:42.639551 2026] [security2:error] [pid 251754:tid 251951] [client 184.154.76.34:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Pictures.html"] [unique_id "ary0xpOnWJRlb5xgkk0EKQAAAMY"]
[Wed Sep 30 01:05:42.641082 2026] [security2:error] [pid 251754:tid 251921] [client 216.73.216.46:16408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0xpOnWJRlb5xgkk0EKgAAAKg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5OTAvcG93ZXI%3D
[Wed Sep 30 01:05:42.651733 2026] [security2:error] [pid 251754:tid 251887] [client 184.154.76.34:50622] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Pictures.html"] [unique_id "ary0xpOnWJRlb5xgkk0EGwAAAIY"]
[Wed Sep 30 01:05:42.679977 2026] [security2:error] [pid 251754:tid 251903] [client 20.214.109.68:61166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/sa.php7"] [unique_id "ary0xpOnWJRlb5xgkk0ELQAAAJY"]
[Wed Sep 30 01:05:42.682125 2026] [security2:error] [pid 251754:tid 251852] [remote 64.23.166.180:59554] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-01f59fcd.medredisolutions.com"] [uri "/.env"] [unique_id "ary0xpOnWJRlb5xgkk0ELwAAnF8"]
[Wed Sep 30 01:05:42.699288 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.699556 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.724799 2026] [security2:error] [pid 251754:tid 251923] [client 13.70.1.101:19011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/file.php"] [unique_id "ary0xpOnWJRlb5xgkk0EMgAAAKo"]
[Wed Sep 30 01:05:42.742162 2026] [security2:error] [pid 251754:tid 251969] [client 52.231.69.245:38655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary0xpOnWJRlb5xgkk0ENAAAANg"]
[Wed Sep 30 01:05:42.789914 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.790182 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.879291 2026] [security2:error] [pid 251754:tid 251931] [client 13.70.4.78:5653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/lock360.php"] [unique_id "ary0xpOnWJRlb5xgkk0EOgAAALI"]
[Wed Sep 30 01:05:42.880846 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.881104 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:42.890283 2026] [security2:error] [pid 251754:tid 251899] [client 52.231.30.175:32824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/btyuio.php"] [unique_id "ary0xpOnWJRlb5xgkk0EOwAAAJI"]
[Wed Sep 30 01:05:42.940414 2026] [security2:error] [pid 251754:tid 251975] [client 20.251.39.228:35541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/nw.php"] [unique_id "ary0xpOnWJRlb5xgkk0ERAAAAN4"]
[Wed Sep 30 01:05:42.967819 2026] [security2:error] [pid 251754:tid 252009] [client 223.181.60.167:14897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0xpOnWJRlb5xgkk0ERwAAAQA"]
[Wed Sep 30 01:05:42.969576 2026] [security2:error] [pid 251754:tid 252009] [client 223.181.60.167:14897] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0xpOnWJRlb5xgkk0ERwAAAQA"]
[Wed Sep 30 01:05:42.973578 2026] [security2:error] [pid 251754:tid 251932] [client 4.196.65.241:27287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/ava.php"] [unique_id "ary0xpOnWJRlb5xgkk0ESQAAALM"]
[Wed Sep 30 01:05:42.975900 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:42.976341 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.014250 2026] [security2:error] [pid 251754:tid 251900] [client 52.231.69.245:39177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary0x5OnWJRlb5xgkk0ESwAAAJM"]
[Wed Sep 30 01:05:43.063543 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.063888 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.066359 2026] [security2:error] [pid 251754:tid 251937] [client 13.70.1.101:18612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/elements.php"] [unique_id "ary0x5OnWJRlb5xgkk0ETgAAALg"]
[Wed Sep 30 01:05:43.155211 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.155463 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.158871 2026] [security2:error] [pid 251754:tid 252012] [client 52.231.30.175:32857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/sm.php"] [unique_id "ary0x5OnWJRlb5xgkk0EVAAAAQM"]
[Wed Sep 30 01:05:43.250634 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.251070 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.262709 2026] [security2:error] [pid 251754:tid 251928] [client 4.240.25.22:13108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0x5OnWJRlb5xgkk0EWwAAAK8"]
[Wed Sep 30 01:05:43.264101 2026] [security2:error] [pid 251754:tid 251907] [client 106.214.2.47:18677] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EXAAAAJo"]
[Wed Sep 30 01:05:43.264234 2026] [security2:error] [pid 251754:tid 251907] [client 106.214.2.47:18677] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EXAAAAJo"]
[Wed Sep 30 01:05:43.280321 2026] [security2:error] [pid 251754:tid 251973] [client 52.231.69.245:38648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-links-opml.php"] [unique_id "ary0x5OnWJRlb5xgkk0EXQAAANw"]
[Wed Sep 30 01:05:43.337644 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.338070 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.384829 2026] [security2:error] [pid 251754:tid 251933] [client 20.251.39.228:20481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tool.php"] [unique_id "ary0x5OnWJRlb5xgkk0EbAAAALQ"]
[Wed Sep 30 01:05:43.390455 2026] [security2:error] [pid 251754:tid 251922] [client 74.225.148.80:11323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary0x5OnWJRlb5xgkk0EbQAAAKk"]
[Wed Sep 30 01:05:43.394538 2026] [security2:error] [pid 251754:tid 251938] [client 13.70.1.101:19020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/sitemap.php"] [unique_id "ary0x5OnWJRlb5xgkk0EbgAAALk"]
[Wed Sep 30 01:05:43.428843 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.429116 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.431167 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:32805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/a.php"] [unique_id "ary0x5OnWJRlb5xgkk0EcQAAAJc"]
[Wed Sep 30 01:05:43.438439 2026] [security2:error] [pid 251754:tid 251927] [client 43.227.131.37:14609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EcwAAAK4"]
[Wed Sep 30 01:05:43.438600 2026] [security2:error] [pid 251754:tid 251927] [client 43.227.131.37:14609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EcwAAAK4"]
[Wed Sep 30 01:05:43.519616 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.519967 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:44214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.529974 2026] [security2:error] [pid 251754:tid 251990] [client 49.205.105.16:14048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EfAAAAO0"]
[Wed Sep 30 01:05:43.530088 2026] [security2:error] [pid 251754:tid 251990] [client 49.205.105.16:14048] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0x5OnWJRlb5xgkk0EfAAAAO0"]
[Wed Sep 30 01:05:43.553056 2026] [security2:error] [pid 251754:tid 251945] [client 104.208.65.139:9615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wp-ainefgskk.php"] [unique_id "ary0x5OnWJRlb5xgkk0EgQAAAMA"]
[Wed Sep 30 01:05:43.560165 2026] [security2:error] [pid 251754:tid 251895] [client 52.231.69.245:38978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/hp.php"] [unique_id "ary0x5OnWJRlb5xgkk0EggAAAI4"]
[Wed Sep 30 01:05:43.589929 2026] [security2:error] [pid 251754:tid 251979] [client 20.219.2.60:18821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/s.php"] [unique_id "ary0x5OnWJRlb5xgkk0EhAAAAOI"]
[Wed Sep 30 01:05:43.590910 2026] [security2:error] [pid 251754:tid 252011] [client 13.70.4.78:60698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.vaidenfield.paintyourplane.com"] [uri "/system_log.php"] [unique_id "ary0x5OnWJRlb5xgkk0EhQAAAQI"]
[Wed Sep 30 01:05:43.614799 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.615231 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.617502 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.206.110:11644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:05:43.617784 2026] [access_compat:error] [pid 251754:tid 251963] [client 47.79.206.110:11644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:05:43.664500 2026] [security2:error] [pid 251754:tid 251998] [client 20.194.30.107:1165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/media.php"] [unique_id "ary0x5OnWJRlb5xgkk0EiwAAAPU"]
[Wed Sep 30 01:05:43.702986 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.703319 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.705611 2026] [security2:error] [pid 251754:tid 251947] [client 13.70.1.101:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xetmolxr.php"] [unique_id "ary0x5OnWJRlb5xgkk0EjgAAAMI"]
[Wed Sep 30 01:05:43.737458 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.30.175:32847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/sb.php"] [unique_id "ary0x5OnWJRlb5xgkk0EkgAAAIk"]
[Wed Sep 30 01:05:43.769858 2026] [security2:error] [pid 251754:tid 251891] [client 20.251.39.228:16727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/drhunthq.php"] [unique_id "ary0x5OnWJRlb5xgkk0ElAAAAIo"]
[Wed Sep 30 01:05:43.788351 2026] [security2:error] [pid 251754:tid 251995] [client 4.240.25.22:38778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wsd.php"] [unique_id "ary0x5OnWJRlb5xgkk0ElgAAAPI"]
[Wed Sep 30 01:05:43.793804 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.794114 2026] [access_compat:error] [pid 251754:tid 251915] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.849849 2026] [security2:error] [pid 251754:tid 251916] [client 52.231.69.245:38617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/mo.php"] [unique_id "ary0x5OnWJRlb5xgkk0EmQAAAKM"]
[Wed Sep 30 01:05:43.882155 2026] [security2:error] [pid 251754:tid 251922] [client 20.219.2.60:11372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/set.php"] [unique_id "ary0x5OnWJRlb5xgkk0EmwAAAKk"]
[Wed Sep 30 01:05:43.884583 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.884915 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:43.926746 2026] [security2:error] [pid 251754:tid 251927] [client 216.73.216.46:44214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0x5OnWJRlb5xgkk0EnQAAAK4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTE%3D
[Wed Sep 30 01:05:43.943351 2026] [security2:error] [pid 251754:tid 251894] [client 74.225.148.80:11298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/xx.php"] [unique_id "ary0x5OnWJRlb5xgkk0EngAAAI0"]
[Wed Sep 30 01:05:43.974761 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:43.975052 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.007217 2026] [security2:error] [pid 251754:tid 251955] [client 52.231.30.175:33113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/av.php"] [unique_id "ary0yJOnWJRlb5xgkk0EoQAAAMo"]
[Wed Sep 30 01:05:44.025177 2026] [security2:error] [pid 251754:tid 251994] [client 13.70.1.101:19046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/mini.php"] [unique_id "ary0yJOnWJRlb5xgkk0EogAAAPE"]
[Wed Sep 30 01:05:44.030064 2026] [security2:error] [pid 251754:tid 251975] [client 74.7.243.227:36582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0yJOnWJRlb5xgkk0EpAAAAN4"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvNDg1MzI1L2N3ZA==
[Wed Sep 30 01:05:44.065614 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.065933 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.107939 2026] [security2:error] [pid 251754:tid 251900] [remote 168.100.149.187:32382] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0x5OnWJRlb5xgkk0EoAAAz2g"]
[Wed Sep 30 01:05:44.110674 2026] [security2:error] [pid 251754:tid 251958] [client 52.231.69.245:39197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/ivmirgut.php"] [unique_id "ary0yJOnWJRlb5xgkk0EqwAAAM0"]
[Wed Sep 30 01:05:44.157960 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.158215 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.234037 2026] [security2:error] [pid 251754:tid 251986] [client 20.251.39.228:40021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/admin/index.php"] [unique_id "ary0yJOnWJRlb5xgkk0EtgAAAOk"]
[Wed Sep 30 01:05:44.249457 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.249729 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.288010 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.30.175:32794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/b8.php"] [unique_id "ary0yJOnWJRlb5xgkk0EuQAAAMQ"]
[Wed Sep 30 01:05:44.340004 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.340288 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.356426 2026] [security2:error] [pid 251754:tid 251907] [client 13.70.1.101:19034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/zwso.php"] [unique_id "ary0yJOnWJRlb5xgkk0EvQAAAJo"]
[Wed Sep 30 01:05:44.372852 2026] [security2:error] [pid 251754:tid 251891] [client 52.231.69.245:38608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/baba.php"] [unique_id "ary0yJOnWJRlb5xgkk0EvwAAAIo"]
[Wed Sep 30 01:05:44.408850 2026] [autoindex:error] [pid 251754:tid 252004] [client 66.132.195.103:0] AH01276: Cannot serve directory /home3/whconsul/public_html/website_6ef7ddcb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:44.409753 2026] [core:error] [pid 251754:tid 252004] [client 66.132.195.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:05:44.430029 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.430303 2026] [access_compat:error] [pid 251754:tid 251896] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.459378 2026] [security2:error] [pid 251754:tid 251970] [client 74.225.148.80:11311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/gelay.php"] [unique_id "ary0yJOnWJRlb5xgkk0ExgAAANk"]
[Wed Sep 30 01:05:44.523816 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.524172 2026] [access_compat:error] [pid 251754:tid 251916] [client 216.73.216.46:45749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.566537 2026] [security2:error] [pid 251754:tid 252000] [client 20.214.109.68:60587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/jp.php"] [unique_id "ary0yJOnWJRlb5xgkk0EywAAAPc"]
[Wed Sep 30 01:05:44.571110 2026] [security2:error] [pid 251754:tid 251933] [client 52.231.30.175:32742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp_blog_footer.php"] [unique_id "ary0yJOnWJRlb5xgkk0EzAAAALQ"]
[Wed Sep 30 01:05:44.606200 2026] [security2:error] [pid 251754:tid 251912] [client 161.118.214.16:53604] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.clenbuterol4you.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary0yJOnWJRlb5xgkk0EzgAAAJ8"]
[Wed Sep 30 01:05:44.611295 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.611575 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.637244 2026] [security2:error] [pid 251754:tid 251953] [client 52.231.69.245:38644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/Components.php"] [unique_id "ary0yJOnWJRlb5xgkk0E0AAAAMg"]
[Wed Sep 30 01:05:44.638575 2026] [security2:error] [pid 251754:tid 251968] [client 20.251.39.228:30505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tfm.php"] [unique_id "ary0yJOnWJRlb5xgkk0E0QAAANc"]
[Wed Sep 30 01:05:44.675934 2026] [security2:error] [pid 251754:tid 251994] [client 13.70.1.101:18620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/tiny.php"] [unique_id "ary0yJOnWJRlb5xgkk0E1wAAAPE"]
[Wed Sep 30 01:05:44.702747 2026] [security2:error] [pid 251754:tid 251899] [client 223.181.30.165:10559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E2wAAAJI"]
[Wed Sep 30 01:05:44.702870 2026] [security2:error] [pid 251754:tid 251899] [client 223.181.30.165:10559] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E2wAAAJI"]
[Wed Sep 30 01:05:44.733699 2026] [security2:error] [pid 251754:tid 251914] [client 47.15.235.137:52742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.235.15.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E3QAAAKE"]
[Wed Sep 30 01:05:44.733835 2026] [security2:error] [pid 251754:tid 251914] [client 47.15.235.137:52742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E3QAAAKE"]
[Wed Sep 30 01:05:44.734199 2026] [security2:error] [pid 251754:tid 251942] [client 184.154.76.34:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Home.html"] [unique_id "ary0yJOnWJRlb5xgkk0E4AAAAL0"]
[Wed Sep 30 01:05:44.743086 2026] [security2:error] [pid 251754:tid 251919] [client 184.154.76.34:52042] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Home.html"] [unique_id "ary0yJOnWJRlb5xgkk0E2AAAAKY"]
[Wed Sep 30 01:05:44.754794 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:55619] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.755088 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:55619] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.799430 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.799915 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.864093 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.30.175:32879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/0.php"] [unique_id "ary0yJOnWJRlb5xgkk0E6QAAAMY"]
[Wed Sep 30 01:05:44.886216 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.886643 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.905453 2026] [security2:error] [pid 251754:tid 251897] [client 52.231.69.245:39034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/aboutt.php"] [unique_id "ary0yJOnWJRlb5xgkk0E7AAAAJA"]
[Wed Sep 30 01:05:44.924530 2026] [security2:error] [pid 251754:tid 251927] [client 182.69.182.151:1706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E8AAAAK4"]
[Wed Sep 30 01:05:44.924726 2026] [security2:error] [pid 251754:tid 251927] [client 182.69.182.151:1706] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0yJOnWJRlb5xgkk0E8AAAAK4"]
[Wed Sep 30 01:05:44.937769 2026] [security2:error] [pid 251754:tid 251966] [client 216.73.216.46:45749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0yJOnWJRlb5xgkk0E9AAAANU"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL3NlbGYvcm9vdC92YXIvc29mdGFjdWxvdXM%3D
[Wed Sep 30 01:05:44.949181 2026] [security2:error] [pid 251754:tid 251784] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0yJOnWJRlb5xgkk0E7gAAiRs"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:44.949216 2026] [security2:error] [pid 251754:tid 251784] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0yJOnWJRlb5xgkk0E7gAAiRs"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:44.968366 2026] [security2:error] [pid 251754:tid 251977] [client 20.28.180.172:62350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary0yJOnWJRlb5xgkk0E-AAAAOA"]
[Wed Sep 30 01:05:44.977996 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:44.978240 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:44.998208 2026] [security2:error] [pid 251754:tid 252011] [client 161.118.214.16:53710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.clenbuterol-for-sale.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary0yJOnWJRlb5xgkk0E9gAAAQI"]
[Wed Sep 30 01:05:45.002202 2026] [security2:error] [pid 251754:tid 251964] [client 13.70.1.101:19016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/simple.php"] [unique_id "ary0yZOnWJRlb5xgkk0E-wAAANM"]
[Wed Sep 30 01:05:45.022636 2026] [security2:error] [pid 251754:tid 251901] [client 74.225.148.80:13324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/htaccess.php"] [unique_id "ary0yZOnWJRlb5xgkk0E_AAAAJQ"]
[Wed Sep 30 01:05:45.066536 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.066824 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.135374 2026] [security2:error] [pid 251754:tid 251906] [client 20.251.39.228:20527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/a4.php"] [unique_id "ary0yZOnWJRlb5xgkk0FBQAAAJk"]
[Wed Sep 30 01:05:45.157211 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.157460 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.165475 2026] [security2:error] [pid 251754:tid 251975] [client 52.231.69.245:39014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/maint/14.php"] [unique_id "ary0yZOnWJRlb5xgkk0FCgAAAN4"]
[Wed Sep 30 01:05:45.171457 2026] [security2:error] [pid 251754:tid 252007] [client 216.73.216.46:55619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0yZOnWJRlb5xgkk0FDAAAAP4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjQw
[Wed Sep 30 01:05:45.186505 2026] [security2:error] [pid 251754:tid 251955] [client 52.231.30.175:33136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/fms.php"] [unique_id "ary0yZOnWJRlb5xgkk0FDgAAAMo"]
[Wed Sep 30 01:05:45.251574 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.251902 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.265603 2026] [security2:error] [pid 251754:tid 251931] [client 4.240.25.22:41679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0yZOnWJRlb5xgkk0FFwAAALI"]
[Wed Sep 30 01:05:45.325853 2026] [security2:error] [pid 251754:tid 251886] [client 13.70.1.101:18567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/buy.php"] [unique_id "ary0yZOnWJRlb5xgkk0FGgAAAIU"]
[Wed Sep 30 01:05:45.343663 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.344101 2026] [access_compat:error] [pid 251754:tid 251951] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.427627 2026] [security2:error] [pid 251754:tid 251903] [client 52.231.69.245:39000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/xx.php"] [unique_id "ary0yZOnWJRlb5xgkk0FHgAAAJY"]
[Wed Sep 30 01:05:45.435297 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.435736 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.451134 2026] [security2:error] [pid 251754:tid 251947] [client 35.237.17.242:58020] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "indoorenvironmentaltesting.com"] [uri "/"] [unique_id "ary0yZOnWJRlb5xgkk0FIAAAAMI"]
[Wed Sep 30 01:05:45.468540 2026] [security2:error] [pid 251754:tid 251891] [client 45.138.12.40:5884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tty.gfl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0yZOnWJRlb5xgkk0FIQAAAIo"]
[Wed Sep 30 01:05:45.490859 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.30.175:32825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/xyn.php"] [unique_id "ary0yZOnWJRlb5xgkk0FIgAAAMQ"]
[Wed Sep 30 01:05:45.502606 2026] [security2:error] [pid 251754:tid 251909] [client 74.225.148.80:13355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/readme.php"] [unique_id "ary0yZOnWJRlb5xgkk0FIwAAAJw"]
[Wed Sep 30 01:05:45.526602 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.527064 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.570075 2026] [security2:error] [pid 251754:tid 251924] [client 20.214.109.68:9901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-good.php"] [unique_id "ary0yZOnWJRlb5xgkk0FKAAAAKs"]
[Wed Sep 30 01:05:45.612735 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.613012 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.654422 2026] [security2:error] [pid 251754:tid 251921] [client 13.70.1.101:18569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ioxi-o.php"] [unique_id "ary0yZOnWJRlb5xgkk0FLgAAAKg"]
[Wed Sep 30 01:05:45.665139 2026] [security2:error] [pid 251754:tid 251953] [client 20.251.39.228:19604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wen.php"] [unique_id "ary0yZOnWJRlb5xgkk0FMQAAAMg"]
[Wed Sep 30 01:05:45.686781 2026] [security2:error] [pid 251754:tid 251991] [client 52.231.69.245:38629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/gelay.php"] [unique_id "ary0yZOnWJRlb5xgkk0FMwAAAO4"]
[Wed Sep 30 01:05:45.702782 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.703062 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.756378 2026] [security2:error] [pid 251754:tid 251958] [client 44.219.111.44:59308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.111.219.44.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesoapmage.com"] [uri "/index.php"] [unique_id "ary0yZOnWJRlb5xgkk0FOAAAAM0"]
[Wed Sep 30 01:05:45.763328 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.30.175:32868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/min.php"] [unique_id "ary0yZOnWJRlb5xgkk0FOQAAAOI"]
[Wed Sep 30 01:05:45.795672 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.795962 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.886235 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:45.886506 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:10522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:45.970532 2026] [security2:error] [pid 251754:tid 251929] [client 52.231.69.245:39080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/htaccess.php"] [unique_id "ary0yZOnWJRlb5xgkk0FQwAAALA"]
[Wed Sep 30 01:05:45.977369 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.1.101:19356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ans.php"] [unique_id "ary0yZOnWJRlb5xgkk0FRAAAAO0"]
[Wed Sep 30 01:05:46.005775 2026] [security2:error] [pid 251754:tid 251952] [client 20.251.39.228:43692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ms.php"] [unique_id "ary0ypOnWJRlb5xgkk0FRgAAAMc"]
[Wed Sep 30 01:05:46.027582 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.027899 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.053525 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.30.175:32895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-whe.php"] [unique_id "ary0ypOnWJRlb5xgkk0FTwAAAMQ"]
[Wed Sep 30 01:05:46.053575 2026] [security2:error] [pid 251754:tid 251982] [client 74.225.148.80:11318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/max.php"] [unique_id "ary0ypOnWJRlb5xgkk0FUAAAAOU"]
[Wed Sep 30 01:05:46.061133 2026] [security2:error] [pid 251754:tid 251940] [client 151.244.94.179:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0ypOnWJRlb5xgkk0FUgAAALs"]
[Wed Sep 30 01:05:46.062070 2026] [security2:error] [pid 251754:tid 251995] [client 4.240.25.22:18794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/c.php"] [unique_id "ary0ypOnWJRlb5xgkk0FUwAAAPI"]
[Wed Sep 30 01:05:46.113874 2026] [lsapi:warn] [pid 251754:tid 252005] [client 16.216.88.64:0] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n
[Wed Sep 30 01:05:46.117699 2026] [security2:error] [pid 251754:tid 251984] [remote 168.100.149.245:64370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0ypOnWJRlb5xgkk0FRwAAuik"]
[Wed Sep 30 01:05:46.121888 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:21550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.122160 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:21550] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.142583 2026] [security2:error] [pid 251754:tid 251888] [client 37.41.16.35:59760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ypOnWJRlb5xgkk0FWgAAAIc"]
[Wed Sep 30 01:05:46.142699 2026] [security2:error] [pid 251754:tid 251888] [client 37.41.16.35:59760] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0ypOnWJRlb5xgkk0FWgAAAIc"]
[Wed Sep 30 01:05:46.143774 2026] [security2:error] [pid 251754:tid 251915] [client 20.194.30.107:47839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/bthil.php"] [unique_id "ary0ypOnWJRlb5xgkk0FWwAAAKI"]
[Wed Sep 30 01:05:46.148347 2026] [security2:error] [pid 251754:tid 251788] [remote 57.141.14.74:59424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary0ypOnWJRlb5xgkk0FVAAA3B8"]
[Wed Sep 30 01:05:46.162299 2026] [security2:error] [pid 251754:tid 251893] [client 20.219.2.60:11331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/mode.php"] [unique_id "ary0ypOnWJRlb5xgkk0FXQAAAIw"]
[Wed Sep 30 01:05:46.228656 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.228955 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.235744 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.69.245:38603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/readme.php"] [unique_id "ary0ypOnWJRlb5xgkk0FYgAAAJc"]
[Wed Sep 30 01:05:46.301466 2026] [security2:error] [pid 251754:tid 251948] [client 216.73.216.46:10522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0ypOnWJRlb5xgkk0FZAAAAMM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1My9kcml2ZXIvY3B1MTc%3D
[Wed Sep 30 01:05:46.303373 2026] [security2:error] [pid 251754:tid 251994] [client 13.70.1.101:19041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gf.php"] [unique_id "ary0ypOnWJRlb5xgkk0FZQAAAPE"]
[Wed Sep 30 01:05:46.304747 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.305031 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.332878 2026] [security2:error] [pid 251754:tid 251955] [client 52.231.30.175:33091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-filemanager1.php"] [unique_id "ary0ypOnWJRlb5xgkk0FZwAAAMo"]
[Wed Sep 30 01:05:46.354262 2026] [security2:error] [pid 251754:tid 251999] [client 20.251.39.228:33809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/hplfuns.php"] [unique_id "ary0ypOnWJRlb5xgkk0FaAAAAPY"]
[Wed Sep 30 01:05:46.370636 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.370915 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.447558 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.447858 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.496522 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.69.245:39011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/max.php"] [unique_id "ary0ypOnWJRlb5xgkk0FcgAAAJs"]
[Wed Sep 30 01:05:46.512337 2026] [security2:error] [pid 251754:tid 252003] [client 216.73.216.46:21550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0ypOnWJRlb5xgkk0FdAAAAPo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MC9ub2RlMC9jcHUxOS9ob3RwbHVn
[Wed Sep 30 01:05:46.525055 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.525332 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.601761 2026] [security2:error] [pid 251754:tid 251947] [client 52.231.30.175:32850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-freya.php"] [unique_id "ary0ypOnWJRlb5xgkk0FfAAAAMI"]
[Wed Sep 30 01:05:46.615230 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.615483 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.621901 2026] [security2:error] [pid 251754:tid 251982] [client 13.70.1.101:18588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/man.php"] [unique_id "ary0ypOnWJRlb5xgkk0FfgAAAOU"]
[Wed Sep 30 01:05:46.682279 2026] [security2:error] [pid 251754:tid 251978] [client 74.225.148.80:11326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/post.php"] [unique_id "ary0ypOnWJRlb5xgkk0FgwAAAOE"]
[Wed Sep 30 01:05:46.692116 2026] [security2:error] [pid 251754:tid 251890] [client 20.70.173.30:59528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/reop3.php"] [unique_id "ary0ypOnWJRlb5xgkk0FhwAAAIk"]
[Wed Sep 30 01:05:46.696703 2026] [security2:error] [pid 251754:tid 251984] [client 20.194.30.107:17518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/well.php"] [unique_id "ary0ypOnWJRlb5xgkk0FiAAAAOc"]
[Wed Sep 30 01:05:46.705285 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.705544 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.750901 2026] [security2:error] [pid 251754:tid 251938] [client 20.194.30.107:32728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0ypOnWJRlb5xgkk0FjwAAALk"]
[Wed Sep 30 01:05:46.760804 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:38602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/post.php"] [unique_id "ary0ypOnWJRlb5xgkk0FkgAAAKI"]
[Wed Sep 30 01:05:46.767708 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 01:05:46.768020 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 01:05:46.772824 2026] [security2:error] [pid 251754:tid 251889] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0ypOnWJRlb5xgkk0FkwAAAIg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:46.794940 2026] [security2:error] [pid 251754:tid 251898] [client 20.251.39.228:33794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tfm.php"] [unique_id "ary0ypOnWJRlb5xgkk0FlQAAAJE"]
[Wed Sep 30 01:05:46.796804 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.797084 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.870510 2026] [security2:error] [pid 251754:tid 251936] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0ypOnWJRlb5xgkk0FmQAAALc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:46.871578 2026] [security2:error] [pid 251754:tid 251972] [client 52.231.30.175:33132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/admin.php/admin.php"] [unique_id "ary0ypOnWJRlb5xgkk0FmgAAANs"]
[Wed Sep 30 01:05:46.889157 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.889438 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:46.944259 2026] [security2:error] [pid 251754:tid 251944] [client 13.70.1.101:18577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/dev.php"] [unique_id "ary0ypOnWJRlb5xgkk0FnAAAAL8"]
[Wed Sep 30 01:05:46.957000 2026] [security2:error] [pid 251754:tid 251994] [client 4.240.25.22:30776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/kj.php"] [unique_id "ary0ypOnWJRlb5xgkk0FnQAAAPE"]
[Wed Sep 30 01:05:46.979345 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:46.979613 2026] [access_compat:error] [pid 251754:tid 251906] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.023309 2026] [security2:error] [pid 251754:tid 251989] [client 52.231.69.245:39072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/themes.php"] [unique_id "ary0y5OnWJRlb5xgkk0FoQAAAOw"]
[Wed Sep 30 01:05:47.034301 2026] [security2:error] [pid 251754:tid 251932] [client 20.28.180.172:18333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/varb.php"] [unique_id "ary0y5OnWJRlb5xgkk0FogAAALM"]
[Wed Sep 30 01:05:47.069272 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.069527 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.161539 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.161838 2026] [access_compat:error] [pid 251754:tid 252008] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.176799 2026] [security2:error] [pid 251754:tid 251952] [client 20.214.109.68:9909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/a5.php"] [unique_id "ary0y5OnWJRlb5xgkk0FrwAAAMc"]
[Wed Sep 30 01:05:47.201049 2026] [security2:error] [pid 251754:tid 251950] [client 74.225.148.80:13370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/themes.php"] [unique_id "ary0y5OnWJRlb5xgkk0FtQAAAMU"]
[Wed Sep 30 01:05:47.208936 2026] [security2:error] [pid 251754:tid 251970] [client 52.231.30.175:32786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/faiy.php"] [unique_id "ary0y5OnWJRlb5xgkk0FtwAAANk"]
[Wed Sep 30 01:05:47.228871 2026] [security2:error] [pid 251754:tid 251995] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0y5OnWJRlb5xgkk0FuQAAAPI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:47.252978 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.253264 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.268779 2026] [security2:error] [pid 251754:tid 251895] [client 13.70.1.101:19027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ms-edit.php"] [unique_id "ary0y5OnWJRlb5xgkk0FvwAAAI4"]
[Wed Sep 30 01:05:47.286184 2026] [security2:error] [pid 251754:tid 251969] [client 52.231.69.245:39068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ary0y5OnWJRlb5xgkk0FwQAAANg"]
[Wed Sep 30 01:05:47.286677 2026] [security2:error] [pid 251754:tid 251986] [client 20.251.39.228:25582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/8573.php"] [unique_id "ary0y5OnWJRlb5xgkk0FwgAAAOk"]
[Wed Sep 30 01:05:47.296093 2026] [security2:error] [pid 251754:tid 251983] [client 93.152.85.41:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary0y5OnWJRlb5xgkk0FwwAAAOY"]
[Wed Sep 30 01:05:47.308983 2026] [security2:error] [pid 251754:tid 251909] [client 184.154.76.34:52052] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "frba.fredrocker.com"] [uri "/index.html"] [unique_id "ary0y5OnWJRlb5xgkk0FxQAAAJw"]
[Wed Sep 30 01:05:47.343864 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.344145 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.435806 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.436095 2026] [access_compat:error] [pid 251754:tid 251933] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.491647 2026] [security2:error] [pid 251754:tid 251972] [client 52.231.30.175:33149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary0y5OnWJRlb5xgkk0F0AAAANs"]
[Wed Sep 30 01:05:47.510934 2026] [security2:error] [pid 251754:tid 251963] [client 20.219.2.60:11355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ok.php"] [unique_id "ary0y5OnWJRlb5xgkk0F0QAAANI"]
[Wed Sep 30 01:05:47.526546 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.526834 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:39660] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.546319 2026] [security2:error] [pid 251754:tid 251948] [client 52.231.69.245:38610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary0y5OnWJRlb5xgkk0F1wAAAMM"]
[Wed Sep 30 01:05:47.556572 2026] [security2:error] [pid 251754:tid 251975] [client 104.208.65.139:15233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/ab.php"] [unique_id "ary0y5OnWJRlb5xgkk0F2AAAAN4"]
[Wed Sep 30 01:05:47.564378 2026] [security2:error] [pid 251754:tid 251906] [client 74.7.228.0:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webmail.hdribarbershop.co.uk"] [uri "/___proxy_subdomain_webmail/404.shtml"] [unique_id "ary0y5OnWJRlb5xgkk0F2gAAAJk"]
[Wed Sep 30 01:05:47.567211 2026] [security2:error] [pid 251754:tid 251993] [client 74.7.228.0:55838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webmail.hdribarbershop.co.uk"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "ary0y5OnWJRlb5xgkk0F1QAA8Es"]
[Wed Sep 30 01:05:47.599958 2026] [security2:error] [pid 251754:tid 251919] [client 13.70.1.101:19017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/txets.php"] [unique_id "ary0y5OnWJRlb5xgkk0F3gAAAKY"]
[Wed Sep 30 01:05:47.616495 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.617220 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:7485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.642612 2026] [security2:error] [pid 251754:tid 251947] [client 103.241.204.139:59966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0F5wAAAMI"]
[Wed Sep 30 01:05:47.642727 2026] [security2:error] [pid 251754:tid 251947] [client 103.241.204.139:59966] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0F5wAAAMI"]
[Wed Sep 30 01:05:47.693130 2026] [security2:error] [pid 251754:tid 251979] [client 20.251.39.228:40038] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.walker23.com"] [uri "/1.php"] [unique_id "ary0y5OnWJRlb5xgkk0F7gAAAOI"]
[Wed Sep 30 01:05:47.693211 2026] [security2:error] [pid 251754:tid 251979] [client 20.251.39.228:40038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/1.php"] [unique_id "ary0y5OnWJRlb5xgkk0F7gAAAOI"]
[Wed Sep 30 01:05:47.734259 2026] [security2:error] [pid 251754:tid 251942] [client 74.225.148.80:13467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary0y5OnWJRlb5xgkk0F9gAAAL0"]
[Wed Sep 30 01:05:47.758765 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.759056 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.777476 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.30.175:32743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/myglu.php"] [unique_id "ary0y5OnWJRlb5xgkk0F-gAAAKI"]
[Wed Sep 30 01:05:47.810560 2026] [security2:error] [pid 251754:tid 251909] [client 52.231.69.245:38619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/click.php"] [unique_id "ary0y5OnWJRlb5xgkk0F_QAAAJw"]
[Wed Sep 30 01:05:47.820746 2026] [security2:error] [pid 251754:tid 251935] [client 52.167.144.199:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/shop/"] [unique_id "ary0y5OnWJRlb5xgkk0F_gAAALY"]
[Wed Sep 30 01:05:47.852788 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.853059 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.857506 2026] [security2:error] [pid 251754:tid 251987] [client 20.70.173.30:59978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/CAE-2.5.php"] [unique_id "ary0y5OnWJRlb5xgkk0GAwAAAOo"]
[Wed Sep 30 01:05:47.864047 2026] [security2:error] [pid 251754:tid 251890] [client 4.240.25.22:18731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/adminan.php"] [unique_id "ary0y5OnWJRlb5xgkk0GBAAAAIk"]
[Wed Sep 30 01:05:47.891032 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.891307 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.915216 2026] [security2:error] [pid 251754:tid 251941] [client 13.70.1.101:19384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/hao.php"] [unique_id "ary0y5OnWJRlb5xgkk0GCAAAALw"]
[Wed Sep 30 01:05:47.947125 2026] [security2:error] [pid 251754:tid 251903] [client 216.73.216.46:39660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0y5OnWJRlb5xgkk0GDQAAAJY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU0
[Wed Sep 30 01:05:47.982514 2026] [security2:error] [pid 251754:tid 252010] [client 103.159.192.142:57125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0GEgAAAQE"]
[Wed Sep 30 01:05:47.982670 2026] [security2:error] [pid 251754:tid 252010] [client 103.159.192.142:57125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0GEgAAAQE"]
[Wed Sep 30 01:05:47.984207 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:47.984633 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:47.987442 2026] [security2:error] [pid 251754:tid 251957] [client 155.190.6.18:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0GEwAAAMw"]
[Wed Sep 30 01:05:47.987567 2026] [security2:error] [pid 251754:tid 251957] [client 155.190.6.18:60774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0y5OnWJRlb5xgkk0GEwAAAMw"]
[Wed Sep 30 01:05:48.017345 2026] [security2:error] [pid 251754:tid 251967] [client 223.235.102.107:25284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0zJOnWJRlb5xgkk0GFwAAANY"]
[Wed Sep 30 01:05:48.017450 2026] [security2:error] [pid 251754:tid 251967] [client 223.235.102.107:25284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0zJOnWJRlb5xgkk0GFwAAANY"]
[Wed Sep 30 01:05:48.021688 2026] [security2:error] [pid 251754:tid 251956] [client 52.167.144.199:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/shop/"] [unique_id "ary0zJOnWJRlb5xgkk0GGAAAAMs"]
[Wed Sep 30 01:05:48.033928 2026] [security2:error] [pid 251754:tid 251958] [client 216.73.216.46:7485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0zJOnWJRlb5xgkk0GGQAAAM0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUx
[Wed Sep 30 01:05:48.046675 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.30.175:32704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/bnmtp.php"] [unique_id "ary0zJOnWJRlb5xgkk0GHAAAAPo"]
[Wed Sep 30 01:05:48.056278 2026] [security2:error] [pid 251754:tid 251974] [client 20.251.39.228:30476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/term.php"] [unique_id "ary0zJOnWJRlb5xgkk0GHgAAAN0"]
[Wed Sep 30 01:05:48.072166 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.072430 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.074949 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.69.245:38653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/install.php"] [unique_id "ary0zJOnWJRlb5xgkk0GIAAAAOI"]
[Wed Sep 30 01:05:48.095370 2026] [security2:error] [pid 251754:tid 251924] [client 20.198.74.230:23878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/php.php"] [unique_id "ary0zJOnWJRlb5xgkk0GIwAAAKs"]
[Wed Sep 30 01:05:48.108401 2026] [security2:error] [pid 251754:tid 252012] [remote 168.100.149.147:58644] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0zJOnWJRlb5xgkk0GFAAAh1k"]
[Wed Sep 30 01:05:48.118613 2026] [security2:error] [pid 251754:tid 251970] [client 179.108.56.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary0zJOnWJRlb5xgkk0GJgAAANk"]
[Wed Sep 30 01:05:48.142089 2026] [security2:error] [pid 251754:tid 251778] [remote 47.128.114.159:15566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/11202/"] [unique_id "ary0zJOnWJRlb5xgkk0GKAAA2BU"]
[Wed Sep 30 01:05:48.164368 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.164838 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.225827 2026] [security2:error] [pid 251754:tid 251891] [client 45.138.12.32:39538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dtb.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0zJOnWJRlb5xgkk0GNwAAAIo"]
[Wed Sep 30 01:05:48.226763 2026] [security2:error] [pid 251754:tid 252004] [client 20.214.109.68:60576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/amp.php"] [unique_id "ary0zJOnWJRlb5xgkk0GOAAAAPs"]
[Wed Sep 30 01:05:48.229448 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.1.101:19048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/33.php"] [unique_id "ary0zJOnWJRlb5xgkk0GOgAAAQA"]
[Wed Sep 30 01:05:48.269353 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.269632 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.300145 2026] [autoindex:error] [pid 251754:tid 251936] [client 66.132.195.73:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/lamercaderiajrz/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:48.317357 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.30.175:32832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/zeta.php"] [unique_id "ary0zJOnWJRlb5xgkk0GRgAAAPA"]
[Wed Sep 30 01:05:48.337852 2026] [security2:error] [pid 251754:tid 251980] [client 74.225.148.80:11293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary0zJOnWJRlb5xgkk0GSAAAAOM"]
[Wed Sep 30 01:05:48.358664 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.358947 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:19721] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.359295 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.69.245:38609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/13k.php"] [unique_id "ary0zJOnWJRlb5xgkk0GSgAAAPo"]
[Wed Sep 30 01:05:48.390371 2026] [security2:error] [pid 251754:tid 251901] [client 74.7.242.1:43230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary0zJOnWJRlb5xgkk0GTgAAAJQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:05:48.408916 2026] [access_compat:error] [pid 251754:tid 251893] [client 74.7.243.227:36586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZA==
[Wed Sep 30 01:05:48.409188 2026] [access_compat:error] [pid 251754:tid 251893] [client 74.7.243.227:36586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZA==
[Wed Sep 30 01:05:48.416594 2026] [security2:error] [pid 251754:tid 251990] [client 20.28.180.172:62336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/lm15.php"] [unique_id "ary0zJOnWJRlb5xgkk0GUgAAAO0"]
[Wed Sep 30 01:05:48.431901 2026] [security2:error] [pid 251754:tid 251982] [client 20.219.2.60:18886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/kj.php"] [unique_id "ary0zJOnWJRlb5xgkk0GUwAAAOU"]
[Wed Sep 30 01:05:48.437936 2026] [security2:error] [pid 251754:tid 251970] [client 194.145.118.212:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0zJOnWJRlb5xgkk0GVQAAANk"]
[Wed Sep 30 01:05:48.437936 2026] [security2:error] [pid 251754:tid 252001] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary0zJOnWJRlb5xgkk0GVAAAAPg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:48.446744 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.447023 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.499166 2026] [security2:error] [pid 251754:tid 251985] [client 20.219.2.60:11375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/zoo.php"] [unique_id "ary0zJOnWJRlb5xgkk0GWgAAAOg"]
[Wed Sep 30 01:05:48.521626 2026] [security2:error] [pid 251754:tid 251971] [client 20.251.39.228:35550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-content/radio.php"] [unique_id "ary0zJOnWJRlb5xgkk0GXAAAANo"]
[Wed Sep 30 01:05:48.540856 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.541115 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.548337 2026] [security2:error] [pid 251754:tid 251987] [client 13.70.1.101:19346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/adminner.php"] [unique_id "ary0zJOnWJRlb5xgkk0GXgAAAOo"]
[Wed Sep 30 01:05:48.585346 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.30.175:32717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary0zJOnWJRlb5xgkk0GYAAAAMc"]
[Wed Sep 30 01:05:48.631688 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.631975 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.639922 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:39023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/up.php"] [unique_id "ary0zJOnWJRlb5xgkk0GYgAAAKI"]
[Wed Sep 30 01:05:48.658827 2026] [security2:error] [pid 251754:tid 251953] [client 4.240.25.22:33226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/dronishness.php"] [unique_id "ary0zJOnWJRlb5xgkk0GZwAAAMg"]
[Wed Sep 30 01:05:48.726548 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.726821 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.773139 2026] [security2:error] [pid 251754:tid 251929] [client 216.73.216.46:19721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0zJOnWJRlb5xgkk0GcQAAALA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MjAwL25vZGUw
[Wed Sep 30 01:05:48.817517 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.817788 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.871382 2026] [security2:error] [pid 251754:tid 251894] [client 13.70.1.101:19343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/thoms.php"] [unique_id "ary0zJOnWJRlb5xgkk0GdAAAAI0"]
[Wed Sep 30 01:05:48.879958 2026] [security2:error] [pid 251754:tid 251910] [client 52.231.30.175:15501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary0zJOnWJRlb5xgkk0GdQAAAJ0"]
[Wed Sep 30 01:05:48.881976 2026] [security2:error] [pid 251754:tid 251959] [client 20.251.39.228:16751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/155.php"] [unique_id "ary0zJOnWJRlb5xgkk0GdgAAAM4"]
[Wed Sep 30 01:05:48.899250 2026] [security2:error] [pid 251754:tid 251888] [client 52.231.30.175:32720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary0zJOnWJRlb5xgkk0GdwAAAIc"]
[Wed Sep 30 01:05:48.899392 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.69.245:38624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/0x1949.php"] [unique_id "ary0zJOnWJRlb5xgkk0GeAAAAPA"]
[Wed Sep 30 01:05:48.909840 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.910125 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:48.999705 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:48.999981 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.034996 2026] [security2:error] [pid 251754:tid 251989] [client 74.225.148.80:13363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/click.php"] [unique_id "ary0zZOnWJRlb5xgkk0GgwAAAOw"]
[Wed Sep 30 01:05:49.091456 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.091732 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.155971 2026] [security2:error] [pid 251754:tid 251942] [client 52.231.30.175:63927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary0zZOnWJRlb5xgkk0GhgAAAL0"]
[Wed Sep 30 01:05:49.165353 2026] [security2:error] [pid 251754:tid 251986] [client 52.231.30.175:32801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary0zZOnWJRlb5xgkk0GhwAAAOk"]
[Wed Sep 30 01:05:49.182197 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.182465 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.185471 2026] [security2:error] [pid 251754:tid 251892] [client 13.70.1.101:18564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/a.php"] [unique_id "ary0zZOnWJRlb5xgkk0GjgAAAIs"]
[Wed Sep 30 01:05:49.186229 2026] [security2:error] [pid 251754:tid 251937] [client 52.231.69.245:39007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/cong.php"] [unique_id "ary0zZOnWJRlb5xgkk0GjwAAALg"]
[Wed Sep 30 01:05:49.199044 2026] [security2:error] [pid 251754:tid 251938] [client 4.240.25.22:30743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/wp.php"] [unique_id "ary0zZOnWJRlb5xgkk0GkAAAALk"]
[Wed Sep 30 01:05:49.276326 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.276584 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.299669 2026] [access_compat:error] [pid 251754:tid 251969] [client 47.79.13.158:56300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:49.299955 2026] [access_compat:error] [pid 251754:tid 251969] [client 47.79.13.158:56300] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:49.321367 2026] [security2:error] [pid 251754:tid 251905] [client 20.219.2.60:11358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gaza.php"] [unique_id "ary0zZOnWJRlb5xgkk0GnAAAAJg"]
[Wed Sep 30 01:05:49.365465 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.365750 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.425706 2026] [access_compat:error] [pid 251754:tid 251939] [client 47.79.13.27:33542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:49.426000 2026] [access_compat:error] [pid 251754:tid 251939] [client 47.79.13.27:33542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:49.448551 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.69.245:38640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/bs1.php"] [unique_id "ary0zZOnWJRlb5xgkk0GoAAAALE"]
[Wed Sep 30 01:05:49.454393 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.454657 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.478065 2026] [security2:error] [pid 251754:tid 251906] [client 52.231.30.175:63925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/1ac.php"] [unique_id "ary0zZOnWJRlb5xgkk0GowAAAJk"]
[Wed Sep 30 01:05:49.484222 2026] [security2:error] [pid 251754:tid 251936] [client 52.231.30.175:32970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/flamini.php"] [unique_id "ary0zZOnWJRlb5xgkk0GpQAAALc"]
[Wed Sep 30 01:05:49.507506 2026] [security2:error] [pid 251754:tid 251898] [client 13.70.1.101:18598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/b8.php"] [unique_id "ary0zZOnWJRlb5xgkk0GpwAAAJE"]
[Wed Sep 30 01:05:49.516685 2026] [security2:error] [pid 251754:tid 251990] [client 116.197.133.25:56112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0zZOnWJRlb5xgkk0GqAAAAO0"]
[Wed Sep 30 01:05:49.516773 2026] [security2:error] [pid 251754:tid 251990] [client 116.197.133.25:56112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary0zZOnWJRlb5xgkk0GqAAAAO0"]
[Wed Sep 30 01:05:49.528248 2026] [security2:error] [pid 251754:tid 251894] [client 20.251.39.228:40052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-the.php"] [unique_id "ary0zZOnWJRlb5xgkk0GqQAAAI0"]
[Wed Sep 30 01:05:49.545820 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.546091 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:46789] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.569200 2026] [security2:error] [pid 251754:tid 251929] [client 184.154.76.34:52066] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/jquery.js"] [unique_id "ary0zZOnWJRlb5xgkk0GqwAAALA"]
[Wed Sep 30 01:05:49.576641 2026] [security2:error] [pid 251754:tid 251895] [client 74.225.148.80:11314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/install.php"] [unique_id "ary0zZOnWJRlb5xgkk0GrAAAAI4"]
[Wed Sep 30 01:05:49.651696 2026] [security2:error] [pid 251754:tid 252005] [client 217.154.178.10:60054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.178.154.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "goarchitects.com"] [uri "/wp-login.php"] [unique_id "ary0zZOnWJRlb5xgkk0GsAAAAPw"]
[Wed Sep 30 01:05:49.702225 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.702513 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.752567 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:63929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/flm.php"] [unique_id "ary0zZOnWJRlb5xgkk0GuwAAAOU"]
[Wed Sep 30 01:05:49.758830 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.69.245:38650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary0zZOnWJRlb5xgkk0GuQAAAMY"]
[Wed Sep 30 01:05:49.769230 2026] [security2:error] [pid 251754:tid 251996] [client 52.231.30.175:33150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/myglu.php"] [unique_id "ary0zZOnWJRlb5xgkk0GvgAAAPM"]
[Wed Sep 30 01:05:49.779720 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.780008 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.798702 2026] [security2:error] [pid 251754:tid 251986] [client 4.240.25.22:18808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/fling.php"] [unique_id "ary0zZOnWJRlb5xgkk0GwAAAAOk"]
[Wed Sep 30 01:05:49.818763 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:49.819042 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:49.840803 2026] [security2:error] [pid 251754:tid 251935] [client 13.70.1.101:19360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/sid.php"] [unique_id "ary0zZOnWJRlb5xgkk0GwwAAALY"]
[Wed Sep 30 01:05:49.894164 2026] [security2:error] [pid 251754:tid 251916] [client 45.138.12.32:39558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dor.fiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0zZOnWJRlb5xgkk0GyAAAAKM"]
[Wed Sep 30 01:05:49.941414 2026] [security2:error] [pid 251754:tid 251984] [client 216.73.216.46:46789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0zZOnWJRlb5xgkk0GywAAAOc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTQvbm9kZTAvY3B1Mi9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 01:05:49.965019 2026] [security2:error] [pid 251754:tid 251976] [client 20.251.39.228:19141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp5.php"] [unique_id "ary0zZOnWJRlb5xgkk0GzQAAAN8"]
[Wed Sep 30 01:05:49.966011 2026] [security2:error] [pid 251754:tid 251973] [client 192.141.254.38:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary0zZOnWJRlb5xgkk0GzAAAANw"]
[Wed Sep 30 01:05:49.989328 2026] [security2:error] [pid 251754:tid 251922] [client 20.28.180.172:62339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/clss.php"] [unique_id "ary0zZOnWJRlb5xgkk0G0AAAAKk"]
[Wed Sep 30 01:05:50.004524 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.004815 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.009711 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.010040 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.013896 2026] [security2:error] [pid 251754:tid 251995] [client 122.173.27.10:22859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0zpOnWJRlb5xgkk0G1AAAAPI"]
[Wed Sep 30 01:05:50.014011 2026] [security2:error] [pid 251754:tid 251995] [client 122.173.27.10:22859] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0zpOnWJRlb5xgkk0G1AAAAPI"]
[Wed Sep 30 01:05:50.025718 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.69.245:39212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/termps.php"] [unique_id "ary0zpOnWJRlb5xgkk0G1gAAANM"]
[Wed Sep 30 01:05:50.033397 2026] [security2:error] [pid 251754:tid 251928] [client 52.231.30.175:32712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/alfa.php"] [unique_id "ary0zpOnWJRlb5xgkk0G2AAAAK8"]
[Wed Sep 30 01:05:50.034700 2026] [security2:error] [pid 251754:tid 251981] [client 184.154.76.34:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Cooking.html"] [unique_id "ary0zpOnWJRlb5xgkk0G1wAAAOQ"]
[Wed Sep 30 01:05:50.036825 2026] [security2:error] [pid 251754:tid 251903] [client 52.231.30.175:15516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/40341.php"] [unique_id "ary0zpOnWJRlb5xgkk0G2gAAAJY"]
[Wed Sep 30 01:05:50.043972 2026] [security2:error] [pid 251754:tid 251952] [client 184.154.76.34:52072] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Cooking.html"] [unique_id "ary0zZOnWJRlb5xgkk0GzgAAAMc"]
[Wed Sep 30 01:05:50.100715 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.101005 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.106725 2026] [security2:error] [pid 251754:tid 251910] [remote 168.100.149.115:54826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0zZOnWJRlb5xgkk0G0wAA0Xk"]
[Wed Sep 30 01:05:50.153003 2026] [security2:error] [pid 251754:tid 251919] [client 13.70.1.101:19042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/bro.php"] [unique_id "ary0zpOnWJRlb5xgkk0G5gAAAKY"]
[Wed Sep 30 01:05:50.168068 2026] [security2:error] [pid 251754:tid 251940] [client 74.225.148.80:13493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/13k.php"] [unique_id "ary0zpOnWJRlb5xgkk0G5wAAALs"]
[Wed Sep 30 01:05:50.177821 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0zpOnWJRlb5xgkk0G6AAAnAE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297557&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:50.177847 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0zpOnWJRlb5xgkk0G6AAAnAE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297557&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:05:50.194626 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.195041 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.283135 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.283416 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.303513 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:33096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/index.php"] [unique_id "ary0zpOnWJRlb5xgkk0G8AAAAOU"]
[Wed Sep 30 01:05:50.309931 2026] [security2:error] [pid 251754:tid 251970] [client 52.231.30.175:63440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-log.php"] [unique_id "ary0zpOnWJRlb5xgkk0G8gAAANk"]
[Wed Sep 30 01:05:50.311334 2026] [security2:error] [pid 251754:tid 252010] [client 52.231.69.245:39190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/brand.php"] [unique_id "ary0zpOnWJRlb5xgkk0G8wAAAQE"]
[Wed Sep 30 01:05:50.329341 2026] [security2:error] [pid 251754:tid 252001] [client 20.214.109.68:60545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/abrand.php"] [unique_id "ary0zpOnWJRlb5xgkk0G9AAAAPg"]
[Wed Sep 30 01:05:50.334762 2026] [security2:error] [pid 251754:tid 251996] [client 20.251.39.228:16763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-access.php"] [unique_id "ary0zpOnWJRlb5xgkk0G9QAAAPM"]
[Wed Sep 30 01:05:50.376239 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.376527 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.464336 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.464619 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.477888 2026] [security2:error] [pid 251754:tid 251984] [client 13.70.1.101:18618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xwpg.php"] [unique_id "ary0zpOnWJRlb5xgkk0G_QAAAOc"]
[Wed Sep 30 01:05:50.478231 2026] [security2:error] [pid 251754:tid 251882] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0zpOnWJRlb5xgkk0G_gAAtn0"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D66298
[Wed Sep 30 01:05:50.556898 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.557178 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.572362 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:63914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/sehryhv.php"] [unique_id "ary0zpOnWJRlb5xgkk0HBQAAANA"]
[Wed Sep 30 01:05:50.579031 2026] [security2:error] [pid 251754:tid 251930] [client 52.231.69.245:38606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/atomlib.php"] [unique_id "ary0zpOnWJRlb5xgkk0HBwAAALE"]
[Wed Sep 30 01:05:50.595875 2026] [security2:error] [pid 251754:tid 251971] [client 52.231.30.175:32812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary0zpOnWJRlb5xgkk0HCQAAANo"]
[Wed Sep 30 01:05:50.648458 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.648905 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.689889 2026] [security2:error] [pid 251754:tid 251909] [client 74.225.148.80:13331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/up.php"] [unique_id "ary0zpOnWJRlb5xgkk0HEwAAAJw"]
[Wed Sep 30 01:05:50.713906 2026] [security2:error] [pid 251754:tid 251948] [client 20.251.39.228:30499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/hots.php"] [unique_id "ary0zpOnWJRlb5xgkk0HFAAAAMM"]
[Wed Sep 30 01:05:50.737978 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.738572 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.806693 2026] [security2:error] [pid 251754:tid 252010] [client 13.70.1.101:18592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/radio.php"] [unique_id "ary0zpOnWJRlb5xgkk0HHwAAAQE"]
[Wed Sep 30 01:05:50.818243 2026] [security2:error] [pid 251754:tid 251941] [client 201.32.215.149:7136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0zpOnWJRlb5xgkk0HIQAAALw"]
[Wed Sep 30 01:05:50.818354 2026] [security2:error] [pid 251754:tid 251941] [client 201.32.215.149:7136] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0zpOnWJRlb5xgkk0HIQAAALw"]
[Wed Sep 30 01:05:50.829954 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.830227 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:50.851843 2026] [security2:error] [pid 251754:tid 251996] [client 52.231.30.175:63443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/yich.php"] [unique_id "ary0zpOnWJRlb5xgkk0HJQAAAPM"]
[Wed Sep 30 01:05:50.853855 2026] [security2:error] [pid 251754:tid 251956] [client 52.231.69.245:39069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/product.php"] [unique_id "ary0zpOnWJRlb5xgkk0HJgAAAMs"]
[Wed Sep 30 01:05:50.919842 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:50.920131 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.014529 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.014829 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.066299 2026] [security2:error] [pid 251754:tid 251939] [client 4.240.25.22:8422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/az.php"] [unique_id "ary0z5OnWJRlb5xgkk0HOgAAALo"]
[Wed Sep 30 01:05:51.103316 2026] [security2:error] [pid 251754:tid 251779] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0z5OnWJRlb5xgkk0HQgAAnxY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=25974feac9991a2b524b6d767222cb18&start=45&t=490
[Wed Sep 30 01:05:51.103349 2026] [security2:error] [pid 251754:tid 251779] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0z5OnWJRlb5xgkk0HQgAAnxY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=25974feac9991a2b524b6d767222cb18&start=45&t=490
[Wed Sep 30 01:05:51.105144 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.105444 2026] [access_compat:error] [pid 251754:tid 251930] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.112407 2026] [security2:error] [pid 251754:tid 251952] [client 117.5.142.33:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "ary0z5OnWJRlb5xgkk0HRAAAAMc"]
[Wed Sep 30 01:05:51.115220 2026] [security2:error] [pid 251754:tid 251945] [client 52.231.30.175:63907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-blink.php"] [unique_id "ary0z5OnWJRlb5xgkk0HRQAAAMA"]
[Wed Sep 30 01:05:51.120362 2026] [security2:error] [pid 251754:tid 251971] [client 13.70.1.101:19242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ccc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HRgAAANo"]
[Wed Sep 30 01:05:51.121940 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.69.245:39066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/function.php"] [unique_id "ary0z5OnWJRlb5xgkk0HRwAAAKE"]
[Wed Sep 30 01:05:51.145343 2026] [security2:error] [pid 251754:tid 251896] [client 152.59.165.7:61416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HSAAAAI8"]
[Wed Sep 30 01:05:51.145466 2026] [security2:error] [pid 251754:tid 251896] [client 152.59.165.7:61416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HSAAAAI8"]
[Wed Sep 30 01:05:51.188681 2026] [security2:error] [pid 251754:tid 251889] [client 20.219.2.60:11364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/grsiuk.php"] [unique_id "ary0z5OnWJRlb5xgkk0HSgAAAIg"]
[Wed Sep 30 01:05:51.198079 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.198501 2026] [access_compat:error] [pid 251754:tid 252007] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.210350 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.30.175:32995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary0z5OnWJRlb5xgkk0HSwAAALs"]
[Wed Sep 30 01:05:51.233266 2026] [security2:error] [pid 251754:tid 251979] [client 74.225.148.80:13343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/0x1949.php"] [unique_id "ary0z5OnWJRlb5xgkk0HTQAAAOI"]
[Wed Sep 30 01:05:51.285731 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.286016 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.352465 2026] [security2:error] [pid 251754:tid 251970] [client 57.141.14.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/shop/"] [unique_id "ary0z5OnWJRlb5xgkk0HUwAAANk"]
[Wed Sep 30 01:05:51.374857 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.375128 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.379324 2026] [security2:error] [pid 251754:tid 251917] [client 52.231.30.175:15496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-logis.php"] [unique_id "ary0z5OnWJRlb5xgkk0HWQAAAKQ"]
[Wed Sep 30 01:05:51.392027 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:38997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/0x.php"] [unique_id "ary0z5OnWJRlb5xgkk0HWwAAAKI"]
[Wed Sep 30 01:05:51.408689 2026] [security2:error] [pid 251754:tid 251949] [client 45.138.12.32:39596] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.onemontgomerygreen.org"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary0z5OnWJRlb5xgkk0HXAAAAMQ"]
[Wed Sep 30 01:05:51.442215 2026] [security2:error] [pid 251754:tid 251911] [client 13.70.1.101:18603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wmore1.php"] [unique_id "ary0z5OnWJRlb5xgkk0HXQAAAJ4"]
[Wed Sep 30 01:05:51.465831 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.466109 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.474152 2026] [security2:error] [pid 251754:tid 251924] [client 20.219.2.60:18840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws83.php"] [unique_id "ary0z5OnWJRlb5xgkk0HYgAAAKs"]
[Wed Sep 30 01:05:51.474645 2026] [security2:error] [pid 251754:tid 251937] [client 52.231.30.175:33103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/admin.php"] [unique_id "ary0z5OnWJRlb5xgkk0HYwAAALg"]
[Wed Sep 30 01:05:51.515727 2026] [security2:error] [pid 251754:tid 251951] [client 4.240.25.22:18691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/chosen.php"] [unique_id "ary0z5OnWJRlb5xgkk0HaQAAAMY"]
[Wed Sep 30 01:05:51.558206 2026] [security2:error] [pid 251754:tid 251955] [client 20.251.39.228:23003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/admin-footer.php"] [unique_id "ary0z5OnWJRlb5xgkk0HbAAAAMo"]
[Wed Sep 30 01:05:51.558295 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.558650 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.625050 2026] [security2:error] [pid 251754:tid 251961] [client 4.196.65.241:27269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "ary0z5OnWJRlb5xgkk0HbgAAANA"]
[Wed Sep 30 01:05:51.640097 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.30.175:63464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/esc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HbwAAAJQ"]
[Wed Sep 30 01:05:51.649234 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.649503 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.657369 2026] [security2:error] [pid 251754:tid 251971] [client 52.231.69.245:38995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/index.php"] [unique_id "ary0z5OnWJRlb5xgkk0HcQAAANo"]
[Wed Sep 30 01:05:51.690344 2026] [autoindex:error] [pid 251754:tid 251896] [client 72.155.72.2:59722] AH01276: Cannot serve directory /home4/inplaced/public_html/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Sep 30 01:05:51.716030 2026] [security2:error] [pid 251754:tid 251981] [client 202.179.95.79:58278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HdgAAAOQ"]
[Wed Sep 30 01:05:51.716188 2026] [security2:error] [pid 251754:tid 251981] [client 202.179.95.79:58278] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HdgAAAOQ"]
[Wed Sep 30 01:05:51.728774 2026] [security2:error] [pid 251754:tid 251991] [client 203.122.45.246:55792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HeQAAAO4"]
[Wed Sep 30 01:05:51.728911 2026] [security2:error] [pid 251754:tid 251991] [client 203.122.45.246:55792] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HeQAAAO4"]
[Wed Sep 30 01:05:51.740400 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.741006 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.756437 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.30.175:32722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary0z5OnWJRlb5xgkk0HfQAAAPo"]
[Wed Sep 30 01:05:51.774102 2026] [security2:error] [pid 251754:tid 251963] [client 13.70.1.101:18583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/function.php"] [unique_id "ary0z5OnWJRlb5xgkk0HfgAAANI"]
[Wed Sep 30 01:05:51.801761 2026] [security2:error] [pid 251754:tid 252013] [client 184.154.76.34:52086] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/Home.css"] [unique_id "ary0z5OnWJRlb5xgkk0HfwAAAQQ"]
[Wed Sep 30 01:05:51.816515 2026] [security2:error] [pid 251754:tid 251906] [client 74.225.148.80:13548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/cong.php"] [unique_id "ary0z5OnWJRlb5xgkk0HgAAAAJk"]
[Wed Sep 30 01:05:51.834149 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.834403 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.884107 2026] [security2:error] [pid 251754:tid 251890] [client 213.136.69.135:62922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/view-config.php"] [unique_id "ary0z5OnWJRlb5xgkk0HhAAAAIk"], referer: binance.com
[Wed Sep 30 01:05:51.895999 2026] [security2:error] [pid 251754:tid 251933] [client 185.177.72.17:18220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.counciloftherealms.com"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "ary0z5OnWJRlb5xgkk0HhQAAALQ"]
[Wed Sep 30 01:05:51.918673 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:63879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/2.php"] [unique_id "ary0z5OnWJRlb5xgkk0HiQAAAOU"]
[Wed Sep 30 01:05:51.919628 2026] [security2:error] [pid 251754:tid 251898] [client 52.231.69.245:38993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary0z5OnWJRlb5xgkk0HiwAAAJE"]
[Wed Sep 30 01:05:51.925158 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:51.925480 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:51.983803 2026] [security2:error] [pid 251754:tid 251999] [client 103.7.11.135:60454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.11.7.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary0z5OnWJRlb5xgkk0HjAAAAPY"]
[Wed Sep 30 01:05:52.012491 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.012765 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.018096 2026] [access_compat:error] [pid 251754:tid 252007] [client 47.79.13.71:45958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:52.018358 2026] [access_compat:error] [pid 251754:tid 252007] [client 47.79.13.71:45958] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:52.072114 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.30.175:32783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary00JOnWJRlb5xgkk0HmAAAAMY"]
[Wed Sep 30 01:05:52.080492 2026] [security2:error] [pid 251754:tid 252010] [client 20.251.39.228:35561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws84.php"] [unique_id "ary00JOnWJRlb5xgkk0HmQAAAQE"]
[Wed Sep 30 01:05:52.104847 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.105275 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.107467 2026] [security2:error] [pid 251754:tid 251936] [client 13.70.1.101:18594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ab.php"] [unique_id "ary00JOnWJRlb5xgkk0HngAAALc"]
[Wed Sep 30 01:05:52.132620 2026] [security2:error] [pid 251754:tid 251928] [remote 168.100.149.212:48364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary00JOnWJRlb5xgkk0HkQAA8Tg"]
[Wed Sep 30 01:05:52.180289 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.69.245:38632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/classwithtostring.php"] [unique_id "ary00JOnWJRlb5xgkk0HoQAAAJs"]
[Wed Sep 30 01:05:52.195312 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.195581 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.205258 2026] [security2:error] [pid 251754:tid 251952] [client 4.240.25.22:8470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/133.php"] [unique_id "ary00JOnWJRlb5xgkk0HpAAAAMc"]
[Wed Sep 30 01:05:52.209826 2026] [security2:error] [pid 251754:tid 251961] [client 52.231.30.175:63910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/ba.php"] [unique_id "ary00JOnWJRlb5xgkk0HpgAAANA"]
[Wed Sep 30 01:05:52.289091 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.289348 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.291644 2026] [security2:error] [pid 251754:tid 251902] [client 20.219.2.60:11658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-act.php"] [unique_id "ary00JOnWJRlb5xgkk0HqAAAAJU"]
[Wed Sep 30 01:05:52.316130 2026] [security2:error] [pid 251754:tid 251894] [client 74.225.148.80:11327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/bs1.php"] [unique_id "ary00JOnWJRlb5xgkk0HqQAAAI0"]
[Wed Sep 30 01:05:52.348100 2026] [security2:error] [pid 251754:tid 251947] [client 52.231.30.175:32787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/cgi-bin/index.php"] [unique_id "ary00JOnWJRlb5xgkk0HqwAAAMI"]
[Wed Sep 30 01:05:52.376412 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.376708 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.378358 2026] [security2:error] [pid 251754:tid 251797] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary00JOnWJRlb5xgkk0HrgAA-ig"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=186
[Wed Sep 30 01:05:52.378387 2026] [security2:error] [pid 251754:tid 251797] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary00JOnWJRlb5xgkk0HrgAA-ig"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=186
[Wed Sep 30 01:05:52.421882 2026] [security2:error] [pid 251754:tid 252013] [client 13.70.1.101:19053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/css.php"] [unique_id "ary00JOnWJRlb5xgkk0HsgAAAQQ"]
[Wed Sep 30 01:05:52.426180 2026] [security2:error] [pid 251754:tid 251905] [client 45.138.12.32:26730] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ontarioappraisalcorp.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary00JOnWJRlb5xgkk0HswAAAJg"]
[Wed Sep 30 01:05:52.428455 2026] [security2:error] [pid 251754:tid 251972] [client 104.208.65.139:32239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/dairg.php"] [unique_id "ary00JOnWJRlb5xgkk0HtAAAANs"]
[Wed Sep 30 01:05:52.445672 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.69.245:39179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/dropdown.php"] [unique_id "ary00JOnWJRlb5xgkk0HtwAAAOI"]
[Wed Sep 30 01:05:52.467170 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.467430 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.469103 2026] [security2:error] [pid 251754:tid 251896] [client 52.231.30.175:63917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/great.php"] [unique_id "ary00JOnWJRlb5xgkk0HuQAAAI8"]
[Wed Sep 30 01:05:52.471713 2026] [security2:error] [pid 251754:tid 251890] [client 20.251.39.228:40049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/bnm.php"] [unique_id "ary00JOnWJRlb5xgkk0HugAAAIk"]
[Wed Sep 30 01:05:52.555161 2026] [security2:error] [pid 251754:tid 251915] [client 116.193.128.26:56702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary00JOnWJRlb5xgkk0HvwAAAKI"]
[Wed Sep 30 01:05:52.555595 2026] [security2:error] [pid 251754:tid 251915] [client 116.193.128.26:56702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary00JOnWJRlb5xgkk0HvwAAAKI"]
[Wed Sep 30 01:05:52.559368 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.559663 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.624877 2026] [security2:error] [pid 251754:tid 252005] [client 52.231.30.175:32977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-manager.php"] [unique_id "ary00JOnWJRlb5xgkk0HwwAAAPw"]
[Wed Sep 30 01:05:52.650779 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.651100 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.675762 2026] [security2:error] [pid 251754:tid 251956] [client 20.219.2.60:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws75.php"] [unique_id "ary00JOnWJRlb5xgkk0HygAAAMs"]
[Wed Sep 30 01:05:52.712276 2026] [security2:error] [pid 251754:tid 251990] [client 52.231.69.245:39005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/moon.php"] [unique_id "ary00JOnWJRlb5xgkk0HzQAAAO0"]
[Wed Sep 30 01:05:52.729093 2026] [security2:error] [pid 251754:tid 251895] [client 52.231.30.175:63920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary00JOnWJRlb5xgkk0HzwAAAI4"]
[Wed Sep 30 01:05:52.738245 2026] [security2:error] [pid 251754:tid 251916] [client 103.159.192.142:57760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary00JOnWJRlb5xgkk0H0gAAAKM"]
[Wed Sep 30 01:05:52.738377 2026] [security2:error] [pid 251754:tid 251916] [client 103.159.192.142:57760] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary00JOnWJRlb5xgkk0H0gAAAKM"]
[Wed Sep 30 01:05:52.740260 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.740500 2026] [access_compat:error] [pid 251754:tid 251970] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.741127 2026] [security2:error] [pid 251754:tid 251959] [client 49.43.163.212:51323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary0z5OnWJRlb5xgkk0HQQAAAM4"]
[Wed Sep 30 01:05:52.745462 2026] [security2:error] [pid 251754:tid 251980] [client 13.70.1.101:19335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary00JOnWJRlb5xgkk0H0wAAAOM"]
[Wed Sep 30 01:05:52.790104 2026] [security2:error] [pid 251754:tid 251993] [client 185.177.72.17:18220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webmail.counciloftherealms.com"] [uri "/___proxy_subdomain_webmail/.env.backup"] [unique_id "ary00JOnWJRlb5xgkk0H1AAAAPA"]
[Wed Sep 30 01:05:52.832218 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.832483 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.857033 2026] [security2:error] [pid 251754:tid 251908] [client 74.225.148.80:13364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary00JOnWJRlb5xgkk0H1QAAAJs"]
[Wed Sep 30 01:05:52.884706 2026] [security2:error] [pid 251754:tid 251788] [remote 74.7.227.56:45768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary00JOnWJRlb5xgkk0H2wAAzR8"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=650
[Wed Sep 30 01:05:52.897651 2026] [security2:error] [pid 251754:tid 251969] [client 20.28.180.172:62397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/44.php"] [unique_id "ary00JOnWJRlb5xgkk0H3AAAANg"]
[Wed Sep 30 01:05:52.906399 2026] [security2:error] [pid 251754:tid 251924] [client 52.231.30.175:32833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary00JOnWJRlb5xgkk0H3QAAAKs"]
[Wed Sep 30 01:05:52.921432 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:52.921702 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:52.933495 2026] [security2:error] [pid 251754:tid 251930] [client 185.177.72.17:18220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.counciloftherealms.com"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "ary00JOnWJRlb5xgkk0H4gAAALE"]
[Wed Sep 30 01:05:52.984066 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary00JOnWJRlb5xgkk0H4wAAyQU"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:52.984086 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary00JOnWJRlb5xgkk0H4wAAyQU"], referer: https://torquayfans.com/app.php/user/forgot_password?sid=1f27c0cd164d7e96c3d5418acb0f7794
[Wed Sep 30 01:05:52.986236 2026] [security2:error] [pid 251754:tid 251896] [client 20.251.39.228:19626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/amax.php"] [unique_id "ary00JOnWJRlb5xgkk0H5QAAAI8"]
[Wed Sep 30 01:05:52.991942 2026] [security2:error] [pid 251754:tid 251941] [client 52.231.69.245:39040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/autoload_classmap.php"] [unique_id "ary00JOnWJRlb5xgkk0H5wAAALw"]
[Wed Sep 30 01:05:52.997864 2026] [security2:error] [pid 251754:tid 251933] [client 52.231.30.175:15491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/robots.php"] [unique_id "ary00JOnWJRlb5xgkk0H6QAAALQ"]
[Wed Sep 30 01:05:53.016770 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.017047 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.065707 2026] [security2:error] [pid 251754:tid 251920] [client 13.70.1.101:18602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary00ZOnWJRlb5xgkk0H7AAAAKc"]
[Wed Sep 30 01:05:53.077009 2026] [security2:error] [pid 251754:tid 251898] [client 185.177.72.17:18220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webmail.counciloftherealms.com"] [uri "/___proxy_subdomain_webmail/.env.old"] [unique_id "ary00ZOnWJRlb5xgkk0H7QAAAJE"]
[Wed Sep 30 01:05:53.081057 2026] [security2:error] [pid 251754:tid 251865] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary00ZOnWJRlb5xgkk0H7gAA6mw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211545&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:05:53.081077 2026] [security2:error] [pid 251754:tid 251865] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary00ZOnWJRlb5xgkk0H7gAA6mw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=211545&sid=1c92551b5b24d1583552b891b4cb9625
[Wed Sep 30 01:05:53.091186 2026] [security2:error] [pid 251754:tid 252001] [client 20.219.2.60:11332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/cu.php"] [unique_id "ary00ZOnWJRlb5xgkk0H7wAAAPg"]
[Wed Sep 30 01:05:53.099407 2026] [security2:error] [pid 251754:tid 251938] [client 20.214.109.68:9794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/init.php"] [unique_id "ary00ZOnWJRlb5xgkk0H8gAAALk"]
[Wed Sep 30 01:05:53.104128 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.104394 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.122827 2026] [security2:error] [pid 251754:tid 251812] [remote 57.141.14.9:49124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary00ZOnWJRlb5xgkk0H8AAA9Tc"]
[Wed Sep 30 01:05:53.173390 2026] [security2:error] [pid 251754:tid 252005] [client 52.231.30.175:32707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary00ZOnWJRlb5xgkk0H9AAAAPw"]
[Wed Sep 30 01:05:53.195923 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.196189 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.252670 2026] [security2:error] [pid 251754:tid 251911] [client 52.231.69.245:38599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/default.php"] [unique_id "ary00ZOnWJRlb5xgkk0H-gAAAJ4"]
[Wed Sep 30 01:05:53.260061 2026] [security2:error] [pid 251754:tid 251923] [client 52.231.30.175:63463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/k.php"] [unique_id "ary00ZOnWJRlb5xgkk0H-wAAAKo"]
[Wed Sep 30 01:05:53.287231 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.287502 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.332958 2026] [security2:error] [pid 251754:tid 251959] [client 4.240.25.22:12439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary00ZOnWJRlb5xgkk0IAAAAAM4"]
[Wed Sep 30 01:05:53.378593 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.378877 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.380337 2026] [security2:error] [pid 251754:tid 251967] [client 13.70.1.101:19026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-links-opml.php"] [unique_id "ary00ZOnWJRlb5xgkk0IBQAAANY"]
[Wed Sep 30 01:05:53.396376 2026] [security2:error] [pid 251754:tid 251937] [client 74.225.148.80:11301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/termps.php"] [unique_id "ary00ZOnWJRlb5xgkk0IBgAAALg"]
[Wed Sep 30 01:05:53.429846 2026] [security2:error] [pid 251754:tid 251902] [client 20.251.39.228:35568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/66.php"] [unique_id "ary00ZOnWJRlb5xgkk0ICQAAAJU"]
[Wed Sep 30 01:05:53.432790 2026] [security2:error] [pid 251754:tid 251981] [client 4.240.25.22:18727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ty.php"] [unique_id "ary00ZOnWJRlb5xgkk0ICgAAAOQ"]
[Wed Sep 30 01:05:53.460564 2026] [ssl:error] [pid 251754:tid 251918] [client 216.25.124.26:45487] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname webdisk.alfareedfertilizers.smartagrico.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:05:53.468974 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.469236 2026] [access_compat:error] [pid 251754:tid 251894] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.521940 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.69.245:39113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary00ZOnWJRlb5xgkk0IEwAAALs"]
[Wed Sep 30 01:05:53.538920 2026] [security2:error] [pid 251754:tid 251930] [client 87.196.83.219:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary00ZOnWJRlb5xgkk0IFwAAALE"]
[Wed Sep 30 01:05:53.542682 2026] [autoindex:error] [pid 251754:tid 251955] [client 91.84.110.176:57378] AH01276: Cannot serve directory /home4/muranoav/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://muranoaviacion.com/
[Wed Sep 30 01:05:53.557837 2026] [security2:error] [pid 251754:tid 251972] [client 52.231.30.175:15500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/w.php"] [unique_id "ary00ZOnWJRlb5xgkk0IGgAAANs"]
[Wed Sep 30 01:05:53.559242 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.559498 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.572756 2026] [security2:error] [pid 251754:tid 251947] [client 45.138.12.32:26722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ebl.zef.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary00ZOnWJRlb5xgkk0IHAAAAMI"]
[Wed Sep 30 01:05:53.650204 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.650468 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.657565 2026] [security2:error] [pid 251754:tid 251919] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary00ZOnWJRlb5xgkk0IJgAAAKY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:53.671620 2026] [security2:error] [pid 251754:tid 251952] [client 185.177.72.17:18220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "webmail.counciloftherealms.com"] [uri "/___proxy_subdomain_webmail/.env.orig"] [unique_id "ary00ZOnWJRlb5xgkk0IJwAAAMc"]
[Wed Sep 30 01:05:53.673704 2026] [security2:error] [pid 251754:tid 251969] [client 184.154.76.34:52094] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fredrocker.com"] [uri "/nicepage.js"] [unique_id "ary00ZOnWJRlb5xgkk0IGwAAANg"]
[Wed Sep 30 01:05:53.700730 2026] [security2:error] [pid 251754:tid 251949] [client 13.70.1.101:18600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/hp.php"] [unique_id "ary00ZOnWJRlb5xgkk0IMAAAAMQ"]
[Wed Sep 30 01:05:53.742264 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.742538 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.789913 2026] [security2:error] [pid 251754:tid 251895] [client 223.181.60.167:19036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary00ZOnWJRlb5xgkk0INwAAAI4"]
[Wed Sep 30 01:05:53.790259 2026] [security2:error] [pid 251754:tid 251895] [client 223.181.60.167:19036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary00ZOnWJRlb5xgkk0INwAAAI4"]
[Wed Sep 30 01:05:53.795002 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.69.245:38604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/fucku.php"] [unique_id "ary00ZOnWJRlb5xgkk0IOAAAANM"]
[Wed Sep 30 01:05:53.834261 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.834527 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:53.851107 2026] [autoindex:error] [pid 251754:tid 251828] [remote 93.152.209.11:64348] AH01276: Cannot serve directory /home4/csahctmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:05:53.862782 2026] [security2:error] [pid 251754:tid 251891] [client 52.231.30.175:63926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/ccc.php"] [unique_id "ary00ZOnWJRlb5xgkk0IPQAAAIo"]
[Wed Sep 30 01:05:53.862888 2026] [security2:error] [pid 251754:tid 251892] [client 20.251.39.228:40060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/public/file.php"] [unique_id "ary00ZOnWJRlb5xgkk0IPgAAAIs"]
[Wed Sep 30 01:05:53.871868 2026] [security2:error] [pid 251754:tid 251942] [client 52.231.30.175:33034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary00ZOnWJRlb5xgkk0IPwAAAL0"]
[Wed Sep 30 01:05:53.875858 2026] [security2:error] [pid 251754:tid 251994] [client 74.225.148.80:13323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/brand.php"] [unique_id "ary00ZOnWJRlb5xgkk0IQAAAAPE"]
[Wed Sep 30 01:05:53.923907 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:53.924183 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.011718 2026] [security2:error] [pid 251754:tid 251940] [client 20.198.74.230:23926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/xl9.php"] [unique_id "ary00pOnWJRlb5xgkk0IRwAAALs"]
[Wed Sep 30 01:05:54.017375 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.017664 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.029332 2026] [security2:error] [pid 251754:tid 252013] [client 13.70.1.101:18621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/mo.php"] [unique_id "ary00pOnWJRlb5xgkk0ISQAAAQQ"]
[Wed Sep 30 01:05:54.070198 2026] [security2:error] [pid 251754:tid 251936] [client 43.227.131.37:26919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0ISwAAALc"]
[Wed Sep 30 01:05:54.070367 2026] [security2:error] [pid 251754:tid 251936] [client 43.227.131.37:26919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0ISwAAALc"]
[Wed Sep 30 01:05:54.086729 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.69.245:39056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ary00pOnWJRlb5xgkk0ITAAAAOI"]
[Wed Sep 30 01:05:54.109088 2026] [autoindex:error] [pid 251754:tid 251959] [client 91.84.110.176:57398] AH01276: Cannot serve directory /home4/muranoav/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://muranoaviacion.com/
[Wed Sep 30 01:05:54.110722 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.111060 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.123401 2026] [security2:error] [pid 251754:tid 251954] [remote 168.100.149.0:30756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary00pOnWJRlb5xgkk0ISAAA0jk"]
[Wed Sep 30 01:05:54.129869 2026] [security2:error] [pid 251754:tid 251928] [client 52.231.30.175:15520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/images.php"] [unique_id "ary00pOnWJRlb5xgkk0ITwAAAK8"]
[Wed Sep 30 01:05:54.144052 2026] [security2:error] [pid 251754:tid 251914] [client 20.219.2.60:11657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/8.php"] [unique_id "ary00pOnWJRlb5xgkk0IUQAAAKE"]
[Wed Sep 30 01:05:54.149264 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:32784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary00pOnWJRlb5xgkk0IUgAAAJc"]
[Wed Sep 30 01:05:54.199623 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.199903 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.240842 2026] [security2:error] [pid 251754:tid 251945] [client 20.219.2.60:18888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ms-edit.php"] [unique_id "ary00pOnWJRlb5xgkk0IWgAAAMA"]
[Wed Sep 30 01:05:54.255080 2026] [security2:error] [pid 251754:tid 251948] [client 92.71.9.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary00pOnWJRlb5xgkk0IWwAAAMM"]
[Wed Sep 30 01:05:54.255595 2026] [security2:error] [pid 251754:tid 251944] [client 49.205.105.16:14656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0IXAAAAL8"]
[Wed Sep 30 01:05:54.255794 2026] [security2:error] [pid 251754:tid 251944] [client 49.205.105.16:14656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0IXAAAAL8"]
[Wed Sep 30 01:05:54.272800 2026] [security2:error] [pid 251754:tid 251927] [client 20.251.39.228:16845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/166.php"] [unique_id "ary00pOnWJRlb5xgkk0IXQAAAK4"]
[Wed Sep 30 01:05:54.288570 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.288847 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.350394 2026] [security2:error] [pid 251754:tid 251917] [client 74.225.148.80:13320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/atomlib.php"] [unique_id "ary00pOnWJRlb5xgkk0IYwAAAKQ"]
[Wed Sep 30 01:05:54.351761 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.69.245:38638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/mail.php"] [unique_id "ary00pOnWJRlb5xgkk0IZAAAAPY"]
[Wed Sep 30 01:05:54.353329 2026] [security2:error] [pid 251754:tid 251984] [client 13.70.1.101:19008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ivmirgut.php"] [unique_id "ary00pOnWJRlb5xgkk0IZQAAAOc"]
[Wed Sep 30 01:05:54.382388 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.382657 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:50396] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.392254 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.30.175:63935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/alls.php"] [unique_id "ary00pOnWJRlb5xgkk0IZwAAAM8"]
[Wed Sep 30 01:05:54.449757 2026] [security2:error] [pid 251754:tid 251911] [client 216.73.216.46:50396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary00pOnWJRlb5xgkk0IagAAAJ4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MjAwL25vZGUwL21lbW9yeTQ4OS9ub2RlMA%3D%3D
[Wed Sep 30 01:05:54.473227 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.473481 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.485482 2026] [security2:error] [pid 251754:tid 252008] [client 106.214.2.47:21821] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0IaAAAAP8"]
[Wed Sep 30 01:05:54.485633 2026] [security2:error] [pid 251754:tid 252008] [client 106.214.2.47:21821] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary00pOnWJRlb5xgkk0IaAAAAP8"]
[Wed Sep 30 01:05:54.563722 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.564004 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.616314 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.69.245:39041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/sx.php"] [unique_id "ary00pOnWJRlb5xgkk0IdgAAAJQ"]
[Wed Sep 30 01:05:54.652846 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.30.175:63909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/admin.php"] [unique_id "ary00pOnWJRlb5xgkk0IeQAAAPo"]
[Wed Sep 30 01:05:54.654474 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.654777 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.691948 2026] [security2:error] [pid 251754:tid 251963] [client 13.70.1.101:18571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/baba.php"] [unique_id "ary00pOnWJRlb5xgkk0IfgAAANI"]
[Wed Sep 30 01:05:54.748868 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.749134 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.763371 2026] [security2:error] [pid 251754:tid 251933] [client 52.231.30.175:33118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/matcha.php"] [unique_id "ary00pOnWJRlb5xgkk0IggAAALQ"]
[Wed Sep 30 01:05:54.778856 2026] [autoindex:error] [pid 251754:tid 251994] [client 119.28.202.87:57758] AH01276: Cannot serve directory /home4/uicyujmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://uic.yuj.mybluehost.me
[Wed Sep 30 01:05:54.831631 2026] [security2:error] [pid 251754:tid 251897] [client 20.251.39.228:19644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/ws77.php"] [unique_id "ary00pOnWJRlb5xgkk0IhgAAAJA"]
[Wed Sep 30 01:05:54.838076 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.838338 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.872510 2026] [security2:error] [pid 251754:tid 251969] [client 74.225.148.80:13328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/product.php"] [unique_id "ary00pOnWJRlb5xgkk0IiQAAANg"]
[Wed Sep 30 01:05:54.885493 2026] [security2:error] [pid 251754:tid 251987] [client 52.231.69.245:38616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary00pOnWJRlb5xgkk0IigAAAOo"]
[Wed Sep 30 01:05:54.928039 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:54.928320 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:54.939576 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:63439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/geck.php"] [unique_id "ary00pOnWJRlb5xgkk0IjgAAAPU"]
[Wed Sep 30 01:05:54.964874 2026] [security2:error] [pid 251754:tid 251984] [client 74.7.243.227:39086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary00pOnWJRlb5xgkk0IjwAAAOc"], referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 01:05:55.019690 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.019998 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.026394 2026] [security2:error] [pid 251754:tid 251962] [client 4.240.25.22:38795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/dronishness.php"] [unique_id "ary005OnWJRlb5xgkk0IkgAAANE"]
[Wed Sep 30 01:05:55.028398 2026] [security2:error] [pid 251754:tid 251909] [client 13.70.1.101:19363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/Components.php"] [unique_id "ary005OnWJRlb5xgkk0IlAAAAJw"]
[Wed Sep 30 01:05:55.053392 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.30.175:32855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/aboutt.php"] [unique_id "ary005OnWJRlb5xgkk0IlwAAAM8"]
[Wed Sep 30 01:05:55.112862 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.113138 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.153571 2026] [security2:error] [pid 251754:tid 251971] [client 52.231.69.245:39060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/article.php"] [unique_id "ary005OnWJRlb5xgkk0IngAAANo"]
[Wed Sep 30 01:05:55.181964 2026] [security2:error] [pid 251754:tid 252010] [client 223.181.30.165:31263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary005OnWJRlb5xgkk0IoQAAAQE"]
[Wed Sep 30 01:05:55.182097 2026] [security2:error] [pid 251754:tid 252010] [client 223.181.30.165:31263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary005OnWJRlb5xgkk0IoQAAAQE"]
[Wed Sep 30 01:05:55.200896 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.201164 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:58461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.203411 2026] [security2:error] [pid 251754:tid 251958] [client 52.231.30.175:63893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/goods.php"] [unique_id "ary005OnWJRlb5xgkk0IpQAAAM0"]
[Wed Sep 30 01:05:55.232929 2026] [security2:error] [pid 251754:tid 251922] [client 20.251.39.228:25541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/www.php"] [unique_id "ary005OnWJRlb5xgkk0IpgAAAKk"]
[Wed Sep 30 01:05:55.245936 2026] [security2:error] [pid 251754:tid 251892] [client 20.194.30.107:17384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/ty.php"] [unique_id "ary005OnWJRlb5xgkk0IpwAAAIs"]
[Wed Sep 30 01:05:55.287317 2026] [access_compat:error] [pid 251754:tid 251999] [client 47.79.13.175:55882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:55.287602 2026] [access_compat:error] [pid 251754:tid 251999] [client 47.79.13.175:55882] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:55.308499 2026] [security2:error] [pid 251754:tid 251887] [client 20.28.180.172:62345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/a5e0a.php"] [unique_id "ary005OnWJRlb5xgkk0IqwAAAIY"]
[Wed Sep 30 01:05:55.322256 2026] [security2:error] [pid 251754:tid 251989] [client 52.231.30.175:33029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/opsh.php"] [unique_id "ary005OnWJRlb5xgkk0IrAAAAOw"]
[Wed Sep 30 01:05:55.339060 2026] [security2:error] [pid 251754:tid 251905] [client 13.70.1.101:19328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/aboutt.php"] [unique_id "ary005OnWJRlb5xgkk0IrwAAAJg"]
[Wed Sep 30 01:05:55.345858 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.346156 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.385157 2026] [security2:error] [pid 251754:tid 251936] [client 74.225.148.80:11281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/function.php"] [unique_id "ary005OnWJRlb5xgkk0IswAAALc"]
[Wed Sep 30 01:05:55.388916 2026] [security2:error] [pid 251754:tid 251890] [client 20.198.74.230:23906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/584062352875874akp.php"] [unique_id "ary005OnWJRlb5xgkk0ItAAAAIk"]
[Wed Sep 30 01:05:55.421703 2026] [security2:error] [pid 251754:tid 251928] [client 52.231.69.245:39067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/link.php"] [unique_id "ary005OnWJRlb5xgkk0ItwAAAK8"]
[Wed Sep 30 01:05:55.436159 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.436417 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.436535 2026] [security2:error] [pid 251754:tid 251980] [client 182.69.182.151:10871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary005OnWJRlb5xgkk0IuQAAAOM"]
[Wed Sep 30 01:05:55.436700 2026] [security2:error] [pid 251754:tid 251980] [client 182.69.182.151:10871] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary005OnWJRlb5xgkk0IuQAAAOM"]
[Wed Sep 30 01:05:55.466567 2026] [security2:error] [pid 251754:tid 251902] [client 52.231.30.175:63462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/dejavu.php"] [unique_id "ary005OnWJRlb5xgkk0IugAAAJU"]
[Wed Sep 30 01:05:55.477371 2026] [security2:error] [pid 251754:tid 251893] [client 20.70.173.30:19148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary005OnWJRlb5xgkk0IuwAAAIw"]
[Wed Sep 30 01:05:55.527443 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.527719 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.569319 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.569584 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.593479 2026] [security2:error] [pid 251754:tid 251985] [client 216.73.216.46:58461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary005OnWJRlb5xgkk0IwAAAAOg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5My9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1Mi90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:05:55.604305 2026] [security2:error] [pid 251754:tid 251996] [client 20.251.39.228:30506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/adoms.php"] [unique_id "ary005OnWJRlb5xgkk0IwQAAAPM"]
[Wed Sep 30 01:05:55.605319 2026] [security2:error] [pid 251754:tid 251957] [client 52.231.30.175:32818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/photo.php"] [unique_id "ary005OnWJRlb5xgkk0IwgAAAMw"]
[Wed Sep 30 01:05:55.640864 2026] [security2:error] [pid 251754:tid 251953] [client 4.240.25.22:12443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/xiugai.php"] [unique_id "ary005OnWJRlb5xgkk0IxQAAAMg"]
[Wed Sep 30 01:05:55.661923 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.662396 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.664449 2026] [security2:error] [pid 251754:tid 251941] [client 13.70.1.101:18579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary005OnWJRlb5xgkk0IywAAALw"]
[Wed Sep 30 01:05:55.690012 2026] [security2:error] [pid 251754:tid 252008] [client 52.231.69.245:39013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/lock360.php"] [unique_id "ary005OnWJRlb5xgkk0IzwAAAP8"]
[Wed Sep 30 01:05:55.749631 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.749939 2026] [access_compat:error] [pid 251754:tid 251967] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.761776 2026] [security2:error] [pid 251754:tid 251916] [client 20.214.109.68:9910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gettest.php"] [unique_id "ary005OnWJRlb5xgkk0I2QAAAKM"]
[Wed Sep 30 01:05:55.790548 2026] [security2:error] [pid 251754:tid 251917] [client 52.231.30.175:63474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/h02ugyh.php"] [unique_id "ary005OnWJRlb5xgkk0I2gAAAKQ"]
[Wed Sep 30 01:05:55.840782 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.841061 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.878771 2026] [security2:error] [pid 251754:tid 251999] [client 52.231.30.175:33043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-fxxxx.php"] [unique_id "ary005OnWJRlb5xgkk0I3AAAAPY"]
[Wed Sep 30 01:05:55.930274 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:55.930547 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:55.954262 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.69.245:39043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-trackback.php"] [unique_id "ary005OnWJRlb5xgkk0I5wAAAKE"]
[Wed Sep 30 01:05:55.960535 2026] [security2:error] [pid 251754:tid 251906] [client 74.225.148.80:13497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/0x.php"] [unique_id "ary005OnWJRlb5xgkk0I6AAAAJk"]
[Wed Sep 30 01:05:55.992701 2026] [security2:error] [pid 251754:tid 251940] [client 13.70.1.101:63079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xx.php"] [unique_id "ary005OnWJRlb5xgkk0I6QAAALs"]
[Wed Sep 30 01:05:56.021888 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.022155 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.028960 2026] [security2:error] [pid 251754:tid 251983] [client 20.251.39.228:13474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/tymn.php"] [unique_id "ary01JOnWJRlb5xgkk0I7AAAAOY"]
[Wed Sep 30 01:05:56.057934 2026] [security2:error] [pid 251754:tid 251966] [client 20.219.2.60:18849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/abc.php"] [unique_id "ary01JOnWJRlb5xgkk0I7gAAANU"]
[Wed Sep 30 01:05:56.070988 2026] [security2:error] [pid 251754:tid 251913] [client 173.254.29.157:20372] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary01JOnWJRlb5xgkk0I7wAAAKA"]
[Wed Sep 30 01:05:56.077531 2026] [security2:error] [pid 251754:tid 251945] [client 52.231.30.175:15502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/155.php"] [unique_id "ary01JOnWJRlb5xgkk0I8AAAAMA"]
[Wed Sep 30 01:05:56.087753 2026] [security2:error] [pid 251754:tid 251985] [client 173.254.29.157:20384] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary01JOnWJRlb5xgkk0I8QAAAOg"]
[Wed Sep 30 01:05:56.104551 2026] [security2:error] [pid 251754:tid 251888] [client 173.254.29.157:20394] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary01JOnWJRlb5xgkk0I-QAAAIc"]
[Wed Sep 30 01:05:56.115225 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.115490 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.122515 2026] [security2:error] [pid 251754:tid 251947] [client 173.254.29.157:20396] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary01JOnWJRlb5xgkk0I_gAAAMI"]
[Wed Sep 30 01:05:56.146048 2026] [security2:error] [pid 251754:tid 251895] [remote 168.100.149.215:30138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary01JOnWJRlb5xgkk0I7QAAk0k"]
[Wed Sep 30 01:05:56.146909 2026] [security2:error] [pid 251754:tid 251907] [client 52.231.30.175:32739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary01JOnWJRlb5xgkk0JAQAAAJo"]
[Wed Sep 30 01:05:56.205537 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.205983 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.235185 2026] [security2:error] [pid 251754:tid 251910] [client 146.19.100.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary01JOnWJRlb5xgkk0JCgAAAJ0"]
[Wed Sep 30 01:05:56.244172 2026] [security2:error] [pid 251754:tid 251916] [client 52.231.69.245:38994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/.well-known/index.php"] [unique_id "ary01JOnWJRlb5xgkk0JDAAAAKM"]
[Wed Sep 30 01:05:56.295718 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.296166 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.310122 2026] [security2:error] [pid 251754:tid 251972] [client 13.70.1.101:18565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gelay.php"] [unique_id "ary01JOnWJRlb5xgkk0JEgAAANs"]
[Wed Sep 30 01:05:56.319291 2026] [security2:error] [pid 251754:tid 251917] [client 127.0.0.1:52132] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary01JOnWJRlb5xgkk0JDgAAAKQ"]
[Wed Sep 30 01:05:56.319388 2026] [security2:error] [pid 251754:tid 251990] [client 127.0.0.1:52122] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.camera-roll.com"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary01JOnWJRlb5xgkk0JDQAAAO0"]
[Wed Sep 30 01:05:56.319538 2026] [security2:error] [pid 251754:tid 252010] [client 74.7.228.14:58008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.camera-roll.com"] [uri "/robots.txt"] [unique_id "ary01JOnWJRlb5xgkk0JCwABAV4"]
[Wed Sep 30 01:05:56.389301 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.389742 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.390866 2026] [security2:error] [pid 251754:tid 251945] [client 52.231.30.175:15511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/ops.php"] [unique_id "ary01JOnWJRlb5xgkk0JIwAAAMA"]
[Wed Sep 30 01:05:56.409911 2026] [security2:error] [pid 251754:tid 251985] [client 52.231.30.175:32774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/ffl.php"] [unique_id "ary01JOnWJRlb5xgkk0JJQAAAOg"]
[Wed Sep 30 01:05:56.476724 2026] [security2:error] [pid 251754:tid 252008] [client 20.251.39.228:25548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/eetu.php"] [unique_id "ary01JOnWJRlb5xgkk0JKwAAAP8"]
[Wed Sep 30 01:05:56.477681 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.477952 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.509926 2026] [security2:error] [pid 251754:tid 251901] [client 52.231.69.245:39010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary01JOnWJRlb5xgkk0JLQAAAJQ"]
[Wed Sep 30 01:05:56.516549 2026] [security2:error] [pid 251754:tid 251939] [client 74.225.148.80:13500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/index.php"] [unique_id "ary01JOnWJRlb5xgkk0JLgAAALo"]
[Wed Sep 30 01:05:56.567106 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.567374 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.629836 2026] [security2:error] [pid 251754:tid 251915] [client 13.70.1.101:19352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/htaccess.php"] [unique_id "ary01JOnWJRlb5xgkk0JNgAAAKI"]
[Wed Sep 30 01:05:56.647069 2026] [security2:error] [pid 251754:tid 251975] [client 37.41.16.35:60420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary01JOnWJRlb5xgkk0JOAAAAN4"]
[Wed Sep 30 01:05:56.647204 2026] [security2:error] [pid 251754:tid 251975] [client 37.41.16.35:60420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary01JOnWJRlb5xgkk0JOAAAAN4"]
[Wed Sep 30 01:05:56.659477 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.659748 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.683759 2026] [security2:error] [pid 251754:tid 251894] [client 52.231.30.175:32757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/wp5.php"] [unique_id "ary01JOnWJRlb5xgkk0JPQAAAI0"]
[Wed Sep 30 01:05:56.691283 2026] [security2:error] [pid 251754:tid 251916] [client 52.231.30.175:63899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/mac.php"] [unique_id "ary01JOnWJRlb5xgkk0JPgAAAKM"]
[Wed Sep 30 01:05:56.744534 2026] [security2:error] [pid 251754:tid 251961] [client 169.40.142.132:53498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ubb.qmh.mybluehost.me"] [uri "/index.php"] [unique_id "ary01JOnWJRlb5xgkk0JQQAAANA"]
[Wed Sep 30 01:05:56.749667 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.749946 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.776547 2026] [security2:error] [pid 251754:tid 251890] [client 52.231.69.245:39210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary01JOnWJRlb5xgkk0JRgAAAIk"]
[Wed Sep 30 01:05:56.844630 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.844917 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.910143 2026] [security2:error] [pid 251754:tid 251889] [client 20.251.39.228:19165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/dx.php"] [unique_id "ary01JOnWJRlb5xgkk0JTAAAAIg"]
[Wed Sep 30 01:05:56.932412 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:56.932701 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:56.945383 2026] [security2:error] [pid 251754:tid 251914] [client 52.231.30.175:33119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/koiy.php"] [unique_id "ary01JOnWJRlb5xgkk0JUgAAAKE"]
[Wed Sep 30 01:05:56.958748 2026] [security2:error] [pid 251754:tid 251903] [client 13.70.1.101:19051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/readme.php"] [unique_id "ary01JOnWJRlb5xgkk0JVQAAAJY"]
[Wed Sep 30 01:05:56.998843 2026] [security2:error] [pid 251754:tid 251888] [client 52.231.30.175:63880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/makeasmtp.php"] [unique_id "ary01JOnWJRlb5xgkk0JWAAAAIc"]
[Wed Sep 30 01:05:57.008537 2026] [security2:error] [pid 251754:tid 251962] [client 74.225.148.80:13514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary01ZOnWJRlb5xgkk0JWQAAANE"]
[Wed Sep 30 01:05:57.024337 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.024593 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.046838 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.69.245:39037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary01ZOnWJRlb5xgkk0JWwAAAOI"]
[Wed Sep 30 01:05:57.114600 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.114906 2026] [access_compat:error] [pid 251754:tid 251907] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.197916 2026] [security2:error] [pid 251754:tid 251963] [client 20.219.2.60:19359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/motu.php"] [unique_id "ary01ZOnWJRlb5xgkk0JYwAAANI"]
[Wed Sep 30 01:05:57.206856 2026] [security2:error] [pid 251754:tid 251909] [client 52.231.30.175:33106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/bnmtp.php"] [unique_id "ary01ZOnWJRlb5xgkk0JZQAAAJw"]
[Wed Sep 30 01:05:57.207006 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.207273 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.264983 2026] [security2:error] [pid 251754:tid 251993] [client 52.231.30.175:63456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/pucci.php"] [unique_id "ary01ZOnWJRlb5xgkk0JaAAAAPA"]
[Wed Sep 30 01:05:57.275802 2026] [security2:error] [pid 251754:tid 252001] [client 13.70.1.101:19061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/max.php"] [unique_id "ary01ZOnWJRlb5xgkk0JawAAAPg"]
[Wed Sep 30 01:05:57.294549 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.294818 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:43278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.310907 2026] [security2:error] [pid 251754:tid 251915] [client 52.231.69.245:38985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary01ZOnWJRlb5xgkk0JcAAAAKI"]
[Wed Sep 30 01:05:57.350365 2026] [security2:error] [pid 251754:tid 251950] [client 20.251.39.228:33812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-kikikoko.php"] [unique_id "ary01ZOnWJRlb5xgkk0JdgAAAMU"]
[Wed Sep 30 01:05:57.355083 2026] [security2:error] [pid 251754:tid 251967] [client 216.73.216.46:43278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary01ZOnWJRlb5xgkk0JfAAAANY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy90aGVybWFsL2Nvb2xpbmdfZGV2aWNlMTAvc3Vic3lzdGVtL2Nvb2xpbmdfZGV2aWNlMTE%3D
[Wed Sep 30 01:05:57.376757 2026] [security2:error] [pid 251754:tid 251886] [client 45.138.12.32:39684] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.one.xnn.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary01ZOnWJRlb5xgkk0JggAAAIU"]
[Wed Sep 30 01:05:57.387619 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.387891 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.479091 2026] [security2:error] [pid 251754:tid 251983] [client 74.225.148.80:13448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/classwithtostring.php"] [unique_id "ary01ZOnWJRlb5xgkk0JigAAAOY"]
[Wed Sep 30 01:05:57.480656 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.480948 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.485334 2026] [security2:error] [pid 251754:tid 251889] [client 52.231.30.175:32851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/abbi.php"] [unique_id "ary01ZOnWJRlb5xgkk0JiwAAAIg"]
[Wed Sep 30 01:05:57.492622 2026] [security2:error] [pid 251754:tid 251929] [client 20.28.180.172:62377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bo.php"] [unique_id "ary01ZOnWJRlb5xgkk0JjAAAALA"]
[Wed Sep 30 01:05:57.532943 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:15699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/puc.php"] [unique_id "ary01ZOnWJRlb5xgkk0JjgAAAJc"]
[Wed Sep 30 01:05:57.571101 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.571385 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.572676 2026] [security2:error] [pid 251754:tid 251985] [client 52.231.69.245:39057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary01ZOnWJRlb5xgkk0JkwAAAOg"]
[Wed Sep 30 01:05:57.600941 2026] [security2:error] [pid 251754:tid 251868] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary01ZOnWJRlb5xgkk0JnAAAzm8"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D90098
[Wed Sep 30 01:05:57.607204 2026] [security2:error] [pid 251754:tid 251956] [client 4.196.65.241:2552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/2fa307c31b.php"] [unique_id "ary01ZOnWJRlb5xgkk0JngAAAMs"]
[Wed Sep 30 01:05:57.609326 2026] [security2:error] [pid 251754:tid 251982] [client 13.70.1.101:19040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/post.php"] [unique_id "ary01ZOnWJRlb5xgkk0JnwAAAOU"]
[Wed Sep 30 01:05:57.614557 2026] [security2:error] [pid 251754:tid 251960] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary01ZOnWJRlb5xgkk0JoAAAAM8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:05:57.626176 2026] [security2:error] [pid 251754:tid 251887] [client 104.204.201.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television/"] [unique_id "ary01ZOnWJRlb5xgkk0JowAAAIY"]
[Wed Sep 30 01:05:57.665309 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.665727 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.703787 2026] [security2:error] [pid 251754:tid 251894] [client 20.251.39.228:35533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/file61.php"] [unique_id "ary01ZOnWJRlb5xgkk0JrAAAAI0"]
[Wed Sep 30 01:05:57.744688 2026] [security2:error] [pid 251754:tid 251981] [client 4.240.25.22:38723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wp.php"] [unique_id "ary01ZOnWJRlb5xgkk0JsAAAAOQ"]
[Wed Sep 30 01:05:57.752877 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.753158 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.770012 2026] [security2:error] [pid 251754:tid 251990] [client 52.231.30.175:32795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.barrycosgrovelandscaping.com"] [uri "/asw.php"] [unique_id "ary01ZOnWJRlb5xgkk0JswAAAO0"]
[Wed Sep 30 01:05:57.833701 2026] [security2:error] [pid 251754:tid 251987] [client 52.231.69.245:38992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ary01ZOnWJRlb5xgkk0JuAAAAOo"]
[Wed Sep 30 01:05:57.838944 2026] [security2:error] [pid 251754:tid 251939] [client 187.191.49.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary01ZOnWJRlb5xgkk0JugAAALo"]
[Wed Sep 30 01:05:57.845240 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.845484 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.848794 2026] [security2:error] [pid 251754:tid 251961] [client 20.5.79.49:28383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary01ZOnWJRlb5xgkk0JvAAAANA"]
[Wed Sep 30 01:05:57.855264 2026] [security2:error] [pid 251754:tid 251985] [client 52.231.30.175:63448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/8.php"] [unique_id "ary01ZOnWJRlb5xgkk0JvgAAAOg"]
[Wed Sep 30 01:05:57.936012 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:57.936329 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:57.942300 2026] [security2:error] [pid 251754:tid 251977] [client 13.70.1.101:19334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/themes.php"] [unique_id "ary01ZOnWJRlb5xgkk0JygAAAOA"]
[Wed Sep 30 01:05:58.018635 2026] [security2:error] [pid 251754:tid 251833] [remote 57.141.14.60:32154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/wp-json/tribe/events/v1/events/"] [unique_id "ary01pOnWJRlb5xgkk0JzwAAp0w"]
[Wed Sep 30 01:05:58.026839 2026] [security2:error] [pid 251754:tid 251980] [client 74.225.148.80:13372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/dropdown.php"] [unique_id "ary01pOnWJRlb5xgkk0J0QAAAOM"]
[Wed Sep 30 01:05:58.028989 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.029406 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.059798 2026] [security2:error] [pid 251754:tid 251782] [remote 57.141.14.5:59846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary01ZOnWJRlb5xgkk0JzAAAnhk"]
[Wed Sep 30 01:05:58.070689 2026] [security2:error] [pid 251754:tid 251895] [client 20.251.39.228:35569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/xx.php"] [unique_id "ary01pOnWJRlb5xgkk0J1wAAAI4"]
[Wed Sep 30 01:05:58.104507 2026] [security2:error] [pid 251754:tid 251986] [client 52.231.69.245:39090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ary01pOnWJRlb5xgkk0J2QAAAOk"]
[Wed Sep 30 01:05:58.114148 2026] [security2:error] [pid 251754:tid 251970] [remote 168.100.149.131:47878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary01pOnWJRlb5xgkk0JzQAAhg4"]
[Wed Sep 30 01:05:58.117882 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.118481 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.176568 2026] [security2:error] [pid 251754:tid 251978] [client 20.5.79.49:28306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary01pOnWJRlb5xgkk0J4AAAAOE"]
[Wed Sep 30 01:05:58.189043 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:15493] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.daytonago.org"] [uri "/1.php"] [unique_id "ary01pOnWJRlb5xgkk0J4wAAAPU"]
[Wed Sep 30 01:05:58.189144 2026] [security2:error] [pid 251754:tid 251998] [client 52.231.30.175:15493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/1.php"] [unique_id "ary01pOnWJRlb5xgkk0J4wAAAPU"]
[Wed Sep 30 01:05:58.209689 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.209984 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.216178 2026] [security2:error] [pid 251754:tid 251944] [client 103.241.204.139:60506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0J5gAAAL8"]
[Wed Sep 30 01:05:58.216324 2026] [security2:error] [pid 251754:tid 251944] [client 103.241.204.139:60506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0J5gAAAL8"]
[Wed Sep 30 01:05:58.268921 2026] [security2:error] [pid 251754:tid 251903] [client 13.70.1.101:18616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary01pOnWJRlb5xgkk0J6AAAAJY"]
[Wed Sep 30 01:05:58.304988 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.305410 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.377645 2026] [security2:error] [pid 251754:tid 251932] [client 52.231.69.245:39022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/index/function.php"] [unique_id "ary01pOnWJRlb5xgkk0J9wAAALM"]
[Wed Sep 30 01:05:58.390674 2026] [security2:error] [pid 251754:tid 251916] [client 20.251.39.228:19646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/Jcrop.php"] [unique_id "ary01pOnWJRlb5xgkk0J_AAAAKM"]
[Wed Sep 30 01:05:58.394124 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.394564 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:13585] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.401692 2026] [access_compat:error] [pid 251754:tid 251897] [client 47.79.13.178:48434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:58.401966 2026] [access_compat:error] [pid 251754:tid 251897] [client 47.79.13.178:48434] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:58.458354 2026] [security2:error] [pid 251754:tid 251911] [client 52.231.30.175:63429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/admin.php"] [unique_id "ary01pOnWJRlb5xgkk0KAQAAAJ4"]
[Wed Sep 30 01:05:58.487086 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.487508 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.492085 2026] [security2:error] [pid 251754:tid 252011] [client 20.5.79.49:28296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary01pOnWJRlb5xgkk0KBAAAAQI"]
[Wed Sep 30 01:05:58.499355 2026] [security2:error] [pid 251754:tid 251945] [client 155.190.6.18:51498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0KBQAAAMA"]
[Wed Sep 30 01:05:58.535266 2026] [security2:error] [pid 251754:tid 251886] [client 74.225.148.80:11309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/moon.php"] [unique_id "ary01pOnWJRlb5xgkk0KBgAAAIU"]
[Wed Sep 30 01:05:58.574225 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.574512 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.623196 2026] [security2:error] [pid 251754:tid 252008] [client 13.70.1.101:19024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary01pOnWJRlb5xgkk0KCwAAAP8"]
[Wed Sep 30 01:05:58.650062 2026] [security2:error] [pid 251754:tid 251952] [client 52.231.69.245:38977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary01pOnWJRlb5xgkk0KDAAAAMc"]
[Wed Sep 30 01:05:58.664880 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.665218 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.707689 2026] [security2:error] [pid 251754:tid 251990] [client 103.159.192.142:57921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0KEAAAAO0"]
[Wed Sep 30 01:05:58.707829 2026] [security2:error] [pid 251754:tid 251990] [client 103.159.192.142:57921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0KEAAAAO0"]
[Wed Sep 30 01:05:58.710402 2026] [security2:error] [pid 251754:tid 251904] [client 20.251.39.228:30485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/rip.php"] [unique_id "ary01pOnWJRlb5xgkk0KEQAAAJc"]
[Wed Sep 30 01:05:58.726582 2026] [security2:error] [pid 251754:tid 252003] [client 52.231.30.175:15694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/edit.php"] [unique_id "ary01pOnWJRlb5xgkk0KEwAAAPo"]
[Wed Sep 30 01:05:58.754754 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.755025 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.780590 2026] [access_compat:error] [pid 251754:tid 251924] [client 47.79.13.178:48424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:58.780893 2026] [access_compat:error] [pid 251754:tid 251924] [client 47.79.13.178:48424] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:58.783157 2026] [security2:error] [pid 251754:tid 251914] [client 216.73.216.46:13585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary01pOnWJRlb5xgkk0KFwAAAKE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5MTky
[Wed Sep 30 01:05:58.784180 2026] [security2:error] [pid 251754:tid 251945] [client 155.190.6.18:51498] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary01pOnWJRlb5xgkk0KBQAAAMA"]
[Wed Sep 30 01:05:58.806034 2026] [security2:error] [pid 251754:tid 251957] [client 20.5.79.49:28378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/nox.php"] [unique_id "ary01pOnWJRlb5xgkk0KGgAAAMw"]
[Wed Sep 30 01:05:58.844493 2026] [security2:error] [pid 251754:tid 251906] [client 4.240.25.22:41684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/sxxb.php"] [unique_id "ary01pOnWJRlb5xgkk0KGwAAAJk"]
[Wed Sep 30 01:05:58.899090 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.899386 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.919713 2026] [security2:error] [pid 251754:tid 251991] [client 52.231.69.245:39027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary01pOnWJRlb5xgkk0KIAAAAO4"]
[Wed Sep 30 01:05:58.936227 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:58.936479 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:9202] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:58.942043 2026] [security2:error] [pid 251754:tid 251938] [client 13.70.1.101:19049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/click.php"] [unique_id "ary01pOnWJRlb5xgkk0KJAAAALk"]
[Wed Sep 30 01:05:59.038677 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.30.175:63437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/inputs.php"] [unique_id "ary015OnWJRlb5xgkk0KJQAAAOI"]
[Wed Sep 30 01:05:59.087034 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.087495 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.088664 2026] [security2:error] [pid 251754:tid 251940] [client 20.219.2.60:19431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/inputs.php"] [unique_id "ary015OnWJRlb5xgkk0KKAAAALs"]
[Wed Sep 30 01:05:59.112057 2026] [security2:error] [pid 251754:tid 251966] [client 20.251.39.228:16738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/new4.php"] [unique_id "ary015OnWJRlb5xgkk0KKgAAANU"]
[Wed Sep 30 01:05:59.123261 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.123680 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.142676 2026] [security2:error] [pid 251754:tid 252005] [client 20.5.79.49:28354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/8573.php"] [unique_id "ary015OnWJRlb5xgkk0KLAAAAPw"]
[Wed Sep 30 01:05:59.161229 2026] [security2:error] [pid 251754:tid 251919] [client 223.235.102.107:16652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary015OnWJRlb5xgkk0KLgAAAKY"]
[Wed Sep 30 01:05:59.161599 2026] [security2:error] [pid 251754:tid 251919] [client 223.235.102.107:16652] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary015OnWJRlb5xgkk0KLgAAAKY"]
[Wed Sep 30 01:05:59.171583 2026] [security2:error] [pid 251754:tid 251790] [remote 57.141.14.99:61232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/bethesda-green-summer-speaker-series-how-do-we-achieve-responsible-fashion/"] [unique_id "ary015OnWJRlb5xgkk0KLQAAniE"]
[Wed Sep 30 01:05:59.180024 2026] [security2:error] [pid 251754:tid 251895] [client 52.231.69.245:39016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary015OnWJRlb5xgkk0KLwAAAI4"]
[Wed Sep 30 01:05:59.211817 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.212082 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.232369 2026] [security2:error] [pid 251754:tid 251902] [client 49.13.24.81:65104] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ary01JOnWJRlb5xgkk0JVwAAAJU"], referer: https://cityofmarional.com
[Wed Sep 30 01:05:59.258454 2026] [security2:error] [pid 251754:tid 251941] [client 13.70.1.101:19023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/install.php"] [unique_id "ary015OnWJRlb5xgkk0KOQAAALw"]
[Wed Sep 30 01:05:59.262224 2026] [access_compat:error] [pid 251754:tid 251899] [client 47.79.13.53:34130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:05:59.262492 2026] [access_compat:error] [pid 251754:tid 251899] [client 47.79.13.53:34130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:05:59.301092 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.301360 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.351418 2026] [security2:error] [pid 251754:tid 251998] [client 216.73.216.46:9202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary015OnWJRlb5xgkk0KQQAAAPU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY5L25vZGUw
[Wed Sep 30 01:05:59.374132 2026] [security2:error] [pid 251754:tid 251944] [client 52.231.30.175:15524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/classwithtostring.php"] [unique_id "ary015OnWJRlb5xgkk0KQwAAAL8"]
[Wed Sep 30 01:05:59.398843 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.399292 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.452021 2026] [security2:error] [pid 251754:tid 251949] [client 52.231.69.245:39021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/about/function.php"] [unique_id "ary015OnWJRlb5xgkk0KTQAAAMQ"]
[Wed Sep 30 01:05:59.459686 2026] [security2:error] [pid 251754:tid 251955] [client 45.138.12.32:39746] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ontarioappraisalcorp.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary015OnWJRlb5xgkk0KTgAAAMo"]
[Wed Sep 30 01:05:59.469378 2026] [security2:error] [pid 251754:tid 251888] [client 177.76.13.151:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television/"] [unique_id "ary015OnWJRlb5xgkk0KUAAAAIc"]
[Wed Sep 30 01:05:59.470709 2026] [security2:error] [pid 251754:tid 251982] [client 20.5.79.49:28392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/test.php/wp-content/uploads/wp_live_chat/abruzi.php"] [unique_id "ary015OnWJRlb5xgkk0KUgAAAOU"]
[Wed Sep 30 01:05:59.483087 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.483342 2026] [access_compat:error] [pid 251754:tid 251964] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.497325 2026] [security2:error] [pid 251754:tid 251959] [client 74.225.148.80:13369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/autoload_classmap.php"] [unique_id "ary015OnWJRlb5xgkk0KVQAAAM4"]
[Wed Sep 30 01:05:59.510931 2026] [security2:error] [pid 251754:tid 251905] [client 20.251.39.228:16853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/aa.php"] [unique_id "ary015OnWJRlb5xgkk0KVgAAAJg"]
[Wed Sep 30 01:05:59.574328 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.574632 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.576371 2026] [security2:error] [pid 251754:tid 251971] [client 13.70.1.101:63103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/13k.php"] [unique_id "ary015OnWJRlb5xgkk0KWwAAANo"]
[Wed Sep 30 01:05:59.659385 2026] [security2:error] [pid 251754:tid 251814] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary015OnWJRlb5xgkk0KYAABBDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b178593922fc0d31b62b64687b746bb6&start=90&t=999
[Wed Sep 30 01:05:59.659408 2026] [security2:error] [pid 251754:tid 251814] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary015OnWJRlb5xgkk0KYAABBDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=b178593922fc0d31b62b64687b746bb6&start=90&t=999
[Wed Sep 30 01:05:59.663912 2026] [security2:error] [pid 251754:tid 252007] [client 52.231.30.175:63427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/adminfuns.php"] [unique_id "ary015OnWJRlb5xgkk0KYwAAAP4"]
[Wed Sep 30 01:05:59.665852 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.666106 2026] [access_compat:error] [pid 251754:tid 251966] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.719879 2026] [security2:error] [pid 251754:tid 251894] [client 52.231.69.245:39107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary015OnWJRlb5xgkk0KZAAAAI0"]
[Wed Sep 30 01:05:59.758944 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.759235 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.792993 2026] [security2:error] [pid 251754:tid 252011] [client 20.198.74.230:23872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/909.php"] [unique_id "ary015OnWJRlb5xgkk0KZgAAAQI"]
[Wed Sep 30 01:05:59.849999 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:05:59.850262 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:05:59.866864 2026] [security2:error] [pid 251754:tid 251995] [client 20.5.79.49:28413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wb.php"] [unique_id "ary015OnWJRlb5xgkk0KbQAAAPI"]
[Wed Sep 30 01:05:59.914633 2026] [security2:error] [pid 251754:tid 251967] [client 13.70.1.101:19367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/up.php"] [unique_id "ary015OnWJRlb5xgkk0KcwAAANY"]
[Wed Sep 30 01:05:59.948684 2026] [security2:error] [pid 251754:tid 251898] [client 169.40.142.132:55916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ubb.qmh.mybluehost.me"] [uri "/index.php"] [unique_id "ary015OnWJRlb5xgkk0KdAAAAJE"]
[Wed Sep 30 01:05:59.980974 2026] [security2:error] [pid 251754:tid 251891] [client 52.231.30.175:15529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/222.php"] [unique_id "ary015OnWJRlb5xgkk0KewAAAIo"]
[Wed Sep 30 01:05:59.982703 2026] [security2:error] [pid 251754:tid 251944] [client 52.231.69.245:39059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/admin/function.php"] [unique_id "ary015OnWJRlb5xgkk0KfQAAAL8"]
[Wed Sep 30 01:05:59.992837 2026] [security2:error] [pid 251754:tid 251913] [client 45.138.12.32:39782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ontarioappraisalcorp.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary015OnWJRlb5xgkk0KgAAAAKA"]
[Wed Sep 30 01:06:00.005884 2026] [security2:error] [pid 251754:tid 251910] [client 4.240.25.22:63648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/BDKR28WP.php"] [unique_id "ary02JOnWJRlb5xgkk0KggAAAJ0"]
[Wed Sep 30 01:06:00.028397 2026] [security2:error] [pid 251754:tid 251945] [client 20.219.2.60:11391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws60.php"] [unique_id "ary02JOnWJRlb5xgkk0KhAAAAMA"]
[Wed Sep 30 01:06:00.048244 2026] [security2:error] [pid 251754:tid 251950] [client 116.197.133.25:56729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary02JOnWJRlb5xgkk0KhgAAAMU"]
[Wed Sep 30 01:06:00.048363 2026] [security2:error] [pid 251754:tid 251950] [client 116.197.133.25:56729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary02JOnWJRlb5xgkk0KhgAAAMU"]
[Wed Sep 30 01:06:00.084168 2026] [security2:error] [pid 251754:tid 251982] [client 20.251.39.228:20497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/jk.php"] [unique_id "ary02JOnWJRlb5xgkk0KigAAAOU"]
[Wed Sep 30 01:06:00.108164 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.108443 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.152344 2026] [security2:error] [pid 251754:tid 251952] [remote 168.100.149.137:44264] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary02JOnWJRlb5xgkk0KhQAA9TU"]
[Wed Sep 30 01:06:00.195898 2026] [security2:error] [pid 251754:tid 252009] [client 20.5.79.49:28376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ary02JOnWJRlb5xgkk0KkgAAAQA"]
[Wed Sep 30 01:06:00.199272 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.199588 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.247912 2026] [security2:error] [pid 251754:tid 251984] [client 52.231.69.245:39117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ary02JOnWJRlb5xgkk0KlAAAAOc"]
[Wed Sep 30 01:06:00.249204 2026] [security2:error] [pid 251754:tid 251971] [client 13.70.1.101:19069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/0x1949.php"] [unique_id "ary02JOnWJRlb5xgkk0KlQAAANo"]
[Wed Sep 30 01:06:00.264427 2026] [security2:error] [pid 251754:tid 251901] [client 20.28.180.172:18344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/56c53.php"] [unique_id "ary02JOnWJRlb5xgkk0KlgAAAJQ"]
[Wed Sep 30 01:06:00.265910 2026] [security2:error] [pid 251754:tid 252000] [client 52.231.30.175:15542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/BDKR28WP.php"] [unique_id "ary02JOnWJRlb5xgkk0KlwAAAPc"]
[Wed Sep 30 01:06:00.273862 2026] [security2:error] [pid 251754:tid 251887] [client 74.7.243.227:39102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary02JOnWJRlb5xgkk0KmAAAAIY"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTE4NzI5L2N3ZA==
[Wed Sep 30 01:06:00.289341 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.289622 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.377826 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.378097 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.485106 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.485530 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.509745 2026] [security2:error] [pid 251754:tid 251939] [client 52.231.69.245:39046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "ary02JOnWJRlb5xgkk0KswAAALo"]
[Wed Sep 30 01:06:00.521905 2026] [security2:error] [pid 251754:tid 251945] [client 20.5.79.49:28410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/file.php"] [unique_id "ary02JOnWJRlb5xgkk0KtAAAAMA"]
[Wed Sep 30 01:06:00.550448 2026] [security2:error] [pid 251754:tid 251941] [client 20.194.30.107:38075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/file.php"] [unique_id "ary02JOnWJRlb5xgkk0KtwAAALw"]
[Wed Sep 30 01:06:00.562162 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.562425 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.577497 2026] [access_compat:error] [pid 251754:tid 251960] [client 47.79.13.1:35250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:00.577774 2026] [access_compat:error] [pid 251754:tid 251960] [client 47.79.13.1:35250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:00.578147 2026] [security2:error] [pid 251754:tid 251979] [client 13.70.1.101:18589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/cong.php"] [unique_id "ary02JOnWJRlb5xgkk0KuwAAAOI"]
[Wed Sep 30 01:06:00.587080 2026] [security2:error] [pid 251754:tid 251982] [client 20.251.39.228:22992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/gcqoa.php"] [unique_id "ary02JOnWJRlb5xgkk0KvAAAAOU"]
[Wed Sep 30 01:06:00.613708 2026] [security2:error] [pid 251754:tid 251990] [client 74.225.148.80:13495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/default.php"] [unique_id "ary02JOnWJRlb5xgkk0KvgAAAO0"]
[Wed Sep 30 01:06:00.651911 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.652179 2026] [access_compat:error] [pid 251754:tid 251935] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.668289 2026] [security2:error] [pid 251754:tid 251958] [client 52.231.30.175:15686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp.php"] [unique_id "ary02JOnWJRlb5xgkk0KwAAAAM0"]
[Wed Sep 30 01:06:00.708752 2026] [security2:error] [pid 251754:tid 251841] [remote 57.141.14.63:47380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/wp-json/wp/v2/tags/1645"] [unique_id "ary02JOnWJRlb5xgkk0KwQAAwlQ"]
[Wed Sep 30 01:06:00.712124 2026] [security2:error] [pid 251754:tid 251964] [client 122.173.27.10:13599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary02JOnWJRlb5xgkk0KwgAAANM"]
[Wed Sep 30 01:06:00.712214 2026] [security2:error] [pid 251754:tid 251964] [client 122.173.27.10:13599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary02JOnWJRlb5xgkk0KwgAAANM"]
[Wed Sep 30 01:06:00.743863 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.744138 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.774272 2026] [security2:error] [pid 251754:tid 251909] [client 52.231.69.245:38635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/wp-content/radio.php"] [unique_id "ary02JOnWJRlb5xgkk0KxAAAAJw"]
[Wed Sep 30 01:06:00.838129 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.838370 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.893092 2026] [security2:error] [pid 251754:tid 251959] [client 20.5.79.49:28380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "ary02JOnWJRlb5xgkk0KyAAAAM4"]
[Wed Sep 30 01:06:00.894914 2026] [security2:error] [pid 251754:tid 251984] [client 13.70.1.101:19050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/bs1.php"] [unique_id "ary02JOnWJRlb5xgkk0KzQAAAOc"]
[Wed Sep 30 01:06:00.924979 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:00.925260 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:00.938036 2026] [security2:error] [pid 251754:tid 251985] [client 20.219.2.60:11361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/vanda.php"] [unique_id "ary02JOnWJRlb5xgkk0K0gAAAOg"]
[Wed Sep 30 01:06:00.956803 2026] [security2:error] [pid 251754:tid 251980] [client 52.231.30.175:63472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/simple.php"] [unique_id "ary02JOnWJRlb5xgkk0K1AAAAOM"]
[Wed Sep 30 01:06:01.011097 2026] [security2:error] [pid 251754:tid 251978] [client 20.251.39.228:25586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/plugin-editor.php"] [unique_id "ary02ZOnWJRlb5xgkk0K3AAAAOE"]
[Wed Sep 30 01:06:01.019985 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.020407 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.027030 2026] [security2:error] [pid 251754:tid 251907] [client 20.70.173.30:27780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary02ZOnWJRlb5xgkk0K4AAAAJo"]
[Wed Sep 30 01:06:01.034442 2026] [security2:error] [pid 251754:tid 251974] [client 52.231.69.245:39019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary02ZOnWJRlb5xgkk0K4gAAAN0"]
[Wed Sep 30 01:06:01.106896 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.107169 2026] [access_compat:error] [pid 251754:tid 251918] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.129966 2026] [security2:error] [pid 251754:tid 251987] [client 20.214.109.68:9462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/myfile.php"] [unique_id "ary02ZOnWJRlb5xgkk0K5wAAAOo"]
[Wed Sep 30 01:06:01.131534 2026] [security2:error] [pid 251754:tid 252001] [client 74.225.148.80:13501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary02ZOnWJRlb5xgkk0K6AAAAPg"]
[Wed Sep 30 01:06:01.197582 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.197872 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.221251 2026] [security2:error] [pid 251754:tid 251957] [client 20.5.79.49:28367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/cu.php"] [unique_id "ary02ZOnWJRlb5xgkk0K8QAAAMw"]
[Wed Sep 30 01:06:01.231056 2026] [security2:error] [pid 251754:tid 251955] [client 13.70.1.101:19390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary02ZOnWJRlb5xgkk0K8AAAAMo"]
[Wed Sep 30 01:06:01.294922 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.295224 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.295624 2026] [security2:error] [pid 251754:tid 251917] [client 52.231.30.175:63445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/chosen.php"] [unique_id "ary02ZOnWJRlb5xgkk0K9QAAAKQ"]
[Wed Sep 30 01:06:01.309253 2026] [security2:error] [pid 251754:tid 251989] [client 52.231.69.245:39082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/.well-known/log.php"] [unique_id "ary02ZOnWJRlb5xgkk0K-gAAAOw"]
[Wed Sep 30 01:06:01.336668 2026] [security2:error] [pid 251754:tid 251909] [client 4.240.25.22:18796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary02ZOnWJRlb5xgkk0K_QAAAJw"]
[Wed Sep 30 01:06:01.336832 2026] [security2:error] [pid 251754:tid 251931] [client 45.138.12.40:26704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.uxk.xyk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary02ZOnWJRlb5xgkk0K_gAAALI"]
[Wed Sep 30 01:06:01.355425 2026] [security2:error] [pid 251754:tid 251912] [client 20.219.2.60:18859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp9.php"] [unique_id "ary02ZOnWJRlb5xgkk0LAAAAAJ8"]
[Wed Sep 30 01:06:01.386720 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.387077 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.450217 2026] [security2:error] [pid 251754:tid 251933] [client 201.32.215.149:7577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary02ZOnWJRlb5xgkk0LBwAAALQ"]
[Wed Sep 30 01:06:01.453830 2026] [security2:error] [pid 251754:tid 251933] [client 201.32.215.149:7577] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary02ZOnWJRlb5xgkk0LBwAAALQ"]
[Wed Sep 30 01:06:01.475150 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.475562 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.526814 2026] [security2:error] [pid 251754:tid 251944] [client 20.251.39.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/plugin-install.php"] [unique_id "ary02ZOnWJRlb5xgkk0LEQAAAL8"]
[Wed Sep 30 01:06:01.542044 2026] [security2:error] [pid 251754:tid 251981] [client 20.5.79.49:28353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/bd.php"] [unique_id "ary02ZOnWJRlb5xgkk0LEwAAAOQ"]
[Wed Sep 30 01:06:01.544544 2026] [security2:error] [pid 251754:tid 251974] [client 13.70.1.101:19389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/termps.php"] [unique_id "ary02ZOnWJRlb5xgkk0LFAAAAN0"]
[Wed Sep 30 01:06:01.566508 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.566797 2026] [access_compat:error] [pid 251754:tid 251928] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.577546 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.69.245:39032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/class.php"] [unique_id "ary02ZOnWJRlb5xgkk0LGQAAAQI"]
[Wed Sep 30 01:06:01.600456 2026] [security2:error] [pid 251754:tid 251913] [client 52.231.30.175:15713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/als.php"] [unique_id "ary02ZOnWJRlb5xgkk0LGgAAAKA"]
[Wed Sep 30 01:06:01.662281 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.662682 2026] [access_compat:error] [pid 251754:tid 251921] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.749406 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.749697 2026] [access_compat:error] [pid 251754:tid 251957] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.778018 2026] [security2:error] [pid 251754:tid 251954] [client 152.59.165.7:61982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary02ZOnWJRlb5xgkk0LHgAAAMk"]
[Wed Sep 30 01:06:01.778142 2026] [security2:error] [pid 251754:tid 251954] [client 152.59.165.7:61982] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary02ZOnWJRlb5xgkk0LHgAAAMk"]
[Wed Sep 30 01:06:01.788143 2026] [security2:error] [pid 251754:tid 251955] [client 20.219.2.60:11383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/domains.php"] [unique_id "ary02ZOnWJRlb5xgkk0LHwAAAMo"]
[Wed Sep 30 01:06:01.840080 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.840335 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.858160 2026] [security2:error] [pid 251754:tid 251941] [client 52.231.69.245:39045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/lock360.php"] [unique_id "ary02ZOnWJRlb5xgkk0LIgAAALw"]
[Wed Sep 30 01:06:01.858184 2026] [security2:error] [pid 251754:tid 251972] [client 20.5.79.49:28399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/n.php"] [unique_id "ary02ZOnWJRlb5xgkk0LIwAAANs"]
[Wed Sep 30 01:06:01.861637 2026] [security2:error] [pid 251754:tid 251969] [client 13.70.1.101:19329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/brand.php"] [unique_id "ary02ZOnWJRlb5xgkk0LJAAAANg"]
[Wed Sep 30 01:06:01.907999 2026] [security2:error] [pid 251754:tid 251932] [client 74.225.148.80:13440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary02ZOnWJRlb5xgkk0LKgAAALM"]
[Wed Sep 30 01:06:01.931286 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:01.931558 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:01.956960 2026] [security2:error] [pid 251754:tid 251968] [client 20.251.39.228:16836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/profile.php"] [unique_id "ary02ZOnWJRlb5xgkk0LLAAAANc"]
[Wed Sep 30 01:06:01.987193 2026] [security2:error] [pid 251754:tid 252009] [client 52.231.30.175:63450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/admin.php"] [unique_id "ary02ZOnWJRlb5xgkk0LLgAAAQA"]
[Wed Sep 30 01:06:02.020185 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.020481 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.108683 2026] [security2:error] [pid 251754:tid 251920] [client 45.138.12.32:39738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dzr.jai.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary02pOnWJRlb5xgkk0LOQAAAKc"]
[Wed Sep 30 01:06:02.111740 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.112040 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.122884 2026] [security2:error] [pid 251754:tid 251966] [client 52.231.69.245:39030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.iplumbcanberra.com.au"] [uri "/system_log.php"] [unique_id "ary02pOnWJRlb5xgkk0LOwAAANU"]
[Wed Sep 30 01:06:02.144825 2026] [security2:error] [pid 251754:tid 251757] [remote 57.141.14.3:20706] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/wp-content/uploads/2022/12/Presentation-on-how-DNFBPs-will-detect-Suspicious-Transactions-and-file-Suspicious-Transactions-STRs-to-NFIU..pdf"] [unique_id "ary02pOnWJRlb5xgkk0LPAABAwA"]
[Wed Sep 30 01:06:02.151946 2026] [security2:error] [pid 251754:tid 251996] [remote 168.100.149.206:46480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary02pOnWJRlb5xgkk0LMwAAnF0"]
[Wed Sep 30 01:06:02.183411 2026] [security2:error] [pid 251754:tid 251973] [client 20.5.79.49:28305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/zeal.php"] [unique_id "ary02pOnWJRlb5xgkk0LPwAAANw"]
[Wed Sep 30 01:06:02.189711 2026] [security2:error] [pid 251754:tid 251999] [client 13.70.1.101:18586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/atomlib.php"] [unique_id "ary02pOnWJRlb5xgkk0LQAAAAPY"]
[Wed Sep 30 01:06:02.206597 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.206966 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.299799 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.300230 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.344922 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:15527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/f35.php"] [unique_id "ary02pOnWJRlb5xgkk0LSgAAAJc"]
[Wed Sep 30 01:06:02.357250 2026] [security2:error] [pid 251754:tid 251995] [client 203.122.45.246:56419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary02pOnWJRlb5xgkk0LSwAAAPI"]
[Wed Sep 30 01:06:02.357431 2026] [security2:error] [pid 251754:tid 251995] [client 203.122.45.246:56419] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary02pOnWJRlb5xgkk0LSwAAAPI"]
[Wed Sep 30 01:06:02.385147 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.385409 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.438931 2026] [security2:error] [pid 251754:tid 251983] [client 202.179.95.79:58948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary02pOnWJRlb5xgkk0LUgAAAOY"]
[Wed Sep 30 01:06:02.439042 2026] [security2:error] [pid 251754:tid 251983] [client 202.179.95.79:58948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary02pOnWJRlb5xgkk0LUgAAAOY"]
[Wed Sep 30 01:06:02.477115 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.477371 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.481126 2026] [security2:error] [pid 251754:tid 251935] [client 20.251.39.228:19182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/class-t.api.php"] [unique_id "ary02pOnWJRlb5xgkk0LVwAAALY"]
[Wed Sep 30 01:06:02.503875 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.71:38898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:02.504300 2026] [access_compat:error] [pid 251754:tid 251967] [client 47.79.13.71:38898] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:02.512649 2026] [security2:error] [pid 251754:tid 251914] [client 13.70.1.101:18568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/product.php"] [unique_id "ary02pOnWJRlb5xgkk0LWwAAAKE"]
[Wed Sep 30 01:06:02.528978 2026] [security2:error] [pid 251754:tid 251989] [client 20.5.79.49:28307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/public/moon.php"] [unique_id "ary02pOnWJRlb5xgkk0LXgAAAOw"]
[Wed Sep 30 01:06:02.567762 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.568032 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.615708 2026] [security2:error] [pid 251754:tid 251991] [client 20.219.2.60:11386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/144.php"] [unique_id "ary02pOnWJRlb5xgkk0LYwAAAO4"]
[Wed Sep 30 01:06:02.625372 2026] [security2:error] [pid 251754:tid 251901] [client 20.28.180.172:61208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tx78.php"] [unique_id "ary02pOnWJRlb5xgkk0LZAAAAJQ"]
[Wed Sep 30 01:06:02.661564 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.661848 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.724105 2026] [security2:error] [pid 251754:tid 251944] [client 20.70.173.30:2408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/memberfuns.php"] [unique_id "ary02pOnWJRlb5xgkk0LbAAAAL8"]
[Wed Sep 30 01:06:02.744512 2026] [security2:error] [pid 251754:tid 251996] [client 52.231.30.175:63922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/aaa.php"] [unique_id "ary02pOnWJRlb5xgkk0LbgAAAPM"]
[Wed Sep 30 01:06:02.750798 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.751079 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.776219 2026] [access_compat:error] [pid 251754:tid 251950] [client 47.79.13.213:33588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:02.776469 2026] [access_compat:error] [pid 251754:tid 251950] [client 47.79.13.213:33588] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:02.834185 2026] [security2:error] [pid 251754:tid 251999] [client 13.70.1.101:63042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/function.php"] [unique_id "ary02pOnWJRlb5xgkk0LcgAAAPY"]
[Wed Sep 30 01:06:02.839125 2026] [security2:error] [pid 251754:tid 251919] [client 20.251.39.228:19151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-links-opml.php"] [unique_id "ary02pOnWJRlb5xgkk0LdAAAAKY"]
[Wed Sep 30 01:06:02.845051 2026] [security2:error] [pid 251754:tid 251779] [remote 57.141.14.26:46948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/xmlrpc.php"] [unique_id "ary02pOnWJRlb5xgkk0LcQAA3RY"]
[Wed Sep 30 01:06:02.845935 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.846381 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:02.867033 2026] [security2:error] [pid 251754:tid 251994] [client 20.5.79.49:28396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ws61.php"] [unique_id "ary02pOnWJRlb5xgkk0LdgAAAPE"]
[Wed Sep 30 01:06:02.883582 2026] [security2:error] [pid 251754:tid 251916] [client 74.225.148.80:11319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary02pOnWJRlb5xgkk0LdwAAAKM"]
[Wed Sep 30 01:06:02.899083 2026] [security2:error] [pid 251754:tid 252008] [client 20.214.109.68:9842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/sid3.php"] [unique_id "ary02pOnWJRlb5xgkk0LeAAAAP8"]
[Wed Sep 30 01:06:02.931942 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:02.932207 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.011174 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:63921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/gecko.php"] [unique_id "ary025OnWJRlb5xgkk0LfwAAAJc"]
[Wed Sep 30 01:06:03.025977 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.026483 2026] [access_compat:error] [pid 251754:tid 251995] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.040615 2026] [security2:error] [pid 251754:tid 251915] [client 45.138.12.43:19470] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.veq.vgm.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary025OnWJRlb5xgkk0LgwAAAKI"]
[Wed Sep 30 01:06:03.101465 2026] [security2:error] [pid 251754:tid 251928] [client 20.219.2.60:18827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/public/vx.php"] [unique_id "ary025OnWJRlb5xgkk0LhgAAAK8"]
[Wed Sep 30 01:06:03.114677 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.114969 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.166128 2026] [security2:error] [pid 251754:tid 251986] [client 13.70.1.101:19383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/0x.php"] [unique_id "ary025OnWJRlb5xgkk0LigAAAOk"]
[Wed Sep 30 01:06:03.185796 2026] [security2:error] [pid 251754:tid 251888] [client 20.5.79.49:28372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/mailer.php7"] [unique_id "ary025OnWJRlb5xgkk0LjAAAAIc"]
[Wed Sep 30 01:06:03.206485 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.206759 2026] [access_compat:error] [pid 251754:tid 251972] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.249436 2026] [security2:error] [pid 251754:tid 251920] [client 116.193.128.26:57348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary025OnWJRlb5xgkk0LjwAAAKc"]
[Wed Sep 30 01:06:03.249532 2026] [security2:error] [pid 251754:tid 251920] [client 116.193.128.26:57348] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary025OnWJRlb5xgkk0LjwAAAKc"]
[Wed Sep 30 01:06:03.252135 2026] [security2:error] [pid 251754:tid 251921] [client 20.251.39.228:44426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-class-api.php"] [unique_id "ary025OnWJRlb5xgkk0LkQAAAKg"]
[Wed Sep 30 01:06:03.296504 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.296778 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.344006 2026] [security2:error] [pid 251754:tid 251948] [client 52.231.30.175:15715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/xiugai.php"] [unique_id "ary025OnWJRlb5xgkk0LnAAAAMM"]
[Wed Sep 30 01:06:03.369245 2026] [security2:error] [pid 251754:tid 251886] [client 103.159.192.142:58484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary025OnWJRlb5xgkk0LoAAAAIU"]
[Wed Sep 30 01:06:03.369351 2026] [security2:error] [pid 251754:tid 251886] [client 103.159.192.142:58484] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary025OnWJRlb5xgkk0LoAAAAIU"]
[Wed Sep 30 01:06:03.387768 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.388047 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.460220 2026] [security2:error] [pid 251754:tid 251944] [client 138.99.234.86:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary025OnWJRlb5xgkk0LpQAAAL8"]
[Wed Sep 30 01:06:03.479200 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.479472 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.496841 2026] [security2:error] [pid 251754:tid 251999] [client 13.70.1.101:18619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/index.php"] [unique_id "ary025OnWJRlb5xgkk0LqgAAAPY"]
[Wed Sep 30 01:06:03.569537 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.569805 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.574251 2026] [security2:error] [pid 251754:tid 251927] [client 20.219.2.60:11354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/asd.php"] [unique_id "ary025OnWJRlb5xgkk0LsQAAAK4"]
[Wed Sep 30 01:06:03.588881 2026] [security2:error] [pid 251754:tid 252005] [client 74.225.148.80:13350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/mail.php"] [unique_id "ary025OnWJRlb5xgkk0LswAAAPw"]
[Wed Sep 30 01:06:03.600060 2026] [security2:error] [pid 251754:tid 251930] [client 104.208.65.139:32221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/z60.php"] [unique_id "ary025OnWJRlb5xgkk0LtAAAALE"]
[Wed Sep 30 01:06:03.646170 2026] [security2:error] [pid 251754:tid 251995] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary025OnWJRlb5xgkk0LuQAAAPI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:03.648608 2026] [security2:error] [pid 251754:tid 251915] [client 20.251.39.228:16860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-class-atom.php"] [unique_id "ary025OnWJRlb5xgkk0LugAAAKI"]
[Wed Sep 30 01:06:03.661082 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.661346 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.686881 2026] [security2:error] [pid 251754:tid 251898] [client 52.231.30.175:15526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/inx.php"] [unique_id "ary025OnWJRlb5xgkk0LvwAAAJE"]
[Wed Sep 30 01:06:03.695538 2026] [security2:error] [pid 251754:tid 251940] [client 20.5.79.49:28288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/assets/go.php"] [unique_id "ary025OnWJRlb5xgkk0LwAAAALs"]
[Wed Sep 30 01:06:03.751968 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.752232 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.825484 2026] [security2:error] [pid 251754:tid 251964] [client 13.70.1.101:19009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary025OnWJRlb5xgkk0LyAAAANM"]
[Wed Sep 30 01:06:03.843941 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.844214 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:03.868682 2026] [security2:error] [pid 251754:tid 251884] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary025OnWJRlb5xgkk0LygAAwH8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297998&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:03.868713 2026] [security2:error] [pid 251754:tid 251884] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary025OnWJRlb5xgkk0LygAAwH8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297998&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:03.934205 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:03.934514 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.011690 2026] [security2:error] [pid 251754:tid 251966] [client 20.5.79.49:28377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/files.php"] [unique_id "ary03JOnWJRlb5xgkk0L0wAAANU"]
[Wed Sep 30 01:06:04.024069 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.024338 2026] [access_compat:error] [pid 251754:tid 251942] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.028844 2026] [security2:error] [pid 251754:tid 251900] [client 52.231.30.175:63923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/11.php"] [unique_id "ary03JOnWJRlb5xgkk0L1QAAAJM"]
[Wed Sep 30 01:06:04.078597 2026] [security2:error] [pid 251754:tid 251917] [client 74.7.230.32:37444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "recalltruepearce.org"] [uri "/robots.txt"] [unique_id "ary025OnWJRlb5xgkk0LzgAApAg"]
[Wed Sep 30 01:06:04.115813 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.116100 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.139078 2026] [security2:error] [pid 251754:tid 251977] [client 13.70.1.101:18617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/classwithtostring.php"] [unique_id "ary03JOnWJRlb5xgkk0L3AAAAOA"]
[Wed Sep 30 01:06:04.139353 2026] [security2:error] [pid 251754:tid 251961] [client 74.225.148.80:13532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/sx.php"] [unique_id "ary03JOnWJRlb5xgkk0L3QAAANA"]
[Wed Sep 30 01:06:04.139729 2026] [security2:error] [pid 251754:tid 251973] [client 20.214.109.68:61164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/666.php"] [unique_id "ary03JOnWJRlb5xgkk0L3gAAANw"]
[Wed Sep 30 01:06:04.177388 2026] [security2:error] [pid 251754:tid 251974] [client 20.251.39.228:40039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-block.php"] [unique_id "ary03JOnWJRlb5xgkk0L4AAAAN0"]
[Wed Sep 30 01:06:04.208325 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.208590 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.212719 2026] [security2:error] [pid 251754:tid 251939] [client 4.240.25.22:13062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/xiugai.php"] [unique_id "ary03JOnWJRlb5xgkk0L4gAAALo"]
[Wed Sep 30 01:06:04.298325 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.298581 2026] [access_compat:error] [pid 251754:tid 251936] [client 216.73.216.46:37735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.330239 2026] [security2:error] [pid 251754:tid 251904] [client 20.5.79.49:28407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/public/z.php"] [unique_id "ary03JOnWJRlb5xgkk0L7QAAAJc"]
[Wed Sep 30 01:06:04.389011 2026] [security2:error] [pid 251754:tid 252000] [client 52.231.30.175:63449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/File.php"] [unique_id "ary03JOnWJRlb5xgkk0L8AAAAPc"]
[Wed Sep 30 01:06:04.391182 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.391439 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.459626 2026] [security2:error] [pid 251754:tid 251969] [client 13.70.1.101:19013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/dropdown.php"] [unique_id "ary03JOnWJRlb5xgkk0L9AAAANg"]
[Wed Sep 30 01:06:04.477252 2026] [security2:error] [pid 251754:tid 251924] [client 20.219.2.60:11374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/zc-104.php"] [unique_id "ary03JOnWJRlb5xgkk0L9gAAAKs"]
[Wed Sep 30 01:06:04.481333 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.481616 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.489841 2026] [security2:error] [pid 251754:tid 251888] [client 20.194.30.107:17282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary03JOnWJRlb5xgkk0L-QAAAIc"]
[Wed Sep 30 01:06:04.513706 2026] [security2:error] [pid 251754:tid 251954] [client 20.194.30.107:1602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/as.php"] [unique_id "ary03JOnWJRlb5xgkk0L-wAAAMk"]
[Wed Sep 30 01:06:04.535700 2026] [security2:error] [pid 251754:tid 251967] [client 4.240.25.22:18702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/df.php"] [unique_id "ary03JOnWJRlb5xgkk0L_QAAANY"]
[Wed Sep 30 01:06:04.551496 2026] [security2:error] [pid 251754:tid 252010] [client 20.251.39.228:19163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-signup.php"] [unique_id "ary03JOnWJRlb5xgkk0MAAAAAQE"]
[Wed Sep 30 01:06:04.616200 2026] [security2:error] [pid 251754:tid 251948] [client 74.7.230.61:46372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cwj.eek.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary03JOnWJRlb5xgkk0MBQAAwyg"]
[Wed Sep 30 01:06:04.621404 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.621678 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.646113 2026] [security2:error] [pid 251754:tid 251942] [client 20.5.79.49:28375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wso.php"] [unique_id "ary03JOnWJRlb5xgkk0MBwAAAL0"]
[Wed Sep 30 01:06:04.655423 2026] [security2:error] [pid 251754:tid 251922] [client 43.227.131.37:15249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MCAAAAKk"]
[Wed Sep 30 01:06:04.655526 2026] [security2:error] [pid 251754:tid 251922] [client 43.227.131.37:15249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MCAAAAKk"]
[Wed Sep 30 01:06:04.664473 2026] [security2:error] [pid 251754:tid 251996] [client 223.181.60.167:1700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MEAAAAPM"]
[Wed Sep 30 01:06:04.665033 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.665298 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:45659] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.665757 2026] [security2:error] [pid 251754:tid 251996] [client 223.181.60.167:1700] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MEAAAAPM"]
[Wed Sep 30 01:06:04.689232 2026] [security2:error] [pid 251754:tid 251916] [client 20.28.180.172:18341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws80.php"] [unique_id "ary03JOnWJRlb5xgkk0MFgAAAKM"]
[Wed Sep 30 01:06:04.709272 2026] [security2:error] [pid 251754:tid 251994] [client 216.73.216.46:37735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary03JOnWJRlb5xgkk0MHAAAAPE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NTM%3D
[Wed Sep 30 01:06:04.709303 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.30.175:63892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary03JOnWJRlb5xgkk0MHQAAAQI"]
[Wed Sep 30 01:06:04.723043 2026] [security2:error] [pid 251754:tid 251973] [client 74.7.230.28:60002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.hdu.pxp.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary03JOnWJRlb5xgkk0MIgAA3CE"]
[Wed Sep 30 01:06:04.759309 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.759593 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.781632 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.1.101:19065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/moon.php"] [unique_id "ary03JOnWJRlb5xgkk0MKAAAAO0"]
[Wed Sep 30 01:06:04.845053 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.845347 2026] [access_compat:error] [pid 251754:tid 251891] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.860685 2026] [security2:error] [pid 251754:tid 251955] [client 20.219.2.60:18856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/inege.php"] [unique_id "ary03JOnWJRlb5xgkk0MLAAAAMo"]
[Wed Sep 30 01:06:04.893994 2026] [security2:error] [pid 251754:tid 251928] [client 49.205.105.16:13354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MLgAAAK8"]
[Wed Sep 30 01:06:04.894164 2026] [security2:error] [pid 251754:tid 251928] [client 49.205.105.16:13354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MLgAAAK8"]
[Wed Sep 30 01:06:04.951031 2026] [security2:error] [pid 251754:tid 251967] [client 74.225.148.80:11303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary03JOnWJRlb5xgkk0MMwAAANY"]
[Wed Sep 30 01:06:04.953034 2026] [security2:error] [pid 251754:tid 251929] [client 49.43.163.212:51972] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary03JOnWJRlb5xgkk0MKgAAALA"]
[Wed Sep 30 01:06:04.988439 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:04.988883 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:04.997393 2026] [security2:error] [pid 251754:tid 251986] [client 20.5.79.49:28382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ah25.php"] [unique_id "ary03JOnWJRlb5xgkk0MNwAAAOk"]
[Wed Sep 30 01:06:05.002931 2026] [security2:error] [pid 251754:tid 251982] [client 106.214.2.47:33115] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary03ZOnWJRlb5xgkk0MOAAAAOU"]
[Wed Sep 30 01:06:05.010615 2026] [security2:error] [pid 251754:tid 251982] [client 106.214.2.47:33115] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary03ZOnWJRlb5xgkk0MOAAAAOU"]
[Wed Sep 30 01:06:05.012423 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.30.175:15495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary03ZOnWJRlb5xgkk0MOQAAALs"]
[Wed Sep 30 01:06:05.025379 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.025636 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.056240 2026] [security2:error] [pid 251754:tid 251913] [client 20.251.39.228:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-xmlsia.php"] [unique_id "ary03ZOnWJRlb5xgkk0MPgAAAKA"]
[Wed Sep 30 01:06:05.083248 2026] [security2:error] [pid 251754:tid 251948] [client 213.136.69.135:50281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/view-transitions.php"] [unique_id "ary03ZOnWJRlb5xgkk0MQQAAAMM"], referer: binance.com
[Wed Sep 30 01:06:05.084048 2026] [security2:error] [pid 251754:tid 251960] [client 216.73.216.46:45659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary03ZOnWJRlb5xgkk0MQgAAAM8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAzL25vZGUwL21lbW9yeTM5OS9ub2RlMC9jcHUxOS9ub2RlMA%3D%3D
[Wed Sep 30 01:06:05.085986 2026] [access_compat:error] [pid 251754:tid 251983] [client 47.79.13.78:33442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:05.086288 2026] [access_compat:error] [pid 251754:tid 251983] [client 47.79.13.78:33442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:05.092221 2026] [security2:error] [pid 251754:tid 251942] [client 13.70.1.101:18581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/autoload_classmap.php"] [unique_id "ary03ZOnWJRlb5xgkk0MQwAAAL0"]
[Wed Sep 30 01:06:05.117240 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.117506 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.207583 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.207874 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.248481 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.75:36316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:05.248740 2026] [access_compat:error] [pid 251754:tid 251956] [client 47.79.13.75:36316] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:05.293911 2026] [security2:error] [pid 251754:tid 251944] [client 185.79.30.55:59616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.30.79.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ary03ZOnWJRlb5xgkk0MUQAAAL8"], referer: http://adbadvertising.com/wp-login.php
[Wed Sep 30 01:06:05.300757 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.301082 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.304072 2026] [security2:error] [pid 251754:tid 252007] [client 20.219.2.60:11648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/rzki.php"] [unique_id "ary03ZOnWJRlb5xgkk0MVAAAAP4"]
[Wed Sep 30 01:06:05.324402 2026] [security2:error] [pid 251754:tid 251993] [client 20.5.79.49:28394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/shell.php"] [unique_id "ary03ZOnWJRlb5xgkk0MVQAAAPA"]
[Wed Sep 30 01:06:05.380331 2026] [security2:error] [pid 251754:tid 251953] [client 45.138.12.32:26956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eex.nbb.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary03ZOnWJRlb5xgkk0MVwAAAMg"]
[Wed Sep 30 01:06:05.383778 2026] [security2:error] [pid 251754:tid 251911] [client 52.231.30.175:15494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary03ZOnWJRlb5xgkk0MWgAAAJ4"]
[Wed Sep 30 01:06:05.389904 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.390180 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.409515 2026] [security2:error] [pid 251754:tid 251908] [client 4.240.25.22:18810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/av.php"] [unique_id "ary03ZOnWJRlb5xgkk0MXAAAAJs"]
[Wed Sep 30 01:06:05.410984 2026] [security2:error] [pid 251754:tid 251909] [client 13.70.1.101:19330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/default.php"] [unique_id "ary03ZOnWJRlb5xgkk0MXQAAAJw"]
[Wed Sep 30 01:06:05.435716 2026] [security2:error] [pid 251754:tid 251949] [client 4.240.25.22:12451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/classwithtostring.php"] [unique_id "ary03ZOnWJRlb5xgkk0MXgAAAMQ"]
[Wed Sep 30 01:06:05.482683 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.482974 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.506285 2026] [security2:error] [pid 251754:tid 251979] [client 74.225.148.80:13510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/article.php"] [unique_id "ary03ZOnWJRlb5xgkk0MYgAAAOI"]
[Wed Sep 30 01:06:05.572388 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.572659 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.646794 2026] [security2:error] [pid 251754:tid 251929] [client 20.214.109.68:62453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/xxw.php"] [unique_id "ary03ZOnWJRlb5xgkk0MaAAAALA"]
[Wed Sep 30 01:06:05.651454 2026] [http2:warn] [pid 212454:tid 212655] [client 52.167.144.206:62254] h2_stream(212454-1309-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:05.662820 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.663092 2026] [access_compat:error] [pid 251754:tid 251971] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.686793 2026] [security2:error] [pid 251754:tid 252010] [client 20.5.79.49:28371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-sing.php"] [unique_id "ary03ZOnWJRlb5xgkk0MawAAAQE"]
[Wed Sep 30 01:06:05.727933 2026] [security2:error] [pid 251754:tid 251985] [client 13.70.1.101:18570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary03ZOnWJRlb5xgkk0MbQAAAOg"]
[Wed Sep 30 01:06:05.754096 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.754380 2026] [access_compat:error] [pid 251754:tid 251913] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.761726 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.30.175:15525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary03ZOnWJRlb5xgkk0MbwAAAMY"]
[Wed Sep 30 01:06:05.813649 2026] [security2:error] [pid 251754:tid 251947] [client 20.251.39.228:40036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.39.251.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.walker23.com"] [uri "/wp-inic3.php"] [unique_id "ary03ZOnWJRlb5xgkk0MdQAAAMI"]
[Wed Sep 30 01:06:05.851260 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.851691 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.900921 2026] [security2:error] [pid 251754:tid 252012] [remote 168.100.149.158:37102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary03ZOnWJRlb5xgkk0McgAA5E0"]
[Wed Sep 30 01:06:05.937994 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:05.938261 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:05.966148 2026] [security2:error] [pid 251754:tid 251982] [client 182.69.182.151:11105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary03ZOnWJRlb5xgkk0MgAAAAOU"]
[Wed Sep 30 01:06:05.966228 2026] [security2:error] [pid 251754:tid 251982] [client 182.69.182.151:11105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary03ZOnWJRlb5xgkk0MgAAAAOU"]
[Wed Sep 30 01:06:06.006959 2026] [security2:error] [pid 251754:tid 251931] [client 20.5.79.49:28401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wok.php"] [unique_id "ary03pOnWJRlb5xgkk0MgwAAALI"]
[Wed Sep 30 01:06:06.028883 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.029156 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.047795 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.1.101:19391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary03pOnWJRlb5xgkk0MiQAAAO0"]
[Wed Sep 30 01:06:06.050721 2026] [security2:error] [pid 251754:tid 251938] [client 74.7.175.170:36160] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.qxj.ixo.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary03pOnWJRlb5xgkk0MiwAAALk"]
[Wed Sep 30 01:06:06.058568 2026] [security2:error] [pid 251754:tid 251989] [client 52.231.30.175:15538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary03pOnWJRlb5xgkk0MjAAAAOw"]
[Wed Sep 30 01:06:06.074838 2026] [security2:error] [pid 251754:tid 251974] [client 74.225.148.80:11291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/link.php"] [unique_id "ary03pOnWJRlb5xgkk0MjwAAAN0"]
[Wed Sep 30 01:06:06.120121 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.120391 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.120766 2026] [security2:error] [pid 251754:tid 251895] [client 20.214.109.68:59871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-png.php"] [unique_id "ary03pOnWJRlb5xgkk0MlAAAAI4"]
[Wed Sep 30 01:06:06.216689 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.217128 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.228189 2026] [security2:error] [pid 251754:tid 251846] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary03pOnWJRlb5xgkk0MnQAA4Fk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D21875
[Wed Sep 30 01:06:06.228226 2026] [security2:error] [pid 251754:tid 251846] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary03pOnWJRlb5xgkk0MnQAA4Fk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D21875
[Wed Sep 30 01:06:06.259085 2026] [access_compat:error] [pid 251754:tid 251955] [client 220.181.108.111:56858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.259352 2026] [access_compat:error] [pid 251754:tid 251955] [client 220.181.108.111:56858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.302189 2026] [access_compat:error] [pid 251754:tid 251987] [client 47.79.13.176:33840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:06.302639 2026] [access_compat:error] [pid 251754:tid 251987] [client 47.79.13.176:33840] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:06.307837 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.308292 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.340266 2026] [security2:error] [pid 251754:tid 252010] [client 20.5.79.49:28365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "ary03pOnWJRlb5xgkk0MpwAAAQE"]
[Wed Sep 30 01:06:06.346378 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.30.175:63896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary03pOnWJRlb5xgkk0MqAAAALs"]
[Wed Sep 30 01:06:06.378076 2026] [security2:error] [pid 251754:tid 251981] [client 13.70.1.101:19015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary03pOnWJRlb5xgkk0MqgAAAOQ"]
[Wed Sep 30 01:06:06.393582 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.393866 2026] [access_compat:error] [pid 251754:tid 251947] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.484967 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.485233 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.574248 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.574512 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.594135 2026] [security2:error] [pid 251754:tid 251936] [client 20.219.2.60:11695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/xsas.php"] [unique_id "ary03pOnWJRlb5xgkk0MtQAAALc"]
[Wed Sep 30 01:06:06.602623 2026] [security2:error] [pid 251754:tid 251931] [client 185.79.30.55:59624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.30.79.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ary03pOnWJRlb5xgkk0MtgAAALI"], referer: http://adbadvertising.com/wp-login.php
[Wed Sep 30 01:06:06.666972 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.667259 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.669389 2026] [security2:error] [pid 251754:tid 251911] [client 52.231.30.175:15519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/media.php"] [unique_id "ary03pOnWJRlb5xgkk0MuQAAAJ4"]
[Wed Sep 30 01:06:06.676034 2026] [security2:error] [pid 251754:tid 251974] [client 20.5.79.49:28301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wuasr.php"] [unique_id "ary03pOnWJRlb5xgkk0MugAAAN0"]
[Wed Sep 30 01:06:06.712344 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.1.101:63043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/mail.php"] [unique_id "ary03pOnWJRlb5xgkk0MuwAAAJs"]
[Wed Sep 30 01:06:06.756783 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.757043 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.757823 2026] [security2:error] [pid 251754:tid 251953] [client 20.214.109.68:62457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/222.php"] [unique_id "ary03pOnWJRlb5xgkk0MvwAAAMg"]
[Wed Sep 30 01:06:06.809876 2026] [security2:error] [pid 251754:tid 251932] [client 223.181.30.165:4666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary03pOnWJRlb5xgkk0MwQAAALM"]
[Wed Sep 30 01:06:06.809980 2026] [security2:error] [pid 251754:tid 251932] [client 223.181.30.165:4666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary03pOnWJRlb5xgkk0MwQAAALM"]
[Wed Sep 30 01:06:06.847892 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.848151 2026] [access_compat:error] [pid 251754:tid 251927] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.901042 2026] [security2:error] [pid 251754:tid 251972] [client 38.154.5.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary03pOnWJRlb5xgkk0MyAAAANs"]
[Wed Sep 30 01:06:06.940608 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:06.940888 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:06.987638 2026] [security2:error] [pid 251754:tid 252010] [client 20.5.79.49:28324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ms-edit.php"] [unique_id "ary03pOnWJRlb5xgkk0MzQAAAQE"]
[Wed Sep 30 01:06:07.030759 2026] [security2:error] [pid 251754:tid 251962] [client 13.70.1.101:19378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/sx.php"] [unique_id "ary035OnWJRlb5xgkk0M0AAAANE"]
[Wed Sep 30 01:06:07.035661 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.036104 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.049422 2026] [security2:error] [pid 251754:tid 251951] [client 4.240.25.22:18815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/css.php"] [unique_id "ary035OnWJRlb5xgkk0M0gAAAMY"]
[Wed Sep 30 01:06:07.082455 2026] [security2:error] [pid 251754:tid 251947] [client 52.231.30.175:63875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/inso.php"] [unique_id "ary035OnWJRlb5xgkk0M1wAAAMI"]
[Wed Sep 30 01:06:07.120826 2026] [security2:error] [pid 251754:tid 251998] [client 20.219.2.60:18872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/nw.php"] [unique_id "ary035OnWJRlb5xgkk0M2QAAAPU"]
[Wed Sep 30 01:06:07.121795 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.122072 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.179965 2026] [access_compat:error] [pid 251754:tid 251924] [client 47.79.13.58:53112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:07.180257 2026] [access_compat:error] [pid 251754:tid 251924] [client 47.79.13.58:53112] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:07.212478 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.212754 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.250187 2026] [security2:error] [pid 251754:tid 251887] [client 20.70.173.30:27788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary035OnWJRlb5xgkk0M3wAAAIY"]
[Wed Sep 30 01:06:07.277100 2026] [security2:error] [pid 251754:tid 251916] [client 74.225.148.80:13481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/lock360.php"] [unique_id "ary035OnWJRlb5xgkk0M4gAAAKM"]
[Wed Sep 30 01:06:07.301844 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.302115 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.312639 2026] [security2:error] [pid 251754:tid 251986] [client 45.138.12.43:19534] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.vikingmj.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary035OnWJRlb5xgkk0M6AAAAOk"]
[Wed Sep 30 01:06:07.314257 2026] [security2:error] [pid 251754:tid 252003] [client 167.234.122.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary035OnWJRlb5xgkk0M5wAAAPo"]
[Wed Sep 30 01:06:07.359206 2026] [security2:error] [pid 251754:tid 251942] [client 13.70.1.101:19054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary035OnWJRlb5xgkk0M7QAAAL0"]
[Wed Sep 30 01:06:07.363361 2026] [security2:error] [pid 251754:tid 251938] [client 52.231.30.175:63470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/shiny.php"] [unique_id "ary035OnWJRlb5xgkk0M7gAAALk"]
[Wed Sep 30 01:06:07.394834 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.395114 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.398546 2026] [security2:error] [pid 251754:tid 251978] [client 37.41.16.35:61029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary035OnWJRlb5xgkk0M8wAAAOE"]
[Wed Sep 30 01:06:07.398662 2026] [security2:error] [pid 251754:tid 251978] [client 37.41.16.35:61029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary035OnWJRlb5xgkk0M8wAAAOE"]
[Wed Sep 30 01:06:07.487648 2026] [security2:error] [pid 251754:tid 251959] [client 161.123.174.201:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary035OnWJRlb5xgkk0M-gAAAM4"]
[Wed Sep 30 01:06:07.488523 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.488974 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.506309 2026] [security2:error] [pid 251754:tid 251904] [client 20.219.2.60:11650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/d12.php"] [unique_id "ary035OnWJRlb5xgkk0M_AAAAJc"]
[Wed Sep 30 01:06:07.533925 2026] [security2:error] [pid 251754:tid 251972] [client 20.194.30.107:1649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/simple.php"] [unique_id "ary035OnWJRlb5xgkk0NAAAAANs"]
[Wed Sep 30 01:06:07.576826 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.577043 2026] [security2:error] [pid 251754:tid 252005] [client 20.214.109.68:60568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-blog.php"] [unique_id "ary035OnWJRlb5xgkk0NAgAAAPw"]
[Wed Sep 30 01:06:07.577088 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.645117 2026] [security2:error] [pid 251754:tid 251901] [client 20.5.79.49:28323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/gecko-litespeed.php"] [unique_id "ary035OnWJRlb5xgkk0NBAAAAJQ"]
[Wed Sep 30 01:06:07.669163 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.669443 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.685000 2026] [security2:error] [pid 251754:tid 251971] [client 13.70.1.101:63040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/article.php"] [unique_id "ary035OnWJRlb5xgkk0NBgAAANo"]
[Wed Sep 30 01:06:07.705954 2026] [security2:error] [pid 251754:tid 251951] [client 52.231.30.175:63485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/403dd.php"] [unique_id "ary035OnWJRlb5xgkk0NCAAAAMY"]
[Wed Sep 30 01:06:07.759563 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.759875 2026] [access_compat:error] [pid 251754:tid 251948] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.770786 2026] [security2:error] [pid 251754:tid 251993] [client 20.198.74.230:23919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/BtOCXH4W1V5.php"] [unique_id "ary035OnWJRlb5xgkk0NDQAAAPA"]
[Wed Sep 30 01:06:07.796666 2026] [security2:error] [pid 251754:tid 251924] [client 74.225.148.80:13474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-trackback.php"] [unique_id "ary035OnWJRlb5xgkk0NDwAAAKs"]
[Wed Sep 30 01:06:07.850466 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.850757 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.917569 2026] [security2:error] [pid 251754:tid 251931] [client 20.28.180.172:62347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/jga.php"] [unique_id "ary035OnWJRlb5xgkk0NGAAAALI"]
[Wed Sep 30 01:06:07.940344 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:07.940617 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:07.962516 2026] [access_compat:error] [pid 251754:tid 251984] [client 47.79.13.28:58994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:07.962815 2026] [access_compat:error] [pid 251754:tid 251984] [client 47.79.13.28:58994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:07.975878 2026] [security2:error] [pid 251754:tid 252011] [client 20.5.79.49:28385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/koala.php"] [unique_id "ary035OnWJRlb5xgkk0NHAAAAQI"]
[Wed Sep 30 01:06:07.993383 2026] [security2:error] [pid 251754:tid 251960] [client 52.231.30.175:15783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/baba.php"] [unique_id "ary035OnWJRlb5xgkk0NIAAAAM8"]
[Wed Sep 30 01:06:08.030549 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.030832 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.038818 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.1.101:18591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/link.php"] [unique_id "ary04JOnWJRlb5xgkk0NJQAAAQA"]
[Wed Sep 30 01:06:08.122826 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.123117 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.129066 2026] [security2:error] [pid 251754:tid 251972] [client 74.7.243.227:49958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary04JOnWJRlb5xgkk0NLQAAANs"], referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvNDg1MzM3L2N3ZA==
[Wed Sep 30 01:06:08.213329 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.213602 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:31873] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.293082 2026] [security2:error] [pid 251754:tid 252010] [client 52.231.30.175:15488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/site.php"] [unique_id "ary04JOnWJRlb5xgkk0NMwAAAQE"]
[Wed Sep 30 01:06:08.297921 2026] [security2:error] [pid 251754:tid 251971] [client 216.73.216.46:31873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary04JOnWJRlb5xgkk0NNgAAANo"]
[Wed Sep 30 01:06:08.298199 2026] [security2:error] [pid 251754:tid 251962] [client 74.225.148.80:13468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/.well-known/index.php"] [unique_id "ary04JOnWJRlb5xgkk0NNwAAANE"]
[Wed Sep 30 01:06:08.301694 2026] [security2:error] [pid 251754:tid 251928] [client 20.5.79.49:28366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/akcc.php"] [unique_id "ary04JOnWJRlb5xgkk0NOAAAAK8"]
[Wed Sep 30 01:06:08.357856 2026] [security2:error] [pid 251754:tid 251917] [client 13.70.1.101:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/lock360.php"] [unique_id "ary04JOnWJRlb5xgkk0NQgAAAKQ"]
[Wed Sep 30 01:06:08.377948 2026] [security2:error] [pid 251754:tid 251776] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary04JOnWJRlb5xgkk0NRAAAoBM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=53753
[Wed Sep 30 01:06:08.377985 2026] [security2:error] [pid 251754:tid 251776] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary04JOnWJRlb5xgkk0NRAAAoBM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=53753
[Wed Sep 30 01:06:08.381876 2026] [security2:error] [pid 251754:tid 251991] [client 93.152.80.99:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary04JOnWJRlb5xgkk0NRQAAAO4"]
[Wed Sep 30 01:06:08.386454 2026] [security2:error] [pid 251754:tid 252002] [client 74.7.242.1:49918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary04JOnWJRlb5xgkk0NRgAAAPk"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:06:08.394378 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.394630 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.448893 2026] [security2:error] [pid 251754:tid 251920] [client 74.225.148.80:52491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary04JOnWJRlb5xgkk0NSQAAAKc"]
[Wed Sep 30 01:06:08.491626 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.492069 2026] [access_compat:error] [pid 251754:tid 251939] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.497714 2026] [security2:error] [pid 251754:tid 251963] [client 20.214.109.68:62443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary04JOnWJRlb5xgkk0NTAAAANI"]
[Wed Sep 30 01:06:08.498659 2026] [security2:error] [pid 251754:tid 251986] [client 20.70.173.30:59525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/js.php"] [unique_id "ary04JOnWJRlb5xgkk0NTQAAAOk"]
[Wed Sep 30 01:06:08.500640 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04JOnWJRlb5xgkk0NTgABAwE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=f9185ed6237f6ae9cd17958516b60487&start=90&t=999
[Wed Sep 30 01:06:08.500663 2026] [security2:error] [pid 251754:tid 251758] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04JOnWJRlb5xgkk0NTgABAwE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=f9185ed6237f6ae9cd17958516b60487&start=90&t=999
[Wed Sep 30 01:06:08.503515 2026] [security2:error] [pid 251754:tid 252003] [client 20.219.2.60:11356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/okxh.php"] [unique_id "ary04JOnWJRlb5xgkk0NTwAAAPo"]
[Wed Sep 30 01:06:08.568425 2026] [security2:error] [pid 251754:tid 251933] [remote 168.100.149.184:25722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary04JOnWJRlb5xgkk0NSgAAq2g"]
[Wed Sep 30 01:06:08.578297 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.578567 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:13111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.615617 2026] [security2:error] [pid 251754:tid 251966] [client 52.231.30.175:15490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/insc.php"] [unique_id "ary04JOnWJRlb5xgkk0NVAAAANU"]
[Wed Sep 30 01:06:08.620725 2026] [security2:error] [pid 251754:tid 251893] [client 20.5.79.49:28351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wolv2.php"] [unique_id "ary04JOnWJRlb5xgkk0NVgAAAIw"]
[Wed Sep 30 01:06:08.622050 2026] [security2:error] [pid 251754:tid 251910] [client 4.240.25.22:41707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary04JOnWJRlb5xgkk0NVwAAAJ0"]
[Wed Sep 30 01:06:08.691961 2026] [security2:error] [pid 251754:tid 251908] [client 13.70.1.101:63087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-trackback.php"] [unique_id "ary04JOnWJRlb5xgkk0NWQAAAJs"]
[Wed Sep 30 01:06:08.721088 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.721344 2026] [access_compat:error] [pid 251754:tid 251983] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.726726 2026] [security2:error] [pid 251754:tid 251972] [client 201.33.79.85:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary04JOnWJRlb5xgkk0NXQAAANs"]
[Wed Sep 30 01:06:08.781168 2026] [security2:error] [pid 251754:tid 252007] [client 74.225.148.80:11288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary04JOnWJRlb5xgkk0NYwAAAP4"]
[Wed Sep 30 01:06:08.812754 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.813027 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.854994 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.855414 2026] [access_compat:error] [pid 251754:tid 251911] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.884745 2026] [security2:error] [pid 251754:tid 251906] [client 103.241.204.139:61052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary04JOnWJRlb5xgkk0NbAAAAJk"]
[Wed Sep 30 01:06:08.884857 2026] [security2:error] [pid 251754:tid 251906] [client 103.241.204.139:61052] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary04JOnWJRlb5xgkk0NbAAAAJk"]
[Wed Sep 30 01:06:08.904317 2026] [security2:error] [pid 251754:tid 251980] [client 201.18.186.112:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary04JOnWJRlb5xgkk0NbQAAAOM"]
[Wed Sep 30 01:06:08.913787 2026] [security2:error] [pid 251754:tid 252008] [client 74.225.148.80:56067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary04JOnWJRlb5xgkk0NbgAAAP8"]
[Wed Sep 30 01:06:08.941282 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:08.941583 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:08.952082 2026] [security2:error] [pid 251754:tid 251886] [client 52.231.30.175:15700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/file.php"] [unique_id "ary04JOnWJRlb5xgkk0NcwAAAIU"]
[Wed Sep 30 01:06:08.953638 2026] [security2:error] [pid 251754:tid 251940] [client 20.5.79.49:28409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/ID3/about.php7"] [unique_id "ary04JOnWJRlb5xgkk0NdAAAALs"]
[Wed Sep 30 01:06:08.994784 2026] [security2:error] [pid 251754:tid 251889] [client 216.73.216.46:13111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary04JOnWJRlb5xgkk0NdwAAAIg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTc1
[Wed Sep 30 01:06:09.014149 2026] [security2:error] [pid 251754:tid 251982] [client 13.70.1.101:19333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/.well-known/index.php"] [unique_id "ary04ZOnWJRlb5xgkk0NegAAAOU"]
[Wed Sep 30 01:06:09.037349 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.037795 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.039425 2026] [security2:error] [pid 251754:tid 251867] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04ZOnWJRlb5xgkk0NfAAA324"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=315
[Wed Sep 30 01:06:09.039453 2026] [security2:error] [pid 251754:tid 251867] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04ZOnWJRlb5xgkk0NfAAA324"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=315
[Wed Sep 30 01:06:09.047223 2026] [security2:error] [pid 251754:tid 251936] [client 155.190.6.18:50464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary04ZOnWJRlb5xgkk0NfQAAALc"]
[Wed Sep 30 01:06:09.047315 2026] [security2:error] [pid 251754:tid 251936] [client 155.190.6.18:50464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary04ZOnWJRlb5xgkk0NfQAAALc"]
[Wed Sep 30 01:06:09.123280 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.123557 2026] [access_compat:error] [pid 251754:tid 251984] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.207172 2026] [security2:error] [pid 251754:tid 252013] [client 20.214.109.68:59849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/lib.php"] [unique_id "ary04ZOnWJRlb5xgkk0NiQAAAQQ"]
[Wed Sep 30 01:06:09.218078 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.218514 2026] [access_compat:error] [pid 251754:tid 251968] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.232230 2026] [security2:error] [pid 251754:tid 251904] [client 20.219.2.60:18883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/t.php"] [unique_id "ary04ZOnWJRlb5xgkk0NjAAAAJc"]
[Wed Sep 30 01:06:09.255331 2026] [security2:error] [pid 251754:tid 251929] [client 103.159.192.142:58627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary04ZOnWJRlb5xgkk0NjQAAALA"]
[Wed Sep 30 01:06:09.255499 2026] [security2:error] [pid 251754:tid 251929] [client 103.159.192.142:58627] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary04ZOnWJRlb5xgkk0NjQAAALA"]
[Wed Sep 30 01:06:09.283240 2026] [security2:error] [pid 251754:tid 251902] [client 52.231.30.175:15489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/dex.php"] [unique_id "ary04ZOnWJRlb5xgkk0NkwAAAJU"]
[Wed Sep 30 01:06:09.283275 2026] [security2:error] [pid 251754:tid 251888] [client 74.225.148.80:13460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary04ZOnWJRlb5xgkk0NkgAAAIc"]
[Wed Sep 30 01:06:09.292041 2026] [security2:error] [pid 251754:tid 251964] [client 20.5.79.49:28292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary04ZOnWJRlb5xgkk0NlAAAANM"]
[Wed Sep 30 01:06:09.306702 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.307060 2026] [access_compat:error] [pid 251754:tid 251949] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.324028 2026] [security2:error] [pid 251754:tid 251954] [client 185.210.43.161:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary04ZOnWJRlb5xgkk0NmQAAAMk"]
[Wed Sep 30 01:06:09.337954 2026] [security2:error] [pid 251754:tid 251998] [client 13.70.1.101:18561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary04ZOnWJRlb5xgkk0NmgAAAPU"]
[Wed Sep 30 01:06:09.397463 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.397728 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.449094 2026] [security2:error] [pid 251754:tid 252008] [client 74.225.148.80:54586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary04ZOnWJRlb5xgkk0NnwAAAP8"]
[Wed Sep 30 01:06:09.487954 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.488217 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.577927 2026] [security2:error] [pid 251754:tid 251932] [client 52.231.30.175:63440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/key.php"] [unique_id "ary04ZOnWJRlb5xgkk0NowAAALM"]
[Wed Sep 30 01:06:09.578623 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.578890 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.609573 2026] [security2:error] [pid 251754:tid 251969] [client 20.5.79.49:28415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/shellalfa.php"] [unique_id "ary04ZOnWJRlb5xgkk0NpQAAANg"]
[Wed Sep 30 01:06:09.675182 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.675658 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.676388 2026] [security2:error] [pid 251754:tid 251920] [client 13.70.1.101:19351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary04ZOnWJRlb5xgkk0NqQAAAKc"]
[Wed Sep 30 01:06:09.759370 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.759639 2026] [access_compat:error] [pid 251754:tid 251944] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.769096 2026] [security2:error] [pid 251754:tid 251960] [client 74.225.148.80:13476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary04ZOnWJRlb5xgkk0NtQAAAM8"]
[Wed Sep 30 01:06:09.838320 2026] [security2:error] [pid 251754:tid 251900] [client 20.214.109.68:9919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/edit.php"] [unique_id "ary04ZOnWJRlb5xgkk0NugAAAJM"]
[Wed Sep 30 01:06:09.850129 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.850402 2026] [access_compat:error] [pid 251754:tid 251904] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.893187 2026] [security2:error] [pid 251754:tid 251888] [client 52.231.30.175:63453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/kir.php"] [unique_id "ary04ZOnWJRlb5xgkk0NvgAAAIc"]
[Wed Sep 30 01:06:09.912968 2026] [security2:error] [pid 251754:tid 251903] [client 74.225.148.80:52514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/aa.php"] [unique_id "ary04ZOnWJRlb5xgkk0NwQAAAJY"]
[Wed Sep 30 01:06:09.925628 2026] [security2:error] [pid 251754:tid 251972] [client 20.5.79.49:28328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/gfile.php"] [unique_id "ary04ZOnWJRlb5xgkk0NwgAAANs"]
[Wed Sep 30 01:06:09.944695 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:09.945159 2026] [access_compat:error] [pid 251754:tid 251954] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:09.982041 2026] [security2:error] [pid 251754:tid 251978] [client 43.104.4.201:37115] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary04ZOnWJRlb5xgkk0NxQAAAOE"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:06:10.008952 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.1.101:18593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary04pOnWJRlb5xgkk0NxwAAAKU"]
[Wed Sep 30 01:06:10.033123 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.033383 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.124446 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.124723 2026] [access_compat:error] [pid 251754:tid 251897] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.214274 2026] [security2:error] [pid 251754:tid 251927] [client 4.240.25.22:38788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/sb.php"] [unique_id "ary04pOnWJRlb5xgkk0NzQAAAK4"]
[Wed Sep 30 01:06:10.216329 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.216704 2026] [access_compat:error] [pid 251754:tid 251910] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.221508 2026] [security2:error] [pid 251754:tid 252002] [client 52.231.30.175:15725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/fling.php"] [unique_id "ary04pOnWJRlb5xgkk0NzgAAAPk"]
[Wed Sep 30 01:06:10.239259 2026] [security2:error] [pid 251754:tid 251800] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0NzwAAwys"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255399&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:06:10.239280 2026] [security2:error] [pid 251754:tid 251800] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0NzwAAwys"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255399&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:06:10.241285 2026] [security2:error] [pid 251754:tid 251986] [client 223.235.102.107:5083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N0AAAAOk"]
[Wed Sep 30 01:06:10.241382 2026] [security2:error] [pid 251754:tid 251986] [client 223.235.102.107:5083] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N0AAAAOk"]
[Wed Sep 30 01:06:10.243640 2026] [security2:error] [pid 251754:tid 251970] [client 20.5.79.49:28314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/admin/index.php"] [unique_id "ary04pOnWJRlb5xgkk0N0QAAANk"]
[Wed Sep 30 01:06:10.278832 2026] [security2:error] [pid 251754:tid 251932] [client 74.225.148.80:13502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N1gAAALM"]
[Wed Sep 30 01:06:10.307168 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.307435 2026] [access_compat:error] [pid 251754:tid 251969] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.343960 2026] [security2:error] [pid 251754:tid 251985] [client 13.70.1.101:19361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N2QAAAOg"]
[Wed Sep 30 01:06:10.347573 2026] [security2:error] [pid 251754:tid 251967] [client 20.214.109.68:9443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ioxi-o.php"] [unique_id "ary04pOnWJRlb5xgkk0N2gAAANY"]
[Wed Sep 30 01:06:10.373915 2026] [security2:error] [pid 251754:tid 251920] [client 74.225.148.80:62261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/z70.php"] [unique_id "ary04pOnWJRlb5xgkk0N2wAAAKc"]
[Wed Sep 30 01:06:10.397817 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.398089 2026] [access_compat:error] [pid 251754:tid 251987] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.463823 2026] [security2:error] [pid 251754:tid 251939] [client 20.219.2.60:11710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/55b76.php"] [unique_id "ary04pOnWJRlb5xgkk0N4AAAALo"]
[Wed Sep 30 01:06:10.467536 2026] [security2:error] [pid 251754:tid 251782] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary04pOnWJRlb5xgkk0N4QAAhRk"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D21995
[Wed Sep 30 01:06:10.489170 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.489428 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.506952 2026] [security2:error] [pid 251754:tid 251949] [client 116.197.133.25:57338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N4wAAAMQ"]
[Wed Sep 30 01:06:10.507078 2026] [security2:error] [pid 251754:tid 251949] [client 116.197.133.25:57338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary04pOnWJRlb5xgkk0N4wAAAMQ"]
[Wed Sep 30 01:06:10.550492 2026] [security2:error] [pid 251754:tid 251904] [client 52.231.30.175:15697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/btyuio.php"] [unique_id "ary04pOnWJRlb5xgkk0N6AAAAJc"]
[Wed Sep 30 01:06:10.570986 2026] [security2:error] [pid 251754:tid 251964] [client 20.5.79.49:28391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/.well-known/acme-challenge/bak.php"] [unique_id "ary04pOnWJRlb5xgkk0N7AAAANM"]
[Wed Sep 30 01:06:10.580275 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.580558 2026] [access_compat:error] [pid 251754:tid 251955] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.609225 2026] [security2:error] [pid 251754:tid 251971] [client 20.70.173.30:19153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/xiugai.php"] [unique_id "ary04pOnWJRlb5xgkk0N8AAAANo"]
[Wed Sep 30 01:06:10.658463 2026] [security2:error] [pid 251754:tid 252009] [client 13.70.1.101:19031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary04pOnWJRlb5xgkk0N8wAAAQA"]
[Wed Sep 30 01:06:10.671002 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.671304 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.762393 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.762660 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.802204 2026] [security2:error] [pid 251754:tid 251905] [client 74.225.148.80:13486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary04pOnWJRlb5xgkk0N_gAAAJg"]
[Wed Sep 30 01:06:10.854490 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.854776 2026] [access_compat:error] [pid 251754:tid 251962] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.858130 2026] [security2:error] [pid 251754:tid 251980] [client 74.225.148.80:62252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/f35.php"] [unique_id "ary04pOnWJRlb5xgkk0OAwAAAOM"]
[Wed Sep 30 01:06:10.860900 2026] [security2:error] [pid 251754:tid 251970] [client 177.81.72.191:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary04pOnWJRlb5xgkk0OBAAAANk"]
[Wed Sep 30 01:06:10.867394 2026] [security2:error] [pid 251754:tid 252008] [client 52.231.30.175:63444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/sm.php"] [unique_id "ary04pOnWJRlb5xgkk0OBQAAAP8"]
[Wed Sep 30 01:06:10.887998 2026] [security2:error] [pid 251754:tid 251940] [client 20.5.79.49:28298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/manager.php/error.php"] [unique_id "ary04pOnWJRlb5xgkk0OBwAAALs"]
[Wed Sep 30 01:06:10.902175 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.227.17:54820] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0OCAAAhgU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=341f2a224f5236665c4bed407f822d39&start=45&t=48
[Wed Sep 30 01:06:10.902222 2026] [security2:error] [pid 251754:tid 251762] [remote 74.7.227.17:54820] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0OCAAAhgU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=341f2a224f5236665c4bed407f822d39&start=45&t=48
[Wed Sep 30 01:06:10.941631 2026] [security2:error] [pid 251754:tid 251967] [client 45.138.12.40:39062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.uxk.xyk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary04pOnWJRlb5xgkk0ODQAAANY"]
[Wed Sep 30 01:06:10.944722 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:10.944982 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:10.973686 2026] [security2:error] [pid 251754:tid 251793] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0ODwAAkSQ"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=69673
[Wed Sep 30 01:06:10.973717 2026] [security2:error] [pid 251754:tid 251793] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary04pOnWJRlb5xgkk0ODwAAkSQ"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=69673
[Wed Sep 30 01:06:10.978374 2026] [security2:error] [pid 251754:tid 251920] [client 13.70.1.101:19359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary04pOnWJRlb5xgkk0OEAAAAKc"]
[Wed Sep 30 01:06:11.036740 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.037025 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.127051 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.127318 2026] [access_compat:error] [pid 251754:tid 251960] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.216035 2026] [security2:error] [pid 251754:tid 251993] [client 20.5.79.49:28334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/hroxw.php"] [unique_id "ary045OnWJRlb5xgkk0OGwAAAPA"]
[Wed Sep 30 01:06:11.219590 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.219871 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.220616 2026] [security2:error] [pid 251754:tid 251903] [client 52.231.30.175:63430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/a.php"] [unique_id "ary045OnWJRlb5xgkk0OHAAAAJY"]
[Wed Sep 30 01:06:11.254427 2026] [security2:error] [pid 251754:tid 251958] [client 20.219.2.60:19392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary045OnWJRlb5xgkk0OHQAAAM0"]
[Wed Sep 30 01:06:11.293602 2026] [security2:error] [pid 251754:tid 252011] [client 182.75.216.230:54965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary045OnWJRlb5xgkk0OHgAAAQI"]
[Wed Sep 30 01:06:11.293719 2026] [security2:error] [pid 251754:tid 252011] [client 182.75.216.230:54965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary045OnWJRlb5xgkk0OHgAAAQI"]
[Wed Sep 30 01:06:11.308193 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.308465 2026] [access_compat:error] [pid 251754:tid 251937] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.309518 2026] [security2:error] [pid 251754:tid 252004] [client 13.70.1.101:18605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/filemanager/dialog.php"] [unique_id "ary045OnWJRlb5xgkk0OIQAAAPs"]
[Wed Sep 30 01:06:11.349266 2026] [security2:error] [pid 251754:tid 252010] [client 74.225.148.80:54553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/adminfuns.php"] [unique_id "ary045OnWJRlb5xgkk0OJAAAAQE"]
[Wed Sep 30 01:06:11.350935 2026] [security2:error] [pid 251754:tid 251954] [client 20.214.109.68:59882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ajax.php"] [unique_id "ary045OnWJRlb5xgkk0OJQAAAMk"]
[Wed Sep 30 01:06:11.389349 2026] [security2:error] [pid 251754:tid 251986] [client 122.173.27.10:6738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary045OnWJRlb5xgkk0OJwAAAOk"]
[Wed Sep 30 01:06:11.390074 2026] [security2:error] [pid 251754:tid 251986] [client 122.173.27.10:6738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary045OnWJRlb5xgkk0OJwAAAOk"]
[Wed Sep 30 01:06:11.392487 2026] [security2:error] [pid 251754:tid 251924] [client 20.28.180.172:62394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/fs.php"] [unique_id "ary045OnWJRlb5xgkk0OKAAAAKs"]
[Wed Sep 30 01:06:11.400162 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.400433 2026] [access_compat:error] [pid 251754:tid 252005] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.454705 2026] [access_compat:error] [pid 251754:tid 251968] [client 47.79.13.176:33856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:11.454993 2026] [access_compat:error] [pid 251754:tid 251968] [client 47.79.13.176:33856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:11.490783 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.491065 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.506043 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.30.175:15785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/sb.php"] [unique_id "ary045OnWJRlb5xgkk0OMAAAAJs"]
[Wed Sep 30 01:06:11.528778 2026] [security2:error] [pid 251754:tid 251914] [client 20.5.79.49:28412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/update/wp-2019.php"] [unique_id "ary045OnWJRlb5xgkk0OMQAAAKE"]
[Wed Sep 30 01:06:11.582354 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.582633 2026] [access_compat:error] [pid 251754:tid 251941] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.584975 2026] [security2:error] [pid 251754:tid 251996] [client 74.225.148.80:13365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary045OnWJRlb5xgkk0ONQAAAPM"]
[Wed Sep 30 01:06:11.620205 2026] [security2:error] [pid 251754:tid 251948] [client 13.70.1.101:63053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/index/function.php"] [unique_id "ary045OnWJRlb5xgkk0OOwAAAMM"]
[Wed Sep 30 01:06:11.674908 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.675162 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.735282 2026] [security2:error] [pid 251754:tid 251969] [client 4.196.65.241:2082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/aqotrjkg.php"] [unique_id "ary045OnWJRlb5xgkk0OPQAAANg"]
[Wed Sep 30 01:06:11.771875 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.772142 2026] [access_compat:error] [pid 251754:tid 251920] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.778534 2026] [security2:error] [pid 251754:tid 251959] [client 52.231.30.175:63911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/av.php"] [unique_id "ary045OnWJRlb5xgkk0OQAAAAM4"]
[Wed Sep 30 01:06:11.785498 2026] [security2:error] [pid 251754:tid 252003] [client 20.214.109.68:9434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/install.php"] [unique_id "ary045OnWJRlb5xgkk0OQQAAAPo"]
[Wed Sep 30 01:06:11.834007 2026] [security2:error] [pid 251754:tid 251886] [client 74.225.148.80:54577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/av.php"] [unique_id "ary045OnWJRlb5xgkk0ORgAAAIU"]
[Wed Sep 30 01:06:11.848434 2026] [security2:error] [pid 251754:tid 251895] [client 20.5.79.49:28289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/403.php"] [unique_id "ary045OnWJRlb5xgkk0OSAAAAI4"]
[Wed Sep 30 01:06:11.860427 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.860894 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.865415 2026] [security2:error] [pid 251754:tid 251907] [client 4.240.25.22:18695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-content/index.php"] [unique_id "ary045OnWJRlb5xgkk0OTQAAAJo"]
[Wed Sep 30 01:06:11.896514 2026] [autoindex:error] [pid 251754:tid 251985] [client 35.187.36.114:42200] AH01276: Cannot serve directory /home4/ewjsxnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:06:11.917661 2026] [security2:error] [pid 251754:tid 251903] [remote 168.100.149.143:34020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary045OnWJRlb5xgkk0ORAAA1j0"]
[Wed Sep 30 01:06:11.948944 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:11.949301 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:11.953081 2026] [security2:error] [pid 251754:tid 252010] [client 13.70.1.101:18611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary045OnWJRlb5xgkk0OVwAAAQE"]
[Wed Sep 30 01:06:11.956991 2026] [security2:error] [pid 251754:tid 251938] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary045OnWJRlb5xgkk0OWAAAALk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:11.970326 2026] [autoindex:error] [pid 251754:tid 251976] [client 35.187.36.114:42204] AH01276: Cannot serve directory /home4/ewjsxnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:06:12.043131 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.043560 2026] [access_compat:error] [pid 251754:tid 251950] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.059906 2026] [security2:error] [pid 251754:tid 251899] [client 104.208.65.139:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/imageskir.php"] [unique_id "ary05JOnWJRlb5xgkk0OZAAAAJI"]
[Wed Sep 30 01:06:12.104571 2026] [security2:error] [pid 251754:tid 251923] [client 52.231.30.175:15753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/b8.php"] [unique_id "ary05JOnWJRlb5xgkk0OZwAAAKo"]
[Wed Sep 30 01:06:12.109385 2026] [security2:error] [pid 251754:tid 251951] [client 74.225.148.80:11316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/filemanager/dialog.php"] [unique_id "ary05JOnWJRlb5xgkk0OaQAAAMY"]
[Wed Sep 30 01:06:12.124243 2026] [security2:error] [pid 251754:tid 251909] [client 201.32.215.149:8057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0ObAAAAJw"]
[Wed Sep 30 01:06:12.124385 2026] [security2:error] [pid 251754:tid 251909] [client 201.32.215.149:8057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0ObAAAAJw"]
[Wed Sep 30 01:06:12.129530 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.129968 2026] [access_compat:error] [pid 251754:tid 251981] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.170821 2026] [security2:error] [pid 251754:tid 251887] [client 20.5.79.49:28262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/num.php"] [unique_id "ary05JOnWJRlb5xgkk0ObwAAAIY"]
[Wed Sep 30 01:06:12.200570 2026] [security2:error] [pid 251754:tid 252012] [client 20.219.2.60:11680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tt.php"] [unique_id "ary05JOnWJRlb5xgkk0OcAAAAQM"]
[Wed Sep 30 01:06:12.221161 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.221436 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.286203 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.1.101:19056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary05JOnWJRlb5xgkk0OdAAAAO0"]
[Wed Sep 30 01:06:12.295675 2026] [security2:error] [pid 251754:tid 251810] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary05JOnWJRlb5xgkk0OdQAA0jU"], referer: https://forum.torquayfans.com/viewtopic.php?p=301313
[Wed Sep 30 01:06:12.295707 2026] [security2:error] [pid 251754:tid 251810] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary05JOnWJRlb5xgkk0OdQAA0jU"], referer: https://forum.torquayfans.com/viewtopic.php?p=301313
[Wed Sep 30 01:06:12.306097 2026] [security2:error] [pid 251754:tid 251895] [client 20.70.173.30:60024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/echkm.php"] [unique_id "ary05JOnWJRlb5xgkk0OeAAAAI4"]
[Wed Sep 30 01:06:12.312240 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.312516 2026] [access_compat:error] [pid 251754:tid 251940] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.321311 2026] [security2:error] [pid 251754:tid 251960] [client 74.225.148.80:59227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/dex.php"] [unique_id "ary05JOnWJRlb5xgkk0OeQAAAM8"]
[Wed Sep 30 01:06:12.375054 2026] [security2:error] [pid 251754:tid 251964] [client 52.231.30.175:63901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp_blog_footer.php"] [unique_id "ary05JOnWJRlb5xgkk0OfgAAANM"]
[Wed Sep 30 01:06:12.402728 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.402736 2026] [security2:error] [pid 251754:tid 251961] [client 152.59.165.7:62553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OgAAAANA"]
[Wed Sep 30 01:06:12.402835 2026] [security2:error] [pid 251754:tid 251961] [client 152.59.165.7:62553] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OgAAAANA"]
[Wed Sep 30 01:06:12.403034 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.480565 2026] [ssl:error] [pid 251754:tid 251917] [client 216.25.124.26:29254] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autoconfig.rla.yqe.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:06:12.490130 2026] [security2:error] [pid 251754:tid 251939] [client 20.5.79.49:28297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/0x0x.php"] [unique_id "ary05JOnWJRlb5xgkk0OhAAAALo"]
[Wed Sep 30 01:06:12.492827 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.493096 2026] [access_compat:error] [pid 251754:tid 251976] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.575133 2026] [access_compat:error] [pid 251754:tid 251915] [client 47.79.201.32:33694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:06:12.575411 2026] [access_compat:error] [pid 251754:tid 251915] [client 47.79.201.32:33694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:06:12.584988 2026] [security2:error] [pid 251754:tid 251912] [client 74.225.148.80:13498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/index/function.php"] [unique_id "ary05JOnWJRlb5xgkk0OjQAAAJ8"]
[Wed Sep 30 01:06:12.586964 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.587388 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.622794 2026] [security2:error] [pid 251754:tid 251914] [client 13.70.1.101:19028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary05JOnWJRlb5xgkk0OkgAAAKE"]
[Wed Sep 30 01:06:12.674568 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.674892 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.682630 2026] [security2:error] [pid 251754:tid 251942] [client 52.231.30.175:63484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/0.php"] [unique_id "ary05JOnWJRlb5xgkk0OlwAAAL0"]
[Wed Sep 30 01:06:12.691772 2026] [security2:error] [pid 251754:tid 251987] [client 20.214.109.68:60602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/public/wp-blog.php"] [unique_id "ary05JOnWJRlb5xgkk0OmQAAAOo"]
[Wed Sep 30 01:06:12.731991 2026] [security2:error] [pid 251754:tid 251982] [client 20.219.2.60:18862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/public/ws49.php"] [unique_id "ary05JOnWJRlb5xgkk0OnAAAAOU"]
[Wed Sep 30 01:06:12.767543 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.767837 2026] [access_compat:error] [pid 251754:tid 251980] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.782076 2026] [security2:error] [pid 251754:tid 251909] [client 74.225.148.80:51659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/chosen.php"] [unique_id "ary05JOnWJRlb5xgkk0OpQAAAJw"]
[Wed Sep 30 01:06:12.816029 2026] [security2:error] [pid 251754:tid 251958] [client 20.5.79.49:28291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/xwpg.php"] [unique_id "ary05JOnWJRlb5xgkk0OqgAAAM0"]
[Wed Sep 30 01:06:12.825404 2026] [security2:error] [pid 251754:tid 251892] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary05JOnWJRlb5xgkk0OrAAAAIs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:12.856132 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.856383 2026] [access_compat:error] [pid 251754:tid 251898] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.869776 2026] [security2:error] [pid 251754:tid 251916] [client 20.219.2.60:11376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/maul.php"] [unique_id "ary05JOnWJRlb5xgkk0OsAAAAKM"]
[Wed Sep 30 01:06:12.870293 2026] [security2:error] [pid 251754:tid 251880] [remote 74.7.227.56:54634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary05JOnWJRlb5xgkk0OsQAAzns"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=600
[Wed Sep 30 01:06:12.922518 2026] [security2:error] [pid 251754:tid 251993] [client 203.122.45.246:57102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OsgAAAPA"]
[Wed Sep 30 01:06:12.922622 2026] [security2:error] [pid 251754:tid 251993] [client 203.122.45.246:57102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OsgAAAPA"]
[Wed Sep 30 01:06:12.932351 2026] [security2:error] [pid 251754:tid 251944] [client 161.118.214.16:62901] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lwt.vlz.mybluehost.me"] [uri "/"] [unique_id "ary05JOnWJRlb5xgkk0OswAAAL8"]
[Wed Sep 30 01:06:12.935667 2026] [security2:error] [pid 251754:tid 251910] [client 13.70.1.101:19382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/about/function.php"] [unique_id "ary05JOnWJRlb5xgkk0OtAAAAJ0"]
[Wed Sep 30 01:06:12.949190 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:12.949460 2026] [access_compat:error] [pid 251754:tid 251991] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:12.996994 2026] [security2:error] [pid 251754:tid 251952] [client 202.179.95.79:59508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OuAAAAMc"]
[Wed Sep 30 01:06:12.997653 2026] [security2:error] [pid 251754:tid 251952] [client 202.179.95.79:59508] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary05JOnWJRlb5xgkk0OuAAAAMc"]
[Wed Sep 30 01:06:13.039082 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.039348 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.053454 2026] [security2:error] [pid 251754:tid 251937] [client 52.231.30.175:15510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/fms.php"] [unique_id "ary05ZOnWJRlb5xgkk0OvwAAALg"]
[Wed Sep 30 01:06:13.058833 2026] [security2:error] [pid 251754:tid 251938] [client 20.194.30.107:1616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/new.php"] [unique_id "ary05ZOnWJRlb5xgkk0OwQAAALk"]
[Wed Sep 30 01:06:13.072866 2026] [security2:error] [pid 251754:tid 251955] [client 93.152.80.142:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary05ZOnWJRlb5xgkk0OxQAAAMo"]
[Wed Sep 30 01:06:13.133311 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.133577 2026] [access_compat:error] [pid 251754:tid 251914] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.137888 2026] [security2:error] [pid 251754:tid 251950] [client 20.5.79.49:28414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/public/filemanager.php"] [unique_id "ary05ZOnWJRlb5xgkk0OzwAAAMU"]
[Wed Sep 30 01:06:13.152045 2026] [security2:error] [pid 251754:tid 251949] [client 74.225.148.80:13477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary05ZOnWJRlb5xgkk0O0wAAAMQ"]
[Wed Sep 30 01:06:13.238508 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.238984 2026] [access_compat:error] [pid 251754:tid 251919] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.259833 2026] [security2:error] [pid 251754:tid 251958] [client 74.225.148.80:54572] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "ferrari250california.paulmercer.me"] [uri "/1.php"] [unique_id "ary05ZOnWJRlb5xgkk0O4QAAAM0"]
[Wed Sep 30 01:06:13.259965 2026] [security2:error] [pid 251754:tid 251958] [client 74.225.148.80:54572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/1.php"] [unique_id "ary05ZOnWJRlb5xgkk0O4QAAAM0"]
[Wed Sep 30 01:06:13.262062 2026] [security2:error] [pid 251754:tid 252013] [client 13.70.1.101:19035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary05ZOnWJRlb5xgkk0O4gAAAQQ"]
[Wed Sep 30 01:06:13.271574 2026] [security2:error] [pid 251754:tid 251945] [client 20.198.74.230:23912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/jlex.php"] [unique_id "ary05ZOnWJRlb5xgkk0O4wAAAMA"]
[Wed Sep 30 01:06:13.296716 2026] [security2:error] [pid 251754:tid 251891] [client 130.131.227.119:39142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/alfa.php"] [unique_id "ary05ZOnWJRlb5xgkk0O5QAAAIo"]
[Wed Sep 30 01:06:13.320959 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.321379 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.324985 2026] [security2:error] [pid 251754:tid 251895] [client 52.231.30.175:15509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/xyn.php"] [unique_id "ary05ZOnWJRlb5xgkk0O6AAAAI4"]
[Wed Sep 30 01:06:13.349345 2026] [security2:error] [pid 251754:tid 251994] [client 130.131.227.119:39151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "ary05ZOnWJRlb5xgkk0O6wAAAPE"]
[Wed Sep 30 01:06:13.409029 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.409291 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.413785 2026] [security2:error] [pid 251754:tid 251851] [remote 57.141.14.76:54900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary05ZOnWJRlb5xgkk0O7gAAv14"]
[Wed Sep 30 01:06:13.437720 2026] [security2:error] [pid 251754:tid 251903] [client 20.214.109.68:61139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/nw.php"] [unique_id "ary05ZOnWJRlb5xgkk0O8gAAAJY"]
[Wed Sep 30 01:06:13.460106 2026] [security2:error] [pid 251754:tid 251986] [client 20.5.79.49:28294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/packed.php"] [unique_id "ary05ZOnWJRlb5xgkk0O9AAAAOk"]
[Wed Sep 30 01:06:13.480299 2026] [security2:error] [pid 251754:tid 251936] [client 45.138.12.40:26864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.vfm.rhu.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary05ZOnWJRlb5xgkk0O9QAAALc"]
[Wed Sep 30 01:06:13.492204 2026] [security2:error] [pid 251754:tid 252000] [client 154.28.65.223:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary05ZOnWJRlb5xgkk0O9gAAAPc"]
[Wed Sep 30 01:06:13.499580 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.499861 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.509378 2026] [security2:error] [pid 251754:tid 251904] [client 130.131.227.119:40614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/lock360.php"] [unique_id "ary05ZOnWJRlb5xgkk0O-AAAAJc"]
[Wed Sep 30 01:06:13.580910 2026] [security2:error] [pid 251754:tid 251977] [client 13.70.1.101:19345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin/function.php"] [unique_id "ary05ZOnWJRlb5xgkk0O-gAAAOA"]
[Wed Sep 30 01:06:13.590877 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.591154 2026] [access_compat:error] [pid 251754:tid 251982] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.651038 2026] [security2:error] [pid 251754:tid 251908] [client 74.225.148.80:11275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary05ZOnWJRlb5xgkk0PAAAAAJs"]
[Wed Sep 30 01:06:13.670222 2026] [security2:error] [pid 251754:tid 251887] [client 130.131.227.119:39109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/flower.php"] [unique_id "ary05ZOnWJRlb5xgkk0PAgAAAIY"]
[Wed Sep 30 01:06:13.672061 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.30.175:63482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/min.php"] [unique_id "ary05ZOnWJRlb5xgkk0PAwAAAOI"]
[Wed Sep 30 01:06:13.682396 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.682675 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.732932 2026] [security2:error] [pid 251754:tid 251893] [client 74.225.148.80:54579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/radio.php"] [unique_id "ary05ZOnWJRlb5xgkk0PBwAAAIw"]
[Wed Sep 30 01:06:13.773525 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.773800 2026] [access_compat:error] [pid 251754:tid 251999] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.784798 2026] [security2:error] [pid 251754:tid 251945] [client 20.5.79.49:28384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/vaza.php"] [unique_id "ary05ZOnWJRlb5xgkk0PCQAAAMA"]
[Wed Sep 30 01:06:13.816126 2026] [security2:error] [pid 251754:tid 251890] [client 116.193.128.26:57991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary05ZOnWJRlb5xgkk0PDAAAAIk"]
[Wed Sep 30 01:06:13.816446 2026] [security2:error] [pid 251754:tid 251890] [client 116.193.128.26:57991] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary05ZOnWJRlb5xgkk0PDAAAAIk"]
[Wed Sep 30 01:06:13.822769 2026] [security2:error] [pid 251754:tid 251906] [client 20.28.180.172:29578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary05ZOnWJRlb5xgkk0PDQAAAJk"]
[Wed Sep 30 01:06:13.825740 2026] [security2:error] [pid 251754:tid 251954] [client 130.131.227.119:39107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/13.php"] [unique_id "ary05ZOnWJRlb5xgkk0PDgAAAMk"]
[Wed Sep 30 01:06:13.867262 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.867690 2026] [access_compat:error] [pid 251754:tid 252001] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.903650 2026] [security2:error] [pid 251754:tid 251911] [client 13.70.1.101:63065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/9.php"] [unique_id "ary05ZOnWJRlb5xgkk0PFQAAAJ4"]
[Wed Sep 30 01:06:13.932952 2026] [security2:error] [pid 251754:tid 251829] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary05ZOnWJRlb5xgkk0PFwAAz0g"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D239765
[Wed Sep 30 01:06:13.932985 2026] [security2:error] [pid 251754:tid 251829] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary05ZOnWJRlb5xgkk0PFwAAz0g"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D239765
[Wed Sep 30 01:06:13.950760 2026] [security2:error] [pid 251754:tid 251970] [client 52.231.30.175:15508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-whe.php"] [unique_id "ary05ZOnWJRlb5xgkk0PGgAAANk"]
[Wed Sep 30 01:06:13.955337 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:13.955625 2026] [access_compat:error] [pid 251754:tid 251994] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:13.987406 2026] [security2:error] [pid 251754:tid 251993] [client 130.131.227.119:40586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/cc.php"] [unique_id "ary05ZOnWJRlb5xgkk0PGwAAAPA"]
[Wed Sep 30 01:06:14.046048 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.046317 2026] [access_compat:error] [pid 251754:tid 252012] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.077823 2026] [security2:error] [pid 251754:tid 251972] [client 103.159.192.142:59120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary05pOnWJRlb5xgkk0PJQAAANs"]
[Wed Sep 30 01:06:14.077949 2026] [security2:error] [pid 251754:tid 251972] [client 103.159.192.142:59120] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary05pOnWJRlb5xgkk0PJQAAANs"]
[Wed Sep 30 01:06:14.119080 2026] [security2:error] [pid 251754:tid 252000] [client 20.5.79.49:28317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ws60.php"] [unique_id "ary05pOnWJRlb5xgkk0PKQAAAPc"]
[Wed Sep 30 01:06:14.136979 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.137252 2026] [access_compat:error] [pid 251754:tid 251917] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.144363 2026] [security2:error] [pid 251754:tid 251975] [client 130.131.227.119:39106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/gecko-new.php"] [unique_id "ary05pOnWJRlb5xgkk0PLAAAAN4"]
[Wed Sep 30 01:06:14.164053 2026] [security2:error] [pid 251754:tid 251942] [client 4.240.25.22:38785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/ops.php"] [unique_id "ary05pOnWJRlb5xgkk0PLQAAAL0"]
[Wed Sep 30 01:06:14.213585 2026] [security2:error] [pid 251754:tid 251996] [client 74.225.148.80:13352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary05pOnWJRlb5xgkk0PLwAAAPM"]
[Wed Sep 30 01:06:14.217451 2026] [security2:error] [pid 251754:tid 251980] [client 74.225.148.80:54556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/blacks.php"] [unique_id "ary05pOnWJRlb5xgkk0PMwAAAOM"]
[Wed Sep 30 01:06:14.220700 2026] [security2:error] [pid 251754:tid 251918] [client 13.70.1.101:18623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary05pOnWJRlb5xgkk0PNAAAAKU"]
[Wed Sep 30 01:06:14.228753 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.229020 2026] [access_compat:error] [pid 251754:tid 251929] [client 216.73.216.46:41762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.241284 2026] [security2:error] [pid 251754:tid 251928] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary05pOnWJRlb5xgkk0POwAAAK8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:14.275256 2026] [security2:error] [pid 251754:tid 251927] [client 52.231.30.175:63460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-filemanager1.php"] [unique_id "ary05pOnWJRlb5xgkk0PQAAAAK4"]
[Wed Sep 30 01:06:14.286552 2026] [security2:error] [pid 251754:tid 251852] [remote 64.23.166.180:46896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-4c037f99.dennis-cooper.com"] [uri "/.env"] [unique_id "ary05pOnWJRlb5xgkk0PQQAAlF8"]
[Wed Sep 30 01:06:14.304225 2026] [security2:error] [pid 251754:tid 251984] [client 130.131.227.119:40606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-content.php.php"] [unique_id "ary05pOnWJRlb5xgkk0PQwAAAOc"]
[Wed Sep 30 01:06:14.321304 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.321568 2026] [access_compat:error] [pid 251754:tid 251892] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.382474 2026] [security2:error] [pid 251754:tid 251987] [client 20.214.109.68:9453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tool.php"] [unique_id "ary05pOnWJRlb5xgkk0PRQAAAOo"]
[Wed Sep 30 01:06:14.394308 2026] [security2:error] [pid 251754:tid 251941] [remote 168.100.149.103:34648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary05pOnWJRlb5xgkk0PQgABAHA"]
[Wed Sep 30 01:06:14.411178 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.411620 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.440459 2026] [security2:error] [pid 251754:tid 251991] [client 20.5.79.49:28362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/twentytwentythree/styles/about.php"] [unique_id "ary05pOnWJRlb5xgkk0PSgAAAO4"]
[Wed Sep 30 01:06:14.450712 2026] [security2:error] [pid 251754:tid 251886] [client 130.131.227.119:39140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/link.php"] [unique_id "ary05pOnWJRlb5xgkk0PTAAAAIU"]
[Wed Sep 30 01:06:14.455838 2026] [security2:error] [pid 251754:tid 251907] [client 20.219.2.60:11350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/5b9ac.php"] [unique_id "ary05pOnWJRlb5xgkk0PTQAAAJo"]
[Wed Sep 30 01:06:14.501947 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.502227 2026] [access_compat:error] [pid 251754:tid 251899] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.569166 2026] [security2:error] [pid 251754:tid 251990] [client 13.70.1.101:19032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/.well-known/log.php"] [unique_id "ary05pOnWJRlb5xgkk0PUAAAAO0"]
[Wed Sep 30 01:06:14.569561 2026] [security2:error] [pid 251754:tid 251913] [client 52.231.30.175:15503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-freya.php"] [unique_id "ary05pOnWJRlb5xgkk0PUQAAAKA"]
[Wed Sep 30 01:06:14.589907 2026] [security2:error] [pid 251754:tid 251759] [remote 74.7.241.5:54328] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary05pOnWJRlb5xgkk0PUwAAswI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297724&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:14.589931 2026] [security2:error] [pid 251754:tid 251759] [remote 74.7.241.5:54328] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary05pOnWJRlb5xgkk0PUwAAswI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297724&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:14.591888 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.592141 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.599990 2026] [security2:error] [pid 251754:tid 251955] [client 130.131.227.119:17775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-fmfile.php"] [unique_id "ary05pOnWJRlb5xgkk0PVQAAAMo"]
[Wed Sep 30 01:06:14.676441 2026] [security2:error] [pid 251754:tid 251917] [client 74.225.148.80:62223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/alfa.php"] [unique_id "ary05pOnWJRlb5xgkk0PWgAAAKQ"]
[Wed Sep 30 01:06:14.685078 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.685326 2026] [access_compat:error] [pid 251754:tid 251889] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.698511 2026] [security2:error] [pid 251754:tid 251924] [client 74.225.148.80:13360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/about/function.php"] [unique_id "ary05pOnWJRlb5xgkk0PXwAAAKs"]
[Wed Sep 30 01:06:14.724455 2026] [security2:error] [pid 251754:tid 251904] [client 20.28.180.172:62378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/byypas.php"] [unique_id "ary05pOnWJRlb5xgkk0PYAAAAJc"]
[Wed Sep 30 01:06:14.741271 2026] [security2:error] [pid 251754:tid 251996] [client 216.73.216.46:41762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary05pOnWJRlb5xgkk0PYQAAAPM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL3NlbGYvcm9vdC92YXIvdG1w
[Wed Sep 30 01:06:14.756435 2026] [security2:error] [pid 251754:tid 251980] [client 20.5.79.49:28308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/v3.php"] [unique_id "ary05pOnWJRlb5xgkk0PYgAAAOM"]
[Wed Sep 30 01:06:14.761892 2026] [security2:error] [pid 251754:tid 251895] [client 130.131.227.119:40597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wi.php"] [unique_id "ary05pOnWJRlb5xgkk0PZAAAAI4"]
[Wed Sep 30 01:06:14.773629 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.773915 2026] [access_compat:error] [pid 251754:tid 251977] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.835059 2026] [security2:error] [pid 251754:tid 251982] [client 52.231.30.175:15738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/admin.php/admin.php"] [unique_id "ary05pOnWJRlb5xgkk0PZgAAAOU"]
[Wed Sep 30 01:06:14.866172 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.866446 2026] [access_compat:error] [pid 251754:tid 251958] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:14.888683 2026] [security2:error] [pid 251754:tid 252013] [client 13.70.1.101:63098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/class.php"] [unique_id "ary05pOnWJRlb5xgkk0PbAAAAQQ"]
[Wed Sep 30 01:06:14.920244 2026] [security2:error] [pid 251754:tid 251981] [client 130.131.227.119:36203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/function.php"] [unique_id "ary05pOnWJRlb5xgkk0PbgAAAOQ"]
[Wed Sep 30 01:06:14.957243 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:14.957518 2026] [access_compat:error] [pid 251754:tid 251973] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.050832 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.051135 2026] [access_compat:error] [pid 251754:tid 251989] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.077326 2026] [security2:error] [pid 251754:tid 251892] [client 20.5.79.49:28364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/feed.php"] [unique_id "ary055OnWJRlb5xgkk0PdwAAAIs"]
[Wed Sep 30 01:06:15.081320 2026] [security2:error] [pid 251754:tid 252007] [client 130.131.227.119:40012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-includes/about.php"] [unique_id "ary055OnWJRlb5xgkk0PeAAAAP4"]
[Wed Sep 30 01:06:15.116537 2026] [security2:error] [pid 251754:tid 251941] [client 52.231.30.175:63918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/faiy.php"] [unique_id "ary055OnWJRlb5xgkk0PfQAAALw"]
[Wed Sep 30 01:06:15.139846 2026] [security2:error] [pid 251754:tid 251993] [client 45.138.12.43:49474] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.veq.vgm.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary055OnWJRlb5xgkk0PgAAAAPA"]
[Wed Sep 30 01:06:15.140144 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.140392 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.161203 2026] [security2:error] [pid 251754:tid 251937] [client 74.225.148.80:17288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wp_blog_footer.php"] [unique_id "ary055OnWJRlb5xgkk0PhAAAALg"]
[Wed Sep 30 01:06:15.209298 2026] [security2:error] [pid 251754:tid 252004] [client 13.70.1.101:18613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/lock360.php"] [unique_id "ary055OnWJRlb5xgkk0PhgAAAPs"]
[Wed Sep 30 01:06:15.231542 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.231825 2026] [access_compat:error] [pid 251754:tid 251963] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.232639 2026] [security2:error] [pid 251754:tid 251915] [client 130.131.227.119:40031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/.well-known/classwithtostring.php"] [unique_id "ary055OnWJRlb5xgkk0PiAAAAKI"]
[Wed Sep 30 01:06:15.242646 2026] [security2:error] [pid 251754:tid 251939] [client 74.225.148.80:11285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary055OnWJRlb5xgkk0PigAAALo"]
[Wed Sep 30 01:06:15.276387 2026] [security2:error] [pid 251754:tid 252002] [client 187.44.90.85:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary055OnWJRlb5xgkk0PjAAAAPk"]
[Wed Sep 30 01:06:15.303029 2026] [security2:error] [pid 251754:tid 251955] [client 104.208.65.139:41040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/backup-helper.php"] [unique_id "ary055OnWJRlb5xgkk0PjwAAAMo"]
[Wed Sep 30 01:06:15.324620 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.325055 2026] [access_compat:error] [pid 251754:tid 252000] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.378348 2026] [security2:error] [pid 251754:tid 251901] [client 43.227.131.37:41648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PkgAAAJQ"]
[Wed Sep 30 01:06:15.378480 2026] [security2:error] [pid 251754:tid 251901] [client 43.227.131.37:41648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PkgAAAJQ"]
[Wed Sep 30 01:06:15.398032 2026] [security2:error] [pid 251754:tid 251929] [client 20.5.79.49:28327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ext.php"] [unique_id "ary055OnWJRlb5xgkk0PlAAAALA"]
[Wed Sep 30 01:06:15.399271 2026] [security2:error] [pid 251754:tid 251994] [client 52.231.30.175:63468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/file-mancvgertdxz.php"] [unique_id "ary055OnWJRlb5xgkk0PlQAAAPE"]
[Wed Sep 30 01:06:15.406670 2026] [http2:warn] [pid 251754:tid 251926] [client 52.167.144.188:58894] h2_stream(251754-226-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:15.413582 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.413887 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.437377 2026] [security2:error] [pid 251754:tid 251949] [client 130.131.227.119:39152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/403.php"] [unique_id "ary055OnWJRlb5xgkk0PlwAAAMQ"]
[Wed Sep 30 01:06:15.485873 2026] [security2:error] [pid 251754:tid 251933] [client 49.205.105.16:14115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PmwAAALQ"]
[Wed Sep 30 01:06:15.485984 2026] [security2:error] [pid 251754:tid 251933] [client 49.205.105.16:14115] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PmwAAALQ"]
[Wed Sep 30 01:06:15.502602 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.502881 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.545177 2026] [security2:error] [pid 251754:tid 251999] [client 20.219.2.60:11365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/hehe.php"] [unique_id "ary055OnWJRlb5xgkk0PowAAAPY"]
[Wed Sep 30 01:06:15.557427 2026] [security2:error] [pid 251754:tid 251910] [client 223.181.60.167:12650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PogAAAJ0"]
[Wed Sep 30 01:06:15.557570 2026] [security2:error] [pid 251754:tid 251910] [client 223.181.60.167:12650] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PogAAAJ0"]
[Wed Sep 30 01:06:15.559449 2026] [security2:error] [pid 251754:tid 251968] [client 13.70.1.101:19375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/system_log.php"] [unique_id "ary055OnWJRlb5xgkk0PpAAAANc"]
[Wed Sep 30 01:06:15.595574 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.595892 2026] [access_compat:error] [pid 251754:tid 251890] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.604707 2026] [security2:error] [pid 251754:tid 251918] [client 130.131.227.119:36204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/input.php"] [unique_id "ary055OnWJRlb5xgkk0PpgAAAKU"]
[Wed Sep 30 01:06:15.625779 2026] [security2:error] [pid 251754:tid 251941] [client 74.225.148.80:17330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/b8.php"] [unique_id "ary055OnWJRlb5xgkk0PpwAAALw"]
[Wed Sep 30 01:06:15.686456 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.686745 2026] [access_compat:error] [pid 251754:tid 251923] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.692760 2026] [security2:error] [pid 251754:tid 251908] [client 52.231.30.175:63487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/myglu.php"] [unique_id "ary055OnWJRlb5xgkk0PrQAAAJs"]
[Wed Sep 30 01:06:15.726444 2026] [security2:error] [pid 251754:tid 251907] [client 106.214.2.47:20322] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PrgAAAJo"]
[Wed Sep 30 01:06:15.726573 2026] [security2:error] [pid 251754:tid 251907] [client 106.214.2.47:20322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary055OnWJRlb5xgkk0PrgAAAJo"]
[Wed Sep 30 01:06:15.729264 2026] [security2:error] [pid 251754:tid 251911] [client 20.5.79.49:28386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/media.php"] [unique_id "ary055OnWJRlb5xgkk0PrwAAAJ4"]
[Wed Sep 30 01:06:15.765833 2026] [security2:error] [pid 251754:tid 251984] [client 130.131.227.119:40045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "ary055OnWJRlb5xgkk0PsAAAAOc"]
[Wed Sep 30 01:06:15.776318 2026] [security2:error] [pid 251754:tid 252004] [client 74.225.148.80:11286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/admin/function.php"] [unique_id "ary055OnWJRlb5xgkk0PswAAAPs"]
[Wed Sep 30 01:06:15.776370 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.776633 2026] [access_compat:error] [pid 251754:tid 251985] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.819569 2026] [security2:error] [pid 251754:tid 251919] [client 20.219.2.60:18874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gifclass.php"] [unique_id "ary055OnWJRlb5xgkk0PtgAAAKY"]
[Wed Sep 30 01:06:15.869219 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.869545 2026] [access_compat:error] [pid 251754:tid 252002] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:15.931092 2026] [security2:error] [pid 251754:tid 251990] [client 130.131.227.119:17762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "ary055OnWJRlb5xgkk0PvwAAAO0"]
[Wed Sep 30 01:06:15.958274 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:15.958544 2026] [access_compat:error] [pid 251754:tid 251986] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.013845 2026] [security2:error] [pid 251754:tid 251953] [client 52.231.30.175:15499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/bnmtp.php"] [unique_id "ary06JOnWJRlb5xgkk0PwQAAAMg"]
[Wed Sep 30 01:06:16.049312 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.049577 2026] [access_compat:error] [pid 251754:tid 251901] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.090624 2026] [security2:error] [pid 251754:tid 251950] [client 130.131.227.119:40024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/01.php"] [unique_id "ary06JOnWJRlb5xgkk0PxwAAAMU"]
[Wed Sep 30 01:06:16.096046 2026] [security2:error] [pid 251754:tid 251998] [client 74.225.148.80:54534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/xex.php"] [unique_id "ary06JOnWJRlb5xgkk0PyAAAAPU"]
[Wed Sep 30 01:06:16.133246 2026] [security2:error] [pid 251754:tid 251949] [client 20.214.109.68:62430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/drhunthq.php"] [unique_id "ary06JOnWJRlb5xgkk0PyQAAAMQ"]
[Wed Sep 30 01:06:16.142301 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.142558 2026] [access_compat:error] [pid 251754:tid 251886] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.210012 2026] [security2:error] [pid 251754:tid 251933] [client 45.138.12.40:39128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.vfm.rhu.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary06JOnWJRlb5xgkk0PzwAAALQ"]
[Wed Sep 30 01:06:16.216143 2026] [security2:error] [pid 251754:tid 251891] [client 20.5.79.49:28411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "ary06JOnWJRlb5xgkk0P0AAAAIo"]
[Wed Sep 30 01:06:16.231760 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.232037 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.232089 2026] [security2:error] [pid 251754:tid 251981] [client 4.240.25.22:13764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/sxxb.php"] [unique_id "ary06JOnWJRlb5xgkk0P0wAAAOQ"]
[Wed Sep 30 01:06:16.253120 2026] [security2:error] [pid 251754:tid 251958] [client 130.131.227.119:40630] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "bayareapsychconsult.com"] [uri "/1.php"] [unique_id "ary06JOnWJRlb5xgkk0P1wAAAM0"]
[Wed Sep 30 01:06:16.253214 2026] [security2:error] [pid 251754:tid 251958] [client 130.131.227.119:40630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/1.php"] [unique_id "ary06JOnWJRlb5xgkk0P1wAAAM0"]
[Wed Sep 30 01:06:16.280506 2026] [security2:error] [pid 251754:tid 251912] [client 52.231.30.175:15777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/zeta.php"] [unique_id "ary06JOnWJRlb5xgkk0P2AAAAJ8"]
[Wed Sep 30 01:06:16.314014 2026] [security2:error] [pid 251754:tid 251944] [client 223.181.30.165:16465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary06JOnWJRlb5xgkk0P2gAAAL8"]
[Wed Sep 30 01:06:16.314190 2026] [security2:error] [pid 251754:tid 251944] [client 223.181.30.165:16465] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary06JOnWJRlb5xgkk0P2gAAAL8"]
[Wed Sep 30 01:06:16.331317 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.331771 2026] [access_compat:error] [pid 251754:tid 252009] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.389908 2026] [security2:error] [pid 251754:tid 251941] [remote 168.100.149.33:39346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary06JOnWJRlb5xgkk0P2QAAsgo"]
[Wed Sep 30 01:06:16.402892 2026] [security2:error] [pid 251754:tid 251890] [client 130.131.227.119:18257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/lv.php"] [unique_id "ary06JOnWJRlb5xgkk0P4AAAAIk"]
[Wed Sep 30 01:06:16.413699 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.413976 2026] [access_compat:error] [pid 251754:tid 251993] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.422782 2026] [security2:error] [pid 251754:tid 251911] [client 74.225.148.80:13366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/9.php"] [unique_id "ary06JOnWJRlb5xgkk0P5AAAAJ4"]
[Wed Sep 30 01:06:16.506180 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.506441 2026] [access_compat:error] [pid 251754:tid 251903] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.532490 2026] [security2:error] [pid 251754:tid 251930] [client 182.69.182.151:32565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary06JOnWJRlb5xgkk0P8AAAALE"]
[Wed Sep 30 01:06:16.533202 2026] [security2:error] [pid 251754:tid 251930] [client 182.69.182.151:32565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary06JOnWJRlb5xgkk0P8AAAALE"]
[Wed Sep 30 01:06:16.565365 2026] [security2:error] [pid 251754:tid 251955] [client 74.225.148.80:64009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ass.php"] [unique_id "ary06JOnWJRlb5xgkk0P8wAAAMo"]
[Wed Sep 30 01:06:16.572256 2026] [security2:error] [pid 251754:tid 251936] [client 52.231.30.175:63434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary06JOnWJRlb5xgkk0P9AAAALc"]
[Wed Sep 30 01:06:16.579700 2026] [security2:error] [pid 251754:tid 252010] [client 130.131.227.119:40054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/gecko.php"] [unique_id "ary06JOnWJRlb5xgkk0P9QAAAQE"]
[Wed Sep 30 01:06:16.583883 2026] [security2:error] [pid 251754:tid 251923] [client 5.134.122.125:58262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.122.134.5.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "orontes-tech.com"] [uri "/wp-login.php"] [unique_id "ary06JOnWJRlb5xgkk0P9gAAAKo"]
[Wed Sep 30 01:06:16.598204 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.598490 2026] [access_compat:error] [pid 251754:tid 252003] [client 216.73.216.46:36410] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.681317 2026] [security2:error] [pid 251754:tid 251967] [client 4.240.25.22:46316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/cgi-bin/admin.php"] [unique_id "ary06JOnWJRlb5xgkk0P-QAAANY"]
[Wed Sep 30 01:06:16.694215 2026] [security2:error] [pid 251754:tid 251964] [client 20.5.79.49:28389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/admin_logs.php"] [unique_id "ary06JOnWJRlb5xgkk0P-gAAANM"]
[Wed Sep 30 01:06:16.736638 2026] [security2:error] [pid 251754:tid 251897] [client 130.131.227.119:36209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/new.php"] [unique_id "ary06JOnWJRlb5xgkk0P_wAAAJA"]
[Wed Sep 30 01:06:16.738638 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.738902 2026] [access_compat:error] [pid 251754:tid 251998] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.839048 2026] [security2:error] [pid 251754:tid 252011] [client 52.231.30.175:63433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary06JOnWJRlb5xgkk0QBwAAAQI"]
[Wed Sep 30 01:06:16.843704 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.844085 2026] [access_compat:error] [pid 251754:tid 251905] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.896421 2026] [security2:error] [pid 251754:tid 251928] [client 130.131.227.119:36185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/f35.php"] [unique_id "ary06JOnWJRlb5xgkk0QCwAAAK8"]
[Wed Sep 30 01:06:16.922849 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.923120 2026] [access_compat:error] [pid 251754:tid 251887] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:16.950287 2026] [security2:error] [pid 251754:tid 251892] [client 74.225.148.80:13337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary06JOnWJRlb5xgkk0QEQAAAIs"]
[Wed Sep 30 01:06:16.951208 2026] [security2:error] [pid 251754:tid 251931] [client 20.194.30.107:1620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/ops.php"] [unique_id "ary06JOnWJRlb5xgkk0QEgAAALI"]
[Wed Sep 30 01:06:16.960735 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:16.961732 2026] [access_compat:error] [pid 251754:tid 251945] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.015939 2026] [security2:error] [pid 251754:tid 251941] [client 20.5.79.49:28400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/byp.php"] [unique_id "ary06ZOnWJRlb5xgkk0QFgAAALw"]
[Wed Sep 30 01:06:17.036055 2026] [security2:error] [pid 251754:tid 251940] [client 74.225.148.80:17331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wsd.php"] [unique_id "ary06ZOnWJRlb5xgkk0QFwAAALs"]
[Wed Sep 30 01:06:17.042062 2026] [security2:error] [pid 251754:tid 251961] [client 130.131.227.119:40027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/NewFile.php"] [unique_id "ary06ZOnWJRlb5xgkk0QGAAAANA"]
[Wed Sep 30 01:06:17.053426 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.053735 2026] [access_compat:error] [pid 251754:tid 251952] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.096028 2026] [security2:error] [pid 251754:tid 251890] [client 165.232.167.42:54866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.167.232.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.parashakthipeetham.com"] [uri "/wp-login.php"] [unique_id "ary06ZOnWJRlb5xgkk0QGgAAAIk"]
[Wed Sep 30 01:06:17.146441 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.146899 2026] [access_compat:error] [pid 251754:tid 251900] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.151036 2026] [security2:error] [pid 251754:tid 251974] [client 52.231.30.175:15507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary06ZOnWJRlb5xgkk0QIAAAAN0"]
[Wed Sep 30 01:06:17.201294 2026] [security2:error] [pid 251754:tid 252004] [client 130.131.227.119:18267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary06ZOnWJRlb5xgkk0QIQAAAPs"]
[Wed Sep 30 01:06:17.221177 2026] [security2:error] [pid 251754:tid 251909] [client 20.28.180.172:29577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary06ZOnWJRlb5xgkk0QJAAAAJw"]
[Wed Sep 30 01:06:17.234090 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.234351 2026] [access_compat:error] [pid 251754:tid 251956] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.325438 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.325722 2026] [access_compat:error] [pid 251754:tid 251888] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.328872 2026] [security2:error] [pid 251754:tid 251975] [client 20.5.79.49:28247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/habhan.php"] [unique_id "ary06ZOnWJRlb5xgkk0QKAAAAN4"]
[Wed Sep 30 01:06:17.334803 2026] [security2:error] [pid 251754:tid 251917] [client 20.194.30.107:17310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/df.php"] [unique_id "ary06ZOnWJRlb5xgkk0QKgAAAKQ"]
[Wed Sep 30 01:06:17.365793 2026] [security2:error] [pid 251754:tid 252010] [client 130.131.227.119:17783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/xx.php"] [unique_id "ary06ZOnWJRlb5xgkk0QLQAAAQE"]
[Wed Sep 30 01:06:17.416280 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.416559 2026] [access_compat:error] [pid 251754:tid 251922] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.431686 2026] [access_compat:error] [pid 251754:tid 251942] [client 47.79.13.175:44388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:17.431975 2026] [access_compat:error] [pid 251754:tid 251942] [client 47.79.13.175:44388] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:17.443062 2026] [security2:error] [pid 251754:tid 251950] [client 52.231.30.175:63466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/flamini.php"] [unique_id "ary06ZOnWJRlb5xgkk0QNQAAAMU"]
[Wed Sep 30 01:06:17.481136 2026] [security2:error] [pid 251754:tid 251994] [client 49.43.163.212:52653] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary06ZOnWJRlb5xgkk0QKwAAAPE"]
[Wed Sep 30 01:06:17.511122 2026] [security2:error] [pid 251754:tid 251954] [client 74.225.148.80:54540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/BDKR28WP.php"] [unique_id "ary06ZOnWJRlb5xgkk0QNgAAAMk"]
[Wed Sep 30 01:06:17.527157 2026] [security2:error] [pid 251754:tid 251891] [client 130.131.227.119:17757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/k.php"] [unique_id "ary06ZOnWJRlb5xgkk0QNwAAAIo"]
[Wed Sep 30 01:06:17.579888 2026] [security2:error] [pid 251754:tid 251924] [client 43.104.4.184:26945] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary06ZOnWJRlb5xgkk0QOQAAAKs"], referer: https://coscharis-tech.com/product-category/networking/routers-networking/?wlfilter=1&woolentor_product_cat=antivirus-software%2Chp%2Cpower-banks%2Crouters-networking%2Cscanners
[Wed Sep 30 01:06:17.625101 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.625369 2026] [access_compat:error] [pid 251754:tid 251912] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.625386 2026] [security2:error] [pid 251754:tid 251789] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary06ZOnWJRlb5xgkk0QPQAA5CA"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D33011
[Wed Sep 30 01:06:17.666365 2026] [security2:error] [pid 251754:tid 251958] [client 20.5.79.49:28290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/kdrex.php"] [unique_id "ary06ZOnWJRlb5xgkk0QRAAAAM0"]
[Wed Sep 30 01:06:17.712953 2026] [security2:error] [pid 251754:tid 252009] [client 130.131.227.119:17781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/plugins.php"] [unique_id "ary06ZOnWJRlb5xgkk0QSwAAAQA"]
[Wed Sep 30 01:06:17.715142 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.715409 2026] [access_compat:error] [pid 251754:tid 251895] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.725583 2026] [security2:error] [pid 251754:tid 251940] [client 52.231.30.175:15685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/myglu.php"] [unique_id "ary06ZOnWJRlb5xgkk0QTAAAALs"]
[Wed Sep 30 01:06:17.760529 2026] [security2:error] [pid 251754:tid 251993] [client 20.219.2.60:18894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/sa.php7"] [unique_id "ary06ZOnWJRlb5xgkk0QTQAAAPA"]
[Wed Sep 30 01:06:17.791056 2026] [security2:error] [pid 251754:tid 251938] [client 74.225.148.80:13464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/.well-known/log.php"] [unique_id "ary06ZOnWJRlb5xgkk0QTgAAALk"]
[Wed Sep 30 01:06:17.802331 2026] [security2:error] [pid 251754:tid 251935] [client 20.219.2.60:11379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary06ZOnWJRlb5xgkk0QUQAAALY"]
[Wed Sep 30 01:06:17.805038 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.805305 2026] [access_compat:error] [pid 251754:tid 251974] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.862908 2026] [security2:error] [pid 251754:tid 251987] [client 130.131.227.119:17768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/xxx.php"] [unique_id "ary06ZOnWJRlb5xgkk0QWAAAAOo"]
[Wed Sep 30 01:06:17.867845 2026] [security2:error] [pid 251754:tid 251989] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary06ZOnWJRlb5xgkk0QWQAAAOw"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:17.879994 2026] [security2:error] [pid 251754:tid 251915] [client 104.208.65.139:2623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/1xmomo.php"] [unique_id "ary06ZOnWJRlb5xgkk0QWgAAAKI"]
[Wed Sep 30 01:06:17.897121 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.897389 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.965293 2026] [security2:error] [pid 251754:tid 251955] [client 74.225.148.80:56072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wmore1.php"] [unique_id "ary06ZOnWJRlb5xgkk0QXwAAAMo"]
[Wed Sep 30 01:06:17.987510 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:17.987774 2026] [access_compat:error] [pid 251754:tid 251975] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:17.988076 2026] [security2:error] [pid 251754:tid 251917] [client 20.214.109.68:60552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/admin/index.php"] [unique_id "ary06ZOnWJRlb5xgkk0QYwAAAKQ"]
[Wed Sep 30 01:06:17.988641 2026] [security2:error] [pid 251754:tid 251979] [client 52.231.30.175:15546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/alfa.php"] [unique_id "ary06ZOnWJRlb5xgkk0QZAAAAOI"]
[Wed Sep 30 01:06:17.995766 2026] [security2:error] [pid 251754:tid 251990] [client 20.5.79.49:28408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/11index.php"] [unique_id "ary06ZOnWJRlb5xgkk0QZQAAAO0"]
[Wed Sep 30 01:06:18.021738 2026] [security2:error] [pid 251754:tid 251936] [client 130.131.227.119:40601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/css.php"] [unique_id "ary06pOnWJRlb5xgkk0QZgAAALc"]
[Wed Sep 30 01:06:18.064328 2026] [security2:error] [pid 251754:tid 251933] [client 37.41.16.35:61629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary06pOnWJRlb5xgkk0QZwAAALQ"]
[Wed Sep 30 01:06:18.064438 2026] [security2:error] [pid 251754:tid 251933] [client 37.41.16.35:61629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary06pOnWJRlb5xgkk0QZwAAALQ"]
[Wed Sep 30 01:06:18.079767 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.080028 2026] [access_compat:error] [pid 251754:tid 251908] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.169427 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.169698 2026] [access_compat:error] [pid 251754:tid 252011] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.187121 2026] [security2:error] [pid 251754:tid 251977] [client 130.131.227.119:40626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ary06pOnWJRlb5xgkk0QbwAAAOA"]
[Wed Sep 30 01:06:18.253523 2026] [security2:error] [pid 251754:tid 251953] [client 52.231.30.175:63903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/index.php"] [unique_id "ary06pOnWJRlb5xgkk0QcwAAAMg"]
[Wed Sep 30 01:06:18.260631 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.260914 2026] [access_compat:error] [pid 251754:tid 251893] [client 216.73.216.46:26643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.311767 2026] [security2:error] [pid 251754:tid 251918] [client 20.5.79.49:28235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/1index.php"] [unique_id "ary06pOnWJRlb5xgkk0QeAAAAKU"]
[Wed Sep 30 01:06:18.354750 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.355067 2026] [access_compat:error] [pid 251754:tid 251961] [client 216.73.216.46:53247] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.380413 2026] [security2:error] [pid 251754:tid 251906] [client 74.225.148.80:13456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/class.php"] [unique_id "ary06pOnWJRlb5xgkk0QgwAAAJk"]
[Wed Sep 30 01:06:18.381364 2026] [security2:error] [pid 251754:tid 251886] [remote 168.100.149.123:43254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary06pOnWJRlb5xgkk0QdgAAoQU"]
[Wed Sep 30 01:06:18.390242 2026] [security2:error] [pid 251754:tid 251971] [client 20.70.173.30:19155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/sxxb.php"] [unique_id "ary06pOnWJRlb5xgkk0QhAAAANo"]
[Wed Sep 30 01:06:18.436788 2026] [security2:error] [pid 251754:tid 251860] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary06pOnWJRlb5xgkk0QiAAAnWc"], referer: https://torquayfans.com/viewtopic.php?p=301150
[Wed Sep 30 01:06:18.436827 2026] [security2:error] [pid 251754:tid 251860] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary06pOnWJRlb5xgkk0QiAAAnWc"], referer: https://torquayfans.com/viewtopic.php?p=301150
[Wed Sep 30 01:06:18.445794 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.446236 2026] [access_compat:error] [pid 251754:tid 251959] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.511079 2026] [security2:error] [pid 251754:tid 251923] [client 74.225.148.80:64036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/z60.php"] [unique_id "ary06pOnWJRlb5xgkk0QkgAAAKo"]
[Wed Sep 30 01:06:18.526478 2026] [security2:error] [pid 251754:tid 251975] [client 52.231.30.175:63877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary06pOnWJRlb5xgkk0QkwAAAN4"]
[Wed Sep 30 01:06:18.533822 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.534094 2026] [access_compat:error] [pid 251754:tid 252010] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.605020 2026] [security2:error] [pid 251754:tid 252007] [client 20.194.30.107:43115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/admin.php"] [unique_id "ary06pOnWJRlb5xgkk0QlQAAAP4"]
[Wed Sep 30 01:06:18.626100 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.626387 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.626481 2026] [security2:error] [pid 251754:tid 251962] [client 130.131.227.119:17751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/buy.php"] [unique_id "ary06pOnWJRlb5xgkk0QmAAAANE"]
[Wed Sep 30 01:06:18.629198 2026] [security2:error] [pid 251754:tid 251931] [client 20.5.79.49:28368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/shell20211028.php"] [unique_id "ary06pOnWJRlb5xgkk0QmQAAALI"]
[Wed Sep 30 01:06:18.630945 2026] [security2:error] [pid 251754:tid 252003] [client 4.240.25.22:38747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/or.php"] [unique_id "ary06pOnWJRlb5xgkk0QmgAAAPo"]
[Wed Sep 30 01:06:18.681797 2026] [security2:error] [pid 251754:tid 251980] [client 216.73.216.46:26643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary06pOnWJRlb5xgkk0QmwAAAOM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTMvbm9kZTAvbWVtb3J5MzAz
[Wed Sep 30 01:06:18.685465 2026] [security2:error] [pid 251754:tid 251816] [remote 64.23.166.180:2572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-5793976b.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary06pOnWJRlb5xgkk0QnAAA-Ts"]
[Wed Sep 30 01:06:18.757264 2026] [security2:error] [pid 251754:tid 251892] [client 216.73.216.46:53247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary06pOnWJRlb5xgkk0QnwAAAIs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTEvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTYw
[Wed Sep 30 01:06:18.758814 2026] [security2:error] [pid 251754:tid 251929] [client 4.240.25.22:18692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/edit.php"] [unique_id "ary06pOnWJRlb5xgkk0QoAAAALA"]
[Wed Sep 30 01:06:18.760514 2026] [security2:error] [pid 251754:tid 251936] [client 43.104.4.214:2491] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary06pOnWJRlb5xgkk0QngAAALc"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=power-banks%2Csolid-works-brands
[Wed Sep 30 01:06:18.768342 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.768615 2026] [access_compat:error] [pid 251754:tid 251932] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.775358 2026] [security2:error] [pid 251754:tid 251944] [client 130.131.227.119:36198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/item.php"] [unique_id "ary06pOnWJRlb5xgkk0QogAAAL8"]
[Wed Sep 30 01:06:18.807278 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.807551 2026] [access_compat:error] [pid 251754:tid 251996] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.860402 2026] [security2:error] [pid 251754:tid 251918] [client 20.194.30.107:53415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/samll.php"] [unique_id "ary06pOnWJRlb5xgkk0QrAAAAKU"]
[Wed Sep 30 01:06:18.865345 2026] [security2:error] [pid 251754:tid 251905] [client 20.28.180.172:61191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/b.php"] [unique_id "ary06pOnWJRlb5xgkk0QrQAAAJg"]
[Wed Sep 30 01:06:18.899936 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.900364 2026] [access_compat:error] [pid 251754:tid 251938] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:18.902797 2026] [security2:error] [pid 251754:tid 251889] [client 62.101.172.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary06pOnWJRlb5xgkk0QugAAAIg"]
[Wed Sep 30 01:06:18.923471 2026] [security2:error] [pid 251754:tid 251993] [client 130.131.227.119:40025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/02.php"] [unique_id "ary06pOnWJRlb5xgkk0QvQAAAPA"]
[Wed Sep 30 01:06:18.927063 2026] [security2:error] [pid 251754:tid 251895] [client 164.163.190.89:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary06pOnWJRlb5xgkk0QvwAAAI4"]
[Wed Sep 30 01:06:18.951262 2026] [security2:error] [pid 251754:tid 251910] [client 20.5.79.49:28303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/edit-tags.php"] [unique_id "ary06pOnWJRlb5xgkk0QwwAAAJ0"]
[Wed Sep 30 01:06:18.971070 2026] [security2:error] [pid 251754:tid 252004] [client 74.225.148.80:56077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/pJPoKA.php"] [unique_id "ary06pOnWJRlb5xgkk0QyAAAAPs"]
[Wed Sep 30 01:06:18.983449 2026] [security2:error] [pid 251754:tid 251989] [client 154.28.66.226:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary06pOnWJRlb5xgkk0QyQAAAOw"]
[Wed Sep 30 01:06:18.993985 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:18.994411 2026] [access_compat:error] [pid 251754:tid 251909] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:19.080645 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:19.080972 2026] [access_compat:error] [pid 251754:tid 251990] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:19.084605 2026] [security2:error] [pid 251754:tid 251923] [client 130.131.227.119:40000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/x.php"] [unique_id "ary065OnWJRlb5xgkk0QzAAAAKo"]
[Wed Sep 30 01:06:19.106289 2026] [security2:error] [pid 251754:tid 251995] [client 52.231.30.175:15497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-admin/js/index.php"] [unique_id "ary065OnWJRlb5xgkk0QzwAAAPI"]
[Wed Sep 30 01:06:19.172381 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:19.172668 2026] [access_compat:error] [pid 251754:tid 251978] [client 216.73.216.46:8416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:19.229651 2026] [security2:error] [pid 251754:tid 251942] [client 74.225.148.80:13472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/lock360.php"] [unique_id "ary065OnWJRlb5xgkk0Q1wAAAL0"]
[Wed Sep 30 01:06:19.238950 2026] [security2:error] [pid 251754:tid 251998] [client 130.131.227.119:17747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/php8.php"] [unique_id "ary065OnWJRlb5xgkk0Q2AAAAPU"]
[Wed Sep 30 01:06:19.246314 2026] [security2:error] [pid 251754:tid 251944] [client 20.219.2.60:18842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/jp.php"] [unique_id "ary065OnWJRlb5xgkk0Q2gAAAL8"]
[Wed Sep 30 01:06:19.261571 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:19.261901 2026] [access_compat:error] [pid 251754:tid 251924] [client 216.73.216.46:1852] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:19.270493 2026] [security2:error] [pid 251754:tid 251913] [client 20.5.79.49:28350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/fs.php"] [unique_id "ary065OnWJRlb5xgkk0Q3AAAAKA"]
[Wed Sep 30 01:06:19.369110 2026] [security2:error] [pid 251754:tid 251931] [client 161.118.214.16:64962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.aqm.qiu.mybluehost.me"] [uri "/"] [unique_id "ary065OnWJRlb5xgkk0Q4gAAALI"]
[Wed Sep 30 01:06:19.375897 2026] [http2:warn] [pid 251754:tid 251925] [client 52.167.144.206:62436] h2_stream(251754-280-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:19.496079 2026] [security2:error] [pid 251754:tid 251920] [client 103.241.204.139:61600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary065OnWJRlb5xgkk0Q5AAAAKc"]
[Wed Sep 30 01:06:19.496344 2026] [security2:error] [pid 251754:tid 251920] [client 103.241.204.139:61600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary065OnWJRlb5xgkk0Q5AAAAKc"]
[Wed Sep 30 01:06:19.770074 2026] [security2:error] [pid 251754:tid 251892] [client 155.190.6.18:44396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary065OnWJRlb5xgkk0Q5QAAAIs"]
[Wed Sep 30 01:06:19.987485 2026] [access_compat:error] [pid 251754:tid 252001] [client 47.79.13.172:55014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:19.987777 2026] [access_compat:error] [pid 251754:tid 252001] [client 47.79.13.172:55014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:20.046262 2026] [security2:error] [pid 251754:tid 251892] [client 155.190.6.18:44396] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary065OnWJRlb5xgkk0Q5QAAAIs"]
[Wed Sep 30 01:06:20.200625 2026] [http2:info] [pid 263262:tid 263262] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:06:20.239283 2026] [security2:error] [pid 263262:tid 263394] [client 74.225.148.80:64005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/24.php"] [unique_id "ary07JEcZ_148BjP8ZO-TAAAAQs"]
[Wed Sep 30 01:06:20.239335 2026] [security2:error] [pid 263262:tid 263396] [client 20.219.2.60:11384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/varb.php"] [unique_id "ary07JEcZ_148BjP8ZO-TwAAAQ0"]
[Wed Sep 30 01:06:20.239360 2026] [security2:error] [pid 263262:tid 263400] [client 52.231.30.175:15545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/admin.php"] [unique_id "ary07JEcZ_148BjP8ZO-UgAAARE"]
[Wed Sep 30 01:06:20.239727 2026] [security2:error] [pid 263262:tid 263412] [client 20.194.30.107:17365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/av.php"] [unique_id "ary07JEcZ_148BjP8ZO-VgAAAR0"]
[Wed Sep 30 01:06:20.240046 2026] [security2:error] [pid 263262:tid 263422] [client 74.225.148.80:13362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thestandchurch.com"] [uri "/system_log.php"] [unique_id "ary07JEcZ_148BjP8ZO-WwAAASc"]
[Wed Sep 30 01:06:20.240110 2026] [security2:error] [pid 263262:tid 263418] [client 20.214.109.68:61155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tfm.php"] [unique_id "ary07JEcZ_148BjP8ZO-WAAAASM"]
[Wed Sep 30 01:06:20.240143 2026] [security2:error] [pid 263262:tid 263395] [client 20.5.79.49:28361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/init.php"] [unique_id "ary07JEcZ_148BjP8ZO-SwAAAQw"]
[Wed Sep 30 01:06:20.240179 2026] [security2:error] [pid 263262:tid 263427] [client 74.7.243.227:55928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary07JEcZ_148BjP8ZO-XAAAASw"], referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 01:06:20.247417 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:24682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.247747 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:24682] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.248501 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.248603 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:58577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.248821 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55086] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.249006 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:34866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.249106 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:58577] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.249468 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:34866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.249616 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:6062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250150 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250155 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250156 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:61196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250155 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250229 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:6062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.250241 2026] [access_compat:error] [pid 263262:tid 263434] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.250612 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.250624 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:61196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.250624 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.250649 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.250759 2026] [access_compat:error] [pid 263262:tid 263434] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.284436 2026] [security2:error] [pid 263262:tid 263457] [client 86.104.192.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary07JEcZ_148BjP8ZO-dwAAAUo"]
[Wed Sep 30 01:06:20.286495 2026] [security2:error] [pid 263262:tid 263405] [client 130.131.227.119:36188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/fix.php"] [unique_id "ary07JEcZ_148BjP8ZO-fwAAARY"]
[Wed Sep 30 01:06:20.289768 2026] [access_compat:error] [pid 263262:tid 263397] [client 163.7.14.248:20643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.290224 2026] [access_compat:error] [pid 263262:tid 263397] [client 163.7.14.248:20643] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.312372 2026] [security2:error] [pid 263262:tid 263475] [client 104.208.65.139:35321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/almafkew.php"] [unique_id "ary07JEcZ_148BjP8ZO-iQAAAVw"]
[Wed Sep 30 01:06:20.358348 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:6062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.358663 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:6062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.376567 2026] [security2:error] [pid 263262:tid 263277] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ary07JEcZ_148BjP8ZO-lAABcQ0"]
[Wed Sep 30 01:06:20.376572 2026] [security2:error] [pid 263262:tid 263278] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env"] [unique_id "ary07JEcZ_148BjP8ZO-kwABcQ4"]
[Wed Sep 30 01:06:20.402819 2026] [security2:error] [pid 263262:tid 263279] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.docker/.env"] [unique_id "ary07JEcZ_148BjP8ZO-nQABcQ8"]
[Wed Sep 30 01:06:20.411775 2026] [security2:error] [pid 263262:tid 263514] [remote 168.100.149.228:24936] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary07JEcZ_148BjP8ZO-hAABQAc"]
[Wed Sep 30 01:06:20.422241 2026] [security2:error] [pid 263262:tid 263279] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.aws/credentials.bak"] [unique_id "ary07JEcZ_148BjP8ZO-qAABcQ8"]
[Wed Sep 30 01:06:20.423509 2026] [security2:error] [pid 263262:tid 263290] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.aws/.env"] [unique_id "ary07JEcZ_148BjP8ZO-qgABcRo"]
[Wed Sep 30 01:06:20.450148 2026] [security2:error] [pid 263262:tid 263504] [client 130.131.227.119:17735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/tes.php"] [unique_id "ary07JEcZ_148BjP8ZO-tAAAAXk"]
[Wed Sep 30 01:06:20.450960 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:61196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.451424 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:61196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.530783 2026] [security2:error] [pid 263262:tid 263483] [client 52.231.30.175:63486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/themes/index.php"] [unique_id "ary07JEcZ_148BjP8ZO-xAAAAWQ"]
[Wed Sep 30 01:06:20.538065 2026] [security2:error] [pid 263262:tid 263301] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env.bak"] [unique_id "ary07JEcZ_148BjP8ZO-yAABWiU"]
[Wed Sep 30 01:06:20.538070 2026] [security2:error] [pid 263262:tid 263300] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env.backup"] [unique_id "ary07JEcZ_148BjP8ZO-xwABWiQ"]
[Wed Sep 30 01:06:20.543592 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.544052 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.555850 2026] [security2:error] [pid 263262:tid 263435] [client 20.5.79.49:28224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ms.php"] [unique_id "ary07JEcZ_148BjP8ZO-0QAAATQ"]
[Wed Sep 30 01:06:20.588722 2026] [security2:error] [pid 263262:tid 263448] [client 100.58.225.54:37192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.env"] [unique_id "ary07JEcZ_148BjP8ZO-2QAAAUE"]
[Wed Sep 30 01:06:20.600224 2026] [security2:error] [pid 263262:tid 263397] [client 100.58.225.54:41026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/app/.env"] [unique_id "ary07JEcZ_148BjP8ZO-3AAAAQ4"]
[Wed Sep 30 01:06:20.600749 2026] [security2:error] [pid 263262:tid 263434] [client 100.58.225.54:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.env.old"] [unique_id "ary07JEcZ_148BjP8ZO-2wAAATM"]
[Wed Sep 30 01:06:20.601284 2026] [security2:error] [pid 263262:tid 263489] [client 100.58.225.54:41120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.env.bak"] [unique_id "ary07JEcZ_148BjP8ZO-3gAAAWo"]
[Wed Sep 30 01:06:20.604408 2026] [security2:error] [pid 263262:tid 263479] [client 100.58.225.54:41036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.env~"] [unique_id "ary07JEcZ_148BjP8ZO-3wAAAWA"]
[Wed Sep 30 01:06:20.605122 2026] [security2:error] [pid 263262:tid 263490] [client 100.58.225.54:41104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/api/.env"] [unique_id "ary07JEcZ_148BjP8ZO-5AAAAWs"]
[Wed Sep 30 01:06:20.605315 2026] [security2:error] [pid 263262:tid 263493] [client 100.58.225.54:41064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/backend/.env"] [unique_id "ary07JEcZ_148BjP8ZO-4wAAAW4"]
[Wed Sep 30 01:06:20.605459 2026] [security2:error] [pid 263262:tid 263411] [client 100.58.225.54:41106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.env.backup"] [unique_id "ary07JEcZ_148BjP8ZO-5QAAARw"]
[Wed Sep 30 01:06:20.606419 2026] [security2:error] [pid 263262:tid 263492] [client 100.58.225.54:41084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/config/.env"] [unique_id "ary07JEcZ_148BjP8ZO-6AAAAW0"]
[Wed Sep 30 01:06:20.607922 2026] [security2:error] [pid 263262:tid 263509] [client 130.131.227.119:39153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/headers.php"] [unique_id "ary07JEcZ_148BjP8ZO-7wAAAX4"]
[Wed Sep 30 01:06:20.614258 2026] [security2:error] [pid 263262:tid 263412] [client 4.240.25.22:18698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/11.php"] [unique_id "ary07JEcZ_148BjP8ZO-8wAAAR0"]
[Wed Sep 30 01:06:20.634745 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.635170 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.641697 2026] [security2:error] [pid 263262:tid 263310] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env.old"] [unique_id "ary07JEcZ_148BjP8ZO-_AABKi4"]
[Wed Sep 30 01:06:20.658013 2026] [security2:error] [pid 263262:tid 263312] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.113.38.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sspm.wmxone.com"] [uri "/.env.php"] [unique_id "ary07JEcZ_148BjP8ZO_AgABKjA"]
[Wed Sep 30 01:06:20.674845 2026] [security2:error] [pid 263262:tid 263433] [client 216.73.216.46:34866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary07JEcZ_148BjP8ZO_IwAAATI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzAxL25vZGUw
[Wed Sep 30 01:06:20.685188 2026] [security2:error] [pid 263262:tid 263517] [client 216.73.216.46:61196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary07JEcZ_148BjP8ZO_KwAAAYY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5Mjcz
[Wed Sep 30 01:06:20.711447 2026] [security2:error] [pid 263262:tid 263443] [client 74.225.148.80:53239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/xxw.php"] [unique_id "ary07JEcZ_148BjP8ZO_OAAAATw"]
[Wed Sep 30 01:06:20.713466 2026] [security2:error] [pid 263262:tid 263424] [client 103.159.192.142:59277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_OQAAASk"]
[Wed Sep 30 01:06:20.713604 2026] [security2:error] [pid 263262:tid 263424] [client 103.159.192.142:59277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_OQAAASk"]
[Wed Sep 30 01:06:20.726607 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.726892 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.733531 2026] [security2:error] [pid 263262:tid 263319] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env.swp"] [unique_id "ary07JEcZ_148BjP8ZO_PgABKjc"]
[Wed Sep 30 01:06:20.742515 2026] [security2:error] [pid 263262:tid 263398] [client 100.58.225.54:41102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/backup.sql"] [unique_id "ary07JEcZ_148BjP8ZO_RAAAAQ8"]
[Wed Sep 30 01:06:20.748914 2026] [security2:error] [pid 263262:tid 263452] [client 216.73.216.46:6062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary07JEcZ_148BjP8ZO_RgAAAUU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODg%3D
[Wed Sep 30 01:06:20.761230 2026] [security2:error] [pid 263262:tid 263414] [client 130.131.227.119:40043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/xpw.php"] [unique_id "ary07JEcZ_148BjP8ZO_TAAAAR8"]
[Wed Sep 30 01:06:20.762284 2026] [security2:error] [pid 263262:tid 263455] [client 100.58.225.54:41078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/db.sql"] [unique_id "ary07JEcZ_148BjP8ZO_TQAAAUg"]
[Wed Sep 30 01:06:20.769752 2026] [security2:error] [pid 263262:tid 263322] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/.env~"] [unique_id "ary07JEcZ_148BjP8ZO_TwABKjo"]
[Wed Sep 30 01:06:20.779035 2026] [security2:error] [pid 263262:tid 263394] [client 20.28.180.172:62337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws49.php"] [unique_id "ary07JEcZ_148BjP8ZO_VAAAAQs"]
[Wed Sep 30 01:06:20.786302 2026] [security2:error] [pid 263262:tid 263421] [client 100.58.225.54:41050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/database.sql"] [unique_id "ary07JEcZ_148BjP8ZO_VgAAASY"]
[Wed Sep 30 01:06:20.801933 2026] [security2:error] [pid 263262:tid 263429] [client 100.58.225.54:41074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/dump.sql"] [unique_id "ary07JEcZ_148BjP8ZO_WwAAAS4"]
[Wed Sep 30 01:06:20.801932 2026] [security2:error] [pid 263262:tid 263490] [client 100.58.225.54:41102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/mysql.sql"] [unique_id "ary07JEcZ_148BjP8ZO_XAAAAWs"]
[Wed Sep 30 01:06:20.807411 2026] [security2:error] [pid 263262:tid 263520] [client 217.197.103.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary07JEcZ_148BjP8ZO_XgAAAYk"]
[Wed Sep 30 01:06:20.812771 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.813051 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.821981 2026] [security2:error] [pid 263262:tid 263428] [client 100.58.225.54:41096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/data.sql"] [unique_id "ary07JEcZ_148BjP8ZO_ZQAAAS0"]
[Wed Sep 30 01:06:20.823614 2026] [security2:error] [pid 263262:tid 263466] [client 100.58.225.54:41078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/index.php.bak"] [unique_id "ary07JEcZ_148BjP8ZO_ZAAAAVM"]
[Wed Sep 30 01:06:20.824301 2026] [security2:error] [pid 263262:tid 263418] [client 52.231.30.175:63891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-content/themes/index.php"] [unique_id "ary07JEcZ_148BjP8ZO_ZgAAASM"]
[Wed Sep 30 01:06:20.829219 2026] [security2:error] [pid 263262:tid 263396] [client 100.58.225.54:41094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/index.php~"] [unique_id "ary07JEcZ_148BjP8ZO_aAAAAQ0"]
[Wed Sep 30 01:06:20.847236 2026] [security2:error] [pid 263262:tid 263473] [client 100.58.225.54:41050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/config.php.bak"] [unique_id "ary07JEcZ_148BjP8ZO_dgAAAVo"]
[Wed Sep 30 01:06:20.857150 2026] [security2:error] [pid 263262:tid 263504] [client 100.58.225.54:37192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/config.php~"] [unique_id "ary07JEcZ_148BjP8ZO_eAAAAXk"]
[Wed Sep 30 01:06:20.859661 2026] [security2:error] [pid 263262:tid 263401] [client 100.58.225.54:41102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autoconfig.facturamail.info"] [uri "/wp-config.php.bak"] [unique_id "ary07JEcZ_148BjP8ZO_ewAAARI"]
[Wed Sep 30 01:06:20.861859 2026] [security2:error] [pid 263262:tid 263456] [client 100.58.225.54:41074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autoconfig.facturamail.info"] [uri "/wp-config.php~"] [unique_id "ary07JEcZ_148BjP8ZO_gAAAAUk"]
[Wed Sep 30 01:06:20.866244 2026] [security2:error] [pid 263262:tid 263464] [client 100.58.225.54:41036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autoconfig.facturamail.info"] [uri "/wp-config.php.save"] [unique_id "ary07JEcZ_148BjP8ZO_hAAAAVE"]
[Wed Sep 30 01:06:20.868678 2026] [security2:error] [pid 263262:tid 263511] [client 84.2.246.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary07JEcZ_148BjP8ZO_ggAAAYA"]
[Wed Sep 30 01:06:20.882769 2026] [security2:error] [pid 263262:tid 263471] [client 100.58.225.54:41096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/.wp-config.php.swp"] [unique_id "ary07JEcZ_148BjP8ZO_jgAAAVg"]
[Wed Sep 30 01:06:20.892340 2026] [security2:error] [pid 263262:tid 263400] [client 100.58.225.54:41064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/app/etc/env.php"] [unique_id "ary07JEcZ_148BjP8ZO_kwAAARE"]
[Wed Sep 30 01:06:20.895347 2026] [security2:error] [pid 263262:tid 263493] [client 100.58.225.54:41108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/configuration.php.bak"] [unique_id "ary07JEcZ_148BjP8ZO_lgAAAW4"]
[Wed Sep 30 01:06:20.898792 2026] [security2:error] [pid 263262:tid 263404] [client 20.5.79.49:28387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/CDX1.php"] [unique_id "ary07JEcZ_148BjP8ZO_mAAAARU"]
[Wed Sep 30 01:06:20.909131 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.909564 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.911182 2026] [security2:error] [pid 263262:tid 263410] [client 130.131.227.119:40016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/array.php"] [unique_id "ary07JEcZ_148BjP8ZO_nwAAARs"]
[Wed Sep 30 01:06:20.914913 2026] [security2:error] [pid 263262:tid 263339] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/api/.env"] [unique_id "ary07JEcZ_148BjP8ZO_oQABKks"]
[Wed Sep 30 01:06:20.915340 2026] [security2:error] [pid 263262:tid 263340] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.113.38.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sspm.wmxone.com"] [uri "/api/phpinfo.php"] [unique_id "ary07JEcZ_148BjP8ZO_ogABKkw"]
[Wed Sep 30 01:06:20.923227 2026] [security2:error] [pid 263262:tid 263342] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/app/.env"] [unique_id "ary07JEcZ_148BjP8ZO_pgABKk4"]
[Wed Sep 30 01:06:20.930497 2026] [security2:error] [pid 263262:tid 263428] [client 100.58.225.54:41026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/installer-backup.php"] [unique_id "ary07JEcZ_148BjP8ZO_pwAAAS0"]
[Wed Sep 30 01:06:20.958226 2026] [security2:error] [pid 263262:tid 263345] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/application/.env"] [unique_id "ary07JEcZ_148BjP8ZO_sAABKlE"]
[Wed Sep 30 01:06:20.967522 2026] [security2:error] [pid 263262:tid 263511] [client 100.58.225.54:41084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/sites/default/settings.php.bak"] [unique_id "ary07JEcZ_148BjP8ZO_sgAAAYA"]
[Wed Sep 30 01:06:20.969047 2026] [security2:error] [pid 263262:tid 263515] [client 223.235.102.107:4971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_swAAAYQ"]
[Wed Sep 30 01:06:20.969177 2026] [security2:error] [pid 263262:tid 263515] [client 223.235.102.107:4971] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_swAAAYQ"]
[Wed Sep 30 01:06:20.990082 2026] [security2:error] [pid 263262:tid 263452] [client 100.58.225.54:41106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.aws/credentials.bak"] [unique_id "ary07JEcZ_148BjP8ZO_twAAAUU"]
[Wed Sep 30 01:06:20.995382 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:20.995580 2026] [security2:error] [pid 263262:tid 263460] [client 116.197.133.25:57961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_uQAAAU0"]
[Wed Sep 30 01:06:20.995652 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:20.995676 2026] [security2:error] [pid 263262:tid 263460] [client 116.197.133.25:57961] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary07JEcZ_148BjP8ZO_uQAAAU0"]
[Wed Sep 30 01:06:21.020774 2026] [security2:error] [pid 263262:tid 263488] [client 100.58.225.54:41128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.aws/credentials~"] [unique_id "ary07ZEcZ_148BjP8ZO_vwAAAWk"]
[Wed Sep 30 01:06:21.023639 2026] [security2:error] [pid 263262:tid 263351] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/back/.env"] [unique_id "ary07ZEcZ_148BjP8ZO_yQABh1c"]
[Wed Sep 30 01:06:21.024512 2026] [security2:error] [pid 263262:tid 263352] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/backend/.env"] [unique_id "ary07ZEcZ_148BjP8ZO_ywABh1g"]
[Wed Sep 30 01:06:21.027325 2026] [security2:error] [pid 263262:tid 263398] [client 100.58.225.54:41188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/installer.php"] [unique_id "ary07ZEcZ_148BjP8ZO_zAAAAQ8"]
[Wed Sep 30 01:06:21.032240 2026] [security2:error] [pid 263262:tid 263422] [client 20.219.2.60:11348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/lm15.php"] [unique_id "ary07ZEcZ_148BjP8ZO_0AAAASc"]
[Wed Sep 30 01:06:21.050576 2026] [security2:error] [pid 263262:tid 263357] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/backup/.env"] [unique_id "ary07ZEcZ_148BjP8ZO_3AABRl0"]
[Wed Sep 30 01:06:21.052010 2026] [security2:error] [pid 263262:tid 263358] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/cms/.env"] [unique_id "ary07ZEcZ_148BjP8ZO_3QABRl4"]
[Wed Sep 30 01:06:21.052313 2026] [security2:error] [pid 263262:tid 263411] [client 100.58.225.54:41106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.aws/credentials.old"] [unique_id "ary07ZEcZ_148BjP8ZO_3gAAARw"]
[Wed Sep 30 01:06:21.064972 2026] [security2:error] [pid 263262:tid 263454] [client 130.131.227.119:36191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bayareapsychconsult.com"] [uri "/wp-cron.php"] [unique_id "ary07ZEcZ_148BjP8ZO_4gAAAUc"]
[Wed Sep 30 01:06:21.086002 2026] [security2:error] [pid 263262:tid 263365] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.113.38.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sspm.wmxone.com"] [uri "/config.php"] [unique_id "ary07ZEcZ_148BjP8ZO_7QABDmU"]
[Wed Sep 30 01:06:21.090478 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.090908 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.110697 2026] [security2:error] [pid 263262:tid 263516] [client 52.231.30.175:63930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/cgi-bin/index.php"] [unique_id "ary07ZEcZ_148BjP8ZO_8wAAAYU"]
[Wed Sep 30 01:06:21.130375 2026] [security2:error] [pid 263262:tid 263369] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/config/.env"] [unique_id "ary07ZEcZ_148BjP8ZO__wABDmk"]
[Wed Sep 30 01:06:21.169448 2026] [security2:error] [pid 263262:tid 263377] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/core/.env"] [unique_id "ary07ZEcZ_148BjP8ZPACwABDnE"]
[Wed Sep 30 01:06:21.172171 2026] [security2:error] [pid 263262:tid 263500] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary07ZEcZ_148BjP8ZPADgAAAXU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:21.180005 2026] [security2:error] [pid 263262:tid 263473] [client 74.225.148.80:17303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/bnmtp.php"] [unique_id "ary07ZEcZ_148BjP8ZPAGQAAAVo"]
[Wed Sep 30 01:06:21.180148 2026] [security2:error] [pid 263262:tid 263381] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/database.sql"] [unique_id "ary07ZEcZ_148BjP8ZPAFwABDnU"]
[Wed Sep 30 01:06:21.187430 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.187871 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.198180 2026] [security2:error] [pid 263262:tid 263376] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/dev/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAHwABDnA"]
[Wed Sep 30 01:06:21.220265 2026] [security2:error] [pid 263262:tid 263507] [client 20.5.79.49:28250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/click.php"] [unique_id "ary07ZEcZ_148BjP8ZPAKgAAAXw"]
[Wed Sep 30 01:06:21.266591 2026] [security2:error] [pid 263262:tid 263390] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/frontend/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAPQABDn4"]
[Wed Sep 30 01:06:21.269750 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.270148 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.313575 2026] [security2:error] [pid 263262:tid 263265] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.113.38.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sspm.wmxone.com"] [uri "/info.php"] [unique_id "ary07ZEcZ_148BjP8ZPATQABDgE"]
[Wed Sep 30 01:06:21.316072 2026] [security2:error] [pid 263262:tid 263265] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/laravel/.env"] [unique_id "ary07ZEcZ_148BjP8ZPATgABDgE"]
[Wed Sep 30 01:06:21.324294 2026] [security2:error] [pid 263262:tid 263434] [client 100.58.225.54:41138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/terraform.tfstate.backup"] [unique_id "ary07ZEcZ_148BjP8ZPAUQAAATM"]
[Wed Sep 30 01:06:21.324838 2026] [security2:error] [pid 263262:tid 263271] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/media/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAUgABfgc"]
[Wed Sep 30 01:06:21.332171 2026] [security2:error] [pid 263262:tid 263268] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/new/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAUwABdgQ"]
[Wed Sep 30 01:06:21.333422 2026] [security2:error] [pid 263262:tid 263269] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/old/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAVAABdgU"]
[Wed Sep 30 01:06:21.359884 2026] [security2:error] [pid 263262:tid 263283] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.113.38.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sspm.wmxone.com"] [uri "/phpinfo.php"] [unique_id "ary07ZEcZ_148BjP8ZPAXgABTRM"]
[Wed Sep 30 01:06:21.360963 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.361364 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.378916 2026] [security2:error] [pid 263262:tid 263488] [client 52.231.30.175:63454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-manager.php"] [unique_id "ary07ZEcZ_148BjP8ZPAZAAAAWk"]
[Wed Sep 30 01:06:21.380837 2026] [security2:error] [pid 263262:tid 263284] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/production/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAZQABTRQ"]
[Wed Sep 30 01:06:21.389009 2026] [security2:error] [pid 263262:tid 263278] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/public/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAawABTQ4"]
[Wed Sep 30 01:06:21.403296 2026] [security2:error] [pid 263262:tid 263273] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/server/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAdgABTQk"]
[Wed Sep 30 01:06:21.408641 2026] [security2:error] [pid 263262:tid 263279] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/src/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAeQABTQ8"]
[Wed Sep 30 01:06:21.438992 2026] [security2:error] [pid 263262:tid 263275] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/staging/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAgAABTQs"]
[Wed Sep 30 01:06:21.448656 2026] [security2:error] [pid 263262:tid 263289] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/test/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAiAABTRk"]
[Wed Sep 30 01:06:21.450614 2026] [security2:error] [pid 263262:tid 263291] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/v1/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAiwABTRs"]
[Wed Sep 30 01:06:21.453362 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.453785 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:55448] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.455736 2026] [security2:error] [pid 263262:tid 263280] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/v2/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAjwABTRA"]
[Wed Sep 30 01:06:21.467471 2026] [security2:error] [pid 263262:tid 263277] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sspm.wmxone.com"] [uri "/web/.env"] [unique_id "ary07ZEcZ_148BjP8ZPAlAABTQ0"]
[Wed Sep 30 01:06:21.468089 2026] [security2:error] [pid 263262:tid 263292] [remote 34.38.113.44:36650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "sspm.wmxone.com"] [uri "/wp-config.php.bak"] [unique_id "ary07ZEcZ_148BjP8ZPAlQABTRw"]
[Wed Sep 30 01:06:21.540529 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.540857 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.547098 2026] [security2:error] [pid 263262:tid 263434] [client 20.5.79.49:28341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ice.php"] [unique_id "ary07ZEcZ_148BjP8ZPAtQAAATM"]
[Wed Sep 30 01:06:21.635957 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.636389 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.654053 2026] [security2:error] [pid 263262:tid 263507] [client 74.225.148.80:53237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ebkid.php"] [unique_id "ary07ZEcZ_148BjP8ZPA4QAAAXw"]
[Wed Sep 30 01:06:21.654090 2026] [security2:error] [pid 263262:tid 263398] [client 52.231.30.175:15504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary07ZEcZ_148BjP8ZPA4AAAAQ8"]
[Wed Sep 30 01:06:21.713066 2026] [security2:error] [pid 263262:tid 263448] [client 100.58.225.54:41184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/.ssh/id_rsa"] [unique_id "ary07ZEcZ_148BjP8ZPA8gAAAUE"]
[Wed Sep 30 01:06:21.724638 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.724905 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.754909 2026] [security2:error] [pid 263262:tid 263464] [client 191.108.8.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary07ZEcZ_148BjP8ZPA_gAAAVE"]
[Wed Sep 30 01:06:21.820009 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.820446 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.873008 2026] [security2:error] [pid 263262:tid 263463] [client 216.73.216.46:55448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary07ZEcZ_148BjP8ZPBHwAAAVA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTQvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OC9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 01:06:21.906844 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.907233 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:21.918979 2026] [security2:error] [pid 263262:tid 263519] [client 52.231.30.175:63916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/cgi-bin/admin.php"] [unique_id "ary07ZEcZ_148BjP8ZPBMAAAAYg"]
[Wed Sep 30 01:06:21.950262 2026] [security2:error] [pid 263262:tid 263442] [client 186.221.160.19:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary07ZEcZ_148BjP8ZPBOAAAATs"]
[Wed Sep 30 01:06:21.977884 2026] [security2:error] [pid 263262:tid 263459] [client 20.214.109.68:9422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/a4.php"] [unique_id "ary07ZEcZ_148BjP8ZPBQAAAAUw"]
[Wed Sep 30 01:06:21.998770 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:21.999161 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.022953 2026] [security2:error] [pid 263262:tid 263451] [client 20.5.79.49:28388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary07pEcZ_148BjP8ZPBSwAAAUQ"]
[Wed Sep 30 01:06:22.074274 2026] [security2:error] [pid 263262:tid 263498] [client 100.58.225.54:41106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/phpinfo.php"] [unique_id "ary07pEcZ_148BjP8ZPBVgAAAXM"]
[Wed Sep 30 01:06:22.088522 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.088930 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.115430 2026] [security2:error] [pid 263262:tid 263497] [client 74.225.148.80:17306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/133.php"] [unique_id "ary07pEcZ_148BjP8ZPBXwAAAXI"]
[Wed Sep 30 01:06:22.134620 2026] [security2:error] [pid 263262:tid 263403] [client 122.173.27.10:32999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBZAAAARQ"]
[Wed Sep 30 01:06:22.135435 2026] [security2:error] [pid 263262:tid 263403] [client 122.173.27.10:32999] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBZAAAARQ"]
[Wed Sep 30 01:06:22.178421 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.178740 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:38268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.272971 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.273364 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.293647 2026] [security2:error] [pid 263262:tid 263500] [client 100.58.225.54:41138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/web.config"] [unique_id "ary07pEcZ_148BjP8ZPBhAAAAXU"]
[Wed Sep 30 01:06:22.342598 2026] [security2:error] [pid 263262:tid 263479] [client 20.5.79.49:28240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/class-t.api.php"] [unique_id "ary07pEcZ_148BjP8ZPBkAAAAWA"]
[Wed Sep 30 01:06:22.361673 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.362119 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63109] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.369683 2026] [core:error] [pid 263262:tid 263517] [client 100.58.225.54:41184] AH10244: invalid URI path (/public/plugins/alertlist/../../../../../../../../etc/passwd)
[Wed Sep 30 01:06:22.381356 2026] [core:error] [pid 263262:tid 263518] [client 100.58.225.54:41158] AH10244: invalid URI path (/public/plugins/graph/../../../../../../../../etc/passwd)
[Wed Sep 30 01:06:22.386675 2026] [security2:error] [pid 263262:tid 263307] [remote 45.202.232.121:45828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.232.202.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary07pEcZ_148BjP8ZPBlgABfSs"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:06:22.396215 2026] [core:error] [pid 263262:tid 263440] [client 100.58.225.54:41148] AH10244: invalid URI path (/public/plugins/table/../../../../../../../../etc/passwd)
[Wed Sep 30 01:06:22.407682 2026] [security2:error] [pid 263262:tid 263438] [client 100.58.225.54:41172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.225.58.100.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.facturamail.info"] [uri "/api/index.php/v1/config/application"] [unique_id "ary07pEcZ_148BjP8ZPBpQAAATc"]
[Wed Sep 30 01:06:22.423240 2026] [security2:error] [pid 263262:tid 263414] [client 216.73.216.46:63109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary07pEcZ_148BjP8ZPBpwAAAR8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTQ%3D
[Wed Sep 30 01:06:22.447946 2026] [security2:error] [pid 263262:tid 263481] [remote 168.100.149.37:34916] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary07pEcZ_148BjP8ZPBjQABEzE"]
[Wed Sep 30 01:06:22.452766 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.453052 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.459976 2026] [security2:error] [pid 263262:tid 263487] [client 31.189.214.146:49901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBrgAAAWg"]
[Wed Sep 30 01:06:22.460093 2026] [security2:error] [pid 263262:tid 263487] [client 31.189.214.146:49901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBrgAAAWg"]
[Wed Sep 30 01:06:22.476305 2026] [security2:error] [pid 263262:tid 263495] [client 100.58.225.54:41120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/autoconfig.facturamail.info.sql"] [unique_id "ary07pEcZ_148BjP8ZPBswAAAXA"]
[Wed Sep 30 01:06:22.544152 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.544420 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.573325 2026] [security2:error] [pid 263262:tid 263404] [client 100.58.225.54:41104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.facturamail.info"] [uri "/autoconfig.sql"] [unique_id "ary07pEcZ_148BjP8ZPBvgAAARU"]
[Wed Sep 30 01:06:22.588403 2026] [security2:error] [pid 263262:tid 263417] [client 74.225.148.80:17309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/x33.php"] [unique_id "ary07pEcZ_148BjP8ZPBvwAAASI"]
[Wed Sep 30 01:06:22.636165 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.636526 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.654196 2026] [security2:error] [pid 263262:tid 263447] [client 52.231.30.175:15688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary07pEcZ_148BjP8ZPByAAAAUA"]
[Wed Sep 30 01:06:22.681409 2026] [security2:error] [pid 263262:tid 263400] [client 20.5.79.49:28322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/home.php"] [unique_id "ary07pEcZ_148BjP8ZPByQAAARE"]
[Wed Sep 30 01:06:22.689410 2026] [security2:error] [pid 263262:tid 263444] [client 20.194.30.107:38127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/inputs.php"] [unique_id "ary07pEcZ_148BjP8ZPBygAAAT0"]
[Wed Sep 30 01:06:22.729225 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.729752 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.756261 2026] [security2:error] [pid 263262:tid 263454] [client 20.219.2.60:18927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-good.php"] [unique_id "ary07pEcZ_148BjP8ZPBzgAAAUc"]
[Wed Sep 30 01:06:22.792319 2026] [security2:error] [pid 263262:tid 263498] [client 201.32.215.149:8604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBzwAAAXM"]
[Wed Sep 30 01:06:22.792438 2026] [security2:error] [pid 263262:tid 263498] [client 201.32.215.149:8604] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary07pEcZ_148BjP8ZPBzwAAAXM"]
[Wed Sep 30 01:06:22.817356 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.817633 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.858334 2026] [security2:error] [pid 263262:tid 263432] [client 85.208.96.203:50050] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "parashakthipeetham.com"] [uri "/index.php/2026/03/23/best-online-blackjack-sites-for-money/"] [unique_id "ary07pEcZ_148BjP8ZPB0QAAATE"]
[Wed Sep 30 01:06:22.858524 2026] [security2:error] [pid 263262:tid 263432] [client 85.208.96.203:50050] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "parashakthipeetham.com"] [uri "/index.php/2026/03/23/best-online-blackjack-sites-for-money/"] [unique_id "ary07pEcZ_148BjP8ZPB0QAAATE"]
[Wed Sep 30 01:06:22.909226 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:22.909496 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:22.926067 2026] [security2:error] [pid 263262:tid 263449] [client 52.231.30.175:15681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-admin/maint/index.php"] [unique_id "ary07pEcZ_148BjP8ZPB2AAAAUI"]
[Wed Sep 30 01:06:23.006713 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.007027 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.017352 2026] [security2:error] [pid 263262:tid 263451] [client 20.5.79.49:28161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/bless24.php"] [unique_id "ary075EcZ_148BjP8ZPB4gAAAUQ"]
[Wed Sep 30 01:06:23.026752 2026] [access_compat:error] [pid 263262:tid 263465] [client 47.79.206.131:34090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:06:23.027033 2026] [access_compat:error] [pid 263262:tid 263465] [client 47.79.206.131:34090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:06:23.030711 2026] [security2:error] [pid 263262:tid 263470] [client 152.59.165.7:63118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPB5QAAAVc"]
[Wed Sep 30 01:06:23.030822 2026] [security2:error] [pid 263262:tid 263470] [client 152.59.165.7:63118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPB5QAAAVc"]
[Wed Sep 30 01:06:23.071014 2026] [security2:error] [pid 263262:tid 263466] [client 74.225.148.80:54564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/cae.php"] [unique_id "ary075EcZ_148BjP8ZPB5wAAAVM"]
[Wed Sep 30 01:06:23.098065 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.098337 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.100525 2026] [security2:error] [pid 263262:tid 263517] [client 20.70.173.30:56983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary075EcZ_148BjP8ZPB6gAAAYY"]
[Wed Sep 30 01:06:23.152738 2026] [security2:error] [pid 263262:tid 263516] [client 20.70.173.30:60003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/ccc.php"] [unique_id "ary075EcZ_148BjP8ZPB8QAAAYU"]
[Wed Sep 30 01:06:23.166795 2026] [security2:error] [pid 263262:tid 263518] [client 45.230.250.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary075EcZ_148BjP8ZPB8wAAAYc"]
[Wed Sep 30 01:06:23.187287 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.187564 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.279210 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.279473 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.322854 2026] [security2:error] [pid 263262:tid 263404] [client 103.245.42.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary075EcZ_148BjP8ZPCAAAAARU"]
[Wed Sep 30 01:06:23.370957 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.371272 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.391363 2026] [security2:error] [pid 263262:tid 263473] [client 20.5.79.49:28390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/default.php"] [unique_id "ary075EcZ_148BjP8ZPCBQAAAVo"]
[Wed Sep 30 01:06:23.463726 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.464169 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.494136 2026] [security2:error] [pid 263262:tid 263442] [client 52.231.30.175:15749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/matcha.php"] [unique_id "ary075EcZ_148BjP8ZPCDgAAATs"]
[Wed Sep 30 01:06:23.526868 2026] [security2:error] [pid 263262:tid 263479] [client 74.225.148.80:52524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/txets.php"] [unique_id "ary075EcZ_148BjP8ZPCEAAAAWA"]
[Wed Sep 30 01:06:23.551643 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.551927 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.587766 2026] [security2:error] [pid 263262:tid 263476] [client 4.240.25.22:18797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/edit.php"] [unique_id "ary075EcZ_148BjP8ZPCFAAAAV0"]
[Wed Sep 30 01:06:23.618227 2026] [security2:error] [pid 263262:tid 263505] [client 202.179.95.79:60070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPCFwAAAXo"]
[Wed Sep 30 01:06:23.618896 2026] [security2:error] [pid 263262:tid 263505] [client 202.179.95.79:60070] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPCFwAAAXo"]
[Wed Sep 30 01:06:23.645344 2026] [access_compat:error] [pid 263262:tid 263418] [client 47.79.13.234:35382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:23.645628 2026] [access_compat:error] [pid 263262:tid 263418] [client 47.79.13.234:35382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:23.646888 2026] [security2:error] [pid 263262:tid 263424] [client 4.240.25.22:63629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/mac.php"] [unique_id "ary075EcZ_148BjP8ZPCGgAAASk"]
[Wed Sep 30 01:06:23.647312 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.647569 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.664636 2026] [security2:error] [pid 263262:tid 263497] [client 203.122.45.246:57871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPCGwAAAXI"]
[Wed Sep 30 01:06:23.664757 2026] [security2:error] [pid 263262:tid 263497] [client 203.122.45.246:57871] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary075EcZ_148BjP8ZPCGwAAAXI"]
[Wed Sep 30 01:06:23.670306 2026] [security2:error] [pid 263262:tid 263396] [client 20.28.180.172:29590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/gecho.php"] [unique_id "ary075EcZ_148BjP8ZPCHAAAAQ0"]
[Wed Sep 30 01:06:23.717862 2026] [security2:error] [pid 263262:tid 263482] [client 20.5.79.49:28309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/js/chosen.php"] [unique_id "ary075EcZ_148BjP8ZPCHQAAAWM"]
[Wed Sep 30 01:06:23.738389 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.738672 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.754588 2026] [security2:error] [pid 263262:tid 263397] [client 52.231.30.175:15550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/aboutt.php"] [unique_id "ary075EcZ_148BjP8ZPCHwAAAQ4"]
[Wed Sep 30 01:06:23.772911 2026] [security2:error] [pid 263262:tid 263465] [client 20.219.2.60:11342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/clss.php"] [unique_id "ary075EcZ_148BjP8ZPCIgAAAVI"]
[Wed Sep 30 01:06:23.827963 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.828239 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.917535 2026] [access_compat:error] [pid 263262:tid 263434] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:23.917818 2026] [access_compat:error] [pid 263262:tid 263434] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:23.976306 2026] [security2:error] [pid 263262:tid 263513] [client 20.194.30.107:17332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/css.php"] [unique_id "ary075EcZ_148BjP8ZPCNAAAAYI"]
[Wed Sep 30 01:06:23.993657 2026] [security2:error] [pid 263262:tid 263475] [client 74.225.148.80:54543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wp-update.php"] [unique_id "ary075EcZ_148BjP8ZPCNgAAAVw"]
[Wed Sep 30 01:06:24.010693 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.010978 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.014962 2026] [security2:error] [pid 263262:tid 263341] [remote 45.202.232.121:45828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.232.202.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary08JEcZ_148BjP8ZPCOAABCk0"], referer: https://thenerdistheword.ca/wp-admin/
[Wed Sep 30 01:06:24.017316 2026] [security2:error] [pid 263262:tid 263463] [client 52.231.30.175:63888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/opsh.php"] [unique_id "ary08JEcZ_148BjP8ZPCOQAAAVA"]
[Wed Sep 30 01:06:24.021939 2026] [security2:error] [pid 263262:tid 263343] [remote 47.128.114.170:12658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/6098/control-room-sets-up-in-pdmas-office"] [unique_id "ary08JEcZ_148BjP8ZPCOgABgE8"]
[Wed Sep 30 01:06:24.033467 2026] [security2:error] [pid 263262:tid 263411] [client 20.5.79.49:28233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "ary08JEcZ_148BjP8ZPCPQAAARw"]
[Wed Sep 30 01:06:24.093523 2026] [security2:error] [pid 263262:tid 263428] [client 104.208.65.139:29598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/database2.php"] [unique_id "ary08JEcZ_148BjP8ZPCPwAAAS0"]
[Wed Sep 30 01:06:24.100758 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.101031 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.143021 2026] [security2:error] [pid 263262:tid 263394] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary08JEcZ_148BjP8ZPCRQAAAQs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:24.191586 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.191861 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.280424 2026] [security2:error] [pid 263262:tid 263519] [client 52.231.30.175:15536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/photo.php"] [unique_id "ary08JEcZ_148BjP8ZPCTgAAAYg"]
[Wed Sep 30 01:06:24.283991 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.284261 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.356287 2026] [security2:error] [pid 263262:tid 263419] [client 20.5.79.49:28379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/C1.php"] [unique_id "ary08JEcZ_148BjP8ZPCUQAAASQ"]
[Wed Sep 30 01:06:24.373369 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.373649 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.454213 2026] [security2:error] [pid 263262:tid 263486] [remote 168.100.149.127:25436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary08JEcZ_148BjP8ZPCUAABRT8"]
[Wed Sep 30 01:06:24.457454 2026] [security2:error] [pid 263262:tid 263493] [client 74.225.148.80:17292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/177.php"] [unique_id "ary08JEcZ_148BjP8ZPCXAAAAW4"]
[Wed Sep 30 01:06:24.465170 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.465460 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.508697 2026] [security2:error] [pid 263262:tid 263451] [client 20.28.180.172:62396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-blog-header.php"] [unique_id "ary08JEcZ_148BjP8ZPCYAAAAUQ"]
[Wed Sep 30 01:06:24.541198 2026] [security2:error] [pid 263262:tid 263443] [client 4.240.25.22:13078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/classwithtostring.php"] [unique_id "ary08JEcZ_148BjP8ZPCZAAAATw"]
[Wed Sep 30 01:06:24.542846 2026] [security2:error] [pid 263262:tid 263481] [client 52.231.30.175:63889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-fxxxx.php"] [unique_id "ary08JEcZ_148BjP8ZPCZQAAAWI"]
[Wed Sep 30 01:06:24.557205 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.557490 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.558994 2026] [security2:error] [pid 263262:tid 263487] [client 116.193.128.26:58636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary08JEcZ_148BjP8ZPCaQAAAWg"]
[Wed Sep 30 01:06:24.559625 2026] [security2:error] [pid 263262:tid 263487] [client 116.193.128.26:58636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary08JEcZ_148BjP8ZPCaQAAAWg"]
[Wed Sep 30 01:06:24.570518 2026] [security2:error] [pid 263262:tid 263474] [client 20.214.109.68:9888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wen.php"] [unique_id "ary08JEcZ_148BjP8ZPCawAAAVs"]
[Wed Sep 30 01:06:24.630461 2026] [security2:error] [pid 263262:tid 263440] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary08JEcZ_148BjP8ZPCbgAAATk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:24.648933 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.649203 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.671465 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:28311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/7.php"] [unique_id "ary08JEcZ_148BjP8ZPCcAAAAXY"]
[Wed Sep 30 01:06:24.739586 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.739911 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.775342 2026] [security2:error] [pid 263262:tid 263431] [client 103.159.192.142:59758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary08JEcZ_148BjP8ZPCdQAAATA"]
[Wed Sep 30 01:06:24.775487 2026] [security2:error] [pid 263262:tid 263431] [client 103.159.192.142:59758] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary08JEcZ_148BjP8ZPCdQAAATA"]
[Wed Sep 30 01:06:24.810944 2026] [security2:error] [pid 263262:tid 263411] [client 52.231.30.175:63897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wp-filemannger4h.php"] [unique_id "ary08JEcZ_148BjP8ZPCdgAAARw"]
[Wed Sep 30 01:06:24.829745 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.830129 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.835019 2026] [core:error] [pid 263262:tid 263453] [client 45.138.12.32:27362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:24.835044 2026] [core:error] [pid 263262:tid 263453] [client 45.138.12.32:27362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:24.917416 2026] [security2:error] [pid 263262:tid 263358] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08JEcZ_148BjP8ZPCfgABPl4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298295&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:24.917449 2026] [security2:error] [pid 263262:tid 263358] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08JEcZ_148BjP8ZPCfgABPl4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=298295&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:24.924951 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:24.925208 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:24.926432 2026] [security2:error] [pid 263262:tid 263359] [remote 64.23.166.180:2580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-67b69ddb.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary08JEcZ_148BjP8ZPCgQABVV8"]
[Wed Sep 30 01:06:24.970045 2026] [security2:error] [pid 263262:tid 263490] [client 74.225.148.80:55923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ccc.php"] [unique_id "ary08JEcZ_148BjP8ZPChQAAAWs"]
[Wed Sep 30 01:06:24.971486 2026] [security2:error] [pid 263262:tid 263473] [client 45.138.12.32:27328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.enh.vhc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary08JEcZ_148BjP8ZPChgAAAVo"]
[Wed Sep 30 01:06:24.987256 2026] [security2:error] [pid 263262:tid 263427] [client 20.5.79.49:28374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/public/a1vx.php"] [unique_id "ary08JEcZ_148BjP8ZPChwAAASw"]
[Wed Sep 30 01:06:25.022892 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.023362 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.049259 2026] [security2:error] [pid 263262:tid 263498] [client 185.96.177.16:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary08ZEcZ_148BjP8ZPCjwAAAXM"]
[Wed Sep 30 01:06:25.078379 2026] [security2:error] [pid 263262:tid 263515] [client 52.231.30.175:63435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/ffl.php"] [unique_id "ary08ZEcZ_148BjP8ZPCkQAAAYQ"]
[Wed Sep 30 01:06:25.092289 2026] [security2:error] [pid 263262:tid 263462] [client 45.138.12.32:27348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.erg.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary08ZEcZ_148BjP8ZPCkgAAAU8"]
[Wed Sep 30 01:06:25.113640 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.114062 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.130760 2026] [security2:error] [pid 263262:tid 263457] [client 45.138.12.43:19820] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.vjc.qyz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary08ZEcZ_148BjP8ZPClQAAAUo"]
[Wed Sep 30 01:06:25.176498 2026] [security2:error] [pid 263262:tid 263380] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary08ZEcZ_148BjP8ZPCoQABenQ"], referer: https://torquayfans.com/viewtopic.php?p=225332
[Wed Sep 30 01:06:25.176538 2026] [security2:error] [pid 263262:tid 263380] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary08ZEcZ_148BjP8ZPCoQABenQ"], referer: https://torquayfans.com/viewtopic.php?p=225332
[Wed Sep 30 01:06:25.186867 2026] [security2:error] [pid 263262:tid 263433] [client 20.70.173.30:59999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-content/admin.php"] [unique_id "ary08ZEcZ_148BjP8ZPCowAAATI"]
[Wed Sep 30 01:06:25.203794 2026] [access_compat:error] [pid 263262:tid 263499] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.204243 2026] [access_compat:error] [pid 263262:tid 263499] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.291372 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.291628 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.330373 2026] [security2:error] [pid 263262:tid 263475] [client 4.240.25.22:8473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary08ZEcZ_148BjP8ZPCsAAAAVw"]
[Wed Sep 30 01:06:25.345215 2026] [security2:error] [pid 263262:tid 263414] [client 52.231.30.175:15541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/koiy.php"] [unique_id "ary08ZEcZ_148BjP8ZPCswAAAR8"]
[Wed Sep 30 01:06:25.346177 2026] [security2:error] [pid 263262:tid 263455] [client 20.5.79.49:28226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/jp.php"] [unique_id "ary08ZEcZ_148BjP8ZPCtAAAAUg"]
[Wed Sep 30 01:06:25.383612 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.384012 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.389360 2026] [security2:error] [pid 263262:tid 263367] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08ZEcZ_148BjP8ZPCtwABFGc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297998&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:25.389396 2026] [security2:error] [pid 263262:tid 263367] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08ZEcZ_148BjP8ZPCtwABFGc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297998&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:25.437438 2026] [security2:error] [pid 263262:tid 263432] [client 74.225.148.80:64023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/0xD.php"] [unique_id "ary08ZEcZ_148BjP8ZPCvAAAATE"]
[Wed Sep 30 01:06:25.472564 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.472859 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.479656 2026] [security2:error] [pid 263262:tid 263390] [remote 45.202.232.121:45828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.232.202.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary08ZEcZ_148BjP8ZPCxAABa34"]
[Wed Sep 30 01:06:25.479850 2026] [security2:error] [pid 263262:tid 263490] [client 45.202.232.121:45828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary08ZEcZ_148BjP8ZPCxAABa34"]
[Wed Sep 30 01:06:25.557847 2026] [security2:error] [pid 263262:tid 263485] [client 20.198.74.230:23931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cong.php"] [unique_id "ary08ZEcZ_148BjP8ZPCxgAAAWY"]
[Wed Sep 30 01:06:25.567451 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.567742 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.605304 2026] [security2:error] [pid 263262:tid 263511] [client 217.182.195.140:33032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/robots.txt"] [unique_id "ary08ZEcZ_148BjP8ZPCyQAAAYA"]
[Wed Sep 30 01:06:25.605424 2026] [security2:error] [pid 263262:tid 263511] [client 217.182.195.140:33032] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/robots.txt"] [unique_id "ary08ZEcZ_148BjP8ZPCyQAAAYA"]
[Wed Sep 30 01:06:25.621604 2026] [security2:error] [pid 263262:tid 263413] [client 52.231.30.175:63919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/bnmtp.php"] [unique_id "ary08ZEcZ_148BjP8ZPCygAAAR4"]
[Wed Sep 30 01:06:25.661132 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.661406 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.671071 2026] [security2:error] [pid 263262:tid 263503] [client 20.5.79.49:28357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/rithin.php"] [unique_id "ary08ZEcZ_148BjP8ZPCzgAAAXg"]
[Wed Sep 30 01:06:25.750414 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.750777 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.841031 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.841294 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.893644 2026] [security2:error] [pid 263262:tid 263415] [client 52.231.30.175:15781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/cwclass.php"] [unique_id "ary08ZEcZ_148BjP8ZPC2gAAASA"]
[Wed Sep 30 01:06:25.912097 2026] [security2:error] [pid 263262:tid 263408] [client 74.225.148.80:53240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/sallu.php"] [unique_id "ary08ZEcZ_148BjP8ZPC3gAAARk"]
[Wed Sep 30 01:06:25.932605 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:25.932878 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:25.992651 2026] [security2:error] [pid 263262:tid 263513] [client 4.240.25.22:13072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/key.php"] [unique_id "ary08ZEcZ_148BjP8ZPC5gAAAYI"]
[Wed Sep 30 01:06:25.994088 2026] [security2:error] [pid 263262:tid 263501] [client 20.219.2.60:11346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/44.php"] [unique_id "ary08ZEcZ_148BjP8ZPC5wAAAXY"]
[Wed Sep 30 01:06:26.001265 2026] [security2:error] [pid 263262:tid 263441] [client 20.5.79.49:28398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/dev.php"] [unique_id "ary08pEcZ_148BjP8ZPC6AAAATo"]
[Wed Sep 30 01:06:26.024772 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.025102 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.077482 2026] [security2:error] [pid 263262:tid 263411] [client 20.28.180.172:34263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xz7l6w5h.php"] [unique_id "ary08pEcZ_148BjP8ZPC7QAAARw"]
[Wed Sep 30 01:06:26.085008 2026] [security2:error] [pid 263262:tid 263500] [client 43.227.131.37:52920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPC7gAAAXU"]
[Wed Sep 30 01:06:26.085129 2026] [security2:error] [pid 263262:tid 263500] [client 43.227.131.37:52920] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPC7gAAAXU"]
[Wed Sep 30 01:06:26.114214 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.114485 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.146801 2026] [security2:error] [pid 263262:tid 263391] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08pEcZ_148BjP8ZPC8QABPn8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297925&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:26.147228 2026] [security2:error] [pid 263262:tid 263391] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary08pEcZ_148BjP8ZPC8QABPn8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297925&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:26.187484 2026] [security2:error] [pid 263262:tid 263444] [client 52.231.30.175:63455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/123viva.php"] [unique_id "ary08pEcZ_148BjP8ZPC9AAAAT0"]
[Wed Sep 30 01:06:26.200739 2026] [access_compat:error] [pid 263262:tid 263436] [client 47.79.13.168:36808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:26.201050 2026] [access_compat:error] [pid 263262:tid 263436] [client 47.79.13.168:36808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:26.204499 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.204771 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.206136 2026] [security2:error] [pid 263262:tid 263478] [client 34.131.237.79:51818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.237.131.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary08pEcZ_148BjP8ZPC9QAAAV8"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:06:26.211331 2026] [security2:error] [pid 263262:tid 263459] [client 49.205.105.16:14745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPC-QAAAUw"]
[Wed Sep 30 01:06:26.211451 2026] [security2:error] [pid 263262:tid 263459] [client 49.205.105.16:14745] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPC-QAAAUw"]
[Wed Sep 30 01:06:26.297253 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.297504 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.298024 2026] [security2:error] [pid 263262:tid 263492] [client 20.219.2.60:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/a5.php"] [unique_id "ary08pEcZ_148BjP8ZPC_gAAAW0"]
[Wed Sep 30 01:06:26.323368 2026] [security2:error] [pid 263262:tid 263454] [client 20.5.79.49:28304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/css/colors/ectoplasm/alfa-rex.php8"] [unique_id "ary08pEcZ_148BjP8ZPDAQAAAUc"]
[Wed Sep 30 01:06:26.368708 2026] [security2:error] [pid 263262:tid 263449] [client 106.214.2.47:1903] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDAwAAAUI"]
[Wed Sep 30 01:06:26.368970 2026] [security2:error] [pid 263262:tid 263449] [client 106.214.2.47:1903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDAwAAAUI"]
[Wed Sep 30 01:06:26.387896 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.388162 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.389304 2026] [security2:error] [pid 263262:tid 263442] [client 74.225.148.80:55921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/01.php"] [unique_id "ary08pEcZ_148BjP8ZPDCAAAATs"]
[Wed Sep 30 01:06:26.443420 2026] [security2:error] [pid 263262:tid 263419] [remote 168.100.149.46:54744] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary08pEcZ_148BjP8ZPDAgABfAU"]
[Wed Sep 30 01:06:26.472770 2026] [security2:error] [pid 263262:tid 263497] [client 52.231.30.175:15712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/wso2024.php"] [unique_id "ary08pEcZ_148BjP8ZPDDwAAAXI"]
[Wed Sep 30 01:06:26.477751 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.478029 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.574635 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.575092 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.581383 2026] [security2:error] [pid 263262:tid 263408] [client 104.208.65.139:2586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/aa.php"] [unique_id "ary08pEcZ_148BjP8ZPDFgAAARk"]
[Wed Sep 30 01:06:26.638840 2026] [security2:error] [pid 263262:tid 263407] [client 4.240.25.22:8390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/well.php"] [unique_id "ary08pEcZ_148BjP8ZPDGwAAARg"]
[Wed Sep 30 01:06:26.641998 2026] [security2:error] [pid 263262:tid 263435] [client 20.5.79.49:28406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/abcd.php"] [unique_id "ary08pEcZ_148BjP8ZPDHAAAATQ"]
[Wed Sep 30 01:06:26.673348 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.673624 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.674060 2026] [security2:error] [pid 263262:tid 263431] [client 223.181.60.167:7533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDHwAAATA"]
[Wed Sep 30 01:06:26.674169 2026] [security2:error] [pid 263262:tid 263431] [client 223.181.60.167:7533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDHwAAATA"]
[Wed Sep 30 01:06:26.731678 2026] [security2:error] [pid 263262:tid 263463] [client 20.194.30.107:32759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/ohct.php"] [unique_id "ary08pEcZ_148BjP8ZPDIgAAAVA"]
[Wed Sep 30 01:06:26.734525 2026] [security2:error] [pid 263262:tid 263397] [client 52.231.30.175:15521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/scora.php"] [unique_id "ary08pEcZ_148BjP8ZPDIwAAAQ4"]
[Wed Sep 30 01:06:26.771532 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.771994 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.857281 2026] [security2:error] [pid 263262:tid 263399] [client 223.181.30.165:32122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDKwAAARA"]
[Wed Sep 30 01:06:26.857476 2026] [security2:error] [pid 263262:tid 263399] [client 223.181.30.165:32122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary08pEcZ_148BjP8ZPDKwAAARA"]
[Wed Sep 30 01:06:26.867541 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.867824 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.879212 2026] [security2:error] [pid 263262:tid 263486] [client 74.225.148.80:53234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ab.php"] [unique_id "ary08pEcZ_148BjP8ZPDLQAAAWc"]
[Wed Sep 30 01:06:26.955451 2026] [security2:error] [pid 263262:tid 263400] [client 20.5.79.49:28116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/2.php"] [unique_id "ary08pEcZ_148BjP8ZPDMwAAARE"]
[Wed Sep 30 01:06:26.957687 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:26.958050 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:26.997765 2026] [security2:error] [pid 263262:tid 263511] [client 52.231.30.175:15704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.daytonago.org"] [uri "/404.php"] [unique_id "ary08pEcZ_148BjP8ZPDNwAAAYA"]
[Wed Sep 30 01:06:27.048832 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.049101 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.074692 2026] [security2:error] [pid 263262:tid 263500] [client 182.69.182.151:3352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary085EcZ_148BjP8ZPDOwAAAXU"]
[Wed Sep 30 01:06:27.075185 2026] [security2:error] [pid 263262:tid 263500] [client 182.69.182.151:3352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary085EcZ_148BjP8ZPDOwAAAXU"]
[Wed Sep 30 01:06:27.139882 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.140147 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.231020 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.231268 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.238493 2026] [security2:error] [pid 263262:tid 263499] [client 20.219.2.60:11661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/a5e0a.php"] [unique_id "ary085EcZ_148BjP8ZPDPgAAAXQ"]
[Wed Sep 30 01:06:27.268532 2026] [security2:error] [pid 263262:tid 263419] [client 20.5.79.49:28349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/plugins/index.php"] [unique_id "ary085EcZ_148BjP8ZPDQAAAASQ"]
[Wed Sep 30 01:06:27.321002 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.321273 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.370200 2026] [security2:error] [pid 263262:tid 263393] [client 20.214.109.68:62448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ms.php"] [unique_id "ary085EcZ_148BjP8ZPDSwAAAQo"]
[Wed Sep 30 01:06:27.373637 2026] [security2:error] [pid 263262:tid 263491] [client 74.225.148.80:64045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/xwpg.php"] [unique_id "ary085EcZ_148BjP8ZPDTAAAAWw"]
[Wed Sep 30 01:06:27.413055 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.413480 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.415445 2026] [security2:error] [pid 263262:tid 263286] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary085EcZ_148BjP8ZPDTgABGRY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=121
[Wed Sep 30 01:06:27.415465 2026] [security2:error] [pid 263262:tid 263286] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary085EcZ_148BjP8ZPDTgABGRY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=31856d95d643f2f9222e594b47e8f22a&start=15&t=121
[Wed Sep 30 01:06:27.504967 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.505225 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.595315 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.595592 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.602417 2026] [security2:error] [pid 263262:tid 263397] [client 20.5.79.49:28286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/index/zwso.php"] [unique_id "ary085EcZ_148BjP8ZPDVgAAAQ4"]
[Wed Sep 30 01:06:27.685995 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.686285 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.703635 2026] [security2:error] [pid 263262:tid 263495] [client 34.131.237.79:49332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.237.131.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary085EcZ_148BjP8ZPDXAAAAXA"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:06:27.782101 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.782516 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.838706 2026] [security2:error] [pid 263262:tid 263492] [client 74.225.148.80:64018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/flamini.php"] [unique_id "ary085EcZ_148BjP8ZPDZgAAAW0"]
[Wed Sep 30 01:06:27.872893 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.873343 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:27.873452 2026] [security2:error] [pid 263262:tid 263416] [client 20.28.180.172:18347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bgymj.php"] [unique_id "ary085EcZ_148BjP8ZPDbAAAASE"]
[Wed Sep 30 01:06:27.877982 2026] [security2:error] [pid 263262:tid 263516] [client 222.167.104.140:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary085EcZ_148BjP8ZPDbQAAAYU"]
[Wed Sep 30 01:06:27.917400 2026] [security2:error] [pid 263262:tid 263482] [client 20.5.79.49:28273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/leaf.php"] [unique_id "ary085EcZ_148BjP8ZPDbwAAAWM"]
[Wed Sep 30 01:06:27.959438 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:27.959718 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.021883 2026] [core:error] [pid 263262:tid 263458] [client 202.61.233.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:28.021909 2026] [core:error] [pid 263262:tid 263458] [client 202.61.233.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:28.053945 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.054229 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:26266] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.083571 2026] [security2:error] [pid 263262:tid 263517] [client 20.70.173.30:33468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary09JEcZ_148BjP8ZPDfgAAAYY"]
[Wed Sep 30 01:06:28.149250 2026] [http2:warn] [pid 212454:tid 212674] [client 52.167.144.211:58556] h2_stream(212454-1522-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:28.194865 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.195137 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.239646 2026] [security2:error] [pid 263262:tid 263494] [client 20.5.79.49:28331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/network/admin.php"] [unique_id "ary09JEcZ_148BjP8ZPDgQAAAW8"]
[Wed Sep 30 01:06:28.261155 2026] [security2:error] [pid 263262:tid 263401] [client 20.194.30.107:32716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/kj.php"] [unique_id "ary09JEcZ_148BjP8ZPDggAAARI"]
[Wed Sep 30 01:06:28.285476 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.285752 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.298956 2026] [security2:error] [pid 263262:tid 263409] [client 74.225.148.80:55892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/themes.php"] [unique_id "ary09JEcZ_148BjP8ZPDhAAAARo"]
[Wed Sep 30 01:06:28.323978 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.324245 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.376201 2026] [security2:error] [pid 263262:tid 263473] [client 74.7.242.1:44522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary09JEcZ_148BjP8ZPDiwAAAVo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:06:28.392933 2026] [security2:error] [pid 263262:tid 263465] [client 104.208.65.139:2566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/pJPoKA.php"] [unique_id "ary09JEcZ_148BjP8ZPDjAAAAVI"]
[Wed Sep 30 01:06:28.416629 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.416907 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.427797 2026] [security2:error] [pid 263262:tid 263493] [remote 168.100.149.70:60394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary09JEcZ_148BjP8ZPDhwABIyI"]
[Wed Sep 30 01:06:28.507177 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.507463 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.556403 2026] [security2:error] [pid 263262:tid 263453] [client 20.5.79.49:28339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/plugins/akismet/alfa-rex.php8"] [unique_id "ary09JEcZ_148BjP8ZPDkwAAAUY"]
[Wed Sep 30 01:06:28.599035 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.599359 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.679558 2026] [security2:error] [pid 263262:tid 263422] [client 68.167.72.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary09JEcZ_148BjP8ZPDngAAASc"]
[Wed Sep 30 01:06:28.689496 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.689766 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.691605 2026] [security2:error] [pid 263262:tid 263486] [client 20.70.173.30:19141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/classwithtostring.php"] [unique_id "ary09JEcZ_148BjP8ZPDogAAAWc"]
[Wed Sep 30 01:06:28.778316 2026] [security2:error] [pid 263262:tid 263468] [client 74.225.148.80:55877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/0.php"] [unique_id "ary09JEcZ_148BjP8ZPDrQAAAVU"]
[Wed Sep 30 01:06:28.780773 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.781036 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.873266 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.873714 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:28.873852 2026] [security2:error] [pid 263262:tid 263482] [client 20.5.79.49:28272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/rip.php"] [unique_id "ary09JEcZ_148BjP8ZPDtAAAAWM"]
[Wed Sep 30 01:06:28.897866 2026] [security2:error] [pid 263262:tid 263319] [remote 220.181.108.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary09JEcZ_148BjP8ZPDtgABNzc"]
[Wed Sep 30 01:06:28.961224 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:28.961489 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.002861 2026] [security2:error] [pid 263262:tid 263460] [client 4.240.25.22:13102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/BDKR28WP.php"] [unique_id "ary09ZEcZ_148BjP8ZPDvQAAAU0"]
[Wed Sep 30 01:06:29.039514 2026] [security2:error] [pid 263262:tid 263455] [client 37.41.16.35:62260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary09ZEcZ_148BjP8ZPDwQAAAUg"]
[Wed Sep 30 01:06:29.039629 2026] [security2:error] [pid 263262:tid 263455] [client 37.41.16.35:62260] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary09ZEcZ_148BjP8ZPDwQAAAUg"]
[Wed Sep 30 01:06:29.051400 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.051873 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.135510 2026] [core:error] [pid 263262:tid 263510] [client 202.61.233.150:60360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:29.135530 2026] [core:error] [pid 263262:tid 263510] [client 202.61.233.150:60360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:29.141453 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.141713 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:15002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.201770 2026] [security2:error] [pid 263262:tid 263324] [remote 57.141.14.84:62098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary09ZEcZ_148BjP8ZPDxwABKDw"]
[Wed Sep 30 01:06:29.204584 2026] [security2:error] [pid 263262:tid 263475] [client 20.5.79.49:28295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/sys.php"] [unique_id "ary09ZEcZ_148BjP8ZPDywAAAVw"]
[Wed Sep 30 01:06:29.231350 2026] [security2:error] [pid 263262:tid 263432] [client 20.28.180.172:34272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/c3c427fa59index.php"] [unique_id "ary09ZEcZ_148BjP8ZPDzQAAATE"]
[Wed Sep 30 01:06:29.235645 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.235952 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.244823 2026] [security2:error] [pid 263262:tid 263397] [client 74.225.148.80:64061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/opsh.php"] [unique_id "ary09ZEcZ_148BjP8ZPDzgAAAQ4"]
[Wed Sep 30 01:06:29.324326 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.324587 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.431259 2026] [security2:error] [pid 263262:tid 263400] [client 20.219.2.60:11382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bo.php"] [unique_id "ary09ZEcZ_148BjP8ZPD2QAAARE"]
[Wed Sep 30 01:06:29.467033 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.467400 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.506821 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.507084 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.519465 2026] [security2:error] [pid 263262:tid 263500] [client 20.5.79.49:28229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/option.php"] [unique_id "ary09ZEcZ_148BjP8ZPD3AAAAXU"]
[Wed Sep 30 01:06:29.528129 2026] [security2:error] [pid 263262:tid 263417] [client 148.244.107.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary09ZEcZ_148BjP8ZPD3wAAASI"]
[Wed Sep 30 01:06:29.542540 2026] [security2:error] [pid 263262:tid 263514] [client 216.73.216.46:15002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary09ZEcZ_148BjP8ZPD4gAAAYM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MC9kcml2ZXIvY3B1Mg%3D%3D
[Wed Sep 30 01:06:29.559302 2026] [security2:error] [pid 263262:tid 263507] [client 89.37.216.123:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary09ZEcZ_148BjP8ZPD4wAAAXw"]
[Wed Sep 30 01:06:29.591084 2026] [access_compat:error] [pid 263262:tid 263487] [client 47.79.13.174:40866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:29.591375 2026] [access_compat:error] [pid 263262:tid 263487] [client 47.79.13.174:40866] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:29.597352 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.597868 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.690220 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.690494 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.723172 2026] [security2:error] [pid 263262:tid 263394] [client 74.225.148.80:17295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/media.php"] [unique_id "ary09ZEcZ_148BjP8ZPD7wAAAQs"]
[Wed Sep 30 01:06:29.779165 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.779446 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.839145 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:28352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ini.php"] [unique_id "ary09ZEcZ_148BjP8ZPD-QAAAXY"]
[Wed Sep 30 01:06:29.870279 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.870550 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:34589] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:29.961274 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:29.961538 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.019772 2026] [security2:error] [pid 263262:tid 263492] [client 20.214.109.68:9425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/hplfuns.php"] [unique_id "ary09pEcZ_148BjP8ZPEBgAAAW0"]
[Wed Sep 30 01:06:30.053994 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.054294 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.135870 2026] [security2:error] [pid 263262:tid 263481] [client 49.43.163.212:53277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary09ZEcZ_148BjP8ZPEBAAAAWI"]
[Wed Sep 30 01:06:30.143841 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.144098 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.146843 2026] [security2:error] [pid 263262:tid 263460] [client 103.241.204.139:62144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPEEQAAAU0"]
[Wed Sep 30 01:06:30.146939 2026] [security2:error] [pid 263262:tid 263460] [client 103.241.204.139:62144] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPEEQAAAU0"]
[Wed Sep 30 01:06:30.165254 2026] [security2:error] [pid 263262:tid 263502] [client 20.5.79.49:28239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/yasnu.php"] [unique_id "ary09pEcZ_148BjP8ZPEEwAAAXc"]
[Wed Sep 30 01:06:30.235692 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.235962 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.245318 2026] [core:error] [pid 263262:tid 263429] [client 202.61.233.150:60374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:30.245337 2026] [core:error] [pid 263262:tid 263429] [client 202.61.233.150:60374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:30.262658 2026] [security2:error] [pid 263262:tid 263406] [client 216.73.216.46:34589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary09pEcZ_148BjP8ZPEGAAAARc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OC90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:06:30.266304 2026] [security2:error] [pid 263262:tid 263500] [client 74.225.148.80:64003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/images.php"] [unique_id "ary09pEcZ_148BjP8ZPEGQAAAXU"]
[Wed Sep 30 01:06:30.326831 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.327098 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.348640 2026] [security2:error] [pid 263262:tid 263511] [client 155.190.6.18:47026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPEIAAAAYA"]
[Wed Sep 30 01:06:30.348750 2026] [security2:error] [pid 263262:tid 263511] [client 155.190.6.18:47026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPEIAAAAYA"]
[Wed Sep 30 01:06:30.417614 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.417878 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.447013 2026] [security2:error] [pid 263262:tid 263480] [remote 168.100.149.202:64982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary09pEcZ_148BjP8ZPEHgABIkg"]
[Wed Sep 30 01:06:30.485310 2026] [security2:error] [pid 263262:tid 263359] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary09pEcZ_148BjP8ZPEMgABJF8"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dreply%26t%3D13251
[Wed Sep 30 01:06:30.499116 2026] [security2:error] [pid 263262:tid 263399] [client 20.5.79.49:28330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/dlu.php"] [unique_id "ary09pEcZ_148BjP8ZPENQAAARA"]
[Wed Sep 30 01:06:30.511758 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.512036 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.599005 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.599282 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.632458 2026] [security2:error] [pid 263262:tid 263407] [client 20.219.2.60:19440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/amp.php"] [unique_id "ary09pEcZ_148BjP8ZPEPQAAARg"]
[Wed Sep 30 01:06:30.686364 2026] [security2:error] [pid 263262:tid 263364] [remote 64.23.166.180:63028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-74a45ce1.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary09pEcZ_148BjP8ZPEQgABh2Q"]
[Wed Sep 30 01:06:30.694141 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.694583 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.719762 2026] [security2:error] [pid 263262:tid 263441] [client 20.70.173.30:56510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary09pEcZ_148BjP8ZPERQAAATo"]
[Wed Sep 30 01:06:30.769535 2026] [security2:error] [pid 263262:tid 263500] [client 74.225.148.80:17290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ops.php"] [unique_id "ary09pEcZ_148BjP8ZPESAAAAXU"]
[Wed Sep 30 01:06:30.782402 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.782717 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.798286 2026] [security2:error] [pid 263262:tid 263509] [client 103.159.192.142:59896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPESwAAAX4"]
[Wed Sep 30 01:06:30.798393 2026] [security2:error] [pid 263262:tid 263509] [client 103.159.192.142:59896] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary09pEcZ_148BjP8ZPESwAAAX4"]
[Wed Sep 30 01:06:30.834991 2026] [security2:error] [pid 263262:tid 263427] [client 20.5.79.49:28333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/403.php"] [unique_id "ary09pEcZ_148BjP8ZPETQAAASw"]
[Wed Sep 30 01:06:30.872528 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.872803 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:30.963827 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:30.964085 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.043639 2026] [security2:error] [pid 263262:tid 263426] [client 20.28.180.172:34274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xivoefjr.php"] [unique_id "ary095EcZ_148BjP8ZPEWQAAASs"]
[Wed Sep 30 01:06:31.053337 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.053615 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.148026 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.148279 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.154979 2026] [security2:error] [pid 263262:tid 263517] [client 20.5.79.49:28236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-class.php"] [unique_id "ary095EcZ_148BjP8ZPEZAAAAYY"]
[Wed Sep 30 01:06:31.196548 2026] [security2:error] [pid 263262:tid 263435] [client 172.86.125.30:63381] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "kbm-realty.com"] [uri "/Search-Replace-DB-master/"] [unique_id "ary095EcZ_148BjP8ZPEZgAAATQ"]
[Wed Sep 30 01:06:31.237453 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.237738 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.259008 2026] [security2:error] [pid 263262:tid 263486] [client 74.225.148.80:64044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/mac.php"] [unique_id "ary095EcZ_148BjP8ZPEaQAAAWc"]
[Wed Sep 30 01:06:31.324642 2026] [security2:error] [pid 263262:tid 263444] [client 58.127.77.173:34436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.77.127.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-login.php"] [unique_id "ary095EcZ_148BjP8ZPEcQAAAT0"], referer: https://taetaebobateashop.com/wp-login.php
[Wed Sep 30 01:06:31.329390 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.329662 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.401785 2026] [security2:error] [pid 263262:tid 263413] [client 45.187.232.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary095EcZ_148BjP8ZPEegAAAR4"]
[Wed Sep 30 01:06:31.422436 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.423273 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.485372 2026] [security2:error] [pid 263262:tid 263443] [client 116.197.133.25:58579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary095EcZ_148BjP8ZPEhAAAATw"]
[Wed Sep 30 01:06:31.485511 2026] [security2:error] [pid 263262:tid 263443] [client 116.197.133.25:58579] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary095EcZ_148BjP8ZPEhAAAATw"]
[Wed Sep 30 01:06:31.508789 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.509059 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.516116 2026] [security2:error] [pid 263262:tid 263367] [remote 116.179.32.131:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary095EcZ_148BjP8ZPEgwABH2c"]
[Wed Sep 30 01:06:31.539777 2026] [security2:error] [pid 263262:tid 263405] [client 20.5.79.49:28255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/alfa-rex.php7"] [unique_id "ary095EcZ_148BjP8ZPEjgAAARY"]
[Wed Sep 30 01:06:31.575917 2026] [security2:error] [pid 263262:tid 263406] [client 20.214.109.68:60560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tfm.php"] [unique_id "ary095EcZ_148BjP8ZPEkgAAARc"]
[Wed Sep 30 01:06:31.585892 2026] [security2:error] [pid 263262:tid 263511] [client 209.97.154.106:42312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.154.97.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danforthchiropractor.com"] [uri "/wp-login.php"] [unique_id "ary095EcZ_148BjP8ZPEjwAAAYA"]
[Wed Sep 30 01:06:31.602440 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.602714 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.665358 2026] [security2:error] [pid 263262:tid 263366] [remote 64.23.166.180:63036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-76adeabc.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary095EcZ_148BjP8ZPEmAABP2Y"]
[Wed Sep 30 01:06:31.703844 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.704284 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.714882 2026] [security2:error] [pid 263262:tid 263473] [client 216.244.66.248:34248] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "aplusprint.com"] [uri "/robots.txt"] [unique_id "ary095EcZ_148BjP8ZPEmwAAAVo"]
[Wed Sep 30 01:06:31.715028 2026] [security2:error] [pid 263262:tid 263473] [client 216.244.66.248:34248] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "aplusprint.com"] [uri "/robots.txt"] [unique_id "ary095EcZ_148BjP8ZPEmwAAAVo"]
[Wed Sep 30 01:06:31.768654 2026] [security2:error] [pid 263262:tid 263490] [client 74.225.148.80:55827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/pass4.php"] [unique_id "ary095EcZ_148BjP8ZPEnQAAAWs"]
[Wed Sep 30 01:06:31.784263 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.784513 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.873590 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.873865 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.896500 2026] [security2:error] [pid 263262:tid 263386] [remote 220.181.108.91:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary095EcZ_148BjP8ZPEowABTno"]
[Wed Sep 30 01:06:31.906843 2026] [security2:error] [pid 263262:tid 263448] [client 20.5.79.49:28320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/languages/chosen.php"] [unique_id "ary095EcZ_148BjP8ZPEpQAAAUE"]
[Wed Sep 30 01:06:31.909372 2026] [security2:error] [pid 263262:tid 263418] [client 20.194.30.107:41154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/one.php"] [unique_id "ary095EcZ_148BjP8ZPEpgAAASM"]
[Wed Sep 30 01:06:31.930220 2026] [security2:error] [pid 263262:tid 263385] [remote 220.181.108.94:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary095EcZ_148BjP8ZPEpAABU3k"]
[Wed Sep 30 01:06:31.967017 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:31.967432 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:31.991015 2026] [security2:error] [pid 263262:tid 263475] [client 20.28.180.172:62352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gfd.php"] [unique_id "ary095EcZ_148BjP8ZPErgAAAVw"]
[Wed Sep 30 01:06:31.991993 2026] [access_compat:error] [pid 263262:tid 263438] [client 47.79.13.234:45268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:31.992444 2026] [access_compat:error] [pid 263262:tid 263438] [client 47.79.13.234:45268] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:32.058041 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.058720 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.068556 2026] [security2:error] [pid 263262:tid 263407] [client 20.219.2.60:11653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/56c53.php"] [unique_id "ary0-JEcZ_148BjP8ZPEsQAAARg"]
[Wed Sep 30 01:06:32.102333 2026] [security2:error] [pid 263262:tid 263495] [client 223.235.102.107:27752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0-JEcZ_148BjP8ZPEtQAAAXA"]
[Wed Sep 30 01:06:32.102568 2026] [security2:error] [pid 263262:tid 263495] [client 223.235.102.107:27752] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0-JEcZ_148BjP8ZPEtQAAAXA"]
[Wed Sep 30 01:06:32.147316 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.147592 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.174412 2026] [access_compat:error] [pid 263262:tid 263435] [client 47.79.13.176:33876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:32.174731 2026] [access_compat:error] [pid 263262:tid 263435] [client 47.79.13.176:33876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:32.230086 2026] [security2:error] [pid 263262:tid 263481] [client 20.5.79.49:28321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "ary0-JEcZ_148BjP8ZPEuwAAAWI"]
[Wed Sep 30 01:06:32.236621 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.236909 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.327269 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.327532 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.366886 2026] [security2:error] [pid 263262:tid 263479] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0-JEcZ_148BjP8ZPEyAAAAWA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:32.419634 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.419913 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.424992 2026] [security2:error] [pid 263262:tid 263520] [remote 168.100.149.130:28898] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0-JEcZ_148BjP8ZPExAABDnw"]
[Wed Sep 30 01:06:32.510974 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.511238 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.567153 2026] [security2:error] [pid 263262:tid 263408] [client 20.5.79.49:28373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/a4.php"] [unique_id "ary0-JEcZ_148BjP8ZPE1AAAARk"]
[Wed Sep 30 01:06:32.583229 2026] [security2:error] [pid 263262:tid 263393] [client 74.225.148.80:64029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/drttewyh.php"] [unique_id "ary0-JEcZ_148BjP8ZPE1wAAAQo"]
[Wed Sep 30 01:06:32.604920 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.605346 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.654582 2026] [security2:error] [pid 263262:tid 263490] [client 20.194.30.107:45885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/222.php"] [unique_id "ary0-JEcZ_148BjP8ZPE2wAAAWs"]
[Wed Sep 30 01:06:32.666265 2026] [access_compat:error] [pid 263262:tid 263409] [client 47.82.11.53:44276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:32.666510 2026] [access_compat:error] [pid 263262:tid 263409] [client 47.82.11.53:44276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:32.693406 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.693696 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:50809] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.734215 2026] [security2:error] [pid 263262:tid 263484] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary0-JEcZ_148BjP8ZPE4wAAAWU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:32.809895 2026] [security2:error] [pid 263262:tid 263482] [client 58.127.77.173:52832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.77.127.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-login.php"] [unique_id "ary0-JEcZ_148BjP8ZPE5QAAAWM"], referer: https://taetaebobateashop.com/wp-login.php
[Wed Sep 30 01:06:32.832377 2026] [security2:error] [pid 263262:tid 263398] [client 122.173.27.10:14367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0-JEcZ_148BjP8ZPE5wAAAQ8"]
[Wed Sep 30 01:06:32.832505 2026] [security2:error] [pid 263262:tid 263398] [client 122.173.27.10:14367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary0-JEcZ_148BjP8ZPE5wAAAQ8"]
[Wed Sep 30 01:06:32.838897 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.839302 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:32.845551 2026] [security2:error] [pid 263262:tid 263271] [remote 74.7.227.56:45124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary0-JEcZ_148BjP8ZPE6AABMQc"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:06:32.883802 2026] [security2:error] [pid 263262:tid 263428] [client 20.5.79.49:28242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ary0-JEcZ_148BjP8ZPE6QAAAS0"]
[Wed Sep 30 01:06:32.926700 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:32.927025 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.021988 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.022429 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.055422 2026] [security2:error] [pid 263262:tid 263433] [client 20.198.74.230:24139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/xmini4.php"] [unique_id "ary0-ZEcZ_148BjP8ZPE-gAAATI"]
[Wed Sep 30 01:06:33.056264 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.056529 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.099605 2026] [security2:error] [pid 263262:tid 263485] [client 216.73.216.46:50809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0-ZEcZ_148BjP8ZPE_QAAAWY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvbWVtb3J5OTIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:06:33.128035 2026] [security2:error] [pid 263262:tid 263506] [client 74.225.148.80:64028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/sh.php"] [unique_id "ary0-ZEcZ_148BjP8ZPE_wAAAXs"]
[Wed Sep 30 01:06:33.148280 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.148746 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.236513 2026] [security2:error] [pid 263262:tid 263489] [client 20.5.79.49:28336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/3.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFCgAAAWo"]
[Wed Sep 30 01:06:33.238003 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.238263 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.275467 2026] [security2:error] [pid 263262:tid 263476] [client 20.214.109.68:62413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/8573.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFDQAAAV0"]
[Wed Sep 30 01:06:33.320586 2026] [security2:error] [pid 263262:tid 263468] [client 200.150.200.208:54084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "cyprusyouth.org"] [uri "/wp-login.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFDgAAAVU"], referer: https://cyprusyouth.org/wp-login.php
[Wed Sep 30 01:06:33.332537 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.333007 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.421004 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.421275 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.505760 2026] [security2:error] [pid 263262:tid 263405] [client 201.32.215.149:5066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFGQAAARY"]
[Wed Sep 30 01:06:33.505911 2026] [security2:error] [pid 263262:tid 263405] [client 201.32.215.149:5066] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFGQAAARY"]
[Wed Sep 30 01:06:33.513272 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.513535 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.579308 2026] [security2:error] [pid 263262:tid 263394] [client 20.5.79.49:28228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/Text/network.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFJgAAAQs"]
[Wed Sep 30 01:06:33.603696 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.604007 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.698451 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.698900 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.738346 2026] [security2:error] [pid 263262:tid 263443] [client 74.225.148.80:59144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/groud1.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFMwAAATw"]
[Wed Sep 30 01:06:33.739517 2026] [security2:error] [pid 263262:tid 263497] [client 152.59.165.7:63689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFMgAAAXI"]
[Wed Sep 30 01:06:33.739620 2026] [security2:error] [pid 263262:tid 263497] [client 152.59.165.7:63689] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFMgAAAXI"]
[Wed Sep 30 01:06:33.785445 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.785714 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:25344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.820780 2026] [security2:error] [pid 263262:tid 263406] [client 20.219.2.60:19344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/abrand.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFPAAAARc"]
[Wed Sep 30 01:06:33.877292 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.877557 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:33.930696 2026] [security2:error] [pid 263262:tid 263520] [client 20.5.79.49:28234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/maint/index.php"] [unique_id "ary0-ZEcZ_148BjP8ZPFQgAAAYk"]
[Wed Sep 30 01:06:33.972661 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:33.973116 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.060052 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.060303 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.150479 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.150756 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.176073 2026] [security2:error] [pid 263262:tid 263398] [client 216.73.216.46:25344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0-pEcZ_148BjP8ZPFUQAAAQ8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTcxL25vZGUwL2NwdTEx
[Wed Sep 30 01:06:34.202636 2026] [security2:error] [pid 263262:tid 263484] [client 74.225.148.80:55859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/bro.php"] [unique_id "ary0-pEcZ_148BjP8ZPFVQAAAWU"]
[Wed Sep 30 01:06:34.207468 2026] [security2:error] [pid 263262:tid 263300] [remote 64.23.166.180:63040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-7bb5852f.fgg.wao.mybluehost.me"] [uri "/.env"] [unique_id "ary0-pEcZ_148BjP8ZPFVgABYyQ"]
[Wed Sep 30 01:06:34.239855 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.240114 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.273065 2026] [http2:warn] [pid 251754:tid 251992] [client 40.77.167.158:47221] h2_stream(251754-467-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:34.292727 2026] [security2:error] [pid 263262:tid 263495] [client 20.5.79.49:28337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wplogbak.php"] [unique_id "ary0-pEcZ_148BjP8ZPFXQAAAXA"]
[Wed Sep 30 01:06:34.303901 2026] [security2:error] [pid 263262:tid 263480] [client 4.240.25.22:41666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/memberfuns.php"] [unique_id "ary0-pEcZ_148BjP8ZPFXgAAAWE"]
[Wed Sep 30 01:06:34.318786 2026] [security2:error] [pid 263262:tid 263402] [client 203.122.45.246:58551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0-pEcZ_148BjP8ZPFXwAAARM"]
[Wed Sep 30 01:06:34.318897 2026] [security2:error] [pid 263262:tid 263402] [client 203.122.45.246:58551] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary0-pEcZ_148BjP8ZPFXwAAARM"]
[Wed Sep 30 01:06:34.331374 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.331640 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.341723 2026] [access_compat:error] [pid 263262:tid 263460] [client 47.79.13.174:58746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:34.342001 2026] [access_compat:error] [pid 263262:tid 263460] [client 47.79.13.174:58746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:34.390598 2026] [security2:error] [pid 263262:tid 263423] [client 20.219.2.60:11652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tx78.php"] [unique_id "ary0-pEcZ_148BjP8ZPFZQAAASg"]
[Wed Sep 30 01:06:34.421473 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.421751 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.431750 2026] [security2:error] [pid 263262:tid 263517] [client 20.70.173.30:63132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/xiugai.php"] [unique_id "ary0-pEcZ_148BjP8ZPFbAAAAYY"]
[Wed Sep 30 01:06:34.436541 2026] [security2:error] [pid 263262:tid 263415] [client 202.179.95.79:65300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0-pEcZ_148BjP8ZPFaQAAASA"]
[Wed Sep 30 01:06:34.436707 2026] [security2:error] [pid 263262:tid 263415] [client 202.179.95.79:65300] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary0-pEcZ_148BjP8ZPFaQAAASA"]
[Wed Sep 30 01:06:34.437819 2026] [security2:error] [pid 263262:tid 263453] [client 20.28.180.172:18361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/callback.php"] [unique_id "ary0-pEcZ_148BjP8ZPFbgAAAUY"]
[Wed Sep 30 01:06:34.438945 2026] [security2:error] [pid 263262:tid 263454] [remote 168.100.149.92:44968] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0-pEcZ_148BjP8ZPFYQABPyE"]
[Wed Sep 30 01:06:34.452210 2026] [security2:error] [pid 263262:tid 263461] [client 45.138.12.32:27528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.enstechsolutions.com"] [uri "/wp-links-opml.php"] [unique_id "ary0-pEcZ_148BjP8ZPFbwAAAU4"]
[Wed Sep 30 01:06:34.493451 2026] [security2:error] [pid 263262:tid 263497] [client 45.138.12.32:40324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.erg.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0-pEcZ_148BjP8ZPFcAAAAXI"]
[Wed Sep 30 01:06:34.516057 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.516323 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.594449 2026] [security2:error] [pid 263262:tid 263511] [client 20.194.30.107:32762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/wp.php"] [unique_id "ary0-pEcZ_148BjP8ZPFegAAAYA"]
[Wed Sep 30 01:06:34.604760 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.605131 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.656120 2026] [security2:error] [pid 263262:tid 263519] [client 20.214.109.68:61134] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/1.php"] [unique_id "ary0-pEcZ_148BjP8ZPFfwAAAYg"]
[Wed Sep 30 01:06:34.656221 2026] [security2:error] [pid 263262:tid 263519] [client 20.214.109.68:61134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/1.php"] [unique_id "ary0-pEcZ_148BjP8ZPFfwAAAYg"]
[Wed Sep 30 01:06:34.664307 2026] [security2:error] [pid 263262:tid 263462] [client 74.225.148.80:53951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ac83.php"] [unique_id "ary0-pEcZ_148BjP8ZPFgAAAAU8"]
[Wed Sep 30 01:06:34.685611 2026] [security2:error] [pid 263262:tid 263515] [client 20.5.79.49:28347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/images/sallu.php"] [unique_id "ary0-pEcZ_148BjP8ZPFggAAAYQ"]
[Wed Sep 30 01:06:34.694679 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.694945 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.743509 2026] [security2:error] [pid 263262:tid 263427] [client 20.70.173.30:59993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/biufile.php"] [unique_id "ary0-pEcZ_148BjP8ZPFhAAAASw"]
[Wed Sep 30 01:06:34.787779 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.788214 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.847871 2026] [security2:error] [pid 263262:tid 263394] [client 20.28.180.172:29587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/a22.php"] [unique_id "ary0-pEcZ_148BjP8ZPFiAAAAQs"]
[Wed Sep 30 01:06:34.878579 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.878851 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:34.930907 2026] [access_compat:error] [pid 263262:tid 263506] [client 47.79.13.167:43004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:34.931179 2026] [access_compat:error] [pid 263262:tid 263506] [client 47.79.13.167:43004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:34.943855 2026] [security2:error] [pid 263262:tid 263310] [remote 64.23.166.180:63044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-7e419955.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary0-pEcZ_148BjP8ZPFjgABRS4"]
[Wed Sep 30 01:06:34.969772 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:34.970058 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.041703 2026] [security2:error] [pid 263262:tid 263429] [client 20.5.79.49:28335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/.well-known/save.php"] [unique_id "ary0-5EcZ_148BjP8ZPFlgAAAS4"]
[Wed Sep 30 01:06:35.064021 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.064370 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.080278 2026] [security2:error] [pid 263262:tid 263495] [client 104.208.65.139:35311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/24.php"] [unique_id "ary0-5EcZ_148BjP8ZPFmgAAAXA"]
[Wed Sep 30 01:06:35.141008 2026] [security2:error] [pid 263262:tid 263460] [client 74.225.148.80:55908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/class-wp-http-client.php"] [unique_id "ary0-5EcZ_148BjP8ZPFnwAAAU0"]
[Wed Sep 30 01:06:35.151471 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.151780 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.181562 2026] [security2:error] [pid 263262:tid 263313] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0-5EcZ_148BjP8ZPFpAABEzE"], referer: https://torquayfans.com/viewtopic.php?p=34993
[Wed Sep 30 01:06:35.181603 2026] [security2:error] [pid 263262:tid 263313] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0-5EcZ_148BjP8ZPFpAABEzE"], referer: https://torquayfans.com/viewtopic.php?p=34993
[Wed Sep 30 01:06:35.191914 2026] [security2:error] [pid 263262:tid 263467] [client 116.193.128.26:59284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0-5EcZ_148BjP8ZPFowAAAVQ"]
[Wed Sep 30 01:06:35.192048 2026] [security2:error] [pid 263262:tid 263467] [client 116.193.128.26:59284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary0-5EcZ_148BjP8ZPFowAAAVQ"]
[Wed Sep 30 01:06:35.226549 2026] [access_compat:error] [pid 263262:tid 263490] [client 47.79.13.28:51378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:35.226823 2026] [access_compat:error] [pid 263262:tid 263490] [client 47.79.13.28:51378] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:35.241440 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.241728 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.286452 2026] [security2:error] [pid 263262:tid 263500] [client 4.240.25.22:18792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/robots.php"] [unique_id "ary0-5EcZ_148BjP8ZPFqQAAAXU"]
[Wed Sep 30 01:06:35.333350 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.333615 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.367961 2026] [security2:error] [pid 263262:tid 263511] [client 20.5.79.49:28160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/re.php"] [unique_id "ary0-5EcZ_148BjP8ZPFrwAAAYA"]
[Wed Sep 30 01:06:35.387150 2026] [security2:error] [pid 263262:tid 263482] [client 103.159.192.142:60382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0-5EcZ_148BjP8ZPFsQAAAWM"]
[Wed Sep 30 01:06:35.387281 2026] [security2:error] [pid 263262:tid 263482] [client 103.159.192.142:60382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary0-5EcZ_148BjP8ZPFsQAAAWM"]
[Wed Sep 30 01:06:35.388638 2026] [security2:error] [pid 263262:tid 263430] [client 45.138.12.40:6734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.walker23.com"] [uri "/wp-links-opml.php"] [unique_id "ary0-5EcZ_148BjP8ZPFsgAAAS8"]
[Wed Sep 30 01:06:35.425225 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.425507 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.433865 2026] [security2:error] [pid 263262:tid 263442] [client 20.219.2.60:18873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/init.php"] [unique_id "ary0-5EcZ_148BjP8ZPFtgAAATs"]
[Wed Sep 30 01:06:35.517259 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.517528 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.556288 2026] [security2:error] [pid 263262:tid 263493] [client 20.70.173.30:60000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/simple.php"] [unique_id "ary0-5EcZ_148BjP8ZPFwgAAAW4"]
[Wed Sep 30 01:06:35.608034 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.608292 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.610827 2026] [security2:error] [pid 263262:tid 263478] [client 74.225.148.80:55866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/zoo2.php"] [unique_id "ary0-5EcZ_148BjP8ZPFxgAAAV8"]
[Wed Sep 30 01:06:35.699378 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.699718 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.726627 2026] [security2:error] [pid 263262:tid 263404] [client 20.5.79.49:28245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary0-5EcZ_148BjP8ZPF0gAAARU"]
[Wed Sep 30 01:06:35.789916 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.790402 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.872377 2026] [security2:error] [pid 263262:tid 263467] [client 104.208.65.139:23011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/42b5827789index.php"] [unique_id "ary0-5EcZ_148BjP8ZPF3AAAAVQ"]
[Wed Sep 30 01:06:35.883952 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.884388 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:35.927397 2026] [security2:error] [pid 263262:tid 263397] [client 188.64.139.53:45411] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "kcd-global.com"] [uri "/wp-login.php"] [unique_id "ary0-pEcZ_148BjP8ZPFiQAAAQ4"]
[Wed Sep 30 01:06:35.975581 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:35.975855 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.063203 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.063476 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.075964 2026] [security2:error] [pid 263262:tid 263430] [client 20.5.79.49:28163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/img/5/radio.php"] [unique_id "ary0_JEcZ_148BjP8ZPF7AAAAS8"]
[Wed Sep 30 01:06:36.083276 2026] [security2:error] [pid 263262:tid 263468] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary0_JEcZ_148BjP8ZPF7gAAAVU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:36.099273 2026] [security2:error] [pid 263262:tid 263442] [client 74.225.148.80:59199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/zoo1.php"] [unique_id "ary0_JEcZ_148BjP8ZPF7wAAATs"]
[Wed Sep 30 01:06:36.127605 2026] [security2:error] [pid 263262:tid 263395] [client 20.70.173.30:56979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/sxxb.php"] [unique_id "ary0_JEcZ_148BjP8ZPF8QAAAQw"]
[Wed Sep 30 01:06:36.152952 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.153213 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.184119 2026] [security2:error] [pid 263262:tid 263462] [client 20.219.2.60:11663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws80.php"] [unique_id "ary0_JEcZ_148BjP8ZPF9gAAAU8"]
[Wed Sep 30 01:06:36.214948 2026] [security2:error] [pid 263262:tid 263396] [client 20.214.109.68:9810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/term.php"] [unique_id "ary0_JEcZ_148BjP8ZPF-QAAAQ0"]
[Wed Sep 30 01:06:36.257733 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.258158 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.335382 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.335676 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.428655 2026] [security2:error] [pid 263262:tid 263479] [client 20.5.79.49:28299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/item.php"] [unique_id "ary0_JEcZ_148BjP8ZPGBAAAAWA"]
[Wed Sep 30 01:06:36.432003 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.432456 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.463228 2026] [security2:error] [pid 263262:tid 263393] [remote 168.100.149.68:49258] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0_JEcZ_148BjP8ZPF_QABXz0"]
[Wed Sep 30 01:06:36.520049 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.520319 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.572508 2026] [security2:error] [pid 263262:tid 263486] [client 74.225.148.80:59148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/class-ajax.php"] [unique_id "ary0_JEcZ_148BjP8ZPGEQAAAWc"]
[Wed Sep 30 01:06:36.611072 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.611792 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.677186 2026] [security2:error] [pid 263262:tid 263466] [client 43.227.131.37:4225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGFwAAAVM"]
[Wed Sep 30 01:06:36.677393 2026] [security2:error] [pid 263262:tid 263466] [client 43.227.131.37:4225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGFwAAAVM"]
[Wed Sep 30 01:06:36.701320 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.701575 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.768770 2026] [security2:error] [pid 263262:tid 263444] [client 20.5.79.49:28312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/public/fm.php"] [unique_id "ary0_JEcZ_148BjP8ZPGGQAAAT0"]
[Wed Sep 30 01:06:36.794885 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.795322 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.864867 2026] [security2:error] [pid 263262:tid 263458] [client 106.214.2.47:19497] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGHQAAAUs"]
[Wed Sep 30 01:06:36.865015 2026] [security2:error] [pid 263262:tid 263458] [client 106.214.2.47:19497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGHQAAAUs"]
[Wed Sep 30 01:06:36.881653 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.881939 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:36.917667 2026] [security2:error] [pid 263262:tid 263408] [client 49.205.105.16:13456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGIQAAARk"]
[Wed Sep 30 01:06:36.917805 2026] [security2:error] [pid 263262:tid 263408] [client 49.205.105.16:13456] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary0_JEcZ_148BjP8ZPGIQAAARk"]
[Wed Sep 30 01:06:36.971960 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:36.972227 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.069776 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.070215 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.072701 2026] [security2:error] [pid 263262:tid 263462] [client 74.225.148.80:53890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/gm.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGKwAAAU8"]
[Wed Sep 30 01:06:37.081505 2026] [security2:error] [pid 263262:tid 263450] [client 4.240.25.22:8910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGLQAAAUM"]
[Wed Sep 30 01:06:37.105459 2026] [security2:error] [pid 263262:tid 263493] [client 20.5.79.49:28329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/vee.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGLgAAAW4"]
[Wed Sep 30 01:06:37.148144 2026] [security2:error] [pid 263262:tid 263423] [client 20.198.74.230:23933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/n30n.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGMAAAASg"]
[Wed Sep 30 01:06:37.149711 2026] [security2:error] [pid 263262:tid 263351] [remote 64.23.166.180:23784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-84cc89db.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary0_ZEcZ_148BjP8ZPGMgABiFc"]
[Wed Sep 30 01:06:37.155098 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.155361 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.208342 2026] [security2:error] [pid 263262:tid 263475] [client 43.104.4.178:7368] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary0_ZEcZ_148BjP8ZPGMwAAAVw"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=power-banks%2Csolid-works-brands
[Wed Sep 30 01:06:37.246639 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.246917 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.292723 2026] [security2:error] [pid 263262:tid 263428] [client 20.214.109.68:9877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-content/radio.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGNwAAAS0"]
[Wed Sep 30 01:06:37.338487 2026] [security2:error] [pid 263262:tid 263478] [client 194.187.50.201:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0_ZEcZ_148BjP8ZPGPAAAAV8"]
[Wed Sep 30 01:06:37.338872 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.339122 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.381782 2026] [security2:error] [pid 263262:tid 263402] [client 4.240.25.22:12465] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/1.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGQAAAARM"]
[Wed Sep 30 01:06:37.381896 2026] [security2:error] [pid 263262:tid 263402] [client 4.240.25.22:12465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/1.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGQAAAARM"]
[Wed Sep 30 01:06:37.392892 2026] [security2:error] [pid 263262:tid 263357] [remote 2a03:2880:f814:2e:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGQQABfF0"]
[Wed Sep 30 01:06:37.392925 2026] [security2:error] [pid 263262:tid 263357] [remote 2a03:2880:f814:2e:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "www.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGQQABfF0"]
[Wed Sep 30 01:06:37.421508 2026] [security2:error] [pid 263262:tid 263506] [client 20.5.79.49:28293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGRAAAAXs"]
[Wed Sep 30 01:06:37.427901 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.428152 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.464520 2026] [security2:error] [pid 263262:tid 263477] [client 223.181.60.167:31404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGRwAAAV4"]
[Wed Sep 30 01:06:37.464850 2026] [security2:error] [pid 263262:tid 263477] [client 223.181.60.167:31404] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGRwAAAV4"]
[Wed Sep 30 01:06:37.478726 2026] [security2:error] [pid 263262:tid 263454] [client 20.219.2.60:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gettest.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGSQAAAUc"]
[Wed Sep 30 01:06:37.485843 2026] [security2:error] [pid 263262:tid 263518] [client 223.181.30.165:9597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGSAAAAYc"]
[Wed Sep 30 01:06:37.486043 2026] [security2:error] [pid 263262:tid 263518] [client 223.181.30.165:9597] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGSAAAAYc"]
[Wed Sep 30 01:06:37.519257 2026] [security2:error] [pid 263262:tid 263500] [client 74.225.148.80:53211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/class-wp-site-list.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGTwAAAXU"]
[Wed Sep 30 01:06:37.521351 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.521666 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:44713] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.611054 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.611452 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.635927 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGXAABgmM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D99551
[Wed Sep 30 01:06:37.645741 2026] [security2:error] [pid 263262:tid 263393] [client 182.69.182.151:23728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGXgAAAQo"]
[Wed Sep 30 01:06:37.645885 2026] [security2:error] [pid 263262:tid 263393] [client 182.69.182.151:23728] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGXgAAAQo"]
[Wed Sep 30 01:06:37.702066 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.702324 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.704738 2026] [security2:error] [pid 263262:tid 263399] [client 74.7.243.227:39082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary0_ZEcZ_148BjP8ZPGYgAAARA"], referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L2N3ZA==
[Wed Sep 30 01:06:37.737069 2026] [security2:error] [pid 263262:tid 263411] [client 104.208.65.139:33238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/mmq.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGZQAAARw"]
[Wed Sep 30 01:06:37.743006 2026] [security2:error] [pid 263262:tid 263439] [client 20.5.79.49:28381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/13.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGZgAAATg"]
[Wed Sep 30 01:06:37.793208 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.793448 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.797843 2026] [access_compat:error] [pid 263262:tid 263447] [client 47.79.13.234:45284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:37.798297 2026] [access_compat:error] [pid 263262:tid 263447] [client 47.79.13.234:45284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:37.891606 2026] [security2:error] [pid 263262:tid 263478] [client 20.28.180.172:29601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ho.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGfgAAAV8"]
[Wed Sep 30 01:06:37.894796 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.895236 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.939864 2026] [security2:error] [pid 263262:tid 263518] [client 216.73.216.46:44713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGggAAAYc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk0MDAvbm9kZTAvbWVtb3J5OS9ub2RlMA%3D%3D
[Wed Sep 30 01:06:37.970053 2026] [security2:error] [pid 263262:tid 263492] [client 20.70.173.30:33459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/classwithtostring.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGhQAAAW0"]
[Wed Sep 30 01:06:37.976652 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:37.977100 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:37.990324 2026] [security2:error] [pid 263262:tid 263446] [client 74.225.148.80:53899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/asd2.php"] [unique_id "ary0_ZEcZ_148BjP8ZPGhwAAAT8"]
[Wed Sep 30 01:06:38.011946 2026] [security2:error] [pid 263262:tid 263378] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0_pEcZ_148BjP8ZPGiAABG3I"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297720&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:38.011979 2026] [security2:error] [pid 263262:tid 263378] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0_pEcZ_148BjP8ZPGiAABG3I"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297720&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:38.062118 2026] [security2:error] [pid 263262:tid 263387] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0_pEcZ_148BjP8ZPGiQABhHs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=23c398cf0d96613a9672c40f7d95699b&start=90&t=999
[Wed Sep 30 01:06:38.062144 2026] [security2:error] [pid 263262:tid 263387] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary0_pEcZ_148BjP8ZPGiQABhHs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=23c398cf0d96613a9672c40f7d95699b&start=90&t=999
[Wed Sep 30 01:06:38.068912 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.069345 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.079403 2026] [security2:error] [pid 263262:tid 263466] [client 20.5.79.49:28403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ary0_pEcZ_148BjP8ZPGiwAAAVM"]
[Wed Sep 30 01:06:38.159576 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.160031 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.255330 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.255600 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.257902 2026] [security2:error] [pid 263262:tid 263436] [client 20.28.180.172:18327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/file.php"] [unique_id "ary0_pEcZ_148BjP8ZPGkQAAATU"]
[Wed Sep 30 01:06:38.347319 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.347607 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.402248 2026] [security2:error] [pid 263262:tid 263405] [client 20.5.79.49:28345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/worksec.php"] [unique_id "ary0_pEcZ_148BjP8ZPGnAAAARY"]
[Wed Sep 30 01:06:38.437036 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.437300 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.439144 2026] [security2:error] [pid 263262:tid 263458] [remote 168.100.149.28:26116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary0_pEcZ_148BjP8ZPGkwABVWs"]
[Wed Sep 30 01:06:38.518067 2026] [security2:error] [pid 263262:tid 263453] [client 74.225.148.80:59140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/cdc.php"] [unique_id "ary0_pEcZ_148BjP8ZPGowAAAUY"]
[Wed Sep 30 01:06:38.533754 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.534217 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.536360 2026] [http2:warn] [pid 251754:tid 251943] [client 52.167.144.25:39678] h2_stream(251754-514-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:38.607323 2026] [security2:error] [pid 263262:tid 263484] [client 4.240.25.22:41675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary0_pEcZ_148BjP8ZPGrQAAAWU"]
[Wed Sep 30 01:06:38.619258 2026] [security2:error] [pid 263262:tid 263437] [client 20.214.109.68:9429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/155.php"] [unique_id "ary0_pEcZ_148BjP8ZPGrwAAATY"]
[Wed Sep 30 01:06:38.623249 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.623665 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.710860 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.711162 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.723244 2026] [security2:error] [pid 263262:tid 263486] [client 20.5.79.49:28319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/js/fm.php"] [unique_id "ary0_pEcZ_148BjP8ZPGugAAAWc"]
[Wed Sep 30 01:06:38.804271 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.804681 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.898106 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.898555 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:38.982925 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:38.983189 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.033074 2026] [security2:error] [pid 263262:tid 263511] [client 74.225.148.80:55823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/Components.php"] [unique_id "ary0_5EcZ_148BjP8ZPGxgAAAYA"]
[Wed Sep 30 01:06:39.050376 2026] [security2:error] [pid 263262:tid 263457] [client 20.5.79.49:28342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ary0_5EcZ_148BjP8ZPGxwAAAUo"]
[Wed Sep 30 01:06:39.075356 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.075796 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.164000 2026] [security2:error] [pid 263262:tid 263283] [remote 220.181.108.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary0_5EcZ_148BjP8ZPGygABcRM"]
[Wed Sep 30 01:06:39.166602 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.166927 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.255542 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.255869 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.280183 2026] [security2:error] [pid 263262:tid 263401] [client 187.54.96.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary0_5EcZ_148BjP8ZPG1QAAARI"]
[Wed Sep 30 01:06:39.281467 2026] [security2:error] [pid 263262:tid 263339] [remote 57.141.14.110:47104] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/comments/feed/wp-includes/wlwmanifest.xml"] [unique_id "ary0_5EcZ_148BjP8ZPG1gABPks"]
[Wed Sep 30 01:06:39.350331 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.350729 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:63474] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.361733 2026] [security2:error] [pid 263262:tid 263495] [client 20.214.109.68:9436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-the.php"] [unique_id "ary0_5EcZ_148BjP8ZPG4QAAAXA"]
[Wed Sep 30 01:06:39.385611 2026] [security2:error] [pid 263262:tid 263423] [client 20.5.79.49:28395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/1234.php"] [unique_id "ary0_5EcZ_148BjP8ZPG4gAAASg"]
[Wed Sep 30 01:06:39.493021 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.493436 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.495944 2026] [security2:error] [pid 263262:tid 263402] [client 20.194.30.107:53434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/users.php"] [unique_id "ary0_5EcZ_148BjP8ZPG6gAAARM"]
[Wed Sep 30 01:06:39.510280 2026] [security2:error] [pid 263262:tid 263442] [client 74.225.148.80:50156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/admin.php/xl9.php"] [unique_id "ary0_5EcZ_148BjP8ZPG7QAAATs"]
[Wed Sep 30 01:06:39.534048 2026] [security2:error] [pid 263262:tid 263454] [client 20.28.180.172:34286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/un.php"] [unique_id "ary0_5EcZ_148BjP8ZPG7wAAAUc"]
[Wed Sep 30 01:06:39.550528 2026] [security2:error] [pid 263262:tid 263488] [client 37.41.16.35:62887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0_5EcZ_148BjP8ZPG8AAAAWk"]
[Wed Sep 30 01:06:39.550704 2026] [security2:error] [pid 263262:tid 263488] [client 37.41.16.35:62887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary0_5EcZ_148BjP8ZPG8AAAAWk"]
[Wed Sep 30 01:06:39.573744 2026] [security2:error] [pid 263262:tid 263500] [client 20.219.2.60:11329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/jga.php"] [unique_id "ary0_5EcZ_148BjP8ZPG8QAAAXU"]
[Wed Sep 30 01:06:39.582927 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.583180 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.599519 2026] [security2:error] [pid 263262:tid 263485] [client 45.138.12.32:40434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.enh.vhc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary0_5EcZ_148BjP8ZPG9wAAAWY"]
[Wed Sep 30 01:06:39.617639 2026] [core:error] [pid 263262:tid 263497] [client 45.138.12.32:27566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:39.617660 2026] [core:error] [pid 263262:tid 263497] [client 45.138.12.32:27566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:39.678918 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.679364 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.712003 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.712260 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.733508 2026] [security2:error] [pid 263262:tid 263498] [client 20.5.79.49:28253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/cilus.php"] [unique_id "ary0_5EcZ_148BjP8ZPHAgAAAXM"]
[Wed Sep 30 01:06:39.758124 2026] [security2:error] [pid 263262:tid 263516] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary0_5EcZ_148BjP8ZPHBAAAAYU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:39.772544 2026] [security2:error] [pid 263262:tid 263407] [client 216.73.216.46:63474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary0_5EcZ_148BjP8ZPHBQAAARg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mjg2
[Wed Sep 30 01:06:39.804350 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.804631 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.894080 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.894385 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.946933 2026] [security2:error] [pid 263262:tid 263421] [client 20.28.180.172:61231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bolt.php"] [unique_id "ary0_5EcZ_148BjP8ZPHEQAAASY"]
[Wed Sep 30 01:06:39.984313 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:39.984587 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:39.990320 2026] [security2:error] [pid 263262:tid 263417] [client 170.64.184.255:55810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/wp-admin/install.php"] [unique_id "ary0_5EcZ_148BjP8ZPHFAAAASI"]
[Wed Sep 30 01:06:39.996769 2026] [security2:error] [pid 263262:tid 263432] [client 74.225.148.80:53912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/gulu.php"] [unique_id "ary0_5EcZ_148BjP8ZPHFgAAATE"]
[Wed Sep 30 01:06:40.024963 2026] [security2:error] [pid 263262:tid 263495] [client 20.70.173.30:60008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/yawa.php"] [unique_id "ary1AJEcZ_148BjP8ZPHGAAAAXA"]
[Wed Sep 30 01:06:40.067109 2026] [security2:error] [pid 263262:tid 263402] [client 20.5.79.49:28275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ary1AJEcZ_148BjP8ZPHHQAAARM"]
[Wed Sep 30 01:06:40.073615 2026] [security2:error] [pid 263262:tid 263442] [client 20.214.109.68:9802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp5.php"] [unique_id "ary1AJEcZ_148BjP8ZPHHwAAATs"]
[Wed Sep 30 01:06:40.075337 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.075594 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.081061 2026] [security2:error] [pid 263262:tid 263505] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1AJEcZ_148BjP8ZPHIAAAAXo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:40.165399 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.165680 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.236502 2026] [security2:error] [pid 263262:tid 263515] [client 20.219.2.60:19444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/myfile.php"] [unique_id "ary1AJEcZ_148BjP8ZPHLQAAAYQ"]
[Wed Sep 30 01:06:40.256878 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.257143 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.352101 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.352483 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.395583 2026] [security2:error] [pid 263262:tid 263431] [client 20.5.79.49:28356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/mini.php"] [unique_id "ary1AJEcZ_148BjP8ZPHOwAAATA"]
[Wed Sep 30 01:06:40.439343 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.439604 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.457094 2026] [security2:error] [pid 263262:tid 263394] [client 74.225.148.80:59143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/bala.php"] [unique_id "ary1AJEcZ_148BjP8ZPHQAAAAQs"]
[Wed Sep 30 01:06:40.471695 2026] [security2:error] [pid 263262:tid 263419] [client 20.70.173.30:63140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/key.php"] [unique_id "ary1AJEcZ_148BjP8ZPHQQAAASQ"]
[Wed Sep 30 01:06:40.509896 2026] [security2:error] [pid 263262:tid 263401] [client 170.64.184.255:55826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/wp/wp-admin/install.php"] [unique_id "ary1AJEcZ_148BjP8ZPHSAAAARI"]
[Wed Sep 30 01:06:40.531300 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.531552 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.611252 2026] [security2:error] [pid 263262:tid 263406] [remote 168.100.149.2:28122] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1AJEcZ_148BjP8ZPHRAABHRI"]
[Wed Sep 30 01:06:40.622164 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.622529 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.713429 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.713723 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.721954 2026] [security2:error] [pid 263262:tid 263496] [client 20.28.180.172:29451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/asax.php"] [unique_id "ary1AJEcZ_148BjP8ZPHUgAAAXE"]
[Wed Sep 30 01:06:40.729804 2026] [security2:error] [pid 263262:tid 263505] [client 20.5.79.49:28175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/nope.php"] [unique_id "ary1AJEcZ_148BjP8ZPHVAAAAXo"]
[Wed Sep 30 01:06:40.737416 2026] [security2:error] [pid 263262:tid 263498] [client 103.241.204.139:62689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1AJEcZ_148BjP8ZPHVgAAAXM"]
[Wed Sep 30 01:06:40.737531 2026] [security2:error] [pid 263262:tid 263498] [client 103.241.204.139:62689] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1AJEcZ_148BjP8ZPHVgAAAXM"]
[Wed Sep 30 01:06:40.803268 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.803540 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.821246 2026] [security2:error] [pid 263262:tid 263449] [client 170.64.184.255:55828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/new/wp-admin/install.php"] [unique_id "ary1AJEcZ_148BjP8ZPHWgAAAUI"]
[Wed Sep 30 01:06:40.835297 2026] [security2:error] [pid 263262:tid 263446] [client 155.190.6.18:43504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1AJEcZ_148BjP8ZPHXAAAAT8"]
[Wed Sep 30 01:06:40.835455 2026] [security2:error] [pid 263262:tid 263446] [client 155.190.6.18:43504] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1AJEcZ_148BjP8ZPHXAAAAT8"]
[Wed Sep 30 01:06:40.850271 2026] [security2:error] [pid 263262:tid 263494] [client 104.208.65.139:23814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/fryvbbn.php"] [unique_id "ary1AJEcZ_148BjP8ZPHXQAAAW8"]
[Wed Sep 30 01:06:40.894933 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.895211 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.904833 2026] [security2:error] [pid 263262:tid 263513] [client 74.225.148.80:50120] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ferrari250california.paulmercer.me"] [uri "/c99.php"] [unique_id "ary1AJEcZ_148BjP8ZPHYwAAAYI"]
[Wed Sep 30 01:06:40.986604 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:40.986902 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:40.991495 2026] [mime:warn] [pid 263262:tid 263482] AH01602: Cannot get media parameter.
[Wed Sep 30 01:06:41.060451 2026] [security2:error] [pid 263262:tid 263438] [client 20.5.79.49:28404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/index3.php"] [unique_id "ary1AZEcZ_148BjP8ZPHewAAATc"]
[Wed Sep 30 01:06:41.068429 2026] [security2:error] [pid 263262:tid 263489] [client 20.214.109.68:10199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-access.php"] [unique_id "ary1AZEcZ_148BjP8ZPHfAAAAWo"]
[Wed Sep 30 01:06:41.084656 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.084941 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.094023 2026] [security2:error] [pid 263262:tid 263511] [client 45.138.12.32:27646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evg.lwl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1AZEcZ_148BjP8ZPHfgAAAYA"]
[Wed Sep 30 01:06:41.130645 2026] [security2:error] [pid 263262:tid 263418] [client 170.64.184.255:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/old/wp-admin/install.php"] [unique_id "ary1AZEcZ_148BjP8ZPHfwAAASM"]
[Wed Sep 30 01:06:41.173934 2026] [security2:error] [pid 263262:tid 263419] [client 177.75.111.244:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/network-video-recorder-networking"] [unique_id "ary1AZEcZ_148BjP8ZPHhAAAASQ"]
[Wed Sep 30 01:06:41.174585 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.174842 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.230172 2026] [security2:error] [pid 263262:tid 263412] [client 45.138.12.32:27650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eyd.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1AZEcZ_148BjP8ZPHhQAAAR0"]
[Wed Sep 30 01:06:41.255018 2026] [access_compat:error] [pid 263262:tid 263518] [client 47.82.11.53:44280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:41.255304 2026] [access_compat:error] [pid 263262:tid 263518] [client 47.82.11.53:44280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:41.266442 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.266464 2026] [security2:error] [pid 263262:tid 263307] [remote 47.128.114.118:13340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/5065/"] [unique_id "ary1AZEcZ_148BjP8ZPHigABGis"]
[Wed Sep 30 01:06:41.266719 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.312589 2026] [security2:error] [pid 263262:tid 263422] [client 103.159.192.142:60523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1AZEcZ_148BjP8ZPHiwAAASc"]
[Wed Sep 30 01:06:41.312718 2026] [security2:error] [pid 263262:tid 263422] [client 103.159.192.142:60523] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1AZEcZ_148BjP8ZPHiwAAASc"]
[Wed Sep 30 01:06:41.357499 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.357792 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.371737 2026] [security2:error] [pid 263262:tid 263417] [client 74.225.148.80:42806] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ferrari250california.paulmercer.me"] [uri "/c99.php"] [unique_id "ary1AZEcZ_148BjP8ZPHkwAAASI"]
[Wed Sep 30 01:06:41.376766 2026] [security2:error] [pid 263262:tid 263432] [client 20.5.79.49:28232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/uploads/admin.php"] [unique_id "ary1AZEcZ_148BjP8ZPHlQAAATE"]
[Wed Sep 30 01:06:41.382504 2026] [security2:error] [pid 263262:tid 263445] [client 57.141.24.111:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary1AZEcZ_148BjP8ZPHmAAAAT4"]
[Wed Sep 30 01:06:41.448039 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.448315 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.539619 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.539907 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.560913 2026] [security2:error] [pid 263262:tid 263398] [client 170.64.184.255:55836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "ary1AZEcZ_148BjP8ZPHpQAAAQ8"]
[Wed Sep 30 01:06:41.606965 2026] [security2:error] [pid 263262:tid 263468] [client 20.214.109.68:9419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/hots.php"] [unique_id "ary1AZEcZ_148BjP8ZPHqQAAAVU"]
[Wed Sep 30 01:06:41.629537 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.629802 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.688675 2026] [security2:error] [pid 263262:tid 263492] [client 20.5.79.49:28188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/forbidals.php"] [unique_id "ary1AZEcZ_148BjP8ZPHtgAAAW0"]
[Wed Sep 30 01:06:41.721435 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.721728 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.812870 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.813140 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.836022 2026] [security2:error] [pid 263262:tid 263518] [client 74.225.148.80:42802] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ferrari250california.paulmercer.me"] [uri "/c99.php"] [unique_id "ary1AZEcZ_148BjP8ZPHwgAAAYc"]
[Wed Sep 30 01:06:41.869864 2026] [security2:error] [pid 263262:tid 263421] [client 20.70.173.30:27791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/key.php"] [unique_id "ary1AZEcZ_148BjP8ZPHyQAAASY"]
[Wed Sep 30 01:06:41.870488 2026] [security2:error] [pid 263262:tid 263458] [client 170.64.184.255:55850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/test/wp-admin/install.php"] [unique_id "ary1AZEcZ_148BjP8ZPHygAAAUs"]
[Wed Sep 30 01:06:41.904461 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.904742 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:41.949080 2026] [security2:error] [pid 263262:tid 263455] [client 116.197.133.25:59198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1AZEcZ_148BjP8ZPH0AAAAUg"]
[Wed Sep 30 01:06:41.949190 2026] [security2:error] [pid 263262:tid 263455] [client 116.197.133.25:59198] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1AZEcZ_148BjP8ZPH0AAAAUg"]
[Wed Sep 30 01:06:41.977789 2026] [security2:error] [pid 263262:tid 263493] [client 20.194.30.107:49167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1AZEcZ_148BjP8ZPH1QAAAW4"]
[Wed Sep 30 01:06:41.994504 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:41.994781 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.007984 2026] [security2:error] [pid 263262:tid 263413] [client 20.5.79.49:28360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/index1.php"] [unique_id "ary1ApEcZ_148BjP8ZPH2AAAAR4"]
[Wed Sep 30 01:06:42.086342 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.086607 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.176701 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.177020 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.180859 2026] [security2:error] [pid 263262:tid 263452] [client 170.64.184.255:55852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/blog/wp-admin/install.php"] [unique_id "ary1ApEcZ_148BjP8ZPH5wAAAUU"]
[Wed Sep 30 01:06:42.271056 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.271505 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.297385 2026] [security2:error] [pid 263262:tid 263492] [client 74.225.148.80:56113] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ferrari250california.paulmercer.me"] [uri "/c99.php"] [unique_id "ary1ApEcZ_148BjP8ZPH7gAAAW0"]
[Wed Sep 30 01:06:42.357772 2026] [security2:error] [pid 263262:tid 263476] [client 20.5.79.49:28343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/about/function.php"] [unique_id "ary1ApEcZ_148BjP8ZPH9gAAAV0"]
[Wed Sep 30 01:06:42.360378 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.360651 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.400911 2026] [security2:error] [pid 263262:tid 263509] [client 20.219.2.60:11370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/fs.php"] [unique_id "ary1ApEcZ_148BjP8ZPH_AAAAX4"]
[Wed Sep 30 01:06:42.446723 2026] [security2:error] [pid 263262:tid 263515] [remote 168.100.149.147:31828] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1ApEcZ_148BjP8ZPH8gABVDk"]
[Wed Sep 30 01:06:42.450773 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.451060 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.492063 2026] [security2:error] [pid 263262:tid 263414] [client 170.64.184.255:55868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/cms/wp-admin/install.php"] [unique_id "ary1ApEcZ_148BjP8ZPIAgAAAR8"]
[Wed Sep 30 01:06:42.522045 2026] [security2:error] [pid 263262:tid 263456] [client 4.196.65.241:2556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/82.php"] [unique_id "ary1ApEcZ_148BjP8ZPIBQAAAUk"]
[Wed Sep 30 01:06:42.550979 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.552778 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.637749 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.638178 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.663662 2026] [security2:error] [pid 263262:tid 263413] [client 20.219.2.60:19441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/sid3.php"] [unique_id "ary1ApEcZ_148BjP8ZPIDAAAAR4"]
[Wed Sep 30 01:06:42.683401 2026] [security2:error] [pid 263262:tid 263495] [client 20.5.79.49:28230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/show/asa.php"] [unique_id "ary1ApEcZ_148BjP8ZPIDgAAAXA"]
[Wed Sep 30 01:06:42.727672 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.727945 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.769785 2026] [security2:error] [pid 263262:tid 263477] [client 74.225.148.80:55833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/ttivnife.php"] [unique_id "ary1ApEcZ_148BjP8ZPIEgAAAV4"]
[Wed Sep 30 01:06:42.803048 2026] [security2:error] [pid 263262:tid 263503] [client 170.64.184.255:55884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/web/wp-admin/install.php"] [unique_id "ary1ApEcZ_148BjP8ZPIEwAAAXg"]
[Wed Sep 30 01:06:42.819570 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.819882 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.825619 2026] [security2:error] [pid 263262:tid 263498] [client 20.198.74.230:24162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/calmjpss.php"] [unique_id "ary1ApEcZ_148BjP8ZPIFgAAAXM"]
[Wed Sep 30 01:06:42.911468 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:42.911734 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:42.995801 2026] [security2:error] [pid 263262:tid 263470] [client 20.5.79.49:28402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-su.php"] [unique_id "ary1ApEcZ_148BjP8ZPIJwAAAVc"]
[Wed Sep 30 01:06:43.004262 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.004518 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.065300 2026] [security2:error] [pid 263262:tid 263435] [client 223.235.102.107:10810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIKgAAATQ"]
[Wed Sep 30 01:06:43.067192 2026] [security2:error] [pid 263262:tid 263435] [client 223.235.102.107:10810] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIKgAAATQ"]
[Wed Sep 30 01:06:43.094751 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.095024 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:21875] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.098857 2026] [security2:error] [pid 263262:tid 263441] [client 20.70.173.30:59542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/sym.php"] [unique_id "ary1A5EcZ_148BjP8ZPILQAAATo"]
[Wed Sep 30 01:06:43.112773 2026] [security2:error] [pid 263262:tid 263507] [client 170.64.184.255:55892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/backup/wp-admin/install.php"] [unique_id "ary1A5EcZ_148BjP8ZPILgAAAXw"]
[Wed Sep 30 01:06:43.185950 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.186490 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.220137 2026] [security2:error] [pid 263262:tid 263414] [client 74.225.148.80:50139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/admin.php/2P.php"] [unique_id "ary1A5EcZ_148BjP8ZPINAAAAR8"]
[Wed Sep 30 01:06:43.234659 2026] [security2:error] [pid 263262:tid 263380] [remote 57.141.14.15:25198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIMAABMnQ"]
[Wed Sep 30 01:06:43.280494 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.280769 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.308456 2026] [security2:error] [pid 263262:tid 263407] [client 20.5.79.49:28344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/css/install.php"] [unique_id "ary1A5EcZ_148BjP8ZPIPQAAARg"]
[Wed Sep 30 01:06:43.325301 2026] [security2:error] [pid 263262:tid 263479] [client 20.214.109.68:9891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/admin-footer.php"] [unique_id "ary1A5EcZ_148BjP8ZPIPgAAAWA"]
[Wed Sep 30 01:06:43.372336 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.372607 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.400195 2026] [access_compat:error] [pid 263262:tid 263402] [client 47.79.13.168:34686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:43.400471 2026] [access_compat:error] [pid 263262:tid 263402] [client 47.79.13.168:34686] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:43.426216 2026] [security2:error] [pid 263262:tid 263406] [client 170.64.184.255:55908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/site/wp-admin/install.php"] [unique_id "ary1A5EcZ_148BjP8ZPISAAAARc"]
[Wed Sep 30 01:06:43.463658 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.463963 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.471826 2026] [security2:error] [pid 263262:tid 263483] [client 20.194.30.107:53433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.steaminnovationfoundation.org"] [uri "/cabs.php"] [unique_id "ary1A5EcZ_148BjP8ZPITwAAAWQ"]
[Wed Sep 30 01:06:43.517286 2026] [security2:error] [pid 263262:tid 263477] [client 216.73.216.46:21875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1A5EcZ_148BjP8ZPIUAAAAV4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTExL25vZGUwL2NwdTMvbm9kZTAvbWVtb3J5ODE%3D
[Wed Sep 30 01:06:43.534118 2026] [security2:error] [pid 263262:tid 263503] [client 45.138.12.40:3098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.windofive.net"] [uri "/wp-links-opml.php"] [unique_id "ary1A5EcZ_148BjP8ZPIUQAAAXg"]
[Wed Sep 30 01:06:43.555509 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.555846 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:64199] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.557608 2026] [security2:error] [pid 263262:tid 263358] [remote 57.141.14.55:54120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/wp-json/tribe/events/v1/events/"] [unique_id "ary1A5EcZ_148BjP8ZPIUwABc14"]
[Wed Sep 30 01:06:43.569914 2026] [security2:error] [pid 263262:tid 263487] [client 122.173.27.10:15441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIVAAAAWg"]
[Wed Sep 30 01:06:43.570019 2026] [security2:error] [pid 263262:tid 263487] [client 122.173.27.10:15441] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIVAAAAWg"]
[Wed Sep 30 01:06:43.645042 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.645307 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.649103 2026] [security2:error] [pid 263262:tid 263511] [client 20.5.79.49:28355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ty.php"] [unique_id "ary1A5EcZ_148BjP8ZPIWQAAAYA"]
[Wed Sep 30 01:06:43.689725 2026] [security2:error] [pid 263262:tid 263437] [client 74.225.148.80:64410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/a.php"] [unique_id "ary1A5EcZ_148BjP8ZPIWwAAATY"]
[Wed Sep 30 01:06:43.737781 2026] [security2:error] [pid 263262:tid 263470] [client 170.64.184.255:55914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "ary1A5EcZ_148BjP8ZPIXQAAAVc"]
[Wed Sep 30 01:06:43.790200 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.790565 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.830303 2026] [security2:error] [pid 263262:tid 263354] [remote 213.186.1.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.1.186.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1A5EcZ_148BjP8ZPIXwABOlo"]
[Wed Sep 30 01:06:43.831607 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.832028 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.918801 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:43.919112 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:43.954480 2026] [security2:error] [pid 263262:tid 263496] [client 216.73.216.46:64199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1A5EcZ_148BjP8ZPIbAAAAXE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTUvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:06:43.960360 2026] [security2:error] [pid 263262:tid 263381] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1A5EcZ_148BjP8ZPIbgABMXU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=a47aa7ddb7ad2f738d3236a4ea887c97
[Wed Sep 30 01:06:43.960389 2026] [security2:error] [pid 263262:tid 263381] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1A5EcZ_148BjP8ZPIbgABMXU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=a47aa7ddb7ad2f738d3236a4ea887c97
[Wed Sep 30 01:06:43.961723 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:28189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/.well-known/as.php"] [unique_id "ary1A5EcZ_148BjP8ZPIbwAAAXY"]
[Wed Sep 30 01:06:44.004028 2026] [access_compat:error] [pid 263262:tid 263377] [remote 17.166.154.58:33304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.004305 2026] [access_compat:error] [pid 263262:tid 263377] [remote 17.166.154.58:33304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.008370 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.008643 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.034734 2026] [security2:error] [pid 263262:tid 263478] [client 20.70.173.30:59529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/mh.php"] [unique_id "ary1BJEcZ_148BjP8ZPIeAAAAV8"]
[Wed Sep 30 01:06:44.050067 2026] [security2:error] [pid 263262:tid 263404] [client 170.64.184.255:55928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.184.64.170.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.nassiplateau-org-ng.jfootsteps.com"] [uri "/shop/wp-admin/install.php"] [unique_id "ary1BJEcZ_148BjP8ZPIeQAAARU"]
[Wed Sep 30 01:06:44.100950 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.101205 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.151491 2026] [security2:error] [pid 263262:tid 263430] [client 49.43.163.212:53943] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1A5EcZ_148BjP8ZPIdAAAAS8"]
[Wed Sep 30 01:06:44.177101 2026] [security2:error] [pid 263262:tid 263395] [client 74.225.148.80:50169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/cord.php"] [unique_id "ary1BJEcZ_148BjP8ZPIgwAAAQw"]
[Wed Sep 30 01:06:44.193102 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.193370 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:27103] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.217442 2026] [security2:error] [pid 263262:tid 263454] [client 201.32.215.149:5536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPIhgAAAUc"]
[Wed Sep 30 01:06:44.217618 2026] [security2:error] [pid 263262:tid 263454] [client 201.32.215.149:5536] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPIhgAAAUc"]
[Wed Sep 30 01:06:44.286770 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.287040 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.288878 2026] [security2:error] [pid 263262:tid 263429] [client 20.5.79.49:28284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-admin/wp-admin.php"] [unique_id "ary1BJEcZ_148BjP8ZPIjwAAAS4"]
[Wed Sep 30 01:06:44.293591 2026] [security2:error] [pid 263262:tid 263462] [client 20.28.180.172:61246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-blogs.php"] [unique_id "ary1BJEcZ_148BjP8ZPIkQAAAU8"]
[Wed Sep 30 01:06:44.380238 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.380690 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.399217 2026] [security2:error] [pid 263262:tid 263515] [client 152.59.165.7:64258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPInAAAAYQ"]
[Wed Sep 30 01:06:44.399337 2026] [security2:error] [pid 263262:tid 263515] [client 152.59.165.7:64258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPInAAAAYQ"]
[Wed Sep 30 01:06:44.413423 2026] [security2:error] [pid 263262:tid 263386] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1BJEcZ_148BjP8ZPInQABiHo"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=60ed9463c299cc231d6fb91fc4ebbc40
[Wed Sep 30 01:06:44.413458 2026] [security2:error] [pid 263262:tid 263386] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1BJEcZ_148BjP8ZPInQABiHo"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=60ed9463c299cc231d6fb91fc4ebbc40
[Wed Sep 30 01:06:44.440832 2026] [security2:error] [pid 263262:tid 263458] [remote 168.100.149.215:43134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1BJEcZ_148BjP8ZPIlAABbGA"]
[Wed Sep 30 01:06:44.473100 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.473543 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.515588 2026] [security2:error] [pid 263262:tid 263469] [client 20.70.173.30:56448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/BDKR28WP.php"] [unique_id "ary1BJEcZ_148BjP8ZPIowAAAVY"]
[Wed Sep 30 01:06:44.559909 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.560179 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.622601 2026] [security2:error] [pid 263262:tid 263405] [client 20.5.79.49:28241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/waf.php"] [unique_id "ary1BJEcZ_148BjP8ZPIqAAAARY"]
[Wed Sep 30 01:06:44.623872 2026] [security2:error] [pid 263262:tid 263489] [client 216.73.216.46:27103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1BJEcZ_148BjP8ZPIqQAAAWo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvY3B1OA%3D%3D
[Wed Sep 30 01:06:44.636111 2026] [security2:error] [pid 263262:tid 263512] [client 173.254.29.157:28628] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary1BJEcZ_148BjP8ZPIrAAAAYE"]
[Wed Sep 30 01:06:44.642124 2026] [security2:error] [pid 263262:tid 263456] [client 74.225.148.80:42788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/anom.php"] [unique_id "ary1BJEcZ_148BjP8ZPIrQAAAUk"]
[Wed Sep 30 01:06:44.652838 2026] [security2:error] [pid 263262:tid 263465] [client 173.254.29.157:28632] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary1BJEcZ_148BjP8ZPIrwAAAVI"]
[Wed Sep 30 01:06:44.672455 2026] [security2:error] [pid 263262:tid 263446] [client 173.254.29.157:28638] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary1BJEcZ_148BjP8ZPIsQAAAT8"]
[Wed Sep 30 01:06:44.692530 2026] [security2:error] [pid 263262:tid 263482] [client 173.254.29.157:28642] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary1BJEcZ_148BjP8ZPIsgAAAWM"]
[Wed Sep 30 01:06:44.702792 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.703084 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.741433 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.741710 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.824310 2026] [security2:error] [pid 263262:tid 263490] [client 20.219.2.60:18855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/666.php"] [unique_id "ary1BJEcZ_148BjP8ZPIugAAAWs"]
[Wed Sep 30 01:06:44.830521 2026] [security2:error] [pid 263262:tid 263452] [client 20.214.109.68:62454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws84.php"] [unique_id "ary1BJEcZ_148BjP8ZPIvAAAAUU"]
[Wed Sep 30 01:06:44.837040 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.837476 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.839053 2026] [security2:error] [pid 263262:tid 263461] [client 20.219.2.60:11390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/byypas.php"] [unique_id "ary1BJEcZ_148BjP8ZPIvgAAAU4"]
[Wed Sep 30 01:06:44.859111 2026] [access_compat:error] [pid 263262:tid 263390] [remote 17.166.235.252:46636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.859369 2026] [access_compat:error] [pid 263262:tid 263390] [remote 17.166.235.252:46636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.910504 2026] [security2:error] [pid 263262:tid 263435] [client 20.194.30.107:41197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/tool.php"] [unique_id "ary1BJEcZ_148BjP8ZPIwgAAATQ"]
[Wed Sep 30 01:06:44.925891 2026] [security2:error] [pid 263262:tid 263506] [client 203.122.45.246:59172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPIxAAAAXs"]
[Wed Sep 30 01:06:44.926016 2026] [security2:error] [pid 263262:tid 263506] [client 203.122.45.246:59172] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1BJEcZ_148BjP8ZPIxAAAAXs"]
[Wed Sep 30 01:06:44.927478 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:44.927912 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:44.941970 2026] [security2:error] [pid 263262:tid 263515] [client 20.5.79.49:28256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ary1BJEcZ_148BjP8ZPIyAAAAYQ"]
[Wed Sep 30 01:06:44.955832 2026] [security2:error] [pid 263262:tid 263272] [remote 213.186.1.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.1.186.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1BJEcZ_148BjP8ZPIygABiAg"]
[Wed Sep 30 01:06:45.016486 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.016935 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.082247 2026] [security2:error] [pid 263262:tid 263501] [client 20.28.180.172:29607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/esp.php"] [unique_id "ary1BZEcZ_148BjP8ZPI1AAAAXY"]
[Wed Sep 30 01:06:45.106801 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.107095 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.107791 2026] [security2:error] [pid 263262:tid 263433] [client 202.179.95.79:49479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1BZEcZ_148BjP8ZPI2AAAATI"]
[Wed Sep 30 01:06:45.107946 2026] [security2:error] [pid 263262:tid 263433] [client 202.179.95.79:49479] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1BZEcZ_148BjP8ZPI2AAAATI"]
[Wed Sep 30 01:06:45.135930 2026] [security2:error] [pid 263262:tid 263453] [client 74.225.148.80:42753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/plugins.php"] [unique_id "ary1BZEcZ_148BjP8ZPI2gAAAUY"]
[Wed Sep 30 01:06:45.158687 2026] [security2:error] [pid 263262:tid 263370] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1BZEcZ_148BjP8ZPI3gABFmo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=90&t=17118
[Wed Sep 30 01:06:45.158724 2026] [security2:error] [pid 263262:tid 263370] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1BZEcZ_148BjP8ZPI3gABFmo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=0232e052d36d828540999fc7567166d4&start=90&t=17118
[Wed Sep 30 01:06:45.196434 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.196698 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.258751 2026] [security2:error] [pid 263262:tid 263488] [client 20.5.79.49:28202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/update/f35.php"] [unique_id "ary1BZEcZ_148BjP8ZPI5gAAAWk"]
[Wed Sep 30 01:06:45.292252 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.292493 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.378742 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.379033 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:47904] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.473747 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.474104 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.510267 2026] [access_compat:error] [pid 263262:tid 263271] [remote 17.166.150.238:46670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.510548 2026] [access_compat:error] [pid 263262:tid 263271] [remote 17.166.150.238:46670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.546671 2026] [security2:error] [pid 263262:tid 263283] [remote 213.186.1.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.1.186.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1BZEcZ_148BjP8ZPI9gABRxM"]
[Wed Sep 30 01:06:45.562605 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.562920 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.588519 2026] [security2:error] [pid 263262:tid 263426] [client 20.5.79.49:28348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/ton.php"] [unique_id "ary1BZEcZ_148BjP8ZPI-QAAASs"]
[Wed Sep 30 01:06:45.599999 2026] [security2:error] [pid 263262:tid 263508] [client 74.225.148.80:50159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/zlwvxiyp.php"] [unique_id "ary1BZEcZ_148BjP8ZPI-gAAAX0"]
[Wed Sep 30 01:06:45.652465 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.652741 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.695074 2026] [authz_core:error] [pid 263262:tid 263464] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/IXR/error_log, referer: binance.com
[Wed Sep 30 01:06:45.723070 2026] [security2:error] [pid 263262:tid 263513] [client 127.0.0.1:18338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.hubach.com"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary1BZEcZ_148BjP8ZPI_gAAAYI"]
[Wed Sep 30 01:06:45.723071 2026] [security2:error] [pid 263262:tid 263420] [client 127.0.0.1:18342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary1BZEcZ_148BjP8ZPI_wAAASU"]
[Wed Sep 30 01:06:45.723110 2026] [security2:error] [pid 263262:tid 263510] [client 74.7.241.170:53622] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.hubach.com"] [uri "/robots.txt"] [unique_id "ary1BZEcZ_148BjP8ZPI_QABfwM"]
[Wed Sep 30 01:06:45.742358 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.742635 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.750114 2026] [security2:error] [pid 263262:tid 263432] [client 52.231.69.245:39098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1BZEcZ_148BjP8ZPJCQAAATE"]
[Wed Sep 30 01:06:45.794161 2026] [security2:error] [pid 263262:tid 263404] [client 216.73.216.46:47904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1BZEcZ_148BjP8ZPJDAAAARU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5OTcvcG93ZXI%3D
[Wed Sep 30 01:06:45.805698 2026] [access_compat:error] [pid 263262:tid 263461] [client 47.79.13.177:41080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:45.806007 2026] [access_compat:error] [pid 263262:tid 263461] [client 47.79.13.177:41080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:45.833442 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.833707 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.897705 2026] [security2:error] [pid 263262:tid 263423] [client 116.193.128.26:59918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1BZEcZ_148BjP8ZPJEwAAASg"]
[Wed Sep 30 01:06:45.898096 2026] [security2:error] [pid 263262:tid 263423] [client 116.193.128.26:59918] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1BZEcZ_148BjP8ZPJEwAAASg"]
[Wed Sep 30 01:06:45.913552 2026] [security2:error] [pid 263262:tid 263444] [client 20.5.79.49:28260] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "webmail.beetreefolkschool.org"] [uri "/.mopj.php"] [unique_id "ary1BZEcZ_148BjP8ZPJFAAAAT0"]
[Wed Sep 30 01:06:45.929547 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:45.929998 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:45.990801 2026] [security2:error] [pid 263262:tid 263406] [client 20.214.109.68:9818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/bnm.php"] [unique_id "ary1BZEcZ_148BjP8ZPJGQAAARc"]
[Wed Sep 30 01:06:46.014856 2026] [security2:error] [pid 263262:tid 263515] [client 103.159.192.142:61003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1BpEcZ_148BjP8ZPJGwAAAYQ"]
[Wed Sep 30 01:06:46.014977 2026] [security2:error] [pid 263262:tid 263515] [client 103.159.192.142:61003] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1BpEcZ_148BjP8ZPJGwAAAYQ"]
[Wed Sep 30 01:06:46.022694 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.023187 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.065393 2026] [security2:error] [pid 263262:tid 263488] [client 74.225.148.80:50133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/1Be5IfrlWP.php"] [unique_id "ary1BpEcZ_148BjP8ZPJHAAAAWk"]
[Wed Sep 30 01:06:46.087434 2026] [security2:error] [pid 263262:tid 263484] [client 52.231.69.245:39055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1BpEcZ_148BjP8ZPJHQAAAWU"]
[Wed Sep 30 01:06:46.108270 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.108524 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.200160 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.200544 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:58884] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.233339 2026] [security2:error] [pid 263262:tid 263450] [client 20.5.79.49:28313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "ary1BpEcZ_148BjP8ZPJKAAAAUM"]
[Wed Sep 30 01:06:46.296024 2026] [access_compat:error] [pid 263262:tid 263471] [client 47.79.13.167:45970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:46.296297 2026] [access_compat:error] [pid 263262:tid 263471] [client 47.79.13.167:45970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:46.341544 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.341864 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.351173 2026] [access_compat:error] [pid 263262:tid 263277] [remote 17.166.233.74:39166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.351449 2026] [access_compat:error] [pid 263262:tid 263277] [remote 17.166.233.74:39166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.426850 2026] [security2:error] [pid 263262:tid 263439] [client 52.231.69.245:38592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/b.php"] [unique_id "ary1BpEcZ_148BjP8ZPJRQAAATg"]
[Wed Sep 30 01:06:46.435367 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.435818 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.459895 2026] [security2:error] [pid 263262:tid 263455] [remote 168.100.149.135:24102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1BpEcZ_148BjP8ZPJOAABNAo"]
[Wed Sep 30 01:06:46.479592 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.480053 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.563608 2026] [security2:error] [pid 263262:tid 263398] [client 74.225.148.80:50160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary1BpEcZ_148BjP8ZPJTAAAAQ8"]
[Wed Sep 30 01:06:46.610524 2026] [security2:error] [pid 263262:tid 263421] [client 216.73.216.46:58884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1BpEcZ_148BjP8ZPJUQAAASY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTgvbm9kZTAvbWVtb3J5OA%3D%3D
[Wed Sep 30 01:06:46.611698 2026] [security2:error] [pid 263262:tid 263293] [remote 64.23.166.180:27146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-a0ce3f37.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary1BpEcZ_148BjP8ZPJUgABTh0"]
[Wed Sep 30 01:06:46.621031 2026] [security2:error] [pid 263262:tid 263453] [client 20.5.79.49:28110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beetreefolkschool.org"] [uri "/wp-includes/css/dist/block-library/alfa-rex.php8"] [unique_id "ary1BpEcZ_148BjP8ZPJVQAAAUY"]
[Wed Sep 30 01:06:46.623024 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:21080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.623301 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:21080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.627876 2026] [access_compat:error] [pid 263262:tid 263501] [client 47.79.13.73:58430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:46.628313 2026] [access_compat:error] [pid 263262:tid 263501] [client 47.79.13.73:58430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:46.658696 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.658998 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.715906 2026] [security2:error] [pid 263262:tid 263495] [client 52.231.69.245:39104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/admin.php"] [unique_id "ary1BpEcZ_148BjP8ZPJXgAAAXA"]
[Wed Sep 30 01:06:46.752657 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.753096 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.840271 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.840531 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.860136 2026] [security2:error] [pid 263262:tid 263266] [remote 213.186.1.154:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.1.186.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1BpEcZ_148BjP8ZPJZwABVQI"]
[Wed Sep 30 01:06:46.891741 2026] [security2:error] [pid 263262:tid 263513] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1BpEcZ_148BjP8ZPJbAAAAYI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:46.935386 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:46.935677 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:46.983576 2026] [security2:error] [pid 263262:tid 263490] [client 52.231.69.245:39192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/fling.php"] [unique_id "ary1BpEcZ_148BjP8ZPJdwAAAWs"]
[Wed Sep 30 01:06:46.984501 2026] [security2:error] [pid 263262:tid 263413] [client 20.194.30.107:41157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/az.php"] [unique_id "ary1BpEcZ_148BjP8ZPJeAAAAR4"]
[Wed Sep 30 01:06:47.026710 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.027123 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.060873 2026] [security2:error] [pid 263262:tid 263459] [client 74.225.148.80:17088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/admin.php/c.php"] [unique_id "ary1B5EcZ_148BjP8ZPJgwAAAUw"]
[Wed Sep 30 01:06:47.123029 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.123500 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:57340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.148976 2026] [security2:error] [pid 263262:tid 263328] [remote 57.141.14.59:60018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJjQABeEA"]
[Wed Sep 30 01:06:47.211184 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.211443 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:21080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.241756 2026] [security2:error] [pid 263262:tid 263471] [client 20.219.2.60:11359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/b.php"] [unique_id "ary1B5EcZ_148BjP8ZPJnQAAAVg"]
[Wed Sep 30 01:06:47.273285 2026] [security2:error] [pid 263262:tid 263465] [client 52.231.69.245:39209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary1B5EcZ_148BjP8ZPJngAAAVI"]
[Wed Sep 30 01:06:47.292372 2026] [security2:error] [pid 263262:tid 263429] [client 182.75.216.230:55817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJoAAAAS4"]
[Wed Sep 30 01:06:47.292543 2026] [security2:error] [pid 263262:tid 263429] [client 182.75.216.230:55817] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJoAAAAS4"]
[Wed Sep 30 01:06:47.293918 2026] [security2:error] [pid 263262:tid 263491] [client 20.214.109.68:9826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/amax.php"] [unique_id "ary1B5EcZ_148BjP8ZPJoQAAAWw"]
[Wed Sep 30 01:06:47.303952 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.304369 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.314424 2026] [security2:error] [pid 263262:tid 263462] [client 43.227.131.37:10134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJpQAAAU8"]
[Wed Sep 30 01:06:47.314585 2026] [security2:error] [pid 263262:tid 263462] [client 43.227.131.37:10134] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJpQAAAU8"]
[Wed Sep 30 01:06:47.322267 2026] [security2:error] [pid 263262:tid 263476] [client 20.28.180.172:18309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/zlnckdxn.php"] [unique_id "ary1B5EcZ_148BjP8ZPJpwAAAV0"]
[Wed Sep 30 01:06:47.394798 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.395120 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.527682 2026] [security2:error] [pid 263262:tid 263490] [client 74.225.148.80:50168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/admin.php/go.php"] [unique_id "ary1B5EcZ_148BjP8ZPJsQAAAWs"]
[Wed Sep 30 01:06:47.564294 2026] [security2:error] [pid 263262:tid 263459] [client 216.73.216.46:57340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1B5EcZ_148BjP8ZPJtAAAAUw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvbWVtb3J5MjAzL25vZGUwL21lbW9yeTM2OS9ub2RlMA%3D%3D
[Wed Sep 30 01:06:47.566224 2026] [security2:error] [pid 263262:tid 263505] [client 106.214.2.47:31050] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJswAAAXo"]
[Wed Sep 30 01:06:47.566384 2026] [security2:error] [pid 263262:tid 263505] [client 106.214.2.47:31050] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJswAAAXo"]
[Wed Sep 30 01:06:47.614928 2026] [security2:error] [pid 263262:tid 263469] [client 52.231.69.245:38998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/adminfuns.php"] [unique_id "ary1B5EcZ_148BjP8ZPJuQAAAVY"]
[Wed Sep 30 01:06:47.630077 2026] [security2:error] [pid 263262:tid 263483] [client 216.73.216.46:21080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1B5EcZ_148BjP8ZPJugAAAWQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDM%3D
[Wed Sep 30 01:06:47.655238 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.655666 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.662668 2026] [security2:error] [pid 263262:tid 263500] [client 49.205.105.16:14202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.105.205.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJvAAAAXU"]
[Wed Sep 30 01:06:47.662838 2026] [security2:error] [pid 263262:tid 263500] [client 49.205.105.16:14202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "madagascar-foundation.org"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJvAAAAXU"]
[Wed Sep 30 01:06:47.699205 2026] [access_compat:error] [pid 263262:tid 263514] [client 47.79.13.64:51560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:47.699475 2026] [access_compat:error] [pid 263262:tid 263514] [client 47.79.13.64:51560] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:47.742480 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.742743 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.823977 2026] [security2:error] [pid 263262:tid 263495] [client 82.102.18.222:42524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1B5EcZ_148BjP8ZPJxQAAAXA"]
[Wed Sep 30 01:06:47.837560 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.837823 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.881697 2026] [security2:error] [pid 263262:tid 263515] [client 52.231.69.245:38981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/alfa.php"] [unique_id "ary1B5EcZ_148BjP8ZPJzQAAAYQ"]
[Wed Sep 30 01:06:47.922891 2026] [autoindex:error] [pid 263262:tid 263478] [client 35.187.36.114:54946] AH01276: Cannot serve directory /home4/piazvbmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:06:47.929194 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:47.929505 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:47.966361 2026] [access_compat:error] [pid 263262:tid 263517] [client 47.79.13.73:58444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:47.966641 2026] [access_compat:error] [pid 263262:tid 263517] [client 47.79.13.73:58444] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:47.979079 2026] [security2:error] [pid 263262:tid 263510] [client 223.181.30.165:19217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJ2QAAAX8"]
[Wed Sep 30 01:06:47.979198 2026] [security2:error] [pid 263262:tid 263510] [client 223.181.30.165:19217] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1B5EcZ_148BjP8ZPJ2QAAAX8"]
[Wed Sep 30 01:06:47.986548 2026] [autoindex:error] [pid 263262:tid 263408] [client 35.187.36.114:54970] AH01276: Cannot serve directory /home4/piazvbmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:06:47.995938 2026] [security2:error] [pid 263262:tid 263444] [client 74.225.148.80:64441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/groud3.php"] [unique_id "ary1B5EcZ_148BjP8ZPJ3AAAAT0"]
[Wed Sep 30 01:06:48.023200 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.023629 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.113184 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.113466 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.151325 2026] [security2:error] [pid 263262:tid 263487] [client 82.102.18.222:42540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.donskey.com"] [uri "/xmlrpc.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ4gAAAWg"]
[Wed Sep 30 01:06:48.153367 2026] [security2:error] [pid 263262:tid 263519] [client 52.231.69.245:39097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/222.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ4wAAAYg"]
[Wed Sep 30 01:06:48.189189 2026] [security2:error] [pid 263262:tid 263498] [client 20.214.109.68:9883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/66.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ5gAAAXM"]
[Wed Sep 30 01:06:48.201647 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.202036 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.230597 2026] [security2:error] [pid 263262:tid 263415] [client 182.69.182.151:32133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ6gAAASA"]
[Wed Sep 30 01:06:48.230798 2026] [security2:error] [pid 263262:tid 263415] [client 182.69.182.151:32133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ6gAAASA"]
[Wed Sep 30 01:06:48.233332 2026] [security2:error] [pid 263262:tid 263437] [client 20.219.2.60:11677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws49.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ6wAAATY"]
[Wed Sep 30 01:06:48.297280 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.297722 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.336765 2026] [security2:error] [pid 263262:tid 263438] [client 223.181.60.167:1400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ8wAAATc"]
[Wed Sep 30 01:06:48.337079 2026] [security2:error] [pid 263262:tid 263438] [client 223.181.60.167:1400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ8wAAATc"]
[Wed Sep 30 01:06:48.387227 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.387675 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.420473 2026] [security2:error] [pid 263262:tid 263515] [client 74.7.242.1:53946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ_QAAAYQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:06:48.446660 2026] [security2:error] [pid 263262:tid 263455] [client 52.231.69.245:38612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1CJEcZ_148BjP8ZPKAQAAAUg"]
[Wed Sep 30 01:06:48.458160 2026] [security2:error] [pid 263262:tid 263518] [remote 168.100.149.104:59268] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1CJEcZ_148BjP8ZPJ9wABJ0c"]
[Wed Sep 30 01:06:48.476026 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.476295 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.497575 2026] [security2:error] [pid 263262:tid 263488] [client 74.225.148.80:50145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/gaxby.php"] [unique_id "ary1CJEcZ_148BjP8ZPKCAAAAWk"]
[Wed Sep 30 01:06:48.533634 2026] [security2:error] [pid 263262:tid 263402] [client 20.219.2.60:18934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/xxw.php"] [unique_id "ary1CJEcZ_148BjP8ZPKCgAAARM"]
[Wed Sep 30 01:06:48.566567 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.566859 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.587216 2026] [security2:error] [pid 263262:tid 263428] [client 20.28.180.172:29600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/UT6UJndefault.php"] [unique_id "ary1CJEcZ_148BjP8ZPKDAAAAS0"]
[Wed Sep 30 01:06:48.656946 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.657207 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.752326 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.752597 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.756719 2026] [security2:error] [pid 263262:tid 263489] [client 52.231.69.245:39064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/images.php"] [unique_id "ary1CJEcZ_148BjP8ZPKFgAAAWo"]
[Wed Sep 30 01:06:48.840232 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.840500 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:5892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:48.865065 2026] [core:error] [pid 263262:tid 263476] [client 85.204.70.116:15279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:48.865084 2026] [core:error] [pid 263262:tid 263476] [client 85.204.70.116:15279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:48.922194 2026] [security2:error] [pid 263262:tid 263505] [client 82.102.18.222:42548] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1CJEcZ_148BjP8ZPKHQAAAXo"]
[Wed Sep 30 01:06:48.933218 2026] [security2:error] [pid 263262:tid 263415] [client 20.70.173.30:63139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/dehnl.php"] [unique_id "ary1CJEcZ_148BjP8ZPKHgAAASA"]
[Wed Sep 30 01:06:48.964768 2026] [security2:error] [pid 263262:tid 263404] [client 74.225.148.80:64414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/dh9u7.php"] [unique_id "ary1CJEcZ_148BjP8ZPKIAAAARU"]
[Wed Sep 30 01:06:48.983062 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:48.983332 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.069870 2026] [security2:error] [pid 263262:tid 263469] [client 52.231.69.245:38613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/media.php"] [unique_id "ary1CZEcZ_148BjP8ZPKJwAAAVY"]
[Wed Sep 30 01:06:49.073083 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.073347 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.110462 2026] [security2:error] [pid 263262:tid 263405] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1CZEcZ_148BjP8ZPKKQAAARY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:49.117904 2026] [security2:error] [pid 263262:tid 263442] [client 20.194.30.107:10169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1CZEcZ_148BjP8ZPKKwAAATs"]
[Wed Sep 30 01:06:49.163041 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.163297 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.204512 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.204794 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.234167 2026] [security2:error] [pid 263262:tid 263445] [client 82.102.18.222:42556] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1CZEcZ_148BjP8ZPKMgAAAT4"]
[Wed Sep 30 01:06:49.245015 2026] [security2:error] [pid 263262:tid 263455] [client 216.73.216.46:5892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1CZEcZ_148BjP8ZPKMwAAAUg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTIvbm9kZTAvbWVtb3J5ODE%3D
[Wed Sep 30 01:06:49.287079 2026] [fcgid:warn] [pid 263262:tid 263396] (70014)End of file found: [client 184.154.76.34:49770] mod_fcgid: can't get data from http client
[Wed Sep 30 01:06:49.294403 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.294684 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.348131 2026] [security2:error] [pid 263262:tid 263456] [client 52.231.69.245:39221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/mac.php"] [unique_id "ary1CZEcZ_148BjP8ZPKOQAAAUk"]
[Wed Sep 30 01:06:49.387021 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.387302 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.427610 2026] [security2:error] [pid 263262:tid 263494] [client 20.214.109.68:61181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/public/file.php"] [unique_id "ary1CZEcZ_148BjP8ZPKQwAAAW8"]
[Wed Sep 30 01:06:49.436286 2026] [security2:error] [pid 263262:tid 263407] [client 85.204.70.116:54942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//wp-includes/wlwmanifest.xml"] [unique_id "ary1CZEcZ_148BjP8ZPKRQAAARg"]
[Wed Sep 30 01:06:49.467467 2026] [security2:error] [pid 263262:tid 263520] [client 74.225.148.80:64404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/yvnqcuic.php"] [unique_id "ary1CZEcZ_148BjP8ZPKRwAAAYk"]
[Wed Sep 30 01:06:49.477531 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.477797 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.568993 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.569301 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.570961 2026] [security2:error] [pid 263262:tid 263472] [client 82.102.18.222:42572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1CZEcZ_148BjP8ZPKSwAAAVk"]
[Wed Sep 30 01:06:49.609093 2026] [security2:error] [pid 263262:tid 263489] [client 52.231.69.245:39073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ops.php"] [unique_id "ary1CZEcZ_148BjP8ZPKTQAAAWo"]
[Wed Sep 30 01:06:49.651021 2026] [security2:error] [pid 263262:tid 263363] [remote 57.141.14.111:21092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary1CZEcZ_148BjP8ZPKTAABIWM"]
[Wed Sep 30 01:06:49.659331 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.659595 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.751285 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.751560 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.826948 2026] [security2:error] [pid 263262:tid 263476] [client 20.214.109.68:61122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/166.php"] [unique_id "ary1CZEcZ_148BjP8ZPKVQAAAV0"]
[Wed Sep 30 01:06:49.851897 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.852338 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.890861 2026] [security2:error] [pid 263262:tid 263475] [client 82.102.18.222:42582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1CZEcZ_148BjP8ZPKWQAAAVw"]
[Wed Sep 30 01:06:49.895058 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.69.245:39031] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/1.php"] [unique_id "ary1CZEcZ_148BjP8ZPKWgAAASQ"]
[Wed Sep 30 01:06:49.895163 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.69.245:39031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/1.php"] [unique_id "ary1CZEcZ_148BjP8ZPKWgAAASQ"]
[Wed Sep 30 01:06:49.936513 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:49.936789 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:49.945949 2026] [security2:error] [pid 263262:tid 263438] [client 74.225.148.80:17114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/koiy.php"] [unique_id "ary1CZEcZ_148BjP8ZPKYAAAATc"]
[Wed Sep 30 01:06:49.959012 2026] [security2:error] [pid 263262:tid 263405] [client 20.198.74.230:23903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ilex.php"] [unique_id "ary1CZEcZ_148BjP8ZPKYQAAARY"]
[Wed Sep 30 01:06:50.002884 2026] [security2:error] [pid 263262:tid 263506] [client 85.204.70.116:54954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//xmlrpc.php"] [unique_id "ary1CZEcZ_148BjP8ZPKZAAAAXs"]
[Wed Sep 30 01:06:50.028227 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.028494 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.043310 2026] [security2:error] [pid 263262:tid 263448] [client 37.41.16.35:63512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1CpEcZ_148BjP8ZPKZwAAAUE"]
[Wed Sep 30 01:06:50.043458 2026] [security2:error] [pid 263262:tid 263448] [client 37.41.16.35:63512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1CpEcZ_148BjP8ZPKZwAAAUE"]
[Wed Sep 30 01:06:50.121974 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.122247 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.162350 2026] [security2:error] [pid 263262:tid 263458] [client 52.231.69.245:38987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/aaa.php"] [unique_id "ary1CpEcZ_148BjP8ZPKawAAAUs"]
[Wed Sep 30 01:06:50.196896 2026] [security2:error] [pid 263262:tid 263509] [client 20.219.2.60:11380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-blog-header.php"] [unique_id "ary1CpEcZ_148BjP8ZPKbQAAAX4"]
[Wed Sep 30 01:06:50.215673 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.216124 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.224126 2026] [security2:error] [pid 263262:tid 263424] [client 82.102.18.222:42588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1CpEcZ_148BjP8ZPKcAAAASk"]
[Wed Sep 30 01:06:50.302099 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.302369 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.307238 2026] [security2:error] [pid 263262:tid 263510] [client 45.138.12.32:40688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.eyd.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1CpEcZ_148BjP8ZPKdAAAAX8"]
[Wed Sep 30 01:06:50.397008 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.397400 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:25647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.413504 2026] [security2:error] [pid 263262:tid 263409] [client 103.218.254.107:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1CpEcZ_148BjP8ZPKgAAAARo"]
[Wed Sep 30 01:06:50.413693 2026] [security2:error] [pid 263262:tid 263512] [client 74.225.148.80:64412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wordfence-waf.php"] [unique_id "ary1CpEcZ_148BjP8ZPKgQAAAYE"]
[Wed Sep 30 01:06:50.417221 2026] [security2:error] [pid 263262:tid 263415] [client 20.5.79.49:64006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1CpEcZ_148BjP8ZPKgwAAASA"]
[Wed Sep 30 01:06:50.451589 2026] [security2:error] [pid 263262:tid 263474] [remote 168.100.149.36:24900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1CpEcZ_148BjP8ZPKdwABL2g"]
[Wed Sep 30 01:06:50.470630 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.69.245:38651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/chosen.php"] [unique_id "ary1CpEcZ_148BjP8ZPKhwAAAUM"]
[Wed Sep 30 01:06:50.482105 2026] [security2:error] [pid 263262:tid 263360] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1CpEcZ_148BjP8ZPKiQABTGA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D50802
[Wed Sep 30 01:06:50.487220 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.487470 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.544693 2026] [security2:error] [pid 263262:tid 263506] [client 82.102.18.222:42602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1CpEcZ_148BjP8ZPKjAAAAXs"]
[Wed Sep 30 01:06:50.575245 2026] [core:error] [pid 263262:tid 263508] [client 85.204.70.116:54958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:50.575264 2026] [core:error] [pid 263262:tid 263508] [client 85.204.70.116:54958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:06:50.578708 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.578980 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.673682 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.674127 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.734710 2026] [security2:error] [pid 263262:tid 263440] [client 20.5.79.49:26465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1CpEcZ_148BjP8ZPKlwAAATk"]
[Wed Sep 30 01:06:50.753509 2026] [security2:error] [pid 263262:tid 263451] [client 52.231.69.245:39054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/2P.php"] [unique_id "ary1CpEcZ_148BjP8ZPKmAAAAUQ"]
[Wed Sep 30 01:06:50.763601 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.764034 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.856001 2026] [security2:error] [pid 263262:tid 263520] [client 82.102.18.222:42606] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1CpEcZ_148BjP8ZPKnQAAAYk"]
[Wed Sep 30 01:06:50.867155 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.867407 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:50.881872 2026] [security2:error] [pid 263262:tid 263489] [client 74.225.148.80:53186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wp5.php"] [unique_id "ary1CpEcZ_148BjP8ZPKogAAAWo"]
[Wed Sep 30 01:06:50.886244 2026] [security2:error] [pid 263262:tid 263416] [client 20.28.180.172:34280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ccou.php"] [unique_id "ary1CpEcZ_148BjP8ZPKowAAASE"]
[Wed Sep 30 01:06:50.962322 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:50.962777 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.019986 2026] [security2:error] [pid 263262:tid 263394] [client 52.231.69.245:39006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/min.php"] [unique_id "ary1C5EcZ_148BjP8ZPKqgAAAQs"]
[Wed Sep 30 01:06:51.049133 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.049400 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.054073 2026] [security2:error] [pid 263262:tid 263420] [client 20.5.79.49:62376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary1C5EcZ_148BjP8ZPKrQAAASU"]
[Wed Sep 30 01:06:51.143492 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.143741 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.145105 2026] [security2:error] [pid 263262:tid 263478] [client 85.204.70.116:54966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1C5EcZ_148BjP8ZPKtgAAAV8"]
[Wed Sep 30 01:06:51.181057 2026] [security2:error] [pid 263262:tid 263519] [client 82.102.18.222:42608] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1C5EcZ_148BjP8ZPKuwAAAYg"]
[Wed Sep 30 01:06:51.231324 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.231594 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.312107 2026] [security2:error] [pid 263262:tid 263421] [client 103.241.204.139:63234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1C5EcZ_148BjP8ZPKygAAASY"]
[Wed Sep 30 01:06:51.312197 2026] [security2:error] [pid 263262:tid 263421] [client 103.241.204.139:63234] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1C5EcZ_148BjP8ZPKygAAASY"]
[Wed Sep 30 01:06:51.321907 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.322171 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.349160 2026] [security2:error] [pid 263262:tid 263485] [client 74.225.148.80:17111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/em.php"] [unique_id "ary1C5EcZ_148BjP8ZPK0gAAAWY"]
[Wed Sep 30 01:06:51.377587 2026] [security2:error] [pid 263262:tid 263430] [client 20.5.79.49:64031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/nox.php"] [unique_id "ary1C5EcZ_148BjP8ZPK2wAAAS8"]
[Wed Sep 30 01:06:51.387387 2026] [security2:error] [pid 263262:tid 263401] [client 155.190.6.18:41742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1C5EcZ_148BjP8ZPK1wAAARI"]
[Wed Sep 30 01:06:51.387532 2026] [security2:error] [pid 263262:tid 263401] [client 155.190.6.18:41742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1C5EcZ_148BjP8ZPK1wAAARI"]
[Wed Sep 30 01:06:51.420372 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.420691 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.441490 2026] [security2:error] [pid 263262:tid 263461] [client 20.28.180.172:60290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/fs6.php"] [unique_id "ary1C5EcZ_148BjP8ZPK4gAAAU4"]
[Wed Sep 30 01:06:51.454013 2026] [security2:error] [pid 263262:tid 263439] [client 45.138.12.40:7010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.windofive.net"] [uri "/wp-links-opml.php"] [unique_id "ary1C5EcZ_148BjP8ZPK5AAAATg"]
[Wed Sep 30 01:06:51.468313 2026] [security2:error] [pid 263262:tid 263517] [client 52.231.69.245:38988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/great.php"] [unique_id "ary1C5EcZ_148BjP8ZPK5QAAAYY"]
[Wed Sep 30 01:06:51.497414 2026] [security2:error] [pid 263262:tid 263479] [client 82.102.18.222:42612] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1C5EcZ_148BjP8ZPK8AAAAWA"]
[Wed Sep 30 01:06:51.511002 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.511257 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.605764 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.606204 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.661754 2026] [security2:error] [pid 263262:tid 263482] [client 20.70.173.30:59998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/cycfruf.php"] [unique_id "ary1C5EcZ_148BjP8ZPK-gAAAWM"]
[Wed Sep 30 01:06:51.682467 2026] [fcgid:warn] [pid 263262:tid 263497] (70014)End of file found: [client 167.94.146.54:50100] mod_fcgid: can't get data from http client
[Wed Sep 30 01:06:51.699055 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.699511 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.704273 2026] [security2:error] [pid 263262:tid 263433] [client 20.5.79.49:62387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/8573.php"] [unique_id "ary1C5EcZ_148BjP8ZPLAAAAATI"]
[Wed Sep 30 01:06:51.714891 2026] [security2:error] [pid 263262:tid 263468] [client 85.204.70.116:54974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//web/wp-includes/wlwmanifest.xml"] [unique_id "ary1C5EcZ_148BjP8ZPLAQAAAVU"]
[Wed Sep 30 01:06:51.778320 2026] [security2:error] [pid 263262:tid 263503] [client 52.231.69.245:39042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/BDKR28WP.php"] [unique_id "ary1C5EcZ_148BjP8ZPLAwAAAXg"]
[Wed Sep 30 01:06:51.784370 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.784644 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.813451 2026] [security2:error] [pid 263262:tid 263510] [client 74.225.148.80:64432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/hp.php"] [unique_id "ary1C5EcZ_148BjP8ZPLBAAAAX8"]
[Wed Sep 30 01:06:51.823533 2026] [security2:error] [pid 263262:tid 263397] [client 82.102.18.222:42618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1C5EcZ_148BjP8ZPLBQAAAQ4"]
[Wed Sep 30 01:06:51.871996 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.872259 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:51.964885 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:51.965199 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.021088 2026] [security2:error] [pid 263262:tid 263409] [client 20.5.79.49:26470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/test.php/wp-content/uploads/wp_live_chat/abruzi.php"] [unique_id "ary1DJEcZ_148BjP8ZPLEQAAARo"]
[Wed Sep 30 01:06:52.045312 2026] [access_compat:error] [pid 263262:tid 263416] [client 47.79.13.64:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:52.045577 2026] [access_compat:error] [pid 263262:tid 263416] [client 47.79.13.64:46142] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:52.049136 2026] [security2:error] [pid 263262:tid 263470] [client 103.159.192.142:61148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1DJEcZ_148BjP8ZPLFAAAAVc"]
[Wed Sep 30 01:06:52.049251 2026] [security2:error] [pid 263262:tid 263470] [client 103.159.192.142:61148] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1DJEcZ_148BjP8ZPLFAAAAVc"]
[Wed Sep 30 01:06:52.056593 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.057024 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.065565 2026] [security2:error] [pid 263262:tid 263410] [client 20.70.173.30:56472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary1DJEcZ_148BjP8ZPLFQAAARs"]
[Wed Sep 30 01:06:52.086558 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.69.245:39100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/gigi.php"] [unique_id "ary1DJEcZ_148BjP8ZPLFgAAASQ"]
[Wed Sep 30 01:06:52.109754 2026] [security2:error] [pid 263262:tid 263414] [client 43.104.4.188:1402] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary1DJEcZ_148BjP8ZPLGAAAAR8"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=power-banks%2Csolid-works-brands
[Wed Sep 30 01:06:52.139234 2026] [security2:error] [pid 263262:tid 263498] [client 82.102.18.222:42622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1DJEcZ_148BjP8ZPLGgAAAXM"]
[Wed Sep 30 01:06:52.150884 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.151322 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.201517 2026] [fcgid:warn] [pid 263262:tid 263469] (70014)End of file found: [client 184.154.76.34:50130] mod_fcgid: can't get data from http client
[Wed Sep 30 01:06:52.236919 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.237197 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.266213 2026] [security2:error] [pid 263262:tid 263519] [client 181.98.175.76:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1DJEcZ_148BjP8ZPLIgAAAYg"]
[Wed Sep 30 01:06:52.274873 2026] [security2:error] [pid 263262:tid 263518] [client 74.225.148.80:64434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/wpuse.php"] [unique_id "ary1DJEcZ_148BjP8ZPLIwAAAYc"]
[Wed Sep 30 01:06:52.309436 2026] [security2:error] [pid 263262:tid 263491] [client 85.204.70.116:54980] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1DJEcZ_148BjP8ZPLJAAAAWw"]
[Wed Sep 30 01:06:52.327482 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.327768 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.342973 2026] [security2:error] [pid 263262:tid 263505] [client 20.5.79.49:26447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wb.php"] [unique_id "ary1DJEcZ_148BjP8ZPLKAAAAXo"]
[Wed Sep 30 01:06:52.375914 2026] [security2:error] [pid 263262:tid 263453] [client 52.231.69.245:39094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ant.php"] [unique_id "ary1DJEcZ_148BjP8ZPLLQAAAUY"]
[Wed Sep 30 01:06:52.401464 2026] [security2:error] [pid 263262:tid 263267] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DJEcZ_148BjP8ZPLMQABUAM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=174098
[Wed Sep 30 01:06:52.401495 2026] [security2:error] [pid 263262:tid 263267] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DJEcZ_148BjP8ZPLMQABUAM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=174098
[Wed Sep 30 01:06:52.421895 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.422164 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.438876 2026] [security2:error] [pid 263262:tid 263339] [remote 57.141.14.98:46028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/xmlrpc.php"] [unique_id "ary1DJEcZ_148BjP8ZPLLwABMEs"]
[Wed Sep 30 01:06:52.451559 2026] [security2:error] [pid 263262:tid 263509] [client 116.197.133.25:59811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1DJEcZ_148BjP8ZPLMwAAAX4"]
[Wed Sep 30 01:06:52.451706 2026] [security2:error] [pid 263262:tid 263509] [client 116.197.133.25:59811] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1DJEcZ_148BjP8ZPLMwAAAX4"]
[Wed Sep 30 01:06:52.469629 2026] [security2:error] [pid 263262:tid 263421] [remote 168.100.149.182:46306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1DJEcZ_148BjP8ZPLKwABFxM"]
[Wed Sep 30 01:06:52.469984 2026] [security2:error] [pid 263262:tid 263420] [client 43.104.4.188:33171] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary1DJEcZ_148BjP8ZPLNAAAASU"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=power-banks%2Csolid-works-brands
[Wed Sep 30 01:06:52.474053 2026] [security2:error] [pid 263262:tid 263458] [client 82.102.18.222:42634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1DJEcZ_148BjP8ZPLNQAAAUs"]
[Wed Sep 30 01:06:52.515282 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.515536 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.555058 2026] [security2:error] [pid 263262:tid 263454] [client 20.219.2.60:11649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bgymj.php"] [unique_id "ary1DJEcZ_148BjP8ZPLOwAAAUc"]
[Wed Sep 30 01:06:52.607582 2026] [security2:error] [pid 263262:tid 263411] [client 20.214.109.68:62402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/ws77.php"] [unique_id "ary1DJEcZ_148BjP8ZPLQAAAARw"]
[Wed Sep 30 01:06:52.613072 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.613502 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.661512 2026] [security2:error] [pid 263262:tid 263430] [client 20.5.79.49:64024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ary1DJEcZ_148BjP8ZPLQQAAAS8"]
[Wed Sep 30 01:06:52.699366 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.699642 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.728321 2026] [security2:error] [pid 263262:tid 263446] [client 52.231.69.245:39103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/uejvv.php"] [unique_id "ary1DJEcZ_148BjP8ZPLRQAAAT8"]
[Wed Sep 30 01:06:52.749214 2026] [security2:error] [pid 263262:tid 263439] [client 74.225.148.80:17131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/file18x.php"] [unique_id "ary1DJEcZ_148BjP8ZPLSAAAATg"]
[Wed Sep 30 01:06:52.790523 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.790821 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.803929 2026] [security2:error] [pid 263262:tid 263470] [client 82.102.18.222:59714] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1DJEcZ_148BjP8ZPLSgAAAVc"]
[Wed Sep 30 01:06:52.844494 2026] [security2:error] [pid 263262:tid 263285] [remote 74.7.227.56:51012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1DJEcZ_148BjP8ZPLSwABXhU"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:06:52.880729 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.881052 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.883221 2026] [security2:error] [pid 263262:tid 263432] [client 85.204.70.116:5702] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//website/wp-includes/wlwmanifest.xml"] [unique_id "ary1DJEcZ_148BjP8ZPLUQAAATE"]
[Wed Sep 30 01:06:52.971938 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:52.972208 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:52.986636 2026] [security2:error] [pid 263262:tid 263405] [client 20.5.79.49:62357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/file.php"] [unique_id "ary1DJEcZ_148BjP8ZPLWAAAARY"]
[Wed Sep 30 01:06:53.061649 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.061939 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.124192 2026] [security2:error] [pid 263262:tid 263482] [client 82.102.18.222:42652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.donskey.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1DZEcZ_148BjP8ZPLYAAAAWM"]
[Wed Sep 30 01:06:53.152460 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.152745 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.241204 2026] [security2:error] [pid 263262:tid 263413] [client 74.225.148.80:55235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/123viva.php"] [unique_id "ary1DZEcZ_148BjP8ZPLZQAAAR4"]
[Wed Sep 30 01:06:53.244885 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.245145 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.294729 2026] [security2:error] [pid 263262:tid 263510] [client 52.231.69.245:38605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/file.php"] [unique_id "ary1DZEcZ_148BjP8ZPLZwAAAX8"]
[Wed Sep 30 01:06:53.309577 2026] [security2:error] [pid 263262:tid 263397] [client 20.5.79.49:62344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "ary1DZEcZ_148BjP8ZPLaAAAAQ4"]
[Wed Sep 30 01:06:53.336308 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.336590 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.392085 2026] [security2:error] [pid 263262:tid 263508] [client 20.214.109.68:9441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/www.php"] [unique_id "ary1DZEcZ_148BjP8ZPLbAAAAX0"]
[Wed Sep 30 01:06:53.425802 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.426083 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.449287 2026] [security2:error] [pid 263262:tid 263458] [client 85.204.70.116:54994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1DZEcZ_148BjP8ZPLbwAAAUs"]
[Wed Sep 30 01:06:53.516720 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.516986 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.609049 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.609324 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.622343 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.69.245:39025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/elements.php"] [unique_id "ary1DZEcZ_148BjP8ZPLfQAAASQ"]
[Wed Sep 30 01:06:53.624192 2026] [security2:error] [pid 263262:tid 263443] [client 20.5.79.49:26462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/cu.php"] [unique_id "ary1DZEcZ_148BjP8ZPLfwAAATw"]
[Wed Sep 30 01:06:53.633439 2026] [security2:error] [pid 263262:tid 263432] [client 4.240.25.22:30731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.offshoremultihull.org"] [uri "/cabs.php"] [unique_id "ary1DZEcZ_148BjP8ZPLgAAAATE"]
[Wed Sep 30 01:06:53.671008 2026] [security2:error] [pid 263262:tid 263297] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DZEcZ_148BjP8ZPLgwABRSE"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=11121
[Wed Sep 30 01:06:53.671030 2026] [security2:error] [pid 263262:tid 263297] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DZEcZ_148BjP8ZPLgwABRSE"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=11121
[Wed Sep 30 01:06:53.701390 2026] [security2:error] [pid 263262:tid 263414] [client 20.219.2.60:18868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-png.php"] [unique_id "ary1DZEcZ_148BjP8ZPLhgAAAR8"]
[Wed Sep 30 01:06:53.702687 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.702975 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.703935 2026] [security2:error] [pid 263262:tid 263489] [client 74.225.148.80:17105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ferrari250california.paulmercer.me"] [uri "/Components.update.php"] [unique_id "ary1DZEcZ_148BjP8ZPLhwAAAWo"]
[Wed Sep 30 01:06:53.776905 2026] [security2:error] [pid 263262:tid 263507] [client 20.70.173.30:63109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/mac.php"] [unique_id "ary1DZEcZ_148BjP8ZPLiQAAAXw"]
[Wed Sep 30 01:06:53.792258 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.792541 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.884679 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.884955 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:53.901148 2026] [security2:error] [pid 263262:tid 263476] [client 20.28.180.172:29572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/kbqhb.php"] [unique_id "ary1DZEcZ_148BjP8ZPLkQAAAV0"]
[Wed Sep 30 01:06:53.924097 2026] [security2:error] [pid 263262:tid 263509] [client 52.231.69.245:39158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/sitemap.php"] [unique_id "ary1DZEcZ_148BjP8ZPLlAAAAX4"]
[Wed Sep 30 01:06:53.941151 2026] [security2:error] [pid 263262:tid 263473] [client 20.5.79.49:62343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/bd.php"] [unique_id "ary1DZEcZ_148BjP8ZPLlQAAAVo"]
[Wed Sep 30 01:06:53.975441 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:53.975720 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.027023 2026] [security2:error] [pid 263262:tid 263471] [client 85.204.70.116:55006] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//news/wp-includes/wlwmanifest.xml"] [unique_id "ary1DpEcZ_148BjP8ZPLngAAAVg"]
[Wed Sep 30 01:06:54.067075 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.067334 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.114717 2026] [security2:error] [pid 263262:tid 263475] [client 152.232.244.116:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary1DpEcZ_148BjP8ZPLpgAAAVw"]
[Wed Sep 30 01:06:54.158658 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.158971 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.209747 2026] [security2:error] [pid 263262:tid 263485] [client 52.231.69.245:38999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/xetmolxr.php"] [unique_id "ary1DpEcZ_148BjP8ZPLqQAAAWY"]
[Wed Sep 30 01:06:54.222626 2026] [security2:error] [pid 263262:tid 263445] [client 223.235.102.107:3927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPLqgAAAT4"]
[Wed Sep 30 01:06:54.222875 2026] [security2:error] [pid 263262:tid 263445] [client 223.235.102.107:3927] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPLqgAAAT4"]
[Wed Sep 30 01:06:54.249185 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.249461 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.253864 2026] [security2:error] [pid 263262:tid 263409] [client 20.5.79.49:62355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/n.php"] [unique_id "ary1DpEcZ_148BjP8ZPLrwAAARo"]
[Wed Sep 30 01:06:54.258488 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DpEcZ_148BjP8ZPLsAABGCg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D62874
[Wed Sep 30 01:06:54.258511 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1DpEcZ_148BjP8ZPLsAABGCg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D62874
[Wed Sep 30 01:06:54.276845 2026] [security2:error] [pid 263262:tid 263494] [client 20.28.180.172:18120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/xwzs.php"] [unique_id "ary1DpEcZ_148BjP8ZPLsgAAAW8"]
[Wed Sep 30 01:06:54.306797 2026] [security2:error] [pid 263262:tid 263298] [remote 64.23.166.180:27162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-b0619296.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary1DpEcZ_148BjP8ZPLswABICI"]
[Wed Sep 30 01:06:54.314524 2026] [security2:error] [pid 263262:tid 263484] [client 122.173.27.10:26634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPLtAAAAWU"]
[Wed Sep 30 01:06:54.315303 2026] [security2:error] [pid 263262:tid 263484] [client 122.173.27.10:26634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPLtAAAAWU"]
[Wed Sep 30 01:06:54.326956 2026] [security2:error] [pid 263262:tid 263481] [client 20.214.109.68:9416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/adoms.php"] [unique_id "ary1DpEcZ_148BjP8ZPLtgAAAWI"]
[Wed Sep 30 01:06:54.337687 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.337977 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.402253 2026] [access_compat:error] [pid 263262:tid 263422] [client 47.79.13.177:42932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.402515 2026] [access_compat:error] [pid 263262:tid 263422] [client 47.79.13.177:42932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.429979 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.430246 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.453748 2026] [security2:error] [pid 263262:tid 263408] [remote 168.100.149.179:43878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1DpEcZ_148BjP8ZPLugABPBI"]
[Wed Sep 30 01:06:54.482230 2026] [security2:error] [pid 263262:tid 263465] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1DpEcZ_148BjP8ZPLxQAAAVI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:54.502127 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1DpEcZ_148BjP8ZPLxgABYyM"], referer: https://mail.uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=254bb6ddb621fec72221934e460cc396
[Wed Sep 30 01:06:54.502153 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1DpEcZ_148BjP8ZPLxgABYyM"], referer: https://mail.uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=254bb6ddb621fec72221934e460cc396
[Wed Sep 30 01:06:54.523499 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.523965 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.560015 2026] [security2:error] [pid 263262:tid 263437] [client 104.223.15.171:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary1DpEcZ_148BjP8ZPL0QAAATY"]
[Wed Sep 30 01:06:54.561763 2026] [security2:error] [pid 263262:tid 263462] [client 52.231.69.245:39195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/mini.php"] [unique_id "ary1DpEcZ_148BjP8ZPL0wAAAU8"]
[Wed Sep 30 01:06:54.564365 2026] [security2:error] [pid 263262:tid 263506] [client 20.219.2.60:11858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gfd.php"] [unique_id "ary1DpEcZ_148BjP8ZPL1AAAAXs"]
[Wed Sep 30 01:06:54.580475 2026] [security2:error] [pid 263262:tid 263456] [client 20.5.79.49:64002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/zeal.php"] [unique_id "ary1DpEcZ_148BjP8ZPL1QAAAUk"]
[Wed Sep 30 01:06:54.587274 2026] [security2:error] [pid 263262:tid 263452] [client 85.204.70.116:3096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1DpEcZ_148BjP8ZPL1gAAAUU"]
[Wed Sep 30 01:06:54.616854 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.617129 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.690732 2026] [security2:error] [pid 263262:tid 263516] [client 4.196.65.241:27302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/yyjBRcdefault.php"] [unique_id "ary1DpEcZ_148BjP8ZPL3QAAAYU"]
[Wed Sep 30 01:06:54.701157 2026] [access_compat:error] [pid 263262:tid 263424] [client 47.79.13.177:42946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.701416 2026] [access_compat:error] [pid 263262:tid 263424] [client 47.79.13.177:42946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.708110 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.708379 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.787872 2026] [access_compat:error] [pid 263262:tid 263505] [client 47.79.13.71:60518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.788146 2026] [access_compat:error] [pid 263262:tid 263505] [client 47.79.13.71:60518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:54.797254 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.797524 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.854510 2026] [security2:error] [pid 263262:tid 263420] [client 201.32.215.149:5962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPL5wAAASU"]
[Wed Sep 30 01:06:54.854629 2026] [security2:error] [pid 263262:tid 263420] [client 201.32.215.149:5962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1DpEcZ_148BjP8ZPL5wAAASU"]
[Wed Sep 30 01:06:54.862205 2026] [security2:error] [pid 263262:tid 263407] [client 52.231.69.245:39077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/zwso.php"] [unique_id "ary1DpEcZ_148BjP8ZPL6AAAARg"]
[Wed Sep 30 01:06:54.888204 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.888527 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:54.904131 2026] [security2:error] [pid 263262:tid 263520] [client 20.5.79.49:64046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/public/moon.php"] [unique_id "ary1DpEcZ_148BjP8ZPL8QAAAYk"]
[Wed Sep 30 01:06:54.981970 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:54.982226 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.045435 2026] [access_compat:error] [pid 263262:tid 263409] [client 47.79.13.37:35176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:55.045713 2026] [access_compat:error] [pid 263262:tid 263409] [client 47.79.13.37:35176] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:55.072716 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.073011 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.117196 2026] [security2:error] [pid 263262:tid 263433] [client 152.59.165.7:64825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMAQAAATI"]
[Wed Sep 30 01:06:55.117299 2026] [security2:error] [pid 263262:tid 263433] [client 152.59.165.7:64825] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMAQAAATI"]
[Wed Sep 30 01:06:55.126485 2026] [security2:error] [pid 263262:tid 263488] [client 52.231.69.245:39088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/tiny.php"] [unique_id "ary1D5EcZ_148BjP8ZPMAwAAAWk"]
[Wed Sep 30 01:06:55.150383 2026] [security2:error] [pid 263262:tid 263419] [client 85.204.70.116:55016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1D5EcZ_148BjP8ZPMBQAAASQ"]
[Wed Sep 30 01:06:55.157058 2026] [security2:error] [pid 263262:tid 263325] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1D5EcZ_148BjP8ZPMBwABTz0"], referer: https://forum.torquayfans.com/viewtopic.php?p=279740
[Wed Sep 30 01:06:55.157089 2026] [security2:error] [pid 263262:tid 263325] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1D5EcZ_148BjP8ZPMBwABTz0"], referer: https://forum.torquayfans.com/viewtopic.php?p=279740
[Wed Sep 30 01:06:55.162496 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.162770 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.221433 2026] [security2:error] [pid 263262:tid 263453] [client 20.5.79.49:26457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ws61.php"] [unique_id "ary1D5EcZ_148BjP8ZPMCgAAAUY"]
[Wed Sep 30 01:06:55.235315 2026] [security2:error] [pid 263262:tid 263406] [client 20.213.164.196:47539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1D5EcZ_148BjP8ZPMCwAAARc"]
[Wed Sep 30 01:06:55.254328 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.254592 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:11033] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.342983 2026] [security2:error] [pid 263262:tid 263428] [client 45.138.12.40:3378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xdv.nmg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1D5EcZ_148BjP8ZPMDwAAAS0"]
[Wed Sep 30 01:06:55.345755 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.346058 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.439395 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.439847 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.481632 2026] [security2:error] [pid 263262:tid 263500] [client 52.231.69.245:39222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/simple.php"] [unique_id "ary1D5EcZ_148BjP8ZPMGgAAAXU"]
[Wed Sep 30 01:06:55.528814 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.529142 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.539973 2026] [security2:error] [pid 263262:tid 263401] [client 20.5.79.49:62396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/mailer.php7"] [unique_id "ary1D5EcZ_148BjP8ZPMHgAAARI"]
[Wed Sep 30 01:06:55.551627 2026] [access_compat:error] [pid 263262:tid 263495] [client 47.79.13.158:57790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:55.551990 2026] [access_compat:error] [pid 263262:tid 263495] [client 47.79.13.158:57790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:55.554070 2026] [security2:error] [pid 263262:tid 263405] [client 203.122.45.246:59789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMIAAAARY"]
[Wed Sep 30 01:06:55.554257 2026] [security2:error] [pid 263262:tid 263405] [client 203.122.45.246:59789] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMIAAAARY"]
[Wed Sep 30 01:06:55.575359 2026] [security2:error] [pid 263262:tid 263435] [client 20.194.5.96:19092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1D5EcZ_148BjP8ZPMIgAAATQ"]
[Wed Sep 30 01:06:55.611194 2026] [security2:error] [pid 263262:tid 263432] [client 20.213.164.196:32682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1D5EcZ_148BjP8ZPMIwAAATE"]
[Wed Sep 30 01:06:55.618414 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.618684 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.628087 2026] [security2:error] [pid 263262:tid 263470] [client 20.214.109.68:9459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/tymn.php"] [unique_id "ary1D5EcZ_148BjP8ZPMJQAAAVc"]
[Wed Sep 30 01:06:55.655761 2026] [security2:error] [pid 263262:tid 263414] [client 216.73.216.46:11033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1D5EcZ_148BjP8ZPMJgAAAR8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODUvbm9kZTAvbWVtb3J5ODIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:06:55.711015 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.711284 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.740298 2026] [security2:error] [pid 263262:tid 263503] [client 85.204.70.116:55022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1D5EcZ_148BjP8ZPMKgAAAXg"]
[Wed Sep 30 01:06:55.743324 2026] [security2:error] [pid 263262:tid 263404] [client 45.138.12.32:40792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evg.lwl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1D5EcZ_148BjP8ZPMKwAAARU"]
[Wed Sep 30 01:06:55.759855 2026] [security2:error] [pid 263262:tid 263438] [client 52.231.69.245:39065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/buy.php"] [unique_id "ary1D5EcZ_148BjP8ZPMLAAAATc"]
[Wed Sep 30 01:06:55.760455 2026] [security2:error] [pid 263262:tid 263510] [client 202.179.95.79:50044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMLgAAAX8"]
[Wed Sep 30 01:06:55.760942 2026] [security2:error] [pid 263262:tid 263510] [client 202.179.95.79:50044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1D5EcZ_148BjP8ZPMLgAAAX8"]
[Wed Sep 30 01:06:55.801126 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.801423 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.851542 2026] [security2:error] [pid 263262:tid 263330] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1D5EcZ_148BjP8ZPMNQABUEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297987&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:55.851589 2026] [security2:error] [pid 263262:tid 263330] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1D5EcZ_148BjP8ZPMNQABUEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297987&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:06:55.873333 2026] [security2:error] [pid 263262:tid 263518] [client 104.208.65.139:22989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/ff.update.php"] [unique_id "ary1D5EcZ_148BjP8ZPMNwAAAYc"]
[Wed Sep 30 01:06:55.891150 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.891397 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:55.900011 2026] [security2:error] [pid 263262:tid 263393] [client 20.28.180.172:34294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/goeu.php"] [unique_id "ary1D5EcZ_148BjP8ZPMOwAAAQo"]
[Wed Sep 30 01:06:55.984175 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:55.984438 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.036432 2026] [security2:error] [pid 263262:tid 263428] [client 52.231.69.245:39061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ioxi-o.php"] [unique_id "ary1EJEcZ_148BjP8ZPMPgAAAS0"]
[Wed Sep 30 01:06:56.074571 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.074873 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.122128 2026] [security2:error] [pid 263262:tid 263444] [client 20.213.164.196:32640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/adminfuns.php"] [unique_id "ary1EJEcZ_148BjP8ZPMRQAAAT0"]
[Wed Sep 30 01:06:56.163940 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.164216 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.225715 2026] [security2:error] [pid 263262:tid 263458] [client 20.5.79.49:64007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/assets/go.php"] [unique_id "ary1EJEcZ_148BjP8ZPMRwAAAUs"]
[Wed Sep 30 01:06:56.257213 2026] [security2:error] [pid 263262:tid 263418] [client 20.70.173.30:63135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/abcd.php"] [unique_id "ary1EJEcZ_148BjP8ZPMSQAAASM"]
[Wed Sep 30 01:06:56.261580 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.262051 2026] [access_compat:error] [pid 263262:tid 263425] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.287168 2026] [access_compat:error] [pid 263262:tid 263449] [client 47.79.13.167:43174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:56.287435 2026] [access_compat:error] [pid 263262:tid 263449] [client 47.79.13.167:43174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:56.298663 2026] [security2:error] [pid 263262:tid 263397] [client 52.231.69.245:39189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ans.php"] [unique_id "ary1EJEcZ_148BjP8ZPMSwAAAQ4"]
[Wed Sep 30 01:06:56.309944 2026] [security2:error] [pid 263262:tid 263508] [client 85.204.70.116:50470] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1EJEcZ_148BjP8ZPMTAAAAX0"]
[Wed Sep 30 01:06:56.345642 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.345906 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.433573 2026] [security2:error] [pid 263262:tid 263432] [client 187.3.144.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary1EJEcZ_148BjP8ZPMWwAAATE"]
[Wed Sep 30 01:06:56.439585 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.440028 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.474151 2026] [security2:error] [pid 263262:tid 263479] [remote 168.100.149.222:59638] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1EJEcZ_148BjP8ZPMUgABVT8"]
[Wed Sep 30 01:06:56.508389 2026] [security2:error] [pid 263262:tid 263513] [client 20.28.180.172:61195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-admin/network/users.php"] [unique_id "ary1EJEcZ_148BjP8ZPMYwAAAYI"]
[Wed Sep 30 01:06:56.529058 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.529267 2026] [security2:error] [pid 263262:tid 263409] [client 20.213.164.196:47050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/av.php"] [unique_id "ary1EJEcZ_148BjP8ZPMZQAAARo"]
[Wed Sep 30 01:06:56.529318 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.544592 2026] [security2:error] [pid 263262:tid 263448] [client 20.5.79.49:26487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/files.php"] [unique_id "ary1EJEcZ_148BjP8ZPMZgAAAUE"]
[Wed Sep 30 01:06:56.565744 2026] [security2:error] [pid 263262:tid 263455] [client 52.231.69.245:39052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/gf.php"] [unique_id "ary1EJEcZ_148BjP8ZPMaAAAAUg"]
[Wed Sep 30 01:06:56.575686 2026] [security2:error] [pid 263262:tid 263403] [client 116.193.128.26:60556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1EJEcZ_148BjP8ZPMagAAARQ"]
[Wed Sep 30 01:06:56.575916 2026] [security2:error] [pid 263262:tid 263394] [client 20.219.2.60:11676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/callback.php"] [unique_id "ary1EJEcZ_148BjP8ZPMaQAAAQs"]
[Wed Sep 30 01:06:56.576195 2026] [security2:error] [pid 263262:tid 263403] [client 116.193.128.26:60556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1EJEcZ_148BjP8ZPMagAAARQ"]
[Wed Sep 30 01:06:56.596392 2026] [security2:error] [pid 263262:tid 263491] [client 20.194.5.96:19096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1EJEcZ_148BjP8ZPMbgAAAWw"]
[Wed Sep 30 01:06:56.617610 2026] [security2:error] [pid 263262:tid 263441] [client 45.138.12.32:27868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.feq.hpj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1EJEcZ_148BjP8ZPMcwAAATo"]
[Wed Sep 30 01:06:56.620116 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.620400 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.626281 2026] [security2:error] [pid 263262:tid 263489] [client 49.43.163.212:54584] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1EJEcZ_148BjP8ZPMYgAAAWo"]
[Wed Sep 30 01:06:56.647212 2026] [security2:error] [pid 263262:tid 263399] [client 103.159.192.142:61628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1EJEcZ_148BjP8ZPMdAAAARA"]
[Wed Sep 30 01:06:56.647335 2026] [security2:error] [pid 263262:tid 263399] [client 103.159.192.142:61628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1EJEcZ_148BjP8ZPMdAAAARA"]
[Wed Sep 30 01:06:56.684423 2026] [security2:error] [pid 263262:tid 263404] [client 45.138.12.43:20370] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.wdp.lfk.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1EJEcZ_148BjP8ZPMdgAAARU"]
[Wed Sep 30 01:06:56.711542 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.711854 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.779803 2026] [security2:error] [pid 263262:tid 263497] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1EJEcZ_148BjP8ZPMfAAAAXI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:56.802672 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.802963 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.837343 2026] [security2:error] [pid 263262:tid 263454] [client 52.231.69.245:38643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/man.php"] [unique_id "ary1EJEcZ_148BjP8ZPMfwAAAUc"]
[Wed Sep 30 01:06:56.881239 2026] [security2:error] [pid 263262:tid 263440] [client 20.5.79.49:26491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/public/z.php"] [unique_id "ary1EJEcZ_148BjP8ZPMgAAAATk"]
[Wed Sep 30 01:06:56.892816 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.893085 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:56.904274 2026] [security2:error] [pid 263262:tid 263433] [client 85.204.70.116:38742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//test/wp-includes/wlwmanifest.xml"] [unique_id "ary1EJEcZ_148BjP8ZPMhAAAATI"]
[Wed Sep 30 01:06:56.925087 2026] [security2:error] [pid 263262:tid 263467] [client 20.213.164.196:47542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/dex.php"] [unique_id "ary1EJEcZ_148BjP8ZPMhgAAAVQ"]
[Wed Sep 30 01:06:56.983906 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:56.984157 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.036024 2026] [security2:error] [pid 263262:tid 263507] [client 20.214.109.68:59844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/eetu.php"] [unique_id "ary1EZEcZ_148BjP8ZPMiwAAAXw"]
[Wed Sep 30 01:06:57.075645 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.075948 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.102841 2026] [security2:error] [pid 263262:tid 263510] [client 52.231.69.245:39194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/dev.php"] [unique_id "ary1EZEcZ_148BjP8ZPMjgAAAX8"]
[Wed Sep 30 01:06:57.165829 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.166105 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.206120 2026] [security2:error] [pid 263262:tid 263455] [client 20.5.79.49:62353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wso.php"] [unique_id "ary1EZEcZ_148BjP8ZPMlwAAAUg"]
[Wed Sep 30 01:06:57.257369 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.257777 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.347271 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.347524 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.379389 2026] [security2:error] [pid 263262:tid 263473] [client 20.213.164.196:32693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/chosen.php"] [unique_id "ary1EZEcZ_148BjP8ZPMqAAAAVo"]
[Wed Sep 30 01:06:57.382982 2026] [security2:error] [pid 263262:tid 263404] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1EZEcZ_148BjP8ZPMqQAAARU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:57.385143 2026] [security2:error] [pid 263262:tid 263430] [client 52.231.69.245:38593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ms-edit.php"] [unique_id "ary1EZEcZ_148BjP8ZPMrAAAAS8"]
[Wed Sep 30 01:06:57.436990 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.437248 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.455918 2026] [security2:error] [pid 263262:tid 263397] [client 20.194.5.96:19124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/adminfuns.php"] [unique_id "ary1EZEcZ_148BjP8ZPMtQAAAQ4"]
[Wed Sep 30 01:06:57.465132 2026] [security2:error] [pid 263262:tid 263457] [client 85.204.70.116:38758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1EZEcZ_148BjP8ZPMtgAAAUo"]
[Wed Sep 30 01:06:57.526935 2026] [security2:error] [pid 263262:tid 263478] [client 20.5.79.49:64013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ah25.php"] [unique_id "ary1EZEcZ_148BjP8ZPMugAAAV8"]
[Wed Sep 30 01:06:57.531200 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.531470 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.531593 2026] [security2:error] [pid 263262:tid 263517] [client 20.219.2.60:11700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/file.php"] [unique_id "ary1EZEcZ_148BjP8ZPMuwAAAYY"]
[Wed Sep 30 01:06:57.549823 2026] [access_compat:error] [pid 263262:tid 263452] [client 47.79.13.234:53778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:06:57.550100 2026] [access_compat:error] [pid 263262:tid 263452] [client 47.79.13.234:53778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:06:57.612865 2026] [security2:error] [pid 263262:tid 263342] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1EZEcZ_148BjP8ZPMvQABV04"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D75979
[Wed Sep 30 01:06:57.621281 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.621565 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:42039] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.640657 2026] [security2:error] [pid 263262:tid 263398] [client 74.7.243.227:38344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1EZEcZ_148BjP8ZPMvwAAAQ8"], referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 01:06:57.672365 2026] [security2:error] [pid 263262:tid 263406] [client 52.231.69.245:39185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/txets.php"] [unique_id "ary1EZEcZ_148BjP8ZPMwQAAARc"]
[Wed Sep 30 01:06:57.700854 2026] [security2:error] [pid 263262:tid 263393] [client 20.70.173.30:33437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/w.php"] [unique_id "ary1EZEcZ_148BjP8ZPMwgAAAQo"]
[Wed Sep 30 01:06:57.753967 2026] [security2:error] [pid 263262:tid 263513] [client 20.213.164.196:32661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/radio.php"] [unique_id "ary1EZEcZ_148BjP8ZPMxAAAAYI"]
[Wed Sep 30 01:06:57.755894 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1EZEcZ_148BjP8ZPMwwABRmM"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255493&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:06:57.755932 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1EZEcZ_148BjP8ZPMwwABRmM"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=255493&sid=4839d995d358d13315e93e294c91c497
[Wed Sep 30 01:06:57.763150 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.763420 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.843032 2026] [security2:error] [pid 263262:tid 263451] [client 20.5.79.49:62380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/shell.php"] [unique_id "ary1EZEcZ_148BjP8ZPMygAAAUQ"]
[Wed Sep 30 01:06:57.855198 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.855472 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.935099 2026] [security2:error] [pid 263262:tid 263489] [client 52.231.69.245:39047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/hao.php"] [unique_id "ary1EZEcZ_148BjP8ZPM0wAAAWo"]
[Wed Sep 30 01:06:57.946225 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.946503 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:57.965323 2026] [security2:error] [pid 263262:tid 263421] [client 43.227.131.37:13216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1EZEcZ_148BjP8ZPM1QAAASY"]
[Wed Sep 30 01:06:57.965417 2026] [security2:error] [pid 263262:tid 263421] [client 43.227.131.37:13216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1EZEcZ_148BjP8ZPM1QAAASY"]
[Wed Sep 30 01:06:57.985745 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:57.986023 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.037190 2026] [security2:error] [pid 263262:tid 263483] [client 216.73.216.46:42039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1EpEcZ_148BjP8ZPM2wAAAWQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTQvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjAzL3Bvd2Vy
[Wed Sep 30 01:06:58.039595 2026] [security2:error] [pid 263262:tid 263459] [client 85.204.70.116:38772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//site/wp-includes/wlwmanifest.xml"] [unique_id "ary1EpEcZ_148BjP8ZPM3QAAAUw"]
[Wed Sep 30 01:06:58.075761 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.076029 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.079116 2026] [security2:error] [pid 263262:tid 263369] [remote 47.128.114.102:62546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/491/rangers-police-arrest-115-suspects-in-karachi-targeted-operation"] [unique_id "ary1EpEcZ_148BjP8ZPM4AABI2k"]
[Wed Sep 30 01:06:58.119354 2026] [security2:error] [pid 263262:tid 263458] [client 20.194.5.96:19098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/av.php"] [unique_id "ary1EpEcZ_148BjP8ZPM4QAAAUs"]
[Wed Sep 30 01:06:58.120081 2026] [security2:error] [pid 263262:tid 263450] [client 20.213.164.196:47523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1EpEcZ_148BjP8ZPM4gAAAUM"]
[Wed Sep 30 01:06:58.160839 2026] [security2:error] [pid 263262:tid 263497] [client 20.5.79.49:64017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-sing.php"] [unique_id "ary1EpEcZ_148BjP8ZPM5AAAAXI"]
[Wed Sep 30 01:06:58.167289 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.167564 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.199589 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.69.245:39106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/33.php"] [unique_id "ary1EpEcZ_148BjP8ZPM6AAAAYE"]
[Wed Sep 30 01:06:58.259118 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.259389 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.275739 2026] [security2:error] [pid 263262:tid 263435] [client 106.214.2.47:29882] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPM8gAAATQ"]
[Wed Sep 30 01:06:58.275870 2026] [security2:error] [pid 263262:tid 263435] [client 106.214.2.47:29882] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPM8gAAATQ"]
[Wed Sep 30 01:06:58.347804 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.348077 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:62117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.376126 2026] [security2:error] [pid 263262:tid 263398] [client 216.73.216.46:3546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1EpEcZ_148BjP8ZPM-gAAAQ8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5MjY5
[Wed Sep 30 01:06:58.438941 2026] [security2:error] [pid 263262:tid 263519] [client 91.142.73.116:61732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.73.142.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/gala-2023/"] [unique_id "ary1EpEcZ_148BjP8ZPNAAAAAYg"], referer: http://onemontgomerygreen.org/index.php/gala-2023/
[Wed Sep 30 01:06:58.440540 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.440798 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.450949 2026] [security2:error] [pid 263262:tid 263453] [client 20.213.164.196:47551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/k.php"] [unique_id "ary1EpEcZ_148BjP8ZPNAgAAAUY"]
[Wed Sep 30 01:06:58.468217 2026] [security2:error] [pid 263262:tid 263476] [remote 168.100.149.65:19666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1EpEcZ_148BjP8ZPM9wABXmg"]
[Wed Sep 30 01:06:58.475714 2026] [security2:error] [pid 263262:tid 263438] [client 20.5.79.49:64022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wok.php"] [unique_id "ary1EpEcZ_148BjP8ZPNAwAAATc"]
[Wed Sep 30 01:06:58.478421 2026] [security2:error] [pid 263262:tid 263510] [client 52.231.69.245:39038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/adminner.php"] [unique_id "ary1EpEcZ_148BjP8ZPNBAAAAX8"]
[Wed Sep 30 01:06:58.532069 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.532610 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.534645 2026] [security2:error] [pid 263262:tid 263460] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1EpEcZ_148BjP8ZPNCQAAAU0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:58.554057 2026] [security2:error] [pid 263262:tid 263417] [client 223.181.30.165:15088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPNCwAAASI"]
[Wed Sep 30 01:06:58.554171 2026] [security2:error] [pid 263262:tid 263417] [client 223.181.30.165:15088] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPNCwAAASI"]
[Wed Sep 30 01:06:58.611996 2026] [security2:error] [pid 263262:tid 263433] [client 85.204.70.116:38778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1EpEcZ_148BjP8ZPNDwAAATI"]
[Wed Sep 30 01:06:58.623506 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.623794 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.660021 2026] [ssl:error] [pid 263262:tid 263411] [client 216.25.124.26:54167] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpanel.donskey.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:06:58.713501 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.713778 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.753106 2026] [security2:error] [pid 263262:tid 263418] [client 52.231.69.245:39079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/thoms.php"] [unique_id "ary1EpEcZ_148BjP8ZPNGgAAASM"]
[Wed Sep 30 01:06:58.756091 2026] [security2:error] [pid 263262:tid 263504] [client 45.138.12.32:40804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.faa.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1EpEcZ_148BjP8ZPNHAAAAXk"]
[Wed Sep 30 01:06:58.766325 2026] [security2:error] [pid 263262:tid 263425] [client 216.73.216.46:62117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1EpEcZ_148BjP8ZPNHQAAASo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzM4
[Wed Sep 30 01:06:58.789167 2026] [security2:error] [pid 263262:tid 263458] [client 20.5.79.49:26483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "ary1EpEcZ_148BjP8ZPNHgAAAUs"]
[Wed Sep 30 01:06:58.804296 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.804593 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.815572 2026] [security2:error] [pid 263262:tid 263451] [client 182.69.182.151:2303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPNIQAAAUQ"]
[Wed Sep 30 01:06:58.815698 2026] [security2:error] [pid 263262:tid 263451] [client 182.69.182.151:2303] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1EpEcZ_148BjP8ZPNIQAAAUQ"]
[Wed Sep 30 01:06:58.843560 2026] [security2:error] [pid 263262:tid 263405] [client 20.213.164.196:47543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/133.php"] [unique_id "ary1EpEcZ_148BjP8ZPNIgAAARY"]
[Wed Sep 30 01:06:58.895223 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.895498 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:58.940604 2026] [security2:error] [pid 263262:tid 263477] [client 20.194.30.107:17479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/memberfuns.php"] [unique_id "ary1EpEcZ_148BjP8ZPNLgAAAV4"]
[Wed Sep 30 01:06:58.987991 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:58.988279 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.024900 2026] [security2:error] [pid 263262:tid 263453] [client 52.231.69.245:39018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/a.php"] [unique_id "ary1E5EcZ_148BjP8ZPNMwAAAUY"]
[Wed Sep 30 01:06:59.059384 2026] [security2:error] [pid 263262:tid 263403] [client 223.181.60.167:32445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1E5EcZ_148BjP8ZPNNAAAARQ"]
[Wed Sep 30 01:06:59.059593 2026] [security2:error] [pid 263262:tid 263403] [client 223.181.60.167:32445] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1E5EcZ_148BjP8ZPNNAAAARQ"]
[Wed Sep 30 01:06:59.077289 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.077558 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.090719 2026] [security2:error] [pid 263262:tid 263460] [client 20.219.2.60:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/222.php"] [unique_id "ary1E5EcZ_148BjP8ZPNNgAAAU0"]
[Wed Sep 30 01:06:59.096279 2026] [security2:error] [pid 263262:tid 263437] [client 20.194.5.96:19129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/dex.php"] [unique_id "ary1E5EcZ_148BjP8ZPNNwAAATY"]
[Wed Sep 30 01:06:59.104371 2026] [security2:error] [pid 263262:tid 263506] [client 20.5.79.49:62354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wuasr.php"] [unique_id "ary1E5EcZ_148BjP8ZPNOQAAAXs"]
[Wed Sep 30 01:06:59.112955 2026] [security2:error] [pid 263262:tid 263491] [client 20.198.74.230:24159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/2c88361384index.php"] [unique_id "ary1E5EcZ_148BjP8ZPNOwAAAWw"]
[Wed Sep 30 01:06:59.169802 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.170076 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.184908 2026] [security2:error] [pid 263262:tid 263428] [client 85.204.70.116:38786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "indoortnb.indoorenvironmentaltesting.com"] [uri "/indoortnb.com//sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1E5EcZ_148BjP8ZPNPwAAAS0"]
[Wed Sep 30 01:06:59.197060 2026] [security2:error] [pid 263262:tid 263455] [client 20.213.164.196:32677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wsd.php"] [unique_id "ary1E5EcZ_148BjP8ZPNQAAAAUg"]
[Wed Sep 30 01:06:59.259860 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.260313 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.293654 2026] [security2:error] [pid 263262:tid 263426] [client 52.231.69.245:39191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/b8.php"] [unique_id "ary1E5EcZ_148BjP8ZPNRwAAASs"]
[Wed Sep 30 01:06:59.310168 2026] [security2:error] [pid 263262:tid 263468] [client 20.28.180.172:61184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws66.php"] [unique_id "ary1E5EcZ_148BjP8ZPNSAAAAVU"]
[Wed Sep 30 01:06:59.352113 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.352372 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.423060 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:62381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ms-edit.php"] [unique_id "ary1E5EcZ_148BjP8ZPNUAAAAXY"]
[Wed Sep 30 01:06:59.443732 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.444021 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.460188 2026] [security2:error] [pid 263262:tid 263520] [client 45.138.12.43:20388] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.weddingsbyleigh.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1E5EcZ_148BjP8ZPNUgAAAYk"]
[Wed Sep 30 01:06:59.476092 2026] [http2:warn] [pid 251754:tid 251997] [client 52.167.144.211:58215] h2_stream(251754-752-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:06:59.532411 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.532690 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.555556 2026] [security2:error] [pid 263262:tid 263477] [client 52.231.69.245:39063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/sid.php"] [unique_id "ary1E5EcZ_148BjP8ZPNXgAAAV4"]
[Wed Sep 30 01:06:59.558076 2026] [security2:error] [pid 263262:tid 263509] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1E5EcZ_148BjP8ZPNXQAAAX4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:06:59.624477 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.625293 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.703536 2026] [security2:error] [pid 263262:tid 263469] [client 20.213.164.196:32694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/BDKR28WP.php"] [unique_id "ary1E5EcZ_148BjP8ZPNZwAAAVY"]
[Wed Sep 30 01:06:59.714745 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.715026 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:46926] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.818059 2026] [security2:error] [pid 263262:tid 263508] [client 20.28.180.172:29575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/tinysd.php"] [unique_id "ary1E5EcZ_148BjP8ZPNcgAAAX0"]
[Wed Sep 30 01:06:59.837961 2026] [security2:error] [pid 263262:tid 263471] [client 52.231.69.245:39002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/bro.php"] [unique_id "ary1E5EcZ_148BjP8ZPNcwAAAVg"]
[Wed Sep 30 01:06:59.858116 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.858364 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.944395 2026] [security2:error] [pid 263262:tid 263473] [client 20.219.2.60:11373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bolt.php"] [unique_id "ary1E5EcZ_148BjP8ZPNfgAAAVo"]
[Wed Sep 30 01:06:59.953431 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.953884 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.988727 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:06:59.989029 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:06:59.997381 2026] [security2:error] [pid 263262:tid 263423] [client 4.240.25.22:38777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/a.php"] [unique_id "ary1E5EcZ_148BjP8ZPNhAAAASg"]
[Wed Sep 30 01:07:00.079824 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.080118 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.121754 2026] [security2:error] [pid 263262:tid 263409] [client 52.231.69.245:39091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/xwpg.php"] [unique_id "ary1FJEcZ_148BjP8ZPNkgAAARo"]
[Wed Sep 30 01:07:00.121754 2026] [security2:error] [pid 263262:tid 263467] [client 216.73.216.46:46926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1FJEcZ_148BjP8ZPNkQAAAVQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9tZW1vcnkyODE%3D
[Wed Sep 30 01:07:00.141353 2026] [security2:error] [pid 263262:tid 263470] [client 20.213.164.196:32662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wmore1.php"] [unique_id "ary1FJEcZ_148BjP8ZPNkwAAAVc"]
[Wed Sep 30 01:07:00.170186 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.170451 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.218478 2026] [security2:error] [pid 263262:tid 263518] [client 20.70.173.30:56486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/aaa.php"] [unique_id "ary1FJEcZ_148BjP8ZPNmwAAAYc"]
[Wed Sep 30 01:07:00.262204 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.262478 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.275989 2026] [security2:error] [pid 263262:tid 263491] [client 20.5.79.49:25814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/gecko-litespeed.php"] [unique_id "ary1FJEcZ_148BjP8ZPNoQAAAWw"]
[Wed Sep 30 01:07:00.352358 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.352670 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.386841 2026] [security2:error] [pid 263262:tid 263449] [client 52.231.69.245:39211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/radio.php"] [unique_id "ary1FJEcZ_148BjP8ZPNqgAAAUI"]
[Wed Sep 30 01:07:00.442934 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.443196 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.460783 2026] [security2:error] [pid 263262:tid 263452] [remote 168.100.149.179:64144] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1FJEcZ_148BjP8ZPNpwABIho"]
[Wed Sep 30 01:07:00.517831 2026] [security2:error] [pid 263262:tid 263493] [client 20.194.5.96:19127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/chosen.php"] [unique_id "ary1FJEcZ_148BjP8ZPNrwAAAW4"]
[Wed Sep 30 01:07:00.537402 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.537670 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.565520 2026] [security2:error] [pid 263262:tid 263278] [remote 57.141.14.44:59436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-includes/wlwmanifest.xml"] [unique_id "ary1FJEcZ_148BjP8ZPNsgABeQ4"]
[Wed Sep 30 01:07:00.584924 2026] [security2:error] [pid 263262:tid 263421] [client 20.213.164.196:32660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/177.php"] [unique_id "ary1FJEcZ_148BjP8ZPNtAAAASY"]
[Wed Sep 30 01:07:00.587741 2026] [security2:error] [pid 263262:tid 263267] [remote 64.23.166.180:14126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-c311338e.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary1FJEcZ_148BjP8ZPNtgABIwM"]
[Wed Sep 30 01:07:00.592652 2026] [security2:error] [pid 263262:tid 263447] [client 20.5.79.49:62356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/koala.php"] [unique_id "ary1FJEcZ_148BjP8ZPNtwAAAUA"]
[Wed Sep 30 01:07:00.597310 2026] [security2:error] [pid 263262:tid 263450] [client 37.41.16.35:64143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1FJEcZ_148BjP8ZPNuAAAAUM"]
[Wed Sep 30 01:07:00.597452 2026] [security2:error] [pid 263262:tid 263450] [client 37.41.16.35:64143] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1FJEcZ_148BjP8ZPNuAAAAUM"]
[Wed Sep 30 01:07:00.628818 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.629246 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.650794 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.69.245:39188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ccc.php"] [unique_id "ary1FJEcZ_148BjP8ZPNvgAAAYE"]
[Wed Sep 30 01:07:00.717715 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.718013 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.746743 2026] [security2:error] [pid 263262:tid 263396] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/surge-protectors/"] [unique_id "ary1FJEcZ_148BjP8ZPNwgAAAQ0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:00.774611 2026] [security2:error] [pid 263262:tid 263501] [client 74.7.241.179:52100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.e1carriers.x1-logistics.com"] [uri "/robots.txt"] [unique_id "ary1FJEcZ_148BjP8ZPNwwABdhU"]
[Wed Sep 30 01:07:00.807323 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.807639 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.830276 2026] [security2:error] [pid 263262:tid 263399] [client 201.182.92.126:59722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.92.182.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "davidtechnical.com"] [uri "/xmlrpc.php"] [unique_id "ary1FJEcZ_148BjP8ZPNyAAAARA"]
[Wed Sep 30 01:07:00.830399 2026] [security2:error] [pid 263262:tid 263399] [client 201.182.92.126:59722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "davidtechnical.com"] [uri "/xmlrpc.php"] [unique_id "ary1FJEcZ_148BjP8ZPNyAAAARA"]
[Wed Sep 30 01:07:00.852473 2026] [security2:error] [pid 263262:tid 263500] [client 4.240.25.22:8924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1FJEcZ_148BjP8ZPNywAAAXU"]
[Wed Sep 30 01:07:00.903300 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.903739 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.912769 2026] [security2:error] [pid 263262:tid 263403] [client 20.5.79.49:26434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/akcc.php"] [unique_id "ary1FJEcZ_148BjP8ZPN0AAAARQ"]
[Wed Sep 30 01:07:00.915636 2026] [security2:error] [pid 263262:tid 263491] [client 52.231.69.245:38647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wmore1.php"] [unique_id "ary1FJEcZ_148BjP8ZPN0QAAAWw"]
[Wed Sep 30 01:07:00.960597 2026] [authz_core:error] [pid 263262:tid 263393] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/IXR/error_log, referer: binance.com
[Wed Sep 30 01:07:00.989517 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:00.989791 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:45762] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:00.991981 2026] [security2:error] [pid 263262:tid 263394] [client 20.213.164.196:47063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/ccc.php"] [unique_id "ary1FJEcZ_148BjP8ZPN2AAAAQs"]
[Wed Sep 30 01:07:01.046504 2026] [security2:error] [pid 263262:tid 263428] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1FZEcZ_148BjP8ZPN3wAAAS0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:01.047324 2026] [security2:error] [pid 263262:tid 263471] [client 20.70.173.30:59981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/gecko.php"] [unique_id "ary1FZEcZ_148BjP8ZPN4AAAAVg"]
[Wed Sep 30 01:07:01.073513 2026] [security2:error] [pid 263262:tid 263410] [client 216.73.216.46:45762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1FZEcZ_148BjP8ZPN5AAAARs"]
[Wed Sep 30 01:07:01.170909 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.171181 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.181516 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.69.245:39092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/function.php"] [unique_id "ary1FZEcZ_148BjP8ZPN6gAAAUM"]
[Wed Sep 30 01:07:01.259105 2026] [security2:error] [pid 263262:tid 263489] [client 20.5.79.49:62352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wolv2.php"] [unique_id "ary1FZEcZ_148BjP8ZPN8QAAAWo"]
[Wed Sep 30 01:07:01.262785 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.263048 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.303139 2026] [access_compat:error] [pid 263262:tid 263404] [client 47.79.13.168:45612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:01.303417 2026] [access_compat:error] [pid 263262:tid 263404] [client 47.79.13.168:45612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:01.352658 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.352926 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.368237 2026] [security2:error] [pid 263262:tid 263405] [client 20.219.2.60:11381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-blogs.php"] [unique_id "ary1FZEcZ_148BjP8ZPN-AAAARY"]
[Wed Sep 30 01:07:01.399131 2026] [security2:error] [pid 263262:tid 263497] [client 20.194.5.96:19089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/radio.php"] [unique_id "ary1FZEcZ_148BjP8ZPN_AAAAXI"]
[Wed Sep 30 01:07:01.421007 2026] [security2:error] [pid 263262:tid 263466] [client 45.138.12.32:27994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.finan.cloud"] [uri "/wp-links-opml.php"] [unique_id "ary1FZEcZ_148BjP8ZPN_gAAAVM"]
[Wed Sep 30 01:07:01.438354 2026] [http2:warn] [pid 251754:tid 251988] [client 40.77.167.224:62328] h2_stream(251754-767-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:01.449400 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.449853 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.469979 2026] [security2:error] [pid 263262:tid 263422] [client 52.231.69.245:39026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ab.php"] [unique_id "ary1FZEcZ_148BjP8ZPOBAAAASc"]
[Wed Sep 30 01:07:01.490049 2026] [security2:error] [pid 263262:tid 263477] [client 20.213.164.196:32684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/0xD.php"] [unique_id "ary1FZEcZ_148BjP8ZPOBQAAAV4"]
[Wed Sep 30 01:07:01.535489 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.535753 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.596940 2026] [security2:error] [pid 263262:tid 263436] [client 20.5.79.49:25837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/ID3/about.php7"] [unique_id "ary1FZEcZ_148BjP8ZPOFQAAATU"]
[Wed Sep 30 01:07:01.631800 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.632227 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.699104 2026] [security2:error] [pid 263262:tid 263449] [client 20.194.30.107:17427] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.hubach.com"] [uri "/1.php"] [unique_id "ary1FZEcZ_148BjP8ZPOGgAAAUI"]
[Wed Sep 30 01:07:01.699197 2026] [security2:error] [pid 263262:tid 263449] [client 20.194.30.107:17427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/1.php"] [unique_id "ary1FZEcZ_148BjP8ZPOGgAAAUI"]
[Wed Sep 30 01:07:01.721896 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.722375 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.738095 2026] [security2:error] [pid 263262:tid 263452] [client 52.231.69.245:39193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/css.php"] [unique_id "ary1FZEcZ_148BjP8ZPOHAAAAUU"]
[Wed Sep 30 01:07:01.808681 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.808955 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.902833 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.903260 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:01.920295 2026] [security2:error] [pid 263262:tid 263511] [client 20.5.79.49:62350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary1FZEcZ_148BjP8ZPOKAAAAYA"]
[Wed Sep 30 01:07:01.921677 2026] [security2:error] [pid 263262:tid 263489] [client 20.213.164.196:47522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/sallu.php"] [unique_id "ary1FZEcZ_148BjP8ZPOKQAAAWo"]
[Wed Sep 30 01:07:01.938903 2026] [security2:error] [pid 263262:tid 263435] [client 155.190.6.18:52812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1FZEcZ_148BjP8ZPOLQAAATQ"]
[Wed Sep 30 01:07:01.939007 2026] [security2:error] [pid 263262:tid 263435] [client 155.190.6.18:52812] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1FZEcZ_148BjP8ZPOLQAAATQ"]
[Wed Sep 30 01:07:01.987066 2026] [security2:error] [pid 263262:tid 263518] [client 103.241.204.139:63774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1FZEcZ_148BjP8ZPOMAAAAYc"]
[Wed Sep 30 01:07:01.987190 2026] [security2:error] [pid 263262:tid 263518] [client 103.241.204.139:63774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1FZEcZ_148BjP8ZPOMAAAAYc"]
[Wed Sep 30 01:07:01.994426 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:01.994874 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.006685 2026] [security2:error] [pid 263262:tid 263447] [client 52.231.69.245:39062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1FpEcZ_148BjP8ZPOMQAAAUA"]
[Wed Sep 30 01:07:02.038183 2026] [security2:error] [pid 263262:tid 263415] [client 20.28.180.172:18355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ewe.php"] [unique_id "ary1FpEcZ_148BjP8ZPOMwAAASA"]
[Wed Sep 30 01:07:02.082694 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.082986 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.107455 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.5.96:19086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1FpEcZ_148BjP8ZPOOgAAATg"]
[Wed Sep 30 01:07:02.131552 2026] [security2:error] [pid 263262:tid 263355] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1FpEcZ_148BjP8ZPOPgABMls"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297899&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:02.131576 2026] [security2:error] [pid 263262:tid 263355] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1FpEcZ_148BjP8ZPOPgABMls"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297899&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:02.172025 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.172288 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.233239 2026] [security2:error] [pid 263262:tid 263406] [client 45.138.12.40:3508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xfactorbaseballleague.com"] [uri "/wp-links-opml.php"] [unique_id "ary1FpEcZ_148BjP8ZPOQwAAARc"]
[Wed Sep 30 01:07:02.255164 2026] [security2:error] [pid 263262:tid 263419] [client 20.5.79.49:26444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/shellalfa.php"] [unique_id "ary1FpEcZ_148BjP8ZPORQAAASQ"]
[Wed Sep 30 01:07:02.264911 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.265196 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.286503 2026] [security2:error] [pid 263262:tid 263496] [client 52.231.69.245:39085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary1FpEcZ_148BjP8ZPOSgAAAXE"]
[Wed Sep 30 01:07:02.355431 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.355713 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.418798 2026] [security2:error] [pid 263262:tid 263457] [client 20.213.164.196:47514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/ops.php"] [unique_id "ary1FpEcZ_148BjP8ZPOUQAAAUo"]
[Wed Sep 30 01:07:02.446092 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.446365 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.462774 2026] [security2:error] [pid 263262:tid 263507] [client 168.100.149.108:58108] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-9001-Certified_col.png"] [unique_id "ary1FpEcZ_148BjP8ZPOTAABLSA"]
[Wed Sep 30 01:07:02.514505 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1FpEcZ_148BjP8ZPOXQABKCM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=263300
[Wed Sep 30 01:07:02.514555 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1FpEcZ_148BjP8ZPOXQABKCM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=263300
[Wed Sep 30 01:07:02.536860 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.537121 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.552249 2026] [security2:error] [pid 263262:tid 263469] [client 20.70.173.30:60010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/8.php"] [unique_id "ary1FpEcZ_148BjP8ZPOYQAAAVY"]
[Wed Sep 30 01:07:02.567641 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.69.245:39093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-links-opml.php"] [unique_id "ary1FpEcZ_148BjP8ZPOYwAAAUM"]
[Wed Sep 30 01:07:02.604326 2026] [security2:error] [pid 263262:tid 263451] [client 20.5.79.49:26489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/gfile.php"] [unique_id "ary1FpEcZ_148BjP8ZPOZAAAAUQ"]
[Wed Sep 30 01:07:02.613489 2026] [security2:error] [pid 263262:tid 263411] [client 103.159.192.142:61770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1FpEcZ_148BjP8ZPOZQAAARw"]
[Wed Sep 30 01:07:02.613623 2026] [security2:error] [pid 263262:tid 263411] [client 103.159.192.142:61770] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1FpEcZ_148BjP8ZPOZQAAARw"]
[Wed Sep 30 01:07:02.633242 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.633709 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.718847 2026] [security2:error] [pid 263262:tid 263509] [client 45.138.12.32:40898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.feq.hpj.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1FpEcZ_148BjP8ZPObwAAAX4"]
[Wed Sep 30 01:07:02.719401 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.719660 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.803397 2026] [security2:error] [pid 263262:tid 263405] [client 20.213.164.196:32688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/mac.php"] [unique_id "ary1FpEcZ_148BjP8ZPOcgAAARY"]
[Wed Sep 30 01:07:02.809447 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.809718 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.831179 2026] [security2:error] [pid 263262:tid 263396] [client 52.231.69.245:39181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/hp.php"] [unique_id "ary1FpEcZ_148BjP8ZPOdAAAAQ0"]
[Wed Sep 30 01:07:02.902057 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.902446 2026] [security2:error] [pid 263262:tid 263517] [client 45.138.12.43:50164] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.weddingsbyleigh.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1FpEcZ_148BjP8ZPOewAAAYY"]
[Wed Sep 30 01:07:02.902527 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.927950 2026] [security2:error] [pid 263262:tid 263498] [client 20.5.79.49:26445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/admin/index.php"] [unique_id "ary1FpEcZ_148BjP8ZPOfwAAAXM"]
[Wed Sep 30 01:07:02.940723 2026] [security2:error] [pid 263262:tid 263406] [client 20.219.2.60:11692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/zlnckdxn.php"] [unique_id "ary1FpEcZ_148BjP8ZPOgAAAARc"]
[Wed Sep 30 01:07:02.945187 2026] [security2:error] [pid 263262:tid 263420] [client 116.197.133.25:60434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1FpEcZ_148BjP8ZPOggAAASU"]
[Wed Sep 30 01:07:02.945290 2026] [security2:error] [pid 263262:tid 263420] [client 116.197.133.25:60434] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1FpEcZ_148BjP8ZPOggAAASU"]
[Wed Sep 30 01:07:02.993442 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:02.993775 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:02.998435 2026] [security2:error] [pid 263262:tid 263472] [client 20.214.109.68:59898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/dx.php"] [unique_id "ary1FpEcZ_148BjP8ZPOhQAAAVk"]
[Wed Sep 30 01:07:03.074944 2026] [security2:error] [pid 263262:tid 263478] [client 20.194.5.96:18888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/k.php"] [unique_id "ary1F5EcZ_148BjP8ZPOiAAAAV8"]
[Wed Sep 30 01:07:03.083211 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.083475 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.101598 2026] [security2:error] [pid 263262:tid 263414] [client 52.231.69.245:39137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/mo.php"] [unique_id "ary1F5EcZ_148BjP8ZPOjQAAAR8"]
[Wed Sep 30 01:07:03.120647 2026] [autoindex:error] [pid 263262:tid 263448] [client 185.177.189.162:0] AH01276: Cannot serve directory /home2/nurveenc/public_html/islandtaste/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://linkbuildingconsultant.space/dir/strong-seo-backlinks-103129
[Wed Sep 30 01:07:03.174854 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.175136 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.242551 2026] [security2:error] [pid 263262:tid 263468] [client 20.213.164.196:47509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/myglu.php"] [unique_id "ary1F5EcZ_148BjP8ZPOkwAAAVU"]
[Wed Sep 30 01:07:03.256072 2026] [security2:error] [pid 263262:tid 263444] [client 20.5.79.49:62393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/.well-known/acme-challenge/bak.php"] [unique_id "ary1F5EcZ_148BjP8ZPOlAAAAT0"]
[Wed Sep 30 01:07:03.264823 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.265076 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.308646 2026] [security2:error] [pid 263262:tid 263447] [client 20.194.30.107:17507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1F5EcZ_148BjP8ZPOmgAAAUA"]
[Wed Sep 30 01:07:03.355580 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.355856 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.377301 2026] [security2:error] [pid 263262:tid 263464] [client 52.231.69.245:39228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/ivmirgut.php"] [unique_id "ary1F5EcZ_148BjP8ZPOnwAAAVE"]
[Wed Sep 30 01:07:03.436557 2026] [security2:error] [pid 263262:tid 263439] [client 16.145.85.198:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "bna.rqu.mybluehost.me"] [uri "/"] [unique_id "ary1F5EcZ_148BjP8ZPOpQAAATg"]
[Wed Sep 30 01:07:03.447913 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.448193 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.537452 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.537730 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.581524 2026] [security2:error] [pid 263262:tid 263427] [client 20.5.79.49:62367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/manager.php/error.php"] [unique_id "ary1F5EcZ_148BjP8ZPOrQAAASw"]
[Wed Sep 30 01:07:03.616636 2026] [security2:error] [pid 263262:tid 263436] [client 20.194.30.107:10163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1F5EcZ_148BjP8ZPOtAAAATU"]
[Wed Sep 30 01:07:03.633156 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.633598 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.641252 2026] [security2:error] [pid 263262:tid 263497] [client 52.231.69.245:39051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/baba.php"] [unique_id "ary1F5EcZ_148BjP8ZPOuAAAAXI"]
[Wed Sep 30 01:07:03.720128 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.720409 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.817766 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.818035 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.900263 2026] [security2:error] [pid 263262:tid 263440] [client 20.213.164.196:47533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/aboutt.php"] [unique_id "ary1F5EcZ_148BjP8ZPOxgAAATk"]
[Wed Sep 30 01:07:03.903220 2026] [security2:error] [pid 263262:tid 263453] [client 52.231.69.245:39138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/Components.php"] [unique_id "ary1F5EcZ_148BjP8ZPOyAAAAUY"]
[Wed Sep 30 01:07:03.906589 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:03.906857 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:31790] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:03.927789 2026] [security2:error] [pid 263262:tid 263507] [client 20.5.79.49:62386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/hroxw.php"] [unique_id "ary1F5EcZ_148BjP8ZPOyQAAAXw"]
[Wed Sep 30 01:07:03.967251 2026] [security2:error] [pid 263262:tid 263275] [remote 64.23.166.180:14132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.gvq.wqt.mybluehost.me"] [uri "/.env"] [unique_id "ary1F5EcZ_148BjP8ZPOzgABgQs"]
[Wed Sep 30 01:07:03.978290 2026] [security2:error] [pid 263262:tid 263489] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1F5EcZ_148BjP8ZPO0AAAAWo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:04.032998 2026] [security2:error] [pid 263262:tid 263394] [client 20.219.2.60:11336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/fs6.php"] [unique_id "ary1GJEcZ_148BjP8ZPO0QAAAQs"]
[Wed Sep 30 01:07:04.049271 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.049511 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.113500 2026] [security2:error] [pid 263262:tid 263459] [client 20.194.30.107:17502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/cdc.php"] [unique_id "ary1GJEcZ_148BjP8ZPO1wAAAUw"]
[Wed Sep 30 01:07:04.140178 2026] [security2:error] [pid 263262:tid 263480] [client 20.194.5.96:19084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/133.php"] [unique_id "ary1GJEcZ_148BjP8ZPO3wAAAWE"]
[Wed Sep 30 01:07:04.142979 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.143216 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.162590 2026] [security2:error] [pid 263262:tid 263483] [client 52.231.69.245:39084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/aboutt.php"] [unique_id "ary1GJEcZ_148BjP8ZPO4wAAAWQ"]
[Wed Sep 30 01:07:04.234300 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.234567 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.253825 2026] [security2:error] [pid 263262:tid 263485] [client 20.5.79.49:64010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/update/wp-2019.php"] [unique_id "ary1GJEcZ_148BjP8ZPO5wAAAWY"]
[Wed Sep 30 01:07:04.258170 2026] [security2:error] [pid 263262:tid 263439] [client 20.214.109.68:61168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-kikikoko.php"] [unique_id "ary1GJEcZ_148BjP8ZPO6AAAATg"]
[Wed Sep 30 01:07:04.273879 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.274139 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.281841 2026] [security2:error] [pid 263262:tid 263291] [remote 110.249.201.158:23748] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/film-review-the-old-garden-camera-roll/"] [unique_id "ary1GJEcZ_148BjP8ZPO6gABTxs"]
[Wed Sep 30 01:07:04.321060 2026] [security2:error] [pid 263262:tid 263433] [client 216.73.216.46:31790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1GJEcZ_148BjP8ZPO6wAAATI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDM0
[Wed Sep 30 01:07:04.332366 2026] [security2:error] [pid 263262:tid 263477] [client 20.213.164.196:47049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wp-whe.php"] [unique_id "ary1GJEcZ_148BjP8ZPO7AAAAV4"]
[Wed Sep 30 01:07:04.367644 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.368127 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.427520 2026] [security2:error] [pid 263262:tid 263497] [client 52.231.69.245:39076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary1GJEcZ_148BjP8ZPO8wAAAXI"]
[Wed Sep 30 01:07:04.455852 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.456111 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.462331 2026] [security2:error] [pid 263262:tid 263476] [remote 168.100.149.23:25760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1GJEcZ_148BjP8ZPO7QABbjk"]
[Wed Sep 30 01:07:04.506152 2026] [security2:error] [pid 263262:tid 263466] [client 20.70.173.30:56505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/images.php"] [unique_id "ary1GJEcZ_148BjP8ZPO-AAAAVM"]
[Wed Sep 30 01:07:04.546434 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.546748 2026] [access_compat:error] [pid 263262:tid 263448] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.549977 2026] [security2:error] [pid 263262:tid 263440] [client 45.138.12.43:50212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.weddingsbyleigh.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1GJEcZ_148BjP8ZPO_AAAATk"]
[Wed Sep 30 01:07:04.575379 2026] [security2:error] [pid 263262:tid 263516] [client 20.5.79.49:62339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/403.php"] [unique_id "ary1GJEcZ_148BjP8ZPO_QAAAYU"]
[Wed Sep 30 01:07:04.635700 2026] [security2:error] [pid 263262:tid 263469] [client 20.28.180.172:62369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/aboute.php"] [unique_id "ary1GJEcZ_148BjP8ZPPAQAAAVY"]
[Wed Sep 30 01:07:04.641780 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.642236 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.699100 2026] [security2:error] [pid 263262:tid 263515] [client 52.231.69.245:39180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/xx.php"] [unique_id "ary1GJEcZ_148BjP8ZPPCAAAAYQ"]
[Wed Sep 30 01:07:04.732743 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.733070 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.742388 2026] [security2:error] [pid 263262:tid 263394] [client 20.213.164.196:32687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/ssixta.php"] [unique_id "ary1GJEcZ_148BjP8ZPPDAAAAQs"]
[Wed Sep 30 01:07:04.742656 2026] [access_compat:error] [pid 263262:tid 263453] [client 47.79.13.28:52034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:04.743109 2026] [access_compat:error] [pid 263262:tid 263453] [client 47.79.13.28:52034] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:04.820732 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.821025 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.838414 2026] [security2:error] [pid 263262:tid 263452] [client 20.194.5.96:19097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wsd.php"] [unique_id "ary1GJEcZ_148BjP8ZPPEAAAAUU"]
[Wed Sep 30 01:07:04.849295 2026] [security2:error] [pid 263262:tid 263430] [client 20.28.180.172:29621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ded.php"] [unique_id "ary1GJEcZ_148BjP8ZPPEQAAAS8"]
[Wed Sep 30 01:07:04.884469 2026] [security2:error] [pid 263262:tid 263350] [remote 64.23.166.180:14148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.website-d02554e1.nucreativesolutions.com"] [uri "/.env"] [unique_id "ary1GJEcZ_148BjP8ZPPEwABNlY"]
[Wed Sep 30 01:07:04.916711 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:04.917007 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:04.919040 2026] [security2:error] [pid 263262:tid 263422] [client 20.5.79.49:62351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/num.php"] [unique_id "ary1GJEcZ_148BjP8ZPPGAAAASc"]
[Wed Sep 30 01:07:04.932412 2026] [security2:error] [pid 263262:tid 263351] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1GJEcZ_148BjP8ZPPGgABUFc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297720&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:04.932437 2026] [security2:error] [pid 263262:tid 263351] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1GJEcZ_148BjP8ZPPGgABUFc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297720&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:04.971081 2026] [security2:error] [pid 263262:tid 263395] [client 52.231.69.245:39217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/gelay.php"] [unique_id "ary1GJEcZ_148BjP8ZPPIQAAAQw"]
[Wed Sep 30 01:07:05.009293 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.009754 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.099670 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.099944 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.189741 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.190070 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.217469 2026] [security2:error] [pid 263262:tid 263466] [client 20.194.30.107:17421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/f35.php"] [unique_id "ary1GZEcZ_148BjP8ZPPLQAAAVM"]
[Wed Sep 30 01:07:05.217553 2026] [security2:error] [pid 263262:tid 263496] [client 223.235.102.107:5330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPLgAAAXE"]
[Wed Sep 30 01:07:05.218272 2026] [security2:error] [pid 263262:tid 263496] [client 223.235.102.107:5330] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPLgAAAXE"]
[Wed Sep 30 01:07:05.223618 2026] [security2:error] [pid 263262:tid 263492] [client 20.213.164.196:47516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/tesla.php"] [unique_id "ary1GZEcZ_148BjP8ZPPLwAAAW0"]
[Wed Sep 30 01:07:05.234883 2026] [security2:error] [pid 263262:tid 263487] [client 52.231.69.245:39058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/htaccess.php"] [unique_id "ary1GZEcZ_148BjP8ZPPMAAAAWg"]
[Wed Sep 30 01:07:05.240008 2026] [security2:error] [pid 263262:tid 263445] [client 20.5.79.49:26484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/0x0x.php"] [unique_id "ary1GZEcZ_148BjP8ZPPMgAAAT4"]
[Wed Sep 30 01:07:05.280764 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.281038 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.372866 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.373208 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.465345 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.465788 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.507002 2026] [security2:error] [pid 263262:tid 263481] [client 52.231.69.245:39143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/readme.php"] [unique_id "ary1GZEcZ_148BjP8ZPPRQAAAWI"]
[Wed Sep 30 01:07:05.513105 2026] [security2:error] [pid 263262:tid 263471] [client 201.32.215.149:6419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPRgAAAVg"]
[Wed Sep 30 01:07:05.513209 2026] [security2:error] [pid 263262:tid 263471] [client 201.32.215.149:6419] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPRgAAAVg"]
[Wed Sep 30 01:07:05.513896 2026] [access_compat:error] [pid 263262:tid 263440] [client 47.79.13.176:45972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:05.514154 2026] [access_compat:error] [pid 263262:tid 263440] [client 47.79.13.176:45972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:05.553592 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.553833 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.554973 2026] [security2:error] [pid 263262:tid 263404] [client 4.240.25.22:18628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/k.php"] [unique_id "ary1GZEcZ_148BjP8ZPPTAAAARU"]
[Wed Sep 30 01:07:05.561061 2026] [security2:error] [pid 263262:tid 263419] [client 20.5.79.49:62348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/xwpg.php"] [unique_id "ary1GZEcZ_148BjP8ZPPTQAAASQ"]
[Wed Sep 30 01:07:05.573268 2026] [security2:error] [pid 263262:tid 263480] [client 20.213.164.196:47076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/222.php"] [unique_id "ary1GZEcZ_148BjP8ZPPTwAAAWE"]
[Wed Sep 30 01:07:05.624698 2026] [security2:error] [pid 263262:tid 263415] [client 45.138.12.32:28052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fje.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1GZEcZ_148BjP8ZPPVAAAASA"]
[Wed Sep 30 01:07:05.645120 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.645388 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.659153 2026] [security2:error] [pid 263262:tid 263426] [client 20.214.109.68:62445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/file61.php"] [unique_id "ary1GZEcZ_148BjP8ZPPWQAAASs"]
[Wed Sep 30 01:07:05.729080 2026] [security2:error] [pid 263262:tid 263406] [client 20.194.5.96:19114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/BDKR28WP.php"] [unique_id "ary1GZEcZ_148BjP8ZPPYAAAARc"]
[Wed Sep 30 01:07:05.748976 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.749395 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.773626 2026] [security2:error] [pid 263262:tid 263438] [client 52.231.69.245:39124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/max.php"] [unique_id "ary1GZEcZ_148BjP8ZPPYwAAATc"]
[Wed Sep 30 01:07:05.821850 2026] [security2:error] [pid 263262:tid 263513] [client 152.59.165.7:65400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPaQAAAYI"]
[Wed Sep 30 01:07:05.821973 2026] [security2:error] [pid 263262:tid 263513] [client 152.59.165.7:65400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1GZEcZ_148BjP8ZPPaQAAAYI"]
[Wed Sep 30 01:07:05.838718 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.839188 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:05.904611 2026] [security2:error] [pid 263262:tid 263414] [client 20.70.173.30:56500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/chosen.php"] [unique_id "ary1GZEcZ_148BjP8ZPPbgAAAR8"]
[Wed Sep 30 01:07:05.908213 2026] [security2:error] [pid 263262:tid 263432] [client 20.219.2.60:11352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/xwzs.php"] [unique_id "ary1GZEcZ_148BjP8ZPPbwAAATE"]
[Wed Sep 30 01:07:05.911084 2026] [security2:error] [pid 263262:tid 263498] [client 20.5.79.49:62346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/public/filemanager.php"] [unique_id "ary1GZEcZ_148BjP8ZPPcAAAAXM"]
[Wed Sep 30 01:07:05.928152 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:05.928425 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:11782] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.002288 2026] [security2:error] [pid 263262:tid 263444] [client 45.138.12.40:7224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xfactorbaseballleague.com"] [uri "/wp-links-opml.php"] [unique_id "ary1GpEcZ_148BjP8ZPPdAAAAT0"]
[Wed Sep 30 01:07:06.022028 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.022356 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.038806 2026] [security2:error] [pid 263262:tid 263509] [client 52.231.69.245:39168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/post.php"] [unique_id "ary1GpEcZ_148BjP8ZPPdgAAAX4"]
[Wed Sep 30 01:07:06.039728 2026] [security2:error] [pid 263262:tid 263421] [client 216.73.216.46:11782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1GpEcZ_148BjP8ZPPdwAAASY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvbWVtb3J5MTIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:07:06.057126 2026] [security2:error] [pid 263262:tid 263441] [client 122.173.27.10:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPeAAAATo"]
[Wed Sep 30 01:07:06.057234 2026] [security2:error] [pid 263262:tid 263441] [client 122.173.27.10:19400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPeAAAATo"]
[Wed Sep 30 01:07:06.114007 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.114338 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.132917 2026] [security2:error] [pid 263262:tid 263450] [client 203.122.45.246:60402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPfgAAAUM"]
[Wed Sep 30 01:07:06.133106 2026] [security2:error] [pid 263262:tid 263450] [client 203.122.45.246:60402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPfgAAAUM"]
[Wed Sep 30 01:07:06.174491 2026] [access_compat:error] [pid 263262:tid 263479] [client 47.79.13.53:48634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:06.174946 2026] [access_compat:error] [pid 263262:tid 263479] [client 47.79.13.53:48634] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:06.209681 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.210054 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.230343 2026] [security2:error] [pid 263262:tid 263428] [client 20.5.79.49:64044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/packed.php"] [unique_id "ary1GpEcZ_148BjP8ZPPhAAAAS0"]
[Wed Sep 30 01:07:06.276301 2026] [autoindex:error] [pid 263262:tid 263418] [client 212.156.70.154:61463] AH01276: Cannot serve directory /home4/wdplfkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:06.286836 2026] [security2:error] [pid 263262:tid 263483] [client 20.213.164.196:47510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/media.php"] [unique_id "ary1GpEcZ_148BjP8ZPPhgAAAWQ"]
[Wed Sep 30 01:07:06.297358 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.297635 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.311524 2026] [security2:error] [pid 263262:tid 263452] [client 52.231.69.245:39203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/themes.php"] [unique_id "ary1GpEcZ_148BjP8ZPPiAAAAUU"]
[Wed Sep 30 01:07:06.363077 2026] [security2:error] [pid 263262:tid 263383] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1GpEcZ_148BjP8ZPPiwABZnc"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=186327
[Wed Sep 30 01:07:06.363107 2026] [security2:error] [pid 263262:tid 263383] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1GpEcZ_148BjP8ZPPiwABZnc"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=186327
[Wed Sep 30 01:07:06.389301 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.389633 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.446078 2026] [security2:error] [pid 263262:tid 263409] [client 202.179.95.79:50609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPlAAAARo"]
[Wed Sep 30 01:07:06.446251 2026] [security2:error] [pid 263262:tid 263409] [client 202.179.95.79:50609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1GpEcZ_148BjP8ZPPlAAAARo"]
[Wed Sep 30 01:07:06.468524 2026] [security2:error] [pid 263262:tid 263417] [remote 168.100.149.185:57096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1GpEcZ_148BjP8ZPPjAABiVo"]
[Wed Sep 30 01:07:06.479197 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.479481 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:45946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.507657 2026] [security2:error] [pid 263262:tid 263451] [client 45.138.12.32:40966] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pdg.cbe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1GpEcZ_148BjP8ZPPmgAAAUQ"]
[Wed Sep 30 01:07:06.516525 2026] [security2:error] [pid 263262:tid 263476] [client 45.138.12.32:40954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.finan.cloud"] [uri "/wp-links-opml.php"] [unique_id "ary1GpEcZ_148BjP8ZPPmwAAAV0"]
[Wed Sep 30 01:07:06.546607 2026] [security2:error] [pid 263262:tid 263420] [client 20.5.79.49:62382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/vaza.php"] [unique_id "ary1GpEcZ_148BjP8ZPPnwAAASU"]
[Wed Sep 30 01:07:06.570096 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.570380 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.574639 2026] [security2:error] [pid 263262:tid 263443] [client 52.231.69.245:39071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary1GpEcZ_148BjP8ZPPoQAAATw"]
[Wed Sep 30 01:07:06.663079 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.663426 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.727487 2026] [security2:error] [pid 263262:tid 263395] [client 20.213.164.196:32649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/24.php"] [unique_id "ary1GpEcZ_148BjP8ZPPrAAAAQw"]
[Wed Sep 30 01:07:06.757369 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.757855 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.845357 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.845637 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:06.858465 2026] [security2:error] [pid 263262:tid 263515] [client 52.231.69.245:39101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary1GpEcZ_148BjP8ZPPtAAAAYQ"]
[Wed Sep 30 01:07:06.858924 2026] [security2:error] [pid 263262:tid 263456] [client 20.219.2.60:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-blog.php"] [unique_id "ary1GpEcZ_148BjP8ZPPtQAAAUk"]
[Wed Sep 30 01:07:06.868915 2026] [security2:error] [pid 263262:tid 263407] [client 20.5.79.49:26437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ws60.php"] [unique_id "ary1GpEcZ_148BjP8ZPPuAAAARg"]
[Wed Sep 30 01:07:06.873462 2026] [security2:error] [pid 263262:tid 263440] [client 20.214.109.68:9409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/xx.php"] [unique_id "ary1GpEcZ_148BjP8ZPPugAAATk"]
[Wed Sep 30 01:07:06.876002 2026] [security2:error] [pid 263262:tid 263486] [client 45.138.12.40:7214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xdv.nmg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1GpEcZ_148BjP8ZPPuwAAAWc"]
[Wed Sep 30 01:07:06.895866 2026] [security2:error] [pid 263262:tid 263453] [client 216.73.216.46:45946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1GpEcZ_148BjP8ZPPvQAAAUY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL21lbW9yeTE4OA%3D%3D
[Wed Sep 30 01:07:06.990733 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:06.991065 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.009998 2026] [access_compat:error] [pid 263262:tid 263316] [remote 52.167.144.181:1219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.010939 2026] [access_compat:error] [pid 263262:tid 263316] [remote 52.167.144.181:1219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.030654 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.031082 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:39014] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.035128 2026] [security2:error] [pid 263262:tid 263520] [client 20.28.180.172:18365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/x9.php"] [unique_id "ary1G5EcZ_148BjP8ZPPyAAAAYk"]
[Wed Sep 30 01:07:07.111018 2026] [security2:error] [pid 263262:tid 263413] [client 103.159.192.142:62252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1G5EcZ_148BjP8ZPPzwAAAR4"]
[Wed Sep 30 01:07:07.111120 2026] [security2:error] [pid 263262:tid 263413] [client 103.159.192.142:62252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1G5EcZ_148BjP8ZPPzwAAAR4"]
[Wed Sep 30 01:07:07.137718 2026] [security2:error] [pid 263262:tid 263482] [client 151.245.27.30:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1G5EcZ_148BjP8ZPP0gAAAWM"]
[Wed Sep 30 01:07:07.141024 2026] [security2:error] [pid 263262:tid 263488] [client 52.231.69.245:39128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/click.php"] [unique_id "ary1G5EcZ_148BjP8ZPP0wAAAWk"]
[Wed Sep 30 01:07:07.169168 2026] [security2:error] [pid 263262:tid 263449] [client 20.219.2.60:11656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary1G5EcZ_148BjP8ZPP1QAAAUI"]
[Wed Sep 30 01:07:07.174486 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.174957 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.192078 2026] [security2:error] [pid 263262:tid 263476] [client 20.5.79.49:25846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/twentytwentythree/styles/about.php"] [unique_id "ary1G5EcZ_148BjP8ZPP1gAAAV0"]
[Wed Sep 30 01:07:07.207707 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.207997 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.264029 2026] [security2:error] [pid 263262:tid 263493] [client 20.198.74.230:23897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/a11.php"] [unique_id "ary1G5EcZ_148BjP8ZPP2wAAAW4"]
[Wed Sep 30 01:07:07.282907 2026] [security2:error] [pid 263262:tid 263457] [client 116.193.128.26:61197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1G5EcZ_148BjP8ZPP3QAAAUo"]
[Wed Sep 30 01:07:07.284439 2026] [security2:error] [pid 263262:tid 263457] [client 116.193.128.26:61197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1G5EcZ_148BjP8ZPP3QAAAUo"]
[Wed Sep 30 01:07:07.299611 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.300025 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.392021 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.392387 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.409668 2026] [security2:error] [pid 263262:tid 263445] [client 52.231.69.245:39118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/install.php"] [unique_id "ary1G5EcZ_148BjP8ZPP6wAAAT4"]
[Wed Sep 30 01:07:07.445404 2026] [security2:error] [pid 263262:tid 263393] [client 216.73.216.46:39014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1G5EcZ_148BjP8ZPP7AAAAQo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTA4L25vZGUwL21lbW9yeTM5OS9ub2RlMA%3D%3D
[Wed Sep 30 01:07:07.482907 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.483193 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.524707 2026] [security2:error] [pid 263262:tid 263407] [client 20.5.79.49:64037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/v3.php"] [unique_id "ary1G5EcZ_148BjP8ZPP7wAAARg"]
[Wed Sep 30 01:07:07.533800 2026] [security2:error] [pid 263262:tid 263486] [client 20.213.164.196:47515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xwpg.php"] [unique_id "ary1G5EcZ_148BjP8ZPP8AAAAWc"]
[Wed Sep 30 01:07:07.534739 2026] [security2:error] [pid 263262:tid 263423] [client 20.214.109.68:60583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/Jcrop.php"] [unique_id "ary1G5EcZ_148BjP8ZPP8QAAASg"]
[Wed Sep 30 01:07:07.572413 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.572730 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.663040 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.663299 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.672004 2026] [security2:error] [pid 263262:tid 263396] [client 52.231.69.245:39070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/13k.php"] [unique_id "ary1G5EcZ_148BjP8ZPP-gAAAQ0"]
[Wed Sep 30 01:07:07.725173 2026] [security2:error] [pid 263262:tid 263422] [client 20.194.5.96:19090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wmore1.php"] [unique_id "ary1G5EcZ_148BjP8ZPP-wAAASc"]
[Wed Sep 30 01:07:07.759634 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.760085 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.854982 2026] [security2:error] [pid 263262:tid 263474] [client 20.5.79.49:26446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/feed.php"] [unique_id "ary1G5EcZ_148BjP8ZPQBQAAAVs"]
[Wed Sep 30 01:07:07.857659 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.857930 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.922770 2026] [security2:error] [pid 263262:tid 263420] [client 20.213.164.196:32691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/blacks.php"] [unique_id "ary1G5EcZ_148BjP8ZPQCwAAASU"]
[Wed Sep 30 01:07:07.936630 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:07.937038 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:07.939455 2026] [security2:error] [pid 263262:tid 263411] [client 52.231.69.245:39175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/up.php"] [unique_id "ary1G5EcZ_148BjP8ZPQEAAAARw"]
[Wed Sep 30 01:07:08.029777 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.030191 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.117587 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.117861 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.131135 2026] [access_compat:error] [pid 263262:tid 263467] [client 47.79.13.78:56934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:08.131551 2026] [access_compat:error] [pid 263262:tid 263467] [client 47.79.13.78:56934] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:08.177559 2026] [security2:error] [pid 263262:tid 263415] [client 20.5.79.49:64005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ext.php"] [unique_id "ary1HJEcZ_148BjP8ZPQHAAAASA"]
[Wed Sep 30 01:07:08.207157 2026] [security2:error] [pid 263262:tid 263498] [client 52.231.69.245:38979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/0x1949.php"] [unique_id "ary1HJEcZ_148BjP8ZPQHgAAAXM"]
[Wed Sep 30 01:07:08.209443 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.209709 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:54742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.213461 2026] [security2:error] [pid 263262:tid 263445] [client 20.214.109.68:59850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/rip.php"] [unique_id "ary1HJEcZ_148BjP8ZPQHwAAAT4"]
[Wed Sep 30 01:07:08.270443 2026] [security2:error] [pid 263262:tid 263427] [client 20.28.180.172:34292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/qDAFu1Swzxyd4JIdefault.php"] [unique_id "ary1HJEcZ_148BjP8ZPQIQAAASw"]
[Wed Sep 30 01:07:08.303292 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.303766 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.392055 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.392327 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.393158 2026] [security2:error] [pid 263262:tid 263486] [client 74.7.242.1:34290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1HJEcZ_148BjP8ZPQKgAAAWc"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:07:08.477083 2026] [security2:error] [pid 263262:tid 263504] [client 52.231.69.245:39204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/cong.php"] [unique_id "ary1HJEcZ_148BjP8ZPQLgAAAXk"]
[Wed Sep 30 01:07:08.484043 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.484303 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:42301] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.491188 2026] [security2:error] [pid 263262:tid 263471] [client 20.194.5.96:18883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/177.php"] [unique_id "ary1HJEcZ_148BjP8ZPQLwAAAVg"]
[Wed Sep 30 01:07:08.499340 2026] [security2:error] [pid 263262:tid 263479] [client 20.5.79.49:62364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/media.php"] [unique_id "ary1HJEcZ_148BjP8ZPQMAAAAWA"]
[Wed Sep 30 01:07:08.529022 2026] [security2:error] [pid 263262:tid 263418] [remote 168.100.149.59:60608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1HJEcZ_148BjP8ZPQLAABa3Y"]
[Wed Sep 30 01:07:08.569043 2026] [security2:error] [pid 263262:tid 263446] [client 20.213.164.196:47548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1HJEcZ_148BjP8ZPQMgAAAT8"]
[Wed Sep 30 01:07:08.611276 2026] [security2:error] [pid 263262:tid 263443] [client 43.227.131.37:36579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1HJEcZ_148BjP8ZPQOAAAATw"]
[Wed Sep 30 01:07:08.611447 2026] [security2:error] [pid 263262:tid 263443] [client 43.227.131.37:36579] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1HJEcZ_148BjP8ZPQOAAAATw"]
[Wed Sep 30 01:07:08.621006 2026] [security2:error] [pid 263262:tid 263484] [client 216.73.216.46:54742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1HJEcZ_148BjP8ZPQOgAAAWU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvY3B1MTA%3D
[Wed Sep 30 01:07:08.626379 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.626701 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.715767 2026] [security2:error] [pid 263262:tid 263474] [client 20.219.2.60:11667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws66.php"] [unique_id "ary1HJEcZ_148BjP8ZPQPgAAAVs"]
[Wed Sep 30 01:07:08.717975 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.718259 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.745096 2026] [security2:error] [pid 263262:tid 263465] [client 52.231.69.245:39116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/bs1.php"] [unique_id "ary1HJEcZ_148BjP8ZPQRAAAAVI"]
[Wed Sep 30 01:07:08.759588 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.760035 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.848644 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.849075 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.902999 2026] [security2:error] [pid 263262:tid 263432] [client 216.73.216.46:42301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1HJEcZ_148BjP8ZPQWAAAATE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTE5
[Wed Sep 30 01:07:08.938043 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:08.938311 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:08.958872 2026] [security2:error] [pid 263262:tid 263407] [client 4.240.25.22:18805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/blurbs.php"] [unique_id "ary1HJEcZ_148BjP8ZPQXwAAARg"]
[Wed Sep 30 01:07:08.973690 2026] [security2:error] [pid 263262:tid 263503] [client 20.213.164.196:32267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/zoo2.php"] [unique_id "ary1HJEcZ_148BjP8ZPQYAAAAXg"]
[Wed Sep 30 01:07:09.028354 2026] [security2:error] [pid 263262:tid 263510] [client 49.43.163.212:55226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1HJEcZ_148BjP8ZPQTgAAAX8"]
[Wed Sep 30 01:07:09.031179 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.031472 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.046669 2026] [security2:error] [pid 263262:tid 263450] [client 223.181.30.165:6644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQZAAAAUM"]
[Wed Sep 30 01:07:09.046770 2026] [security2:error] [pid 263262:tid 263450] [client 223.181.30.165:6644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQZAAAAUM"]
[Wed Sep 30 01:07:09.054571 2026] [security2:error] [pid 263262:tid 263453] [client 106.214.2.47:22345] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQYQAAAUY"]
[Wed Sep 30 01:07:09.054706 2026] [security2:error] [pid 263262:tid 263453] [client 106.214.2.47:22345] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQYQAAAUY"]
[Wed Sep 30 01:07:09.056406 2026] [security2:error] [pid 263262:tid 263398] [client 52.231.69.245:39214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary1HZEcZ_148BjP8ZPQYwAAAQ8"]
[Wed Sep 30 01:07:09.060357 2026] [security2:error] [pid 263262:tid 263481] [client 104.208.65.139:29676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/lzlhihzi.php"] [unique_id "ary1HZEcZ_148BjP8ZPQZQAAAWI"]
[Wed Sep 30 01:07:09.121259 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.121505 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.131701 2026] [security2:error] [pid 263262:tid 263479] [client 45.172.101.35:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1HZEcZ_148BjP8ZPQbAAAAWA"]
[Wed Sep 30 01:07:09.143063 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.30.107:10027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1HZEcZ_148BjP8ZPQbQAAATg"]
[Wed Sep 30 01:07:09.152176 2026] [security2:error] [pid 263262:tid 263422] [client 20.5.79.49:62399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "ary1HZEcZ_148BjP8ZPQbgAAASc"]
[Wed Sep 30 01:07:09.214136 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.214540 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.294397 2026] [security2:error] [pid 263262:tid 263492] [client 182.69.182.151:25037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQdgAAAW0"]
[Wed Sep 30 01:07:09.294939 2026] [security2:error] [pid 263262:tid 263277] [remote 57.141.14.55:59094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/mocogreendems/"] [unique_id "ary1HZEcZ_148BjP8ZPQdwABWw0"]
[Wed Sep 30 01:07:09.295237 2026] [security2:error] [pid 263262:tid 263492] [client 182.69.182.151:25037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQdgAAAW0"]
[Wed Sep 30 01:07:09.304578 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.304853 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:1985] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.324331 2026] [security2:error] [pid 263262:tid 263405] [client 52.231.69.245:39216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/termps.php"] [unique_id "ary1HZEcZ_148BjP8ZPQeQAAARY"]
[Wed Sep 30 01:07:09.341594 2026] [security2:error] [pid 263262:tid 263447] [client 20.213.164.196:47043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/zoo1.php"] [unique_id "ary1HZEcZ_148BjP8ZPQewAAAUA"]
[Wed Sep 30 01:07:09.360558 2026] [security2:error] [pid 263262:tid 263431] [client 4.240.25.22:8451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/xiugai.php"] [unique_id "ary1HZEcZ_148BjP8ZPQfAAAATA"]
[Wed Sep 30 01:07:09.367838 2026] [security2:error] [pid 263262:tid 263279] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1HZEcZ_148BjP8ZPQfQABXw8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=30350
[Wed Sep 30 01:07:09.367867 2026] [security2:error] [pid 263262:tid 263279] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1HZEcZ_148BjP8ZPQfQABXw8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=30350
[Wed Sep 30 01:07:09.401644 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.402178 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.403260 2026] [security2:error] [pid 263262:tid 263497] [client 4.196.65.241:27314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/gix.php"] [unique_id "ary1HZEcZ_148BjP8ZPQgQAAAXI"]
[Wed Sep 30 01:07:09.498551 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.499007 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.596993 2026] [security2:error] [pid 263262:tid 263503] [client 20.194.5.96:19085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/ccc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQkQAAAXg"]
[Wed Sep 30 01:07:09.597422 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.69.245:39186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/brand.php"] [unique_id "ary1HZEcZ_148BjP8ZPQkgAAAYE"]
[Wed Sep 30 01:07:09.637464 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.637726 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.677058 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.677369 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.680421 2026] [security2:error] [pid 263262:tid 263430] [client 173.254.29.157:16930] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "nucreativesolutions.com"] [uri "/wp-cron.php"] [unique_id "ary1HZEcZ_148BjP8ZPQlQAAAS8"]
[Wed Sep 30 01:07:09.707564 2026] [security2:error] [pid 263262:tid 263485] [client 216.73.216.46:1985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1HZEcZ_148BjP8ZPQmQAAAWY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY1L3Bvd2Vy
[Wed Sep 30 01:07:09.745802 2026] [security2:error] [pid 263262:tid 263409] [client 223.181.60.167:1606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQmwAAARo"]
[Wed Sep 30 01:07:09.746991 2026] [security2:error] [pid 263262:tid 263409] [client 223.181.60.167:1606] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1HZEcZ_148BjP8ZPQmwAAARo"]
[Wed Sep 30 01:07:09.775860 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.776129 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.801038 2026] [security2:error] [pid 263262:tid 263443] [client 20.219.2.60:11862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ewe.php"] [unique_id "ary1HZEcZ_148BjP8ZPQnwAAATw"]
[Wed Sep 30 01:07:09.821422 2026] [security2:error] [pid 263262:tid 263449] [client 20.219.2.60:19401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary1HZEcZ_148BjP8ZPQoQAAAUI"]
[Wed Sep 30 01:07:09.828631 2026] [security2:error] [pid 263262:tid 263413] [client 20.5.79.49:64025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/admin_logs.php"] [unique_id "ary1HZEcZ_148BjP8ZPQowAAAR4"]
[Wed Sep 30 01:07:09.835257 2026] [security2:error] [pid 263262:tid 263294] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1HZEcZ_148BjP8ZPQpQABWx4"], referer: https://forum.torquayfans.com/viewtopic.php?p=212625
[Wed Sep 30 01:07:09.835282 2026] [security2:error] [pid 263262:tid 263294] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1HZEcZ_148BjP8ZPQpQABWx4"], referer: https://forum.torquayfans.com/viewtopic.php?p=212625
[Wed Sep 30 01:07:09.860127 2026] [security2:error] [pid 263262:tid 263396] [client 52.231.69.245:39154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/atomlib.php"] [unique_id "ary1HZEcZ_148BjP8ZPQqQAAAQ0"]
[Wed Sep 30 01:07:09.866396 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.866677 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:09.958354 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:09.958647 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.047004 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.047261 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.127834 2026] [security2:error] [pid 263262:tid 263451] [client 52.231.69.245:39196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/product.php"] [unique_id "ary1HpEcZ_148BjP8ZPQvQAAAUQ"]
[Wed Sep 30 01:07:10.138963 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.139281 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.149914 2026] [security2:error] [pid 263262:tid 263438] [client 16.145.85.198:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "nucreativesolutions.com"] [uri "/"] [unique_id "ary1HpEcZ_148BjP8ZPQvwAAATc"], referer: https://bna.rqu.mybluehost.me/
[Wed Sep 30 01:07:10.175630 2026] [security2:error] [pid 263262:tid 263411] [client 20.5.79.49:25798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/byp.php"] [unique_id "ary1HpEcZ_148BjP8ZPQwAAAARw"]
[Wed Sep 30 01:07:10.232614 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.232933 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.244425 2026] [security2:error] [pid 263262:tid 263517] [client 20.213.164.196:32700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/class-ajax.php"] [unique_id "ary1HpEcZ_148BjP8ZPQwgAAAYY"]
[Wed Sep 30 01:07:10.264614 2026] [security2:error] [pid 263262:tid 263296] [remote 122.14.224.79:40794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "captpeacock.com"] [uri "/img/slider/slide_04.jpg"] [unique_id "ary1HpEcZ_148BjP8ZPQxwABLCA"]
[Wed Sep 30 01:07:10.323855 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.324289 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.394880 2026] [security2:error] [pid 263262:tid 263460] [client 52.231.69.245:39169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/function.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ1QAAAU0"]
[Wed Sep 30 01:07:10.413044 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.413307 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.427472 2026] [security2:error] [pid 263262:tid 263276] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ2gABVgw"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D26817
[Wed Sep 30 01:07:10.503277 2026] [security2:error] [pid 263262:tid 263413] [client 20.5.79.49:62349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/habhan.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ4AAAAR4"]
[Wed Sep 30 01:07:10.505433 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.505680 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:13340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.527460 2026] [security2:error] [pid 263262:tid 263444] [remote 168.100.149.241:44594] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ2QABcC4"]
[Wed Sep 30 01:07:10.541205 2026] [security2:error] [pid 263262:tid 263396] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1HpEcZ_148BjP8ZPQ5AAAAQ0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:10.599411 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.599909 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.668414 2026] [security2:error] [pid 263262:tid 263416] [client 52.231.69.245:39012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/0x.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ6QAAASE"]
[Wed Sep 30 01:07:10.675324 2026] [security2:error] [pid 263262:tid 263489] [client 4.240.25.22:38798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/m.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ6gAAAWo"]
[Wed Sep 30 01:07:10.739710 2026] [security2:error] [pid 263262:tid 263431] [client 20.219.2.60:11704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/aboute.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ7AAAATA"]
[Wed Sep 30 01:07:10.743052 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.743478 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.760106 2026] [security2:error] [pid 263262:tid 263478] [client 20.213.164.196:32653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/gm.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ7QAAAV8"]
[Wed Sep 30 01:07:10.775343 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.775630 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.817302 2026] [security2:error] [pid 263262:tid 263505] [client 20.5.79.49:26441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/kdrex.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ8gAAAXo"]
[Wed Sep 30 01:07:10.846714 2026] [security2:error] [pid 263262:tid 263493] [client 20.194.5.96:18921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/0xD.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ9AAAAW4"]
[Wed Sep 30 01:07:10.866437 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.866541 2026] [security2:error] [pid 263262:tid 263414] [client 20.214.109.68:62462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/new4.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ-QAAAR8"]
[Wed Sep 30 01:07:10.866721 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:54053] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:10.886638 2026] [security2:error] [pid 263262:tid 263309] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ-gABDC0"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=7a747b23cffa854dd9d38b4e18f77d94
[Wed Sep 30 01:07:10.886661 2026] [security2:error] [pid 263262:tid 263309] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ-gABDC0"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=7a747b23cffa854dd9d38b4e18f77d94
[Wed Sep 30 01:07:10.910832 2026] [security2:error] [pid 263262:tid 263464] [client 20.70.173.30:56481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/log.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ_AAAAVE"]
[Wed Sep 30 01:07:10.920760 2026] [security2:error] [pid 263262:tid 263506] [client 216.73.216.46:13340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ_QAAAXs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk4My9ub2RlMA%3D%3D
[Wed Sep 30 01:07:10.934540 2026] [security2:error] [pid 263262:tid 263428] [client 52.231.69.245:39105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/index.php"] [unique_id "ary1HpEcZ_148BjP8ZPQ_gAAAS0"]
[Wed Sep 30 01:07:10.959679 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:10.959958 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.049807 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.050092 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.126339 2026] [security2:error] [pid 263262:tid 263398] [client 188.211.25.49:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1H5EcZ_148BjP8ZPRBQAAAQ8"]
[Wed Sep 30 01:07:11.141830 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.142102 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:48885] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.149854 2026] [security2:error] [pid 263262:tid 263460] [client 20.5.79.49:62373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/11index.php"] [unique_id "ary1H5EcZ_148BjP8ZPRCQAAAU0"]
[Wed Sep 30 01:07:11.202003 2026] [security2:error] [pid 263262:tid 263485] [client 52.231.69.245:39087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary1H5EcZ_148BjP8ZPRDAAAAWY"]
[Wed Sep 30 01:07:11.256617 2026] [security2:error] [pid 263262:tid 263406] [client 180.92.148.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1H5EcZ_148BjP8ZPREAAAARc"]
[Wed Sep 30 01:07:11.276806 2026] [security2:error] [pid 263262:tid 263409] [client 20.213.164.196:32696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1H5EcZ_148BjP8ZPREgAAARo"]
[Wed Sep 30 01:07:11.283893 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.284170 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.289489 2026] [security2:error] [pid 263262:tid 263413] [client 216.73.216.46:54053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1H5EcZ_148BjP8ZPRFQAAAR4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvY3B1OC9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTA%3D
[Wed Sep 30 01:07:11.340218 2026] [security2:error] [pid 263262:tid 263454] [client 43.104.4.206:59230] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary1H5EcZ_148BjP8ZPRFwAAAUc"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:11.362723 2026] [security2:error] [pid 263262:tid 263402] [client 43.104.4.188:28628] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary1H5EcZ_148BjP8ZPRGgAAARM"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:11.365921 2026] [security2:error] [pid 263262:tid 263403] [client 20.28.180.172:18357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/an.php"] [unique_id "ary1H5EcZ_148BjP8ZPRGwAAARQ"]
[Wed Sep 30 01:07:11.378582 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.379046 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.414873 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.415137 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.471091 2026] [security2:error] [pid 263262:tid 263465] [client 52.231.69.245:39229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/classwithtostring.php"] [unique_id "ary1H5EcZ_148BjP8ZPRIQAAAVI"]
[Wed Sep 30 01:07:11.472669 2026] [security2:error] [pid 263262:tid 263416] [client 20.5.79.49:64027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/1index.php"] [unique_id "ary1H5EcZ_148BjP8ZPRIgAAASE"]
[Wed Sep 30 01:07:11.476160 2026] [access_compat:error] [pid 263262:tid 263422] [client 47.79.13.158:53838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:11.476410 2026] [access_compat:error] [pid 263262:tid 263422] [client 47.79.13.158:53838] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:11.508544 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.508828 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.566358 2026] [security2:error] [pid 263262:tid 263491] [client 216.73.216.46:48885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1H5EcZ_148BjP8ZPRKgAAAWw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OC9kcml2ZXIvY3B1MTA%3D
[Wed Sep 30 01:07:11.612041 2026] [security2:error] [pid 263262:tid 263415] [client 93.34.235.119:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/network-cables-networking"] [unique_id "ary1H5EcZ_148BjP8ZPRMgAAASA"]
[Wed Sep 30 01:07:11.614100 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.614404 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.654548 2026] [security2:error] [pid 263262:tid 263498] [client 20.198.74.230:24128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cns.php"] [unique_id "ary1H5EcZ_148BjP8ZPRNAAAAXM"]
[Wed Sep 30 01:07:11.668787 2026] [security2:error] [pid 263262:tid 263468] [client 20.213.164.196:47053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/ttivnife.php"] [unique_id "ary1H5EcZ_148BjP8ZPRNgAAAVU"]
[Wed Sep 30 01:07:11.671322 2026] [core:error] [pid 263262:tid 263446] [client 45.138.12.40:3818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:11.671337 2026] [core:error] [pid 263262:tid 263446] [client 45.138.12.40:3818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:11.690736 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.691178 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.735972 2026] [security2:error] [pid 263262:tid 263433] [client 52.231.69.245:39108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/dropdown.php"] [unique_id "ary1H5EcZ_148BjP8ZPRPwAAATI"]
[Wed Sep 30 01:07:11.737061 2026] [security2:error] [pid 263262:tid 263436] [client 20.194.5.96:19134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/sallu.php"] [unique_id "ary1H5EcZ_148BjP8ZPRQAAAATU"]
[Wed Sep 30 01:07:11.781096 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.781463 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.788774 2026] [security2:error] [pid 263262:tid 263398] [client 20.5.79.49:64000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/shell20211028.php"] [unique_id "ary1H5EcZ_148BjP8ZPRQwAAAQ8"]
[Wed Sep 30 01:07:11.871002 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.871269 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.962274 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:11.962555 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:11.965313 2026] [security2:error] [pid 263262:tid 263518] [client 43.104.4.192:2744] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary1H5EcZ_148BjP8ZPRSwAAAYc"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:12.005013 2026] [security2:error] [pid 263262:tid 263503] [client 52.231.69.245:39223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/moon.php"] [unique_id "ary1IJEcZ_148BjP8ZPRTgAAAXg"]
[Wed Sep 30 01:07:12.006858 2026] [security2:error] [pid 263262:tid 263405] [client 37.41.16.35:64780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRTwAAARY"]
[Wed Sep 30 01:07:12.006956 2026] [security2:error] [pid 263262:tid 263405] [client 37.41.16.35:64780] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRTwAAARY"]
[Wed Sep 30 01:07:12.031233 2026] [access_compat:error] [pid 263262:tid 263321] [remote 93.152.53.207:25636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.031259 2026] [security2:error] [pid 263262:tid 263501] [client 20.213.164.196:47040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/admin.php/2P.php"] [unique_id "ary1IJEcZ_148BjP8ZPRUQAAAXY"]
[Wed Sep 30 01:07:12.031495 2026] [access_compat:error] [pid 263262:tid 263321] [remote 93.152.53.207:25636] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.057133 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.057628 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.076333 2026] [security2:error] [pid 263262:tid 263492] [client 20.70.173.30:56969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-the.php"] [unique_id "ary1IJEcZ_148BjP8ZPRVAAAAW0"]
[Wed Sep 30 01:07:12.107157 2026] [security2:error] [pid 263262:tid 263514] [client 20.5.79.49:37731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/edit-tags.php"] [unique_id "ary1IJEcZ_148BjP8ZPRVQAAAYM"]
[Wed Sep 30 01:07:12.143725 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.144022 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.235209 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.235581 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.266792 2026] [security2:error] [pid 263262:tid 263414] [client 52.231.69.245:39184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/autoload_classmap.php"] [unique_id "ary1IJEcZ_148BjP8ZPRYQAAAR8"]
[Wed Sep 30 01:07:12.331006 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.331441 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.331874 2026] [security2:error] [pid 263262:tid 263482] [client 20.219.2.60:11679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/x9.php"] [unique_id "ary1IJEcZ_148BjP8ZPRZQAAAWM"]
[Wed Sep 30 01:07:12.389069 2026] [security2:error] [pid 263262:tid 263394] [client 20.213.164.196:32654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/a.php"] [unique_id "ary1IJEcZ_148BjP8ZPRagAAAQs"]
[Wed Sep 30 01:07:12.416388 2026] [security2:error] [pid 263262:tid 263494] [client 155.190.6.18:36080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRbgAAAW8"]
[Wed Sep 30 01:07:12.421958 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.422371 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.426393 2026] [security2:error] [pid 263262:tid 263508] [client 20.5.79.49:26482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/fs.php"] [unique_id "ary1IJEcZ_148BjP8ZPRbwAAAX0"]
[Wed Sep 30 01:07:12.508653 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.508938 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.515508 2026] [security2:error] [pid 263262:tid 263427] [client 168.100.149.199:41078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-14001-Certified_col.png"] [unique_id "ary1IJEcZ_148BjP8ZPRbAABQkw"]
[Wed Sep 30 01:07:12.526782 2026] [access_compat:error] [pid 263262:tid 263445] [client 47.79.13.175:51666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:12.527052 2026] [access_compat:error] [pid 263262:tid 263445] [client 47.79.13.175:51666] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:12.527715 2026] [security2:error] [pid 263262:tid 263462] [client 52.231.69.245:39202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/default.php"] [unique_id "ary1IJEcZ_148BjP8ZPRdAAAAU8"]
[Wed Sep 30 01:07:12.600645 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.601040 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.657461 2026] [security2:error] [pid 263262:tid 263497] [client 103.241.204.139:64317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRiwAAAXI"]
[Wed Sep 30 01:07:12.657699 2026] [security2:error] [pid 263262:tid 263497] [client 103.241.204.139:64317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRiwAAAXI"]
[Wed Sep 30 01:07:12.689923 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.690208 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.701653 2026] [security2:error] [pid 263262:tid 263494] [client 155.190.6.18:36080] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1IJEcZ_148BjP8ZPRbgAAAW8"]
[Wed Sep 30 01:07:12.722394 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IJEcZ_148BjP8ZPRjwABTWM"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=ed2aa2a1073d73860a0049354a09936f
[Wed Sep 30 01:07:12.722417 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IJEcZ_148BjP8ZPRjwABTWM"], referer: https://mail.uxa.hoh.mybluehost.me/index.php?sid=ed2aa2a1073d73860a0049354a09936f
[Wed Sep 30 01:07:12.747925 2026] [security2:error] [pid 263262:tid 263410] [client 20.5.79.49:37715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/init.php"] [unique_id "ary1IJEcZ_148BjP8ZPRkAAAARs"]
[Wed Sep 30 01:07:12.754789 2026] [security2:error] [pid 263262:tid 263503] [client 20.194.30.107:10112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/xiugai.php"] [unique_id "ary1IJEcZ_148BjP8ZPRkgAAAXg"]
[Wed Sep 30 01:07:12.768407 2026] [security2:error] [pid 263262:tid 263400] [client 20.213.164.196:47061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/cord.php"] [unique_id "ary1IJEcZ_148BjP8ZPRkwAAARE"]
[Wed Sep 30 01:07:12.779357 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.779629 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.795069 2026] [security2:error] [pid 263262:tid 263429] [client 52.231.69.245:39171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary1IJEcZ_148BjP8ZPRmAAAAS4"]
[Wed Sep 30 01:07:12.840828 2026] [security2:error] [pid 263262:tid 263490] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1IJEcZ_148BjP8ZPRoQAAAWs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:12.845994 2026] [security2:error] [pid 263262:tid 263480] [client 20.214.109.68:61126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/aa.php"] [unique_id "ary1IJEcZ_148BjP8ZPRogAAAWE"]
[Wed Sep 30 01:07:12.876353 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.876800 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:12.878573 2026] [security2:error] [pid 263262:tid 263448] [client 20.194.5.96:19081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/ops.php"] [unique_id "ary1IJEcZ_148BjP8ZPRpAAAAUE"]
[Wed Sep 30 01:07:12.916722 2026] [security2:error] [pid 263262:tid 263342] [remote 74.7.227.56:40364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1IJEcZ_148BjP8ZPRpQABUk4"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?p=265688&sid=b7199e270aa755891d7aed81addb71d8
[Wed Sep 30 01:07:12.962623 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:12.962901 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.011295 2026] [security2:error] [pid 263262:tid 263420] [client 20.219.2.60:18864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/lib.php"] [unique_id "ary1IZEcZ_148BjP8ZPRrAAAASU"]
[Wed Sep 30 01:07:13.054207 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.054471 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.056939 2026] [security2:error] [pid 263262:tid 263508] [client 52.231.69.245:39089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary1IZEcZ_148BjP8ZPRsAAAAX0"]
[Wed Sep 30 01:07:13.074533 2026] [security2:error] [pid 263262:tid 263421] [client 20.5.79.49:26454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ms.php"] [unique_id "ary1IZEcZ_148BjP8ZPRswAAASY"]
[Wed Sep 30 01:07:13.126020 2026] [security2:error] [pid 263262:tid 263444] [client 103.159.192.142:62389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1IZEcZ_148BjP8ZPRtgAAAT0"]
[Wed Sep 30 01:07:13.126137 2026] [security2:error] [pid 263262:tid 263444] [client 103.159.192.142:62389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1IZEcZ_148BjP8ZPRtgAAAT0"]
[Wed Sep 30 01:07:13.146117 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.146491 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.226564 2026] [security2:error] [pid 263262:tid 263445] [client 4.240.25.22:18800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/min.php"] [unique_id "ary1IZEcZ_148BjP8ZPRuQAAAT4"]
[Wed Sep 30 01:07:13.236439 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.236699 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.306571 2026] [security2:error] [pid 263262:tid 263443] [client 173.254.29.157:55804] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary1IZEcZ_148BjP8ZPRxQAAATw"]
[Wed Sep 30 01:07:13.311738 2026] [security2:error] [pid 263262:tid 263413] [client 186.244.137.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1IZEcZ_148BjP8ZPRxgAAAR4"]
[Wed Sep 30 01:07:13.319339 2026] [security2:error] [pid 263262:tid 263402] [client 52.231.69.245:39130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary1IZEcZ_148BjP8ZPRyQAAARM"]
[Wed Sep 30 01:07:13.325174 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.325422 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.350938 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:11338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/an.php"] [unique_id "ary1IZEcZ_148BjP8ZPRzQAAAXg"]
[Wed Sep 30 01:07:13.377139 2026] [security2:error] [pid 263262:tid 263417] [client 20.213.164.196:32657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/anom.php"] [unique_id "ary1IZEcZ_148BjP8ZPR0QAAASI"]
[Wed Sep 30 01:07:13.398765 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:25813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/CDX1.php"] [unique_id "ary1IZEcZ_148BjP8ZPR0gAAAXY"]
[Wed Sep 30 01:07:13.414283 2026] [security2:error] [pid 263262:tid 263493] [client 116.197.133.25:61055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1IZEcZ_148BjP8ZPR1AAAAW4"]
[Wed Sep 30 01:07:13.414392 2026] [security2:error] [pid 263262:tid 263493] [client 116.197.133.25:61055] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1IZEcZ_148BjP8ZPR1AAAAW4"]
[Wed Sep 30 01:07:13.417417 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.417686 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.509116 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.509398 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3400] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.577803 2026] [security2:error] [pid 263262:tid 263465] [client 20.28.180.172:61188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/aboutc.php"] [unique_id "ary1IZEcZ_148BjP8ZPR2QAAAVI"]
[Wed Sep 30 01:07:13.599167 2026] [security2:error] [pid 263262:tid 263401] [client 52.231.69.245:38649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/mail.php"] [unique_id "ary1IZEcZ_148BjP8ZPR2wAAARI"]
[Wed Sep 30 01:07:13.600563 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.600828 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.693405 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.693674 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.714449 2026] [security2:error] [pid 263262:tid 263420] [client 20.5.79.49:64004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/click.php"] [unique_id "ary1IZEcZ_148BjP8ZPR3wAAASU"]
[Wed Sep 30 01:07:13.796547 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.796874 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.886666 2026] [security2:error] [pid 263262:tid 263404] [client 20.194.5.96:19119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/mac.php"] [unique_id "ary1IZEcZ_148BjP8ZPR6gAAARU"]
[Wed Sep 30 01:07:13.887439 2026] [security2:error] [pid 263262:tid 263451] [client 52.231.69.245:39127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/sx.php"] [unique_id "ary1IZEcZ_148BjP8ZPR6wAAAUQ"]
[Wed Sep 30 01:07:13.887576 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.887806 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.924223 2026] [security2:error] [pid 263262:tid 263517] [client 216.73.216.46:3400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1IZEcZ_148BjP8ZPR7wAAAYY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5ODQ%3D
[Wed Sep 30 01:07:13.978891 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:13.979170 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:13.982481 2026] [security2:error] [pid 263262:tid 263378] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IZEcZ_148BjP8ZPR8wABPHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=264111&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:07:13.982514 2026] [security2:error] [pid 263262:tid 263378] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IZEcZ_148BjP8ZPR8wABPHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=264111&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:07:13.984472 2026] [security2:error] [pid 263262:tid 263464] [client 20.213.164.196:32658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/plugins.php"] [unique_id "ary1IZEcZ_148BjP8ZPR9AAAAVE"]
[Wed Sep 30 01:07:14.036127 2026] [security2:error] [pid 263262:tid 263472] [client 20.5.79.49:62337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ice.php"] [unique_id "ary1IpEcZ_148BjP8ZPR-AAAAVk"]
[Wed Sep 30 01:07:14.043930 2026] [security2:error] [pid 263262:tid 263394] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1IpEcZ_148BjP8ZPR-QAAAQs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:14.068766 2026] [security2:error] [pid 263262:tid 263419] [client 4.240.25.22:33222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/or.php"] [unique_id "ary1IpEcZ_148BjP8ZPR-wAAASQ"]
[Wed Sep 30 01:07:14.068908 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.069168 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.088721 2026] [security2:error] [pid 263262:tid 263407] [client 105.112.178.79:38371] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.finan.cloud"] [uri "/__ss_probe_5b60e452643abfa19a1ae7abfb08b113__"] [unique_id "ary1IpEcZ_148BjP8ZPR_AAAARg"]
[Wed Sep 30 01:07:14.158854 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.69.245:39220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary1IpEcZ_148BjP8ZPSAQAAAUM"]
[Wed Sep 30 01:07:14.165124 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.165558 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.253968 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.254223 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.342651 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.342928 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.360106 2026] [authz_core:error] [pid 263262:tid 263489] [client 20.5.79.49:0] AH01630: client denied by server configuration: /home1/jfootste/public_html/taen/php.ini
[Wed Sep 30 01:07:14.420154 2026] [security2:error] [pid 263262:tid 263465] [client 52.231.69.245:39161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/article.php"] [unique_id "ary1IpEcZ_148BjP8ZPSEgAAAVI"]
[Wed Sep 30 01:07:14.433752 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.434089 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.514932 2026] [security2:error] [pid 263262:tid 263422] [client 20.194.5.96:19109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/myglu.php"] [unique_id "ary1IpEcZ_148BjP8ZPSFgAAASc"]
[Wed Sep 30 01:07:14.519392 2026] [security2:error] [pid 263262:tid 263481] [client 20.213.164.196:47508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/groud3.php"] [unique_id "ary1IpEcZ_148BjP8ZPSGQAAAWI"]
[Wed Sep 30 01:07:14.529615 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.530171 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.530738 2026] [security2:error] [pid 263262:tid 263462] [remote 168.100.149.83:37728] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1IpEcZ_148BjP8ZPSEwABXwg"]
[Wed Sep 30 01:07:14.559357 2026] [security2:error] [pid 263262:tid 263414] [client 20.5.79.49:26464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary1IpEcZ_148BjP8ZPSFwAAAR8"]
[Wed Sep 30 01:07:14.586699 2026] [security2:error] [pid 263262:tid 263388] [remote 57.141.14.62:29818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/brt-us29-central-corridor-advisory-committee/"] [unique_id "ary1IpEcZ_148BjP8ZPSGwABIHw"]
[Wed Sep 30 01:07:14.633628 2026] [security2:error] [pid 263262:tid 263384] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IpEcZ_148BjP8ZPSHQABP3g"], referer: https://mail.uxa.hoh.mybluehost.me/ucp.php?mode=privacy&sid=3fc5cb15e95e453d7f4111f19794e1d0
[Wed Sep 30 01:07:14.633655 2026] [security2:error] [pid 263262:tid 263384] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1IpEcZ_148BjP8ZPSHQABP3g"], referer: https://mail.uxa.hoh.mybluehost.me/ucp.php?mode=privacy&sid=3fc5cb15e95e453d7f4111f19794e1d0
[Wed Sep 30 01:07:14.670935 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.671390 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.672928 2026] [security2:error] [pid 263262:tid 263426] [client 173.254.29.157:55828] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary1IpEcZ_148BjP8ZPSIgAAASs"]
[Wed Sep 30 01:07:14.689256 2026] [security2:error] [pid 263262:tid 263439] [client 173.254.29.157:55832] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary1IpEcZ_148BjP8ZPSIwAAATg"]
[Wed Sep 30 01:07:14.700636 2026] [security2:error] [pid 263262:tid 263416] [client 52.231.69.245:38529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/link.php"] [unique_id "ary1IpEcZ_148BjP8ZPSJQAAASE"]
[Wed Sep 30 01:07:14.703984 2026] [security2:error] [pid 263262:tid 263451] [client 173.254.29.157:55838] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary1IpEcZ_148BjP8ZPSJgAAAUQ"]
[Wed Sep 30 01:07:14.722874 2026] [security2:error] [pid 263262:tid 263456] [client 173.254.29.157:55850] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary1IpEcZ_148BjP8ZPSJwAAAUk"]
[Wed Sep 30 01:07:14.758975 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.759234 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.799269 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.799542 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.827888 2026] [security2:error] [pid 263262:tid 263393] [client 20.219.2.60:11344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/aboutc.php"] [unique_id "ary1IpEcZ_148BjP8ZPSMQAAAQo"]
[Wed Sep 30 01:07:14.872188 2026] [security2:error] [pid 263262:tid 263511] [client 20.5.79.49:25845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/class-t.api.php"] [unique_id "ary1IpEcZ_148BjP8ZPSMwAAAYA"]
[Wed Sep 30 01:07:14.890232 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.890481 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:14.932209 2026] [security2:error] [pid 263262:tid 263402] [client 4.196.65.241:27273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/dot.php"] [unique_id "ary1IpEcZ_148BjP8ZPSOQAAARM"]
[Wed Sep 30 01:07:14.948390 2026] [access_compat:error] [pid 263262:tid 263418] [client 47.79.13.177:42420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:14.948845 2026] [access_compat:error] [pid 263262:tid 263418] [client 47.79.13.177:42420] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:14.964779 2026] [security2:error] [pid 263262:tid 263502] [client 52.231.69.245:39024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/lock360.php"] [unique_id "ary1IpEcZ_148BjP8ZPSPAAAAXc"]
[Wed Sep 30 01:07:14.980931 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:14.981333 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.024730 2026] [security2:error] [pid 263262:tid 263471] [client 20.219.2.60:19448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/edit.php"] [unique_id "ary1I5EcZ_148BjP8ZPSPgAAAVg"]
[Wed Sep 30 01:07:15.073053 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.073477 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.076343 2026] [security2:error] [pid 263262:tid 263501] [client 20.194.30.107:9998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/sxxb.php"] [unique_id "ary1I5EcZ_148BjP8ZPSRAAAAXY"]
[Wed Sep 30 01:07:15.120889 2026] [security2:error] [pid 263262:tid 263448] [client 20.28.180.172:34287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/e219b53abbindex.php"] [unique_id "ary1I5EcZ_148BjP8ZPSSQAAAUE"]
[Wed Sep 30 01:07:15.167512 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.167993 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.169592 2026] [security2:error] [pid 263262:tid 263460] [client 20.213.164.196:32641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/gaxby.php"] [unique_id "ary1I5EcZ_148BjP8ZPSSwAAAU0"]
[Wed Sep 30 01:07:15.194288 2026] [security2:error] [pid 263262:tid 263481] [client 20.5.79.49:26461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/home.php"] [unique_id "ary1I5EcZ_148BjP8ZPSUAAAAWI"]
[Wed Sep 30 01:07:15.229461 2026] [security2:error] [pid 263262:tid 263415] [client 52.231.69.245:39172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-trackback.php"] [unique_id "ary1I5EcZ_148BjP8ZPSVwAAASA"]
[Wed Sep 30 01:07:15.252997 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.253260 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.261347 2026] [security2:error] [pid 263262:tid 263421] [client 104.208.65.139:15087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/bfdghfgv.php"] [unique_id "ary1I5EcZ_148BjP8ZPSWgAAASY"]
[Wed Sep 30 01:07:15.285566 2026] [security2:error] [pid 263262:tid 263480] [client 20.194.5.96:19116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/aboutt.php"] [unique_id "ary1I5EcZ_148BjP8ZPSXQAAAWE"]
[Wed Sep 30 01:07:15.345253 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.345540 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.400930 2026] [security2:error] [pid 263262:tid 263287] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1I5EcZ_148BjP8ZPSYQABfBc"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=221883
[Wed Sep 30 01:07:15.400960 2026] [security2:error] [pid 263262:tid 263287] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1I5EcZ_148BjP8ZPSYQABfBc"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=221883
[Wed Sep 30 01:07:15.406759 2026] [http2:warn] [pid 251754:tid 251926] [client 52.167.144.188:58894] h2_stream(251754-226-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:15.436406 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.436817 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.489844 2026] [security2:error] [pid 263262:tid 263413] [client 52.231.69.245:39139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/.well-known/index.php"] [unique_id "ary1I5EcZ_148BjP8ZPSaQAAAR4"]
[Wed Sep 30 01:07:15.522342 2026] [security2:error] [pid 263262:tid 263435] [client 20.5.79.49:26478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/bless24.php"] [unique_id "ary1I5EcZ_148BjP8ZPSbQAAATQ"]
[Wed Sep 30 01:07:15.532116 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.532547 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.583224 2026] [security2:error] [pid 263262:tid 263410] [client 45.138.12.32:41116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fje.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1I5EcZ_148BjP8ZPScQAAARs"]
[Wed Sep 30 01:07:15.617860 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.618134 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.694172 2026] [security2:error] [pid 263262:tid 263505] [client 20.214.109.68:61173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/jk.php"] [unique_id "ary1I5EcZ_148BjP8ZPSdAAAAXo"]
[Wed Sep 30 01:07:15.710353 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.710639 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.732174 2026] [security2:error] [pid 263262:tid 263493] [client 4.240.25.22:18745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/100.php"] [unique_id "ary1I5EcZ_148BjP8ZPSdwAAAW4"]
[Wed Sep 30 01:07:15.735705 2026] [security2:error] [pid 263262:tid 263501] [client 20.213.164.196:32281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/dh9u7.php"] [unique_id "ary1I5EcZ_148BjP8ZPSeAAAAXY"]
[Wed Sep 30 01:07:15.754225 2026] [security2:error] [pid 263262:tid 263442] [client 52.231.69.245:39129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary1I5EcZ_148BjP8ZPSeQAAATs"]
[Wed Sep 30 01:07:15.801618 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.801917 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.802685 2026] [security2:error] [pid 263262:tid 263414] [client 122.173.27.10:2054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1I5EcZ_148BjP8ZPSfgAAAR8"]
[Wed Sep 30 01:07:15.803463 2026] [security2:error] [pid 263262:tid 263414] [client 122.173.27.10:2054] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1I5EcZ_148BjP8ZPSfgAAAR8"]
[Wed Sep 30 01:07:15.834212 2026] [security2:error] [pid 263262:tid 263423] [client 20.5.79.49:62398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/default.php"] [unique_id "ary1I5EcZ_148BjP8ZPSgQAAASg"]
[Wed Sep 30 01:07:15.887895 2026] [security2:error] [pid 263262:tid 263415] [client 20.28.180.172:61224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gdn.php"] [unique_id "ary1I5EcZ_148BjP8ZPShQAAASA"]
[Wed Sep 30 01:07:15.893305 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.893649 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:15.902024 2026] [security2:error] [pid 263262:tid 263292] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1I5EcZ_148BjP8ZPShgABbxw"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D13875
[Wed Sep 30 01:07:15.902051 2026] [security2:error] [pid 263262:tid 263292] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1I5EcZ_148BjP8ZPShgABbxw"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D13875
[Wed Sep 30 01:07:15.982071 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:15.982365 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:3910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.035692 2026] [security2:error] [pid 263262:tid 263431] [client 52.231.69.245:38986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary1JJEcZ_148BjP8ZPSiwAAATA"]
[Wed Sep 30 01:07:16.045710 2026] [security2:error] [pid 263262:tid 263487] [client 20.219.2.60:11683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gdn.php"] [unique_id "ary1JJEcZ_148BjP8ZPSjAAAAWg"]
[Wed Sep 30 01:07:16.078161 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.078595 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.157916 2026] [security2:error] [pid 263262:tid 263397] [client 20.5.79.49:62361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/js/chosen.php"] [unique_id "ary1JJEcZ_148BjP8ZPSkQAAAQ4"]
[Wed Sep 30 01:07:16.164132 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.164474 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.255213 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.255485 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.271671 2026] [security2:error] [pid 263262:tid 263394] [client 223.235.102.107:30601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSlwAAAQs"]
[Wed Sep 30 01:07:16.272147 2026] [security2:error] [pid 263262:tid 263394] [client 223.235.102.107:30601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSlwAAAQs"]
[Wed Sep 30 01:07:16.292222 2026] [security2:error] [pid 263262:tid 263507] [client 20.213.164.196:32674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/yvnqcuic.php"] [unique_id "ary1JJEcZ_148BjP8ZPSmQAAAXw"]
[Wed Sep 30 01:07:16.311613 2026] [security2:error] [pid 263262:tid 263462] [client 52.231.69.245:39044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1JJEcZ_148BjP8ZPSmgAAAU8"]
[Wed Sep 30 01:07:16.347777 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.348078 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.374285 2026] [security2:error] [pid 263262:tid 263511] [client 216.73.216.46:3910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1JJEcZ_148BjP8ZPSnAAAAYA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MC9kcml2ZXIvY3B1OQ%3D%3D
[Wed Sep 30 01:07:16.385429 2026] [security2:error] [pid 263262:tid 263413] [client 20.219.2.60:19437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ioxi-o.php"] [unique_id "ary1JJEcZ_148BjP8ZPSnQAAAR4"]
[Wed Sep 30 01:07:16.408789 2026] [security2:error] [pid 263262:tid 263444] [client 201.32.215.149:6860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSoAAAAT0"]
[Wed Sep 30 01:07:16.408968 2026] [security2:error] [pid 263262:tid 263444] [client 201.32.215.149:6860] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSoAAAAT0"]
[Wed Sep 30 01:07:16.420298 2026] [security2:error] [pid 263262:tid 263458] [client 152.59.165.7:49607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSogAAAUs"]
[Wed Sep 30 01:07:16.420424 2026] [security2:error] [pid 263262:tid 263458] [client 152.59.165.7:49607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSogAAAUs"]
[Wed Sep 30 01:07:16.436802 2026] [security2:error] [pid 263262:tid 263472] [client 20.194.5.96:18890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wp-whe.php"] [unique_id "ary1JJEcZ_148BjP8ZPSpwAAAVk"]
[Wed Sep 30 01:07:16.439222 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.439616 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.477455 2026] [security2:error] [pid 263262:tid 263418] [client 20.5.79.49:64059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "ary1JJEcZ_148BjP8ZPSqQAAASM"]
[Wed Sep 30 01:07:16.526498 2026] [security2:error] [pid 263262:tid 263492] [remote 168.100.149.201:20778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1JJEcZ_148BjP8ZPSoQABXxE"]
[Wed Sep 30 01:07:16.536233 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.536704 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.572899 2026] [security2:error] [pid 263262:tid 263501] [client 52.231.69.245:39078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSrwAAAXY"]
[Wed Sep 30 01:07:16.625106 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.625561 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.714944 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.715332 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.769010 2026] [security2:error] [pid 263262:tid 263475] [client 203.122.45.246:61022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSwAAAAVw"]
[Wed Sep 30 01:07:16.769180 2026] [security2:error] [pid 263262:tid 263475] [client 203.122.45.246:61022] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1JJEcZ_148BjP8ZPSwAAAAVw"]
[Wed Sep 30 01:07:16.785451 2026] [security2:error] [pid 263262:tid 263480] [client 45.138.12.40:7440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.yod.ninja"] [uri "/wp-links-opml.php"] [unique_id "ary1JJEcZ_148BjP8ZPSwwAAAWE"]
[Wed Sep 30 01:07:16.797684 2026] [security2:error] [pid 263262:tid 263514] [client 161.118.214.16:49519] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.cloud9exp.net"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary1JJEcZ_148BjP8ZPSwgAAAYM"]
[Wed Sep 30 01:07:16.805858 2026] [security2:error] [pid 263262:tid 263487] [client 20.5.79.49:62362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/C1.php"] [unique_id "ary1JJEcZ_148BjP8ZPSxQAAAWg"]
[Wed Sep 30 01:07:16.809303 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.809744 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.813533 2026] [security2:error] [pid 263262:tid 263424] [client 20.213.164.196:32309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/koiy.php"] [unique_id "ary1JJEcZ_148BjP8ZPSxgAAASk"]
[Wed Sep 30 01:07:16.836994 2026] [security2:error] [pid 263262:tid 263404] [client 52.231.69.245:38562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary1JJEcZ_148BjP8ZPSygAAARU"]
[Wed Sep 30 01:07:16.893060 2026] [security2:error] [pid 263262:tid 263394] [client 4.240.25.22:8449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/sxxb.php"] [unique_id "ary1JJEcZ_148BjP8ZPS0QAAAQs"]
[Wed Sep 30 01:07:16.899875 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.900312 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.929428 2026] [security2:error] [pid 263262:tid 263482] [client 20.214.109.68:62426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/gcqoa.php"] [unique_id "ary1JJEcZ_148BjP8ZPS0gAAAWM"]
[Wed Sep 30 01:07:16.975463 2026] [security2:error] [pid 263262:tid 263520] [client 20.198.74.230:23899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/qnHOQSw8LXV.php"] [unique_id "ary1JJEcZ_148BjP8ZPS1wAAAYk"]
[Wed Sep 30 01:07:16.991023 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:16.991426 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:16.998294 2026] [security2:error] [pid 263262:tid 263506] [client 20.194.30.107:49181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-filemannger.php"] [unique_id "ary1JJEcZ_148BjP8ZPS2gAAAXs"]
[Wed Sep 30 01:07:17.076102 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.076375 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.100683 2026] [security2:error] [pid 263262:tid 263401] [client 52.231.69.245:38556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary1JZEcZ_148BjP8ZPS3gAAARI"]
[Wed Sep 30 01:07:17.128531 2026] [security2:error] [pid 263262:tid 263505] [client 20.5.79.49:26495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/7.php"] [unique_id "ary1JZEcZ_148BjP8ZPS4QAAAXo"]
[Wed Sep 30 01:07:17.153824 2026] [security2:error] [pid 263262:tid 263448] [client 202.179.95.79:51174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1JZEcZ_148BjP8ZPS4wAAAUE"]
[Wed Sep 30 01:07:17.154002 2026] [security2:error] [pid 263262:tid 263448] [client 202.179.95.79:51174] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1JZEcZ_148BjP8ZPS4wAAAUE"]
[Wed Sep 30 01:07:17.173703 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.174180 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.265168 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.265628 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.353904 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.354182 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.371719 2026] [security2:error] [pid 263262:tid 263484] [client 20.213.164.196:47060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wordfence-waf.php"] [unique_id "ary1JZEcZ_148BjP8ZPS8gAAAWU"]
[Wed Sep 30 01:07:17.380219 2026] [security2:error] [pid 263262:tid 263485] [client 52.231.69.245:38546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/filemanager/dialog.php"] [unique_id "ary1JZEcZ_148BjP8ZPS9AAAAWY"]
[Wed Sep 30 01:07:17.446849 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.447107 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.453627 2026] [security2:error] [pid 263262:tid 263416] [client 20.5.79.49:62392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/public/a1vx.php"] [unique_id "ary1JZEcZ_148BjP8ZPS-QAAASE"]
[Wed Sep 30 01:07:17.584148 2026] [security2:error] [pid 263262:tid 263472] [client 20.214.109.68:9445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/plugin-editor.php"] [unique_id "ary1JZEcZ_148BjP8ZPS_gAAAVk"]
[Wed Sep 30 01:07:17.594251 2026] [authz_core:error] [pid 263262:tid 263506] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/PHPMailer/error_log, referer: binance.com
[Wed Sep 30 01:07:17.627925 2026] [security2:error] [pid 263262:tid 263310] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1JZEcZ_148BjP8ZPS_wABGi4"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D72782
[Wed Sep 30 01:07:17.649231 2026] [security2:error] [pid 263262:tid 263421] [client 52.231.69.245:39099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/index/function.php"] [unique_id "ary1JZEcZ_148BjP8ZPTAgAAASY"]
[Wed Sep 30 01:07:17.649438 2026] [security2:error] [pid 263262:tid 263442] [client 103.159.192.142:62877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1JZEcZ_148BjP8ZPTAwAAATs"]
[Wed Sep 30 01:07:17.649540 2026] [security2:error] [pid 263262:tid 263442] [client 103.159.192.142:62877] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1JZEcZ_148BjP8ZPTAwAAATs"]
[Wed Sep 30 01:07:17.670613 2026] [access_compat:error] [pid 263262:tid 263418] [client 74.7.243.227:48740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L2N3ZA==
[Wed Sep 30 01:07:17.670893 2026] [access_compat:error] [pid 263262:tid 263418] [client 74.7.243.227:48740] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L2N3ZA==
[Wed Sep 30 01:07:17.673197 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.673627 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.763186 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.763460 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.765102 2026] [security2:error] [pid 263262:tid 263402] [client 20.70.173.30:57018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/baba.php"] [unique_id "ary1JZEcZ_148BjP8ZPTDQAAARM"]
[Wed Sep 30 01:07:17.768090 2026] [security2:error] [pid 263262:tid 263456] [client 20.5.79.49:64049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/jp.php"] [unique_id "ary1JZEcZ_148BjP8ZPTDgAAAUk"]
[Wed Sep 30 01:07:17.769989 2026] [security2:error] [pid 263262:tid 263401] [client 20.213.164.196:47047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wp5.php"] [unique_id "ary1JZEcZ_148BjP8ZPTDwAAARI"]
[Wed Sep 30 01:07:17.858740 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.859051 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:17.873090 2026] [security2:error] [pid 263262:tid 263396] [client 20.194.30.107:46661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/pfm.php"] [unique_id "ary1JZEcZ_148BjP8ZPTGQAAAQ0"]
[Wed Sep 30 01:07:17.882586 2026] [security2:error] [pid 263262:tid 263403] [client 20.194.5.96:19075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/ssixta.php"] [unique_id "ary1JZEcZ_148BjP8ZPTGwAAARQ"]
[Wed Sep 30 01:07:17.913439 2026] [security2:error] [pid 263262:tid 263474] [client 52.231.69.245:38528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary1JZEcZ_148BjP8ZPTHgAAAVs"]
[Wed Sep 30 01:07:17.946013 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:17.946277 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.008237 2026] [security2:error] [pid 263262:tid 263417] [client 20.194.30.107:17414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/about.php"] [unique_id "ary1JpEcZ_148BjP8ZPTIAAAASI"]
[Wed Sep 30 01:07:18.016576 2026] [core:error] [pid 263262:tid 263464] [client 45.138.12.40:4000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:18.016598 2026] [core:error] [pid 263262:tid 263464] [client 45.138.12.40:4000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:18.021871 2026] [security2:error] [pid 263262:tid 263446] [client 4.240.25.22:12452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/about.php"] [unique_id "ary1JpEcZ_148BjP8ZPTIwAAAT8"]
[Wed Sep 30 01:07:18.037463 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.037739 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.063177 2026] [security2:error] [pid 263262:tid 263397] [client 116.193.128.26:61854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1JpEcZ_148BjP8ZPTJQAAAQ4"]
[Wed Sep 30 01:07:18.063591 2026] [security2:error] [pid 263262:tid 263397] [client 116.193.128.26:61854] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1JpEcZ_148BjP8ZPTJQAAAQ4"]
[Wed Sep 30 01:07:18.083484 2026] [security2:error] [pid 263262:tid 263496] [client 20.5.79.49:62374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/rithin.php"] [unique_id "ary1JpEcZ_148BjP8ZPTJwAAAXE"]
[Wed Sep 30 01:07:18.114088 2026] [security2:error] [pid 263262:tid 263515] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1JpEcZ_148BjP8ZPTKgAAAYQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:18.127634 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.127899 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.199016 2026] [security2:error] [pid 263262:tid 263487] [client 52.231.69.245:39053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary1JpEcZ_148BjP8ZPTMAAAAWg"]
[Wed Sep 30 01:07:18.218335 2026] [security2:error] [pid 263262:tid 263453] [client 20.219.2.60:11353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/first.php"] [unique_id "ary1JpEcZ_148BjP8ZPTMgAAAUY"]
[Wed Sep 30 01:07:18.231089 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.231567 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.244568 2026] [security2:error] [pid 263262:tid 263441] [client 102.253.38.25:52237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.38.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary1JpEcZ_148BjP8ZPTMwAAATo"]
[Wed Sep 30 01:07:18.244682 2026] [security2:error] [pid 263262:tid 263441] [client 102.253.38.25:52237] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary1JpEcZ_148BjP8ZPTMwAAATo"]
[Wed Sep 30 01:07:18.247819 2026] [security2:error] [pid 263262:tid 263482] [client 20.28.180.172:18139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/first.php"] [unique_id "ary1JpEcZ_148BjP8ZPTNAAAAWM"]
[Wed Sep 30 01:07:18.298582 2026] [security2:error] [pid 263262:tid 263440] [client 20.213.164.196:47056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/em.php"] [unique_id "ary1JpEcZ_148BjP8ZPTNQAAATk"]
[Wed Sep 30 01:07:18.310625 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.310907 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.402362 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.402622 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.402870 2026] [security2:error] [pid 263262:tid 263450] [client 20.5.79.49:26458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/dev.php"] [unique_id "ary1JpEcZ_148BjP8ZPTQgAAAUM"]
[Wed Sep 30 01:07:18.419153 2026] [security2:error] [pid 263262:tid 263519] [client 20.219.2.60:18878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ajax.php"] [unique_id "ary1JpEcZ_148BjP8ZPTRgAAAYg"]
[Wed Sep 30 01:07:18.424652 2026] [security2:error] [pid 263262:tid 263502] [client 20.194.5.96:19076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/tesla.php"] [unique_id "ary1JpEcZ_148BjP8ZPTRwAAAXc"]
[Wed Sep 30 01:07:18.473764 2026] [security2:error] [pid 263262:tid 263505] [client 52.231.69.245:39208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary1JpEcZ_148BjP8ZPTSgAAAXo"]
[Wed Sep 30 01:07:18.498025 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.498279 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.538985 2026] [security2:error] [pid 263262:tid 263400] [client 168.100.149.215:50404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/JASANZ-RGB-with-URL.jpg"] [unique_id "ary1JpEcZ_148BjP8ZPTSAABOCk"]
[Wed Sep 30 01:07:18.590206 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.590475 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.609901 2026] [security2:error] [pid 263262:tid 263469] [client 20.194.30.107:1455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/well.php"] [unique_id "ary1JpEcZ_148BjP8ZPTTwAAAVY"]
[Wed Sep 30 01:07:18.639309 2026] [security2:error] [pid 263262:tid 263497] [client 20.213.164.196:47529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/hp.php"] [unique_id "ary1JpEcZ_148BjP8ZPTUQAAAXI"]
[Wed Sep 30 01:07:18.680427 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.680707 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:63124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.719573 2026] [security2:error] [pid 263262:tid 263464] [client 20.5.79.49:26432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/css/colors/ectoplasm/alfa-rex.php8"] [unique_id "ary1JpEcZ_148BjP8ZPTVgAAAVE"]
[Wed Sep 30 01:07:18.734302 2026] [security2:error] [pid 263262:tid 263468] [client 52.231.69.245:39183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/about/function.php"] [unique_id "ary1JpEcZ_148BjP8ZPTVwAAAVU"]
[Wed Sep 30 01:07:18.771096 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.771360 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.818649 2026] [security2:error] [pid 263262:tid 263518] [client 20.70.173.30:33390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1JpEcZ_148BjP8ZPTXAAAAYc"]
[Wed Sep 30 01:07:18.864672 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.864966 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.893296 2026] [security2:error] [pid 263262:tid 263517] [client 4.240.25.22:33217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/baru.php"] [unique_id "ary1JpEcZ_148BjP8ZPTaAAAAYY"]
[Wed Sep 30 01:07:18.898415 2026] [security2:error] [pid 263262:tid 263394] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1JpEcZ_148BjP8ZPTaQAAAQs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:18.933010 2026] [security2:error] [pid 263262:tid 263514] [client 158.94.199.231:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1JpEcZ_148BjP8ZPTbAAAAYM"]
[Wed Sep 30 01:07:18.959319 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:18.959586 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:18.999895 2026] [security2:error] [pid 263262:tid 263440] [client 52.231.69.245:39121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary1JpEcZ_148BjP8ZPTbgAAATk"]
[Wed Sep 30 01:07:19.040553 2026] [security2:error] [pid 263262:tid 263458] [client 20.5.79.49:64008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/abcd.php"] [unique_id "ary1J5EcZ_148BjP8ZPTcQAAAUs"]
[Wed Sep 30 01:07:19.048419 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.048693 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.050500 2026] [security2:error] [pid 263262:tid 263409] [client 20.213.164.196:47069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wpuse.php"] [unique_id "ary1J5EcZ_148BjP8ZPTcwAAARo"]
[Wed Sep 30 01:07:19.076085 2026] [security2:error] [pid 263262:tid 263516] [client 216.73.216.46:63124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1J5EcZ_148BjP8ZPTdQAAAYU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzAvbm9kZTAvbWVtb3J5MTM3
[Wed Sep 30 01:07:19.140826 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.141140 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.162050 2026] [security2:error] [pid 263262:tid 263502] [client 4.240.25.22:43778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/dex.php"] [unique_id "ary1J5EcZ_148BjP8ZPTegAAAXc"]
[Wed Sep 30 01:07:19.175000 2026] [security2:error] [pid 263262:tid 263325] [remote 64.23.166.180:60030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hairofsheba.com"] [uri "/.env"] [unique_id "ary1J5EcZ_148BjP8ZPTfAABGz0"]
[Wed Sep 30 01:07:19.284311 2026] [security2:error] [pid 263262:tid 263401] [client 52.231.69.245:39111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/admin/function.php"] [unique_id "ary1J5EcZ_148BjP8ZPTgQAAARI"]
[Wed Sep 30 01:07:19.285325 2026] [security2:error] [pid 263262:tid 263492] [client 20.214.109.68:59880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/plugin-install.php"] [unique_id "ary1J5EcZ_148BjP8ZPTggAAAW0"]
[Wed Sep 30 01:07:19.362835 2026] [security2:error] [pid 263262:tid 263489] [client 20.5.79.49:64020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/2.php"] [unique_id "ary1J5EcZ_148BjP8ZPTgwAAAWo"]
[Wed Sep 30 01:07:19.375983 2026] [http2:warn] [pid 251754:tid 251925] [client 52.167.144.206:62436] h2_stream(251754-280-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:19.377090 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.377492 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:55379] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.447755 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.448017 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.464660 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:59114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.464928 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:59114] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.465074 2026] [access_compat:error] [pid 263262:tid 263444] [client 47.79.13.75:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:19.465349 2026] [access_compat:error] [pid 263262:tid 263444] [client 47.79.13.75:47158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:19.545695 2026] [security2:error] [pid 263262:tid 263480] [client 52.231.69.245:38615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/9.php"] [unique_id "ary1J5EcZ_148BjP8ZPTlQAAAWE"]
[Wed Sep 30 01:07:19.554273 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.554548 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.558941 2026] [security2:error] [pid 263262:tid 263518] [client 20.70.173.30:33427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/images.php"] [unique_id "ary1J5EcZ_148BjP8ZPTmAAAAYc"]
[Wed Sep 30 01:07:19.559104 2026] [security2:error] [pid 263262:tid 263470] [client 20.213.164.196:47501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/sm.php"] [unique_id "ary1J5EcZ_148BjP8ZPTmQAAAVc"]
[Wed Sep 30 01:07:19.586256 2026] [security2:error] [pid 263262:tid 263436] [client 223.181.30.165:21052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTnAAAATU"]
[Wed Sep 30 01:07:19.586396 2026] [security2:error] [pid 263262:tid 263436] [client 223.181.30.165:21052] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTnAAAATU"]
[Wed Sep 30 01:07:19.592790 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.593202 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.644452 2026] [security2:error] [pid 263262:tid 263453] [client 20.194.5.96:19072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/222.php"] [unique_id "ary1J5EcZ_148BjP8ZPTqAAAAUY"]
[Wed Sep 30 01:07:19.649342 2026] [security2:error] [pid 263262:tid 263474] [client 20.28.180.172:18352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/redixsx.php"] [unique_id "ary1J5EcZ_148BjP8ZPTqgAAAVs"]
[Wed Sep 30 01:07:19.661043 2026] [core:error] [pid 263262:tid 263404] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:19.661065 2026] [core:error] [pid 263262:tid 263404] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:19.685639 2026] [security2:error] [pid 263262:tid 263494] [client 20.5.79.49:26475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary1J5EcZ_148BjP8ZPTrgAAAW8"]
[Wed Sep 30 01:07:19.686662 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.686992 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.754337 2026] [security2:error] [pid 263262:tid 263439] [client 106.214.2.47:23711] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTrwAAATg"]
[Wed Sep 30 01:07:19.754471 2026] [security2:error] [pid 263262:tid 263439] [client 106.214.2.47:23711] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTrwAAATg"]
[Wed Sep 30 01:07:19.774083 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.774337 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.788306 2026] [security2:error] [pid 263262:tid 263479] [client 216.73.216.46:55379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1J5EcZ_148BjP8ZPTsgAAAWA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTEvbm9kZTAvbWVtb3J5OS9ub2RlMC9jcHUxMS9kcml2ZXI%3D
[Wed Sep 30 01:07:19.806539 2026] [security2:error] [pid 263262:tid 263515] [client 52.231.69.245:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary1J5EcZ_148BjP8ZPTswAAAYQ"]
[Wed Sep 30 01:07:19.816080 2026] [security2:error] [pid 263262:tid 263458] [client 20.28.180.172:29579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/jj.php"] [unique_id "ary1J5EcZ_148BjP8ZPTtAAAAUs"]
[Wed Sep 30 01:07:19.827957 2026] [security2:error] [pid 263262:tid 263428] [client 182.69.182.151:8957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTtQAAAS0"]
[Wed Sep 30 01:07:19.828041 2026] [security2:error] [pid 263262:tid 263428] [client 182.69.182.151:8957] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1J5EcZ_148BjP8ZPTtQAAAS0"]
[Wed Sep 30 01:07:19.866137 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.866393 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.887160 2026] [security2:error] [pid 263262:tid 263401] [client 216.73.216.46:59114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1J5EcZ_148BjP8ZPTuQAAARI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzMvbm9kZTAvbWVtb3J5NDc2
[Wed Sep 30 01:07:19.957381 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:19.957665 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:19.982461 2026] [security2:error] [pid 263262:tid 263335] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1J5EcZ_148BjP8ZPTwQABUkc"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D76320
[Wed Sep 30 01:07:19.982504 2026] [security2:error] [pid 263262:tid 263335] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1J5EcZ_148BjP8ZPTwQABUkc"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D76320
[Wed Sep 30 01:07:20.010668 2026] [security2:error] [pid 263262:tid 263400] [client 20.5.79.49:37726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/index/zwso.php"] [unique_id "ary1KJEcZ_148BjP8ZPTwwAAARE"]
[Wed Sep 30 01:07:20.038235 2026] [security2:error] [pid 263262:tid 263444] [client 45.138.12.43:50422] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.wildingproperties.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1KJEcZ_148BjP8ZPTxQAAAT0"]
[Wed Sep 30 01:07:20.038700 2026] [security2:error] [pid 263262:tid 263398] [client 20.219.2.60:11387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/redixsx.php"] [unique_id "ary1KJEcZ_148BjP8ZPTxgAAAQ8"]
[Wed Sep 30 01:07:20.048720 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.049040 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.067986 2026] [security2:error] [pid 263262:tid 263413] [client 52.231.69.245:39231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/.well-known/log.php"] [unique_id "ary1KJEcZ_148BjP8ZPTyQAAAR4"]
[Wed Sep 30 01:07:20.083974 2026] [security2:error] [pid 263262:tid 263469] [client 20.194.5.96:19131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/media.php"] [unique_id "ary1KJEcZ_148BjP8ZPTygAAAVY"]
[Wed Sep 30 01:07:20.137976 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.138233 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.142987 2026] [security2:error] [pid 263262:tid 263470] [client 190.92.15.45:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1KJEcZ_148BjP8ZPT0gAAAVc"]
[Wed Sep 30 01:07:20.221397 2026] [security2:error] [pid 263262:tid 263474] [client 20.213.164.196:32686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/mknobgkg.php"] [unique_id "ary1KJEcZ_148BjP8ZPT1wAAAVs"]
[Wed Sep 30 01:07:20.232955 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.233219 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.253008 2026] [security2:error] [pid 263262:tid 263445] [client 43.227.131.37:48659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1KJEcZ_148BjP8ZPT3AAAAT4"]
[Wed Sep 30 01:07:20.253115 2026] [security2:error] [pid 263262:tid 263445] [client 43.227.131.37:48659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1KJEcZ_148BjP8ZPT3AAAAT4"]
[Wed Sep 30 01:07:20.300695 2026] [security2:error] [pid 263262:tid 263452] [client 20.194.30.107:10039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/classwithtostring.php"] [unique_id "ary1KJEcZ_148BjP8ZPT4AAAAUU"]
[Wed Sep 30 01:07:20.320270 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.320529 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.330854 2026] [security2:error] [pid 263262:tid 263441] [client 52.231.69.245:39218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/class.php"] [unique_id "ary1KJEcZ_148BjP8ZPT4gAAATo"]
[Wed Sep 30 01:07:20.355442 2026] [core:error] [pid 263262:tid 263504] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:20.355457 2026] [core:error] [pid 263262:tid 263504] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:20.383098 2026] [security2:error] [pid 263262:tid 263451] [client 20.5.79.49:62368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/leaf.php"] [unique_id "ary1KJEcZ_148BjP8ZPT5AAAAUQ"]
[Wed Sep 30 01:07:20.406742 2026] [security2:error] [pid 263262:tid 263466] [client 223.181.60.167:24027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1KJEcZ_148BjP8ZPT5wAAAVM"]
[Wed Sep 30 01:07:20.406866 2026] [security2:error] [pid 263262:tid 263466] [client 223.181.60.167:24027] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1KJEcZ_148BjP8ZPT5wAAAVM"]
[Wed Sep 30 01:07:20.411976 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.412233 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.493455 2026] [security2:error] [pid 263262:tid 263472] [client 74.7.175.161:45864] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.iri.yrw.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1KJEcZ_148BjP8ZPT7QABWSc"]
[Wed Sep 30 01:07:20.501246 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.501508 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.543873 2026] [security2:error] [pid 263262:tid 263478] [client 74.7.230.40:38040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ahe.oxv.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1KJEcZ_148BjP8ZPT9AABX3c"]
[Wed Sep 30 01:07:20.556420 2026] [security2:error] [pid 263262:tid 263415] [remote 168.100.149.213:36834] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1KJEcZ_148BjP8ZPT6gABNkI"]
[Wed Sep 30 01:07:20.588122 2026] [security2:error] [pid 263262:tid 263423] [client 20.28.180.172:61189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/cpp2.php"] [unique_id "ary1KJEcZ_148BjP8ZPT9wAAASg"]
[Wed Sep 30 01:07:20.593695 2026] [autoindex:error] [pid 263262:tid 263317] [remote 74.7.242.45:38118] AH01276: Cannot serve directory /home4/iriyrwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:20.594269 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.594552 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.627853 2026] [security2:error] [pid 263262:tid 263444] [client 52.231.69.245:38543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/lock360.php"] [unique_id "ary1KJEcZ_148BjP8ZPT-AAAAT0"]
[Wed Sep 30 01:07:20.649118 2026] [autoindex:error] [pid 263262:tid 263344] [remote 74.7.243.207:56120] AH01276: Cannot serve directory /home4/aheoxvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:20.672912 2026] [security2:error] [pid 263262:tid 263470] [client 104.208.65.139:2343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/Dss.php"] [unique_id "ary1KJEcZ_148BjP8ZPT_QAAAVc"]
[Wed Sep 30 01:07:20.685999 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.686268 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.710321 2026] [security2:error] [pid 263262:tid 263431] [client 20.5.79.49:64035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/network/admin.php"] [unique_id "ary1KJEcZ_148BjP8ZPUAAAAATA"]
[Wed Sep 30 01:07:20.716872 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.172:35068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:20.717139 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.172:35068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:20.744081 2026] [security2:error] [pid 263262:tid 263396] [client 20.213.164.196:47532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/dairg.php"] [unique_id "ary1KJEcZ_148BjP8ZPUBQAAAQ0"]
[Wed Sep 30 01:07:20.777726 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.777996 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.794661 2026] [security2:error] [pid 263262:tid 263455] [client 4.240.25.22:8402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/classwithtostring.php"] [unique_id "ary1KJEcZ_148BjP8ZPUCgAAAUg"]
[Wed Sep 30 01:07:20.857250 2026] [security2:error] [pid 263262:tid 263445] [client 62.74.12.194:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1KJEcZ_148BjP8ZPUEQAAAT4"]
[Wed Sep 30 01:07:20.858392 2026] [security2:error] [pid 263262:tid 263409] [client 20.70.173.30:63104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/0.php"] [unique_id "ary1KJEcZ_148BjP8ZPUEgAAARo"]
[Wed Sep 30 01:07:20.868616 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.868894 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:20.879389 2026] [security2:error] [pid 263262:tid 263395] [client 45.138.12.40:4070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.yourkatana.com"] [uri "/wp-links-opml.php"] [unique_id "ary1KJEcZ_148BjP8ZPUFAAAAQw"]
[Wed Sep 30 01:07:20.899640 2026] [security2:error] [pid 263262:tid 263438] [client 52.231.69.245:39123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.69.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.buffaloprairiestorage.com"] [uri "/system_log.php"] [unique_id "ary1KJEcZ_148BjP8ZPUFQAAATc"]
[Wed Sep 30 01:07:20.960334 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:20.960631 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.009593 2026] [security2:error] [pid 263262:tid 263441] [client 20.214.109.68:9414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/profile.php"] [unique_id "ary1KZEcZ_148BjP8ZPUHwAAATo"]
[Wed Sep 30 01:07:21.028133 2026] [security2:error] [pid 263262:tid 263439] [client 20.5.79.49:26467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/plugins/akismet/alfa-rex.php8"] [unique_id "ary1KZEcZ_148BjP8ZPUIQAAATg"]
[Wed Sep 30 01:07:21.049349 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.049610 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.141132 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.141548 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.142875 2026] [security2:error] [pid 263262:tid 263497] [client 20.213.164.196:31898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/dronishness.php"] [unique_id "ary1KZEcZ_148BjP8ZPUKAAAAXI"]
[Wed Sep 30 01:07:21.233351 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.233800 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.261922 2026] [security2:error] [pid 263262:tid 263418] [client 20.194.5.96:19100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/24.php"] [unique_id "ary1KZEcZ_148BjP8ZPUOwAAASM"]
[Wed Sep 30 01:07:21.326600 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.326873 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.356176 2026] [security2:error] [pid 263262:tid 263396] [client 20.5.79.49:37711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/rip.php"] [unique_id "ary1KZEcZ_148BjP8ZPURgAAAQ0"]
[Wed Sep 30 01:07:21.414670 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.414938 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:22328] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.511582 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.512043 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.599460 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.599920 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.688986 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.689350 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.712787 2026] [security2:error] [pid 263262:tid 263416] [client 20.5.79.49:25795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/sys.php"] [unique_id "ary1KZEcZ_148BjP8ZPUfgAAASE"]
[Wed Sep 30 01:07:21.778705 2026] [security2:error] [pid 263262:tid 263411] [client 20.213.164.196:47498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/Row_wsoo.php"] [unique_id "ary1KZEcZ_148BjP8ZPUhQAAARw"]
[Wed Sep 30 01:07:21.781622 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.782066 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.833281 2026] [security2:error] [pid 263262:tid 263428] [client 216.73.216.46:22328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1KZEcZ_148BjP8ZPUigAAAS0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMC9kcml2ZXIvY3B1Nw%3D%3D
[Wed Sep 30 01:07:21.868870 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.869137 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:21.874954 2026] [security2:error] [pid 263262:tid 263424] [client 20.28.180.172:62399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/admlo.php"] [unique_id "ary1KZEcZ_148BjP8ZPUkAAAASk"]
[Wed Sep 30 01:07:21.961657 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:21.961951 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.051935 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.052216 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.148031 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.148473 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.153276 2026] [security2:error] [pid 263262:tid 263507] [client 20.5.79.49:62365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/option.php"] [unique_id "ary1KpEcZ_148BjP8ZPUoQAAAXw"]
[Wed Sep 30 01:07:22.210239 2026] [access_compat:error] [pid 263262:tid 263399] [client 47.82.11.32:59110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:22.210506 2026] [access_compat:error] [pid 263262:tid 263399] [client 47.82.11.32:59110] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:22.216380 2026] [security2:error] [pid 263262:tid 263498] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1KpEcZ_148BjP8ZPUpgAAAXM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:22.232966 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.233229 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.304100 2026] [security2:error] [pid 263262:tid 263398] [client 20.194.5.96:18880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xwpg.php"] [unique_id "ary1KpEcZ_148BjP8ZPUrwAAAQ8"]
[Wed Sep 30 01:07:22.325358 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.325613 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.404576 2026] [security2:error] [pid 263262:tid 263468] [client 74.7.241.159:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/index.php"] [unique_id "ary1KJEcZ_148BjP8ZPUEAAAAVU"]
[Wed Sep 30 01:07:22.406801 2026] [security2:error] [pid 263262:tid 263427] [client 74.7.241.159:50238] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.sunshinemanage.kbm-realty.com"] [uri "/robots.txt"] [unique_id "ary1KJEcZ_148BjP8ZPT8gABLE4"]
[Wed Sep 30 01:07:22.415995 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.416300 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.421303 2026] [security2:error] [pid 263262:tid 263438] [client 49.43.163.212:55866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1KpEcZ_148BjP8ZPUrQAAATc"]
[Wed Sep 30 01:07:22.482240 2026] [security2:error] [pid 263262:tid 263480] [client 20.213.164.196:47490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/x2.php"] [unique_id "ary1KpEcZ_148BjP8ZPUwQAAAWE"]
[Wed Sep 30 01:07:22.482251 2026] [security2:error] [pid 263262:tid 263400] [client 20.5.79.49:26448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ini.php"] [unique_id "ary1KpEcZ_148BjP8ZPUwAAAARE"]
[Wed Sep 30 01:07:22.509643 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.510094 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:2344] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.538905 2026] [security2:error] [pid 263262:tid 263393] [remote 168.100.149.189:36368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1KpEcZ_148BjP8ZPUvwABXjw"]
[Wed Sep 30 01:07:22.603221 2026] [security2:error] [pid 263262:tid 263500] [client 20.214.109.68:61160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/class-t.api.php"] [unique_id "ary1KpEcZ_148BjP8ZPUzAAAAXU"]
[Wed Sep 30 01:07:22.635570 2026] [security2:error] [pid 263262:tid 263295] [remote 172.182.202.123:46480] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1KpEcZ_148BjP8ZPUywABPB8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=206000&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:07:22.635600 2026] [security2:error] [pid 263262:tid 263295] [remote 172.182.202.123:46480] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1KpEcZ_148BjP8ZPUywABPB8"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=206000&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:07:22.648098 2026] [security2:error] [pid 263262:tid 263395] [client 74.7.175.183:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "sunshinemanage.com"] [uri "/robots.txt"] [unique_id "ary1KpEcZ_148BjP8ZPUzwAAAQw"]
[Wed Sep 30 01:07:22.649564 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.650017 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.708721 2026] [security2:error] [pid 263262:tid 263446] [client 20.70.173.30:33424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/pJPoKA.php"] [unique_id "ary1KpEcZ_148BjP8ZPU0gAAAT8"]
[Wed Sep 30 01:07:22.725052 2026] [security2:error] [pid 263262:tid 263394] [client 74.7.175.183:56254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "sunshinemanage.com"] [uri "/robots.txt"] [unique_id "ary1KpEcZ_148BjP8ZPUxQAAAQs"]
[Wed Sep 30 01:07:22.746494 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.746958 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.782572 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.783009 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.798853 2026] [security2:error] [pid 263262:tid 263421] [client 20.5.79.49:64001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/yasnu.php"] [unique_id "ary1KpEcZ_148BjP8ZPU2QAAASY"]
[Wed Sep 30 01:07:22.803535 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1KpEcZ_148BjP8ZPU2gABZ0U"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=296136
[Wed Sep 30 01:07:22.803575 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1KpEcZ_148BjP8ZPU2gABZ0U"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=296136
[Wed Sep 30 01:07:22.870295 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.870572 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:22.881501 2026] [security2:error] [pid 263262:tid 263411] [client 74.7.175.183:49780] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sunshinemanage.com"] [uri "/robots.txt"] [unique_id "ary1KpEcZ_148BjP8ZPU3gABHCs"], referer: http://sunshinemanage.com/robots.txt
[Wed Sep 30 01:07:22.917971 2026] [security2:error] [pid 263262:tid 263401] [client 216.73.216.46:2344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1KpEcZ_148BjP8ZPU5QAAARI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDA4L25vZGUwL21lbW9yeTI4OS9ub2RlMA%3D%3D
[Wed Sep 30 01:07:22.932405 2026] [security2:error] [pid 263262:tid 263402] [client 155.190.6.18:41236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1KpEcZ_148BjP8ZPU5gAAARM"]
[Wed Sep 30 01:07:22.944071 2026] [security2:error] [pid 263262:tid 263406] [client 20.213.164.196:47512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/v4.php"] [unique_id "ary1KpEcZ_148BjP8ZPU6AAAARc"]
[Wed Sep 30 01:07:22.960383 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:22.960651 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.031930 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.213:60844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:23.032202 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.213:60844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:23.053949 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.054259 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.092363 2026] [security2:error] [pid 263262:tid 263444] [client 20.194.5.96:19121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/blacks.php"] [unique_id "ary1K5EcZ_148BjP8ZPU8wAAAT0"]
[Wed Sep 30 01:07:23.092770 2026] [security2:error] [pid 263262:tid 263500] [client 84.17.60.236:35098] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1K5EcZ_148BjP8ZPU9QAAAXU"]
[Wed Sep 30 01:07:23.133985 2026] [security2:error] [pid 263262:tid 263507] [client 20.5.79.49:26460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/dlu.php"] [unique_id "ary1K5EcZ_148BjP8ZPU-QAAAXw"]
[Wed Sep 30 01:07:23.142221 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.142474 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.207123 2026] [security2:error] [pid 263262:tid 263397] [client 20.70.173.30:33380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1K5EcZ_148BjP8ZPU_gAAAQ4"]
[Wed Sep 30 01:07:23.211727 2026] [security2:error] [pid 263262:tid 263402] [client 155.190.6.18:41236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1KpEcZ_148BjP8ZPU5gAAARM"]
[Wed Sep 30 01:07:23.235050 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.235314 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.275277 2026] [security2:error] [pid 263262:tid 263454] [client 103.241.204.139:64869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVAgAAAUc"]
[Wed Sep 30 01:07:23.276314 2026] [security2:error] [pid 263262:tid 263454] [client 103.241.204.139:64869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVAgAAAUc"]
[Wed Sep 30 01:07:23.330799 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.331240 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.332507 2026] [security2:error] [pid 263262:tid 263487] [client 105.112.178.79:38372] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.finan.cloud"] [uri "/.env"] [unique_id "ary1K5EcZ_148BjP8ZPVCgAAAWg"]
[Wed Sep 30 01:07:23.416401 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.416670 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.433584 2026] [security2:error] [pid 263262:tid 263421] [client 20.213.164.196:32644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/albin.php"] [unique_id "ary1K5EcZ_148BjP8ZPVEAAAASY"]
[Wed Sep 30 01:07:23.437419 2026] [security2:error] [pid 263262:tid 263435] [client 84.17.60.236:35102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "savagedesignco.com"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVDwAAATQ"]
[Wed Sep 30 01:07:23.455706 2026] [security2:error] [pid 263262:tid 263520] [client 20.5.79.49:64029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/403.php"] [unique_id "ary1K5EcZ_148BjP8ZPVEQAAAYk"]
[Wed Sep 30 01:07:23.509578 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.509845 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.525378 2026] [security2:error] [pid 263262:tid 263511] [client 20.28.180.172:62364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/admin-ajax.php"] [unique_id "ary1K5EcZ_148BjP8ZPVFgAAAYA"]
[Wed Sep 30 01:07:23.596717 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.596984 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:41730] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.677559 2026] [security2:error] [pid 263262:tid 263447] [client 103.159.192.142:63018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVIwAAAUA"]
[Wed Sep 30 01:07:23.677687 2026] [security2:error] [pid 263262:tid 263447] [client 103.159.192.142:63018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVIwAAAUA"]
[Wed Sep 30 01:07:23.689912 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.690194 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.772040 2026] [security2:error] [pid 263262:tid 263444] [client 20.5.79.49:64063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-class.php"] [unique_id "ary1K5EcZ_148BjP8ZPVLAAAAT0"]
[Wed Sep 30 01:07:23.781047 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.781335 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.781936 2026] [security2:error] [pid 263262:tid 263500] [client 188.241.128.96:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1K5EcZ_148BjP8ZPVLgAAAXU"]
[Wed Sep 30 01:07:23.839264 2026] [security2:error] [pid 263262:tid 263497] [client 20.213.164.196:47550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/atkno.php"] [unique_id "ary1K5EcZ_148BjP8ZPVMgAAAXI"]
[Wed Sep 30 01:07:23.844838 2026] [security2:error] [pid 263262:tid 263494] [client 37.41.16.35:65420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVNAAAAW8"]
[Wed Sep 30 01:07:23.845018 2026] [security2:error] [pid 263262:tid 263494] [client 37.41.16.35:65420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVNAAAAW8"]
[Wed Sep 30 01:07:23.884020 2026] [access_compat:error] [pid 263262:tid 263400] [client 47.82.11.53:59962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:23.884277 2026] [access_compat:error] [pid 263262:tid 263400] [client 47.82.11.53:59962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:23.894169 2026] [security2:error] [pid 263262:tid 263481] [client 116.197.133.25:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVNgAAAWI"]
[Wed Sep 30 01:07:23.894281 2026] [security2:error] [pid 263262:tid 263481] [client 116.197.133.25:61676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1K5EcZ_148BjP8ZPVNgAAAWI"]
[Wed Sep 30 01:07:23.925092 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.925532 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:23.963799 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:23.964203 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.011928 2026] [security2:error] [pid 263262:tid 263454] [client 216.73.216.46:41730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1LJEcZ_148BjP8ZPVPwAAAUc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTcvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTYy
[Wed Sep 30 01:07:24.054561 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.054840 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.073057 2026] [security2:error] [pid 263262:tid 263475] [client 31.189.214.146:53647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1LJEcZ_148BjP8ZPVQwAAAVw"]
[Wed Sep 30 01:07:24.073236 2026] [security2:error] [pid 263262:tid 263475] [client 31.189.214.146:53647] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1LJEcZ_148BjP8ZPVQwAAAVw"]
[Wed Sep 30 01:07:24.122737 2026] [security2:error] [pid 263262:tid 263419] [client 20.5.79.49:25851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/alfa-rex.php7"] [unique_id "ary1LJEcZ_148BjP8ZPVSAAAASQ"]
[Wed Sep 30 01:07:24.146682 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.146992 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.207031 2026] [security2:error] [pid 263262:tid 263490] [client 20.28.180.172:29626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wp-trackback.php"] [unique_id "ary1LJEcZ_148BjP8ZPVTgAAAWs"]
[Wed Sep 30 01:07:24.237077 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.237339 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.327792 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.328070 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.352461 2026] [security2:error] [pid 263262:tid 263509] [client 84.17.60.236:35118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1LJEcZ_148BjP8ZPVWgAAAX4"]
[Wed Sep 30 01:07:24.388412 2026] [security2:error] [pid 263262:tid 263466] [client 20.194.5.96:18881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1LJEcZ_148BjP8ZPVXQAAAVM"]
[Wed Sep 30 01:07:24.418107 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.418373 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.489389 2026] [security2:error] [pid 263262:tid 263467] [client 20.5.79.49:25840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "ary1LJEcZ_148BjP8ZPVbAAAAVQ"]
[Wed Sep 30 01:07:24.491234 2026] [security2:error] [pid 263262:tid 263465] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1LJEcZ_148BjP8ZPVawAAAVI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:24.508558 2026] [security2:error] [pid 263262:tid 263489] [client 43.130.242.39:55442] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/olux.php"] [unique_id "ary1LJEcZ_148BjP8ZPVbwAAAWo"]
[Wed Sep 30 01:07:24.513864 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.514127 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.587045 2026] [security2:error] [pid 263262:tid 263459] [client 20.214.109.68:9879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-links-opml.php"] [unique_id "ary1LJEcZ_148BjP8ZPVcgAAAUw"]
[Wed Sep 30 01:07:24.587082 2026] [security2:error] [pid 263262:tid 263440] [client 20.28.180.172:18172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/amthd.php"] [unique_id "ary1LJEcZ_148BjP8ZPVcwAAATk"]
[Wed Sep 30 01:07:24.602424 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.602740 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.631386 2026] [security2:error] [pid 263262:tid 263445] [client 182.75.216.230:56691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1LJEcZ_148BjP8ZPVdwAAAT4"]
[Wed Sep 30 01:07:24.631552 2026] [security2:error] [pid 263262:tid 263445] [client 182.75.216.230:56691] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1LJEcZ_148BjP8ZPVdwAAAT4"]
[Wed Sep 30 01:07:24.660202 2026] [security2:error] [pid 263262:tid 263476] [client 20.213.164.196:32681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/gptsh.php"] [unique_id "ary1LJEcZ_148BjP8ZPVeQAAAV0"]
[Wed Sep 30 01:07:24.673850 2026] [security2:error] [pid 263262:tid 263461] [client 84.17.60.236:35120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1LJEcZ_148BjP8ZPVfAAAAU4"]
[Wed Sep 30 01:07:24.690485 2026] [security2:error] [pid 263262:tid 263498] [client 20.219.2.60:11388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/cpp2.php"] [unique_id "ary1LJEcZ_148BjP8ZPVfgAAAXM"]
[Wed Sep 30 01:07:24.692551 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.692844 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.736220 2026] [security2:error] [pid 263262:tid 263429] [client 43.130.242.39:55461] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/indoxploit.php"] [unique_id "ary1LJEcZ_148BjP8ZPVgQAAAS4"]
[Wed Sep 30 01:07:24.786085 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.786527 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.868636 2026] [security2:error] [pid 263262:tid 263464] [client 20.5.79.49:26442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "ary1LJEcZ_148BjP8ZPVjQAAAVE"]
[Wed Sep 30 01:07:24.874695 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.875002 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.933963 2026] [security2:error] [pid 263262:tid 263455] [client 168.100.149.116:34782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1LJEcZ_148BjP8ZPVZQABSFI"]
[Wed Sep 30 01:07:24.963222 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:24.963494 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:24.972380 2026] [security2:error] [pid 263262:tid 263469] [client 43.130.242.39:55472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/indoxploit.php"] [unique_id "ary1LJEcZ_148BjP8ZPVkwAAAVY"]
[Wed Sep 30 01:07:24.998900 2026] [security2:error] [pid 263262:tid 263505] [client 84.17.60.236:35134] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1LJEcZ_148BjP8ZPVlgAAAXo"]
[Wed Sep 30 01:07:25.025865 2026] [security2:error] [pid 263262:tid 263485] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1LZEcZ_148BjP8ZPVmAAAAWY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:25.054774 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.055049 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.083317 2026] [security2:error] [pid 263262:tid 263361] [remote 47.128.124.22:38126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "frederickmodelaircraftclub.org"] [uri "/robots.txt"] [unique_id "ary1LZEcZ_148BjP8ZPVmwABhGE"]
[Wed Sep 30 01:07:25.122743 2026] [security2:error] [pid 263262:tid 263428] [client 20.194.5.96:18905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/zoo2.php"] [unique_id "ary1LZEcZ_148BjP8ZPVnAAAAS0"]
[Wed Sep 30 01:07:25.147911 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.148223 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.192369 2026] [security2:error] [pid 263262:tid 263473] [client 181.42.134.154:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1LZEcZ_148BjP8ZPVpAAAAVo"]
[Wed Sep 30 01:07:25.218769 2026] [security2:error] [pid 263262:tid 263512] [client 43.130.242.39:55486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/wso.php"] [unique_id "ary1LZEcZ_148BjP8ZPVpgAAAYE"]
[Wed Sep 30 01:07:25.221614 2026] [security2:error] [pid 263262:tid 263461] [client 20.5.79.49:62375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/a4.php"] [unique_id "ary1LZEcZ_148BjP8ZPVpwAAAU4"]
[Wed Sep 30 01:07:25.237008 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.237261 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.259697 2026] [security2:error] [pid 263262:tid 263405] [client 20.28.180.172:29583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/pep.php"] [unique_id "ary1LZEcZ_148BjP8ZPVqgAAARY"]
[Wed Sep 30 01:07:25.326342 2026] [security2:error] [pid 263262:tid 263403] [client 84.17.60.236:35150] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1LZEcZ_148BjP8ZPVsAAAARQ"]
[Wed Sep 30 01:07:25.329261 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.329528 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.374856 2026] [security2:error] [pid 263262:tid 263510] [client 20.213.164.196:47534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/rithin.php"] [unique_id "ary1LZEcZ_148BjP8ZPVsQAAAX8"]
[Wed Sep 30 01:07:25.390404 2026] [security2:error] [pid 263262:tid 263423] [client 20.194.30.107:9985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/key.php"] [unique_id "ary1LZEcZ_148BjP8ZPVsgAAASg"]
[Wed Sep 30 01:07:25.402306 2026] [security2:error] [pid 263262:tid 263396] [client 20.194.30.107:49177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary1LZEcZ_148BjP8ZPVswAAAQ0"]
[Wed Sep 30 01:07:25.451659 2026] [security2:error] [pid 263262:tid 263504] [client 43.130.242.39:55501] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/images/"] [unique_id "ary1LZEcZ_148BjP8ZPVtwAAAXk"]
[Wed Sep 30 01:07:25.455939 2026] [security2:error] [pid 263262:tid 263490] [client 3.149.74.188:35280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.74.149.3.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-login.php"] [unique_id "ary1LZEcZ_148BjP8ZPVtQAAAWs"]
[Wed Sep 30 01:07:25.532192 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.532446 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.579770 2026] [security2:error] [pid 263262:tid 263443] [client 20.5.79.49:64016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary1LZEcZ_148BjP8ZPVugAAATw"]
[Wed Sep 30 01:07:25.624454 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.624728 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.644753 2026] [security2:error] [pid 263262:tid 263516] [client 84.17.60.236:35164] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1LZEcZ_148BjP8ZPVvwAAAYU"]
[Wed Sep 30 01:07:25.694937 2026] [security2:error] [pid 263262:tid 263469] [client 20.213.164.196:47528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/il.php"] [unique_id "ary1LZEcZ_148BjP8ZPVxAAAAVY"]
[Wed Sep 30 01:07:25.707427 2026] [security2:error] [pid 263262:tid 263472] [client 43.130.242.39:55515] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/uploads/"] [unique_id "ary1LZEcZ_148BjP8ZPVxwAAAVk"]
[Wed Sep 30 01:07:25.712896 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.713141 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.805271 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.805548 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:60807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:25.853137 2026] [access_compat:error] [pid 263262:tid 263416] [client 47.79.13.28:60784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:25.853583 2026] [access_compat:error] [pid 263262:tid 263416] [client 47.79.13.28:60784] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:25.890070 2026] [security2:error] [pid 263262:tid 263483] [client 216.73.216.46:60807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1LZEcZ_148BjP8ZPV1AAAAWQ"]
[Wed Sep 30 01:07:25.956462 2026] [security2:error] [pid 263262:tid 263426] [client 43.130.242.39:55528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/img/"] [unique_id "ary1LZEcZ_148BjP8ZPV1gAAASs"]
[Wed Sep 30 01:07:25.967415 2026] [security2:error] [pid 263262:tid 263474] [client 84.17.60.236:35166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1LZEcZ_148BjP8ZPV1wAAAVs"]
[Wed Sep 30 01:07:25.967774 2026] [security2:error] [pid 263262:tid 263501] [client 20.5.79.49:62369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/3.php"] [unique_id "ary1LZEcZ_148BjP8ZPV2AAAAXY"]
[Wed Sep 30 01:07:25.974291 2026] [security2:error] [pid 263262:tid 263512] [client 20.28.180.172:18351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/8xyz.php"] [unique_id "ary1LZEcZ_148BjP8ZPV2QAAAYE"]
[Wed Sep 30 01:07:25.988429 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:25.988718 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.090881 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.091316 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:22196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.108682 2026] [security2:error] [pid 263262:tid 263429] [client 20.70.173.30:56480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/admin.php"] [unique_id "ary1LpEcZ_148BjP8ZPV6AAAAS4"]
[Wed Sep 30 01:07:26.133220 2026] [security2:error] [pid 263262:tid 263471] [client 20.219.2.60:18866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/install.php"] [unique_id "ary1LpEcZ_148BjP8ZPV6gAAAVg"]
[Wed Sep 30 01:07:26.175572 2026] [security2:error] [pid 263262:tid 263490] [client 216.73.216.46:22196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1LpEcZ_148BjP8ZPV7AAAAWs"]
[Wed Sep 30 01:07:26.187454 2026] [security2:error] [pid 263262:tid 263456] [client 43.130.242.39:55544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/upload/"] [unique_id "ary1LpEcZ_148BjP8ZPV8AAAAUk"]
[Wed Sep 30 01:07:26.202049 2026] [security2:error] [pid 263262:tid 263503] [client 193.163.74.171:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary1LpEcZ_148BjP8ZPV8QAAAXg"]
[Wed Sep 30 01:07:26.207525 2026] [security2:error] [pid 263262:tid 263315] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1LpEcZ_148BjP8ZPV8gABiDM"], referer: https://torquayfans.com/viewtopic.php?p=47149
[Wed Sep 30 01:07:26.207574 2026] [security2:error] [pid 263262:tid 263315] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1LpEcZ_148BjP8ZPV8gABiDM"], referer: https://torquayfans.com/viewtopic.php?p=47149
[Wed Sep 30 01:07:26.235920 2026] [autoindex:error] [pid 263262:tid 263399] [client 43.130.34.74:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/zekri-international/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:26.261395 2026] [security2:error] [pid 263262:tid 263497] [client 20.213.164.196:47089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/1klopedf.php"] [unique_id "ary1LpEcZ_148BjP8ZPV-AAAAXI"]
[Wed Sep 30 01:07:26.290195 2026] [security2:error] [pid 263262:tid 263514] [client 84.17.60.236:35178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1LpEcZ_148BjP8ZPV-wAAAYM"]
[Wed Sep 30 01:07:26.314020 2026] [security2:error] [pid 263262:tid 263388] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1LpEcZ_148BjP8ZPV_AABQnw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297752&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:26.314051 2026] [security2:error] [pid 263262:tid 263388] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1LpEcZ_148BjP8ZPV_AABQnw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297752&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:26.318858 2026] [security2:error] [pid 263262:tid 263472] [client 216.73.216.46:17484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1LpEcZ_148BjP8ZPV_QAAAVk"]
[Wed Sep 30 01:07:26.377062 2026] [security2:error] [pid 263262:tid 263441] [client 20.214.109.68:9912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-class-api.php"] [unique_id "ary1LpEcZ_148BjP8ZPV_wAAATo"]
[Wed Sep 30 01:07:26.379106 2026] [security2:error] [pid 263262:tid 263436] [client 20.5.79.49:26449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/Text/network.php"] [unique_id "ary1LpEcZ_148BjP8ZPWAAAAATU"]
[Wed Sep 30 01:07:26.395349 2026] [security2:error] [pid 263262:tid 263489] [client 4.240.25.22:12463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/c.php"] [unique_id "ary1LpEcZ_148BjP8ZPWAgAAAWo"]
[Wed Sep 30 01:07:26.401602 2026] [security2:error] [pid 263262:tid 263430] [client 208.109.33.255:34422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 255.33.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taracom.net"] [uri "/wp-login.php"] [unique_id "ary1LpEcZ_148BjP8ZPWAQAAAS8"]
[Wed Sep 30 01:07:26.416074 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.416368 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.419291 2026] [security2:error] [pid 263262:tid 263397] [client 43.130.242.39:55562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/gallery/"] [unique_id "ary1LpEcZ_148BjP8ZPWBAAAAQ4"]
[Wed Sep 30 01:07:26.451468 2026] [security2:error] [pid 263262:tid 263459] [client 122.173.27.10:11730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1LpEcZ_148BjP8ZPWBwAAAUw"]
[Wed Sep 30 01:07:26.451611 2026] [security2:error] [pid 263262:tid 263459] [client 122.173.27.10:11730] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1LpEcZ_148BjP8ZPWBwAAAUw"]
[Wed Sep 30 01:07:26.501339 2026] [security2:error] [pid 263262:tid 263416] [client 216.73.216.46:38110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1LpEcZ_148BjP8ZPWCgAAASE"]
[Wed Sep 30 01:07:26.540062 2026] [security2:error] [pid 263262:tid 263476] [remote 168.100.149.38:30744] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1LpEcZ_148BjP8ZPWBgABNms"]
[Wed Sep 30 01:07:26.604296 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.604564 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.622312 2026] [security2:error] [pid 263262:tid 263439] [client 84.17.60.236:35192] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1LpEcZ_148BjP8ZPWEQAAATg"]
[Wed Sep 30 01:07:26.638030 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.638326 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.643975 2026] [security2:error] [pid 263262:tid 263503] [client 20.70.173.30:33385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1LpEcZ_148BjP8ZPWFAAAAXg"]
[Wed Sep 30 01:07:26.652681 2026] [security2:error] [pid 263262:tid 263404] [client 20.194.5.96:19125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/zoo1.php"] [unique_id "ary1LpEcZ_148BjP8ZPWFgAAARU"]
[Wed Sep 30 01:07:26.663616 2026] [security2:error] [pid 263262:tid 263470] [client 43.130.242.39:55576] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/files/"] [unique_id "ary1LpEcZ_148BjP8ZPWGAAAAVc"]
[Wed Sep 30 01:07:26.681538 2026] [security2:error] [pid 263262:tid 263479] [client 20.213.164.196:32665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/zv.php"] [unique_id "ary1LpEcZ_148BjP8ZPWHwAAAWA"]
[Wed Sep 30 01:07:26.696068 2026] [security2:error] [pid 263262:tid 263441] [client 20.5.79.49:64028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary1LpEcZ_148BjP8ZPWIAAAATo"]
[Wed Sep 30 01:07:26.700128 2026] [security2:error] [pid 263262:tid 263413] [client 20.70.173.30:2971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/cdc.php"] [unique_id "ary1LpEcZ_148BjP8ZPWIQAAAR4"]
[Wed Sep 30 01:07:26.717241 2026] [security2:error] [pid 263262:tid 263446] [client 20.28.180.172:29476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/bhigtouj.php"] [unique_id "ary1LpEcZ_148BjP8ZPWJAAAAT8"]
[Wed Sep 30 01:07:26.728647 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.728954 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.812109 2026] [security2:error] [pid 263262:tid 263464] [client 154.17.132.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary1LpEcZ_148BjP8ZPWKwAAAVE"]
[Wed Sep 30 01:07:26.875024 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:26.875450 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:26.896002 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.78:53128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:26.896284 2026] [access_compat:error] [pid 263262:tid 263491] [client 47.79.13.78:53128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:26.909241 2026] [security2:error] [pid 263262:tid 263449] [client 43.130.242.39:55593] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/pdf/"] [unique_id "ary1LpEcZ_148BjP8ZPWMgAAAUI"]
[Wed Sep 30 01:07:26.942940 2026] [security2:error] [pid 263262:tid 263444] [client 84.17.60.236:35208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1LpEcZ_148BjP8ZPWMwAAAT0"]
[Wed Sep 30 01:07:26.956289 2026] [security2:error] [pid 263262:tid 263460] [client 216.73.216.46:7092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1LpEcZ_148BjP8ZPWNAAAAU0"]
[Wed Sep 30 01:07:26.968206 2026] [security2:error] [pid 263262:tid 263465] [client 20.194.30.107:17473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/dex.php"] [unique_id "ary1LpEcZ_148BjP8ZPWNQAAAVI"]
[Wed Sep 30 01:07:27.003736 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.004170 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.019613 2026] [security2:error] [pid 263262:tid 263430] [client 20.5.79.49:64061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wplogbak.php"] [unique_id "ary1L5EcZ_148BjP8ZPWOgAAAS8"]
[Wed Sep 30 01:07:27.045914 2026] [security2:error] [pid 263262:tid 263508] [client 152.59.165.7:50242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWOwAAAX0"]
[Wed Sep 30 01:07:27.046076 2026] [security2:error] [pid 263262:tid 263508] [client 152.59.165.7:50242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWOwAAAX0"]
[Wed Sep 30 01:07:27.133899 2026] [security2:error] [pid 263262:tid 263422] [client 20.213.164.196:47517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/zv.update.php"] [unique_id "ary1L5EcZ_148BjP8ZPWQAAAASc"]
[Wed Sep 30 01:07:27.143406 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:41092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.143722 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:41092] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.151674 2026] [security2:error] [pid 263262:tid 263500] [client 43.130.242.39:55611] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/docs/"] [unique_id "ary1L5EcZ_148BjP8ZPWQgAAAXU"]
[Wed Sep 30 01:07:27.156713 2026] [security2:error] [pid 263262:tid 263415] [client 20.28.180.172:60342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/mini.php"] [unique_id "ary1L5EcZ_148BjP8ZPWQwAAASA"]
[Wed Sep 30 01:07:27.160555 2026] [security2:error] [pid 263262:tid 263396] [client 201.32.215.149:7301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWRAAAAQ0"]
[Wed Sep 30 01:07:27.160693 2026] [security2:error] [pid 263262:tid 263396] [client 201.32.215.149:7301] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWRAAAAQ0"]
[Wed Sep 30 01:07:27.182952 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.183226 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:52908] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.267290 2026] [security2:error] [pid 263262:tid 263475] [client 84.17.60.236:35224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1L5EcZ_148BjP8ZPWSwAAAVw"]
[Wed Sep 30 01:07:27.267360 2026] [security2:error] [pid 263262:tid 263512] [client 216.73.216.46:52908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1L5EcZ_148BjP8ZPWSgAAAYE"]
[Wed Sep 30 01:07:27.313008 2026] [security2:error] [pid 263262:tid 263502] [client 20.194.30.107:10174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/BDKR28WP.php"] [unique_id "ary1L5EcZ_148BjP8ZPWTgAAAXc"]
[Wed Sep 30 01:07:27.365247 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.365640 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.380158 2026] [security2:error] [pid 263262:tid 263403] [client 20.5.79.49:26489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/images/sallu.php"] [unique_id "ary1L5EcZ_148BjP8ZPWUQAAARQ"]
[Wed Sep 30 01:07:27.380402 2026] [security2:error] [pid 263262:tid 263427] [client 203.122.45.246:61644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWUgAAASw"]
[Wed Sep 30 01:07:27.380496 2026] [security2:error] [pid 263262:tid 263427] [client 203.122.45.246:61644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWUgAAASw"]
[Wed Sep 30 01:07:27.387565 2026] [security2:error] [pid 263262:tid 263419] [client 43.130.242.39:55632] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/"] [unique_id "ary1L5EcZ_148BjP8ZPWUwAAASQ"]
[Wed Sep 30 01:07:27.454418 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.454689 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.479083 2026] [security2:error] [pid 263262:tid 263472] [client 223.235.102.107:11683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWWQAAAVk"]
[Wed Sep 30 01:07:27.479188 2026] [security2:error] [pid 263262:tid 263472] [client 223.235.102.107:11683] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWWQAAAVk"]
[Wed Sep 30 01:07:27.541744 2026] [security2:error] [pid 263262:tid 263470] [client 45.235.236.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary1L5EcZ_148BjP8ZPWXQAAAVc"]
[Wed Sep 30 01:07:27.545617 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.545886 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.604351 2026] [security2:error] [pid 263262:tid 263514] [client 84.17.60.236:35230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1L5EcZ_148BjP8ZPWZgAAAYM"]
[Wed Sep 30 01:07:27.634058 2026] [security2:error] [pid 263262:tid 263460] [client 20.214.109.68:9467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-class-atom.php"] [unique_id "ary1L5EcZ_148BjP8ZPWagAAAU0"]
[Wed Sep 30 01:07:27.636000 2026] [security2:error] [pid 263262:tid 263507] [client 43.130.242.39:55649] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/up.php"] [unique_id "ary1L5EcZ_148BjP8ZPWbAAAAXw"]
[Wed Sep 30 01:07:27.640107 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.640419 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.690167 2026] [security2:error] [pid 263262:tid 263404] [client 20.194.5.96:19111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/class-ajax.php"] [unique_id "ary1L5EcZ_148BjP8ZPWbgAAARU"]
[Wed Sep 30 01:07:27.729643 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.729927 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.746187 2026] [security2:error] [pid 263262:tid 263416] [client 20.213.164.196:47091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wquosqsi.php"] [unique_id "ary1L5EcZ_148BjP8ZPWcgAAASE"]
[Wed Sep 30 01:07:27.782621 2026] [security2:error] [pid 263262:tid 263515] [client 20.219.2.60:11701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/admlo.php"] [unique_id "ary1L5EcZ_148BjP8ZPWcwAAAYQ"]
[Wed Sep 30 01:07:27.806328 2026] [security2:error] [pid 263262:tid 263396] [client 20.5.79.49:25850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/.well-known/save.php"] [unique_id "ary1L5EcZ_148BjP8ZPWdgAAAQ0"]
[Wed Sep 30 01:07:27.806844 2026] [access_compat:error] [pid 263262:tid 263519] [client 47.79.13.234:58482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:27.807138 2026] [access_compat:error] [pid 263262:tid 263519] [client 47.79.13.234:58482] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:27.816669 2026] [security2:error] [pid 263262:tid 263393] [client 202.179.95.79:51740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWeAAAAQo"]
[Wed Sep 30 01:07:27.817175 2026] [security2:error] [pid 263262:tid 263393] [client 202.179.95.79:51740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1L5EcZ_148BjP8ZPWeAAAAQo"]
[Wed Sep 30 01:07:27.818826 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.819081 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.894639 2026] [security2:error] [pid 263262:tid 263469] [client 43.130.242.39:55668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/upload.php"] [unique_id "ary1L5EcZ_148BjP8ZPWeQAAAVY"]
[Wed Sep 30 01:07:27.909271 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:27.909520 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:27.927267 2026] [security2:error] [pid 263262:tid 263501] [client 84.17.60.236:35242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1L5EcZ_148BjP8ZPWfwAAAXY"]
[Wed Sep 30 01:07:28.001501 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.001764 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.032365 2026] [security2:error] [pid 263262:tid 263417] [client 20.28.180.172:34267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/simple.php"] [unique_id "ary1MJEcZ_148BjP8ZPWhAAAASI"]
[Wed Sep 30 01:07:28.092703 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.093010 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.131353 2026] [security2:error] [pid 263262:tid 263424] [client 43.130.242.39:55691] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "173.254.4.161"] [uri "/shell.php"] [unique_id "ary1MJEcZ_148BjP8ZPWjAAAASk"]
[Wed Sep 30 01:07:28.133417 2026] [security2:error] [pid 263262:tid 263503] [client 20.5.79.49:62394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/re.php"] [unique_id "ary1MJEcZ_148BjP8ZPWjQAAAXg"]
[Wed Sep 30 01:07:28.149359 2026] [http2:warn] [pid 212454:tid 212674] [client 52.167.144.211:58556] h2_stream(212454-1522-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:28.176949 2026] [security2:error] [pid 263262:tid 263509] [client 103.159.192.142:63499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1MJEcZ_148BjP8ZPWlAAAAX4"]
[Wed Sep 30 01:07:28.177081 2026] [security2:error] [pid 263262:tid 263509] [client 103.159.192.142:63499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1MJEcZ_148BjP8ZPWlAAAAX4"]
[Wed Sep 30 01:07:28.177182 2026] [security2:error] [pid 263262:tid 263439] [client 216.73.216.46:41092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1MJEcZ_148BjP8ZPWkwAAATg"]
[Wed Sep 30 01:07:28.197321 2026] [security2:error] [pid 263262:tid 263399] [client 20.70.173.30:63107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-login.php"] [unique_id "ary1MJEcZ_148BjP8ZPWlQAAARA"]
[Wed Sep 30 01:07:28.261191 2026] [security2:error] [pid 263262:tid 263407] [client 84.17.60.236:37818] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1MJEcZ_148BjP8ZPWlwAAARg"]
[Wed Sep 30 01:07:28.303686 2026] [security2:error] [pid 263262:tid 263494] [client 20.28.180.172:18325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws68.php"] [unique_id "ary1MJEcZ_148BjP8ZPWmAAAAW8"]
[Wed Sep 30 01:07:28.316829 2026] [ssl:error] [pid 263262:tid 263466] [client 216.25.124.24:62383] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpcalendars.ywg.fxb.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:07:28.319226 2026] [security2:error] [pid 263262:tid 263505] [client 20.213.164.196:47494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/asset.php"] [unique_id "ary1MJEcZ_148BjP8ZPWmwAAAXo"]
[Wed Sep 30 01:07:28.325588 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.325847 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.402097 2026] [security2:error] [pid 263262:tid 263489] [client 74.7.242.1:48532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1MJEcZ_148BjP8ZPWowAAAWo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:07:28.414484 2026] [access_compat:error] [pid 263262:tid 263458] [client 47.79.13.53:36946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:28.414912 2026] [access_compat:error] [pid 263262:tid 263458] [client 47.79.13.53:36946] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:28.417174 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.417433 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.502129 2026] [security2:error] [pid 263262:tid 263495] [client 20.5.79.49:62370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary1MJEcZ_148BjP8ZPWqAAAAXA"]
[Wed Sep 30 01:07:28.510880 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.511130 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.548490 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.548779 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.591572 2026] [security2:error] [pid 263262:tid 263394] [remote 168.100.149.138:43116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1MJEcZ_148BjP8ZPWpwABZx4"]
[Wed Sep 30 01:07:28.599213 2026] [security2:error] [pid 263262:tid 263484] [client 84.17.60.236:37826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1MJEcZ_148BjP8ZPWrQAAAWU"]
[Wed Sep 30 01:07:28.619749 2026] [security2:error] [pid 263262:tid 263395] [client 45.138.12.32:41312] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pgy.mly.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1MJEcZ_148BjP8ZPWrwAAAQw"]
[Wed Sep 30 01:07:28.642139 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.642580 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.714642 2026] [security2:error] [pid 263262:tid 263480] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1MJEcZ_148BjP8ZPWuQAAAWE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:28.716874 2026] [security2:error] [pid 263262:tid 263514] [client 116.193.128.26:62490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1MJEcZ_148BjP8ZPWugAAAYM"]
[Wed Sep 30 01:07:28.717018 2026] [security2:error] [pid 263262:tid 263514] [client 116.193.128.26:62490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1MJEcZ_148BjP8ZPWugAAAYM"]
[Wed Sep 30 01:07:28.730334 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.730604 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.805630 2026] [security2:error] [pid 263262:tid 263423] [client 20.194.5.96:18914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/gm.php"] [unique_id "ary1MJEcZ_148BjP8ZPWvgAAASg"]
[Wed Sep 30 01:07:28.821075 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.821333 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.844719 2026] [security2:error] [pid 263262:tid 263503] [client 104.208.65.139:34854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/uploaxa1.php"] [unique_id "ary1MJEcZ_148BjP8ZPWwAAAAXg"]
[Wed Sep 30 01:07:28.853943 2026] [security2:error] [pid 263262:tid 263490] [client 20.5.79.49:38491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/img/5/radio.php"] [unique_id "ary1MJEcZ_148BjP8ZPWwQAAAWs"]
[Wed Sep 30 01:07:28.911838 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:28.912115 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:28.917198 2026] [security2:error] [pid 263262:tid 263470] [client 84.17.60.236:37840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "savagedesignco.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1MJEcZ_148BjP8ZPWxQAAAVc"]
[Wed Sep 30 01:07:29.001827 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.002100 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.053679 2026] [security2:error] [pid 263262:tid 263493] [client 20.213.164.196:47044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/cued.php"] [unique_id "ary1MZEcZ_148BjP8ZPWywAAAW4"]
[Wed Sep 30 01:07:29.095584 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.095885 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.113317 2026] [core:error] [pid 263262:tid 263393] [client 45.138.12.40:4134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:29.113337 2026] [core:error] [pid 263262:tid 263393] [client 45.138.12.40:4134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:29.185362 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.185624 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.241157 2026] [security2:error] [pid 263262:tid 263422] [client 20.5.79.49:37699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/item.php"] [unique_id "ary1MZEcZ_148BjP8ZPW3wAAASc"]
[Wed Sep 30 01:07:29.265202 2026] [security2:error] [pid 263262:tid 263413] [client 127.0.0.1:53946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary1MZEcZ_148BjP8ZPW2wAAAR4"]
[Wed Sep 30 01:07:29.265469 2026] [security2:error] [pid 263262:tid 263441] [client 74.7.175.132:57108] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.tyv.rvy.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1MZEcZ_148BjP8ZPW2gABOh0"]
[Wed Sep 30 01:07:29.276516 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.276781 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.310304 2026] [security2:error] [pid 263262:tid 263408] [client 20.28.180.172:34250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/29.php"] [unique_id "ary1MZEcZ_148BjP8ZPW4QAAARk"]
[Wed Sep 30 01:07:29.366180 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.366448 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.391434 2026] [security2:error] [pid 263262:tid 263508] [client 20.219.2.60:19395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/public/wp-blog.php"] [unique_id "ary1MZEcZ_148BjP8ZPW5wAAAX0"]
[Wed Sep 30 01:07:29.459014 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.459297 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.550774 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.551071 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.555479 2026] [security2:error] [pid 263262:tid 263478] [client 185.150.94.9:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary1MZEcZ_148BjP8ZPW7gAAAV8"]
[Wed Sep 30 01:07:29.633471 2026] [security2:error] [pid 263262:tid 263480] [client 20.5.79.49:26466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/public/fm.php"] [unique_id "ary1MZEcZ_148BjP8ZPW9QAAAWE"]
[Wed Sep 30 01:07:29.640687 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.640986 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.666366 2026] [security2:error] [pid 263262:tid 263310] [remote 57.141.14.113:39458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 113.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/comments/feed/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/comments/feed/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "ary1MZEcZ_148BjP8ZPW8QABaC4"]
[Wed Sep 30 01:07:29.731247 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.731528 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.734952 2026] [security2:error] [pid 263262:tid 263424] [client 20.213.164.196:32702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/sd.php"] [unique_id "ary1MZEcZ_148BjP8ZPW_AAAASk"]
[Wed Sep 30 01:07:29.798369 2026] [security2:error] [pid 263262:tid 263415] [client 43.227.131.37:62264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1MZEcZ_148BjP8ZPXAAAAASA"]
[Wed Sep 30 01:07:29.798534 2026] [security2:error] [pid 263262:tid 263415] [client 43.227.131.37:62264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1MZEcZ_148BjP8ZPXAAAAASA"]
[Wed Sep 30 01:07:29.822977 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.823254 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.913589 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:29.913874 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:29.923944 2026] [security2:error] [pid 263262:tid 263393] [client 20.214.109.68:61141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-block.php"] [unique_id "ary1MZEcZ_148BjP8ZPXBwAAAQo"]
[Wed Sep 30 01:07:29.958845 2026] [security2:error] [pid 263262:tid 263397] [client 20.5.79.49:64045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/vee.php"] [unique_id "ary1MZEcZ_148BjP8ZPXCQAAAQ4"]
[Wed Sep 30 01:07:29.991772 2026] [security2:error] [pid 263262:tid 263429] [client 20.194.30.107:10023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/dehnl.php"] [unique_id "ary1MZEcZ_148BjP8ZPXCgAAAS4"]
[Wed Sep 30 01:07:30.005087 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.005375 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.095750 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.096060 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.116205 2026] [security2:error] [pid 263262:tid 263401] [client 20.194.5.96:19117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1MpEcZ_148BjP8ZPXEQAAARI"]
[Wed Sep 30 01:07:30.162472 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1MpEcZ_148BjP8ZPXEwABPEU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D52658
[Wed Sep 30 01:07:30.162499 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1MpEcZ_148BjP8ZPXEwABPEU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D52658
[Wed Sep 30 01:07:30.168588 2026] [security2:error] [pid 263262:tid 263469] [client 223.181.30.165:20312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXFAAAAVY"]
[Wed Sep 30 01:07:30.168705 2026] [security2:error] [pid 263262:tid 263469] [client 223.181.30.165:20312] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXFAAAAVY"]
[Wed Sep 30 01:07:30.187186 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.187430 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.212029 2026] [security2:error] [pid 263262:tid 263441] [client 20.70.173.30:33350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/xiugai.php"] [unique_id "ary1MpEcZ_148BjP8ZPXGgAAATo"]
[Wed Sep 30 01:07:30.277765 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.278085 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.293847 2026] [security2:error] [pid 263262:tid 263404] [client 20.28.180.172:29580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/olvxz.php"] [unique_id "ary1MpEcZ_148BjP8ZPXIgAAARU"]
[Wed Sep 30 01:07:30.304241 2026] [security2:error] [pid 263262:tid 263427] [client 106.214.2.47:13447] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXIwAAASw"]
[Wed Sep 30 01:07:30.310701 2026] [security2:error] [pid 263262:tid 263427] [client 106.214.2.47:13447] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXIwAAASw"]
[Wed Sep 30 01:07:30.345964 2026] [security2:error] [pid 263262:tid 263396] [client 20.5.79.49:62363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ary1MpEcZ_148BjP8ZPXJQAAAQ0"]
[Wed Sep 30 01:07:30.346017 2026] [security2:error] [pid 263262:tid 263432] [client 182.69.182.151:13430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXJgAAATE"]
[Wed Sep 30 01:07:30.346085 2026] [security2:error] [pid 263262:tid 263432] [client 182.69.182.151:13430] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXJgAAATE"]
[Wed Sep 30 01:07:30.347000 2026] [security2:error] [pid 263262:tid 263447] [client 20.213.164.196:32643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/ans.php"] [unique_id "ary1MpEcZ_148BjP8ZPXJwAAAUA"]
[Wed Sep 30 01:07:30.368014 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.368289 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:59127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.379958 2026] [security2:error] [pid 263262:tid 263478] [client 20.28.180.172:60340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/xxx.php"] [unique_id "ary1MpEcZ_148BjP8ZPXLQAAAV8"]
[Wed Sep 30 01:07:30.394249 2026] [authz_core:error] [pid 263262:tid 263500] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/PHPMailer/error_log, referer: binance.com
[Wed Sep 30 01:07:30.431322 2026] [security2:error] [pid 263262:tid 263319] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1MpEcZ_148BjP8ZPXLgABJTc"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D58313
[Wed Sep 30 01:07:30.451884 2026] [security2:error] [pid 263262:tid 263487] [client 216.73.216.46:59127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1MpEcZ_148BjP8ZPXMQAAAWg"]
[Wed Sep 30 01:07:30.502804 2026] [security2:error] [pid 263262:tid 263515] [client 20.70.173.30:56477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wsd.php"] [unique_id "ary1MpEcZ_148BjP8ZPXNQAAAYQ"]
[Wed Sep 30 01:07:30.551232 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.551528 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.557579 2026] [security2:error] [pid 263262:tid 263474] [client 168.100.149.233:36480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-45001-Certified_col.png"] [unique_id "ary1MpEcZ_148BjP8ZPXLwABNi0"]
[Wed Sep 30 01:07:30.584394 2026] [security2:error] [pid 263262:tid 263488] [client 20.219.2.60:11840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/admin-ajax.php"] [unique_id "ary1MpEcZ_148BjP8ZPXOAAAAWk"]
[Wed Sep 30 01:07:30.648875 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.649300 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.674425 2026] [security2:error] [pid 263262:tid 263395] [client 43.104.4.217:29690] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary1MpEcZ_148BjP8ZPXQQAAAQw"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:30.699131 2026] [security2:error] [pid 263262:tid 263313] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1MpEcZ_148BjP8ZPXRAABDjE"], referer: https://forum.torquayfans.com/viewtopic.php?p=299113
[Wed Sep 30 01:07:30.699159 2026] [security2:error] [pid 263262:tid 263313] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1MpEcZ_148BjP8ZPXRAABDjE"], referer: https://forum.torquayfans.com/viewtopic.php?p=299113
[Wed Sep 30 01:07:30.716287 2026] [security2:error] [pid 263262:tid 263460] [client 20.5.79.49:37753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/13.php"] [unique_id "ary1MpEcZ_148BjP8ZPXRQAAAU0"]
[Wed Sep 30 01:07:30.736599 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.736918 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.827750 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.828008 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.917614 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:30.917890 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:30.945759 2026] [security2:error] [pid 263262:tid 263391] [remote 57.141.14.29:53000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary1MpEcZ_148BjP8ZPXTgABan8"]
[Wed Sep 30 01:07:31.009553 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.009806 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.035015 2026] [security2:error] [pid 263262:tid 263407] [client 20.5.79.49:64033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ary1M5EcZ_148BjP8ZPXUwAAARg"]
[Wed Sep 30 01:07:31.037025 2026] [security2:error] [pid 263262:tid 263492] [client 45.138.12.40:7642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.yourkatana.com"] [uri "/wp-links-opml.php"] [unique_id "ary1M5EcZ_148BjP8ZPXVAAAAW0"]
[Wed Sep 30 01:07:31.100848 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.101119 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.129766 2026] [security2:error] [pid 263262:tid 263404] [client 20.213.164.196:47492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/cns.php"] [unique_id "ary1M5EcZ_148BjP8ZPXWAAAARU"]
[Wed Sep 30 01:07:31.162334 2026] [security2:error] [pid 263262:tid 263476] [client 20.194.5.96:19087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/ttivnife.php"] [unique_id "ary1M5EcZ_148BjP8ZPXXwAAAV0"]
[Wed Sep 30 01:07:31.190776 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.191052 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.227240 2026] [security2:error] [pid 263262:tid 263496] [client 223.181.60.167:13138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1M5EcZ_148BjP8ZPXZAAAAXE"]
[Wed Sep 30 01:07:31.227354 2026] [security2:error] [pid 263262:tid 263496] [client 223.181.60.167:13138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1M5EcZ_148BjP8ZPXZAAAAXE"]
[Wed Sep 30 01:07:31.282622 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.282898 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.291065 2026] [security2:error] [pid 263262:tid 263505] [client 179.105.122.52:49990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1M5EcZ_148BjP8ZPXVwAAAXo"]
[Wed Sep 30 01:07:31.370988 2026] [security2:error] [pid 263262:tid 263481] [client 20.5.79.49:64047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/worksec.php"] [unique_id "ary1M5EcZ_148BjP8ZPXbAAAAWI"]
[Wed Sep 30 01:07:31.372694 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.372974 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.463323 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.463604 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.467588 2026] [security2:error] [pid 263262:tid 263488] [client 20.28.180.172:29605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/hywzd.php"] [unique_id "ary1M5EcZ_148BjP8ZPXdAAAAWk"]
[Wed Sep 30 01:07:31.502334 2026] [security2:error] [pid 263262:tid 263426] [client 43.104.4.217:29690] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary1M5EcZ_148BjP8ZPXdgAAASs"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:31.555503 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.555769 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:22974] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.646320 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.646609 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.662407 2026] [access_compat:error] [pid 263262:tid 263413] [client 47.79.13.27:53518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:31.662659 2026] [access_compat:error] [pid 263262:tid 263413] [client 47.79.13.27:53518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:31.679173 2026] [access_compat:error] [pid 263262:tid 263410] [client 47.79.13.37:46456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:31.679599 2026] [access_compat:error] [pid 263262:tid 263410] [client 47.79.13.37:46456] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:31.682309 2026] [security2:error] [pid 263262:tid 263304] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1M5EcZ_148BjP8ZPXhAABayg"]
[Wed Sep 30 01:07:31.689835 2026] [security2:error] [pid 263262:tid 263491] [client 20.5.79.49:62371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/js/fm.php"] [unique_id "ary1M5EcZ_148BjP8ZPXhgAAAWw"]
[Wed Sep 30 01:07:31.737538 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.737802 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.809901 2026] [security2:error] [pid 263262:tid 263445] [client 20.213.164.196:47520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/faiy.php"] [unique_id "ary1M5EcZ_148BjP8ZPXjQAAAT4"]
[Wed Sep 30 01:07:31.827992 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:31.828265 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:17165] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:31.913123 2026] [security2:error] [pid 263262:tid 263407] [client 216.73.216.46:17165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1M5EcZ_148BjP8ZPXkgAAARg"]
[Wed Sep 30 01:07:31.915764 2026] [security2:error] [pid 263262:tid 263492] [client 20.194.5.96:19082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/admin.php/2P.php"] [unique_id "ary1M5EcZ_148BjP8ZPXkwAAAW0"]
[Wed Sep 30 01:07:32.004390 2026] [security2:error] [pid 263262:tid 263465] [client 216.73.216.46:22974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1NJEcZ_148BjP8ZPXmAAAAVI"]
[Wed Sep 30 01:07:32.009408 2026] [security2:error] [pid 263262:tid 263408] [client 20.5.79.49:25921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ary1NJEcZ_148BjP8ZPXmQAAARk"]
[Wed Sep 30 01:07:32.103622 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.103942 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.124623 2026] [security2:error] [pid 263262:tid 263458] [client 20.214.109.68:61161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-signup.php"] [unique_id "ary1NJEcZ_148BjP8ZPXoAAAAUs"]
[Wed Sep 30 01:07:32.142897 2026] [security2:error] [pid 263262:tid 263505] [client 173.44.55.66:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1NJEcZ_148BjP8ZPXoQAAAXo"]
[Wed Sep 30 01:07:32.196602 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.196903 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.289258 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.289705 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.305830 2026] [security2:error] [pid 263262:tid 263516] [client 20.219.2.60:18854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/nw.php"] [unique_id "ary1NJEcZ_148BjP8ZPXrwAAAYU"]
[Wed Sep 30 01:07:32.332716 2026] [security2:error] [pid 263262:tid 263409] [client 20.5.79.49:26452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/1234.php"] [unique_id "ary1NJEcZ_148BjP8ZPXsQAAARo"]
[Wed Sep 30 01:07:32.379545 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.379995 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.471771 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.472226 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.476795 2026] [security2:error] [pid 263262:tid 263410] [client 20.194.5.96:19103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/a.php"] [unique_id "ary1NJEcZ_148BjP8ZPXuQAAARs"]
[Wed Sep 30 01:07:32.531424 2026] [security2:error] [pid 263262:tid 263482] [remote 168.100.149.141:44756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1NJEcZ_148BjP8ZPXtQABFDs"]
[Wed Sep 30 01:07:32.541411 2026] [security2:error] [pid 263262:tid 263438] [client 20.28.180.172:34256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/eb06f5f3c7index.php"] [unique_id "ary1NJEcZ_148BjP8ZPXvAAAATc"]
[Wed Sep 30 01:07:32.560393 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.560849 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.648887 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.649157 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:26729] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.652709 2026] [security2:error] [pid 263262:tid 263455] [client 135.136.66.6:48259] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1NJEcZ_148BjP8ZPXwgAAAUg"]
[Wed Sep 30 01:07:32.653356 2026] [security2:error] [pid 263262:tid 263467] [client 20.213.164.196:32664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/gecho.php"] [unique_id "ary1NJEcZ_148BjP8ZPXyQAAAVQ"]
[Wed Sep 30 01:07:32.658087 2026] [security2:error] [pid 263262:tid 263489] [client 20.5.79.49:62366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/cilus.php"] [unique_id "ary1NJEcZ_148BjP8ZPXygAAAWo"]
[Wed Sep 30 01:07:32.732760 2026] [security2:error] [pid 263262:tid 263478] [client 216.73.216.46:26729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1NJEcZ_148BjP8ZPXzwAAAV8"]
[Wed Sep 30 01:07:32.739763 2026] [security2:error] [pid 263262:tid 263419] [client 20.214.109.68:9435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-xmlsia.php"] [unique_id "ary1NJEcZ_148BjP8ZPX0AAAASQ"]
[Wed Sep 30 01:07:32.755400 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.79.13.73:60080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:32.755670 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.79.13.73:60080] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:32.786620 2026] [security2:error] [pid 263262:tid 263473] [client 20.194.5.96:17286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1NJEcZ_148BjP8ZPX1QAAAVo"]
[Wed Sep 30 01:07:32.830001 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.830272 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.865193 2026] [security2:error] [pid 263262:tid 263496] [client 20.194.5.96:19108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/cord.php"] [unique_id "ary1NJEcZ_148BjP8ZPX2gAAAXE"]
[Wed Sep 30 01:07:32.876591 2026] [security2:error] [pid 263262:tid 263346] [remote 74.7.227.56:58918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1NJEcZ_148BjP8ZPX2wABZ1I"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:07:32.921252 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:32.921541 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:50595] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:32.970934 2026] [security2:error] [pid 263262:tid 263420] [client 20.5.79.49:25821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ary1NJEcZ_148BjP8ZPX4wAAASU"]
[Wed Sep 30 01:07:33.005122 2026] [security2:error] [pid 263262:tid 263433] [client 216.73.216.46:50595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1NZEcZ_148BjP8ZPX6AAAATI"]
[Wed Sep 30 01:07:33.026902 2026] [access_compat:error] [pid 263262:tid 263441] [client 47.79.13.58:38058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.027163 2026] [access_compat:error] [pid 263262:tid 263441] [client 47.79.13.58:38058] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.056174 2026] [security2:error] [pid 263262:tid 263410] [client 20.213.164.196:32299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/gu.php"] [unique_id "ary1NZEcZ_148BjP8ZPX7gAAARs"]
[Wed Sep 30 01:07:33.156074 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.156336 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.183698 2026] [access_compat:error] [pid 263262:tid 263494] [client 47.79.13.172:48918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.183998 2026] [access_compat:error] [pid 263262:tid 263494] [client 47.79.13.172:48918] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.238177 2026] [security2:error] [pid 263262:tid 263511] [client 216.73.216.46:51348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1NZEcZ_148BjP8ZPX_wAAAYA"]
[Wed Sep 30 01:07:33.286671 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.287025 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.304415 2026] [security2:error] [pid 263262:tid 263440] [client 20.5.79.49:26433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/mini.php"] [unique_id "ary1NZEcZ_148BjP8ZPYAgAAATk"]
[Wed Sep 30 01:07:33.310680 2026] [security2:error] [pid 263262:tid 263473] [client 20.70.173.30:57014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/dronishness.php"] [unique_id "ary1NZEcZ_148BjP8ZPYBAAAAVo"]
[Wed Sep 30 01:07:33.329772 2026] [security2:error] [pid 263262:tid 263469] [client 20.214.109.68:9868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.109.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reginagamblescott.com"] [uri "/wp-inic3.php"] [unique_id "ary1NZEcZ_148BjP8ZPYBgAAAVY"]
[Wed Sep 30 01:07:33.330648 2026] [security2:error] [pid 263262:tid 263505] [client 20.213.164.196:55205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1NZEcZ_148BjP8ZPYBwAAAXo"]
[Wed Sep 30 01:07:33.350163 2026] [security2:error] [pid 263262:tid 263515] [client 43.104.4.198:14320] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYCAAAAYQ"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.350170 2026] [security2:error] [pid 263262:tid 263424] [client 43.104.4.230:52216] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYCQAAASk"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.367055 2026] [security2:error] [pid 263262:tid 263404] [client 43.104.4.217:5185] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYCgAAARU"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.367641 2026] [security2:error] [pid 263262:tid 263443] [client 43.104.4.179:55559] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYCwAAATw"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.381009 2026] [security2:error] [pid 263262:tid 263476] [client 43.104.4.192:62952] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYDAAAAV0"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.389462 2026] [security2:error] [pid 263262:tid 263457] [client 43.104.4.180:2086] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary1NZEcZ_148BjP8ZPYDQAAAUo"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=battery-packs,desktops,keyboards,led-lamp,power-banks,power-products,samsung,stabilizers,surveillance-cameras,ups
[Wed Sep 30 01:07:33.432762 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.433196 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.436864 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.82.11.32:56232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.437137 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.82.11.32:56232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:33.440321 2026] [security2:error] [pid 263262:tid 263520] [client 155.190.6.18:37926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1NZEcZ_148BjP8ZPYEwAAAYk"]
[Wed Sep 30 01:07:33.440434 2026] [security2:error] [pid 263262:tid 263520] [client 155.190.6.18:37926] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1NZEcZ_148BjP8ZPYEwAAAYk"]
[Wed Sep 30 01:07:33.520032 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.520308 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.562253 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.562701 2026] [access_compat:error] [pid 263262:tid 263518] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.579164 2026] [security2:error] [pid 263262:tid 263435] [client 104.208.65.139:2354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/uploartg.php"] [unique_id "ary1NZEcZ_148BjP8ZPYGgAAATQ"]
[Wed Sep 30 01:07:33.622263 2026] [security2:error] [pid 263262:tid 263399] [client 20.194.5.96:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/anom.php"] [unique_id "ary1NZEcZ_148BjP8ZPYHQAAARA"]
[Wed Sep 30 01:07:33.626379 2026] [security2:error] [pid 263262:tid 263441] [client 20.5.79.49:62391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/nope.php"] [unique_id "ary1NZEcZ_148BjP8ZPYHgAAATo"]
[Wed Sep 30 01:07:33.649423 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.649702 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:47750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.729380 2026] [security2:error] [pid 263262:tid 263372] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1NZEcZ_148BjP8ZPYNAABPWw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297752&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:33.729412 2026] [security2:error] [pid 263262:tid 263372] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1NZEcZ_148BjP8ZPYNAABPWw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297752&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:33.740272 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.740557 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.782014 2026] [security2:error] [pid 263262:tid 263405] [client 20.213.164.196:32312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/nck.php"] [unique_id "ary1NZEcZ_148BjP8ZPYOAAAARY"]
[Wed Sep 30 01:07:33.831619 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.831910 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.858492 2026] [security2:error] [pid 263262:tid 263496] [client 103.241.204.139:65409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1NZEcZ_148BjP8ZPYPQAAAXE"]
[Wed Sep 30 01:07:33.858633 2026] [security2:error] [pid 263262:tid 263496] [client 103.241.204.139:65409] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1NZEcZ_148BjP8ZPYPQAAAXE"]
[Wed Sep 30 01:07:33.923144 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:33.923409 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:4788] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:33.957726 2026] [security2:error] [pid 263262:tid 263401] [client 20.5.79.49:38525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/index3.php"] [unique_id "ary1NZEcZ_148BjP8ZPYRQAAARI"]
[Wed Sep 30 01:07:34.006936 2026] [security2:error] [pid 263262:tid 263511] [client 216.73.216.46:4788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1NpEcZ_148BjP8ZPYSAAAAYA"]
[Wed Sep 30 01:07:34.070195 2026] [security2:error] [pid 263262:tid 263440] [client 216.73.216.46:47750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1NpEcZ_148BjP8ZPYSQAAATk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvbWluaWJi
[Wed Sep 30 01:07:34.077022 2026] [security2:error] [pid 263262:tid 263473] [client 20.194.30.107:46679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/ccc.php"] [unique_id "ary1NpEcZ_148BjP8ZPYSgAAAVo"]
[Wed Sep 30 01:07:34.109317 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.109747 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.133515 2026] [security2:error] [pid 263262:tid 263471] [client 103.159.192.142:63640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1NpEcZ_148BjP8ZPYUgAAAVg"]
[Wed Sep 30 01:07:34.133623 2026] [security2:error] [pid 263262:tid 263471] [client 103.159.192.142:63640] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1NpEcZ_148BjP8ZPYUgAAAVg"]
[Wed Sep 30 01:07:34.150961 2026] [security2:error] [pid 263262:tid 263339] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1NpEcZ_148BjP8ZPYUwABC0s"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297794&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:34.150989 2026] [security2:error] [pid 263262:tid 263339] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1NpEcZ_148BjP8ZPYUwABC0s"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297794&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:34.158336 2026] [security2:error] [pid 263262:tid 263487] [client 20.194.5.96:17198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1NpEcZ_148BjP8ZPYVAAAAWg"]
[Wed Sep 30 01:07:34.175796 2026] [security2:error] [pid 263262:tid 263411] [client 20.194.5.96:18896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/plugins.php"] [unique_id "ary1NpEcZ_148BjP8ZPYVQAAARw"]
[Wed Sep 30 01:07:34.196644 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.197000 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.271445 2026] [security2:error] [pid 263262:tid 263497] [client 20.5.79.49:62341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/uploads/admin.php"] [unique_id "ary1NpEcZ_148BjP8ZPYWAAAAXI"]
[Wed Sep 30 01:07:34.273157 2026] [http2:warn] [pid 251754:tid 251992] [client 40.77.167.158:47221] h2_stream(251754-467-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:34.290168 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.290416 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.358251 2026] [security2:error] [pid 263262:tid 263409] [client 116.197.133.25:62296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1NpEcZ_148BjP8ZPYWgAAARo"]
[Wed Sep 30 01:07:34.358375 2026] [security2:error] [pid 263262:tid 263409] [client 116.197.133.25:62296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1NpEcZ_148BjP8ZPYWgAAARo"]
[Wed Sep 30 01:07:34.410955 2026] [security2:error] [pid 263262:tid 263397] [client 20.58.177.98:57413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1NpEcZ_148BjP8ZPYWwAAAQ4"]
[Wed Sep 30 01:07:34.417499 2026] [security2:error] [pid 263262:tid 263480] [client 20.213.164.196:47502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/xtt.php"] [unique_id "ary1NpEcZ_148BjP8ZPYXAAAAWE"]
[Wed Sep 30 01:07:34.428219 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.428475 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.471556 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.471996 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.506495 2026] [security2:error] [pid 263262:tid 263428] [client 4.240.25.22:41720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/adminan.php"] [unique_id "ary1NpEcZ_148BjP8ZPYYwAAAS0"]
[Wed Sep 30 01:07:34.547290 2026] [security2:error] [pid 263262:tid 263488] [client 20.194.5.96:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/groud3.php"] [unique_id "ary1NpEcZ_148BjP8ZPYZQAAAWk"]
[Wed Sep 30 01:07:34.562588 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.562942 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.593365 2026] [security2:error] [pid 263262:tid 263496] [client 20.5.79.49:64060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/forbidals.php"] [unique_id "ary1NpEcZ_148BjP8ZPYbQAAAXE"]
[Wed Sep 30 01:07:34.655392 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.655930 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.726541 2026] [security2:error] [pid 263262:tid 263489] [client 45.138.12.43:50630] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.wmxone.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1NpEcZ_148BjP8ZPYdgAAAWo"]
[Wed Sep 30 01:07:34.738972 2026] [security2:error] [pid 263262:tid 263423] [client 20.58.177.98:15871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1NpEcZ_148BjP8ZPYeQAAASg"]
[Wed Sep 30 01:07:34.743020 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.743390 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.812026 2026] [security2:error] [pid 263262:tid 263463] [client 20.28.180.172:29568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/b8.php"] [unique_id "ary1NpEcZ_148BjP8ZPYfwAAAVA"]
[Wed Sep 30 01:07:34.823226 2026] [security2:error] [pid 263262:tid 263457] [client 20.219.2.60:19406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tool.php"] [unique_id "ary1NpEcZ_148BjP8ZPYgAAAAUo"]
[Wed Sep 30 01:07:34.833173 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.833586 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.903826 2026] [security2:error] [pid 263262:tid 263285] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1NpEcZ_148BjP8ZPYhQABWBU"], referer: https://forum.torquayfans.com/viewtopic.php?start=330&t=9562
[Wed Sep 30 01:07:34.903859 2026] [security2:error] [pid 263262:tid 263285] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1NpEcZ_148BjP8ZPYhQABWBU"], referer: https://forum.torquayfans.com/viewtopic.php?start=330&t=9562
[Wed Sep 30 01:07:34.911671 2026] [security2:error] [pid 263262:tid 263394] [client 20.5.79.49:37716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/index1.php"] [unique_id "ary1NpEcZ_148BjP8ZPYiAAAAQs"]
[Wed Sep 30 01:07:34.922978 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:34.923219 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:34.933454 2026] [security2:error] [pid 263262:tid 263417] [client 189.97.27.131:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1NpEcZ_148BjP8ZPYiwAAASI"]
[Wed Sep 30 01:07:34.939973 2026] [access_compat:error] [pid 263262:tid 263461] [client 47.79.13.172:54798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:34.940417 2026] [access_compat:error] [pid 263262:tid 263461] [client 47.79.13.172:54798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:34.996540 2026] [security2:error] [pid 263262:tid 263435] [client 20.213.164.196:55168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1NpEcZ_148BjP8ZPYkgAAATQ"]
[Wed Sep 30 01:07:35.019105 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.019571 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.028835 2026] [security2:error] [pid 263262:tid 263470] [client 168.100.149.183:16742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary1NpEcZ_148BjP8ZPYXwABV3A"]
[Wed Sep 30 01:07:35.057857 2026] [security2:error] [pid 263262:tid 263397] [client 20.194.5.96:16593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/adminfuns.php"] [unique_id "ary1N5EcZ_148BjP8ZPYlgAAAQ4"]
[Wed Sep 30 01:07:35.065493 2026] [security2:error] [pid 263262:tid 263480] [client 20.58.177.98:15854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1N5EcZ_148BjP8ZPYlwAAAWE"]
[Wed Sep 30 01:07:35.096520 2026] [security2:error] [pid 263262:tid 263468] [client 20.28.180.172:61236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/njxjtooj.php"] [unique_id "ary1N5EcZ_148BjP8ZPYmwAAAVU"]
[Wed Sep 30 01:07:35.132544 2026] [security2:error] [pid 263262:tid 263405] [client 20.213.164.196:47505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/go.php"] [unique_id "ary1N5EcZ_148BjP8ZPYngAAARY"]
[Wed Sep 30 01:07:35.158092 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.158451 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.204698 2026] [security2:error] [pid 263262:tid 263467] [client 20.58.177.98:33231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1N5EcZ_148BjP8ZPYowAAAVQ"]
[Wed Sep 30 01:07:35.228151 2026] [security2:error] [pid 263262:tid 263454] [client 20.5.79.49:38473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/about/function.php"] [unique_id "ary1N5EcZ_148BjP8ZPYpAAAAUc"]
[Wed Sep 30 01:07:35.246881 2026] [security2:error] [pid 263262:tid 263506] [client 45.138.12.43:50706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.wmxone.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1N5EcZ_148BjP8ZPYpgAAAXs"]
[Wed Sep 30 01:07:35.248826 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:21308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.249085 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:21308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.307710 2026] [security2:error] [pid 263262:tid 263477] [client 37.41.16.35:49684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1N5EcZ_148BjP8ZPYrQAAAV4"]
[Wed Sep 30 01:07:35.307841 2026] [security2:error] [pid 263262:tid 263477] [client 37.41.16.35:49684] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1N5EcZ_148BjP8ZPYrQAAAV4"]
[Wed Sep 30 01:07:35.343442 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:65349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.343853 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:65349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.383857 2026] [security2:error] [pid 263262:tid 263463] [client 20.58.177.98:57410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/aa.php"] [unique_id "ary1N5EcZ_148BjP8ZPYtAAAAVA"]
[Wed Sep 30 01:07:35.418615 2026] [security2:error] [pid 263262:tid 263447] [client 217.200.36.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1N5EcZ_148BjP8ZPYuAAAAUA"]
[Wed Sep 30 01:07:35.434586 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.434858 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.440269 2026] [security2:error] [pid 263262:tid 263509] [client 20.70.173.30:19177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/mac.php"] [unique_id "ary1N5EcZ_148BjP8ZPYugAAAX4"]
[Wed Sep 30 01:07:35.447885 2026] [security2:error] [pid 263262:tid 263429] [client 20.219.2.60:11659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/amthd.php"] [unique_id "ary1N5EcZ_148BjP8ZPYvAAAAS4"]
[Wed Sep 30 01:07:35.472512 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.472928 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.485828 2026] [security2:error] [pid 263262:tid 263473] [client 85.208.96.196:55088] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "managehealthcarecosts.com"] [uri "/robots.txt"] [unique_id "ary1N5EcZ_148BjP8ZPYvwAAAVo"]
[Wed Sep 30 01:07:35.485967 2026] [security2:error] [pid 263262:tid 263473] [client 85.208.96.196:55088] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "managehealthcarecosts.com"] [uri "/robots.txt"] [unique_id "ary1N5EcZ_148BjP8ZPYvwAAAVo"]
[Wed Sep 30 01:07:35.540256 2026] [security2:error] [pid 263262:tid 263404] [client 20.5.79.49:62384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/show/asa.php"] [unique_id "ary1N5EcZ_148BjP8ZPYwQAAARU"]
[Wed Sep 30 01:07:35.561209 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.561490 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.580880 2026] [security2:error] [pid 263262:tid 263497] [client 20.194.5.96:18902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/gaxby.php"] [unique_id "ary1N5EcZ_148BjP8ZPYxgAAAXI"]
[Wed Sep 30 01:07:35.589177 2026] [security2:error] [pid 263262:tid 263409] [client 20.58.177.98:33243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1N5EcZ_148BjP8ZPYxwAAARo"]
[Wed Sep 30 01:07:35.593066 2026] [security2:error] [pid 263262:tid 263401] [client 49.43.163.212:56495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1N5EcZ_148BjP8ZPYuwAAARI"]
[Wed Sep 30 01:07:35.646865 2026] [security2:error] [pid 263262:tid 263422] [client 216.73.216.46:21308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1N5EcZ_148BjP8ZPYzAAAASc"]
[Wed Sep 30 01:07:35.658079 2026] [security2:error] [pid 263262:tid 263426] [client 20.194.30.107:9992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary1N5EcZ_148BjP8ZPYzgAAASs"]
[Wed Sep 30 01:07:35.663601 2026] [security2:error] [pid 263262:tid 263444] [client 20.213.164.196:21191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/adminfuns.php"] [unique_id "ary1N5EcZ_148BjP8ZPYzwAAAT0"]
[Wed Sep 30 01:07:35.713676 2026] [security2:error] [pid 263262:tid 263496] [client 20.58.177.98:15809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/z70.php"] [unique_id "ary1N5EcZ_148BjP8ZPY1AAAAXE"]
[Wed Sep 30 01:07:35.735784 2026] [security2:error] [pid 263262:tid 263289] [remote 64.23.166.180:44320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hapitochfoundation.org"] [uri "/.env"] [unique_id "ary1N5EcZ_148BjP8ZPY1wABLRk"]
[Wed Sep 30 01:07:35.761856 2026] [security2:error] [pid 263262:tid 263506] [client 20.28.180.172:34284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wpxml.php"] [unique_id "ary1N5EcZ_148BjP8ZPY2QAAAXs"]
[Wed Sep 30 01:07:35.789192 2026] [security2:error] [pid 263262:tid 263478] [client 216.73.216.46:62720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1N5EcZ_148BjP8ZPY2gAAAV8"]
[Wed Sep 30 01:07:35.835633 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.835905 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:44913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.854364 2026] [security2:error] [pid 263262:tid 263512] [client 31.189.214.146:54275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1N5EcZ_148BjP8ZPY4QAAAYE"]
[Wed Sep 30 01:07:35.854468 2026] [security2:error] [pid 263262:tid 263512] [client 31.189.214.146:54275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1N5EcZ_148BjP8ZPY4QAAAYE"]
[Wed Sep 30 01:07:35.864021 2026] [security2:error] [pid 263262:tid 263508] [client 20.5.79.49:26480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-su.php"] [unique_id "ary1N5EcZ_148BjP8ZPY4gAAAX0"]
[Wed Sep 30 01:07:35.880352 2026] [security2:error] [pid 263262:tid 263467] [client 85.208.96.211:32320] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "managehealthcarecosts.com"] [uri "/"] [unique_id "ary1N5EcZ_148BjP8ZPY4wAAAVQ"]
[Wed Sep 30 01:07:35.880532 2026] [security2:error] [pid 263262:tid 263467] [client 85.208.96.211:32320] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "managehealthcarecosts.com"] [uri "/"] [unique_id "ary1N5EcZ_148BjP8ZPY4wAAAVQ"]
[Wed Sep 30 01:07:35.928525 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:35.928797 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:35.977705 2026] [security2:error] [pid 263262:tid 263498] [client 20.58.177.98:33224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1N5EcZ_148BjP8ZPY5QAAAXM"]
[Wed Sep 30 01:07:36.021825 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.022300 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.042410 2026] [security2:error] [pid 263262:tid 263515] [client 20.58.177.98:57454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/f35.php"] [unique_id "ary1OJEcZ_148BjP8ZPY6AAAAYQ"]
[Wed Sep 30 01:07:36.065681 2026] [access_compat:error] [pid 263262:tid 263495] [client 47.79.13.172:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:36.065985 2026] [access_compat:error] [pid 263262:tid 263495] [client 47.79.13.172:54796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:36.109128 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.109434 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65349] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.178565 2026] [security2:error] [pid 263262:tid 263399] [client 20.194.5.96:17176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/av.php"] [unique_id "ary1OJEcZ_148BjP8ZPY-QAAARA"]
[Wed Sep 30 01:07:36.192266 2026] [security2:error] [pid 263262:tid 263470] [client 216.73.216.46:44913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1OJEcZ_148BjP8ZPY_AAAAVc"]
[Wed Sep 30 01:07:36.192278 2026] [security2:error] [pid 263262:tid 263484] [client 20.5.79.49:38489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/css/install.php"] [unique_id "ary1OJEcZ_148BjP8ZPY_QAAAWU"]
[Wed Sep 30 01:07:36.246833 2026] [security2:error] [pid 263262:tid 263490] [client 20.194.5.96:18505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/dh9u7.php"] [unique_id "ary1OJEcZ_148BjP8ZPY_wAAAWs"]
[Wed Sep 30 01:07:36.282888 2026] [security2:error] [pid 263262:tid 263519] [client 216.73.216.46:65349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1OJEcZ_148BjP8ZPZBgAAAYg"]
[Wed Sep 30 01:07:36.373845 2026] [security2:error] [pid 263262:tid 263493] [client 20.58.177.98:15816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/adminfuns.php"] [unique_id "ary1OJEcZ_148BjP8ZPZCgAAAW4"]
[Wed Sep 30 01:07:36.383466 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.383739 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.420794 2026] [security2:error] [pid 263262:tid 263506] [client 20.58.177.98:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/aa.php"] [unique_id "ary1OJEcZ_148BjP8ZPZDAAAAXs"]
[Wed Sep 30 01:07:36.441274 2026] [security2:error] [pid 263262:tid 263507] [client 168.100.149.223:16566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary1OJEcZ_148BjP8ZPZDgABfC4"]
[Wed Sep 30 01:07:36.473123 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.473410 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.497907 2026] [security2:error] [pid 263262:tid 263419] [client 20.70.173.30:33395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/sxxb.php"] [unique_id "ary1OJEcZ_148BjP8ZPZFAAAASQ"]
[Wed Sep 30 01:07:36.511969 2026] [security2:error] [pid 263262:tid 263485] [client 20.5.79.49:26492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ty.php"] [unique_id "ary1OJEcZ_148BjP8ZPZFgAAAWY"]
[Wed Sep 30 01:07:36.568858 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.569310 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.663689 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.664192 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.691351 2026] [security2:error] [pid 263262:tid 263430] [client 20.58.177.98:57459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/av.php"] [unique_id "ary1OJEcZ_148BjP8ZPZKwAAAS8"]
[Wed Sep 30 01:07:36.744730 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.745014 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.797677 2026] [security2:error] [pid 263262:tid 263405] [client 20.28.180.172:60305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws85.php"] [unique_id "ary1OJEcZ_148BjP8ZPZMgAAARY"]
[Wed Sep 30 01:07:36.805671 2026] [security2:error] [pid 263262:tid 263393] [client 20.58.177.98:33246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/z70.php"] [unique_id "ary1OJEcZ_148BjP8ZPZMwAAAQo"]
[Wed Sep 30 01:07:36.821299 2026] [security2:error] [pid 263262:tid 263435] [client 20.219.2.60:19455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/drhunthq.php"] [unique_id "ary1OJEcZ_148BjP8ZPZNQAAATQ"]
[Wed Sep 30 01:07:36.836589 2026] [security2:error] [pid 263262:tid 263418] [client 20.5.79.49:64038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/.well-known/as.php"] [unique_id "ary1OJEcZ_148BjP8ZPZOAAAASM"]
[Wed Sep 30 01:07:36.838217 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.838660 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:36.904793 2026] [security2:error] [pid 263262:tid 263459] [client 20.28.180.172:34251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cae2.3.php"] [unique_id "ary1OJEcZ_148BjP8ZPZPwAAAUw"]
[Wed Sep 30 01:07:36.929274 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:36.929545 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.009697 2026] [security2:error] [pid 263262:tid 263466] [client 20.58.177.98:15501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/dex.php"] [unique_id "ary1OZEcZ_148BjP8ZPZTgAAAVM"]
[Wed Sep 30 01:07:37.023464 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.023947 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.035889 2026] [security2:error] [pid 263262:tid 263498] [client 20.213.164.196:21193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/av.php"] [unique_id "ary1OZEcZ_148BjP8ZPZUQAAAXM"]
[Wed Sep 30 01:07:37.063850 2026] [security2:error] [pid 263262:tid 263394] [client 20.194.5.96:18886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/yvnqcuic.php"] [unique_id "ary1OZEcZ_148BjP8ZPZVAAAAQs"]
[Wed Sep 30 01:07:37.108245 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.108515 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:10273] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.153908 2026] [security2:error] [pid 263262:tid 263450] [client 20.5.79.49:26459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-admin/wp-admin.php"] [unique_id "ary1OZEcZ_148BjP8ZPZXQAAAUM"]
[Wed Sep 30 01:07:37.159354 2026] [security2:error] [pid 263262:tid 263463] [client 122.173.27.10:24112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZXgAAAVA"]
[Wed Sep 30 01:07:37.159442 2026] [security2:error] [pid 263262:tid 263463] [client 122.173.27.10:24112] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZXgAAAVA"]
[Wed Sep 30 01:07:37.193168 2026] [security2:error] [pid 263262:tid 263512] [client 216.73.216.46:10273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1OZEcZ_148BjP8ZPZYQAAAYE"]
[Wed Sep 30 01:07:37.220281 2026] [security2:error] [pid 263262:tid 263482] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1OZEcZ_148BjP8ZPZYwAAAWM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:37.222792 2026] [security2:error] [pid 263262:tid 263430] [client 20.194.5.96:17163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/dex.php"] [unique_id "ary1OZEcZ_148BjP8ZPZZAAAAS8"]
[Wed Sep 30 01:07:37.229405 2026] [security2:error] [pid 263262:tid 263460] [client 20.58.177.98:33682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/f35.php"] [unique_id "ary1OZEcZ_148BjP8ZPZZQAAAU0"]
[Wed Sep 30 01:07:37.291350 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.291630 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.304576 2026] [security2:error] [pid 263262:tid 263336] [remote 57.141.14.13:59974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/energy-express-at-potomac-library/"] [unique_id "ary1OZEcZ_148BjP8ZPZaAABDkg"]
[Wed Sep 30 01:07:37.322828 2026] [security2:error] [pid 263262:tid 263464] [client 20.58.177.98:57450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/chosen.php"] [unique_id "ary1OZEcZ_148BjP8ZPZaQAAAVE"]
[Wed Sep 30 01:07:37.357406 2026] [security2:error] [pid 263262:tid 263470] [client 192.99.6.140:44032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.6.99.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "devinmooredesign.com"] [uri "/wp-login.php"] [unique_id "ary1OZEcZ_148BjP8ZPZagAAAVc"]
[Wed Sep 30 01:07:37.388393 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.388859 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.477683 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.478118 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.536451 2026] [security2:error] [pid 263262:tid 263459] [client 20.194.5.96:18900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/koiy.php"] [unique_id "ary1OZEcZ_148BjP8ZPZdQAAAUw"]
[Wed Sep 30 01:07:37.551739 2026] [security2:error] [pid 263262:tid 263396] [client 20.5.79.49:25799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/waf.php"] [unique_id "ary1OZEcZ_148BjP8ZPZdwAAAQ0"]
[Wed Sep 30 01:07:37.567497 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.567968 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.623866 2026] [security2:error] [pid 263262:tid 263478] [client 20.58.177.98:33272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/adminfuns.php"] [unique_id "ary1OZEcZ_148BjP8ZPZewAAAV8"]
[Wed Sep 30 01:07:37.627189 2026] [security2:error] [pid 263262:tid 263363] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1OZEcZ_148BjP8ZPZfAABiGM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D83558
[Wed Sep 30 01:07:37.639953 2026] [security2:error] [pid 263262:tid 263428] [client 20.58.177.98:57419] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/1.php"] [unique_id "ary1OZEcZ_148BjP8ZPZfgAAAS0"]
[Wed Sep 30 01:07:37.640080 2026] [security2:error] [pid 263262:tid 263428] [client 20.58.177.98:57419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/1.php"] [unique_id "ary1OZEcZ_148BjP8ZPZfgAAAS0"]
[Wed Sep 30 01:07:37.657306 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.657589 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.693295 2026] [access_compat:error] [pid 263262:tid 263466] [client 74.7.243.227:51054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 01:07:37.693761 2026] [access_compat:error] [pid 263262:tid 263466] [client 74.7.243.227:51054] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 01:07:37.698929 2026] [security2:error] [pid 263262:tid 263494] [client 4.240.25.22:41689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/fling.php"] [unique_id "ary1OZEcZ_148BjP8ZPZhgAAAW8"]
[Wed Sep 30 01:07:37.719105 2026] [security2:error] [pid 263262:tid 263416] [client 152.59.165.7:50824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZhwAAASE"]
[Wed Sep 30 01:07:37.719272 2026] [security2:error] [pid 263262:tid 263416] [client 152.59.165.7:50824] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZhwAAASE"]
[Wed Sep 30 01:07:37.748321 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.748620 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.838994 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.839419 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.866777 2026] [security2:error] [pid 263262:tid 263465] [client 20.5.79.49:64041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ary1OZEcZ_148BjP8ZPZjwAAAVI"]
[Wed Sep 30 01:07:37.918493 2026] [security2:error] [pid 263262:tid 263443] [client 45.138.12.32:39806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fwx.zsh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1OZEcZ_148BjP8ZPZkgAAATw"]
[Wed Sep 30 01:07:37.928960 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:37.929297 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:37.953133 2026] [security2:error] [pid 263262:tid 263408] [client 20.58.177.98:15528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/radio.php"] [unique_id "ary1OZEcZ_148BjP8ZPZlQAAARk"]
[Wed Sep 30 01:07:37.956255 2026] [security2:error] [pid 263262:tid 263515] [client 20.28.180.172:29582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/pudym.php"] [unique_id "ary1OZEcZ_148BjP8ZPZlgAAAYQ"]
[Wed Sep 30 01:07:37.999971 2026] [security2:error] [pid 263262:tid 263419] [client 201.32.215.149:7737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZlwAAASQ"]
[Wed Sep 30 01:07:38.000131 2026] [security2:error] [pid 263262:tid 263419] [client 201.32.215.149:7737] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1OZEcZ_148BjP8ZPZlwAAASQ"]
[Wed Sep 30 01:07:38.015278 2026] [security2:error] [pid 263262:tid 263482] [client 20.58.177.98:33247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/av.php"] [unique_id "ary1OpEcZ_148BjP8ZPZmQAAAWM"]
[Wed Sep 30 01:07:38.019420 2026] [security2:error] [pid 263262:tid 263430] [client 20.194.5.96:16583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/chosen.php"] [unique_id "ary1OpEcZ_148BjP8ZPZmgAAAS8"]
[Wed Sep 30 01:07:38.020681 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.020974 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.065419 2026] [security2:error] [pid 263262:tid 263458] [client 20.219.2.60:18879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/admin/index.php"] [unique_id "ary1OpEcZ_148BjP8ZPZmwAAAUs"]
[Wed Sep 30 01:07:38.074268 2026] [security2:error] [pid 263262:tid 263441] [client 203.122.45.246:62258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZnAAAATo"]
[Wed Sep 30 01:07:38.074463 2026] [security2:error] [pid 263262:tid 263441] [client 203.122.45.246:62258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZnAAAATo"]
[Wed Sep 30 01:07:38.111290 2026] [security2:error] [pid 263262:tid 263426] [client 20.219.2.60:11681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/8xyz.php"] [unique_id "ary1OpEcZ_148BjP8ZPZnwAAASs"]
[Wed Sep 30 01:07:38.113282 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.113548 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.125640 2026] [security2:error] [pid 263262:tid 263409] [client 223.235.102.107:7390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZogAAARo"]
[Wed Sep 30 01:07:38.125836 2026] [security2:error] [pid 263262:tid 263409] [client 223.235.102.107:7390] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZogAAARo"]
[Wed Sep 30 01:07:38.135777 2026] [security2:error] [pid 263262:tid 263468] [client 20.213.164.196:55172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/dex.php"] [unique_id "ary1OpEcZ_148BjP8ZPZpAAAAVU"]
[Wed Sep 30 01:07:38.184671 2026] [security2:error] [pid 263262:tid 263418] [client 20.5.79.49:64026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/update/f35.php"] [unique_id "ary1OpEcZ_148BjP8ZPZpwAAASM"]
[Wed Sep 30 01:07:38.202090 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.202513 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.237892 2026] [security2:error] [pid 263262:tid 263500] [client 20.194.5.96:18499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wordfence-waf.php"] [unique_id "ary1OpEcZ_148BjP8ZPZqwAAAXU"]
[Wed Sep 30 01:07:38.245908 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1OpEcZ_148BjP8ZPZrAABiFo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=293299&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:38.245943 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1OpEcZ_148BjP8ZPZrAABiFo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=293299&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:07:38.272119 2026] [security2:error] [pid 263262:tid 263516] [client 20.58.177.98:15828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/blacks.php"] [unique_id "ary1OpEcZ_148BjP8ZPZrwAAAYU"]
[Wed Sep 30 01:07:38.358835 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.359283 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.365457 2026] [security2:error] [pid 263262:tid 263518] [client 20.58.177.98:33219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/dex.php"] [unique_id "ary1OpEcZ_148BjP8ZPZuAAAAYc"]
[Wed Sep 30 01:07:38.440139 2026] [security2:error] [pid 263262:tid 263483] [client 168.100.149.197:22804] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary1OpEcZ_148BjP8ZPZuwABZH4"]
[Wed Sep 30 01:07:38.457367 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.457633 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.502754 2026] [security2:error] [pid 263262:tid 263508] [client 20.5.79.49:64055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/ton.php"] [unique_id "ary1OpEcZ_148BjP8ZPZwAAAAX0"]
[Wed Sep 30 01:07:38.526744 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.527035 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.536450 2026] [http2:warn] [pid 251754:tid 251943] [client 52.167.144.25:39678] h2_stream(251754-514-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:38.561728 2026] [security2:error] [pid 263262:tid 263441] [client 20.194.30.107:43757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/memberfuns.php"] [unique_id "ary1OpEcZ_148BjP8ZPZyQAAATo"]
[Wed Sep 30 01:07:38.588188 2026] [security2:error] [pid 263262:tid 263399] [client 202.179.95.79:52307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZywAAARA"]
[Wed Sep 30 01:07:38.588303 2026] [security2:error] [pid 263262:tid 263399] [client 202.179.95.79:52307] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZywAAARA"]
[Wed Sep 30 01:07:38.595681 2026] [security2:error] [pid 263262:tid 263468] [client 20.58.177.98:15824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/alfa.php"] [unique_id "ary1OpEcZ_148BjP8ZPZzQAAAVU"]
[Wed Sep 30 01:07:38.605464 2026] [access_compat:error] [pid 263262:tid 263428] [client 47.79.13.75:48622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:38.605920 2026] [access_compat:error] [pid 263262:tid 263428] [client 47.79.13.75:48622] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:38.619015 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.619272 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.626122 2026] [security2:error] [pid 263262:tid 263397] [client 20.194.5.96:17197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/radio.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ1QAAAQ4"]
[Wed Sep 30 01:07:38.656829 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.657162 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.746587 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.746731 2026] [security2:error] [pid 263262:tid 263440] [client 20.58.177.98:33223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/chosen.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ3wAAATk"]
[Wed Sep 30 01:07:38.746909 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.760403 2026] [security2:error] [pid 263262:tid 263476] [client 103.159.192.142:64122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ4AAAAV0"]
[Wed Sep 30 01:07:38.760521 2026] [security2:error] [pid 263262:tid 263476] [client 103.159.192.142:64122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ4AAAAV0"]
[Wed Sep 30 01:07:38.818984 2026] [security2:error] [pid 263262:tid 263413] [client 20.5.79.49:25842] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "taen.jfootsteps.com"] [uri "/.mopj.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ6gAAAR4"]
[Wed Sep 30 01:07:38.841438 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.841708 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:38.909658 2026] [security2:error] [pid 263262:tid 263403] [client 20.58.177.98:15859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1OpEcZ_148BjP8ZPZ7wAAARQ"]
[Wed Sep 30 01:07:38.930804 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:38.931118 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.015713 2026] [access_compat:error] [pid 263262:tid 263475] [client 47.79.13.167:46000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:39.016016 2026] [access_compat:error] [pid 263262:tid 263475] [client 47.79.13.167:46000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:39.019146 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.019387 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.089965 2026] [security2:error] [pid 263262:tid 263404] [client 74.7.230.49:50528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.hbh.hfj.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1O5EcZ_148BjP8ZPZ-wABFWQ"]
[Wed Sep 30 01:07:39.109458 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.109769 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.112494 2026] [security2:error] [pid 263262:tid 263339] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1O5EcZ_148BjP8ZPZ_wABEks"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=9239993876493b2e3989a9a897e28db3
[Wed Sep 30 01:07:39.112529 2026] [security2:error] [pid 263262:tid 263339] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1O5EcZ_148BjP8ZPZ_wABEks"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=9239993876493b2e3989a9a897e28db3
[Wed Sep 30 01:07:39.139205 2026] [security2:error] [pid 263262:tid 263426] [client 20.5.79.49:62342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "ary1O5EcZ_148BjP8ZPaAAAAASs"]
[Wed Sep 30 01:07:39.143034 2026] [security2:error] [pid 263262:tid 263433] [client 20.58.177.98:33674] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.yourkatana.com"] [uri "/1.php"] [unique_id "ary1O5EcZ_148BjP8ZPaAQAAATI"]
[Wed Sep 30 01:07:39.143151 2026] [security2:error] [pid 263262:tid 263433] [client 20.58.177.98:33674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/1.php"] [unique_id "ary1O5EcZ_148BjP8ZPaAQAAATI"]
[Wed Sep 30 01:07:39.200299 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.200574 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.201684 2026] [security2:error] [pid 263262:tid 263370] [remote 57.141.14.53:41444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 53.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/bicycle-master-plan-public-meeting/"] [unique_id "ary1O5EcZ_148BjP8ZPaBgABEGo"]
[Wed Sep 30 01:07:39.227591 2026] [security2:error] [pid 263262:tid 263444] [client 20.58.177.98:57436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/b8.php"] [unique_id "ary1O5EcZ_148BjP8ZPaBwAAAT0"]
[Wed Sep 30 01:07:39.296186 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.296614 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.369518 2026] [security2:error] [pid 263262:tid 263449] [client 116.193.128.26:63135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1O5EcZ_148BjP8ZPaDQAAAUI"]
[Wed Sep 30 01:07:39.369719 2026] [security2:error] [pid 263262:tid 263449] [client 116.193.128.26:63135] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1O5EcZ_148BjP8ZPaDQAAAUI"]
[Wed Sep 30 01:07:39.386133 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.386391 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.434435 2026] [security2:error] [pid 263262:tid 263500] [client 193.124.20.178:1586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.20.124.193.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "evaccfoundation.org"] [uri "/index.php/contactenos/"] [unique_id "ary1O5EcZ_148BjP8ZPaEAAAAXU"], referer: http://evaccfoundation.org/index.php/contactenos/
[Wed Sep 30 01:07:39.450883 2026] [security2:error] [pid 263262:tid 263395] [client 20.5.79.49:62336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.79.5.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taen.jfootsteps.com"] [uri "/wp-includes/css/dist/block-library/alfa-rex.php8"] [unique_id "ary1O5EcZ_148BjP8ZPaEQAAAQw"]
[Wed Sep 30 01:07:39.475957 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.476212 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.541425 2026] [security2:error] [pid 263262:tid 263476] [client 20.58.177.98:15869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/xex.php"] [unique_id "ary1O5EcZ_148BjP8ZPaGwAAAV0"]
[Wed Sep 30 01:07:39.568897 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.569168 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.592464 2026] [security2:error] [pid 263262:tid 263349] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1O5EcZ_148BjP8ZPaHgABWFU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D247229
[Wed Sep 30 01:07:39.592491 2026] [security2:error] [pid 263262:tid 263349] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1O5EcZ_148BjP8ZPaHgABWFU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D247229
[Wed Sep 30 01:07:39.659081 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.659349 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.692877 2026] [security2:error] [pid 263262:tid 263452] [client 20.58.177.98:33271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/radio.php"] [unique_id "ary1O5EcZ_148BjP8ZPaIwAAAUU"]
[Wed Sep 30 01:07:39.727526 2026] [security2:error] [pid 263262:tid 263509] [client 4.240.25.22:18762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/term.php"] [unique_id "ary1O5EcZ_148BjP8ZPaJgAAAX4"]
[Wed Sep 30 01:07:39.733827 2026] [security2:error] [pid 263262:tid 263451] [client 20.219.2.60:11378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/mini.php"] [unique_id "ary1O5EcZ_148BjP8ZPaJwAAAUQ"]
[Wed Sep 30 01:07:39.736505 2026] [security2:error] [pid 263262:tid 263465] [client 20.194.5.96:17208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1O5EcZ_148BjP8ZPaKAAAAVI"]
[Wed Sep 30 01:07:39.754553 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.754996 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.823670 2026] [security2:error] [pid 263262:tid 263421] [client 152.232.183.49:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1O5EcZ_148BjP8ZPaLwAAASY"]
[Wed Sep 30 01:07:39.842134 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.842410 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.861724 2026] [security2:error] [pid 263262:tid 263460] [client 20.58.177.98:15508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/ass.php"] [unique_id "ary1O5EcZ_148BjP8ZPaMgAAAU0"]
[Wed Sep 30 01:07:39.931649 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:39.931931 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:39.979938 2026] [security2:error] [pid 263262:tid 263464] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1O5EcZ_148BjP8ZPaQAAAAVE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:40.000216 2026] [security2:error] [pid 263262:tid 263508] [client 43.104.4.215:7653] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary1O5EcZ_148BjP8ZPaQQAAAX0"], referer: https://coscharis-tech.com/product-category/networking/network-video-recorder-networking/?wlfilter=1&woolentor_product_cat=speakers
[Wed Sep 30 01:07:40.006423 2026] [security2:error] [pid 263262:tid 263497] [client 20.28.180.172:18340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws61.php"] [unique_id "ary1PJEcZ_148BjP8ZPaQgAAAXI"]
[Wed Sep 30 01:07:40.023646 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.023920 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.094671 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.79.13.75:48628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:40.095151 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.79.13.75:48628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:40.112891 2026] [security2:error] [pid 263262:tid 263437] [client 20.58.177.98:33670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/blacks.php"] [unique_id "ary1PJEcZ_148BjP8ZPaSwAAATY"]
[Wed Sep 30 01:07:40.115799 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.116106 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.181377 2026] [security2:error] [pid 263262:tid 263503] [client 20.58.177.98:15870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wsd.php"] [unique_id "ary1PJEcZ_148BjP8ZPaTwAAAXg"]
[Wed Sep 30 01:07:40.210033 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.210491 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.301606 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.302083 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.328769 2026] [security2:error] [pid 263262:tid 263446] [client 20.198.74.230:23565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "ary1PJEcZ_148BjP8ZPaVAAAAT8"]
[Wed Sep 30 01:07:40.348485 2026] [security2:error] [pid 263262:tid 263447] [client 20.194.5.96:19104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wp5.php"] [unique_id "ary1PJEcZ_148BjP8ZPaVgAAAUA"]
[Wed Sep 30 01:07:40.388230 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.388492 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.428004 2026] [security2:error] [pid 263262:tid 263406] [client 168.100.149.140:31870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/mediaelement/wp-mediaelement.min.js"] [unique_id "ary1PJEcZ_148BjP8ZPaXQABFxk"]
[Wed Sep 30 01:07:40.460193 2026] [security2:error] [pid 263262:tid 263402] [client 43.227.131.37:54488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPaXgAAARM"]
[Wed Sep 30 01:07:40.460319 2026] [security2:error] [pid 263262:tid 263402] [client 43.227.131.37:54488] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPaXgAAARM"]
[Wed Sep 30 01:07:40.480380 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.480663 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.506982 2026] [security2:error] [pid 263262:tid 263498] [client 20.58.177.98:15827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/BDKR28WP.php"] [unique_id "ary1PJEcZ_148BjP8ZPaYwAAAXM"]
[Wed Sep 30 01:07:40.558245 2026] [security2:error] [pid 263262:tid 263429] [client 20.58.177.98:33229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/alfa.php"] [unique_id "ary1PJEcZ_148BjP8ZPaZgAAAS4"]
[Wed Sep 30 01:07:40.569350 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.569614 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:39541] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.654146 2026] [security2:error] [pid 263262:tid 263450] [client 216.73.216.46:39541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1PJEcZ_148BjP8ZPabAAAAUM"]
[Wed Sep 30 01:07:40.747294 2026] [security2:error] [pid 263262:tid 263435] [client 223.181.30.165:3553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPabgAAATQ"]
[Wed Sep 30 01:07:40.747411 2026] [security2:error] [pid 263262:tid 263435] [client 223.181.30.165:3553] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPabgAAATQ"]
[Wed Sep 30 01:07:40.752550 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.752817 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.824835 2026] [security2:error] [pid 263262:tid 263441] [client 20.58.177.98:15849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wmore1.php"] [unique_id "ary1PJEcZ_148BjP8ZPacgAAATo"]
[Wed Sep 30 01:07:40.841185 2026] [security2:error] [pid 263262:tid 263452] [client 182.69.182.151:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPadAAAAUU"]
[Wed Sep 30 01:07:40.841828 2026] [security2:error] [pid 263262:tid 263452] [client 182.69.182.151:14315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPadAAAAUU"]
[Wed Sep 30 01:07:40.844166 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.844427 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.888113 2026] [security2:error] [pid 263262:tid 263426] [client 20.194.5.96:17172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/k.php"] [unique_id "ary1PJEcZ_148BjP8ZPadwAAASs"]
[Wed Sep 30 01:07:40.889282 2026] [security2:error] [pid 263262:tid 263484] [client 104.208.65.139:32157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/bgbagbcw.php"] [unique_id "ary1PJEcZ_148BjP8ZPaeAAAAWU"]
[Wed Sep 30 01:07:40.891067 2026] [security2:error] [pid 263262:tid 263440] [client 106.214.2.47:5227] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPaeQAAATk"]
[Wed Sep 30 01:07:40.891158 2026] [security2:error] [pid 263262:tid 263440] [client 106.214.2.47:5227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1PJEcZ_148BjP8ZPaeQAAATk"]
[Wed Sep 30 01:07:40.926378 2026] [security2:error] [pid 263262:tid 263419] [client 20.28.180.172:29609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ccc.php"] [unique_id "ary1PJEcZ_148BjP8ZPaewAAASQ"]
[Wed Sep 30 01:07:40.935976 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:40.936252 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:40.938833 2026] [security2:error] [pid 263262:tid 263393] [client 20.58.177.98:33267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1PJEcZ_148BjP8ZPafQAAAQo"]
[Wed Sep 30 01:07:40.939826 2026] [security2:error] [pid 263262:tid 263432] [client 20.213.164.196:55226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/chosen.php"] [unique_id "ary1PJEcZ_148BjP8ZPafgAAATE"]
[Wed Sep 30 01:07:40.946444 2026] [mime:warn] [pid 263262:tid 263430] AH01602: Cannot get media parameter.
[Wed Sep 30 01:07:41.000676 2026] [security2:error] [pid 263262:tid 263495] [client 20.194.5.96:18933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/em.php"] [unique_id "ary1PZEcZ_148BjP8ZPahgAAAXA"]
[Wed Sep 30 01:07:41.024929 2026] [security2:error] [pid 263262:tid 263497] [client 206.204.41.179:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1PZEcZ_148BjP8ZPaiQAAAXI"]
[Wed Sep 30 01:07:41.026547 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.026821 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.117699 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.118102 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.138113 2026] [security2:error] [pid 263262:tid 263395] [client 20.58.177.98:15536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/z60.php"] [unique_id "ary1PZEcZ_148BjP8ZPajwAAAQw"]
[Wed Sep 30 01:07:41.154655 2026] [security2:error] [pid 263262:tid 263446] [client 20.219.2.60:18918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tfm.php"] [unique_id "ary1PZEcZ_148BjP8ZPakAAAAT8"]
[Wed Sep 30 01:07:41.179343 2026] [security2:error] [pid 263262:tid 263420] [client 20.219.2.60:11385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws68.php"] [unique_id "ary1PZEcZ_148BjP8ZPakgAAASU"]
[Wed Sep 30 01:07:41.213984 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.214438 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.301114 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.301393 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.379242 2026] [security2:error] [pid 263262:tid 263501] [client 20.58.177.98:33680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/b8.php"] [unique_id "ary1PZEcZ_148BjP8ZPamAAAAXY"]
[Wed Sep 30 01:07:41.393745 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.394585 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.450968 2026] [security2:error] [pid 263262:tid 263407] [client 20.58.177.98:15498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/24.php"] [unique_id "ary1PZEcZ_148BjP8ZPamwAAARg"]
[Wed Sep 30 01:07:41.485499 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.485857 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.574529 2026] [security2:error] [pid 263262:tid 263404] [client 20.194.5.96:18943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/hp.php"] [unique_id "ary1PZEcZ_148BjP8ZPapwAAARU"]
[Wed Sep 30 01:07:41.575363 2026] [security2:error] [pid 263262:tid 263467] [client 20.70.173.30:33310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/classwithtostring.php"] [unique_id "ary1PZEcZ_148BjP8ZPaqAAAAVQ"]
[Wed Sep 30 01:07:41.576016 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.576269 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.595188 2026] [access_compat:error] [pid 263262:tid 263302] [remote 17.166.24.242:56296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.595454 2026] [access_compat:error] [pid 263262:tid 263302] [remote 17.166.24.242:56296] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.671281 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.671719 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.733933 2026] [security2:error] [pid 263262:tid 263505] [client 103.168.67.253:60276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1PZEcZ_148BjP8ZPatAAAAXo"]
[Wed Sep 30 01:07:41.744783 2026] [security2:error] [pid 263262:tid 263419] [client 20.194.30.107:17487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/c.php"] [unique_id "ary1PZEcZ_148BjP8ZPatQAAASQ"]
[Wed Sep 30 01:07:41.759651 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.759947 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.762734 2026] [security2:error] [pid 263262:tid 263430] [client 20.58.177.98:15540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/xxw.php"] [unique_id "ary1PZEcZ_148BjP8ZPatwAAAS8"]
[Wed Sep 30 01:07:41.777021 2026] [security2:error] [pid 263262:tid 263399] [client 20.58.177.98:33707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xex.php"] [unique_id "ary1PZEcZ_148BjP8ZPauAAAARA"]
[Wed Sep 30 01:07:41.856623 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.857160 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:41.890164 2026] [security2:error] [pid 263262:tid 263515] [client 103.168.67.253:60278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1PZEcZ_148BjP8ZPavQAAAYQ"]
[Wed Sep 30 01:07:41.942607 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:41.943031 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.065596 2026] [security2:error] [pid 263262:tid 263510] [client 20.219.2.60:11694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/xxx.php"] [unique_id "ary1PpEcZ_148BjP8ZPa0gAAAX8"]
[Wed Sep 30 01:07:42.085176 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.085439 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.087202 2026] [security2:error] [pid 263262:tid 263468] [client 20.58.177.98:57448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/bnmtp.php"] [unique_id "ary1PpEcZ_148BjP8ZPa1wAAAVU"]
[Wed Sep 30 01:07:42.091212 2026] [security2:error] [pid 263262:tid 263406] [client 20.58.177.98:33685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ass.php"] [unique_id "ary1PpEcZ_148BjP8ZPa2AAAARc"]
[Wed Sep 30 01:07:42.128388 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.128683 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.189877 2026] [security2:error] [pid 263262:tid 263426] [client 223.181.60.167:4958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1PpEcZ_148BjP8ZPa3AAAASs"]
[Wed Sep 30 01:07:42.190109 2026] [security2:error] [pid 263262:tid 263426] [client 223.181.60.167:4958] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1PpEcZ_148BjP8ZPa3AAAASs"]
[Wed Sep 30 01:07:42.218621 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.218893 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.307536 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.307803 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:4466] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.335068 2026] [security2:error] [pid 263262:tid 263417] [client 20.194.30.107:9987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/mac.php"] [unique_id "ary1PpEcZ_148BjP8ZPa4AAAASI"]
[Wed Sep 30 01:07:42.340759 2026] [security2:error] [pid 263262:tid 263438] [client 45.138.12.32:28704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gdo.uiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1PpEcZ_148BjP8ZPa4gAAATc"]
[Wed Sep 30 01:07:42.371893 2026] [security2:error] [pid 263262:tid 263474] [client 20.194.5.96:18887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wpuse.php"] [unique_id "ary1PpEcZ_148BjP8ZPa5AAAAVs"]
[Wed Sep 30 01:07:42.401069 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.401362 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:55562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.416200 2026] [security2:error] [pid 263262:tid 263398] [client 20.58.177.98:15852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/ebkid.php"] [unique_id "ary1PpEcZ_148BjP8ZPa6QAAAQ8"]
[Wed Sep 30 01:07:42.442632 2026] [security2:error] [pid 263262:tid 263486] [client 168.100.149.213:31290] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js"] [unique_id "ary1PpEcZ_148BjP8ZPa6wABZzg"]
[Wed Sep 30 01:07:42.469771 2026] [security2:error] [pid 263262:tid 263519] [client 20.58.177.98:33269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wsd.php"] [unique_id "ary1PpEcZ_148BjP8ZPa7wAAAYg"]
[Wed Sep 30 01:07:42.492118 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.492410 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:27422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.497452 2026] [security2:error] [pid 263262:tid 263493] [client 20.194.5.96:16602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/133.php"] [unique_id "ary1PpEcZ_148BjP8ZPa8wAAAW4"]
[Wed Sep 30 01:07:42.504334 2026] [lsapi:warn] [pid 263262:tid 263485] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n
[Wed Sep 30 01:07:42.504347 2026] [lsapi:warn] [pid 263262:tid 263485] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n
[Wed Sep 30 01:07:42.584930 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.585204 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.631198 2026] [security2:error] [pid 263262:tid 263481] [client 20.198.74.230:24133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/XrdbXydefault.php"] [unique_id "ary1PpEcZ_148BjP8ZPbBQAAAWI"]
[Wed Sep 30 01:07:42.660151 2026] [security2:error] [pid 263262:tid 263466] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1PpEcZ_148BjP8ZPbCAAAAVM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:42.716257 2026] [security2:error] [pid 263262:tid 263396] [client 181.121.129.21:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1PpEcZ_148BjP8ZPbDAAAAQ0"]
[Wed Sep 30 01:07:42.727241 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.727654 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.744101 2026] [security2:error] [pid 263262:tid 263420] [client 20.58.177.98:15853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/133.php"] [unique_id "ary1PpEcZ_148BjP8ZPbEgAAASU"]
[Wed Sep 30 01:07:42.765941 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.766244 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.767318 2026] [lsapi:warn] [pid 263262:tid 263417] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/
[Wed Sep 30 01:07:42.767334 2026] [lsapi:warn] [pid 263262:tid 263417] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/
[Wed Sep 30 01:07:42.787759 2026] [access_compat:error] [pid 263262:tid 263293] [remote 17.166.236.19:56576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.788188 2026] [access_compat:error] [pid 263262:tid 263293] [remote 17.166.236.19:56576] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.796966 2026] [security2:error] [pid 263262:tid 263459] [client 103.168.66.101:62272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1PpEcZ_148BjP8ZPbGAAAAUw"]
[Wed Sep 30 01:07:42.858412 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.858846 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:42.888233 2026] [security2:error] [pid 263262:tid 263453] [client 20.219.2.60:18847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/a4.php"] [unique_id "ary1PpEcZ_148BjP8ZPbGwAAAUY"]
[Wed Sep 30 01:07:42.898516 2026] [security2:error] [pid 263262:tid 263414] [client 20.28.180.172:29617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/sm.php"] [unique_id "ary1PpEcZ_148BjP8ZPbHAAAAR8"]
[Wed Sep 30 01:07:42.915502 2026] [security2:error] [pid 263262:tid 263444] [client 20.70.173.30:33430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp.php"] [unique_id "ary1PpEcZ_148BjP8ZPbHQAAAT0"]
[Wed Sep 30 01:07:42.947001 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:42.947300 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.040804 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.041081 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.060654 2026] [lsapi:warn] [pid 263262:tid 263482] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/login
[Wed Sep 30 01:07:43.060681 2026] [lsapi:warn] [pid 263262:tid 263482] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/login
[Wed Sep 30 01:07:43.066510 2026] [security2:error] [pid 263262:tid 263404] [client 20.58.177.98:15815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/x33.php"] [unique_id "ary1P5EcZ_148BjP8ZPbLwAAARU"]
[Wed Sep 30 01:07:43.111189 2026] [security2:error] [pid 263262:tid 263445] [client 20.58.177.98:33239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/BDKR28WP.php"] [unique_id "ary1P5EcZ_148BjP8ZPbMwAAAT4"]
[Wed Sep 30 01:07:43.129023 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.129464 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.148962 2026] [security2:error] [pid 263262:tid 263437] [client 20.194.5.96:18906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/sm.php"] [unique_id "ary1P5EcZ_148BjP8ZPbOAAAATY"]
[Wed Sep 30 01:07:43.218791 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.219059 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.316527 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.316795 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.329659 2026] [security2:error] [pid 263262:tid 263428] [client 20.214.191.94:58747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1P5EcZ_148BjP8ZPbPwAAAS0"]
[Wed Sep 30 01:07:43.383863 2026] [security2:error] [pid 263262:tid 263394] [client 20.58.177.98:57418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/cae.php"] [unique_id "ary1P5EcZ_148BjP8ZPbQQAAAQs"]
[Wed Sep 30 01:07:43.391431 2026] [security2:error] [pid 263262:tid 263411] [client 20.194.5.96:17287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wsd.php"] [unique_id "ary1P5EcZ_148BjP8ZPbQgAAARw"]
[Wed Sep 30 01:07:43.405691 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.405956 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.423583 2026] [lsapi:warn] [pid 263262:tid 263474] [client 193.29.139.147:36584] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php?option=com_users
[Wed Sep 30 01:07:43.423614 2026] [lsapi:warn] [pid 263262:tid 263474] [client 193.29.139.147:36584] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php?option=com_users
[Wed Sep 30 01:07:43.426480 2026] [security2:error] [pid 263262:tid 263480] [client 20.213.164.196:21220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/radio.php"] [unique_id "ary1P5EcZ_148BjP8ZPbRQAAAWE"]
[Wed Sep 30 01:07:43.497042 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.497298 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.591150 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.591531 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.660690 2026] [security2:error] [pid 263262:tid 263423] [client 20.58.177.98:33664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wmore1.php"] [unique_id "ary1P5EcZ_148BjP8ZPbUQAAASg"]
[Wed Sep 30 01:07:43.680761 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.681036 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.688046 2026] [security2:error] [pid 263262:tid 263454] [client 20.28.180.172:29444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/a65.php"] [unique_id "ary1P5EcZ_148BjP8ZPbUwAAAUc"]
[Wed Sep 30 01:07:43.701624 2026] [security2:error] [pid 263262:tid 263463] [client 20.58.177.98:57456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/txets.php"] [unique_id "ary1P5EcZ_148BjP8ZPbVQAAAVA"]
[Wed Sep 30 01:07:43.767850 2026] [security2:error] [pid 263262:tid 263431] [client 213.136.69.135:63290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/PHPMailer/DSNConfigurator.php"] [unique_id "ary1P5EcZ_148BjP8ZPbWwAAATA"], referer: binance.com
[Wed Sep 30 01:07:43.771761 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.772031 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.788238 2026] [security2:error] [pid 263262:tid 263404] [client 20.214.191.94:58733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1P5EcZ_148BjP8ZPbXQAAARU"]
[Wed Sep 30 01:07:43.848966 2026] [security2:error] [pid 263262:tid 263497] [client 20.28.180.172:62384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/iyy.php"] [unique_id "ary1P5EcZ_148BjP8ZPbXgAAAXI"]
[Wed Sep 30 01:07:43.867244 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.867525 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:43.954541 2026] [security2:error] [pid 263262:tid 263437] [client 20.194.5.96:18892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/mknobgkg.php"] [unique_id "ary1P5EcZ_148BjP8ZPbZgAAATY"]
[Wed Sep 30 01:07:43.961710 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:43.962180 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.014286 2026] [security2:error] [pid 263262:tid 263439] [client 20.58.177.98:15864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wp-update.php"] [unique_id "ary1QJEcZ_148BjP8ZPbagAAATg"]
[Wed Sep 30 01:07:44.049411 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.049679 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.050499 2026] [security2:error] [pid 263262:tid 263507] [client 155.190.6.18:53170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbbgAAAXw"]
[Wed Sep 30 01:07:44.050586 2026] [security2:error] [pid 263262:tid 263507] [client 155.190.6.18:53170] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbbgAAAXw"]
[Wed Sep 30 01:07:44.058641 2026] [security2:error] [pid 263262:tid 263418] [client 103.168.67.253:60294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1QJEcZ_148BjP8ZPbbwAAASM"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:44.107850 2026] [security2:error] [pid 263262:tid 263465] [client 20.214.191.94:15907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1QJEcZ_148BjP8ZPbcwAAAVI"]
[Wed Sep 30 01:07:44.115266 2026] [security2:error] [pid 263262:tid 263490] [client 20.194.5.96:16578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/BDKR28WP.php"] [unique_id "ary1QJEcZ_148BjP8ZPbdgAAAWs"]
[Wed Sep 30 01:07:44.137856 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.138111 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.145899 2026] [access_compat:error] [pid 263262:tid 263306] [remote 17.166.235.184:46720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.146319 2026] [access_compat:error] [pid 263262:tid 263306] [remote 17.166.235.184:46720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.230105 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.230377 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.264859 2026] [security2:error] [pid 263262:tid 263486] [client 20.70.173.30:56984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/sb.php"] [unique_id "ary1QJEcZ_148BjP8ZPbgQAAAWc"]
[Wed Sep 30 01:07:44.318670 2026] [lsapi:warn] [pid 263262:tid 263393] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php?option=com_users&task=user.login
[Wed Sep 30 01:07:44.318700 2026] [lsapi:warn] [pid 263262:tid 263393] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php?option=com_users&task=user.login
[Wed Sep 30 01:07:44.320265 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.320529 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.333610 2026] [security2:error] [pid 263262:tid 263409] [client 20.194.5.96:18904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/dairg.php"] [unique_id "ary1QJEcZ_148BjP8ZPbigAAARo"]
[Wed Sep 30 01:07:44.335342 2026] [security2:error] [pid 263262:tid 263493] [client 20.58.177.98:15847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/177.php"] [unique_id "ary1QJEcZ_148BjP8ZPbjAAAAW4"]
[Wed Sep 30 01:07:44.357158 2026] [security2:error] [pid 263262:tid 263416] [client 20.219.2.60:11672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/njxjtooj.php"] [unique_id "ary1QJEcZ_148BjP8ZPbjQAAASE"]
[Wed Sep 30 01:07:44.395024 2026] [security2:error] [pid 263262:tid 263495] [client 45.138.12.32:12268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fwx.zsh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1QJEcZ_148BjP8ZPbjwAAAXA"]
[Wed Sep 30 01:07:44.412535 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.412806 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.434053 2026] [security2:error] [pid 263262:tid 263459] [client 45.138.12.32:40216] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pix.trp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1QJEcZ_148BjP8ZPbkQAAAUw"]
[Wed Sep 30 01:07:44.446238 2026] [security2:error] [pid 263262:tid 263471] [client 103.241.204.139:49558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbkwAAAVg"]
[Wed Sep 30 01:07:44.446537 2026] [security2:error] [pid 263262:tid 263471] [client 103.241.204.139:49558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbkwAAAVg"]
[Wed Sep 30 01:07:44.459060 2026] [security2:error] [pid 263262:tid 263455] [client 168.100.149.182:64928] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/jquery/ui/sortable.min.js"] [unique_id "ary1QJEcZ_148BjP8ZPblAABSDs"]
[Wed Sep 30 01:07:44.504497 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.504778 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.544412 2026] [lsapi:warn] [pid 263262:tid 263515] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/component/users
[Wed Sep 30 01:07:44.544435 2026] [lsapi:warn] [pid 263262:tid 263515] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/component/users
[Wed Sep 30 01:07:44.601321 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.601626 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.630744 2026] [security2:error] [pid 263262:tid 263506] [client 20.194.5.96:16586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wmore1.php"] [unique_id "ary1QJEcZ_148BjP8ZPbqAAAAXs"]
[Wed Sep 30 01:07:44.651327 2026] [security2:error] [pid 263262:tid 263502] [client 20.214.191.94:58740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/aa.php"] [unique_id "ary1QJEcZ_148BjP8ZPbqwAAAXc"]
[Wed Sep 30 01:07:44.655992 2026] [security2:error] [pid 263262:tid 263438] [client 103.159.192.142:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbqQAAATc"]
[Wed Sep 30 01:07:44.656196 2026] [security2:error] [pid 263262:tid 263438] [client 103.159.192.142:64259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbqQAAATc"]
[Wed Sep 30 01:07:44.661872 2026] [security2:error] [pid 263262:tid 263477] [client 20.58.177.98:15881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/ccc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbrAAAAV4"]
[Wed Sep 30 01:07:44.684496 2026] [security2:error] [pid 263262:tid 263394] [client 20.194.5.96:19101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/dronishness.php"] [unique_id "ary1QJEcZ_148BjP8ZPbrgAAAQs"]
[Wed Sep 30 01:07:44.690646 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.690927 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.768514 2026] [lsapi:warn] [pid 263262:tid 263421] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users
[Wed Sep 30 01:07:44.768535 2026] [lsapi:warn] [pid 263262:tid 263421] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users
[Wed Sep 30 01:07:44.774536 2026] [security2:error] [pid 263262:tid 263509] [client 20.70.173.30:57021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ops.php"] [unique_id "ary1QJEcZ_148BjP8ZPbsgAAAX4"]
[Wed Sep 30 01:07:44.781994 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.782275 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.873907 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.874273 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.887870 2026] [security2:error] [pid 263262:tid 263464] [client 20.219.2.60:18851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wen.php"] [unique_id "ary1QJEcZ_148BjP8ZPbvAAAAVE"]
[Wed Sep 30 01:07:44.910205 2026] [security2:error] [pid 263262:tid 263504] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1QJEcZ_148BjP8ZPbxQAAAXk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:44.912615 2026] [security2:error] [pid 263262:tid 263431] [client 116.197.133.25:62914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbwwAAATA"]
[Wed Sep 30 01:07:44.912816 2026] [security2:error] [pid 263262:tid 263431] [client 116.197.133.25:62914] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1QJEcZ_148BjP8ZPbwwAAATA"]
[Wed Sep 30 01:07:44.930831 2026] [security2:error] [pid 263262:tid 263495] [client 20.58.177.98:33260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/z60.php"] [unique_id "ary1QJEcZ_148BjP8ZPbyAAAAXA"]
[Wed Sep 30 01:07:44.968958 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:44.969396 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:44.984746 2026] [security2:error] [pid 263262:tid 263481] [client 20.58.177.98:15833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/0xD.php"] [unique_id "ary1QJEcZ_148BjP8ZPb0gAAAWI"]
[Wed Sep 30 01:07:45.057455 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.057757 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.067560 2026] [security2:error] [pid 263262:tid 263465] [client 20.214.191.94:58751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/z70.php"] [unique_id "ary1QZEcZ_148BjP8ZPb2AAAAVI"]
[Wed Sep 30 01:07:45.074939 2026] [security2:error] [pid 263262:tid 263428] [client 103.168.67.253:60308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1QZEcZ_148BjP8ZPb2QAAAS0"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:45.088963 2026] [ssl:error] [pid 263262:tid 263429] [client 216.25.124.26:15679] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname www.sxx.tyy.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:07:45.095248 2026] [security2:error] [pid 263262:tid 263480] [client 20.194.30.107:10018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/abcd.php"] [unique_id "ary1QZEcZ_148BjP8ZPb3gAAAWE"]
[Wed Sep 30 01:07:45.146776 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.147292 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.236755 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.237040 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.264426 2026] [security2:error] [pid 263262:tid 263464] [client 20.194.5.96:19099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/Row_wsoo.php"] [unique_id "ary1QZEcZ_148BjP8ZPb6wAAAVE"]
[Wed Sep 30 01:07:45.294743 2026] [security2:error] [pid 263262:tid 263417] [client 20.194.5.96:17153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/177.php"] [unique_id "ary1QZEcZ_148BjP8ZPb7AAAASI"]
[Wed Sep 30 01:07:45.307190 2026] [security2:error] [pid 263262:tid 263493] [client 20.58.177.98:15812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/sallu.php"] [unique_id "ary1QZEcZ_148BjP8ZPb7QAAAW4"]
[Wed Sep 30 01:07:45.327638 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.327899 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.419682 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.419958 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.466719 2026] [security2:error] [pid 263262:tid 263334] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1QZEcZ_148BjP8ZPb-AABSkY"], referer: https://forum.torquayfans.com/viewtopic.php?p=288636&sid=de6f169065eac81a71e7bb3dc1fa19c0
[Wed Sep 30 01:07:45.466756 2026] [security2:error] [pid 263262:tid 263334] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1QZEcZ_148BjP8ZPb-AABSkY"], referer: https://forum.torquayfans.com/viewtopic.php?p=288636&sid=de6f169065eac81a71e7bb3dc1fa19c0
[Wed Sep 30 01:07:45.496854 2026] [security2:error] [pid 263262:tid 263491] [client 31.189.214.146:54886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1QZEcZ_148BjP8ZPb_wAAAWw"]
[Wed Sep 30 01:07:45.498861 2026] [security2:error] [pid 263262:tid 263491] [client 31.189.214.146:54886] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1QZEcZ_148BjP8ZPb_wAAAWw"]
[Wed Sep 30 01:07:45.514181 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.514611 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.518376 2026] [security2:error] [pid 263262:tid 263441] [client 20.213.164.196:21331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wp_blog_footer.php"] [unique_id "ary1QZEcZ_148BjP8ZPcAQAAATo"]
[Wed Sep 30 01:07:45.528406 2026] [access_compat:error] [pid 263262:tid 263515] [client 47.79.13.78:59720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:45.528796 2026] [access_compat:error] [pid 263262:tid 263515] [client 47.79.13.78:59720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:45.602553 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.602831 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.626063 2026] [security2:error] [pid 263262:tid 263465] [client 20.58.177.98:15500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/xwpg.php"] [unique_id "ary1QZEcZ_148BjP8ZPcDgAAAVI"]
[Wed Sep 30 01:07:45.651034 2026] [security2:error] [pid 263262:tid 263503] [client 20.214.191.94:15891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/f35.php"] [unique_id "ary1QZEcZ_148BjP8ZPcDwAAAXg"]
[Wed Sep 30 01:07:45.664432 2026] [security2:error] [pid 263262:tid 263430] [client 20.219.2.60:11655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws85.php"] [unique_id "ary1QZEcZ_148BjP8ZPcEQAAAS8"]
[Wed Sep 30 01:07:45.690521 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.690835 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.736686 2026] [autoindex:error] [pid 263262:tid 263439] [client 35.187.36.114:7978] AH01276: Cannot serve directory /home4/frticlmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:45.764227 2026] [autoindex:error] [pid 263262:tid 263404] [client 35.187.36.114:7990] AH01276: Cannot serve directory /home4/frticlmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:07:45.783727 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.784165 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.803459 2026] [security2:error] [pid 263262:tid 263468] [client 103.168.66.101:62276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1QZEcZ_148BjP8ZPcHgAAAVU"]
[Wed Sep 30 01:07:45.809346 2026] [security2:error] [pid 263262:tid 263458] [client 20.70.173.30:56992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/or.php"] [unique_id "ary1QZEcZ_148BjP8ZPcIQAAAUs"]
[Wed Sep 30 01:07:45.872146 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.872412 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:45.902056 2026] [lsapi:warn] [pid 263262:tid 263417] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users/?view=login
[Wed Sep 30 01:07:45.902072 2026] [lsapi:warn] [pid 263262:tid 263417] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users/?view=login
[Wed Sep 30 01:07:45.919229 2026] [security2:error] [pid 263262:tid 263397] [client 20.214.191.94:15884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/adminfuns.php"] [unique_id "ary1QZEcZ_148BjP8ZPcKwAAAQ4"]
[Wed Sep 30 01:07:45.944553 2026] [security2:error] [pid 263262:tid 263479] [client 20.58.177.98:15863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/flamini.php"] [unique_id "ary1QZEcZ_148BjP8ZPcLgAAAWA"]
[Wed Sep 30 01:07:45.964107 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:45.964404 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.055701 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.055978 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.078417 2026] [security2:error] [pid 263262:tid 263515] [client 20.194.5.96:17161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/ccc.php"] [unique_id "ary1QpEcZ_148BjP8ZPcOwAAAYQ"]
[Wed Sep 30 01:07:46.129544 2026] [security2:error] [pid 263262:tid 263472] [client 20.194.5.96:19122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/x2.php"] [unique_id "ary1QpEcZ_148BjP8ZPcQAAAAVk"]
[Wed Sep 30 01:07:46.139607 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:33677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/pJPoKA.php"] [unique_id "ary1QpEcZ_148BjP8ZPcQQAAAXI"]
[Wed Sep 30 01:07:46.146718 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.147028 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.151205 2026] [security2:error] [pid 263262:tid 263433] [client 20.213.164.196:55187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/k.php"] [unique_id "ary1QpEcZ_148BjP8ZPcQwAAATI"]
[Wed Sep 30 01:07:46.238407 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.238701 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.240334 2026] [security2:error] [pid 263262:tid 263444] [client 20.214.191.94:15894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/av.php"] [unique_id "ary1QpEcZ_148BjP8ZPcSAAAAT0"]
[Wed Sep 30 01:07:46.279076 2026] [security2:error] [pid 263262:tid 263440] [client 20.58.177.98:15837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/themes.php"] [unique_id "ary1QpEcZ_148BjP8ZPcSwAAATk"]
[Wed Sep 30 01:07:46.328590 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.328930 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.364660 2026] [lsapi:warn] [pid 263262:tid 263405] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users/remind?Itemid=101&task=remind.remind
[Wed Sep 30 01:07:46.364683 2026] [lsapi:warn] [pid 263262:tid 263405] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/index.php/component/users/remind?Itemid=101&task=remind.remind
[Wed Sep 30 01:07:46.389457 2026] [security2:error] [pid 263262:tid 263437] [client 103.168.67.253:33264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1QpEcZ_148BjP8ZPcUwAAATY"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:46.421073 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.421367 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.452440 2026] [security2:error] [pid 263262:tid 263493] [client 43.167.241.46:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.crictideas.com"] [uri "/"] [unique_id "ary1QpEcZ_148BjP8ZPcWAAAAW4"]
[Wed Sep 30 01:07:46.455083 2026] [security2:error] [pid 263262:tid 263398] [client 168.100.149.195:54152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/plupload/moxie.min.js"] [unique_id "ary1QpEcZ_148BjP8ZPcVwABD3U"]
[Wed Sep 30 01:07:46.476678 2026] [security2:error] [pid 263262:tid 263414] [client 84.17.60.236:57784] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1QpEcZ_148BjP8ZPcWwAAAR8"]
[Wed Sep 30 01:07:46.490374 2026] [security2:error] [pid 263262:tid 263399] [client 20.219.2.60:11843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws61.php"] [unique_id "ary1QpEcZ_148BjP8ZPcXAAAARA"]
[Wed Sep 30 01:07:46.517141 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.517573 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.577082 2026] [security2:error] [pid 263262:tid 263407] [client 20.70.173.30:33294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/key.php"] [unique_id "ary1QpEcZ_148BjP8ZPcZgAAARg"]
[Wed Sep 30 01:07:46.593788 2026] [lsapi:warn] [pid 263262:tid 263438] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Cannot call session save handler in a recursive manner in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/search
[Wed Sep 30 01:07:46.593821 2026] [lsapi:warn] [pid 263262:tid 263438] [client 193.29.139.147:0] [host codeproblem.com] Backend log: PHP Warning:  session_write_close(): Failed to write session data using user defined save handler. (session.save_path: /opt/alt/php74/var/lib/php/session) in /home2/hamaraq1/public_html/codeproblem/public_html/libraries/joomla/session/session.php on line 676\n, referer: http://codeproblem.com/search
[Wed Sep 30 01:07:46.601175 2026] [security2:error] [pid 263262:tid 263491] [client 20.58.177.98:57421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/0.php"] [unique_id "ary1QpEcZ_148BjP8ZPcagAAAWw"]
[Wed Sep 30 01:07:46.602470 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.602734 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.612436 2026] [security2:error] [pid 263262:tid 263498] [client 20.214.191.94:15899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/dex.php"] [unique_id "ary1QpEcZ_148BjP8ZPcbAAAAXM"]
[Wed Sep 30 01:07:46.613655 2026] [security2:error] [pid 263262:tid 263265] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1QpEcZ_148BjP8ZPcawABVgE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=3583f77e9f9101594204666a0310eb06&start=30&t=13186
[Wed Sep 30 01:07:46.613696 2026] [security2:error] [pid 263262:tid 263265] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1QpEcZ_148BjP8ZPcawABVgE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=3583f77e9f9101594204666a0310eb06&start=30&t=13186
[Wed Sep 30 01:07:46.679727 2026] [security2:error] [pid 263262:tid 263427] [client 20.28.180.172:61239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/900.php"] [unique_id "ary1QpEcZ_148BjP8ZPcbgAAASw"]
[Wed Sep 30 01:07:46.693071 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.693331 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:19694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.778398 2026] [security2:error] [pid 263262:tid 263470] [client 216.73.216.46:19694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1QpEcZ_148BjP8ZPcdQAAAVc"]
[Wed Sep 30 01:07:46.788736 2026] [security2:error] [pid 263262:tid 263485] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1QpEcZ_148BjP8ZPcdgAAAWY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:46.802744 2026] [security2:error] [pid 263262:tid 263404] [client 84.17.60.236:57794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sewbusyfashion.com"] [uri "/xmlrpc.php"] [unique_id "ary1QpEcZ_148BjP8ZPceQAAARU"]
[Wed Sep 30 01:07:46.824772 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.5.96:19073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/v4.php"] [unique_id "ary1QpEcZ_148BjP8ZPcewAAATg"]
[Wed Sep 30 01:07:46.867008 2026] [security2:error] [pid 263262:tid 263507] [client 20.58.177.98:33413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/24.php"] [unique_id "ary1QpEcZ_148BjP8ZPcgAAAAXw"]
[Wed Sep 30 01:07:46.874343 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.874627 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.926388 2026] [security2:error] [pid 263262:tid 263436] [client 20.58.177.98:15842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/opsh.php"] [unique_id "ary1QpEcZ_148BjP8ZPchAAAATU"]
[Wed Sep 30 01:07:46.967303 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:46.967607 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:46.974837 2026] [security2:error] [pid 263262:tid 263406] [client 20.214.191.94:15895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/chosen.php"] [unique_id "ary1QpEcZ_148BjP8ZPciAAAARc"]
[Wed Sep 30 01:07:47.001240 2026] [security2:error] [pid 263262:tid 263502] [client 4.240.25.22:12477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/chosen.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcigAAAXc"]
[Wed Sep 30 01:07:47.053578 2026] [security2:error] [pid 263262:tid 263398] [client 20.70.173.30:63142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/baru.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcjgAAAQ8"]
[Wed Sep 30 01:07:47.058260 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.058568 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.110589 2026] [security2:error] [pid 263262:tid 263506] [client 45.138.12.32:28794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gck.tiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcjwAAAXs"]
[Wed Sep 30 01:07:47.148662 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.148963 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.154259 2026] [security2:error] [pid 263262:tid 263467] [client 37.41.16.35:50321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1Q5EcZ_148BjP8ZPclwAAAVQ"]
[Wed Sep 30 01:07:47.154393 2026] [security2:error] [pid 263262:tid 263467] [client 37.41.16.35:50321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1Q5EcZ_148BjP8ZPclwAAAVQ"]
[Wed Sep 30 01:07:47.190282 2026] [security2:error] [pid 263262:tid 263457] [client 20.58.177.98:33233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xxw.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcmQAAAUo"]
[Wed Sep 30 01:07:47.220133 2026] [security2:error] [pid 263262:tid 263413] [client 20.219.2.60:18877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ms.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcnAAAAR4"]
[Wed Sep 30 01:07:47.221628 2026] [security2:error] [pid 263262:tid 263501] [client 52.231.30.175:38805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcngAAAXY"]
[Wed Sep 30 01:07:47.239088 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.239363 2026] [access_compat:error] [pid 263262:tid 263438] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.245318 2026] [security2:error] [pid 263262:tid 263453] [client 20.58.177.98:57409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/pass4.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcoQAAAUY"]
[Wed Sep 30 01:07:47.255731 2026] [security2:error] [pid 263262:tid 263461] [client 20.70.173.30:27806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/abcd.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcogAAAU4"]
[Wed Sep 30 01:07:47.266667 2026] [security2:error] [pid 263262:tid 263474] [client 20.214.191.94:58701] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "hairwish.an-ime.com"] [uri "/1.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcowAAAVs"]
[Wed Sep 30 01:07:47.266784 2026] [security2:error] [pid 263262:tid 263474] [client 20.214.191.94:58701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/1.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcowAAAVs"]
[Wed Sep 30 01:07:47.310396 2026] [security2:error] [pid 263262:tid 263416] [client 84.17.60.236:57796] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1Q5EcZ_148BjP8ZPcpgAAASE"]
[Wed Sep 30 01:07:47.331854 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.332155 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.382502 2026] [security2:error] [pid 263262:tid 263472] [client 20.28.180.172:34293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/koiy.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcrAAAAVk"]
[Wed Sep 30 01:07:47.423437 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.423723 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.481630 2026] [security2:error] [pid 263262:tid 263451] [client 52.231.30.175:38897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcsgAAAUQ"]
[Wed Sep 30 01:07:47.511941 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.512226 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.564550 2026] [security2:error] [pid 263262:tid 263404] [client 20.58.177.98:15512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/drttewyh.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcuAAAARU"]
[Wed Sep 30 01:07:47.594606 2026] [security2:error] [pid 263262:tid 263481] [client 20.214.191.94:58744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/radio.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcvAAAAWI"]
[Wed Sep 30 01:07:47.602429 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.602714 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.638566 2026] [security2:error] [pid 263262:tid 263400] [client 84.17.60.236:57812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1Q5EcZ_148BjP8ZPcvgAAARE"]
[Wed Sep 30 01:07:47.653445 2026] [security2:error] [pid 263262:tid 263443] [client 20.58.177.98:33245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/bnmtp.php"] [unique_id "ary1Q5EcZ_148BjP8ZPcwgAAATw"]
[Wed Sep 30 01:07:47.701133 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.701586 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.742713 2026] [security2:error] [pid 263262:tid 263493] [client 52.231.30.175:38816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/1ac.php"] [unique_id "ary1Q5EcZ_148BjP8ZPczQAAAW4"]
[Wed Sep 30 01:07:47.787849 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.788118 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.804856 2026] [security2:error] [pid 263262:tid 263501] [client 20.219.2.60:11666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/iyy.php"] [unique_id "ary1Q5EcZ_148BjP8ZPc0wAAAXY"]
[Wed Sep 30 01:07:47.876366 2026] [security2:error] [pid 263262:tid 263515] [client 122.173.27.10:9383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1Q5EcZ_148BjP8ZPc3AAAAYQ"]
[Wed Sep 30 01:07:47.876478 2026] [security2:error] [pid 263262:tid 263515] [client 122.173.27.10:9383] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1Q5EcZ_148BjP8ZPc3AAAAYQ"]
[Wed Sep 30 01:07:47.878011 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.878273 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:47.882681 2026] [security2:error] [pid 263262:tid 263417] [client 20.58.177.98:57428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/sh.php"] [unique_id "ary1Q5EcZ_148BjP8ZPc3QAAASI"]
[Wed Sep 30 01:07:47.901945 2026] [security2:error] [pid 263262:tid 263459] [client 20.214.191.94:58695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/blacks.php"] [unique_id "ary1Q5EcZ_148BjP8ZPc3wAAAUw"]
[Wed Sep 30 01:07:47.961506 2026] [security2:error] [pid 263262:tid 263428] [client 84.17.60.236:57822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1Q5EcZ_148BjP8ZPc5QAAAS0"]
[Wed Sep 30 01:07:47.967887 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:47.968135 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:12601] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.001143 2026] [security2:error] [pid 263262:tid 263509] [client 20.219.2.60:19409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/hplfuns.php"] [unique_id "ary1RJEcZ_148BjP8ZPc7QAAAX4"]
[Wed Sep 30 01:07:48.004268 2026] [security2:error] [pid 263262:tid 263447] [client 52.231.30.175:38825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/flm.php"] [unique_id "ary1RJEcZ_148BjP8ZPc7gAAAUA"]
[Wed Sep 30 01:07:48.045218 2026] [security2:error] [pid 263262:tid 263433] [client 20.58.177.98:33261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ebkid.php"] [unique_id "ary1RJEcZ_148BjP8ZPc8AAAATI"]
[Wed Sep 30 01:07:48.063149 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.063453 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.099460 2026] [security2:error] [pid 263262:tid 263407] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1RJEcZ_148BjP8ZPc9AAAARg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:48.145791 2026] [security2:error] [pid 263262:tid 263297] [remote 220.181.108.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1RJEcZ_148BjP8ZPc9QABiCE"]
[Wed Sep 30 01:07:48.153855 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.154140 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.202123 2026] [security2:error] [pid 263262:tid 263489] [client 20.58.177.98:43241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/groud1.php"] [unique_id "ary1RJEcZ_148BjP8ZPc-wAAAWo"]
[Wed Sep 30 01:07:48.239686 2026] [security2:error] [pid 263262:tid 263482] [client 103.168.67.253:33268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1RJEcZ_148BjP8ZPc_QAAAWM"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:48.244993 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.245258 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.266961 2026] [security2:error] [pid 263262:tid 263426] [client 52.231.30.175:38808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/40341.php"] [unique_id "ary1RJEcZ_148BjP8ZPdAQAAASs"]
[Wed Sep 30 01:07:48.276308 2026] [security2:error] [pid 263262:tid 263507] [client 20.214.191.94:15878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/alfa.php"] [unique_id "ary1RJEcZ_148BjP8ZPdBAAAAXw"]
[Wed Sep 30 01:07:48.283037 2026] [security2:error] [pid 263262:tid 263476] [client 20.213.164.196:21314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/133.php"] [unique_id "ary1RJEcZ_148BjP8ZPdBQAAAV0"]
[Wed Sep 30 01:07:48.296711 2026] [security2:error] [pid 263262:tid 263436] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1RJEcZ_148BjP8ZPdBgAAATU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:48.297237 2026] [security2:error] [pid 263262:tid 263445] [client 84.17.60.236:44928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1RJEcZ_148BjP8ZPdBwAAAT4"]
[Wed Sep 30 01:07:48.337552 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.337850 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.357165 2026] [security2:error] [pid 263262:tid 263446] [client 103.168.66.101:62290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/wp-login.php"] [unique_id "ary1RJEcZ_148BjP8ZPdCgAAAT8"]
[Wed Sep 30 01:07:48.368318 2026] [security2:error] [pid 263262:tid 263474] [client 20.194.5.96:18501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/albin.php"] [unique_id "ary1RJEcZ_148BjP8ZPdDgAAAVs"]
[Wed Sep 30 01:07:48.372031 2026] [security2:error] [pid 263262:tid 263410] [client 136.242.123.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary1RJEcZ_148BjP8ZPdDwAAARs"]
[Wed Sep 30 01:07:48.377584 2026] [security2:error] [pid 263262:tid 263491] [client 216.73.216.46:12601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1RJEcZ_148BjP8ZPdEAAAAWw"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL2ph
[Wed Sep 30 01:07:48.397042 2026] [security2:error] [pid 263262:tid 263417] [client 185.243.53.182:34998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.53.243.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "helpsyriatoday.orontes-tech.com"] [uri "/wp-login.php"] [unique_id "ary1RJEcZ_148BjP8ZPdEQAAASI"], referer: http://helpsyriatoday.orontes-tech.com/wp-login.php
[Wed Sep 30 01:07:48.404993 2026] [security2:error] [pid 263262:tid 263459] [client 74.7.242.1:57918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1RJEcZ_148BjP8ZPdEgAAAUw"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:07:48.428889 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.429149 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.445584 2026] [security2:error] [pid 263262:tid 263483] [client 168.100.149.48:38566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/header-footer-elementor/inc/js/frontend.js"] [unique_id "ary1RJEcZ_148BjP8ZPdFQABZAw"]
[Wed Sep 30 01:07:48.470250 2026] [security2:error] [pid 263262:tid 263498] [client 152.59.165.7:51398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdFgAAAXM"]
[Wed Sep 30 01:07:48.470370 2026] [security2:error] [pid 263262:tid 263498] [client 152.59.165.7:51398] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdFgAAAXM"]
[Wed Sep 30 01:07:48.519594 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.520020 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.528637 2026] [security2:error] [pid 263262:tid 263492] [client 52.231.30.175:38824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-log.php"] [unique_id "ary1RJEcZ_148BjP8ZPdIwAAAW0"]
[Wed Sep 30 01:07:48.528659 2026] [security2:error] [pid 263262:tid 263485] [client 20.58.177.98:57417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/bro.php"] [unique_id "ary1RJEcZ_148BjP8ZPdIgAAAWY"]
[Wed Sep 30 01:07:48.612176 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.612535 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.633928 2026] [security2:error] [pid 263262:tid 263419] [client 84.17.60.236:44932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1RJEcZ_148BjP8ZPdLAAAASQ"]
[Wed Sep 30 01:07:48.672696 2026] [security2:error] [pid 263262:tid 263442] [client 203.122.45.246:62866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdLgAAATs"]
[Wed Sep 30 01:07:48.673030 2026] [security2:error] [pid 263262:tid 263442] [client 203.122.45.246:62866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdLgAAATs"]
[Wed Sep 30 01:07:48.700242 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.700617 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.722672 2026] [security2:error] [pid 263262:tid 263423] [client 20.214.191.94:58715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1RJEcZ_148BjP8ZPdMQAAASg"]
[Wed Sep 30 01:07:48.764582 2026] [security2:error] [pid 263262:tid 263399] [client 20.58.177.98:33244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/133.php"] [unique_id "ary1RJEcZ_148BjP8ZPdMwAAARA"]
[Wed Sep 30 01:07:48.791060 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.791338 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.796143 2026] [security2:error] [pid 263262:tid 263463] [client 52.231.30.175:38899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/sehryhv.php"] [unique_id "ary1RJEcZ_148BjP8ZPdNQAAAVA"]
[Wed Sep 30 01:07:48.798324 2026] [security2:error] [pid 263262:tid 263460] [client 20.28.180.172:62368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/blsvgeyaza.php"] [unique_id "ary1RJEcZ_148BjP8ZPdNgAAAU0"]
[Wed Sep 30 01:07:48.845278 2026] [security2:error] [pid 263262:tid 263482] [client 20.219.19.141:65502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1RJEcZ_148BjP8ZPdOAAAAWM"]
[Wed Sep 30 01:07:48.845342 2026] [security2:error] [pid 263262:tid 263398] [client 20.58.177.98:57470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1RJEcZ_148BjP8ZPdOQAAAQ8"]
[Wed Sep 30 01:07:48.860036 2026] [security2:error] [pid 263262:tid 263501] [client 223.235.102.107:21015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdOwAAAXY"]
[Wed Sep 30 01:07:48.860186 2026] [security2:error] [pid 263262:tid 263501] [client 223.235.102.107:21015] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdOwAAAXY"]
[Wed Sep 30 01:07:48.918936 2026] [security2:error] [pid 263262:tid 263476] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1RJEcZ_148BjP8ZPdPgAAAV0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:48.932165 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.932415 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:48.953449 2026] [security2:error] [pid 263262:tid 263473] [client 84.17.60.236:44934] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1RJEcZ_148BjP8ZPdQwAAAVo"]
[Wed Sep 30 01:07:48.971931 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:48.972209 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.011700 2026] [security2:error] [pid 263262:tid 263515] [client 20.70.173.30:19195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/w.php"] [unique_id "ary1RZEcZ_148BjP8ZPdSQAAAYQ"]
[Wed Sep 30 01:07:49.062197 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.062283 2026] [security2:error] [pid 263262:tid 263438] [client 20.219.2.60:11343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/900.php"] [unique_id "ary1RZEcZ_148BjP8ZPdUQAAATc"]
[Wed Sep 30 01:07:49.062455 2026] [access_compat:error] [pid 263262:tid 263508] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.104844 2026] [security2:error] [pid 263262:tid 263498] [client 20.194.5.96:16580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/0xD.php"] [unique_id "ary1RZEcZ_148BjP8ZPdVAAAAXM"]
[Wed Sep 30 01:07:49.105854 2026] [security2:error] [pid 263262:tid 263454] [client 52.231.30.175:38790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/yich.php"] [unique_id "ary1RZEcZ_148BjP8ZPdVQAAAUc"]
[Wed Sep 30 01:07:49.134287 2026] [security2:error] [pid 263262:tid 263444] [client 49.43.163.212:57160] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1RJEcZ_148BjP8ZPdRgAAAT0"]
[Wed Sep 30 01:07:49.164405 2026] [security2:error] [pid 263262:tid 263511] [client 20.58.177.98:15879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/zoo2.php"] [unique_id "ary1RZEcZ_148BjP8ZPdWQAAAYA"]
[Wed Sep 30 01:07:49.170237 2026] [security2:error] [pid 263262:tid 263471] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1RZEcZ_148BjP8ZPdWgAAAVg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:49.178915 2026] [security2:error] [pid 263262:tid 263470] [client 103.159.192.142:64745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdWwAAAVc"]
[Wed Sep 30 01:07:49.179008 2026] [security2:error] [pid 263262:tid 263470] [client 103.159.192.142:64745] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdWwAAAVc"]
[Wed Sep 30 01:07:49.199070 2026] [security2:error] [pid 263262:tid 263480] [client 20.58.177.98:33276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/x33.php"] [unique_id "ary1RZEcZ_148BjP8ZPdXgAAAWE"]
[Wed Sep 30 01:07:49.204631 2026] [security2:error] [pid 263262:tid 263402] [client 20.214.191.94:15818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/b8.php"] [unique_id "ary1RZEcZ_148BjP8ZPdYAAAARM"]
[Wed Sep 30 01:07:49.208353 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.208783 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.213961 2026] [security2:error] [pid 263262:tid 263427] [client 84.8.102.109:50795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.102.8.84.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "camera-roll.com"] [uri "/wp-links-opml.php"] [unique_id "ary1RZEcZ_148BjP8ZPdYQAAASw"]
[Wed Sep 30 01:07:49.246978 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.247259 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.264893 2026] [security2:error] [pid 263262:tid 263496] [client 103.168.66.101:62298] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "networkwestmichigan.com"] [uri "/"] [unique_id "ary1RZEcZ_148BjP8ZPdZAAAAXE"]
[Wed Sep 30 01:07:49.267961 2026] [security2:error] [pid 263262:tid 263424] [client 202.179.95.79:52973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdYwAAASk"]
[Wed Sep 30 01:07:49.268142 2026] [security2:error] [pid 263262:tid 263424] [client 202.179.95.79:52973] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdYwAAASk"]
[Wed Sep 30 01:07:49.284523 2026] [security2:error] [pid 263262:tid 263497] [client 84.17.60.236:44948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1RZEcZ_148BjP8ZPdZQAAAXI"]
[Wed Sep 30 01:07:49.339220 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.339518 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.374017 2026] [security2:error] [pid 263262:tid 263443] [client 52.231.30.175:32206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-blink.php"] [unique_id "ary1RZEcZ_148BjP8ZPdawAAATw"]
[Wed Sep 30 01:07:49.401754 2026] [security2:error] [pid 263262:tid 263395] [client 103.168.66.101:62298] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "networkwestmichigan.com"] [uri "/"] [unique_id "ary1RZEcZ_148BjP8ZPdbQAAAQw"]
[Wed Sep 30 01:07:49.435658 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.435971 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.486451 2026] [security2:error] [pid 263262:tid 263482] [client 20.58.177.98:57432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/zoo1.php"] [unique_id "ary1RZEcZ_148BjP8ZPdeAAAAWM"]
[Wed Sep 30 01:07:49.500452 2026] [security2:error] [pid 263262:tid 263398] [client 20.214.191.94:15873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/xex.php"] [unique_id "ary1RZEcZ_148BjP8ZPdegAAAQ8"]
[Wed Sep 30 01:07:49.518555 2026] [security2:error] [pid 263262:tid 263436] [client 20.194.5.96:16639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/sallu.php"] [unique_id "ary1RZEcZ_148BjP8ZPdfAAAATU"]
[Wed Sep 30 01:07:49.524751 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.525024 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.584523 2026] [security2:error] [pid 263262:tid 263404] [client 201.32.215.149:8252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdgAAAARU"]
[Wed Sep 30 01:07:49.587493 2026] [security2:error] [pid 263262:tid 263404] [client 201.32.215.149:8252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdgAAAARU"]
[Wed Sep 30 01:07:49.617997 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.618268 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.620984 2026] [security2:error] [pid 263262:tid 263515] [client 84.17.60.236:44960] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1RZEcZ_148BjP8ZPdhAAAAYQ"]
[Wed Sep 30 01:07:49.622566 2026] [security2:error] [pid 263262:tid 263394] [client 20.28.180.172:34297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/faiy.php"] [unique_id "ary1RZEcZ_148BjP8ZPdhgAAAQs"]
[Wed Sep 30 01:07:49.633218 2026] [security2:error] [pid 263262:tid 263469] [client 52.231.30.175:38793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-logis.php"] [unique_id "ary1RZEcZ_148BjP8ZPdhwAAAVY"]
[Wed Sep 30 01:07:49.700069 2026] [security2:error] [pid 263262:tid 263483] [client 20.219.2.60:19435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tfm.php"] [unique_id "ary1RZEcZ_148BjP8ZPdkAAAAWQ"]
[Wed Sep 30 01:07:49.703328 2026] [access_compat:error] [pid 263262:tid 263476] [client 47.79.13.158:54850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:49.703653 2026] [access_compat:error] [pid 263262:tid 263476] [client 47.79.13.158:54850] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:49.706163 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.706604 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.715383 2026] [security2:error] [pid 263262:tid 263428] [client 20.219.19.141:29820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1RZEcZ_148BjP8ZPdkQAAAS0"]
[Wed Sep 30 01:07:49.729495 2026] [security2:error] [pid 263262:tid 263465] [client 20.58.177.98:33278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/cae.php"] [unique_id "ary1RZEcZ_148BjP8ZPdkwAAAVI"]
[Wed Sep 30 01:07:49.745140 2026] [security2:error] [pid 263262:tid 263477] [client 170.78.249.52:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary1RZEcZ_148BjP8ZPdlAAAAV4"]
[Wed Sep 30 01:07:49.761460 2026] [security2:error] [pid 263262:tid 263484] [client 185.243.53.182:35014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.53.243.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "helpsyriatoday.orontes-tech.com"] [uri "/wp-login.php"] [unique_id "ary1RZEcZ_148BjP8ZPdlQAAAWU"], referer: http://helpsyriatoday.orontes-tech.com/wp-login.php
[Wed Sep 30 01:07:49.804874 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.805197 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:49.810363 2026] [security2:error] [pid 263262:tid 263502] [client 20.58.177.98:15836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/class-ajax.php"] [unique_id "ary1RZEcZ_148BjP8ZPdlwAAAXc"]
[Wed Sep 30 01:07:49.817573 2026] [security2:error] [pid 263262:tid 263274] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1RZEcZ_148BjP8ZPdmAABWAo"], referer: https://forum.torquayfans.com/viewtopic.php?p=288636&sid=de6f169065eac81a71e7bb3dc1fa19c0
[Wed Sep 30 01:07:49.817595 2026] [security2:error] [pid 263262:tid 263274] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1RZEcZ_148BjP8ZPdmAABWAo"], referer: https://forum.torquayfans.com/viewtopic.php?p=288636&sid=de6f169065eac81a71e7bb3dc1fa19c0
[Wed Sep 30 01:07:49.860294 2026] [security2:error] [pid 263262:tid 263470] [client 20.194.5.96:18912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/atkno.php"] [unique_id "ary1RZEcZ_148BjP8ZPdnAAAAVc"]
[Wed Sep 30 01:07:49.896143 2026] [security2:error] [pid 263262:tid 263516] [client 52.231.30.175:38833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/esc.php"] [unique_id "ary1RZEcZ_148BjP8ZPdngAAAYU"]
[Wed Sep 30 01:07:49.943573 2026] [security2:error] [pid 263262:tid 263396] [client 20.214.191.94:15921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ass.php"] [unique_id "ary1RZEcZ_148BjP8ZPdowAAAQ0"]
[Wed Sep 30 01:07:49.944010 2026] [security2:error] [pid 263262:tid 263419] [client 84.17.60.236:44968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1RZEcZ_148BjP8ZPdpAAAASQ"]
[Wed Sep 30 01:07:49.948237 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:49.948568 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.037562 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.037829 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.074713 2026] [security2:error] [pid 263262:tid 263398] [client 4.240.25.22:41692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/ty.php"] [unique_id "ary1RpEcZ_148BjP8ZPdtAAAAQ8"]
[Wed Sep 30 01:07:50.076948 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.077210 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.108234 2026] [security2:error] [pid 263262:tid 263445] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1RpEcZ_148BjP8ZPduAAAAT4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:50.123775 2026] [security2:error] [pid 263262:tid 263478] [client 20.58.177.98:15835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gm.php"] [unique_id "ary1RpEcZ_148BjP8ZPduwAAAV8"]
[Wed Sep 30 01:07:50.157099 2026] [security2:error] [pid 263262:tid 263487] [client 52.231.30.175:38856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/2.php"] [unique_id "ary1RpEcZ_148BjP8ZPdvgAAAWg"]
[Wed Sep 30 01:07:50.173256 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.173708 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.216118 2026] [security2:error] [pid 263262:tid 263483] [client 20.28.180.172:61213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gqhyti.php"] [unique_id "ary1RpEcZ_148BjP8ZPdwwAAAWQ"]
[Wed Sep 30 01:07:50.257280 2026] [security2:error] [pid 263262:tid 263454] [client 20.214.191.94:15881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wsd.php"] [unique_id "ary1RpEcZ_148BjP8ZPdyAAAAUc"]
[Wed Sep 30 01:07:50.261990 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.262331 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.273003 2026] [security2:error] [pid 263262:tid 263517] [client 116.193.128.26:63776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1RpEcZ_148BjP8ZPdygAAAYY"]
[Wed Sep 30 01:07:50.273188 2026] [security2:error] [pid 263262:tid 263517] [client 116.193.128.26:63776] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1RpEcZ_148BjP8ZPdygAAAYY"]
[Wed Sep 30 01:07:50.276229 2026] [security2:error] [pid 263262:tid 263416] [client 84.17.60.236:44984] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1RpEcZ_148BjP8ZPdywAAASE"]
[Wed Sep 30 01:07:50.348905 2026] [security2:error] [pid 263262:tid 263418] [client 20.194.5.96:16588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/ops.php"] [unique_id "ary1RpEcZ_148BjP8ZPdzgAAASM"]
[Wed Sep 30 01:07:50.351932 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.352205 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.418936 2026] [security2:error] [pid 263262:tid 263393] [client 52.231.30.175:38898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/ba.php"] [unique_id "ary1RpEcZ_148BjP8ZPd3QAAAQo"]
[Wed Sep 30 01:07:50.444128 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.444376 2026] [access_compat:error] [pid 263262:tid 263458] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.447253 2026] [security2:error] [pid 263262:tid 263329] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1RpEcZ_148BjP8ZPd5QABVEE"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D83720
[Wed Sep 30 01:07:50.447379 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:15874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1RpEcZ_148BjP8ZPd5gAAAXI"]
[Wed Sep 30 01:07:50.451757 2026] [security2:error] [pid 263262:tid 263422] [client 168.100.149.210:63424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/header-search.js"] [unique_id "ary1RpEcZ_148BjP8ZPd5AABJyg"]
[Wed Sep 30 01:07:50.480674 2026] [security2:error] [pid 263262:tid 263421] [client 20.219.2.60:11367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/blsvgeyaza.php"] [unique_id "ary1RpEcZ_148BjP8ZPd7wAAASY"]
[Wed Sep 30 01:07:50.535103 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.535393 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.538769 2026] [security2:error] [pid 263262:tid 263495] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1RpEcZ_148BjP8ZPd9wAAAXA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:50.541089 2026] [security2:error] [pid 263262:tid 263473] [client 20.214.191.94:58742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/BDKR28WP.php"] [unique_id "ary1RpEcZ_148BjP8ZPd-AAAAVo"]
[Wed Sep 30 01:07:50.606354 2026] [security2:error] [pid 263262:tid 263461] [client 84.17.60.236:44988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1RpEcZ_148BjP8ZPd-gAAAU4"]
[Wed Sep 30 01:07:50.627820 2026] [security2:error] [pid 263262:tid 263475] [client 20.58.177.98:33683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/txets.php"] [unique_id "ary1RpEcZ_148BjP8ZPd_wAAAVw"]
[Wed Sep 30 01:07:50.629275 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.629699 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.678472 2026] [security2:error] [pid 263262:tid 263449] [client 52.231.30.175:38826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/great.php"] [unique_id "ary1RpEcZ_148BjP8ZPeAAAAAUI"]
[Wed Sep 30 01:07:50.699302 2026] [security2:error] [pid 263262:tid 263400] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1RpEcZ_148BjP8ZPeAQAAARE"]
[Wed Sep 30 01:07:50.717532 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.717787 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.758790 2026] [security2:error] [pid 263262:tid 263477] [client 20.219.19.141:65507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/adminfuns.php"] [unique_id "ary1RpEcZ_148BjP8ZPeBgAAAV4"]
[Wed Sep 30 01:07:50.775241 2026] [security2:error] [pid 263262:tid 263509] [client 20.58.177.98:15504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/asd2.php"] [unique_id "ary1RpEcZ_148BjP8ZPeBwAAAX4"]
[Wed Sep 30 01:07:50.813539 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.813975 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.819655 2026] [security2:error] [pid 263262:tid 263486] [client 20.194.5.96:16585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/mac.php"] [unique_id "ary1RpEcZ_148BjP8ZPeEQAAAWc"]
[Wed Sep 30 01:07:50.834572 2026] [security2:error] [pid 263262:tid 263471] [client 20.214.191.94:58721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wmore1.php"] [unique_id "ary1RpEcZ_148BjP8ZPeEgAAAVg"]
[Wed Sep 30 01:07:50.901135 2026] [security2:error] [pid 263262:tid 263464] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1RpEcZ_148BjP8ZPeGgAAAVE"]
[Wed Sep 30 01:07:50.905720 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:50.906214 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:50.927965 2026] [security2:error] [pid 263262:tid 263413] [client 84.17.60.236:45002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1RpEcZ_148BjP8ZPeHAAAAR4"]
[Wed Sep 30 01:07:50.947500 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.30.175:38882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary1RpEcZ_148BjP8ZPeHgAAASQ"]
[Wed Sep 30 01:07:50.996881 2026] [security2:error] [pid 263262:tid 263430] [client 20.213.164.196:55217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wsd.php"] [unique_id "ary1RpEcZ_148BjP8ZPeIwAAAS8"]
[Wed Sep 30 01:07:51.001422 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.001740 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.018776 2026] [security2:error] [pid 263262:tid 263468] [client 43.227.131.37:42116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeJAAAAVU"]
[Wed Sep 30 01:07:51.019006 2026] [security2:error] [pid 263262:tid 263468] [client 43.227.131.37:42116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeJAAAAVU"]
[Wed Sep 30 01:07:51.063865 2026] [security2:error] [pid 263262:tid 263399] [client 155.94.194.97:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1R5EcZ_148BjP8ZPeKQAAARA"]
[Wed Sep 30 01:07:51.089778 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.090103 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.098571 2026] [security2:error] [pid 263262:tid 263405] [client 20.214.191.94:58694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/z60.php"] [unique_id "ary1R5EcZ_148BjP8ZPeLAAAARY"]
[Wed Sep 30 01:07:51.103168 2026] [security2:error] [pid 263262:tid 263427] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPeLQAAASw"]
[Wed Sep 30 01:07:51.105871 2026] [security2:error] [pid 263262:tid 263495] [client 20.58.177.98:15505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/cdc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeLgAAAXA"]
[Wed Sep 30 01:07:51.179482 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.179916 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.184119 2026] [security2:error] [pid 263262:tid 263455] [client 223.181.30.165:28564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeNQAAAUg"]
[Wed Sep 30 01:07:51.184320 2026] [security2:error] [pid 263262:tid 263455] [client 223.181.30.165:28564] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeNQAAAUg"]
[Wed Sep 30 01:07:51.212698 2026] [security2:error] [pid 263262:tid 263461] [client 52.231.30.175:38896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/robots.php"] [unique_id "ary1R5EcZ_148BjP8ZPeOAAAAU4"]
[Wed Sep 30 01:07:51.229430 2026] [security2:error] [pid 263262:tid 263410] [client 45.138.12.32:28914] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pjy.uiz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1R5EcZ_148BjP8ZPeOQAAARs"]
[Wed Sep 30 01:07:51.257358 2026] [security2:error] [pid 263262:tid 263518] [client 20.194.5.96:17181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/myglu.php"] [unique_id "ary1R5EcZ_148BjP8ZPeOgAAAYc"]
[Wed Sep 30 01:07:51.263965 2026] [security2:error] [pid 263262:tid 263477] [client 84.17.60.236:45014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1R5EcZ_148BjP8ZPeOwAAAV4"]
[Wed Sep 30 01:07:51.265446 2026] [security2:error] [pid 263262:tid 263517] [client 20.58.177.98:33253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp-update.php"] [unique_id "ary1R5EcZ_148BjP8ZPePQAAAYY"]
[Wed Sep 30 01:07:51.274786 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.275218 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.305976 2026] [security2:error] [pid 263262:tid 263411] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPePwAAARw"]
[Wed Sep 30 01:07:51.366149 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.366542 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.382231 2026] [security2:error] [pid 263262:tid 263454] [client 20.194.5.96:19126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/gptsh.php"] [unique_id "ary1R5EcZ_148BjP8ZPeRAAAAUc"]
[Wed Sep 30 01:07:51.396083 2026] [security2:error] [pid 263262:tid 263471] [client 20.70.173.30:19137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/aaa.php"] [unique_id "ary1R5EcZ_148BjP8ZPeRQAAAVg"]
[Wed Sep 30 01:07:51.397290 2026] [security2:error] [pid 263262:tid 263441] [client 20.214.191.94:15917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/pJPoKA.php"] [unique_id "ary1R5EcZ_148BjP8ZPeRgAAATo"]
[Wed Sep 30 01:07:51.398403 2026] [security2:error] [pid 263262:tid 263473] [client 182.69.182.151:20430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeRwAAAVo"]
[Wed Sep 30 01:07:51.398977 2026] [security2:error] [pid 263262:tid 263473] [client 182.69.182.151:20430] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeRwAAAVo"]
[Wed Sep 30 01:07:51.431382 2026] [security2:error] [pid 263262:tid 263491] [client 20.58.177.98:15843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gulu.php"] [unique_id "ary1R5EcZ_148BjP8ZPeTAAAAWw"]
[Wed Sep 30 01:07:51.461733 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.462176 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.480871 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.30.175:38911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/k.php"] [unique_id "ary1R5EcZ_148BjP8ZPeTwAAASQ"]
[Wed Sep 30 01:07:51.507550 2026] [security2:error] [pid 263262:tid 263490] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPeUQAAAWs"]
[Wed Sep 30 01:07:51.516674 2026] [security2:error] [pid 263262:tid 263421] [client 106.214.2.47:19586] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeVAAAASY"]
[Wed Sep 30 01:07:51.523601 2026] [security2:error] [pid 263262:tid 263421] [client 106.214.2.47:19586] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1R5EcZ_148BjP8ZPeVAAAASY"]
[Wed Sep 30 01:07:51.548219 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.548479 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.591642 2026] [security2:error] [pid 263262:tid 263414] [client 84.17.60.236:45024] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "sewbusyfashion.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1R5EcZ_148BjP8ZPeWgAAAR8"]
[Wed Sep 30 01:07:51.639758 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.639870 2026] [security2:error] [pid 263262:tid 263458] [client 4.240.25.22:12422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1R5EcZ_148BjP8ZPeXgAAAUs"]
[Wed Sep 30 01:07:51.640067 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.675274 2026] [security2:error] [pid 263262:tid 263478] [client 20.28.180.172:60337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/autoxxi.php"] [unique_id "ary1R5EcZ_148BjP8ZPeYQAAAV8"]
[Wed Sep 30 01:07:51.675353 2026] [security2:error] [pid 263262:tid 263317] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1R5EcZ_148BjP8ZPeYAABFjU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D9313
[Wed Sep 30 01:07:51.675369 2026] [security2:error] [pid 263262:tid 263317] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1R5EcZ_148BjP8ZPeYAABFjU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D9313
[Wed Sep 30 01:07:51.684765 2026] [security2:error] [pid 263262:tid 263455] [client 20.214.191.94:15934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/24.php"] [unique_id "ary1R5EcZ_148BjP8ZPeYgAAAUg"]
[Wed Sep 30 01:07:51.709175 2026] [security2:error] [pid 263262:tid 263461] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPeYwAAAU4"]
[Wed Sep 30 01:07:51.723767 2026] [security2:error] [pid 263262:tid 263512] [client 103.168.67.253:33282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1R5EcZ_148BjP8ZPeZAAAAYE"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:51.730328 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.730592 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:16791] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.740081 2026] [security2:error] [pid 263262:tid 263483] [client 20.219.2.60:19422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/8573.php"] [unique_id "ary1R5EcZ_148BjP8ZPeZgAAAWQ"]
[Wed Sep 30 01:07:51.743782 2026] [security2:error] [pid 263262:tid 263428] [client 52.231.30.175:32202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/w.php"] [unique_id "ary1R5EcZ_148BjP8ZPeZwAAAS0"]
[Wed Sep 30 01:07:51.758742 2026] [security2:error] [pid 263262:tid 263450] [client 20.58.177.98:15850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/bala.php"] [unique_id "ary1R5EcZ_148BjP8ZPeagAAAUM"]
[Wed Sep 30 01:07:51.768999 2026] [security2:error] [pid 263262:tid 263518] [client 20.194.30.107:45162] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.hairofsheba.com"] [uri "/1.php"] [unique_id "ary1R5EcZ_148BjP8ZPeawAAAYc"]
[Wed Sep 30 01:07:51.769082 2026] [security2:error] [pid 263262:tid 263518] [client 20.194.30.107:45162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/1.php"] [unique_id "ary1R5EcZ_148BjP8ZPeawAAAYc"]
[Wed Sep 30 01:07:51.774942 2026] [security2:error] [pid 263262:tid 263417] [client 20.58.177.98:33409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/177.php"] [unique_id "ary1R5EcZ_148BjP8ZPebAAAASI"]
[Wed Sep 30 01:07:51.809466 2026] [access_compat:error] [pid 263262:tid 263403] [client 47.79.13.53:37876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:51.809745 2026] [access_compat:error] [pid 263262:tid 263403] [client 47.79.13.53:37876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:51.813839 2026] [security2:error] [pid 263262:tid 263477] [client 4.240.25.22:41706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/dehnl.php"] [unique_id "ary1R5EcZ_148BjP8ZPebgAAAV4"]
[Wed Sep 30 01:07:51.814285 2026] [security2:error] [pid 263262:tid 263416] [client 216.73.216.46:16791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPebwAAASE"]
[Wed Sep 30 01:07:51.839144 2026] [http2:warn] [pid 251754:tid 251894] [client 52.167.144.206:59157] h2_stream(251754-1375-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:51.839171 2026] [http2:warn] [pid 251754:tid 251894] [client 52.167.144.206:59157] h2_stream(251754-1375-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:51.875297 2026] [access_compat:error] [pid 263262:tid 263427] [client 47.79.13.64:47710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:51.875711 2026] [access_compat:error] [pid 263262:tid 263427] [client 47.79.13.64:47710] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:51.893233 2026] [security2:error] [pid 263262:tid 263404] [client 20.213.164.196:21194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/BDKR28WP.php"] [unique_id "ary1R5EcZ_148BjP8ZPedAAAARU"]
[Wed Sep 30 01:07:51.911888 2026] [security2:error] [pid 263262:tid 263401] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1R5EcZ_148BjP8ZPeeAAAARI"]
[Wed Sep 30 01:07:51.915920 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:51.916192 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:51.951742 2026] [security2:error] [pid 263262:tid 263400] [client 20.214.191.94:15823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/xxw.php"] [unique_id "ary1R5EcZ_148BjP8ZPeegAAARE"]
[Wed Sep 30 01:07:52.003740 2026] [security2:error] [pid 263262:tid 263497] [client 20.198.74.230:23887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/84300819ebindex.php"] [unique_id "ary1SJEcZ_148BjP8ZPehAAAAXI"]
[Wed Sep 30 01:07:52.003844 2026] [access_compat:error] [pid 263262:tid 263513] [client 47.79.13.78:42868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.004118 2026] [access_compat:error] [pid 263262:tid 263513] [client 47.79.13.78:42868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.007742 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.008161 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:33967] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.008186 2026] [security2:error] [pid 263262:tid 263501] [client 52.231.30.175:38804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/ccc.php"] [unique_id "ary1SJEcZ_148BjP8ZPehgAAAXY"]
[Wed Sep 30 01:07:52.029326 2026] [core:error] [pid 263262:tid 263407] [client 20.70.173.30:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:52.029344 2026] [core:error] [pid 263262:tid 263407] [client 20.70.173.30:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:07:52.033633 2026] [security2:error] [pid 263262:tid 263474] [client 38.61.133.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1SJEcZ_148BjP8ZPeiAAAAVs"]
[Wed Sep 30 01:07:52.061313 2026] [security2:error] [pid 263262:tid 263436] [client 20.28.180.172:29447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/12.php"] [unique_id "ary1SJEcZ_148BjP8ZPeiQAAATU"]
[Wed Sep 30 01:07:52.086564 2026] [security2:error] [pid 263262:tid 263492] [client 20.58.177.98:15831] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/c99.php"] [unique_id "ary1SJEcZ_148BjP8ZPeiwAAAW0"]
[Wed Sep 30 01:07:52.091861 2026] [security2:error] [pid 263262:tid 263421] [client 216.73.216.46:33967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPejQAAASY"]
[Wed Sep 30 01:07:52.108695 2026] [security2:error] [pid 263262:tid 263467] [client 20.70.173.30:19181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/images.php"] [unique_id "ary1SJEcZ_148BjP8ZPejgAAAVQ"]
[Wed Sep 30 01:07:52.113477 2026] [security2:error] [pid 263262:tid 263459] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPejwAAAUw"]
[Wed Sep 30 01:07:52.137855 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1SJEcZ_148BjP8ZPekAABMVo"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=271253
[Wed Sep 30 01:07:52.137882 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1SJEcZ_148BjP8ZPekAABMVo"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=271253
[Wed Sep 30 01:07:52.188630 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.188898 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.195541 2026] [security2:error] [pid 263262:tid 263470] [client 20.70.173.30:56511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/a.php"] [unique_id "ary1SJEcZ_148BjP8ZPekgAAAVc"]
[Wed Sep 30 01:07:52.233497 2026] [security2:error] [pid 263262:tid 263504] [client 4.240.25.22:63627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/log.php"] [unique_id "ary1SJEcZ_148BjP8ZPelAAAAXk"]
[Wed Sep 30 01:07:52.252876 2026] [security2:error] [pid 263262:tid 263493] [client 20.214.191.94:58693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/bnmtp.php"] [unique_id "ary1SJEcZ_148BjP8ZPelgAAAW4"]
[Wed Sep 30 01:07:52.262627 2026] [security2:error] [pid 263262:tid 263398] [client 45.138.12.43:50908] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.wrq.llp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1SJEcZ_148BjP8ZPelwAAAQ8"]
[Wed Sep 30 01:07:52.269964 2026] [security2:error] [pid 263262:tid 263468] [client 52.231.30.175:38807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/images.php"] [unique_id "ary1SJEcZ_148BjP8ZPemAAAAVU"]
[Wed Sep 30 01:07:52.275188 2026] [security2:error] [pid 263262:tid 263409] [client 4.240.25.22:8384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/memberfuns.php"] [unique_id "ary1SJEcZ_148BjP8ZPemgAAARo"]
[Wed Sep 30 01:07:52.280685 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.280964 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.315390 2026] [security2:error] [pid 263262:tid 263478] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPemwAAAV8"]
[Wed Sep 30 01:07:52.339241 2026] [security2:error] [pid 263262:tid 263472] [client 20.58.177.98:33687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ccc.php"] [unique_id "ary1SJEcZ_148BjP8ZPengAAAVk"]
[Wed Sep 30 01:07:52.371467 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.371743 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.404511 2026] [security2:error] [pid 263262:tid 263518] [client 20.58.177.98:15520] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/c99.php"] [unique_id "ary1SJEcZ_148BjP8ZPeowAAAYc"]
[Wed Sep 30 01:07:52.453639 2026] [security2:error] [pid 263262:tid 263394] [client 168.100.149.162:50238] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/vendor/react-jsx-runtime.min.js"] [unique_id "ary1SJEcZ_148BjP8ZPepwABCzQ"]
[Wed Sep 30 01:07:52.463920 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.464356 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.516141 2026] [security2:error] [pid 263262:tid 263506] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPerwAAAXs"]
[Wed Sep 30 01:07:52.538765 2026] [security2:error] [pid 263262:tid 263486] [client 20.70.173.30:33354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/BDKR28WP.php"] [unique_id "ary1SJEcZ_148BjP8ZPetAAAAWc"]
[Wed Sep 30 01:07:52.550634 2026] [security2:error] [pid 263262:tid 263471] [client 52.231.30.175:38827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/alls.php"] [unique_id "ary1SJEcZ_148BjP8ZPetgAAAVg"]
[Wed Sep 30 01:07:52.553328 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.553788 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.577078 2026] [security2:error] [pid 263262:tid 263485] [client 20.214.191.94:58700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ebkid.php"] [unique_id "ary1SJEcZ_148BjP8ZPeugAAAWY"]
[Wed Sep 30 01:07:52.629210 2026] [access_compat:error] [pid 263262:tid 263451] [client 47.79.13.175:59438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.629634 2026] [access_compat:error] [pid 263262:tid 263451] [client 47.79.13.175:59438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.634098 2026] [security2:error] [pid 263262:tid 263484] [client 20.219.19.141:29747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/av.php"] [unique_id "ary1SJEcZ_148BjP8ZPevAAAAWU"]
[Wed Sep 30 01:07:52.644864 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.645135 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.717324 2026] [security2:error] [pid 263262:tid 263488] [client 20.58.177.98:15523] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/c99.php"] [unique_id "ary1SJEcZ_148BjP8ZPewQAAAWk"]
[Wed Sep 30 01:07:52.717432 2026] [security2:error] [pid 263262:tid 263474] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPewAAAAVs"]
[Wed Sep 30 01:07:52.735101 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.735346 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.746397 2026] [security2:error] [pid 263262:tid 263436] [client 20.194.5.96:17200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/aboutt.php"] [unique_id "ary1SJEcZ_148BjP8ZPexAAAATU"]
[Wed Sep 30 01:07:52.805776 2026] [security2:error] [pid 263262:tid 263424] [client 20.194.30.107:30403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/w.php"] [unique_id "ary1SJEcZ_148BjP8ZPeyQAAASk"]
[Wed Sep 30 01:07:52.816081 2026] [security2:error] [pid 263262:tid 263431] [client 223.181.60.167:21321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1SJEcZ_148BjP8ZPeygAAATA"]
[Wed Sep 30 01:07:52.816288 2026] [security2:error] [pid 263262:tid 263431] [client 223.181.60.167:21321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1SJEcZ_148BjP8ZPeygAAATA"]
[Wed Sep 30 01:07:52.819338 2026] [security2:error] [pid 263262:tid 263459] [client 52.231.30.175:38858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/admin.php"] [unique_id "ary1SJEcZ_148BjP8ZPezAAAAUw"]
[Wed Sep 30 01:07:52.829032 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.829461 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.871932 2026] [security2:error] [pid 263262:tid 263277] [remote 74.7.227.56:54146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1SJEcZ_148BjP8ZPezQABHw0"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:07:52.886347 2026] [security2:error] [pid 263262:tid 263470] [client 20.219.2.60:11686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gqhyti.php"] [unique_id "ary1SJEcZ_148BjP8ZPe0AAAAVc"]
[Wed Sep 30 01:07:52.916512 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:52.916766 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:52.918630 2026] [security2:error] [pid 263262:tid 263439] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SJEcZ_148BjP8ZPe1wAAATg"]
[Wed Sep 30 01:07:52.928970 2026] [security2:error] [pid 263262:tid 263398] [client 4.240.25.22:33343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/a.php"] [unique_id "ary1SJEcZ_148BjP8ZPe2gAAAQ8"]
[Wed Sep 30 01:07:52.931518 2026] [security2:error] [pid 263262:tid 263491] [client 20.31.129.34:37182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.129.31.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lhs.icl.mybluehost.me"] [uri "/index.php"] [unique_id "ary1SJEcZ_148BjP8ZPe0QAAAWw"]
[Wed Sep 30 01:07:52.940923 2026] [security2:error] [pid 263262:tid 263395] [client 20.219.2.60:19438] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "gemmgh.com"] [uri "/1.php"] [unique_id "ary1SJEcZ_148BjP8ZPe2wAAAQw"]
[Wed Sep 30 01:07:52.941020 2026] [security2:error] [pid 263262:tid 263395] [client 20.219.2.60:19438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/1.php"] [unique_id "ary1SJEcZ_148BjP8ZPe2wAAAQw"]
[Wed Sep 30 01:07:52.951327 2026] [access_compat:error] [pid 263262:tid 263490] [client 47.82.11.32:39692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.951762 2026] [access_compat:error] [pid 263262:tid 263490] [client 47.82.11.32:39692] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:52.952791 2026] [security2:error] [pid 263262:tid 263458] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1SJEcZ_148BjP8ZPe3wAAAUs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:07:52.998966 2026] [security2:error] [pid 263262:tid 263515] [client 20.58.177.98:33273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/0xD.php"] [unique_id "ary1SJEcZ_148BjP8ZPe5QAAAYQ"]
[Wed Sep 30 01:07:53.006659 2026] [security2:error] [pid 263262:tid 263368] [remote 57.141.14.110:23794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/6/"] [unique_id "ary1SZEcZ_148BjP8ZPe5wABG2g"]
[Wed Sep 30 01:07:53.007356 2026] [http2:warn] [pid 251754:tid 251957] [client 52.167.144.25:47149] h2_stream(251754-1399-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:53.008154 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.008427 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.031453 2026] [security2:error] [pid 263262:tid 263416] [client 20.58.177.98:15897] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/c99.php"] [unique_id "ary1SZEcZ_148BjP8ZPe6QAAASE"]
[Wed Sep 30 01:07:53.062610 2026] [security2:error] [pid 263262:tid 263479] [client 20.214.191.94:58727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/133.php"] [unique_id "ary1SZEcZ_148BjP8ZPe6wAAAWA"]
[Wed Sep 30 01:07:53.080912 2026] [security2:error] [pid 263262:tid 263511] [client 52.231.30.175:38801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/geck.php"] [unique_id "ary1SZEcZ_148BjP8ZPe7AAAAYA"]
[Wed Sep 30 01:07:53.099357 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.099623 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.121030 2026] [security2:error] [pid 263262:tid 263495] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SZEcZ_148BjP8ZPe7gAAAXA"]
[Wed Sep 30 01:07:53.190712 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.190998 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.198388 2026] [security2:error] [pid 263262:tid 263393] [client 20.70.173.30:19192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/chosen.php"] [unique_id "ary1SZEcZ_148BjP8ZPe8wAAAQo"]
[Wed Sep 30 01:07:53.269105 2026] [security2:error] [pid 263262:tid 263508] [client 4.240.25.22:8399] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary1SZEcZ_148BjP8ZPe-QAAAX0"]
[Wed Sep 30 01:07:53.269220 2026] [security2:error] [pid 263262:tid 263508] [client 4.240.25.22:8399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary1SZEcZ_148BjP8ZPe-QAAAX0"]
[Wed Sep 30 01:07:53.279766 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.280041 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.323415 2026] [security2:error] [pid 263262:tid 263488] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SZEcZ_148BjP8ZPe_QAAAWk"]
[Wed Sep 30 01:07:53.344779 2026] [security2:error] [pid 263262:tid 263436] [client 20.58.177.98:15840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/ttivnife.php"] [unique_id "ary1SZEcZ_148BjP8ZPe_gAAATU"]
[Wed Sep 30 01:07:53.345839 2026] [security2:error] [pid 263262:tid 263497] [client 52.231.30.175:38821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/goods.php"] [unique_id "ary1SZEcZ_148BjP8ZPe_wAAAXI"]
[Wed Sep 30 01:07:53.376116 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.376370 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.403317 2026] [security2:error] [pid 263262:tid 263432] [client 20.58.177.98:33700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/sallu.php"] [unique_id "ary1SZEcZ_148BjP8ZPfBQAAATE"]
[Wed Sep 30 01:07:53.422785 2026] [security2:error] [pid 263262:tid 263516] [client 20.194.5.96:18916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/rithin.php"] [unique_id "ary1SZEcZ_148BjP8ZPfCAAAAYU"]
[Wed Sep 30 01:07:53.436221 2026] [security2:error] [pid 263262:tid 263415] [client 103.168.66.101:62298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1SZEcZ_148BjP8ZPfCgAAASA"]
[Wed Sep 30 01:07:53.453912 2026] [security2:error] [pid 263262:tid 263465] [client 20.219.19.141:29732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/dex.php"] [unique_id "ary1SZEcZ_148BjP8ZPfDgAAAVI"]
[Wed Sep 30 01:07:53.471686 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.472136 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.525625 2026] [security2:error] [pid 263262:tid 263468] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SZEcZ_148BjP8ZPfGQAAAVU"]
[Wed Sep 30 01:07:53.557458 2026] [security2:error] [pid 263262:tid 263455] [client 185.223.40.100:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1SZEcZ_148BjP8ZPfHgAAAUg"]
[Wed Sep 30 01:07:53.558588 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.558933 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.607075 2026] [security2:error] [pid 263262:tid 263416] [client 20.194.5.96:17193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wp-whe.php"] [unique_id "ary1SZEcZ_148BjP8ZPfIQAAASE"]
[Wed Sep 30 01:07:53.610225 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.30.175:38868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/dejavu.php"] [unique_id "ary1SZEcZ_148BjP8ZPfIgAAAUM"]
[Wed Sep 30 01:07:53.653606 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.654061 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.654063 2026] [access_compat:error] [pid 263262:tid 263445] [client 74.7.243.227:38698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2N3ZA==
[Wed Sep 30 01:07:53.654506 2026] [access_compat:error] [pid 263262:tid 263445] [client 74.7.243.227:38698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5L2N3ZA==
[Wed Sep 30 01:07:53.657072 2026] [security2:error] [pid 263262:tid 263492] [client 20.58.177.98:57434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/admin.php/2P.php"] [unique_id "ary1SZEcZ_148BjP8ZPfKgAAAW0"]
[Wed Sep 30 01:07:53.677112 2026] [security2:error] [pid 263262:tid 263400] [client 20.214.191.94:15874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/x33.php"] [unique_id "ary1SZEcZ_148BjP8ZPfLAAAARE"]
[Wed Sep 30 01:07:53.727366 2026] [security2:error] [pid 263262:tid 263486] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SZEcZ_148BjP8ZPfLQAAAWc"]
[Wed Sep 30 01:07:53.741669 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.741980 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.750775 2026] [security2:error] [pid 263262:tid 263512] [client 20.28.180.172:61202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/1144452145_error_log.php"] [unique_id "ary1SZEcZ_148BjP8ZPfLwAAAYE"]
[Wed Sep 30 01:07:53.786761 2026] [access_compat:error] [pid 263262:tid 263430] [client 47.79.13.234:51554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:53.787206 2026] [access_compat:error] [pid 263262:tid 263430] [client 47.79.13.234:51554] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:53.797437 2026] [security2:error] [pid 263262:tid 263444] [client 20.58.177.98:33692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/01.php"] [unique_id "ary1SZEcZ_148BjP8ZPfMwAAAT0"]
[Wed Sep 30 01:07:53.833368 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.833638 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.876928 2026] [security2:error] [pid 263262:tid 263488] [client 52.231.30.175:38889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/h02ugyh.php"] [unique_id "ary1SZEcZ_148BjP8ZPfNgAAAWk"]
[Wed Sep 30 01:07:53.929007 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:53.929120 2026] [security2:error] [pid 263262:tid 263422] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SZEcZ_148BjP8ZPfOAAAASc"]
[Wed Sep 30 01:07:53.929436 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:53.967894 2026] [security2:error] [pid 263262:tid 263280] [remote 2a03:2880:f814:34:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1SZEcZ_148BjP8ZPfPwABHxA"]
[Wed Sep 30 01:07:53.967931 2026] [security2:error] [pid 263262:tid 263280] [remote 2a03:2880:f814:34:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1SZEcZ_148BjP8ZPfPwABHxA"]
[Wed Sep 30 01:07:53.974151 2026] [security2:error] [pid 263262:tid 263482] [client 20.58.177.98:15511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/cord.php"] [unique_id "ary1SZEcZ_148BjP8ZPfRQAAAWM"]
[Wed Sep 30 01:07:53.986730 2026] [security2:error] [pid 263262:tid 263439] [client 20.214.191.94:58688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/cae.php"] [unique_id "ary1SZEcZ_148BjP8ZPfSgAAATg"]
[Wed Sep 30 01:07:54.027924 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.028261 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.056179 2026] [security2:error] [pid 263262:tid 263489] [client 20.219.2.60:11675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/autoxxi.php"] [unique_id "ary1SpEcZ_148BjP8ZPfVQAAAWo"]
[Wed Sep 30 01:07:54.062534 2026] [security2:error] [pid 263262:tid 263455] [client 20.70.173.30:33282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/dehnl.php"] [unique_id "ary1SpEcZ_148BjP8ZPfVgAAAUg"]
[Wed Sep 30 01:07:54.083099 2026] [security2:error] [pid 263262:tid 263406] [client 20.70.173.30:57015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/m.php"] [unique_id "ary1SpEcZ_148BjP8ZPfWwAAARc"]
[Wed Sep 30 01:07:54.109224 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.109505 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.131802 2026] [security2:error] [pid 263262:tid 263511] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfXQAAAYA"]
[Wed Sep 30 01:07:54.136469 2026] [security2:error] [pid 263262:tid 263507] [client 52.231.30.175:38798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/155.php"] [unique_id "ary1SpEcZ_148BjP8ZPfXwAAAXw"]
[Wed Sep 30 01:07:54.143328 2026] [security2:error] [pid 263262:tid 263409] [client 20.58.177.98:33724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ab.php"] [unique_id "ary1SpEcZ_148BjP8ZPfYAAAARo"]
[Wed Sep 30 01:07:54.180031 2026] [security2:error] [pid 263262:tid 263404] [client 13.70.4.78:9023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1SpEcZ_148BjP8ZPfYQAAARU"]
[Wed Sep 30 01:07:54.198200 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.198442 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.205286 2026] [security2:error] [pid 263262:tid 263400] [client 20.213.164.196:55212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wmore1.php"] [unique_id "ary1SpEcZ_148BjP8ZPfZAAAARE"]
[Wed Sep 30 01:07:54.260357 2026] [security2:error] [pid 263262:tid 263454] [client 20.214.191.94:58707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/txets.php"] [unique_id "ary1SpEcZ_148BjP8ZPfZgAAAUc"]
[Wed Sep 30 01:07:54.269175 2026] [security2:error] [pid 263262:tid 263393] [client 20.219.19.141:29709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/chosen.php"] [unique_id "ary1SpEcZ_148BjP8ZPfZwAAAQo"]
[Wed Sep 30 01:07:54.296869 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.297158 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.297962 2026] [security2:error] [pid 263262:tid 263510] [client 20.58.177.98:15927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/anom.php"] [unique_id "ary1SpEcZ_148BjP8ZPfaQAAAX8"]
[Wed Sep 30 01:07:54.332607 2026] [security2:error] [pid 263262:tid 263444] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfawAAAT0"]
[Wed Sep 30 01:07:54.335144 2026] [security2:error] [pid 263262:tid 263508] [client 20.219.2.60:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/term.php"] [unique_id "ary1SpEcZ_148BjP8ZPfbAAAAX0"]
[Wed Sep 30 01:07:54.390588 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.390870 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.400283 2026] [security2:error] [pid 263262:tid 263517] [client 52.231.30.175:38848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/ops.php"] [unique_id "ary1SpEcZ_148BjP8ZPfdAAAAYY"]
[Wed Sep 30 01:07:54.426672 2026] [security2:error] [pid 263262:tid 263414] [client 157.42.20.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "ary1SpEcZ_148BjP8ZPfegAAAR8"]
[Wed Sep 30 01:07:54.461930 2026] [security2:error] [pid 263262:tid 263487] [client 168.100.149.122:22998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/vendor/react-dom.min.js"] [unique_id "ary1SpEcZ_148BjP8ZPffgABaHo"]
[Wed Sep 30 01:07:54.481805 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.482084 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.494923 2026] [security2:error] [pid 263262:tid 263468] [client 13.70.4.78:58988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1SpEcZ_148BjP8ZPfgQAAAVU"]
[Wed Sep 30 01:07:54.534613 2026] [security2:error] [pid 263262:tid 263431] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfhwAAATA"]
[Wed Sep 30 01:07:54.549301 2026] [security2:error] [pid 263262:tid 263406] [client 20.58.177.98:33713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/xwpg.php"] [unique_id "ary1SpEcZ_148BjP8ZPfiAAAARc"]
[Wed Sep 30 01:07:54.564546 2026] [security2:error] [pid 263262:tid 263491] [client 155.190.6.18:43864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1SpEcZ_148BjP8ZPfigAAAWw"]
[Wed Sep 30 01:07:54.564625 2026] [security2:error] [pid 263262:tid 263491] [client 155.190.6.18:43864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1SpEcZ_148BjP8ZPfigAAAWw"]
[Wed Sep 30 01:07:54.572093 2026] [security2:error] [pid 263262:tid 263502] [client 20.214.191.94:58734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wp-update.php"] [unique_id "ary1SpEcZ_148BjP8ZPfjAAAAXc"]
[Wed Sep 30 01:07:54.573659 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.573972 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.615209 2026] [security2:error] [pid 263262:tid 263463] [client 20.58.177.98:57425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/plugins.php"] [unique_id "ary1SpEcZ_148BjP8ZPfjQAAAVA"]
[Wed Sep 30 01:07:54.663602 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.663864 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.667225 2026] [security2:error] [pid 263262:tid 263518] [client 52.231.30.175:32246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/mac.php"] [unique_id "ary1SpEcZ_148BjP8ZPfkAAAAYc"]
[Wed Sep 30 01:07:54.735984 2026] [security2:error] [pid 263262:tid 263478] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfkgAAAV8"]
[Wed Sep 30 01:07:54.747843 2026] [security2:error] [pid 263262:tid 263402] [client 20.194.5.96:16617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/ssixta.php"] [unique_id "ary1SpEcZ_148BjP8ZPfkwAAARM"]
[Wed Sep 30 01:07:54.754347 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.754594 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.756250 2026] [security2:error] [pid 263262:tid 263409] [client 45.138.12.32:41770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gck.tiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1SpEcZ_148BjP8ZPflQAAARo"]
[Wed Sep 30 01:07:54.808948 2026] [security2:error] [pid 263262:tid 263400] [client 13.70.4.78:63491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1SpEcZ_148BjP8ZPfmAAAARE"]
[Wed Sep 30 01:07:54.844327 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:54.844605 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:6844] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:54.845736 2026] [security2:error] [pid 263262:tid 263503] [client 104.208.65.139:12233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/tegubsiu.php"] [unique_id "ary1SpEcZ_148BjP8ZPfoAAAAXg"]
[Wed Sep 30 01:07:54.861047 2026] [security2:error] [pid 263262:tid 263396] [client 20.214.191.94:15915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/177.php"] [unique_id "ary1SpEcZ_148BjP8ZPfowAAAQ0"]
[Wed Sep 30 01:07:54.918194 2026] [security2:error] [pid 263262:tid 263471] [client 20.58.177.98:33240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/flamini.php"] [unique_id "ary1SpEcZ_148BjP8ZPfpgAAAVg"]
[Wed Sep 30 01:07:54.930095 2026] [security2:error] [pid 263262:tid 263430] [client 216.73.216.46:6844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfpwAAAS8"]
[Wed Sep 30 01:07:54.932383 2026] [security2:error] [pid 263262:tid 263517] [client 52.231.30.175:38883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/makeasmtp.php"] [unique_id "ary1SpEcZ_148BjP8ZPfqAAAAYY"]
[Wed Sep 30 01:07:54.934408 2026] [security2:error] [pid 263262:tid 263477] [client 20.58.177.98:15855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/groud3.php"] [unique_id "ary1SpEcZ_148BjP8ZPfqQAAAV4"]
[Wed Sep 30 01:07:54.939024 2026] [security2:error] [pid 263262:tid 263414] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1SpEcZ_148BjP8ZPfqgAAAR8"]
[Wed Sep 30 01:07:54.984826 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.5.96:18941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/il.php"] [unique_id "ary1SpEcZ_148BjP8ZPfsQAAATg"]
[Wed Sep 30 01:07:55.026884 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.027157 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.041362 2026] [http2:warn] [pid 251754:tid 251921] [client 52.167.144.188:61624] h2_stream(251754-1436-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:55.056042 2026] [security2:error] [pid 263262:tid 263443] [client 103.241.204.139:50110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPftQAAATw"]
[Wed Sep 30 01:07:55.056144 2026] [security2:error] [pid 263262:tid 263443] [client 103.241.204.139:50110] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPftQAAATw"]
[Wed Sep 30 01:07:55.097374 2026] [security2:error] [pid 263262:tid 263467] [client 20.70.173.30:33449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/adminfuns.php"] [unique_id "ary1S5EcZ_148BjP8ZPfuAAAAVQ"]
[Wed Sep 30 01:07:55.119467 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.119739 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.129953 2026] [security2:error] [pid 263262:tid 263470] [client 13.70.4.78:56498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/aa.php"] [unique_id "ary1S5EcZ_148BjP8ZPfvAAAAVc"]
[Wed Sep 30 01:07:55.144227 2026] [security2:error] [pid 263262:tid 263431] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPfvQAAATA"]
[Wed Sep 30 01:07:55.176452 2026] [security2:error] [pid 263262:tid 263450] [client 103.159.192.142:64885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPfxAAAAUM"]
[Wed Sep 30 01:07:55.176575 2026] [security2:error] [pid 263262:tid 263450] [client 103.159.192.142:64885] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPfxAAAAUM"]
[Wed Sep 30 01:07:55.182794 2026] [security2:error] [pid 263262:tid 263437] [client 186.226.218.115:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1S5EcZ_148BjP8ZPfxQAAATY"]
[Wed Sep 30 01:07:55.193899 2026] [security2:error] [pid 263262:tid 263488] [client 52.231.30.175:38890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/pucci.php"] [unique_id "ary1S5EcZ_148BjP8ZPfxgAAAWk"]
[Wed Sep 30 01:07:55.201720 2026] [security2:error] [pid 263262:tid 263419] [client 20.214.191.94:15930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ccc.php"] [unique_id "ary1S5EcZ_148BjP8ZPfxwAAASQ"]
[Wed Sep 30 01:07:55.211062 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.211333 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:8453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.239666 2026] [security2:error] [pid 263262:tid 263453] [client 20.28.180.172:29608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/worksec.php"] [unique_id "ary1S5EcZ_148BjP8ZPfygAAAUY"]
[Wed Sep 30 01:07:55.247097 2026] [security2:error] [pid 263262:tid 263407] [client 20.58.177.98:43205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gaxby.php"] [unique_id "ary1S5EcZ_148BjP8ZPfywAAARg"]
[Wed Sep 30 01:07:55.295872 2026] [security2:error] [pid 263262:tid 263493] [client 216.73.216.46:8453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPfzgAAAW4"]
[Wed Sep 30 01:07:55.299225 2026] [security2:error] [pid 263262:tid 263410] [client 45.138.12.32:28998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gju.htc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1S5EcZ_148BjP8ZPfzwAAARs"]
[Wed Sep 30 01:07:55.317065 2026] [security2:error] [pid 263262:tid 263506] [client 103.168.67.253:33296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1S5EcZ_148BjP8ZPf0AAAAXs"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:55.346927 2026] [security2:error] [pid 263262:tid 263404] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPf0QAAARU"]
[Wed Sep 30 01:07:55.365578 2026] [security2:error] [pid 263262:tid 263484] [client 116.197.133.25:63532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPf0gAAAWU"]
[Wed Sep 30 01:07:55.365736 2026] [security2:error] [pid 263262:tid 263484] [client 116.197.133.25:63532] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1S5EcZ_148BjP8ZPf0gAAAWU"]
[Wed Sep 30 01:07:55.438651 2026] [security2:error] [pid 263262:tid 263396] [client 20.58.177.98:33678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/themes.php"] [unique_id "ary1S5EcZ_148BjP8ZPf2QAAAQ0"]
[Wed Sep 30 01:07:55.452418 2026] [security2:error] [pid 263262:tid 263462] [client 13.70.4.78:58962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/z70.php"] [unique_id "ary1S5EcZ_148BjP8ZPf2wAAAU8"]
[Wed Sep 30 01:07:55.471395 2026] [security2:error] [pid 263262:tid 263449] [client 20.214.191.94:58699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/0xD.php"] [unique_id "ary1S5EcZ_148BjP8ZPf3QAAAUI"]
[Wed Sep 30 01:07:55.485197 2026] [security2:error] [pid 263262:tid 263426] [client 52.231.30.175:38799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/puc.php"] [unique_id "ary1S5EcZ_148BjP8ZPf3wAAASs"]
[Wed Sep 30 01:07:55.516237 2026] [security2:error] [pid 263262:tid 263418] [client 20.194.5.96:18897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/1klopedf.php"] [unique_id "ary1S5EcZ_148BjP8ZPf4gAAASM"]
[Wed Sep 30 01:07:55.520991 2026] [security2:error] [pid 263262:tid 263439] [client 20.219.19.141:29785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/radio.php"] [unique_id "ary1S5EcZ_148BjP8ZPf4wAAATg"]
[Wed Sep 30 01:07:55.547787 2026] [security2:error] [pid 263262:tid 263460] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPf5gAAAU0"]
[Wed Sep 30 01:07:55.552697 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.552984 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.562517 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:15507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/dh9u7.php"] [unique_id "ary1S5EcZ_148BjP8ZPf6wAAAXI"]
[Wed Sep 30 01:07:55.645651 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.645938 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.737045 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.737327 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.741479 2026] [security2:error] [pid 263262:tid 263476] [client 20.214.191.94:15935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/sallu.php"] [unique_id "ary1S5EcZ_148BjP8ZPf9gAAAV0"]
[Wed Sep 30 01:07:55.742772 2026] [security2:error] [pid 263262:tid 263416] [client 20.31.129.34:48112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.129.31.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.lhs.icl.mybluehost.me"] [uri "/index.php"] [unique_id "ary1S5EcZ_148BjP8ZPf9wAAASE"]
[Wed Sep 30 01:07:55.748346 2026] [security2:error] [pid 263262:tid 263493] [client 52.231.30.175:38813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/8.php"] [unique_id "ary1S5EcZ_148BjP8ZPf-QAAAW4"]
[Wed Sep 30 01:07:55.748712 2026] [security2:error] [pid 263262:tid 263479] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPf-AAAAWA"]
[Wed Sep 30 01:07:55.784386 2026] [security2:error] [pid 263262:tid 263501] [client 13.70.4.78:51166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/f35.php"] [unique_id "ary1S5EcZ_148BjP8ZPf-gAAAXY"]
[Wed Sep 30 01:07:55.785047 2026] [security2:error] [pid 263262:tid 263492] [client 20.28.180.172:62382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws48.php"] [unique_id "ary1S5EcZ_148BjP8ZPf-wAAAW0"]
[Wed Sep 30 01:07:55.799239 2026] [access_compat:error] [pid 263262:tid 263465] [client 47.79.13.167:45876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:55.799544 2026] [access_compat:error] [pid 263262:tid 263465] [client 47.79.13.167:45876] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:55.827877 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.828164 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.892414 2026] [security2:error] [pid 263262:tid 263480] [client 20.58.177.98:15489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/koiy.php"] [unique_id "ary1S5EcZ_148BjP8ZPgBwAAAWE"]
[Wed Sep 30 01:07:55.917186 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:55.917498 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:55.950488 2026] [security2:error] [pid 263262:tid 263430] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1S5EcZ_148BjP8ZPgDgAAAS8"]
[Wed Sep 30 01:07:56.010404 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.010697 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.012835 2026] [security2:error] [pid 263262:tid 263399] [client 52.231.30.175:32128] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "torontopaindoctor.ca"] [uri "/1.php"] [unique_id "ary1TJEcZ_148BjP8ZPgFwAAARA"]
[Wed Sep 30 01:07:56.012929 2026] [security2:error] [pid 263262:tid 263399] [client 52.231.30.175:32128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/1.php"] [unique_id "ary1TJEcZ_148BjP8ZPgFwAAARA"]
[Wed Sep 30 01:07:56.054027 2026] [security2:error] [pid 263262:tid 263295] [remote 57.141.14.77:39598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/ride-on-public-forum-on-new-service-along-route-355/"] [unique_id "ary1TJEcZ_148BjP8ZPgGgABPB8"]
[Wed Sep 30 01:07:56.083908 2026] [security2:error] [pid 263262:tid 263406] [client 20.214.191.94:58668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/01.php"] [unique_id "ary1TJEcZ_148BjP8ZPgHAAAARc"]
[Wed Sep 30 01:07:56.098128 2026] [security2:error] [pid 263262:tid 263470] [client 13.70.4.78:56455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/adminfuns.php"] [unique_id "ary1TJEcZ_148BjP8ZPgHgAAAVc"]
[Wed Sep 30 01:07:56.103431 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.103898 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.134517 2026] [security2:error] [pid 263262:tid 263415] [client 20.58.177.98:33668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/0.php"] [unique_id "ary1TJEcZ_148BjP8ZPgHwAAASA"]
[Wed Sep 30 01:07:56.152192 2026] [security2:error] [pid 263262:tid 263417] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TJEcZ_148BjP8ZPgIAAAASI"]
[Wed Sep 30 01:07:56.179404 2026] [security2:error] [pid 263262:tid 263467] [client 20.194.5.96:18913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/zv.php"] [unique_id "ary1TJEcZ_148BjP8ZPgIwAAAVQ"]
[Wed Sep 30 01:07:56.192677 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.192976 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.210167 2026] [security2:error] [pid 263262:tid 263504] [client 20.58.177.98:57453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wordfence-waf.php"] [unique_id "ary1TJEcZ_148BjP8ZPgKAAAAXk"]
[Wed Sep 30 01:07:56.230273 2026] [security2:error] [pid 263262:tid 263421] [client 103.168.66.101:39138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1TJEcZ_148BjP8ZPgKwAAASY"], referer: https://networkwestmichigan.com/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:07:56.279629 2026] [security2:error] [pid 263262:tid 263468] [client 52.231.30.175:38785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/admin.php"] [unique_id "ary1TJEcZ_148BjP8ZPgLQAAAVU"]
[Wed Sep 30 01:07:56.287959 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.288384 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.354434 2026] [security2:error] [pid 263262:tid 263403] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TJEcZ_148BjP8ZPgMAAAARQ"]
[Wed Sep 30 01:07:56.376617 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.376892 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.396660 2026] [security2:error] [pid 263262:tid 263436] [client 45.138.12.32:41792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gdo.uiz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1TJEcZ_148BjP8ZPgMgAAATU"]
[Wed Sep 30 01:07:56.418460 2026] [security2:error] [pid 263262:tid 263442] [client 13.70.4.78:56487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/av.php"] [unique_id "ary1TJEcZ_148BjP8ZPgNQAAATs"]
[Wed Sep 30 01:07:56.467606 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.467874 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.473556 2026] [security2:error] [pid 263262:tid 263423] [client 168.100.149.240:41088] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/frontend-modules.min.js"] [unique_id "ary1TJEcZ_148BjP8ZPgPQABKAs"]
[Wed Sep 30 01:07:56.484644 2026] [security2:error] [pid 263262:tid 263394] [client 20.214.191.94:58725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ab.php"] [unique_id "ary1TJEcZ_148BjP8ZPgPgAAAQs"]
[Wed Sep 30 01:07:56.521720 2026] [security2:error] [pid 263262:tid 263505] [client 213.136.69.135:50722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/PHPMailer/OAuth.php"] [unique_id "ary1TJEcZ_148BjP8ZPgRAAAAXo"], referer: binance.com
[Wed Sep 30 01:07:56.522021 2026] [security2:error] [pid 263262:tid 263426] [client 20.58.177.98:57458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wp5.php"] [unique_id "ary1TJEcZ_148BjP8ZPgRQAAASs"]
[Wed Sep 30 01:07:56.538833 2026] [security2:error] [pid 263262:tid 263509] [client 20.194.5.96:16623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/tesla.php"] [unique_id "ary1TJEcZ_148BjP8ZPgSQAAAX4"]
[Wed Sep 30 01:07:56.547205 2026] [security2:error] [pid 263262:tid 263433] [client 52.231.30.175:38885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/edit.php"] [unique_id "ary1TJEcZ_148BjP8ZPgSwAAATI"]
[Wed Sep 30 01:07:56.555413 2026] [security2:error] [pid 263262:tid 263475] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TJEcZ_148BjP8ZPgTgAAAVw"]
[Wed Sep 30 01:07:56.556820 2026] [security2:error] [pid 263262:tid 263293] [remote 57.141.14.86:28850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/feed/xmlrpc.php"] [unique_id "ary1TJEcZ_148BjP8ZPgQQABCh0"]
[Wed Sep 30 01:07:56.560000 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.560365 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.565732 2026] [security2:error] [pid 263262:tid 263420] [client 20.213.164.196:44178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/177.php"] [unique_id "ary1TJEcZ_148BjP8ZPgTwAAASU"]
[Wed Sep 30 01:07:56.587642 2026] [security2:error] [pid 263262:tid 263455] [client 173.254.29.157:43640] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary1TJEcZ_148BjP8ZPgUAAAAUg"]
[Wed Sep 30 01:07:56.608362 2026] [security2:error] [pid 263262:tid 263414] [client 173.254.29.157:43650] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary1TJEcZ_148BjP8ZPgUgAAAR8"]
[Wed Sep 30 01:07:56.617644 2026] [security2:error] [pid 263262:tid 263427] [client 20.58.177.98:33216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/opsh.php"] [unique_id "ary1TJEcZ_148BjP8ZPgVgAAASw"]
[Wed Sep 30 01:07:56.625661 2026] [security2:error] [pid 263262:tid 263422] [client 173.254.29.157:43662] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary1TJEcZ_148BjP8ZPgWAAAASc"]
[Wed Sep 30 01:07:56.643293 2026] [security2:error] [pid 263262:tid 263473] [client 173.254.29.157:43672] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary1TJEcZ_148BjP8ZPgWwAAAVo"]
[Wed Sep 30 01:07:56.648504 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.648770 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.736613 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1TJEcZ_148BjP8ZPgZQABgCg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D124317
[Wed Sep 30 01:07:56.736639 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1TJEcZ_148BjP8ZPgZQABgCg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D124317
[Wed Sep 30 01:07:56.744960 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.745246 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.751935 2026] [security2:error] [pid 263262:tid 263478] [client 13.70.4.78:63538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/dex.php"] [unique_id "ary1TJEcZ_148BjP8ZPgZwAAAV8"]
[Wed Sep 30 01:07:56.762010 2026] [security2:error] [pid 263262:tid 263402] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TJEcZ_148BjP8ZPgaQAAARM"]
[Wed Sep 30 01:07:56.803961 2026] [security2:error] [pid 263262:tid 263492] [client 82.102.18.126:47288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1TJEcZ_148BjP8ZPgawAAAW0"]
[Wed Sep 30 01:07:56.809931 2026] [security2:error] [pid 263262:tid 263501] [client 52.231.30.175:32253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/inputs.php"] [unique_id "ary1TJEcZ_148BjP8ZPgbAAAAXY"]
[Wed Sep 30 01:07:56.835406 2026] [security2:error] [pid 263262:tid 263442] [client 20.58.177.98:15522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/em.php"] [unique_id "ary1TJEcZ_148BjP8ZPgbwAAATs"]
[Wed Sep 30 01:07:56.836603 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.836855 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.846692 2026] [security2:error] [pid 263262:tid 263491] [client 20.219.2.60:11877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/1144452145_error_log.php"] [unique_id "ary1TJEcZ_148BjP8ZPgcQAAAWw"]
[Wed Sep 30 01:07:56.874883 2026] [security2:error] [pid 263262:tid 263520] [client 20.214.191.94:58750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/xwpg.php"] [unique_id "ary1TJEcZ_148BjP8ZPgcgAAAYk"]
[Wed Sep 30 01:07:56.928368 2026] [security2:error] [pid 263262:tid 263394] [client 20.194.5.96:19128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/zv.update.php"] [unique_id "ary1TJEcZ_148BjP8ZPgdAAAAQs"]
[Wed Sep 30 01:07:56.938739 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:56.939184 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:56.964105 2026] [security2:error] [pid 263262:tid 263426] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TJEcZ_148BjP8ZPgeAAAASs"]
[Wed Sep 30 01:07:57.030279 2026] [security2:error] [pid 263262:tid 263485] [client 20.58.177.98:33712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/media.php"] [unique_id "ary1TZEcZ_148BjP8ZPgfwAAAWY"]
[Wed Sep 30 01:07:57.037547 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.037831 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.070837 2026] [security2:error] [pid 263262:tid 263409] [client 52.231.30.175:38865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/classwithtostring.php"] [unique_id "ary1TZEcZ_148BjP8ZPghgAAARo"]
[Wed Sep 30 01:07:57.071652 2026] [security2:error] [pid 263262:tid 263494] [client 13.70.4.78:63522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/chosen.php"] [unique_id "ary1TZEcZ_148BjP8ZPghwAAAW8"]
[Wed Sep 30 01:07:57.073859 2026] [security2:error] [pid 263262:tid 263455] [client 4.240.25.22:12457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary1TZEcZ_148BjP8ZPgiAAAAUg"]
[Wed Sep 30 01:07:57.074865 2026] [security2:error] [pid 263262:tid 263443] [client 20.194.5.96:17199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/222.php"] [unique_id "ary1TZEcZ_148BjP8ZPgiQAAATw"]
[Wed Sep 30 01:07:57.127294 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.127580 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.148198 2026] [security2:error] [pid 263262:tid 263419] [client 20.58.177.98:15868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/hp.php"] [unique_id "ary1TZEcZ_148BjP8ZPgjAAAASQ"]
[Wed Sep 30 01:07:57.150075 2026] [security2:error] [pid 263262:tid 263417] [client 82.102.18.126:47294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary1TZEcZ_148BjP8ZPgiwAAASI"]
[Wed Sep 30 01:07:57.164862 2026] [security2:error] [pid 263262:tid 263438] [client 20.214.191.94:15919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/flamini.php"] [unique_id "ary1TZEcZ_148BjP8ZPgjgAAATc"]
[Wed Sep 30 01:07:57.165489 2026] [security2:error] [pid 263262:tid 263469] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TZEcZ_148BjP8ZPgjQAAAVY"]
[Wed Sep 30 01:07:57.227769 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.228051 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:3122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.240800 2026] [security2:error] [pid 263262:tid 263458] [client 20.70.173.30:56997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ms-edit.php"] [unique_id "ary1TZEcZ_148BjP8ZPgkgAAAUs"]
[Wed Sep 30 01:07:57.259200 2026] [security2:error] [pid 263262:tid 263460] [client 20.28.180.172:34247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/bnmtp.php"] [unique_id "ary1TZEcZ_148BjP8ZPglAAAAU0"]
[Wed Sep 30 01:07:57.288167 2026] [security2:error] [pid 263262:tid 263500] [client 20.28.180.172:18326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-asyn-upload.php"] [unique_id "ary1TZEcZ_148BjP8ZPglQAAAXU"]
[Wed Sep 30 01:07:57.318870 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.319149 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.333548 2026] [security2:error] [pid 263262:tid 263431] [client 52.231.30.175:38797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/adminfuns.php"] [unique_id "ary1TZEcZ_148BjP8ZPgmgAAATA"]
[Wed Sep 30 01:07:57.367170 2026] [security2:error] [pid 263262:tid 263404] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TZEcZ_148BjP8ZPgngAAARU"]
[Wed Sep 30 01:07:57.374931 2026] [security2:error] [pid 263262:tid 263492] [client 20.58.177.98:33275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/images.php"] [unique_id "ary1TZEcZ_148BjP8ZPgoAAAAW0"]
[Wed Sep 30 01:07:57.385094 2026] [security2:error] [pid 263262:tid 263501] [client 13.70.4.78:63496] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "walker23.com"] [uri "/1.php"] [unique_id "ary1TZEcZ_148BjP8ZPgoQAAAXY"]
[Wed Sep 30 01:07:57.385192 2026] [security2:error] [pid 263262:tid 263501] [client 13.70.4.78:63496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/1.php"] [unique_id "ary1TZEcZ_148BjP8ZPgoQAAAXY"]
[Wed Sep 30 01:07:57.419610 2026] [security2:error] [pid 263262:tid 263323] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1TZEcZ_148BjP8ZPgpAABOzs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=bb3154948757023832235260834e4075
[Wed Sep 30 01:07:57.419859 2026] [security2:error] [pid 263262:tid 263323] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1TZEcZ_148BjP8ZPgpAABOzs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=bb3154948757023832235260834e4075
[Wed Sep 30 01:07:57.454221 2026] [security2:error] [pid 263262:tid 263396] [client 45.138.12.32:29082] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pmg.ouz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1TZEcZ_148BjP8ZPgpwAAAQ0"]
[Wed Sep 30 01:07:57.455534 2026] [security2:error] [pid 263262:tid 263454] [client 20.214.191.94:58739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/themes.php"] [unique_id "ary1TZEcZ_148BjP8ZPgqAAAAUc"]
[Wed Sep 30 01:07:57.462431 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.462706 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.463898 2026] [security2:error] [pid 263262:tid 263489] [client 20.58.177.98:15848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wpuse.php"] [unique_id "ary1TZEcZ_148BjP8ZPgqwAAAWo"]
[Wed Sep 30 01:07:57.470356 2026] [security2:error] [pid 263262:tid 263389] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1TZEcZ_148BjP8ZPgrQABgX0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=c3d08e36ce6a7ebc09923dcced8011b9
[Wed Sep 30 01:07:57.470395 2026] [security2:error] [pid 263262:tid 263389] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1TZEcZ_148BjP8ZPgrQABgX0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=c3d08e36ce6a7ebc09923dcced8011b9
[Wed Sep 30 01:07:57.486967 2026] [security2:error] [pid 263262:tid 263507] [client 37.41.16.35:50950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1TZEcZ_148BjP8ZPgrwAAAXw"]
[Wed Sep 30 01:07:57.487071 2026] [security2:error] [pid 263262:tid 263507] [client 37.41.16.35:50950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1TZEcZ_148BjP8ZPgrwAAAXw"]
[Wed Sep 30 01:07:57.553145 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:30197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.553386 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:30197] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.569058 2026] [security2:error] [pid 263262:tid 263445] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TZEcZ_148BjP8ZPgtAAAAT4"]
[Wed Sep 30 01:07:57.594795 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.595249 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.596984 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.30.175:32223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/222.php"] [unique_id "ary1TZEcZ_148BjP8ZPgtgAAAUM"]
[Wed Sep 30 01:07:57.617880 2026] [security2:error] [pid 263262:tid 263380] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1TZEcZ_148BjP8ZPgtwABCnQ"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D83393
[Wed Sep 30 01:07:57.628841 2026] [security2:error] [pid 263262:tid 263418] [client 82.102.18.126:47296] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1TZEcZ_148BjP8ZPguAAAASM"]
[Wed Sep 30 01:07:57.639374 2026] [security2:error] [pid 263262:tid 263485] [client 216.73.216.46:3122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1TZEcZ_148BjP8ZPguQAAAWY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvYmxvY2svc2Rh
[Wed Sep 30 01:07:57.657638 2026] [security2:error] [pid 263262:tid 263435] [client 20.194.5.96:17203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/media.php"] [unique_id "ary1TZEcZ_148BjP8ZPgugAAATQ"]
[Wed Sep 30 01:07:57.665239 2026] [security2:error] [pid 263262:tid 263517] [client 20.219.19.141:29736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1TZEcZ_148BjP8ZPguwAAAYY"]
[Wed Sep 30 01:07:57.683970 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.684227 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.699905 2026] [security2:error] [pid 263262:tid 263447] [client 13.70.4.78:51145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/radio.php"] [unique_id "ary1TZEcZ_148BjP8ZPgvgAAAUA"]
[Wed Sep 30 01:07:57.737602 2026] [security2:error] [pid 263262:tid 263494] [client 20.214.191.94:58624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/0.php"] [unique_id "ary1TZEcZ_148BjP8ZPgwAAAAW8"]
[Wed Sep 30 01:07:57.770990 2026] [security2:error] [pid 263262:tid 263420] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TZEcZ_148BjP8ZPgwgAAASU"]
[Wed Sep 30 01:07:57.776488 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.776769 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.786918 2026] [security2:error] [pid 263262:tid 263414] [client 20.58.177.98:15926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/file18x.php"] [unique_id "ary1TZEcZ_148BjP8ZPgxAAAAR8"]
[Wed Sep 30 01:07:57.803577 2026] [security2:error] [pid 263262:tid 263464] [client 4.240.25.22:8914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1TZEcZ_148BjP8ZPgxQAAAVE"]
[Wed Sep 30 01:07:57.829266 2026] [security2:error] [pid 263262:tid 263422] [client 20.213.164.196:21343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/ccc.php"] [unique_id "ary1TZEcZ_148BjP8ZPgyQAAASc"]
[Wed Sep 30 01:07:57.857290 2026] [security2:error] [pid 263262:tid 263483] [client 52.231.30.175:32154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/BDKR28WP.php"] [unique_id "ary1TZEcZ_148BjP8ZPgzAAAAWQ"]
[Wed Sep 30 01:07:57.876909 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.877221 2026] [access_compat:error] [pid 263262:tid 263467] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.900984 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:33225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ops.php"] [unique_id "ary1TZEcZ_148BjP8ZPgzgAAAXI"]
[Wed Sep 30 01:07:57.928719 2026] [security2:error] [pid 263262:tid 263468] [client 20.219.2.60:18881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-content/radio.php"] [unique_id "ary1TZEcZ_148BjP8ZPg0wAAAVU"]
[Wed Sep 30 01:07:57.935386 2026] [access_compat:error] [pid 263262:tid 263482] [client 47.79.13.234:51570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:57.935650 2026] [access_compat:error] [pid 263262:tid 263482] [client 47.79.13.234:51570] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:57.966213 2026] [security2:error] [pid 263262:tid 263479] [client 216.73.216.46:30197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1TZEcZ_148BjP8ZPg1QAAAWA"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXMvbWluaWZsdXg%3D
[Wed Sep 30 01:07:57.968460 2026] [security2:error] [pid 263262:tid 263431] [client 82.102.18.126:47308] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1TZEcZ_148BjP8ZPg1gAAATA"]
[Wed Sep 30 01:07:57.968497 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:57.968749 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:57.975452 2026] [security2:error] [pid 263262:tid 263493] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TZEcZ_148BjP8ZPg1wAAAW4"]
[Wed Sep 30 01:07:58.000250 2026] [security2:error] [pid 263262:tid 263490] [client 20.214.191.94:58732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/opsh.php"] [unique_id "ary1TZEcZ_148BjP8ZPg2gAAAWs"]
[Wed Sep 30 01:07:58.017822 2026] [access_compat:error] [pid 263262:tid 263395] [client 47.79.13.73:58416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.018115 2026] [access_compat:error] [pid 263262:tid 263395] [client 47.79.13.73:58416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.019071 2026] [security2:error] [pid 263262:tid 263495] [client 13.70.4.78:56453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/blacks.php"] [unique_id "ary1TpEcZ_148BjP8ZPg3AAAAXA"]
[Wed Sep 30 01:07:58.045295 2026] [access_compat:error] [pid 263262:tid 263419] [client 47.79.13.234:51586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.045767 2026] [access_compat:error] [pid 263262:tid 263419] [client 47.79.13.234:51586] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.055146 2026] [security2:error] [pid 263262:tid 263505] [client 20.194.5.96:18936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/wquosqsi.php"] [unique_id "ary1TpEcZ_148BjP8ZPg5AAAAXo"]
[Wed Sep 30 01:07:58.061080 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.061344 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.073028 2026] [security2:error] [pid 263262:tid 263397] [client 103.168.67.253:34596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1TpEcZ_148BjP8ZPg5QAAAQ4"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:07:58.112968 2026] [security2:error] [pid 263262:tid 263489] [client 20.58.177.98:15534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/123viva.php"] [unique_id "ary1TpEcZ_148BjP8ZPg5gAAAWo"]
[Wed Sep 30 01:07:58.122020 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.30.175:38852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp.php"] [unique_id "ary1TpEcZ_148BjP8ZPg5wAAAYE"]
[Wed Sep 30 01:07:58.150355 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.150648 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.183367 2026] [security2:error] [pid 263262:tid 263421] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPg6gAAASY"]
[Wed Sep 30 01:07:58.241938 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.242292 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:4816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.273874 2026] [security2:error] [pid 263262:tid 263519] [client 82.102.18.126:47318] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1TpEcZ_148BjP8ZPg9QAAAYg"]
[Wed Sep 30 01:07:58.336003 2026] [security2:error] [pid 263262:tid 263449] [client 20.214.191.94:15906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/media.php"] [unique_id "ary1TpEcZ_148BjP8ZPg-QAAAUI"]
[Wed Sep 30 01:07:58.336137 2026] [security2:error] [pid 263262:tid 263461] [client 13.70.4.78:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/alfa.php"] [unique_id "ary1TpEcZ_148BjP8ZPg-gAAAU4"]
[Wed Sep 30 01:07:58.382416 2026] [security2:error] [pid 263262:tid 263455] [client 52.231.30.175:38823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/simple.php"] [unique_id "ary1TpEcZ_148BjP8ZPg_AAAAUg"]
[Wed Sep 30 01:07:58.384577 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.384610 2026] [security2:error] [pid 263262:tid 263410] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPg_QAAARs"]
[Wed Sep 30 01:07:58.384854 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.432359 2026] [security2:error] [pid 263262:tid 263483] [client 20.58.177.98:57426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/Components.update.php"] [unique_id "ary1TpEcZ_148BjP8ZPhAQAAAWQ"]
[Wed Sep 30 01:07:58.468971 2026] [security2:error] [pid 263262:tid 263503] [client 216.73.216.46:47735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPhAwAAAXg"]
[Wed Sep 30 01:07:58.474098 2026] [security2:error] [pid 263262:tid 263464] [client 168.100.149.52:28100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/vendor/react.min.js"] [unique_id "ary1TpEcZ_148BjP8ZPhBAABUXw"]
[Wed Sep 30 01:07:58.490472 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.79.13.176:34352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.490764 2026] [access_compat:error] [pid 263262:tid 263485] [client 47.79.13.176:34352] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.511295 2026] [security2:error] [pid 263262:tid 263508] [client 122.173.27.10:29268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1TpEcZ_148BjP8ZPhCAAAAX0"]
[Wed Sep 30 01:07:58.511395 2026] [security2:error] [pid 263262:tid 263508] [client 122.173.27.10:29268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1TpEcZ_148BjP8ZPhCAAAAX0"]
[Wed Sep 30 01:07:58.568539 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.568979 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.583970 2026] [security2:error] [pid 263262:tid 263478] [client 82.102.18.126:47334] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1TpEcZ_148BjP8ZPhDgAAAV8"]
[Wed Sep 30 01:07:58.586621 2026] [security2:error] [pid 263262:tid 263442] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPhDwAAATs"]
[Wed Sep 30 01:07:58.605951 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.606242 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.658928 2026] [security2:error] [pid 263262:tid 263470] [client 13.70.4.78:58994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1TpEcZ_148BjP8ZPhEgAAAVc"]
[Wed Sep 30 01:07:58.662706 2026] [security2:error] [pid 263262:tid 263490] [client 52.231.30.175:32212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/chosen.php"] [unique_id "ary1TpEcZ_148BjP8ZPhEwAAAWs"]
[Wed Sep 30 01:07:58.677088 2026] [security2:error] [pid 263262:tid 263495] [client 20.214.191.94:58698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/images.php"] [unique_id "ary1TpEcZ_148BjP8ZPhFAAAAXA"]
[Wed Sep 30 01:07:58.700644 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.701114 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.706714 2026] [security2:error] [pid 263262:tid 263396] [client 20.58.177.98:33218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/mac.php"] [unique_id "ary1TpEcZ_148BjP8ZPhGAAAAQ0"]
[Wed Sep 30 01:07:58.736634 2026] [access_compat:error] [pid 263262:tid 263488] [client 47.79.13.37:37260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.737143 2026] [access_compat:error] [pid 263262:tid 263488] [client 47.79.13.37:37260] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:58.747259 2026] [security2:error] [pid 263262:tid 263437] [client 20.70.173.30:33289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary1TpEcZ_148BjP8ZPhGwAAATY"]
[Wed Sep 30 01:07:58.750450 2026] [security2:error] [pid 263262:tid 263406] [client 20.58.177.98:57466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/sm.php"] [unique_id "ary1TpEcZ_148BjP8ZPhHQAAARc"]
[Wed Sep 30 01:07:58.788630 2026] [security2:error] [pid 263262:tid 263512] [client 20.219.2.60:11703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws48.php"] [unique_id "ary1TpEcZ_148BjP8ZPhIgAAAYE"]
[Wed Sep 30 01:07:58.788643 2026] [security2:error] [pid 263262:tid 263489] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPhIQAAAWo"]
[Wed Sep 30 01:07:58.792327 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.792781 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.877320 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.877604 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.896293 2026] [security2:error] [pid 263262:tid 263519] [client 82.102.18.126:47344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1TpEcZ_148BjP8ZPhKgAAAYg"]
[Wed Sep 30 01:07:58.943332 2026] [security2:error] [pid 263262:tid 263461] [client 52.231.30.175:38854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/als.php"] [unique_id "ary1TpEcZ_148BjP8ZPhLAAAAU4"]
[Wed Sep 30 01:07:58.970381 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:58.970670 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:58.978178 2026] [security2:error] [pid 263262:tid 263487] [client 13.70.4.78:58950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/b8.php"] [unique_id "ary1TpEcZ_148BjP8ZPhMAAAAWg"]
[Wed Sep 30 01:07:58.990400 2026] [security2:error] [pid 263262:tid 263409] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1TpEcZ_148BjP8ZPhMQAAARo"]
[Wed Sep 30 01:07:59.058188 2026] [security2:error] [pid 263262:tid 263415] [client 152.59.165.7:52017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhNAAAASA"]
[Wed Sep 30 01:07:59.058308 2026] [security2:error] [pid 263262:tid 263415] [client 152.59.165.7:52017] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhNAAAASA"]
[Wed Sep 30 01:07:59.060993 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.061395 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.067908 2026] [security2:error] [pid 263262:tid 263399] [client 20.58.177.98:15830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/mknobgkg.php"] [unique_id "ary1T5EcZ_148BjP8ZPhNQAAARA"]
[Wed Sep 30 01:07:59.095388 2026] [security2:error] [pid 263262:tid 263481] [client 20.194.5.96:18515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/asset.php"] [unique_id "ary1T5EcZ_148BjP8ZPhNwAAAWI"]
[Wed Sep 30 01:07:59.104279 2026] [security2:error] [pid 263262:tid 263269] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1T5EcZ_148BjP8ZPhOAABHwU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D77766
[Wed Sep 30 01:07:59.104309 2026] [security2:error] [pid 263262:tid 263269] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1T5EcZ_148BjP8ZPhOAABHwU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D77766
[Wed Sep 30 01:07:59.112637 2026] [security2:error] [pid 263262:tid 263401] [client 20.58.177.98:33679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/pass4.php"] [unique_id "ary1T5EcZ_148BjP8ZPhOwAAARI"]
[Wed Sep 30 01:07:59.124829 2026] [security2:error] [pid 263262:tid 263483] [client 20.214.191.94:15909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ops.php"] [unique_id "ary1T5EcZ_148BjP8ZPhPAAAAWQ"]
[Wed Sep 30 01:07:59.132719 2026] [security2:error] [pid 263262:tid 263473] [client 20.219.19.141:65475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/k.php"] [unique_id "ary1T5EcZ_148BjP8ZPhPQAAAVo"]
[Wed Sep 30 01:07:59.148642 2026] [security2:error] [pid 263262:tid 263427] [client 203.122.45.246:63485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhQAAAASw"]
[Wed Sep 30 01:07:59.148751 2026] [security2:error] [pid 263262:tid 263427] [client 203.122.45.246:63485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhQAAAASw"]
[Wed Sep 30 01:07:59.150797 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.151069 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.191649 2026] [security2:error] [pid 263262:tid 263520] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhQwAAAYk"]
[Wed Sep 30 01:07:59.216853 2026] [security2:error] [pid 263262:tid 263390] [remote 57.141.14.66:59902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/wp-json/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhPwABRn4"]
[Wed Sep 30 01:07:59.226940 2026] [security2:error] [pid 263262:tid 263500] [client 52.231.30.175:32220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/admin.php"] [unique_id "ary1T5EcZ_148BjP8ZPhRAAAAXU"]
[Wed Sep 30 01:07:59.234343 2026] [security2:error] [pid 263262:tid 263510] [client 82.102.18.126:47352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1T5EcZ_148BjP8ZPhRgAAAX8"]
[Wed Sep 30 01:07:59.240977 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.241295 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.281093 2026] [security2:error] [pid 263262:tid 263509] [client 114.119.129.198:25049] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.madagascar-america-foundation.org"] [uri "/robots.txt"] [unique_id "ary1T5EcZ_148BjP8ZPhSwAAAX4"], referer: http://www.madagascar-america-foundation.org/robots.txt
[Wed Sep 30 01:07:59.287933 2026] [security2:error] [pid 263262:tid 263429] [client 13.70.4.78:63504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/xex.php"] [unique_id "ary1T5EcZ_148BjP8ZPhTAAAAS4"]
[Wed Sep 30 01:07:59.333944 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.334252 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.381537 2026] [security2:error] [pid 263262:tid 263488] [client 20.58.177.98:57411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/dairg.php"] [unique_id "ary1T5EcZ_148BjP8ZPhWAAAAWk"]
[Wed Sep 30 01:07:59.393939 2026] [security2:error] [pid 263262:tid 263489] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhWQAAAWo"]
[Wed Sep 30 01:07:59.427976 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.428411 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.452124 2026] [security2:error] [pid 263262:tid 263519] [client 20.214.191.94:15893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/mac.php"] [unique_id "ary1T5EcZ_148BjP8ZPhYQAAAYg"]
[Wed Sep 30 01:07:59.476183 2026] [http2:warn] [pid 251754:tid 251997] [client 52.167.144.211:58215] h2_stream(251754-752-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:07:59.508793 2026] [security2:error] [pid 263262:tid 263409] [client 52.231.30.175:38819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/f35.php"] [unique_id "ary1T5EcZ_148BjP8ZPhaQAAARo"]
[Wed Sep 30 01:07:59.512412 2026] [access_compat:error] [pid 263262:tid 263412] [client 47.79.13.37:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:07:59.512817 2026] [access_compat:error] [pid 263262:tid 263412] [client 47.79.13.37:37276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:07:59.517188 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.517616 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.544553 2026] [security2:error] [pid 263262:tid 263452] [client 82.102.18.126:47368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1T5EcZ_148BjP8ZPhbgAAAUU"]
[Wed Sep 30 01:07:59.574441 2026] [security2:error] [pid 263262:tid 263439] [client 20.58.177.98:33274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/drttewyh.php"] [unique_id "ary1T5EcZ_148BjP8ZPhcAAAATg"]
[Wed Sep 30 01:07:59.580758 2026] [security2:error] [pid 263262:tid 263375] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1T5EcZ_148BjP8ZPhcQABCm8"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D9914
[Wed Sep 30 01:07:59.580786 2026] [security2:error] [pid 263262:tid 263375] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1T5EcZ_148BjP8ZPhcQABCm8"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D9914
[Wed Sep 30 01:07:59.597636 2026] [security2:error] [pid 263262:tid 263481] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhdAAAAWI"]
[Wed Sep 30 01:07:59.598134 2026] [security2:error] [pid 263262:tid 263443] [client 13.70.4.78:63526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ass.php"] [unique_id "ary1T5EcZ_148BjP8ZPhdQAAATw"]
[Wed Sep 30 01:07:59.607085 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.607347 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.615957 2026] [security2:error] [pid 263262:tid 263486] [client 20.194.5.96:19118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/cued.php"] [unique_id "ary1T5EcZ_148BjP8ZPhdwAAAWc"]
[Wed Sep 30 01:07:59.617029 2026] [security2:error] [pid 263262:tid 263517] [client 4.240.25.22:8461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/BDKR28WP.php"] [unique_id "ary1T5EcZ_148BjP8ZPheAAAAYY"]
[Wed Sep 30 01:07:59.628949 2026] [security2:error] [pid 263262:tid 263445] [client 182.75.216.230:57525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPheQAAAT4"]
[Wed Sep 30 01:07:59.629119 2026] [security2:error] [pid 263262:tid 263445] [client 182.75.216.230:57525] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPheQAAAT4"]
[Wed Sep 30 01:07:59.699553 2026] [security2:error] [pid 263262:tid 263500] [client 20.58.177.98:15514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/dronishness.php"] [unique_id "ary1T5EcZ_148BjP8ZPhgwAAAXU"]
[Wed Sep 30 01:07:59.702596 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.703025 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:57485] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.729020 2026] [security2:error] [pid 263262:tid 263510] [client 4.240.25.22:12456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/df.php"] [unique_id "ary1T5EcZ_148BjP8ZPhhQAAAX8"]
[Wed Sep 30 01:07:59.764525 2026] [security2:error] [pid 263262:tid 263462] [client 103.159.192.142:65365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhhgAAAU8"]
[Wed Sep 30 01:07:59.764655 2026] [security2:error] [pid 263262:tid 263462] [client 103.159.192.142:65365] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhhgAAAU8"]
[Wed Sep 30 01:07:59.772553 2026] [security2:error] [pid 263262:tid 263422] [client 52.231.30.175:38877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/aaa.php"] [unique_id "ary1T5EcZ_148BjP8ZPhhwAAASc"]
[Wed Sep 30 01:07:59.782139 2026] [security2:error] [pid 263262:tid 263509] [client 216.73.216.46:57485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhiAAAAX4"]
[Wed Sep 30 01:07:59.783273 2026] [security2:error] [pid 263262:tid 263457] [client 45.138.12.32:29130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmx.pwx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1T5EcZ_148BjP8ZPhiQAAAUo"]
[Wed Sep 30 01:07:59.795172 2026] [security2:error] [pid 263262:tid 263493] [client 103.168.66.101:39142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1T5EcZ_148BjP8ZPhiwAAAW4"], referer: https://networkwestmichigan.com/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:07:59.798366 2026] [security2:error] [pid 263262:tid 263516] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhjQAAAYU"]
[Wed Sep 30 01:07:59.879271 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.879530 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.885618 2026] [security2:error] [pid 263262:tid 263489] [client 82.102.18.126:47382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1T5EcZ_148BjP8ZPhlgAAAWo"]
[Wed Sep 30 01:07:59.897591 2026] [security2:error] [pid 263262:tid 263423] [client 202.179.95.79:59415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhlwAAASg"]
[Wed Sep 30 01:07:59.897686 2026] [security2:error] [pid 263262:tid 263423] [client 202.179.95.79:59415] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhlwAAASg"]
[Wed Sep 30 01:07:59.922438 2026] [security2:error] [pid 263262:tid 263507] [client 13.70.4.78:8989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wsd.php"] [unique_id "ary1T5EcZ_148BjP8ZPhmgAAAXw"]
[Wed Sep 30 01:07:59.933998 2026] [security2:error] [pid 263262:tid 263397] [client 223.235.102.107:17830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhmwAAAQ4"]
[Wed Sep 30 01:07:59.934225 2026] [security2:error] [pid 263262:tid 263397] [client 223.235.102.107:17830] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhmwAAAQ4"]
[Wed Sep 30 01:07:59.965785 2026] [security2:error] [pid 263262:tid 263459] [client 20.214.191.94:15929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/pass4.php"] [unique_id "ary1T5EcZ_148BjP8ZPhngAAAUw"]
[Wed Sep 30 01:07:59.971287 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:07:59.971563 2026] [access_compat:error] [pid 263262:tid 263400] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:07:59.976661 2026] [security2:error] [pid 263262:tid 263519] [client 20.194.5.96:16608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/24.php"] [unique_id "ary1T5EcZ_148BjP8ZPhoAAAAYg"]
[Wed Sep 30 01:08:00.001163 2026] [security2:error] [pid 263262:tid 263466] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1T5EcZ_148BjP8ZPhoQAAAVM"]
[Wed Sep 30 01:08:00.021575 2026] [security2:error] [pid 263262:tid 263409] [client 20.70.173.30:33301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/mac.php"] [unique_id "ary1UJEcZ_148BjP8ZPhowAAARo"]
[Wed Sep 30 01:08:00.023678 2026] [security2:error] [pid 263262:tid 263449] [client 20.58.177.98:15866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/Row_wsoo.php"] [unique_id "ary1UJEcZ_148BjP8ZPhpQAAAUI"]
[Wed Sep 30 01:08:00.033187 2026] [security2:error] [pid 263262:tid 263455] [client 20.58.177.98:33427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/sh.php"] [unique_id "ary1UJEcZ_148BjP8ZPhqAAAAUg"]
[Wed Sep 30 01:08:00.049305 2026] [security2:error] [pid 263262:tid 263439] [client 20.28.180.172:34245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/mssrt.php"] [unique_id "ary1UJEcZ_148BjP8ZPhqQAAATg"]
[Wed Sep 30 01:08:00.056269 2026] [security2:error] [pid 263262:tid 263393] [client 216.73.216.46:4816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1UJEcZ_148BjP8ZPhqgAAAQo"]
[Wed Sep 30 01:08:00.060898 2026] [security2:error] [pid 263262:tid 263410] [client 20.219.2.60:18931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/155.php"] [unique_id "ary1UJEcZ_148BjP8ZPhqwAAARs"]
[Wed Sep 30 01:08:00.062428 2026] [security2:error] [pid 263262:tid 263481] [client 52.231.30.175:32196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/gecko.php"] [unique_id "ary1UJEcZ_148BjP8ZPhrAAAAWI"]
[Wed Sep 30 01:08:00.100068 2026] [security2:error] [pid 263262:tid 263399] [client 45.138.12.32:29120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkf.cqy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1UJEcZ_148BjP8ZPhrQAAARA"]
[Wed Sep 30 01:08:00.151504 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.151762 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.203122 2026] [security2:error] [pid 263262:tid 263453] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UJEcZ_148BjP8ZPhtQAAAUY"]
[Wed Sep 30 01:08:00.212869 2026] [security2:error] [pid 263262:tid 263413] [client 82.102.18.126:47396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1UJEcZ_148BjP8ZPhtgAAAR4"]
[Wed Sep 30 01:08:00.244606 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.244879 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.259324 2026] [security2:error] [pid 263262:tid 263429] [client 13.70.4.78:59991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/BDKR28WP.php"] [unique_id "ary1UJEcZ_148BjP8ZPhugAAAS4"]
[Wed Sep 30 01:08:00.275140 2026] [security2:error] [pid 263262:tid 263442] [client 45.136.150.23:38888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.150.136.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kingdomsafe.com"] [uri "/wp-login.php"] [unique_id "ary1UJEcZ_148BjP8ZPhuQAAATs"]
[Wed Sep 30 01:08:00.323460 2026] [security2:error] [pid 263262:tid 263408] [client 52.231.30.175:32208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/xiugai.php"] [unique_id "ary1UJEcZ_148BjP8ZPhwAAAARk"]
[Wed Sep 30 01:08:00.325958 2026] [security2:error] [pid 263262:tid 263349] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1UJEcZ_148BjP8ZPhvwABNlU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277841&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:08:00.325989 2026] [security2:error] [pid 263262:tid 263349] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1UJEcZ_148BjP8ZPhvwABNlU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277841&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:08:00.334563 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.334832 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.347004 2026] [security2:error] [pid 263262:tid 263444] [client 20.58.177.98:15857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/x2.php"] [unique_id "ary1UJEcZ_148BjP8ZPhwgAAAT0"]
[Wed Sep 30 01:08:00.399269 2026] [security2:error] [pid 263262:tid 263458] [client 20.214.191.94:58691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/drttewyh.php"] [unique_id "ary1UJEcZ_148BjP8ZPhxgAAAUs"]
[Wed Sep 30 01:08:00.404146 2026] [security2:error] [pid 263262:tid 263495] [client 20.28.180.172:18322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/schallfuns.php"] [unique_id "ary1UJEcZ_148BjP8ZPhxwAAAXA"]
[Wed Sep 30 01:08:00.406317 2026] [security2:error] [pid 263262:tid 263404] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UJEcZ_148BjP8ZPhyAAAARU"]
[Wed Sep 30 01:08:00.476758 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.477015 2026] [access_compat:error] [pid 263262:tid 263406] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.487241 2026] [security2:error] [pid 263262:tid 263496] [client 20.194.5.96:18497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/sd.php"] [unique_id "ary1UJEcZ_148BjP8ZPhzQAAAXE"]
[Wed Sep 30 01:08:00.521045 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.521490 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.526655 2026] [security2:error] [pid 263262:tid 263421] [client 82.102.18.126:47406] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1UJEcZ_148BjP8ZPh0gAAASY"]
[Wed Sep 30 01:08:00.569766 2026] [security2:error] [pid 263262:tid 263459] [client 13.70.4.78:58995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wmore1.php"] [unique_id "ary1UJEcZ_148BjP8ZPh1AAAAUw"]
[Wed Sep 30 01:08:00.583553 2026] [security2:error] [pid 263262:tid 263441] [client 52.231.30.175:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/inx.php"] [unique_id "ary1UJEcZ_148BjP8ZPh1gAAATo"]
[Wed Sep 30 01:08:00.605071 2026] [security2:error] [pid 263262:tid 263466] [client 20.194.5.96:16622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/xwpg.php"] [unique_id "ary1UJEcZ_148BjP8ZPh2QAAAVM"]
[Wed Sep 30 01:08:00.608191 2026] [security2:error] [pid 263262:tid 263447] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UJEcZ_148BjP8ZPh2gAAAUA"]
[Wed Sep 30 01:08:00.611747 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.612043 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.648444 2026] [security2:error] [pid 263262:tid 263494] [client 20.70.173.30:43520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/dex.php"] [unique_id "ary1UJEcZ_148BjP8ZPh3QAAAW8"]
[Wed Sep 30 01:08:00.654642 2026] [security2:error] [pid 263262:tid 263517] [client 179.105.122.52:50494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1UJEcZ_148BjP8ZPh0AAAAYY"]
[Wed Sep 30 01:08:00.660145 2026] [security2:error] [pid 263262:tid 263393] [client 20.58.177.98:15838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/v4.php"] [unique_id "ary1UJEcZ_148BjP8ZPh3gAAAQo"]
[Wed Sep 30 01:08:00.665985 2026] [security2:error] [pid 263262:tid 263410] [client 20.214.191.94:58710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/sh.php"] [unique_id "ary1UJEcZ_148BjP8ZPh3wAAARs"]
[Wed Sep 30 01:08:00.700285 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.700543 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.728093 2026] [security2:error] [pid 263262:tid 263477] [client 20.204.42.136:42449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1UJEcZ_148BjP8ZPh4wAAAV4"]
[Wed Sep 30 01:08:00.782603 2026] [autoindex:error] [pid 263262:tid 263409] [client 94.130.231.26:52166] AH01276: Cannot serve directory /home4/pdzwmqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:08:00.810221 2026] [security2:error] [pid 263262:tid 263510] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UJEcZ_148BjP8ZPh6QAAAX8"]
[Wed Sep 30 01:08:00.840926 2026] [security2:error] [pid 263262:tid 263468] [client 82.102.18.126:47410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1UJEcZ_148BjP8ZPh7AAAAVU"]
[Wed Sep 30 01:08:00.842591 2026] [security2:error] [pid 263262:tid 263429] [client 52.231.30.175:32205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/11.php"] [unique_id "ary1UJEcZ_148BjP8ZPh7QAAAS4"]
[Wed Sep 30 01:08:00.842838 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:18162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.843187 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:18162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.881946 2026] [security2:error] [pid 263262:tid 263476] [client 13.70.4.78:63525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/z60.php"] [unique_id "ary1UJEcZ_148BjP8ZPh9gAAAV0"]
[Wed Sep 30 01:08:00.928963 2026] [security2:error] [pid 263262:tid 263472] [client 116.193.128.26:64413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1UJEcZ_148BjP8ZPh-QAAAVk"]
[Wed Sep 30 01:08:00.929411 2026] [security2:error] [pid 263262:tid 263472] [client 116.193.128.26:64413] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1UJEcZ_148BjP8ZPh-QAAAVk"]
[Wed Sep 30 01:08:00.937750 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.938025 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.961538 2026] [security2:error] [pid 263262:tid 263458] [client 20.214.191.94:58728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/groud1.php"] [unique_id "ary1UJEcZ_148BjP8ZPh-wAAAUs"]
[Wed Sep 30 01:08:00.965048 2026] [security2:error] [pid 263262:tid 263396] [client 20.219.19.141:29821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/133.php"] [unique_id "ary1UJEcZ_148BjP8ZPh_AAAAQ0"]
[Wed Sep 30 01:08:00.968437 2026] [security2:error] [pid 263262:tid 263446] [client 20.58.177.98:33254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/groud1.php"] [unique_id "ary1UJEcZ_148BjP8ZPh_QAAAT8"]
[Wed Sep 30 01:08:00.977854 2026] [security2:error] [pid 263262:tid 263454] [client 20.58.177.98:15851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/albin.php"] [unique_id "ary1UJEcZ_148BjP8ZPiAAAAAUc"]
[Wed Sep 30 01:08:00.977995 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:00.978309 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:00.982687 2026] [security2:error] [pid 263262:tid 263489] [client 20.194.5.96:18938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/ans.php"] [unique_id "ary1UJEcZ_148BjP8ZPiAQAAAWo"]
[Wed Sep 30 01:08:01.010800 2026] [security2:error] [pid 263262:tid 263403] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UZEcZ_148BjP8ZPiAwAAARQ"]
[Wed Sep 30 01:08:01.022405 2026] [security2:error] [pid 263262:tid 263426] [client 152.56.240.85:53460] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1T5EcZ_148BjP8ZPhYwAAASs"]
[Wed Sep 30 01:08:01.067965 2026] [security2:error] [pid 263262:tid 263455] [client 201.32.215.149:8818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPiBwAAAUg"]
[Wed Sep 30 01:08:01.068089 2026] [security2:error] [pid 263262:tid 263455] [client 201.32.215.149:8818] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPiBwAAAUg"]
[Wed Sep 30 01:08:01.069779 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.070203 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.107515 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.30.175:32230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/File.php"] [unique_id "ary1UZEcZ_148BjP8ZPiFQAAAUM"]
[Wed Sep 30 01:08:01.153381 2026] [security2:error] [pid 263262:tid 263407] [client 82.102.18.126:47420] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1UZEcZ_148BjP8ZPiGAAAARg"]
[Wed Sep 30 01:08:01.158218 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.158518 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.203051 2026] [security2:error] [pid 263262:tid 263463] [client 13.70.4.78:51143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/pJPoKA.php"] [unique_id "ary1UZEcZ_148BjP8ZPiGgAAAVA"]
[Wed Sep 30 01:08:01.213153 2026] [security2:error] [pid 263262:tid 263418] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UZEcZ_148BjP8ZPiHAAAASM"]
[Wed Sep 30 01:08:01.249681 2026] [security2:error] [pid 263262:tid 263422] [client 20.214.191.94:58674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/bro.php"] [unique_id "ary1UZEcZ_148BjP8ZPiIgAAASc"]
[Wed Sep 30 01:08:01.252005 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.252404 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.300167 2026] [security2:error] [pid 263262:tid 263437] [client 20.58.177.98:15820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/atkno.php"] [unique_id "ary1UZEcZ_148BjP8ZPiKgAAATY"]
[Wed Sep 30 01:08:01.315845 2026] [security2:error] [pid 263262:tid 263493] [client 20.58.177.98:33671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/bro.php"] [unique_id "ary1UZEcZ_148BjP8ZPiLwAAAW4"]
[Wed Sep 30 01:08:01.341485 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.341742 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.371384 2026] [security2:error] [pid 263262:tid 263419] [client 52.231.30.175:38892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1UZEcZ_148BjP8ZPiNgAAASQ"]
[Wed Sep 30 01:08:01.410667 2026] [security2:error] [pid 263262:tid 263423] [client 4.240.25.22:46323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp-the.php"] [unique_id "ary1UZEcZ_148BjP8ZPiOgAAASg"]
[Wed Sep 30 01:08:01.414652 2026] [security2:error] [pid 263262:tid 263404] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UZEcZ_148BjP8ZPiOwAAARU"]
[Wed Sep 30 01:08:01.416409 2026] [security2:error] [pid 263262:tid 263404] [client 20.194.5.96:18915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/cns.php"] [unique_id "ary1UZEcZ_148BjP8ZPiPAAAARU"]
[Wed Sep 30 01:08:01.434006 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.434422 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.438450 2026] [http2:warn] [pid 251754:tid 251988] [client 40.77.167.224:62328] h2_stream(251754-767-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:01.446510 2026] [security2:error] [pid 263262:tid 263426] [client 20.213.164.196:21344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/0xD.php"] [unique_id "ary1UZEcZ_148BjP8ZPiQQAAASs"]
[Wed Sep 30 01:08:01.465614 2026] [security2:error] [pid 263262:tid 263482] [client 82.102.18.126:47434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1UZEcZ_148BjP8ZPiQwAAAWM"]
[Wed Sep 30 01:08:01.518886 2026] [security2:error] [pid 263262:tid 263481] [client 49.43.163.212:57788] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPiNAAAAWI"]
[Wed Sep 30 01:08:01.525103 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.525398 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.528751 2026] [security2:error] [pid 263262:tid 263427] [client 13.70.4.78:63488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/24.php"] [unique_id "ary1UZEcZ_148BjP8ZPiSQAAASw"]
[Wed Sep 30 01:08:01.551497 2026] [security2:error] [pid 263262:tid 263477] [client 20.214.191.94:58737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ac83.php"] [unique_id "ary1UZEcZ_148BjP8ZPiSwAAAV4"]
[Wed Sep 30 01:08:01.611337 2026] [security2:error] [pid 263262:tid 263512] [client 43.227.131.37:15300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPiVQAAAYE"]
[Wed Sep 30 01:08:01.611461 2026] [security2:error] [pid 263262:tid 263512] [client 43.227.131.37:15300] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPiVQAAAYE"]
[Wed Sep 30 01:08:01.615127 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.615471 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.616880 2026] [security2:error] [pid 263262:tid 263418] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UZEcZ_148BjP8ZPiVgAAASM"]
[Wed Sep 30 01:08:01.620075 2026] [security2:error] [pid 263262:tid 263510] [client 20.58.177.98:15934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gptsh.php"] [unique_id "ary1UZEcZ_148BjP8ZPiVwAAAX8"]
[Wed Sep 30 01:08:01.631787 2026] [security2:error] [pid 263262:tid 263413] [client 52.231.30.175:38815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary1UZEcZ_148BjP8ZPiWAAAAR4"]
[Wed Sep 30 01:08:01.650816 2026] [security2:error] [pid 263262:tid 263506] [client 20.204.42.136:37411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1UZEcZ_148BjP8ZPiWgAAAXs"]
[Wed Sep 30 01:08:01.709127 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.709567 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.717600 2026] [security2:error] [pid 263262:tid 263517] [client 94.130.231.26:52198] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.pdz.wmq.mybluehost.me"] [uri "/.env"] [unique_id "ary1UZEcZ_148BjP8ZPiXwAAAYY"]
[Wed Sep 30 01:08:01.718071 2026] [security2:error] [pid 263262:tid 263435] [client 94.130.231.26:52260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.pdz.wmq.mybluehost.me"] [uri "/.env.swp"] [unique_id "ary1UZEcZ_148BjP8ZPiXQAAATQ"]
[Wed Sep 30 01:08:01.718074 2026] [security2:error] [pid 263262:tid 263515] [client 94.130.231.26:52264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.pdz.wmq.mybluehost.me"] [uri "/.env.backup"] [unique_id "ary1UZEcZ_148BjP8ZPiXgAAAYQ"]
[Wed Sep 30 01:08:01.724665 2026] [security2:error] [pid 263262:tid 263495] [client 94.130.231.26:52214] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.pdz.wmq.mybluehost.me"] [uri "/.env.bak"] [unique_id "ary1UZEcZ_148BjP8ZPiZAAAAXA"]
[Wed Sep 30 01:08:01.725039 2026] [security2:error] [pid 263262:tid 263455] [client 94.130.231.26:52230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.pdz.wmq.mybluehost.me"] [uri "/.env.old"] [unique_id "ary1UZEcZ_148BjP8ZPiZQAAAUg"]
[Wed Sep 30 01:08:01.736394 2026] [security2:error] [pid 263262:tid 263465] [client 20.58.177.98:33684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ac83.php"] [unique_id "ary1UZEcZ_148BjP8ZPiZgAAAVI"]
[Wed Sep 30 01:08:01.768799 2026] [security2:error] [pid 263262:tid 263509] [client 82.102.18.126:47438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.snu.xvn.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1UZEcZ_148BjP8ZPiaQAAAX4"]
[Wed Sep 30 01:08:01.794261 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.794534 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.817735 2026] [security2:error] [pid 263262:tid 263408] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UZEcZ_148BjP8ZPicAAAARk"]
[Wed Sep 30 01:08:01.827525 2026] [security2:error] [pid 263262:tid 263288] [remote 64.23.166.180:8566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hbw.dvz.mybluehost.me"] [uri "/.env"] [unique_id "ary1UZEcZ_148BjP8ZPicQABKBg"]
[Wed Sep 30 01:08:01.833829 2026] [security2:error] [pid 263262:tid 263462] [client 223.181.30.165:13622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPicgAAAU8"]
[Wed Sep 30 01:08:01.833933 2026] [security2:error] [pid 263262:tid 263462] [client 223.181.30.165:13622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1UZEcZ_148BjP8ZPicgAAAU8"]
[Wed Sep 30 01:08:01.849101 2026] [security2:error] [pid 263262:tid 263496] [client 13.70.4.78:56494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/xxw.php"] [unique_id "ary1UZEcZ_148BjP8ZPidgAAAXE"]
[Wed Sep 30 01:08:01.853996 2026] [security2:error] [pid 263262:tid 263445] [client 4.240.25.22:12450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/av.php"] [unique_id "ary1UZEcZ_148BjP8ZPidwAAAT4"]
[Wed Sep 30 01:08:01.880845 2026] [access_compat:error] [pid 263262:tid 263464] [client 47.79.13.1:46480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:01.881098 2026] [access_compat:error] [pid 263262:tid 263464] [client 47.79.13.1:46480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:01.887047 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.887488 2026] [access_compat:error] [pid 263262:tid 263427] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:01.911596 2026] [security2:error] [pid 263262:tid 263502] [client 52.231.30.175:38894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1UZEcZ_148BjP8ZPigAAAAXc"]
[Wed Sep 30 01:08:01.943236 2026] [security2:error] [pid 263262:tid 263512] [client 20.58.177.98:15860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/rithin.php"] [unique_id "ary1UZEcZ_148BjP8ZPigwAAAYE"]
[Wed Sep 30 01:08:01.976983 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:01.977406 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.021974 2026] [security2:error] [pid 263262:tid 263442] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UpEcZ_148BjP8ZPijQAAATs"]
[Wed Sep 30 01:08:02.050127 2026] [security2:error] [pid 263262:tid 263424] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1UpEcZ_148BjP8ZPikQAAASk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:02.067788 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.068151 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.080890 2026] [security2:error] [pid 263262:tid 263519] [client 45.138.12.43:21558] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.xjn.hct.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1UpEcZ_148BjP8ZPimAAAAYg"]
[Wed Sep 30 01:08:02.082299 2026] [security2:error] [pid 263262:tid 263470] [client 20.58.177.98:33250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1UpEcZ_148BjP8ZPimQAAAVc"]
[Wed Sep 30 01:08:02.087023 2026] [security2:error] [pid 263262:tid 263300] [remote 57.141.14.92:40862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/bus-rapid-transit-us29-south-corridor-advisory-committee-meeting/"] [unique_id "ary1UpEcZ_148BjP8ZPimgABcCQ"]
[Wed Sep 30 01:08:02.157399 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.157700 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.173663 2026] [security2:error] [pid 263262:tid 263479] [client 13.70.4.78:63516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/bnmtp.php"] [unique_id "ary1UpEcZ_148BjP8ZPiqwAAAWA"]
[Wed Sep 30 01:08:02.177156 2026] [security2:error] [pid 263262:tid 263445] [client 52.231.30.175:38880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary1UpEcZ_148BjP8ZPirAAAAT4"]
[Wed Sep 30 01:08:02.224575 2026] [security2:error] [pid 263262:tid 263497] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UpEcZ_148BjP8ZPisAAAAXI"]
[Wed Sep 30 01:08:02.236618 2026] [security2:error] [pid 263262:tid 263486] [client 106.214.2.47:13765] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1UpEcZ_148BjP8ZPisQAAAWc"]
[Wed Sep 30 01:08:02.236778 2026] [security2:error] [pid 263262:tid 263486] [client 106.214.2.47:13765] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1UpEcZ_148BjP8ZPisQAAAWc"]
[Wed Sep 30 01:08:02.253066 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.253462 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.262500 2026] [security2:error] [pid 263262:tid 263403] [client 20.214.191.94:58748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1UpEcZ_148BjP8ZPitAAAARQ"]
[Wed Sep 30 01:08:02.269110 2026] [security2:error] [pid 263262:tid 263418] [client 20.58.177.98:15867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/il.php"] [unique_id "ary1UpEcZ_148BjP8ZPitgAAASM"]
[Wed Sep 30 01:08:02.332186 2026] [security2:error] [pid 263262:tid 263501] [client 20.204.42.136:62011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/f35.update.php"] [unique_id "ary1UpEcZ_148BjP8ZPivQAAAXY"]
[Wed Sep 30 01:08:02.345765 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.346216 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.363252 2026] [security2:error] [pid 263262:tid 263373] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1UpEcZ_148BjP8ZPiwAABgm0"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D70737
[Wed Sep 30 01:08:02.363278 2026] [security2:error] [pid 263262:tid 263373] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1UpEcZ_148BjP8ZPiwAABgm0"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D70737
[Wed Sep 30 01:08:02.402137 2026] [security2:error] [pid 263262:tid 263515] [client 20.219.19.141:45035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wsd.php"] [unique_id "ary1UpEcZ_148BjP8ZPiwgAAAYQ"]
[Wed Sep 30 01:08:02.425911 2026] [security2:error] [pid 263262:tid 263447] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UpEcZ_148BjP8ZPixQAAAUA"]
[Wed Sep 30 01:08:02.431042 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.431306 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.448283 2026] [security2:error] [pid 263262:tid 263495] [client 52.231.30.175:38828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary1UpEcZ_148BjP8ZPiyAAAAXA"]
[Wed Sep 30 01:08:02.468577 2026] [security2:error] [pid 263262:tid 263472] [client 20.58.177.98:33669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/zoo2.php"] [unique_id "ary1UpEcZ_148BjP8ZPiygAAAVk"]
[Wed Sep 30 01:08:02.471882 2026] [security2:error] [pid 263262:tid 263435] [client 168.100.149.58:38526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/presto-player/src/player/player-static.js"] [unique_id "ary1UpEcZ_148BjP8ZPiyQABNAk"]
[Wed Sep 30 01:08:02.488316 2026] [security2:error] [pid 263262:tid 263520] [client 13.70.4.78:56482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ebkid.php"] [unique_id "ary1UpEcZ_148BjP8ZPizQAAAYk"]
[Wed Sep 30 01:08:02.508205 2026] [security2:error] [pid 263262:tid 263509] [client 20.70.173.30:33416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/media.php"] [unique_id "ary1UpEcZ_148BjP8ZPizwAAAX4"]
[Wed Sep 30 01:08:02.510854 2026] [security2:error] [pid 263262:tid 263431] [client 20.194.5.96:19074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/faiy.php"] [unique_id "ary1UpEcZ_148BjP8ZPi0AAAATA"]
[Wed Sep 30 01:08:02.523593 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.523898 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.555589 2026] [security2:error] [pid 263262:tid 263406] [client 20.194.5.96:16576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/blacks.php"] [unique_id "ary1UpEcZ_148BjP8ZPi1AAAARc"]
[Wed Sep 30 01:08:02.588331 2026] [security2:error] [pid 263262:tid 263445] [client 20.58.177.98:15493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/1klopedf.php"] [unique_id "ary1UpEcZ_148BjP8ZPi1gAAAT4"]
[Wed Sep 30 01:08:02.616781 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.617070 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.627386 2026] [security2:error] [pid 263262:tid 263399] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UpEcZ_148BjP8ZPi2gAAARA"]
[Wed Sep 30 01:08:02.677534 2026] [security2:error] [pid 263262:tid 263446] [client 45.138.12.32:41880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmx.pwx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1UpEcZ_148BjP8ZPi4wAAAT8"]
[Wed Sep 30 01:08:02.692660 2026] [security2:error] [pid 263262:tid 263510] [client 20.28.180.172:29480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/gxjybsva.php"] [unique_id "ary1UpEcZ_148BjP8ZPi5wAAAX8"]
[Wed Sep 30 01:08:02.708362 2026] [security2:error] [pid 263262:tid 263429] [client 52.231.30.175:38831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary1UpEcZ_148BjP8ZPi6wAAAS4"]
[Wed Sep 30 01:08:02.709206 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.709654 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:11726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.781541 2026] [security2:error] [pid 263262:tid 263517] [client 20.70.173.30:33376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/abcd.php"] [unique_id "ary1UpEcZ_148BjP8ZPi9gAAAYY"]
[Wed Sep 30 01:08:02.795421 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.795739 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.804926 2026] [security2:error] [pid 263262:tid 263515] [client 13.70.4.78:63547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/133.php"] [unique_id "ary1UpEcZ_148BjP8ZPi_AAAAYQ"]
[Wed Sep 30 01:08:02.831341 2026] [security2:error] [pid 263262:tid 263505] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1UpEcZ_148BjP8ZPjAQAAAXo"]
[Wed Sep 30 01:08:02.890681 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.890956 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.908789 2026] [security2:error] [pid 263262:tid 263450] [client 20.58.177.98:57420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/zv.php"] [unique_id "ary1UpEcZ_148BjP8ZPjCgAAAUM"]
[Wed Sep 30 01:08:02.982104 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:02.982558 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:02.994969 2026] [security2:error] [pid 263262:tid 263504] [client 52.231.30.175:38902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/media.php"] [unique_id "ary1UpEcZ_148BjP8ZPjFQAAAXk"]
[Wed Sep 30 01:08:03.033355 2026] [security2:error] [pid 263262:tid 263465] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1U5EcZ_148BjP8ZPjFgAAAVI"]
[Wed Sep 30 01:08:03.041249 2026] [security2:error] [pid 263262:tid 263418] [client 20.58.177.98:33697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/zoo1.php"] [unique_id "ary1U5EcZ_148BjP8ZPjFwAAASM"]
[Wed Sep 30 01:08:03.070893 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.071207 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.123795 2026] [security2:error] [pid 263262:tid 263429] [client 216.73.216.46:11726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1U5EcZ_148BjP8ZPjGgAAAS4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3IvbGliL2dydWI%3D
[Wed Sep 30 01:08:03.128942 2026] [security2:error] [pid 263262:tid 263497] [client 20.213.164.196:21238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/sallu.php"] [unique_id "ary1U5EcZ_148BjP8ZPjGwAAAXI"]
[Wed Sep 30 01:08:03.136108 2026] [security2:error] [pid 263262:tid 263487] [client 13.70.4.78:59006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/x33.php"] [unique_id "ary1U5EcZ_148BjP8ZPjHAAAAWg"]
[Wed Sep 30 01:08:03.160927 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.161183 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.165440 2026] [security2:error] [pid 263262:tid 263396] [client 20.214.191.94:58726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/zoo2.php"] [unique_id "ary1U5EcZ_148BjP8ZPjIgAAAQ0"]
[Wed Sep 30 01:08:03.226927 2026] [security2:error] [pid 263262:tid 263468] [client 20.58.177.98:15861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/zv.update.php"] [unique_id "ary1U5EcZ_148BjP8ZPjJgAAAVU"]
[Wed Sep 30 01:08:03.237104 2026] [security2:error] [pid 263262:tid 263416] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1U5EcZ_148BjP8ZPjJwAAASE"]
[Wed Sep 30 01:08:03.252748 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.253099 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.255577 2026] [security2:error] [pid 263262:tid 263444] [client 52.231.30.175:38861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/inso.php"] [unique_id "ary1U5EcZ_148BjP8ZPjLAAAAT0"]
[Wed Sep 30 01:08:03.268366 2026] [security2:error] [pid 263262:tid 263455] [client 20.70.173.30:56464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wpxml.php"] [unique_id "ary1U5EcZ_148BjP8ZPjLwAAAUg"]
[Wed Sep 30 01:08:03.273328 2026] [security2:error] [pid 263262:tid 263498] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1U5EcZ_148BjP8ZPjMQAAAXM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:03.343259 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.343551 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.355030 2026] [security2:error] [pid 263262:tid 263516] [client 20.219.2.60:18846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-the.php"] [unique_id "ary1U5EcZ_148BjP8ZPjOAAAAYU"]
[Wed Sep 30 01:08:03.438422 2026] [security2:error] [pid 263262:tid 263449] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1U5EcZ_148BjP8ZPjPwAAAUI"]
[Wed Sep 30 01:08:03.439426 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.439999 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.453980 2026] [security2:error] [pid 263262:tid 263447] [client 13.70.4.78:8978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/cae.php"] [unique_id "ary1U5EcZ_148BjP8ZPjQAAAAUA"]
[Wed Sep 30 01:08:03.476181 2026] [security2:error] [pid 263262:tid 263399] [client 20.58.177.98:33667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/class-ajax.php"] [unique_id "ary1U5EcZ_148BjP8ZPjQQAAARA"]
[Wed Sep 30 01:08:03.496509 2026] [security2:error] [pid 263262:tid 263518] [client 20.194.5.96:17157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1U5EcZ_148BjP8ZPjQgAAAYc"]
[Wed Sep 30 01:08:03.519347 2026] [security2:error] [pid 263262:tid 263502] [client 52.231.30.175:32142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/shiny.php"] [unique_id "ary1U5EcZ_148BjP8ZPjRgAAAXc"]
[Wed Sep 30 01:08:03.524893 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.525179 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.543856 2026] [security2:error] [pid 263262:tid 263464] [client 182.69.182.151:22605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1U5EcZ_148BjP8ZPjSAAAAVE"]
[Wed Sep 30 01:08:03.543958 2026] [security2:error] [pid 263262:tid 263464] [client 182.69.182.151:22605] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1U5EcZ_148BjP8ZPjSAAAAVE"]
[Wed Sep 30 01:08:03.546040 2026] [security2:error] [pid 263262:tid 263461] [client 20.58.177.98:15492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/wquosqsi.php"] [unique_id "ary1U5EcZ_148BjP8ZPjSQAAAU4"]
[Wed Sep 30 01:08:03.620592 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.621029 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.626616 2026] [security2:error] [pid 263262:tid 263476] [client 20.214.191.94:15885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/zoo1.php"] [unique_id "ary1U5EcZ_148BjP8ZPjTwAAAV0"]
[Wed Sep 30 01:08:03.637416 2026] [security2:error] [pid 263262:tid 263519] [client 15.252.178.110:34502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ijh.xvn.mybluehost.me"] [uri "/index.php"] [unique_id "ary1U5EcZ_148BjP8ZPjUAAAAYg"]
[Wed Sep 30 01:08:03.638666 2026] [security2:error] [pid 263262:tid 263429] [client 4.240.25.22:8472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dehnl.php"] [unique_id "ary1U5EcZ_148BjP8ZPjUgAAAS4"]
[Wed Sep 30 01:08:03.640107 2026] [security2:error] [pid 263262:tid 263497] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1U5EcZ_148BjP8ZPjUwAAAXI"]
[Wed Sep 30 01:08:03.642799 2026] [security2:error] [pid 263262:tid 263487] [client 20.194.5.96:18939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/gecho.php"] [unique_id "ary1U5EcZ_148BjP8ZPjVQAAAWg"]
[Wed Sep 30 01:08:03.661231 2026] [security2:error] [pid 263262:tid 263400] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1U5EcZ_148BjP8ZPjVgAAARE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:03.706642 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.706913 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.714755 2026] [security2:error] [pid 263262:tid 263495] [client 223.181.60.167:6375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1U5EcZ_148BjP8ZPjWwAAAXA"]
[Wed Sep 30 01:08:03.717024 2026] [security2:error] [pid 263262:tid 263495] [client 223.181.60.167:6375] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1U5EcZ_148BjP8ZPjWwAAAXA"]
[Wed Sep 30 01:08:03.738829 2026] [security2:error] [pid 263262:tid 263488] [client 104.208.65.139:18769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/xxw.php"] [unique_id "ary1U5EcZ_148BjP8ZPjXQAAAWk"]
[Wed Sep 30 01:08:03.770858 2026] [security2:error] [pid 263262:tid 263468] [client 13.70.4.78:8988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/txets.php"] [unique_id "ary1U5EcZ_148BjP8ZPjXgAAAVU"]
[Wed Sep 30 01:08:03.784686 2026] [security2:error] [pid 263262:tid 263435] [client 52.231.30.175:38835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/403dd.php"] [unique_id "ary1U5EcZ_148BjP8ZPjYQAAATQ"]
[Wed Sep 30 01:08:03.800462 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.800829 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.842452 2026] [security2:error] [pid 263262:tid 263478] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1U5EcZ_148BjP8ZPjZAAAAV8"]
[Wed Sep 30 01:08:03.870713 2026] [security2:error] [pid 263262:tid 263457] [client 20.58.177.98:15488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/asset.php"] [unique_id "ary1U5EcZ_148BjP8ZPjZQAAAUo"]
[Wed Sep 30 01:08:03.873672 2026] [security2:error] [pid 263262:tid 263427] [client 20.219.19.141:29776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/BDKR28WP.php"] [unique_id "ary1U5EcZ_148BjP8ZPjZgAAASw"]
[Wed Sep 30 01:08:03.894159 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.894605 2026] [access_compat:error] [pid 263262:tid 263450] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:03.980358 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:03.980628 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.012253 2026] [security2:error] [pid 263262:tid 263473] [client 20.214.191.94:15925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/class-ajax.php"] [unique_id "ary1VJEcZ_148BjP8ZPjcgAAAVo"]
[Wed Sep 30 01:08:04.032207 2026] [security2:error] [pid 263262:tid 263460] [client 20.58.177.98:33248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gm.php"] [unique_id "ary1VJEcZ_148BjP8ZPjcwAAAU0"]
[Wed Sep 30 01:08:04.045277 2026] [security2:error] [pid 263262:tid 263483] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VJEcZ_148BjP8ZPjdAAAAWQ"]
[Wed Sep 30 01:08:04.057856 2026] [security2:error] [pid 263262:tid 263505] [client 52.231.30.175:38820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/baba.php"] [unique_id "ary1VJEcZ_148BjP8ZPjdgAAAXo"]
[Wed Sep 30 01:08:04.072488 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.072795 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.091096 2026] [security2:error] [pid 263262:tid 263451] [client 68.167.73.33:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1VJEcZ_148BjP8ZPjfAAAAUQ"]
[Wed Sep 30 01:08:04.099045 2026] [security2:error] [pid 263262:tid 263453] [client 13.70.4.78:51192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wp-update.php"] [unique_id "ary1VJEcZ_148BjP8ZPjfQAAAUY"]
[Wed Sep 30 01:08:04.167169 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.167616 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.189583 2026] [security2:error] [pid 263262:tid 263489] [client 20.58.177.98:57469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/cued.php"] [unique_id "ary1VJEcZ_148BjP8ZPjhAAAAWo"]
[Wed Sep 30 01:08:04.248442 2026] [security2:error] [pid 263262:tid 263487] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VJEcZ_148BjP8ZPjhwAAAWg"]
[Wed Sep 30 01:08:04.253085 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.253365 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.261991 2026] [security2:error] [pid 263262:tid 263396] [client 20.194.5.96:18532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/gu.php"] [unique_id "ary1VJEcZ_148BjP8ZPjiwAAAQ0"]
[Wed Sep 30 01:08:04.321526 2026] [security2:error] [pid 263262:tid 263501] [client 52.231.30.175:38845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/site.php"] [unique_id "ary1VJEcZ_148BjP8ZPjjwAAAXY"]
[Wed Sep 30 01:08:04.323026 2026] [security2:error] [pid 263262:tid 263430] [client 20.214.191.94:15918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/gm.php"] [unique_id "ary1VJEcZ_148BjP8ZPjkAAAAS8"]
[Wed Sep 30 01:08:04.349794 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.350243 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.365875 2026] [security2:error] [pid 263262:tid 263470] [client 20.204.42.136:36662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/adminfuns.php"] [unique_id "ary1VJEcZ_148BjP8ZPjlQAAAVc"]
[Wed Sep 30 01:08:04.430351 2026] [security2:error] [pid 263262:tid 263480] [client 13.70.4.78:58944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/177.php"] [unique_id "ary1VJEcZ_148BjP8ZPjnAAAAWE"]
[Wed Sep 30 01:08:04.439274 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.439712 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.451353 2026] [security2:error] [pid 263262:tid 263478] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VJEcZ_148BjP8ZPjngAAAV8"]
[Wed Sep 30 01:08:04.472557 2026] [security2:error] [pid 263262:tid 263513] [client 20.28.180.172:60311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/CDX1.php"] [unique_id "ary1VJEcZ_148BjP8ZPjnwAAAYI"]
[Wed Sep 30 01:08:04.487207 2026] [security2:error] [pid 263262:tid 263520] [client 168.100.149.23:20188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/media-models.min.js"] [unique_id "ary1VJEcZ_148BjP8ZPjoQABiUI"]
[Wed Sep 30 01:08:04.515208 2026] [security2:error] [pid 263262:tid 263404] [client 20.58.177.98:15545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/sd.php"] [unique_id "ary1VJEcZ_148BjP8ZPjowAAARU"]
[Wed Sep 30 01:08:04.527864 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.528289 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.539839 2026] [security2:error] [pid 263262:tid 263460] [client 20.194.30.107:1690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1VJEcZ_148BjP8ZPjpQAAAU0"]
[Wed Sep 30 01:08:04.582168 2026] [security2:error] [pid 263262:tid 263451] [client 52.231.30.175:38786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/insc.php"] [unique_id "ary1VJEcZ_148BjP8ZPjqQAAAUQ"]
[Wed Sep 30 01:08:04.600702 2026] [security2:error] [pid 263262:tid 263399] [client 20.214.191.94:58629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1VJEcZ_148BjP8ZPjqgAAARA"]
[Wed Sep 30 01:08:04.623206 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.623649 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.655391 2026] [security2:error] [pid 263262:tid 263486] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VJEcZ_148BjP8ZPjrQAAAWc"]
[Wed Sep 30 01:08:04.665621 2026] [security2:error] [pid 263262:tid 263449] [client 20.194.30.107:10119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/aaa.php"] [unique_id "ary1VJEcZ_148BjP8ZPjrgAAAUI"]
[Wed Sep 30 01:08:04.673614 2026] [security2:error] [pid 263262:tid 263464] [client 20.70.173.30:56973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/media.php"] [unique_id "ary1VJEcZ_148BjP8ZPjrwAAAVE"]
[Wed Sep 30 01:08:04.691082 2026] [security2:error] [pid 263262:tid 263380] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1VJEcZ_148BjP8ZPjsAABYnQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276141&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:04.691117 2026] [security2:error] [pid 263262:tid 263380] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1VJEcZ_148BjP8ZPjsAABYnQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276141&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:04.708337 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.708594 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.740943 2026] [security2:error] [pid 263262:tid 263502] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1VJEcZ_148BjP8ZPjtgAAAXc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:04.755195 2026] [security2:error] [pid 263262:tid 263424] [client 13.70.4.78:63542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ccc.php"] [unique_id "ary1VJEcZ_148BjP8ZPjugAAASk"]
[Wed Sep 30 01:08:04.800185 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.800480 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.825068 2026] [security2:error] [pid 263262:tid 263415] [client 20.194.5.96:17315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/zoo2.php"] [unique_id "ary1VJEcZ_148BjP8ZPjwAAAASA"]
[Wed Sep 30 01:08:04.831765 2026] [security2:error] [pid 263262:tid 263400] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1VJEcZ_148BjP8ZPjwgAAARE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:04.843437 2026] [security2:error] [pid 263262:tid 263470] [client 20.58.177.98:57431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/ans.php"] [unique_id "ary1VJEcZ_148BjP8ZPjwwAAAVc"]
[Wed Sep 30 01:08:04.847126 2026] [security2:error] [pid 263262:tid 263516] [client 52.231.30.175:32222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/file.php"] [unique_id "ary1VJEcZ_148BjP8ZPjxAAAAYU"]
[Wed Sep 30 01:08:04.856901 2026] [security2:error] [pid 263262:tid 263452] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VJEcZ_148BjP8ZPjxQAAAUU"]
[Wed Sep 30 01:08:04.880983 2026] [security2:error] [pid 263262:tid 263474] [client 20.58.177.98:33256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1VJEcZ_148BjP8ZPjxgAAAVs"]
[Wed Sep 30 01:08:04.883380 2026] [security2:error] [pid 263262:tid 263444] [client 20.214.191.94:58724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/asd2.php"] [unique_id "ary1VJEcZ_148BjP8ZPjxwAAAT0"]
[Wed Sep 30 01:08:04.890480 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.890752 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:04.982734 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:04.983182 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.008674 2026] [security2:error] [pid 263262:tid 263345] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1VZEcZ_148BjP8ZPjzAABLlE"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230845
[Wed Sep 30 01:08:05.008704 2026] [security2:error] [pid 263262:tid 263345] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1VZEcZ_148BjP8ZPjzAABLlE"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230845
[Wed Sep 30 01:08:05.021940 2026] [security2:error] [pid 263262:tid 263439] [client 20.204.42.136:45391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1VZEcZ_148BjP8ZPjzQAAATg"]
[Wed Sep 30 01:08:05.058757 2026] [security2:error] [pid 263262:tid 263468] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VZEcZ_148BjP8ZPj0AAAAVU"]
[Wed Sep 30 01:08:05.071636 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.071921 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.094990 2026] [security2:error] [pid 263262:tid 263473] [client 13.70.4.78:63517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/0xD.php"] [unique_id "ary1VZEcZ_148BjP8ZPj1AAAAVo"]
[Wed Sep 30 01:08:05.102252 2026] [security2:error] [pid 263262:tid 263469] [client 20.70.173.30:39149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/images.php"] [unique_id "ary1VZEcZ_148BjP8ZPj1QAAAVY"]
[Wed Sep 30 01:08:05.129514 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.30.175:38795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/dex.php"] [unique_id "ary1VZEcZ_148BjP8ZPj1gAAAYE"]
[Wed Sep 30 01:08:05.156877 2026] [security2:error] [pid 263262:tid 263460] [client 20.214.191.94:15883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/cdc.php"] [unique_id "ary1VZEcZ_148BjP8ZPj2QAAAU0"]
[Wed Sep 30 01:08:05.164364 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.164768 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.165681 2026] [security2:error] [pid 263262:tid 263483] [client 20.58.177.98:15497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/cns.php"] [unique_id "ary1VZEcZ_148BjP8ZPj2gAAAWQ"]
[Wed Sep 30 01:08:05.214353 2026] [security2:error] [pid 263262:tid 263494] [client 20.58.177.98:33691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/asd2.php"] [unique_id "ary1VZEcZ_148BjP8ZPj3wAAAW8"]
[Wed Sep 30 01:08:05.254095 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.254358 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.261416 2026] [security2:error] [pid 263262:tid 263432] [client 84.8.102.109:54241] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VZEcZ_148BjP8ZPj4wAAATE"]
[Wed Sep 30 01:08:05.344418 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.344684 2026] [access_compat:error] [pid 263262:tid 263396] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.359071 2026] [security2:error] [pid 263262:tid 263495] [client 20.219.19.141:29770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wmore1.php"] [unique_id "ary1VZEcZ_148BjP8ZPj7AAAAXA"]
[Wed Sep 30 01:08:05.393093 2026] [security2:error] [pid 263262:tid 263403] [client 155.190.6.18:54388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPj7wAAARQ"]
[Wed Sep 30 01:08:05.408682 2026] [security2:error] [pid 263262:tid 263430] [client 52.231.30.175:38803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/key.php"] [unique_id "ary1VZEcZ_148BjP8ZPj8AAAAS8"]
[Wed Sep 30 01:08:05.409951 2026] [security2:error] [pid 263262:tid 263503] [client 13.70.4.78:8961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/sallu.php"] [unique_id "ary1VZEcZ_148BjP8ZPj8QAAAXg"]
[Wed Sep 30 01:08:05.424858 2026] [security2:error] [pid 263262:tid 263431] [client 20.70.173.30:7517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/bthil.php"] [unique_id "ary1VZEcZ_148BjP8ZPj8wAAATA"]
[Wed Sep 30 01:08:05.435627 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.435896 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.444019 2026] [security2:error] [pid 263262:tid 263516] [client 20.214.191.94:15897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/Components.php"] [unique_id "ary1VZEcZ_148BjP8ZPj9gAAAYU"]
[Wed Sep 30 01:08:05.447913 2026] [security2:error] [pid 263262:tid 263317] [remote 212.227.83.38:56346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.83.227.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary1VZEcZ_148BjP8ZPj9QABEjU"]
[Wed Sep 30 01:08:05.469702 2026] [security2:error] [pid 263262:tid 263514] [client 20.194.5.96:18893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/nck.php"] [unique_id "ary1VZEcZ_148BjP8ZPj-QAAAYM"]
[Wed Sep 30 01:08:05.477889 2026] [security2:error] [pid 263262:tid 263480] [client 20.58.177.98:15841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/faiy.php"] [unique_id "ary1VZEcZ_148BjP8ZPj-wAAAWE"]
[Wed Sep 30 01:08:05.533320 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.533787 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.568689 2026] [security2:error] [pid 263262:tid 263509] [client 20.58.177.98:33672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/cdc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkAAAAAX4"]
[Wed Sep 30 01:08:05.607351 2026] [security2:error] [pid 263262:tid 263388] [remote 212.227.83.38:56346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.83.227.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary1VZEcZ_148BjP8ZPkBgABVnw"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 01:08:05.611503 2026] [security2:error] [pid 263262:tid 263442] [client 152.232.185.30:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1VZEcZ_148BjP8ZPkCAAAATs"]
[Wed Sep 30 01:08:05.619523 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.619797 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.663335 2026] [security2:error] [pid 263262:tid 263403] [client 155.190.6.18:54388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPj7wAAARQ"]
[Wed Sep 30 01:08:05.666758 2026] [security2:error] [pid 263262:tid 263399] [client 45.138.12.32:41998] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pjy.uiz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1VZEcZ_148BjP8ZPkDwAAARA"]
[Wed Sep 30 01:08:05.668026 2026] [security2:error] [pid 263262:tid 263435] [client 52.231.30.175:32199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/kir.php"] [unique_id "ary1VZEcZ_148BjP8ZPkEAAAATQ"]
[Wed Sep 30 01:08:05.696530 2026] [security2:error] [pid 263262:tid 263486] [client 20.198.74.230:23892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/hypo.php"] [unique_id "ary1VZEcZ_148BjP8ZPkEwAAAWc"]
[Wed Sep 30 01:08:05.707153 2026] [security2:error] [pid 263262:tid 263451] [client 103.159.192.142:65503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGAAAAUQ"]
[Wed Sep 30 01:08:05.707288 2026] [security2:error] [pid 263262:tid 263451] [client 103.159.192.142:65503] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGAAAAUQ"]
[Wed Sep 30 01:08:05.709732 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.710026 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.721332 2026] [security2:error] [pid 263262:tid 263459] [client 103.241.204.139:50660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGQAAAUw"]
[Wed Sep 30 01:08:05.721502 2026] [security2:error] [pid 263262:tid 263459] [client 103.241.204.139:50660] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGQAAAUw"]
[Wed Sep 30 01:08:05.722495 2026] [security2:error] [pid 263262:tid 263505] [client 13.70.4.78:58992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/01.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGgAAAXo"]
[Wed Sep 30 01:08:05.753192 2026] [security2:error] [pid 263262:tid 263458] [client 103.168.67.253:34630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1VZEcZ_148BjP8ZPkGwAAAUs"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:08:05.766138 2026] [security2:error] [pid 263262:tid 263378] [remote 212.227.83.38:56346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.83.227.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkHAABVHI"]
[Wed Sep 30 01:08:05.766316 2026] [security2:error] [pid 263262:tid 263467] [client 212.227.83.38:56346] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "japaneseclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkHAABVHI"]
[Wed Sep 30 01:08:05.791191 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:15532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gecho.php"] [unique_id "ary1VZEcZ_148BjP8ZPkHQAAAXI"]
[Wed Sep 30 01:08:05.791709 2026] [security2:error] [pid 263262:tid 263502] [client 20.219.2.60:11654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary1VZEcZ_148BjP8ZPkHgAAAXc"]
[Wed Sep 30 01:08:05.806677 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.807110 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.820250 2026] [security2:error] [pid 263262:tid 263495] [client 20.194.5.96:17177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/zoo1.php"] [unique_id "ary1VZEcZ_148BjP8ZPkIwAAAXA"]
[Wed Sep 30 01:08:05.851092 2026] [security2:error] [pid 263262:tid 263511] [client 116.197.133.25:64154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkJgAAAYA"]
[Wed Sep 30 01:08:05.851233 2026] [security2:error] [pid 263262:tid 263511] [client 116.197.133.25:64154] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1VZEcZ_148BjP8ZPkJgAAAYA"]
[Wed Sep 30 01:08:05.852730 2026] [security2:error] [pid 263262:tid 263430] [client 20.214.191.94:58741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/admin.php/xl9.php"] [unique_id "ary1VZEcZ_148BjP8ZPkJwAAAS8"]
[Wed Sep 30 01:08:05.874817 2026] [security2:error] [pid 263262:tid 263518] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VZEcZ_148BjP8ZPkKQAAAYc"]
[Wed Sep 30 01:08:05.891798 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:05.892080 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:05.906680 2026] [security2:error] [pid 263262:tid 263514] [client 20.58.177.98:33232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/Components.php"] [unique_id "ary1VZEcZ_148BjP8ZPkLQAAAYM"]
[Wed Sep 30 01:08:05.932381 2026] [security2:error] [pid 263262:tid 263444] [client 52.231.30.175:38875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/fling.php"] [unique_id "ary1VZEcZ_148BjP8ZPkMQAAAT0"]
[Wed Sep 30 01:08:05.954026 2026] [security2:error] [pid 263262:tid 263513] [client 45.138.12.43:51116] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.xlm.dib.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1VZEcZ_148BjP8ZPkMgAAAYI"]
[Wed Sep 30 01:08:06.068363 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.068659 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.076092 2026] [security2:error] [pid 263262:tid 263483] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VpEcZ_148BjP8ZPkOgAAAWQ"]
[Wed Sep 30 01:08:06.076597 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.076897 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.107448 2026] [security2:error] [pid 263262:tid 263399] [client 20.58.177.98:57441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/gu.php"] [unique_id "ary1VpEcZ_148BjP8ZPkPwAAARA"]
[Wed Sep 30 01:08:06.108652 2026] [security2:error] [pid 263262:tid 263435] [client 20.213.164.196:21320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/ops.php"] [unique_id "ary1VpEcZ_148BjP8ZPkQAAAATQ"]
[Wed Sep 30 01:08:06.142664 2026] [security2:error] [pid 263262:tid 263475] [client 15.252.178.110:58264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.ijh.xvn.mybluehost.me"] [uri "/index.php"] [unique_id "ary1VpEcZ_148BjP8ZPkQgAAAVw"]
[Wed Sep 30 01:08:06.148322 2026] [security2:error] [pid 263262:tid 263464] [client 13.70.4.78:51161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ab.php"] [unique_id "ary1VpEcZ_148BjP8ZPkQwAAAVE"]
[Wed Sep 30 01:08:06.167580 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.167932 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.185057 2026] [security2:error] [pid 263262:tid 263474] [client 20.219.2.60:18904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp5.php"] [unique_id "ary1VpEcZ_148BjP8ZPkRQAAAVs"]
[Wed Sep 30 01:08:06.195238 2026] [security2:error] [pid 263262:tid 263500] [client 52.231.30.175:38872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/btyuio.php"] [unique_id "ary1VpEcZ_148BjP8ZPkRgAAAXU"]
[Wed Sep 30 01:08:06.228857 2026] [security2:error] [pid 263262:tid 263467] [client 20.194.5.96:19077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xtt.php"] [unique_id "ary1VpEcZ_148BjP8ZPkSAAAAVQ"]
[Wed Sep 30 01:08:06.243164 2026] [security2:error] [pid 263262:tid 263502] [client 20.214.191.94:58711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/gulu.php"] [unique_id "ary1VpEcZ_148BjP8ZPkSQAAAXc"]
[Wed Sep 30 01:08:06.253385 2026] [security2:error] [pid 263262:tid 263334] [remote 57.141.14.5:24522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/2/"] [unique_id "ary1VpEcZ_148BjP8ZPkSwABckY"]
[Wed Sep 30 01:08:06.257473 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.257727 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.275608 2026] [security2:error] [pid 263262:tid 263504] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VpEcZ_148BjP8ZPkTAAAAXk"]
[Wed Sep 30 01:08:06.295846 2026] [security2:error] [pid 263262:tid 263501] [client 20.58.177.98:33222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin.php/xl9.php"] [unique_id "ary1VpEcZ_148BjP8ZPkTQAAAXY"]
[Wed Sep 30 01:08:06.350440 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.350724 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.377158 2026] [security2:error] [pid 263262:tid 263455] [client 103.168.66.101:24548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1VpEcZ_148BjP8ZPkUgAAAUg"], referer: https://networkwestmichigan.com/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:08:06.386066 2026] [security2:error] [pid 263262:tid 263397] [client 45.138.12.43:51200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.xlm.dib.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1VpEcZ_148BjP8ZPkUwAAAQ4"]
[Wed Sep 30 01:08:06.420380 2026] [security2:error] [pid 263262:tid 263503] [client 20.58.177.98:15510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/nck.php"] [unique_id "ary1VpEcZ_148BjP8ZPkVgAAAXg"]
[Wed Sep 30 01:08:06.433906 2026] [security2:error] [pid 263262:tid 263393] [client 20.194.5.96:17159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/class-ajax.php"] [unique_id "ary1VpEcZ_148BjP8ZPkWAAAAQo"]
[Wed Sep 30 01:08:06.437883 2026] [security2:error] [pid 263262:tid 263402] [client 158.94.196.159:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1VpEcZ_148BjP8ZPkWQAAARM"]
[Wed Sep 30 01:08:06.440029 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.440332 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.457760 2026] [access_compat:error] [pid 263262:tid 263520] [client 74.7.243.227:54272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 01:08:06.458032 2026] [access_compat:error] [pid 263262:tid 263520] [client 74.7.243.227:54272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvOTI3MzQ1L2N3ZA==
[Wed Sep 30 01:08:06.464665 2026] [security2:error] [pid 263262:tid 263496] [client 13.70.4.78:59983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/xwpg.php"] [unique_id "ary1VpEcZ_148BjP8ZPkXgAAAXE"]
[Wed Sep 30 01:08:06.468597 2026] [security2:error] [pid 263262:tid 263457] [client 168.100.149.149:22948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/backbone.min.js"] [unique_id "ary1VpEcZ_148BjP8ZPkXQABSm8"]
[Wed Sep 30 01:08:06.471276 2026] [security2:error] [pid 263262:tid 263463] [client 52.231.30.175:32238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/sm.php"] [unique_id "ary1VpEcZ_148BjP8ZPkXwAAAVA"]
[Wed Sep 30 01:08:06.477590 2026] [security2:error] [pid 263262:tid 263490] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VpEcZ_148BjP8ZPkYAAAAWs"]
[Wed Sep 30 01:08:06.512086 2026] [security2:error] [pid 263262:tid 263473] [client 20.204.42.136:54704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1VpEcZ_148BjP8ZPkYwAAAVo"]
[Wed Sep 30 01:08:06.536789 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.537234 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.568014 2026] [security2:error] [pid 263262:tid 263429] [client 104.208.65.139:35953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/router.php"] [unique_id "ary1VpEcZ_148BjP8ZPkZgAAAS4"]
[Wed Sep 30 01:08:06.623457 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.623744 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.659728 2026] [security2:error] [pid 263262:tid 263423] [client 20.214.191.94:58714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/bala.php"] [unique_id "ary1VpEcZ_148BjP8ZPkaQAAASg"]
[Wed Sep 30 01:08:06.677967 2026] [security2:error] [pid 263262:tid 263451] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VpEcZ_148BjP8ZPkawAAAUQ"]
[Wed Sep 30 01:08:06.715142 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.715441 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.732793 2026] [security2:error] [pid 263262:tid 263459] [client 20.58.177.98:15920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/xtt.php"] [unique_id "ary1VpEcZ_148BjP8ZPkbgAAAUw"]
[Wed Sep 30 01:08:06.740959 2026] [security2:error] [pid 263262:tid 263458] [client 20.219.2.60:11345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/schallfuns.php"] [unique_id "ary1VpEcZ_148BjP8ZPkcAAAAUs"]
[Wed Sep 30 01:08:06.740975 2026] [security2:error] [pid 263262:tid 263500] [client 20.194.30.107:9997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/images.php"] [unique_id "ary1VpEcZ_148BjP8ZPkbwAAAXU"]
[Wed Sep 30 01:08:06.743796 2026] [security2:error] [pid 263262:tid 263408] [client 52.231.30.175:38876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/a.php"] [unique_id "ary1VpEcZ_148BjP8ZPkcQAAARk"]
[Wed Sep 30 01:08:06.789067 2026] [security2:error] [pid 263262:tid 263462] [client 13.70.4.78:51199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/flamini.php"] [unique_id "ary1VpEcZ_148BjP8ZPkdQAAAU8"]
[Wed Sep 30 01:08:06.804743 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.805048 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.824491 2026] [security2:error] [pid 263262:tid 263494] [client 20.58.177.98:33236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gulu.php"] [unique_id "ary1VpEcZ_148BjP8ZPkeAAAAW8"]
[Wed Sep 30 01:08:06.853624 2026] [security2:error] [pid 263262:tid 263515] [client 103.168.67.253:31930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1VpEcZ_148BjP8ZPkfQAAAYQ"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:08:06.880839 2026] [security2:error] [pid 263262:tid 263455] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1VpEcZ_148BjP8ZPkgQAAAUg"]
[Wed Sep 30 01:08:06.890428 2026] [security2:error] [pid 263262:tid 263461] [client 20.219.19.141:65478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/177.php"] [unique_id "ary1VpEcZ_148BjP8ZPkgwAAAU4"]
[Wed Sep 30 01:08:06.892705 2026] [security2:error] [pid 263262:tid 263440] [client 20.70.173.30:33309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/w.php"] [unique_id "ary1VpEcZ_148BjP8ZPkhAAAATk"]
[Wed Sep 30 01:08:06.896490 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.896784 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.911781 2026] [security2:error] [pid 263262:tid 263339] [remote 57.141.14.98:54880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary1VpEcZ_148BjP8ZPkgAABWEs"]
[Wed Sep 30 01:08:06.937024 2026] [security2:error] [pid 263262:tid 263402] [client 4.240.25.22:41677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/css.php"] [unique_id "ary1VpEcZ_148BjP8ZPkhQAAARM"]
[Wed Sep 30 01:08:06.975480 2026] [security2:error] [pid 263262:tid 263446] [client 20.214.191.94:15912] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "hairwish.an-ime.com"] [uri "/c99.php"] [unique_id "ary1VpEcZ_148BjP8ZPkiAAAAT8"]
[Wed Sep 30 01:08:06.988948 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:06.989351 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:06.996992 2026] [access_compat:error] [pid 263262:tid 263469] [client 47.79.13.75:37644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:06.997343 2026] [access_compat:error] [pid 263262:tid 263469] [client 47.79.13.75:37644] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:07.004579 2026] [security2:error] [pid 263262:tid 263496] [client 52.231.30.175:38904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/sb.php"] [unique_id "ary1V5EcZ_148BjP8ZPkjQAAAXE"]
[Wed Sep 30 01:08:07.025287 2026] [security2:error] [pid 263262:tid 263463] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1V5EcZ_148BjP8ZPkkAAAAVA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:07.046259 2026] [security2:error] [pid 263262:tid 263415] [client 20.58.177.98:15516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "makulapictures.semakulajeffrey.com"] [uri "/go.php"] [unique_id "ary1V5EcZ_148BjP8ZPkkgAAASA"]
[Wed Sep 30 01:08:07.081305 2026] [security2:error] [pid 263262:tid 263465] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1V5EcZ_148BjP8ZPklQAAAVI"]
[Wed Sep 30 01:08:07.084271 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.084718 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.085997 2026] [security2:error] [pid 263262:tid 263399] [client 20.219.2.60:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-access.php"] [unique_id "ary1V5EcZ_148BjP8ZPklwAAARA"]
[Wed Sep 30 01:08:07.107789 2026] [security2:error] [pid 263262:tid 263482] [client 13.70.4.78:59002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/themes.php"] [unique_id "ary1V5EcZ_148BjP8ZPkmAAAAWM"]
[Wed Sep 30 01:08:07.146506 2026] [security2:error] [pid 263262:tid 263519] [client 20.194.5.96:18899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/go.php"] [unique_id "ary1V5EcZ_148BjP8ZPknAAAAYg"]
[Wed Sep 30 01:08:07.170716 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.171011 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.242622 2026] [security2:error] [pid 263262:tid 263435] [client 20.70.173.30:2669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/c.php"] [unique_id "ary1V5EcZ_148BjP8ZPkoQAAATQ"]
[Wed Sep 30 01:08:07.252550 2026] [security2:error] [pid 263262:tid 263443] [client 20.204.42.136:45432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/av.php"] [unique_id "ary1V5EcZ_148BjP8ZPkowAAATw"]
[Wed Sep 30 01:08:07.266515 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.266802 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.280371 2026] [security2:error] [pid 263262:tid 263430] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1V5EcZ_148BjP8ZPkqAAAAS8"]
[Wed Sep 30 01:08:07.290888 2026] [security2:error] [pid 263262:tid 263406] [client 52.231.30.175:32135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/av.php"] [unique_id "ary1V5EcZ_148BjP8ZPkqwAAARc"]
[Wed Sep 30 01:08:07.338163 2026] [security2:error] [pid 263262:tid 263432] [client 62.3.29.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1V5EcZ_148BjP8ZPksgAAATE"]
[Wed Sep 30 01:08:07.355102 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.355356 2026] [access_compat:error] [pid 263262:tid 263401] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.425100 2026] [security2:error] [pid 263262:tid 263507] [client 93.180.207.134:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "ary1V5EcZ_148BjP8ZPktwAAAXw"]
[Wed Sep 30 01:08:07.438064 2026] [security2:error] [pid 263262:tid 263413] [client 13.70.4.78:9004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/0.php"] [unique_id "ary1V5EcZ_148BjP8ZPkuAAAAR4"]
[Wed Sep 30 01:08:07.445134 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.445399 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.453911 2026] [security2:error] [pid 263262:tid 263400] [client 45.138.12.32:29304] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pon.qlp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1V5EcZ_148BjP8ZPkugAAARE"]
[Wed Sep 30 01:08:07.481150 2026] [security2:error] [pid 263262:tid 263509] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1V5EcZ_148BjP8ZPkvAAAAX4"]
[Wed Sep 30 01:08:07.529369 2026] [security2:error] [pid 263262:tid 263417] [client 20.194.5.96:17309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/gm.php"] [unique_id "ary1V5EcZ_148BjP8ZPkwAAAASI"]
[Wed Sep 30 01:08:07.537079 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.537329 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.550576 2026] [security2:error] [pid 263262:tid 263469] [client 52.231.30.175:32231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/b8.php"] [unique_id "ary1V5EcZ_148BjP8ZPkwgAAAVY"]
[Wed Sep 30 01:08:07.591582 2026] [security2:error] [pid 263262:tid 263490] [client 20.214.191.94:58713] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "hairwish.an-ime.com"] [uri "/c99.php"] [unique_id "ary1V5EcZ_148BjP8ZPkxAAAAWs"]
[Wed Sep 30 01:08:07.627354 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.627622 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.682366 2026] [security2:error] [pid 263262:tid 263460] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1V5EcZ_148BjP8ZPkzAAAAU0"]
[Wed Sep 30 01:08:07.719758 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.720020 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.766564 2026] [security2:error] [pid 263262:tid 263483] [client 13.70.4.78:56451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/opsh.php"] [unique_id "ary1V5EcZ_148BjP8ZPk0AAAAWQ"]
[Wed Sep 30 01:08:07.781639 2026] [security2:error] [pid 263262:tid 263502] [client 20.194.30.107:10141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/chosen.php"] [unique_id "ary1V5EcZ_148BjP8ZPk1AAAAXc"]
[Wed Sep 30 01:08:07.804780 2026] [security2:error] [pid 263262:tid 263468] [client 37.41.16.35:51573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1V5EcZ_148BjP8ZPk1wAAAVU"]
[Wed Sep 30 01:08:07.804918 2026] [security2:error] [pid 263262:tid 263468] [client 37.41.16.35:51573] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1V5EcZ_148BjP8ZPk1wAAAVU"]
[Wed Sep 30 01:08:07.811172 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.811439 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.814635 2026] [security2:error] [pid 263262:tid 263450] [client 52.231.30.175:38791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp_blog_footer.php"] [unique_id "ary1V5EcZ_148BjP8ZPk2gAAAUM"]
[Wed Sep 30 01:08:07.831513 2026] [security2:error] [pid 263262:tid 263475] [client 20.70.173.30:39153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/0.php"] [unique_id "ary1V5EcZ_148BjP8ZPk3gAAAVw"]
[Wed Sep 30 01:08:07.881792 2026] [security2:error] [pid 263262:tid 263508] [client 84.8.102.109:65408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "camera-roll.com"] [uri "/"] [unique_id "ary1V5EcZ_148BjP8ZPk4wAAAX0"]
[Wed Sep 30 01:08:07.903069 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.903330 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:07.927540 2026] [security2:error] [pid 263262:tid 263515] [client 20.204.42.136:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/dex.php"] [unique_id "ary1V5EcZ_148BjP8ZPk5QAAAYQ"]
[Wed Sep 30 01:08:07.952535 2026] [security2:error] [pid 263262:tid 263492] [client 4.240.25.22:38759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wpxml.php"] [unique_id "ary1V5EcZ_148BjP8ZPk5gAAAW0"]
[Wed Sep 30 01:08:07.963770 2026] [security2:error] [pid 263262:tid 263516] [client 20.214.191.94:58749] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "hairwish.an-ime.com"] [uri "/c99.php"] [unique_id "ary1V5EcZ_148BjP8ZPk6AAAAYU"]
[Wed Sep 30 01:08:07.995139 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:07.995388 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.026523 2026] [security2:error] [pid 263262:tid 263512] [client 20.70.173.30:60247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/file.php"] [unique_id "ary1WJEcZ_148BjP8ZPk7QAAAYE"]
[Wed Sep 30 01:08:08.089628 2026] [security2:error] [pid 263262:tid 263400] [client 52.231.30.175:38850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/0.php"] [unique_id "ary1WJEcZ_148BjP8ZPk9AAAARE"]
[Wed Sep 30 01:08:08.089908 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.090181 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.118593 2026] [security2:error] [pid 263262:tid 263396] [client 130.131.227.119:64410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/ahax.php"] [unique_id "ary1WJEcZ_148BjP8ZPk9gAAAQ0"]
[Wed Sep 30 01:08:08.159949 2026] [security2:error] [pid 263262:tid 263491] [client 20.28.180.172:18127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/clasa99.php"] [unique_id "ary1WJEcZ_148BjP8ZPk-AAAAWw"]
[Wed Sep 30 01:08:08.169862 2026] [security2:error] [pid 263262:tid 263417] [client 13.70.4.78:51159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/media.php"] [unique_id "ary1WJEcZ_148BjP8ZPk-gAAASI"]
[Wed Sep 30 01:08:08.187197 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.187456 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.243493 2026] [security2:error] [pid 263262:tid 263420] [client 20.194.30.107:1710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/cdc.php"] [unique_id "ary1WJEcZ_148BjP8ZPk_QAAASU"]
[Wed Sep 30 01:08:08.281549 2026] [security2:error] [pid 263262:tid 263412] [client 20.214.191.94:58735] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "hairwish.an-ime.com"] [uri "/c99.php"] [unique_id "ary1WJEcZ_148BjP8ZPlAQAAAR0"]
[Wed Sep 30 01:08:08.287412 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.287686 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.301176 2026] [security2:error] [pid 263262:tid 263431] [client 84.17.60.236:59636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.sureseal.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1WJEcZ_148BjP8ZPlAwAAATA"]
[Wed Sep 30 01:08:08.337908 2026] [security2:error] [pid 263262:tid 263403] [client 190.62.3.117:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1WJEcZ_148BjP8ZPlCAAAARQ"]
[Wed Sep 30 01:08:08.338672 2026] [security2:error] [pid 263262:tid 263408] [client 130.131.227.119:49102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/breads1.php"] [unique_id "ary1WJEcZ_148BjP8ZPlCQAAARk"]
[Wed Sep 30 01:08:08.345160 2026] [security2:error] [pid 263262:tid 263510] [client 136.85.36.142:59510] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "luxury.wmxone.com"] [uri "/"] [unique_id "ary1WJEcZ_148BjP8ZPlCgAAAX8"]
[Wed Sep 30 01:08:08.368911 2026] [security2:error] [pid 263262:tid 263502] [client 52.231.30.175:38787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/fms.php"] [unique_id "ary1WJEcZ_148BjP8ZPlCwAAAXc"]
[Wed Sep 30 01:08:08.392080 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.392522 2026] [access_compat:error] [pid 263262:tid 263464] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.396800 2026] [security2:error] [pid 263262:tid 263519] [client 20.58.177.98:33262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/bala.php"] [unique_id "ary1WJEcZ_148BjP8ZPlDwAAAYg"]
[Wed Sep 30 01:08:08.438700 2026] [security2:error] [pid 263262:tid 263505] [client 74.7.242.1:51876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1WJEcZ_148BjP8ZPlFAAAAXo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:08:08.485492 2026] [security2:error] [pid 263262:tid 263433] [client 168.100.149.45:40648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/frontend.min.js"] [unique_id "ary1WJEcZ_148BjP8ZPlFwABMhg"]
[Wed Sep 30 01:08:08.487893 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.488151 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.499877 2026] [security2:error] [pid 263262:tid 263447] [client 130.131.227.119:49097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/must.php"] [unique_id "ary1WJEcZ_148BjP8ZPlHAAAAUA"]
[Wed Sep 30 01:08:08.501899 2026] [security2:error] [pid 263262:tid 263492] [client 13.70.4.78:58973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/images.php"] [unique_id "ary1WJEcZ_148BjP8ZPlHQAAAW0"]
[Wed Sep 30 01:08:08.548794 2026] [security2:error] [pid 263262:tid 263455] [client 20.214.191.94:58731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/ttivnife.php"] [unique_id "ary1WJEcZ_148BjP8ZPlIAAAAUg"]
[Wed Sep 30 01:08:08.561547 2026] [security2:error] [pid 263262:tid 263423] [client 136.85.36.142:59512] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "crm-technopack.wmxone.com"] [uri "/"] [unique_id "ary1WJEcZ_148BjP8ZPlIgAAASg"]
[Wed Sep 30 01:08:08.588778 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.589209 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:50193] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.592572 2026] [security2:error] [pid 263262:tid 263440] [client 20.204.42.136:37416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/chosen.php"] [unique_id "ary1WJEcZ_148BjP8ZPlJgAAATk"]
[Wed Sep 30 01:08:08.649387 2026] [security2:error] [pid 263262:tid 263416] [client 130.131.227.119:8971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/up.php"] [unique_id "ary1WJEcZ_148BjP8ZPlKQAAASE"]
[Wed Sep 30 01:08:08.651476 2026] [security2:error] [pid 263262:tid 263513] [client 52.231.30.175:38851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/xyn.php"] [unique_id "ary1WJEcZ_148BjP8ZPlKgAAAYI"]
[Wed Sep 30 01:08:08.680086 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.680511 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.705708 2026] [security2:error] [pid 263262:tid 263402] [client 20.213.164.196:21349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/mac.php"] [unique_id "ary1WJEcZ_148BjP8ZPlLgAAARM"]
[Wed Sep 30 01:08:08.727242 2026] [security2:error] [pid 263262:tid 263471] [client 20.58.177.98:33722] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.yourkatana.com"] [uri "/c99.php"] [unique_id "ary1WJEcZ_148BjP8ZPlMQAAAVg"]
[Wed Sep 30 01:08:08.758530 2026] [access_compat:error] [pid 263262:tid 263475] [client 47.82.11.32:49140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:08.758904 2026] [security2:error] [pid 263262:tid 263300] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1WJEcZ_148BjP8ZPlNgABFSQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302279&sid=bb3154948757023832235260834e4075
[Wed Sep 30 01:08:08.758926 2026] [security2:error] [pid 263262:tid 263300] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1WJEcZ_148BjP8ZPlNgABFSQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=302279&sid=bb3154948757023832235260834e4075
[Wed Sep 30 01:08:08.758972 2026] [access_compat:error] [pid 263262:tid 263475] [client 47.82.11.32:49140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:08.770438 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.770702 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.818542 2026] [core:error] [pid 263262:tid 263489] [client 130.131.227.119:8582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:08.818563 2026] [core:error] [pid 263262:tid 263489] [client 130.131.227.119:8582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:08.830927 2026] [security2:error] [pid 263262:tid 263426] [client 13.70.4.78:56471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ops.php"] [unique_id "ary1WJEcZ_148BjP8ZPlPwAAASs"]
[Wed Sep 30 01:08:08.853244 2026] [security2:error] [pid 263262:tid 263488] [client 20.214.191.94:58730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/admin.php/2P.php"] [unique_id "ary1WJEcZ_148BjP8ZPlQQAAAWk"]
[Wed Sep 30 01:08:08.861311 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.861593 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.862986 2026] [access_compat:error] [pid 263262:tid 263479] [client 47.79.13.73:41542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:08.863266 2026] [access_compat:error] [pid 263262:tid 263479] [client 47.79.13.73:41542] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:08.916431 2026] [security2:error] [pid 263262:tid 263446] [client 52.231.30.175:38836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/min.php"] [unique_id "ary1WJEcZ_148BjP8ZPlRQAAAT8"]
[Wed Sep 30 01:08:08.950516 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:08.950786 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:08.966050 2026] [security2:error] [pid 263262:tid 263464] [client 177.62.215.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "ary1WJEcZ_148BjP8ZPlSgAAAVE"]
[Wed Sep 30 01:08:08.972508 2026] [security2:error] [pid 263262:tid 263451] [client 20.28.180.172:29589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/new4.php"] [unique_id "ary1WJEcZ_148BjP8ZPlTAAAAUQ"]
[Wed Sep 30 01:08:08.979921 2026] [security2:error] [pid 263262:tid 263510] [client 130.131.227.119:9008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/155.php"] [unique_id "ary1WJEcZ_148BjP8ZPlTgAAAX8"]
[Wed Sep 30 01:08:08.989614 2026] [security2:error] [pid 263262:tid 263508] [client 4.240.25.22:8940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cdc.php"] [unique_id "ary1WJEcZ_148BjP8ZPlUAAAAX0"]
[Wed Sep 30 01:08:09.002018 2026] [security2:error] [pid 263262:tid 263433] [client 216.73.216.46:50193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1WZEcZ_148BjP8ZPlUgAAATI"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvYmxvY2svc2Rm
[Wed Sep 30 01:08:09.042029 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.042309 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.135864 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.136266 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.137183 2026] [security2:error] [pid 263262:tid 263461] [client 130.131.227.119:9105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-update.php"] [unique_id "ary1WZEcZ_148BjP8ZPlXwAAAU4"]
[Wed Sep 30 01:08:09.142929 2026] [security2:error] [pid 263262:tid 263493] [client 13.70.4.78:63501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/mac.php"] [unique_id "ary1WZEcZ_148BjP8ZPlYAAAAW4"]
[Wed Sep 30 01:08:09.145544 2026] [security2:error] [pid 263262:tid 263407] [client 45.138.12.32:42046] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pmg.ouz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1WZEcZ_148BjP8ZPlYQAAARg"]
[Wed Sep 30 01:08:09.179083 2026] [security2:error] [pid 263262:tid 263517] [client 213.136.69.135:54198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/PHPMailer/OAuthTokenProvider.php"] [unique_id "ary1WZEcZ_148BjP8ZPlYgAAAYY"], referer: binance.com
[Wed Sep 30 01:08:09.179353 2026] [security2:error] [pid 263262:tid 263480] [client 122.173.27.10:23989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlYwAAAWE"]
[Wed Sep 30 01:08:09.180183 2026] [security2:error] [pid 263262:tid 263480] [client 122.173.27.10:23989] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlYwAAAWE"]
[Wed Sep 30 01:08:09.187035 2026] [security2:error] [pid 263262:tid 263396] [client 52.231.30.175:32129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-whe.php"] [unique_id "ary1WZEcZ_148BjP8ZPlZQAAAQ0"]
[Wed Sep 30 01:08:09.187433 2026] [security2:error] [pid 263262:tid 263452] [client 62.3.6.128:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "ary1WZEcZ_148BjP8ZPlZAAAAUU"]
[Wed Sep 30 01:08:09.189525 2026] [security2:error] [pid 263262:tid 263476] [client 20.194.5.96:16634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1WZEcZ_148BjP8ZPlZgAAAV0"]
[Wed Sep 30 01:08:09.190215 2026] [security2:error] [pid 263262:tid 263417] [client 20.214.191.94:15863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/a.php"] [unique_id "ary1WZEcZ_148BjP8ZPlZwAAASI"]
[Wed Sep 30 01:08:09.224335 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.224608 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.266851 2026] [security2:error] [pid 263262:tid 263409] [client 20.219.2.60:11901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/CDX1.php"] [unique_id "ary1WZEcZ_148BjP8ZPlbAAAARo"]
[Wed Sep 30 01:08:09.300132 2026] [security2:error] [pid 263262:tid 263424] [client 130.131.227.119:1432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/xmrlpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlcgAAASk"]
[Wed Sep 30 01:08:09.315798 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.316090 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.325657 2026] [security2:error] [pid 263262:tid 263403] [client 20.70.173.30:53980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/as.php"] [unique_id "ary1WZEcZ_148BjP8ZPldAAAARQ"]
[Wed Sep 30 01:08:09.326336 2026] [security2:error] [pid 263262:tid 263465] [client 20.194.30.107:10116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/log.php"] [unique_id "ary1WZEcZ_148BjP8ZPldQAAAVI"]
[Wed Sep 30 01:08:09.362630 2026] [security2:error] [pid 263262:tid 263479] [client 20.204.42.136:61991] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/1.php"] [unique_id "ary1WZEcZ_148BjP8ZPldgAAAWA"]
[Wed Sep 30 01:08:09.362755 2026] [security2:error] [pid 263262:tid 263479] [client 20.204.42.136:61991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/1.php"] [unique_id "ary1WZEcZ_148BjP8ZPldgAAAWA"]
[Wed Sep 30 01:08:09.368968 2026] [security2:error] [pid 263262:tid 263460] [client 20.58.177.98:33249] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.yourkatana.com"] [uri "/c99.php"] [unique_id "ary1WZEcZ_148BjP8ZPldwAAAU0"]
[Wed Sep 30 01:08:09.402077 2026] [security2:error] [pid 263262:tid 263478] [client 172.232.190.19:54817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/wp-plain.php"] [unique_id "ary1WZEcZ_148BjP8ZPleAAAAV8"], referer: www.google.com
[Wed Sep 30 01:08:09.403007 2026] [security2:error] [pid 263262:tid 263446] [client 172.232.190.19:54821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary1WZEcZ_148BjP8ZPlegAAAT8"], referer: www.google.com
[Wed Sep 30 01:08:09.409227 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.409508 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.437112 2026] [security2:error] [pid 263262:tid 263474] [client 20.219.19.141:29762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/ccc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlgQAAAVs"]
[Wed Sep 30 01:08:09.440948 2026] [security2:error] [pid 263262:tid 263467] [client 20.28.180.172:34299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/d62.php"] [unique_id "ary1WZEcZ_148BjP8ZPlggAAAVQ"]
[Wed Sep 30 01:08:09.448082 2026] [security2:error] [pid 263262:tid 263414] [client 130.131.227.119:9096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/about/function.php"] [unique_id "ary1WZEcZ_148BjP8ZPlhQAAAR8"]
[Wed Sep 30 01:08:09.467788 2026] [security2:error] [pid 263262:tid 263500] [client 52.231.30.175:38878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-filemanager1.php"] [unique_id "ary1WZEcZ_148BjP8ZPlhwAAAXU"]
[Wed Sep 30 01:08:09.470847 2026] [security2:error] [pid 263262:tid 263447] [client 13.70.4.78:58967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/pass4.php"] [unique_id "ary1WZEcZ_148BjP8ZPliAAAAUA"]
[Wed Sep 30 01:08:09.475146 2026] [security2:error] [pid 263262:tid 263399] [client 20.214.191.94:58645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/cord.php"] [unique_id "ary1WZEcZ_148BjP8ZPliQAAARA"]
[Wed Sep 30 01:08:09.494881 2026] [security2:error] [pid 263262:tid 263458] [client 4.240.25.22:33332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/m.php"] [unique_id "ary1WZEcZ_148BjP8ZPljgAAAUs"]
[Wed Sep 30 01:08:09.499242 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.499526 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.512088 2026] [core:error] [pid 263262:tid 263508] (104)Connection reset by peer: [client 172.232.190.19:54823] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:08:09.572070 2026] [security2:error] [pid 263262:tid 263407] [client 103.168.67.253:31940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1WZEcZ_148BjP8ZPllAAAARg"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:08:09.592159 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.592594 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.598731 2026] [security2:error] [pid 263262:tid 263423] [client 4.240.25.22:43791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/mac.php"] [unique_id "ary1WZEcZ_148BjP8ZPllwAAASg"]
[Wed Sep 30 01:08:09.604037 2026] [security2:error] [pid 263262:tid 263461] [client 130.131.227.119:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/an.php"] [unique_id "ary1WZEcZ_148BjP8ZPlmAAAAU4"]
[Wed Sep 30 01:08:09.649021 2026] [security2:error] [pid 263262:tid 263402] [client 4.240.25.22:46282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/baba.php"] [unique_id "ary1WZEcZ_148BjP8ZPlngAAARM"]
[Wed Sep 30 01:08:09.673564 2026] [security2:error] [pid 263262:tid 263505] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary1WZEcZ_148BjP8ZPloQAAAXo"]
[Wed Sep 30 01:08:09.680775 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.681056 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.706956 2026] [security2:error] [pid 263262:tid 263440] [client 203.122.45.246:64095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlpAAAATk"]
[Wed Sep 30 01:08:09.707091 2026] [security2:error] [pid 263262:tid 263440] [client 203.122.45.246:64095] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlpAAAATk"]
[Wed Sep 30 01:08:09.726748 2026] [security2:error] [pid 263262:tid 263504] [client 103.168.67.253:31950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1WZEcZ_148BjP8ZPlpgAAAXk"], referer: https://dklhardwareconstruction.com/wp-admin/
[Wed Sep 30 01:08:09.728085 2026] [security2:error] [pid 263262:tid 263520] [client 52.231.30.175:38800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-freya.php"] [unique_id "ary1WZEcZ_148BjP8ZPlpwAAAYk"]
[Wed Sep 30 01:08:09.759268 2026] [security2:error] [pid 263262:tid 263443] [client 130.131.227.119:8969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/asw.php"] [unique_id "ary1WZEcZ_148BjP8ZPlqQAAATw"]
[Wed Sep 30 01:08:09.773117 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.773542 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.782442 2026] [security2:error] [pid 263262:tid 263437] [client 20.214.191.94:15837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/anom.php"] [unique_id "ary1WZEcZ_148BjP8ZPlrgAAATY"]
[Wed Sep 30 01:08:09.791601 2026] [security2:error] [pid 263262:tid 263403] [client 13.70.4.78:8972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/drttewyh.php"] [unique_id "ary1WZEcZ_148BjP8ZPlrwAAARQ"]
[Wed Sep 30 01:08:09.796897 2026] [security2:error] [pid 263262:tid 263488] [client 190.215.59.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1WZEcZ_148BjP8ZPlsAAAAWk"]
[Wed Sep 30 01:08:09.797792 2026] [security2:error] [pid 263262:tid 263468] [client 152.59.165.7:52736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlsQAAAVU"]
[Wed Sep 30 01:08:09.797915 2026] [security2:error] [pid 263262:tid 263468] [client 152.59.165.7:52736] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1WZEcZ_148BjP8ZPlsQAAAVU"]
[Wed Sep 30 01:08:09.836640 2026] [security2:error] [pid 263262:tid 263446] [client 20.58.177.98:33723] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.yourkatana.com"] [uri "/c99.php"] [unique_id "ary1WZEcZ_148BjP8ZPlsgAAAT8"]
[Wed Sep 30 01:08:09.862540 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.862859 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.922050 2026] [security2:error] [pid 263262:tid 263474] [client 130.131.227.119:9009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/item.php"] [unique_id "ary1WZEcZ_148BjP8ZPltAAAAVs"]
[Wed Sep 30 01:08:09.953459 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:09.953747 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:09.993803 2026] [security2:error] [pid 263262:tid 263494] [client 52.231.30.175:38809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/admin.php/admin.php"] [unique_id "ary1WZEcZ_148BjP8ZPluQAAAW8"]
[Wed Sep 30 01:08:10.045048 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.045324 2026] [access_compat:error] [pid 263262:tid 263490] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.100009 2026] [security2:error] [pid 263262:tid 263495] [client 130.131.227.119:9007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/jga.php"] [unique_id "ary1WpEcZ_148BjP8ZPlyAAAAXA"]
[Wed Sep 30 01:08:10.126828 2026] [security2:error] [pid 263262:tid 263484] [client 13.70.4.78:56499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/sh.php"] [unique_id "ary1WpEcZ_148BjP8ZPlygAAAWU"]
[Wed Sep 30 01:08:10.135070 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.135431 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.201273 2026] [security2:error] [pid 263262:tid 263402] [client 20.58.177.98:33408] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.yourkatana.com"] [uri "/c99.php"] [unique_id "ary1WpEcZ_148BjP8ZPl0wAAARM"]
[Wed Sep 30 01:08:10.225290 2026] [security2:error] [pid 263262:tid 263415] [client 20.219.2.60:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/hots.php"] [unique_id "ary1WpEcZ_148BjP8ZPl1QAAASA"]
[Wed Sep 30 01:08:10.230910 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.231175 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.242539 2026] [security2:error] [pid 263262:tid 263397] [client 103.159.192.142:49608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl1gAAAQ4"]
[Wed Sep 30 01:08:10.242673 2026] [security2:error] [pid 263262:tid 263397] [client 103.159.192.142:49608] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl1gAAAQ4"]
[Wed Sep 30 01:08:10.253258 2026] [security2:error] [pid 263262:tid 263483] [client 52.231.30.175:38869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/faiy.php"] [unique_id "ary1WpEcZ_148BjP8ZPl1wAAAWQ"]
[Wed Sep 30 01:08:10.264671 2026] [security2:error] [pid 263262:tid 263515] [client 130.131.227.119:1450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/mac.php"] [unique_id "ary1WpEcZ_148BjP8ZPl2AAAAYQ"]
[Wed Sep 30 01:08:10.282403 2026] [security2:error] [pid 263262:tid 263428] [client 20.214.191.94:58709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/plugins.php"] [unique_id "ary1WpEcZ_148BjP8ZPl2gAAAS0"]
[Wed Sep 30 01:08:10.321896 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.322148 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.357549 2026] [security2:error] [pid 263262:tid 263465] [client 20.219.2.60:11662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/clasa99.php"] [unique_id "ary1WpEcZ_148BjP8ZPl4wAAAVI"]
[Wed Sep 30 01:08:10.369357 2026] [security2:error] [pid 263262:tid 263468] [client 20.70.173.30:3218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/pJPoKA.php"] [unique_id "ary1WpEcZ_148BjP8ZPl5AAAAVU"]
[Wed Sep 30 01:08:10.369361 2026] [security2:error] [pid 263262:tid 263462] [client 89.41.42.39:14185] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPlyQAAAU8"]
[Wed Sep 30 01:08:10.403774 2026] [security2:error] [pid 263262:tid 263479] [client 84.17.60.236:52550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.sureseal.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl5QAAAWA"]
[Wed Sep 30 01:08:10.403943 2026] [security2:error] [pid 263262:tid 263479] [client 84.17.60.236:52550] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.sureseal.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl5QAAAWA"]
[Wed Sep 30 01:08:10.411275 2026] [security2:error] [pid 263262:tid 263420] [client 20.70.173.30:33281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/aaa.php"] [unique_id "ary1WpEcZ_148BjP8ZPl5wAAASU"]
[Wed Sep 30 01:08:10.411380 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.411713 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:57610] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.438234 2026] [security2:error] [pid 263262:tid 263496] [client 130.131.227.119:49106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/images/index.php"] [unique_id "ary1WpEcZ_148BjP8ZPl6wAAAXE"]
[Wed Sep 30 01:08:10.455251 2026] [security2:error] [pid 263262:tid 263274] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1WpEcZ_148BjP8ZPl7QABWgo"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D57852
[Wed Sep 30 01:08:10.457682 2026] [security2:error] [pid 263262:tid 263451] [client 13.70.4.78:51178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/groud1.php"] [unique_id "ary1WpEcZ_148BjP8ZPl7gAAAUQ"]
[Wed Sep 30 01:08:10.469260 2026] [security2:error] [pid 263262:tid 263360] [remote 57.141.14.6:33996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl6QABZmA"]
[Wed Sep 30 01:08:10.484749 2026] [security2:error] [pid 263262:tid 263482] [client 223.235.102.107:32198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl9AAAAWM"]
[Wed Sep 30 01:08:10.484927 2026] [security2:error] [pid 263262:tid 263482] [client 223.235.102.107:32198] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPl9AAAAWM"]
[Wed Sep 30 01:08:10.487388 2026] [security2:error] [pid 263262:tid 263393] [client 168.100.149.2:21226] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/tablesome/assets/bundles/workflow.bundle.js"] [unique_id "ary1WpEcZ_148BjP8ZPl8wABCjg"]
[Wed Sep 30 01:08:10.499240 2026] [security2:error] [pid 263262:tid 263435] [client 20.194.5.96:16628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/ttivnife.php"] [unique_id "ary1WpEcZ_148BjP8ZPl_AAAATQ"]
[Wed Sep 30 01:08:10.512372 2026] [security2:error] [pid 263262:tid 263477] [client 20.28.180.172:62379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/myfilexxx.php"] [unique_id "ary1WpEcZ_148BjP8ZPl_gAAAV4"]
[Wed Sep 30 01:08:10.514426 2026] [security2:error] [pid 263262:tid 263512] [client 52.231.30.175:38837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/file-mancvgertdxz.php"] [unique_id "ary1WpEcZ_148BjP8ZPl_wAAAYE"]
[Wed Sep 30 01:08:10.532174 2026] [security2:error] [pid 263262:tid 263484] [client 45.138.12.32:42074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pmg.ouz.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1WpEcZ_148BjP8ZPmAwAAAWU"]
[Wed Sep 30 01:08:10.547931 2026] [security2:error] [pid 263262:tid 263399] [client 202.179.95.79:60050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPmCwAAARA"]
[Wed Sep 30 01:08:10.548691 2026] [security2:error] [pid 263262:tid 263399] [client 202.179.95.79:60050] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1WpEcZ_148BjP8ZPmCwAAARA"]
[Wed Sep 30 01:08:10.559053 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.559491 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.588394 2026] [security2:error] [pid 263262:tid 263513] [client 20.58.177.98:33238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/ttivnife.php"] [unique_id "ary1WpEcZ_148BjP8ZPmDwAAAYI"]
[Wed Sep 30 01:08:10.607059 2026] [security2:error] [pid 263262:tid 263400] [client 130.131.227.119:1437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/includes/index.php"] [unique_id "ary1WpEcZ_148BjP8ZPmEAAAARE"]
[Wed Sep 30 01:08:10.610456 2026] [security2:error] [pid 263262:tid 263404] [client 20.214.191.94:58738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/zlwvxiyp.php"] [unique_id "ary1WpEcZ_148BjP8ZPmEgAAARU"]
[Wed Sep 30 01:08:10.621882 2026] [security2:error] [pid 263262:tid 263417] [client 4.240.25.22:41687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-content/index.php"] [unique_id "ary1WpEcZ_148BjP8ZPmEwAAASI"]
[Wed Sep 30 01:08:10.625533 2026] [security2:error] [pid 263262:tid 263327] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1WpEcZ_148BjP8ZPmFAABfT8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297996&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:08:10.625579 2026] [security2:error] [pid 263262:tid 263327] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1WpEcZ_148BjP8ZPmFAABfT8"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=297996&sid=79ea7289bb590d9e79adbb27599594ea
[Wed Sep 30 01:08:10.648804 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.649244 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.687431 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.687704 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.719088 2026] [security2:error] [pid 263262:tid 263431] [client 20.204.42.136:61963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/radio.php"] [unique_id "ary1WpEcZ_148BjP8ZPmGQAAATA"]
[Wed Sep 30 01:08:10.769668 2026] [security2:error] [pid 263262:tid 263462] [client 130.131.227.119:49092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/zafir1.php"] [unique_id "ary1WpEcZ_148BjP8ZPmHQAAAU8"]
[Wed Sep 30 01:08:10.776213 2026] [security2:error] [pid 263262:tid 263519] [client 52.231.30.175:32243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/myglu.php"] [unique_id "ary1WpEcZ_148BjP8ZPmHwAAAYg"]
[Wed Sep 30 01:08:10.779212 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.779668 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.784900 2026] [security2:error] [pid 263262:tid 263502] [client 13.70.4.78:63502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/bro.php"] [unique_id "ary1WpEcZ_148BjP8ZPmIQAAAXc"]
[Wed Sep 30 01:08:10.831873 2026] [security2:error] [pid 263262:tid 263464] [client 216.73.216.46:57610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1WpEcZ_148BjP8ZPmJQAAAVE"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3IvbGliL2tkdW1w
[Wed Sep 30 01:08:10.849882 2026] [security2:error] [pid 263262:tid 263472] [client 20.28.180.172:29584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/yachi.php"] [unique_id "ary1WpEcZ_148BjP8ZPmJwAAAVk"]
[Wed Sep 30 01:08:10.869402 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.869688 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:10.874916 2026] [security2:error] [pid 263262:tid 263490] [client 20.214.191.94:58638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary1WpEcZ_148BjP8ZPmKgAAAWs"]
[Wed Sep 30 01:08:10.936848 2026] [security2:error] [pid 263262:tid 263477] [client 130.131.227.119:8594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/abc.php"] [unique_id "ary1WpEcZ_148BjP8ZPmLAAAAV4"]
[Wed Sep 30 01:08:10.957961 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:10.958220 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.050455 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.050727 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.055774 2026] [security2:error] [pid 263262:tid 263444] [client 52.231.30.175:32236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/bnmtp.php"] [unique_id "ary1W5EcZ_148BjP8ZPmNwAAAT0"]
[Wed Sep 30 01:08:11.057668 2026] [security2:error] [pid 263262:tid 263513] [client 45.138.12.32:42084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pjy.uiz.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1W5EcZ_148BjP8ZPmOAAAAYI"]
[Wed Sep 30 01:08:11.065315 2026] [security2:error] [pid 263262:tid 263459] [client 45.138.12.32:42042] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pon.qlp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1W5EcZ_148BjP8ZPmOgAAAUw"]
[Wed Sep 30 01:08:11.087858 2026] [security2:error] [pid 263262:tid 263450] [client 74.225.148.80:60891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1W5EcZ_148BjP8ZPmOwAAAUM"]
[Wed Sep 30 01:08:11.093899 2026] [security2:error] [pid 263262:tid 263426] [client 130.131.227.119:9108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/c1.php"] [unique_id "ary1W5EcZ_148BjP8ZPmPQAAASs"]
[Wed Sep 30 01:08:11.115752 2026] [security2:error] [pid 263262:tid 263494] [client 13.70.4.78:59001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ac83.php"] [unique_id "ary1W5EcZ_148BjP8ZPmQAAAAW8"]
[Wed Sep 30 01:08:11.151491 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.151947 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.165966 2026] [security2:error] [pid 263262:tid 263475] [client 20.214.191.94:58746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary1W5EcZ_148BjP8ZPmRwAAAVw"]
[Wed Sep 30 01:08:11.202658 2026] [security2:error] [pid 263262:tid 263466] [client 20.219.2.60:11688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/myfilexxx.php"] [unique_id "ary1W5EcZ_148BjP8ZPmSgAAAVM"]
[Wed Sep 30 01:08:11.241560 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.241840 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.247689 2026] [security2:error] [pid 263262:tid 263488] [client 103.168.66.101:24554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/index.php"] [unique_id "ary1W5EcZ_148BjP8ZPmTwAAAWk"], referer: https://networkwestmichigan.com/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:08:11.256222 2026] [security2:error] [pid 263262:tid 263449] [client 20.213.164.196:21234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/myglu.php"] [unique_id "ary1W5EcZ_148BjP8ZPmUAAAAUI"]
[Wed Sep 30 01:08:11.256406 2026] [security2:error] [pid 263262:tid 263510] [client 130.131.227.119:8609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/index.php/feed/atom/"] [unique_id "ary1W5EcZ_148BjP8ZPmUQAAAX8"]
[Wed Sep 30 01:08:11.268156 2026] [security2:error] [pid 263262:tid 263491] [client 20.58.177.98:33251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin.php/2P.php"] [unique_id "ary1W5EcZ_148BjP8ZPmUgAAAWw"]
[Wed Sep 30 01:08:11.286779 2026] [security2:error] [pid 263262:tid 263468] [client 187.40.198.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-15-monitor/"] [unique_id "ary1W5EcZ_148BjP8ZPmVQAAAVU"]
[Wed Sep 30 01:08:11.316476 2026] [security2:error] [pid 263262:tid 263429] [client 52.231.30.175:32224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/zeta.php"] [unique_id "ary1W5EcZ_148BjP8ZPmWAAAAS4"]
[Wed Sep 30 01:08:11.331973 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.332242 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.360388 2026] [security2:error] [pid 263262:tid 263422] [client 46.122.67.115:6801] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "tywallace.com"] [uri "/wp-login.php"] [unique_id "ary1W5EcZ_148BjP8ZPmNgAAASc"], referer: https://tywallace.com/wp-login.php
[Wed Sep 30 01:08:11.421473 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.421749 2026] [access_compat:error] [pid 263262:tid 263485] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.426866 2026] [security2:error] [pid 263262:tid 263492] [client 130.131.227.119:49120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/root.php"] [unique_id "ary1W5EcZ_148BjP8ZPmXAAAAW0"]
[Wed Sep 30 01:08:11.434652 2026] [security2:error] [pid 263262:tid 263439] [client 13.70.4.78:8970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1W5EcZ_148BjP8ZPmXQAAATg"]
[Wed Sep 30 01:08:11.476522 2026] [security2:error] [pid 263262:tid 263467] [client 20.214.191.94:58653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/admin.php/c.php"] [unique_id "ary1W5EcZ_148BjP8ZPmXgAAAVQ"]
[Wed Sep 30 01:08:11.478317 2026] [security2:error] [pid 263262:tid 263512] [client 172.232.190.19:54548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary1W5EcZ_148BjP8ZPmXwAAAYE"], referer: www.google.com
[Wed Sep 30 01:08:11.504486 2026] [security2:error] [pid 263262:tid 263511] [client 20.70.173.30:8131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/simple.php"] [unique_id "ary1W5EcZ_148BjP8ZPmZAAAAYA"]
[Wed Sep 30 01:08:11.516444 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.516722 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.518418 2026] [security2:error] [pid 263262:tid 263513] [client 45.138.12.32:42076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkf.cqy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1W5EcZ_148BjP8ZPmZgAAAYI"]
[Wed Sep 30 01:08:11.523094 2026] [security2:error] [pid 263262:tid 263402] [client 20.204.42.136:63827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/blacks.php"] [unique_id "ary1W5EcZ_148BjP8ZPmZwAAARM"]
[Wed Sep 30 01:08:11.594599 2026] [security2:error] [pid 263262:tid 263421] [client 52.231.30.175:38870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary1W5EcZ_148BjP8ZPmbAAAASY"]
[Wed Sep 30 01:08:11.611629 2026] [security2:error] [pid 263262:tid 263433] [client 130.131.227.119:8628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/shell.php"] [unique_id "ary1W5EcZ_148BjP8ZPmbgAAATI"]
[Wed Sep 30 01:08:11.626480 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.626742 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.655324 2026] [security2:error] [pid 263262:tid 263505] [client 4.240.25.22:38755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/media.php"] [unique_id "ary1W5EcZ_148BjP8ZPmcgAAAXo"]
[Wed Sep 30 01:08:11.665461 2026] [security2:error] [pid 263262:tid 263475] [client 20.70.173.30:33391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/images.php"] [unique_id "ary1W5EcZ_148BjP8ZPmcwAAAVw"]
[Wed Sep 30 01:08:11.695621 2026] [security2:error] [pid 263262:tid 263504] [client 20.58.177.98:33703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/a.php"] [unique_id "ary1W5EcZ_148BjP8ZPmdAAAAXk"]
[Wed Sep 30 01:08:11.719705 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.719970 2026] [access_compat:error] [pid 263262:tid 263471] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.734252 2026] [security2:error] [pid 263262:tid 263476] [client 116.193.128.26:65050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1W5EcZ_148BjP8ZPmeQAAAV0"]
[Wed Sep 30 01:08:11.734348 2026] [security2:error] [pid 263262:tid 263476] [client 116.193.128.26:65050] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1W5EcZ_148BjP8ZPmeQAAAV0"]
[Wed Sep 30 01:08:11.760500 2026] [security2:error] [pid 263262:tid 263449] [client 13.70.4.78:63498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/zoo2.php"] [unique_id "ary1W5EcZ_148BjP8ZPmfQAAAUI"]
[Wed Sep 30 01:08:11.771297 2026] [security2:error] [pid 263262:tid 263516] [client 130.131.227.119:8633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/user/index.php"] [unique_id "ary1W5EcZ_148BjP8ZPmfgAAAYU"]
[Wed Sep 30 01:08:11.784951 2026] [security2:error] [pid 263262:tid 263454] [client 20.214.191.94:15911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/admin.php/go.php"] [unique_id "ary1W5EcZ_148BjP8ZPmgAAAAUc"]
[Wed Sep 30 01:08:11.810277 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.810565 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.831922 2026] [security2:error] [pid 263262:tid 263479] [client 20.194.30.107:43713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/f35.php"] [unique_id "ary1W5EcZ_148BjP8ZPmhQAAAWA"]
[Wed Sep 30 01:08:11.847557 2026] [security2:error] [pid 263262:tid 263483] [client 168.107.70.193:54189] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.asn.hfj.mybluehost.me"] [uri "/"] [unique_id "ary1W5EcZ_148BjP8ZPmhgAAAWQ"]
[Wed Sep 30 01:08:11.855075 2026] [security2:error] [pid 263262:tid 263403] [client 52.231.30.175:32232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary1W5EcZ_148BjP8ZPmiAAAARQ"]
[Wed Sep 30 01:08:11.857676 2026] [core:error] [pid 263262:tid 263481] [client 15.252.178.110:52782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:11.857700 2026] [core:error] [pid 263262:tid 263481] [client 15.252.178.110:52782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:11.863194 2026] [security2:error] [pid 263262:tid 263463] [client 20.28.180.172:18366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/karma_144a.php"] [unique_id "ary1W5EcZ_148BjP8ZPmiQAAAVA"]
[Wed Sep 30 01:08:11.900795 2026] [security2:error] [pid 263262:tid 263452] [client 104.208.65.139:18987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/cibrkysaeng.php"] [unique_id "ary1W5EcZ_148BjP8ZPmjQAAAUU"]
[Wed Sep 30 01:08:11.906887 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.907162 2026] [access_compat:error] [pid 263262:tid 263446] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:11.907723 2026] [security2:error] [pid 263262:tid 263496] [client 20.219.2.60:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/admin-footer.php"] [unique_id "ary1W5EcZ_148BjP8ZPmjgAAAXE"]
[Wed Sep 30 01:08:11.923096 2026] [security2:error] [pid 263262:tid 263460] [client 130.131.227.119:9110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ary1W5EcZ_148BjP8ZPmjwAAAU0"]
[Wed Sep 30 01:08:11.973058 2026] [security2:error] [pid 263262:tid 263520] [client 152.56.240.85:54078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1W5EcZ_148BjP8ZPmSwAAAYk"]
[Wed Sep 30 01:08:11.999507 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:11.999754 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.029952 2026] [security2:error] [pid 263262:tid 263453] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1XJEcZ_148BjP8ZPmnQAAAUY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:12.043879 2026] [security2:error] [pid 263262:tid 263401] [client 20.194.5.96:17160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/admin.php/2P.php"] [unique_id "ary1XJEcZ_148BjP8ZPmnwAAARI"]
[Wed Sep 30 01:08:12.052589 2026] [security2:error] [pid 263262:tid 263410] [client 74.225.148.80:54119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1XJEcZ_148BjP8ZPmoQAAARs"]
[Wed Sep 30 01:08:12.068170 2026] [security2:error] [pid 263262:tid 263459] [client 20.214.191.94:58712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/groud3.php"] [unique_id "ary1XJEcZ_148BjP8ZPmowAAAUw"]
[Wed Sep 30 01:08:12.081741 2026] [security2:error] [pid 263262:tid 263467] [client 130.131.227.119:8584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-header-json.php"] [unique_id "ary1XJEcZ_148BjP8ZPmpAAAAVQ"]
[Wed Sep 30 01:08:12.081973 2026] [security2:error] [pid 263262:tid 263507] [client 13.70.4.78:8995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/zoo1.php"] [unique_id "ary1XJEcZ_148BjP8ZPmpQAAAXw"]
[Wed Sep 30 01:08:12.090084 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.090393 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.120444 2026] [security2:error] [pid 263262:tid 263447] [client 52.231.30.175:38860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary1XJEcZ_148BjP8ZPmpwAAAUA"]
[Wed Sep 30 01:08:12.145146 2026] [security2:error] [pid 263262:tid 263514] [client 20.58.177.98:33717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/cord.php"] [unique_id "ary1XJEcZ_148BjP8ZPmqAAAAYM"]
[Wed Sep 30 01:08:12.182234 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.182507 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:30490] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.215223 2026] [security2:error] [pid 263262:tid 263480] [client 43.227.131.37:12768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmqwAAAWE"]
[Wed Sep 30 01:08:12.215331 2026] [security2:error] [pid 263262:tid 263480] [client 43.227.131.37:12768] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmqwAAAWE"]
[Wed Sep 30 01:08:12.242663 2026] [security2:error] [pid 263262:tid 263476] [client 4.240.25.22:33218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/adminfuns.php"] [unique_id "ary1XJEcZ_148BjP8ZPmrAAAAV0"]
[Wed Sep 30 01:08:12.253624 2026] [security2:error] [pid 263262:tid 263441] [client 130.131.227.119:49108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/zup.php"] [unique_id "ary1XJEcZ_148BjP8ZPmrQAAATo"]
[Wed Sep 30 01:08:12.274750 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.275030 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:34136] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.281992 2026] [security2:error] [pid 263262:tid 263493] [client 20.219.19.141:44993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/0xD.php"] [unique_id "ary1XJEcZ_148BjP8ZPmsAAAAW4"]
[Wed Sep 30 01:08:12.317644 2026] [access_compat:error] [pid 263262:tid 263457] [client 47.79.13.158:36776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:12.317945 2026] [access_compat:error] [pid 263262:tid 263457] [client 47.79.13.158:36776] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:12.331116 2026] [security2:error] [pid 263262:tid 263510] [client 223.181.30.165:6703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmsgAAAX8"]
[Wed Sep 30 01:08:12.331217 2026] [security2:error] [pid 263262:tid 263510] [client 223.181.30.165:6703] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmsgAAAX8"]
[Wed Sep 30 01:08:12.367272 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.367557 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.381468 2026] [security2:error] [pid 263262:tid 263463] [client 52.231.30.175:38834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/flamini.php"] [unique_id "ary1XJEcZ_148BjP8ZPmtwAAAVA"]
[Wed Sep 30 01:08:12.405719 2026] [security2:error] [pid 263262:tid 263403] [client 130.131.227.119:8621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/a9.php"] [unique_id "ary1XJEcZ_148BjP8ZPmuQAAARQ"]
[Wed Sep 30 01:08:12.410630 2026] [security2:error] [pid 263262:tid 263478] [client 13.70.4.78:51164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/class-ajax.php"] [unique_id "ary1XJEcZ_148BjP8ZPmugAAAV8"]
[Wed Sep 30 01:08:12.456222 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.456530 2026] [access_compat:error] [pid 263262:tid 263429] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.465136 2026] [security2:error] [pid 263262:tid 263502] [client 168.100.149.240:45952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/happy-elementor-addons/assets/vendor/jquery-match-height/jquery.matchHeight-min.js"] [unique_id "ary1XJEcZ_148BjP8ZPmvAABdzU"]
[Wed Sep 30 01:08:12.475145 2026] [security2:error] [pid 263262:tid 263400] [client 20.214.191.94:15839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/gaxby.php"] [unique_id "ary1XJEcZ_148BjP8ZPmvwAAARE"]
[Wed Sep 30 01:08:12.475900 2026] [security2:error] [pid 263262:tid 263469] [client 20.58.177.98:33412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/anom.php"] [unique_id "ary1XJEcZ_148BjP8ZPmwAAAAVY"]
[Wed Sep 30 01:08:12.479316 2026] [security2:error] [pid 263262:tid 263473] [client 20.70.173.30:62914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1XJEcZ_148BjP8ZPmwQAAAVo"]
[Wed Sep 30 01:08:12.505078 2026] [security2:error] [pid 263262:tid 263470] [client 182.69.182.151:16312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmxQAAAVc"]
[Wed Sep 30 01:08:12.505166 2026] [security2:error] [pid 263262:tid 263470] [client 182.69.182.151:16312] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPmxQAAAVc"]
[Wed Sep 30 01:08:12.514876 2026] [security2:error] [pid 263262:tid 263393] [client 20.213.164.196:55201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/aboutt.php"] [unique_id "ary1XJEcZ_148BjP8ZPmxgAAAQo"]
[Wed Sep 30 01:08:12.569640 2026] [security2:error] [pid 263262:tid 263501] [client 130.131.227.119:8583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/admin/index.php"] [unique_id "ary1XJEcZ_148BjP8ZPmzQAAAXY"]
[Wed Sep 30 01:08:12.583876 2026] [security2:error] [pid 263262:tid 263442] [client 216.73.216.46:30490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1XJEcZ_148BjP8ZPm0AAAATs"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL3N2
[Wed Sep 30 01:08:12.598140 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.598549 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.643045 2026] [security2:error] [pid 263262:tid 263494] [client 52.231.30.175:32203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/myglu.php"] [unique_id "ary1XJEcZ_148BjP8ZPm2AAAAW8"]
[Wed Sep 30 01:08:12.650381 2026] [security2:error] [pid 263262:tid 263444] [client 20.28.180.172:34269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/bgmlktrf.php"] [unique_id "ary1XJEcZ_148BjP8ZPm2gAAAT0"]
[Wed Sep 30 01:08:12.686970 2026] [security2:error] [pid 263262:tid 263404] [client 216.73.216.46:34136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1XJEcZ_148BjP8ZPm4AAAARU"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWIvZ2Nj
[Wed Sep 30 01:08:12.689516 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.689758 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.708958 2026] [security2:error] [pid 263262:tid 263394] [client 20.70.173.30:33362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/chosen.php"] [unique_id "ary1XJEcZ_148BjP8ZPm4wAAAQs"]
[Wed Sep 30 01:08:12.717428 2026] [security2:error] [pid 263262:tid 263455] [client 130.131.227.119:8553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/makeasmtp.php"] [unique_id "ary1XJEcZ_148BjP8ZPm5AAAAUg"]
[Wed Sep 30 01:08:12.729739 2026] [security2:error] [pid 263262:tid 263476] [client 13.70.4.78:9017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/gm.php"] [unique_id "ary1XJEcZ_148BjP8ZPm5gAAAV0"]
[Wed Sep 30 01:08:12.729789 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.730061 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.790674 2026] [security2:error] [pid 263262:tid 263516] [client 20.214.191.94:15877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/dh9u7.php"] [unique_id "ary1XJEcZ_148BjP8ZPm6gAAAYU"]
[Wed Sep 30 01:08:12.818672 2026] [security2:error] [pid 263262:tid 263428] [client 74.225.148.80:54102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1XJEcZ_148BjP8ZPm7AAAAS0"]
[Wed Sep 30 01:08:12.820862 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.821154 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.834894 2026] [security2:error] [pid 263262:tid 263415] [client 4.240.25.22:8388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cgi-bin/admin.php"] [unique_id "ary1XJEcZ_148BjP8ZPm7QAAASA"]
[Wed Sep 30 01:08:12.865117 2026] [security2:error] [pid 263262:tid 263481] [client 20.58.177.98:33425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/plugins.php"] [unique_id "ary1XJEcZ_148BjP8ZPm7gAAAWI"]
[Wed Sep 30 01:08:12.880497 2026] [security2:error] [pid 263262:tid 263495] [client 130.131.227.119:8581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/paku.php"] [unique_id "ary1XJEcZ_148BjP8ZPm8QAAAXA"]
[Wed Sep 30 01:08:12.881447 2026] [security2:error] [pid 263262:tid 263324] [remote 74.7.227.56:59106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1XJEcZ_148BjP8ZPm8gABGTw"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=650
[Wed Sep 30 01:08:12.904156 2026] [security2:error] [pid 263262:tid 263478] [client 52.231.30.175:38906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/alfa.php"] [unique_id "ary1XJEcZ_148BjP8ZPm9gAAAV8"]
[Wed Sep 30 01:08:12.909950 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:12.910213 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:12.917018 2026] [core:error] [pid 263262:tid 263452] [client 15.252.178.110:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:12.917053 2026] [core:error] [pid 263262:tid 263452] [client 15.252.178.110:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:12.986764 2026] [security2:error] [pid 263262:tid 263509] [client 106.214.2.47:29329] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPm_QAAAX4"]
[Wed Sep 30 01:08:12.994141 2026] [security2:error] [pid 263262:tid 263509] [client 106.214.2.47:29329] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1XJEcZ_148BjP8ZPm_QAAAX4"]
[Wed Sep 30 01:08:13.002945 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.003722 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.032501 2026] [security2:error] [pid 263262:tid 263429] [client 20.204.42.136:59141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/run.php"] [unique_id "ary1XZEcZ_148BjP8ZPnAQAAAS4"]
[Wed Sep 30 01:08:13.042371 2026] [security2:error] [pid 263262:tid 263446] [client 13.70.4.78:58978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1XZEcZ_148BjP8ZPnBAAAAT8"]
[Wed Sep 30 01:08:13.045068 2026] [security2:error] [pid 263262:tid 263520] [client 130.131.227.119:8285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/rtx.php"] [unique_id "ary1XZEcZ_148BjP8ZPnBQAAAYk"]
[Wed Sep 30 01:08:13.074654 2026] [security2:error] [pid 263262:tid 263451] [client 20.219.2.60:11847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/karma_144a.php"] [unique_id "ary1XZEcZ_148BjP8ZPnCAAAAUQ"]
[Wed Sep 30 01:08:13.093122 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.093402 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.106584 2026] [security2:error] [pid 263262:tid 263471] [client 201.32.215.149:5251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1XZEcZ_148BjP8ZPnDQAAAVg"]
[Wed Sep 30 01:08:13.106726 2026] [security2:error] [pid 263262:tid 263471] [client 201.32.215.149:5251] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1XZEcZ_148BjP8ZPnDQAAAVg"]
[Wed Sep 30 01:08:13.114965 2026] [security2:error] [pid 263262:tid 263465] [client 20.214.191.94:58692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/yvnqcuic.php"] [unique_id "ary1XZEcZ_148BjP8ZPnDgAAAVI"]
[Wed Sep 30 01:08:13.185328 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.185616 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.194639 2026] [security2:error] [pid 263262:tid 263461] [client 178.128.122.173:43178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.122.128.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ary1XZEcZ_148BjP8ZPnFwAAAU4"], referer: http://adbadvertising.com/wp-login.php
[Wed Sep 30 01:08:13.210039 2026] [security2:error] [pid 263262:tid 263404] [client 130.131.227.119:8614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/update/da222.php"] [unique_id "ary1XZEcZ_148BjP8ZPnGAAAARU"]
[Wed Sep 30 01:08:13.210039 2026] [security2:error] [pid 263262:tid 263441] [client 52.231.30.175:38830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/index.php"] [unique_id "ary1XZEcZ_148BjP8ZPnGQAAATo"]
[Wed Sep 30 01:08:13.275221 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.275500 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.278076 2026] [security2:error] [pid 263262:tid 263479] [client 20.70.173.30:2609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/adminan.php"] [unique_id "ary1XZEcZ_148BjP8ZPnHwAAAWA"]
[Wed Sep 30 01:08:13.294235 2026] [access_compat:error] [pid 263262:tid 263500] [client 47.79.206.85:13616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:08:13.294519 2026] [access_compat:error] [pid 263262:tid 263500] [client 47.79.206.85:13616] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:08:13.346449 2026] [security2:error] [pid 263262:tid 263495] [client 20.70.173.30:3240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/admin.php"] [unique_id "ary1XZEcZ_148BjP8ZPnJwAAAXA"]
[Wed Sep 30 01:08:13.367316 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.367593 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.376005 2026] [core:error] [pid 263262:tid 263398] [client 130.131.227.119:8608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:13.376030 2026] [core:error] [pid 263262:tid 263398] [client 130.131.227.119:8608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:13.379307 2026] [security2:error] [pid 263262:tid 263436] [client 13.70.4.78:51140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/asd2.php"] [unique_id "ary1XZEcZ_148BjP8ZPnLQAAATU"]
[Wed Sep 30 01:08:13.384201 2026] [security2:error] [pid 263262:tid 263506] [client 20.214.191.94:58675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/koiy.php"] [unique_id "ary1XZEcZ_148BjP8ZPnLgAAAXs"]
[Wed Sep 30 01:08:13.455976 2026] [security2:error] [pid 263262:tid 263429] [client 82.102.18.222:59628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1XZEcZ_148BjP8ZPnNgAAAS4"]
[Wed Sep 30 01:08:13.457960 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.458238 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.483050 2026] [security2:error] [pid 263262:tid 263520] [client 52.231.30.175:38908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary1XZEcZ_148BjP8ZPnOwAAAYk"]
[Wed Sep 30 01:08:13.528969 2026] [access_compat:error] [pid 263262:tid 263304] [remote 220.181.108.91:34484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.529427 2026] [access_compat:error] [pid 263262:tid 263304] [remote 220.181.108.91:34484] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.529606 2026] [security2:error] [pid 263262:tid 263410] [client 74.225.148.80:54085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/aa.php"] [unique_id "ary1XZEcZ_148BjP8ZPnQAAAARs"]
[Wed Sep 30 01:08:13.533530 2026] [security2:error] [pid 263262:tid 263485] [client 20.213.164.196:55220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wp-whe.php"] [unique_id "ary1XZEcZ_148BjP8ZPnQQAAAWY"]
[Wed Sep 30 01:08:13.551773 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.552196 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.559282 2026] [security2:error] [pid 263262:tid 263451] [client 130.131.227.119:8298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/min.php"] [unique_id "ary1XZEcZ_148BjP8ZPnRwAAAUQ"]
[Wed Sep 30 01:08:13.628151 2026] [security2:error] [pid 263262:tid 263515] [client 20.194.5.96:16603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/a.php"] [unique_id "ary1XZEcZ_148BjP8ZPnTQAAAYQ"]
[Wed Sep 30 01:08:13.658674 2026] [security2:error] [pid 263262:tid 263405] [client 20.214.191.94:15927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wordfence-waf.php"] [unique_id "ary1XZEcZ_148BjP8ZPnTgAAARY"]
[Wed Sep 30 01:08:13.696014 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.696475 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.710313 2026] [security2:error] [pid 263262:tid 263478] [client 13.70.4.78:9020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/cdc.php"] [unique_id "ary1XZEcZ_148BjP8ZPnUgAAAV8"]
[Wed Sep 30 01:08:13.731058 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.731307 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.753664 2026] [security2:error] [pid 263262:tid 263481] [client 130.131.227.119:8297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "ary1XZEcZ_148BjP8ZPnWgAAAWI"]
[Wed Sep 30 01:08:13.784174 2026] [security2:error] [pid 263262:tid 263427] [client 161.123.30.186:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1XZEcZ_148BjP8ZPnXgAAASw"]
[Wed Sep 30 01:08:13.786020 2026] [security2:error] [pid 263262:tid 263496] [client 82.102.18.222:59644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 222.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary1XZEcZ_148BjP8ZPnXQAAAXE"]
[Wed Sep 30 01:08:13.787472 2026] [security2:error] [pid 263262:tid 263509] [client 20.70.173.30:25306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1XZEcZ_148BjP8ZPnXwAAAX4"]
[Wed Sep 30 01:08:13.826127 2026] [autoindex:error] [pid 263262:tid 263470] [client 52.231.30.175:32179] AH01276: Cannot serve directory /home1/baychir1/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:08:13.860022 2026] [ssl:error] [pid 263262:tid 263406] [client 216.25.124.25:18628] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.thehomeinsulationcompany.co.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:08:13.877163 2026] [security2:error] [pid 263262:tid 263424] [client 20.198.74.230:23908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/tvbxn.php"] [unique_id "ary1XZEcZ_148BjP8ZPnYgAAASk"]
[Wed Sep 30 01:08:13.889499 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.889781 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.904964 2026] [security2:error] [pid 263262:tid 263462] [client 130.131.227.119:36419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/themes/min.php"] [unique_id "ary1XZEcZ_148BjP8ZPnZQAAAU8"]
[Wed Sep 30 01:08:13.923509 2026] [security2:error] [pid 263262:tid 263417] [client 20.58.177.98:33237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/zlwvxiyp.php"] [unique_id "ary1XZEcZ_148BjP8ZPnZwAAASI"]
[Wed Sep 30 01:08:13.929752 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:13.930057 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:13.932748 2026] [security2:error] [pid 263262:tid 263475] [client 20.214.191.94:58705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wp5.php"] [unique_id "ary1XZEcZ_148BjP8ZPnaQAAAVw"]
[Wed Sep 30 01:08:13.967741 2026] [security2:error] [pid 263262:tid 263403] [client 15.252.178.110:52806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.arvanisocks.com"] [uri "/index.php"] [unique_id "ary1XZEcZ_148BjP8ZPnbwAAARQ"]
[Wed Sep 30 01:08:13.970436 2026] [authz_core:error] [pid 263262:tid 263517] [client 52.231.30.175:32179] AH01630: client denied by server configuration: /home1/baychir1/public_html/wp-includes/blocks/audio/index.php
[Wed Sep 30 01:08:14.018566 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.018888 2026] [access_compat:error] [pid 263262:tid 263402] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.025153 2026] [security2:error] [pid 263262:tid 263480] [client 13.70.4.78:56472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/Components.php"] [unique_id "ary1XpEcZ_148BjP8ZPndgAAAWE"]
[Wed Sep 30 01:08:14.069838 2026] [security2:error] [pid 263262:tid 263450] [client 130.131.227.119:8279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "ary1XpEcZ_148BjP8ZPnfAAAAUM"]
[Wed Sep 30 01:08:14.074590 2026] [security2:error] [pid 263262:tid 263477] [client 20.204.42.136:62641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/vpn.php"] [unique_id "ary1XpEcZ_148BjP8ZPnfgAAAV4"]
[Wed Sep 30 01:08:14.107864 2026] [security2:error] [pid 263262:tid 263442] [client 52.231.30.175:32179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-admin/js/index.php"] [unique_id "ary1XpEcZ_148BjP8ZPnfwAAATs"]
[Wed Sep 30 01:08:14.118406 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.118679 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.156784 2026] [security2:error] [pid 263262:tid 263463] [client 4.240.25.22:63663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/images.php"] [unique_id "ary1XpEcZ_148BjP8ZPnggAAAVA"]
[Wed Sep 30 01:08:14.180609 2026] [security2:error] [pid 263262:tid 263421] [client 74.225.148.80:54092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/z70.php"] [unique_id "ary1XpEcZ_148BjP8ZPngwAAASY"]
[Wed Sep 30 01:08:14.208670 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.209008 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.275612 2026] [security2:error] [pid 263262:tid 263393] [client 20.214.191.94:15847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/em.php"] [unique_id "ary1XpEcZ_148BjP8ZPnjgAAAQo"]
[Wed Sep 30 01:08:14.280243 2026] [core:error] [pid 263262:tid 263465] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:14.280277 2026] [core:error] [pid 263262:tid 263465] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:14.299831 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.300108 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.346472 2026] [security2:error] [pid 263262:tid 263430] [client 13.70.4.78:63537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/admin.php/xl9.php"] [unique_id "ary1XpEcZ_148BjP8ZPnkAAAAS8"]
[Wed Sep 30 01:08:14.378334 2026] [security2:error] [pid 263262:tid 263514] [client 52.231.30.175:32151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/admin.php"] [unique_id "ary1XpEcZ_148BjP8ZPnkQAAAYM"]
[Wed Sep 30 01:08:14.398029 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.398336 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.402054 2026] [security2:error] [pid 263262:tid 263470] [client 20.70.173.30:35586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/new.php"] [unique_id "ary1XpEcZ_148BjP8ZPnlAAAAVc"]
[Wed Sep 30 01:08:14.414902 2026] [security2:error] [pid 263262:tid 263452] [client 20.70.173.30:33291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/log.php"] [unique_id "ary1XpEcZ_148BjP8ZPnlgAAAUU"]
[Wed Sep 30 01:08:14.434015 2026] [security2:error] [pid 263262:tid 263486] [client 130.131.227.119:36468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ary1XpEcZ_148BjP8ZPnmAAAAWc"]
[Wed Sep 30 01:08:14.448539 2026] [security2:error] [pid 263262:tid 263424] [client 20.219.2.60:18903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws84.php"] [unique_id "ary1XpEcZ_148BjP8ZPnmgAAASk"]
[Wed Sep 30 01:08:14.467068 2026] [security2:error] [pid 263262:tid 263497] [client 20.58.177.98:33698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary1XpEcZ_148BjP8ZPnmwAAAXI"]
[Wed Sep 30 01:08:14.476605 2026] [security2:error] [pid 263262:tid 263396] [client 223.181.60.167:5051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1XpEcZ_148BjP8ZPnnAAAAQ0"]
[Wed Sep 30 01:08:14.477333 2026] [security2:error] [pid 263262:tid 263396] [client 223.181.60.167:5051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1XpEcZ_148BjP8ZPnnAAAAQ0"]
[Wed Sep 30 01:08:14.489353 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.489608 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.490025 2026] [security2:error] [pid 263262:tid 263422] [client 168.100.149.174:32008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/clipboard.min.js"] [unique_id "ary1XpEcZ_148BjP8ZPnngABJ2E"]
[Wed Sep 30 01:08:14.501534 2026] [http2:warn] [pid 263262:tid 263434] [client 40.77.167.224:62676] h2_stream(263262-70-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:14.579106 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.579435 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:52203] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.601793 2026] [security2:error] [pid 263262:tid 263517] [client 130.131.227.119:36434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-info.php"] [unique_id "ary1XpEcZ_148BjP8ZPnqwAAAYY"]
[Wed Sep 30 01:08:14.602368 2026] [security2:error] [pid 263262:tid 263440] [client 20.219.2.60:11668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/3586%20b64.php"] [unique_id "ary1XpEcZ_148BjP8ZPnrAAAATk"]
[Wed Sep 30 01:08:14.619757 2026] [security2:error] [pid 263262:tid 263492] [client 178.128.122.173:43180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.122.128.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "adbadvertising.com"] [uri "/wp-login.php"] [unique_id "ary1XpEcZ_148BjP8ZPnrQAAAW0"], referer: http://adbadvertising.com/wp-login.php
[Wed Sep 30 01:08:14.636452 2026] [security2:error] [pid 263262:tid 263449] [client 20.214.191.94:15843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/hp.php"] [unique_id "ary1XpEcZ_148BjP8ZPnrwAAAUI"]
[Wed Sep 30 01:08:14.647311 2026] [security2:error] [pid 263262:tid 263441] [client 20.213.164.196:21212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/ssixta.php"] [unique_id "ary1XpEcZ_148BjP8ZPnsAAAATo"]
[Wed Sep 30 01:08:14.663217 2026] [security2:error] [pid 263262:tid 263466] [client 52.231.30.175:32173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/themes/index.php"] [unique_id "ary1XpEcZ_148BjP8ZPnsgAAAVM"]
[Wed Sep 30 01:08:14.667986 2026] [security2:error] [pid 263262:tid 263428] [client 13.70.4.78:51158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/gulu.php"] [unique_id "ary1XpEcZ_148BjP8ZPnswAAAS0"]
[Wed Sep 30 01:08:14.670449 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.670821 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.680190 2026] [security2:error] [pid 263262:tid 263508] [client 168.107.70.193:49220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.aso.qlp.mybluehost.me"] [uri "/"] [unique_id "ary1XpEcZ_148BjP8ZPntAAAAX0"]
[Wed Sep 30 01:08:14.696132 2026] [security2:error] [pid 263262:tid 263478] [client 20.219.19.141:29730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/sallu.php"] [unique_id "ary1XpEcZ_148BjP8ZPnuAAAAV8"]
[Wed Sep 30 01:08:14.711051 2026] [security2:error] [pid 263262:tid 263505] [client 4.240.25.22:8443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/f35.php"] [unique_id "ary1XpEcZ_148BjP8ZPnugAAAXo"]
[Wed Sep 30 01:08:14.752021 2026] [security2:error] [pid 263262:tid 263444] [client 74.225.148.80:60897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/f35.php"] [unique_id "ary1XpEcZ_148BjP8ZPnvgAAAT0"]
[Wed Sep 30 01:08:14.762293 2026] [security2:error] [pid 263262:tid 263454] [client 130.131.227.119:55499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-wordfence-waf.php"] [unique_id "ary1XpEcZ_148BjP8ZPnwQAAAUc"]
[Wed Sep 30 01:08:14.762390 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.762656 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.774343 2026] [security2:error] [pid 263262:tid 263476] [client 20.194.5.96:17174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/cord.php"] [unique_id "ary1XpEcZ_148BjP8ZPnwgAAAV0"]
[Wed Sep 30 01:08:14.852036 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.852301 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.910760 2026] [security2:error] [pid 263262:tid 263396] [client 45.173.70.115:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1XpEcZ_148BjP8ZPnywAAAQ0"]
[Wed Sep 30 01:08:14.922747 2026] [security2:error] [pid 263262:tid 263418] [client 52.231.30.175:32207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-content/themes/index.php"] [unique_id "ary1XpEcZ_148BjP8ZPnzgAAASM"]
[Wed Sep 30 01:08:14.926058 2026] [security2:error] [pid 263262:tid 263439] [client 130.131.227.119:8527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/ws49.php"] [unique_id "ary1XpEcZ_148BjP8ZPnzwAAATg"]
[Wed Sep 30 01:08:14.935990 2026] [security2:error] [pid 263262:tid 263520] [client 20.214.191.94:15875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/wpuse.php"] [unique_id "ary1XpEcZ_148BjP8ZPn0QAAAYk"]
[Wed Sep 30 01:08:14.941628 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:14.941905 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:14.979779 2026] [security2:error] [pid 263262:tid 263482] [client 216.73.216.46:52203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1XpEcZ_148BjP8ZPn1AAAAWM"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL3B0
[Wed Sep 30 01:08:14.982589 2026] [security2:error] [pid 263262:tid 263455] [client 20.194.30.107:1675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/about.php"] [unique_id "ary1XpEcZ_148BjP8ZPn1gAAAUg"]
[Wed Sep 30 01:08:15.001897 2026] [security2:error] [pid 263262:tid 263395] [client 13.70.4.78:9008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/bala.php"] [unique_id "ary1X5EcZ_148BjP8ZPn2AAAAQw"]
[Wed Sep 30 01:08:15.034160 2026] [core:error] [pid 263262:tid 263496] [client 15.252.178.110:52812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:15.034177 2026] [core:error] [pid 263262:tid 263496] [client 15.252.178.110:52812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:15.034710 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.035169 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.035583 2026] [security2:error] [pid 263262:tid 263511] [client 20.58.177.98:33264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary1X5EcZ_148BjP8ZPn3AAAAYA"]
[Wed Sep 30 01:08:15.086134 2026] [security2:error] [pid 263262:tid 263446] [client 130.131.227.119:8560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/xxx.php"] [unique_id "ary1X5EcZ_148BjP8ZPn4QAAAT8"]
[Wed Sep 30 01:08:15.122643 2026] [security2:error] [pid 263262:tid 263399] [client 34.156.179.152:37118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.97.137"] [uri "/"] [unique_id "ary1X5EcZ_148BjP8ZPn4wAAARA"]
[Wed Sep 30 01:08:15.125022 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.125283 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.189374 2026] [security2:error] [pid 263262:tid 263464] [client 52.231.30.175:38907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/cgi-bin/index.php"] [unique_id "ary1X5EcZ_148BjP8ZPn5wAAAVE"]
[Wed Sep 30 01:08:15.203423 2026] [security2:error] [pid 263262:tid 263479] [client 20.204.42.136:42292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/alfa.php"] [unique_id "ary1X5EcZ_148BjP8ZPn6AAAAWA"]
[Wed Sep 30 01:08:15.213150 2026] [security2:error] [pid 263262:tid 263461] [client 20.214.191.94:58683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/file18x.php"] [unique_id "ary1X5EcZ_148BjP8ZPn6gAAAU4"]
[Wed Sep 30 01:08:15.218531 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.218799 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.248499 2026] [security2:error] [pid 263262:tid 263508] [client 130.131.227.119:8520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/0x.php"] [unique_id "ary1X5EcZ_148BjP8ZPn7QAAAX0"]
[Wed Sep 30 01:08:15.265058 2026] [access_compat:error] [pid 263262:tid 263486] [client 47.79.13.64:55670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.265325 2026] [access_compat:error] [pid 263262:tid 263486] [client 47.79.13.64:55670] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.315108 2026] [security2:error] [pid 263262:tid 263476] [client 20.194.5.96:17334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/anom.php"] [unique_id "ary1X5EcZ_148BjP8ZPn8wAAAV0"]
[Wed Sep 30 01:08:15.316096 2026] [security2:error] [pid 263262:tid 263472] [client 74.225.148.80:60879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/adminfuns.php"] [unique_id "ary1X5EcZ_148BjP8ZPn9AAAAVk"]
[Wed Sep 30 01:08:15.317665 2026] [security2:error] [pid 263262:tid 263465] [client 13.70.4.78:63514] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "walker23.com"] [uri "/c99.php"] [unique_id "ary1X5EcZ_148BjP8ZPn9gAAAVI"]
[Wed Sep 30 01:08:15.319359 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.319633 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:28773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.331317 2026] [security2:error] [pid 263262:tid 263440] [client 128.127.245.138:46944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.245.127.128.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "daytonago.org"] [uri "/xmlrpc.php"] [unique_id "ary1X5EcZ_148BjP8ZPn8AAAATk"]
[Wed Sep 30 01:08:15.331440 2026] [security2:error] [pid 263262:tid 263440] [client 128.127.245.138:46944] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "daytonago.org"] [uri "/xmlrpc.php"] [unique_id "ary1X5EcZ_148BjP8ZPn8AAAATk"]
[Wed Sep 30 01:08:15.401086 2026] [security2:error] [pid 263262:tid 263513] [client 216.73.216.46:28773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1X5EcZ_148BjP8ZPn-QAAAYI"]
[Wed Sep 30 01:08:15.402578 2026] [security2:error] [pid 263262:tid 263500] [client 130.131.227.119:8572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/CDX1.php"] [unique_id "ary1X5EcZ_148BjP8ZPn-gAAAXU"]
[Wed Sep 30 01:08:15.438186 2026] [security2:error] [pid 263262:tid 263495] [client 20.58.177.98:33235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin.php/c.php"] [unique_id "ary1X5EcZ_148BjP8ZPn_QAAAXA"]
[Wed Sep 30 01:08:15.449058 2026] [security2:error] [pid 263262:tid 263504] [client 52.231.30.175:38806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-manager.php"] [unique_id "ary1X5EcZ_148BjP8ZPn_gAAAXk"]
[Wed Sep 30 01:08:15.498688 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.498974 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.527318 2026] [security2:error] [pid 263262:tid 263490] [client 20.213.164.196:44198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/tesla.php"] [unique_id "ary1X5EcZ_148BjP8ZPoBQAAAWs"]
[Wed Sep 30 01:08:15.528224 2026] [security2:error] [pid 263262:tid 263453] [client 20.214.191.94:15808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/123viva.php"] [unique_id "ary1X5EcZ_148BjP8ZPoBgAAAUY"]
[Wed Sep 30 01:08:15.554604 2026] [security2:error] [pid 263262:tid 263455] [client 82.102.18.222:59658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1X5EcZ_148BjP8ZPoCQAAAUg"]
[Wed Sep 30 01:08:15.561949 2026] [security2:error] [pid 263262:tid 263404] [client 130.131.227.119:31924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/akcc.php"] [unique_id "ary1X5EcZ_148BjP8ZPoCwAAARU"]
[Wed Sep 30 01:08:15.588551 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.588816 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.639845 2026] [security2:error] [pid 263262:tid 263485] [client 13.70.4.78:45381] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "walker23.com"] [uri "/c99.php"] [unique_id "ary1X5EcZ_148BjP8ZPoEQAAAWY"]
[Wed Sep 30 01:08:15.669438 2026] [access_compat:error] [pid 263262:tid 263510] [client 47.79.13.168:37534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.669741 2026] [access_compat:error] [pid 263262:tid 263510] [client 47.79.13.168:37534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.692666 2026] [security2:error] [pid 263262:tid 263470] [client 20.28.180.172:18353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/3586%20b64.php"] [unique_id "ary1X5EcZ_148BjP8ZPoFwAAAVc"]
[Wed Sep 30 01:08:15.714337 2026] [security2:error] [pid 263262:tid 263507] [client 130.131.227.119:55511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ary1X5EcZ_148BjP8ZPoGAAAAXw"]
[Wed Sep 30 01:08:15.715423 2026] [security2:error] [pid 263262:tid 263445] [client 52.231.30.175:38884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary1X5EcZ_148BjP8ZPoGgAAAT4"]
[Wed Sep 30 01:08:15.722061 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.79.13.234:58050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.722327 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.79.13.234:58050] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:15.736737 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.737190 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.764290 2026] [security2:error] [pid 263262:tid 263492] [client 20.219.19.141:65517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/ops.php"] [unique_id "ary1X5EcZ_148BjP8ZPoHAAAAW0"]
[Wed Sep 30 01:08:15.773522 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.773785 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.815177 2026] [security2:error] [pid 263262:tid 263479] [client 20.58.177.98:33711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/admin.php/go.php"] [unique_id "ary1X5EcZ_148BjP8ZPoIAAAAWA"]
[Wed Sep 30 01:08:15.830369 2026] [security2:error] [pid 263262:tid 263478] [client 20.214.191.94:58729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairwish.an-ime.com"] [uri "/Components.update.php"] [unique_id "ary1X5EcZ_148BjP8ZPoIgAAAV8"]
[Wed Sep 30 01:08:15.887933 2026] [security2:error] [pid 263262:tid 263466] [client 130.131.227.119:1160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/s.php"] [unique_id "ary1X5EcZ_148BjP8ZPoJQAAAVM"]
[Wed Sep 30 01:08:15.889560 2026] [security2:error] [pid 263262:tid 263505] [client 82.102.18.222:59668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1X5EcZ_148BjP8ZPoJgAAAXo"]
[Wed Sep 30 01:08:15.905660 2026] [security2:error] [pid 263262:tid 263509] [client 155.190.6.18:42950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1X5EcZ_148BjP8ZPoJwAAAX4"]
[Wed Sep 30 01:08:15.920081 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:36088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:15.920543 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:36088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:15.953574 2026] [security2:error] [pid 263262:tid 263472] [client 13.70.4.78:51153] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "walker23.com"] [uri "/c99.php"] [unique_id "ary1X5EcZ_148BjP8ZPoLAAAAVk"]
[Wed Sep 30 01:08:15.956382 2026] [security2:error] [pid 263262:tid 263394] [client 74.225.148.80:60866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/av.php"] [unique_id "ary1X5EcZ_148BjP8ZPoLQAAAQs"]
[Wed Sep 30 01:08:15.977852 2026] [security2:error] [pid 263262:tid 263443] [client 20.70.173.30:2585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/fling.php"] [unique_id "ary1X5EcZ_148BjP8ZPoMQAAATw"]
[Wed Sep 30 01:08:15.989003 2026] [security2:error] [pid 263262:tid 263429] [client 52.231.30.175:38812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/cgi-bin/admin.php"] [unique_id "ary1X5EcZ_148BjP8ZPoMwAAAS4"]
[Wed Sep 30 01:08:16.011207 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.011669 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.011912 2026] [security2:error] [pid 263262:tid 263519] [client 20.28.180.172:29443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cnsk.php"] [unique_id "ary1YJEcZ_148BjP8ZPoNwAAAYg"]
[Wed Sep 30 01:08:16.048484 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.048739 2026] [security2:error] [pid 263262:tid 263503] [client 130.131.227.119:31890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/sagax.php"] [unique_id "ary1YJEcZ_148BjP8ZPoPgAAAXg"]
[Wed Sep 30 01:08:16.048779 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.140375 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.140896 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.172935 2026] [security2:error] [pid 263262:tid 263409] [client 20.58.177.98:33709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/groud3.php"] [unique_id "ary1YJEcZ_148BjP8ZPoRgAAARo"]
[Wed Sep 30 01:08:16.182994 2026] [security2:error] [pid 263262:tid 263509] [client 155.190.6.18:42950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1X5EcZ_148BjP8ZPoJwAAAX4"]
[Wed Sep 30 01:08:16.203472 2026] [security2:error] [pid 263262:tid 263485] [client 20.70.173.30:35621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ops.php"] [unique_id "ary1YJEcZ_148BjP8ZPoTQAAAWY"]
[Wed Sep 30 01:08:16.222355 2026] [security2:error] [pid 263262:tid 263435] [client 82.102.18.222:59670] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1YJEcZ_148BjP8ZPoUQAAATQ"]
[Wed Sep 30 01:08:16.228700 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.228973 2026] [access_compat:error] [pid 263262:tid 263431] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.257113 2026] [security2:error] [pid 263262:tid 263445] [client 20.219.2.60:18909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/bnm.php"] [unique_id "ary1YJEcZ_148BjP8ZPoWQAAAT4"]
[Wed Sep 30 01:08:16.257821 2026] [security2:error] [pid 263262:tid 263419] [client 103.159.192.142:49760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPoWgAAASQ"]
[Wed Sep 30 01:08:16.257928 2026] [security2:error] [pid 263262:tid 263419] [client 103.159.192.142:49760] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPoWgAAASQ"]
[Wed Sep 30 01:08:16.260958 2026] [authz_core:error] [pid 263262:tid 263507] [client 52.231.30.175:38867] AH01630: client denied by server configuration: /home1/baychir1/public_html/wp-content/index.php
[Wed Sep 30 01:08:16.269225 2026] [security2:error] [pid 263262:tid 263475] [client 93.152.80.54:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1YJEcZ_148BjP8ZPoXAAAAVw"]
[Wed Sep 30 01:08:16.289636 2026] [security2:error] [pid 263262:tid 263406] [client 13.70.4.78:58945] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "walker23.com"] [uri "/c99.php"] [unique_id "ary1YJEcZ_148BjP8ZPoXwAAARc"]
[Wed Sep 30 01:08:16.305192 2026] [security2:error] [pid 263262:tid 263461] [client 116.197.133.25:64771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPoYgAAAU4"]
[Wed Sep 30 01:08:16.305305 2026] [security2:error] [pid 263262:tid 263461] [client 116.197.133.25:64771] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPoYgAAAU4"]
[Wed Sep 30 01:08:16.312329 2026] [security2:error] [pid 263262:tid 263478] [client 20.194.5.96:17182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/plugins.php"] [unique_id "ary1YJEcZ_148BjP8ZPoZQAAAV8"]
[Wed Sep 30 01:08:16.319918 2026] [security2:error] [pid 263262:tid 263407] [client 130.131.227.119:36438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ary1YJEcZ_148BjP8ZPoaQAAARg"]
[Wed Sep 30 01:08:16.323350 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.323763 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.389681 2026] [security2:error] [pid 263262:tid 263465] [client 103.241.204.139:51224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPobgAAAVI"]
[Wed Sep 30 01:08:16.389804 2026] [security2:error] [pid 263262:tid 263465] [client 103.241.204.139:51224] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1YJEcZ_148BjP8ZPobgAAAVI"]
[Wed Sep 30 01:08:16.410936 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.411196 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.445885 2026] [autoindex:error] [pid 263262:tid 263472] [client 52.231.30.175:38867] AH01276: Cannot serve directory /home1/baychir1/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:08:16.472565 2026] [security2:error] [pid 263262:tid 263503] [client 45.138.12.32:42204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.pon.qlp.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1YJEcZ_148BjP8ZPodQAAAXg"]
[Wed Sep 30 01:08:16.490356 2026] [security2:error] [pid 263262:tid 263519] [client 130.131.227.119:31905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/uploads/admin.php"] [unique_id "ary1YJEcZ_148BjP8ZPoeAAAAYg"]
[Wed Sep 30 01:08:16.493577 2026] [security2:error] [pid 263262:tid 263476] [client 168.100.149.106:34542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/themes/hello-elementor/assets/js/hello-frontend.js"] [unique_id "ary1YJEcZ_148BjP8ZPodwABXW0"]
[Wed Sep 30 01:08:16.504035 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.504350 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.505770 2026] [security2:error] [pid 263262:tid 263393] [client 20.219.19.141:45005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/mac.php"] [unique_id "ary1YJEcZ_148BjP8ZPofAAAAQo"]
[Wed Sep 30 01:08:16.512593 2026] [security2:error] [pid 263262:tid 263447] [client 20.58.177.98:33434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/gaxby.php"] [unique_id "ary1YJEcZ_148BjP8ZPofQAAAUA"]
[Wed Sep 30 01:08:16.534961 2026] [security2:error] [pid 263262:tid 263410] [client 82.102.18.222:59672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1YJEcZ_148BjP8ZPogAAAARs"]
[Wed Sep 30 01:08:16.593544 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.593937 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.627223 2026] [security2:error] [pid 263262:tid 263463] [client 13.70.4.78:63494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/ttivnife.php"] [unique_id "ary1YJEcZ_148BjP8ZPoigAAAVA"]
[Wed Sep 30 01:08:16.660776 2026] [autoindex:error] [pid 263262:tid 263485] [client 52.231.30.175:38867] AH01276: Cannot serve directory /home1/baychir1/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:08:16.681574 2026] [security2:error] [pid 263262:tid 263446] [client 167.160.173.241:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1YJEcZ_148BjP8ZPokAAAAT8"]
[Wed Sep 30 01:08:16.683744 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.684026 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.689561 2026] [access_compat:error] [pid 263262:tid 263450] [client 74.7.243.227:45018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzI4OTE1L2N3ZA==
[Wed Sep 30 01:08:16.689834 2026] [access_compat:error] [pid 263262:tid 263450] [client 74.7.243.227:45018] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMzI4OTE1L2N3ZA==
[Wed Sep 30 01:08:16.695439 2026] [core:error] [pid 263262:tid 263418] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:16.695454 2026] [core:error] [pid 263262:tid 263418] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:16.752934 2026] [security2:error] [pid 263262:tid 263406] [client 20.219.2.60:11869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws.php"] [unique_id "ary1YJEcZ_148BjP8ZPolQAAARc"]
[Wed Sep 30 01:08:16.769515 2026] [security2:error] [pid 263262:tid 263494] [client 74.225.148.80:60908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/dex.php"] [unique_id "ary1YJEcZ_148BjP8ZPomAAAAW8"]
[Wed Sep 30 01:08:16.775696 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.776030 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:30222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.795044 2026] [security2:error] [pid 263262:tid 263400] [client 4.196.65.241:27296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/UuAFIYGYKdefault.php"] [unique_id "ary1YJEcZ_148BjP8ZPonAAAARE"]
[Wed Sep 30 01:08:16.801974 2026] [security2:error] [pid 263262:tid 263398] [client 52.231.30.175:38867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1YJEcZ_148BjP8ZPonQAAAQ8"]
[Wed Sep 30 01:08:16.844110 2026] [security2:error] [pid 263262:tid 263465] [client 82.102.18.222:59684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1YJEcZ_148BjP8ZPoogAAAVI"]
[Wed Sep 30 01:08:16.856320 2026] [security2:error] [pid 263262:tid 263441] [client 130.131.227.119:1183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/z.php"] [unique_id "ary1YJEcZ_148BjP8ZPoowAAATo"]
[Wed Sep 30 01:08:16.862008 2026] [security2:error] [pid 263262:tid 263433] [client 216.73.216.46:30222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1YJEcZ_148BjP8ZPopQAAATI"]
[Wed Sep 30 01:08:16.880326 2026] [security2:error] [pid 263262:tid 263401] [client 20.58.177.98:33252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/dh9u7.php"] [unique_id "ary1YJEcZ_148BjP8ZPoqAAAARI"]
[Wed Sep 30 01:08:16.909464 2026] [security2:error] [pid 263262:tid 263503] [client 20.194.5.96:17205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/groud3.php"] [unique_id "ary1YJEcZ_148BjP8ZPorgAAAXg"]
[Wed Sep 30 01:08:16.954781 2026] [security2:error] [pid 263262:tid 263508] [client 13.70.4.78:51170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/admin.php/2P.php"] [unique_id "ary1YJEcZ_148BjP8ZPotwAAAX0"]
[Wed Sep 30 01:08:16.964519 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:16.964794 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:16.970015 2026] [security2:error] [pid 263262:tid 263460] [client 74.7.230.40:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "habeshacontacts.com"] [uri "/404.shtml"] [unique_id "ary1YJEcZ_148BjP8ZPouAAAAU0"]
[Wed Sep 30 01:08:16.984246 2026] [security2:error] [pid 263262:tid 263487] [client 74.7.230.40:37974] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "habeshacontacts.com"] [uri "/robots.txt"] [unique_id "ary1YJEcZ_148BjP8ZPosQABaBo"]
[Wed Sep 30 01:08:17.015957 2026] [security2:error] [pid 263262:tid 263436] [client 130.131.227.119:55492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/f35.php"] [unique_id "ary1YZEcZ_148BjP8ZPovQAAATU"]
[Wed Sep 30 01:08:17.050621 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.050926 2026] [access_compat:error] [pid 263262:tid 263435] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.073172 2026] [security2:error] [pid 263262:tid 263507] [client 52.231.30.175:32168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-admin/maint/index.php"] [unique_id "ary1YZEcZ_148BjP8ZPowwAAAXw"]
[Wed Sep 30 01:08:17.100027 2026] [security2:error] [pid 263262:tid 263484] [client 20.213.164.196:21346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/222.php"] [unique_id "ary1YZEcZ_148BjP8ZPoxQAAAWU"]
[Wed Sep 30 01:08:17.140307 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.140588 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:24049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.157733 2026] [security2:error] [pid 263262:tid 263418] [client 82.102.18.222:34610] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1YZEcZ_148BjP8ZPoygAAASM"]
[Wed Sep 30 01:08:17.177417 2026] [security2:error] [pid 263262:tid 263397] [client 130.131.227.119:1209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/file61.php"] [unique_id "ary1YZEcZ_148BjP8ZPozQAAAQ4"]
[Wed Sep 30 01:08:17.182372 2026] [access_compat:error] [pid 263262:tid 263496] [client 47.79.13.53:50656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:17.182682 2026] [access_compat:error] [pid 263262:tid 263496] [client 47.79.13.53:50656] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:17.191338 2026] [security2:error] [pid 263262:tid 263465] [client 15.252.178.110:56548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.arvanisocks.com"] [uri "/index.php"] [unique_id "ary1YZEcZ_148BjP8ZPo0wAAAVI"]
[Wed Sep 30 01:08:17.226679 2026] [security2:error] [pid 263262:tid 263447] [client 216.73.216.46:24049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1YZEcZ_148BjP8ZPo1gAAAUA"]
[Wed Sep 30 01:08:17.245705 2026] [security2:error] [pid 263262:tid 263452] [client 20.28.180.172:34279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/4cdf8c8db0index.php"] [unique_id "ary1YZEcZ_148BjP8ZPo2QAAAUU"]
[Wed Sep 30 01:08:17.255519 2026] [security2:error] [pid 263262:tid 263423] [client 20.204.42.136:42290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/w.php"] [unique_id "ary1YZEcZ_148BjP8ZPo3AAAASg"]
[Wed Sep 30 01:08:17.277853 2026] [security2:error] [pid 263262:tid 263516] [client 74.225.148.80:60907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/chosen.php"] [unique_id "ary1YZEcZ_148BjP8ZPo3QAAAYU"]
[Wed Sep 30 01:08:17.280912 2026] [security2:error] [pid 263262:tid 263415] [client 13.70.4.78:56460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/a.php"] [unique_id "ary1YZEcZ_148BjP8ZPo3gAAASA"]
[Wed Sep 30 01:08:17.308677 2026] [security2:error] [pid 263262:tid 263471] [client 13.70.4.78:49379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1YZEcZ_148BjP8ZPo4AAAAVg"]
[Wed Sep 30 01:08:17.325173 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.325464 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.332993 2026] [security2:error] [pid 263262:tid 263460] [client 130.131.227.119:1177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/mah.php"] [unique_id "ary1YZEcZ_148BjP8ZPo5gAAAU0"]
[Wed Sep 30 01:08:17.333251 2026] [http2:info] [pid 270884:tid 270884] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:08:17.417174 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.417585 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.458082 2026] [security2:error] [pid 263262:tid 263427] [client 20.194.5.96:17155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/gaxby.php"] [unique_id "ary1YZEcZ_148BjP8ZPpCAAAASw"]
[Wed Sep 30 01:08:17.487823 2026] [security2:error] [pid 263262:tid 263409] [client 130.131.227.119:1163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/mini.php"] [unique_id "ary1YZEcZ_148BjP8ZPpEgAAARo"]
[Wed Sep 30 01:08:17.504825 2026] [security2:error] [pid 263262:tid 263454] [client 20.28.180.172:18349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws.php"] [unique_id "ary1YZEcZ_148BjP8ZPpGQAAAUc"]
[Wed Sep 30 01:08:17.504879 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.505213 2026] [access_compat:error] [pid 263262:tid 263447] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.508980 2026] [security2:error] [pid 263262:tid 263498] [client 82.102.18.222:34622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1YZEcZ_148BjP8ZPpGgAAAXM"]
[Wed Sep 30 01:08:17.600466 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.600918 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.609576 2026] [security2:error] [pid 263262:tid 263484] [client 13.70.4.78:63506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/cord.php"] [unique_id "ary1YZEcZ_148BjP8ZPpJgAAAWU"]
[Wed Sep 30 01:08:17.645587 2026] [security2:error] [pid 263262:tid 263407] [client 130.131.227.119:55510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/v.php"] [unique_id "ary1YZEcZ_148BjP8ZPpLAAAARg"]
[Wed Sep 30 01:08:17.656667 2026] [security2:error] [pid 263262:tid 263383] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1YZEcZ_148BjP8ZPpLwABLnc"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D25511
[Wed Sep 30 01:08:17.681918 2026] [security2:error] [pid 263262:tid 263413] [client 13.70.4.78:49307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1YZEcZ_148BjP8ZPpMwAAAR4"]
[Wed Sep 30 01:08:17.687558 2026] [security2:error] [pid 263262:tid 263478] [client 20.219.19.141:65503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/myglu.php"] [unique_id "ary1YZEcZ_148BjP8ZPpNQAAAV8"]
[Wed Sep 30 01:08:17.695077 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.695533 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.754299 2026] [access_compat:error] [pid 263262:tid 263396] [client 47.79.13.28:52062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:17.754599 2026] [access_compat:error] [pid 263262:tid 263396] [client 47.79.13.28:52062] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:17.761213 2026] [security2:error] [pid 263262:tid 263414] [client 74.225.148.80:60909] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/1.php"] [unique_id "ary1YZEcZ_148BjP8ZPpOQAAAR8"]
[Wed Sep 30 01:08:17.761363 2026] [security2:error] [pid 263262:tid 263414] [client 74.225.148.80:60909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/1.php"] [unique_id "ary1YZEcZ_148BjP8ZPpOQAAAR8"]
[Wed Sep 30 01:08:17.781090 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.781342 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.794951 2026] [security2:error] [pid 263262:tid 263476] [client 130.131.227.119:55521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-admin/images/admin.php"] [unique_id "ary1YZEcZ_148BjP8ZPpPAAAAV0"]
[Wed Sep 30 01:08:17.825542 2026] [security2:error] [pid 270884:tid 271037] [client 20.28.180.172:29487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ORVX-55jkI7.php"] [unique_id "ary1YSGeq9LtYp4zuPOIgAAAABI"]
[Wed Sep 30 01:08:17.840774 2026] [security2:error] [pid 263262:tid 263457] [client 82.102.18.222:34636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1YZEcZ_148BjP8ZPpPQAAAUo"]
[Wed Sep 30 01:08:17.869968 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.870224 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.931476 2026] [security2:error] [pid 263262:tid 263450] [client 13.70.4.78:51138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/anom.php"] [unique_id "ary1YZEcZ_148BjP8ZPpQQAAAUM"]
[Wed Sep 30 01:08:17.959830 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:17.960109 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:17.965837 2026] [security2:error] [pid 263262:tid 263520] [client 130.131.227.119:8832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary1YZEcZ_148BjP8ZPpQwAAAYk"]
[Wed Sep 30 01:08:18.003163 2026] [security2:error] [pid 263262:tid 263478] [client 213.174.20.118:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1YZEcZ_148BjP8ZPpRwAAAV8"]
[Wed Sep 30 01:08:18.004518 2026] [security2:error] [pid 263262:tid 263403] [client 20.194.5.96:16607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/dh9u7.php"] [unique_id "ary1YpEcZ_148BjP8ZPpSAAAARQ"]
[Wed Sep 30 01:08:18.014927 2026] [security2:error] [pid 263262:tid 263474] [client 13.70.4.78:49393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1YpEcZ_148BjP8ZPpSQAAAVs"]
[Wed Sep 30 01:08:18.032885 2026] [security2:error] [pid 263262:tid 263427] [client 20.219.2.60:40715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1YpEcZ_148BjP8ZPpTAAAASw"]
[Wed Sep 30 01:08:18.051261 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.051558 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:47843] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.130425 2026] [security2:error] [pid 263262:tid 263402] [client 130.131.227.119:11410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-includes/Text/index.php"] [unique_id "ary1YpEcZ_148BjP8ZPpXAAAARM"]
[Wed Sep 30 01:08:18.131351 2026] [security2:error] [pid 270884:tid 271048] [client 20.58.177.98:33714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/yvnqcuic.php"] [unique_id "ary1YiGeq9LtYp4zuPOIhwAAAB0"]
[Wed Sep 30 01:08:18.136297 2026] [security2:error] [pid 263262:tid 263414] [client 216.73.216.46:47843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1YpEcZ_148BjP8ZPpXwAAAR8"]
[Wed Sep 30 01:08:18.182548 2026] [security2:error] [pid 263262:tid 263449] [client 82.102.18.222:34644] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1YpEcZ_148BjP8ZPpYAAAAUI"]
[Wed Sep 30 01:08:18.196565 2026] [security2:error] [pid 263262:tid 263476] [client 20.204.42.136:59888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "ary1YpEcZ_148BjP8ZPpYgAAAV0"]
[Wed Sep 30 01:08:18.227058 2026] [security2:error] [pid 270884:tid 271050] [client 74.225.148.80:54098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/radio.php"] [unique_id "ary1YiGeq9LtYp4zuPOIiQAAAB8"]
[Wed Sep 30 01:08:18.234442 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:36088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.234714 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:36088] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.244822 2026] [security2:error] [pid 270884:tid 271052] [client 13.70.4.78:51162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/plugins.php"] [unique_id "ary1YiGeq9LtYp4zuPOIiwAAACE"]
[Wed Sep 30 01:08:18.288853 2026] [security2:error] [pid 263262:tid 263403] [client 20.70.173.30:33378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-the.php"] [unique_id "ary1YpEcZ_148BjP8ZPpbwAAARQ"]
[Wed Sep 30 01:08:18.314153 2026] [core:error] [pid 263262:tid 263423] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:18.314172 2026] [core:error] [pid 263262:tid 263423] [client 130.131.227.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:18.319590 2026] [security2:error] [pid 263262:tid 263504] [client 216.73.216.46:36088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1YpEcZ_148BjP8ZPpfQAAAXk"]
[Wed Sep 30 01:08:18.338446 2026] [security2:error] [pid 263262:tid 263513] [client 37.41.16.35:52195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1YpEcZ_148BjP8ZPpfgAAAYI"]
[Wed Sep 30 01:08:18.338551 2026] [security2:error] [pid 263262:tid 263513] [client 37.41.16.35:52195] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1YpEcZ_148BjP8ZPpfgAAAYI"]
[Wed Sep 30 01:08:18.381059 2026] [security2:error] [pid 270884:tid 271055] [client 13.70.4.78:49372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/aa.php"] [unique_id "ary1YiGeq9LtYp4zuPOIjQAAACQ"]
[Wed Sep 30 01:08:18.386943 2026] [security2:error] [pid 263262:tid 263519] [client 49.37.102.248:50742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1YpEcZ_148BjP8ZPpgAAAAYg"]
[Wed Sep 30 01:08:18.387177 2026] [security2:error] [pid 263262:tid 263519] [client 49.37.102.248:50742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1YpEcZ_148BjP8ZPpgAAAAYg"]
[Wed Sep 30 01:08:18.417735 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.418108 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:23116] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.494702 2026] [security2:error] [pid 270884:tid 271060] [client 20.194.5.96:17320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/yvnqcuic.php"] [unique_id "ary1YiGeq9LtYp4zuPOIjwAAACk"]
[Wed Sep 30 01:08:18.495640 2026] [security2:error] [pid 263262:tid 263402] [client 130.131.227.119:1159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/wp-index.php"] [unique_id "ary1YpEcZ_148BjP8ZPpjAAAARM"]
[Wed Sep 30 01:08:18.499236 2026] [security2:error] [pid 263262:tid 263409] [client 168.100.149.41:24188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/happy-elementor-addons/assets/js/extension-equal-height.min.js"] [unique_id "ary1YpEcZ_148BjP8ZPpiwABGlU"]
[Wed Sep 30 01:08:18.501523 2026] [security2:error] [pid 263262:tid 263469] [client 216.73.216.46:23116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1YpEcZ_148BjP8ZPpjgAAAVY"]
[Wed Sep 30 01:08:18.505915 2026] [security2:error] [pid 263262:tid 263410] [client 82.102.18.222:34650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1YpEcZ_148BjP8ZPpjwAAARs"]
[Wed Sep 30 01:08:18.526348 2026] [security2:error] [pid 270884:tid 271061] [client 20.219.2.60:40717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1YiGeq9LtYp4zuPOIkAAAACo"]
[Wed Sep 30 01:08:18.559099 2026] [security2:error] [pid 270884:tid 271062] [client 13.70.4.78:8968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/zlwvxiyp.php"] [unique_id "ary1YiGeq9LtYp4zuPOIkQAAACs"]
[Wed Sep 30 01:08:18.591475 2026] [security2:error] [pid 263262:tid 263416] [client 20.219.19.141:29744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/aboutt.php"] [unique_id "ary1YpEcZ_148BjP8ZPplQAAASE"]
[Wed Sep 30 01:08:18.598030 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.598304 2026] [access_compat:error] [pid 263262:tid 263515] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.608601 2026] [security2:error] [pid 270884:tid 271067] [client 20.58.177.98:33720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/koiy.php"] [unique_id "ary1YiGeq9LtYp4zuPOIkwAAADA"]
[Wed Sep 30 01:08:18.644464 2026] [security2:error] [pid 263262:tid 263398] [client 20.70.173.30:41951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/chosen.php"] [unique_id "ary1YpEcZ_148BjP8ZPpmAAAAQ8"]
[Wed Sep 30 01:08:18.655750 2026] [security2:error] [pid 263262:tid 263433] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1YpEcZ_148BjP8ZPpmQAAATI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:18.667257 2026] [security2:error] [pid 263262:tid 263486] [client 130.131.227.119:11451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/ww2.php"] [unique_id "ary1YpEcZ_148BjP8ZPpmgAAAWc"]
[Wed Sep 30 01:08:18.689072 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.689330 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.712219 2026] [security2:error] [pid 270884:tid 271076] [client 74.225.148.80:60878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/blacks.php"] [unique_id "ary1YiGeq9LtYp4zuPOImAAAADk"]
[Wed Sep 30 01:08:18.780628 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.780894 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.820829 2026] [security2:error] [pid 270884:tid 271079] [client 130.131.227.119:1185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/7logs.php"] [unique_id "ary1YiGeq9LtYp4zuPOInQAAADw"]
[Wed Sep 30 01:08:18.838224 2026] [security2:error] [pid 263262:tid 263443] [client 82.102.18.222:34662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1YpEcZ_148BjP8ZPpoQAAATw"]
[Wed Sep 30 01:08:18.840444 2026] [security2:error] [pid 263262:tid 263519] [client 20.194.5.96:16888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/koiy.php"] [unique_id "ary1YpEcZ_148BjP8ZPpogAAAYg"]
[Wed Sep 30 01:08:18.850104 2026] [security2:error] [pid 263262:tid 263516] [client 13.70.4.78:49296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/z70.php"] [unique_id "ary1YpEcZ_148BjP8ZPpowAAAYU"]
[Wed Sep 30 01:08:18.871872 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.872123 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.873119 2026] [security2:error] [pid 263262:tid 263482] [client 13.70.4.78:8980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary1YpEcZ_148BjP8ZPppgAAAWM"]
[Wed Sep 30 01:08:18.912931 2026] [security2:error] [pid 263262:tid 263439] [client 20.213.164.196:55195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/media.php"] [unique_id "ary1YpEcZ_148BjP8ZPppwAAATg"]
[Wed Sep 30 01:08:18.951643 2026] [security2:error] [pid 263262:tid 263399] [client 74.7.175.177:44604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.gqa.jca.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1YpEcZ_148BjP8ZPpqQABEEM"]
[Wed Sep 30 01:08:18.952281 2026] [security2:error] [pid 270884:tid 271089] [client 20.58.177.98:33673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wordfence-waf.php"] [unique_id "ary1YiGeq9LtYp4zuPOInwAAAEY"]
[Wed Sep 30 01:08:18.960223 2026] [security2:error] [pid 263262:tid 263371] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1YpEcZ_148BjP8ZPprAABTWs"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=27df9e3778d29fa53df2ce1a566fd999
[Wed Sep 30 01:08:18.960242 2026] [security2:error] [pid 263262:tid 263371] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1YpEcZ_148BjP8ZPprAABTWs"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=27df9e3778d29fa53df2ce1a566fd999
[Wed Sep 30 01:08:18.962057 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:18.962327 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:18.982355 2026] [security2:error] [pid 263262:tid 263472] [client 130.131.227.119:31892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/ac.php"] [unique_id "ary1YpEcZ_148BjP8ZPprQAAAVk"]
[Wed Sep 30 01:08:19.029118 2026] [security2:error] [pid 270884:tid 271094] [client 20.219.2.60:11356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bmi.php"] [unique_id "ary1YyGeq9LtYp4zuPOIoAAAAEs"]
[Wed Sep 30 01:08:19.029682 2026] [security2:error] [pid 263262:tid 263280] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1Y5EcZ_148BjP8ZPprwABcBA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276140&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:19.029703 2026] [security2:error] [pid 263262:tid 263280] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1Y5EcZ_148BjP8ZPprwABcBA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276140&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:19.032924 2026] [security2:error] [pid 263262:tid 263449] [client 20.204.42.136:54700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/robot.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpsAAAAUI"]
[Wed Sep 30 01:08:19.056040 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.056492 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.086588 2026] [security2:error] [pid 263262:tid 263432] [client 20.219.2.60:26014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ccs.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpsgAAATE"]
[Wed Sep 30 01:08:19.142620 2026] [security2:error] [pid 263262:tid 263396] [client 130.131.227.119:55506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/ctex1.php"] [unique_id "ary1Y5EcZ_148BjP8ZPptgAAAQ0"]
[Wed Sep 30 01:08:19.144888 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.145137 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.163857 2026] [security2:error] [pid 263262:tid 263497] [client 82.102.18.222:34678] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1Y5EcZ_148BjP8ZPptwAAAXI"]
[Wed Sep 30 01:08:19.182744 2026] [security2:error] [pid 270884:tid 271098] [client 20.70.173.30:8154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/admin.php"] [unique_id "ary1YyGeq9LtYp4zuPOIowAAAE8"]
[Wed Sep 30 01:08:19.194709 2026] [security2:error] [pid 270884:tid 271100] [client 13.70.4.78:9015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary1YyGeq9LtYp4zuPOIpAAAAFE"]
[Wed Sep 30 01:08:19.212502 2026] [security2:error] [pid 263262:tid 263473] [client 74.225.148.80:60905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/alfa.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpuAAAAVo"]
[Wed Sep 30 01:08:19.220172 2026] [security2:error] [pid 270884:tid 271101] [client 20.28.180.172:62376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bmi.php"] [unique_id "ary1YyGeq9LtYp4zuPOIpQAAAFI"]
[Wed Sep 30 01:08:19.234930 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.235188 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.291555 2026] [security2:error] [pid 270884:tid 271102] [client 130.131.227.119:1167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/defaults.php"] [unique_id "ary1YyGeq9LtYp4zuPOIqQAAAFM"]
[Wed Sep 30 01:08:19.294690 2026] [authz_core:error] [pid 263262:tid 263493] [client 52.231.30.175:32213] AH01630: client denied by server configuration: /home1/baychir1/public_html/wp-content/uploads/index.php
[Wed Sep 30 01:08:19.326715 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.327011 2026] [access_compat:error] [pid 263262:tid 263408] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.327615 2026] [security2:error] [pid 263262:tid 263394] [client 20.58.177.98:33701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wp5.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpwQAAAQs"]
[Wed Sep 30 01:08:19.334475 2026] [security2:error] [pid 263262:tid 263487] [client 45.138.12.43:21808] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.yel.mhf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1Y5EcZ_148BjP8ZPpwgAAAWg"]
[Wed Sep 30 01:08:19.376079 2026] [http2:warn] [pid 251754:tid 251925] [client 52.167.144.206:62436] h2_stream(251754-280-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:19.419497 2026] [security2:error] [pid 270884:tid 271116] [client 4.240.25.22:33325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/ms-edit.php"] [unique_id "ary1YyGeq9LtYp4zuPOIqwAAAGE"]
[Wed Sep 30 01:08:19.427313 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.427826 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.432633 2026] [security2:error] [pid 263262:tid 263458] [client 52.231.30.175:32213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/matcha.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpxgAAAUs"]
[Wed Sep 30 01:08:19.446903 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.19.141:29779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wp-whe.php"] [unique_id "ary1YyGeq9LtYp4zuPOIrAAAAGM"]
[Wed Sep 30 01:08:19.450120 2026] [security2:error] [pid 270884:tid 271113] [client 130.131.227.119:55513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/domains.php"] [unique_id "ary1YyGeq9LtYp4zuPOIrQAAAF4"]
[Wed Sep 30 01:08:19.474006 2026] [security2:error] [pid 270884:tid 271112] [client 82.102.18.222:34682] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1YyGeq9LtYp4zuPOIrwAAAF0"]
[Wed Sep 30 01:08:19.515521 2026] [security2:error] [pid 270884:tid 271125] [client 13.70.4.78:51148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/admin.php/c.php"] [unique_id "ary1YyGeq9LtYp4zuPOIsgAAAGo"]
[Wed Sep 30 01:08:19.530201 2026] [security2:error] [pid 263262:tid 263292] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpzQABWRw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=1510&sid=1cb1d6bc81c9eb005de09fec296530c6
[Wed Sep 30 01:08:19.530239 2026] [security2:error] [pid 263262:tid 263292] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1Y5EcZ_148BjP8ZPpzQABWRw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=1510&sid=1cb1d6bc81c9eb005de09fec296530c6
[Wed Sep 30 01:08:19.561096 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.561372 2026] [access_compat:error] [pid 263262:tid 263409] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.600129 2026] [security2:error] [pid 270884:tid 271131] [client 20.219.2.60:26007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/set.php"] [unique_id "ary1YyGeq9LtYp4zuPOItAAAAHA"]
[Wed Sep 30 01:08:19.601312 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.601597 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.601779 2026] [security2:error] [pid 270884:tid 271130] [client 213.136.69.135:57401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/PHPMailer/POP3.php"] [unique_id "ary1YyGeq9LtYp4zuPOItQAAAG8"], referer: binance.com
[Wed Sep 30 01:08:19.645324 2026] [security2:error] [pid 263262:tid 263501] [client 130.131.227.119:31900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/dropdown.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp0QAAAXY"]
[Wed Sep 30 01:08:19.696875 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.697141 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.716963 2026] [security2:error] [pid 263262:tid 263500] [client 52.231.30.175:32140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/aboutt.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp3AAAAXU"]
[Wed Sep 30 01:08:19.756452 2026] [security2:error] [pid 270884:tid 271020] [client 20.58.177.98:32868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/em.php"] [unique_id "ary1YyGeq9LtYp4zuPOIvQAAAAE"]
[Wed Sep 30 01:08:19.766662 2026] [security2:error] [pid 263262:tid 263413] [client 122.173.27.10:9473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp3wAAAR4"]
[Wed Sep 30 01:08:19.766824 2026] [security2:error] [pid 263262:tid 263413] [client 122.173.27.10:9473] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp3wAAAR4"]
[Wed Sep 30 01:08:19.785007 2026] [security2:error] [pid 263262:tid 263511] [client 82.102.18.222:34684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.rch.hct.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1Y5EcZ_148BjP8ZPp4gAAAYA"]
[Wed Sep 30 01:08:19.787687 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.787965 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:65288] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.805948 2026] [security2:error] [pid 270884:tid 271034] [client 74.225.148.80:18757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1YyGeq9LtYp4zuPOIwQAAAA8"]
[Wed Sep 30 01:08:19.806140 2026] [security2:error] [pid 263262:tid 263457] [client 130.131.227.119:11401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/files/index.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp5AAAAUo"]
[Wed Sep 30 01:08:19.839785 2026] [security2:error] [pid 270884:tid 271025] [client 13.70.4.78:9009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/admin.php/go.php"] [unique_id "ary1YyGeq9LtYp4zuPOIwwAAAAY"]
[Wed Sep 30 01:08:19.844489 2026] [security2:error] [pid 270884:tid 271038] [client 20.204.42.136:59876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/sss.php"] [unique_id "ary1YyGeq9LtYp4zuPOIxAAAABM"]
[Wed Sep 30 01:08:19.871769 2026] [security2:error] [pid 263262:tid 263461] [client 216.73.216.46:65288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1Y5EcZ_148BjP8ZPp5gAAAU4"]
[Wed Sep 30 01:08:19.896622 2026] [security2:error] [pid 263262:tid 263516] [client 20.28.180.172:34249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/2rrtccj7.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp5wAAAYU"]
[Wed Sep 30 01:08:19.970494 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:19.970756 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:19.977224 2026] [security2:error] [pid 263262:tid 263399] [client 52.231.30.175:32221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/opsh.php"] [unique_id "ary1Y5EcZ_148BjP8ZPp6gAAARA"]
[Wed Sep 30 01:08:19.979477 2026] [security2:error] [pid 270884:tid 271044] [client 130.131.227.119:35031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "2.canadiancarloans.ca"] [uri "/flower.php"] [unique_id "ary1YyGeq9LtYp4zuPOIxwAAABk"]
[Wed Sep 30 01:08:20.055000 2026] [security2:error] [pid 263262:tid 263402] [client 13.70.4.78:49353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/f35.php"] [unique_id "ary1ZJEcZ_148BjP8ZPp7gAAARM"]
[Wed Sep 30 01:08:20.065123 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.065399 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.066882 2026] [security2:error] [pid 263262:tid 263469] [client 20.194.5.96:16866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wordfence-waf.php"] [unique_id "ary1ZJEcZ_148BjP8ZPp8AAAAVY"]
[Wed Sep 30 01:08:20.130367 2026] [security2:error] [pid 263262:tid 263501] [client 20.58.177.98:33694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/hp.php"] [unique_id "ary1ZJEcZ_148BjP8ZPp9AAAAXY"]
[Wed Sep 30 01:08:20.150755 2026] [security2:error] [pid 263262:tid 263515] [client 13.70.4.78:45386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/groud3.php"] [unique_id "ary1ZJEcZ_148BjP8ZPp9gAAAYQ"]
[Wed Sep 30 01:08:20.153576 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.153823 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:50635] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.179964 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:25991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/mode.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI2AAAACY"]
[Wed Sep 30 01:08:20.196712 2026] [security2:error] [pid 263262:tid 263449] [client 152.232.184.237:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1ZJEcZ_148BjP8ZPp-wAAAUI"]
[Wed Sep 30 01:08:20.203719 2026] [security2:error] [pid 263262:tid 263413] [client 114.119.136.203:34155] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartagrico.com"] [uri "/forum/little-witches-watch-online-bb9d5c"] [unique_id "ary1ZJEcZ_148BjP8ZPp_QAAAR4"], referer: http://www.smartagrico.com/forum/the-sign-of-the-four-cause-of-death-crossword-bb9d5c
[Wed Sep 30 01:08:20.214377 2026] [security2:error] [pid 270884:tid 271068] [client 168.100.149.139:63554] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/media-views.min.js"] [unique_id "ary1ZCGeq9LtYp4zuPOI2QAAMRQ"]
[Wed Sep 30 01:08:20.235241 2026] [security2:error] [pid 263262:tid 263486] [client 20.219.2.60:18831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/amax.php"] [unique_id "ary1ZJEcZ_148BjP8ZPp_wAAAWc"]
[Wed Sep 30 01:08:20.237990 2026] [security2:error] [pid 263262:tid 263398] [client 216.73.216.46:50635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1ZJEcZ_148BjP8ZPqAAAAAQ8"]
[Wed Sep 30 01:08:20.240280 2026] [security2:error] [pid 270884:tid 271080] [client 52.231.30.175:32133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/photo.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI3AAAAD0"]
[Wed Sep 30 01:08:20.255396 2026] [security2:error] [pid 270884:tid 271144] [client 203.122.45.246:64710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI3QAAAH0"]
[Wed Sep 30 01:08:20.255566 2026] [security2:error] [pid 270884:tid 271144] [client 203.122.45.246:64710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI3QAAAH0"]
[Wed Sep 30 01:08:20.270832 2026] [security2:error] [pid 270884:tid 271082] [client 20.194.30.107:1442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/dex.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI3gAAAD8"]
[Wed Sep 30 01:08:20.298862 2026] [security2:error] [pid 263262:tid 263466] [client 20.198.74.230:23566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wpxml.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqAgAAAVM"]
[Wed Sep 30 01:08:20.382650 2026] [security2:error] [pid 270884:tid 271101] [client 216.73.216.46:11987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1ZCGeq9LtYp4zuPOI4gAAAFI"]
[Wed Sep 30 01:08:20.384548 2026] [security2:error] [pid 263262:tid 263458] [client 13.70.4.78:49319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/adminfuns.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqBQAAAUs"]
[Wed Sep 30 01:08:20.403640 2026] [security2:error] [pid 270884:tid 271102] [client 74.225.148.80:54142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/b8.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI5wAAAFM"]
[Wed Sep 30 01:08:20.407560 2026] [security2:error] [pid 263262:tid 263487] [client 152.59.165.7:53400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqBwAAAWg"]
[Wed Sep 30 01:08:20.407733 2026] [security2:error] [pid 263262:tid 263487] [client 152.59.165.7:53400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqBwAAAWg"]
[Wed Sep 30 01:08:20.479565 2026] [security2:error] [pid 263262:tid 263399] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1ZJEcZ_148BjP8ZPqCAAAARA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:20.479957 2026] [security2:error] [pid 263262:tid 263460] [client 13.70.4.78:56488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/gaxby.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqCgAAAU0"]
[Wed Sep 30 01:08:20.486861 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.487160 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.491391 2026] [security2:error] [pid 263262:tid 263415] [client 168.100.149.76:53578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/mediaelement/mediaelement-migrate.min.js"] [unique_id "ary1ZJEcZ_148BjP8ZPqCwABIB4"]
[Wed Sep 30 01:08:20.509648 2026] [security2:error] [pid 263262:tid 263496] [client 52.231.30.175:32210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-fxxxx.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqDgAAAXE"]
[Wed Sep 30 01:08:20.571365 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.571647 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.608718 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.608991 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.624280 2026] [security2:error] [pid 263262:tid 263449] [client 20.58.177.98:33255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/wpuse.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqFAAAAUI"]
[Wed Sep 30 01:08:20.658108 2026] [security2:error] [pid 263262:tid 263509] [client 128.121.185.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1ZJEcZ_148BjP8ZPqFwAAAX4"]
[Wed Sep 30 01:08:20.683481 2026] [security2:error] [pid 263262:tid 263504] [client 20.213.164.196:21321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/24.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqGAAAAXk"]
[Wed Sep 30 01:08:20.694582 2026] [security2:error] [pid 270884:tid 271113] [client 20.204.42.136:61143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/or.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI6wAAAF4"]
[Wed Sep 30 01:08:20.699906 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.700165 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.703175 2026] [security2:error] [pid 270884:tid 271095] [client 20.70.173.30:19178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/wp-the.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI7AAAAEw"]
[Wed Sep 30 01:08:20.706089 2026] [security2:error] [pid 270884:tid 271122] [client 13.70.4.78:49297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/av.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI7QAAAGc"]
[Wed Sep 30 01:08:20.770698 2026] [security2:error] [pid 270884:tid 271085] [client 103.159.192.142:50238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI7wAAAEI"]
[Wed Sep 30 01:08:20.770838 2026] [security2:error] [pid 270884:tid 271085] [client 103.159.192.142:50238] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI7wAAAEI"]
[Wed Sep 30 01:08:20.775231 2026] [security2:error] [pid 263262:tid 263461] [client 52.231.30.175:32214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wp-filemannger4h.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqIgAAAU4"]
[Wed Sep 30 01:08:20.791371 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.791639 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.798108 2026] [security2:error] [pid 270884:tid 271133] [client 20.219.2.60:11330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bypltspd.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI8gAAAHI"]
[Wed Sep 30 01:08:20.810024 2026] [security2:error] [pid 270884:tid 271136] [client 13.70.4.78:58987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/dh9u7.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI8wAAAHU"]
[Wed Sep 30 01:08:20.880883 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.881163 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:20.884256 2026] [security2:error] [pid 270884:tid 271021] [client 74.225.148.80:60913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/xex.php"] [unique_id "ary1ZCGeq9LtYp4zuPOI9QAAAAI"]
[Wed Sep 30 01:08:20.945498 2026] [access_compat:error] [pid 270884:tid 271126] [client 47.79.13.172:47856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:20.945761 2026] [access_compat:error] [pid 270884:tid 271126] [client 47.79.13.172:47856] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:20.956731 2026] [security2:error] [pid 263262:tid 263401] [client 20.219.19.141:65489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/ssixta.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqLQAAARI"]
[Wed Sep 30 01:08:20.967331 2026] [security2:error] [pid 263262:tid 263410] [client 20.28.180.172:34301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/fsfrl.php"] [unique_id "ary1ZJEcZ_148BjP8ZPqLwAAARs"]
[Wed Sep 30 01:08:20.971265 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:20.971550 2026] [access_compat:error] [pid 263262:tid 263492] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.037824 2026] [security2:error] [pid 270884:tid 271033] [client 13.70.4.78:49378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/dex.php"] [unique_id "ary1ZSGeq9LtYp4zuPOI-AAAAA4"]
[Wed Sep 30 01:08:21.039093 2026] [security2:error] [pid 270884:tid 271027] [client 52.231.30.175:38888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/ffl.php"] [unique_id "ary1ZSGeq9LtYp4zuPOI-QAAAAg"]
[Wed Sep 30 01:08:21.064226 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.064662 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.084096 2026] [security2:error] [pid 263262:tid 263441] [client 4.240.25.22:63626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/0.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqMQAAATo"]
[Wed Sep 30 01:08:21.088993 2026] [security2:error] [pid 270884:tid 271145] [client 20.213.164.196:21188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/xwpg.php"] [unique_id "ary1ZSGeq9LtYp4zuPOI-wAAAH4"]
[Wed Sep 30 01:08:21.137784 2026] [security2:error] [pid 270884:tid 271039] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1ZSGeq9LtYp4zuPOI_gAAABQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:21.138683 2026] [security2:error] [pid 270884:tid 271036] [client 13.70.4.78:58959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/yvnqcuic.php"] [unique_id "ary1ZSGeq9LtYp4zuPOI_wAAABE"]
[Wed Sep 30 01:08:21.142302 2026] [security2:error] [pid 270884:tid 271045] [client 20.194.30.107:10046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp-the.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJAAAAABo"]
[Wed Sep 30 01:08:21.152909 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.153179 2026] [access_compat:error] [pid 263262:tid 263486] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.175955 2026] [security2:error] [pid 270884:tid 271132] [client 20.70.173.30:25312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJAgAAAHE"]
[Wed Sep 30 01:08:21.211705 2026] [security2:error] [pid 263262:tid 263511] [client 20.219.2.60:26073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ok.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqNwAAAYA"]
[Wed Sep 30 01:08:21.214684 2026] [security2:error] [pid 270884:tid 271099] [client 202.179.95.79:60646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJBgAAAFA"]
[Wed Sep 30 01:08:21.214833 2026] [security2:error] [pid 270884:tid 271099] [client 202.179.95.79:60646] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJBgAAAFA"]
[Wed Sep 30 01:08:21.244437 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.244727 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.252484 2026] [security2:error] [pid 263262:tid 263408] [client 20.194.5.96:16615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wp5.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqOwAAARk"]
[Wed Sep 30 01:08:21.304231 2026] [security2:error] [pid 263262:tid 263437] [client 52.231.30.175:32216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/koiy.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqPwAAATY"]
[Wed Sep 30 01:08:21.340061 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.340483 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.359201 2026] [security2:error] [pid 270884:tid 271080] [client 13.70.4.78:49383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/chosen.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJDgAAAD0"]
[Wed Sep 30 01:08:21.395630 2026] [security2:error] [pid 270884:tid 271079] [client 74.225.148.80:60921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/ass.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJEQAAADw"]
[Wed Sep 30 01:08:21.436369 2026] [security2:error] [pid 263262:tid 263414] [client 223.235.102.107:2748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqSQAAAR8"]
[Wed Sep 30 01:08:21.441514 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.441979 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.455482 2026] [security2:error] [pid 263262:tid 263414] [client 223.235.102.107:2748] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqSQAAAR8"]
[Wed Sep 30 01:08:21.482002 2026] [security2:error] [pid 270884:tid 271088] [client 13.70.4.78:56449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/koiy.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJFAAAAEU"]
[Wed Sep 30 01:08:21.531535 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.531966 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.590347 2026] [security2:error] [pid 263262:tid 263413] [client 20.70.173.30:33407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/baba.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqTgAAAR4"]
[Wed Sep 30 01:08:21.599609 2026] [security2:error] [pid 270884:tid 271098] [client 52.231.30.175:38879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/bnmtp.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJGAAAAE8"]
[Wed Sep 30 01:08:21.603552 2026] [security2:error] [pid 263262:tid 263420] [client 20.204.42.136:59895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/b8.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqUAAAASU"]
[Wed Sep 30 01:08:21.610176 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.610506 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.616086 2026] [security2:error] [pid 270884:tid 271096] [client 20.28.180.172:62381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bypltspd.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJGQAAAE0"]
[Wed Sep 30 01:08:21.700063 2026] [security2:error] [pid 270884:tid 271105] [client 20.219.2.60:40706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/zoo.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJGgAAAFY"]
[Wed Sep 30 01:08:21.701006 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.701278 2026] [access_compat:error] [pid 263262:tid 263437] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.718076 2026] [security2:error] [pid 270884:tid 271114] [client 20.219.19.141:29738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/tesla.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJGwAAAF8"]
[Wed Sep 30 01:08:21.746837 2026] [security2:error] [pid 263262:tid 263415] [client 13.70.4.78:49382] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/1.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqUwAAASA"]
[Wed Sep 30 01:08:21.746929 2026] [security2:error] [pid 263262:tid 263415] [client 13.70.4.78:49382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/1.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqUwAAASA"]
[Wed Sep 30 01:08:21.792218 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.792478 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.800504 2026] [security2:error] [pid 270884:tid 271118] [client 13.70.4.78:8964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wordfence-waf.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJIAAAAGM"]
[Wed Sep 30 01:08:21.813496 2026] [security2:error] [pid 270884:tid 271095] [client 103.168.66.101:16118] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "networkwestmichigan.com"] [uri "/wp/"] [unique_id "ary1ZSGeq9LtYp4zuPOJIgAAAEw"]
[Wed Sep 30 01:08:21.883906 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.884178 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.902432 2026] [security2:error] [pid 270884:tid 271135] [client 52.231.30.175:38866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/cwclass.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJKQAAAHQ"]
[Wed Sep 30 01:08:21.932372 2026] [security2:error] [pid 263262:tid 263479] [client 20.194.5.96:17215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/em.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqXAAAAWA"]
[Wed Sep 30 01:08:21.954179 2026] [security2:error] [pid 270884:tid 271031] [client 20.58.177.98:33696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/file18x.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJLAAAAAw"]
[Wed Sep 30 01:08:21.958428 2026] [security2:error] [pid 263262:tid 263399] [client 20.219.2.60:11351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/shell.php"] [unique_id "ary1ZZEcZ_148BjP8ZPqXwAAARA"]
[Wed Sep 30 01:08:21.974123 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:21.974379 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:21.977507 2026] [security2:error] [pid 270884:tid 271145] [client 74.225.148.80:18450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wsd.php"] [unique_id "ary1ZSGeq9LtYp4zuPOJLgAAAH4"]
[Wed Sep 30 01:08:22.036158 2026] [security2:error] [pid 270884:tid 271045] [client 189.6.8.251:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1ZiGeq9LtYp4zuPOJMQAAABo"]
[Wed Sep 30 01:08:22.065783 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.066067 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.134640 2026] [security2:error] [pid 263262:tid 263397] [client 13.70.4.78:51142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wp5.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqZgAAAQ4"]
[Wed Sep 30 01:08:22.142923 2026] [security2:error] [pid 270884:tid 271137] [client 103.168.66.101:16118] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "networkwestmichigan.com"] [uri "/wordpress/"] [unique_id "ary1ZiGeq9LtYp4zuPOJMwAAAHY"]
[Wed Sep 30 01:08:22.156331 2026] [security2:error] [pid 263262:tid 263432] [client 13.70.4.78:49356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/radio.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqaAAAATE"]
[Wed Sep 30 01:08:22.163137 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.163640 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.198858 2026] [security2:error] [pid 270884:tid 271067] [client 20.70.173.30:8173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/inputs.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJNAAAADA"]
[Wed Sep 30 01:08:22.199443 2026] [security2:error] [pid 270884:tid 271062] [client 4.240.25.22:33223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/media.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJNQAAACs"]
[Wed Sep 30 01:08:22.241599 2026] [security2:error] [pid 270884:tid 271024] [client 80.225.203.231:53690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.indoorenvironmentaltesting.com"] [uri "/.env"] [unique_id "ary1ZiGeq9LtYp4zuPOJNwAAAAU"]
[Wed Sep 30 01:08:22.244096 2026] [security2:error] [pid 263262:tid 263513] [client 52.231.30.175:32192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/123viva.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqagAAAYI"]
[Wed Sep 30 01:08:22.253875 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.254322 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.265930 2026] [security2:error] [pid 263262:tid 263413] [client 80.225.203.231:53750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.indoorenvironmentaltesting.com"] [uri "/.env.backup"] [unique_id "ary1ZpEcZ_148BjP8ZPqbgAAAR4"]
[Wed Sep 30 01:08:22.270149 2026] [security2:error] [pid 270884:tid 271142] [client 20.219.2.60:26048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gaza.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJPAAAAHs"]
[Wed Sep 30 01:08:22.278076 2026] [security2:error] [pid 263262:tid 263451] [client 80.225.203.231:53714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.indoorenvironmentaltesting.com"] [uri "/.env.old"] [unique_id "ary1ZpEcZ_148BjP8ZPqdgAAAUQ"]
[Wed Sep 30 01:08:22.278523 2026] [security2:error] [pid 263262:tid 263486] [client 80.225.203.231:53700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.indoorenvironmentaltesting.com"] [uri "/.env.bak"] [unique_id "ary1ZpEcZ_148BjP8ZPqdwAAAWc"]
[Wed Sep 30 01:08:22.281599 2026] [security2:error] [pid 263262:tid 263420] [client 80.225.203.231:53734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.indoorenvironmentaltesting.com"] [uri "/.env.swp"] [unique_id "ary1ZpEcZ_148BjP8ZPqeQAAASU"]
[Wed Sep 30 01:08:22.311225 2026] [security2:error] [pid 263262:tid 263466] [client 20.58.177.98:33676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/123viva.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqfQAAAVM"]
[Wed Sep 30 01:08:22.342861 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.343122 2026] [access_compat:error] [pid 263262:tid 263498] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.367441 2026] [security2:error] [pid 270884:tid 271097] [client 20.28.180.172:29594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/02d4cc85caindex.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJSAAAAE4"]
[Wed Sep 30 01:08:22.407044 2026] [security2:error] [pid 263262:tid 263326] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqggABfj4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1538
[Wed Sep 30 01:08:22.407084 2026] [security2:error] [pid 263262:tid 263326] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqggABfj4"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1538
[Wed Sep 30 01:08:22.414644 2026] [security2:error] [pid 270884:tid 271025] [client 20.194.5.96:17183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/hp.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJSgAAAAY"]
[Wed Sep 30 01:08:22.421208 2026] [security2:error] [pid 263262:tid 263519] [client 45.138.12.43:51384] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.yel.mhf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1ZpEcZ_148BjP8ZPqgwAAAYg"]
[Wed Sep 30 01:08:22.439923 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.440356 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.469676 2026] [security2:error] [pid 263262:tid 263516] [client 13.70.4.78:56473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/em.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqhgAAAYU"]
[Wed Sep 30 01:08:22.484703 2026] [security2:error] [pid 270884:tid 271134] [client 116.193.128.26:49457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJSwAAAHM"]
[Wed Sep 30 01:08:22.484936 2026] [security2:error] [pid 270884:tid 271134] [client 116.193.128.26:49457] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJSwAAAHM"]
[Wed Sep 30 01:08:22.485730 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.2.60:18820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/66.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJTAAAAEY"]
[Wed Sep 30 01:08:22.496147 2026] [security2:error] [pid 270884:tid 271037] [client 168.100.149.34:16454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js"] [unique_id "ary1ZiGeq9LtYp4zuPOJTQAAEiM"]
[Wed Sep 30 01:08:22.515528 2026] [security2:error] [pid 270884:tid 271107] [client 74.225.148.80:18453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/BDKR28WP.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJTgAAAFg"]
[Wed Sep 30 01:08:22.522791 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.523105 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.568989 2026] [security2:error] [pid 263262:tid 263402] [client 13.70.4.78:49391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/blacks.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqjAAAARM"]
[Wed Sep 30 01:08:22.587913 2026] [security2:error] [pid 263262:tid 263474] [client 52.231.30.175:32233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/wso2024.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqjQAAAVs"]
[Wed Sep 30 01:08:22.608017 2026] [security2:error] [pid 270884:tid 271103] [client 20.219.19.141:29740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/222.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJUgAAAFQ"]
[Wed Sep 30 01:08:22.614007 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.614266 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.633294 2026] [security2:error] [pid 270884:tid 271090] [client 160.202.53.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1ZiGeq9LtYp4zuPOJVAAAAEc"]
[Wed Sep 30 01:08:22.634291 2026] [security2:error] [pid 270884:tid 271122] [client 20.58.177.98:33442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.yourkatana.com"] [uri "/Components.update.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJVQAAAGc"]
[Wed Sep 30 01:08:22.658034 2026] [security2:error] [pid 270884:tid 271115] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1ZiGeq9LtYp4zuPOJWAAAAGA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:22.704226 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.704642 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.740126 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:40741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/grsiuk.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJXwAAABo"]
[Wed Sep 30 01:08:22.766483 2026] [security2:error] [pid 263262:tid 263336] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqlgABREg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D55857
[Wed Sep 30 01:08:22.766509 2026] [security2:error] [pid 263262:tid 263336] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqlgABREg"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D55857
[Wed Sep 30 01:08:22.785157 2026] [security2:error] [pid 263262:tid 263481] [client 13.70.4.78:56489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/hp.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqlwAAAWI"]
[Wed Sep 30 01:08:22.795313 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.795583 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.801389 2026] [security2:error] [pid 270884:tid 271117] [client 20.213.164.196:44316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/blacks.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJYAAAAGI"]
[Wed Sep 30 01:08:22.817378 2026] [security2:error] [pid 263262:tid 263510] [client 43.227.131.37:13278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqmQAAAX8"]
[Wed Sep 30 01:08:22.817482 2026] [security2:error] [pid 263262:tid 263510] [client 43.227.131.37:13278] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqmQAAAX8"]
[Wed Sep 30 01:08:22.853610 2026] [security2:error] [pid 270884:tid 271076] [client 152.56.240.85:54582] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1ZiGeq9LtYp4zuPOJMgAAADk"]
[Wed Sep 30 01:08:22.871706 2026] [security2:error] [pid 263262:tid 263399] [client 52.231.30.175:32194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/scora.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqmwAAARA"]
[Wed Sep 30 01:08:22.882857 2026] [security2:error] [pid 270884:tid 271038] [client 103.168.66.101:16118] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "networkwestmichigan.com"] [uri "/blog/"] [unique_id "ary1ZiGeq9LtYp4zuPOJZwAAABM"]
[Wed Sep 30 01:08:22.885137 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.885418 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.914742 2026] [security2:error] [pid 263262:tid 263427] [client 20.194.96.176:32756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqoQAAASw"]
[Wed Sep 30 01:08:22.959488 2026] [security2:error] [pid 263262:tid 263511] [client 223.181.30.165:28950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqpgAAAYA"]
[Wed Sep 30 01:08:22.959613 2026] [security2:error] [pid 263262:tid 263511] [client 223.181.30.165:28950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1ZpEcZ_148BjP8ZPqpgAAAYA"]
[Wed Sep 30 01:08:22.982141 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:22.982569 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:22.992362 2026] [access_compat:error] [pid 270884:tid 271026] [client 47.79.206.243:18442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:08:22.992702 2026] [access_compat:error] [pid 270884:tid 271026] [client 47.79.206.243:18442] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:08:23.004734 2026] [security2:error] [pid 270884:tid 271050] [client 74.225.148.80:54124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wmore1.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJbwAAAB8"]
[Wed Sep 30 01:08:23.050337 2026] [security2:error] [pid 270884:tid 271134] [client 20.204.42.136:58511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/xex.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJcAAAAHM"]
[Wed Sep 30 01:08:23.068330 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.068599 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.089703 2026] [security2:error] [pid 270884:tid 271107] [client 13.70.4.78:49346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/alfa.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJdAAAAFg"]
[Wed Sep 30 01:08:23.097463 2026] [security2:error] [pid 270884:tid 271108] [client 13.70.4.78:51169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/wpuse.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJdQAAAFk"]
[Wed Sep 30 01:08:23.111483 2026] [security2:error] [pid 263262:tid 263491] [client 182.69.182.151:11401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqrgAAAWw"]
[Wed Sep 30 01:08:23.111618 2026] [security2:error] [pid 263262:tid 263491] [client 182.69.182.151:11401] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqrgAAAWw"]
[Wed Sep 30 01:08:23.134575 2026] [security2:error] [pid 263262:tid 263513] [client 52.231.30.175:38788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "torontopaindoctor.ca"] [uri "/404.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqsAAAAYI"]
[Wed Sep 30 01:08:23.164878 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.165150 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.231974 2026] [security2:error] [pid 270884:tid 271083] [client 20.194.5.96:17306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wpuse.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJeQAAAEA"]
[Wed Sep 30 01:08:23.245433 2026] [security2:error] [pid 263262:tid 263408] [client 20.219.2.60:26044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-act.php"] [unique_id "ary1Z5EcZ_148BjP8ZPquQAAARk"]
[Wed Sep 30 01:08:23.253330 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.253782 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.342687 2026] [security2:error] [pid 263262:tid 263313] [remote 220.181.108.105:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqvwABEjE"]
[Wed Sep 30 01:08:23.345407 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.345669 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.348960 2026] [security2:error] [pid 270884:tid 271127] [client 20.219.2.60:11335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-links-opml.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJgAAAAGw"]
[Wed Sep 30 01:08:23.425751 2026] [security2:error] [pid 263262:tid 263493] [client 13.70.4.78:50231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wp_blog_footer.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqxAAAAW4"]
[Wed Sep 30 01:08:23.428081 2026] [security2:error] [pid 263262:tid 263491] [client 13.70.4.78:56478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/file18x.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqxQAAAWw"]
[Wed Sep 30 01:08:23.447960 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.448386 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:6217] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.508694 2026] [security2:error] [pid 263262:tid 263397] [client 74.225.148.80:54082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/z60.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqygAAAQ4"]
[Wed Sep 30 01:08:23.530730 2026] [security2:error] [pid 263262:tid 263407] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1Z5EcZ_148BjP8ZPqzAAAARg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:23.533528 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.533951 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:16475] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.612745 2026] [security2:error] [pid 263262:tid 263413] [client 216.73.216.46:16475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1Z5EcZ_148BjP8ZPq0AAAAR4"]
[Wed Sep 30 01:08:23.615898 2026] [access_compat:error] [pid 270884:tid 271094] [client 47.79.13.27:56476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:23.616322 2026] [access_compat:error] [pid 270884:tid 271094] [client 47.79.13.27:56476] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:23.681672 2026] [security2:error] [pid 263262:tid 263427] [client 106.214.2.47:29928] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqzgAAASw"]
[Wed Sep 30 01:08:23.681877 2026] [security2:error] [pid 263262:tid 263427] [client 106.214.2.47:29928] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1Z5EcZ_148BjP8ZPqzgAAASw"]
[Wed Sep 30 01:08:23.703537 2026] [security2:error] [pid 263262:tid 263498] [client 216.73.216.46:6217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1Z5EcZ_148BjP8ZPq1AAAAXM"]
[Wed Sep 30 01:08:23.755301 2026] [security2:error] [pid 270884:tid 271132] [client 13.70.4.78:8973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/123viva.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJlAAAAHE"]
[Wed Sep 30 01:08:23.803740 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.2.60:26039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/cu.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJmAAAAFI"]
[Wed Sep 30 01:08:23.846749 2026] [security2:error] [pid 270884:tid 271050] [client 4.240.25.22:63624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/pJPoKA.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJmwAAAB8"]
[Wed Sep 30 01:08:23.851823 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.852090 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.870064 2026] [security2:error] [pid 270884:tid 271072] [client 74.7.244.1:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpcontacts.christylthom.com"] [uri "/___proxy_subdomain_cpcontacts/404.shtml"] [unique_id "ary1ZyGeq9LtYp4zuPOJnAAAADU"]
[Wed Sep 30 01:08:23.872147 2026] [security2:error] [pid 263262:tid 263479] [client 74.7.244.1:35588] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpcontacts.christylthom.com"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "ary1Z5EcZ_148BjP8ZPq1wABYAA"]
[Wed Sep 30 01:08:23.876628 2026] [security2:error] [pid 270884:tid 271138] [client 13.70.4.78:49303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/b8.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJnQAAAHc"]
[Wed Sep 30 01:08:23.891579 2026] [security2:error] [pid 270884:tid 271134] [client 20.213.164.196:55227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/class-wp-http-client.php"] [unique_id "ary1ZyGeq9LtYp4zuPOJngAAAHM"]
[Wed Sep 30 01:08:23.943942 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.944257 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:23.987597 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:23.988048 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:24.010014 2026] [security2:error] [pid 270884:tid 271023] [client 74.225.148.80:18493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/24.php"] [unique_id "ary1aCGeq9LtYp4zuPOJowAAAAQ"]
[Wed Sep 30 01:08:24.028120 2026] [security2:error] [pid 270884:tid 271083] [client 20.70.173.30:7493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/one.php"] [unique_id "ary1aCGeq9LtYp4zuPOJpAAAAEA"]
[Wed Sep 30 01:08:24.074893 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:24.075158 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:50024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:24.082073 2026] [security2:error] [pid 270884:tid 271104] [client 92.71.61.116:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1aCGeq9LtYp4zuPOJqQAAAFU"]
[Wed Sep 30 01:08:24.084234 2026] [security2:error] [pid 270884:tid 271032] [client 20.28.180.172:60297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/shell.php"] [unique_id "ary1aCGeq9LtYp4zuPOJqgAAAA0"]
[Wed Sep 30 01:08:24.088087 2026] [security2:error] [pid 263262:tid 263493] [client 13.70.4.78:63512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "walker23.com"] [uri "/Components.update.php"] [unique_id "ary1aJEcZ_148BjP8ZPq4AAAAW4"]
[Wed Sep 30 01:08:24.133748 2026] [security2:error] [pid 263262:tid 263457] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1aJEcZ_148BjP8ZPq5AAAAUo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:24.168319 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:24.168585 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:24.192583 2026] [security2:error] [pid 270884:tid 271117] [client 20.194.30.107:30413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/baba.php"] [unique_id "ary1aCGeq9LtYp4zuPOJuQAAAGI"]
[Wed Sep 30 01:08:24.294298 2026] [security2:error] [pid 270884:tid 271136] [client 103.168.67.253:29918] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dklhardwareconstruction.com"] [uri "/rest/settings"] [unique_id "ary1aCGeq9LtYp4zuPOJvQAAAHU"]
[Wed Sep 30 01:08:24.296090 2026] [security2:error] [pid 270884:tid 271098] [client 20.219.2.60:26086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/8.php"] [unique_id "ary1aCGeq9LtYp4zuPOJvgAAAE8"]
[Wed Sep 30 01:08:24.313977 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:62283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:24.314409 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:62283] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:24.341266 2026] [security2:error] [pid 270884:tid 271077] [client 216.73.216.46:50024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJwAAAADo"]
[Wed Sep 30 01:08:24.377505 2026] [security2:error] [pid 270884:tid 271067] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJwwAAADA"]
[Wed Sep 30 01:08:24.392166 2026] [security2:error] [pid 270884:tid 271026] [client 4.240.25.22:33293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/wpxml.php"] [unique_id "ary1aCGeq9LtYp4zuPOJxwAAAAc"]
[Wed Sep 30 01:08:24.392395 2026] [security2:error] [pid 270884:tid 271050] [client 13.70.4.78:49306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/xex.php"] [unique_id "ary1aCGeq9LtYp4zuPOJxgAAAB8"]
[Wed Sep 30 01:08:24.414388 2026] [security2:error] [pid 263262:tid 263459] [client 170.244.211.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1aJEcZ_148BjP8ZPq7gAAAUw"]
[Wed Sep 30 01:08:24.433412 2026] [security2:error] [pid 270884:tid 271036] [client 216.73.216.46:62283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJyAAAABE"]
[Wed Sep 30 01:08:24.481028 2026] [security2:error] [pid 270884:tid 271109] [client 74.225.148.80:54118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/xxw.php"] [unique_id "ary1aCGeq9LtYp4zuPOJygAAAFo"]
[Wed Sep 30 01:08:24.488789 2026] [security2:error] [pid 270884:tid 271066] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJywAAAC8"]
[Wed Sep 30 01:08:24.489249 2026] [security2:error] [pid 263262:tid 263437] [client 168.100.149.13:15466] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/mystickyelements/intl-tel-input-src/build/js/intlTelInput.js"] [unique_id "ary1aJEcZ_148BjP8ZPq8AABNjQ"]
[Wed Sep 30 01:08:24.502633 2026] [security2:error] [pid 263262:tid 263481] [client 20.70.173.30:33349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/images.php"] [unique_id "ary1aJEcZ_148BjP8ZPq8QAAAWI"]
[Wed Sep 30 01:08:24.521749 2026] [security2:error] [pid 263262:tid 263510] [client 4.240.25.22:43811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/abcd.php"] [unique_id "ary1aJEcZ_148BjP8ZPq8gAAAX8"]
[Wed Sep 30 01:08:24.535608 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:24.535860 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:24.547029 2026] [security2:error] [pid 270884:tid 271079] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJzgAAADw"]
[Wed Sep 30 01:08:24.594358 2026] [security2:error] [pid 270884:tid 271107] [client 20.204.42.136:59871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/CAE-2.5.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ0AAAAFg"]
[Wed Sep 30 01:08:24.597216 2026] [security2:error] [pid 270884:tid 271110] [client 20.219.2.60:18833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/public/file.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ0QAAAFs"]
[Wed Sep 30 01:08:24.600927 2026] [security2:error] [pid 270884:tid 271143] [client 20.194.5.96:16577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/sm.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ0wAAAHw"]
[Wed Sep 30 01:08:24.605613 2026] [security2:error] [pid 270884:tid 271111] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJ0gAAAFw"]
[Wed Sep 30 01:08:24.654475 2026] [security2:error] [pid 270884:tid 271092] [client 20.70.173.30:19169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/baba.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ1AAAAEk"]
[Wed Sep 30 01:08:24.662631 2026] [security2:error] [pid 270884:tid 271142] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJ1QAAAHs"]
[Wed Sep 30 01:08:24.684487 2026] [security2:error] [pid 270884:tid 271140] [client 20.219.2.60:11362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ1gAAAHk"]
[Wed Sep 30 01:08:24.721782 2026] [security2:error] [pid 270884:tid 271091] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aCGeq9LtYp4zuPOJ2AAAAEg"]
[Wed Sep 30 01:08:24.798521 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.2.60:26027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws60.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ2gAAAHg"]
[Wed Sep 30 01:08:24.807657 2026] [security2:error] [pid 263262:tid 263407] [client 45.138.12.32:29590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gxh.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1aJEcZ_148BjP8ZPq-wAAARg"]
[Wed Sep 30 01:08:24.838530 2026] [security2:error] [pid 263262:tid 263461] [client 20.28.180.172:34241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wyzer3.php"] [unique_id "ary1aJEcZ_148BjP8ZPq_QAAAU4"]
[Wed Sep 30 01:08:24.851100 2026] [security2:error] [pid 270884:tid 271046] [client 92.114.62.84:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1aCGeq9LtYp4zuPOJ3QAAABs"]
[Wed Sep 30 01:08:24.884656 2026] [security2:error] [pid 270884:tid 271039] [client 20.219.19.141:29808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/media.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ4AAAABQ"]
[Wed Sep 30 01:08:24.886614 2026] [access_compat:error] [pid 263262:tid 263491] [client 74.7.243.227:60250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvOTk2ODIxL2N3ZA==
[Wed Sep 30 01:08:24.886985 2026] [access_compat:error] [pid 263262:tid 263491] [client 74.7.243.227:60250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvOTk2ODIxL2N3ZA==
[Wed Sep 30 01:08:24.913084 2026] [security2:error] [pid 270884:tid 271099] [client 94.176.51.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1aCGeq9LtYp4zuPOJ4gAAAFA"]
[Wed Sep 30 01:08:24.913916 2026] [access_compat:error] [pid 263262:tid 263474] [client 47.79.13.64:48814] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:24.914358 2026] [access_compat:error] [pid 263262:tid 263474] [client 47.79.13.64:48814] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:24.936913 2026] [security2:error] [pid 270884:tid 271093] [client 13.70.4.78:49369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/ass.php"] [unique_id "ary1aCGeq9LtYp4zuPOJ5AAAAEo"]
[Wed Sep 30 01:08:24.941841 2026] [access_compat:error] [pid 270884:tid 271070] [client 47.79.13.172:38798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:24.942103 2026] [access_compat:error] [pid 270884:tid 271070] [client 47.79.13.172:38798] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:25.022109 2026] [security2:error] [pid 270884:tid 271077] [client 74.225.148.80:18492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/bnmtp.php"] [unique_id "ary1aSGeq9LtYp4zuPOJ6AAAADo"]
[Wed Sep 30 01:08:25.051412 2026] [security2:error] [pid 270884:tid 271090] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOJ6gAAAEc"]
[Wed Sep 30 01:08:25.130943 2026] [security2:error] [pid 270884:tid 271023] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOJ7wAAAAQ"]
[Wed Sep 30 01:08:25.202868 2026] [security2:error] [pid 270884:tid 271032] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOJ8wAAAA0"]
[Wed Sep 30 01:08:25.225230 2026] [security2:error] [pid 270884:tid 271038] [client 20.28.180.172:62360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-links-opml.php"] [unique_id "ary1aSGeq9LtYp4zuPOJ9QAAABM"]
[Wed Sep 30 01:08:25.263005 2026] [security2:error] [pid 270884:tid 271046] [client 13.70.4.78:49354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wsd.php"] [unique_id "ary1aSGeq9LtYp4zuPOJ_QAAABs"]
[Wed Sep 30 01:08:25.292216 2026] [security2:error] [pid 263262:tid 263457] [client 20.204.42.136:58508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/ass.php"] [unique_id "ary1aZEcZ_148BjP8ZPrCwAAAUo"]
[Wed Sep 30 01:08:25.313730 2026] [security2:error] [pid 270884:tid 271138] [client 20.219.2.60:26052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/vanda.php"] [unique_id "ary1aSGeq9LtYp4zuPOKAAAAAHc"]
[Wed Sep 30 01:08:25.379865 2026] [security2:error] [pid 270884:tid 271118] [client 20.213.164.196:21200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/zoo2.php"] [unique_id "ary1aSGeq9LtYp4zuPOKAQAAAGM"]
[Wed Sep 30 01:08:25.417628 2026] [security2:error] [pid 270884:tid 271093] [client 103.168.67.253:29920] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dklhardwareconstruction.com"] [uri "/livewire/update"] [unique_id "ary1aSGeq9LtYp4zuPOKAwAAAEo"]
[Wed Sep 30 01:08:25.432367 2026] [security2:error] [pid 270884:tid 271135] [client 223.181.60.167:3882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1aSGeq9LtYp4zuPOKBQAAAHQ"]
[Wed Sep 30 01:08:25.432564 2026] [security2:error] [pid 270884:tid 271135] [client 223.181.60.167:3882] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1aSGeq9LtYp4zuPOKBQAAAHQ"]
[Wed Sep 30 01:08:25.483770 2026] [security2:error] [pid 263262:tid 263427] [client 20.70.173.30:35596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/222.php"] [unique_id "ary1aZEcZ_148BjP8ZPrEAAAASw"]
[Wed Sep 30 01:08:25.540066 2026] [security2:error] [pid 270884:tid 271090] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOKCgAAAEc"]
[Wed Sep 30 01:08:25.555310 2026] [security2:error] [pid 263262:tid 263384] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1aZEcZ_148BjP8ZPrEgABgng"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276142&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:25.555343 2026] [security2:error] [pid 263262:tid 263384] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1aZEcZ_148BjP8ZPrEgABgng"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=276142&sid=6d4b620e88fe1e16721fecf2ce0fb01b
[Wed Sep 30 01:08:25.612411 2026] [security2:error] [pid 270884:tid 271066] [client 74.225.148.80:54116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/ebkid.php"] [unique_id "ary1aSGeq9LtYp4zuPOKEAAAAC8"]
[Wed Sep 30 01:08:25.618612 2026] [security2:error] [pid 270884:tid 271025] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOKDwAAAAY"]
[Wed Sep 30 01:08:25.636261 2026] [security2:error] [pid 263262:tid 263496] [client 20.194.5.96:16610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/mknobgkg.php"] [unique_id "ary1aZEcZ_148BjP8ZPrFQAAAXE"]
[Wed Sep 30 01:08:25.694020 2026] [security2:error] [pid 270884:tid 271086] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOKEgAAAEM"]
[Wed Sep 30 01:08:25.727626 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:25.727893 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:53880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:25.774357 2026] [security2:error] [pid 270884:tid 271032] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOKFgAAAA0"]
[Wed Sep 30 01:08:25.784238 2026] [security2:error] [pid 263262:tid 263437] [client 13.70.4.78:49363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/BDKR28WP.php"] [unique_id "ary1aZEcZ_148BjP8ZPrGQAAATY"]
[Wed Sep 30 01:08:25.840357 2026] [security2:error] [pid 270884:tid 271140] [client 20.219.2.60:26018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/domains.php"] [unique_id "ary1aSGeq9LtYp4zuPOKGwAAAHk"]
[Wed Sep 30 01:08:25.850614 2026] [security2:error] [pid 270884:tid 271020] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1aSGeq9LtYp4zuPOKHAAAAAE"]
[Wed Sep 30 01:08:25.869207 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:25.869711 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:25.884109 2026] [security2:error] [pid 263262:tid 263379] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1aZEcZ_148BjP8ZPrGwABOnM"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=284701
[Wed Sep 30 01:08:25.884498 2026] [security2:error] [pid 263262:tid 263379] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1aZEcZ_148BjP8ZPrGwABOnM"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=284701
[Wed Sep 30 01:08:25.959976 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:25.960253 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:25.982838 2026] [security2:error] [pid 263262:tid 263420] [client 4.240.25.22:46321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/admin.php"] [unique_id "ary1aZEcZ_148BjP8ZPrHQAAASU"]
[Wed Sep 30 01:08:26.002739 2026] [security2:error] [pid 270884:tid 271139] [client 45.138.12.32:42398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gsk.qjd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1aiGeq9LtYp4zuPOKHwAAAHg"]
[Wed Sep 30 01:08:26.029585 2026] [security2:error] [pid 263262:tid 263427] [client 20.194.5.96:16624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/dairg.php"] [unique_id "ary1apEcZ_148BjP8ZPrHwAAASw"]
[Wed Sep 30 01:08:26.055881 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.056316 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.075652 2026] [security2:error] [pid 270884:tid 271103] [client 201.32.215.149:5701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKIgAAAFQ"]
[Wed Sep 30 01:08:26.075777 2026] [security2:error] [pid 270884:tid 271103] [client 201.32.215.149:5701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKIgAAAFQ"]
[Wed Sep 30 01:08:26.089462 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.089791 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.104242 2026] [security2:error] [pid 263262:tid 263466] [client 74.225.148.80:54094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/133.php"] [unique_id "ary1apEcZ_148BjP8ZPrJQAAAVM"]
[Wed Sep 30 01:08:26.141787 2026] [security2:error] [pid 270884:tid 271129] [client 216.73.216.46:53880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1aiGeq9LtYp4zuPOKJQAAAG4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU5
[Wed Sep 30 01:08:26.143439 2026] [security2:error] [pid 270884:tid 271034] [client 13.70.4.78:49398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wmore1.php"] [unique_id "ary1aiGeq9LtYp4zuPOKJgAAAA8"]
[Wed Sep 30 01:08:26.183405 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.183893 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.273518 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.273785 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.368146 2026] [security2:error] [pid 270884:tid 271023] [client 20.219.2.60:40727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/144.php"] [unique_id "ary1aiGeq9LtYp4zuPOKLgAAAAQ"]
[Wed Sep 30 01:08:26.369359 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.369945 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.403686 2026] [security2:error] [pid 270884:tid 271142] [client 155.190.6.18:58754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKMAAAAHs"]
[Wed Sep 30 01:08:26.420120 2026] [security2:error] [pid 270884:tid 271067] [client 20.219.2.60:18857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/166.php"] [unique_id "ary1aiGeq9LtYp4zuPOKMQAAADA"]
[Wed Sep 30 01:08:26.460011 2026] [security2:error] [pid 270884:tid 271109] [client 20.219.2.60:11685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws82.php"] [unique_id "ary1aiGeq9LtYp4zuPOKNQAAAFo"]
[Wed Sep 30 01:08:26.461538 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.462107 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.477665 2026] [security2:error] [pid 270884:tid 271024] [client 179.109.123.124:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1aiGeq9LtYp4zuPOKNgAAAAU"]
[Wed Sep 30 01:08:26.496004 2026] [security2:error] [pid 263262:tid 263466] [client 13.70.4.78:49357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/z60.php"] [unique_id "ary1apEcZ_148BjP8ZPrMwAAAVM"]
[Wed Sep 30 01:08:26.509321 2026] [security2:error] [pid 263262:tid 263413] [client 168.100.149.220:55542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/wp-consent-api/assets/js/wp-consent-api.min.js"] [unique_id "ary1apEcZ_148BjP8ZPrNAABHkM"]
[Wed Sep 30 01:08:26.547671 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.548111 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.636078 2026] [security2:error] [pid 263262:tid 263401] [client 20.28.180.172:29576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ssdg.php"] [unique_id "ary1apEcZ_148BjP8ZPrQgAAARI"]
[Wed Sep 30 01:08:26.641797 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.642267 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.686664 2026] [security2:error] [pid 270884:tid 271142] [client 155.190.6.18:58754] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKMAAAAHs"]
[Wed Sep 30 01:08:26.727988 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.728522 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.735919 2026] [security2:error] [pid 270884:tid 271099] [client 74.225.148.80:54114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/x33.php"] [unique_id "ary1aiGeq9LtYp4zuPOKRwAAAFA"]
[Wed Sep 30 01:08:26.782268 2026] [security2:error] [pid 270884:tid 271022] [client 103.159.192.142:50377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKSQAAAAM"]
[Wed Sep 30 01:08:26.782436 2026] [security2:error] [pid 270884:tid 271022] [client 103.159.192.142:50377] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKSQAAAAM"]
[Wed Sep 30 01:08:26.798257 2026] [security2:error] [pid 270884:tid 271091] [client 116.197.133.25:65390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKSwAAAEg"]
[Wed Sep 30 01:08:26.798415 2026] [security2:error] [pid 270884:tid 271091] [client 116.197.133.25:65390] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1aiGeq9LtYp4zuPOKSwAAAEg"]
[Wed Sep 30 01:08:26.819463 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.819765 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.843170 2026] [security2:error] [pid 270884:tid 271072] [client 20.194.5.96:17292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/dronishness.php"] [unique_id "ary1aiGeq9LtYp4zuPOKTQAAADU"]
[Wed Sep 30 01:08:26.850724 2026] [security2:error] [pid 270884:tid 271096] [client 20.204.42.136:59841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/felnggg.php"] [unique_id "ary1aiGeq9LtYp4zuPOKTgAAAE0"]
[Wed Sep 30 01:08:26.856465 2026] [security2:error] [pid 270884:tid 271066] [client 20.219.2.60:26006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/asd.php"] [unique_id "ary1aiGeq9LtYp4zuPOKUQAAAC8"]
[Wed Sep 30 01:08:26.866119 2026] [security2:error] [pid 270884:tid 271046] [client 20.28.180.172:18177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-admin/network/edit.php"] [unique_id "ary1aiGeq9LtYp4zuPOKUwAAABs"]
[Wed Sep 30 01:08:26.923673 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:26.924118 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:26.988183 2026] [security2:error] [pid 270884:tid 271097] [client 20.213.164.196:21319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/zoo1.php"] [unique_id "ary1aiGeq9LtYp4zuPOKXgAAAE4"]
[Wed Sep 30 01:08:26.997286 2026] [security2:error] [pid 270884:tid 271089] [client 13.70.4.78:49386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/24.php"] [unique_id "ary1aiGeq9LtYp4zuPOKXwAAAEY"]
[Wed Sep 30 01:08:27.002354 2026] [security2:error] [pid 270884:tid 271020] [client 103.241.204.139:51991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1ayGeq9LtYp4zuPOKYAAAAAE"]
[Wed Sep 30 01:08:27.003192 2026] [security2:error] [pid 270884:tid 271020] [client 103.241.204.139:51991] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1ayGeq9LtYp4zuPOKYAAAAAE"]
[Wed Sep 30 01:08:27.005663 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.006107 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.090227 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.090496 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.182737 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.183021 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.190852 2026] [security2:error] [pid 263262:tid 263502] [client 20.70.173.30:61788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/xiugai.php"] [unique_id "ary1a5EcZ_148BjP8ZPrYgAAAXc"]
[Wed Sep 30 01:08:27.222880 2026] [security2:error] [pid 270884:tid 271072] [client 4.240.25.22:33291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/media.php"] [unique_id "ary1ayGeq9LtYp4zuPOKagAAADU"]
[Wed Sep 30 01:08:27.249057 2026] [security2:error] [pid 263262:tid 263397] [client 74.225.148.80:60881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/cae.php"] [unique_id "ary1a5EcZ_148BjP8ZPrZQAAAQ4"]
[Wed Sep 30 01:08:27.273908 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.274153 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.280279 2026] [qos:error] [pid 263262:tid 263451] [client 76.192.156.137:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1a5EcZ_148BjP8ZPraAAAAUQ
[Wed Sep 30 01:08:27.329526 2026] [security2:error] [pid 270884:tid 271025] [client 20.219.2.60:26053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/zc-104.php"] [unique_id "ary1ayGeq9LtYp4zuPOKbwAAAAY"]
[Wed Sep 30 01:08:27.338422 2026] [security2:error] [pid 270884:tid 271067] [client 13.70.4.78:50187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/xxw.php"] [unique_id "ary1ayGeq9LtYp4zuPOKcAAAADA"]
[Wed Sep 30 01:08:27.366769 2026] [qos:error] [pid 263262:tid 263420] [client 173.206.115.205:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1a5EcZ_148BjP8ZPrbwAAASU
[Wed Sep 30 01:08:27.376843 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.377288 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.465722 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.466183 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.548373 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.548650 2026] [access_compat:error] [pid 263262:tid 263413] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.585705 2026] [security2:error] [pid 270884:tid 271138] [client 80.47.9.5:57851] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "921"] [severity "CRITICAL"] [tag "SQLi"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1ayGeq9LtYp4zuPOKeAAAAHc"]
[Wed Sep 30 01:08:27.634924 2026] [security2:error] [pid 263262:tid 263435] [client 45.138.12.43:51438] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ydz.jky.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1a5EcZ_148BjP8ZPrdwAAATQ"]
[Wed Sep 30 01:08:27.640315 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.640575 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.647454 2026] [security2:error] [pid 263262:tid 263483] [client 166.114.131.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1a5EcZ_148BjP8ZPreAAAAWQ"]
[Wed Sep 30 01:08:27.691351 2026] [security2:error] [pid 270884:tid 271122] [client 49.43.163.212:59086] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1ayGeq9LtYp4zuPOKegAAAGc"]
[Wed Sep 30 01:08:27.691488 2026] [security2:error] [pid 270884:tid 271122] [client 49.43.163.212:59086] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1ayGeq9LtYp4zuPOKegAAAGc"]
[Wed Sep 30 01:08:27.714217 2026] [security2:error] [pid 270884:tid 271039] [client 13.70.4.78:49384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/bnmtp.php"] [unique_id "ary1ayGeq9LtYp4zuPOKhwAAABQ"]
[Wed Sep 30 01:08:27.728951 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.729195 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:40125] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.769287 2026] [security2:error] [pid 270884:tid 271086] [client 20.219.2.60:19403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/ws77.php"] [unique_id "ary1ayGeq9LtYp4zuPOKjAAAAEM"]
[Wed Sep 30 01:08:27.821066 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.821339 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.847936 2026] [security2:error] [pid 270884:tid 271093] [client 20.194.5.96:16600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/Row_wsoo.php"] [unique_id "ary1ayGeq9LtYp4zuPOKlQAAAEo"]
[Wed Sep 30 01:08:27.907788 2026] [security2:error] [pid 263262:tid 263413] [client 20.219.2.60:40708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/rzki.php"] [unique_id "ary1a5EcZ_148BjP8ZPrhQAAAR4"]
[Wed Sep 30 01:08:27.909039 2026] [security2:error] [pid 270884:tid 271090] [client 74.225.148.80:60918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/txets.php"] [unique_id "ary1ayGeq9LtYp4zuPOKmAAAAEc"]
[Wed Sep 30 01:08:27.913053 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:27.913295 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:27.931361 2026] [security2:error] [pid 270884:tid 271129] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1ayGeq9LtYp4zuPOKlgAAAG4"]
[Wed Sep 30 01:08:27.962342 2026] [security2:error] [pid 270884:tid 270996] [remote 57.141.14.68:45410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary1ayGeq9LtYp4zuPOKmQAAL2o"]
[Wed Sep 30 01:08:28.003142 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.003403 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.095861 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.096140 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.121818 2026] [security2:error] [pid 270884:tid 271044] [client 80.47.9.5:58114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1bCGeq9LtYp4zuPOKoAAAABk"]
[Wed Sep 30 01:08:28.143946 2026] [security2:error] [pid 263262:tid 263451] [client 216.73.216.46:40125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1bJEcZ_148BjP8ZPriwAAAUQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvbm9kZTAvbWVtb3J5Mjc2
[Wed Sep 30 01:08:28.184859 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.185137 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.193594 2026] [security2:error] [pid 270884:tid 271070] [client 104.208.65.139:51669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.65.208.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jugglepro.org"] [uri "/wp-wpbak.php"] [unique_id "ary1bCGeq9LtYp4zuPOKpQAAADM"]
[Wed Sep 30 01:08:28.201677 2026] [security2:error] [pid 270884:tid 271138] [client 13.70.4.78:49395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/ebkid.php"] [unique_id "ary1bCGeq9LtYp4zuPOKpwAAAHc"]
[Wed Sep 30 01:08:28.242908 2026] [security2:error] [pid 263262:tid 263432] [client 20.70.173.30:35610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1bJEcZ_148BjP8ZPrkQAAATE"]
[Wed Sep 30 01:08:28.261068 2026] [security2:error] [pid 270884:tid 271091] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bCGeq9LtYp4zuPOKqgAAAEg"]
[Wed Sep 30 01:08:28.277735 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.278016 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.318156 2026] [security2:error] [pid 270884:tid 271106] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bCGeq9LtYp4zuPOKrwAAAFc"]
[Wed Sep 30 01:08:28.354756 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.19.141:29775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/24.php"] [unique_id "ary1bCGeq9LtYp4zuPOKsQAAAGM"]
[Wed Sep 30 01:08:28.360268 2026] [security2:error] [pid 270884:tid 271087] [client 20.198.74.230:23572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wefile.php"] [unique_id "ary1bCGeq9LtYp4zuPOKswAAAEQ"]
[Wed Sep 30 01:08:28.373126 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.373590 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.421073 2026] [security2:error] [pid 263262:tid 263496] [client 74.225.148.80:60895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wp-update.php"] [unique_id "ary1bJEcZ_148BjP8ZPrlAAAAXE"]
[Wed Sep 30 01:08:28.423025 2026] [security2:error] [pid 270884:tid 271072] [client 74.7.242.1:60662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1bCGeq9LtYp4zuPOKtwAAADU"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:08:28.432767 2026] [security2:error] [pid 270884:tid 271096] [client 20.28.180.172:61238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws82.php"] [unique_id "ary1bCGeq9LtYp4zuPOKuQAAAE0"]
[Wed Sep 30 01:08:28.439658 2026] [security2:error] [pid 270884:tid 271129] [client 20.194.5.96:16601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/x2.php"] [unique_id "ary1bCGeq9LtYp4zuPOKugAAAG4"]
[Wed Sep 30 01:08:28.439870 2026] [security2:error] [pid 263262:tid 263276] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1bJEcZ_148BjP8ZPrlgABYgw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=8d730daae8c230adfee5e310713c5fa1
[Wed Sep 30 01:08:28.439904 2026] [security2:error] [pid 263262:tid 263276] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1bJEcZ_148BjP8ZPrlgABYgw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=8d730daae8c230adfee5e310713c5fa1
[Wed Sep 30 01:08:28.468047 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.468521 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.490844 2026] [security2:error] [pid 270884:tid 271143] [client 168.100.149.89:35674] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/mediaelement/mediaelement-and-player.min.js"] [unique_id "ary1bCGeq9LtYp4zuPOKwQAAfHY"]
[Wed Sep 30 01:08:28.492163 2026] [security2:error] [pid 270884:tid 271036] [client 20.219.2.60:40725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xsas.php"] [unique_id "ary1bCGeq9LtYp4zuPOKwwAAABE"]
[Wed Sep 30 01:08:28.548860 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.549146 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.633668 2026] [access_compat:error] [pid 263262:tid 263509] [client 47.79.13.172:38804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:28.633942 2026] [access_compat:error] [pid 263262:tid 263509] [client 47.79.13.172:38804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:28.641585 2026] [security2:error] [pid 270884:tid 271097] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bCGeq9LtYp4zuPOKzQAAAE4"]
[Wed Sep 30 01:08:28.641659 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.642015 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.648693 2026] [security2:error] [pid 263262:tid 263462] [client 20.194.96.176:14627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1bJEcZ_148BjP8ZPrmwAAAU8"]
[Wed Sep 30 01:08:28.676392 2026] [security2:error] [pid 270884:tid 271076] [client 80.47.9.5:58348] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=http://:"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1bCGeq9LtYp4zuPOKzgAAADk"]
[Wed Sep 30 01:08:28.730923 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.731287 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.775731 2026] [security2:error] [pid 263262:tid 263507] [client 13.70.4.78:49392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/133.php"] [unique_id "ary1bJEcZ_148BjP8ZPrnwAAAXw"]
[Wed Sep 30 01:08:28.821941 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.822194 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.838358 2026] [security2:error] [pid 263262:tid 263453] [client 20.194.5.96:17166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/v4.php"] [unique_id "ary1bJEcZ_148BjP8ZProQAAAUY"]
[Wed Sep 30 01:08:28.851786 2026] [security2:error] [pid 270884:tid 271045] [client 37.41.16.35:52821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1bCGeq9LtYp4zuPOK1wAAABo"]
[Wed Sep 30 01:08:28.851924 2026] [security2:error] [pid 270884:tid 271045] [client 37.41.16.35:52821] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1bCGeq9LtYp4zuPOK1wAAABo"]
[Wed Sep 30 01:08:28.915674 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:28.915963 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:28.935989 2026] [security2:error] [pid 270884:tid 271129] [client 74.225.148.80:60920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/177.php"] [unique_id "ary1bCGeq9LtYp4zuPOK2gAAAG4"]
[Wed Sep 30 01:08:28.964173 2026] [security2:error] [pid 270884:tid 271086] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bCGeq9LtYp4zuPOK2wAAAEM"]
[Wed Sep 30 01:08:28.975401 2026] [security2:error] [pid 263262:tid 263441] [client 20.219.2.60:26021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/d12.php"] [unique_id "ary1bJEcZ_148BjP8ZPrpQAAATo"]
[Wed Sep 30 01:08:28.977853 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5My9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1OS90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:08:28.978109 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5My9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1OS90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:08:29.003944 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.004211 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.032802 2026] [security2:error] [pid 263262:tid 263418] [client 45.138.12.43:51564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.yel.mhf.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1bZEcZ_148BjP8ZPrqAAAASM"]
[Wed Sep 30 01:08:29.096993 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.097263 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.121119 2026] [security2:error] [pid 270884:tid 271032] [client 49.37.102.248:51476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1bSGeq9LtYp4zuPOK4QAAAA0"]
[Wed Sep 30 01:08:29.121216 2026] [security2:error] [pid 270884:tid 271032] [client 49.37.102.248:51476] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1bSGeq9LtYp4zuPOK4QAAAA0"]
[Wed Sep 30 01:08:29.145392 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1bZEcZ_148BjP8ZPrrwABWiM"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D15%26t%3D9270
[Wed Sep 30 01:08:29.145413 2026] [security2:error] [pid 263262:tid 263299] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1bZEcZ_148BjP8ZPrrwABWiM"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D15%26t%3D9270
[Wed Sep 30 01:08:29.185962 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.186216 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.219929 2026] [security2:error] [pid 263262:tid 263460] [client 80.47.9.5:58613] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1bZEcZ_148BjP8ZPrsQAAAU0"]
[Wed Sep 30 01:08:29.220394 2026] [security2:error] [pid 270884:tid 271112] [client 20.70.173.30:59558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/amax.php"] [unique_id "ary1bSGeq9LtYp4zuPOK5QAAAF0"]
[Wed Sep 30 01:08:29.255740 2026] [security2:error] [pid 270884:tid 271117] [client 20.204.42.136:59853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/felnggg.update.php"] [unique_id "ary1bSGeq9LtYp4zuPOK5gAAAGI"]
[Wed Sep 30 01:08:29.281208 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.281647 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.291297 2026] [security2:error] [pid 270884:tid 271111] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bSGeq9LtYp4zuPOK6QAAAFw"]
[Wed Sep 30 01:08:29.316287 2026] [security2:error] [pid 263262:tid 263432] [client 4.196.65.241:2063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/gif.php"] [unique_id "ary1bZEcZ_148BjP8ZPrtAAAATE"]
[Wed Sep 30 01:08:29.332743 2026] [security2:error] [pid 270884:tid 271135] [client 216.244.66.239:52886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/bluesoleil-skachat-besplatno-na-russkom-iazyke-dlia-windows-10-c-kliuchom-besplatno.xml"] [unique_id "ary1bSGeq9LtYp4zuPOK6wAAAHQ"]
[Wed Sep 30 01:08:29.332842 2026] [security2:error] [pid 270884:tid 271135] [client 216.244.66.239:52886] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/bluesoleil-skachat-besplatno-na-russkom-iazyke-dlia-windows-10-c-kliuchom-besplatno.xml"] [unique_id "ary1bSGeq9LtYp4zuPOK6wAAAHQ"]
[Wed Sep 30 01:08:29.359017 2026] [security2:error] [pid 263262:tid 263514] [client 13.70.4.78:49406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/x33.php"] [unique_id "ary1bZEcZ_148BjP8ZPrtwAAAYM"]
[Wed Sep 30 01:08:29.379801 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.380274 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.418854 2026] [security2:error] [pid 270884:tid 271106] [client 74.225.148.80:60898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/ccc.php"] [unique_id "ary1bSGeq9LtYp4zuPOK7wAAAFc"]
[Wed Sep 30 01:08:29.451785 2026] [security2:error] [pid 270884:tid 271095] [client 20.219.2.60:40713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/okxh.php"] [unique_id "ary1bSGeq9LtYp4zuPOK8AAAAEw"]
[Wed Sep 30 01:08:29.473014 2026] [security2:error] [pid 263262:tid 263407] [client 20.194.5.96:17165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/albin.php"] [unique_id "ary1bZEcZ_148BjP8ZPruQAAARg"]
[Wed Sep 30 01:08:29.473014 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.473457 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.488382 2026] [security2:error] [pid 263262:tid 263470] [client 20.194.96.176:59432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/f35.update.php"] [unique_id "ary1bZEcZ_148BjP8ZPrugAAAVc"]
[Wed Sep 30 01:08:29.495366 2026] [security2:error] [pid 270884:tid 271072] [client 20.213.164.196:21228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/class-ajax.php"] [unique_id "ary1bSGeq9LtYp4zuPOK8wAAADU"]
[Wed Sep 30 01:08:29.537952 2026] [security2:error] [pid 263262:tid 263412] [client 20.28.180.172:34259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/usr.php"] [unique_id "ary1bZEcZ_148BjP8ZPruwAAAR0"]
[Wed Sep 30 01:08:29.559394 2026] [access_compat:error] [pid 270884:tid 271092] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.559657 2026] [access_compat:error] [pid 270884:tid 271092] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.590121 2026] [security2:error] [pid 270884:tid 271129] [client 20.70.173.30:61765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/sxxb.php"] [unique_id "ary1bSGeq9LtYp4zuPOK9gAAAG4"]
[Wed Sep 30 01:08:29.599775 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1bZEcZ_148BjP8ZPrvAABNEU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D11546
[Wed Sep 30 01:08:29.599818 2026] [security2:error] [pid 263262:tid 263333] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1bZEcZ_148BjP8ZPrvAABNEU"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D11546
[Wed Sep 30 01:08:29.648774 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.649062 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.695203 2026] [security2:error] [pid 263262:tid 263462] [client 13.70.4.78:49389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/cae.php"] [unique_id "ary1bZEcZ_148BjP8ZPrwgAAAU8"]
[Wed Sep 30 01:08:29.737769 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.738036 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.757266 2026] [security2:error] [pid 263262:tid 263329] [remote 57.141.14.82:34380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "ary1bZEcZ_148BjP8ZPrwwABSUE"]
[Wed Sep 30 01:08:29.770409 2026] [security2:error] [pid 270884:tid 271096] [client 80.47.9.5:58846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1bSGeq9LtYp4zuPOLAQAAAE0"]
[Wed Sep 30 01:08:29.778130 2026] [access_compat:error] [pid 270884:tid 271079] [client 47.79.13.58:34990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:29.778397 2026] [access_compat:error] [pid 270884:tid 271079] [client 47.79.13.58:34990] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:29.830779 2026] [security2:error] [pid 263262:tid 263431] [client 20.194.30.107:10037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/images.php"] [unique_id "ary1bZEcZ_148BjP8ZPryAAAATA"]
[Wed Sep 30 01:08:29.833432 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.833860 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.857471 2026] [security2:error] [pid 270884:tid 271104] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bSGeq9LtYp4zuPOK7AAAAFU"]
[Wed Sep 30 01:08:29.911111 2026] [access_compat:error] [pid 263262:tid 263512] [client 47.79.13.176:50858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:29.911561 2026] [access_compat:error] [pid 263262:tid 263512] [client 47.79.13.176:50858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:29.920630 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:29.920945 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:29.922347 2026] [core:error] [pid 263262:tid 263443] (104)Connection reset by peer: [client 172.232.190.19:52961] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:08:29.948742 2026] [security2:error] [pid 263262:tid 263413] [client 74.225.148.80:18771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/0xD.php"] [unique_id "ary1bZEcZ_148BjP8ZPrywAAAR4"]
[Wed Sep 30 01:08:29.949964 2026] [security2:error] [pid 270884:tid 271041] [client 20.219.2.60:11674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/new.php"] [unique_id "ary1bSGeq9LtYp4zuPOLCgAAABY"]
[Wed Sep 30 01:08:29.957611 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:40711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/55b76.php"] [unique_id "ary1bSGeq9LtYp4zuPOLCwAAABo"]
[Wed Sep 30 01:08:30.010465 2026] [security2:error] [pid 270884:tid 271095] [client 20.219.2.60:19402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/www.php"] [unique_id "ary1biGeq9LtYp4zuPOLDQAAAEw"]
[Wed Sep 30 01:08:30.013171 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.013425 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.057002 2026] [security2:error] [pid 270884:tid 271108] [client 13.70.4.78:49355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/txets.php"] [unique_id "ary1biGeq9LtYp4zuPOLDwAAAFk"]
[Wed Sep 30 01:08:30.067028 2026] [access_compat:error] [pid 263262:tid 263397] [client 47.79.13.65:56804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:30.067319 2026] [access_compat:error] [pid 263262:tid 263397] [client 47.79.13.65:56804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:30.091803 2026] [security2:error] [pid 270884:tid 270893] [remote 220.181.108.82:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1biGeq9LtYp4zuPOLEAAAdgc"]
[Wed Sep 30 01:08:30.102653 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.102922 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.108803 2026] [security2:error] [pid 270884:tid 271139] [client 4.240.25.22:33302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/bthil.php"] [unique_id "ary1biGeq9LtYp4zuPOLEgAAAHg"]
[Wed Sep 30 01:08:30.130945 2026] [security2:error] [pid 270884:tid 271135] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1bSGeq9LtYp4zuPOLCAAAAHQ"]
[Wed Sep 30 01:08:30.195167 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.195432 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.284930 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.285197 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.319175 2026] [security2:error] [pid 270884:tid 271125] [client 80.47.9.5:59069] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "quieromifactura.biz"] [uri "/wp-json/batch/v1"] [unique_id "ary1biGeq9LtYp4zuPOLGwAAAGo"]
[Wed Sep 30 01:08:30.342940 2026] [security2:error] [pid 263262:tid 263391] [remote 57.141.14.47:28554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary1bpEcZ_148BjP8ZPr1gABNH8"]
[Wed Sep 30 01:08:30.384783 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.385250 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.411774 2026] [security2:error] [pid 270884:tid 271098] [client 20.219.2.60:25997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tt.php"] [unique_id "ary1biGeq9LtYp4zuPOLIAAAAE8"]
[Wed Sep 30 01:08:30.427995 2026] [security2:error] [pid 263262:tid 263330] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1bpEcZ_148BjP8ZPr2gABWkI"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D13648
[Wed Sep 30 01:08:30.468363 2026] [security2:error] [pid 270884:tid 271045] [client 13.70.4.78:49304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wp-update.php"] [unique_id "ary1biGeq9LtYp4zuPOLIwAAABo"]
[Wed Sep 30 01:08:30.474542 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.474981 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.480263 2026] [security2:error] [pid 270884:tid 271040] [client 20.70.173.30:33280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/0.php"] [unique_id "ary1biGeq9LtYp4zuPOLJAAAABU"]
[Wed Sep 30 01:08:30.492082 2026] [security2:error] [pid 270884:tid 271039] [client 122.173.27.10:8597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1biGeq9LtYp4zuPOLJgAAABQ"]
[Wed Sep 30 01:08:30.492175 2026] [security2:error] [pid 270884:tid 271039] [client 122.173.27.10:8597] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1biGeq9LtYp4zuPOLJgAAABQ"]
[Wed Sep 30 01:08:30.500915 2026] [security2:error] [pid 270884:tid 271106] [client 168.100.149.65:20296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js"] [unique_id "ary1biGeq9LtYp4zuPOLJQAAVwg"]
[Wed Sep 30 01:08:30.560020 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.560283 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.591947 2026] [security2:error] [pid 263262:tid 263443] [client 74.225.148.80:60877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/sallu.php"] [unique_id "ary1bpEcZ_148BjP8ZPr4QAAATw"]
[Wed Sep 30 01:08:30.609346 2026] [security2:error] [pid 270884:tid 271066] [client 20.194.5.96:17189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/atkno.php"] [unique_id "ary1biGeq9LtYp4zuPOLKwAAAC8"]
[Wed Sep 30 01:08:30.652067 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.652327 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.676986 2026] [security2:error] [pid 270884:tid 271021] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1biGeq9LtYp4zuPOLMQAAAAI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:30.742869 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.743139 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.797905 2026] [security2:error] [pid 263262:tid 263408] [client 13.70.4.78:49351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/177.php"] [unique_id "ary1bpEcZ_148BjP8ZPr6AAAARk"]
[Wed Sep 30 01:08:30.836941 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.837389 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.864924 2026] [security2:error] [pid 270884:tid 271117] [client 20.28.180.172:18348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/new.php"] [unique_id "ary1biGeq9LtYp4zuPOLOQAAAGI"]
[Wed Sep 30 01:08:30.885229 2026] [security2:error] [pid 263262:tid 263481] [client 20.219.2.60:26001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/maul.php"] [unique_id "ary1bpEcZ_148BjP8ZPr6wAAAWI"]
[Wed Sep 30 01:08:30.892754 2026] [security2:error] [pid 270884:tid 271146] [client 203.122.45.246:65324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1biGeq9LtYp4zuPOLOgAAAH8"]
[Wed Sep 30 01:08:30.892906 2026] [security2:error] [pid 270884:tid 271146] [client 203.122.45.246:65324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1biGeq9LtYp4zuPOLOgAAAH8"]
[Wed Sep 30 01:08:30.926085 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:30.926333 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:30.946173 2026] [security2:error] [pid 263262:tid 263462] [client 216.244.66.239:52896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/gdz-po-russkii-iazyk-3-klass-vinogradova-2-chast-uchebnik.xml"] [unique_id "ary1bpEcZ_148BjP8ZPr8AAAAU8"]
[Wed Sep 30 01:08:30.946284 2026] [security2:error] [pid 263262:tid 263462] [client 216.244.66.239:52896] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/gdz-po-russkii-iazyk-3-klass-vinogradova-2-chast-uchebnik.xml"] [unique_id "ary1bpEcZ_148BjP8ZPr8AAAAU8"]
[Wed Sep 30 01:08:30.986239 2026] [security2:error] [pid 270884:tid 271029] [client 103.168.67.253:59850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/index.php"] [unique_id "ary1biGeq9LtYp4zuPOLQQAAAAo"]
[Wed Sep 30 01:08:30.992660 2026] [security2:error] [pid 270884:tid 271092] [client 45.138.12.32:29698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.habeshacontacts.com"] [uri "/wp-links-opml.php"] [unique_id "ary1biGeq9LtYp4zuPOLQgAAAEk"]
[Wed Sep 30 01:08:31.015208 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.016163 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.023129 2026] [security2:error] [pid 270884:tid 271095] [client 152.59.165.7:40793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1byGeq9LtYp4zuPOLRAAAAEw"]
[Wed Sep 30 01:08:31.023244 2026] [security2:error] [pid 270884:tid 271095] [client 152.59.165.7:40793] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1byGeq9LtYp4zuPOLRAAAAEw"]
[Wed Sep 30 01:08:31.052960 2026] [security2:error] [pid 270884:tid 271024] [client 20.219.19.141:65526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/xwpg.php"] [unique_id "ary1byGeq9LtYp4zuPOLRwAAAAU"]
[Wed Sep 30 01:08:31.057659 2026] [security2:error] [pid 270884:tid 271021] [client 20.194.5.96:17168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/gptsh.php"] [unique_id "ary1byGeq9LtYp4zuPOLSQAAAAI"]
[Wed Sep 30 01:08:31.086119 2026] [security2:error] [pid 270884:tid 271032] [client 20.70.173.30:7510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/tool.php"] [unique_id "ary1byGeq9LtYp4zuPOLSwAAAA0"]
[Wed Sep 30 01:08:31.105955 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.106223 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.138634 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.2.60:33796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1byGeq9LtYp4zuPOLUAAAAE0"]
[Wed Sep 30 01:08:31.197991 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.198247 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.220218 2026] [security2:error] [pid 270884:tid 271098] [client 13.70.4.78:49335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/ccc.php"] [unique_id "ary1byGeq9LtYp4zuPOLVwAAAE8"]
[Wed Sep 30 01:08:31.247475 2026] [security2:error] [pid 270884:tid 271112] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1byGeq9LtYp4zuPOLWQAAAF0"]
[Wed Sep 30 01:08:31.274764 2026] [security2:error] [pid 263262:tid 263516] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1b5EcZ_148BjP8ZPr-QAAAYU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:31.288163 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.288423 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.298691 2026] [security2:error] [pid 263262:tid 263457] [client 189.78.68.254:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1b5EcZ_148BjP8ZPr-gAAAUo"]
[Wed Sep 30 01:08:31.305048 2026] [security2:error] [pid 270884:tid 271027] [client 103.159.192.142:50862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1byGeq9LtYp4zuPOLWwAAAAg"]
[Wed Sep 30 01:08:31.305143 2026] [security2:error] [pid 270884:tid 271027] [client 103.159.192.142:50862] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1byGeq9LtYp4zuPOLWwAAAAg"]
[Wed Sep 30 01:08:31.361173 2026] [security2:error] [pid 270884:tid 271104] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1byGeq9LtYp4zuPOLXQAAAFU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:31.398360 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.398839 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.404374 2026] [security2:error] [pid 263262:tid 263496] [client 20.213.164.196:55177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/gm.php"] [unique_id "ary1b5EcZ_148BjP8ZPr_AAAAXE"]
[Wed Sep 30 01:08:31.411954 2026] [access_compat:error] [pid 263262:tid 263512] [client 74.7.243.227:55962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L2N3ZA==
[Wed Sep 30 01:08:31.412376 2026] [access_compat:error] [pid 263262:tid 263512] [client 74.7.243.227:55962] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L2N3ZA==
[Wed Sep 30 01:08:31.477606 2026] [access_compat:error] [pid 270884:tid 271092] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.478066 2026] [access_compat:error] [pid 270884:tid 271092] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.533036 2026] [security2:error] [pid 263262:tid 263491] [client 13.70.4.78:50205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/0xD.php"] [unique_id "ary1b5EcZ_148BjP8ZPsBQAAAWw"]
[Wed Sep 30 01:08:31.553572 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.5.96:16846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/rithin.php"] [unique_id "ary1byGeq9LtYp4zuPOLZQAAAAU"]
[Wed Sep 30 01:08:31.563596 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.563867 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:25748] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.586063 2026] [security2:error] [pid 270884:tid 271085] [client 74.225.148.80:60917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/xwpg.php"] [unique_id "ary1byGeq9LtYp4zuPOLaAAAAEI"]
[Wed Sep 30 01:08:31.599883 2026] [security2:error] [pid 263262:tid 263450] [client 20.219.2.60:48077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1b5EcZ_148BjP8ZPsBwAAAUM"]
[Wed Sep 30 01:08:31.623584 2026] [security2:error] [pid 263262:tid 263424] [client 179.105.122.52:50976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1b5EcZ_148BjP8ZPsAQAAASk"]
[Wed Sep 30 01:08:31.630334 2026] [security2:error] [pid 270884:tid 271134] [client 20.28.180.172:34254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/file2.php"] [unique_id "ary1byGeq9LtYp4zuPOLbQAAAHM"]
[Wed Sep 30 01:08:31.652157 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.652422 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.744085 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.744388 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.770551 2026] [security2:error] [pid 270884:tid 271089] [client 85.208.96.193:37864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "parashakthipeetham.com"] [uri "/index.php/2026/07/27/que-es-un-bono-de-casino-en-linea-sin-deposito-para-el-ano-2026/"] [unique_id "ary1byGeq9LtYp4zuPOLeAAAAEY"]
[Wed Sep 30 01:08:31.770668 2026] [security2:error] [pid 270884:tid 271089] [client 85.208.96.193:37864] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "parashakthipeetham.com"] [uri "/index.php/2026/07/27/que-es-un-bono-de-casino-en-linea-sin-deposito-para-el-ano-2026/"] [unique_id "ary1byGeq9LtYp4zuPOLeAAAAEY"]
[Wed Sep 30 01:08:31.835543 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.835834 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.856050 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.2.60:11377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/press.php"] [unique_id "ary1byGeq9LtYp4zuPOLfgAAAEc"]
[Wed Sep 30 01:08:31.923622 2026] [security2:error] [pid 270884:tid 271029] [client 20.194.5.96:17175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/il.php"] [unique_id "ary1byGeq9LtYp4zuPOLgQAAAAo"]
[Wed Sep 30 01:08:31.928057 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:31.928310 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:31.980623 2026] [security2:error] [pid 270884:tid 271095] [client 216.73.216.46:25748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1byGeq9LtYp4zuPOLgwAAAEw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTAvbm9kZTAvY3B1OS9kcml2ZXIvY3B1My90b3BvbG9neQ%3D%3D
[Wed Sep 30 01:08:31.995533 2026] [security2:error] [pid 263262:tid 263468] [client 202.179.95.79:61214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1b5EcZ_148BjP8ZPsEgAAAVU"]
[Wed Sep 30 01:08:31.995661 2026] [security2:error] [pid 263262:tid 263468] [client 202.179.95.79:61214] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1b5EcZ_148BjP8ZPsEgAAAVU"]
[Wed Sep 30 01:08:31.998234 2026] [security2:error] [pid 263262:tid 263429] [client 13.70.4.78:49380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/sallu.php"] [unique_id "ary1b5EcZ_148BjP8ZPsEwAAAS4"]
[Wed Sep 30 01:08:32.015198 2026] [access_compat:error] [pid 263262:tid 263378] [remote 17.166.152.185:41278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.015481 2026] [access_compat:error] [pid 263262:tid 263378] [remote 17.166.152.185:41278] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.016107 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.016368 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.061172 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.2.60:33810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ccs.php"] [unique_id "ary1cCGeq9LtYp4zuPOLiQAAAAE"]
[Wed Sep 30 01:08:32.109515 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.109788 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.167890 2026] [security2:error] [pid 263262:tid 263316] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsFwABXzQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=19214ac4e80d13bb016f782ec0c69563
[Wed Sep 30 01:08:32.167932 2026] [security2:error] [pid 263262:tid 263316] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsFwABXzQ"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=19214ac4e80d13bb016f782ec0c69563
[Wed Sep 30 01:08:32.198563 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.198839 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.255638 2026] [security2:error] [pid 270884:tid 271083] [client 74.225.148.80:60867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/flamini.php"] [unique_id "ary1cCGeq9LtYp4zuPOLlwAAAEA"]
[Wed Sep 30 01:08:32.265654 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.5.96:16621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/1klopedf.php"] [unique_id "ary1cJEcZ_148BjP8ZPsGQAAATg"]
[Wed Sep 30 01:08:32.289137 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.289401 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.371781 2026] [security2:error] [pid 263262:tid 263400] [client 114.119.146.171:40399] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "paulmercer.me"] [uri "/Paul-Mercer.html"] [unique_id "ary1cJEcZ_148BjP8ZPsHwAAARE"], referer: https://paulmercer.me/sitemap-page-order.html
[Wed Sep 30 01:08:32.392322 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.392759 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.400794 2026] [security2:error] [pid 270884:tid 271067] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cCGeq9LtYp4zuPOLoAAAADA"]
[Wed Sep 30 01:08:32.403329 2026] [security2:error] [pid 263262:tid 263324] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsIAABWzw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=281613
[Wed Sep 30 01:08:32.403374 2026] [security2:error] [pid 263262:tid 263324] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsIAABWzw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=281613
[Wed Sep 30 01:08:32.444388 2026] [security2:error] [pid 270884:tid 271097] [client 223.235.102.107:16742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1cCGeq9LtYp4zuPOLogAAAE4"]
[Wed Sep 30 01:08:32.444752 2026] [security2:error] [pid 270884:tid 271097] [client 223.235.102.107:16742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1cCGeq9LtYp4zuPOLogAAAE4"]
[Wed Sep 30 01:08:32.503758 2026] [security2:error] [pid 270884:tid 271077] [client 168.100.149.109:57452] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/nav-menu.js"] [unique_id "ary1cCGeq9LtYp4zuPOLpAAAOiY"]
[Wed Sep 30 01:08:32.510488 2026] [security2:error] [pid 270884:tid 271096] [client 13.70.4.78:49316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/xwpg.php"] [unique_id "ary1cCGeq9LtYp4zuPOLpQAAAE0"]
[Wed Sep 30 01:08:32.527699 2026] [security2:error] [pid 270884:tid 271053] [client 20.219.2.60:49293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/set.php"] [unique_id "ary1cCGeq9LtYp4zuPOLqwAAACI"]
[Wed Sep 30 01:08:32.529201 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.529635 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.561544 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.561794 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.573188 2026] [security2:error] [pid 270884:tid 271039] [client 45.138.12.32:42464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gxh.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1cCGeq9LtYp4zuPOLuAAAABQ"]
[Wed Sep 30 01:08:32.574555 2026] [security2:error] [pid 270884:tid 271083] [client 20.70.173.30:35600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/az.php"] [unique_id "ary1cCGeq9LtYp4zuPOLuQAAAEA"]
[Wed Sep 30 01:08:32.582876 2026] [security2:error] [pid 270884:tid 271143] [client 20.213.164.196:21334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/class-wp-site-list.php"] [unique_id "ary1cCGeq9LtYp4zuPOLugAAAHw"]
[Wed Sep 30 01:08:32.656097 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.656530 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.700254 2026] [security2:error] [pid 270884:tid 271079] [client 20.219.2.60:40748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/5b9ac.php"] [unique_id "ary1cCGeq9LtYp4zuPOLwAAAADw"]
[Wed Sep 30 01:08:32.710531 2026] [access_compat:error] [pid 270884:tid 271105] [client 47.79.13.172:38828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:32.710831 2026] [access_compat:error] [pid 270884:tid 271105] [client 47.79.13.172:38828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:32.723939 2026] [security2:error] [pid 270884:tid 270917] [remote 220.181.108.178:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1cCGeq9LtYp4zuPOLwgAAdh8"]
[Wed Sep 30 01:08:32.724960 2026] [security2:error] [pid 270884:tid 271116] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cCGeq9LtYp4zuPOLxAAAAGE"]
[Wed Sep 30 01:08:32.745374 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.745647 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.750623 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsJAABYig"], referer: https://uxa.hoh.mybluehost.me/viewonline.php?sid=119879d09749757aaaa24ada78c8feee
[Wed Sep 30 01:08:32.750641 2026] [security2:error] [pid 263262:tid 263304] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1cJEcZ_148BjP8ZPsJAABYig"], referer: https://uxa.hoh.mybluehost.me/viewonline.php?sid=119879d09749757aaaa24ada78c8feee
[Wed Sep 30 01:08:32.783050 2026] [security2:error] [pid 270884:tid 271042] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cCGeq9LtYp4zuPOLyQAAABc"]
[Wed Sep 30 01:08:32.836714 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.837008 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:18743] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.847411 2026] [security2:error] [pid 263262:tid 263459] [client 13.70.4.78:49349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/flamini.php"] [unique_id "ary1cJEcZ_148BjP8ZPsLAAAAUw"]
[Wed Sep 30 01:08:32.909239 2026] [security2:error] [pid 263262:tid 263334] [remote 74.7.227.56:41132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1cJEcZ_148BjP8ZPsLwABYUY"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:08:32.939748 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:32.940015 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:32.990475 2026] [security2:error] [pid 270884:tid 271077] [client 74.225.148.80:54090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/themes.php"] [unique_id "ary1cCGeq9LtYp4zuPOLzgAAADo"]
[Wed Sep 30 01:08:32.998042 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.2.60:18850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/adoms.php"] [unique_id "ary1cCGeq9LtYp4zuPOLzwAAAE0"]
[Wed Sep 30 01:08:32.998815 2026] [security2:error] [pid 263262:tid 263418] [client 20.219.2.60:49316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/mode.php"] [unique_id "ary1cJEcZ_148BjP8ZPsMgAAASM"]
[Wed Sep 30 01:08:33.056287 2026] [security2:error] [pid 263262:tid 263419] [client 20.204.42.136:57826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/jybkxer.php"] [unique_id "ary1cZEcZ_148BjP8ZPsNwAAASQ"]
[Wed Sep 30 01:08:33.058056 2026] [security2:error] [pid 270884:tid 271094] [client 162.55.55.199:40384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.55.55.162.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/index.php"] [unique_id "ary1cSGeq9LtYp4zuPOL0AAAAEs"]
[Wed Sep 30 01:08:33.083867 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.084142 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.108843 2026] [security2:error] [pid 263262:tid 263361] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cZEcZ_148BjP8ZPsOQABNWE"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=110896
[Wed Sep 30 01:08:33.108869 2026] [security2:error] [pid 263262:tid 263361] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cZEcZ_148BjP8ZPsOQABNWE"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=110896
[Wed Sep 30 01:08:33.111890 2026] [security2:error] [pid 270884:tid 271123] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cSGeq9LtYp4zuPOL0wAAAGg"]
[Wed Sep 30 01:08:33.120249 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.120551 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:9716] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.170767 2026] [security2:error] [pid 263262:tid 263400] [client 20.219.19.141:29818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/blacks.php"] [unique_id "ary1cZEcZ_148BjP8ZPsOgAAARE"]
[Wed Sep 30 01:08:33.202431 2026] [security2:error] [pid 263262:tid 263488] [client 20.219.2.60:40749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/hehe.php"] [unique_id "ary1cZEcZ_148BjP8ZPsPAAAAWk"]
[Wed Sep 30 01:08:33.210032 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.210297 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.214057 2026] [security2:error] [pid 270884:tid 271083] [client 13.70.4.78:49294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/themes.php"] [unique_id "ary1cSGeq9LtYp4zuPOL2QAAAEA"]
[Wed Sep 30 01:08:33.254853 2026] [security2:error] [pid 270884:tid 271122] [client 216.73.216.46:18743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1cSGeq9LtYp4zuPOL2gAAAGc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHU5L25vZGUwL2NwdTEx
[Wed Sep 30 01:08:33.352516 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.352767 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.374686 2026] [security2:error] [pid 270884:tid 271043] [client 116.193.128.26:50183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1cSGeq9LtYp4zuPOL3AAAABg"]
[Wed Sep 30 01:08:33.374865 2026] [security2:error] [pid 270884:tid 271043] [client 116.193.128.26:50183] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1cSGeq9LtYp4zuPOL3AAAABg"]
[Wed Sep 30 01:08:33.382801 2026] [security2:error] [pid 270884:tid 271111] [client 45.138.12.32:29694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gzt.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1cSGeq9LtYp4zuPOL3QAAAFw"]
[Wed Sep 30 01:08:33.400217 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.400675 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.446862 2026] [security2:error] [pid 270884:tid 271046] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cSGeq9LtYp4zuPOL4QAAABs"]
[Wed Sep 30 01:08:33.475492 2026] [security2:error] [pid 270884:tid 271137] [client 20.219.2.60:33836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ok.php"] [unique_id "ary1cSGeq9LtYp4zuPOL4wAAAHY"]
[Wed Sep 30 01:08:33.476353 2026] [security2:error] [pid 263262:tid 263454] [client 223.181.30.165:27471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1cZEcZ_148BjP8ZPsRAAAAUc"]
[Wed Sep 30 01:08:33.476558 2026] [security2:error] [pid 263262:tid 263454] [client 223.181.30.165:27471] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1cZEcZ_148BjP8ZPsRAAAAUc"]
[Wed Sep 30 01:08:33.492457 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.492724 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.550632 2026] [security2:error] [pid 270884:tid 271070] [client 216.73.216.46:9716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1cSGeq9LtYp4zuPOL6AAAADM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvbm9kZTAvbWVtb3J5Njg%3D
[Wed Sep 30 01:08:33.573450 2026] [security2:error] [pid 263262:tid 263485] [client 20.70.173.30:59977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/dex.php"] [unique_id "ary1cZEcZ_148BjP8ZPsRgAAAWY"]
[Wed Sep 30 01:08:33.575538 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.575832 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.584609 2026] [security2:error] [pid 270884:tid 271085] [client 20.194.5.96:17304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/zv.php"] [unique_id "ary1cSGeq9LtYp4zuPOL6gAAAEI"]
[Wed Sep 30 01:08:33.609772 2026] [security2:error] [pid 263262:tid 263441] [client 182.69.182.151:22454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1cZEcZ_148BjP8ZPsRwAAATo"]
[Wed Sep 30 01:08:33.609896 2026] [security2:error] [pid 263262:tid 263441] [client 182.69.182.151:22454] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1cZEcZ_148BjP8ZPsRwAAATo"]
[Wed Sep 30 01:08:33.641084 2026] [security2:error] [pid 263262:tid 263393] [client 20.28.180.172:60321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/press.php"] [unique_id "ary1cZEcZ_148BjP8ZPsSQAAAQo"]
[Wed Sep 30 01:08:33.664317 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.664579 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.674622 2026] [security2:error] [pid 270884:tid 271128] [client 43.227.131.37:16107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1cSGeq9LtYp4zuPOL8gAAAG0"]
[Wed Sep 30 01:08:33.674833 2026] [security2:error] [pid 270884:tid 271128] [client 43.227.131.37:16107] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1cSGeq9LtYp4zuPOL8gAAAG0"]
[Wed Sep 30 01:08:33.725339 2026] [security2:error] [pid 263262:tid 263509] [client 20.219.2.60:26061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary1cZEcZ_148BjP8ZPsSgAAAX4"]
[Wed Sep 30 01:08:33.757001 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.757281 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.763737 2026] [security2:error] [pid 263262:tid 263456] [client 20.70.173.30:33323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/pJPoKA.php"] [unique_id "ary1cZEcZ_148BjP8ZPsTwAAAUk"]
[Wed Sep 30 01:08:33.795173 2026] [security2:error] [pid 270884:tid 271087] [client 13.70.4.78:49364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/0.php"] [unique_id "ary1cSGeq9LtYp4zuPOL9QAAAEQ"]
[Wed Sep 30 01:08:33.807005 2026] [security2:error] [pid 270884:tid 271039] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1cSGeq9LtYp4zuPOL9gAAABQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:33.808502 2026] [security2:error] [pid 263262:tid 263496] [client 20.70.173.30:35602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/133.php"] [unique_id "ary1cZEcZ_148BjP8ZPsVAAAAXE"]
[Wed Sep 30 01:08:33.848303 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.2.60:11901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary1cSGeq9LtYp4zuPOL-QAAAEc"]
[Wed Sep 30 01:08:33.853554 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.853989 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.899668 2026] [security2:error] [pid 270884:tid 271028] [client 20.194.96.176:59420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/adminfuns.php"] [unique_id "ary1cSGeq9LtYp4zuPOL-wAAAAk"]
[Wed Sep 30 01:08:33.935208 2026] [security2:error] [pid 270884:tid 271023] [client 74.225.148.80:18452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/0.php"] [unique_id "ary1cSGeq9LtYp4zuPOL_QAAAAQ"]
[Wed Sep 30 01:08:33.944198 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:33.944601 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:33.947766 2026] [security2:error] [pid 263262:tid 263428] [client 20.219.2.60:33793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/zoo.php"] [unique_id "ary1cZEcZ_148BjP8ZPsVgAAAS0"]
[Wed Sep 30 01:08:34.030405 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.030689 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.058748 2026] [security2:error] [pid 270884:tid 271060] [client 20.219.19.141:45006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1ciGeq9LtYp4zuPOMBgAAACk"]
[Wed Sep 30 01:08:34.123171 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.123472 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.214722 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.215031 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.238944 2026] [security2:error] [pid 263262:tid 263420] [client 20.219.2.60:40756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/varb.php"] [unique_id "ary1cpEcZ_148BjP8ZPsXQAAASU"]
[Wed Sep 30 01:08:34.273270 2026] [http2:warn] [pid 251754:tid 251992] [client 40.77.167.158:47221] h2_stream(251754-467-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:34.302722 2026] [security2:error] [pid 263262:tid 263405] [client 106.214.2.47:27964] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1cpEcZ_148BjP8ZPsYQAAARY"]
[Wed Sep 30 01:08:34.302854 2026] [security2:error] [pid 263262:tid 263405] [client 106.214.2.47:27964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1cpEcZ_148BjP8ZPsYQAAARY"]
[Wed Sep 30 01:08:34.303846 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.304128 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.324841 2026] [security2:error] [pid 270884:tid 271122] [client 13.70.4.78:49305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/opsh.php"] [unique_id "ary1ciGeq9LtYp4zuPOMEwAAAGc"]
[Wed Sep 30 01:08:34.402771 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.403221 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.420249 2026] [security2:error] [pid 270884:tid 270967] [remote 44.205.74.196:0] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1ciGeq9LtYp4zuPOMGQAACU0"]
[Wed Sep 30 01:08:34.459783 2026] [security2:error] [pid 270884:tid 271060] [client 20.213.164.196:21196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/ttivnife.php"] [unique_id "ary1ciGeq9LtYp4zuPOMGgAAACk"]
[Wed Sep 30 01:08:34.463634 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:49339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gaza.php"] [unique_id "ary1ciGeq9LtYp4zuPOMGwAAAAA"]
[Wed Sep 30 01:08:34.474153 2026] [security2:error] [pid 270884:tid 271058] [client 4.240.25.22:33283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/file.php"] [unique_id "ary1ciGeq9LtYp4zuPOMHQAAACc"]
[Wed Sep 30 01:08:34.487195 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.487548 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.512151 2026] [security2:error] [pid 270884:tid 271061] [client 74.225.148.80:60888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/opsh.php"] [unique_id "ary1ciGeq9LtYp4zuPOMIAAAACo"]
[Wed Sep 30 01:08:34.515780 2026] [security2:error] [pid 270884:tid 271105] [client 168.100.149.165:41232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/utils.min.js"] [unique_id "ary1ciGeq9LtYp4zuPOMHwAAVkw"]
[Wed Sep 30 01:08:34.564431 2026] [security2:error] [pid 270884:tid 271137] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1ciGeq9LtYp4zuPOMIQAAAHY"]
[Wed Sep 30 01:08:34.576651 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.576934 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.583266 2026] [security2:error] [pid 270884:tid 271106] [client 152.56.240.85:6795] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1cSGeq9LtYp4zuPOL9wAAAFc"]
[Wed Sep 30 01:08:34.628452 2026] [security2:error] [pid 270884:tid 271091] [client 45.138.12.43:51640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ydz.jky.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1ciGeq9LtYp4zuPOMKQAAAEg"]
[Wed Sep 30 01:08:34.668459 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.668751 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.721380 2026] [security2:error] [pid 270884:tid 271129] [client 20.219.2.60:26033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/lm15.php"] [unique_id "ary1ciGeq9LtYp4zuPOMLQAAAG4"]
[Wed Sep 30 01:08:34.727480 2026] [security2:error] [pid 263262:tid 263418] [client 13.70.4.78:49300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/pass4.php"] [unique_id "ary1cpEcZ_148BjP8ZPsbQAAASM"]
[Wed Sep 30 01:08:34.746988 2026] [security2:error] [pid 263262:tid 263473] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1cpEcZ_148BjP8ZPsbgAAAVo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:34.759569 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.759848 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.771887 2026] [security2:error] [pid 263262:tid 263480] [client 20.194.5.96:17313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/zv.update.php"] [unique_id "ary1cpEcZ_148BjP8ZPscAAAAWE"]
[Wed Sep 30 01:08:34.850398 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.850666 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.888512 2026] [security2:error] [pid 263262:tid 263447] [client 20.204.42.136:58523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/edit-tags.php"] [unique_id "ary1cpEcZ_148BjP8ZPscwAAAUA"]
[Wed Sep 30 01:08:34.932724 2026] [security2:error] [pid 263262:tid 263436] [client 20.28.180.172:29597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cae2.3.php"] [unique_id "ary1cpEcZ_148BjP8ZPsdAAAATU"]
[Wed Sep 30 01:08:34.941942 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:34.942200 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:34.999494 2026] [security2:error] [pid 270884:tid 271079] [client 20.219.2.60:33832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/grsiuk.php"] [unique_id "ary1ciGeq9LtYp4zuPOMNgAAADw"]
[Wed Sep 30 01:08:35.034861 2026] [security2:error] [pid 270884:tid 271060] [client 4.240.25.22:13063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/w.php"] [unique_id "ary1cyGeq9LtYp4zuPOMOwAAACk"]
[Wed Sep 30 01:08:35.035519 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.035760 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.044732 2026] [security2:error] [pid 270884:tid 271072] [client 74.225.148.80:60916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/pass4.php"] [unique_id "ary1cyGeq9LtYp4zuPOMPAAAADU"]
[Wed Sep 30 01:08:35.053137 2026] [security2:error] [pid 270884:tid 271137] [client 13.70.4.78:49352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/drttewyh.php"] [unique_id "ary1cyGeq9LtYp4zuPOMPgAAAHY"]
[Wed Sep 30 01:08:35.124859 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.125141 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.148703 2026] [security2:error] [pid 270884:tid 271095] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1cyGeq9LtYp4zuPOMQgAAAEw"]
[Wed Sep 30 01:08:35.207161 2026] [security2:error] [pid 270884:tid 271050] [client 20.70.173.30:38806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1cyGeq9LtYp4zuPOMRAAAAB8"]
[Wed Sep 30 01:08:35.213960 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.214224 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.219405 2026] [security2:error] [pid 270884:tid 271085] [client 20.219.2.60:26000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/clss.php"] [unique_id "ary1cyGeq9LtYp4zuPOMRwAAAEI"]
[Wed Sep 30 01:08:35.306035 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.306306 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.386862 2026] [security2:error] [pid 270884:tid 270977] [remote 57.141.14.97:39590] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/wp-includes/wlwmanifest.xml"] [unique_id "ary1cyGeq9LtYp4zuPOMTAAAcFc"]
[Wed Sep 30 01:08:35.398969 2026] [security2:error] [pid 263262:tid 263462] [client 20.194.5.96:16629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/wquosqsi.php"] [unique_id "ary1c5EcZ_148BjP8ZPsegAAAU8"]
[Wed Sep 30 01:08:35.417209 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.417731 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.426454 2026] [security2:error] [pid 270884:tid 271070] [client 13.70.4.78:50196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/sh.php"] [unique_id "ary1cyGeq9LtYp4zuPOMTgAAADM"]
[Wed Sep 30 01:08:35.466145 2026] [security2:error] [pid 263262:tid 263405] [client 20.219.2.60:49309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-act.php"] [unique_id "ary1c5EcZ_148BjP8ZPsewAAARY"]
[Wed Sep 30 01:08:35.484260 2026] [security2:error] [pid 263262:tid 263459] [client 4.240.25.22:41671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/w.php"] [unique_id "ary1c5EcZ_148BjP8ZPsfgAAAUw"]
[Wed Sep 30 01:08:35.506054 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.506507 2026] [access_compat:error] [pid 263262:tid 263459] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.586226 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.586681 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.647204 2026] [security2:error] [pid 270884:tid 271070] [client 20.219.2.60:11711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1cyGeq9LtYp4zuPOMaAAAADM"]
[Wed Sep 30 01:08:35.687397 2026] [security2:error] [pid 270884:tid 271042] [client 20.219.2.60:19428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/tymn.php"] [unique_id "ary1cyGeq9LtYp4zuPOMbAAAABc"]
[Wed Sep 30 01:08:35.690391 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.690834 2026] [security2:error] [pid 270884:tid 270996] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cyGeq9LtYp4zuPOMbQAAYmo"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?t=21868
[Wed Sep 30 01:08:35.690847 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.690867 2026] [security2:error] [pid 270884:tid 270996] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1cyGeq9LtYp4zuPOMbQAAYmo"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?t=21868
[Wed Sep 30 01:08:35.752867 2026] [security2:error] [pid 270884:tid 271121] [client 13.70.4.78:49281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/groud1.php"] [unique_id "ary1cyGeq9LtYp4zuPOMbwAAAGY"]
[Wed Sep 30 01:08:35.760935 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.761202 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.834458 2026] [security2:error] [pid 270884:tid 271123] [client 20.219.2.60:26056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/44.php"] [unique_id "ary1cyGeq9LtYp4zuPOMcwAAAGg"]
[Wed Sep 30 01:08:35.843002 2026] [security2:error] [pid 270884:tid 271083] [client 74.225.148.80:60903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/drttewyh.php"] [unique_id "ary1cyGeq9LtYp4zuPOMdAAAAEA"]
[Wed Sep 30 01:08:35.850616 2026] [security2:error] [pid 270884:tid 271087] [client 182.75.216.230:58323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1cyGeq9LtYp4zuPOMdwAAAEQ"]
[Wed Sep 30 01:08:35.850732 2026] [security2:error] [pid 270884:tid 271087] [client 182.75.216.230:58323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1cyGeq9LtYp4zuPOMdwAAAEQ"]
[Wed Sep 30 01:08:35.855937 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.856376 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.943049 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:35.943312 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:35.981121 2026] [security2:error] [pid 270884:tid 271075] [client 20.219.2.60:49298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/cu.php"] [unique_id "ary1cyGeq9LtYp4zuPOMfQAAADg"]
[Wed Sep 30 01:08:35.995689 2026] [security2:error] [pid 270884:tid 271092] [client 20.28.180.172:61237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/file-mancvgertdxz.php"] [unique_id "ary1cyGeq9LtYp4zuPOMfwAAAEk"]
[Wed Sep 30 01:08:36.036524 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.036792 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.078328 2026] [security2:error] [pid 270884:tid 271059] [client 223.181.60.167:10109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1dCGeq9LtYp4zuPOMhAAAACg"]
[Wed Sep 30 01:08:36.078636 2026] [security2:error] [pid 270884:tid 271059] [client 223.181.60.167:10109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1dCGeq9LtYp4zuPOMhAAAACg"]
[Wed Sep 30 01:08:36.105631 2026] [security2:error] [pid 263262:tid 263514] [client 20.219.19.141:29764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/zoo2.php"] [unique_id "ary1dJEcZ_148BjP8ZPsmAAAAYM"]
[Wed Sep 30 01:08:36.125492 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.125795 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.213397 2026] [security2:error] [pid 263262:tid 263474] [client 20.204.42.136:58557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/nauik.php"] [unique_id "ary1dJEcZ_148BjP8ZPsngAAAVs"]
[Wed Sep 30 01:08:36.215807 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.216082 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.306319 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.306585 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.318124 2026] [security2:error] [pid 270884:tid 271075] [client 20.219.2.60:26165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/a5e0a.php"] [unique_id "ary1dCGeq9LtYp4zuPOMjQAAADg"]
[Wed Sep 30 01:08:36.345541 2026] [security2:error] [pid 270884:tid 271131] [client 20.194.5.96:16833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/asset.php"] [unique_id "ary1dCGeq9LtYp4zuPOMjgAAAHA"]
[Wed Sep 30 01:08:36.405072 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.405625 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.458510 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.2.60:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/8.php"] [unique_id "ary1dCGeq9LtYp4zuPOMlgAAAHg"]
[Wed Sep 30 01:08:36.493545 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.493837 2026] [security2:error] [pid 263262:tid 263483] [client 168.100.149.85:52186] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js"] [unique_id "ary1dJEcZ_148BjP8ZPspQABZGw"]
[Wed Sep 30 01:08:36.494045 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.495085 2026] [security2:error] [pid 263262:tid 263409] [client 74.225.148.80:60910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/sh.php"] [unique_id "ary1dJEcZ_148BjP8ZPspgAAARo"]
[Wed Sep 30 01:08:36.498522 2026] [security2:error] [pid 270884:tid 271121] [client 216.194.95.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1dCGeq9LtYp4zuPOMmQAAAGY"]
[Wed Sep 30 01:08:36.515721 2026] [security2:error] [pid 270884:tid 271095] [client 13.70.4.78:49342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/bro.php"] [unique_id "ary1dCGeq9LtYp4zuPOMnAAAAEw"]
[Wed Sep 30 01:08:36.579661 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.580002 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.609043 2026] [security2:error] [pid 263262:tid 263517] [client 220.181.108.111:39164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1dJEcZ_148BjP8ZPsqgAAAYY"]
[Wed Sep 30 01:08:36.613508 2026] [autoindex:error] [pid 263262:tid 263286] [remote 142.111.102.126:48394] AH01276: Cannot serve directory /home4/ztrcqymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:08:36.638792 2026] [security2:error] [pid 270884:tid 271134] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1dCGeq9LtYp4zuPOMoAAAAHM"]
[Wed Sep 30 01:08:36.656510 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZA==
[Wed Sep 30 01:08:36.656868 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZA==
[Wed Sep 30 01:08:36.670371 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.670672 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.767263 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.767717 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.800513 2026] [security2:error] [pid 263262:tid 263417] [client 20.219.2.60:25998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bo.php"] [unique_id "ary1dJEcZ_148BjP8ZPstgAAASI"]
[Wed Sep 30 01:08:36.837284 2026] [security2:error] [pid 270884:tid 271058] [client 155.190.6.18:48894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1dCGeq9LtYp4zuPOMqAAAACc"]
[Wed Sep 30 01:08:36.837387 2026] [security2:error] [pid 270884:tid 271058] [client 155.190.6.18:48894] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1dCGeq9LtYp4zuPOMqAAAACc"]
[Wed Sep 30 01:08:36.862824 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.863225 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:36.870535 2026] [security2:error] [pid 270884:tid 271011] [remote 57.141.14.41:51574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary1dCGeq9LtYp4zuPOMpwAAQnk"]
[Wed Sep 30 01:08:36.943986 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:49290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws60.php"] [unique_id "ary1dJEcZ_148BjP8ZPsvQAAAXg"]
[Wed Sep 30 01:08:36.947522 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:36.947797 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.036640 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.036950 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.044520 2026] [security2:error] [pid 263262:tid 263483] [client 74.225.148.80:60868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/groud1.php"] [unique_id "ary1dZEcZ_148BjP8ZPswQAAAWQ"]
[Wed Sep 30 01:08:37.084611 2026] [security2:error] [pid 270884:tid 271134] [client 20.219.19.141:29721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/zoo1.php"] [unique_id "ary1dSGeq9LtYp4zuPOMsAAAAHM"]
[Wed Sep 30 01:08:37.129074 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.129359 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.147920 2026] [security2:error] [pid 263262:tid 263450] [client 13.70.4.78:49399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/class-wp-http-client.php"] [unique_id "ary1dZEcZ_148BjP8ZPswwAAAUM"]
[Wed Sep 30 01:08:37.162677 2026] [security2:error] [pid 263262:tid 263270] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1dZEcZ_148BjP8ZPsxAABRQY"], referer: https://forum.torquayfans.com/viewtopic.php?p=59378
[Wed Sep 30 01:08:37.162704 2026] [security2:error] [pid 263262:tid 263270] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1dZEcZ_148BjP8ZPsxAABRQY"], referer: https://forum.torquayfans.com/viewtopic.php?p=59378
[Wed Sep 30 01:08:37.191391 2026] [security2:error] [pid 270884:tid 271083] [client 4.240.25.22:13110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/aaa.php"] [unique_id "ary1dSGeq9LtYp4zuPOMsgAAAEA"]
[Wed Sep 30 01:08:37.221060 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.221336 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.232398 2026] [security2:error] [pid 270884:tid 271025] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1dSGeq9LtYp4zuPOMtAAAAAY"]
[Wed Sep 30 01:08:37.262660 2026] [security2:error] [pid 270884:tid 271060] [client 116.197.133.25:49626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1dSGeq9LtYp4zuPOMtgAAACk"]
[Wed Sep 30 01:08:37.262773 2026] [security2:error] [pid 270884:tid 271060] [client 116.197.133.25:49626] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1dSGeq9LtYp4zuPOMtgAAACk"]
[Wed Sep 30 01:08:37.296615 2026] [security2:error] [pid 270884:tid 271119] [client 4.240.25.22:33305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/as.php"] [unique_id "ary1dSGeq9LtYp4zuPOMtwAAAGQ"]
[Wed Sep 30 01:08:37.306502 2026] [security2:error] [pid 270884:tid 271028] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1dSGeq9LtYp4zuPOMuAAAAAk"]
[Wed Sep 30 01:08:37.311908 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.312347 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.314372 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:40733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/56c53.php"] [unique_id "ary1dSGeq9LtYp4zuPOMugAAADU"]
[Wed Sep 30 01:08:37.338523 2026] [security2:error] [pid 263262:tid 263491] [client 103.159.192.142:51009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1dZEcZ_148BjP8ZPszAAAAWw"]
[Wed Sep 30 01:08:37.338630 2026] [security2:error] [pid 263262:tid 263491] [client 103.159.192.142:51009] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1dZEcZ_148BjP8ZPszAAAAWw"]
[Wed Sep 30 01:08:37.345788 2026] [security2:error] [pid 270884:tid 271039] [client 20.194.5.96:16851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/cued.php"] [unique_id "ary1dSGeq9LtYp4zuPOMvAAAABQ"]
[Wed Sep 30 01:08:37.395554 2026] [security2:error] [pid 263262:tid 263397] [client 4.240.25.22:43819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/aaa.php"] [unique_id "ary1dZEcZ_148BjP8ZPszwAAAQ4"]
[Wed Sep 30 01:08:37.403212 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.2.60:49322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/vanda.php"] [unique_id "ary1dSGeq9LtYp4zuPOMvgAAAEc"]
[Wed Sep 30 01:08:37.405700 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.406146 2026] [access_compat:error] [pid 263262:tid 263482] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.452148 2026] [security2:error] [pid 263262:tid 263418] [client 20.70.173.30:25477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/classwithtostring.php"] [unique_id "ary1dZEcZ_148BjP8ZPs0gAAASM"]
[Wed Sep 30 01:08:37.490376 2026] [security2:error] [pid 270884:tid 271116] [client 13.70.4.78:49402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/zoo2.php"] [unique_id "ary1dSGeq9LtYp4zuPOMwAAAAGE"]
[Wed Sep 30 01:08:37.499100 2026] [security2:error] [pid 263262:tid 263445] [client 201.32.215.149:6157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1dZEcZ_148BjP8ZPs0wAAAT4"]
[Wed Sep 30 01:08:37.499331 2026] [security2:error] [pid 263262:tid 263445] [client 201.32.215.149:6157] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1dZEcZ_148BjP8ZPs0wAAAT4"]
[Wed Sep 30 01:08:37.534637 2026] [access_compat:error] [pid 270884:tid 271092] [client 47.79.207.208:12628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:08:37.535095 2026] [access_compat:error] [pid 270884:tid 271092] [client 47.79.207.208:12628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:08:37.538077 2026] [security2:error] [pid 270884:tid 271117] [client 103.241.204.139:52622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1dSGeq9LtYp4zuPOMwwAAAGI"]
[Wed Sep 30 01:08:37.538203 2026] [security2:error] [pid 270884:tid 271117] [client 103.241.204.139:52622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1dSGeq9LtYp4zuPOMwwAAAGI"]
[Wed Sep 30 01:08:37.543590 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:26613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.543859 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:26613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.562403 2026] [security2:error] [pid 270884:tid 271111] [client 74.225.148.80:54099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/bro.php"] [unique_id "ary1dSGeq9LtYp4zuPOMxQAAAFw"]
[Wed Sep 30 01:08:37.567483 2026] [security2:error] [pid 263262:tid 263475] [client 20.213.164.196:34880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/admin.php/2P.php"] [unique_id "ary1dZEcZ_148BjP8ZPs1AAAAVw"]
[Wed Sep 30 01:08:37.584169 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.584442 2026] [access_compat:error] [pid 263262:tid 263496] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.607130 2026] [security2:error] [pid 263262:tid 263428] [client 20.198.74.230:23884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ebkid.php"] [unique_id "ary1dZEcZ_148BjP8ZPs1gAAAS0"]
[Wed Sep 30 01:08:37.672462 2026] [security2:error] [pid 270884:tid 271016] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1dSGeq9LtYp4zuPOMxgAAQH4"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D14143
[Wed Sep 30 01:08:37.678052 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.678317 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.707557 2026] [security2:error] [pid 270884:tid 271118] [client 216.73.216.46:26613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1dSGeq9LtYp4zuPOMxwAAAGM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5NDcx
[Wed Sep 30 01:08:37.716071 2026] [security2:error] [pid 270884:tid 271045] [client 172.232.190.19:61594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/zjkyavdh.php"] [unique_id "ary1dSGeq9LtYp4zuPOMyAAAABo"], referer: www.google.com
[Wed Sep 30 01:08:37.717713 2026] [security2:error] [pid 263262:tid 263468] [client 4.196.65.241:27283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/0mzrlfdt.php"] [unique_id "ary1dZEcZ_148BjP8ZPs2QAAAVU"]
[Wed Sep 30 01:08:37.751216 2026] [security2:error] [pid 270884:tid 271030] [client 177.124.23.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1dSGeq9LtYp4zuPOM0AAAAAs"]
[Wed Sep 30 01:08:37.765659 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.765924 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.790464 2026] [security2:error] [pid 263262:tid 263460] [client 20.194.5.96:17178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/sd.php"] [unique_id "ary1dZEcZ_148BjP8ZPs3gAAAU0"]
[Wed Sep 30 01:08:37.814778 2026] [security2:error] [pid 263262:tid 263405] [client 13.70.4.78:50232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/zoo1.php"] [unique_id "ary1dZEcZ_148BjP8ZPs4AAAARY"]
[Wed Sep 30 01:08:37.825337 2026] [security2:error] [pid 263262:tid 263409] [client 20.219.2.60:40758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tx78.php"] [unique_id "ary1dZEcZ_148BjP8ZPs4gAAARo"]
[Wed Sep 30 01:08:37.856256 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.856533 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.876742 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.2.60:33802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/domains.php"] [unique_id "ary1dSGeq9LtYp4zuPOM1gAAAAE"]
[Wed Sep 30 01:08:37.949286 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:37.949543 2026] [access_compat:error] [pid 263262:tid 263412] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:37.956488 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.19.141:29772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/class-ajax.php"] [unique_id "ary1dSGeq9LtYp4zuPOM2AAAAHg"]
[Wed Sep 30 01:08:38.037295 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.037559 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.114757 2026] [security2:error] [pid 270884:tid 271039] [client 20.70.173.30:56403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-filemannger.php"] [unique_id "ary1diGeq9LtYp4zuPOM3QAAABQ"]
[Wed Sep 30 01:08:38.129235 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.129505 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.131781 2026] [security2:error] [pid 263262:tid 263488] [client 13.70.4.78:49311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/class-ajax.php"] [unique_id "ary1dpEcZ_148BjP8ZPs7AAAAWk"]
[Wed Sep 30 01:08:38.136593 2026] [security2:error] [pid 263262:tid 263358] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1dpEcZ_148BjP8ZPs7QABWl4"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D251243
[Wed Sep 30 01:08:38.136624 2026] [security2:error] [pid 263262:tid 263358] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1dpEcZ_148BjP8ZPs7QABWl4"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D251243
[Wed Sep 30 01:08:38.221374 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.221657 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.254461 2026] [security2:error] [pid 263262:tid 263496] [client 4.240.25.22:41690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/images.php"] [unique_id "ary1dpEcZ_148BjP8ZPs8QAAAXE"]
[Wed Sep 30 01:08:38.294971 2026] [security2:error] [pid 270884:tid 271116] [client 20.219.2.60:40761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws80.php"] [unique_id "ary1diGeq9LtYp4zuPOM5AAAAGE"]
[Wed Sep 30 01:08:38.304948 2026] [security2:error] [pid 263262:tid 263305] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1dpEcZ_148BjP8ZPs8wABLSk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=6323366e0aec77faa7965f3eebcc2e0c
[Wed Sep 30 01:08:38.304999 2026] [security2:error] [pid 263262:tid 263305] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1dpEcZ_148BjP8ZPs8wABLSk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302265&sid=6323366e0aec77faa7965f3eebcc2e0c
[Wed Sep 30 01:08:38.311255 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.311550 2026] [access_compat:error] [pid 263262:tid 263512] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.331035 2026] [security2:error] [pid 270884:tid 271087] [client 2.91.255.184:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/power-products/stabilizers"] [unique_id "ary1diGeq9LtYp4zuPOM6AAAAEQ"]
[Wed Sep 30 01:08:38.335161 2026] [security2:error] [pid 270884:tid 271117] [client 20.219.2.60:49305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/144.php"] [unique_id "ary1diGeq9LtYp4zuPOM6QAAAGI"]
[Wed Sep 30 01:08:38.412681 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.413128 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.413841 2026] [security2:error] [pid 263262:tid 263453] [client 20.204.42.136:36692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wander.php"] [unique_id "ary1dpEcZ_148BjP8ZPs-QAAAUY"]
[Wed Sep 30 01:08:38.437939 2026] [security2:error] [pid 263262:tid 263493] [client 20.28.180.172:62338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1dpEcZ_148BjP8ZPs-gAAAW4"]
[Wed Sep 30 01:08:38.466574 2026] [security2:error] [pid 263262:tid 263462] [client 20.213.164.196:21216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/a.php"] [unique_id "ary1dpEcZ_148BjP8ZPs_AAAAU8"]
[Wed Sep 30 01:08:38.494464 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.494740 2026] [access_compat:error] [pid 263262:tid 263507] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.519880 2026] [security2:error] [pid 263262:tid 263419] [client 74.225.148.80:54109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1dpEcZ_148BjP8ZPs_gAAASQ"]
[Wed Sep 30 01:08:38.524219 2026] [security2:error] [pid 270884:tid 271111] [client 168.100.149.144:56510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/equal-height-columns/public/js/equal-height-columns-public.js"] [unique_id "ary1diGeq9LtYp4zuPOM6wAAXAU"]
[Wed Sep 30 01:08:38.536544 2026] [http2:warn] [pid 251754:tid 251943] [client 52.167.144.25:39678] h2_stream(251754-514-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:38.572924 2026] [security2:error] [pid 270884:tid 271043] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1diGeq9LtYp4zuPOM7QAAABg"]
[Wed Sep 30 01:08:38.585386 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.585657 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.586881 2026] [security2:error] [pid 263262:tid 263409] [client 13.70.4.78:49407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gm.php"] [unique_id "ary1dpEcZ_148BjP8ZPtAQAAARo"]
[Wed Sep 30 01:08:38.606942 2026] [security2:error] [pid 263262:tid 263424] [client 14.224.196.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "hy-initiative.com"] [uri "/"] [unique_id "ary1dpEcZ_148BjP8ZPtBAAAASk"]
[Wed Sep 30 01:08:38.677147 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.677413 2026] [access_compat:error] [pid 263262:tid 263410] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.724645 2026] [security2:error] [pid 270884:tid 271040] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1diGeq9LtYp4zuPOM8QAAABU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:38.768070 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.768352 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.771465 2026] [security2:error] [pid 263262:tid 263482] [client 20.219.2.60:11689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws57.php"] [unique_id "ary1dpEcZ_148BjP8ZPtDgAAAWM"]
[Wed Sep 30 01:08:38.790193 2026] [security2:error] [pid 263262:tid 263418] [client 20.219.2.60:49323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/asd.php"] [unique_id "ary1dpEcZ_148BjP8ZPtDwAAASM"]
[Wed Sep 30 01:08:38.798133 2026] [security2:error] [pid 263262:tid 263475] [client 20.219.2.60:26066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/jga.php"] [unique_id "ary1dpEcZ_148BjP8ZPtEwAAAVw"]
[Wed Sep 30 01:08:38.862914 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.863343 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.873712 2026] [security2:error] [pid 263262:tid 263429] [client 20.194.5.96:17213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/ans.php"] [unique_id "ary1dpEcZ_148BjP8ZPtFgAAAS4"]
[Wed Sep 30 01:08:38.901365 2026] [security2:error] [pid 263262:tid 263416] [client 20.219.19.141:29794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/gm.php"] [unique_id "ary1dpEcZ_148BjP8ZPtFwAAASE"]
[Wed Sep 30 01:08:38.952498 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:38.952933 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:38.994053 2026] [security2:error] [pid 270884:tid 271066] [client 13.70.4.78:50176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/class-wp-site-list.php"] [unique_id "ary1diGeq9LtYp4zuPOM9gAAAC8"]
[Wed Sep 30 01:08:39.012692 2026] [security2:error] [pid 270884:tid 271075] [client 14.224.196.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "hy-initiative.com"] [uri "/"] [unique_id "ary1dyGeq9LtYp4zuPOM-QAAADg"]
[Wed Sep 30 01:08:39.030938 2026] [security2:error] [pid 263262:tid 263446] [client 20.194.96.176:58117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1d5EcZ_148BjP8ZPtHQAAAT8"]
[Wed Sep 30 01:08:39.040822 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.041077 2026] [access_compat:error] [pid 263262:tid 263419] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.114613 2026] [security2:error] [pid 263262:tid 263423] [client 74.225.148.80:54121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/zoo2.php"] [unique_id "ary1d5EcZ_148BjP8ZPtIAAAASg"]
[Wed Sep 30 01:08:39.132611 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.132906 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.222423 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.222704 2026] [access_compat:error] [pid 263262:tid 263519] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.259541 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:49288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/zc-104.php"] [unique_id "ary1dyGeq9LtYp4zuPONAQAAAHw"]
[Wed Sep 30 01:08:39.260325 2026] [security2:error] [pid 263262:tid 263433] [client 20.219.2.60:26094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/fs.php"] [unique_id "ary1d5EcZ_148BjP8ZPtLAAAATI"]
[Wed Sep 30 01:08:39.313691 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.313960 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:5781] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.333360 2026] [security2:error] [pid 270884:tid 271029] [client 13.70.4.78:49375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/asd2.php"] [unique_id "ary1dyGeq9LtYp4zuPONAgAAAAo"]
[Wed Sep 30 01:08:39.392864 2026] [security2:error] [pid 263262:tid 263445] [client 37.41.16.35:53447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1d5EcZ_148BjP8ZPtMgAAAT4"]
[Wed Sep 30 01:08:39.393099 2026] [security2:error] [pid 263262:tid 263445] [client 37.41.16.35:53447] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1d5EcZ_148BjP8ZPtMgAAAT4"]
[Wed Sep 30 01:08:39.410819 2026] [security2:error] [pid 270884:tid 271090] [client 20.194.5.96:16595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/cns.php"] [unique_id "ary1dyGeq9LtYp4zuPONBAAAAEc"]
[Wed Sep 30 01:08:39.413951 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.414395 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.549192 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.549467 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.587921 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.588195 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.628517 2026] [security2:error] [pid 270884:tid 271123] [client 49.37.102.248:23105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1dyGeq9LtYp4zuPONCAAAAGg"]
[Wed Sep 30 01:08:39.628637 2026] [security2:error] [pid 270884:tid 271123] [client 49.37.102.248:23105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1dyGeq9LtYp4zuPONCAAAAGg"]
[Wed Sep 30 01:08:39.645206 2026] [security2:error] [pid 263262:tid 263493] [client 20.70.173.30:38900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1d5EcZ_148BjP8ZPtOAAAAW4"]
[Wed Sep 30 01:08:39.676511 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.676788 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.676886 2026] [core:error] [pid 270884:tid 271096] [client 45.138.12.41:3916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:39.676899 2026] [core:error] [pid 270884:tid 271096] [client 45.138.12.41:3916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:39.683519 2026] [security2:error] [pid 263262:tid 263326] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1d5EcZ_148BjP8ZPtOgABgT4"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=1685
[Wed Sep 30 01:08:39.683538 2026] [security2:error] [pid 263262:tid 263326] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1d5EcZ_148BjP8ZPtOgABgT4"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=1685
[Wed Sep 30 01:08:39.725505 2026] [security2:error] [pid 263262:tid 263506] [client 20.219.2.60:26046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/byypas.php"] [unique_id "ary1d5EcZ_148BjP8ZPtPAAAAXs"]
[Wed Sep 30 01:08:39.726234 2026] [security2:error] [pid 263262:tid 263446] [client 216.73.216.46:5781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1d5EcZ_148BjP8ZPtPQAAAT8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTEvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTY0
[Wed Sep 30 01:08:39.732039 2026] [security2:error] [pid 270884:tid 271064] [client 13.70.4.78:49405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/cdc.php"] [unique_id "ary1dyGeq9LtYp4zuPONDgAAAC0"]
[Wed Sep 30 01:08:39.743449 2026] [security2:error] [pid 263262:tid 263419] [client 20.219.2.60:33816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/rzki.php"] [unique_id "ary1d5EcZ_148BjP8ZPtPwAAASQ"]
[Wed Sep 30 01:08:39.768790 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.769067 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.770080 2026] [access_compat:error] [pid 270884:tid 271072] [client 47.79.13.158:56938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:39.770354 2026] [access_compat:error] [pid 270884:tid 271072] [client 47.79.13.158:56938] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:39.816647 2026] [security2:error] [pid 263262:tid 263495] [client 172.232.190.19:50592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/wp-plain.php"] [unique_id "ary1d5EcZ_148BjP8ZPtQwAAAXA"], referer: www.google.com
[Wed Sep 30 01:08:39.832101 2026] [security2:error] [pid 263262:tid 263519] [client 20.219.19.141:65510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1d5EcZ_148BjP8ZPtRQAAAYg"]
[Wed Sep 30 01:08:39.861123 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.861394 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:39.898206 2026] [security2:error] [pid 270884:tid 271111] [client 74.225.148.80:60926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/zoo1.php"] [unique_id "ary1dyGeq9LtYp4zuPONFwAAAFw"]
[Wed Sep 30 01:08:39.926823 2026] [security2:error] [pid 270884:tid 271143] [client 20.213.164.196:21211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/cord.php"] [unique_id "ary1dyGeq9LtYp4zuPONGAAAAHw"]
[Wed Sep 30 01:08:39.952915 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:39.953206 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.026691 2026] [security2:error] [pid 263262:tid 263444] [client 20.70.173.30:35590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/pfm.php"] [unique_id "ary1eJEcZ_148BjP8ZPtSAAAAT0"]
[Wed Sep 30 01:08:40.043628 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.043934 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.069673 2026] [security2:error] [pid 263262:tid 263428] [client 13.70.4.78:49302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gulu.php"] [unique_id "ary1eJEcZ_148BjP8ZPtSwAAAS0"]
[Wed Sep 30 01:08:40.133563 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.133947 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.156247 2026] [security2:error] [pid 263262:tid 263473] [client 131.123.43.138:34294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.43.123.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php/wp-login.php"] [unique_id "ary1eJEcZ_148BjP8ZPtTgAAAVo"]
[Wed Sep 30 01:08:40.206283 2026] [security2:error] [pid 263262:tid 263463] [client 20.219.2.60:48073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/xsas.php"] [unique_id "ary1eJEcZ_148BjP8ZPtTwAAAVA"]
[Wed Sep 30 01:08:40.213471 2026] [security2:error] [pid 263262:tid 263453] [client 20.219.2.60:26025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/b.php"] [unique_id "ary1eJEcZ_148BjP8ZPtUQAAAUY"]
[Wed Sep 30 01:08:40.219821 2026] [security2:error] [pid 263262:tid 263468] [client 49.43.163.212:59678] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1eJEcZ_148BjP8ZPtUgAAAVU"]
[Wed Sep 30 01:08:40.219927 2026] [security2:error] [pid 263262:tid 263468] [client 49.43.163.212:59678] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1eJEcZ_148BjP8ZPtUgAAAVU"]
[Wed Sep 30 01:08:40.226069 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.226515 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.314530 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.314786 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.366666 2026] [security2:error] [pid 263262:tid 263419] [client 20.194.5.96:17058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/faiy.php"] [unique_id "ary1eJEcZ_148BjP8ZPtVgAAASQ"]
[Wed Sep 30 01:08:40.416782 2026] [security2:error] [pid 263262:tid 263503] [client 13.70.4.78:49360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/bala.php"] [unique_id "ary1eJEcZ_148BjP8ZPtVwAAAXg"]
[Wed Sep 30 01:08:40.419028 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.419502 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.486013 2026] [access_compat:error] [pid 270884:tid 271138] [client 47.79.13.175:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:40.486281 2026] [access_compat:error] [pid 270884:tid 271138] [client 47.79.13.175:55688] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:40.509851 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.510110 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.517301 2026] [security2:error] [pid 270884:tid 271095] [client 168.100.149.66:59462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js"] [unique_id "ary1eCGeq9LtYp4zuPONNAAATB4"]
[Wed Sep 30 01:08:40.527292 2026] [security2:error] [pid 270884:tid 271037] [client 20.70.173.30:33318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/admin.php"] [unique_id "ary1eCGeq9LtYp4zuPONNgAAABI"]
[Wed Sep 30 01:08:40.528796 2026] [security2:error] [pid 270884:tid 271139] [client 4.240.25.22:43779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/chosen.php"] [unique_id "ary1eCGeq9LtYp4zuPONNwAAAHg"]
[Wed Sep 30 01:08:40.561078 2026] [security2:error] [pid 270884:tid 271071] [client 20.28.180.172:29592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/.cache.php"] [unique_id "ary1eCGeq9LtYp4zuPONOQAAADQ"]
[Wed Sep 30 01:08:40.589426 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.589707 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.634879 2026] [security2:error] [pid 270884:tid 271090] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eCGeq9LtYp4zuPONPwAAAEc"]
[Wed Sep 30 01:08:40.679744 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.680128 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.686316 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:33840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/d12.php"] [unique_id "ary1eCGeq9LtYp4zuPONRwAAAFc"]
[Wed Sep 30 01:08:40.697724 2026] [security2:error] [pid 263262:tid 263501] [client 45.138.12.32:29920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hch.uhf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1eJEcZ_148BjP8ZPtZAAAAXY"]
[Wed Sep 30 01:08:40.741440 2026] [security2:error] [pid 270884:tid 271111] [client 13.70.4.78:49396] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/c99.php"] [unique_id "ary1eCGeq9LtYp4zuPONSgAAAFw"]
[Wed Sep 30 01:08:40.745652 2026] [security2:error] [pid 270884:tid 271077] [client 20.219.2.60:26015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws49.php"] [unique_id "ary1eCGeq9LtYp4zuPONSwAAADo"]
[Wed Sep 30 01:08:40.767243 2026] [security2:error] [pid 263262:tid 263514] [client 74.225.148.80:60870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/class-ajax.php"] [unique_id "ary1eJEcZ_148BjP8ZPtaAAAAYM"]
[Wed Sep 30 01:08:40.771603 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.771905 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.819133 2026] [access_compat:error] [pid 270884:tid 271130] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2N3ZA==
[Wed Sep 30 01:08:40.819410 2026] [access_compat:error] [pid 270884:tid 271130] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODE4L2N3ZA==
[Wed Sep 30 01:08:40.861671 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.861960 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:43437] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.956927 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:40.957371 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:40.974618 2026] [security2:error] [pid 263262:tid 263412] [client 20.219.2.60:18858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/eetu.php"] [unique_id "ary1eJEcZ_148BjP8ZPtbAAAAR0"]
[Wed Sep 30 01:08:41.059397 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.059680 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.070019 2026] [security2:error] [pid 263262:tid 263442] [client 13.70.4.78:50178] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/c99.php"] [unique_id "ary1eZEcZ_148BjP8ZPtbQAAATs"]
[Wed Sep 30 01:08:41.138439 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.138705 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.139470 2026] [security2:error] [pid 270884:tid 271106] [client 20.194.5.96:16872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/gecho.php"] [unique_id "ary1eSGeq9LtYp4zuPONVAAAAFc"]
[Wed Sep 30 01:08:41.166851 2026] [security2:error] [pid 263262:tid 263454] [client 20.219.2.60:33828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/okxh.php"] [unique_id "ary1eZEcZ_148BjP8ZPtcAAAAUc"]
[Wed Sep 30 01:08:41.190051 2026] [security2:error] [pid 263262:tid 263512] [client 20.219.2.60:11337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/.qiodetme.php"] [unique_id "ary1eZEcZ_148BjP8ZPtcQAAAYE"]
[Wed Sep 30 01:08:41.196527 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.19.141:29725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/ttivnife.php"] [unique_id "ary1eSGeq9LtYp4zuPONWwAAACA"]
[Wed Sep 30 01:08:41.200669 2026] [security2:error] [pid 263262:tid 263496] [client 20.213.164.196:21186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/anom.php"] [unique_id "ary1eZEcZ_148BjP8ZPtcwAAAXE"]
[Wed Sep 30 01:08:41.225143 2026] [security2:error] [pid 270884:tid 271111] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONXAAAAFw"]
[Wed Sep 30 01:08:41.229290 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.229566 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.233715 2026] [access_compat:error] [pid 270884:tid 271073] [client 47.79.13.53:37806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:41.233999 2026] [access_compat:error] [pid 270884:tid 271073] [client 47.79.13.53:37806] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:41.243839 2026] [security2:error] [pid 263262:tid 263443] [client 74.225.148.80:54125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gm.php"] [unique_id "ary1eZEcZ_148BjP8ZPtdQAAATw"]
[Wed Sep 30 01:08:41.249290 2026] [security2:error] [pid 263262:tid 263419] [client 216.73.216.46:43437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1eZEcZ_148BjP8ZPtdgAAASQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTgz
[Wed Sep 30 01:08:41.285092 2026] [security2:error] [pid 270884:tid 271040] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONYQAAABU"]
[Wed Sep 30 01:08:41.322276 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.322573 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.371058 2026] [security2:error] [pid 270884:tid 271025] [client 20.219.2.60:40738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-blog-header.php"] [unique_id "ary1eSGeq9LtYp4zuPONYwAAAAY"]
[Wed Sep 30 01:08:41.419752 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.420214 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.444796 2026] [security2:error] [pid 270884:tid 271067] [client 20.70.173.30:38850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1eSGeq9LtYp4zuPONZwAAADA"]
[Wed Sep 30 01:08:41.470617 2026] [security2:error] [pid 263262:tid 263451] [client 13.70.4.78:49298] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/c99.php"] [unique_id "ary1eZEcZ_148BjP8ZPtfAAAAUQ"]
[Wed Sep 30 01:08:41.500676 2026] [security2:error] [pid 270884:tid 271077] [client 20.28.180.172:62383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws57.php"] [unique_id "ary1eSGeq9LtYp4zuPONagAAADo"]
[Wed Sep 30 01:08:41.511016 2026] [security2:error] [pid 270884:tid 271111] [client 20.194.5.96:17158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/gu.php"] [unique_id "ary1eSGeq9LtYp4zuPONawAAAFw"]
[Wed Sep 30 01:08:41.554105 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.554368 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.614641 2026] [security2:error] [pid 270884:tid 271095] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONcgAAAEw"]
[Wed Sep 30 01:08:41.615696 2026] [security2:error] [pid 263262:tid 263493] [client 203.122.45.246:49554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1eZEcZ_148BjP8ZPtgAAAAW4"]
[Wed Sep 30 01:08:41.615827 2026] [security2:error] [pid 263262:tid 263493] [client 203.122.45.246:49554] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1eZEcZ_148BjP8ZPtgAAAAW4"]
[Wed Sep 30 01:08:41.616583 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.616845 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.645794 2026] [security2:error] [pid 270884:tid 271038] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1eSGeq9LtYp4zuPONdwAAABM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:41.655151 2026] [security2:error] [pid 270884:tid 271063] [client 20.219.2.60:48072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/55b76.php"] [unique_id "ary1eSGeq9LtYp4zuPONegAAACw"]
[Wed Sep 30 01:08:41.673177 2026] [security2:error] [pid 270884:tid 271083] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONfAAAAEA"]
[Wed Sep 30 01:08:41.683476 2026] [security2:error] [pid 270884:tid 271039] [client 152.59.165.7:54539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1eSGeq9LtYp4zuPONfgAAABQ"]
[Wed Sep 30 01:08:41.683576 2026] [security2:error] [pid 270884:tid 271039] [client 152.59.165.7:54539] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1eSGeq9LtYp4zuPONfgAAABQ"]
[Wed Sep 30 01:08:41.685965 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.686347 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.727965 2026] [security2:error] [pid 270884:tid 271106] [client 74.225.148.80:54088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1eSGeq9LtYp4zuPONgwAAAFc"]
[Wed Sep 30 01:08:41.738311 2026] [security2:error] [pid 270884:tid 271081] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONggAAAD4"]
[Wed Sep 30 01:08:41.774678 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.774988 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.798371 2026] [security2:error] [pid 270884:tid 271046] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eSGeq9LtYp4zuPONiQAAABs"]
[Wed Sep 30 01:08:41.851560 2026] [security2:error] [pid 270884:tid 271118] [client 13.70.4.78:49286] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/c99.php"] [unique_id "ary1eSGeq9LtYp4zuPONjgAAAGM"]
[Wed Sep 30 01:08:41.865393 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.865665 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.895988 2026] [security2:error] [pid 270884:tid 271025] [client 20.204.42.136:57804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wsd.php"] [unique_id "ary1eSGeq9LtYp4zuPONkgAAAAY"]
[Wed Sep 30 01:08:41.906611 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.2.60:25996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bgymj.php"] [unique_id "ary1eSGeq9LtYp4zuPONkwAAAH0"]
[Wed Sep 30 01:08:41.931201 2026] [security2:error] [pid 270884:tid 271065] [client 173.254.29.157:52036] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary1eSGeq9LtYp4zuPONmQAAAC4"]
[Wed Sep 30 01:08:41.935142 2026] [security2:error] [pid 270884:tid 271031] [client 103.159.192.142:51498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1eSGeq9LtYp4zuPONmgAAAAw"]
[Wed Sep 30 01:08:41.935241 2026] [security2:error] [pid 270884:tid 271031] [client 103.159.192.142:51498] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1eSGeq9LtYp4zuPONmgAAAAw"]
[Wed Sep 30 01:08:41.946160 2026] [security2:error] [pid 270884:tid 271146] [client 173.254.29.157:52040] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary1eSGeq9LtYp4zuPONnAAAAH8"]
[Wed Sep 30 01:08:41.957671 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:41.958099 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:41.962366 2026] [security2:error] [pid 270884:tid 271111] [client 173.254.29.157:52044] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary1eSGeq9LtYp4zuPONngAAAFw"]
[Wed Sep 30 01:08:41.978943 2026] [security2:error] [pid 270884:tid 271046] [client 173.254.29.157:52046] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary1eSGeq9LtYp4zuPONoQAAABs"]
[Wed Sep 30 01:08:42.002452 2026] [access_compat:error] [pid 270884:tid 271054] [client 47.79.13.167:46966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:42.002731 2026] [access_compat:error] [pid 270884:tid 271054] [client 47.79.13.167:46966] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:42.021092 2026] [security2:error] [pid 270884:tid 271118] [client 23.238.64.104:52960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.64.238.23.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1eiGeq9LtYp4zuPONpwAAAGM"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:08:42.021836 2026] [security2:error] [pid 263262:tid 263475] [client 85.89.202.233:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1epEcZ_148BjP8ZPtkQAAAVw"]
[Wed Sep 30 01:08:42.047552 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.047880 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.054706 2026] [security2:error] [pid 263262:tid 263445] [client 103.168.67.253:10760] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1epEcZ_148BjP8ZPtlQAAAT4"]
[Wed Sep 30 01:08:42.125832 2026] [security2:error] [pid 263262:tid 263468] [client 20.219.2.60:48067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tt.php"] [unique_id "ary1epEcZ_148BjP8ZPtmAAAAVU"]
[Wed Sep 30 01:08:42.141034 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.141284 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.177843 2026] [security2:error] [pid 270884:tid 271095] [client 13.70.4.78:49325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/ttivnife.php"] [unique_id "ary1eiGeq9LtYp4zuPONtgAAAEw"]
[Wed Sep 30 01:08:42.185095 2026] [security2:error] [pid 270884:tid 271059] [client 122.173.27.10:5777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1eiGeq9LtYp4zuPONtwAAACg"]
[Wed Sep 30 01:08:42.185956 2026] [security2:error] [pid 270884:tid 271059] [client 122.173.27.10:5777] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1eiGeq9LtYp4zuPONtwAAACg"]
[Wed Sep 30 01:08:42.207940 2026] [security2:error] [pid 270884:tid 271146] [client 74.225.148.80:54105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/asd2.php"] [unique_id "ary1eiGeq9LtYp4zuPONuQAAAH8"]
[Wed Sep 30 01:08:42.230120 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.230389 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.232890 2026] [security2:error] [pid 270884:tid 271081] [client 34.74.45.120:58200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPONvQAAAD4"]
[Wed Sep 30 01:08:42.269494 2026] [security2:error] [pid 270884:tid 271038] [client 34.74.45.120:53022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPONwAAAABM"]
[Wed Sep 30 01:08:42.276449 2026] [security2:error] [pid 270884:tid 271085] [client 20.70.173.30:53981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/well.php"] [unique_id "ary1eiGeq9LtYp4zuPONwQAAAEI"]
[Wed Sep 30 01:08:42.321749 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.322024 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.370260 2026] [security2:error] [pid 263262:tid 263397] [client 20.219.2.60:40736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gfd.php"] [unique_id "ary1epEcZ_148BjP8ZPtnwAAAQ4"]
[Wed Sep 30 01:08:42.380597 2026] [security2:error] [pid 270884:tid 271095] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1eiGeq9LtYp4zuPONxwAAAEw"]
[Wed Sep 30 01:08:42.385508 2026] [security2:error] [pid 270884:tid 271096] [client 20.194.5.96:16591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/nck.php"] [unique_id "ary1eiGeq9LtYp4zuPONyQAAAE0"]
[Wed Sep 30 01:08:42.391478 2026] [security2:error] [pid 270884:tid 271123] [client 34.74.45.120:61087] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPONygAAAGg"]
[Wed Sep 30 01:08:42.403348 2026] [security2:error] [pid 270884:tid 271088] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1eiGeq9LtYp4zuPONywAAAEU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:42.410966 2026] [security2:error] [pid 263262:tid 263411] [client 34.74.45.120:60387] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1epEcZ_148BjP8ZPtoAAAARw"]
[Wed Sep 30 01:08:42.439025 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.439474 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.439533 2026] [security2:error] [pid 263262:tid 263411] [client 74.7.228.56:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "afrilech.org"] [uri "/robots.txt"] [unique_id "ary1epEcZ_148BjP8ZPtoQAAARw"]
[Wed Sep 30 01:08:42.441185 2026] [security2:error] [pid 263262:tid 263411] [client 74.7.228.56:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "afrilech.org"] [uri "/robots.txt"] [unique_id "ary1epEcZ_148BjP8ZPtoQAAARw"]
[Wed Sep 30 01:08:42.455509 2026] [security2:error] [pid 270884:tid 271081] [client 20.198.74.230:24141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/edorxrr.php"] [unique_id "ary1eiGeq9LtYp4zuPON1AAAAD4"]
[Wed Sep 30 01:08:42.485102 2026] [security2:error] [pid 270884:tid 271118] [client 74.7.228.56:34020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "afrilech.org"] [uri "/robots.txt"] [unique_id "ary1eiGeq9LtYp4zuPONyAAAAGM"]
[Wed Sep 30 01:08:42.501533 2026] [security2:error] [pid 270884:tid 271051] [client 168.100.149.189:60166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/i18n.min.js"] [unique_id "ary1eiGeq9LtYp4zuPON2gAAIDs"]
[Wed Sep 30 01:08:42.504529 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.504765 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.511395 2026] [security2:error] [pid 263262:tid 263422] [client 13.70.4.78:49299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/admin.php/2P.php"] [unique_id "ary1epEcZ_148BjP8ZPtpwAAASc"]
[Wed Sep 30 01:08:42.562030 2026] [security2:error] [pid 270884:tid 271095] [client 34.74.45.120:53773] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON3QAAAEw"]
[Wed Sep 30 01:08:42.572247 2026] [security2:error] [pid 270884:tid 271029] [client 34.74.45.120:60790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON3wAAAAo"]
[Wed Sep 30 01:08:42.597007 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.597314 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.606335 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.2.60:49311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/maul.php"] [unique_id "ary1eiGeq9LtYp4zuPON5gAAAH0"]
[Wed Sep 30 01:08:42.688474 2026] [security2:error] [pid 270884:tid 271097] [client 34.74.45.120:62908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON8gAAAE4"]
[Wed Sep 30 01:08:42.689060 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.689335 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.699638 2026] [security2:error] [pid 270884:tid 271055] [client 34.74.45.120:55169] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON9AAAACQ"]
[Wed Sep 30 01:08:42.733149 2026] [security2:error] [pid 263262:tid 263394] [client 202.179.95.79:61783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1epEcZ_148BjP8ZPtsAAAAQs"]
[Wed Sep 30 01:08:42.733731 2026] [security2:error] [pid 263262:tid 263394] [client 202.179.95.79:61783] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1epEcZ_148BjP8ZPtsAAAAQs"]
[Wed Sep 30 01:08:42.735494 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.19.141:38225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/admin.php/2P.php"] [unique_id "ary1eiGeq9LtYp4zuPON9QAAACA"]
[Wed Sep 30 01:08:42.786966 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.787237 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:43630] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.801126 2026] [security2:error] [pid 270884:tid 271133] [client 74.225.148.80:18445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/cdc.php"] [unique_id "ary1eiGeq9LtYp4zuPON-gAAAHI"]
[Wed Sep 30 01:08:42.802997 2026] [security2:error] [pid 270884:tid 271054] [client 34.74.45.120:57291] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON-wAAACM"]
[Wed Sep 30 01:08:42.817578 2026] [security2:error] [pid 263262:tid 263507] [client 34.74.45.120:57777] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary1epEcZ_148BjP8ZPtsQAAAXw"]
[Wed Sep 30 01:08:42.850415 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:40739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/callback.php"] [unique_id "ary1eiGeq9LtYp4zuPON_AAAAH8"]
[Wed Sep 30 01:08:42.878513 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.878779 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:42.918129 2026] [security2:error] [pid 270884:tid 271025] [client 13.70.4.78:50177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/cord.php"] [unique_id "ary1eiGeq9LtYp4zuPON_gAAAAY"]
[Wed Sep 30 01:08:42.933878 2026] [security2:error] [pid 263262:tid 263406] [client 105.112.178.79:38376] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.toq.bzn.mybluehost.me"] [uri "/__ss_probe_0fac2c0d38cbde767c44b7a2aebf3701__"] [unique_id "ary1epEcZ_148BjP8ZPtsgAAARc"]
[Wed Sep 30 01:08:42.940795 2026] [security2:error] [pid 263262:tid 263512] [client 34.74.45.120:55436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1epEcZ_148BjP8ZPtswAAAYE"]
[Wed Sep 30 01:08:42.943158 2026] [security2:error] [pid 270884:tid 271059] [client 34.74.45.120:54329] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1eiGeq9LtYp4zuPON_wAAACg"]
[Wed Sep 30 01:08:42.944877 2026] [security2:error] [pid 263262:tid 263465] [client 20.204.42.136:36674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/media.php"] [unique_id "ary1epEcZ_148BjP8ZPttAAAAVI"]
[Wed Sep 30 01:08:42.969183 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:42.969458 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.016523 2026] [security2:error] [pid 263262:tid 263520] [client 4.240.25.22:12453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/log.php"] [unique_id "ary1e5EcZ_148BjP8ZPttQAAAYk"]
[Wed Sep 30 01:08:43.033660 2026] [security2:error] [pid 270884:tid 271144] [client 169.40.142.132:46170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.zqk.mzl.mybluehost.me"] [uri "/index.php"] [unique_id "ary1eyGeq9LtYp4zuPOOBAAAAH0"]
[Wed Sep 30 01:08:43.046037 2026] [security2:error] [pid 263262:tid 263409] [client 20.70.173.30:25504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/key.php"] [unique_id "ary1e5EcZ_148BjP8ZPttwAAARo"]
[Wed Sep 30 01:08:43.057423 2026] [security2:error] [pid 263262:tid 263503] [client 23.238.64.104:38220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.64.238.23.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1e5EcZ_148BjP8ZPtuQAAAXg"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:08:43.094161 2026] [security2:error] [pid 263262:tid 263417] [client 34.74.45.120:52429] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary1e5EcZ_148BjP8ZPtvAAAASI"]
[Wed Sep 30 01:08:43.097467 2026] [security2:error] [pid 263262:tid 263397] [client 34.74.45.120:52434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1e5EcZ_148BjP8ZPtvQAAAQ4"]
[Wed Sep 30 01:08:43.110735 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:33457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.111016 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:33457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.172989 2026] [security2:error] [pid 263262:tid 263501] [client 20.194.96.176:16104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1e5EcZ_148BjP8ZPtwQAAAXY"]
[Wed Sep 30 01:08:43.208299 2026] [security2:error] [pid 270884:tid 271118] [client 216.73.216.46:43630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1eyGeq9LtYp4zuPOODAAAAGM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mjc2L25vZGUwL21lbW9yeTM4OA%3D%3D
[Wed Sep 30 01:08:43.218011 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:15819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.218260 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:15819] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.249026 2026] [security2:error] [pid 263262:tid 263416] [client 13.70.4.78:49336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/anom.php"] [unique_id "ary1e5EcZ_148BjP8ZPtwwAAASE"]
[Wed Sep 30 01:08:43.269857 2026] [security2:error] [pid 263262:tid 263452] [client 34.74.45.120:64023] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1e5EcZ_148BjP8ZPtxQAAAUU"]
[Wed Sep 30 01:08:43.271463 2026] [security2:error] [pid 270884:tid 271031] [client 34.74.45.120:58238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1eyGeq9LtYp4zuPOODwAAAAw"]
[Wed Sep 30 01:08:43.297378 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.297646 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.337957 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:33457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.338234 2026] [access_compat:error] [pid 263262:tid 263488] [client 216.73.216.46:33457] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.352058 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.2.60:40709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/file.php"] [unique_id "ary1eyGeq9LtYp4zuPOOFAAAAEc"]
[Wed Sep 30 01:08:43.361514 2026] [security2:error] [pid 263262:tid 263428] [client 20.28.180.172:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/.qiodetme.php"] [unique_id "ary1e5EcZ_148BjP8ZPtyAAAAS0"]
[Wed Sep 30 01:08:43.383558 2026] [security2:error] [pid 270884:tid 271051] [client 216.73.216.46:15819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1eyGeq9LtYp4zuPOOFwAAACA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvbm9kZTAvbWVtb3J5Mjgw
[Wed Sep 30 01:08:43.405829 2026] [security2:error] [pid 270884:tid 271125] [client 161.77.39.187:56771] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "403"] [hostname "hairdefinitions.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1biGeq9LtYp4zuPOLPgAAAGo"]
[Wed Sep 30 01:08:43.414755 2026] [security2:error] [pid 270884:tid 271039] [client 34.74.45.120:58515] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1eyGeq9LtYp4zuPOOGQAAABQ"]
[Wed Sep 30 01:08:43.424180 2026] [security2:error] [pid 263262:tid 263453] [client 74.225.148.80:60869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gulu.php"] [unique_id "ary1e5EcZ_148BjP8ZPtygAAAUY"]
[Wed Sep 30 01:08:43.427479 2026] [security2:error] [pid 263262:tid 263483] [client 34.74.45.120:58246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1e5EcZ_148BjP8ZPtywAAAWQ"]
[Wed Sep 30 01:08:43.435250 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.435729 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.455327 2026] [security2:error] [pid 270884:tid 271124] [client 45.138.12.32:42670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gzt.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1eyGeq9LtYp4zuPOOHgAAAGk"]
[Wed Sep 30 01:08:43.525798 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.526290 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.543160 2026] [security2:error] [pid 263262:tid 263505] [client 223.235.102.107:18671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1e5EcZ_148BjP8ZPt0wAAAXo"]
[Wed Sep 30 01:08:43.543270 2026] [security2:error] [pid 263262:tid 263505] [client 223.235.102.107:18671] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1e5EcZ_148BjP8ZPt0wAAAXo"]
[Wed Sep 30 01:08:43.566601 2026] [security2:error] [pid 270884:tid 271118] [client 13.70.4.78:50220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/plugins.php"] [unique_id "ary1eyGeq9LtYp4zuPOOIgAAAGM"]
[Wed Sep 30 01:08:43.572890 2026] [security2:error] [pid 263262:tid 263445] [client 212.90.61.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1e5EcZ_148BjP8ZPt1AAAAT4"]
[Wed Sep 30 01:08:43.600998 2026] [security2:error] [pid 270884:tid 271025] [client 34.74.45.120:57639] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1eyGeq9LtYp4zuPOOIwAAAAY"]
[Wed Sep 30 01:08:43.614103 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.614376 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.708335 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.708601 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.721854 2026] [security2:error] [pid 270884:tid 271038] [client 34.74.45.120:53767] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1eyGeq9LtYp4zuPOOLgAAABM"]
[Wed Sep 30 01:08:43.733616 2026] [security2:error] [pid 270884:tid 271040] [client 20.219.19.141:38240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/a.php"] [unique_id "ary1eyGeq9LtYp4zuPOOLwAAABU"]
[Wed Sep 30 01:08:43.742578 2026] [security2:error] [pid 263262:tid 263449] [client 216.73.216.46:33457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1e5EcZ_148BjP8ZPt1wAAAUI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTQ1
[Wed Sep 30 01:08:43.800591 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.800867 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.830434 2026] [security2:error] [pid 270884:tid 271031] [client 20.219.2.60:40710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bolt.php"] [unique_id "ary1eyGeq9LtYp4zuPOONQAAAAw"]
[Wed Sep 30 01:08:43.862774 2026] [security2:error] [pid 263262:tid 263397] [client 34.74.45.120:54001] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "ephodgroup.jfootsteps.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1e5EcZ_148BjP8ZPt2wAAAQ4"]
[Wed Sep 30 01:08:43.891700 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.892031 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.926073 2026] [security2:error] [pid 270884:tid 271048] [client 13.70.4.78:50197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/groud3.php"] [unique_id "ary1eyGeq9LtYp4zuPOOPAAAAB0"]
[Wed Sep 30 01:08:43.935295 2026] [security2:error] [pid 270884:tid 271096] [client 74.225.148.80:54110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/bala.php"] [unique_id "ary1eyGeq9LtYp4zuPOOPQAAAE0"]
[Wed Sep 30 01:08:43.935807 2026] [security2:error] [pid 270884:tid 271040] [client 20.194.5.96:17314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/xtt.php"] [unique_id "ary1eyGeq9LtYp4zuPOOPgAAABU"]
[Wed Sep 30 01:08:43.982835 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:43.983087 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:43.983424 2026] [security2:error] [pid 270884:tid 271039] [client 223.181.30.165:23895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1eyGeq9LtYp4zuPOOQwAAABQ"]
[Wed Sep 30 01:08:43.983573 2026] [security2:error] [pid 270884:tid 271039] [client 223.181.30.165:23895] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1eyGeq9LtYp4zuPOOQwAAABQ"]
[Wed Sep 30 01:08:43.994745 2026] [security2:error] [pid 263262:tid 263446] [client 20.70.173.30:38884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/xiugai.php"] [unique_id "ary1e5EcZ_148BjP8ZPt4wAAAT8"]
[Wed Sep 30 01:08:43.995991 2026] [access_compat:error] [pid 263262:tid 263503] [client 47.79.13.64:44046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:43.996400 2026] [access_compat:error] [pid 263262:tid 263503] [client 47.79.13.64:44046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:44.058256 2026] [access_compat:error] [pid 263262:tid 263520] [client 47.79.13.174:36430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:44.058527 2026] [access_compat:error] [pid 263262:tid 263520] [client 47.79.13.174:36430] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:44.074000 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.074263 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.120230 2026] [security2:error] [pid 270884:tid 271074] [client 116.193.128.26:50818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOTgAAADc"]
[Wed Sep 30 01:08:44.120329 2026] [security2:error] [pid 270884:tid 271074] [client 116.193.128.26:50818] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOTgAAADc"]
[Wed Sep 30 01:08:44.181749 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.182167 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.191164 2026] [security2:error] [pid 270884:tid 271033] [client 20.204.42.136:57845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/images.php"] [unique_id "ary1fCGeq9LtYp4zuPOOUgAAAA4"]
[Wed Sep 30 01:08:44.192772 2026] [security2:error] [pid 270884:tid 271052] [client 20.70.173.30:35625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary1fCGeq9LtYp4zuPOOVAAAACE"]
[Wed Sep 30 01:08:44.200995 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 01:08:44.201250 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM1ODQ4L2N3ZA==
[Wed Sep 30 01:08:44.235625 2026] [security2:error] [pid 270884:tid 271021] [client 20.219.2.60:33797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/5b9ac.php"] [unique_id "ary1fCGeq9LtYp4zuPOOVwAAAAI"]
[Wed Sep 30 01:08:44.239529 2026] [security2:error] [pid 270884:tid 271038] [client 182.69.182.151:8996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOWQAAABM"]
[Wed Sep 30 01:08:44.239640 2026] [security2:error] [pid 270884:tid 271038] [client 182.69.182.151:8996] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOWQAAABM"]
[Wed Sep 30 01:08:44.253771 2026] [security2:error] [pid 270884:tid 271028] [client 43.227.131.37:36420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOXAAAAAk"]
[Wed Sep 30 01:08:44.253901 2026] [security2:error] [pid 270884:tid 271028] [client 43.227.131.37:36420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOXAAAAAk"]
[Wed Sep 30 01:08:44.268605 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.268905 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.270772 2026] [security2:error] [pid 263262:tid 263455] [client 13.70.4.78:49318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gaxby.php"] [unique_id "ary1fJEcZ_148BjP8ZPt5wAAAUg"]
[Wed Sep 30 01:08:44.314532 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:26017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-blogs.php"] [unique_id "ary1fCGeq9LtYp4zuPOOXgAAAHw"]
[Wed Sep 30 01:08:44.365934 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.366344 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.384174 2026] [security2:error] [pid 263262:tid 263454] [client 20.213.164.196:21359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/plugins.php"] [unique_id "ary1fJEcZ_148BjP8ZPt8AAAAUc"]
[Wed Sep 30 01:08:44.451494 2026] [security2:error] [pid 270884:tid 271059] [client 20.219.19.141:29706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/cord.php"] [unique_id "ary1fCGeq9LtYp4zuPOOcAAAACg"]
[Wed Sep 30 01:08:44.475356 2026] [security2:error] [pid 270884:tid 271114] [client 74.225.148.80:54117] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/c99.php"] [unique_id "ary1fCGeq9LtYp4zuPOOcwAAAF8"]
[Wed Sep 30 01:08:44.484367 2026] [access_compat:error] [pid 270884:tid 270989] [remote 57.141.14.110:29524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.484944 2026] [security2:error] [pid 270884:tid 271038] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fCGeq9LtYp4zuPOObQAAABM"]
[Wed Sep 30 01:08:44.487141 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.487568 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.488205 2026] [access_compat:error] [pid 270884:tid 270989] [remote 57.141.14.110:29524] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.522864 2026] [security2:error] [pid 270884:tid 271081] [client 168.100.149.120:59706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/mystickyelements/dist/js/mystickyelements-fronted.js"] [unique_id "ary1fCGeq9LtYp4zuPOOdAAAPmo"]
[Wed Sep 30 01:08:44.545837 2026] [security2:error] [pid 263262:tid 263419] [client 45.138.12.32:42690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hch.uhf.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1fJEcZ_148BjP8ZPt-AAAASQ"]
[Wed Sep 30 01:08:44.567823 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.568259 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.620422 2026] [security2:error] [pid 270884:tid 271138] [client 13.70.4.78:49377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/dh9u7.php"] [unique_id "ary1fCGeq9LtYp4zuPOOeQAAAHc"]
[Wed Sep 30 01:08:44.621437 2026] [security2:error] [pid 263262:tid 263468] [client 20.219.2.60:18867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/dx.php"] [unique_id "ary1fJEcZ_148BjP8ZPt_AAAAVU"]
[Wed Sep 30 01:08:44.664231 2026] [security2:error] [pid 270884:tid 271089] [client 20.28.180.172:62359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/sodas.php"] [unique_id "ary1fCGeq9LtYp4zuPOOfgAAAEY"]
[Wed Sep 30 01:08:44.664507 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.665018 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:42575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.745103 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.745541 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.757845 2026] [security2:error] [pid 263262:tid 263423] [client 20.219.2.60:33808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/hehe.php"] [unique_id "ary1fJEcZ_148BjP8ZPuAgAAASg"]
[Wed Sep 30 01:08:44.775935 2026] [security2:error] [pid 270884:tid 271118] [client 20.194.5.96:17156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "syra.pikarthouse.com"] [uri "/go.php"] [unique_id "ary1fCGeq9LtYp4zuPOOgwAAAGM"]
[Wed Sep 30 01:08:44.776834 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:26149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/zlnckdxn.php"] [unique_id "ary1fJEcZ_148BjP8ZPuBQAAAXg"]
[Wed Sep 30 01:08:44.815461 2026] [core:error] [pid 270884:tid 271143] [client 66.249.65.72:56108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:44.815486 2026] [core:error] [pid 270884:tid 271143] [client 66.249.65.72:56108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:44.834425 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.834690 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.835444 2026] [security2:error] [pid 270884:tid 271093] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fCGeq9LtYp4zuPOOhwAAAEo"]
[Wed Sep 30 01:08:44.904105 2026] [security2:error] [pid 263262:tid 263416] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1fJEcZ_148BjP8ZPuBwAAASE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:44.926452 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:44.926904 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:44.977129 2026] [security2:error] [pid 270884:tid 271051] [client 13.70.4.78:49292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/koiy.php"] [unique_id "ary1fCGeq9LtYp4zuPOOlAAAACA"]
[Wed Sep 30 01:08:45.016636 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.016941 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.106256 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.106523 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.125164 2026] [security2:error] [pid 263262:tid 263465] [client 106.214.2.47:7375] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1fZEcZ_148BjP8ZPuCwAAAVI"]
[Wed Sep 30 01:08:45.125312 2026] [security2:error] [pid 263262:tid 263465] [client 106.214.2.47:7375] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1fZEcZ_148BjP8ZPuCwAAAVI"]
[Wed Sep 30 01:08:45.165872 2026] [core:error] [pid 263262:tid 263433] [client 66.249.65.73:43634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:45.165893 2026] [core:error] [pid 263262:tid 263433] [client 66.249.65.73:43634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:45.246690 2026] [security2:error] [pid 263262:tid 263445] [client 20.219.2.60:25989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/fs6.php"] [unique_id "ary1fZEcZ_148BjP8ZPuEQAAAT4"]
[Wed Sep 30 01:08:45.249921 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.250209 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.266536 2026] [security2:error] [pid 270884:tid 271052] [client 74.225.148.80:54093] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/c99.php"] [unique_id "ary1fSGeq9LtYp4zuPOOmgAAACE"]
[Wed Sep 30 01:08:45.291735 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.292172 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:3308] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.321715 2026] [security2:error] [pid 270884:tid 271090] [client 13.70.4.78:49310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wordfence-waf.php"] [unique_id "ary1fSGeq9LtYp4zuPOOnAAAAEc"]
[Wed Sep 30 01:08:45.338465 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:49332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary1fSGeq9LtYp4zuPOOnQAAAH8"]
[Wed Sep 30 01:08:45.353174 2026] [security2:error] [pid 270884:tid 271074] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fSGeq9LtYp4zuPOOoAAAADc"]
[Wed Sep 30 01:08:45.386040 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.386489 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.417836 2026] [security2:error] [pid 263262:tid 263449] [client 20.219.19.141:29816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/anom.php"] [unique_id "ary1fZEcZ_148BjP8ZPuFAAAAUI"]
[Wed Sep 30 01:08:45.456289 2026] [security2:error] [pid 270884:tid 271143] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fSGeq9LtYp4zuPOOoQAAAHw"]
[Wed Sep 30 01:08:45.465485 2026] [security2:error] [pid 270884:tid 270999] [remote 111.225.148.190:41102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/"] [unique_id "ary1fSGeq9LtYp4zuPOOpAAAHW0"]
[Wed Sep 30 01:08:45.484322 2026] [security2:error] [pid 270884:tid 271029] [client 152.56.240.85:55608] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1fCGeq9LtYp4zuPOOhAAAAAo"]
[Wed Sep 30 01:08:45.523135 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.523403 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.564618 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.565061 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.591450 2026] [security2:error] [pid 263262:tid 263491] [client 20.204.42.136:57841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/ops.php"] [unique_id "ary1fZEcZ_148BjP8ZPuGQAAAWw"]
[Wed Sep 30 01:08:45.654298 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.654642 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.676056 2026] [security2:error] [pid 263262:tid 263501] [client 213.188.88.192:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1fZEcZ_148BjP8ZPuHwAAAXY"]
[Wed Sep 30 01:08:45.692854 2026] [security2:error] [pid 263262:tid 263477] [client 13.70.4.78:49373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wp5.php"] [unique_id "ary1fZEcZ_148BjP8ZPuIAAAAV4"]
[Wed Sep 30 01:08:45.726848 2026] [security2:error] [pid 270884:tid 271097] [client 216.73.216.46:3308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1fSGeq9LtYp4zuPOOsgAAAE4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MjI2
[Wed Sep 30 01:08:45.736878 2026] [security2:error] [pid 270884:tid 271079] [client 20.219.2.60:26011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xwzs.php"] [unique_id "ary1fSGeq9LtYp4zuPOOswAAADw"]
[Wed Sep 30 01:08:45.744661 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.744928 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.836745 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.837042 2026] [access_compat:error] [pid 263262:tid 263481] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.842576 2026] [security2:error] [pid 270884:tid 271101] [client 20.70.173.30:35595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ccc.php"] [unique_id "ary1fSGeq9LtYp4zuPOOtgAAAFI"]
[Wed Sep 30 01:08:45.847379 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:49292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/varb.php"] [unique_id "ary1fZEcZ_148BjP8ZPuJAAAAXg"]
[Wed Sep 30 01:08:45.877462 2026] [security2:error] [pid 270884:tid 271140] [client 20.219.2.60:11357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/sodas.php"] [unique_id "ary1fSGeq9LtYp4zuPOOuAAAAHk"]
[Wed Sep 30 01:08:45.928629 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:45.928916 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:45.982514 2026] [security2:error] [pid 270884:tid 271055] [client 74.225.148.80:54134] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/c99.php"] [unique_id "ary1fSGeq9LtYp4zuPOOwgAAACQ"]
[Wed Sep 30 01:08:45.995848 2026] [security2:error] [pid 270884:tid 271052] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fSGeq9LtYp4zuPOOvAAAACE"]
[Wed Sep 30 01:08:46.017358 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.017619 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.030883 2026] [security2:error] [pid 270884:tid 271118] [client 169.40.142.132:44874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.zqk.mzl.mybluehost.me"] [uri "/index.php"] [unique_id "ary1fiGeq9LtYp4zuPOOwwAAAGM"]
[Wed Sep 30 01:08:46.051752 2026] [security2:error] [pid 263262:tid 263454] [client 4.240.25.22:41718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wp-the.php"] [unique_id "ary1fpEcZ_148BjP8ZPuKwAAAUc"]
[Wed Sep 30 01:08:46.112668 2026] [security2:error] [pid 270884:tid 271029] [client 13.70.4.78:49359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/em.php"] [unique_id "ary1fiGeq9LtYp4zuPOOxwAAAAo"]
[Wed Sep 30 01:08:46.113113 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.113368 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.210490 2026] [security2:error] [pid 263262:tid 263506] [client 20.28.180.172:18342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/yw5bi63u.php"] [unique_id "ary1fpEcZ_148BjP8ZPuNwAAAXs"]
[Wed Sep 30 01:08:46.211425 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.211702 2026] [access_compat:error] [pid 263262:tid 263403] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.215853 2026] [security2:error] [pid 263262:tid 263488] [client 20.219.2.60:40704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary1fpEcZ_148BjP8ZPuOAAAAWk"]
[Wed Sep 30 01:08:46.242881 2026] [security2:error] [pid 270884:tid 271140] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1fiGeq9LtYp4zuPOOyQAAAHk"]
[Wed Sep 30 01:08:46.272693 2026] [security2:error] [pid 270884:tid 271106] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1fiGeq9LtYp4zuPOOzAAAAFc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:46.299146 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.299416 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.316500 2026] [security2:error] [pid 270884:tid 271059] [client 20.219.2.60:49291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/lm15.php"] [unique_id "ary1fiGeq9LtYp4zuPOOzgAAACg"]
[Wed Sep 30 01:08:46.412505 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.412961 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.480885 2026] [security2:error] [pid 270884:tid 271079] [client 13.70.4.78:50198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/hp.php"] [unique_id "ary1fiGeq9LtYp4zuPOO1QAAADw"]
[Wed Sep 30 01:08:46.502853 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.503098 2026] [security2:error] [pid 263262:tid 263417] [client 168.100.149.100:58228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/shortcode.min.js"] [unique_id "ary1fpEcZ_148BjP8ZPuRQABIhQ"]
[Wed Sep 30 01:08:46.503299 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.515079 2026] [security2:error] [pid 263262:tid 263396] [client 20.70.173.30:33296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-login.php"] [unique_id "ary1fpEcZ_148BjP8ZPuRgAAAQ0"]
[Wed Sep 30 01:08:46.534214 2026] [security2:error] [pid 270884:tid 271143] [client 74.225.148.80:54133] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/c99.php"] [unique_id "ary1fiGeq9LtYp4zuPOO2AAAAHw"]
[Wed Sep 30 01:08:46.543241 2026] [security2:error] [pid 270884:tid 271077] [client 4.196.65.241:27297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/nmd.php"] [unique_id "ary1fiGeq9LtYp4zuPOO2QAAADo"]
[Wed Sep 30 01:08:46.581290 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.581574 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:33880] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.604275 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.19.141:29703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/plugins.php"] [unique_id "ary1fiGeq9LtYp4zuPOO3AAAAFc"]
[Wed Sep 30 01:08:46.670663 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.670929 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.728286 2026] [security2:error] [pid 270884:tid 271060] [client 20.219.2.60:26016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws66.php"] [unique_id "ary1fiGeq9LtYp4zuPOO7QAAACk"]
[Wed Sep 30 01:08:46.760966 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.761321 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.792113 2026] [security2:error] [pid 270884:tid 271078] [client 223.181.60.167:2925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1fiGeq9LtYp4zuPOO8wAAADs"]
[Wed Sep 30 01:08:46.792232 2026] [security2:error] [pid 270884:tid 271078] [client 223.181.60.167:2925] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1fiGeq9LtYp4zuPOO8wAAADs"]
[Wed Sep 30 01:08:46.846485 2026] [security2:error] [pid 263262:tid 263443] [client 20.219.2.60:49331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/clss.php"] [unique_id "ary1fpEcZ_148BjP8ZPuXwAAATw"]
[Wed Sep 30 01:08:46.853109 2026] [security2:error] [pid 263262:tid 263511] [client 20.28.180.172:34300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/motu.php"] [unique_id "ary1fpEcZ_148BjP8ZPuYAAAAYA"]
[Wed Sep 30 01:08:46.859902 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.860329 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.865605 2026] [security2:error] [pid 270884:tid 271146] [client 20.194.30.107:17345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/blurbs.php"] [unique_id "ary1fiGeq9LtYp4zuPOO_AAAAH8"]
[Wed Sep 30 01:08:46.890439 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:08:46.890730 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ1L25ldA==
[Wed Sep 30 01:08:46.944857 2026] [security2:error] [pid 263262:tid 263419] [client 13.70.4.78:49331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wpuse.php"] [unique_id "ary1fpEcZ_148BjP8ZPuZAAAASQ"]
[Wed Sep 30 01:08:46.948650 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:46.948931 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:49950] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:46.994191 2026] [security2:error] [pid 263262:tid 263397] [client 216.73.216.46:33880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1fpEcZ_148BjP8ZPuagAAAQ4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzUvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 01:08:46.995928 2026] [security2:error] [pid 263262:tid 263514] [client 188.163.9.43:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1fpEcZ_148BjP8ZPuaQAAAYM"]
[Wed Sep 30 01:08:47.020075 2026] [security2:error] [pid 263262:tid 263501] [client 20.213.164.196:21237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/groud3.php"] [unique_id "ary1f5EcZ_148BjP8ZPuawAAAXY"]
[Wed Sep 30 01:08:47.027714 2026] [security2:error] [pid 263262:tid 263396] [client 74.225.148.80:60900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/ttivnife.php"] [unique_id "ary1f5EcZ_148BjP8ZPubAAAAQ0"]
[Wed Sep 30 01:08:47.109624 2026] [security2:error] [pid 270884:tid 271143] [client 20.194.30.107:17527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/ty.php"] [unique_id "ary1fyGeq9LtYp4zuPOPCQAAAHw"]
[Wed Sep 30 01:08:47.133076 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:13859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.133533 2026] [access_compat:error] [pid 263262:tid 263451] [client 216.73.216.46:13859] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.194223 2026] [security2:error] [pid 263262:tid 263450] [client 20.219.2.60:26054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ewe.php"] [unique_id "ary1f5EcZ_148BjP8ZPudAAAAUM"]
[Wed Sep 30 01:08:47.198207 2026] [security2:error] [pid 263262:tid 263520] [client 20.219.19.141:65482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/zlwvxiyp.php"] [unique_id "ary1f5EcZ_148BjP8ZPudgAAAYk"]
[Wed Sep 30 01:08:47.218767 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.219035 2026] [access_compat:error] [pid 263262:tid 263480] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.246944 2026] [security2:error] [pid 270884:tid 271028] [client 20.204.42.136:61128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/BDKR28WP.php"] [unique_id "ary1fyGeq9LtYp4zuPOPDAAAAAk"]
[Wed Sep 30 01:08:47.277702 2026] [security2:error] [pid 270884:tid 271090] [client 20.70.173.30:8175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/memberfuns.php"] [unique_id "ary1fyGeq9LtYp4zuPOPDgAAAEc"]
[Wed Sep 30 01:08:47.315296 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.315563 2026] [access_compat:error] [pid 263262:tid 263436] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.332982 2026] [core:error] [pid 270884:tid 271101] [client 45.138.12.41:4090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:47.333011 2026] [core:error] [pid 270884:tid 271101] [client 45.138.12.41:4090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:47.361625 2026] [security2:error] [pid 263262:tid 263398] [client 20.219.2.60:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/44.php"] [unique_id "ary1f5EcZ_148BjP8ZPufwAAAQ8"]
[Wed Sep 30 01:08:47.422328 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.423792 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.453229 2026] [security2:error] [pid 263262:tid 263500] [client 13.70.4.78:49404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/file18x.php"] [unique_id "ary1f5EcZ_148BjP8ZPuhgAAAXU"]
[Wed Sep 30 01:08:47.455178 2026] [access_compat:error] [pid 270884:tid 271100] [client 47.79.13.175:55696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.455641 2026] [access_compat:error] [pid 270884:tid 271100] [client 47.79.13.175:55696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.460573 2026] [security2:error] [pid 263262:tid 263468] [client 155.190.6.18:39694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPuhwAAAVU"]
[Wed Sep 30 01:08:47.460763 2026] [security2:error] [pid 263262:tid 263468] [client 155.190.6.18:39694] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPuhwAAAVU"]
[Wed Sep 30 01:08:47.462565 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.463022 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.521917 2026] [security2:error] [pid 263262:tid 263493] [client 74.225.148.80:54140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/admin.php/2P.php"] [unique_id "ary1f5EcZ_148BjP8ZPuiQAAAW4"]
[Wed Sep 30 01:08:47.547936 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.548306 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.552132 2026] [access_compat:error] [pid 270884:tid 271141] [client 47.79.13.78:54860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.552395 2026] [access_compat:error] [pid 270884:tid 271141] [client 47.79.13.78:54860] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.577436 2026] [security2:error] [pid 263262:tid 263496] [client 216.73.216.46:13859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1f5EcZ_148BjP8ZPujAAAAXE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxMi9ob3RwbHVn
[Wed Sep 30 01:08:47.642145 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.642642 2026] [access_compat:error] [pid 263262:tid 263506] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.689931 2026] [access_compat:error] [pid 270884:tid 271062] [client 47.79.13.37:56192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.690369 2026] [access_compat:error] [pid 270884:tid 271062] [client 47.79.13.37:56192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:47.737054 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.737338 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.780069 2026] [security2:error] [pid 270884:tid 271046] [client 20.219.2.60:26128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/aboute.php"] [unique_id "ary1fyGeq9LtYp4zuPOPHwAAABs"]
[Wed Sep 30 01:08:47.803703 2026] [security2:error] [pid 270884:tid 271141] [client 52.172.226.14:21416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1fyGeq9LtYp4zuPOPIAAAAHo"]
[Wed Sep 30 01:08:47.807210 2026] [security2:error] [pid 270884:tid 271096] [client 13.70.4.78:49322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/123viva.php"] [unique_id "ary1fyGeq9LtYp4zuPOPIQAAAE0"]
[Wed Sep 30 01:08:47.825484 2026] [security2:error] [pid 263262:tid 263511] [client 116.197.133.25:50421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPumwAAAYA"]
[Wed Sep 30 01:08:47.825653 2026] [security2:error] [pid 263262:tid 263511] [client 116.197.133.25:50421] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPumwAAAYA"]
[Wed Sep 30 01:08:47.831726 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.832123 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:47.870395 2026] [security2:error] [pid 270884:tid 271068] [client 20.219.2.60:48094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/a5e0a.php"] [unique_id "ary1fyGeq9LtYp4zuPOPIgAAADE"]
[Wed Sep 30 01:08:47.884886 2026] [security2:error] [pid 263262:tid 263407] [client 103.159.192.142:51637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPunAAAARg"]
[Wed Sep 30 01:08:47.885016 2026] [security2:error] [pid 263262:tid 263407] [client 103.159.192.142:51637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1f5EcZ_148BjP8ZPunAAAARg"]
[Wed Sep 30 01:08:47.920483 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:47.920749 2026] [access_compat:error] [pid 263262:tid 263430] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.022230 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.022715 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.056333 2026] [security2:error] [pid 270884:tid 271101] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1gCGeq9LtYp4zuPOPKQAAAFI"]
[Wed Sep 30 01:08:48.108077 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.108533 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.157676 2026] [security2:error] [pid 270884:tid 271028] [client 103.241.204.139:53176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1gCGeq9LtYp4zuPOPMgAAAAk"]
[Wed Sep 30 01:08:48.157788 2026] [security2:error] [pid 270884:tid 271028] [client 103.241.204.139:53176] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1gCGeq9LtYp4zuPOPMgAAAAk"]
[Wed Sep 30 01:08:48.201249 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.201684 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.222036 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.19.141:29788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary1gCGeq9LtYp4zuPOPNwAAACA"]
[Wed Sep 30 01:08:48.223305 2026] [security2:error] [pid 270884:tid 271133] [client 13.70.4.78:49367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/Components.update.php"] [unique_id "ary1gCGeq9LtYp4zuPOPOAAAAHI"]
[Wed Sep 30 01:08:48.287181 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.287457 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.308147 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.2.60:40712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/x9.php"] [unique_id "ary1gCGeq9LtYp4zuPOPPwAAAGU"]
[Wed Sep 30 01:08:48.370745 2026] [security2:error] [pid 263262:tid 263477] [client 20.219.2.60:49294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bo.php"] [unique_id "ary1gJEcZ_148BjP8ZPusQAAAV4"]
[Wed Sep 30 01:08:48.378319 2026] [security2:error] [pid 270884:tid 271118] [client 103.168.67.253:29950] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/"] [unique_id "ary1gCGeq9LtYp4zuPOPQAAAAGM"]
[Wed Sep 30 01:08:48.400343 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.400770 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.419735 2026] [security2:error] [pid 263262:tid 263506] [client 74.7.242.1:59108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1gJEcZ_148BjP8ZPutAAAAXs"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:08:48.460718 2026] [security2:error] [pid 270884:tid 271146] [client 74.225.148.80:60871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/cord.php"] [unique_id "ary1gCGeq9LtYp4zuPOPQgAAAH8"]
[Wed Sep 30 01:08:48.513508 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.513960 2026] [access_compat:error] [pid 263262:tid 263465] [client 216.73.216.46:28787] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.516420 2026] [security2:error] [pid 270884:tid 271062] [client 168.100.149.157:16808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js"] [unique_id "ary1gCGeq9LtYp4zuPOPRQAAKy0"]
[Wed Sep 30 01:08:48.581462 2026] [security2:error] [pid 270884:tid 271118] [client 13.70.4.78:50218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/sm.php"] [unique_id "ary1gCGeq9LtYp4zuPOPSwAAAGM"]
[Wed Sep 30 01:08:48.587292 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.587561 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.630708 2026] [security2:error] [pid 270884:tid 271055] [client 52.172.226.14:21412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1gCGeq9LtYp4zuPOPTAAAACQ"]
[Wed Sep 30 01:08:48.677761 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.678079 2026] [access_compat:error] [pid 263262:tid 263453] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.731452 2026] [security2:error] [pid 270884:tid 271052] [client 20.204.42.136:58526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/mac.php"] [unique_id "ary1gCGeq9LtYp4zuPOPVAAAACE"]
[Wed Sep 30 01:08:48.769821 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.770104 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.794353 2026] [security2:error] [pid 263262:tid 263330] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1gJEcZ_148BjP8ZPuuwABSEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1538
[Wed Sep 30 01:08:48.794379 2026] [security2:error] [pid 263262:tid 263330] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1gJEcZ_148BjP8ZPuuwABSEI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1538
[Wed Sep 30 01:08:48.800005 2026] [security2:error] [pid 270884:tid 271082] [client 20.219.2.60:25990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/an.php"] [unique_id "ary1gCGeq9LtYp4zuPOPVgAAAD8"]
[Wed Sep 30 01:08:48.862779 2026] [security2:error] [pid 270884:tid 271084] [client 20.219.2.60:49281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/56c53.php"] [unique_id "ary1gCGeq9LtYp4zuPOPXgAAAEE"]
[Wed Sep 30 01:08:48.867516 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.867771 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.899345 2026] [security2:error] [pid 270884:tid 271097] [client 13.70.4.78:50180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/mknobgkg.php"] [unique_id "ary1gCGeq9LtYp4zuPOPYAAAAE4"]
[Wed Sep 30 01:08:48.917030 2026] [security2:error] [pid 263262:tid 263407] [client 216.73.216.46:28787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1gJEcZ_148BjP8ZPuwAAAARg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5Mjk2L25vZGUwL21lbW9yeTM4OA%3D%3D
[Wed Sep 30 01:08:48.918655 2026] [security2:error] [pid 263262:tid 263444] [client 20.219.2.60:19419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-kikikoko.php"] [unique_id "ary1gJEcZ_148BjP8ZPuwQAAAT0"]
[Wed Sep 30 01:08:48.957935 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:48.958594 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:48.984669 2026] [security2:error] [pid 270884:tid 271090] [client 74.225.148.80:54101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/anom.php"] [unique_id "ary1gCGeq9LtYp4zuPOPZgAAAEc"]
[Wed Sep 30 01:08:49.002146 2026] [security2:error] [pid 263262:tid 263487] [client 4.240.25.22:43783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/baba.php"] [unique_id "ary1gZEcZ_148BjP8ZPuxgAAAWg"]
[Wed Sep 30 01:08:49.028156 2026] [access_compat:error] [pid 270884:tid 271051] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:08:49.028597 2026] [access_compat:error] [pid 270884:tid 271051] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTI3MzQ0L25ldA==
[Wed Sep 30 01:08:49.030415 2026] [security2:error] [pid 263262:tid 263409] [client 45.138.12.41:4144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.wellnesswithage.com"] [uri "/wp-links-opml.php"] [unique_id "ary1gZEcZ_148BjP8ZPuyAAAARo"]
[Wed Sep 30 01:08:49.050830 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.051251 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.053692 2026] [security2:error] [pid 270884:tid 271127] [client 20.28.180.172:34278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wo.php"] [unique_id "ary1gSGeq9LtYp4zuPOPbQAAAGw"]
[Wed Sep 30 01:08:49.139534 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.19.141:29803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary1gSGeq9LtYp4zuPOPbwAAAEc"]
[Wed Sep 30 01:08:49.145073 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.145521 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.160865 2026] [security2:error] [pid 270884:tid 271133] [client 20.70.173.30:25535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/BDKR28WP.php"] [unique_id "ary1gSGeq9LtYp4zuPOPcAAAAHI"]
[Wed Sep 30 01:08:49.236975 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.237250 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.243555 2026] [security2:error] [pid 270884:tid 271033] [client 52.172.226.14:21405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/atomlib.php"] [unique_id "ary1gSGeq9LtYp4zuPOPcwAAAA4"]
[Wed Sep 30 01:08:49.245120 2026] [security2:error] [pid 270884:tid 271082] [client 13.70.4.78:49320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/dairg.php"] [unique_id "ary1gSGeq9LtYp4zuPOPdAAAAD8"]
[Wed Sep 30 01:08:49.287668 2026] [security2:error] [pid 263262:tid 263506] [client 20.219.2.60:26064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/aboutc.php"] [unique_id "ary1gZEcZ_148BjP8ZPu1QAAAXs"]
[Wed Sep 30 01:08:49.326985 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.327635 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.412626 2026] [security2:error] [pid 263262:tid 263414] [client 20.219.2.60:33815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tx78.php"] [unique_id "ary1gZEcZ_148BjP8ZPu3gAAAR8"]
[Wed Sep 30 01:08:49.429893 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.430343 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.462665 2026] [security2:error] [pid 270884:tid 271096] [client 20.198.74.230:23927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/Q7iw6mOdefault.php"] [unique_id "ary1gSGeq9LtYp4zuPOPfAAAAE0"]
[Wed Sep 30 01:08:49.525203 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.525648 2026] [access_compat:error] [pid 263262:tid 263395] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.539888 2026] [access_compat:error] [pid 270884:tid 271090] [client 47.79.13.73:53198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:49.540367 2026] [access_compat:error] [pid 270884:tid 271090] [client 47.79.13.73:53198] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:49.559636 2026] [security2:error] [pid 263262:tid 263453] [client 74.225.148.80:54127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/plugins.php"] [unique_id "ary1gZEcZ_148BjP8ZPu5wAAAUY"]
[Wed Sep 30 01:08:49.571803 2026] [security2:error] [pid 270884:tid 271127] [client 13.70.4.78:42180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/dronishness.php"] [unique_id "ary1gSGeq9LtYp4zuPOPhAAAAGw"]
[Wed Sep 30 01:08:49.574855 2026] [qos:error] [pid 270884:tid 271120] [client 71.60.37.145:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1gSGeq9LtYp4zuPOPgwAAAGU
[Wed Sep 30 01:08:49.613506 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.613948 2026] [access_compat:error] [pid 263262:tid 263452] [client 216.73.216.46:12478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.685717 2026] [security2:error] [pid 270884:tid 271143] [client 20.194.96.176:49285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/av.php"] [unique_id "ary1gSGeq9LtYp4zuPOPhwAAAHw"]
[Wed Sep 30 01:08:49.700575 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.700894 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.726746 2026] [security2:error] [pid 263262:tid 263491] [client 52.172.226.14:39952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/a.php"] [unique_id "ary1gZEcZ_148BjP8ZPu7QAAAWw"]
[Wed Sep 30 01:08:49.771077 2026] [security2:error] [pid 270884:tid 271125] [client 20.219.2.60:26059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gdn.php"] [unique_id "ary1gSGeq9LtYp4zuPOPiAAAAGo"]
[Wed Sep 30 01:08:49.791077 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.791329 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.857528 2026] [security2:error] [pid 270884:tid 271096] [client 120.48.175.195:57250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.175.48.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "ary1gSGeq9LtYp4zuPOPigAAAE0"], referer: http://paulmerceronline.com/wp-login.php
[Wed Sep 30 01:08:49.869415 2026] [security2:error] [pid 270884:tid 271055] [client 201.32.215.149:6602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1gSGeq9LtYp4zuPOPiwAAACQ"]
[Wed Sep 30 01:08:49.869598 2026] [security2:error] [pid 270884:tid 271055] [client 201.32.215.149:6602] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1gSGeq9LtYp4zuPOPiwAAACQ"]
[Wed Sep 30 01:08:49.881943 2026] [security2:error] [pid 263262:tid 263468] [client 20.219.2.60:33838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws80.php"] [unique_id "ary1gZEcZ_148BjP8ZPu8QAAAVU"]
[Wed Sep 30 01:08:49.882977 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.883249 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:49.961608 2026] [security2:error] [pid 263262:tid 263417] [client 13.70.4.78:50239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/Row_wsoo.php"] [unique_id "ary1gZEcZ_148BjP8ZPu9AAAASI"]
[Wed Sep 30 01:08:49.980121 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:49.980557 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.035491 2026] [security2:error] [pid 263262:tid 263399] [client 216.73.216.46:12478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1gpEcZ_148BjP8ZPu-AAAARA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTExL25vZGUwL2NwdTExL2NhY2hlL2luZGV4MA%3D%3D
[Wed Sep 30 01:08:50.066834 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.067102 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.093486 2026] [security2:error] [pid 263262:tid 263449] [client 74.225.148.80:54136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/groud3.php"] [unique_id "ary1gpEcZ_148BjP8ZPu-wAAAUI"]
[Wed Sep 30 01:08:50.161598 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.162035 2026] [access_compat:error] [pid 263262:tid 263475] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.188935 2026] [security2:error] [pid 270884:tid 271046] [client 37.41.16.35:54078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1giGeq9LtYp4zuPOPkgAAABs"]
[Wed Sep 30 01:08:50.189074 2026] [security2:error] [pid 270884:tid 271046] [client 37.41.16.35:54078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1giGeq9LtYp4zuPOPkgAAABs"]
[Wed Sep 30 01:08:50.220700 2026] [core:error] [pid 270884:tid 271127] (104)Connection reset by peer: [client 172.232.190.19:64295] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:08:50.223559 2026] [security2:error] [pid 270884:tid 271097] [client 49.37.102.248:52547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1giGeq9LtYp4zuPOPlAAAAE4"]
[Wed Sep 30 01:08:50.223699 2026] [security2:error] [pid 270884:tid 271097] [client 49.37.102.248:52547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1giGeq9LtYp4zuPOPlAAAAE4"]
[Wed Sep 30 01:08:50.244214 2026] [security2:error] [pid 263262:tid 263501] [client 20.219.2.60:25994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/first.php"] [unique_id "ary1gpEcZ_148BjP8ZPvBAAAAXY"]
[Wed Sep 30 01:08:50.250120 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.250384 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.255553 2026] [security2:error] [pid 270884:tid 271114] [client 20.219.2.60:11347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/yw5bi63u.php"] [unique_id "ary1giGeq9LtYp4zuPOPlQAAAF8"]
[Wed Sep 30 01:08:50.284198 2026] [security2:error] [pid 270884:tid 271026] [client 52.172.226.14:21437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/v.php"] [unique_id "ary1giGeq9LtYp4zuPOPlgAAAAc"]
[Wed Sep 30 01:08:50.341857 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.342129 2026] [access_compat:error] [pid 263262:tid 263454] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.348483 2026] [security2:error] [pid 263262:tid 263407] [client 20.219.2.60:49330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/jga.php"] [unique_id "ary1gpEcZ_148BjP8ZPvBgAAARg"]
[Wed Sep 30 01:08:50.411622 2026] [security2:error] [pid 270884:tid 271038] [client 13.70.4.78:49290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/x2.php"] [unique_id "ary1giGeq9LtYp4zuPOPmAAAABM"]
[Wed Sep 30 01:08:50.440804 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.441239 2026] [access_compat:error] [pid 263262:tid 263487] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.457704 2026] [security2:error] [pid 270884:tid 270947] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1giGeq9LtYp4zuPOPmgAAMT0"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D32840
[Wed Sep 30 01:08:50.469914 2026] [security2:error] [pid 263262:tid 263487] [client 20.28.180.172:34295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cilus.php"] [unique_id "ary1gpEcZ_148BjP8ZPvCwAAAWg"]
[Wed Sep 30 01:08:50.495694 2026] [http2:warn] [pid 263262:tid 263425] [client 52.167.144.188:58911] h2_stream(263262-485-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:50.517508 2026] [security2:error] [pid 270884:tid 271033] [client 168.100.149.231:46646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/media-audiovideo.min.js"] [unique_id "ary1giGeq9LtYp4zuPOPnQAADkI"]
[Wed Sep 30 01:08:50.556484 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1gpEcZ_148BjP8ZPvDgABFFo"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=5244
[Wed Sep 30 01:08:50.556509 2026] [security2:error] [pid 263262:tid 263354] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1gpEcZ_148BjP8ZPvDgABFFo"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=5244
[Wed Sep 30 01:08:50.575956 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.576229 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.591648 2026] [security2:error] [pid 270884:tid 271110] [client 74.225.148.80:18780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gaxby.php"] [unique_id "ary1giGeq9LtYp4zuPOPoQAAAFs"]
[Wed Sep 30 01:08:50.620519 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.620786 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.672957 2026] [security2:error] [pid 263262:tid 263443] [client 20.28.180.172:18335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws81.php"] [unique_id "ary1gpEcZ_148BjP8ZPvFQAAATw"]
[Wed Sep 30 01:08:50.711651 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.712082 2026] [access_compat:error] [pid 263262:tid 263411] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.725959 2026] [security2:error] [pid 263262:tid 263505] [client 20.213.164.196:44195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/gaxby.php"] [unique_id "ary1gpEcZ_148BjP8ZPvHgAAAXo"]
[Wed Sep 30 01:08:50.728274 2026] [security2:error] [pid 270884:tid 271055] [client 20.219.19.141:29780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/admin.php/c.php"] [unique_id "ary1giGeq9LtYp4zuPOPpwAAACQ"]
[Wed Sep 30 01:08:50.752051 2026] [security2:error] [pid 263262:tid 263446] [client 20.219.2.60:40767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/redixsx.php"] [unique_id "ary1gpEcZ_148BjP8ZPvIQAAAT8"]
[Wed Sep 30 01:08:50.791413 2026] [access_compat:error] [pid 270884:tid 271102] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:08:50.791708 2026] [access_compat:error] [pid 270884:tid 271102] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L25ldA==
[Wed Sep 30 01:08:50.803919 2026] [security2:error] [pid 263262:tid 263437] [client 13.70.4.78:49312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/v4.php"] [unique_id "ary1gpEcZ_148BjP8ZPvIwAAATY"]
[Wed Sep 30 01:08:50.806471 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.806785 2026] [access_compat:error] [pid 263262:tid 263477] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.879531 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.2.60:49342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/fs.php"] [unique_id "ary1giGeq9LtYp4zuPOPrQAAAGU"]
[Wed Sep 30 01:08:50.896728 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.897017 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:50.988285 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:50.988717 2026] [access_compat:error] [pid 263262:tid 263501] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.078353 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.078620 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.114450 2026] [security2:error] [pid 270884:tid 271090] [client 4.240.25.22:38732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/as.php"] [unique_id "ary1gyGeq9LtYp4zuPOPsgAAAEc"]
[Wed Sep 30 01:08:51.147162 2026] [security2:error] [pid 270884:tid 271143] [client 13.70.4.78:50185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/albin.php"] [unique_id "ary1gyGeq9LtYp4zuPOPtAAAAHw"]
[Wed Sep 30 01:08:51.153439 2026] [security2:error] [pid 263262:tid 263436] [client 52.172.226.14:39958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/d2.php"] [unique_id "ary1g5EcZ_148BjP8ZPvLQAAATU"]
[Wed Sep 30 01:08:51.160077 2026] [security2:error] [pid 270884:tid 271118] [client 74.225.148.80:54138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/dh9u7.php"] [unique_id "ary1gyGeq9LtYp4zuPOPtQAAAGM"]
[Wed Sep 30 01:08:51.168968 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.169229 2026] [access_compat:error] [pid 263262:tid 263513] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.186624 2026] [qos:error] [pid 270884:tid 270899] [remote 73.233.13.33:41510] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.233.13.33, id=ary1gyGeq9LtYp4zuPOPtgAABw0
[Wed Sep 30 01:08:51.192569 2026] [security2:error] [pid 270884:tid 271127] [client 20.204.42.136:59892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wmore1.php"] [unique_id "ary1gyGeq9LtYp4zuPOPuAAAAGw"]
[Wed Sep 30 01:08:51.195118 2026] [security2:error] [pid 270884:tid 271069] [client 120.48.175.195:57252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.175.48.120.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "paulmerceronline.com"] [uri "/wp-login.php"] [unique_id "ary1gyGeq9LtYp4zuPOPuQAAADI"], referer: http://paulmerceronline.com/wp-login.php
[Wed Sep 30 01:08:51.212415 2026] [security2:error] [pid 263262:tid 263480] [client 20.219.2.60:26045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/cpp2.php"] [unique_id "ary1g5EcZ_148BjP8ZPvMQAAAWE"]
[Wed Sep 30 01:08:51.218101 2026] [security2:error] [pid 270884:tid 271023] [client 105.112.178.79:38377] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.toq.bzn.mybluehost.me"] [uri "/.env"] [unique_id "ary1gyGeq9LtYp4zuPOPugAAAAQ"]
[Wed Sep 30 01:08:51.260742 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.261019 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.351933 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.352202 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:1286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.382906 2026] [security2:error] [pid 270884:tid 271125] [client 20.70.173.30:2846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1gyGeq9LtYp4zuPOPvQAAAGo"]
[Wed Sep 30 01:08:51.430937 2026] [qos:error] [pid 270884:tid 270967] [remote 82.174.179.107:37922] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=82.174.179.107, id=ary1gyGeq9LtYp4zuPOPvgAAMk0
[Wed Sep 30 01:08:51.434081 2026] [security2:error] [pid 270884:tid 271102] [client 20.219.2.60:33798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/byypas.php"] [unique_id "ary1gyGeq9LtYp4zuPOPvwAAAFM"]
[Wed Sep 30 01:08:51.449650 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.454917 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.464291 2026] [security2:error] [pid 270884:tid 271114] [client 154.47.29.230:25343] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1gyGeq9LtYp4zuPOPuwAAAF8"]
[Wed Sep 30 01:08:51.517059 2026] [security2:error] [pid 263262:tid 263399] [client 13.70.4.78:49347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/atkno.php"] [unique_id "ary1g5EcZ_148BjP8ZPvNgAAARA"]
[Wed Sep 30 01:08:51.532909 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.533181 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.560510 2026] [security2:error] [pid 270884:tid 270961] [remote 47.128.117.228:57902] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "esvarbon.gov.ng"] [uri "/robots.txt"] [unique_id "ary1gyGeq9LtYp4zuPOPwwAATUc"]
[Wed Sep 30 01:08:51.572298 2026] [access_compat:error] [pid 263262:tid 263417] [client 47.79.13.176:60100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:51.572596 2026] [access_compat:error] [pid 263262:tid 263417] [client 47.79.13.176:60100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:51.637608 2026] [qos:error] [pid 270884:tid 270965] [remote 50.68.181.109:33802] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.68.181.109, id=ary1gyGeq9LtYp4zuPOPxwAAR0s
[Wed Sep 30 01:08:51.674754 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.675059 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.689536 2026] [security2:error] [pid 270884:tid 271118] [client 74.225.148.80:60884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/koiy.php"] [unique_id "ary1gyGeq9LtYp4zuPOPywAAAGM"]
[Wed Sep 30 01:08:51.696911 2026] [security2:error] [pid 270884:tid 271051] [client 4.240.25.22:63659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wsd.php"] [unique_id "ary1gyGeq9LtYp4zuPOPzAAAACA"]
[Wed Sep 30 01:08:51.704239 2026] [security2:error] [pid 263262:tid 263460] [client 20.219.2.60:40720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/admlo.php"] [unique_id "ary1g5EcZ_148BjP8ZPvQAAAAU0"]
[Wed Sep 30 01:08:51.710460 2026] [security2:error] [pid 263262:tid 263520] [client 52.172.226.14:21433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/xc.php"] [unique_id "ary1g5EcZ_148BjP8ZPvQQAAAYk"]
[Wed Sep 30 01:08:51.715777 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.716046 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.740207 2026] [security2:error] [pid 263262:tid 263461] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1g5EcZ_148BjP8ZPvRAAAAU4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:51.770188 2026] [security2:error] [pid 263262:tid 263479] [client 216.73.216.46:1286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1g5EcZ_148BjP8ZPvRQAAAWA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTkvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU4
[Wed Sep 30 01:08:51.839241 2026] [http2:warn] [pid 251754:tid 251894] [client 52.167.144.206:59157] h2_stream(251754-1375-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:51.839270 2026] [http2:warn] [pid 251754:tid 251894] [client 52.167.144.206:59157] h2_stream(251754-1375-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:51.844582 2026] [security2:error] [pid 270884:tid 271060] [client 20.70.173.30:33285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wsd.php"] [unique_id "ary1gyGeq9LtYp4zuPOP0wAAACk"]
[Wed Sep 30 01:08:51.846697 2026] [qos:error] [pid 270884:tid 270973] [remote 47.223.255.89:42998] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=47.223.255.89, id=ary1gyGeq9LtYp4zuPOP1AAAbFM
[Wed Sep 30 01:08:51.848566 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.849011 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.927303 2026] [security2:error] [pid 263262:tid 263444] [client 13.70.4.78:49309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gptsh.php"] [unique_id "ary1g5EcZ_148BjP8ZPvRwAAAT0"]
[Wed Sep 30 01:08:51.934848 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:51.935118 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:51.935577 2026] [security2:error] [pid 270884:tid 271090] [client 20.28.180.172:34283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/myglu.php"] [unique_id "ary1gyGeq9LtYp4zuPOP2QAAAEc"]
[Wed Sep 30 01:08:51.983706 2026] [security2:error] [pid 263262:tid 263488] [client 122.173.27.10:20934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1g5EcZ_148BjP8ZPvSAAAAWk"]
[Wed Sep 30 01:08:51.983837 2026] [security2:error] [pid 263262:tid 263488] [client 122.173.27.10:20934] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1g5EcZ_148BjP8ZPvSAAAAWk"]
[Wed Sep 30 01:08:52.011345 2026] [security2:error] [pid 270884:tid 271023] [client 20.219.2.60:33846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/b.php"] [unique_id "ary1hCGeq9LtYp4zuPOP3gAAAAQ"]
[Wed Sep 30 01:08:52.026939 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.027225 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.074557 2026] [qos:error] [pid 270884:tid 270984] [remote 89.229.92.139:37016] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.229.92.139, id=ary1hCGeq9LtYp4zuPOP4AAAel4
[Wed Sep 30 01:08:52.110605 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.2.60:11705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws81.php"] [unique_id "ary1hCGeq9LtYp4zuPOP4gAAACA"]
[Wed Sep 30 01:08:52.117052 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.117313 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.142128 2026] [security2:error] [pid 270884:tid 271114] [client 20.213.164.196:21352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/dh9u7.php"] [unique_id "ary1hCGeq9LtYp4zuPOP5QAAAF8"]
[Wed Sep 30 01:08:52.170908 2026] [security2:error] [pid 263262:tid 263477] [client 203.122.45.246:50177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1hJEcZ_148BjP8ZPvTgAAAV4"]
[Wed Sep 30 01:08:52.171036 2026] [security2:error] [pid 263262:tid 263477] [client 203.122.45.246:50177] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1hJEcZ_148BjP8ZPvTgAAAV4"]
[Wed Sep 30 01:08:52.171249 2026] [security2:error] [pid 263262:tid 263500] [client 20.219.2.60:26034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/admin-ajax.php"] [unique_id "ary1hJEcZ_148BjP8ZPvTQAAAXU"]
[Wed Sep 30 01:08:52.210393 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.210702 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.213945 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:08:52.214213 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI3L25ldA==
[Wed Sep 30 01:08:52.219017 2026] [security2:error] [pid 263262:tid 263493] [client 167.234.104.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1hJEcZ_148BjP8ZPvTwAAAW4"]
[Wed Sep 30 01:08:52.238761 2026] [security2:error] [pid 270884:tid 271048] [client 74.225.148.80:54122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wordfence-waf.php"] [unique_id "ary1hCGeq9LtYp4zuPOP7QAAAB0"]
[Wed Sep 30 01:08:52.262099 2026] [security2:error] [pid 263262:tid 263443] [client 52.172.226.14:21425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/g.php"] [unique_id "ary1hJEcZ_148BjP8ZPvUgAAATw"]
[Wed Sep 30 01:08:52.265702 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.19.141:29781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/admin.php/go.php"] [unique_id "ary1hCGeq9LtYp4zuPOP8AAAAHw"]
[Wed Sep 30 01:08:52.289857 2026] [security2:error] [pid 270884:tid 271028] [client 13.70.4.78:42187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/rithin.php"] [unique_id "ary1hCGeq9LtYp4zuPOP8wAAAAk"]
[Wed Sep 30 01:08:52.300996 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.301300 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.337148 2026] [qos:error] [pid 270884:tid 270989] [remote 87.141.29.221:63337] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=87.141.29.221, id=ary1hCGeq9LtYp4zuPOP9QAAcmM
[Wed Sep 30 01:08:52.362693 2026] [security2:error] [pid 270884:tid 271035] [client 152.59.165.7:55131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1hCGeq9LtYp4zuPOP9wAAABA"]
[Wed Sep 30 01:08:52.362875 2026] [security2:error] [pid 270884:tid 271035] [client 152.59.165.7:55131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1hCGeq9LtYp4zuPOP9wAAABA"]
[Wed Sep 30 01:08:52.380595 2026] [security2:error] [pid 263262:tid 263269] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1hJEcZ_148BjP8ZPvVQABNgU"], referer: https://forum.torquayfans.com/viewtopic.php?p=261646
[Wed Sep 30 01:08:52.380638 2026] [security2:error] [pid 263262:tid 263269] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1hJEcZ_148BjP8ZPvVQABNgU"], referer: https://forum.torquayfans.com/viewtopic.php?p=261646
[Wed Sep 30 01:08:52.382284 2026] [security2:error] [pid 263262:tid 263453] [client 103.159.192.142:52125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1hJEcZ_148BjP8ZPvVgAAAUY"]
[Wed Sep 30 01:08:52.382510 2026] [security2:error] [pid 263262:tid 263453] [client 103.159.192.142:52125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1hJEcZ_148BjP8ZPvVgAAAUY"]
[Wed Sep 30 01:08:52.399755 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.400234 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.442472 2026] [security2:error] [pid 270884:tid 271026] [client 45.138.12.32:30152] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.psx.jhe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1hCGeq9LtYp4zuPOP-QAAAAc"]
[Wed Sep 30 01:08:52.485599 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.485880 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:24913] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.524939 2026] [security2:error] [pid 270884:tid 271046] [client 168.100.149.231:32186] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/a11y.min.js"] [unique_id "ary1hCGeq9LtYp4zuPOP_QAAG1Y"]
[Wed Sep 30 01:08:52.567922 2026] [security2:error] [pid 270884:tid 271048] [client 20.219.2.60:49340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws49.php"] [unique_id "ary1hCGeq9LtYp4zuPOQBAAAAB0"]
[Wed Sep 30 01:08:52.576732 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.577164 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.633667 2026] [security2:error] [pid 263262:tid 263479] [client 13.70.4.78:49397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/il.php"] [unique_id "ary1hJEcZ_148BjP8ZPvYgAAAWA"]
[Wed Sep 30 01:08:52.635876 2026] [security2:error] [pid 263262:tid 263501] [client 20.219.2.60:26040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/amthd.php"] [unique_id "ary1hJEcZ_148BjP8ZPvYwAAAXY"]
[Wed Sep 30 01:08:52.638356 2026] [qos:error] [pid 270884:tid 270997] [remote 37.99.60.83:44735] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=37.99.60.83, id=ary1hCGeq9LtYp4zuPOQCgAAUms
[Wed Sep 30 01:08:52.669804 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.670261 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.670301 2026] [fcgid:warn] [pid 270884:tid 271127] (70014)End of file found: [client 199.45.154.47:43578] mod_fcgid: can't get data from http client
[Wed Sep 30 01:08:52.721033 2026] [security2:error] [pid 270884:tid 271038] [client 74.225.148.80:54091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wp5.php"] [unique_id "ary1hCGeq9LtYp4zuPOQDwAAABM"]
[Wed Sep 30 01:08:52.743734 2026] [security2:error] [pid 263262:tid 263460] [client 54.38.200.157:34328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.200.38.54.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ary1hJEcZ_148BjP8ZPvZgAAAU0"], referer: https://cantrade.com.sg/wp-login.php
[Wed Sep 30 01:08:52.756823 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.757106 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.825054 2026] [qos:error] [pid 270884:tid 271001] [remote 99.230.74.97:48224] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=99.230.74.97, id=ary1hCGeq9LtYp4zuPOQFAAAY28
[Wed Sep 30 01:08:52.840115 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.227.56:53926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1hCGeq9LtYp4zuPOQFQAACjk"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=625
[Wed Sep 30 01:08:52.873012 2026] [security2:error] [pid 263262:tid 263435] [client 154.47.29.230:28539] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1hJEcZ_148BjP8ZPvZwAAATQ"]
[Wed Sep 30 01:08:52.898117 2026] [security2:error] [pid 270884:tid 271133] [client 216.73.216.46:24913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1hCGeq9LtYp4zuPOQFwAAAHI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzAx
[Wed Sep 30 01:08:52.902210 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.902484 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.939293 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:52.939700 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:52.963143 2026] [security2:error] [pid 270884:tid 271069] [client 13.70.4.78:42222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/1klopedf.php"] [unique_id "ary1hCGeq9LtYp4zuPOQGQAAADI"]
[Wed Sep 30 01:08:52.979725 2026] [security2:error] [pid 270884:tid 271089] [client 52.172.226.14:39936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/gmo.php"] [unique_id "ary1hCGeq9LtYp4zuPOQGwAAAEY"]
[Wed Sep 30 01:08:52.988166 2026] [security2:error] [pid 270884:tid 271033] [client 20.213.164.196:21205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/yvnqcuic.php"] [unique_id "ary1hCGeq9LtYp4zuPOQHQAAAA4"]
[Wed Sep 30 01:08:53.002702 2026] [qos:error] [pid 263262:tid 263268] [remote 172.59.211.89:24964] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.59.211.89, id=ary1hZEcZ_148BjP8ZPvawABPgQ
[Wed Sep 30 01:08:53.007454 2026] [http2:warn] [pid 251754:tid 251957] [client 52.167.144.25:47149] h2_stream(251754-1399-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:53.030965 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.031229 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.035202 2026] [security2:error] [pid 270884:tid 271074] [client 20.204.42.136:54657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wp-ainefgskk.php"] [unique_id "ary1hSGeq9LtYp4zuPOQIAAAADc"]
[Wed Sep 30 01:08:53.085102 2026] [security2:error] [pid 270884:tid 271038] [client 20.219.2.60:49300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-blog-header.php"] [unique_id "ary1hSGeq9LtYp4zuPOQJAAAABM"]
[Wed Sep 30 01:08:53.109020 2026] [qos:error] [pid 270884:tid 270917] [remote 86.205.85.125:44468] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.205.85.125, id=ary1hSGeq9LtYp4zuPOQJgAAKx8
[Wed Sep 30 01:08:53.127956 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.128402 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.151282 2026] [security2:error] [pid 270884:tid 271038] [client 20.219.2.60:40762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/8xyz.php"] [unique_id "ary1hSGeq9LtYp4zuPOQLAAAABM"]
[Wed Sep 30 01:08:53.168002 2026] [security2:error] [pid 270884:tid 271143] [client 103.168.67.253:32490] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/login"] [unique_id "ary1hSGeq9LtYp4zuPOQKQAAAHw"]
[Wed Sep 30 01:08:53.214243 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.214583 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.222360 2026] [security2:error] [pid 270884:tid 271133] [client 74.225.148.80:18755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/em.php"] [unique_id "ary1hSGeq9LtYp4zuPOQMQAAAHI"]
[Wed Sep 30 01:08:53.239378 2026] [access_compat:error] [pid 270884:tid 271109] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 01:08:53.239668 2026] [access_compat:error] [pid 270884:tid 271109] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5L2N3ZA==
[Wed Sep 30 01:08:53.287550 2026] [security2:error] [pid 263262:tid 263480] [client 114.119.148.27:56643] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "upnorthcon.com"] [uri "/Photo-Album.php"] [unique_id "ary1hZEcZ_148BjP8ZPvcAAAAWE"], referer: http://upnorthcon.com/Photo-Album.php?pageType=folder&currDir=./Low_pressure_motor
[Wed Sep 30 01:08:53.302203 2026] [security2:error] [pid 270884:tid 271023] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1hSGeq9LtYp4zuPOQOQAAAAQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:53.302680 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.302945 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.313074 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.2.60:11379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/mh.php"] [unique_id "ary1hSGeq9LtYp4zuPOQOgAAAA4"]
[Wed Sep 30 01:08:53.326636 2026] [security2:error] [pid 270884:tid 271074] [client 13.70.4.78:49394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/zv.php"] [unique_id "ary1hSGeq9LtYp4zuPOQOwAAADc"]
[Wed Sep 30 01:08:53.341939 2026] [security2:error] [pid 270884:tid 271125] [client 202.179.95.79:62347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1hSGeq9LtYp4zuPOQPAAAAGo"]
[Wed Sep 30 01:08:53.342026 2026] [security2:error] [pid 270884:tid 271125] [client 202.179.95.79:62347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1hSGeq9LtYp4zuPOQPAAAAGo"]
[Wed Sep 30 01:08:53.399773 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.400219 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.416471 2026] [security2:error] [pid 270884:tid 271143] [client 45.138.12.32:30164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hnl.gdg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1hSGeq9LtYp4zuPOQPgAAAHw"]
[Wed Sep 30 01:08:53.464097 2026] [security2:error] [pid 263262:tid 263437] [client 4.240.25.22:63673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/dronishness.php"] [unique_id "ary1hZEcZ_148BjP8ZPvcwAAATY"]
[Wed Sep 30 01:08:53.477437 2026] [security2:error] [pid 263262:tid 263453] [client 20.219.19.141:29754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/groud3.php"] [unique_id "ary1hZEcZ_148BjP8ZPvdAAAAUY"]
[Wed Sep 30 01:08:53.486832 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.487107 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.520738 2026] [security2:error] [pid 270884:tid 271116] [client 52.172.226.14:21402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/11.php"] [unique_id "ary1hSGeq9LtYp4zuPOQQQAAAGE"]
[Wed Sep 30 01:08:53.537904 2026] [security2:error] [pid 270884:tid 271141] [client 49.43.163.212:60330] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1hSGeq9LtYp4zuPOQQgAAAHo"]
[Wed Sep 30 01:08:53.538043 2026] [security2:error] [pid 270884:tid 271141] [client 49.43.163.212:60330] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1hSGeq9LtYp4zuPOQQgAAAHo"]
[Wed Sep 30 01:08:53.577879 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.578148 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.602545 2026] [security2:error] [pid 270884:tid 271048] [client 20.219.2.60:33852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bgymj.php"] [unique_id "ary1hSGeq9LtYp4zuPOQRgAAAB0"]
[Wed Sep 30 01:08:53.643982 2026] [security2:error] [pid 263262:tid 263458] [client 13.70.4.78:42215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/zv.update.php"] [unique_id "ary1hZEcZ_148BjP8ZPveQAAAUs"]
[Wed Sep 30 01:08:53.660791 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.2.60:40750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/mini.php"] [unique_id "ary1hSGeq9LtYp4zuPOQSQAAAFI"]
[Wed Sep 30 01:08:53.671710 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.672163 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.691233 2026] [security2:error] [pid 270884:tid 271092] [client 74.225.148.80:18779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/hp.php"] [unique_id "ary1hSGeq9LtYp4zuPOQTAAAAEk"]
[Wed Sep 30 01:08:53.764656 2026] [core:error] [pid 270884:tid 271082] [client 45.138.12.41:4158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:53.764679 2026] [core:error] [pid 270884:tid 271082] [client 45.138.12.41:4158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:53.766076 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.766517 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.779536 2026] [security2:error] [pid 270884:tid 271089] [client 45.138.12.32:30176] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pts.qlp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1hSGeq9LtYp4zuPOQUgAAAEY"]
[Wed Sep 30 01:08:53.856929 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.857197 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.944053 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:53.944349 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:53.959707 2026] [security2:error] [pid 270884:tid 271023] [client 20.28.180.172:29583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ot.php"] [unique_id "ary1hSGeq9LtYp4zuPOQXQAAAAQ"]
[Wed Sep 30 01:08:53.999265 2026] [security2:error] [pid 263262:tid 263407] [client 13.70.4.78:50186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/wquosqsi.php"] [unique_id "ary1hZEcZ_148BjP8ZPvgQAAARg"]
[Wed Sep 30 01:08:54.036568 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.036836 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.080680 2026] [access_compat:error] [pid 270884:tid 271114] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:08:54.081091 2026] [access_compat:error] [pid 270884:tid 271114] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5L25ldA==
[Wed Sep 30 01:08:54.089090 2026] [security2:error] [pid 263262:tid 263487] [client 20.219.2.60:48105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gfd.php"] [unique_id "ary1hpEcZ_148BjP8ZPvggAAAWg"]
[Wed Sep 30 01:08:54.105641 2026] [security2:error] [pid 263262:tid 263435] [client 52.172.226.14:39964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/20.php"] [unique_id "ary1hpEcZ_148BjP8ZPvgwAAATQ"]
[Wed Sep 30 01:08:54.106441 2026] [security2:error] [pid 270884:tid 271028] [client 127.0.0.1:45708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary1hiGeq9LtYp4zuPOQYAAAAAk"]
[Wed Sep 30 01:08:54.106783 2026] [security2:error] [pid 270884:tid 271082] [client 74.7.230.60:52598] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.zvh.jky.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1hiGeq9LtYp4zuPOQXwAAP3Q"]
[Wed Sep 30 01:08:54.134471 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.134921 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.137088 2026] [security2:error] [pid 263262:tid 263423] [client 20.198.74.230:23882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zoo2.php"] [unique_id "ary1hpEcZ_148BjP8ZPvhQAAASg"]
[Wed Sep 30 01:08:54.146841 2026] [security2:error] [pid 263262:tid 263486] [client 20.219.2.60:26032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws68.php"] [unique_id "ary1hpEcZ_148BjP8ZPvhgAAAWc"]
[Wed Sep 30 01:08:54.165920 2026] [security2:error] [pid 263262:tid 263452] [client 74.225.148.80:60919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wpuse.php"] [unique_id "ary1hpEcZ_148BjP8ZPvhwAAAUU"]
[Wed Sep 30 01:08:54.221495 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.221837 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.247181 2026] [security2:error] [pid 270884:tid 271082] [client 194.54.160.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1hiGeq9LtYp4zuPOQbgAAAD8"]
[Wed Sep 30 01:08:54.273786 2026] [security2:error] [pid 270884:tid 271133] [client 54.38.200.157:51486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.200.38.54.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ary1hiGeq9LtYp4zuPOQbwAAAHI"], referer: https://cantrade.com.sg/wp-login.php
[Wed Sep 30 01:08:54.290485 2026] [security2:error] [pid 263262:tid 263410] [client 154.47.29.230:29773] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1hpEcZ_148BjP8ZPviQAAARs"]
[Wed Sep 30 01:08:54.309584 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.309890 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.357239 2026] [security2:error] [pid 263262:tid 263436] [client 172.232.190.19:54714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.190.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ethimexcasksolutions.com"] [uri "/mdkrdhzq.php"] [unique_id "ary1hpEcZ_148BjP8ZPvkAAAATU"], referer: www.google.com
[Wed Sep 30 01:08:54.396339 2026] [security2:error] [pid 263262:tid 263472] [client 20.219.19.141:29713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/gaxby.php"] [unique_id "ary1hpEcZ_148BjP8ZPvkQAAAVk"]
[Wed Sep 30 01:08:54.406699 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.407147 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.410771 2026] [security2:error] [pid 263262:tid 263508] [client 13.70.4.78:49287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/asset.php"] [unique_id "ary1hpEcZ_148BjP8ZPvkgAAAX0"]
[Wed Sep 30 01:08:54.437646 2026] [security2:error] [pid 263262:tid 263399] [client 20.219.2.60:11708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws88.php"] [unique_id "ary1hpEcZ_148BjP8ZPvlQAAARA"]
[Wed Sep 30 01:08:54.459045 2026] [security2:error] [pid 263262:tid 263458] [client 20.70.173.30:2107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/df.php"] [unique_id "ary1hpEcZ_148BjP8ZPvmgAAAUs"]
[Wed Sep 30 01:08:54.487667 2026] [security2:error] [pid 263262:tid 263479] [client 20.28.180.172:18356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/mh.php"] [unique_id "ary1hpEcZ_148BjP8ZPvnAAAAWA"]
[Wed Sep 30 01:08:54.493225 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.493492 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.516454 2026] [security2:error] [pid 263262:tid 263461] [client 168.100.149.16:47058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/plupload/wp-plupload.min.js"] [unique_id "ary1hpEcZ_148BjP8ZPvnQABTnA"]
[Wed Sep 30 01:08:54.532562 2026] [security2:error] [pid 270884:tid 271099] [client 223.181.30.165:31216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQfQAAAFA"]
[Wed Sep 30 01:08:54.532662 2026] [security2:error] [pid 270884:tid 271099] [client 223.181.30.165:31216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQfQAAAFA"]
[Wed Sep 30 01:08:54.555415 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.2.60:49295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/callback.php"] [unique_id "ary1hiGeq9LtYp4zuPOQfwAAAFI"]
[Wed Sep 30 01:08:54.574405 2026] [security2:error] [pid 270884:tid 271074] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1hiGeq9LtYp4zuPOQgAAAADc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:08:54.575944 2026] [security2:error] [pid 270884:tid 271127] [client 223.235.102.107:10809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQggAAAGw"]
[Wed Sep 30 01:08:54.576026 2026] [security2:error] [pid 270884:tid 271127] [client 223.235.102.107:10809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQggAAAGw"]
[Wed Sep 30 01:08:54.580078 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.580336 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.599749 2026] [security2:error] [pid 270884:tid 271103] [client 20.219.2.60:26159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xxx.php"] [unique_id "ary1hiGeq9LtYp4zuPOQhAAAAFQ"]
[Wed Sep 30 01:08:54.610344 2026] [security2:error] [pid 263262:tid 263424] [client 20.219.2.60:18860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/file61.php"] [unique_id "ary1hpEcZ_148BjP8ZPvoAAAASk"]
[Wed Sep 30 01:08:54.648173 2026] [security2:error] [pid 270884:tid 271035] [client 74.225.148.80:60911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/file18x.php"] [unique_id "ary1hiGeq9LtYp4zuPOQhgAAABA"]
[Wed Sep 30 01:08:54.671593 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.671906 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.677602 2026] [security2:error] [pid 270884:tid 271102] [client 52.172.226.14:21389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/f35.php"] [unique_id "ary1hiGeq9LtYp4zuPOQigAAAFM"]
[Wed Sep 30 01:08:54.716364 2026] [security2:error] [pid 270884:tid 271062] [client 182.69.182.151:2762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQjgAAACs"]
[Wed Sep 30 01:08:54.717633 2026] [security2:error] [pid 270884:tid 271062] [client 182.69.182.151:2762] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQjgAAACs"]
[Wed Sep 30 01:08:54.723354 2026] [security2:error] [pid 270884:tid 271060] [client 116.193.128.26:51459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQkAAAACk"]
[Wed Sep 30 01:08:54.723435 2026] [security2:error] [pid 270884:tid 271060] [client 116.193.128.26:51459] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1hiGeq9LtYp4zuPOQkAAAACk"]
[Wed Sep 30 01:08:54.762290 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:08:54.762580 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L25ldA==
[Wed Sep 30 01:08:54.763924 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.764187 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.772851 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.4.78:49385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/cued.php"] [unique_id "ary1hiGeq9LtYp4zuPOQlgAAAG8"]
[Wed Sep 30 01:08:54.853953 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.854222 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:54.947943 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:54.948238 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.037711 2026] [security2:error] [pid 263262:tid 263507] [client 114.119.159.246:25995] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.harmonicabootcamp.com"] [uri "/category/about-harmonica-boot-camp/"] [unique_id "ary1h5EcZ_148BjP8ZPvqAAAAXw"], referer: https://www.zoominfo.com/p/Sandra-Cooper/554612357
[Wed Sep 30 01:08:55.041450 2026] [http2:warn] [pid 251754:tid 251921] [client 52.167.144.188:61624] h2_stream(251754-1436-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:55.041531 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.041956 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.074859 2026] [security2:error] [pid 270884:tid 271060] [client 20.219.2.60:26371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/njxjtooj.php"] [unique_id "ary1hyGeq9LtYp4zuPOQpgAAACk"]
[Wed Sep 30 01:08:55.077332 2026] [security2:error] [pid 263262:tid 263481] [client 20.219.2.60:48099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/file.php"] [unique_id "ary1h5EcZ_148BjP8ZPvqgAAAWI"]
[Wed Sep 30 01:08:55.117161 2026] [security2:error] [pid 263262:tid 263447] [client 13.70.4.78:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/sd.php"] [unique_id "ary1h5EcZ_148BjP8ZPvrQAAAUA"]
[Wed Sep 30 01:08:55.127665 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.127971 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.137709 2026] [security2:error] [pid 270884:tid 271057] [client 74.225.148.80:54111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/123viva.php"] [unique_id "ary1hyGeq9LtYp4zuPOQqQAAACY"]
[Wed Sep 30 01:08:55.207478 2026] [security2:error] [pid 263262:tid 263477] [client 52.172.226.14:21411] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/1.php"] [unique_id "ary1h5EcZ_148BjP8ZPvsAAAAV4"]
[Wed Sep 30 01:08:55.207590 2026] [security2:error] [pid 263262:tid 263477] [client 52.172.226.14:21411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/1.php"] [unique_id "ary1h5EcZ_148BjP8ZPvsAAAAV4"]
[Wed Sep 30 01:08:55.218958 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.219209 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.252900 2026] [security2:error] [pid 270884:tid 271060] [client 20.213.164.196:55178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/koiy.php"] [unique_id "ary1hyGeq9LtYp4zuPOQrgAAACk"]
[Wed Sep 30 01:08:55.282299 2026] [core:error] [pid 270884:tid 271099] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:55.282317 2026] [core:error] [pid 270884:tid 271099] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:08:55.300208 2026] [qos:error] [pid 270884:tid 270897] [remote 179.6.7.66:5136] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=179.6.7.66, id=ary1hyGeq9LtYp4zuPOQtwAAGws
[Wed Sep 30 01:08:55.308046 2026] [qos:error] [pid 270884:tid 270888] [remote 45.190.253.35:43580] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=45.190.253.35, id=ary1hyGeq9LtYp4zuPOQuQAAZQI
[Wed Sep 30 01:08:55.311502 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.311763 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.346021 2026] [access_compat:error] [pid 270884:tid 271114] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:08:55.346331 2026] [access_compat:error] [pid 270884:tid 271114] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:08:55.410546 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.411007 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.429901 2026] [security2:error] [pid 263262:tid 263464] [client 20.70.173.30:53993] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "api.orontes-tech.com"] [uri "/1.php"] [unique_id "ary1h5EcZ_148BjP8ZPvtAAAAVE"]
[Wed Sep 30 01:08:55.430052 2026] [security2:error] [pid 263262:tid 263464] [client 20.70.173.30:53993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/1.php"] [unique_id "ary1h5EcZ_148BjP8ZPvtAAAAVE"]
[Wed Sep 30 01:08:55.493934 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.494214 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.539734 2026] [security2:error] [pid 270884:tid 271046] [client 13.70.4.78:42224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/ans.php"] [unique_id "ary1hyGeq9LtYp4zuPOQwAAAABs"]
[Wed Sep 30 01:08:55.554694 2026] [security2:error] [pid 270884:tid 271041] [client 20.219.2.60:26023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws85.php"] [unique_id "ary1hyGeq9LtYp4zuPOQwQAAABY"]
[Wed Sep 30 01:08:55.569194 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.2.60:49286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bolt.php"] [unique_id "ary1hyGeq9LtYp4zuPOQwgAAADc"]
[Wed Sep 30 01:08:55.583388 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.583652 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.584731 2026] [security2:error] [pid 270884:tid 271028] [client 20.70.173.30:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/sxxb.php"] [unique_id "ary1hyGeq9LtYp4zuPOQxAAAAAk"]
[Wed Sep 30 01:08:55.674153 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.674440 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.703898 2026] [security2:error] [pid 270884:tid 271029] [client 154.47.29.230:30919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1hyGeq9LtYp4zuPOQxgAAAAo"]
[Wed Sep 30 01:08:55.725044 2026] [security2:error] [pid 270884:tid 271089] [client 106.214.2.47:8343] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1hyGeq9LtYp4zuPOQzQAAAEY"]
[Wed Sep 30 01:08:55.725181 2026] [security2:error] [pid 270884:tid 271089] [client 106.214.2.47:8343] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1hyGeq9LtYp4zuPOQzQAAAEY"]
[Wed Sep 30 01:08:55.741619 2026] [security2:error] [pid 270884:tid 271141] [client 52.172.226.14:21424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/c.php"] [unique_id "ary1hyGeq9LtYp4zuPOQzgAAAHo"]
[Wed Sep 30 01:08:55.764703 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.764979 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.795979 2026] [security2:error] [pid 263262:tid 263395] [client 74.225.148.80:18447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/Components.update.php"] [unique_id "ary1h5EcZ_148BjP8ZPvvQAAAQw"]
[Wed Sep 30 01:08:55.810552 2026] [security2:error] [pid 270884:tid 271062] [client 20.219.2.60:11693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws86.php"] [unique_id "ary1hyGeq9LtYp4zuPOQ1AAAACs"]
[Wed Sep 30 01:08:55.812254 2026] [security2:error] [pid 270884:tid 271090] [client 43.227.131.37:8118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1hyGeq9LtYp4zuPOQ1QAAAEc"]
[Wed Sep 30 01:08:55.812330 2026] [security2:error] [pid 270884:tid 271090] [client 43.227.131.37:8118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1hyGeq9LtYp4zuPOQ1QAAAEc"]
[Wed Sep 30 01:08:55.854527 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.854843 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.862722 2026] [access_compat:error] [pid 270884:tid 271076] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:55.862973 2026] [access_compat:error] [pid 270884:tid 271076] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:55.878887 2026] [security2:error] [pid 270884:tid 271098] [client 13.70.4.78:49333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/cns.php"] [unique_id "ary1hyGeq9LtYp4zuPOQ2QAAAE8"]
[Wed Sep 30 01:08:55.946703 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:55.946987 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:55.966413 2026] [security2:error] [pid 263262:tid 263520] [client 20.204.42.136:61130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/ab.php"] [unique_id "ary1h5EcZ_148BjP8ZPvvwAAAYk"]
[Wed Sep 30 01:08:55.991771 2026] [security2:error] [pid 263262:tid 263506] [client 20.213.164.196:21192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wordfence-waf.php"] [unique_id "ary1h5EcZ_148BjP8ZPvwAAAAXs"]
[Wed Sep 30 01:08:55.991991 2026] [security2:error] [pid 270884:tid 271046] [client 103.168.67.253:32490] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/login"] [unique_id "ary1hyGeq9LtYp4zuPOQ0QAAABs"]
[Wed Sep 30 01:08:55.998396 2026] [security2:error] [pid 270884:tid 271112] [client 209.40.214.150:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1hyGeq9LtYp4zuPOQ3QAAAF0"]
[Wed Sep 30 01:08:56.037599 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.037872 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.039557 2026] [security2:error] [pid 263262:tid 263407] [client 20.219.2.60:49308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-blogs.php"] [unique_id "ary1iJEcZ_148BjP8ZPvwQAAARg"]
[Wed Sep 30 01:08:56.050749 2026] [security2:error] [pid 263262:tid 263449] [client 20.219.2.60:26093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws61.php"] [unique_id "ary1iJEcZ_148BjP8ZPvwgAAAUI"]
[Wed Sep 30 01:08:56.057618 2026] [security2:error] [pid 270884:tid 271042] [client 20.28.180.172:34296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/bunks.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ3wAAABc"]
[Wed Sep 30 01:08:56.071778 2026] [security2:error] [pid 270884:tid 271033] [client 20.70.173.30:25339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/dehnl.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ4AAAAA4"]
[Wed Sep 30 01:08:56.127507 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.127800 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.184915 2026] [security2:error] [pid 270884:tid 271098] [client 20.219.19.141:65505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/dh9u7.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ6QAAAE8"]
[Wed Sep 30 01:08:56.219576 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.219852 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.234484 2026] [security2:error] [pid 270884:tid 271110] [client 103.168.67.253:32490] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/login"] [unique_id "ary1iCGeq9LtYp4zuPOQ6AAAAFs"]
[Wed Sep 30 01:08:56.252404 2026] [security2:error] [pid 263262:tid 263480] [client 52.172.226.14:39899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/build.php"] [unique_id "ary1iJEcZ_148BjP8ZPvzQAAAWE"]
[Wed Sep 30 01:08:56.307568 2026] [security2:error] [pid 270884:tid 271086] [client 13.70.4.78:50222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/faiy.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ8AAAAEM"]
[Wed Sep 30 01:08:56.311907 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.312341 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:16184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.377920 2026] [security2:error] [pid 263262:tid 263427] [client 74.225.148.80:18439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/sm.php"] [unique_id "ary1iJEcZ_148BjP8ZPvzwAAASw"]
[Wed Sep 30 01:08:56.408687 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.409203 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.415449 2026] [access_compat:error] [pid 270884:tid 271130] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:56.415908 2026] [access_compat:error] [pid 270884:tid 271130] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:56.510567 2026] [security2:error] [pid 263262:tid 263464] [client 168.100.149.129:49388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/wp-backbone.min.js"] [unique_id "ary1iJEcZ_148BjP8ZPv1wABUXo"]
[Wed Sep 30 01:08:56.518416 2026] [security2:error] [pid 263262:tid 263411] [client 20.219.2.60:49297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/zlnckdxn.php"] [unique_id "ary1iJEcZ_148BjP8ZPv2QAAARw"]
[Wed Sep 30 01:08:56.530302 2026] [security2:error] [pid 270884:tid 271098] [client 20.219.2.60:26393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/iyy.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ-wAAAE8"]
[Wed Sep 30 01:08:56.552198 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:37318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.552630 2026] [access_compat:error] [pid 263262:tid 263417] [client 216.73.216.46:37318] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.591662 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.591947 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:10488] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.728960 2026] [security2:error] [pid 263262:tid 263289] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1iJEcZ_148BjP8ZPv4QABIBk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:08:56.729002 2026] [security2:error] [pid 263262:tid 263289] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1iJEcZ_148BjP8ZPv4QABIBk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302282&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:08:56.729139 2026] [security2:error] [pid 263262:tid 263407] [client 52.172.226.14:39949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/bless.php"] [unique_id "ary1iJEcZ_148BjP8ZPv4gAAARg"]
[Wed Sep 30 01:08:56.763911 2026] [security2:error] [pid 270884:tid 271042] [client 216.73.216.46:16184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1iCGeq9LtYp4zuPORBQAAABc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDcvbm9kZTAvbWVtb3J5MjI4
[Wed Sep 30 01:08:56.773030 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.773306 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.799404 2026] [security2:error] [pid 270884:tid 271074] [client 13.70.4.78:49295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gecho.php"] [unique_id "ary1iCGeq9LtYp4zuPORBwAAADc"]
[Wed Sep 30 01:08:56.804989 2026] [security2:error] [pid 270884:tid 271032] [client 20.219.19.141:29697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/yvnqcuic.php"] [unique_id "ary1iCGeq9LtYp4zuPORCAAAAA0"]
[Wed Sep 30 01:08:56.826405 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.826670 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.850950 2026] [access_compat:error] [pid 270884:tid 271102] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:56.851226 2026] [access_compat:error] [pid 270884:tid 271102] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:56.882304 2026] [security2:error] [pid 270884:tid 271086] [client 20.204.42.136:59870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/dairg.php"] [unique_id "ary1iCGeq9LtYp4zuPORDgAAAEM"]
[Wed Sep 30 01:08:56.908507 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.908773 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.916637 2026] [security2:error] [pid 270884:tid 271051] [client 74.225.148.80:60883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/mknobgkg.php"] [unique_id "ary1iCGeq9LtYp4zuPOREgAAACA"]
[Wed Sep 30 01:08:56.926613 2026] [security2:error] [pid 270884:tid 271023] [client 152.56.240.85:56147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1iCGeq9LtYp4zuPOQ7AAAAAQ"]
[Wed Sep 30 01:08:56.932850 2026] [security2:error] [pid 270884:tid 271076] [client 187.237.178.130:21346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.178.237.187.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ary1iCGeq9LtYp4zuPOREwAAADk"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 01:08:56.944862 2026] [security2:error] [pid 270884:tid 271114] [client 4.240.25.22:38762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/simple.php"] [unique_id "ary1iCGeq9LtYp4zuPORFAAAAF8"]
[Wed Sep 30 01:08:56.956777 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:56.957052 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:56.973741 2026] [security2:error] [pid 263262:tid 263475] [client 216.73.216.46:37318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1iJEcZ_148BjP8ZPv5gAAAVw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MTc%3D
[Wed Sep 30 01:08:57.003032 2026] [security2:error] [pid 270884:tid 271035] [client 216.73.216.46:10488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1iSGeq9LtYp4zuPORFwAAABA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5ODIvbm9kZTAvbWVtb3J5MTY2
[Wed Sep 30 01:08:57.032313 2026] [security2:error] [pid 270884:tid 271086] [client 20.219.2.60:26055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/900.php"] [unique_id "ary1iSGeq9LtYp4zuPORGAAAAEM"]
[Wed Sep 30 01:08:57.048035 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.048367 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.091442 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.2.60:45088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/fs6.php"] [unique_id "ary1iSGeq9LtYp4zuPORGgAAAEY"]
[Wed Sep 30 01:08:57.135195 2026] [security2:error] [pid 263262:tid 263484] [client 154.47.29.230:32074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1iZEcZ_148BjP8ZPv6AAAAWU"]
[Wed Sep 30 01:08:57.139346 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.139624 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.148767 2026] [qos:error] [pid 263262:tid 263323] [remote 64.65.114.136:54051] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=64.65.114.136, id=ary1iZEcZ_148BjP8ZPv7AABMjs
[Wed Sep 30 01:08:57.155367 2026] [security2:error] [pid 270884:tid 271042] [client 13.70.4.78:42184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/gu.php"] [unique_id "ary1iSGeq9LtYp4zuPORHQAAABc"]
[Wed Sep 30 01:08:57.229865 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.230134 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.318350 2026] [security2:error] [pid 270884:tid 271086] [client 52.172.226.14:39951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/admin/upload/css.php"] [unique_id "ary1iSGeq9LtYp4zuPORJgAAAEM"]
[Wed Sep 30 01:08:57.319880 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.320131 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.339903 2026] [access_compat:error] [pid 270884:tid 271089] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:57.340175 2026] [access_compat:error] [pid 270884:tid 271089] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:08:57.351392 2026] [security2:error] [pid 270884:tid 271080] [client 20.219.2.60:11842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/vx.php"] [unique_id "ary1iSGeq9LtYp4zuPORKgAAAD0"]
[Wed Sep 30 01:08:57.423274 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.423719 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.452802 2026] [security2:error] [pid 270884:tid 271099] [client 4.240.25.22:13067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/chosen.php"] [unique_id "ary1iSGeq9LtYp4zuPORMAAAAFA"]
[Wed Sep 30 01:08:57.455425 2026] [security2:error] [pid 270884:tid 271032] [client 223.181.60.167:17223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1iSGeq9LtYp4zuPORMQAAAA0"]
[Wed Sep 30 01:08:57.455562 2026] [security2:error] [pid 270884:tid 271032] [client 223.181.60.167:17223] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1iSGeq9LtYp4zuPORMQAAAA0"]
[Wed Sep 30 01:08:57.488957 2026] [security2:error] [pid 270884:tid 271062] [client 20.219.2.60:26049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/blsvgeyaza.php"] [unique_id "ary1iSGeq9LtYp4zuPORMgAAACs"]
[Wed Sep 30 01:08:57.493248 2026] [security2:error] [pid 270884:tid 271115] [client 13.70.4.78:50233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/nck.php"] [unique_id "ary1iSGeq9LtYp4zuPORMwAAAGA"]
[Wed Sep 30 01:08:57.502790 2026] [security2:error] [pid 263262:tid 263513] [client 20.213.164.196:55191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wp5.php"] [unique_id "ary1iZEcZ_148BjP8ZPv9wAAAYI"]
[Wed Sep 30 01:08:57.503725 2026] [security2:error] [pid 263262:tid 263461] [client 74.225.148.80:18432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/dairg.php"] [unique_id "ary1iZEcZ_148BjP8ZPv-AAAAU4"]
[Wed Sep 30 01:08:57.507863 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.508300 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.571851 2026] [security2:error] [pid 270884:tid 271103] [client 20.219.2.60:49317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/xwzs.php"] [unique_id "ary1iSGeq9LtYp4zuPOROQAAAFQ"]
[Wed Sep 30 01:08:57.593767 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.594047 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.614760 2026] [security2:error] [pid 270884:tid 270921] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1iSGeq9LtYp4zuPORPQAAECM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Ft%3D17118
[Wed Sep 30 01:08:57.620121 2026] [security2:error] [pid 270884:tid 271104] [client 20.219.2.60:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/xx.php"] [unique_id "ary1iSGeq9LtYp4zuPORPwAAAFU"]
[Wed Sep 30 01:08:57.648773 2026] [security2:error] [pid 270884:tid 271082] [client 20.70.173.30:8189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1iSGeq9LtYp4zuPORQgAAAD8"]
[Wed Sep 30 01:08:57.682865 2026] [qos:error] [pid 270884:tid 271009] [remote 89.93.153.44:60291] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.93.153.44, id=ary1iSGeq9LtYp4zuPORRgAAXXc
[Wed Sep 30 01:08:57.689058 2026] [security2:error] [pid 270884:tid 271120] [client 136.169.235.222:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1iSGeq9LtYp4zuPORRwAAAGU"]
[Wed Sep 30 01:08:57.689102 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.689466 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.776157 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.776428 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.818960 2026] [security2:error] [pid 270884:tid 271120] [client 13.70.4.78:50212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/xtt.php"] [unique_id "ary1iSGeq9LtYp4zuPORSQAAAGU"]
[Wed Sep 30 01:08:57.847988 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.19.141:38239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/koiy.php"] [unique_id "ary1iSGeq9LtYp4zuPORTAAAAAo"]
[Wed Sep 30 01:08:57.860386 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:57.860647 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:57.867559 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.867874 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.903061 2026] [qos:error] [pid 263262:tid 263333] [remote 89.132.221.175:42160] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.132.221.175, id=ary1iZEcZ_148BjP8ZPv_QABGEU
[Wed Sep 30 01:08:57.935702 2026] [security2:error] [pid 263262:tid 263517] [client 52.172.226.14:39953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/lock360.php"] [unique_id "ary1iZEcZ_148BjP8ZPv_wAAAYY"]
[Wed Sep 30 01:08:57.953076 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:26009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gqhyti.php"] [unique_id "ary1iSGeq9LtYp4zuPORUwAAADk"]
[Wed Sep 30 01:08:57.958570 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:57.958848 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:57.988473 2026] [security2:error] [pid 270884:tid 271074] [client 155.190.6.18:34956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1iSGeq9LtYp4zuPORVAAAADc"]
[Wed Sep 30 01:08:58.008630 2026] [security2:error] [pid 263262:tid 263477] [client 74.225.148.80:18770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/dronishness.php"] [unique_id "ary1ipEcZ_148BjP8ZPwAAAAAV4"]
[Wed Sep 30 01:08:58.017563 2026] [security2:error] [pid 263262:tid 263435] [client 37.59.112.122:55368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.112.59.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "ary1ipEcZ_148BjP8ZPwAQAAATQ"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 01:08:58.047887 2026] [qos:error] [pid 270884:tid 270971] [remote 162.225.183.21:57360] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=162.225.183.21, id=ary1iiGeq9LtYp4zuPORWAAAT1E
[Wed Sep 30 01:08:58.050711 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.050969 2026] [access_compat:error] [pid 270884:tid 271035] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.082926 2026] [security2:error] [pid 270884:tid 271127] [client 20.219.2.60:33823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary1iiGeq9LtYp4zuPORWQAAAGw"]
[Wed Sep 30 01:08:58.139305 2026] [security2:error] [pid 263262:tid 263309] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1ipEcZ_148BjP8ZPwBQABIi0"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=27df9e3778d29fa53df2ce1a566fd999
[Wed Sep 30 01:08:58.139348 2026] [security2:error] [pid 263262:tid 263309] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1ipEcZ_148BjP8ZPwBQABIi0"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=27df9e3778d29fa53df2ce1a566fd999
[Wed Sep 30 01:08:58.141555 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.141833 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.169557 2026] [security2:error] [pid 270884:tid 271112] [client 13.70.4.78:50192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.chisholmtrailcowboychurch.org"] [uri "/go.php"] [unique_id "ary1iiGeq9LtYp4zuPORWwAAAF0"]
[Wed Sep 30 01:08:58.210918 2026] [security2:error] [pid 270884:tid 271076] [client 187.237.178.130:28338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.178.237.187.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gkmasterson.com"] [uri "/wp-login.php"] [unique_id "ary1iiGeq9LtYp4zuPORXQAAADk"], referer: https://gkmasterson.com/wp-login.php
[Wed Sep 30 01:08:58.232281 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.232567 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.268085 2026] [security2:error] [pid 263262:tid 263396] [client 116.197.133.25:51180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1ipEcZ_148BjP8ZPwBwAAAQ0"]
[Wed Sep 30 01:08:58.268194 2026] [security2:error] [pid 263262:tid 263396] [client 116.197.133.25:51180] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1ipEcZ_148BjP8ZPwBwAAAQ0"]
[Wed Sep 30 01:08:58.268797 2026] [security2:error] [pid 270884:tid 271074] [client 155.190.6.18:34956] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1iSGeq9LtYp4zuPORVAAAADc"]
[Wed Sep 30 01:08:58.325167 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.325465 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.341641 2026] [access_compat:error] [pid 270884:tid 271057] [client 47.79.13.177:46128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:58.341925 2026] [access_compat:error] [pid 270884:tid 271057] [client 47.79.13.177:46128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:58.368165 2026] [security2:error] [pid 263262:tid 263462] [client 20.204.42.136:54658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/z60.php"] [unique_id "ary1ipEcZ_148BjP8ZPwCgAAAU8"]
[Wed Sep 30 01:08:58.369121 2026] [security2:error] [pid 270884:tid 271086] [client 103.159.192.142:52268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1iiGeq9LtYp4zuPORZAAAAEM"]
[Wed Sep 30 01:08:58.369250 2026] [security2:error] [pid 270884:tid 271086] [client 103.159.192.142:52268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1iiGeq9LtYp4zuPORZAAAAEM"]
[Wed Sep 30 01:08:58.374346 2026] [access_compat:error] [pid 270884:tid 271099] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:58.374823 2026] [access_compat:error] [pid 270884:tid 271099] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:58.393337 2026] [core:alert] [pid 270884:tid 271033] [client 167.94.146.53:2188] /home3/mypoolpl/public_html/.htaccess: php_value takes two arguments, PHP Value
[Wed Sep 30 01:08:58.419852 2026] [security2:error] [pid 270884:tid 271127] [client 20.219.2.60:26028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/autoxxi.php"] [unique_id "ary1iiGeq9LtYp4zuPORZwAAAGw"]
[Wed Sep 30 01:08:58.423240 2026] [security2:error] [pid 270884:tid 271109] [client 52.172.226.14:39965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/4.php"] [unique_id "ary1iiGeq9LtYp4zuPORaAAAAFo"]
[Wed Sep 30 01:08:58.428613 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.429043 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.502119 2026] [security2:error] [pid 270884:tid 271142] [client 74.225.148.80:60914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/Row_wsoo.php"] [unique_id "ary1iiGeq9LtYp4zuPORbQAAAHs"]
[Wed Sep 30 01:08:58.506408 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.506685 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.533000 2026] [security2:error] [pid 263262:tid 263399] [client 168.100.149.188:39840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary1ipEcZ_148BjP8ZPwDAABEGg"]
[Wed Sep 30 01:08:58.554078 2026] [security2:error] [pid 270884:tid 271108] [client 154.47.29.230:33232] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1iiGeq9LtYp4zuPORagAAAFk"]
[Wed Sep 30 01:08:58.574914 2026] [security2:error] [pid 270884:tid 271064] [client 20.219.2.60:49328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws66.php"] [unique_id "ary1iiGeq9LtYp4zuPORcQAAAC0"]
[Wed Sep 30 01:08:58.597028 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.597288 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.687110 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.687383 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.724970 2026] [security2:error] [pid 263262:tid 263443] [client 43.104.4.186:10288] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary1ipEcZ_148BjP8ZPwEQAAATw"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=consumer-lifestyle%2Cpower-products%2Csolid-works-software
[Wed Sep 30 01:08:58.778119 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.778387 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.779488 2026] [security2:error] [pid 270884:tid 271035] [client 103.241.204.139:53730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1iiGeq9LtYp4zuPORfQAAABA"]
[Wed Sep 30 01:08:58.779564 2026] [security2:error] [pid 270884:tid 271035] [client 103.241.204.139:53730] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1iiGeq9LtYp4zuPORfQAAABA"]
[Wed Sep 30 01:08:58.832665 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:58.832949 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:08:58.869859 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.870139 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.882346 2026] [security2:error] [pid 263262:tid 263395] [client 20.28.180.172:61245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws88.php"] [unique_id "ary1ipEcZ_148BjP8ZPwEgAAAQw"]
[Wed Sep 30 01:08:58.894204 2026] [security2:error] [pid 270884:tid 271127] [client 20.219.2.60:26132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/1144452145_error_log.php"] [unique_id "ary1iiGeq9LtYp4zuPORhAAAAGw"]
[Wed Sep 30 01:08:58.949599 2026] [security2:error] [pid 263262:tid 263414] [client 43.104.4.186:10288] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary1ipEcZ_148BjP8ZPwFAAAAR8"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=consumer-lifestyle%2Cpower-products%2Csolid-works-software
[Wed Sep 30 01:08:58.959495 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:58.959838 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:58.978886 2026] [ssl:error] [pid 270884:tid 271115] [client 216.25.124.26:42072] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autoconfig.ley.xio.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:08:59.019401 2026] [security2:error] [pid 270884:tid 271033] [client 52.172.226.14:21430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/about.php"] [unique_id "ary1iyGeq9LtYp4zuPORigAAAA4"]
[Wed Sep 30 01:08:59.052137 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.052412 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.087892 2026] [security2:error] [pid 263262:tid 263439] [client 20.219.2.60:33819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ewe.php"] [unique_id "ary1i5EcZ_148BjP8ZPwFgAAATg"]
[Wed Sep 30 01:08:59.112566 2026] [security2:error] [pid 270884:tid 271082] [client 20.28.180.172:34303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/f35.update.php"] [unique_id "ary1iyGeq9LtYp4zuPORjQAAAD8"]
[Wed Sep 30 01:08:59.141212 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.141488 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.143506 2026] [security2:error] [pid 263262:tid 263506] [client 20.219.2.60:11880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/dass.php"] [unique_id "ary1i5EcZ_148BjP8ZPwGAAAAXs"]
[Wed Sep 30 01:08:59.180740 2026] [security2:error] [pid 263262:tid 263500] [client 20.219.19.141:29719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wordfence-waf.php"] [unique_id "ary1i5EcZ_148BjP8ZPwGQAAAXU"]
[Wed Sep 30 01:08:59.191412 2026] [security2:error] [pid 270884:tid 270934] [remote 57.141.14.28:47894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary1iyGeq9LtYp4zuPORjwAADzA"]
[Wed Sep 30 01:08:59.195693 2026] [access_compat:error] [pid 263262:tid 263411] [client 47.79.13.177:46130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:59.195976 2026] [access_compat:error] [pid 263262:tid 263411] [client 47.79.13.177:46130] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:59.233352 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.233626 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:41223] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.239935 2026] [security2:error] [pid 263262:tid 263511] [client 20.194.30.107:17377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/min.php"] [unique_id "ary1i5EcZ_148BjP8ZPwGwAAAYA"]
[Wed Sep 30 01:08:59.328832 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.329257 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.374151 2026] [security2:error] [pid 263262:tid 263444] [client 20.219.2.60:26077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws48.php"] [unique_id "ary1i5EcZ_148BjP8ZPwIQAAAT0"]
[Wed Sep 30 01:08:59.455816 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.456260 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.476834 2026] [http2:warn] [pid 251754:tid 251997] [client 52.167.144.211:58215] h2_stream(251754-752-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:08:59.507771 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.508080 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.527642 2026] [security2:error] [pid 270884:tid 271034] [client 176.117.94.231:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary1iyGeq9LtYp4zuPORowAAAA8"]
[Wed Sep 30 01:08:59.556612 2026] [security2:error] [pid 270884:tid 271056] [client 74.225.148.80:18758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/x2.php"] [unique_id "ary1iyGeq9LtYp4zuPORpAAAACU"]
[Wed Sep 30 01:08:59.567097 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:49287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/aboute.php"] [unique_id "ary1iyGeq9LtYp4zuPORpQAAAGs"]
[Wed Sep 30 01:08:59.567491 2026] [security2:error] [pid 270884:tid 271120] [client 52.172.226.14:21406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/r.php"] [unique_id "ary1iyGeq9LtYp4zuPORpgAAAGU"]
[Wed Sep 30 01:08:59.597302 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.597553 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.652247 2026] [security2:error] [pid 270884:tid 271104] [client 216.73.216.46:41223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1iyGeq9LtYp4zuPORrAAAAFU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy9wY2lfYnVzLzAwMDA6MDAvZGV2aWNlLzAwMDA6MDA6MWQuMC91c2Jtb24%3D
[Wed Sep 30 01:08:59.687723 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.687995 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.710600 2026] [security2:error] [pid 270884:tid 271096] [client 20.198.74.230:24186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/1b.php"] [unique_id "ary1iyGeq9LtYp4zuPORsAAAAE0"]
[Wed Sep 30 01:08:59.750493 2026] [access_compat:error] [pid 270884:tid 271029] [client 47.79.13.53:51232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:08:59.750756 2026] [access_compat:error] [pid 270884:tid 271029] [client 47.79.13.53:51232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:08:59.780067 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.780336 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.852050 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:26160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary1iyGeq9LtYp4zuPORuAAAAFc"]
[Wed Sep 30 01:08:59.870684 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.870965 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.961836 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:08:59.962092 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:08:59.971104 2026] [security2:error] [pid 263262:tid 263508] [client 154.47.29.230:34347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1i5EcZ_148BjP8ZPwKAAAAX0"]
[Wed Sep 30 01:09:00.039583 2026] [security2:error] [pid 263262:tid 263504] [client 20.219.2.60:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/x9.php"] [unique_id "ary1jJEcZ_148BjP8ZPwLgAAAXk"]
[Wed Sep 30 01:09:00.040138 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.19.141:29793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wp5.php"] [unique_id "ary1jCGeq9LtYp4zuPORwgAAAE0"]
[Wed Sep 30 01:09:00.051254 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.051522 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.086715 2026] [security2:error] [pid 270884:tid 271064] [client 52.172.226.14:21382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/v4.php"] [unique_id "ary1jCGeq9LtYp4zuPORxAAAAC0"]
[Wed Sep 30 01:09:00.113831 2026] [security2:error] [pid 270884:tid 271035] [client 82.102.18.190:51786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "ary1jCGeq9LtYp4zuPORxgAAABA"]
[Wed Sep 30 01:09:00.125144 2026] [security2:error] [pid 270884:tid 271106] [client 74.225.148.80:18477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/v4.php"] [unique_id "ary1jCGeq9LtYp4zuPORyAAAAFc"]
[Wed Sep 30 01:09:00.145669 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.146107 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.234932 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.235200 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.275666 2026] [security2:error] [pid 270884:tid 271023] [client 138.197.80.41:50874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.80.197.138.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/404/wp-login.php"] [unique_id "ary1jCGeq9LtYp4zuPOR0gAAAAQ"]
[Wed Sep 30 01:09:00.312327 2026] [security2:error] [pid 263262:tid 263493] [client 20.219.2.60:40735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/schallfuns.php"] [unique_id "ary1jJEcZ_148BjP8ZPwMAAAAW4"]
[Wed Sep 30 01:09:00.326587 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.326976 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.428743 2026] [autoindex:error] [pid 270884:tid 271096] [client 104.28.222.46:36379] AH01276: Cannot serve directory /home4/wvsemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/search?q=wvs.emf.mybluehost.me
[Wed Sep 30 01:09:00.429931 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.430363 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.506223 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.506495 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.529063 2026] [security2:error] [pid 270884:tid 271135] [client 168.100.149.190:29798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary1jCGeq9LtYp4zuPOR3AAAdBA"]
[Wed Sep 30 01:09:00.531281 2026] [security2:error] [pid 270884:tid 271108] [client 20.219.2.60:48070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/an.php"] [unique_id "ary1jCGeq9LtYp4zuPOR3gAAAFk"]
[Wed Sep 30 01:09:00.598144 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.598427 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.612237 2026] [security2:error] [pid 263262:tid 263481] [client 52.172.226.14:21415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-22.php"] [unique_id "ary1jJEcZ_148BjP8ZPwOgAAAWI"]
[Wed Sep 30 01:09:00.630362 2026] [security2:error] [pid 263262:tid 263506] [client 74.225.148.80:18791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/albin.php"] [unique_id "ary1jJEcZ_148BjP8ZPwPAAAAXs"]
[Wed Sep 30 01:09:00.679457 2026] [security2:error] [pid 270884:tid 271103] [client 37.41.16.35:54704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR6QAAAFQ"]
[Wed Sep 30 01:09:00.679582 2026] [security2:error] [pid 270884:tid 271103] [client 37.41.16.35:54704] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR6QAAAFQ"]
[Wed Sep 30 01:09:00.688513 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.688885 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.746197 2026] [security2:error] [pid 270884:tid 271120] [client 82.102.18.190:51792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR7wAAAGU"]
[Wed Sep 30 01:09:00.775171 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.2.60:40716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/CDX1.php"] [unique_id "ary1jCGeq9LtYp4zuPOR8wAAAAo"]
[Wed Sep 30 01:09:00.779532 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.779797 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.781135 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:00.781373 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:00.797559 2026] [security2:error] [pid 263262:tid 263510] [client 79.55.34.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary1jJEcZ_148BjP8ZPwRgAAAX8"]
[Wed Sep 30 01:09:00.800774 2026] [security2:error] [pid 270884:tid 271091] [client 201.32.215.149:7054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR9wAAAEg"]
[Wed Sep 30 01:09:00.800899 2026] [security2:error] [pid 270884:tid 271091] [client 201.32.215.149:7054] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR9wAAAEg"]
[Wed Sep 30 01:09:00.853538 2026] [security2:error] [pid 263262:tid 263433] [client 20.219.19.141:29807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/em.php"] [unique_id "ary1jJEcZ_148BjP8ZPwSgAAATI"]
[Wed Sep 30 01:09:00.854642 2026] [security2:error] [pid 270884:tid 271062] [client 194.50.16.198:59772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "muranoaviacion.com"] [uri "/phpversions.php"] [unique_id "ary1jCGeq9LtYp4zuPOR-QAAACs"]
[Wed Sep 30 01:09:00.870170 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.870445 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.962370 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:00.962645 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:00.971205 2026] [security2:error] [pid 263262:tid 263399] [client 49.37.102.248:53079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1jJEcZ_148BjP8ZPwTwAAARA"]
[Wed Sep 30 01:09:00.971311 2026] [security2:error] [pid 263262:tid 263399] [client 49.37.102.248:53079] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1jJEcZ_148BjP8ZPwTwAAARA"]
[Wed Sep 30 01:09:00.999523 2026] [access_compat:error] [pid 270884:tid 271060] [client 47.79.13.58:59284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:00.999843 2026] [access_compat:error] [pid 270884:tid 271060] [client 47.79.13.58:59284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:01.017779 2026] [security2:error] [pid 263262:tid 263457] [client 20.219.2.60:49302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/aboutc.php"] [unique_id "ary1jZEcZ_148BjP8ZPwUwAAAUo"]
[Wed Sep 30 01:09:01.019237 2026] [security2:error] [pid 263262:tid 263470] [client 114.119.131.112:55941] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "azarrow.com"] [uri "/state-history/washington/508-lincoln-county"] [unique_id "ary1jZEcZ_148BjP8ZPwVQAAAVc"], referer: https://www.peekyou.com/usa/arizona/tucson/daniel_krehbiel
[Wed Sep 30 01:09:01.036063 2026] [security2:error] [pid 270884:tid 271064] [client 179.105.122.52:51412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1jCGeq9LtYp4zuPOR-AAAAC0"]
[Wed Sep 30 01:09:01.052622 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.052923 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.128175 2026] [security2:error] [pid 270884:tid 271126] [client 74.225.148.80:60886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/atkno.php"] [unique_id "ary1jSGeq9LtYp4zuPOSBQAAAGs"]
[Wed Sep 30 01:09:01.149275 2026] [security2:error] [pid 263262:tid 263404] [client 52.172.226.14:21434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/makeasmtp.php"] [unique_id "ary1jZEcZ_148BjP8ZPwWQAAARU"]
[Wed Sep 30 01:09:01.151464 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.151754 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.190041 2026] [security2:error] [pid 270884:tid 271103] [client 20.70.173.30:49422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/av.php"] [unique_id "ary1jSGeq9LtYp4zuPOSCQAAAFQ"]
[Wed Sep 30 01:09:01.212357 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.2.60:11673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/s.php"] [unique_id "ary1jSGeq9LtYp4zuPOSDAAAACc"]
[Wed Sep 30 01:09:01.234079 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.234382 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.256914 2026] [security2:error] [pid 270884:tid 271135] [client 20.219.2.60:26026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/clasa99.php"] [unique_id "ary1jSGeq9LtYp4zuPOSEQAAAHQ"]
[Wed Sep 30 01:09:01.325391 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.325675 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.343543 2026] [security2:error] [pid 270884:tid 271074] [client 74.7.175.177:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpanel.island-taste.com"] [uri "/___proxy_subdomain_cpanel/cgi-sys/404.html"] [unique_id "ary1jSGeq9LtYp4zuPOSGgAAADc"]
[Wed Sep 30 01:09:01.345413 2026] [security2:error] [pid 270884:tid 271076] [client 74.7.175.177:60146] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpanel.island-taste.com"] [uri "/___proxy_subdomain_cpanel/robots.txt"] [unique_id "ary1jSGeq9LtYp4zuPOSFgAAOWM"]
[Wed Sep 30 01:09:01.410510 2026] [security2:error] [pid 263262:tid 263446] [client 154.47.29.230:35476] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1jZEcZ_148BjP8ZPwWwAAAT8"]
[Wed Sep 30 01:09:01.439908 2026] [http2:warn] [pid 251754:tid 251988] [client 40.77.167.224:62328] h2_stream(251754-767-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:01.442973 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.443410 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.453226 2026] [security2:error] [pid 263262:tid 263435] [client 20.213.164.196:55199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/em.php"] [unique_id "ary1jZEcZ_148BjP8ZPwXwAAATQ"]
[Wed Sep 30 01:09:01.484182 2026] [autoindex:error] [pid 270884:tid 271104] [client 104.28.222.46:21273] AH01276: Cannot serve directory /home4/wvsemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://wvs.emf.mybluehost.me/
[Wed Sep 30 01:09:01.521493 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.521784 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.544492 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:33795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gdn.php"] [unique_id "ary1jSGeq9LtYp4zuPOSJgAAADk"]
[Wed Sep 30 01:09:01.547203 2026] [security2:error] [pid 263262:tid 263396] [client 20.219.19.141:29724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/hp.php"] [unique_id "ary1jZEcZ_148BjP8ZPwYwAAAQ0"]
[Wed Sep 30 01:09:01.611617 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:01.611784 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.611912 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:01.612049 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.621632 2026] [security2:error] [pid 270884:tid 271094] [client 194.50.16.198:52580] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "muranoaviacion.com"] [uri "/phpversions.php"] [unique_id "ary1jSGeq9LtYp4zuPOSLAAAAEs"]
[Wed Sep 30 01:09:01.637374 2026] [security2:error] [pid 270884:tid 271106] [client 37.59.112.122:43380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.112.59.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crayons-couleur.com"] [uri "/wp-login.php"] [unique_id "ary1jSGeq9LtYp4zuPOSLQAAAFc"], referer: https://crayons-couleur.com/wp-login.php
[Wed Sep 30 01:09:01.702528 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.702802 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.707780 2026] [security2:error] [pid 263262:tid 263476] [client 52.172.226.14:39959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/system_log.php"] [unique_id "ary1jZEcZ_148BjP8ZPwZwAAAV0"]
[Wed Sep 30 01:09:01.763781 2026] [security2:error] [pid 263262:tid 263457] [client 20.219.2.60:26150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/myfilexxx.php"] [unique_id "ary1jZEcZ_148BjP8ZPwaAAAAUo"]
[Wed Sep 30 01:09:01.796354 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.796629 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.845369 2026] [security2:error] [pid 263262:tid 263480] [client 20.70.173.30:8185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/cdc.php"] [unique_id "ary1jZEcZ_148BjP8ZPwagAAAWE"]
[Wed Sep 30 01:09:01.847454 2026] [security2:error] [pid 270884:tid 271056] [client 74.225.148.80:60882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gptsh.php"] [unique_id "ary1jSGeq9LtYp4zuPOSMgAAACU"]
[Wed Sep 30 01:09:01.859119 2026] [security2:error] [pid 270884:tid 271126] [client 74.225.148.80:16715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1jSGeq9LtYp4zuPOSMwAAAGs"]
[Wed Sep 30 01:09:01.876705 2026] [access_compat:error] [pid 270884:tid 271044] [client 47.79.13.168:52978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:01.876991 2026] [access_compat:error] [pid 270884:tid 271044] [client 47.79.13.168:52978] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:01.883995 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.884252 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:21453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:01.889579 2026] [security2:error] [pid 270884:tid 271086] [client 104.28.222.46:21494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wvs.emf.mybluehost.me"] [uri "/wp-config.php.bak"] [unique_id "ary1jSGeq9LtYp4zuPOSNwAAAEM"], referer: https://www.google.com/search?q=wvs.emf.mybluehost.me
[Wed Sep 30 01:09:01.892388 2026] [security2:error] [pid 270884:tid 271053] [client 104.28.222.46:21471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wvs.emf.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ary1jSGeq9LtYp4zuPOSNgAAACI"], referer: https://www.google.com/search?q=wvs.emf.mybluehost.me
[Wed Sep 30 01:09:01.938354 2026] [security2:error] [pid 263262:tid 263437] [client 20.28.180.172:29603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xcrarnkpo.php"] [unique_id "ary1jZEcZ_148BjP8ZPwbgAAATY"]
[Wed Sep 30 01:09:01.940411 2026] [security2:error] [pid 270884:tid 271025] [client 4.240.25.22:63676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp.php"] [unique_id "ary1jSGeq9LtYp4zuPOSPwAAAAY"]
[Wed Sep 30 01:09:01.984358 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:01.984649 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.024346 2026] [security2:error] [pid 263262:tid 263441] [client 20.198.74.230:24137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/curldect.php"] [unique_id "ary1jpEcZ_148BjP8ZPwdgAAATo"]
[Wed Sep 30 01:09:02.076410 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.076850 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.103330 2026] [security2:error] [pid 270884:tid 271025] [client 20.219.2.60:48097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/first.php"] [unique_id "ary1jiGeq9LtYp4zuPOSRwAAAAY"]
[Wed Sep 30 01:09:02.131626 2026] [security2:error] [pid 270884:tid 271074] [client 82.102.18.190:46328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1jiGeq9LtYp4zuPOSSAAAADc"]
[Wed Sep 30 01:09:02.166389 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.166659 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.172707 2026] [security2:error] [pid 270884:tid 271044] [client 4.240.25.22:13105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/log.php"] [unique_id "ary1jiGeq9LtYp4zuPOSTgAAABk"]
[Wed Sep 30 01:09:02.222273 2026] [security2:error] [pid 270884:tid 271053] [client 20.219.2.60:26030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/karma_144a.php"] [unique_id "ary1jiGeq9LtYp4zuPOSTwAAACI"]
[Wed Sep 30 01:09:02.223781 2026] [security2:error] [pid 263262:tid 263464] [client 52.172.226.14:21423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/NewFile.php"] [unique_id "ary1jpEcZ_148BjP8ZPwewAAAVE"]
[Wed Sep 30 01:09:02.257791 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.258083 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.260634 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:11651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/kj.php"] [unique_id "ary1jiGeq9LtYp4zuPOSUgAAAFc"]
[Wed Sep 30 01:09:02.303853 2026] [security2:error] [pid 270884:tid 271142] [client 216.73.216.46:21453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1jiGeq9LtYp4zuPOSUwAAAHs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTAx
[Wed Sep 30 01:09:02.312406 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:02.312707 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:02.314469 2026] [security2:error] [pid 263262:tid 263469] [client 74.225.148.80:16760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1jpEcZ_148BjP8ZPwgAAAAVY"]
[Wed Sep 30 01:09:02.348155 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.348432 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.362173 2026] [security2:error] [pid 270884:tid 271114] [client 20.219.19.141:65481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lotusfengshui-co-uk.corinthe-rizvi.com"] [uri "/wpuse.php"] [unique_id "ary1jiGeq9LtYp4zuPOSVgAAAF8"]
[Wed Sep 30 01:09:02.398143 2026] [security2:error] [pid 270884:tid 271082] [client 74.225.148.80:18768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/rithin.php"] [unique_id "ary1jiGeq9LtYp4zuPOSVwAAAD8"]
[Wed Sep 30 01:09:02.449687 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.450154 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.457988 2026] [security2:error] [pid 263262:tid 263517] [client 20.70.173.30:61774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/cgi-bin/admin.php"] [unique_id "ary1jpEcZ_148BjP8ZPwhgAAAYY"]
[Wed Sep 30 01:09:02.503162 2026] [security2:error] [pid 270884:tid 271104] [client 104.28.222.46:21277] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wvs.emf.mybluehost.me"] [uri "/.env.backup"] [unique_id "ary1jiGeq9LtYp4zuPOSWgAAAFU"], referer: http://wvs.emf.mybluehost.me/.env.backup
[Wed Sep 30 01:09:02.506953 2026] [security2:error] [pid 270884:tid 271032] [client 104.28.222.46:21289] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wvs.emf.mybluehost.me"] [uri "/.env"] [unique_id "ary1jiGeq9LtYp4zuPOSXAAAAA0"], referer: http://wvs.emf.mybluehost.me/.env
[Wed Sep 30 01:09:02.539467 2026] [security2:error] [pid 263262:tid 263457] [client 168.100.149.162:36084] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/metform/assets/libs/cute-alert/cute-alert.js"] [unique_id "ary1jpEcZ_148BjP8ZPwjgABSiE"]
[Wed Sep 30 01:09:02.568313 2026] [security2:error] [pid 263262:tid 263432] [client 20.219.2.60:48080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/redixsx.php"] [unique_id "ary1jpEcZ_148BjP8ZPwkQAAATE"]
[Wed Sep 30 01:09:02.574361 2026] [security2:error] [pid 263262:tid 263405] [client 20.204.42.136:59849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/imageskir.php"] [unique_id "ary1jpEcZ_148BjP8ZPwkgAAARY"]
[Wed Sep 30 01:09:02.589620 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.590133 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.621507 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.621778 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.634480 2026] [security2:error] [pid 263262:tid 263404] [client 122.173.27.10:27317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1jpEcZ_148BjP8ZPwlQAAARU"]
[Wed Sep 30 01:09:02.637244 2026] [security2:error] [pid 263262:tid 263404] [client 122.173.27.10:27317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1jpEcZ_148BjP8ZPwlQAAARU"]
[Wed Sep 30 01:09:02.684279 2026] [security2:error] [pid 270884:tid 271086] [client 20.219.2.60:40755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/3586%20b64.php"] [unique_id "ary1jiGeq9LtYp4zuPOSbwAAAEM"]
[Wed Sep 30 01:09:02.697406 2026] [qos:error] [pid 270884:tid 271044] [client 93.225.216.149:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1jiGeq9LtYp4zuPOScQAAABk
[Wed Sep 30 01:09:02.701987 2026] [security2:error] [pid 270884:tid 271126] [client 20.194.96.176:16329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/dex.php"] [unique_id "ary1jiGeq9LtYp4zuPOScgAAAGs"]
[Wed Sep 30 01:09:02.715084 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.715513 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.727736 2026] [security2:error] [pid 263262:tid 263476] [client 82.102.18.190:46344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1jpEcZ_148BjP8ZPwnAAAAV0"]
[Wed Sep 30 01:09:02.785688 2026] [security2:error] [pid 263262:tid 263500] [client 74.225.148.80:16933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1jpEcZ_148BjP8ZPwnwAAAXU"]
[Wed Sep 30 01:09:02.791034 2026] [security2:error] [pid 270884:tid 271127] [client 203.122.45.246:50789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSdAAAAGw"]
[Wed Sep 30 01:09:02.791207 2026] [security2:error] [pid 270884:tid 271127] [client 203.122.45.246:50789] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSdAAAAGw"]
[Wed Sep 30 01:09:02.803100 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.803364 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.806034 2026] [security2:error] [pid 270884:tid 271142] [client 52.172.226.14:39967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/t.php"] [unique_id "ary1jiGeq9LtYp4zuPOSdQAAAHs"]
[Wed Sep 30 01:09:02.819879 2026] [security2:error] [pid 263262:tid 263414] [client 154.47.29.230:36663] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1jpEcZ_148BjP8ZPwmwAAAR8"]
[Wed Sep 30 01:09:02.860502 2026] [access_compat:error] [pid 270884:tid 271024] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:02.860779 2026] [access_compat:error] [pid 270884:tid 271024] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:02.861746 2026] [security2:error] [pid 263262:tid 263459] [client 74.225.148.80:54080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/il.php"] [unique_id "ary1jpEcZ_148BjP8ZPwogAAAUw"]
[Wed Sep 30 01:09:02.922776 2026] [security2:error] [pid 270884:tid 271025] [client 103.159.192.142:52757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSeQAAAAY"]
[Wed Sep 30 01:09:02.922948 2026] [security2:error] [pid 270884:tid 271025] [client 103.159.192.142:52757] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSeQAAAAY"]
[Wed Sep 30 01:09:02.944558 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:6753] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.944803 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:6753] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:02.972493 2026] [access_compat:error] [pid 263262:tid 263447] [client 47.79.13.75:60910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:02.972759 2026] [access_compat:error] [pid 263262:tid 263447] [client 47.79.13.75:60910] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:02.975563 2026] [security2:error] [pid 270884:tid 271058] [client 152.59.165.7:32047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSggAAACc"]
[Wed Sep 30 01:09:02.975648 2026] [security2:error] [pid 270884:tid 271058] [client 152.59.165.7:32047] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1jiGeq9LtYp4zuPOSggAAACc"]
[Wed Sep 30 01:09:02.983512 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:02.983766 2026] [access_compat:error] [pid 263262:tid 263394] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.039330 2026] [security2:error] [pid 270884:tid 271128] [client 216.73.216.46:55013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1jyGeq9LtYp4zuPOShgAAAG0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTQvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHU2
[Wed Sep 30 01:09:03.069148 2026] [security2:error] [pid 263262:tid 263514] [client 20.219.2.60:48118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/cpp2.php"] [unique_id "ary1j5EcZ_148BjP8ZPwsgAAAYM"]
[Wed Sep 30 01:09:03.076065 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.076334 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.137925 2026] [qos:error] [pid 270884:tid 271036] [client 145.40.153.87:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1jyGeq9LtYp4zuPOSigAAABE
[Wed Sep 30 01:09:03.139187 2026] [security2:error] [pid 263262:tid 263520] [client 20.219.2.60:25992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws.php"] [unique_id "ary1j5EcZ_148BjP8ZPwtAAAAYk"]
[Wed Sep 30 01:09:03.143494 2026] [security2:error] [pid 270884:tid 271020] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1jyGeq9LtYp4zuPOSiwAAAAE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:03.147359 2026] [security2:error] [pid 263262:tid 263503] [client 104.28.222.46:62071] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wvs.emf.mybluehost.me"] [uri "/.env.old"] [unique_id "ary1j5EcZ_148BjP8ZPwtQAAAXg"], referer: http://wvs.emf.mybluehost.me/.env.old
[Wed Sep 30 01:09:03.166791 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.167066 2026] [access_compat:error] [pid 263262:tid 263449] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.237874 2026] [security2:error] [pid 263262:tid 263421] [client 45.138.12.32:43038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hnl.gdg.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1j5EcZ_148BjP8ZPwuAAAASY"]
[Wed Sep 30 01:09:03.241585 2026] [security2:error] [pid 270884:tid 271127] [client 74.225.148.80:55259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/aa.php"] [unique_id "ary1jyGeq9LtYp4zuPOSjgAAAGw"]
[Wed Sep 30 01:09:03.311217 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:5964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.311510 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:5964] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.324957 2026] [security2:error] [pid 263262:tid 263420] [client 82.102.18.190:22172] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1j5EcZ_148BjP8ZPwuwAAASU"]
[Wed Sep 30 01:09:03.350381 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.350666 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.360834 2026] [security2:error] [pid 270884:tid 271060] [client 216.73.216.46:6753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1jyGeq9LtYp4zuPOSlgAAACk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDc5L25vZGUwL21lbW9yeTM4OS9ub2RlMA%3D%3D
[Wed Sep 30 01:09:03.362434 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:03.362867 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:03.364187 2026] [security2:error] [pid 270884:tid 271060] [client 20.204.42.136:57805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/backup-helper.php"] [unique_id "ary1jyGeq9LtYp4zuPOSlwAAACk"]
[Wed Sep 30 01:09:03.394799 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:21387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/ee.php"] [unique_id "ary1jyGeq9LtYp4zuPOSmAAAAA0"]
[Wed Sep 30 01:09:03.426348 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:19399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/Jcrop.php"] [unique_id "ary1jyGeq9LtYp4zuPOSmQAAAFc"]
[Wed Sep 30 01:09:03.446074 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.446509 2026] [access_compat:error] [pid 263262:tid 263424] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.460766 2026] [security2:error] [pid 270884:tid 271086] [client 20.28.180.172:62341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws86.php"] [unique_id "ary1jyGeq9LtYp4zuPOSmgAAAEM"]
[Wed Sep 30 01:09:03.516270 2026] [security2:error] [pid 263262:tid 263419] [client 74.225.148.80:18807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/1klopedf.php"] [unique_id "ary1j5EcZ_148BjP8ZPwwgAAASQ"]
[Wed Sep 30 01:09:03.533793 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.2.60:49306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/admlo.php"] [unique_id "ary1jyGeq9LtYp4zuPOSogAAAAE"]
[Wed Sep 30 01:09:03.537718 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.538010 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.622313 2026] [security2:error] [pid 270884:tid 271108] [client 20.219.2.60:26071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bmi.php"] [unique_id "ary1jyGeq9LtYp4zuPOSqgAAAFk"]
[Wed Sep 30 01:09:03.623803 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.624154 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.660274 2026] [qos:error] [pid 270884:tid 271120] [client 81.196.175.111:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1jyGeq9LtYp4zuPOSrwAAAGU
[Wed Sep 30 01:09:03.668805 2026] [security2:error] [pid 263262:tid 263479] [client 104.28.222.47:53760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wvs.emf.mybluehost.me"] [uri "/.env.bak"] [unique_id "ary1j5EcZ_148BjP8ZPwzgAAAWA"], referer: http://wvs.emf.mybluehost.me/.env.bak
[Wed Sep 30 01:09:03.715906 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.716192 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.720976 2026] [security2:error] [pid 270884:tid 271086] [client 74.225.148.80:16912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/z70.php"] [unique_id "ary1jyGeq9LtYp4zuPOStAAAAEM"]
[Wed Sep 30 01:09:03.728626 2026] [security2:error] [pid 270884:tid 271106] [client 216.73.216.46:5964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1jyGeq9LtYp4zuPOStgAAAFc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9jcHUxNy9kcml2ZXIvY3B1MTA%3D
[Wed Sep 30 01:09:03.809601 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.810037 2026] [access_compat:error] [pid 263262:tid 263399] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.822346 2026] [security2:error] [pid 270884:tid 271060] [client 45.138.12.41:6044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xiw.xwy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1jyGeq9LtYp4zuPOSuQAAACk"]
[Wed Sep 30 01:09:03.898072 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.898339 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.898696 2026] [security2:error] [pid 270884:tid 271087] [client 52.172.226.14:21385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/2.php"] [unique_id "ary1jyGeq9LtYp4zuPOSvQAAAEQ"]
[Wed Sep 30 01:09:03.913428 2026] [security2:error] [pid 263262:tid 263511] [client 202.179.95.79:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1j5EcZ_148BjP8ZPw0gAAAYA"]
[Wed Sep 30 01:09:03.913552 2026] [security2:error] [pid 263262:tid 263511] [client 202.179.95.79:62920] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1j5EcZ_148BjP8ZPw0gAAAYA"]
[Wed Sep 30 01:09:03.916888 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:03.917165 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:03.934538 2026] [security2:error] [pid 263262:tid 263454] [client 20.28.180.172:29599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ho.php"] [unique_id "ary1j5EcZ_148BjP8ZPw1AAAAUc"]
[Wed Sep 30 01:09:03.970991 2026] [security2:error] [pid 270884:tid 271044] [client 82.102.18.190:46360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1jyGeq9LtYp4zuPOSwQAAABk"]
[Wed Sep 30 01:09:03.989619 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:03.989904 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:03.993957 2026] [security2:error] [pid 263262:tid 263502] [client 74.225.148.80:18470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/zv.php"] [unique_id "ary1j5EcZ_148BjP8ZPw2AAAAXc"]
[Wed Sep 30 01:09:04.017744 2026] [security2:error] [pid 263262:tid 263508] [client 20.219.2.60:49301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/admin-ajax.php"] [unique_id "ary1kJEcZ_148BjP8ZPw2QAAAX0"]
[Wed Sep 30 01:09:04.058563 2026] [access_compat:error] [pid 270884:tid 271127] [client 47.79.13.167:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:04.058842 2026] [access_compat:error] [pid 270884:tid 271127] [client 47.79.13.167:59928] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:04.073152 2026] [qos:error] [pid 263262:tid 263493] [client 187.246.98.121:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1kJEcZ_148BjP8ZPw2gAAAW4
[Wed Sep 30 01:09:04.078411 2026] [security2:error] [pid 263262:tid 263518] [client 20.219.2.60:40742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bypltspd.php"] [unique_id "ary1kJEcZ_148BjP8ZPw3AAAAYc"]
[Wed Sep 30 01:09:04.078896 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.079161 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.177190 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.177491 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.196802 2026] [security2:error] [pid 270884:tid 271120] [client 74.225.148.80:55268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/f35.php"] [unique_id "ary1kCGeq9LtYp4zuPOS0wAAAGU"]
[Wed Sep 30 01:09:04.234437 2026] [security2:error] [pid 263262:tid 263416] [client 154.47.29.230:37739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1kJEcZ_148BjP8ZPw3gAAASE"]
[Wed Sep 30 01:09:04.268902 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.269169 2026] [access_compat:error] [pid 263262:tid 263478] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.364461 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.364928 2026] [access_compat:error] [pid 263262:tid 263415] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.455731 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:04.456189 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:04.460184 2026] [security2:error] [pid 263262:tid 263423] [client 52.172.226.14:39937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/gmo.php"] [unique_id "ary1kJEcZ_148BjP8ZPw4wAAASg"]
[Wed Sep 30 01:09:04.474870 2026] [security2:error] [pid 263262:tid 263287] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kJEcZ_148BjP8ZPw5QABNBc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13355
[Wed Sep 30 01:09:04.474911 2026] [security2:error] [pid 263262:tid 263287] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kJEcZ_148BjP8ZPw5QABNBc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13355
[Wed Sep 30 01:09:04.478847 2026] [qos:error] [pid 263262:tid 263356] [remote 86.190.49.152:33752] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.190.49.152, id=ary1kJEcZ_148BjP8ZPw5gABXlw
[Wed Sep 30 01:09:04.502547 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.502880 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.528542 2026] [security2:error] [pid 270884:tid 271134] [client 168.100.149.14:33364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/jquery/ui/core.min.js"] [unique_id "ary1kCGeq9LtYp4zuPOS2QAAc2w"]
[Wed Sep 30 01:09:04.536606 2026] [security2:error] [pid 270884:tid 271036] [client 74.225.148.80:60902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/zv.update.php"] [unique_id "ary1kCGeq9LtYp4zuPOS2gAAABE"]
[Wed Sep 30 01:09:04.537825 2026] [security2:error] [pid 263262:tid 263267] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kJEcZ_148BjP8ZPw6QABYQM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277838&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:09:04.537856 2026] [security2:error] [pid 263262:tid 263267] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kJEcZ_148BjP8ZPw6QABYQM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277838&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:09:04.541468 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.541736 2026] [access_compat:error] [pid 263262:tid 263440] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.545672 2026] [security2:error] [pid 270884:tid 271126] [client 20.204.42.136:59897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/1xmomo.php"] [unique_id "ary1kCGeq9LtYp4zuPOS2wAAAGs"]
[Wed Sep 30 01:09:04.553707 2026] [security2:error] [pid 270884:tid 271142] [client 20.219.2.60:33854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/amthd.php"] [unique_id "ary1kCGeq9LtYp4zuPOS3AAAAHs"]
[Wed Sep 30 01:09:04.557030 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:40744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/shell.php"] [unique_id "ary1kCGeq9LtYp4zuPOS3QAAAH8"]
[Wed Sep 30 01:09:04.579513 2026] [qos:error] [pid 270884:tid 271117] [client 41.34.4.178:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1kCGeq9LtYp4zuPOS3gAAAGI
[Wed Sep 30 01:09:04.586036 2026] [security2:error] [pid 270884:tid 271127] [client 82.102.18.190:46376] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1kCGeq9LtYp4zuPOS3wAAAGw"]
[Wed Sep 30 01:09:04.606236 2026] [security2:error] [pid 263262:tid 263468] [client 20.70.173.30:35601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/f35.php"] [unique_id "ary1kJEcZ_148BjP8ZPw6gAAAVU"]
[Wed Sep 30 01:09:04.637820 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.638287 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.648571 2026] [qos:error] [pid 270884:tid 271000] [remote 201.216.40.62:54444] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=201.216.40.62, id=ary1kCGeq9LtYp4zuPOS4AAAVW4
[Wed Sep 30 01:09:04.666313 2026] [security2:error] [pid 270884:tid 271134] [client 74.225.148.80:55859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/adminfuns.php"] [unique_id "ary1kCGeq9LtYp4zuPOS4gAAAHM"]
[Wed Sep 30 01:09:04.736305 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.736588 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.775448 2026] [security2:error] [pid 263262:tid 263500] [client 49.43.163.212:60962] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1kJEcZ_148BjP8ZPw8gAAAXU"]
[Wed Sep 30 01:09:04.775581 2026] [security2:error] [pid 263262:tid 263500] [client 49.43.163.212:60962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1kJEcZ_148BjP8ZPw8gAAAXU"]
[Wed Sep 30 01:09:04.828543 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.828814 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.866523 2026] [security2:error] [pid 270884:tid 271034] [client 20.194.30.107:10017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/pJPoKA.php"] [unique_id "ary1kCGeq9LtYp4zuPOS7gAAAA8"]
[Wed Sep 30 01:09:04.920082 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:04.920353 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:04.969446 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:04.969711 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:05.012543 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.012864 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.015383 2026] [security2:error] [pid 270884:tid 271127] [client 74.225.148.80:18769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/wquosqsi.php"] [unique_id "ary1kSGeq9LtYp4zuPOS-AAAAGw"]
[Wed Sep 30 01:09:05.030828 2026] [security2:error] [pid 263262:tid 263469] [client 223.181.30.165:9948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.30.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1kZEcZ_148BjP8ZPw-gAAAVY"]
[Wed Sep 30 01:09:05.030957 2026] [security2:error] [pid 263262:tid 263469] [client 223.181.30.165:9948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "shortstaygem.co.uk"] [uri "/xmlrpc.php"] [unique_id "ary1kZEcZ_148BjP8ZPw-gAAAVY"]
[Wed Sep 30 01:09:05.037135 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.2.60:33792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/8xyz.php"] [unique_id "ary1kSGeq9LtYp4zuPOS-wAAADc"]
[Wed Sep 30 01:09:05.044091 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:40746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-links-opml.php"] [unique_id "ary1kSGeq9LtYp4zuPOS_AAAAH8"]
[Wed Sep 30 01:09:05.050945 2026] [security2:error] [pid 263262:tid 263503] [client 52.172.226.14:39981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/6.php"] [unique_id "ary1kZEcZ_148BjP8ZPw_AAAAXg"]
[Wed Sep 30 01:09:05.053135 2026] [security2:error] [pid 270884:tid 271032] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1kSGeq9LtYp4zuPOS_QAAAA0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:05.103196 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.103493 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.174346 2026] [security2:error] [pid 263262:tid 263506] [client 74.225.148.80:63585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/av.php"] [unique_id "ary1kZEcZ_148BjP8ZPxAQAAAXs"]
[Wed Sep 30 01:09:05.199513 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.199955 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.222007 2026] [security2:error] [pid 263262:tid 263502] [client 65.49.1.182:54240] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "50.87.30.111"] [uri "/"] [unique_id "ary1kZEcZ_148BjP8ZPxAwAAAXc"]
[Wed Sep 30 01:09:05.238767 2026] [security2:error] [pid 263262:tid 263497] [client 82.102.18.190:46378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1kZEcZ_148BjP8ZPxBAAAAXI"]
[Wed Sep 30 01:09:05.240040 2026] [security2:error] [pid 263262:tid 263420] [client 20.219.2.60:11368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws83.php"] [unique_id "ary1kZEcZ_148BjP8ZPxBQAAASU"]
[Wed Sep 30 01:09:05.280618 2026] [security2:error] [pid 270884:tid 271118] [client 182.69.182.151:22964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTAQAAAGM"]
[Wed Sep 30 01:09:05.281113 2026] [security2:error] [pid 270884:tid 271118] [client 182.69.182.151:22964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTAQAAAGM"]
[Wed Sep 30 01:09:05.289713 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.290152 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.394924 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.395351 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.464333 2026] [access_compat:error] [pid 270884:tid 271106] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:05.464800 2026] [access_compat:error] [pid 270884:tid 271106] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:05.480543 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.482926 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.501684 2026] [security2:error] [pid 263262:tid 263405] [client 43.227.131.37:16487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1kZEcZ_148BjP8ZPxEQAAARY"]
[Wed Sep 30 01:09:05.501849 2026] [security2:error] [pid 263262:tid 263405] [client 43.227.131.37:16487] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1kZEcZ_148BjP8ZPxEQAAARY"]
[Wed Sep 30 01:09:05.507290 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:49307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/mini.php"] [unique_id "ary1kSGeq9LtYp4zuPOTBwAAAGs"]
[Wed Sep 30 01:09:05.514359 2026] [security2:error] [pid 270884:tid 271134] [client 223.235.102.107:10069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTCAAAAHM"]
[Wed Sep 30 01:09:05.514467 2026] [security2:error] [pid 270884:tid 271134] [client 223.235.102.107:10069] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTCAAAAHM"]
[Wed Sep 30 01:09:05.532767 2026] [security2:error] [pid 270884:tid 271087] [client 116.193.128.26:52099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTCQAAAEQ"]
[Wed Sep 30 01:09:05.532904 2026] [security2:error] [pid 270884:tid 271087] [client 116.193.128.26:52099] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTCQAAAEQ"]
[Wed Sep 30 01:09:05.541013 2026] [security2:error] [pid 263262:tid 263504] [client 20.219.2.60:26395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary1kZEcZ_148BjP8ZPxFAAAAXk"]
[Wed Sep 30 01:09:05.543364 2026] [security2:error] [pid 263262:tid 263419] [client 4.240.25.22:13084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/wp-the.php"] [unique_id "ary1kZEcZ_148BjP8ZPxFQAAASQ"]
[Wed Sep 30 01:09:05.544780 2026] [security2:error] [pid 263262:tid 263464] [client 52.172.226.14:21421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/12.php"] [unique_id "ary1kZEcZ_148BjP8ZPxFgAAAVE"]
[Wed Sep 30 01:09:05.558677 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.559021 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.645750 2026] [security2:error] [pid 270884:tid 271128] [client 74.225.148.80:55261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/dex.php"] [unique_id "ary1kSGeq9LtYp4zuPOTDwAAAG0"]
[Wed Sep 30 01:09:05.649243 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.649395 2026] [security2:error] [pid 270884:tid 271056] [client 154.47.29.230:38928] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTCgAAACU"]
[Wed Sep 30 01:09:05.649508 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.665681 2026] [security2:error] [pid 263262:tid 263509] [client 74.225.148.80:60892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/asset.php"] [unique_id "ary1kZEcZ_148BjP8ZPxGgAAAX4"]
[Wed Sep 30 01:09:05.739107 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.739364 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.803529 2026] [security2:error] [pid 263262:tid 263517] [client 43.104.4.204:28586] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary1kZEcZ_148BjP8ZPxJAAAAYY"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:09:05.834284 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.834738 2026] [access_compat:error] [pid 263262:tid 263466] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.844752 2026] [security2:error] [pid 263262:tid 263414] [client 82.102.18.190:46386] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1kZEcZ_148BjP8ZPxJwAAAR8"]
[Wed Sep 30 01:09:05.892494 2026] [security2:error] [pid 270884:tid 271025] [client 20.204.42.136:58509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/almafkew.php"] [unique_id "ary1kSGeq9LtYp4zuPOTGAAAAAY"]
[Wed Sep 30 01:09:05.921858 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:05.922130 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:05.934723 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:05.935169 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:05.960918 2026] [security2:error] [pid 263262:tid 263407] [client 20.219.2.60:33839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws68.php"] [unique_id "ary1kZEcZ_148BjP8ZPxKQAAARg"]
[Wed Sep 30 01:09:06.015861 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.016273 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.017393 2026] [security2:error] [pid 270884:tid 271044] [client 20.219.2.60:40731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws82.php"] [unique_id "ary1kiGeq9LtYp4zuPOTHQAAABk"]
[Wed Sep 30 01:09:06.044905 2026] [security2:error] [pid 263262:tid 263449] [client 52.172.226.14:39971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/0.php"] [unique_id "ary1kpEcZ_148BjP8ZPxLAAAAUI"]
[Wed Sep 30 01:09:06.092311 2026] [security2:error] [pid 270884:tid 271094] [client 89.41.42.39:14955] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary1kSGeq9LtYp4zuPOTGQAAAEs"]
[Wed Sep 30 01:09:06.104232 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.104504 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.122285 2026] [security2:error] [pid 270884:tid 271034] [client 74.225.148.80:16709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/chosen.php"] [unique_id "ary1kiGeq9LtYp4zuPOTIAAAAA8"]
[Wed Sep 30 01:09:06.194670 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.2.60:11844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws75.php"] [unique_id "ary1kiGeq9LtYp4zuPOTIwAAAA4"]
[Wed Sep 30 01:09:06.199647 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.200074 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.286722 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.287020 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.331041 2026] [security2:error] [pid 270884:tid 271120] [client 74.225.148.80:60925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/cued.php"] [unique_id "ary1kiGeq9LtYp4zuPOTKwAAAGU"]
[Wed Sep 30 01:09:06.343678 2026] [security2:error] [pid 263262:tid 263300] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kpEcZ_148BjP8ZPxMQABdSQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277881&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:09:06.343711 2026] [security2:error] [pid 263262:tid 263300] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kpEcZ_148BjP8ZPxMQABdSQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277881&sid=acfc124f84e12cc48bfa681d3f2fd812
[Wed Sep 30 01:09:06.362278 2026] [security2:error] [pid 270884:tid 271058] [client 20.194.30.107:17289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/100.php"] [unique_id "ary1kiGeq9LtYp4zuPOTLAAAACc"]
[Wed Sep 30 01:09:06.372224 2026] [security2:error] [pid 270884:tid 271094] [client 20.219.2.60:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/rip.php"] [unique_id "ary1kiGeq9LtYp4zuPOTLgAAAEs"]
[Wed Sep 30 01:09:06.384001 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.384461 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.405116 2026] [security2:error] [pid 270884:tid 271126] [client 20.28.180.172:29588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wpx2.php"] [unique_id "ary1kiGeq9LtYp4zuPOTMgAAAGs"]
[Wed Sep 30 01:09:06.410398 2026] [security2:error] [pid 270884:tid 271146] [client 74.7.244.19:40584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kshar.net"] [uri "/robots.txt"] [unique_id "ary1kiGeq9LtYp4zuPOTMAAAf3Y"]
[Wed Sep 30 01:09:06.439731 2026] [security2:error] [pid 270884:tid 271118] [client 106.214.2.47:17543] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1kiGeq9LtYp4zuPOTMwAAAGM"]
[Wed Sep 30 01:09:06.440300 2026] [security2:error] [pid 270884:tid 271118] [client 106.214.2.47:17543] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1kiGeq9LtYp4zuPOTMwAAAGM"]
[Wed Sep 30 01:09:06.441863 2026] [security2:error] [pid 270884:tid 271050] [client 20.219.2.60:45095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/xxx.php"] [unique_id "ary1kiGeq9LtYp4zuPOTNgAAAB8"]
[Wed Sep 30 01:09:06.446753 2026] [access_compat:error] [pid 270884:tid 271024] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:06.447211 2026] [access_compat:error] [pid 270884:tid 271024] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:06.456311 2026] [security2:error] [pid 263262:tid 263479] [client 82.102.18.190:46392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1kpEcZ_148BjP8ZPxNwAAAWA"]
[Wed Sep 30 01:09:06.477406 2026] [security2:error] [pid 263262:tid 263502] [client 20.219.2.60:26004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/new.php"] [unique_id "ary1kpEcZ_148BjP8ZPxOgAAAXc"]
[Wed Sep 30 01:09:06.480695 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.481179 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.535101 2026] [security2:error] [pid 270884:tid 271056] [client 168.100.149.18:22690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js"] [unique_id "ary1kiGeq9LtYp4zuPOTPgAAJQE"]
[Wed Sep 30 01:09:06.563637 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.564052 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.583354 2026] [security2:error] [pid 263262:tid 263466] [client 74.225.148.80:63598] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.ferrari250.com"] [uri "/1.php"] [unique_id "ary1kpEcZ_148BjP8ZPxPgAAAVM"]
[Wed Sep 30 01:09:06.583479 2026] [security2:error] [pid 263262:tid 263466] [client 74.225.148.80:63598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/1.php"] [unique_id "ary1kpEcZ_148BjP8ZPxPgAAAVM"]
[Wed Sep 30 01:09:06.622125 2026] [security2:error] [pid 263262:tid 263497] [client 52.172.226.14:21381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary1kpEcZ_148BjP8ZPxPwAAAXI"]
[Wed Sep 30 01:09:06.658575 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.658882 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.747622 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.747901 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.827797 2026] [access_compat:error] [pid 263262:tid 263420] [client 47.79.13.37:43196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:06.828243 2026] [access_compat:error] [pid 263262:tid 263420] [client 47.79.13.37:43196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:06.836389 2026] [security2:error] [pid 263262:tid 263454] [client 74.225.148.80:60896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/sd.php"] [unique_id "ary1kpEcZ_148BjP8ZPxRQAAAUc"]
[Wed Sep 30 01:09:06.841773 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.842088 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.884942 2026] [security2:error] [pid 263262:tid 263302] [remote 74.7.227.17:50454] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kpEcZ_148BjP8ZPxRwABMiY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=272200&sid=0e362de7a0d105cfbbe2b02c26aa013f
[Wed Sep 30 01:09:06.884967 2026] [security2:error] [pid 263262:tid 263302] [remote 74.7.227.17:50454] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1kpEcZ_148BjP8ZPxRwABMiY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=272200&sid=0e362de7a0d105cfbbe2b02c26aa013f
[Wed Sep 30 01:09:06.931334 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:06.931609 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:06.933127 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:06.933381 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:06.954491 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:49303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/njxjtooj.php"] [unique_id "ary1kpEcZ_148BjP8ZPxSQAAAXg"]
[Wed Sep 30 01:09:06.959905 2026] [security2:error] [pid 263262:tid 263520] [client 154.47.29.230:40034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1kpEcZ_148BjP8ZPxSgAAAYk"]
[Wed Sep 30 01:09:06.959996 2026] [security2:error] [pid 263262:tid 263520] [client 154.47.29.230:40034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "www.buy-clenbuterolonline.com"] [uri "/xmlrpc.php"] [unique_id "ary1kpEcZ_148BjP8ZPxSgAAAYk"]
[Wed Sep 30 01:09:06.963900 2026] [security2:error] [pid 263262:tid 263510] [client 20.219.2.60:40723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/press.php"] [unique_id "ary1kpEcZ_148BjP8ZPxSwAAAX8"]
[Wed Sep 30 01:09:07.024603 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.024925 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.054740 2026] [security2:error] [pid 270884:tid 271118] [client 82.102.18.190:46404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1kyGeq9LtYp4zuPOTXwAAAGM"]
[Wed Sep 30 01:09:07.056486 2026] [security2:error] [pid 263262:tid 263419] [client 74.225.148.80:63599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/radio.php"] [unique_id "ary1k5EcZ_148BjP8ZPxUQAAASQ"]
[Wed Sep 30 01:09:07.064119 2026] [qos:error] [pid 263262:tid 263464] [client 97.185.163.239:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1k5EcZ_148BjP8ZPxUgAAAVE
[Wed Sep 30 01:09:07.117518 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.117948 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.200390 2026] [security2:error] [pid 270884:tid 271087] [client 52.172.226.14:21407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary1kyGeq9LtYp4zuPOTaAAAAEQ"]
[Wed Sep 30 01:09:07.210900 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.211355 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:11871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.262728 2026] [security2:error] [pid 270884:tid 271024] [client 45.138.12.32:30468] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pye.zdx.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1kyGeq9LtYp4zuPOTbgAAAAU"]
[Wed Sep 30 01:09:07.267573 2026] [security2:error] [pid 263262:tid 263393] [client 20.213.164.196:21214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/hp.php"] [unique_id "ary1k5EcZ_148BjP8ZPxVwAAAQo"]
[Wed Sep 30 01:09:07.296133 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.296390 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.313804 2026] [security2:error] [pid 263262:tid 263289] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1k5EcZ_148BjP8ZPxWgABbhk"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=6f281b0c30797e3354c9c606da0f782a
[Wed Sep 30 01:09:07.313839 2026] [security2:error] [pid 263262:tid 263289] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1k5EcZ_148BjP8ZPxWgABbhk"], referer: https://uxa.hoh.mybluehost.me/app.php/user/forgot_password?sid=6f281b0c30797e3354c9c606da0f782a
[Wed Sep 30 01:09:07.386578 2026] [security2:error] [pid 263262:tid 263455] [client 74.225.148.80:54108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/ans.php"] [unique_id "ary1k5EcZ_148BjP8ZPxXgAAAUg"]
[Wed Sep 30 01:09:07.393241 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.393692 2026] [access_compat:error] [pid 263262:tid 263474] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.422512 2026] [security2:error] [pid 263262:tid 263459] [client 20.219.2.60:48071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws85.php"] [unique_id "ary1k5EcZ_148BjP8ZPxXwAAAUw"]
[Wed Sep 30 01:09:07.437835 2026] [security2:error] [pid 263262:tid 263418] [client 20.219.2.60:40743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary1k5EcZ_148BjP8ZPxYAAAASM"]
[Wed Sep 30 01:09:07.450179 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:07.450617 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:07.516049 2026] [security2:error] [pid 270884:tid 271036] [client 74.225.148.80:63577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/blacks.php"] [unique_id "ary1kyGeq9LtYp4zuPOTcgAAABE"]
[Wed Sep 30 01:09:07.528794 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.529068 2026] [access_compat:error] [pid 263262:tid 263470] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.573516 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.574032 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.634530 2026] [security2:error] [pid 270884:tid 271020] [client 216.73.216.46:11871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1kyGeq9LtYp4zuPOTdQAAAAE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NQ%3D%3D
[Wed Sep 30 01:09:07.664509 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.664944 2026] [access_compat:error] [pid 263262:tid 263520] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.673495 2026] [security2:error] [pid 270884:tid 270888] [remote 91.213.99.99:54294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.99.213.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/wp-login.php"] [unique_id "ary1kyGeq9LtYp4zuPOTdgAAKQI"]
[Wed Sep 30 01:09:07.688013 2026] [lsapi:warn] [pid 270884:tid 271082] [client 74.7.242.137:0] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n
[Wed Sep 30 01:09:07.704895 2026] [security2:error] [pid 263262:tid 263443] [client 82.102.18.190:46418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1k5EcZ_148BjP8ZPxbAAAATw"]
[Wed Sep 30 01:09:07.750061 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.750321 2026] [access_compat:error] [pid 263262:tid 263398] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.777161 2026] [security2:error] [pid 263262:tid 263416] [client 152.56.240.85:56682] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1kpEcZ_148BjP8ZPxTAAAASE"]
[Wed Sep 30 01:09:07.777630 2026] [security2:error] [pid 270884:tid 271119] [client 52.172.226.14:21417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/02.php"] [unique_id "ary1kyGeq9LtYp4zuPOTewAAAGQ"]
[Wed Sep 30 01:09:07.818457 2026] [security2:error] [pid 263262:tid 263278] [remote 74.7.241.5:47146] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1k5EcZ_148BjP8ZPxcAABLw4"], referer: https://uxa.hoh.mybluehost.me/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D302282&sid=fd6322a0a83fef9370fa6be608082786
[Wed Sep 30 01:09:07.818485 2026] [security2:error] [pid 263262:tid 263278] [remote 74.7.241.5:47146] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1k5EcZ_148BjP8ZPxcAABLw4"], referer: https://uxa.hoh.mybluehost.me/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D302282&sid=fd6322a0a83fef9370fa6be608082786
[Wed Sep 30 01:09:07.834235 2026] [security2:error] [pid 263262:tid 263511] [client 20.204.42.136:36716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/database2.php"] [unique_id "ary1k5EcZ_148BjP8ZPxcwAAAYA"]
[Wed Sep 30 01:09:07.841081 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.841379 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.905557 2026] [security2:error] [pid 270884:tid 271123] [client 20.219.2.60:44992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws61.php"] [unique_id "ary1kyGeq9LtYp4zuPOTggAAAGg"]
[Wed Sep 30 01:09:07.906566 2026] [security2:error] [pid 263262:tid 263439] [client 20.219.2.60:26085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1k5EcZ_148BjP8ZPxdQAAATg"]
[Wed Sep 30 01:09:07.932818 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:07.933108 2026] [access_compat:error] [pid 263262:tid 263393] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:07.953532 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:07.953964 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:07.989403 2026] [security2:error] [pid 270884:tid 271127] [client 74.225.148.80:55254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/alfa.php"] [unique_id "ary1kyGeq9LtYp4zuPOThgAAAGw"]
[Wed Sep 30 01:09:08.023551 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.023846 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:12057] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.046951 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:11665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ms-edit.php"] [unique_id "ary1lCGeq9LtYp4zuPOTjAAAAGs"]
[Wed Sep 30 01:09:08.054595 2026] [security2:error] [pid 263262:tid 263461] [client 74.225.148.80:54089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/cns.php"] [unique_id "ary1lJEcZ_148BjP8ZPxewAAAU4"]
[Wed Sep 30 01:09:08.094447 2026] [security2:error] [pid 263262:tid 263455] [client 20.28.180.172:34275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/Qdkv4tOtNdefault.php"] [unique_id "ary1lJEcZ_148BjP8ZPxfAAAAUg"]
[Wed Sep 30 01:09:08.118816 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.119237 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.180255 2026] [security2:error] [pid 270884:tid 270905] [remote 91.213.99.99:54294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.99.213.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/wp-login.php"] [unique_id "ary1lCGeq9LtYp4zuPOTjQAAARM"], referer: https://dentalcareeducation.com/wp-login.php
[Wed Sep 30 01:09:08.187613 2026] [security2:error] [pid 270884:tid 271111] [client 4.196.65.241:2554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/go.php"] [unique_id "ary1lCGeq9LtYp4zuPOTjgAAAFw"]
[Wed Sep 30 01:09:08.233306 2026] [security2:error] [pid 263262:tid 263399] [client 223.181.60.167:5314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1lJEcZ_148BjP8ZPxgwAAARA"]
[Wed Sep 30 01:09:08.234022 2026] [security2:error] [pid 263262:tid 263399] [client 223.181.60.167:5314] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1lJEcZ_148BjP8ZPxgwAAARA"]
[Wed Sep 30 01:09:08.262222 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.262491 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.309646 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.309908 2026] [access_compat:error] [pid 263262:tid 263420] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.316268 2026] [security2:error] [pid 270884:tid 271128] [client 82.102.18.190:46430] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1lCGeq9LtYp4zuPOTmAAAAG0"]
[Wed Sep 30 01:09:08.327069 2026] [security2:error] [pid 263262:tid 263449] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1lJEcZ_148BjP8ZPxhgAAAUI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:08.364018 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.2.60:26050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws57.php"] [unique_id "ary1lCGeq9LtYp4zuPOTmgAAADc"]
[Wed Sep 30 01:09:08.376750 2026] [security2:error] [pid 270884:tid 271053] [client 52.172.226.14:21408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/go.php"] [unique_id "ary1lCGeq9LtYp4zuPOTmwAAACI"]
[Wed Sep 30 01:09:08.406213 2026] [security2:error] [pid 270884:tid 271082] [client 20.219.2.60:45066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/iyy.php"] [unique_id "ary1lCGeq9LtYp4zuPOTnAAAAD8"]
[Wed Sep 30 01:09:08.416267 2026] [security2:error] [pid 270884:tid 271146] [client 74.7.242.1:52874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1lCGeq9LtYp4zuPOTnQAAAH8"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:09:08.422983 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.423435 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.439090 2026] [access_compat:error] [pid 270884:tid 271044] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:08.439569 2026] [access_compat:error] [pid 270884:tid 271044] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:08.449515 2026] [security2:error] [pid 263262:tid 263440] [client 216.73.216.46:12057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1lJEcZ_148BjP8ZPxiQAAATk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTE%3D
[Wed Sep 30 01:09:08.464298 2026] [security2:error] [pid 270884:tid 271111] [client 74.225.148.80:63604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1lCGeq9LtYp4zuPOTpwAAAFw"]
[Wed Sep 30 01:09:08.496749 2026] [security2:error] [pid 270884:tid 271036] [client 155.190.6.18:51288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1lCGeq9LtYp4zuPOTrgAAABE"]
[Wed Sep 30 01:09:08.496951 2026] [security2:error] [pid 270884:tid 271036] [client 155.190.6.18:51288] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1lCGeq9LtYp4zuPOTrgAAABE"]
[Wed Sep 30 01:09:08.530911 2026] [security2:error] [pid 270884:tid 271020] [client 168.100.149.8:34042] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/element.min.js"] [unique_id "ary1lCGeq9LtYp4zuPOTsAAAAVE"]
[Wed Sep 30 01:09:08.537770 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.538274 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.590434 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.590901 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:53505] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.624848 2026] [security2:error] [pid 263262:tid 263416] [client 74.225.148.80:54083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/faiy.php"] [unique_id "ary1lJEcZ_148BjP8ZPxlgAAASE"]
[Wed Sep 30 01:09:08.651431 2026] [security2:error] [pid 263262:tid 263500] [client 20.70.173.30:43056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/css.php"] [unique_id "ary1lJEcZ_148BjP8ZPxmQAAAXU"]
[Wed Sep 30 01:09:08.674286 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.674916 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.685205 2026] [security2:error] [pid 270884:tid 271134] [client 103.168.67.253:36856] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/signup"] [unique_id "ary1lCGeq9LtYp4zuPOTugAAAHM"]
[Wed Sep 30 01:09:08.704017 2026] [security2:error] [pid 270884:tid 271087] [client 20.198.74.230:24143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zwso.php"] [unique_id "ary1lCGeq9LtYp4zuPOTvAAAAEQ"]
[Wed Sep 30 01:09:08.709173 2026] [security2:error] [pid 263262:tid 263479] [client 20.194.30.107:23183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1lJEcZ_148BjP8ZPxmwAAAWA"]
[Wed Sep 30 01:09:08.749418 2026] [security2:error] [pid 270884:tid 271127] [client 116.197.133.25:51805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1lCGeq9LtYp4zuPOTvQAAAGw"]
[Wed Sep 30 01:09:08.749627 2026] [security2:error] [pid 270884:tid 271127] [client 116.197.133.25:51805] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1lCGeq9LtYp4zuPOTvQAAAGw"]
[Wed Sep 30 01:09:08.761948 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.762213 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.837776 2026] [security2:error] [pid 270884:tid 271134] [client 20.219.2.60:40740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/.qiodetme.php"] [unique_id "ary1lCGeq9LtYp4zuPOTxQAAAHM"]
[Wed Sep 30 01:09:08.843502 2026] [security2:error] [pid 270884:tid 271056] [client 103.168.67.253:36856] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/signup"] [unique_id "ary1lCGeq9LtYp4zuPOTxAAAACU"]
[Wed Sep 30 01:09:08.854721 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.855018 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.871420 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:49319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/900.php"] [unique_id "ary1lCGeq9LtYp4zuPOTxwAAABo"]
[Wed Sep 30 01:09:08.916848 2026] [security2:error] [pid 270884:tid 271021] [client 20.194.96.176:44840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/chosen.php"] [unique_id "ary1lCGeq9LtYp4zuPOTyAAAAAI"]
[Wed Sep 30 01:09:08.920001 2026] [security2:error] [pid 270884:tid 271036] [client 52.172.226.14:39940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/ee.php"] [unique_id "ary1lCGeq9LtYp4zuPOTyQAAABE"]
[Wed Sep 30 01:09:08.924049 2026] [security2:error] [pid 270884:tid 271137] [client 20.70.173.30:7417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/about.php"] [unique_id "ary1lCGeq9LtYp4zuPOTygAAAHY"]
[Wed Sep 30 01:09:08.926400 2026] [security2:error] [pid 263262:tid 263494] [client 82.102.18.190:46444] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1lJEcZ_148BjP8ZPxngAAAW8"]
[Wed Sep 30 01:09:08.927712 2026] [security2:error] [pid 270884:tid 271083] [client 20.70.173.30:25507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/mac.php"] [unique_id "ary1lCGeq9LtYp4zuPOTywAAAEA"]
[Wed Sep 30 01:09:08.931601 2026] [security2:error] [pid 263262:tid 263516] [client 103.159.192.142:52898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1lJEcZ_148BjP8ZPxnwAAAYU"]
[Wed Sep 30 01:09:08.931680 2026] [security2:error] [pid 263262:tid 263516] [client 103.159.192.142:52898] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1lJEcZ_148BjP8ZPxnwAAAYU"]
[Wed Sep 30 01:09:08.935590 2026] [security2:error] [pid 270884:tid 271146] [client 74.225.148.80:16918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/b8.php"] [unique_id "ary1lCGeq9LtYp4zuPOTzAAAAH8"]
[Wed Sep 30 01:09:08.943357 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:08.943628 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:08.944763 2026] [access_compat:error] [pid 270884:tid 271087] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:08.945037 2026] [access_compat:error] [pid 270884:tid 271087] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:09.013666 2026] [security2:error] [pid 263262:tid 263455] [client 216.73.216.46:53505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1lZEcZ_148BjP8ZPxoAAAAUg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAzL25vZGUwL2NwdTEvY2FjaGU%3D
[Wed Sep 30 01:09:09.033754 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.034040 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.050276 2026] [security2:error] [pid 270884:tid 271134] [client 20.194.30.107:17506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/df.php"] [unique_id "ary1lSGeq9LtYp4zuPOT1AAAAHM"]
[Wed Sep 30 01:09:09.127988 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.128247 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.141214 2026] [security2:error] [pid 270884:tid 271021] [client 74.225.148.80:54130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gecho.php"] [unique_id "ary1lSGeq9LtYp4zuPOT1wAAAAI"]
[Wed Sep 30 01:09:09.156561 2026] [security2:error] [pid 263262:tid 263407] [client 20.204.42.136:36739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/aa.php"] [unique_id "ary1lZEcZ_148BjP8ZPxoQAAARg"]
[Wed Sep 30 01:09:09.165766 2026] [security2:error] [pid 263262:tid 263399] [client 4.240.25.22:46289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/sb.php"] [unique_id "ary1lZEcZ_148BjP8ZPxogAAARA"]
[Wed Sep 30 01:09:09.168252 2026] [security2:error] [pid 263262:tid 263469] [client 20.28.180.172:62390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/vx.php"] [unique_id "ary1lZEcZ_148BjP8ZPxowAAAVY"]
[Wed Sep 30 01:09:09.171130 2026] [security2:error] [pid 270884:tid 271036] [client 20.28.180.172:29571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/acf1ced8aec2.php"] [unique_id "ary1lSGeq9LtYp4zuPOT2AAAABE"]
[Wed Sep 30 01:09:09.217072 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.217339 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.246970 2026] [qos:error] [pid 270884:tid 271037] [client 170.247.38.77:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1lSGeq9LtYp4zuPOT2wAAABI
[Wed Sep 30 01:09:09.272528 2026] [security2:error] [pid 270884:tid 270920] [remote 91.213.99.99:54294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.99.213.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1lSGeq9LtYp4zuPOT3AAANyI"]
[Wed Sep 30 01:09:09.272693 2026] [security2:error] [pid 270884:tid 271074] [client 91.213.99.99:54294] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1lSGeq9LtYp4zuPOT3AAANyI"]
[Wed Sep 30 01:09:09.301379 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:40764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/sodas.php"] [unique_id "ary1lSGeq9LtYp4zuPOT5AAAAG0"]
[Wed Sep 30 01:09:09.305544 2026] [qos:error] [pid 270884:tid 271104] [client 134.17.168.93:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1lSGeq9LtYp4zuPOT5QAAAFU
[Wed Sep 30 01:09:09.306501 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.306826 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.348854 2026] [security2:error] [pid 263262:tid 263433] [client 20.219.2.60:33833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/blsvgeyaza.php"] [unique_id "ary1lZEcZ_148BjP8ZPxpwAAATI"]
[Wed Sep 30 01:09:09.397713 2026] [security2:error] [pid 270884:tid 271130] [client 103.241.204.139:54284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1lSGeq9LtYp4zuPOT6wAAAG8"]
[Wed Sep 30 01:09:09.397862 2026] [security2:error] [pid 270884:tid 271130] [client 103.241.204.139:54284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1lSGeq9LtYp4zuPOT6wAAAG8"]
[Wed Sep 30 01:09:09.406520 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.409752 2026] [security2:error] [pid 263262:tid 263471] [client 74.225.148.80:16940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/xex.php"] [unique_id "ary1lZEcZ_148BjP8ZPxqgAAAVg"]
[Wed Sep 30 01:09:09.411100 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.441886 2026] [access_compat:error] [pid 270884:tid 271083] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:09.442347 2026] [access_compat:error] [pid 270884:tid 271083] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:09.447480 2026] [security2:error] [pid 270884:tid 271128] [client 52.172.226.14:21419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/an.php"] [unique_id "ary1lSGeq9LtYp4zuPOT7QAAAG0"]
[Wed Sep 30 01:09:09.493073 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.493394 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.574459 2026] [security2:error] [pid 270884:tid 271094] [client 82.102.18.190:46450] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.rqc.vhc.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1lSGeq9LtYp4zuPOT8QAAAEs"]
[Wed Sep 30 01:09:09.580973 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.581236 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.610152 2026] [security2:error] [pid 263262:tid 263504] [client 20.194.30.107:17385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/kir.php"] [unique_id "ary1lZEcZ_148BjP8ZPxrQAAAXk"]
[Wed Sep 30 01:09:09.648703 2026] [security2:error] [pid 270884:tid 271130] [client 74.225.148.80:18475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/gu.php"] [unique_id "ary1lSGeq9LtYp4zuPOT9gAAAG8"]
[Wed Sep 30 01:09:09.657503 2026] [access_compat:error] [pid 263262:tid 263443] [client 47.79.13.27:40064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:09.657994 2026] [access_compat:error] [pid 263262:tid 263443] [client 47.79.13.27:40064] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:09.673191 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.673567 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.730355 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/new4.php"] [unique_id "ary1lSGeq9LtYp4zuPOT_QAAABo"]
[Wed Sep 30 01:09:09.762676 2026] [security2:error] [pid 263262:tid 263494] [client 20.219.2.60:11669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/abc.php"] [unique_id "ary1lZEcZ_148BjP8ZPxtAAAAW8"]
[Wed Sep 30 01:09:09.763990 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.764254 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.767399 2026] [security2:error] [pid 263262:tid 263516] [client 20.219.2.60:26058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/yw5bi63u.php"] [unique_id "ary1lZEcZ_148BjP8ZPxtQAAAYU"]
[Wed Sep 30 01:09:09.818171 2026] [security2:error] [pid 263262:tid 263482] [client 20.219.2.60:45083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gqhyti.php"] [unique_id "ary1lZEcZ_148BjP8ZPxtwAAAWM"]
[Wed Sep 30 01:09:09.820327 2026] [security2:error] [pid 263262:tid 263421] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1lZEcZ_148BjP8ZPxtgAAASY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:09.859906 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.860358 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.883543 2026] [security2:error] [pid 263262:tid 263399] [client 74.225.148.80:63553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/ass.php"] [unique_id "ary1lZEcZ_148BjP8ZPxuQAAARA"]
[Wed Sep 30 01:09:09.946711 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:09.947027 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:09.952816 2026] [security2:error] [pid 263262:tid 263470] [client 20.219.19.141:20828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1lZEcZ_148BjP8ZPxuwAAAVc"]
[Wed Sep 30 01:09:09.959742 2026] [security2:error] [pid 270884:tid 271072] [client 52.172.226.14:39897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp.php"] [unique_id "ary1lSGeq9LtYp4zuPOUBQAAADU"]
[Wed Sep 30 01:09:09.963043 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:09.963299 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:10.035023 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.035572 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.083715 2026] [access_compat:error] [pid 263262:tid 263407] [client 47.79.13.172:47830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.083999 2026] [access_compat:error] [pid 263262:tid 263407] [client 47.79.13.172:47830] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.099979 2026] [security2:error] [pid 270884:tid 271060] [client 47.79.13.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1liGeq9LtYp4zuPOUEQAAACk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:10.128366 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.128633 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.215703 2026] [security2:error] [pid 270884:tid 271031] [client 144.91.83.1:58146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.83.91.144.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary1liGeq9LtYp4zuPOUFQAAAAw"]
[Wed Sep 30 01:09:10.218850 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.219091 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.222102 2026] [security2:error] [pid 270884:tid 271142] [client 74.225.148.80:18460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/nck.php"] [unique_id "ary1liGeq9LtYp4zuPOUFgAAAHs"]
[Wed Sep 30 01:09:10.226229 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:26107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws81.php"] [unique_id "ary1liGeq9LtYp4zuPOUFwAAADU"]
[Wed Sep 30 01:09:10.289762 2026] [security2:error] [pid 263262:tid 263471] [client 20.219.2.60:48075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/autoxxi.php"] [unique_id "ary1lpEcZ_148BjP8ZPxxAAAAVg"]
[Wed Sep 30 01:09:10.310592 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.310902 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:55111] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.312300 2026] [security2:error] [pid 270884:tid 271119] [client 4.240.25.22:12428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/0.php"] [unique_id "ary1liGeq9LtYp4zuPOUGQAAAGQ"]
[Wed Sep 30 01:09:10.324288 2026] [security2:error] [pid 270884:tid 271074] [client 4.240.25.22:44356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/ops.php"] [unique_id "ary1liGeq9LtYp4zuPOUGgAAADc"]
[Wed Sep 30 01:09:10.328590 2026] [security2:error] [pid 270884:tid 271060] [client 74.225.148.80:16919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wsd.php"] [unique_id "ary1liGeq9LtYp4zuPOUHAAAACk"]
[Wed Sep 30 01:09:10.353841 2026] [qos:error] [pid 263262:tid 263405] [client 176.234.231.204:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1lpEcZ_148BjP8ZPxxQAAARY
[Wed Sep 30 01:09:10.415198 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:10.415649 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:10.424061 2026] [security2:error] [pid 263262:tid 263436] [client 20.213.164.196:55197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wpuse.php"] [unique_id "ary1lpEcZ_148BjP8ZPxywAAATU"]
[Wed Sep 30 01:09:10.439865 2026] [qos:error] [pid 263262:tid 263500] [client 156.197.231.244:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1lpEcZ_148BjP8ZPxzQAAAXU
[Wed Sep 30 01:09:10.441735 2026] [security2:error] [pid 263262:tid 263456] [client 52.172.226.14:39972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary1lpEcZ_148BjP8ZPxzgAAAUk"]
[Wed Sep 30 01:09:10.454928 2026] [security2:error] [pid 263262:tid 263479] [client 20.28.180.172:29963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/20.php"] [unique_id "ary1lpEcZ_148BjP8ZPx0AAAAWA"]
[Wed Sep 30 01:09:10.457550 2026] [security2:error] [pid 263262:tid 263298] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1lpEcZ_148BjP8ZPx0QABeSI"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D14683
[Wed Sep 30 01:09:10.460020 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.460470 2026] [access_compat:error] [pid 263262:tid 263468] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.477634 2026] [access_compat:error] [pid 270884:tid 270941] [remote 188.241.131.13:54597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.478114 2026] [access_compat:error] [pid 270884:tid 270941] [remote 188.241.131.13:54597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.543477 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.543586 2026] [security2:error] [pid 263262:tid 263394] [client 168.100.149.205:32544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/dom-ready.min.js"] [unique_id "ary1lpEcZ_148BjP8ZPx0wABC30"]
[Wed Sep 30 01:09:10.543717 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.584246 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.584514 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.625234 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.82.11.53:33082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.625530 2026] [access_compat:error] [pid 263262:tid 263439] [client 47.82.11.53:33082] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.633246 2026] [qos:error] [pid 270884:tid 271060] [client 38.224.71.185:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1liGeq9LtYp4zuPOUKAAAACk
[Wed Sep 30 01:09:10.664144 2026] [security2:error] [pid 270884:tid 271118] [client 20.204.42.136:57817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/pJPoKA.php"] [unique_id "ary1liGeq9LtYp4zuPOUKwAAAGM"]
[Wed Sep 30 01:09:10.674541 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.674795 2026] [access_compat:error] [pid 263262:tid 263493] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.681662 2026] [security2:error] [pid 263262:tid 263449] [client 20.219.2.60:26098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/mh.php"] [unique_id "ary1lpEcZ_148BjP8ZPx2QAAAUI"]
[Wed Sep 30 01:09:10.687313 2026] [security2:error] [pid 263262:tid 263484] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1lpEcZ_148BjP8ZPx2gAAAWU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:10.714404 2026] [security2:error] [pid 263262:tid 263407] [client 74.225.148.80:18444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.indoorenvironmentaltesting.com"] [uri "/xtt.php"] [unique_id "ary1lpEcZ_148BjP8ZPx2wAAARg"]
[Wed Sep 30 01:09:10.730732 2026] [security2:error] [pid 270884:tid 271127] [client 216.73.216.46:55111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1liGeq9LtYp4zuPOULgAAAGw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTA3
[Wed Sep 30 01:09:10.752376 2026] [security2:error] [pid 263262:tid 263474] [client 20.219.2.60:33821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/1144452145_error_log.php"] [unique_id "ary1lpEcZ_148BjP8ZPx3AAAAVs"]
[Wed Sep 30 01:09:10.760591 2026] [access_compat:error] [pid 263262:tid 263441] [client 47.79.13.234:48174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.760903 2026] [access_compat:error] [pid 263262:tid 263441] [client 47.79.13.234:48174] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:10.767604 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.767893 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.805389 2026] [security2:error] [pid 270884:tid 271031] [client 74.225.148.80:50173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/BDKR28WP.php"] [unique_id "ary1liGeq9LtYp4zuPOULwAAAAw"]
[Wed Sep 30 01:09:10.857434 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.857687 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.929628 2026] [security2:error] [pid 263262:tid 263416] [client 52.172.226.14:39966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/admin.php"] [unique_id "ary1lpEcZ_148BjP8ZPx5AAAASE"]
[Wed Sep 30 01:09:10.947447 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:10.947473 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:10.947720 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:10.947729 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:10.978928 2026] [security2:error] [pid 263262:tid 263375] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1lpEcZ_148BjP8ZPx6wABUW8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=37643
[Wed Sep 30 01:09:10.978953 2026] [security2:error] [pid 263262:tid 263375] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1lpEcZ_148BjP8ZPx6wABUW8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=37643
[Wed Sep 30 01:09:11.039854 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.040198 2026] [access_compat:error] [pid 263262:tid 263472] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.094784 2026] [security2:error] [pid 270884:tid 271082] [client 103.168.67.253:36856] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/signup"] [unique_id "ary1liGeq9LtYp4zuPOUNAAAAD8"]
[Wed Sep 30 01:09:11.097781 2026] [security2:error] [pid 270884:tid 271137] [client 20.70.173.30:25527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/abcd.php"] [unique_id "ary1lyGeq9LtYp4zuPOUOQAAAHY"]
[Wed Sep 30 01:09:11.098226 2026] [qos:error] [pid 263262:tid 263494] [client 51.36.227.204:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1l5EcZ_148BjP8ZPx8AAAAW8
[Wed Sep 30 01:09:11.134481 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.134754 2026] [access_compat:error] [pid 263262:tid 263516] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.160819 2026] [security2:error] [pid 270884:tid 271131] [client 20.219.2.60:26074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws88.php"] [unique_id "ary1lyGeq9LtYp4zuPOUOwAAAHA"]
[Wed Sep 30 01:09:11.161608 2026] [core:error] [pid 270884:tid 271072] (104)Connection reset by peer: [client 172.232.190.19:56835] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:09:11.197921 2026] [security2:error] [pid 270884:tid 271021] [client 37.41.16.35:55333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUPQAAAAI"]
[Wed Sep 30 01:09:11.198058 2026] [security2:error] [pid 270884:tid 271021] [client 37.41.16.35:55333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUPQAAAAI"]
[Wed Sep 30 01:09:11.208111 2026] [security2:error] [pid 270884:tid 271136] [client 20.219.19.141:20864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1lyGeq9LtYp4zuPOUPgAAAHU"]
[Wed Sep 30 01:09:11.223293 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.223578 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.250722 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:33848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws48.php"] [unique_id "ary1lyGeq9LtYp4zuPOUQQAAABo"]
[Wed Sep 30 01:09:11.262942 2026] [security2:error] [pid 270884:tid 271074] [client 74.225.148.80:16954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wmore1.php"] [unique_id "ary1lyGeq9LtYp4zuPOUQgAAADc"]
[Wed Sep 30 01:09:11.307827 2026] [qos:error] [pid 270884:tid 271142] [client 217.91.151.28:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1lyGeq9LtYp4zuPOURwAAAHs
[Wed Sep 30 01:09:11.313786 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.314079 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.477608 2026] [security2:error] [pid 263262:tid 263397] [client 52.172.226.14:39950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/admin.php"] [unique_id "ary1l5EcZ_148BjP8ZPx_QAAAQ4"]
[Wed Sep 30 01:09:11.481662 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.482087 2026] [access_compat:error] [pid 263262:tid 263484] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.506782 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.507061 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.522769 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:11.523029 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:11.584802 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.585097 2026] [access_compat:error] [pid 263262:tid 263441] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.629963 2026] [security2:error] [pid 263262:tid 263503] [client 20.219.2.60:40763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws86.php"] [unique_id "ary1l5EcZ_148BjP8ZPyAQAAAXg"]
[Wed Sep 30 01:09:11.633745 2026] [security2:error] [pid 270884:tid 271106] [client 201.32.215.149:7490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUUwAAAFc"]
[Wed Sep 30 01:09:11.636998 2026] [security2:error] [pid 270884:tid 271106] [client 201.32.215.149:7490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUUwAAAFc"]
[Wed Sep 30 01:09:11.676986 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.677245 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.696276 2026] [security2:error] [pid 270884:tid 271021] [client 150.109.16.200:36604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.16.109.150.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-login.php"] [unique_id "ary1lyGeq9LtYp4zuPOUVAAAAAI"], referer: https://central-fuerth.de/wp-login.php
[Wed Sep 30 01:09:11.722392 2026] [security2:error] [pid 263262:tid 263500] [client 20.219.2.60:33814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary1l5EcZ_148BjP8ZPyBgAAAXU"]
[Wed Sep 30 01:09:11.724946 2026] [security2:error] [pid 263262:tid 263456] [client 74.225.148.80:16947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/z60.php"] [unique_id "ary1l5EcZ_148BjP8ZPyBwAAAUk"]
[Wed Sep 30 01:09:11.767141 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.767404 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.772711 2026] [security2:error] [pid 270884:tid 271118] [client 182.75.216.230:59098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUVgAAAGM"]
[Wed Sep 30 01:09:11.772967 2026] [security2:error] [pid 270884:tid 271118] [client 182.75.216.230:59098] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1lyGeq9LtYp4zuPOUVgAAAGM"]
[Wed Sep 30 01:09:11.815248 2026] [security2:error] [pid 263262:tid 263502] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1l5EcZ_148BjP8ZPyDwAAAXc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:11.834090 2026] [security2:error] [pid 263262:tid 263353] [remote 97.74.94.121:40880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.94.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.loohan.com"] [uri "/wp-login.php"] [unique_id "ary1l5EcZ_148BjP8ZPyEAABWFk"]
[Wed Sep 30 01:09:11.842728 2026] [lsapi:warn] [pid 270884:tid 270966] [remote 74.7.243.20:40518] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: https://kshar.net/how-to-cook-tahchin-e-bademjan-video/
[Wed Sep 30 01:09:11.860343 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.860622 2026] [access_compat:error] [pid 263262:tid 263514] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:11.889744 2026] [security2:error] [pid 263262:tid 263468] [client 20.70.173.30:56388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/dex.php"] [unique_id "ary1l5EcZ_148BjP8ZPyEwAAAVU"]
[Wed Sep 30 01:09:11.949370 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:11.949643 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.008133 2026] [security2:error] [pid 263262:tid 263435] [client 52.172.226.14:21658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary1mJEcZ_148BjP8ZPyGQAAATQ"]
[Wed Sep 30 01:09:12.028661 2026] [security2:error] [pid 270884:tid 271089] [client 20.70.173.30:33371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp.php"] [unique_id "ary1mCGeq9LtYp4zuPOUXQAAAEY"]
[Wed Sep 30 01:09:12.040703 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.040966 2026] [access_compat:error] [pid 263262:tid 263483] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.041794 2026] [security2:error] [pid 263262:tid 263304] [remote 97.74.94.121:40880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.94.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.loohan.com"] [uri "/wp-login.php"] [unique_id "ary1mJEcZ_148BjP8ZPyGgABFSg"], referer: https://mail.loohan.com/wp-login.php
[Wed Sep 30 01:09:12.090634 2026] [security2:error] [pid 263262:tid 263519] [client 20.219.2.60:26092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/vx.php"] [unique_id "ary1mJEcZ_148BjP8ZPyHQAAAYg"]
[Wed Sep 30 01:09:12.131479 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.131762 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.202872 2026] [security2:error] [pid 270884:tid 271104] [client 74.225.148.80:16951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/24.php"] [unique_id "ary1mCGeq9LtYp4zuPOUZAAAAFU"]
[Wed Sep 30 01:09:12.221967 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:48064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/schallfuns.php"] [unique_id "ary1mCGeq9LtYp4zuPOUZQAAAEA"]
[Wed Sep 30 01:09:12.223043 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.223323 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.251048 2026] [security2:error] [pid 263262:tid 263367] [remote 97.74.94.121:40880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.94.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary1mJEcZ_148BjP8ZPyKAABVmc"]
[Wed Sep 30 01:09:12.251185 2026] [security2:error] [pid 263262:tid 263469] [client 97.74.94.121:40880] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.loohan.com"] [uri "/xmlrpc.php"] [unique_id "ary1mJEcZ_148BjP8ZPyKAABVmc"]
[Wed Sep 30 01:09:12.296294 2026] [security2:error] [pid 263262:tid 263441] [client 4.240.25.22:44352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/or.php"] [unique_id "ary1mJEcZ_148BjP8ZPyLAAAATo"]
[Wed Sep 30 01:09:12.309818 2026] [security2:error] [pid 263262:tid 263497] [client 20.219.2.60:11702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/motu.php"] [unique_id "ary1mJEcZ_148BjP8ZPyLgAAAXI"]
[Wed Sep 30 01:09:12.313817 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.314104 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.376766 2026] [security2:error] [pid 263262:tid 263464] [client 20.28.180.172:60288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/dass.php"] [unique_id "ary1mJEcZ_148BjP8ZPyMwAAAVE"]
[Wed Sep 30 01:09:12.415031 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.415488 2026] [access_compat:error] [pid 263262:tid 263479] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.492510 2026] [security2:error] [pid 263262:tid 263421] [client 20.28.180.172:29466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xrp.php"] [unique_id "ary1mJEcZ_148BjP8ZPyPAAAASY"]
[Wed Sep 30 01:09:12.498547 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.498835 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.501471 2026] [access_compat:error] [pid 270884:tid 271072] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:12.501734 2026] [access_compat:error] [pid 270884:tid 271072] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:12.539638 2026] [security2:error] [pid 263262:tid 263494] [client 168.100.149.236:51724] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/nav-menu.js"] [unique_id "ary1mJEcZ_148BjP8ZPyPgABbwU"]
[Wed Sep 30 01:09:12.548378 2026] [security2:error] [pid 263262:tid 263418] [client 20.70.173.30:52184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-content/index.php"] [unique_id "ary1mJEcZ_148BjP8ZPyPwAAASM"]
[Wed Sep 30 01:09:12.564678 2026] [security2:error] [pid 263262:tid 263519] [client 20.219.2.60:26060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/dass.php"] [unique_id "ary1mJEcZ_148BjP8ZPyQAAAAYg"]
[Wed Sep 30 01:09:12.587673 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.587992 2026] [access_compat:error] [pid 263262:tid 263473] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.652044 2026] [access_compat:error] [pid 263262:tid 263517] [client 47.82.11.53:58272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:12.652334 2026] [access_compat:error] [pid 263262:tid 263517] [client 47.82.11.53:58272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:12.660473 2026] [security2:error] [pid 270884:tid 271094] [client 74.225.148.80:55252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/xxw.php"] [unique_id "ary1mCGeq9LtYp4zuPOUbAAAAEs"]
[Wed Sep 30 01:09:12.679065 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.679341 2026] [access_compat:error] [pid 263262:tid 263397] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.680219 2026] [security2:error] [pid 270884:tid 271074] [client 103.168.67.253:36856] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/signup"] [unique_id "ary1mCGeq9LtYp4zuPOUbQAAADc"]
[Wed Sep 30 01:09:12.693113 2026] [access_compat:error] [pid 270884:tid 271142] [client 47.79.13.175:60422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:12.693436 2026] [access_compat:error] [pid 270884:tid 271142] [client 47.79.13.175:60422] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:12.694638 2026] [security2:error] [pid 270884:tid 271082] [client 20.219.2.60:48085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/CDX1.php"] [unique_id "ary1mCGeq9LtYp4zuPOUcAAAAD8"]
[Wed Sep 30 01:09:12.713955 2026] [security2:error] [pid 270884:tid 271128] [client 52.172.226.14:39995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/index/function.php"] [unique_id "ary1mCGeq9LtYp4zuPOUdQAAAG0"]
[Wed Sep 30 01:09:12.733107 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.19.141:20820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/adminfuns.php"] [unique_id "ary1mCGeq9LtYp4zuPOUdwAAAH0"]
[Wed Sep 30 01:09:12.774439 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.774697 2026] [access_compat:error] [pid 263262:tid 263511] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.774942 2026] [security2:error] [pid 263262:tid 263489] [client 45.138.12.32:30544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hxr.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1mJEcZ_148BjP8ZPyTAAAAWo"]
[Wed Sep 30 01:09:12.846059 2026] [security2:error] [pid 263262:tid 263312] [remote 74.7.227.56:52120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1mJEcZ_148BjP8ZPyTgABCjA"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?p=135836&sid=66769390544140066c67955412391e93
[Wed Sep 30 01:09:12.861087 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.861370 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.950703 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:12.950982 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:12.964748 2026] [access_compat:error] [pid 263262:tid 263497] [client 47.79.13.176:60750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:12.965016 2026] [access_compat:error] [pid 263262:tid 263497] [client 47.79.13.176:60750] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:13.036310 2026] [security2:error] [pid 263262:tid 263494] [client 4.240.25.22:12464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/robots.php"] [unique_id "ary1mZEcZ_148BjP8ZPyXQAAAW8"]
[Wed Sep 30 01:09:13.048007 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.048458 2026] [access_compat:error] [pid 263262:tid 263445] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.053010 2026] [security2:error] [pid 263262:tid 263476] [client 20.219.2.60:26102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/s.php"] [unique_id "ary1mZEcZ_148BjP8ZPyYAAAAV0"]
[Wed Sep 30 01:09:13.086823 2026] [security2:error] [pid 263262:tid 263460] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1mZEcZ_148BjP8ZPyYgAAAU0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:13.091024 2026] [security2:error] [pid 263262:tid 263442] [client 150.109.16.200:33256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.16.109.150.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/wp-login.php"] [unique_id "ary1mZEcZ_148BjP8ZPyYwAAATs"], referer: https://central-fuerth.de/wp-login.php
[Wed Sep 30 01:09:13.127867 2026] [security2:error] [pid 263262:tid 263484] [client 20.219.2.60:18845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/aa.php"] [unique_id "ary1mZEcZ_148BjP8ZPyZgAAAWU"]
[Wed Sep 30 01:09:13.134022 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.134280 2026] [access_compat:error] [pid 263262:tid 263491] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.137930 2026] [security2:error] [pid 263262:tid 263517] [client 74.225.148.80:55236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/bnmtp.php"] [unique_id "ary1mZEcZ_148BjP8ZPyZwAAAYY"]
[Wed Sep 30 01:09:13.161743 2026] [security2:error] [pid 263262:tid 263466] [client 20.219.2.60:49329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/clasa99.php"] [unique_id "ary1mZEcZ_148BjP8ZPyagAAAVM"]
[Wed Sep 30 01:09:13.221362 2026] [security2:error] [pid 263262:tid 263422] [client 52.172.226.14:39938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary1mZEcZ_148BjP8ZPybwAAASc"]
[Wed Sep 30 01:09:13.224516 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.224779 2026] [access_compat:error] [pid 263262:tid 263444] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.316375 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.316842 2026] [access_compat:error] [pid 263262:tid 263414] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.362445 2026] [security2:error] [pid 270884:tid 271136] [client 122.173.27.10:29747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUiQAAAHU"]
[Wed Sep 30 01:09:13.362605 2026] [security2:error] [pid 270884:tid 271136] [client 122.173.27.10:29747] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUiQAAAHU"]
[Wed Sep 30 01:09:13.415516 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.415963 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.449324 2026] [security2:error] [pid 270884:tid 271023] [client 203.122.45.246:51402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUiwAAAAQ"]
[Wed Sep 30 01:09:13.449542 2026] [security2:error] [pid 270884:tid 271023] [client 203.122.45.246:51402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUiwAAAAQ"]
[Wed Sep 30 01:09:13.454493 2026] [security2:error] [pid 270884:tid 271094] [client 103.159.192.142:53386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUjAAAAEs"]
[Wed Sep 30 01:09:13.454650 2026] [security2:error] [pid 270884:tid 271094] [client 103.159.192.142:53386] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUjAAAAEs"]
[Wed Sep 30 01:09:13.457844 2026] [http2:warn] [pid 263262:tid 263448] [client 40.77.167.224:51793] h2_stream(263262-741-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:13.497380 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.497652 2026] [access_compat:error] [pid 263262:tid 263494] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.526366 2026] [security2:error] [pid 263262:tid 263423] [client 161.115.227.157:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1mZEcZ_148BjP8ZPyggAAASg"]
[Wed Sep 30 01:09:13.552440 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:26146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/kj.php"] [unique_id "ary1mSGeq9LtYp4zuPOUlAAAADU"]
[Wed Sep 30 01:09:13.574723 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:13.575021 2026] [access_compat:error] [pid 270884:tid 271104] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:13.588655 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.588932 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.596238 2026] [security2:error] [pid 263262:tid 263455] [client 74.225.148.80:55277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/ebkid.php"] [unique_id "ary1mZEcZ_148BjP8ZPyhQAAAUg"]
[Wed Sep 30 01:09:13.636757 2026] [security2:error] [pid 270884:tid 271118] [client 152.59.165.7:56302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUmQAAAGM"]
[Wed Sep 30 01:09:13.636897 2026] [security2:error] [pid 270884:tid 271118] [client 152.59.165.7:56302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1mSGeq9LtYp4zuPOUmQAAAGM"]
[Wed Sep 30 01:09:13.649961 2026] [security2:error] [pid 270884:tid 271084] [client 20.219.2.60:33831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/myfilexxx.php"] [unique_id "ary1mSGeq9LtYp4zuPOUmwAAAEE"]
[Wed Sep 30 01:09:13.678969 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.679235 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.741477 2026] [security2:error] [pid 263262:tid 263430] [client 52.172.226.14:39944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/license.php"] [unique_id "ary1mZEcZ_148BjP8ZPyiQAAAS8"]
[Wed Sep 30 01:09:13.757890 2026] [lsapi:warn] [pid 270884:tid 270943] [remote 74.7.242.146:42286] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: https://kshar.net/how-to-cook-tahchin-e-bademjan-video/
[Wed Sep 30 01:09:13.771271 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.771569 2026] [access_compat:error] [pid 263262:tid 263517] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.833210 2026] [security2:error] [pid 263262:tid 263491] [client 45.138.12.32:30556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyb.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1mZEcZ_148BjP8ZPyiwAAAWw"]
[Wed Sep 30 01:09:13.849930 2026] [access_compat:error] [pid 270884:tid 271083] [client 47.79.13.27:40078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:13.850212 2026] [access_compat:error] [pid 270884:tid 271083] [client 47.79.13.27:40078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:13.880486 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.880740 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.951672 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:13.951943 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:13.982047 2026] [security2:error] [pid 270884:tid 271106] [client 93.180.199.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1mSGeq9LtYp4zuPOUqwAAAFc"]
[Wed Sep 30 01:09:14.012465 2026] [qos:error] [pid 270884:tid 271072] [client 86.227.146.53:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1miGeq9LtYp4zuPOUrwAAADU
[Wed Sep 30 01:09:14.030758 2026] [security2:error] [pid 270884:tid 271142] [client 20.204.42.136:36699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/24.php"] [unique_id "ary1miGeq9LtYp4zuPOUsQAAAHs"]
[Wed Sep 30 01:09:14.034775 2026] [security2:error] [pid 270884:tid 271137] [client 20.219.2.60:40721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws83.php"] [unique_id "ary1miGeq9LtYp4zuPOUsgAAAHY"]
[Wed Sep 30 01:09:14.042307 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.042569 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.066184 2026] [access_compat:error] [pid 270884:tid 271134] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:14.066466 2026] [access_compat:error] [pid 270884:tid 271134] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:14.066653 2026] [security2:error] [pid 270884:tid 271046] [client 74.225.148.80:16711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/133.php"] [unique_id "ary1miGeq9LtYp4zuPOUtAAAABs"]
[Wed Sep 30 01:09:14.090186 2026] [qos:error] [pid 263262:tid 263414] [client 109.243.1.172:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1mpEcZ_148BjP8ZPylwAAAR8
[Wed Sep 30 01:09:14.135516 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.135788 2026] [access_compat:error] [pid 263262:tid 263504] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.165311 2026] [security2:error] [pid 270884:tid 271066] [client 20.219.2.60:33851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/karma_144a.php"] [unique_id "ary1miGeq9LtYp4zuPOUtQAAAC8"]
[Wed Sep 30 01:09:14.225329 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.225596 2026] [access_compat:error] [pid 263262:tid 263495] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.315417 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.315683 2026] [access_compat:error] [pid 263262:tid 263443] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.339062 2026] [security2:error] [pid 270884:tid 271134] [client 52.172.226.14:39875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/radio.php"] [unique_id "ary1miGeq9LtYp4zuPOUuwAAAHM"]
[Wed Sep 30 01:09:14.345006 2026] [qos:error] [pid 270884:tid 271074] [client 188.48.162.148:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1miGeq9LtYp4zuPOUvQAAADc
[Wed Sep 30 01:09:14.411925 2026] [security2:error] [pid 270884:tid 271059] [client 20.211.90.37:39950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1miGeq9LtYp4zuPOUvgAAACg"]
[Wed Sep 30 01:09:14.414264 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.414716 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.478059 2026] [security2:error] [pid 270884:tid 271066] [client 4.240.25.22:41700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ary1miGeq9LtYp4zuPOUwAAAAC8"]
[Wed Sep 30 01:09:14.478366 2026] [security2:error] [pid 270884:tid 271118] [client 202.179.95.79:63481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1miGeq9LtYp4zuPOUwQAAAGM"]
[Wed Sep 30 01:09:14.478487 2026] [security2:error] [pid 270884:tid 271118] [client 202.179.95.79:63481] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1miGeq9LtYp4zuPOUwQAAAGM"]
[Wed Sep 30 01:09:14.498976 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.499246 2026] [access_compat:error] [pid 263262:tid 263455] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.501616 2026] [http2:warn] [pid 263262:tid 263434] [client 40.77.167.224:62676] h2_stream(263262-70-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:14.513869 2026] [security2:error] [pid 270884:tid 271132] [client 20.219.2.60:26106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws75.php"] [unique_id "ary1miGeq9LtYp4zuPOUwwAAAHE"]
[Wed Sep 30 01:09:14.532831 2026] [security2:error] [pid 263262:tid 263476] [client 74.225.148.80:63602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/x33.php"] [unique_id "ary1mpEcZ_148BjP8ZPypQAAAV0"]
[Wed Sep 30 01:09:14.534454 2026] [security2:error] [pid 270884:tid 271072] [client 168.100.149.59:50908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/jquery/ui/mouse.min.js"] [unique_id "ary1miGeq9LtYp4zuPOUxAAANW4"]
[Wed Sep 30 01:09:14.559182 2026] [access_compat:error] [pid 270884:tid 271077] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:14.559447 2026] [access_compat:error] [pid 270884:tid 271077] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:14.565138 2026] [security2:error] [pid 270884:tid 271083] [client 20.213.164.196:21230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/sm.php"] [unique_id "ary1miGeq9LtYp4zuPOUxgAAAEA"]
[Wed Sep 30 01:09:14.588607 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.588886 2026] [access_compat:error] [pid 263262:tid 263460] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.644429 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.2.60:48076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/3586%20b64.php"] [unique_id "ary1miGeq9LtYp4zuPOUyQAAAGQ"]
[Wed Sep 30 01:09:14.668008 2026] [security2:error] [pid 263262:tid 263471] [client 20.70.173.30:2930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/edit.php"] [unique_id "ary1mpEcZ_148BjP8ZPyqgAAAVg"]
[Wed Sep 30 01:09:14.679857 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.680122 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.772115 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.772385 2026] [access_compat:error] [pid 263262:tid 263428] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.832362 2026] [access_compat:error] [pid 263262:tid 263442] [client 47.79.13.176:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:14.832636 2026] [access_compat:error] [pid 263262:tid 263442] [client 47.79.13.176:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:14.847309 2026] [security2:error] [pid 270884:tid 271074] [client 52.172.226.14:21638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/info.php"] [unique_id "ary1miGeq9LtYp4zuPOU1AAAADc"]
[Wed Sep 30 01:09:14.862973 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.863279 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.953457 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:14.953715 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:14.977035 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.2.60:26087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ms-edit.php"] [unique_id "ary1miGeq9LtYp4zuPOU2AAAACE"]
[Wed Sep 30 01:09:15.003096 2026] [security2:error] [pid 270884:tid 271078] [client 74.225.148.80:55241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/cae.php"] [unique_id "ary1myGeq9LtYp4zuPOU2QAAADs"]
[Wed Sep 30 01:09:15.009858 2026] [security2:error] [pid 270884:tid 271100] [client 103.168.67.253:36856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1myGeq9LtYp4zuPOU2gAAAFE"]
[Wed Sep 30 01:09:15.022966 2026] [security2:error] [pid 270884:tid 271106] [client 20.204.42.136:36724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/42b5827789index.php"] [unique_id "ary1myGeq9LtYp4zuPOU2wAAAFc"]
[Wed Sep 30 01:09:15.045223 2026] [security2:error] [pid 263262:tid 263495] [client 20.194.30.107:17381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/term.php"] [unique_id "ary1m5EcZ_148BjP8ZPyvwAAAXA"]
[Wed Sep 30 01:09:15.051372 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.051823 2026] [access_compat:error] [pid 263262:tid 263439] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.062931 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:15.063370 2026] [access_compat:error] [pid 270884:tid 271118] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:15.072897 2026] [security2:error] [pid 270884:tid 271134] [client 20.219.2.60:19453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/jk.php"] [unique_id "ary1myGeq9LtYp4zuPOU3gAAAHM"]
[Wed Sep 30 01:09:15.095261 2026] [security2:error] [pid 270884:tid 271100] [client 103.168.67.253:36856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1myGeq9LtYp4zuPOU2gAAAFE"]
[Wed Sep 30 01:09:15.137121 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.137391 2026] [access_compat:error] [pid 263262:tid 263505] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.137996 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.2.60:33830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws.php"] [unique_id "ary1myGeq9LtYp4zuPOU4wAAADc"]
[Wed Sep 30 01:09:15.190206 2026] [lsapi:warn] [pid 270884:tid 270983] [remote 74.7.243.20:40518] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: https://kshar.net/how-to-cook-tahchin-e-bademjan-video/
[Wed Sep 30 01:09:15.225998 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.226258 2026] [access_compat:error] [pid 263262:tid 263423] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.237969 2026] [security2:error] [pid 270884:tid 271087] [client 20.219.19.141:20913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/av.php"] [unique_id "ary1myGeq9LtYp4zuPOU6AAAAEQ"]
[Wed Sep 30 01:09:15.239992 2026] [security2:error] [pid 270884:tid 271072] [client 178.75.212.108:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1myGeq9LtYp4zuPOU5wAAADU"]
[Wed Sep 30 01:09:15.264272 2026] [qos:error] [pid 270884:tid 270906] [remote 189.245.67.52:40280] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.245.67.52, id=ary1myGeq9LtYp4zuPOU6QAAcRQ
[Wed Sep 30 01:09:15.316516 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.316780 2026] [access_compat:error] [pid 263262:tid 263432] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.335770 2026] [security2:error] [pid 263262:tid 263500] [client 20.70.173.30:38896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/key.php"] [unique_id "ary1m5EcZ_148BjP8ZPyyQAAAXU"]
[Wed Sep 30 01:09:15.364423 2026] [security2:error] [pid 263262:tid 263445] [client 52.172.226.14:39980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/alfanew.php"] [unique_id "ary1m5EcZ_148BjP8ZPyygAAAT4"]
[Wed Sep 30 01:09:15.394368 2026] [access_compat:error] [pid 270884:tid 271128] [client 47.79.13.28:34700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:15.394838 2026] [access_compat:error] [pid 270884:tid 271128] [client 47.79.13.28:34700] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:15.419580 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.420174 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.449006 2026] [security2:error] [pid 270884:tid 271078] [client 20.219.2.60:26108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/abc.php"] [unique_id "ary1myGeq9LtYp4zuPOU8wAAADs"]
[Wed Sep 30 01:09:15.471902 2026] [security2:error] [pid 270884:tid 271072] [client 74.225.148.80:16942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/txets.php"] [unique_id "ary1myGeq9LtYp4zuPOU9gAAADU"]
[Wed Sep 30 01:09:15.501793 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.502062 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.522681 2026] [security2:error] [pid 263262:tid 263418] [client 20.211.90.37:40427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1m5EcZ_148BjP8ZPy0gAAASM"]
[Wed Sep 30 01:09:15.542848 2026] [security2:error] [pid 263262:tid 263416] [client 20.28.180.172:62351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/s.php"] [unique_id "ary1m5EcZ_148BjP8ZPy0wAAASE"]
[Wed Sep 30 01:09:15.591958 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.592214 2026] [access_compat:error] [pid 263262:tid 263442] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.611749 2026] [security2:error] [pid 270884:tid 271056] [client 20.219.2.60:48127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bmi.php"] [unique_id "ary1myGeq9LtYp4zuPOU-gAAACU"]
[Wed Sep 30 01:09:15.682393 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.682731 2026] [access_compat:error] [pid 263262:tid 263469] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.726522 2026] [security2:error] [pid 270884:tid 271072] [client 4.240.25.22:12421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/k.php"] [unique_id "ary1myGeq9LtYp4zuPOU-wAAADU"]
[Wed Sep 30 01:09:15.772188 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.772434 2026] [access_compat:error] [pid 263262:tid 263422] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.772770 2026] [security2:error] [pid 270884:tid 271132] [client 93.152.47.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1myGeq9LtYp4zuPOU_wAAAHE"]
[Wed Sep 30 01:09:15.865740 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.866049 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:15.871747 2026] [security2:error] [pid 270884:tid 271054] [client 182.69.182.151:7399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1myGeq9LtYp4zuPOVAgAAACM"]
[Wed Sep 30 01:09:15.872313 2026] [security2:error] [pid 270884:tid 271054] [client 182.69.182.151:7399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1myGeq9LtYp4zuPOVAgAAACM"]
[Wed Sep 30 01:09:15.917566 2026] [security2:error] [pid 270884:tid 271087] [client 74.225.148.80:16763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wp-update.php"] [unique_id "ary1myGeq9LtYp4zuPOVBQAAAEQ"]
[Wed Sep 30 01:09:15.934664 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:15.934954 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:15.940279 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.2.60:26035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/motu.php"] [unique_id "ary1myGeq9LtYp4zuPOVBwAAACE"]
[Wed Sep 30 01:09:15.943368 2026] [security2:error] [pid 270884:tid 271072] [client 20.28.180.172:29586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/felnggg.php"] [unique_id "ary1myGeq9LtYp4zuPOVCAAAADU"]
[Wed Sep 30 01:09:15.955456 2026] [security2:error] [pid 270884:tid 271085] [client 52.172.226.14:39945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/inputs.php"] [unique_id "ary1myGeq9LtYp4zuPOVCQAAAEI"]
[Wed Sep 30 01:09:15.955683 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:15.956032 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.023898 2026] [security2:error] [pid 270884:tid 271028] [client 43.227.131.37:13310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1nCGeq9LtYp4zuPOVEAAAAAk"]
[Wed Sep 30 01:09:16.024010 2026] [security2:error] [pid 270884:tid 271028] [client 43.227.131.37:13310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1nCGeq9LtYp4zuPOVEAAAAAk"]
[Wed Sep 30 01:09:16.032132 2026] [security2:error] [pid 270884:tid 271020] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1nCGeq9LtYp4zuPOVEQAAAAE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:16.045248 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.045516 2026] [access_compat:error] [pid 263262:tid 263456] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.060449 2026] [security2:error] [pid 270884:tid 271078] [client 20.219.2.60:49296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bypltspd.php"] [unique_id "ary1nCGeq9LtYp4zuPOVEwAAADs"]
[Wed Sep 30 01:09:16.137816 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.138058 2026] [access_compat:error] [pid 263262:tid 263421] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.161566 2026] [security2:error] [pid 263262:tid 263273] [remote 57.141.14.110:35236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary1nJEcZ_148BjP8ZPy5wABVwk"]
[Wed Sep 30 01:09:16.185436 2026] [security2:error] [pid 270884:tid 271020] [client 104.223.10.31:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1nCGeq9LtYp4zuPOVHAAAAAE"]
[Wed Sep 30 01:09:16.228384 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.228753 2026] [access_compat:error] [pid 263262:tid 263461] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.230316 2026] [security2:error] [pid 270884:tid 271135] [client 45.138.12.41:59868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.xiw.xwy.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1nCGeq9LtYp4zuPOVHQAAAHQ"]
[Wed Sep 30 01:09:16.265444 2026] [security2:error] [pid 263262:tid 263407] [client 116.193.128.26:52734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1nJEcZ_148BjP8ZPy7AAAARg"]
[Wed Sep 30 01:09:16.265586 2026] [security2:error] [pid 263262:tid 263407] [client 116.193.128.26:52734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1nJEcZ_148BjP8ZPy7AAAARg"]
[Wed Sep 30 01:09:16.318865 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.319132 2026] [access_compat:error] [pid 263262:tid 263497] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.362474 2026] [qos:error] [pid 270884:tid 271014] [remote 82.33.4.52:43596] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=82.33.4.52, id=ary1nCGeq9LtYp4zuPOVHwAAcXw
[Wed Sep 30 01:09:16.389359 2026] [security2:error] [pid 263262:tid 263473] [client 74.225.148.80:16898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/177.php"] [unique_id "ary1nJEcZ_148BjP8ZPy7gAAAVo"]
[Wed Sep 30 01:09:16.392414 2026] [qos:error] [pid 270884:tid 271005] [remote 93.159.20.230:6933] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=93.159.20.230, id=ary1nCGeq9LtYp4zuPOVIQAAQnM
[Wed Sep 30 01:09:16.394977 2026] [qos:error] [pid 270884:tid 270890] [remote 86.22.30.210:59304] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.22.30.210, id=ary1nCGeq9LtYp4zuPOVIgAAdAQ
[Wed Sep 30 01:09:16.412050 2026] [security2:error] [pid 263262:tid 263418] [client 20.219.2.60:11863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/inputs.php"] [unique_id "ary1nJEcZ_148BjP8ZPy8gAAASM"]
[Wed Sep 30 01:09:16.420474 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.420937 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.424320 2026] [security2:error] [pid 263262:tid 263460] [client 20.219.2.60:26145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/inputs.php"] [unique_id "ary1nJEcZ_148BjP8ZPy8wAAAU0"]
[Wed Sep 30 01:09:16.432754 2026] [security2:error] [pid 263262:tid 263483] [client 20.194.30.107:30406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/admin.php"] [unique_id "ary1nJEcZ_148BjP8ZPy9QAAAWQ"]
[Wed Sep 30 01:09:16.450657 2026] [security2:error] [pid 270884:tid 271028] [client 45.138.12.32:43268] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.pye.zdx.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1nCGeq9LtYp4zuPOVJAAAAAk"]
[Wed Sep 30 01:09:16.491085 2026] [access_compat:error] [pid 270884:tid 271088] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:16.491523 2026] [access_compat:error] [pid 270884:tid 271088] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:16.501453 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.501719 2026] [access_compat:error] [pid 263262:tid 263405] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.517863 2026] [security2:error] [pid 263262:tid 263506] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1nJEcZ_148BjP8ZPy-wAAAXs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:16.526089 2026] [security2:error] [pid 270884:tid 271135] [client 20.219.2.60:45094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/shell.php"] [unique_id "ary1nCGeq9LtYp4zuPOVLQAAAHQ"]
[Wed Sep 30 01:09:16.531080 2026] [security2:error] [pid 270884:tid 271136] [client 168.100.149.99:37202] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/api-request.min.js"] [unique_id "ary1nCGeq9LtYp4zuPOVLgAAdRI"]
[Wed Sep 30 01:09:16.592698 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.592983 2026] [access_compat:error] [pid 263262:tid 263510] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.674418 2026] [access_compat:error] [pid 270884:tid 271078] [client 47.79.13.37:41530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:16.674689 2026] [access_compat:error] [pid 270884:tid 271078] [client 47.79.13.37:41530] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:16.681502 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.681845 2026] [access_compat:error] [pid 263262:tid 263462] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.731739 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:18940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/gcqoa.php"] [unique_id "ary1nCGeq9LtYp4zuPOVNAAAADU"]
[Wed Sep 30 01:09:16.747330 2026] [security2:error] [pid 263262:tid 263458] [client 223.235.102.107:32449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1nJEcZ_148BjP8ZPzAAAAAUs"]
[Wed Sep 30 01:09:16.747479 2026] [security2:error] [pid 263262:tid 263458] [client 223.235.102.107:32449] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1nJEcZ_148BjP8ZPzAAAAAUs"]
[Wed Sep 30 01:09:16.774069 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.774322 2026] [access_compat:error] [pid 263262:tid 263463] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.819022 2026] [security2:error] [pid 270884:tid 271115] [client 52.172.226.14:21396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/admin/function.php"] [unique_id "ary1nCGeq9LtYp4zuPOVNQAAAGA"]
[Wed Sep 30 01:09:16.850697 2026] [security2:error] [pid 270884:tid 271068] [client 74.225.148.80:16725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/ccc.php"] [unique_id "ary1nCGeq9LtYp4zuPOVNgAAADE"]
[Wed Sep 30 01:09:16.865511 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:16.865799 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:7168] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:16.938067 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.2.60:26024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp9.php"] [unique_id "ary1nCGeq9LtYp4zuPOVOQAAAGQ"]
[Wed Sep 30 01:09:16.986252 2026] [security2:error] [pid 263262:tid 263432] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1nJEcZ_148BjP8ZPzCwAAATE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:16.997306 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:16.997584 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:17.007152 2026] [security2:error] [pid 270884:tid 271135] [client 20.219.2.60:49341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-links-opml.php"] [unique_id "ary1nSGeq9LtYp4zuPOVPgAAAHQ"]
[Wed Sep 30 01:09:17.027601 2026] [security2:error] [pid 270884:tid 271106] [client 114.119.156.129:47103] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.helenloo.com"] [uri "/music"] [unique_id "ary1nSGeq9LtYp4zuPOVQQAAAFc"], referer: http://www.helenloo.com/yoga
[Wed Sep 30 01:09:17.101301 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.101743 2026] [access_compat:error] [pid 263262:tid 263407] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.133911 2026] [security2:error] [pid 263262:tid 263511] [client 106.214.2.47:16998] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1nZEcZ_148BjP8ZPzDwAAAYA"]
[Wed Sep 30 01:09:17.134029 2026] [security2:error] [pid 263262:tid 263511] [client 106.214.2.47:16998] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1nZEcZ_148BjP8ZPzDwAAAYA"]
[Wed Sep 30 01:09:17.158234 2026] [security2:error] [pid 270884:tid 271115] [client 4.240.25.22:13075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/baba.php"] [unique_id "ary1nSGeq9LtYp4zuPOVRgAAAGA"]
[Wed Sep 30 01:09:17.264900 2026] [security2:error] [pid 263262:tid 263473] [client 216.73.216.46:7168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1nZEcZ_148BjP8ZPzEQAAAVo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnkxOTU%3D
[Wed Sep 30 01:09:17.280899 2026] [qos:error] [pid 270884:tid 270892] [remote 153.66.235.6:57511] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=153.66.235.6, id=ary1nSGeq9LtYp4zuPOVTQAANQY
[Wed Sep 30 01:09:17.283060 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.283325 2026] [access_compat:error] [pid 263262:tid 263500] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.310967 2026] [security2:error] [pid 270884:tid 271029] [client 74.225.148.80:55285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/0xD.php"] [unique_id "ary1nSGeq9LtYp4zuPOVTgAAAAo"]
[Wed Sep 30 01:09:17.328325 2026] [qos:error] [pid 263262:tid 263385] [remote 172.87.18.83:21814] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.87.18.83, id=ary1nZEcZ_148BjP8ZPzEwABZHk
[Wed Sep 30 01:09:17.337036 2026] [security2:error] [pid 270884:tid 271113] [client 52.172.226.14:21422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/assets/index.php"] [unique_id "ary1nSGeq9LtYp4zuPOVTwAAAF4"]
[Wed Sep 30 01:09:17.353423 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.353734 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.373993 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.374434 2026] [access_compat:error] [pid 263262:tid 263457] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.426491 2026] [security2:error] [pid 270884:tid 271134] [client 20.219.2.60:26101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/public/vx.php"] [unique_id "ary1nSGeq9LtYp4zuPOVUwAAAHM"]
[Wed Sep 30 01:09:17.469733 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.470167 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.472969 2026] [security2:error] [pid 270884:tid 271036] [client 45.138.12.32:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hwq.gui.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1nSGeq9LtYp4zuPOVWwAAABE"]
[Wed Sep 30 01:09:17.479459 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.2.60:48069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary1nSGeq9LtYp4zuPOVXQAAAF4"]
[Wed Sep 30 01:09:17.479887 2026] [security2:error] [pid 270884:tid 271049] [client 195.174.1.14:38700] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1nCGeq9LtYp4zuPOVFgAAHnE"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:09:17.485636 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:17.485928 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:17.486795 2026] [security2:error] [pid 270884:tid 271028] [client 49.43.163.212:61592] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1nSGeq9LtYp4zuPOVXgAAAAk"]
[Wed Sep 30 01:09:17.486939 2026] [security2:error] [pid 270884:tid 271028] [client 49.43.163.212:61592] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1nSGeq9LtYp4zuPOVXgAAAAk"]
[Wed Sep 30 01:09:17.535483 2026] [qos:error] [pid 270884:tid 270968] [remote 97.85.90.173:55412] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=97.85.90.173, id=ary1nSGeq9LtYp4zuPOVZAAAe04
[Wed Sep 30 01:09:17.543337 2026] [security2:error] [pid 270884:tid 270977] [remote 57.141.14.37:23016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary1nSGeq9LtYp4zuPOVXwAAbVc"]
[Wed Sep 30 01:09:17.551340 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.551610 2026] [access_compat:error] [pid 263262:tid 263426] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.555072 2026] [security2:error] [pid 263262:tid 263471] [client 152.244.147.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1nZEcZ_148BjP8ZPzGwAAAVg"]
[Wed Sep 30 01:09:17.567761 2026] [security2:error] [pid 263262:tid 263460] [client 213.6.243.242:52637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.243.6.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cyprus2026eu.com"] [uri "/xmlrpc.php"] [unique_id "ary1nZEcZ_148BjP8ZPzGQAAAU0"]
[Wed Sep 30 01:09:17.567905 2026] [security2:error] [pid 263262:tid 263460] [client 213.6.243.242:52637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "cyprus2026eu.com"] [uri "/xmlrpc.php"] [unique_id "ary1nZEcZ_148BjP8ZPzGQAAAU0"]
[Wed Sep 30 01:09:17.578401 2026] [lsapi:warn] [pid 270884:tid 271043] [client 74.7.242.145:0] [host kshar.net] Backend log: PHP Warning:  Use of undefined constant user_level - assumed 'user_level' (this will throw an Error in a future version of PHP) in /home2/yourkat1/public_html/kshar/wp-content/plugins/ultimate-google-analytics/ultimate_ga.php on line 524\n, referer: https://kshar.net/how-to-cook-tahchin-e-bademjan-video/
[Wed Sep 30 01:09:17.582240 2026] [security2:error] [pid 270884:tid 271093] [client 20.198.74.230:24147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/js.php"] [unique_id "ary1nSGeq9LtYp4zuPOVZwAAAEo"]
[Wed Sep 30 01:09:17.642817 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.642852 2026] [security2:error] [pid 270884:tid 270909] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1nSGeq9LtYp4zuPOVaQAAQBc"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D15251
[Wed Sep 30 01:09:17.643113 2026] [access_compat:error] [pid 263262:tid 263489] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.707972 2026] [security2:error] [pid 270884:tid 271029] [client 20.194.96.176:12317] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.hamaraquetta.com"] [uri "/1.php"] [unique_id "ary1nSGeq9LtYp4zuPOVbAAAAAo"]
[Wed Sep 30 01:09:17.708121 2026] [security2:error] [pid 270884:tid 271029] [client 20.194.96.176:12317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/1.php"] [unique_id "ary1nSGeq9LtYp4zuPOVbAAAAAo"]
[Wed Sep 30 01:09:17.720755 2026] [security2:error] [pid 270884:tid 271134] [client 20.204.42.136:35729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1nSGeq9LtYp4zuPOVbQAAAHM"]
[Wed Sep 30 01:09:17.734410 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.734690 2026] [access_compat:error] [pid 263262:tid 263476] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.767115 2026] [security2:error] [pid 270884:tid 271136] [client 74.225.148.80:55233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/sallu.php"] [unique_id "ary1nSGeq9LtYp4zuPOVbgAAAHU"]
[Wed Sep 30 01:09:17.821853 2026] [security2:error] [pid 263262:tid 263442] [client 4.240.25.22:44357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/baru.php"] [unique_id "ary1nZEcZ_148BjP8ZPzIQAAATs"]
[Wed Sep 30 01:09:17.826285 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.826584 2026] [access_compat:error] [pid 263262:tid 263503] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.880685 2026] [security2:error] [pid 270884:tid 271094] [client 20.219.2.60:26084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/inege.php"] [unique_id "ary1nSGeq9LtYp4zuPOVcgAAAEs"]
[Wed Sep 30 01:09:17.898033 2026] [security2:error] [pid 270884:tid 271083] [client 52.172.226.14:21426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-admin/images/index.php"] [unique_id "ary1nSGeq9LtYp4zuPOVcwAAAEA"]
[Wed Sep 30 01:09:17.922398 2026] [security2:error] [pid 270884:tid 271115] [client 45.138.12.32:30692] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qle.trv.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1nSGeq9LtYp4zuPOVdQAAAGA"]
[Wed Sep 30 01:09:17.941221 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:17.941491 2026] [access_compat:error] [pid 263262:tid 263404] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:17.969075 2026] [security2:error] [pid 270884:tid 271134] [client 20.219.2.60:33817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws82.php"] [unique_id "ary1nSGeq9LtYp4zuPOVfAAAAHM"]
[Wed Sep 30 01:09:18.006907 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.007176 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.011385 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:18.011671 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:18.016062 2026] [qos:error] [pid 270884:tid 270923] [remote 95.91.210.115:32313] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=95.91.210.115, id=ary1niGeq9LtYp4zuPOVhQAAQCU
[Wed Sep 30 01:09:18.096529 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.096795 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.187663 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.188038 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.214296 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.19.141:20873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/dex.php"] [unique_id "ary1niGeq9LtYp4zuPOVkAAAADc"]
[Wed Sep 30 01:09:18.240968 2026] [security2:error] [pid 270884:tid 271113] [client 74.225.148.80:63601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/xwpg.php"] [unique_id "ary1niGeq9LtYp4zuPOVkQAAAF4"]
[Wed Sep 30 01:09:18.264668 2026] [qos:error] [pid 263262:tid 263389] [remote 79.177.145.155:55426] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=79.177.145.155, id=ary1npEcZ_148BjP8ZPzKwABa30
[Wed Sep 30 01:09:18.270554 2026] [access_compat:error] [pid 263262:tid 263514] [client 47.79.13.213:35778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:18.270820 2026] [access_compat:error] [pid 263262:tid 263514] [client 47.79.13.213:35778] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:18.273951 2026] [security2:error] [pid 270884:tid 271029] [client 82.102.18.222:59036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1niGeq9LtYp4zuPOVkwAAAAo"]
[Wed Sep 30 01:09:18.279588 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.280087 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.294102 2026] [security2:error] [pid 270884:tid 271134] [client 20.28.180.172:61234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/kj.php"] [unique_id "ary1niGeq9LtYp4zuPOVlwAAAHM"]
[Wed Sep 30 01:09:18.304458 2026] [security2:error] [pid 270884:tid 271072] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1niGeq9LtYp4zuPOVmAAAADU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:18.345338 2026] [security2:error] [pid 270884:tid 271132] [client 20.219.2.60:26072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/nw.php"] [unique_id "ary1niGeq9LtYp4zuPOVngAAAHE"]
[Wed Sep 30 01:09:18.403723 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.404170 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.438260 2026] [security2:error] [pid 263262:tid 263445] [client 20.219.2.60:33803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/new.php"] [unique_id "ary1npEcZ_148BjP8ZPzMAAAAT4"]
[Wed Sep 30 01:09:18.474446 2026] [security2:error] [pid 270884:tid 271020] [client 20.194.30.107:22991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1niGeq9LtYp4zuPOVoQAAAAE"]
[Wed Sep 30 01:09:18.476054 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.476519 2026] [access_compat:error] [pid 263262:tid 263509] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.477323 2026] [security2:error] [pid 270884:tid 271020] [client 52.172.226.14:21400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/default.php"] [unique_id "ary1niGeq9LtYp4zuPOVogAAAAE"]
[Wed Sep 30 01:09:18.485218 2026] [security2:error] [pid 270884:tid 271074] [client 103.168.67.253:63688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1niGeq9LtYp4zuPOVowAAADc"]
[Wed Sep 30 01:09:18.508033 2026] [security2:error] [pid 270884:tid 271074] [client 103.168.67.253:63688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1niGeq9LtYp4zuPOVowAAADc"]
[Wed Sep 30 01:09:18.522572 2026] [access_compat:error] [pid 270884:tid 271094] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:18.522839 2026] [access_compat:error] [pid 270884:tid 271094] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:18.546520 2026] [security2:error] [pid 270884:tid 271132] [client 168.100.149.66:57738] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/mystickyelements/dist/js/mailcheck.js"] [unique_id "ary1niGeq9LtYp4zuPOVqAAAcSI"]
[Wed Sep 30 01:09:18.552768 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.553046 2026] [access_compat:error] [pid 263262:tid 263502] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.643629 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.643910 2026] [access_compat:error] [pid 263262:tid 263418] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.646012 2026] [security2:error] [pid 270884:tid 271095] [client 152.56.240.85:57179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1nSGeq9LtYp4zuPOVcAAAAEw"]
[Wed Sep 30 01:09:18.711177 2026] [security2:error] [pid 270884:tid 271093] [client 74.225.148.80:63587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/flamini.php"] [unique_id "ary1niGeq9LtYp4zuPOVsAAAAEo"]
[Wed Sep 30 01:09:18.726214 2026] [qos:error] [pid 270884:tid 271083] [client 95.168.120.217:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1niGeq9LtYp4zuPOVsgAAAEA
[Wed Sep 30 01:09:18.735085 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.735339 2026] [access_compat:error] [pid 263262:tid 263416] [client 216.73.216.46:28330] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.803508 2026] [security2:error] [pid 270884:tid 271136] [client 223.181.60.167:2907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1niGeq9LtYp4zuPOVtQAAAHU"]
[Wed Sep 30 01:09:18.804289 2026] [security2:error] [pid 270884:tid 271136] [client 223.181.60.167:2907] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1niGeq9LtYp4zuPOVtQAAAHU"]
[Wed Sep 30 01:09:18.826303 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.826595 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.830123 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:26408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/t.php"] [unique_id "ary1niGeq9LtYp4zuPOVuAAAAEA"]
[Wed Sep 30 01:09:18.879875 2026] [qos:error] [pid 270884:tid 271095] [client 141.157.200.95:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1niGeq9LtYp4zuPOVuQAAAEw
[Wed Sep 30 01:09:18.916925 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:18.917112 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:45089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/press.php"] [unique_id "ary1niGeq9LtYp4zuPOVvQAAADU"]
[Wed Sep 30 01:09:18.917194 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:18.917248 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.13.78:41162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:18.917685 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.13.78:41162] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:18.972793 2026] [security2:error] [pid 270884:tid 271068] [client 103.168.67.253:63692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1niGeq9LtYp4zuPOVvgAAADE"]
[Wed Sep 30 01:09:18.972923 2026] [security2:error] [pid 270884:tid 271068] [client 103.168.67.253:63692] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "dklhardwareconstruction.com"] [uri "/register"] [unique_id "ary1niGeq9LtYp4zuPOVvgAAADE"]
[Wed Sep 30 01:09:18.989956 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:18.990242 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:19.003892 2026] [security2:error] [pid 270884:tid 271107] [client 52.172.226.14:21386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/lv.php"] [unique_id "ary1nyGeq9LtYp4zuPOVwgAAAFg"]
[Wed Sep 30 01:09:19.007745 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.008116 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.009932 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:19397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/plugin-editor.php"] [unique_id "ary1nyGeq9LtYp4zuPOVwwAAAEA"]
[Wed Sep 30 01:09:19.027309 2026] [security2:error] [pid 270884:tid 271115] [client 155.190.6.18:43860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1nyGeq9LtYp4zuPOVxAAAAGA"]
[Wed Sep 30 01:09:19.027415 2026] [security2:error] [pid 270884:tid 271115] [client 155.190.6.18:43860] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1nyGeq9LtYp4zuPOVxAAAAGA"]
[Wed Sep 30 01:09:19.032443 2026] [security2:error] [pid 270884:tid 271106] [client 82.102.18.222:59038] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1nyGeq9LtYp4zuPOVxgAAAFc"]
[Wed Sep 30 01:09:19.099592 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.099864 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.152867 2026] [security2:error] [pid 263262:tid 263495] [client 216.73.216.46:28330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1n5EcZ_148BjP8ZPzRQAAAXA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY0L25vZGUwL21lbW9yeTY4
[Wed Sep 30 01:09:19.176157 2026] [security2:error] [pid 263262:tid 263394] [client 74.225.148.80:16914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/themes.php"] [unique_id "ary1n5EcZ_148BjP8ZPzRgAAAQs"]
[Wed Sep 30 01:09:19.191425 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.191693 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.211939 2026] [security2:error] [pid 270884:tid 271028] [client 116.197.133.25:52426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1nyGeq9LtYp4zuPOVygAAAAk"]
[Wed Sep 30 01:09:19.212036 2026] [security2:error] [pid 270884:tid 271028] [client 116.197.133.25:52426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1nyGeq9LtYp4zuPOVygAAAAk"]
[Wed Sep 30 01:09:19.281797 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.282094 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.323727 2026] [security2:error] [pid 270884:tid 271020] [client 20.204.42.136:36719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/mmq.php"] [unique_id "ary1nyGeq9LtYp4zuPOVzwAAAAE"]
[Wed Sep 30 01:09:19.335958 2026] [security2:error] [pid 270884:tid 271132] [client 82.102.18.222:59046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1nyGeq9LtYp4zuPOV0AAAAHE"]
[Wed Sep 30 01:09:19.344448 2026] [security2:error] [pid 263262:tid 263423] [client 20.219.2.60:25999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary1n5EcZ_148BjP8ZPzSAAAASg"]
[Wed Sep 30 01:09:19.379246 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.379734 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.401895 2026] [security2:error] [pid 263262:tid 263505] [client 20.219.2.60:48101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary1n5EcZ_148BjP8ZPzTQAAAXo"]
[Wed Sep 30 01:09:19.436829 2026] [security2:error] [pid 263262:tid 263447] [client 103.159.192.142:53520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1n5EcZ_148BjP8ZPzUQAAAUA"]
[Wed Sep 30 01:09:19.437041 2026] [security2:error] [pid 263262:tid 263447] [client 103.159.192.142:53520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1n5EcZ_148BjP8ZPzUQAAAUA"]
[Wed Sep 30 01:09:19.476847 2026] [security2:error] [pid 263262:tid 263439] [client 20.194.30.107:17366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/f35.update.php"] [unique_id "ary1n5EcZ_148BjP8ZPzVgAAATg"]
[Wed Sep 30 01:09:19.501432 2026] [access_compat:error] [pid 270884:tid 271115] [client 47.79.13.53:34556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:19.501749 2026] [access_compat:error] [pid 270884:tid 271115] [client 47.79.13.53:34556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:19.515014 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:45566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.515302 2026] [access_compat:error] [pid 263262:tid 263433] [client 216.73.216.46:45566] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.528726 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:19.529153 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:19.544488 2026] [security2:error] [pid 270884:tid 271095] [client 20.211.90.37:40397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/atomlib.php"] [unique_id "ary1nyGeq9LtYp4zuPOV1wAAAEw"]
[Wed Sep 30 01:09:19.556017 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.556264 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.596626 2026] [security2:error] [pid 263262:tid 263506] [client 52.172.226.14:21377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary1n5EcZ_148BjP8ZPzXwAAAXs"]
[Wed Sep 30 01:09:19.633026 2026] [security2:error] [pid 270884:tid 271142] [client 74.225.148.80:16738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/0.php"] [unique_id "ary1nyGeq9LtYp4zuPOV3gAAAHs"]
[Wed Sep 30 01:09:19.646541 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.646920 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.675282 2026] [security2:error] [pid 270884:tid 271107] [client 82.102.18.222:59062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1nyGeq9LtYp4zuPOV4AAAAFg"]
[Wed Sep 30 01:09:19.718566 2026] [security2:error] [pid 270884:tid 271028] [client 20.70.173.30:38876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/BDKR28WP.php"] [unique_id "ary1nyGeq9LtYp4zuPOV5AAAAAk"]
[Wed Sep 30 01:09:19.737091 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.737361 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.828242 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.828505 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.832826 2026] [security2:error] [pid 270884:tid 271088] [client 20.219.2.60:40759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/public/ws49.php"] [unique_id "ary1nyGeq9LtYp4zuPOV6wAAAEU"]
[Wed Sep 30 01:09:19.913442 2026] [security2:error] [pid 270884:tid 271107] [client 45.138.12.43:52334] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zvh.jky.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1nyGeq9LtYp4zuPOV8QAAAFg"]
[Wed Sep 30 01:09:19.918951 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:19.919230 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:19.919487 2026] [security2:error] [pid 263262:tid 263497] [client 103.241.204.139:54836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1n5EcZ_148BjP8ZPzZwAAAXI"]
[Wed Sep 30 01:09:19.919578 2026] [security2:error] [pid 263262:tid 263497] [client 103.241.204.139:54836] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1n5EcZ_148BjP8ZPzZwAAAXI"]
[Wed Sep 30 01:09:19.978980 2026] [security2:error] [pid 270884:tid 271074] [client 82.102.18.222:59076] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1nyGeq9LtYp4zuPOV9QAAADc"]
[Wed Sep 30 01:09:20.009796 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:48106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1oCGeq9LtYp4zuPOV-AAAADU"]
[Wed Sep 30 01:09:20.011986 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.012471 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.013444 2026] [security2:error] [pid 263262:tid 263421] [client 45.138.12.32:30786] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qgm.pyc.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1oJEcZ_148BjP8ZPzaQAAASY"]
[Wed Sep 30 01:09:20.030621 2026] [access_compat:error] [pid 270884:tid 271142] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:20.031074 2026] [access_compat:error] [pid 270884:tid 271142] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:20.056539 2026] [access_compat:error] [pid 270884:tid 271063] [client 47.79.13.73:42996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:20.056839 2026] [access_compat:error] [pid 270884:tid 271063] [client 47.79.13.73:42996] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:20.086828 2026] [security2:error] [pid 270884:tid 271020] [client 74.225.148.80:17089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/opsh.php"] [unique_id "ary1oCGeq9LtYp4zuPOV_QAAAAE"]
[Wed Sep 30 01:09:20.099270 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.099555 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.143672 2026] [security2:error] [pid 263262:tid 263490] [client 20.211.90.37:40431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/a.php"] [unique_id "ary1oJEcZ_148BjP8ZPzbAAAAWs"]
[Wed Sep 30 01:09:20.150237 2026] [security2:error] [pid 270884:tid 271125] [client 20.213.164.196:21312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/mknobgkg.php"] [unique_id "ary1oCGeq9LtYp4zuPOWBwAAAGo"]
[Wed Sep 30 01:09:20.155040 2026] [qos:error] [pid 270884:tid 271132] [client 87.67.0.164:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1oCGeq9LtYp4zuPOWCAAAAHE
[Wed Sep 30 01:09:20.160203 2026] [security2:error] [pid 263262:tid 263505] [client 52.172.226.14:39888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/marijuana.php"] [unique_id "ary1oJEcZ_148BjP8ZPzbgAAAXo"]
[Wed Sep 30 01:09:20.211253 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.211694 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.285651 2026] [security2:error] [pid 270884:tid 271020] [client 20.204.42.136:59844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/fryvbbn.php"] [unique_id "ary1oCGeq9LtYp4zuPOWEAAAAAE"]
[Wed Sep 30 01:09:20.290668 2026] [security2:error] [pid 263262:tid 263478] [client 20.219.19.141:20850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/chosen.php"] [unique_id "ary1oJEcZ_148BjP8ZPzbwAAAV8"]
[Wed Sep 30 01:09:20.305132 2026] [security2:error] [pid 263262:tid 263509] [client 82.102.18.222:59078] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1oJEcZ_148BjP8ZPzcAAAAX4"]
[Wed Sep 30 01:09:20.314887 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:26051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gifclass.php"] [unique_id "ary1oCGeq9LtYp4zuPOWEwAAAHw"]
[Wed Sep 30 01:09:20.315392 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.315658 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.367711 2026] [security2:error] [pid 270884:tid 271142] [client 20.28.180.172:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws83.php"] [unique_id "ary1oCGeq9LtYp4zuPOWFgAAAHs"]
[Wed Sep 30 01:09:20.416178 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.416590 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.474748 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:48093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws57.php"] [unique_id "ary1oCGeq9LtYp4zuPOWHgAAADU"]
[Wed Sep 30 01:09:20.487704 2026] [core:error] [pid 263262:tid 263444] [client 20.70.173.30:56433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:20.487729 2026] [core:error] [pid 263262:tid 263444] [client 20.70.173.30:56433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:20.496799 2026] [access_compat:error] [pid 270884:tid 271093] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:20.497062 2026] [access_compat:error] [pid 270884:tid 271093] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:20.502573 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.503040 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.537566 2026] [security2:error] [pid 270884:tid 271075] [client 4.240.25.22:46334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/a.php"] [unique_id "ary1oCGeq9LtYp4zuPOWIwAAADg"]
[Wed Sep 30 01:09:20.546085 2026] [security2:error] [pid 270884:tid 271069] [client 168.100.149.12:59658] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-consent-mode-755f1678e260138d789e.js"] [unique_id "ary1oCGeq9LtYp4zuPOWJAAAMlI"]
[Wed Sep 30 01:09:20.558263 2026] [security2:error] [pid 263262:tid 263418] [client 74.225.148.80:16901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/pass4.php"] [unique_id "ary1oJEcZ_148BjP8ZPzegAAASM"]
[Wed Sep 30 01:09:20.564219 2026] [security2:error] [pid 270884:tid 271125] [client 20.28.180.172:34285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/aboutt.php"] [unique_id "ary1oCGeq9LtYp4zuPOWJgAAAGo"]
[Wed Sep 30 01:09:20.591027 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.591296 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.646764 2026] [security2:error] [pid 270884:tid 271116] [client 82.102.18.222:59080] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1oCGeq9LtYp4zuPOWLQAAAGE"]
[Wed Sep 30 01:09:20.682048 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.682315 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.754730 2026] [security2:error] [pid 270884:tid 271113] [client 52.172.226.14:39939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary1oCGeq9LtYp4zuPOWOAAAAF4"]
[Wed Sep 30 01:09:20.778238 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.778666 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.800407 2026] [security2:error] [pid 263262:tid 263441] [client 20.219.2.60:26114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/sa.php7"] [unique_id "ary1oJEcZ_148BjP8ZPzfwAAATo"]
[Wed Sep 30 01:09:20.827320 2026] [security2:error] [pid 270884:tid 270989] [remote 47.128.114.119:55764] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/ncat/3/pg/505/national-news"] [unique_id "ary1oCGeq9LtYp4zuPOWPQAAe2M"]
[Wed Sep 30 01:09:20.873242 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.873696 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:20.901751 2026] [security2:error] [pid 270884:tid 271020] [client 20.211.90.37:40438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/v.php"] [unique_id "ary1oCGeq9LtYp4zuPOWQAAAAAE"]
[Wed Sep 30 01:09:20.952146 2026] [security2:error] [pid 270884:tid 271038] [client 82.102.18.222:59092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1oCGeq9LtYp4zuPOWSAAAABM"]
[Wed Sep 30 01:09:20.956158 2026] [security2:error] [pid 263262:tid 263494] [client 20.219.2.60:33829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/.qiodetme.php"] [unique_id "ary1oJEcZ_148BjP8ZPzhQAAAW8"]
[Wed Sep 30 01:09:20.957476 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:20.957738 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.018380 2026] [access_compat:error] [pid 270884:tid 271142] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:21.018661 2026] [access_compat:error] [pid 270884:tid 271142] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:21.036790 2026] [security2:error] [pid 270884:tid 271113] [client 74.225.148.80:63574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/drttewyh.php"] [unique_id "ary1oSGeq9LtYp4zuPOWSwAAAF4"]
[Wed Sep 30 01:09:21.045465 2026] [security2:error] [pid 263262:tid 263428] [client 144.76.23.6:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "304"] [hostname "torquayfans.com"] [uri "/robots.txt"] [unique_id "ary1oZEcZ_148BjP8ZPzhwABLVU"], referer: http://torquayfans.com/robots.txt
[Wed Sep 30 01:09:21.051824 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.052092 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.131253 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:11852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp9.php"] [unique_id "ary1oSGeq9LtYp4zuPOWUwAAABo"]
[Wed Sep 30 01:09:21.143497 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.143765 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.202365 2026] [security2:error] [pid 270884:tid 271113] [client 20.198.74.230:24156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zuk.php"] [unique_id "ary1oSGeq9LtYp4zuPOWVgAAAF4"]
[Wed Sep 30 01:09:21.234428 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.234690 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.287211 2026] [security2:error] [pid 270884:tid 271050] [client 82.102.18.222:59108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1oSGeq9LtYp4zuPOWWQAAAB8"]
[Wed Sep 30 01:09:21.318891 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/plugin-install.php"] [unique_id "ary1oSGeq9LtYp4zuPOWWgAAABo"]
[Wed Sep 30 01:09:21.326963 2026] [security2:error] [pid 270884:tid 271132] [client 20.219.2.60:26173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/jp.php"] [unique_id "ary1oSGeq9LtYp4zuPOWXQAAAHE"]
[Wed Sep 30 01:09:21.328036 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.328433 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.424335 2026] [http2:info] [pid 276059:tid 276059] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:09:21.429220 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.429772 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.463977 2026] [security2:error] [pid 270884:tid 271045] [client 20.219.2.60:33841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/sodas.php"] [unique_id "ary1oSGeq9LtYp4zuPOWYwAAABo"]
[Wed Sep 30 01:09:21.502523 2026] [security2:error] [pid 270884:tid 271132] [client 52.172.226.14:39974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-content/403.php"] [unique_id "ary1oSGeq9LtYp4zuPOWZgAAAHE"]
[Wed Sep 30 01:09:21.504740 2026] [security2:error] [pid 270884:tid 271113] [client 74.225.148.80:63608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/sh.php"] [unique_id "ary1oSGeq9LtYp4zuPOWZwAAAF4"]
[Wed Sep 30 01:09:21.514302 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.514588 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.579871 2026] [access_compat:error] [pid 270884:tid 271129] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:21.580322 2026] [access_compat:error] [pid 270884:tid 271129] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:21.592000 2026] [security2:error] [pid 270884:tid 271113] [client 82.102.18.222:59122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1oSGeq9LtYp4zuPOWbgAAAF4"]
[Wed Sep 30 01:09:21.605738 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.606009 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.700596 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.701029 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.746770 2026] [security2:error] [pid 270884:tid 271128] [client 37.41.16.35:55962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1oSGeq9LtYp4zuPOWewAAAG0"]
[Wed Sep 30 01:09:21.746962 2026] [security2:error] [pid 270884:tid 271128] [client 37.41.16.35:55962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1oSGeq9LtYp4zuPOWewAAAG0"]
[Wed Sep 30 01:09:21.764750 2026] [qos:error] [pid 270884:tid 270943] [remote 96.60.68.79:53412] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=96.60.68.79, id=ary1oSGeq9LtYp4zuPOWfAAAHzk
[Wed Sep 30 01:09:21.787645 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.787932 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.799347 2026] [security2:error] [pid 270884:tid 271085] [client 20.219.2.60:40752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-good.php"] [unique_id "ary1oSGeq9LtYp4zuPOWfwAAAEI"]
[Wed Sep 30 01:09:21.888193 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.888478 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.892297 2026] [security2:error] [pid 270884:tid 271128] [client 45.138.12.32:43374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hxr.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1oSGeq9LtYp4zuPOWggAAAG0"]
[Wed Sep 30 01:09:21.907019 2026] [security2:error] [pid 270884:tid 271074] [client 82.102.18.222:59130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1oSGeq9LtYp4zuPOWgwAAADc"]
[Wed Sep 30 01:09:21.957992 2026] [security2:error] [pid 276059:tid 276278] [client 74.225.148.80:55249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/groud1.php"] [unique_id "ary1oXtqdHBwD77138ex9gAAAeI"]
[Wed Sep 30 01:09:21.958233 2026] [security2:error] [pid 276059:tid 276262] [client 20.219.2.60:48122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/yw5bi63u.php"] [unique_id "ary1oXtqdHBwD77138ex9wAAAdI"]
[Wed Sep 30 01:09:21.979048 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:21.979363 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:21.985605 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:21.986046 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:22.065876 2026] [security2:error] [pid 270884:tid 271128] [client 20.204.42.136:59893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/ff.update.php"] [unique_id "ary1oiGeq9LtYp4zuPOWiQAAAG0"]
[Wed Sep 30 01:09:22.071034 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.071410 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.073346 2026] [security2:error] [pid 270884:tid 271075] [client 94.26.106.73:50262] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/env-config.js"] [unique_id "ary1oiGeq9LtYp4zuPOWjwAAADg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.076059 2026] [security2:error] [pid 270884:tid 271069] [client 94.26.106.73:50281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/pi.php"] [unique_id "ary1oiGeq9LtYp4zuPOWkAAAADI"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.076074 2026] [security2:error] [pid 270884:tid 271107] [client 94.26.106.73:50282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/admin/phpinfo.php"] [unique_id "ary1oiGeq9LtYp4zuPOWiwAAAFg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.076244 2026] [security2:error] [pid 270884:tid 271129] [client 94.26.106.73:50275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/phpinfo.php"] [unique_id "ary1oiGeq9LtYp4zuPOWjgAAAG4"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.077382 2026] [security2:error] [pid 276059:tid 276313] [client 52.172.226.14:39998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/css/colors/coffee/index.php"] [unique_id "ary1ontqdHBwD77138eyAgAAAgU"]
[Wed Sep 30 01:09:22.079428 2026] [security2:error] [pid 270884:tid 271113] [client 4.240.25.22:8493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/adminan.php"] [unique_id "ary1oiGeq9LtYp4zuPOWkgAAAF4"]
[Wed Sep 30 01:09:22.083002 2026] [security2:error] [pid 276059:tid 276240] [client 94.26.106.73:50271] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/settings.js"] [unique_id "ary1ontqdHBwD77138eyBAAAAbw"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.083305 2026] [qos:error] [pid 276059:tid 276109] [remote 45.165.249.173:58002] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=45.165.249.173, id=ary1ontqdHBwD77138eyBQABwy0
[Wed Sep 30 01:09:22.083832 2026] [security2:error] [pid 276059:tid 276197] [client 94.26.106.73:50263] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/runtime-env.js"] [unique_id "ary1ontqdHBwD77138eyBgAAAZI"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.085284 2026] [security2:error] [pid 276059:tid 276243] [client 94.26.106.73:50280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/info.php"] [unique_id "ary1ontqdHBwD77138eyAAAAAb8"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.119143 2026] [security2:error] [pid 276059:tid 276244] [client 94.26.106.73:55176] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/.env.txt"] [unique_id "ary1ontqdHBwD77138eyDQAAAcA"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.124836 2026] [security2:error] [pid 276059:tid 276211] [client 94.26.106.73:55095] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/.env.dev"] [unique_id "ary1ontqdHBwD77138eyDwAAAZ8"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.126827 2026] [security2:error] [pid 276059:tid 276285] [client 94.26.106.73:55195] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/config/mail.php"] [unique_id "ary1ontqdHBwD77138eyEwAAAek"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.127453 2026] [security2:error] [pid 276059:tid 276282] [client 94.26.106.73:55203] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/public/.env"] [unique_id "ary1ontqdHBwD77138eyFAAAAeY"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.128344 2026] [security2:error] [pid 276059:tid 276287] [client 94.26.106.73:55372] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/wp-config.old.php"] [unique_id "ary1ontqdHBwD77138eyFgAAAes"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.129189 2026] [security2:error] [pid 276059:tid 276251] [client 94.26.106.73:55245] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/config/packages/swiftmailer.yaml"] [unique_id "ary1ontqdHBwD77138eyGQAAAcc"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.129235 2026] [security2:error] [pid 276059:tid 276252] [client 94.26.106.73:55325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/smtp.php"] [unique_id "ary1ontqdHBwD77138eyGAAAAcg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.129984 2026] [security2:error] [pid 276059:tid 276286] [client 94.26.106.73:55284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/config/sendgrid.php"] [unique_id "ary1ontqdHBwD77138eyGgAAAeo"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.130120 2026] [security2:error] [pid 276059:tid 276237] [client 94.26.106.73:55370] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "vettermysteryship.com"] [uri "/wp-config.php.bak"] [unique_id "ary1ontqdHBwD77138eyHAAAAbk"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.130552 2026] [security2:error] [pid 276059:tid 276254] [client 94.26.106.73:55345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/application/config/email.php"] [unique_id "ary1ontqdHBwD77138eyHQAAAco"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.130976 2026] [security2:error] [pid 276059:tid 276257] [client 94.26.106.73:55219] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/config/packages/mailer.yaml"] [unique_id "ary1ontqdHBwD77138eyHgAAAc0"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.130974 2026] [security2:error] [pid 276059:tid 276289] [client 94.26.106.73:55212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/.env~"] [unique_id "ary1ontqdHBwD77138eyGwAAAe0"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.131497 2026] [access_compat:error] [pid 276059:tid 276235] [client 47.79.13.177:38004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:22.131932 2026] [access_compat:error] [pid 276059:tid 276235] [client 47.79.13.177:38004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:22.134202 2026] [security2:error] [pid 276059:tid 276266] [client 94.26.106.73:55309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/mail.php"] [unique_id "ary1ontqdHBwD77138eyIAAAAdY"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.134275 2026] [security2:error] [pid 276059:tid 276220] [client 94.26.106.73:55272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/config/mailgun.php"] [unique_id "ary1ontqdHBwD77138eyIQAAAag"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.137388 2026] [security2:error] [pid 276059:tid 276261] [client 94.26.106.73:55328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/email.php"] [unique_id "ary1ontqdHBwD77138eyIgAAAdE"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.145453 2026] [security2:error] [pid 276059:tid 276239] [client 94.26.106.73:55386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/laravel/.env"] [unique_id "ary1ontqdHBwD77138eyIwAAAbs"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.145456 2026] [security2:error] [pid 276059:tid 276227] [client 94.26.106.73:55388] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/core/.env"] [unique_id "ary1ontqdHBwD77138eyJAAAAa8"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.145838 2026] [security2:error] [pid 276059:tid 276241] [client 94.26.106.73:55395] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/www/.env"] [unique_id "ary1ontqdHBwD77138eyJQAAAb0"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.146136 2026] [security2:error] [pid 276059:tid 276234] [client 94.26.106.73:55406] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/env.js"] [unique_id "ary1ontqdHBwD77138eyJgAAAbY"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.146975 2026] [security2:error] [pid 276059:tid 276233] [client 94.26.106.73:55381] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/backend/.env"] [unique_id "ary1ontqdHBwD77138eyJwAAAbU"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.149058 2026] [security2:error] [pid 276059:tid 276288] [client 94.26.106.73:55417] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/config/aws.yml"] [unique_id "ary1ontqdHBwD77138eyKQAAAew"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.149690 2026] [security2:error] [pid 276059:tid 276231] [client 94.26.106.73:61531] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/bootstrap/cache/config.php"] [unique_id "ary1ontqdHBwD77138eyKwAAAbM"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.150545 2026] [security2:error] [pid 276059:tid 276236] [client 94.26.106.73:61519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/wp-config.php"] [unique_id "ary1ontqdHBwD77138eyLAAAAbg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.152329 2026] [security2:error] [pid 276059:tid 276269] [client 94.26.106.73:55399] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/docker/.env"] [unique_id "ary1ontqdHBwD77138eyLQAAAdk"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.158161 2026] [security2:error] [pid 276059:tid 276255] [client 94.26.106.73:55915] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/api/.env"] [unique_id "ary1ontqdHBwD77138eyLgAAAcs"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.158169 2026] [security2:error] [pid 276059:tid 276267] [client 94.26.106.73:62678] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/.env.bak"] [unique_id "ary1ontqdHBwD77138eyMwAAAdc"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.158628 2026] [security2:error] [pid 276059:tid 276271] [client 94.26.106.73:62586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/.env"] [unique_id "ary1ontqdHBwD77138eyMAAAAds"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.158955 2026] [security2:error] [pid 276059:tid 276258] [client 94.26.106.73:62672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/.env.backup"] [unique_id "ary1ontqdHBwD77138eyLwAAAc4"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.160169 2026] [security2:error] [pid 276059:tid 276225] [client 94.26.106.73:60032] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/config/services.php"] [unique_id "ary1ontqdHBwD77138eyNAAAAa0"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.160223 2026] [security2:error] [pid 276059:tid 276284] [client 94.26.106.73:55410] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/storage/.env"] [unique_id "ary1ontqdHBwD77138eyMQAAAeg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.162180 2026] [security2:error] [pid 276059:tid 276230] [client 94.26.106.73:55384] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/app/.env"] [unique_id "ary1ontqdHBwD77138eyMgAAAbI"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.164691 2026] [security2:error] [pid 276059:tid 276249] [client 94.26.106.73:62656] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/.env.staging"] [unique_id "ary1ontqdHBwD77138eyOQAAAcU"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.165003 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.165398 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.168769 2026] [security2:error] [pid 276059:tid 276270] [client 94.26.106.73:62559] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/.env.swp"] [unique_id "ary1ontqdHBwD77138eyNgAAAdo"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.168939 2026] [security2:error] [pid 276059:tid 276250] [client 94.26.106.73:62679] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/.env.old"] [unique_id "ary1ontqdHBwD77138eyNwAAAcY"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.220603 2026] [security2:error] [pid 270884:tid 271069] [client 82.102.18.222:59134] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1oiGeq9LtYp4zuPOWmwAAADI"]
[Wed Sep 30 01:09:22.235210 2026] [security2:error] [pid 270884:tid 271107] [client 20.219.19.141:20859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/radio.php"] [unique_id "ary1oiGeq9LtYp4zuPOWnAAAAFg"]
[Wed Sep 30 01:09:22.259135 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.259418 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.270729 2026] [security2:error] [pid 276059:tid 276316] [client 94.26.106.73:55203] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/schema.prisma"] [unique_id "ary1ontqdHBwD77138eyPgAAAgg"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.289688 2026] [security2:error] [pid 276059:tid 276207] [client 94.26.106.73:55386] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/.env.dist"] [unique_id "ary1ontqdHBwD77138eyQQAAAZw"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.303053 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.2.60:40760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/a5.php"] [unique_id "ary1oiGeq9LtYp4zuPOWnwAAAHg"]
[Wed Sep 30 01:09:22.352544 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.352985 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.443065 2026] [security2:error] [pid 270884:tid 271060] [client 74.225.148.80:63593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/bro.php"] [unique_id "ary1oiGeq9LtYp4zuPOWpgAAACk"]
[Wed Sep 30 01:09:22.456591 2026] [security2:error] [pid 276059:tid 276232] [client 20.219.2.60:48081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws81.php"] [unique_id "ary1ontqdHBwD77138eyRQAAAbQ"]
[Wed Sep 30 01:09:22.497028 2026] [security2:error] [pid 276059:tid 276242] [client 201.32.215.149:7945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1ontqdHBwD77138eyRwAAAb4"]
[Wed Sep 30 01:09:22.497248 2026] [security2:error] [pid 276059:tid 276242] [client 201.32.215.149:7945] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1ontqdHBwD77138eyRwAAAb4"]
[Wed Sep 30 01:09:22.505644 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.506825 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.532033 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.532493 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.552829 2026] [security2:error] [pid 276059:tid 276199] [client 94.26.106.73:64410] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/docker-compose.yaml"] [unique_id "ary1ontqdHBwD77138eySwAAAZQ"], referer: https://www.google.com/
[Wed Sep 30 01:09:22.552955 2026] [security2:error] [pid 270884:tid 271004] [remote 168.100.149.117:44712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js"] [unique_id "ary1oiGeq9LtYp4zuPOWrAAAKXI"]
[Wed Sep 30 01:09:22.555212 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:22.555665 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:22.559176 2026] [security2:error] [pid 270884:tid 271129] [client 82.102.18.222:59146] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1oiGeq9LtYp4zuPOWrgAAAG4"]
[Wed Sep 30 01:09:22.621872 2026] [access_compat:error] [pid 276059:tid 276222] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.622273 2026] [access_compat:error] [pid 276059:tid 276222] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.627442 2026] [security2:error] [pid 270884:tid 271019] [client 52.172.226.14:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/css.php"] [unique_id "ary1oiGeq9LtYp4zuPOWsgAAAAA"]
[Wed Sep 30 01:09:22.711357 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.711799 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.787173 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:40729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/amp.php"] [unique_id "ary1oiGeq9LtYp4zuPOWugAAAAA"]
[Wed Sep 30 01:09:22.803180 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.803757 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.868350 2026] [security2:error] [pid 270884:tid 271085] [client 20.70.173.30:47851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/11.php"] [unique_id "ary1oiGeq9LtYp4zuPOWvQAAAEI"]
[Wed Sep 30 01:09:22.876172 2026] [security2:error] [pid 276059:tid 276264] [client 82.102.18.222:59150] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ynr.epx.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1ontqdHBwD77138eyUAAAAdQ"]
[Wed Sep 30 01:09:22.891610 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.892038 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.906087 2026] [security2:error] [pid 276059:tid 276310] [client 74.225.148.80:55293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/class-wp-http-client.php"] [unique_id "ary1ontqdHBwD77138eyVgAAAgI"]
[Wed Sep 30 01:09:22.980623 2026] [security2:error] [pid 276059:tid 276282] [client 20.204.42.136:61122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/lzlhihzi.php"] [unique_id "ary1ontqdHBwD77138eyWwAAAeY"]
[Wed Sep 30 01:09:22.983118 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:22.983412 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:22.986315 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:22.986608 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:22.986744 2026] [access_compat:error] [pid 270884:tid 271123] [client 47.79.13.73:38338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:22.987012 2026] [access_compat:error] [pid 270884:tid 271123] [client 47.79.13.73:38338] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.008025 2026] [security2:error] [pid 276059:tid 276252] [client 20.219.2.60:45068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/mh.php"] [unique_id "ary1o3tqdHBwD77138eyXQAAAcg"]
[Wed Sep 30 01:09:23.071544 2026] [security2:error] [pid 270884:tid 271101] [client 20.211.90.37:39944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/d2.php"] [unique_id "ary1oyGeq9LtYp4zuPOWxwAAAFI"]
[Wed Sep 30 01:09:23.077627 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.078336 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.082646 2026] [qos:error] [pid 270884:tid 270889] [remote 92.97.216.247:49956] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=92.97.216.247, id=ary1oyGeq9LtYp4zuPOWyAAAdQM
[Wed Sep 30 01:09:23.143750 2026] [security2:error] [pid 270884:tid 271107] [client 94.26.106.73:65045] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/compose.yml"] [unique_id "ary1oyGeq9LtYp4zuPOWygAAAFg"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.165723 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.166003 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.185492 2026] [security2:error] [pid 276059:tid 276227] [client 52.172.226.14:21683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-admin/user/about.php"] [unique_id "ary1o3tqdHBwD77138eyYQAAAa8"]
[Wed Sep 30 01:09:23.238900 2026] [security2:error] [pid 270884:tid 271019] [client 20.28.180.172:18350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws75.php"] [unique_id "ary1oyGeq9LtYp4zuPOW0QAAAAA"]
[Wed Sep 30 01:09:23.258427 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:40751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/abrand.php"] [unique_id "ary1oyGeq9LtYp4zuPOW0wAAAG0"]
[Wed Sep 30 01:09:23.260077 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.260369 2026] [access_compat:error] [pid 270884:tid 271136] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.278558 2026] [security2:error] [pid 276059:tid 276225] [client 94.26.106.73:55395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/config.inc.php"] [unique_id "ary1o3tqdHBwD77138eyYgAAAa0"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.291820 2026] [security2:error] [pid 276059:tid 276249] [client 94.26.106.73:55381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/config/database.php"] [unique_id "ary1o3tqdHBwD77138eyYwAAAcU"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.319948 2026] [qos:error] [pid 270884:tid 270896] [remote 80.217.64.64:56466] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=80.217.64.64, id=ary1oyGeq9LtYp4zuPOW1QAAcQo
[Wed Sep 30 01:09:23.323653 2026] [access_compat:error] [pid 270884:tid 271045] [client 47.79.13.73:38340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.323934 2026] [access_compat:error] [pid 270884:tid 271045] [client 47.79.13.73:38340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.349600 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.349857 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.372625 2026] [security2:error] [pid 276059:tid 276298] [client 74.225.148.80:55238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/zoo2.php"] [unique_id "ary1o3tqdHBwD77138eyZgAAAfY"]
[Wed Sep 30 01:09:23.380249 2026] [security2:error] [pid 276059:tid 276306] [client 94.26.106.73:62559] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/@fs/config/mail.php"] [unique_id "ary1o3tqdHBwD77138eybAAAAf4"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.380354 2026] [security2:error] [pid 276059:tid 276283] [client 94.26.106.73:55410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/config/app.php"] [unique_id "ary1o3tqdHBwD77138eyawAAAec"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.386445 2026] [security2:error] [pid 276059:tid 276305] [client 94.26.106.73:62672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/@fs/.env"] [unique_id "ary1o3tqdHBwD77138eyaAAAAf0"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.388733 2026] [security2:error] [pid 276059:tid 276306] [client 94.26.106.73:62679] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "vettermysteryship.com"] [uri "/@fs/.env.backup"] [unique_id "ary1o3tqdHBwD77138eybQAAAf4"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.404982 2026] [security2:error] [pid 276059:tid 276251] [client 31.189.214.146:60816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1o3tqdHBwD77138eybgAAAcc"]
[Wed Sep 30 01:09:23.405274 2026] [security2:error] [pid 276059:tid 276251] [client 31.189.214.146:60816] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1o3tqdHBwD77138eybgAAAcc"]
[Wed Sep 30 01:09:23.457891 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.458363 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.477500 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:23.477982 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:23.511894 2026] [access_compat:error] [pid 270884:tid 271020] [client 47.79.13.172:45480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.513637 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.2.60:45115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws88.php"] [unique_id "ary1oyGeq9LtYp4zuPOW4AAAADI"]
[Wed Sep 30 01:09:23.520558 2026] [access_compat:error] [pid 270884:tid 271020] [client 47.79.13.172:45480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.541123 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.541552 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.631593 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.632059 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.673800 2026] [security2:error] [pid 276059:tid 276253] [client 94.26.106.73:50305] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "vettermysteryship.com"] [uri "/@fs/wp-config.php"] [unique_id "ary1o3tqdHBwD77138eyhAAAAck"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.674074 2026] [security2:error] [pid 276059:tid 276259] [client 94.26.106.73:65094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/@fs/config/services.php"] [unique_id "ary1o3tqdHBwD77138eygwAAAc8"], referer: https://www.google.com/
[Wed Sep 30 01:09:23.718934 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.719238 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.724866 2026] [security2:error] [pid 276059:tid 276234] [client 45.138.12.32:43378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyb.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1o3tqdHBwD77138eyhwAAAbY"]
[Wed Sep 30 01:09:23.729499 2026] [security2:error] [pid 276059:tid 276235] [client 52.172.226.14:21414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/about.php"] [unique_id "ary1o3tqdHBwD77138eyiAAAAbc"]
[Wed Sep 30 01:09:23.753987 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:40728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/init.php"] [unique_id "ary1oyGeq9LtYp4zuPOW6gAAAG0"]
[Wed Sep 30 01:09:23.768665 2026] [security2:error] [pid 270884:tid 271045] [client 20.204.42.136:58558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/bfdghfgv.php"] [unique_id "ary1oyGeq9LtYp4zuPOW7AAAABo"]
[Wed Sep 30 01:09:23.775277 2026] [security2:error] [pid 270884:tid 271020] [client 20.204.42.136:35795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1oyGeq9LtYp4zuPOW7QAAAAE"]
[Wed Sep 30 01:09:23.814656 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.815110 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:65201] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.821893 2026] [security2:error] [pid 276059:tid 276267] [client 20.219.2.60:11664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/public/vx.php"] [unique_id "ary1o3tqdHBwD77138eyjQAAAdc"]
[Wed Sep 30 01:09:23.832422 2026] [security2:error] [pid 276059:tid 276258] [client 74.225.148.80:53927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/zoo1.php"] [unique_id "ary1o3tqdHBwD77138eyjgAAAc4"]
[Wed Sep 30 01:09:23.859072 2026] [security2:error] [pid 276059:tid 276230] [client 4.240.25.22:8415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/fling.php"] [unique_id "ary1o3tqdHBwD77138eykAAAAbI"]
[Wed Sep 30 01:09:23.878411 2026] [access_compat:error] [pid 276059:tid 276290] [client 47.79.13.58:56216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.878686 2026] [access_compat:error] [pid 276059:tid 276290] [client 47.79.13.58:56216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:23.901597 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.901909 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:23.923226 2026] [security2:error] [pid 276059:tid 276249] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1o3tqdHBwD77138eylAAAAcU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:23.933419 2026] [security2:error] [pid 276059:tid 276302] [client 20.70.173.30:25296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/w.php"] [unique_id "ary1o3tqdHBwD77138eylQAAAfo"]
[Wed Sep 30 01:09:23.946667 2026] [security2:error] [pid 276059:tid 276217] [client 103.159.192.142:53878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.192.159.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1o3tqdHBwD77138eymAAAAaU"]
[Wed Sep 30 01:09:23.946822 2026] [security2:error] [pid 276059:tid 276217] [client 103.159.192.142:53878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1o3tqdHBwD77138eymAAAAaU"]
[Wed Sep 30 01:09:23.949100 2026] [security2:error] [pid 276059:tid 276311] [client 20.70.173.30:56432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/c.php"] [unique_id "ary1o3tqdHBwD77138eymwAAAgM"]
[Wed Sep 30 01:09:23.983568 2026] [access_compat:error] [pid 270884:tid 271090] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:23.983838 2026] [access_compat:error] [pid 270884:tid 271090] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:23.993229 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:23.993529 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.006499 2026] [security2:error] [pid 270884:tid 271107] [client 20.213.164.196:55214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/dairg.php"] [unique_id "ary1pCGeq9LtYp4zuPOW-AAAAFg"]
[Wed Sep 30 01:09:24.057595 2026] [security2:error] [pid 270884:tid 271051] [client 203.122.45.246:52027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1pCGeq9LtYp4zuPOW-gAAACA"]
[Wed Sep 30 01:09:24.057772 2026] [security2:error] [pid 270884:tid 271051] [client 203.122.45.246:52027] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1pCGeq9LtYp4zuPOW-gAAACA"]
[Wed Sep 30 01:09:24.080754 2026] [security2:error] [pid 276059:tid 276289] [client 94.26.106.73:65225] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/web.config"] [unique_id "ary1pHtqdHBwD77138eypQAAAe0"], referer: https://www.google.com/
[Wed Sep 30 01:09:24.090303 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.090762 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.105544 2026] [security2:error] [pid 276059:tid 276237] [client 94.26.106.73:50299] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/sites/default/settings.php"] [unique_id "ary1pHtqdHBwD77138eypgAAAbk"], referer: https://www.google.com/
[Wed Sep 30 01:09:24.107441 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.19.141:20879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wp_blog_footer.php"] [unique_id "ary1pCGeq9LtYp4zuPOW_AAAAEA"]
[Wed Sep 30 01:09:24.144768 2026] [security2:error] [pid 276059:tid 276267] [client 20.219.2.60:48124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws86.php"] [unique_id "ary1pHtqdHBwD77138eyqgAAAdc"]
[Wed Sep 30 01:09:24.159177 2026] [security2:error] [pid 276059:tid 276282] [client 122.173.27.10:25477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1pHtqdHBwD77138eyqwAAAeY"]
[Wed Sep 30 01:09:24.159347 2026] [security2:error] [pid 276059:tid 276282] [client 122.173.27.10:25477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1pHtqdHBwD77138eyqwAAAeY"]
[Wed Sep 30 01:09:24.167569 2026] [security2:error] [pid 276059:tid 276220] [client 152.59.165.7:54061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1pHtqdHBwD77138eyrAAAAag"]
[Wed Sep 30 01:09:24.167690 2026] [security2:error] [pid 276059:tid 276220] [client 152.59.165.7:54061] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1pHtqdHBwD77138eyrAAAAag"]
[Wed Sep 30 01:09:24.178255 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.178616 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.211654 2026] [security2:error] [pid 270884:tid 271045] [client 4.196.65.241:27306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/3.php"] [unique_id "ary1pCGeq9LtYp4zuPOXAAAAABo"]
[Wed Sep 30 01:09:24.221455 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.2.60:26065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gettest.php"] [unique_id "ary1pCGeq9LtYp4zuPOXAQAAAHg"]
[Wed Sep 30 01:09:24.226016 2026] [security2:error] [pid 276059:tid 276310] [client 94.26.106.73:52059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/LocalSettings.php"] [unique_id "ary1pHtqdHBwD77138eyrgAAAgI"], referer: https://www.google.com/
[Wed Sep 30 01:09:24.231612 2026] [security2:error] [pid 270884:tid 271051] [client 216.73.216.46:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1pCGeq9LtYp4zuPOXBAAAACA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDkvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MC9kcml2ZXI%3D
[Wed Sep 30 01:09:24.283544 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.283719 2026] [access_compat:error] [pid 270884:tid 271085] [client 47.79.13.73:38356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:24.283981 2026] [access_compat:error] [pid 270884:tid 271085] [client 47.79.13.73:38356] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:24.283986 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.289198 2026] [security2:error] [pid 270884:tid 271057] [client 74.225.148.80:16739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/class-ajax.php"] [unique_id "ary1pCGeq9LtYp4zuPOXCQAAACY"]
[Wed Sep 30 01:09:24.327579 2026] [security2:error] [pid 270884:tid 271051] [client 52.172.226.14:39970] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/1.php"] [unique_id "ary1pCGeq9LtYp4zuPOXCgAAACA"]
[Wed Sep 30 01:09:24.327752 2026] [security2:error] [pid 270884:tid 271051] [client 52.172.226.14:39970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/1.php"] [unique_id "ary1pCGeq9LtYp4zuPOXCgAAACA"]
[Wed Sep 30 01:09:24.357117 2026] [qos:error] [pid 276059:tid 276302] [client 78.150.29.151:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1pHtqdHBwD77138eytQAAAfo
[Wed Sep 30 01:09:24.474854 2026] [http2:info] [pid 276620:tid 276620] h2_workers: created with min=128 max=192 idle_ms=600000
[Wed Sep 30 01:09:24.544946 2026] [security2:error] [pid 276059:tid 276237] [client 20.198.74.230:23568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/faze.php"] [unique_id "ary1pHtqdHBwD77138eywQAAAbk"]
[Wed Sep 30 01:09:24.556876 2026] [security2:error] [pid 276059:tid 276142] [remote 168.100.149.209:16648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/escape-html.min.js"] [unique_id "ary1pHtqdHBwD77138eywAAB-04"]
[Wed Sep 30 01:09:24.561954 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:24.562415 2026] [access_compat:error] [pid 270884:tid 271020] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:24.563142 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.563586 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.616263 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.616702 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.619544 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.620010 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.659253 2026] [security2:error] [pid 276059:tid 276278] [client 144.76.23.6:0] ModSecurity: Warning. Matched phrase "Trendiction" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "torquayfans.com"] [uri "/viewforum.php"] [unique_id "ary1pHtqdHBwD77138eywgAB4k8"], referer: http://torquayfans.com/viewforum.php?f=3
[Wed Sep 30 01:09:24.668618 2026] [security2:error] [pid 276620:tid 276766] [client 20.219.2.60:45000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/vx.php"] [unique_id "ary1pNPAdfEWqmGIkg1YyAAAAhs"]
[Wed Sep 30 01:09:24.693050 2026] [security2:error] [pid 276620:tid 276762] [client 20.219.2.60:26118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/myfile.php"] [unique_id "ary1pNPAdfEWqmGIkg1YygAAAhc"]
[Wed Sep 30 01:09:24.702936 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:8845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.703278 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:8845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.739840 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.740134 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.751729 2026] [security2:error] [pid 270884:tid 271090] [client 74.225.148.80:16751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gm.php"] [unique_id "ary1pCGeq9LtYp4zuPOXFwAAAEc"]
[Wed Sep 30 01:09:24.797174 2026] [security2:error] [pid 276059:tid 276203] [client 94.26.106.73:50336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.106.26.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vettermysteryship.com"] [uri "/app/etc/env.php"] [unique_id "ary1pHtqdHBwD77138eyygAAAZg"], referer: https://www.google.com/
[Wed Sep 30 01:09:24.797701 2026] [security2:error] [pid 276059:tid 276271] [client 45.138.12.32:30870] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qom.xio.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1pHtqdHBwD77138eyywAAAds"]
[Wed Sep 30 01:09:24.818130 2026] [security2:error] [pid 276059:tid 276299] [client 20.28.180.172:29574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/SbK7VBNnXJj.php"] [unique_id "ary1pHtqdHBwD77138eyzAAAAfc"]
[Wed Sep 30 01:09:24.829604 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.829906 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.868409 2026] [security2:error] [pid 276620:tid 276763] [client 52.172.226.14:39948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/marijuana.php"] [unique_id "ary1pNPAdfEWqmGIkg1YywAAAhg"]
[Wed Sep 30 01:09:24.892392 2026] [security2:error] [pid 270884:tid 271090] [client 20.194.30.107:23174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1pCGeq9LtYp4zuPOXGwAAAEc"]
[Wed Sep 30 01:09:24.922341 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:24.922788 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:24.954213 2026] [qos:error] [pid 270884:tid 270920] [remote 38.250.149.85:20395] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=38.250.149.85, id=ary1pCGeq9LtYp4zuPOXIAAAAyI
[Wed Sep 30 01:09:25.010985 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:8845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.011428 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:8845] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.011777 2026] [access_compat:error] [pid 270884:tid 271112] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:25.012045 2026] [access_compat:error] [pid 270884:tid 271112] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:25.073294 2026] [security2:error] [pid 276059:tid 276293] [client 20.211.90.37:40411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/xc.php"] [unique_id "ary1pXtqdHBwD77138ey1QAAAfE"]
[Wed Sep 30 01:09:25.098480 2026] [security2:error] [pid 270884:tid 271069] [client 202.179.95.79:64044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1pSGeq9LtYp4zuPOXIgAAADI"]
[Wed Sep 30 01:09:25.098596 2026] [security2:error] [pid 270884:tid 271069] [client 202.179.95.79:64044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1pSGeq9LtYp4zuPOXIgAAADI"]
[Wed Sep 30 01:09:25.109838 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.110101 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.117537 2026] [qos:error] [pid 276059:tid 276069] [remote 5.133.47.105:38564] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=5.133.47.105, id=ary1pXtqdHBwD77138ey1wABvwU
[Wed Sep 30 01:09:25.155571 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:26134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/sid3.php"] [unique_id "ary1pSGeq9LtYp4zuPOXJQAAACY"]
[Wed Sep 30 01:09:25.172419 2026] [security2:error] [pid 276059:tid 276227] [client 114.119.143.152:54271] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.fantastictradeshows.com"] [uri "/files/small_734.png"] [unique_id "ary1pXtqdHBwD77138ey2AAAAa8"], referer: http://www.fantastictradeshows.com/files/small_734.png
[Wed Sep 30 01:09:25.173616 2026] [security2:error] [pid 276620:tid 276781] [client 20.219.2.60:18834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/profile.php"] [unique_id "ary1pdPAdfEWqmGIkg1Y0QAAAio"]
[Wed Sep 30 01:09:25.198364 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.198641 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.216294 2026] [security2:error] [pid 276059:tid 276235] [client 74.225.148.80:63575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/class-wp-site-list.php"] [unique_id "ary1pXtqdHBwD77138ey2wAAAbc"]
[Wed Sep 30 01:09:25.225759 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:48125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/dass.php"] [unique_id "ary1pSGeq9LtYp4zuPOXJgAAAFc"]
[Wed Sep 30 01:09:25.291414 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.291772 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.388973 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.389417 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.481922 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.482334 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.520026 2026] [security2:error] [pid 270884:tid 271080] [client 52.172.226.14:21390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/about/function.php"] [unique_id "ary1pSGeq9LtYp4zuPOXNAAAAD0"]
[Wed Sep 30 01:09:25.538237 2026] [security2:error] [pid 270884:tid 271070] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1pSGeq9LtYp4zuPOXNQAAADM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:25.545184 2026] [access_compat:error] [pid 270884:tid 271069] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:25.545636 2026] [access_compat:error] [pid 270884:tid 271069] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:25.559015 2026] [security2:error] [pid 276620:tid 276798] [client 216.73.216.46:8845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1pdPAdfEWqmGIkg1Y2gAAAjs"]
[Wed Sep 30 01:09:25.643649 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.2.60:40747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/666.php"] [unique_id "ary1pSGeq9LtYp4zuPOXPAAAACA"]
[Wed Sep 30 01:09:25.656120 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.656385 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:30647] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.672234 2026] [security2:error] [pid 270884:tid 271074] [client 74.225.148.80:16944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/asd2.php"] [unique_id "ary1pSGeq9LtYp4zuPOXPgAAADc"]
[Wed Sep 30 01:09:25.678717 2026] [security2:error] [pid 270884:tid 271109] [client 4.240.25.22:46311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/m.php"] [unique_id "ary1pSGeq9LtYp4zuPOXPwAAAFo"]
[Wed Sep 30 01:09:25.728143 2026] [security2:error] [pid 276059:tid 276273] [client 151.249.174.2:3195] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "reasonablerenovations.ca"] [uri "/wp-login.php"] [unique_id "ary1o3tqdHBwD77138eyggAB3T8"], referer: https://reasonablerenovations.ca/wp-login.php
[Wed Sep 30 01:09:25.748412 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.748692 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.762105 2026] [security2:error] [pid 270884:tid 271112] [client 20.219.2.60:33805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/s.php"] [unique_id "ary1pSGeq9LtYp4zuPOXQgAAAF0"]
[Wed Sep 30 01:09:25.825113 2026] [security2:error] [pid 270884:tid 271060] [client 151.255.104.184:10216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.104.255.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "compressionstockings.ca"] [uri "/xmlrpc.php"] [unique_id "ary1pSGeq9LtYp4zuPOXRAAAACk"]
[Wed Sep 30 01:09:25.825237 2026] [security2:error] [pid 270884:tid 271060] [client 151.255.104.184:10216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "compressionstockings.ca"] [uri "/xmlrpc.php"] [unique_id "ary1pSGeq9LtYp4zuPOXRAAAACk"]
[Wed Sep 30 01:09:25.839199 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.839459 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.853009 2026] [security2:error] [pid 276059:tid 276304] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pXtqdHBwD77138ey5AAAAfw"]
[Wed Sep 30 01:09:25.897877 2026] [security2:error] [pid 270884:tid 271050] [client 4.240.25.22:8409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/abcd.php"] [unique_id "ary1pSGeq9LtYp4zuPOXRgAAAB8"]
[Wed Sep 30 01:09:25.931028 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:25.931313 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:25.931602 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.2.60:11896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/inege.php"] [unique_id "ary1pSGeq9LtYp4zuPOXRwAAAGQ"]
[Wed Sep 30 01:09:25.971149 2026] [access_compat:error] [pid 270884:tid 271107] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:25.971578 2026] [access_compat:error] [pid 270884:tid 271107] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:26.003696 2026] [security2:error] [pid 276059:tid 276243] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pXtqdHBwD77138ey6AAAAb8"]
[Wed Sep 30 01:09:26.017130 2026] [security2:error] [pid 270884:tid 271022] [client 52.172.226.14:21431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/simple.php"] [unique_id "ary1piGeq9LtYp4zuPOXTwAAAAM"]
[Wed Sep 30 01:09:26.023267 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.023530 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.064977 2026] [security2:error] [pid 270884:tid 271097] [client 20.204.42.136:57819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/Dss.php"] [unique_id "ary1piGeq9LtYp4zuPOXVAAAAE4"]
[Wed Sep 30 01:09:26.070868 2026] [security2:error] [pid 276059:tid 276316] [client 216.73.216.46:30647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1pntqdHBwD77138ey6wAAAgg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTcvbm9kZTAvbWVtb3J5MTg2
[Wed Sep 30 01:09:26.118945 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.119448 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.143868 2026] [security2:error] [pid 276059:tid 276202] [client 74.225.148.80:17112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/cdc.php"] [unique_id "ary1pntqdHBwD77138ey7wAAAZc"]
[Wed Sep 30 01:09:26.147754 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.2.60:26088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xxw.php"] [unique_id "ary1piGeq9LtYp4zuPOXWgAAADI"]
[Wed Sep 30 01:09:26.154864 2026] [security2:error] [pid 276059:tid 276287] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pntqdHBwD77138ey7AAAAes"]
[Wed Sep 30 01:09:26.199715 2026] [security2:error] [pid 270884:tid 271085] [client 47.15.235.137:62466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.235.15.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1piGeq9LtYp4zuPOXXwAAAEI"]
[Wed Sep 30 01:09:26.200121 2026] [security2:error] [pid 270884:tid 271085] [client 47.15.235.137:62466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1piGeq9LtYp4zuPOXXwAAAEI"]
[Wed Sep 30 01:09:26.206220 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.206496 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.208570 2026] [security2:error] [pid 270884:tid 271107] [client 212.200.255.44:35402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.255.200.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pedorthistontario.org"] [uri "/wp-login.php"] [unique_id "ary1piGeq9LtYp4zuPOXXQAAAFg"]
[Wed Sep 30 01:09:26.229085 2026] [security2:error] [pid 276620:tid 276826] [client 20.219.2.60:33850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/kj.php"] [unique_id "ary1ptPAdfEWqmGIkg1Y4wAAAlc"]
[Wed Sep 30 01:09:26.235959 2026] [security2:error] [pid 270884:tid 271049] [client 20.28.180.172:18314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ms-edit.php"] [unique_id "ary1piGeq9LtYp4zuPOXZAAAAB4"]
[Wed Sep 30 01:09:26.284818 2026] [security2:error] [pid 276059:tid 276267] [client 20.211.90.37:39971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/g.php"] [unique_id "ary1pntqdHBwD77138ey9AAAAdc"]
[Wed Sep 30 01:09:26.293262 2026] [security2:error] [pid 276059:tid 276231] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pntqdHBwD77138ey8wAAAbM"]
[Wed Sep 30 01:09:26.296201 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.296475 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.333078 2026] [security2:error] [pid 270884:tid 271109] [client 45.138.12.43:52488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.zvh.jky.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1piGeq9LtYp4zuPOXZwAAAFo"]
[Wed Sep 30 01:09:26.354573 2026] [security2:error] [pid 276059:tid 276244] [client 43.104.4.179:8936] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary1pntqdHBwD77138ey9gAAAcA"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:09:26.403328 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.408486 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.441849 2026] [security2:error] [pid 276059:tid 276104] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1pntqdHBwD77138ey-AABkig"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=224545
[Wed Sep 30 01:09:26.441895 2026] [security2:error] [pid 276059:tid 276104] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1pntqdHBwD77138ey-AABkig"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?p=224545
[Wed Sep 30 01:09:26.448447 2026] [security2:error] [pid 270884:tid 271132] [client 182.69.182.151:16941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1piGeq9LtYp4zuPOXcgAAAHE"]
[Wed Sep 30 01:09:26.448613 2026] [security2:error] [pid 270884:tid 271132] [client 182.69.182.151:16941] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1piGeq9LtYp4zuPOXcgAAAHE"]
[Wed Sep 30 01:09:26.467126 2026] [security2:error] [pid 270884:tid 271141] [client 43.104.4.189:26284] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary1piGeq9LtYp4zuPOXcwAAAHo"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:09:26.493409 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.493866 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.508134 2026] [qos:error] [pid 276620:tid 276643] [remote 172.56.105.5:38386] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.56.105.5, id=ary1ptPAdfEWqmGIkg1Y6AACSg0
[Wed Sep 30 01:09:26.532742 2026] [security2:error] [pid 276059:tid 276219] [client 168.100.149.62:30090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/dist/hooks.min.js"] [unique_id "ary1pntqdHBwD77138ey_AABp1s"]
[Wed Sep 30 01:09:26.551156 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:26.551597 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:26.571418 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.571688 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.606422 2026] [security2:error] [pid 276059:tid 276248] [client 74.225.148.80:55271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gulu.php"] [unique_id "ary1pntqdHBwD77138ey_wAAAcQ"]
[Wed Sep 30 01:09:26.627324 2026] [security2:error] [pid 270884:tid 271042] [client 52.172.226.14:21393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/goat1.php"] [unique_id "ary1piGeq9LtYp4zuPOXdwAAABc"]
[Wed Sep 30 01:09:26.629422 2026] [security2:error] [pid 276059:tid 276215] [client 20.219.2.60:26076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-png.php"] [unique_id "ary1pntqdHBwD77138ezAAAAAaM"]
[Wed Sep 30 01:09:26.662726 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.663076 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.736827 2026] [security2:error] [pid 276059:tid 276290] [client 161.123.180.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1pntqdHBwD77138ezBAAAAe4"]
[Wed Sep 30 01:09:26.740187 2026] [security2:error] [pid 276059:tid 276220] [client 20.28.180.172:29440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/css.php"] [unique_id "ary1pntqdHBwD77138ezBQAAAag"]
[Wed Sep 30 01:09:26.743116 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:33837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws83.php"] [unique_id "ary1piGeq9LtYp4zuPOXfwAAAEA"]
[Wed Sep 30 01:09:26.752848 2026] [security2:error] [pid 270884:tid 271132] [client 20.70.173.30:8139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/adminan.php"] [unique_id "ary1piGeq9LtYp4zuPOXgAAAAHE"]
[Wed Sep 30 01:09:26.757052 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.757487 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.760364 2026] [security2:error] [pid 270884:tid 271116] [client 161.118.214.16:50088] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lyj.buu.mybluehost.me"] [uri "/"] [unique_id "ary1piGeq9LtYp4zuPOXfgAAAGE"]
[Wed Sep 30 01:09:26.769705 2026] [security2:error] [pid 276059:tid 276269] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pntqdHBwD77138ezBwAAAdk"]
[Wed Sep 30 01:09:26.787771 2026] [security2:error] [pid 276059:tid 276250] [client 45.138.12.43:23022] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zzv.tyy.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1pntqdHBwD77138ezCAAAAcY"]
[Wed Sep 30 01:09:26.814287 2026] [security2:error] [pid 276059:tid 276284] [client 20.70.173.30:48075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/edit.php"] [unique_id "ary1pntqdHBwD77138ezCgAAAeg"]
[Wed Sep 30 01:09:26.845308 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.845584 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.881283 2026] [security2:error] [pid 276059:tid 276217] [client 4.240.25.22:8500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/w.php"] [unique_id "ary1pntqdHBwD77138ezDAAAAaU"]
[Wed Sep 30 01:09:26.893701 2026] [security2:error] [pid 276059:tid 276255] [client 45.138.12.32:49440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iih.tjl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1pntqdHBwD77138ezDQAAAcs"]
[Wed Sep 30 01:09:26.906217 2026] [security2:error] [pid 276059:tid 276268] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1pntqdHBwD77138ezDgAAAdg"]
[Wed Sep 30 01:09:26.934861 2026] [security2:error] [pid 270884:tid 271019] [client 20.70.173.30:33311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/sb.php"] [unique_id "ary1piGeq9LtYp4zuPOXigAAAAA"]
[Wed Sep 30 01:09:26.939252 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:26.939519 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:26.942920 2026] [security2:error] [pid 276059:tid 276289] [client 43.227.131.37:47071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1pntqdHBwD77138ezEQAAAe0"]
[Wed Sep 30 01:09:26.943034 2026] [security2:error] [pid 276059:tid 276289] [client 43.227.131.37:47071] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1pntqdHBwD77138ezEQAAAe0"]
[Wed Sep 30 01:09:26.949700 2026] [security2:error] [pid 276620:tid 276821] [client 20.211.90.37:40439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/gmo.php"] [unique_id "ary1ptPAdfEWqmGIkg1Y7AAAAlI"]
[Wed Sep 30 01:09:26.982984 2026] [security2:error] [pid 276620:tid 276830] [client 116.193.128.26:53384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ptPAdfEWqmGIkg1Y7QAAAls"]
[Wed Sep 30 01:09:26.983305 2026] [security2:error] [pid 276620:tid 276830] [client 116.193.128.26:53384] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1ptPAdfEWqmGIkg1Y7QAAAls"]
[Wed Sep 30 01:09:27.015654 2026] [security2:error] [pid 276059:tid 276297] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1p3tqdHBwD77138ezFAAAAfU"]
[Wed Sep 30 01:09:27.029909 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.030212 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.056102 2026] [qos:error] [pid 276620:tid 276646] [remote 86.143.33.111:54312] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.143.33.111, id=ary1p9PAdfEWqmGIkg1Y8AACaRA
[Wed Sep 30 01:09:27.076633 2026] [security2:error] [pid 270884:tid 271085] [client 74.225.148.80:55273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/bala.php"] [unique_id "ary1pyGeq9LtYp4zuPOXkQAAAEI"]
[Wed Sep 30 01:09:27.083066 2026] [access_compat:error] [pid 270884:tid 271109] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:27.083336 2026] [access_compat:error] [pid 270884:tid 271109] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:27.107672 2026] [security2:error] [pid 276059:tid 276208] [client 20.219.2.60:61485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/222.php"] [unique_id "ary1p3tqdHBwD77138ezFgAAAZ0"]
[Wed Sep 30 01:09:27.114311 2026] [security2:error] [pid 276059:tid 276200] [client 20.219.2.60:18817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/class-t.api.php"] [unique_id "ary1p3tqdHBwD77138ezGAAAAZU"]
[Wed Sep 30 01:09:27.124511 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.124954 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.131568 2026] [security2:error] [pid 270884:tid 271090] [client 4.240.25.22:41672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/blurbs.php"] [unique_id "ary1pyGeq9LtYp4zuPOXlQAAAEc"]
[Wed Sep 30 01:09:27.141293 2026] [security2:error] [pid 270884:tid 271060] [client 20.219.2.60:11850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/nw.php"] [unique_id "ary1pyGeq9LtYp4zuPOXlwAAACk"]
[Wed Sep 30 01:09:27.153049 2026] [security2:error] [pid 270884:tid 271119] [client 52.172.226.14:39975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/chosen.php"] [unique_id "ary1pyGeq9LtYp4zuPOXmAAAAGQ"]
[Wed Sep 30 01:09:27.210369 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.210817 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.262593 2026] [security2:error] [pid 276059:tid 276300] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1p3tqdHBwD77138ezGgAAAfg"]
[Wed Sep 30 01:09:27.299504 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.299760 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.322333 2026] [security2:error] [pid 276059:tid 276262] [client 20.219.2.60:45097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws75.php"] [unique_id "ary1p3tqdHBwD77138ezHAAAAdI"]
[Wed Sep 30 01:09:27.405078 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.405590 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.411672 2026] [security2:error] [pid 276059:tid 276273] [client 20.204.42.136:59865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/uploaxa1.php"] [unique_id "ary1p3tqdHBwD77138ezIAAAAd0"]
[Wed Sep 30 01:09:27.488416 2026] [security2:error] [pid 270884:tid 271119] [client 20.213.164.196:55185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/dronishness.php"] [unique_id "ary1pyGeq9LtYp4zuPOXrAAAAGQ"]
[Wed Sep 30 01:09:27.488936 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.489374 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.520250 2026] [security2:error] [pid 270884:tid 271132] [client 20.204.42.136:35778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/gecho.php"] [unique_id "ary1pyGeq9LtYp4zuPOXrQAAAHE"]
[Wed Sep 30 01:09:27.554171 2026] [security2:error] [pid 270884:tid 271057] [client 74.225.148.80:64433] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.ferrari250.com"] [uri "/c99.php"] [unique_id "ary1pyGeq9LtYp4zuPOXrwAAACY"]
[Wed Sep 30 01:09:27.574406 2026] [security2:error] [pid 276059:tid 276263] [client 94.26.106.73:55384] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/wp-content/themes/twentyfifteen/js/html5.js"] [unique_id "ary1p3tqdHBwD77138ezJQAAAdM"], referer: https://www.google.com/
[Wed Sep 30 01:09:27.575825 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.576093 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.579163 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:27.579614 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:27.579724 2026] [security2:error] [pid 270884:tid 271116] [client 20.219.2.60:26103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-blog.php"] [unique_id "ary1pyGeq9LtYp4zuPOXsgAAAGE"]
[Wed Sep 30 01:09:27.600690 2026] [security2:error] [pid 270884:tid 271049] [client 20.194.30.107:23206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/xiugai.php"] [unique_id "ary1pyGeq9LtYp4zuPOXtAAAAB4"]
[Wed Sep 30 01:09:27.613154 2026] [security2:error] [pid 270884:tid 271121] [client 20.211.90.37:40407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/11.php"] [unique_id "ary1pyGeq9LtYp4zuPOXtQAAAGY"]
[Wed Sep 30 01:09:27.663509 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.663792 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.674902 2026] [mime:warn] [pid 270884:tid 271101] AH01602: Cannot get media parameter.
[Wed Sep 30 01:09:27.689079 2026] [security2:error] [pid 270884:tid 271132] [client 20.28.180.172:62375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/abc.php"] [unique_id "ary1pyGeq9LtYp4zuPOXuQAAAHE"]
[Wed Sep 30 01:09:27.692975 2026] [security2:error] [pid 270884:tid 271069] [client 52.172.226.14:21432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-cron.php"] [unique_id "ary1pyGeq9LtYp4zuPOXugAAADI"]
[Wed Sep 30 01:09:27.748362 2026] [security2:error] [pid 270884:tid 271019] [client 223.235.102.107:15080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1pyGeq9LtYp4zuPOXvQAAAAA"]
[Wed Sep 30 01:09:27.749336 2026] [security2:error] [pid 270884:tid 271019] [client 223.235.102.107:15080] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1pyGeq9LtYp4zuPOXvQAAAAA"]
[Wed Sep 30 01:09:27.755848 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.756120 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.846464 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.846730 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.864388 2026] [security2:error] [pid 276059:tid 276238] [client 20.219.2.60:33811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ms-edit.php"] [unique_id "ary1p3tqdHBwD77138ezLQAAAbo"]
[Wed Sep 30 01:09:27.937928 2026] [security2:error] [pid 270884:tid 271042] [client 106.214.2.47:29746] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1pyGeq9LtYp4zuPOXygAAABc"]
[Wed Sep 30 01:09:27.938066 2026] [security2:error] [pid 270884:tid 271042] [client 106.214.2.47:29746] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1pyGeq9LtYp4zuPOXygAAABc"]
[Wed Sep 30 01:09:27.939725 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:27.939966 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:27.969497 2026] [security2:error] [pid 276059:tid 276281] [client 20.198.74.230:23934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/mar.php"] [unique_id "ary1p3tqdHBwD77138ezLwAAAeU"]
[Wed Sep 30 01:09:28.034232 2026] [access_compat:error] [pid 276059:tid 276248] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.034701 2026] [access_compat:error] [pid 276059:tid 276248] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.038699 2026] [security2:error] [pid 270884:tid 271141] [client 74.225.148.80:16899] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.ferrari250.com"] [uri "/c99.php"] [unique_id "ary1qCGeq9LtYp4zuPOXzgAAAHo"]
[Wed Sep 30 01:09:28.053687 2026] [access_compat:error] [pid 270884:tid 271080] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:28.053985 2026] [access_compat:error] [pid 270884:tid 271080] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:28.054281 2026] [security2:error] [pid 270884:tid 271049] [client 20.219.2.60:26063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary1qCGeq9LtYp4zuPOX0gAAAB4"]
[Wed Sep 30 01:09:28.087654 2026] [security2:error] [pid 270884:tid 271019] [client 45.162.52.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1qCGeq9LtYp4zuPOX1QAAAAA"]
[Wed Sep 30 01:09:28.120650 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.120932 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.156065 2026] [security2:error] [pid 276059:tid 276322] [client 20.219.2.60:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-links-opml.php"] [unique_id "ary1qHtqdHBwD77138ezMwAAAg4"]
[Wed Sep 30 01:09:28.179748 2026] [security2:error] [pid 270884:tid 271107] [client 52.172.226.14:39895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/yanz.php"] [unique_id "ary1qCGeq9LtYp4zuPOX2AAAAFg"]
[Wed Sep 30 01:09:28.212759 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.213065 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.303304 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.303590 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.339506 2026] [security2:error] [pid 270884:tid 271060] [client 20.70.173.30:33379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ops.php"] [unique_id "ary1qCGeq9LtYp4zuPOX3wAAACk"]
[Wed Sep 30 01:09:28.380757 2026] [security2:error] [pid 276620:tid 276882] [client 20.219.2.60:48095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/abc.php"] [unique_id "ary1qNPAdfEWqmGIkg1Y-gAAAo8"]
[Wed Sep 30 01:09:28.390153 2026] [security2:error] [pid 276620:tid 276883] [client 74.7.242.1:49542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1qNPAdfEWqmGIkg1Y-wAAApA"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:09:28.402231 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.402674 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.411137 2026] [security2:error] [pid 270884:tid 270893] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX4QAAMwc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13918
[Wed Sep 30 01:09:28.411175 2026] [security2:error] [pid 270884:tid 270893] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX4QAAMwc"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13918
[Wed Sep 30 01:09:28.485411 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.485659 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.501472 2026] [security2:error] [pid 270884:tid 271060] [client 74.225.148.80:63552] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.ferrari250.com"] [uri "/c99.php"] [unique_id "ary1qCGeq9LtYp4zuPOX6QAAACk"]
[Wed Sep 30 01:09:28.516013 2026] [security2:error] [pid 270884:tid 271042] [client 20.219.2.60:26081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/lib.php"] [unique_id "ary1qCGeq9LtYp4zuPOX6gAAABc"]
[Wed Sep 30 01:09:28.547930 2026] [security2:error] [pid 270884:tid 271085] [client 168.100.149.201:37488] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/header-offcanvas.js"] [unique_id "ary1qCGeq9LtYp4zuPOX6wAAQko"]
[Wed Sep 30 01:09:28.556046 2026] [access_compat:error] [pid 270884:tid 271091] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:28.556497 2026] [access_compat:error] [pid 270884:tid 271091] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:28.577192 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.577464 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.579078 2026] [security2:error] [pid 270884:tid 270904] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX7gAAZBI"], referer: https://forum.torquayfans.com/viewonline.php?sid=2fec2128e682543b8082cedac2cd9318
[Wed Sep 30 01:09:28.579105 2026] [security2:error] [pid 270884:tid 270904] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX7gAAZBI"], referer: https://forum.torquayfans.com/viewonline.php?sid=2fec2128e682543b8082cedac2cd9318
[Wed Sep 30 01:09:28.638887 2026] [security2:error] [pid 270884:tid 271128] [client 4.240.25.22:41664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/admin.php"] [unique_id "ary1qCGeq9LtYp4zuPOX8AAAAG0"]
[Wed Sep 30 01:09:28.668750 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.669031 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.682159 2026] [security2:error] [pid 276620:tid 276864] [client 52.172.226.14:39977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/config.php"] [unique_id "ary1qNPAdfEWqmGIkg1Y_gAAAn0"]
[Wed Sep 30 01:09:28.712907 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.19.141:20827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/k.php"] [unique_id "ary1qNPAdfEWqmGIkg1ZAQAAAoQ"]
[Wed Sep 30 01:09:28.761035 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.761330 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.852421 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.852694 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.939575 2026] [security2:error] [pid 276620:tid 276886] [client 20.194.30.107:43357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/fling.php"] [unique_id "ary1qNPAdfEWqmGIkg1ZBAAAApM"]
[Wed Sep 30 01:09:28.942581 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:28.942883 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:28.953369 2026] [security2:error] [pid 270884:tid 271107] [client 74.225.148.80:42812] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.ferrari250.com"] [uri "/c99.php"] [unique_id "ary1qCGeq9LtYp4zuPOX-gAAAFg"]
[Wed Sep 30 01:09:28.977788 2026] [security2:error] [pid 270884:tid 270892] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX_wAAQAY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=54e23724e7f09c450a970768c5dcb870&start=210&t=21812
[Wed Sep 30 01:09:28.977825 2026] [security2:error] [pid 270884:tid 270892] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1qCGeq9LtYp4zuPOX_wAAQAY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=54e23724e7f09c450a970768c5dcb870&start=210&t=21812
[Wed Sep 30 01:09:28.981468 2026] [security2:error] [pid 276620:tid 276869] [client 20.219.2.60:25987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/edit.php"] [unique_id "ary1qNPAdfEWqmGIkg1ZBwAAAoI"]
[Wed Sep 30 01:09:28.987720 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:49327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/motu.php"] [unique_id "ary1qCGeq9LtYp4zuPOYAgAAAG0"]
[Wed Sep 30 01:09:29.034009 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.034347 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.075360 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:29.075802 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:29.123504 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.123782 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.142442 2026] [security2:error] [pid 270884:tid 271079] [client 20.28.180.172:34289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/twivahpi.php"] [unique_id "ary1qSGeq9LtYp4zuPOYCwAAADw"]
[Wed Sep 30 01:09:29.169819 2026] [security2:error] [pid 270884:tid 271069] [client 152.56.240.85:57680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1qCGeq9LtYp4zuPOX5gAAADI"]
[Wed Sep 30 01:09:29.209625 2026] [security2:error] [pid 276620:tid 276778] [client 20.204.42.136:58528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/uploartg.php"] [unique_id "ary1qdPAdfEWqmGIkg1ZCwAAAic"]
[Wed Sep 30 01:09:29.214211 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.214499 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.239779 2026] [security2:error] [pid 276620:tid 276782] [client 20.219.2.60:11857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/t.php"] [unique_id "ary1qdPAdfEWqmGIkg1ZDAAAAis"]
[Wed Sep 30 01:09:29.264545 2026] [security2:error] [pid 276620:tid 276786] [client 52.172.226.14:39979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/network.php"] [unique_id "ary1qdPAdfEWqmGIkg1ZDQAAAi8"]
[Wed Sep 30 01:09:29.310717 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.311165 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:47909] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.388308 2026] [security2:error] [pid 276059:tid 276291] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1qXtqdHBwD77138ezXAAAAe8"]
[Wed Sep 30 01:09:29.408073 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.408526 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.416184 2026] [security2:error] [pid 270884:tid 271101] [client 74.225.148.80:16740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/ttivnife.php"] [unique_id "ary1qSGeq9LtYp4zuPOYDgAAAFI"]
[Wed Sep 30 01:09:29.434839 2026] [security2:error] [pid 276059:tid 276262] [client 20.194.30.107:10150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp-login.php"] [unique_id "ary1qXtqdHBwD77138ezXwAAAdI"]
[Wed Sep 30 01:09:29.457582 2026] [security2:error] [pid 270884:tid 271080] [client 20.70.173.30:48653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/robots.php"] [unique_id "ary1qSGeq9LtYp4zuPOYEQAAAD0"]
[Wed Sep 30 01:09:29.472499 2026] [security2:error] [pid 276059:tid 276293] [client 20.219.2.60:26022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ioxi-o.php"] [unique_id "ary1qXtqdHBwD77138ezZQAAAfE"]
[Wed Sep 30 01:09:29.486902 2026] [security2:error] [pid 276059:tid 276304] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1qXtqdHBwD77138ezZAAAAfw"]
[Wed Sep 30 01:09:29.505594 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:33807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/inputs.php"] [unique_id "ary1qSGeq9LtYp4zuPOYEwAAAG0"]
[Wed Sep 30 01:09:29.510834 2026] [security2:error] [pid 270884:tid 271114] [client 20.219.2.60:19398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-class-api.php"] [unique_id "ary1qSGeq9LtYp4zuPOYFAAAAF8"]
[Wed Sep 30 01:09:29.531006 2026] [security2:error] [pid 270884:tid 271085] [client 155.190.6.18:53478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYGAAAAEI"]
[Wed Sep 30 01:09:29.531095 2026] [security2:error] [pid 270884:tid 271085] [client 155.190.6.18:53478] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYGAAAAEI"]
[Wed Sep 30 01:09:29.541295 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.541590 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.552358 2026] [security2:error] [pid 270884:tid 271123] [client 20.28.180.172:61186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/motu.php"] [unique_id "ary1qSGeq9LtYp4zuPOYGgAAAGg"]
[Wed Sep 30 01:09:29.562733 2026] [access_compat:error] [pid 270884:tid 271110] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:29.563002 2026] [access_compat:error] [pid 270884:tid 271110] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:29.584686 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.585119 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.608058 2026] [security2:error] [pid 270884:tid 271082] [client 4.240.25.22:18708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1qSGeq9LtYp4zuPOYIAAAAD8"]
[Wed Sep 30 01:09:29.639557 2026] [security2:error] [pid 276059:tid 276285] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1qXtqdHBwD77138ezaQAAAek"]
[Wed Sep 30 01:09:29.671755 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.672054 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.701323 2026] [qos:error] [pid 276620:tid 276761] [client 92.97.187.20:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1qdPAdfEWqmGIkg1ZEwAAAhY
[Wed Sep 30 01:09:29.709178 2026] [security2:error] [pid 270884:tid 271106] [client 116.197.133.25:53057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYLAAAAFc"]
[Wed Sep 30 01:09:29.709273 2026] [security2:error] [pid 270884:tid 271106] [client 116.197.133.25:53057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYLAAAAFc"]
[Wed Sep 30 01:09:29.713287 2026] [security2:error] [pid 270884:tid 271107] [client 223.181.60.167:15067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYLgAAAFg"]
[Wed Sep 30 01:09:29.714679 2026] [security2:error] [pid 270884:tid 271107] [client 223.181.60.167:15067] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1qSGeq9LtYp4zuPOYLgAAAFg"]
[Wed Sep 30 01:09:29.731943 2026] [security2:error] [pid 276059:tid 276308] [client 216.73.216.46:47909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1qXtqdHBwD77138ezbAAAAgA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODUvbm9kZTAvbWVtb3J5MTM1
[Wed Sep 30 01:09:29.762860 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.763117 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.770874 2026] [security2:error] [pid 270884:tid 271082] [client 52.172.226.14:21409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-2019.php"] [unique_id "ary1qSGeq9LtYp4zuPOYMAAAAD8"]
[Wed Sep 30 01:09:29.853466 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.853716 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.892347 2026] [security2:error] [pid 276059:tid 276211] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1qXtqdHBwD77138ezdAAAAZ8"]
[Wed Sep 30 01:09:29.892442 2026] [security2:error] [pid 270884:tid 271091] [client 74.225.148.80:55247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/admin.php/2P.php"] [unique_id "ary1qSGeq9LtYp4zuPOYOAAAAEg"]
[Wed Sep 30 01:09:29.946362 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:29.946783 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:29.947023 2026] [security2:error] [pid 276059:tid 276233] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1qXtqdHBwD77138ezdgAAAbU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:29.947329 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:26062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ajax.php"] [unique_id "ary1qSGeq9LtYp4zuPOYPgAAAEA"]
[Wed Sep 30 01:09:30.027646 2026] [security2:error] [pid 276620:tid 276809] [client 45.138.12.32:30958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ilv.vbd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1qtPAdfEWqmGIkg1ZGQAAAkY"]
[Wed Sep 30 01:09:30.041100 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.041698 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.074745 2026] [access_compat:error] [pid 270884:tid 271057] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:30.075039 2026] [access_compat:error] [pid 270884:tid 271057] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:30.084088 2026] [security2:error] [pid 270884:tid 271109] [client 20.219.2.60:49321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp9.php"] [unique_id "ary1qiGeq9LtYp4zuPOYQQAAAFo"]
[Wed Sep 30 01:09:30.120417 2026] [security2:error] [pid 270884:tid 271061] [client 20.70.173.30:25332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/aaa.php"] [unique_id "ary1qiGeq9LtYp4zuPOYQgAAACo"]
[Wed Sep 30 01:09:30.126471 2026] [access_compat:error] [pid 276059:tid 276244] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.126737 2026] [access_compat:error] [pid 276059:tid 276244] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.169833 2026] [qos:error] [pid 276059:tid 276076] [remote 46.83.242.7:59815] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=46.83.242.7, id=ary1qntqdHBwD77138ezfQABqgw
[Wed Sep 30 01:09:30.217429 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.217909 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.229619 2026] [security2:error] [pid 270884:tid 270915] [remote 57.141.14.78:27136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary1qiGeq9LtYp4zuPOYQwAAMx0"]
[Wed Sep 30 01:09:30.243931 2026] [qos:error] [pid 270884:tid 270920] [remote 86.27.249.7:40642] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.27.249.7, id=ary1qiGeq9LtYp4zuPOYTAAALyI
[Wed Sep 30 01:09:30.254882 2026] [security2:error] [pid 276059:tid 276290] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1qntqdHBwD77138ezggAAAe4"]
[Wed Sep 30 01:09:30.258328 2026] [security2:error] [pid 276620:tid 276827] [client 52.172.226.14:21383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/bypass.php"] [unique_id "ary1qtPAdfEWqmGIkg1ZHwAAAlg"]
[Wed Sep 30 01:09:30.275425 2026] [security2:error] [pid 270884:tid 271109] [client 37.248.162.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1qiGeq9LtYp4zuPOYUAAAAFo"]
[Wed Sep 30 01:09:30.309536 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.309804 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:29169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.357232 2026] [security2:error] [pid 276059:tid 276278] [client 20.211.90.37:40399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/20.php"] [unique_id "ary1qntqdHBwD77138ezhQAAAeI"]
[Wed Sep 30 01:09:30.384213 2026] [security2:error] [pid 270884:tid 271019] [client 45.138.12.32:30912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ile.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1qiGeq9LtYp4zuPOYVAAAAAA"]
[Wed Sep 30 01:09:30.388849 2026] [security2:error] [pid 276059:tid 276319] [client 74.225.148.80:55253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/cord.php"] [unique_id "ary1qntqdHBwD77138eziAAAAgs"]
[Wed Sep 30 01:09:30.398328 2026] [security2:error] [pid 276620:tid 276825] [client 20.219.19.141:20853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/133.php"] [unique_id "ary1qtPAdfEWqmGIkg1ZIQAAAlY"]
[Wed Sep 30 01:09:30.405982 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.406490 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.424380 2026] [security2:error] [pid 270884:tid 271061] [client 20.219.2.60:26142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/install.php"] [unique_id "ary1qiGeq9LtYp4zuPOYVwAAACo"]
[Wed Sep 30 01:09:30.429869 2026] [security2:error] [pid 276059:tid 276194] [client 20.70.173.30:8934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/dehnl.php"] [unique_id "ary1qntqdHBwD77138eziwAAAY8"]
[Wed Sep 30 01:09:30.491623 2026] [security2:error] [pid 276620:tid 276656] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1qtPAdfEWqmGIkg1ZJAACIRo"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D27534
[Wed Sep 30 01:09:30.530096 2026] [qos:error] [pid 270884:tid 271019] [client 84.164.231.176:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1qiGeq9LtYp4zuPOYYAAAAAA
[Wed Sep 30 01:09:30.530101 2026] [qos:error] [pid 270884:tid 271103] [client 80.47.19.54:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=102, c=50.6.92.44, id=ary1qiGeq9LtYp4zuPOYYQAAAFQ
[Wed Sep 30 01:09:30.537380 2026] [security2:error] [pid 276059:tid 276071] [remote 168.100.149.54:18456] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/assets/libs/magnific-popup/jquery.magnific-popup.min.js"] [unique_id "ary1qntqdHBwD77138ezjwAB1Ac"]
[Wed Sep 30 01:09:30.543192 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.543450 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.568278 2026] [access_compat:error] [pid 270884:tid 271076] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:30.568546 2026] [access_compat:error] [pid 270884:tid 271076] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:30.577054 2026] [security2:error] [pid 270884:tid 271056] [client 103.241.204.139:55393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1qiGeq9LtYp4zuPOYZQAAACU"]
[Wed Sep 30 01:09:30.577151 2026] [security2:error] [pid 270884:tid 271056] [client 103.241.204.139:55393] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1qiGeq9LtYp4zuPOYZQAAACU"]
[Wed Sep 30 01:09:30.582339 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.582608 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.632371 2026] [security2:error] [pid 270884:tid 271091] [client 20.194.30.107:22993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/sxxb.php"] [unique_id "ary1qiGeq9LtYp4zuPOYZwAAAEg"]
[Wed Sep 30 01:09:30.636289 2026] [security2:error] [pid 276620:tid 276835] [client 20.219.2.60:33853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/public/vx.php"] [unique_id "ary1qtPAdfEWqmGIkg1ZJQAAAmA"]
[Wed Sep 30 01:09:30.733250 2026] [security2:error] [pid 276059:tid 276297] [client 216.73.216.46:29169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1qntqdHBwD77138ezlwAAAfU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MzAzL25vZGUwL2NwdTM%3D
[Wed Sep 30 01:09:30.733323 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.733773 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.742185 2026] [security2:error] [pid 270884:tid 271106] [client 52.172.226.14:39992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary1qiGeq9LtYp4zuPOYbgAAAFc"]
[Wed Sep 30 01:09:30.753454 2026] [security2:error] [pid 270884:tid 271103] [client 20.204.42.136:59864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/bgbagbcw.php"] [unique_id "ary1qiGeq9LtYp4zuPOYbwAAAFQ"]
[Wed Sep 30 01:09:30.764366 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.764633 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.799443 2026] [security2:error] [pid 276059:tid 276311] [client 4.240.25.22:41727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/min.php"] [unique_id "ary1qntqdHBwD77138ezmQAAAgM"]
[Wed Sep 30 01:09:30.846819 2026] [qos:error] [pid 276059:tid 276134] [remote 88.184.59.35:24485] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=88.184.59.35, id=ary1qntqdHBwD77138ezmgABy0Y
[Wed Sep 30 01:09:30.855493 2026] [security2:error] [pid 270884:tid 271056] [client 74.225.148.80:16767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/anom.php"] [unique_id "ary1qiGeq9LtYp4zuPOYdgAAACU"]
[Wed Sep 30 01:09:30.857583 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.857849 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.887429 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:26057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/public/wp-blog.php"] [unique_id "ary1qiGeq9LtYp4zuPOYeAAAACY"]
[Wed Sep 30 01:09:30.921154 2026] [qos:error] [pid 276059:tid 276133] [remote 86.41.138.197:54014] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.41.138.197, id=ary1qntqdHBwD77138eznAAB9EU
[Wed Sep 30 01:09:30.942528 2026] [security2:error] [pid 276059:tid 276246] [client 20.28.180.172:61238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/inputs.php"] [unique_id "ary1qntqdHBwD77138eznQAAAcI"]
[Wed Sep 30 01:09:30.950925 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:30.951242 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:30.977945 2026] [security2:error] [pid 270884:tid 271066] [client 20.70.173.30:37160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/fling.php"] [unique_id "ary1qiGeq9LtYp4zuPOYgAAAAC8"]
[Wed Sep 30 01:09:30.979505 2026] [security2:error] [pid 270884:tid 271083] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1qiGeq9LtYp4zuPOYfwAAAEA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:31.006919 2026] [access_compat:error] [pid 276620:tid 276814] [client 47.79.13.64:37556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:31.007191 2026] [access_compat:error] [pid 276620:tid 276814] [client 47.79.13.64:37556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:31.013470 2026] [security2:error] [pid 270884:tid 270934] [remote 66.116.209.181:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.209.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1qiGeq9LtYp4zuPOYgQAAVzA"]
[Wed Sep 30 01:09:31.017065 2026] [security2:error] [pid 270884:tid 271007] [remote 66.116.209.181:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.209.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-login.php"] [unique_id "ary1qyGeq9LtYp4zuPOYggAAVHU"], referer: https://thenerdistheword.ca/wp-login.php
[Wed Sep 30 01:09:31.019909 2026] [security2:error] [pid 270884:tid 271002] [remote 66.116.209.181:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.209.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary1qyGeq9LtYp4zuPOYhAAAOHA"]
[Wed Sep 30 01:09:31.020013 2026] [security2:error] [pid 270884:tid 271075] [client 66.116.209.181:24532] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenerdistheword.ca"] [uri "/xmlrpc.php"] [unique_id "ary1qyGeq9LtYp4zuPOYhAAAOHA"]
[Wed Sep 30 01:09:31.025735 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:31.025994 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:31.039982 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.040232 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.042976 2026] [security2:error] [pid 270884:tid 271056] [client 4.240.25.22:8507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/chosen.php"] [unique_id "ary1qyGeq9LtYp4zuPOYhwAAACU"]
[Wed Sep 30 01:09:31.132788 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.133080 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.168399 2026] [security2:error] [pid 270884:tid 271103] [client 20.194.30.107:49101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/chosen.php"] [unique_id "ary1qyGeq9LtYp4zuPOYiwAAAFQ"]
[Wed Sep 30 01:09:31.201348 2026] [qos:error] [pid 270884:tid 270919] [remote 91.42.28.165:53411] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=91.42.28.165, id=ary1qyGeq9LtYp4zuPOYjAAAQiE
[Wed Sep 30 01:09:31.221593 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.221949 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.300566 2026] [security2:error] [pid 276620:tid 276812] [client 52.172.226.14:21410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary1q9PAdfEWqmGIkg1ZKwAAAkk"]
[Wed Sep 30 01:09:31.312351 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.312773 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.313723 2026] [security2:error] [pid 276620:tid 276847] [client 45.138.12.43:52524] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zzv.tyy.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1q9PAdfEWqmGIkg1ZLAAAAmw"]
[Wed Sep 30 01:09:31.330185 2026] [security2:error] [pid 276620:tid 276832] [client 74.225.148.80:50171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/plugins.php"] [unique_id "ary1q9PAdfEWqmGIkg1ZLgAAAl0"]
[Wed Sep 30 01:09:31.363296 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:26111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/nw.php"] [unique_id "ary1qyGeq9LtYp4zuPOYlgAAAFc"]
[Wed Sep 30 01:09:31.415927 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.416418 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.431353 2026] [security2:error] [pid 276620:tid 276850] [client 20.70.173.30:48699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary1q9PAdfEWqmGIkg1ZMAAAAm8"]
[Wed Sep 30 01:09:31.496604 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.496932 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.578847 2026] [access_compat:error] [pid 270884:tid 271103] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:31.579134 2026] [access_compat:error] [pid 270884:tid 271103] [client 74.7.243.227:55972] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:31.585244 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.585435 2026] [security2:error] [pid 270884:tid 271085] [client 20.219.2.60:48074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/inege.php"] [unique_id "ary1qyGeq9LtYp4zuPOYowAAAEI"]
[Wed Sep 30 01:09:31.585512 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.614127 2026] [security2:error] [pid 270884:tid 271075] [client 20.194.30.107:10041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wsd.php"] [unique_id "ary1qyGeq9LtYp4zuPOYpQAAADg"]
[Wed Sep 30 01:09:31.676265 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.676551 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.685587 2026] [security2:error] [pid 270884:tid 271075] [client 45.138.12.32:14288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ijd.igc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1qyGeq9LtYp4zuPOYrQAAADg"]
[Wed Sep 30 01:09:31.767760 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.768082 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.806484 2026] [security2:error] [pid 270884:tid 271123] [client 74.225.148.80:42808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/groud3.php"] [unique_id "ary1qyGeq9LtYp4zuPOYtAAAAGg"]
[Wed Sep 30 01:09:31.808412 2026] [security2:error] [pid 270884:tid 271091] [client 20.213.164.196:55179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/Row_wsoo.php"] [unique_id "ary1qyGeq9LtYp4zuPOYtQAAAEg"]
[Wed Sep 30 01:09:31.830701 2026] [security2:error] [pid 276059:tid 276245] [client 20.219.2.60:40766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tool.php"] [unique_id "ary1q3tqdHBwD77138eztQAAAcE"]
[Wed Sep 30 01:09:31.870647 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.871429 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.878837 2026] [security2:error] [pid 270884:tid 271070] [client 20.219.2.60:18823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-class-atom.php"] [unique_id "ary1qyGeq9LtYp4zuPOYuQAAADM"]
[Wed Sep 30 01:09:31.885979 2026] [security2:error] [pid 270884:tid 271091] [client 4.240.25.22:41721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wp-login.php"] [unique_id "ary1qyGeq9LtYp4zuPOYtwAAAEg"]
[Wed Sep 30 01:09:31.909494 2026] [security2:error] [pid 276059:tid 276288] [client 45.138.12.32:43460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hwq.gui.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1q3tqdHBwD77138eztwAAAew"]
[Wed Sep 30 01:09:31.933686 2026] [security2:error] [pid 276059:tid 276226] [client 52.172.226.14:21438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/tiny.php"] [unique_id "ary1q3tqdHBwD77138ezuAAAAa4"]
[Wed Sep 30 01:09:31.959116 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:31.959410 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:31.973017 2026] [security2:error] [pid 270884:tid 271066] [client 20.219.19.141:20841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wsd.php"] [unique_id "ary1qyGeq9LtYp4zuPOYuwAAAC8"]
[Wed Sep 30 01:09:32.051162 2026] [security2:error] [pid 270884:tid 271103] [client 20.211.90.37:39964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/f35.php"] [unique_id "ary1rCGeq9LtYp4zuPOYvgAAAFQ"]
[Wed Sep 30 01:09:32.057242 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.057518 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.068804 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:32.069077 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:32.125781 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:45067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/nw.php"] [unique_id "ary1rCGeq9LtYp4zuPOYvwAAADk"]
[Wed Sep 30 01:09:32.148752 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.149020 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.182158 2026] [security2:error] [pid 276059:tid 276310] [client 20.219.2.60:11849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary1rHtqdHBwD77138ezvwAAAgI"]
[Wed Sep 30 01:09:32.200541 2026] [access_compat:error] [pid 270884:tid 271056] [client 47.79.13.213:58100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:32.200822 2026] [access_compat:error] [pid 270884:tid 271056] [client 47.79.13.213:58100] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:32.238077 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.238345 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.282047 2026] [security2:error] [pid 270884:tid 271109] [client 74.225.148.80:63570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gaxby.php"] [unique_id "ary1rCGeq9LtYp4zuPOYzQAAAFo"]
[Wed Sep 30 01:09:32.294213 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:61444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/drhunthq.php"] [unique_id "ary1rCGeq9LtYp4zuPOYzgAAACY"]
[Wed Sep 30 01:09:32.300435 2026] [security2:error] [pid 270884:tid 271083] [client 37.41.16.35:56588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1rCGeq9LtYp4zuPOYzwAAAEA"]
[Wed Sep 30 01:09:32.300568 2026] [security2:error] [pid 270884:tid 271083] [client 37.41.16.35:56588] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1rCGeq9LtYp4zuPOYzwAAAEA"]
[Wed Sep 30 01:09:32.330325 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.330588 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.332746 2026] [security2:error] [pid 276620:tid 276658] [remote 57.141.14.86:61092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/xmlrpc.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZOQACfRw"]
[Wed Sep 30 01:09:32.434186 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.434778 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.439733 2026] [security2:error] [pid 276620:tid 276874] [client 52.172.226.14:21378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/lock.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZOwAAAoc"]
[Wed Sep 30 01:09:32.478154 2026] [core:error] [pid 276620:tid 276855] (104)Connection reset by peer: [client 172.232.190.19:59041] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:09:32.479753 2026] [security2:error] [pid 276620:tid 276885] [client 20.204.42.136:35730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/xz7l6w5h.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZPAAAApI"]
[Wed Sep 30 01:09:32.513612 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.513877 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.538545 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:32.538838 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:32.543681 2026] [security2:error] [pid 276059:tid 276295] [client 20.211.90.37:40443] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/1.php"] [unique_id "ary1rHtqdHBwD77138ezxQAAAfM"]
[Wed Sep 30 01:09:32.543792 2026] [security2:error] [pid 276059:tid 276295] [client 20.211.90.37:40443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/1.php"] [unique_id "ary1rHtqdHBwD77138ezxQAAAfM"]
[Wed Sep 30 01:09:32.562512 2026] [security2:error] [pid 276620:tid 276886] [client 168.100.149.180:29328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/testimonial.js"] [unique_id "ary1rNPAdfEWqmGIkg1ZPwACkxU"]
[Wed Sep 30 01:09:32.606420 2026] [security2:error] [pid 270884:tid 271101] [client 45.138.12.32:43542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ilv.vbd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1rCGeq9LtYp4zuPOY2wAAAFI"]
[Wed Sep 30 01:09:32.607110 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.607478 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:54459] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.640176 2026] [security2:error] [pid 276620:tid 276769] [client 4.240.25.22:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/100.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZQAAAAh4"]
[Wed Sep 30 01:09:32.665802 2026] [security2:error] [pid 276620:tid 276880] [client 20.219.2.60:45001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/t.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZQQAAAo0"]
[Wed Sep 30 01:09:32.695221 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.695515 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.757533 2026] [security2:error] [pid 276620:tid 276767] [client 74.225.148.80:55269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/dh9u7.php"] [unique_id "ary1rNPAdfEWqmGIkg1ZQgAAAhw"]
[Wed Sep 30 01:09:32.758921 2026] [security2:error] [pid 276059:tid 276240] [client 20.219.2.60:26104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/admin/index.php"] [unique_id "ary1rHtqdHBwD77138ezywAAAbw"]
[Wed Sep 30 01:09:32.785437 2026] [security2:error] [pid 276059:tid 276203] [client 20.204.42.136:3054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1rHtqdHBwD77138ezzAAAAZg"]
[Wed Sep 30 01:09:32.791323 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.791751 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.810114 2026] [security2:error] [pid 276059:tid 276217] [client 4.240.25.22:8489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/aaa.php"] [unique_id "ary1rHtqdHBwD77138ezzQAAAaU"]
[Wed Sep 30 01:09:32.875664 2026] [security2:error] [pid 276059:tid 276144] [remote 74.7.227.56:42582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1rHtqdHBwD77138ezzgABu1A"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:09:32.877299 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.877564 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:32.886577 2026] [security2:error] [pid 270884:tid 271056] [client 20.70.173.30:37152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/chosen.php"] [unique_id "ary1rCGeq9LtYp4zuPOY7gAAACU"]
[Wed Sep 30 01:09:32.943197 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.19.141:20869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/BDKR28WP.php"] [unique_id "ary1rCGeq9LtYp4zuPOY8QAAACc"]
[Wed Sep 30 01:09:32.944094 2026] [security2:error] [pid 270884:tid 271083] [client 52.172.226.14:39954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/mail.php"] [unique_id "ary1rCGeq9LtYp4zuPOY8gAAAEA"]
[Wed Sep 30 01:09:32.946800 2026] [security2:error] [pid 270884:tid 271085] [client 20.204.42.136:58510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/tegubsiu.php"] [unique_id "ary1rCGeq9LtYp4zuPOY8wAAAEI"]
[Wed Sep 30 01:09:32.969312 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:32.969586 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.005746 2026] [security2:error] [pid 276059:tid 276266] [client 216.73.216.46:54459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1rXtqdHBwD77138ez0AAAAdY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvbWVtb3J5MzI5
[Wed Sep 30 01:09:33.026325 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:33.026602 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:33.050448 2026] [security2:error] [pid 276059:tid 276216] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1rXtqdHBwD77138ezzwAAAaQ"]
[Wed Sep 30 01:09:33.071825 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.072247 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.136503 2026] [security2:error] [pid 276059:tid 276252] [client 201.32.215.149:8491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1rXtqdHBwD77138ez0wAAAcg"]
[Wed Sep 30 01:09:33.136610 2026] [security2:error] [pid 276059:tid 276252] [client 201.32.215.149:8491] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1rXtqdHBwD77138ez0wAAAcg"]
[Wed Sep 30 01:09:33.161717 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.162171 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.230800 2026] [security2:error] [pid 270884:tid 270949] [remote 57.141.14.55:52984] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/wp-includes/wlwmanifest.xml"] [unique_id "ary1rSGeq9LtYp4zuPOZBgAAZj8"]
[Wed Sep 30 01:09:33.232473 2026] [security2:error] [pid 270884:tid 271066] [client 20.219.2.60:26402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tfm.php"] [unique_id "ary1rSGeq9LtYp4zuPOZBwAAAC8"]
[Wed Sep 30 01:09:33.235628 2026] [security2:error] [pid 270884:tid 271057] [client 74.225.148.80:17150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/koiy.php"] [unique_id "ary1rSGeq9LtYp4zuPOZCQAAACY"]
[Wed Sep 30 01:09:33.247136 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.247244 2026] [security2:error] [pid 276620:tid 276785] [client 20.219.2.60:49316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary1rdPAdfEWqmGIkg1ZRwAAAi4"]
[Wed Sep 30 01:09:33.247405 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.261865 2026] [security2:error] [pid 276059:tid 276208] [client 103.168.67.253:63696] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|add|envoyer|modifier|select|continue|weiter|account|results)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "REQUEST_URI" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1146"] [id "350148"] [rev "163"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected "] [data "8355,/api/auth/signin"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/api/auth/signin"] [unique_id "ary1rXtqdHBwD77138ez1AAAAZ0"]
[Wed Sep 30 01:09:33.267954 2026] [security2:error] [pid 276059:tid 276246] [client 20.28.180.172:34277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/gEeSoXdefault.php"] [unique_id "ary1rXtqdHBwD77138ez1wAAAcI"]
[Wed Sep 30 01:09:33.273464 2026] [security2:error] [pid 270884:tid 270992] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1rSGeq9LtYp4zuPOZDAAAZmY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=450&t=20588
[Wed Sep 30 01:09:33.273485 2026] [security2:error] [pid 270884:tid 270992] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1rSGeq9LtYp4zuPOZDAAAZmY"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=450&t=20588
[Wed Sep 30 01:09:33.288362 2026] [security2:error] [pid 270884:tid 271082] [client 105.112.178.79:38378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.aud.bwy.mybluehost.me"] [uri "/__ss_probe_36ad292094528511496ecb69a66f3327__"] [unique_id "ary1rSGeq9LtYp4zuPOZDQAAAD8"]
[Wed Sep 30 01:09:33.306686 2026] [security2:error] [pid 270884:tid 271057] [client 20.70.173.30:47848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/k.php"] [unique_id "ary1rSGeq9LtYp4zuPOZDgAAACY"]
[Wed Sep 30 01:09:33.346126 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.346385 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.351175 2026] [security2:error] [pid 270884:tid 271101] [client 20.204.42.136:3061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1rSGeq9LtYp4zuPOZEQAAAFI"]
[Wed Sep 30 01:09:33.453141 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.453582 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.503695 2026] [security2:error] [pid 270884:tid 271082] [client 52.172.226.14:39943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/system_log.php"] [unique_id "ary1rSGeq9LtYp4zuPOZFwAAAD8"]
[Wed Sep 30 01:09:33.529397 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.529677 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.568609 2026] [security2:error] [pid 276059:tid 276279] [client 20.198.74.230:24158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/abde5e1996index.php"] [unique_id "ary1rXtqdHBwD77138ez3AAAAeM"]
[Wed Sep 30 01:09:33.568993 2026] [access_compat:error] [pid 276059:tid 276291] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:33.569247 2026] [access_compat:error] [pid 276059:tid 276291] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:33.623929 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.624200 2026] [security2:error] [pid 276059:tid 276277] [client 20.194.30.107:41555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/ty.php"] [unique_id "ary1rXtqdHBwD77138ez3gAAAeE"]
[Wed Sep 30 01:09:33.624292 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.626404 2026] [security2:error] [pid 276620:tid 276773] [client 20.211.90.37:39945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/c.php"] [unique_id "ary1rdPAdfEWqmGIkg1ZTgAAAiI"]
[Wed Sep 30 01:09:33.651075 2026] [security2:error] [pid 270884:tid 270910] [remote 57.141.14.41:33802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/3/"] [unique_id "ary1rSGeq9LtYp4zuPOZHQAAWRg"]
[Wed Sep 30 01:09:33.674736 2026] [security2:error] [pid 270884:tid 270932] [remote 91.244.197.105:40108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.yod.ninja"] [uri "/wp-login.php"] [unique_id "ary1rSGeq9LtYp4zuPOZHgAADS4"]
[Wed Sep 30 01:09:33.682551 2026] [security2:error] [pid 270884:tid 271115] [client 74.225.148.80:55245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wordfence-waf.php"] [unique_id "ary1rSGeq9LtYp4zuPOZIAAAAGA"]
[Wed Sep 30 01:09:33.697764 2026] [security2:error] [pid 270884:tid 271123] [client 20.219.2.60:26047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/a4.php"] [unique_id "ary1rSGeq9LtYp4zuPOZIQAAAGg"]
[Wed Sep 30 01:09:33.717077 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.717323 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:38372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.728158 2026] [security2:error] [pid 276059:tid 276304] [client 20.28.180.172:18317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp9.php"] [unique_id "ary1rXtqdHBwD77138ez4QAAAfw"]
[Wed Sep 30 01:09:33.806162 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.806443 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.807240 2026] [security2:error] [pid 270884:tid 271122] [client 20.70.173.30:56402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ty.php"] [unique_id "ary1rSGeq9LtYp4zuPOZMgAAAGc"]
[Wed Sep 30 01:09:33.808500 2026] [security2:error] [pid 276059:tid 276227] [client 20.219.2.60:49284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/public/ws49.php"] [unique_id "ary1rXtqdHBwD77138ez4gAAAa8"]
[Wed Sep 30 01:09:33.847070 2026] [security2:error] [pid 270884:tid 271115] [client 20.219.2.60:18869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-block.php"] [unique_id "ary1rSGeq9LtYp4zuPOZNwAAAGA"]
[Wed Sep 30 01:09:33.851598 2026] [security2:error] [pid 270884:tid 270983] [remote 91.244.197.105:40108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.yod.ninja"] [uri "/wp-login.php"] [unique_id "ary1rSGeq9LtYp4zuPOZNQAAfl0"], referer: https://mail.yod.ninja/wp-login.php
[Wed Sep 30 01:09:33.896638 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.896917 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:33.908932 2026] [security2:error] [pid 270884:tid 271085] [client 222.167.105.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1rSGeq9LtYp4zuPOZPgAAAEI"]
[Wed Sep 30 01:09:33.915618 2026] [security2:error] [pid 270884:tid 271083] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1rSGeq9LtYp4zuPOZQAAAAEA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:33.922076 2026] [security2:error] [pid 270884:tid 271115] [client 20.204.42.136:61171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/xxw.php"] [unique_id "ary1rSGeq9LtYp4zuPOZQwAAAGA"]
[Wed Sep 30 01:09:33.951387 2026] [security2:error] [pid 270884:tid 271083] [client 20.194.30.107:17256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary1rSGeq9LtYp4zuPOZRwAAAEA"]
[Wed Sep 30 01:09:33.990588 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:33.990853 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.011385 2026] [security2:error] [pid 270884:tid 270981] [remote 91.244.197.105:40108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.197.244.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.yod.ninja"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZSwAAa1s"]
[Wed Sep 30 01:09:34.011534 2026] [security2:error] [pid 270884:tid 271126] [client 91.244.197.105:40108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mail.yod.ninja"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZSwAAa1s"]
[Wed Sep 30 01:09:34.070540 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:34.070866 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:34.084112 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.084537 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.097003 2026] [security2:error] [pid 270884:tid 271133] [client 4.240.25.22:8510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ty.php"] [unique_id "ary1riGeq9LtYp4zuPOZUwAAAHI"]
[Wed Sep 30 01:09:34.121884 2026] [security2:error] [pid 270884:tid 271073] [client 216.73.216.46:38372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1riGeq9LtYp4zuPOZVAAAADY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTM4
[Wed Sep 30 01:09:34.137593 2026] [security2:error] [pid 270884:tid 271072] [client 20.211.90.37:40430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/build.php"] [unique_id "ary1riGeq9LtYp4zuPOZVwAAADU"]
[Wed Sep 30 01:09:34.143085 2026] [security2:error] [pid 276620:tid 276817] [client 74.225.148.80:17109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wp5.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZVwAAAk4"]
[Wed Sep 30 01:09:34.145101 2026] [security2:error] [pid 270884:tid 271120] [client 119.13.211.92:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1riGeq9LtYp4zuPOZWAAAAGU"]
[Wed Sep 30 01:09:34.158157 2026] [security2:error] [pid 276059:tid 276300] [client 20.219.2.60:26038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wen.php"] [unique_id "ary1rntqdHBwD77138ez5QAAAfg"]
[Wed Sep 30 01:09:34.173185 2026] [security2:error] [pid 276620:tid 276774] [client 52.172.226.14:21397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/file.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZXwAAAiM"]
[Wed Sep 30 01:09:34.177844 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.178100 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.182947 2026] [security2:error] [pid 270884:tid 271133] [client 20.204.42.136:3012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/f35.update.php"] [unique_id "ary1riGeq9LtYp4zuPOZWwAAAHI"]
[Wed Sep 30 01:09:34.280634 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.281078 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.359736 2026] [security2:error] [pid 270884:tid 271133] [client 20.219.2.60:49318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gifclass.php"] [unique_id "ary1riGeq9LtYp4zuPOZaAAAAHI"]
[Wed Sep 30 01:09:34.375111 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.375701 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.510311 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.510597 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.549181 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.549449 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.559784 2026] [security2:error] [pid 276620:tid 276814] [client 168.100.149.67:53094] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/mystickyelements/dist/js/email-autocomplete.js"] [unique_id "ary1rtPAdfEWqmGIkg1ZYgACSwQ"]
[Wed Sep 30 01:09:34.606975 2026] [security2:error] [pid 276620:tid 276832] [client 20.219.2.60:26170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ms.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZYwAAAl0"]
[Wed Sep 30 01:09:34.618835 2026] [security2:error] [pid 276059:tid 276253] [client 203.122.45.246:52637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1rntqdHBwD77138ez7AAAAck"]
[Wed Sep 30 01:09:34.618941 2026] [security2:error] [pid 276059:tid 276253] [client 203.122.45.246:52637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1rntqdHBwD77138ez7AAAAck"]
[Wed Sep 30 01:09:34.619104 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:34.619378 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:34.624164 2026] [security2:error] [pid 276620:tid 276854] [client 74.225.148.80:63583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/em.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZZAAAAnM"]
[Wed Sep 30 01:09:34.639448 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.639707 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.685998 2026] [security2:error] [pid 270884:tid 271024] [client 20.211.90.37:40426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/bless.php"] [unique_id "ary1riGeq9LtYp4zuPOZfAAAAAU"]
[Wed Sep 30 01:09:34.700534 2026] [security2:error] [pid 276620:tid 276857] [client 4.240.25.22:41725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/kir.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZZgAAAnY"]
[Wed Sep 30 01:09:34.729052 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:21427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary1riGeq9LtYp4zuPOZfgAAAA0"]
[Wed Sep 30 01:09:34.733386 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.733816 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.787662 2026] [security2:error] [pid 270884:tid 271034] [client 45.138.12.43:52588] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.zyi.dvz.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1riGeq9LtYp4zuPOZhQAAAA8"]
[Wed Sep 30 01:09:34.823046 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.823308 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:34.875998 2026] [security2:error] [pid 270884:tid 271126] [client 122.173.27.10:31771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZiQAAAGs"]
[Wed Sep 30 01:09:34.876145 2026] [security2:error] [pid 270884:tid 271126] [client 122.173.27.10:31771] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZiQAAAGs"]
[Wed Sep 30 01:09:34.882781 2026] [security2:error] [pid 276620:tid 276875] [client 20.204.42.136:3033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/adminfuns.php"] [unique_id "ary1rtPAdfEWqmGIkg1ZaQAAAog"]
[Wed Sep 30 01:09:34.900257 2026] [security2:error] [pid 270884:tid 271143] [client 152.59.165.7:57473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZjAAAAHw"]
[Wed Sep 30 01:09:34.900408 2026] [security2:error] [pid 270884:tid 271143] [client 152.59.165.7:57473] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1riGeq9LtYp4zuPOZjAAAAHw"]
[Wed Sep 30 01:09:34.910835 2026] [security2:error] [pid 270884:tid 271043] [client 20.219.2.60:45045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/sa.php7"] [unique_id "ary1riGeq9LtYp4zuPOZjgAAABg"]
[Wed Sep 30 01:09:34.914726 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:34.914990 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.004092 2026] [qos:error] [pid 276059:tid 276149] [remote 5.163.46.147:64462] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=5.163.46.147, id=ary1r3tqdHBwD77138ez8AABwFU
[Wed Sep 30 01:09:35.008407 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.008699 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.029896 2026] [security2:error] [pid 270884:tid 271107] [client 20.213.164.196:21336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/x2.php"] [unique_id "ary1ryGeq9LtYp4zuPOZlAAAAFg"]
[Wed Sep 30 01:09:35.044014 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:35.044500 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:35.053318 2026] [security2:error] [pid 276620:tid 276883] [client 20.28.180.172:29961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ebkid.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZawAAApA"]
[Wed Sep 30 01:09:35.063293 2026] [security2:error] [pid 276620:tid 276863] [client 20.194.30.107:45590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZbAAAAnw"]
[Wed Sep 30 01:09:35.065077 2026] [security2:error] [pid 270884:tid 271126] [client 20.70.173.30:56393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary1ryGeq9LtYp4zuPOZlQAAAGs"]
[Wed Sep 30 01:09:35.071472 2026] [security2:error] [pid 276620:tid 276881] [client 20.219.2.60:26070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/hplfuns.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZbQAAAo4"]
[Wed Sep 30 01:09:35.088641 2026] [security2:error] [pid 270884:tid 271043] [client 74.225.148.80:17125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/hp.php"] [unique_id "ary1ryGeq9LtYp4zuPOZlwAAABg"]
[Wed Sep 30 01:09:35.097340 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.79.13.158:50122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:35.097597 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.79.13.158:50122] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:35.098726 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.099000 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.180361 2026] [security2:error] [pid 270884:tid 271143] [client 20.204.42.136:59887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/router.php"] [unique_id "ary1ryGeq9LtYp4zuPOZnQAAAHw"]
[Wed Sep 30 01:09:35.185191 2026] [qos:error] [pid 276620:tid 276661] [remote 86.127.226.67:50917] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.127.226.67, id=ary1r9PAdfEWqmGIkg1ZbwACfR8
[Wed Sep 30 01:09:35.190087 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.190352 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.261248 2026] [security2:error] [pid 270884:tid 271043] [client 4.240.25.22:41723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wsd.php"] [unique_id "ary1ryGeq9LtYp4zuPOZpwAAABg"]
[Wed Sep 30 01:09:35.264600 2026] [security2:error] [pid 270884:tid 271106] [client 52.172.226.14:21428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary1ryGeq9LtYp4zuPOZqAAAAFc"]
[Wed Sep 30 01:09:35.279733 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.279992 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:48015] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.328972 2026] [access_compat:error] [pid 270884:tid 270920] [remote 17.166.22.153:59416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.329239 2026] [access_compat:error] [pid 270884:tid 270920] [remote 17.166.22.153:59416] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.377026 2026] [security2:error] [pid 276620:tid 276876] [client 4.240.25.22:63633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/adminfuns.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZcwAAAok"]
[Wed Sep 30 01:09:35.379522 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.379970 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.424447 2026] [security2:error] [pid 270884:tid 271071] [client 45.138.12.32:43580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ile.xnn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1ryGeq9LtYp4zuPOZrwAAADQ"]
[Wed Sep 30 01:09:35.472860 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.473318 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.494522 2026] [security2:error] [pid 270884:tid 271082] [client 20.219.2.60:49313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/jp.php"] [unique_id "ary1ryGeq9LtYp4zuPOZsgAAAD8"]
[Wed Sep 30 01:09:35.530737 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:35.531018 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:35.557037 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.557290 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.561481 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.2.60:26079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tfm.php"] [unique_id "ary1ryGeq9LtYp4zuPOZtwAAADQ"]
[Wed Sep 30 01:09:35.561742 2026] [security2:error] [pid 270884:tid 271143] [client 4.240.25.22:8644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/images.php"] [unique_id "ary1ryGeq9LtYp4zuPOZuAAAAHw"]
[Wed Sep 30 01:09:35.583402 2026] [security2:error] [pid 276620:tid 276880] [client 74.225.148.80:17099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wpuse.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZdgAAAo0"]
[Wed Sep 30 01:09:35.597081 2026] [security2:error] [pid 270884:tid 271038] [client 20.204.42.136:2946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary1ryGeq9LtYp4zuPOZugAAABM"]
[Wed Sep 30 01:09:35.626523 2026] [qos:error] [pid 276620:tid 276778] [client 86.190.130.46:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1r9PAdfEWqmGIkg1ZdwAAAic
[Wed Sep 30 01:09:35.649217 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.649485 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.689664 2026] [security2:error] [pid 270884:tid 271108] [client 216.73.216.46:48015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1ryGeq9LtYp4zuPOZwQAAAFk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvbWVtb3J5MTM5
[Wed Sep 30 01:09:35.707669 2026] [security2:error] [pid 276620:tid 276861] [client 202.179.95.79:64607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZeAAAAno"]
[Wed Sep 30 01:09:35.707791 2026] [security2:error] [pid 276620:tid 276861] [client 202.179.95.79:64607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZeAAAAno"]
[Wed Sep 30 01:09:35.771496 2026] [security2:error] [pid 276620:tid 276872] [client 52.172.226.14:21436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/manager.php"] [unique_id "ary1r9PAdfEWqmGIkg1ZewAAAoU"]
[Wed Sep 30 01:09:35.777630 2026] [security2:error] [pid 270884:tid 271108] [client 222.167.97.121:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1ryGeq9LtYp4zuPOZyAAAAFk"]
[Wed Sep 30 01:09:35.793065 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.793431 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.800895 2026] [security2:error] [pid 270884:tid 271024] [client 20.219.2.60:18880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-signup.php"] [unique_id "ary1ryGeq9LtYp4zuPOZywAAAAU"]
[Wed Sep 30 01:09:35.829051 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.2.60:11885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/public/ws49.php"] [unique_id "ary1ryGeq9LtYp4zuPOZzwAAAF4"]
[Wed Sep 30 01:09:35.833208 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.833709 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.924143 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:35.924404 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:35.955183 2026] [qos:error] [pid 270884:tid 271083] [client 176.172.100.146:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1ryGeq9LtYp4zuPOZ2QAAAEA
[Wed Sep 30 01:09:35.955659 2026] [security2:error] [pid 276059:tid 276310] [client 20.28.180.172:34240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zoo1.php"] [unique_id "ary1r3tqdHBwD77138ez9wAAAgI"]
[Wed Sep 30 01:09:35.986530 2026] [security2:error] [pid 270884:tid 270934] [remote 57.141.14.41:33814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/5/"] [unique_id "ary1ryGeq9LtYp4zuPOZ2wAAXjA"]
[Wed Sep 30 01:09:36.015320 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.015609 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.034162 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.2.60:25993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/8573.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ3gAAADQ"]
[Wed Sep 30 01:09:36.042498 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.96.176:59169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/radio.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ3wAAAAU"]
[Wed Sep 30 01:09:36.055971 2026] [security2:error] [pid 270884:tid 271101] [client 74.225.148.80:16707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/file18x.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ4AAAAFI"]
[Wed Sep 30 01:09:36.059180 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.2.60:33843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-good.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ4QAAAF4"]
[Wed Sep 30 01:09:36.062547 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:36.062859 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:36.069435 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.13.158:50128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:36.069724 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.13.158:50128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:36.099844 2026] [security2:error] [pid 270884:tid 271107] [client 20.204.42.136:3053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ5AAAAFg"]
[Wed Sep 30 01:09:36.107453 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.107724 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.114959 2026] [security2:error] [pid 270884:tid 270944] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ5wAANDo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=753d022886e35789fd1696e90a9aa35a&start=105&t=10339
[Wed Sep 30 01:09:36.114987 2026] [security2:error] [pid 270884:tid 270944] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ5wAANDo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=753d022886e35789fd1696e90a9aa35a&start=105&t=10339
[Wed Sep 30 01:09:36.121765 2026] [security2:error] [pid 276620:tid 276805] [client 20.219.19.141:20806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wmore1.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZgQAAAkI"]
[Wed Sep 30 01:09:36.187244 2026] [security2:error] [pid 276059:tid 276295] [client 20.211.90.37:40414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/admin/upload/css.php"] [unique_id "ary1sHtqdHBwD77138ez-gAAAfM"]
[Wed Sep 30 01:09:36.196498 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.196751 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.289363 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.289645 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.340212 2026] [security2:error] [pid 276620:tid 276791] [client 52.172.226.14:39949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/plugins/pwnd/as.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZggAAAjQ"]
[Wed Sep 30 01:09:36.343122 2026] [security2:error] [pid 276059:tid 276195] [client 181.167.58.195:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary1sHtqdHBwD77138ez-wAAAZA"]
[Wed Sep 30 01:09:36.373357 2026] [security2:error] [pid 276620:tid 276784] [client 4.240.25.22:8446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/chosen.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZgwAAAi0"]
[Wed Sep 30 01:09:36.386280 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.386745 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.445666 2026] [security2:error] [pid 270884:tid 271019] [client 2a06:98c0:3600::103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mickymaytravels.com"] [uri "/.git/config"] [unique_id "ary1sCGeq9LtYp4zuPOZ-gAAAAA"]
[Wed Sep 30 01:09:36.454700 2026] [security2:error] [pid 270884:tid 271083] [client 20.204.42.136:36740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/cibrkysaeng.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ-wAAAEA"]
[Wed Sep 30 01:09:36.479796 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.480213 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.497076 2026] [security2:error] [pid 270884:tid 271011] [remote 86.123.72.39:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.72.123.86.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ_QAABXk"], referer: https://nysas.org/wp-login.php
[Wed Sep 30 01:09:36.506878 2026] [security2:error] [pid 270884:tid 271101] [client 4.240.25.22:63672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/ms-edit.php"] [unique_id "ary1sCGeq9LtYp4zuPOZ_wAAAFI"]
[Wed Sep 30 01:09:36.507698 2026] [security2:error] [pid 276620:tid 276787] [client 20.219.2.60:26123] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "casanoelectric.com"] [uri "/1.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZhQAAAjA"]
[Wed Sep 30 01:09:36.507826 2026] [security2:error] [pid 276620:tid 276787] [client 20.219.2.60:26123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/1.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZhQAAAjA"]
[Wed Sep 30 01:09:36.533668 2026] [security2:error] [pid 276620:tid 276826] [client 74.225.148.80:16735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/123viva.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZhgAAAlc"]
[Wed Sep 30 01:09:36.543379 2026] [security2:error] [pid 270884:tid 271107] [client 168.100.149.96:60594] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js"] [unique_id "ary1sCGeq9LtYp4zuPOaAAAAWEU"]
[Wed Sep 30 01:09:36.549492 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:36.549763 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:36.566753 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.567024 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.590410 2026] [security2:error] [pid 276620:tid 276801] [client 20.219.2.60:49335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/a5.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZhwAAAj4"]
[Wed Sep 30 01:09:36.661986 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.662419 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.734351 2026] [security2:error] [pid 270884:tid 271106] [client 20.194.30.107:44684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/df.php"] [unique_id "ary1sCGeq9LtYp4zuPOaDAAAAFc"]
[Wed Sep 30 01:09:36.751288 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.751576 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.814705 2026] [security2:error] [pid 270884:tid 271107] [client 20.204.42.136:35762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/c3c427fa59index.php"] [unique_id "ary1sCGeq9LtYp4zuPOaEgAAAFg"]
[Wed Sep 30 01:09:36.841861 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.842303 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.923434 2026] [security2:error] [pid 270884:tid 271082] [client 103.211.18.63:53183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1sCGeq9LtYp4zuPOaFgAAAD8"]
[Wed Sep 30 01:09:36.923568 2026] [security2:error] [pid 270884:tid 271082] [client 103.211.18.63:53183] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1sCGeq9LtYp4zuPOaFgAAAD8"]
[Wed Sep 30 01:09:36.931307 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:36.931593 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:36.953927 2026] [security2:error] [pid 270884:tid 271044] [client 52.172.226.14:39956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-configs.php"] [unique_id "ary1sCGeq9LtYp4zuPOaGQAAABk"]
[Wed Sep 30 01:09:36.972121 2026] [security2:error] [pid 276620:tid 276772] [client 20.219.2.60:26008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/term.php"] [unique_id "ary1sNPAdfEWqmGIkg1ZiwAAAiE"]
[Wed Sep 30 01:09:36.977402 2026] [security2:error] [pid 270884:tid 271043] [client 45.138.12.43:52648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.zzv.tyy.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1sCGeq9LtYp4zuPOaGgAAABg"]
[Wed Sep 30 01:09:37.008363 2026] [security2:error] [pid 270884:tid 271032] [client 74.225.148.80:17093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/Components.update.php"] [unique_id "ary1sSGeq9LtYp4zuPOaHAAAAA0"]
[Wed Sep 30 01:09:37.021990 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.022266 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.023427 2026] [security2:error] [pid 276620:tid 276783] [client 182.69.182.151:10054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZjAAAAiw"]
[Wed Sep 30 01:09:37.023596 2026] [security2:error] [pid 276620:tid 276783] [client 182.69.182.151:10054] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZjAAAAiw"]
[Wed Sep 30 01:09:37.042936 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:37.043230 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:37.048048 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.2.60:33847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/amp.php"] [unique_id "ary1sSGeq9LtYp4zuPOaHwAAADQ"]
[Wed Sep 30 01:09:37.072972 2026] [security2:error] [pid 276059:tid 276204] [client 179.105.122.52:51910] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1sHtqdHBwD77138e0AgAAAZk"]
[Wed Sep 30 01:09:37.113180 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.113449 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.172702 2026] [security2:error] [pid 270884:tid 271044] [client 20.204.42.136:2958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/av.php"] [unique_id "ary1sSGeq9LtYp4zuPOaIQAAABk"]
[Wed Sep 30 01:09:37.202255 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.202537 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.243334 2026] [security2:error] [pid 270884:tid 271130] [client 20.219.2.60:11334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gifclass.php"] [unique_id "ary1sSGeq9LtYp4zuPOaKAAAAG8"]
[Wed Sep 30 01:09:37.291869 2026] [security2:error] [pid 270884:tid 271085] [client 20.70.173.30:8156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/df.php"] [unique_id "ary1sSGeq9LtYp4zuPOaLAAAAEI"]
[Wed Sep 30 01:09:37.293867 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.294130 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.395323 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.395755 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.442539 2026] [security2:error] [pid 270884:tid 271109] [client 20.219.2.60:25988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-content/radio.php"] [unique_id "ary1sSGeq9LtYp4zuPOaNgAAAFo"]
[Wed Sep 30 01:09:37.444690 2026] [security2:error] [pid 276059:tid 276296] [client 52.172.226.14:39894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary1sXtqdHBwD77138e0DAAAAfQ"]
[Wed Sep 30 01:09:37.474878 2026] [security2:error] [pid 276620:tid 276858] [client 74.225.148.80:16761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/sm.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZlwAAAnc"]
[Wed Sep 30 01:09:37.482585 2026] [security2:error] [pid 270884:tid 271106] [client 20.198.74.230:24138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/000.php"] [unique_id "ary1sSGeq9LtYp4zuPOaOQAAAFc"]
[Wed Sep 30 01:09:37.490414 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.490845 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.509105 2026] [security2:error] [pid 270884:tid 271041] [client 4.240.25.22:41701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/term.php"] [unique_id "ary1sSGeq9LtYp4zuPOaOgAAABY"]
[Wed Sep 30 01:09:37.541918 2026] [access_compat:error] [pid 276059:tid 276299] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:37.542189 2026] [access_compat:error] [pid 276059:tid 276299] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:37.555941 2026] [security2:error] [pid 270884:tid 271108] [client 20.219.2.60:45110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/abrand.php"] [unique_id "ary1sSGeq9LtYp4zuPOaQAAAAFk"]
[Wed Sep 30 01:09:37.571695 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.572092 2026] [security2:error] [pid 270884:tid 271037] [client 43.227.131.37:52640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1sSGeq9LtYp4zuPOaRAAAABI"]
[Wed Sep 30 01:09:37.572136 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.572200 2026] [security2:error] [pid 270884:tid 271037] [client 43.227.131.37:52640] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1sSGeq9LtYp4zuPOaRAAAABI"]
[Wed Sep 30 01:09:37.661087 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.661515 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:50341] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.665529 2026] [security2:error] [pid 276620:tid 276756] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZmwACSX4"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D18180
[Wed Sep 30 01:09:37.689056 2026] [security2:error] [pid 270884:tid 271123] [client 4.240.25.22:8498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/log.php"] [unique_id "ary1sSGeq9LtYp4zuPOaSAAAAGg"]
[Wed Sep 30 01:09:37.696448 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1sSGeq9LtYp4zuPOaSQAAWWg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=75&t=14119
[Wed Sep 30 01:09:37.696488 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1sSGeq9LtYp4zuPOaSQAAWWg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=75&t=14119
[Wed Sep 30 01:09:37.730122 2026] [security2:error] [pid 270884:tid 271037] [client 20.219.19.141:20866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/177.php"] [unique_id "ary1sSGeq9LtYp4zuPOaSgAAABI"]
[Wed Sep 30 01:09:37.733001 2026] [security2:error] [pid 276620:tid 276820] [client 116.193.128.26:54051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZnAAAAlE"]
[Wed Sep 30 01:09:37.733099 2026] [security2:error] [pid 276620:tid 276820] [client 116.193.128.26:54051] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZnAAAAlE"]
[Wed Sep 30 01:09:37.751448 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.751972 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.808418 2026] [security2:error] [pid 270884:tid 271071] [client 20.211.90.37:40412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/lock360.php"] [unique_id "ary1sSGeq9LtYp4zuPOaUgAAADQ"]
[Wed Sep 30 01:09:37.819528 2026] [security2:error] [pid 270884:tid 271051] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1sSGeq9LtYp4zuPOaUwAAACA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:37.843374 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.843673 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:37.882003 2026] [security2:error] [pid 270884:tid 271037] [client 20.204.42.136:3060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/dex.php"] [unique_id "ary1sSGeq9LtYp4zuPOaVQAAABI"]
[Wed Sep 30 01:09:37.924452 2026] [security2:error] [pid 276620:tid 276879] [client 20.219.2.60:26035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/155.php"] [unique_id "ary1sdPAdfEWqmGIkg1ZngAAAow"]
[Wed Sep 30 01:09:37.927512 2026] [security2:error] [pid 270884:tid 271032] [client 74.225.148.80:55266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/mknobgkg.php"] [unique_id "ary1sSGeq9LtYp4zuPOaVwAAAA0"]
[Wed Sep 30 01:09:37.929645 2026] [qos:error] [pid 276620:tid 276664] [remote 217.131.111.25:47110] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=217.131.111.25, id=ary1sdPAdfEWqmGIkg1ZnwACZSI
[Wed Sep 30 01:09:37.933341 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:37.933614 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.000695 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:39928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary1sSGeq9LtYp4zuPOaXQAAAA0"]
[Wed Sep 30 01:09:38.023836 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.024111 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.028720 2026] [security2:error] [pid 276620:tid 276885] [client 31.61.253.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1stPAdfEWqmGIkg1ZogAAApI"]
[Wed Sep 30 01:09:38.035600 2026] [security2:error] [pid 276620:tid 276876] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary1stPAdfEWqmGIkg1ZowAAAok"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:38.048030 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:38.048298 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:38.073129 2026] [security2:error] [pid 270884:tid 271072] [client 216.73.216.46:50341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1siGeq9LtYp4zuPOaYwAAADU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5OS9ub2RlMC9jcHU1
[Wed Sep 30 01:09:38.096137 2026] [qos:error] [pid 276620:tid 276636] [remote 90.89.146.111:42680] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=90.89.146.111, id=ary1stPAdfEWqmGIkg1ZpAACjQY
[Wed Sep 30 01:09:38.097133 2026] [security2:error] [pid 270884:tid 271143] [client 4.240.25.22:18773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1siGeq9LtYp4zuPOaZAAAAHw"]
[Wed Sep 30 01:09:38.116818 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.117139 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.129988 2026] [access_compat:error] [pid 270884:tid 271123] [client 47.79.13.58:43646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:38.130258 2026] [access_compat:error] [pid 270884:tid 271123] [client 47.79.13.58:43646] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:38.194330 2026] [qos:error] [pid 270884:tid 270924] [remote 62.74.27.215:43182] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=62.74.27.215, id=ary1siGeq9LtYp4zuPOaawAAFiY
[Wed Sep 30 01:09:38.207217 2026] [qos:error] [pid 270884:tid 271017] [remote 87.123.243.164:16223] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=87.123.243.164, id=ary1siGeq9LtYp4zuPOabQAAGH8
[Wed Sep 30 01:09:38.209974 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.210407 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.244786 2026] [security2:error] [pid 276620:tid 276872] [client 46.150.92.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1stPAdfEWqmGIkg1ZpwAAAoU"]
[Wed Sep 30 01:09:38.252088 2026] [security2:error] [pid 270884:tid 271101] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1siGeq9LtYp4zuPOabwAAAFI"]
[Wed Sep 30 01:09:38.269230 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:18887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-xmlsia.php"] [unique_id "ary1siGeq9LtYp4zuPOacQAAAFc"]
[Wed Sep 30 01:09:38.298315 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.298592 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.314255 2026] [security2:error] [pid 270884:tid 271041] [client 20.194.30.107:10040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/dronishness.php"] [unique_id "ary1siGeq9LtYp4zuPOadQAAABY"]
[Wed Sep 30 01:09:38.380789 2026] [fcgid:warn] [pid 276620:tid 276790] (70014)End of file found: [client 66.132.172.139:57016] mod_fcgid: can't get data from http client
[Wed Sep 30 01:09:38.396503 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.396962 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.399151 2026] [security2:error] [pid 270884:tid 271130] [client 74.225.148.80:55284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/dairg.php"] [unique_id "ary1siGeq9LtYp4zuPOaeAAAAG8"]
[Wed Sep 30 01:09:38.409420 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:26139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-the.php"] [unique_id "ary1siGeq9LtYp4zuPOaeQAAAFc"]
[Wed Sep 30 01:09:38.436185 2026] [security2:error] [pid 276620:tid 276848] [client 4.240.25.22:12417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/dronishness.php"] [unique_id "ary1stPAdfEWqmGIkg1ZqwAAAm0"]
[Wed Sep 30 01:09:38.452657 2026] [security2:error] [pid 276620:tid 276768] [client 20.219.2.60:49299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/init.php"] [unique_id "ary1stPAdfEWqmGIkg1ZrAAAAh0"]
[Wed Sep 30 01:09:38.473342 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1siGeq9LtYp4zuPOaewAAaDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=54e23724e7f09c450a970768c5dcb870&start=210&t=21812
[Wed Sep 30 01:09:38.473387 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1siGeq9LtYp4zuPOaewAAaDk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=54e23724e7f09c450a970768c5dcb870&start=210&t=21812
[Wed Sep 30 01:09:38.523538 2026] [security2:error] [pid 276620:tid 276759] [client 52.172.226.14:39872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary1stPAdfEWqmGIkg1ZrQAAAhQ"]
[Wed Sep 30 01:09:38.534766 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.535056 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.577650 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.578520 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.580415 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:38.580683 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:38.598844 2026] [security2:error] [pid 270884:tid 271130] [client 20.219.2.60:11856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/sa.php7"] [unique_id "ary1siGeq9LtYp4zuPOaggAAAG8"]
[Wed Sep 30 01:09:38.646563 2026] [security2:error] [pid 276059:tid 276308] [client 43.104.4.200:57351] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary1sntqdHBwD77138e0GgAAAgA"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:09:38.657620 2026] [security2:error] [pid 270884:tid 270910] [remote 168.100.149.198:26194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/metform/build/frontend/app/index.js"] [unique_id "ary1siGeq9LtYp4zuPOafgAAWhg"]
[Wed Sep 30 01:09:38.665548 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.665820 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.696657 2026] [security2:error] [pid 276059:tid 276242] [client 106.214.2.47:1349] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1sntqdHBwD77138e0GQAAAb4"]
[Wed Sep 30 01:09:38.696849 2026] [security2:error] [pid 276059:tid 276242] [client 106.214.2.47:1349] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1sntqdHBwD77138e0GQAAAb4"]
[Wed Sep 30 01:09:38.711291 2026] [security2:error] [pid 276059:tid 276300] [client 20.28.180.172:62366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/public/vx.php"] [unique_id "ary1sntqdHBwD77138e0HAAAAfg"]
[Wed Sep 30 01:09:38.717317 2026] [security2:error] [pid 270884:tid 271000] [remote 86.123.72.39:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.72.123.86.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/wp-login.php"] [unique_id "ary1siGeq9LtYp4zuPOajQAAb24"], referer: https://nysas.org/wp-admin/
[Wed Sep 30 01:09:38.759699 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.760053 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.837061 2026] [security2:error] [pid 276059:tid 276274] [client 20.204.42.136:35749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/xivoefjr.php"] [unique_id "ary1sntqdHBwD77138e0HgAAAd4"]
[Wed Sep 30 01:09:38.849510 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.849783 2026] [access_compat:error] [pid 270884:tid 271051] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.866009 2026] [security2:error] [pid 270884:tid 271123] [client 74.225.148.80:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/dronishness.php"] [unique_id "ary1siGeq9LtYp4zuPOakgAAAGg"]
[Wed Sep 30 01:09:38.875493 2026] [security2:error] [pid 270884:tid 271041] [client 20.70.173.30:56413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/av.php"] [unique_id "ary1siGeq9LtYp4zuPOakwAAABY"]
[Wed Sep 30 01:09:38.885183 2026] [security2:error] [pid 276059:tid 276318] [client 20.219.2.60:26028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp5.php"] [unique_id "ary1sntqdHBwD77138e0HwAAAgo"]
[Wed Sep 30 01:09:38.889335 2026] [security2:error] [pid 270884:tid 271043] [client 223.235.102.107:21295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1siGeq9LtYp4zuPOalQAAABg"]
[Wed Sep 30 01:09:38.889451 2026] [security2:error] [pid 270884:tid 271043] [client 223.235.102.107:21295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1siGeq9LtYp4zuPOalQAAABg"]
[Wed Sep 30 01:09:38.940599 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:38.940863 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:38.973943 2026] [security2:error] [pid 276620:tid 276769] [client 62.112.13.211:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1stPAdfEWqmGIkg1ZsgAAAh4"]
[Wed Sep 30 01:09:38.981849 2026] [security2:error] [pid 276620:tid 276789] [client 4.240.25.22:18777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary1stPAdfEWqmGIkg1ZtQAAAjI"]
[Wed Sep 30 01:09:38.999898 2026] [security2:error] [pid 276059:tid 276302] [client 43.104.4.200:57351] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary1sntqdHBwD77138e0IAAAAfo"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:09:39.031661 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.031964 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:37265] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.044112 2026] [security2:error] [pid 276620:tid 276803] [client 20.219.2.60:45087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gettest.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZtgAAAkA"]
[Wed Sep 30 01:09:39.049581 2026] [security2:error] [pid 276620:tid 276787] [client 20.211.90.37:40398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/4.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZtwAAAjA"]
[Wed Sep 30 01:09:39.105063 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:39.105495 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:39.114270 2026] [security2:error] [pid 276059:tid 276197] [client 52.172.226.14:39978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/index/fucku.php"] [unique_id "ary1s3tqdHBwD77138e0IwAAAZI"]
[Wed Sep 30 01:09:39.122445 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.122717 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.151282 2026] [security2:error] [pid 276620:tid 276811] [client 20.28.180.172:62348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/inege.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZuQAAAkg"]
[Wed Sep 30 01:09:39.214041 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.214292 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.215863 2026] [security2:error] [pid 276620:tid 276776] [client 20.204.42.136:54717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.salesforce-experts.co.uk"] [uri "/wp-wpbak.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZvAAAAiU"]
[Wed Sep 30 01:09:39.296162 2026] [security2:error] [pid 276620:tid 276815] [client 20.219.19.141:20856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/ccc.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZvwAAAkw"]
[Wed Sep 30 01:09:39.301053 2026] [security2:error] [pid 270884:tid 271106] [client 20.213.164.196:21187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/v4.php"] [unique_id "ary1syGeq9LtYp4zuPOarQAAAFc"]
[Wed Sep 30 01:09:39.305076 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.305342 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.365130 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:26113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-access.php"] [unique_id "ary1syGeq9LtYp4zuPOasgAAAAA"]
[Wed Sep 30 01:09:39.368719 2026] [security2:error] [pid 276059:tid 276243] [client 74.225.148.80:16941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/Row_wsoo.php"] [unique_id "ary1s3tqdHBwD77138e0JAAAAb8"]
[Wed Sep 30 01:09:39.416837 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.417282 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.451456 2026] [security2:error] [pid 270884:tid 271083] [client 216.73.216.46:37265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1syGeq9LtYp4zuPOatwAAAEA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mjg0
[Wed Sep 30 01:09:39.458161 2026] [security2:error] [pid 270884:tid 271014] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1syGeq9LtYp4zuPOauAAADXw"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D98305
[Wed Sep 30 01:09:39.458197 2026] [security2:error] [pid 270884:tid 271014] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1syGeq9LtYp4zuPOauAAADXw"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D98305
[Wed Sep 30 01:09:39.494794 2026] [security2:error] [pid 270884:tid 271019] [client 20.28.180.172:29650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/h86jb6g8.php"] [unique_id "ary1syGeq9LtYp4zuPOauQAAAAA"]
[Wed Sep 30 01:09:39.526261 2026] [security2:error] [pid 270884:tid 270964] [remote 86.123.72.39:33230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.72.123.86.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nysas.org"] [uri "/xmlrpc.php"] [unique_id "ary1syGeq9LtYp4zuPOaugAAAko"]
[Wed Sep 30 01:09:39.526425 2026] [security2:error] [pid 270884:tid 271021] [client 86.123.72.39:33230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nysas.org"] [uri "/xmlrpc.php"] [unique_id "ary1syGeq9LtYp4zuPOaugAAAko"]
[Wed Sep 30 01:09:39.539913 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.540159 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.550058 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:33844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/myfile.php"] [unique_id "ary1syGeq9LtYp4zuPOavQAAAGs"]
[Wed Sep 30 01:09:39.555058 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:39.555386 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:39.576159 2026] [security2:error] [pid 276620:tid 276835] [client 20.204.42.136:3034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/chosen.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZxgAAAmA"]
[Wed Sep 30 01:09:39.581899 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.582166 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.619473 2026] [security2:error] [pid 276059:tid 276222] [client 152.232.128.112:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1s3tqdHBwD77138e0KAAAAao"]
[Wed Sep 30 01:09:39.672138 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.672380 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.709428 2026] [security2:error] [pid 276059:tid 276248] [client 45.138.12.32:23510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iih.tjl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1s3tqdHBwD77138e0KQAAAcQ"]
[Wed Sep 30 01:09:39.764516 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.764774 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:18256] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.774674 2026] [security2:error] [pid 276620:tid 276824] [client 52.172.226.14:39962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/upload/wp-info.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZyAAAAlU"]
[Wed Sep 30 01:09:39.840833 2026] [security2:error] [pid 270884:tid 271072] [client 20.219.2.60:26168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/hots.php"] [unique_id "ary1syGeq9LtYp4zuPOa0AAAADU"]
[Wed Sep 30 01:09:39.854735 2026] [security2:error] [pid 276620:tid 276847] [client 74.225.148.80:64402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/x2.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZywAAAmw"]
[Wed Sep 30 01:09:39.856286 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.856536 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.861664 2026] [security2:error] [pid 276620:tid 276873] [client 4.240.25.22:46317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/media.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZzAAAAoY"]
[Wed Sep 30 01:09:39.866464 2026] [security2:error] [pid 276620:tid 276785] [client 152.56.240.85:58178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1s9PAdfEWqmGIkg1ZuAAAAi4"]
[Wed Sep 30 01:09:39.930398 2026] [security2:error] [pid 276059:tid 276317] [client 94.26.106.73:65004] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "vettermysteryship.com"] [uri "/settings.js"] [unique_id "ary1s3tqdHBwD77138e0KgAAAgk"], referer: https://www.google.com/
[Wed Sep 30 01:09:39.946999 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:39.947275 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:39.979575 2026] [security2:error] [pid 270884:tid 270968] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1syGeq9LtYp4zuPOa1gAAd04"], referer: https://forum.torquayfans.com/viewtopic.php?start=60&t=7798
[Wed Sep 30 01:09:39.979610 2026] [security2:error] [pid 270884:tid 270968] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1syGeq9LtYp4zuPOa1gAAd04"], referer: https://forum.torquayfans.com/viewtopic.php?start=60&t=7798
[Wed Sep 30 01:09:40.015826 2026] [security2:error] [pid 276620:tid 276849] [client 20.219.2.60:48100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/sid3.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z0QAAAm4"]
[Wed Sep 30 01:09:40.030019 2026] [security2:error] [pid 270884:tid 271101] [client 155.190.6.18:54446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1tCGeq9LtYp4zuPOa2AAAAFI"]
[Wed Sep 30 01:09:40.030156 2026] [security2:error] [pid 270884:tid 271101] [client 155.190.6.18:54446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1tCGeq9LtYp4zuPOa2AAAAFI"]
[Wed Sep 30 01:09:40.043915 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.044184 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:41192] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.054743 2026] [access_compat:error] [pid 276059:tid 276310] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:40.055095 2026] [access_compat:error] [pid 276059:tid 276310] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:40.067834 2026] [security2:error] [pid 270884:tid 271139] [client 20.219.2.60:18826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gemmgh.com"] [uri "/wp-inic3.php"] [unique_id "ary1tCGeq9LtYp4zuPOa2gAAAHg"]
[Wed Sep 30 01:09:40.095612 2026] [qos:error] [pid 270884:tid 270901] [remote 184.74.67.70:23344] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=184.74.67.70, id=ary1tCGeq9LtYp4zuPOa3gAAVw8
[Wed Sep 30 01:09:40.162560 2026] [security2:error] [pid 270884:tid 271041] [client 216.73.216.46:18256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1tCGeq9LtYp4zuPOa4gAAABY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDEvbm9kZTAvbWVtb3J5NDA4
[Wed Sep 30 01:09:40.176231 2026] [security2:error] [pid 270884:tid 271021] [client 116.197.133.25:53683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1tCGeq9LtYp4zuPOa4wAAAAI"]
[Wed Sep 30 01:09:40.176324 2026] [security2:error] [pid 270884:tid 271021] [client 116.197.133.25:53683] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1tCGeq9LtYp4zuPOa4wAAAAI"]
[Wed Sep 30 01:09:40.177746 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.2.60:11748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/jp.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z1wAAAoQ"]
[Wed Sep 30 01:09:40.187313 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.187697 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.193291 2026] [security2:error] [pid 270884:tid 271106] [client 20.211.90.37:40396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/about.php"] [unique_id "ary1tCGeq9LtYp4zuPOa5gAAAFc"]
[Wed Sep 30 01:09:40.206551 2026] [qos:error] [pid 270884:tid 270978] [remote 176.41.42.222:10981] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=176.41.42.222, id=ary1tCGeq9LtYp4zuPOa5wAAQFg
[Wed Sep 30 01:09:40.213894 2026] [security2:error] [pid 270884:tid 271099] [client 202.81.221.137:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1tCGeq9LtYp4zuPOa6AAAAFA"]
[Wed Sep 30 01:09:40.213991 2026] [security2:error] [pid 270884:tid 271146] [client 45.138.12.43:52712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.zyi.dvz.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary1tCGeq9LtYp4zuPOa6QAAAH8"]
[Wed Sep 30 01:09:40.277231 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.277486 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.303226 2026] [security2:error] [pid 276620:tid 276762] [client 20.219.2.60:26405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/admin-footer.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z2QAAAhc"]
[Wed Sep 30 01:09:40.310041 2026] [security2:error] [pid 270884:tid 271138] [client 52.172.226.14:21403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/post.php"] [unique_id "ary1tCGeq9LtYp4zuPOa6wAAAHc"]
[Wed Sep 30 01:09:40.329602 2026] [security2:error] [pid 270884:tid 271019] [client 74.225.148.80:55260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/v4.php"] [unique_id "ary1tCGeq9LtYp4zuPOa7AAAAAA"]
[Wed Sep 30 01:09:40.350918 2026] [security2:error] [pid 276059:tid 276215] [client 223.181.60.167:26909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1tHtqdHBwD77138e0MAAAAaM"]
[Wed Sep 30 01:09:40.351251 2026] [security2:error] [pid 276059:tid 276215] [client 223.181.60.167:26909] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1tHtqdHBwD77138e0MAAAAaM"]
[Wed Sep 30 01:09:40.377846 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.378281 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.385013 2026] [security2:error] [pid 276620:tid 276778] [client 85.204.70.116:48000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1tNPAdfEWqmGIkg1Z3AAAAic"]
[Wed Sep 30 01:09:40.413561 2026] [security2:error] [pid 276620:tid 276782] [client 20.219.19.141:20862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/0xD.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z3QAAAis"]
[Wed Sep 30 01:09:40.418180 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.418625 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.425470 2026] [security2:error] [pid 276620:tid 276867] [client 20.28.180.172:62398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/nw.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z3gAAAoA"]
[Wed Sep 30 01:09:40.469896 2026] [security2:error] [pid 270884:tid 271041] [client 216.73.216.46:41192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1tCGeq9LtYp4zuPOa8wAAABY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTIvbm9kZTAvbWVtb3J5NzM%3D
[Wed Sep 30 01:09:40.498731 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.499018 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.503186 2026] [security2:error] [pid 270884:tid 271146] [client 20.204.42.136:3041] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.bryantomlinson.com"] [uri "/1.php"] [unique_id "ary1tCGeq9LtYp4zuPOa9wAAAH8"]
[Wed Sep 30 01:09:40.503281 2026] [security2:error] [pid 270884:tid 271146] [client 20.204.42.136:3041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/1.php"] [unique_id "ary1tCGeq9LtYp4zuPOa9wAAAH8"]
[Wed Sep 30 01:09:40.506086 2026] [access_compat:error] [pid 276620:tid 276852] [client 47.79.13.178:44994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:40.506361 2026] [access_compat:error] [pid 276620:tid 276852] [client 47.79.13.178:44994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:40.536884 2026] [security2:error] [pid 276620:tid 276799] [client 20.219.2.60:33799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/666.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z4wAAAjw"]
[Wed Sep 30 01:09:40.553626 2026] [security2:error] [pid 276620:tid 276800] [client 4.240.25.22:18752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/xiugai.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z5QAAAj0"]
[Wed Sep 30 01:09:40.554771 2026] [security2:error] [pid 276620:tid 276759] [client 168.100.149.52:44356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js"] [unique_id "ary1tNPAdfEWqmGIkg1Z5AACFDo"]
[Wed Sep 30 01:09:40.563036 2026] [access_compat:error] [pid 276059:tid 276315] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:40.563290 2026] [access_compat:error] [pid 276059:tid 276315] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:40.576444 2026] [security2:error] [pid 270884:tid 271106] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1tCGeq9LtYp4zuPOa9gAAAFc"]
[Wed Sep 30 01:09:40.589222 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.589486 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.630788 2026] [security2:error] [pid 270884:tid 271041] [client 20.70.173.30:37161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/css.php"] [unique_id "ary1tCGeq9LtYp4zuPOa_wAAABY"]
[Wed Sep 30 01:09:40.683026 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.683299 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.693762 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1tCGeq9LtYp4zuPObAwAAEhk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D7188
[Wed Sep 30 01:09:40.693785 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1tCGeq9LtYp4zuPObAwAAEhk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D7188
[Wed Sep 30 01:09:40.702142 2026] [security2:error] [pid 270884:tid 271104] [client 85.204.70.116:48008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.dentiststudygroup.com"] [uri "/xmlrpc.php"] [unique_id "ary1tCGeq9LtYp4zuPObBAAAAFU"]
[Wed Sep 30 01:09:40.774174 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.774446 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.783498 2026] [security2:error] [pid 276620:tid 276787] [client 20.219.2.60:26042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws84.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z7AAAAjA"]
[Wed Sep 30 01:09:40.790504 2026] [security2:error] [pid 270884:tid 271113] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary1tCGeq9LtYp4zuPObBwAAAF4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:40.800147 2026] [security2:error] [pid 276620:tid 276779] [client 74.225.148.80:55279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/albin.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z7QAAAig"]
[Wed Sep 30 01:09:40.840468 2026] [security2:error] [pid 270884:tid 271124] [client 52.172.226.14:39915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary1tCGeq9LtYp4zuPObEQAAAGk"]
[Wed Sep 30 01:09:40.845613 2026] [qos:error] [pid 276620:tid 276774] [client 31.94.11.69:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1tNPAdfEWqmGIkg1Z8wAAAiM
[Wed Sep 30 01:09:40.862906 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.863360 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:57012] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.869052 2026] [security2:error] [pid 270884:tid 271146] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1tCGeq9LtYp4zuPObEgAAAH8"]
[Wed Sep 30 01:09:40.935804 2026] [security2:error] [pid 276620:tid 276819] [client 20.194.30.107:10151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp.php"] [unique_id "ary1tNPAdfEWqmGIkg1Z9gAAAlA"]
[Wed Sep 30 01:09:40.953803 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:40.954091 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:40.960042 2026] [security2:error] [pid 270884:tid 271111] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1tCGeq9LtYp4zuPObFwAAAFw"]
[Wed Sep 30 01:09:41.031482 2026] [access_compat:error] [pid 276059:tid 276284] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:41.031761 2026] [access_compat:error] [pid 276059:tid 276284] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:41.037963 2026] [security2:error] [pid 276620:tid 276790] [client 45.138.12.32:31214] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qxi.baf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1tdPAdfEWqmGIkg1Z-QAAAjM"]
[Wed Sep 30 01:09:41.045254 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.045597 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.052553 2026] [security2:error] [pid 270884:tid 271067] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1tSGeq9LtYp4zuPObGwAAADA"]
[Wed Sep 30 01:09:41.057005 2026] [security2:error] [pid 276620:tid 276846] [client 20.219.2.60:48083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/xxw.php"] [unique_id "ary1tdPAdfEWqmGIkg1Z-wAAAms"]
[Wed Sep 30 01:09:41.081531 2026] [security2:error] [pid 276620:tid 276854] [client 177.67.28.155:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/led-lamp/"] [unique_id "ary1tdPAdfEWqmGIkg1Z_AAAAnM"]
[Wed Sep 30 01:09:41.105166 2026] [qos:error] [pid 276620:tid 276679] [remote 87.0.135.63:45592] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=87.0.135.63, id=ary1tdPAdfEWqmGIkg1aAgACbDE
[Wed Sep 30 01:09:41.121668 2026] [security2:error] [pid 270884:tid 271113] [client 103.168.67.253:8120] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/dashboard"] [unique_id "ary1tSGeq9LtYp4zuPObIwAAAF4"]
[Wed Sep 30 01:09:41.135356 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.135627 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.147092 2026] [security2:error] [pid 276620:tid 276812] [client 85.204.70.116:48020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1tdPAdfEWqmGIkg1aBQAAAkk"]
[Wed Sep 30 01:09:41.173658 2026] [security2:error] [pid 270884:tid 271146] [client 20.211.90.37:40395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/r.php"] [unique_id "ary1tSGeq9LtYp4zuPObJgAAAH8"]
[Wed Sep 30 01:09:41.215890 2026] [qos:error] [pid 270884:tid 270890] [remote 176.236.212.231:46257] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=176.236.212.231, id=ary1tSGeq9LtYp4zuPObJwAAQAQ
[Wed Sep 30 01:09:41.231639 2026] [security2:error] [pid 276620:tid 276775] [client 103.241.204.139:55935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1tdPAdfEWqmGIkg1aBgAAAiQ"]
[Wed Sep 30 01:09:41.231730 2026] [security2:error] [pid 276620:tid 276775] [client 103.241.204.139:55935] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1tdPAdfEWqmGIkg1aBgAAAiQ"]
[Wed Sep 30 01:09:41.236270 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.236538 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.250021 2026] [security2:error] [pid 270884:tid 271032] [client 20.219.2.60:26368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/bnm.php"] [unique_id "ary1tSGeq9LtYp4zuPObKQAAAA0"]
[Wed Sep 30 01:09:41.261216 2026] [security2:error] [pid 270884:tid 271124] [client 74.225.148.80:16904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/atkno.php"] [unique_id "ary1tSGeq9LtYp4zuPObKwAAAGk"]
[Wed Sep 30 01:09:41.269863 2026] [security2:error] [pid 276059:tid 276239] [client 216.73.216.46:57012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1tXtqdHBwD77138e0OgAAAbs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9jbGFzcy90aGVybWFsL2Nvb2xpbmdfZGV2aWNlMTQvc3Vic3lzdGVtL2Nvb2xpbmdfZGV2aWNlMS9kZXZpY2U%3D
[Wed Sep 30 01:09:41.284106 2026] [security2:error] [pid 270884:tid 271021] [client 158.94.206.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1tSGeq9LtYp4zuPObLQAAAAI"]
[Wed Sep 30 01:09:41.308209 2026] [qos:error] [pid 270884:tid 270945] [remote 80.187.115.103:24808] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=80.187.115.103, id=ary1tSGeq9LtYp4zuPObLwAALjs
[Wed Sep 30 01:09:41.327000 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.327280 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.340251 2026] [security2:error] [pid 270884:tid 271146] [client 52.172.226.14:39890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/adminfuns.php"] [unique_id "ary1tSGeq9LtYp4zuPObMQAAAH8"]
[Wed Sep 30 01:09:41.405009 2026] [security2:error] [pid 270884:tid 271144] [client 20.194.30.107:44702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/av.php"] [unique_id "ary1tSGeq9LtYp4zuPObNQAAAH0"]
[Wed Sep 30 01:09:41.430719 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.431183 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.432872 2026] [security2:error] [pid 270884:tid 271106] [client 85.204.70.116:48036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1tSGeq9LtYp4zuPObOAAAAFc"]
[Wed Sep 30 01:09:41.511281 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.511628 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.542816 2026] [security2:error] [pid 270884:tid 271113] [client 51.171.114.113:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1tSGeq9LtYp4zuPObPgAAAF4"]
[Wed Sep 30 01:09:41.551397 2026] [security2:error] [pid 270884:tid 271073] [client 31.189.214.146:62064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1tSGeq9LtYp4zuPObPwAAADY"]
[Wed Sep 30 01:09:41.552414 2026] [security2:error] [pid 270884:tid 271073] [client 31.189.214.146:62064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary1tSGeq9LtYp4zuPObPwAAADY"]
[Wed Sep 30 01:09:41.558917 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.2.60:33835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-png.php"] [unique_id "ary1tSGeq9LtYp4zuPObQAAAACc"]
[Wed Sep 30 01:09:41.582661 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:41.582947 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:41.608470 2026] [security2:error] [pid 270884:tid 271138] [client 20.219.19.141:20851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/sallu.php"] [unique_id "ary1tSGeq9LtYp4zuPObQwAAAHc"]
[Wed Sep 30 01:09:41.610249 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.610513 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.631469 2026] [security2:error] [pid 276620:tid 276842] [client 179.48.84.242:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1tdPAdfEWqmGIkg1aDwAAAmc"]
[Wed Sep 30 01:09:41.686229 2026] [security2:error] [pid 270884:tid 271032] [client 20.213.164.196:21371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/albin.php"] [unique_id "ary1tSGeq9LtYp4zuPObRwAAAA0"]
[Wed Sep 30 01:09:41.695754 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.696018 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.712730 2026] [security2:error] [pid 270884:tid 271090] [client 85.204.70.116:48052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1tSGeq9LtYp4zuPObSQAAAEc"]
[Wed Sep 30 01:09:41.726576 2026] [security2:error] [pid 276620:tid 276763] [client 74.225.148.80:16924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gptsh.php"] [unique_id "ary1tdPAdfEWqmGIkg1aEwAAAhg"]
[Wed Sep 30 01:09:41.751925 2026] [security2:error] [pid 276059:tid 276250] [client 20.219.2.60:26121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/amax.php"] [unique_id "ary1tXtqdHBwD77138e0QQAAAcY"]
[Wed Sep 30 01:09:41.779189 2026] [security2:error] [pid 270884:tid 271124] [client 20.204.42.136:3057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/radio.php"] [unique_id "ary1tSGeq9LtYp4zuPObTQAAAGk"]
[Wed Sep 30 01:09:41.792063 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.792327 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.798648 2026] [security2:error] [pid 276620:tid 276762] [client 20.219.2.60:11706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-good.php"] [unique_id "ary1tdPAdfEWqmGIkg1aFAAAAhc"]
[Wed Sep 30 01:09:41.847573 2026] [security2:error] [pid 270884:tid 271106] [client 52.172.226.14:39963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/about.php"] [unique_id "ary1tSGeq9LtYp4zuPObVAAAAFc"]
[Wed Sep 30 01:09:41.879701 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.879975 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.897041 2026] [security2:error] [pid 270884:tid 271146] [client 4.240.25.22:18786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/CAE-2.5.php"] [unique_id "ary1tSGeq9LtYp4zuPObWgAAAH8"]
[Wed Sep 30 01:09:41.969981 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:41.970247 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:41.984573 2026] [security2:error] [pid 276620:tid 276782] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary1tdPAdfEWqmGIkg1aGQAAAis"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:41.994486 2026] [security2:error] [pid 276620:tid 276883] [client 85.204.70.116:48074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1tdPAdfEWqmGIkg1aGwAAApA"]
[Wed Sep 30 01:09:42.043037 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:45085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/222.php"] [unique_id "ary1tiGeq9LtYp4zuPObZgAAAH8"]
[Wed Sep 30 01:09:42.052047 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:42.052488 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:42.061481 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.061743 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.076078 2026] [security2:error] [pid 270884:tid 271058] [client 4.240.25.22:41670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wp.php"] [unique_id "ary1tiGeq9LtYp4zuPObaAAAACc"]
[Wed Sep 30 01:09:42.153407 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.153676 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.173902 2026] [security2:error] [pid 270884:tid 271041] [client 74.225.148.80:16710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/rithin.php"] [unique_id "ary1tiGeq9LtYp4zuPObbgAAABY"]
[Wed Sep 30 01:09:42.213596 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.2.60:40757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/66.php"] [unique_id "ary1tiGeq9LtYp4zuPObcQAAACc"]
[Wed Sep 30 01:09:42.246374 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.246645 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.290937 2026] [security2:error] [pid 270884:tid 271099] [client 85.204.70.116:48084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1tiGeq9LtYp4zuPObeAAAAFA"]
[Wed Sep 30 01:09:42.337344 2026] [security2:error] [pid 270884:tid 271083] [client 52.172.226.14:21376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/BDKR28WP.php"] [unique_id "ary1tiGeq9LtYp4zuPObfQAAAEA"]
[Wed Sep 30 01:09:42.337492 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.337773 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.441712 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.442374 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.466937 2026] [security2:error] [pid 270884:tid 271106] [client 85.204.70.116:18069] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary1tiGeq9LtYp4zuPObhAAAAFc"]
[Wed Sep 30 01:09:42.511041 2026] [security2:error] [pid 270884:tid 271102] [client 20.28.180.172:18307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/t.php"] [unique_id "ary1tiGeq9LtYp4zuPObhQAAAFM"]
[Wed Sep 30 01:09:42.526684 2026] [access_compat:error] [pid 276620:tid 276768] [client 47.79.13.73:39252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:42.526960 2026] [access_compat:error] [pid 276620:tid 276768] [client 47.79.13.73:39252] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:42.528191 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.528467 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.540769 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:42.541033 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:42.546132 2026] [security2:error] [pid 276059:tid 276305] [client 168.100.149.58:23852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/plupload/plupload.min.js"] [unique_id "ary1tntqdHBwD77138e0SQAB_SQ"]
[Wed Sep 30 01:09:42.551072 2026] [security2:error] [pid 276059:tid 276291] [client 20.219.2.60:49310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-blog.php"] [unique_id "ary1tntqdHBwD77138e0SgAAAe8"]
[Wed Sep 30 01:09:42.552619 2026] [security2:error] [pid 276620:tid 276802] [client 20.204.42.136:3065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/blacks.php"] [unique_id "ary1ttPAdfEWqmGIkg1aIQAAAj8"]
[Wed Sep 30 01:09:42.572677 2026] [security2:error] [pid 270884:tid 271037] [client 85.204.70.116:48090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1tiGeq9LtYp4zuPObhwAAABI"]
[Wed Sep 30 01:09:42.619083 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.619360 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.646147 2026] [security2:error] [pid 270884:tid 271073] [client 20.70.173.30:59995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/reviall.php"] [unique_id "ary1tiGeq9LtYp4zuPObiwAAADY"]
[Wed Sep 30 01:09:42.650581 2026] [security2:error] [pid 276059:tid 276301] [client 74.225.148.80:16748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/il.php"] [unique_id "ary1tntqdHBwD77138e0TAAAAfk"]
[Wed Sep 30 01:09:42.680944 2026] [security2:error] [pid 270884:tid 271099] [client 20.219.2.60:26043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/public/file.php"] [unique_id "ary1tiGeq9LtYp4zuPObjgAAAFA"]
[Wed Sep 30 01:09:42.712400 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.712673 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.741668 2026] [security2:error] [pid 276059:tid 276229] [client 4.240.25.22:8492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-the.php"] [unique_id "ary1tntqdHBwD77138e0TQAAAbE"]
[Wed Sep 30 01:09:42.762291 2026] [security2:error] [pid 270884:tid 271049] [client 85.204.70.116:48098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary1tiGeq9LtYp4zuPObkwAAAB4"]
[Wed Sep 30 01:09:42.764139 2026] [security2:error] [pid 276059:tid 276273] [client 20.211.90.37:40434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/v4.php"] [unique_id "ary1tntqdHBwD77138e0TwAAAd0"]
[Wed Sep 30 01:09:42.791699 2026] [security2:error] [pid 276059:tid 276263] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1tntqdHBwD77138e0UQAAAdM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:42.804187 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.804489 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.862271 2026] [security2:error] [pid 276059:tid 276313] [client 85.204.70.116:9305] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1tntqdHBwD77138e0UwAAAgU"]
[Wed Sep 30 01:09:42.894430 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.894688 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:42.902312 2026] [security2:error] [pid 276620:tid 276836] [client 52.172.226.14:39976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/file5.php"] [unique_id "ary1ttPAdfEWqmGIkg1aKgAAAmE"]
[Wed Sep 30 01:09:42.919093 2026] [security2:error] [pid 270884:tid 271058] [client 37.41.16.35:57216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1tiGeq9LtYp4zuPOboAAAACc"]
[Wed Sep 30 01:09:42.919199 2026] [security2:error] [pid 270884:tid 271058] [client 37.41.16.35:57216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1tiGeq9LtYp4zuPOboAAAACc"]
[Wed Sep 30 01:09:42.990280 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:42.990724 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.029339 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:48079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary1tyGeq9LtYp4zuPObowAAAH8"]
[Wed Sep 30 01:09:43.059998 2026] [security2:error] [pid 270884:tid 271065] [client 49.43.163.212:62863] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1tiGeq9LtYp4zuPOboQAAAC4"]
[Wed Sep 30 01:09:43.060120 2026] [security2:error] [pid 270884:tid 271065] [client 49.43.163.212:62863] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1tiGeq9LtYp4zuPOboQAAAC4"]
[Wed Sep 30 01:09:43.076378 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.076665 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.090374 2026] [security2:error] [pid 270884:tid 271037] [client 20.70.173.30:7362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-content/index.php"] [unique_id "ary1tyGeq9LtYp4zuPObqgAAABI"]
[Wed Sep 30 01:09:43.091626 2026] [security2:error] [pid 270884:tid 271082] [client 20.194.96.176:53505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/blacks.php"] [unique_id "ary1tyGeq9LtYp4zuPObqwAAAD8"]
[Wed Sep 30 01:09:43.104163 2026] [access_compat:error] [pid 276059:tid 276303] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:43.104414 2026] [access_compat:error] [pid 276059:tid 276303] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:43.125840 2026] [security2:error] [pid 276620:tid 276823] [client 74.225.148.80:16724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/1klopedf.php"] [unique_id "ary1t9PAdfEWqmGIkg1aMAAAAlQ"]
[Wed Sep 30 01:09:43.150578 2026] [security2:error] [pid 270884:tid 271043] [client 85.204.70.116:29168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1tyGeq9LtYp4zuPObrwAAABg"]
[Wed Sep 30 01:09:43.171327 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.171864 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.173029 2026] [security2:error] [pid 276620:tid 276813] [client 20.219.2.60:26375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/166.php"] [unique_id "ary1t9PAdfEWqmGIkg1aMQAAAko"]
[Wed Sep 30 01:09:43.225010 2026] [security2:error] [pid 270884:tid 271073] [client 20.204.42.136:3020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/run.php"] [unique_id "ary1tyGeq9LtYp4zuPObsQAAADY"]
[Wed Sep 30 01:09:43.236084 2026] [security2:error] [pid 270884:tid 271106] [client 20.198.74.230:23914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wp5.php"] [unique_id "ary1tyGeq9LtYp4zuPObsgAAAFc"]
[Wed Sep 30 01:09:43.254335 2026] [qos:error] [pid 270884:tid 270898] [remote 213.188.127.242:64975] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=213.188.127.242, id=ary1tyGeq9LtYp4zuPObuAAAEgw
[Wed Sep 30 01:09:43.258466 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.258945 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.348099 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.348376 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.375733 2026] [security2:error] [pid 276059:tid 276267] [client 4.240.25.22:43790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/f35.update.php"] [unique_id "ary1t3tqdHBwD77138e0VQAAAdc"]
[Wed Sep 30 01:09:43.383020 2026] [security2:error] [pid 270884:tid 271102] [client 69.57.172.96:41616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary1tyGeq9LtYp4zuPObwAAAAFM"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:09:43.406096 2026] [security2:error] [pid 276620:tid 276834] [client 52.172.226.14:21401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/b8.php"] [unique_id "ary1t9PAdfEWqmGIkg1aNgAAAl8"]
[Wed Sep 30 01:09:43.444547 2026] [security2:error] [pid 270884:tid 271058] [client 85.204.70.116:48120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1tyGeq9LtYp4zuPObxgAAACc"]
[Wed Sep 30 01:09:43.444894 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.445314 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.467564 2026] [security2:error] [pid 276059:tid 276302] [client 85.204.70.116:12720] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1t3tqdHBwD77138e0VgAAAfo"]
[Wed Sep 30 01:09:43.488628 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.2.60:45080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/lib.php"] [unique_id "ary1tyGeq9LtYp4zuPObyAAAAF4"]
[Wed Sep 30 01:09:43.492369 2026] [security2:error] [pid 270884:tid 271041] [client 20.28.180.172:29477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/chfjgjn.php"] [unique_id "ary1tyGeq9LtYp4zuPObyQAAABY"]
[Wed Sep 30 01:09:43.530814 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.531079 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.588556 2026] [access_compat:error] [pid 276059:tid 276197] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:43.588861 2026] [access_compat:error] [pid 276059:tid 276197] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:43.598158 2026] [security2:error] [pid 270884:tid 271131] [client 74.225.148.80:17094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/zv.php"] [unique_id "ary1tyGeq9LtYp4zuPOb0QAAAHA"]
[Wed Sep 30 01:09:43.617307 2026] [security2:error] [pid 270884:tid 271023] [client 4.240.25.22:18811] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.davidtech.us"] [uri "/1.php"] [unique_id "ary1tyGeq9LtYp4zuPOb1AAAAAQ"]
[Wed Sep 30 01:09:43.617454 2026] [security2:error] [pid 270884:tid 271023] [client 4.240.25.22:18811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/1.php"] [unique_id "ary1tyGeq9LtYp4zuPOb1AAAAAQ"]
[Wed Sep 30 01:09:43.621328 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.621597 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.646048 2026] [security2:error] [pid 270884:tid 271040] [client 20.219.2.60:26012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/ws77.php"] [unique_id "ary1tyGeq9LtYp4zuPOb1gAAABU"]
[Wed Sep 30 01:09:43.655961 2026] [security2:error] [pid 270884:tid 271099] [client 20.204.42.136:35741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/a22.php"] [unique_id "ary1tyGeq9LtYp4zuPOb1wAAAFA"]
[Wed Sep 30 01:09:43.712929 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.713192 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.730874 2026] [security2:error] [pid 270884:tid 271023] [client 85.204.70.116:48152] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1tyGeq9LtYp4zuPOb2QAAAAQ"]
[Wed Sep 30 01:09:43.748926 2026] [security2:error] [pid 270884:tid 271113] [client 85.204.70.116:48168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1tyGeq9LtYp4zuPOb2wAAAF4"]
[Wed Sep 30 01:09:43.803836 2026] [security2:error] [pid 270884:tid 271082] [client 201.32.215.149:8995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1tyGeq9LtYp4zuPOb3QAAAD8"]
[Wed Sep 30 01:09:43.803965 2026] [security2:error] [pid 270884:tid 271082] [client 201.32.215.149:8995] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1tyGeq9LtYp4zuPOb3QAAAD8"]
[Wed Sep 30 01:09:43.810173 2026] [security2:error] [pid 270884:tid 271099] [client 20.219.2.60:11717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/a5.php"] [unique_id "ary1tyGeq9LtYp4zuPOb3gAAAFA"]
[Wed Sep 30 01:09:43.811570 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.811849 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.824048 2026] [qos:error] [pid 270884:tid 271090] [client 176.114.240.5:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1tyGeq9LtYp4zuPOb3wAAAEc
[Wed Sep 30 01:09:43.895866 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.896148 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:43.916622 2026] [security2:error] [pid 276620:tid 276849] [client 20.204.42.136:3037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/vpn.php"] [unique_id "ary1t9PAdfEWqmGIkg1aPQAAAm4"]
[Wed Sep 30 01:09:43.931503 2026] [security2:error] [pid 276620:tid 276775] [client 4.240.25.22:18755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/sxxb.php"] [unique_id "ary1t9PAdfEWqmGIkg1aPgAAAiQ"]
[Wed Sep 30 01:09:43.931873 2026] [security2:error] [pid 276620:tid 276857] [client 45.138.12.32:43730] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qxi.baf.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1t9PAdfEWqmGIkg1aPwAAAnY"]
[Wed Sep 30 01:09:43.953888 2026] [security2:error] [pid 270884:tid 271131] [client 20.219.2.60:48091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/edit.php"] [unique_id "ary1tyGeq9LtYp4zuPOb7AAAAHA"]
[Wed Sep 30 01:09:43.960162 2026] [security2:error] [pid 270884:tid 271080] [client 52.172.226.14:39946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/133.php"] [unique_id "ary1tyGeq9LtYp4zuPOb7gAAAD0"]
[Wed Sep 30 01:09:43.987302 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:43.987566 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.026177 2026] [security2:error] [pid 270884:tid 271131] [client 85.204.70.116:48170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1uCGeq9LtYp4zuPOb8gAAAHA"]
[Wed Sep 30 01:09:44.035140 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:44.035418 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:44.042263 2026] [security2:error] [pid 276620:tid 276858] [client 179.49.32.162:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1uNPAdfEWqmGIkg1aQQAAAnc"]
[Wed Sep 30 01:09:44.042415 2026] [security2:error] [pid 270884:tid 271082] [client 85.204.70.116:48178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1uCGeq9LtYp4zuPOb9AAAAD8"]
[Wed Sep 30 01:09:44.057183 2026] [security2:error] [pid 276620:tid 276771] [client 74.225.148.80:63588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/zv.update.php"] [unique_id "ary1uNPAdfEWqmGIkg1aRQAAAiA"]
[Wed Sep 30 01:09:44.069620 2026] [security2:error] [pid 270884:tid 271023] [client 45.138.12.32:31300] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qyd.ewu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1uCGeq9LtYp4zuPOb9gAAAAQ"]
[Wed Sep 30 01:09:44.103502 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uCGeq9LtYp4zuPOb-AAAUDk"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=6&sid=6dcc59a2765c1d6f4140ed0979113698&start=125
[Wed Sep 30 01:09:44.103538 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uCGeq9LtYp4zuPOb-AAAUDk"], referer: https://uxa.hoh.mybluehost.me/viewforum.php?f=6&sid=6dcc59a2765c1d6f4140ed0979113698&start=125
[Wed Sep 30 01:09:44.120018 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.2.60:26167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/www.php"] [unique_id "ary1uNPAdfEWqmGIkg1aRwAAAoQ"]
[Wed Sep 30 01:09:44.150155 2026] [security2:error] [pid 270884:tid 271040] [client 20.213.164.196:21316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/atkno.php"] [unique_id "ary1uCGeq9LtYp4zuPOb_AAAABU"]
[Wed Sep 30 01:09:44.172167 2026] [security2:error] [pid 270884:tid 271139] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1uCGeq9LtYp4zuPOb9wAAAHg"]
[Wed Sep 30 01:09:44.204076 2026] [qos:error] [pid 270884:tid 270910] [remote 94.35.159.172:44352] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=94.35.159.172, id=ary1uCGeq9LtYp4zuPOb_QAABBg
[Wed Sep 30 01:09:44.251957 2026] [qos:error] [pid 276059:tid 276070] [remote 75.84.149.40:59568] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=75.84.149.40, id=ary1uHtqdHBwD77138e0WQABrgY
[Wed Sep 30 01:09:44.264137 2026] [security2:error] [pid 270884:tid 271099] [client 20.70.173.30:38793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary1uCGeq9LtYp4zuPOb_gAAAFA"]
[Wed Sep 30 01:09:44.272832 2026] [qos:error] [pid 270884:tid 270932] [remote 78.92.190.182:56680] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=78.92.190.182, id=ary1uCGeq9LtYp4zuPOcAAAATy4
[Wed Sep 30 01:09:44.304475 2026] [qos:error] [pid 270884:tid 271000] [remote 156.202.205.30:21906] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=156.202.205.30, id=ary1uCGeq9LtYp4zuPOcAQAAQG4
[Wed Sep 30 01:09:44.305320 2026] [security2:error] [pid 276620:tid 276855] [client 85.204.70.116:48190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary1uNPAdfEWqmGIkg1aSAAAAnQ"]
[Wed Sep 30 01:09:44.339326 2026] [security2:error] [pid 270884:tid 271138] [client 85.204.70.116:48204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1uCGeq9LtYp4zuPOcBAAAAHc"]
[Wed Sep 30 01:09:44.341994 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.342279 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.359686 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.360112 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.413577 2026] [security2:error] [pid 276620:tid 276880] [client 20.211.90.37:40394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-22.php"] [unique_id "ary1uNPAdfEWqmGIkg1aTQAAAo0"]
[Wed Sep 30 01:09:44.431202 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:54117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.431660 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:54117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.466822 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:1975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.467300 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:1975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.469913 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.470451 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.477448 2026] [security2:error] [pid 276059:tid 276259] [client 20.219.2.60:49324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ioxi-o.php"] [unique_id "ary1uHtqdHBwD77138e0XQAAAc8"]
[Wed Sep 30 01:09:44.505867 2026] [security2:error] [pid 276620:tid 276877] [client 20.204.42.136:3052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/alfa.php"] [unique_id "ary1uNPAdfEWqmGIkg1aUQAAAoo"]
[Wed Sep 30 01:09:44.520628 2026] [security2:error] [pid 276620:tid 276802] [client 74.225.148.80:63563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/wquosqsi.php"] [unique_id "ary1uNPAdfEWqmGIkg1aUgAAAj8"]
[Wed Sep 30 01:09:44.532903 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.533152 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.565721 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:44.566150 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:44.567412 2026] [security2:error] [pid 270884:tid 271065] [client 168.100.149.217:37366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/metform/assets/libs/htm/htm.js"] [unique_id "ary1uCGeq9LtYp4zuPOcEAAALnI"]
[Wed Sep 30 01:09:44.588664 2026] [security2:error] [pid 276620:tid 276841] [client 85.204.70.116:35889] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1uNPAdfEWqmGIkg1aVQAAAmY"]
[Wed Sep 30 01:09:44.610319 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.2.60:26384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/adoms.php"] [unique_id "ary1uCGeq9LtYp4zuPOcEQAAAGQ"]
[Wed Sep 30 01:09:44.618585 2026] [security2:error] [pid 270884:tid 271106] [client 85.204.70.116:48226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dentiststudygroup.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1uCGeq9LtYp4zuPOcFAAAAFc"]
[Wed Sep 30 01:09:44.626757 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.627180 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.667402 2026] [security2:error] [pid 270884:tid 271080] [client 52.172.226.14:39947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/ano.php"] [unique_id "ary1uCGeq9LtYp4zuPOcGAAAAD0"]
[Wed Sep 30 01:09:44.671468 2026] [security2:error] [pid 270884:tid 271049] [client 20.28.180.172:18151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ary1uCGeq9LtYp4zuPOcGQAAAB4"]
[Wed Sep 30 01:09:44.713110 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.713428 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.761593 2026] [security2:error] [pid 270884:tid 271040] [client 20.219.19.141:20857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/ops.php"] [unique_id "ary1uCGeq9LtYp4zuPOcHwAAABU"]
[Wed Sep 30 01:09:44.783479 2026] [security2:error] [pid 270884:tid 271106] [client 20.219.2.60:11719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/amp.php"] [unique_id "ary1uCGeq9LtYp4zuPOcIAAAAFc"]
[Wed Sep 30 01:09:44.809079 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.809530 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.848894 2026] [security2:error] [pid 270884:tid 271113] [client 4.240.25.22:43804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/sb.php"] [unique_id "ary1uCGeq9LtYp4zuPOcJwAAAF4"]
[Wed Sep 30 01:09:44.860478 2026] [security2:error] [pid 270884:tid 271102] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1uCGeq9LtYp4zuPOb_wAAAFM"]
[Wed Sep 30 01:09:44.886169 2026] [security2:error] [pid 270884:tid 271111] [client 85.204.70.116:48228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary1uCGeq9LtYp4zuPOcKgAAAFw"]
[Wed Sep 30 01:09:44.897364 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.897820 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:44.987442 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:44.987448 2026] [security2:error] [pid 270884:tid 271102] [client 74.225.148.80:17122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/asset.php"] [unique_id "ary1uCGeq9LtYp4zuPOcMAAAAFM"]
[Wed Sep 30 01:09:44.987793 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.003920 2026] [security2:error] [pid 270884:tid 271084] [client 4.240.25.22:18813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/classwithtostring.php"] [unique_id "ary1uSGeq9LtYp4zuPOcMQAAAEE"]
[Wed Sep 30 01:09:45.018827 2026] [security2:error] [pid 270884:tid 271080] [client 20.211.90.37:40435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/makeasmtp.php"] [unique_id "ary1uSGeq9LtYp4zuPOcMgAAAD0"]
[Wed Sep 30 01:09:45.024232 2026] [security2:error] [pid 270884:tid 271078] [client 20.219.2.60:45112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ajax.php"] [unique_id "ary1uSGeq9LtYp4zuPOcNAAAADs"]
[Wed Sep 30 01:09:45.067361 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:45.067650 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:45.079712 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.2.60:26129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/tymn.php"] [unique_id "ary1uSGeq9LtYp4zuPOcNwAAAGM"]
[Wed Sep 30 01:09:45.080686 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.081093 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.111406 2026] [access_compat:error] [pid 270884:tid 271073] [client 47.79.13.58:50372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:45.111660 2026] [access_compat:error] [pid 270884:tid 271073] [client 47.79.13.58:50372] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:45.137507 2026] [security2:error] [pid 270884:tid 271119] [client 69.57.172.96:33652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary1uSGeq9LtYp4zuPOcOwAAAGQ"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:09:45.166046 2026] [security2:error] [pid 270884:tid 271058] [client 85.204.70.116:48230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary1uSGeq9LtYp4zuPOcPwAAACc"]
[Wed Sep 30 01:09:45.168752 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.169028 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.259268 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.259569 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.297083 2026] [security2:error] [pid 270884:tid 271077] [client 203.122.45.246:53260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1uSGeq9LtYp4zuPOcSQAAADo"]
[Wed Sep 30 01:09:45.297181 2026] [security2:error] [pid 270884:tid 271077] [client 203.122.45.246:53260] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1uSGeq9LtYp4zuPOcSQAAADo"]
[Wed Sep 30 01:09:45.349139 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.349404 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.391337 2026] [security2:error] [pid 270884:tid 270912] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uSGeq9LtYp4zuPOcTgAAPxo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=210&t=21812
[Wed Sep 30 01:09:45.391381 2026] [security2:error] [pid 270884:tid 270912] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uSGeq9LtYp4zuPOcTgAAPxo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=210&t=21812
[Wed Sep 30 01:09:45.414756 2026] [security2:error] [pid 270884:tid 271100] [client 20.70.173.30:3834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/ops.php"] [unique_id "ary1uSGeq9LtYp4zuPOcUAAAAFE"]
[Wed Sep 30 01:09:45.417889 2026] [security2:error] [pid 276620:tid 276716] [remote 57.141.14.80:57966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/4/"] [unique_id "ary1udPAdfEWqmGIkg1aYwACeVY"]
[Wed Sep 30 01:09:45.420898 2026] [security2:error] [pid 270884:tid 271131] [client 52.172.226.14:39878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/sf.php"] [unique_id "ary1uSGeq9LtYp4zuPOcUQAAAHA"]
[Wed Sep 30 01:09:45.433177 2026] [security2:error] [pid 276620:tid 276846] [client 20.28.180.172:29591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/83a907c742index.php"] [unique_id "ary1udPAdfEWqmGIkg1aZQAAAms"]
[Wed Sep 30 01:09:45.452587 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.453036 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.462056 2026] [security2:error] [pid 270884:tid 271146] [client 74.225.148.80:17110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/cued.php"] [unique_id "ary1uSGeq9LtYp4zuPOcVwAAAH8"]
[Wed Sep 30 01:09:45.478076 2026] [qos:error] [pid 276620:tid 276832] [client 81.102.128.163:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1udPAdfEWqmGIkg1aZgAAAl0
[Wed Sep 30 01:09:45.482327 2026] [security2:error] [pid 270884:tid 271032] [client 85.204.70.116:48242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1uSGeq9LtYp4zuPOcWgAAAA0"]
[Wed Sep 30 01:09:45.513331 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.2.60:33801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/install.php"] [unique_id "ary1uSGeq9LtYp4zuPOcWwAAAGM"]
[Wed Sep 30 01:09:45.521360 2026] [security2:error] [pid 270884:tid 271072] [client 122.173.27.10:24297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1uSGeq9LtYp4zuPOcXAAAADU"]
[Wed Sep 30 01:09:45.524160 2026] [security2:error] [pid 270884:tid 271072] [client 122.173.27.10:24297] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1uSGeq9LtYp4zuPOcXAAAADU"]
[Wed Sep 30 01:09:45.531762 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.532042 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.537893 2026] [security2:error] [pid 276620:tid 276776] [client 152.59.165.7:58056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1udPAdfEWqmGIkg1aZwAAAiU"]
[Wed Sep 30 01:09:45.537983 2026] [security2:error] [pid 276620:tid 276776] [client 152.59.165.7:58056] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1udPAdfEWqmGIkg1aZwAAAiU"]
[Wed Sep 30 01:09:45.554692 2026] [qos:error] [pid 270884:tid 270894] [remote 152.166.173.91:52310] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=152.166.173.91, id=ary1uSGeq9LtYp4zuPOcXwAAKAg
[Wed Sep 30 01:09:45.590369 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:45.590698 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:45.603049 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.2.60:40718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/eetu.php"] [unique_id "ary1uSGeq9LtYp4zuPOcZAAAAGQ"]
[Wed Sep 30 01:09:45.623707 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.624022 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.714891 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.715162 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.739422 2026] [qos:error] [pid 270884:tid 270975] [remote 37.211.38.33:56930] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=37.211.38.33, id=ary1uSGeq9LtYp4zuPOcaAAAd1U
[Wed Sep 30 01:09:45.776630 2026] [security2:error] [pid 270884:tid 271119] [client 85.204.70.116:35494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1uSGeq9LtYp4zuPOcagAAAGQ"]
[Wed Sep 30 01:09:45.778424 2026] [security2:error] [pid 270884:tid 271090] [client 20.211.90.37:40392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/system_log.php"] [unique_id "ary1uSGeq9LtYp4zuPOcawAAAEc"]
[Wed Sep 30 01:09:45.805772 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.806179 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.895743 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.896032 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:45.926931 2026] [security2:error] [pid 270884:tid 271139] [client 74.225.148.80:17101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/sd.php"] [unique_id "ary1uSGeq9LtYp4zuPOccwAAAHg"]
[Wed Sep 30 01:09:45.973052 2026] [qos:error] [pid 270884:tid 270899] [remote 176.58.135.113:50260] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=176.58.135.113, id=ary1uSGeq9LtYp4zuPOcdgAAVg0
[Wed Sep 30 01:09:45.984701 2026] [security2:error] [pid 270884:tid 271029] [client 52.172.226.14:39879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/xx.php"] [unique_id "ary1uSGeq9LtYp4zuPOcfAAAAAo"]
[Wed Sep 30 01:09:45.987057 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:45.987330 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.036212 2026] [security2:error] [pid 270884:tid 271102] [client 20.219.2.60:11340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/abrand.php"] [unique_id "ary1uiGeq9LtYp4zuPOcggAAAFM"]
[Wed Sep 30 01:09:46.047682 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.2.60:48078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/public/wp-blog.php"] [unique_id "ary1uiGeq9LtYp4zuPOchAAAAAo"]
[Wed Sep 30 01:09:46.073285 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.2.60:61455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/dx.php"] [unique_id "ary1uiGeq9LtYp4zuPOchwAAAEA"]
[Wed Sep 30 01:09:46.077312 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.077569 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.081416 2026] [security2:error] [pid 276620:tid 276882] [client 85.204.70.116:35510] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1utPAdfEWqmGIkg1aagAAAo8"]
[Wed Sep 30 01:09:46.082274 2026] [access_compat:error] [pid 276059:tid 276284] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:46.082714 2026] [access_compat:error] [pid 276059:tid 276284] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:46.168954 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.169214 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.259731 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.260021 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.316910 2026] [security2:error] [pid 270884:tid 271131] [client 202.179.95.79:56227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1uiGeq9LtYp4zuPOckgAAAHA"]
[Wed Sep 30 01:09:46.317033 2026] [security2:error] [pid 270884:tid 271131] [client 202.179.95.79:56227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1uiGeq9LtYp4zuPOckgAAAHA"]
[Wed Sep 30 01:09:46.352507 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.352929 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.366894 2026] [security2:error] [pid 276620:tid 276864] [client 20.204.42.136:2982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/w.php"] [unique_id "ary1utPAdfEWqmGIkg1abgAAAn0"]
[Wed Sep 30 01:09:46.382986 2026] [security2:error] [pid 276620:tid 276881] [client 74.225.148.80:64403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/ans.php"] [unique_id "ary1utPAdfEWqmGIkg1abwAAAo4"]
[Wed Sep 30 01:09:46.394341 2026] [security2:error] [pid 270884:tid 271087] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1uiGeq9LtYp4zuPOclgAAAEQ"]
[Wed Sep 30 01:09:46.400695 2026] [security2:error] [pid 276620:tid 276840] [client 85.204.70.116:35524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1utPAdfEWqmGIkg1acAAAAmU"]
[Wed Sep 30 01:09:46.417437 2026] [security2:error] [pid 276620:tid 276885] [client 20.211.90.37:40442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/NewFile.php"] [unique_id "ary1utPAdfEWqmGIkg1acQAAApI"]
[Wed Sep 30 01:09:46.451967 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.452423 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.487222 2026] [security2:error] [pid 276620:tid 276763] [client 52.172.226.14:21439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/file2.php"] [unique_id "ary1utPAdfEWqmGIkg1acwAAAhg"]
[Wed Sep 30 01:09:46.534351 2026] [security2:error] [pid 270884:tid 271111] [client 20.219.2.60:45073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/nw.php"] [unique_id "ary1uiGeq9LtYp4zuPOcngAAAFw"]
[Wed Sep 30 01:09:46.535253 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.535519 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.547345 2026] [security2:error] [pid 276059:tid 276201] [client 168.100.149.61:21918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/core.js"] [unique_id "ary1untqdHBwD77138e0aQABljg"]
[Wed Sep 30 01:09:46.567929 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:46.568369 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:46.595297 2026] [security2:error] [pid 270884:tid 271009] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uiGeq9LtYp4zuPOcogAAQ3c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=934185e4b19f5ab13389d7566ce65813&start=210&t=21812
[Wed Sep 30 01:09:46.595330 2026] [security2:error] [pid 270884:tid 271009] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1uiGeq9LtYp4zuPOcogAAQ3c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=934185e4b19f5ab13389d7566ce65813&start=210&t=21812
[Wed Sep 30 01:09:46.610614 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.2.60:26095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-kikikoko.php"] [unique_id "ary1utPAdfEWqmGIkg1adgAAAik"]
[Wed Sep 30 01:09:46.629082 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.629532 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.694528 2026] [security2:error] [pid 270884:tid 271088] [client 85.204.70.116:22958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary1uiGeq9LtYp4zuPOcpwAAAEU"]
[Wed Sep 30 01:09:46.720031 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.720462 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.744041 2026] [security2:error] [pid 270884:tid 271072] [client 20.28.180.172:62344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/public/ws49.php"] [unique_id "ary1uiGeq9LtYp4zuPOcqgAAADU"]
[Wed Sep 30 01:09:46.784609 2026] [security2:error] [pid 270884:tid 271100] [client 5.42.198.189:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1uiGeq9LtYp4zuPOcrAAAAFE"]
[Wed Sep 30 01:09:46.806648 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:46.806927 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:46.813519 2026] [security2:error] [pid 270884:tid 270890] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1uiGeq9LtYp4zuPOcrgAAeAQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=215438
[Wed Sep 30 01:09:46.813557 2026] [security2:error] [pid 270884:tid 270890] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1uiGeq9LtYp4zuPOcrgAAeAQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=215438
[Wed Sep 30 01:09:46.844053 2026] [security2:error] [pid 270884:tid 271082] [client 74.225.148.80:55294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/cns.php"] [unique_id "ary1uiGeq9LtYp4zuPOcsAAAAD8"]
[Wed Sep 30 01:09:46.928815 2026] [security2:error] [pid 270884:tid 271094] [client 20.70.173.30:59546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/666.php"] [unique_id "ary1uiGeq9LtYp4zuPOcugAAAEs"]
[Wed Sep 30 01:09:46.993378 2026] [security2:error] [pid 276059:tid 276206] [client 85.204.70.116:35544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary1untqdHBwD77138e0cAAAAZs"]
[Wed Sep 30 01:09:47.026659 2026] [security2:error] [pid 276620:tid 276784] [client 52.172.226.14:39969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/m.php"] [unique_id "ary1u9PAdfEWqmGIkg1afgAAAi0"]
[Wed Sep 30 01:09:47.042959 2026] [security2:error] [pid 276059:tid 276250] [client 45.138.12.32:49884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ioy.ppv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1u3tqdHBwD77138e0cQAAAcY"]
[Wed Sep 30 01:09:47.046850 2026] [security2:error] [pid 270884:tid 271146] [client 4.240.25.22:13069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/0.php"] [unique_id "ary1uyGeq9LtYp4zuPOcxQAAAH8"]
[Wed Sep 30 01:09:47.064687 2026] [security2:error] [pid 276059:tid 276290] [client 20.204.42.136:2949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wp_blog_footer.php"] [unique_id "ary1u3tqdHBwD77138e0cgAAAe4"]
[Wed Sep 30 01:09:47.086245 2026] [security2:error] [pid 270884:tid 271111] [client 20.219.2.60:26002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/file61.php"] [unique_id "ary1uyGeq9LtYp4zuPOcyAAAAFw"]
[Wed Sep 30 01:09:47.090529 2026] [access_compat:error] [pid 276059:tid 276281] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:47.090796 2026] [access_compat:error] [pid 276059:tid 276281] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:47.113486 2026] [security2:error] [pid 276620:tid 276765] [client 45.3.40.60:48163] ModSecurity: Access denied with code 406 (phase 1). Pattern match "xmlrpc\\\\.php" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/03_asl_dos.conf"] [line "73"] [id "392331"] [rev "3"] [msg "Atomicorp.com WAF Rules: xmlrpc DOS attack"] [severity "CRITICAL"] [hostname "magisters-terrace.com"] [uri "/xmlrpc.php"] [unique_id "ary1u9PAdfEWqmGIkg1afwAAAho"], referer: https://wordpress.org/
[Wed Sep 30 01:09:47.113627 2026] [security2:error] [pid 276620:tid 276765] [client 45.3.40.60:48163] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "magisters-terrace.com"] [uri "/xmlrpc.php"] [unique_id "ary1u9PAdfEWqmGIkg1afwAAAho"], referer: https://wordpress.org/
[Wed Sep 30 01:09:47.119197 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.119480 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.120368 2026] [security2:error] [pid 276059:tid 276270] [client 20.219.2.60:11871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/init.php"] [unique_id "ary1u3tqdHBwD77138e0dAAAAdo"]
[Wed Sep 30 01:09:47.124002 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.2.60:45111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tool.php"] [unique_id "ary1uyGeq9LtYp4zuPOcygAAAAo"]
[Wed Sep 30 01:09:47.199893 2026] [security2:error] [pid 270884:tid 271036] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1uyGeq9LtYp4zuPOcwwAAABE"]
[Wed Sep 30 01:09:47.208425 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.208680 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.278941 2026] [security2:error] [pid 270884:tid 271119] [client 85.204.70.116:35546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1uyGeq9LtYp4zuPOc1QAAAGQ"]
[Wed Sep 30 01:09:47.299328 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.299595 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.299704 2026] [security2:error] [pid 270884:tid 271036] [client 20.213.164.196:55171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/gptsh.php"] [unique_id "ary1uyGeq9LtYp4zuPOc1wAAABE"]
[Wed Sep 30 01:09:47.308439 2026] [security2:error] [pid 270884:tid 271111] [client 74.225.148.80:55257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/faiy.php"] [unique_id "ary1uyGeq9LtYp4zuPOc2gAAAFw"]
[Wed Sep 30 01:09:47.330409 2026] [security2:error] [pid 276620:tid 276800] [client 161.118.214.16:50624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.cochranlake.org"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary1u9PAdfEWqmGIkg1aggAAAj0"]
[Wed Sep 30 01:09:47.381979 2026] [security2:error] [pid 270884:tid 271078] [client 20.211.90.37:39952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/t.php"] [unique_id "ary1uyGeq9LtYp4zuPOc3QAAADs"]
[Wed Sep 30 01:09:47.397057 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.397556 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.495007 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.495282 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.509043 2026] [security2:error] [pid 276059:tid 276208] [client 20.28.180.172:29474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/r5t.php"] [unique_id "ary1u3tqdHBwD77138e0eQAAAZ0"]
[Wed Sep 30 01:09:47.509246 2026] [security2:error] [pid 270884:tid 271094] [client 182.69.182.151:7504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1uyGeq9LtYp4zuPOc5QAAAEs"]
[Wed Sep 30 01:09:47.509365 2026] [security2:error] [pid 270884:tid 271094] [client 182.69.182.151:7504] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1uyGeq9LtYp4zuPOc5QAAAEs"]
[Wed Sep 30 01:09:47.542850 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:47.543131 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:47.556731 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.2.60:40754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xx.php"] [unique_id "ary1uyGeq9LtYp4zuPOc6AAAACE"]
[Wed Sep 30 01:09:47.559885 2026] [security2:error] [pid 270884:tid 271080] [client 85.204.70.116:35558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1uyGeq9LtYp4zuPOc6QAAAD0"]
[Wed Sep 30 01:09:47.571559 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.571831 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.648212 2026] [security2:error] [pid 270884:tid 271082] [client 103.211.18.63:53903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1uyGeq9LtYp4zuPOc7wAAAD8"]
[Wed Sep 30 01:09:47.648306 2026] [security2:error] [pid 270884:tid 271082] [client 103.211.18.63:53903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1uyGeq9LtYp4zuPOc7wAAAD8"]
[Wed Sep 30 01:09:47.662549 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.662820 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.685312 2026] [security2:error] [pid 276620:tid 276790] [client 20.204.42.136:3023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/robot.php"] [unique_id "ary1u9PAdfEWqmGIkg1aiAAAAjM"]
[Wed Sep 30 01:09:47.714582 2026] [security2:error] [pid 270884:tid 271032] [client 20.219.2.60:44995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/drhunthq.php"] [unique_id "ary1uyGeq9LtYp4zuPOc9AAAAA0"]
[Wed Sep 30 01:09:47.753284 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.753550 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.771053 2026] [security2:error] [pid 270884:tid 271072] [client 74.225.148.80:63611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gecho.php"] [unique_id "ary1uyGeq9LtYp4zuPOc-QAAADU"]
[Wed Sep 30 01:09:47.774999 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.19.141:20924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/mac.php"] [unique_id "ary1uyGeq9LtYp4zuPOc-gAAACE"]
[Wed Sep 30 01:09:47.818293 2026] [security2:error] [pid 270884:tid 271023] [client 20.70.173.30:56429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/edit.php"] [unique_id "ary1uyGeq9LtYp4zuPOc_QAAAAQ"]
[Wed Sep 30 01:09:47.827611 2026] [security2:error] [pid 270884:tid 271043] [client 105.112.178.79:38379] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.aud.bwy.mybluehost.me"] [uri "/.env"] [unique_id "ary1uyGeq9LtYp4zuPOc_gAAABg"]
[Wed Sep 30 01:09:47.842990 2026] [security2:error] [pid 270884:tid 271078] [client 85.204.70.116:35566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.ivd.oxv.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary1uyGeq9LtYp4zuPOdAQAAADs"]
[Wed Sep 30 01:09:47.847356 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.847633 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.922594 2026] [security2:error] [pid 276620:tid 276785] [client 20.211.90.37:40404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/ee.php"] [unique_id "ary1u9PAdfEWqmGIkg1aigAAAi4"]
[Wed Sep 30 01:09:47.936737 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:47.937018 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:47.954931 2026] [security2:error] [pid 276620:tid 276822] [client 52.172.226.14:39968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/33.php"] [unique_id "ary1u9PAdfEWqmGIkg1aiwAAAlM"]
[Wed Sep 30 01:09:47.993413 2026] [security2:error] [pid 270884:tid 271132] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1uyGeq9LtYp4zuPOdBwAAAHE"]
[Wed Sep 30 01:09:48.029488 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.029837 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.035963 2026] [security2:error] [pid 270884:tid 270942] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1vCGeq9LtYp4zuPOdCQAAHjg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=94398766deb6527ededd865c4c09e417&start=30&t=11118
[Wed Sep 30 01:09:48.035983 2026] [security2:error] [pid 270884:tid 270942] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1vCGeq9LtYp4zuPOdCQAAHjg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=94398766deb6527ededd865c4c09e417&start=30&t=11118
[Wed Sep 30 01:09:48.050216 2026] [security2:error] [pid 276059:tid 276221] [client 20.219.2.60:26041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/Jcrop.php"] [unique_id "ary1vHtqdHBwD77138e0gAAAAak"]
[Wed Sep 30 01:09:48.055979 2026] [access_compat:error] [pid 276059:tid 276263] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:48.056245 2026] [access_compat:error] [pid 276059:tid 276263] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:48.112629 2026] [access_compat:error] [pid 270884:tid 270948] [remote 17.166.153.165:54574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.112904 2026] [access_compat:error] [pid 270884:tid 270948] [remote 17.166.153.165:54574] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.118554 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.118815 2026] [access_compat:error] [pid 270884:tid 271082] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.154291 2026] [security2:error] [pid 270884:tid 271140] [client 4.196.65.241:2095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zejjyvzu.php"] [unique_id "ary1vCGeq9LtYp4zuPOdFAAAAHk"]
[Wed Sep 30 01:09:48.181792 2026] [security2:error] [pid 270884:tid 271023] [client 20.219.2.60:49312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/admin/index.php"] [unique_id "ary1vCGeq9LtYp4zuPOdFQAAAAQ"]
[Wed Sep 30 01:09:48.211310 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.211611 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.231905 2026] [security2:error] [pid 270884:tid 271134] [client 74.225.148.80:17108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/gu.php"] [unique_id "ary1vCGeq9LtYp4zuPOdGAAAAHM"]
[Wed Sep 30 01:09:48.245636 2026] [access_compat:error] [pid 270884:tid 271052] [client 47.79.13.53:60756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.245915 2026] [access_compat:error] [pid 270884:tid 271052] [client 47.79.13.53:60756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.302486 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.302753 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.314291 2026] [security2:error] [pid 270884:tid 271088] [client 20.28.180.172:60300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gifclass.php"] [unique_id "ary1vCGeq9LtYp4zuPOdHAAAAEU"]
[Wed Sep 30 01:09:48.374854 2026] [security2:error] [pid 270884:tid 271119] [client 116.193.128.26:54701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1vCGeq9LtYp4zuPOdHgAAAGQ"]
[Wed Sep 30 01:09:48.375028 2026] [security2:error] [pid 270884:tid 271119] [client 116.193.128.26:54701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1vCGeq9LtYp4zuPOdHgAAAGQ"]
[Wed Sep 30 01:09:48.383259 2026] [security2:error] [pid 270884:tid 271082] [client 74.7.242.1:35526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1vCGeq9LtYp4zuPOdHwAAAD8"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:09:48.402883 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.403322 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.474002 2026] [access_compat:error] [pid 276059:tid 276257] [client 47.79.13.234:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.474473 2026] [access_compat:error] [pid 276059:tid 276257] [client 47.79.13.234:53478] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.490765 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.491215 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.525622 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1vCGeq9LtYp4zuPOdJwAASGg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=165&t=1538
[Wed Sep 30 01:09:48.525657 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1vCGeq9LtYp4zuPOdJwAASGg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=165&t=1538
[Wed Sep 30 01:09:48.534831 2026] [security2:error] [pid 276620:tid 276844] [client 20.204.42.136:3045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/sss.php"] [unique_id "ary1vNPAdfEWqmGIkg1amgAAAmk"]
[Wed Sep 30 01:09:48.542527 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:48.542798 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:48.557004 2026] [security2:error] [pid 270884:tid 271134] [client 168.100.149.53:39034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-includes/js/media-editor.min.js"] [unique_id "ary1vCGeq9LtYp4zuPOdKQAAc1M"]
[Wed Sep 30 01:09:48.559819 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.2.60:26386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/rip.php"] [unique_id "ary1vNPAdfEWqmGIkg1angAAAik"]
[Wed Sep 30 01:09:48.574228 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.574498 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.608011 2026] [access_compat:error] [pid 270884:tid 271102] [client 47.79.13.78:44796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.608287 2026] [access_compat:error] [pid 270884:tid 271102] [client 47.79.13.78:44796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:48.651088 2026] [security2:error] [pid 270884:tid 271140] [client 181.199.146.104:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1vCGeq9LtYp4zuPOdLgAAAHk"]
[Wed Sep 30 01:09:48.666043 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.666304 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.671955 2026] [security2:error] [pid 276620:tid 276878] [client 20.219.2.60:48088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tfm.php"] [unique_id "ary1vNPAdfEWqmGIkg1aowAAAos"]
[Wed Sep 30 01:09:48.692358 2026] [security2:error] [pid 270884:tid 271129] [client 74.225.148.80:16732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/nck.php"] [unique_id "ary1vCGeq9LtYp4zuPOdMAAAAG4"]
[Wed Sep 30 01:09:48.707411 2026] [security2:error] [pid 276620:tid 276771] [client 20.219.2.60:11333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gettest.php"] [unique_id "ary1vNPAdfEWqmGIkg1apAAAAiA"]
[Wed Sep 30 01:09:48.726924 2026] [security2:error] [pid 270884:tid 271028] [client 20.204.42.136:35754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/ho.php"] [unique_id "ary1vCGeq9LtYp4zuPOdMQAAAAk"]
[Wed Sep 30 01:09:48.748448 2026] [security2:error] [pid 276059:tid 276265] [client 52.172.226.14:39920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/ccc.php"] [unique_id "ary1vHtqdHBwD77138e0kQAAAdU"]
[Wed Sep 30 01:09:48.757221 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.757524 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.847631 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.847932 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.942002 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:48.942459 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:48.954814 2026] [security2:error] [pid 276059:tid 276219] [client 20.211.90.37:40425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/2.php"] [unique_id "ary1vHtqdHBwD77138e0kgAAAac"]
[Wed Sep 30 01:09:49.001067 2026] [security2:error] [pid 270884:tid 271039] [client 20.219.19.141:20818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/myglu.php"] [unique_id "ary1vSGeq9LtYp4zuPOdOwAAABQ"]
[Wed Sep 30 01:09:49.030171 2026] [security2:error] [pid 276059:tid 276310] [client 20.219.2.60:26166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/new4.php"] [unique_id "ary1vXtqdHBwD77138e0kwAAAgI"]
[Wed Sep 30 01:09:49.031143 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.031404 2026] [access_compat:error] [pid 270884:tid 271102] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.065998 2026] [access_compat:error] [pid 276059:tid 276275] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:49.066279 2026] [access_compat:error] [pid 276059:tid 276275] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:49.120819 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.121098 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.141302 2026] [security2:error] [pid 270884:tid 271032] [client 20.219.2.60:45003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/a4.php"] [unique_id "ary1vSGeq9LtYp4zuPOdRgAAAA0"]
[Wed Sep 30 01:09:49.163916 2026] [security2:error] [pid 270884:tid 271080] [client 74.225.148.80:16943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ferrari250.com"] [uri "/xtt.php"] [unique_id "ary1vSGeq9LtYp4zuPOdRwAAAD0"]
[Wed Sep 30 01:09:49.200462 2026] [security2:error] [pid 276620:tid 276848] [client 43.227.131.37:43450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1vdPAdfEWqmGIkg1arQAAAm0"]
[Wed Sep 30 01:09:49.200552 2026] [security2:error] [pid 276620:tid 276848] [client 43.227.131.37:43450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1vdPAdfEWqmGIkg1arQAAAm0"]
[Wed Sep 30 01:09:49.212835 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.213231 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.245171 2026] [security2:error] [pid 270884:tid 271031] [client 20.204.42.136:3055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/or.php"] [unique_id "ary1vSGeq9LtYp4zuPOdTwAAAAw"]
[Wed Sep 30 01:09:49.269529 2026] [security2:error] [pid 270884:tid 271043] [client 52.172.226.14:21649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/file15.php"] [unique_id "ary1vSGeq9LtYp4zuPOdUAAAABg"]
[Wed Sep 30 01:09:49.301857 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.302121 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.305768 2026] [security2:error] [pid 270884:tid 271093] [client 106.214.2.47:18282] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1vSGeq9LtYp4zuPOdVgAAAEo"]
[Wed Sep 30 01:09:49.306377 2026] [security2:error] [pid 270884:tid 271093] [client 106.214.2.47:18282] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1vSGeq9LtYp4zuPOdVgAAAEo"]
[Wed Sep 30 01:09:49.405674 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.406121 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8350] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.492949 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.493402 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.542268 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:49.542537 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:49.566529 2026] [security2:error] [pid 270884:tid 271093] [client 20.70.173.30:37139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/11.php"] [unique_id "ary1vSGeq9LtYp4zuPOdZAAAAEo"]
[Wed Sep 30 01:09:49.575784 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.576087 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.579004 2026] [access_compat:error] [pid 270884:tid 270985] [remote 17.166.150.207:52562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.579270 2026] [access_compat:error] [pid 270884:tid 270985] [remote 17.166.150.207:52562] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.581744 2026] [security2:error] [pid 276620:tid 276808] [client 20.219.2.60:40747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/aa.php"] [unique_id "ary1vdPAdfEWqmGIkg1aswAAAkU"]
[Wed Sep 30 01:09:49.669346 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.669627 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.683443 2026] [security2:error] [pid 276620:tid 276796] [client 45.138.12.32:31362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iri.yrw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1vdPAdfEWqmGIkg1atAAAAjk"]
[Wed Sep 30 01:09:49.696973 2026] [security2:error] [pid 276620:tid 276791] [client 20.219.2.60:48110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wen.php"] [unique_id "ary1vdPAdfEWqmGIkg1atQAAAjQ"]
[Wed Sep 30 01:09:49.721540 2026] [security2:error] [pid 270884:tid 271102] [client 20.213.164.196:21236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/rithin.php"] [unique_id "ary1vSGeq9LtYp4zuPOdagAAAFM"]
[Wed Sep 30 01:09:49.758754 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.759040 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.772605 2026] [security2:error] [pid 270884:tid 271026] [client 52.172.226.14:39999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/82.php"] [unique_id "ary1vSGeq9LtYp4zuPOdbAAAAAc"]
[Wed Sep 30 01:09:49.782955 2026] [qos:error] [pid 276620:tid 276748] [remote 88.242.209.150:48460] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=88.242.209.150, id=ary1vdPAdfEWqmGIkg1atwACdXY
[Wed Sep 30 01:09:49.827554 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:8350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1vSGeq9LtYp4zuPOdbQAAAAk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTU0
[Wed Sep 30 01:09:49.841045 2026] [security2:error] [pid 270884:tid 271031] [client 20.204.42.136:2947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/b8.php"] [unique_id "ary1vSGeq9LtYp4zuPOdbgAAAAw"]
[Wed Sep 30 01:09:49.842852 2026] [security2:error] [pid 270884:tid 271139] [client 223.235.102.107:22244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1vSGeq9LtYp4zuPOdcAAAAHg"]
[Wed Sep 30 01:09:49.842979 2026] [security2:error] [pid 270884:tid 271139] [client 223.235.102.107:22244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1vSGeq9LtYp4zuPOdcAAAAHg"]
[Wed Sep 30 01:09:49.848502 2026] [access_compat:error] [pid 270884:tid 271039] [client 47.79.13.65:44726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:09:49.848764 2026] [access_compat:error] [pid 270884:tid 271039] [client 47.79.13.65:44726] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:09:49.849050 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.849308 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.940858 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:49.941136 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:40411] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:49.999924 2026] [security2:error] [pid 270884:tid 270987] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1vSGeq9LtYp4zuPOddwAARWE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D85266
[Wed Sep 30 01:09:49.999949 2026] [security2:error] [pid 270884:tid 270987] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1vSGeq9LtYp4zuPOddwAARWE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D85266
[Wed Sep 30 01:09:50.047418 2026] [security2:error] [pid 270884:tid 271102] [client 20.219.2.60:26127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/jk.php"] [unique_id "ary1viGeq9LtYp4zuPOdeAAAAFM"]
[Wed Sep 30 01:09:50.056364 2026] [security2:error] [pid 276620:tid 276853] [client 20.211.90.37:40408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/gmo.php"] [unique_id "ary1vtPAdfEWqmGIkg1auwAAAnI"]
[Wed Sep 30 01:09:50.084818 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.085077 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.085741 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:50.086012 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:50.119319 2026] [security2:error] [pid 270884:tid 271139] [client 20.70.173.30:3226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/or.php"] [unique_id "ary1viGeq9LtYp4zuPOdewAAAHg"]
[Wed Sep 30 01:09:50.174654 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.174936 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.184427 2026] [security2:error] [pid 276620:tid 276845] [client 20.219.2.60:48082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ms.php"] [unique_id "ary1vtPAdfEWqmGIkg1avQAAAmo"]
[Wed Sep 30 01:09:50.219027 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.219311 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.236354 2026] [security2:error] [pid 276620:tid 276874] [client 20.28.180.172:34270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ab.php"] [unique_id "ary1vtPAdfEWqmGIkg1awAAAAoc"]
[Wed Sep 30 01:09:50.241477 2026] [security2:error] [pid 276620:tid 276842] [client 36.50.54.201:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 201.54.50.36.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ary1vtPAdfEWqmGIkg1avwAAAmc"]
[Wed Sep 30 01:09:50.291314 2026] [security2:error] [pid 270884:tid 271134] [client 52.172.226.14:21651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/admin.php/nope.php"] [unique_id "ary1viGeq9LtYp4zuPOdgAAAAHM"]
[Wed Sep 30 01:09:50.308146 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.308418 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.324692 2026] [http2:warn] [pid 263262:tid 263438] [client 52.167.144.188:61605] h2_stream(263262-1105-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:50.355366 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:40411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1viGeq9LtYp4zuPOdggAAAAk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvbWVtb3J5NDUx
[Wed Sep 30 01:09:50.404024 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.404471 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:34971] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.423769 2026] [security2:error] [pid 270884:tid 271139] [client 74.7.244.3:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "website-dfdc9f6c.davidtechnical.com"] [uri "/robots.txt"] [unique_id "ary1viGeq9LtYp4zuPOdhQAAeBg"]
[Wed Sep 30 01:09:50.442980 2026] [security2:error] [pid 276620:tid 276724] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1vtPAdfEWqmGIkg1axgACYl4"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D45186
[Wed Sep 30 01:09:50.447068 2026] [security2:error] [pid 276620:tid 276849] [client 182.75.216.230:59856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1vtPAdfEWqmGIkg1axQAAAm4"]
[Wed Sep 30 01:09:50.447294 2026] [security2:error] [pid 276620:tid 276849] [client 182.75.216.230:59856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary1vtPAdfEWqmGIkg1axQAAAm4"]
[Wed Sep 30 01:09:50.448599 2026] [security2:error] [pid 276059:tid 276268] [client 20.204.42.136:3043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/xex.php"] [unique_id "ary1vntqdHBwD77138e0oQAAAdg"]
[Wed Sep 30 01:09:50.493921 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.494361 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.495789 2026] [http2:warn] [pid 263262:tid 263425] [client 52.167.144.188:58911] h2_stream(263262-485-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:50.531637 2026] [security2:error] [pid 270884:tid 271000] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1viGeq9LtYp4zuPOdiwAAIW4"], referer: https://forum.torquayfans.com/viewtopic.php?p=245155
[Wed Sep 30 01:09:50.531669 2026] [security2:error] [pid 270884:tid 271000] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1viGeq9LtYp4zuPOdiwAAIW4"], referer: https://forum.torquayfans.com/viewtopic.php?p=245155
[Wed Sep 30 01:09:50.538605 2026] [security2:error] [pid 270884:tid 271129] [client 155.190.6.18:45838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1viGeq9LtYp4zuPOdjAAAAG4"]
[Wed Sep 30 01:09:50.542297 2026] [security2:error] [pid 270884:tid 271031] [client 20.219.2.60:61451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/gcqoa.php"] [unique_id "ary1viGeq9LtYp4zuPOdjQAAAAw"]
[Wed Sep 30 01:09:50.557769 2026] [security2:error] [pid 276620:tid 276763] [client 168.100.149.189:64164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/metform/build/frontend/widget-bootstrap/index.js"] [unique_id "ary1vtPAdfEWqmGIkg1axwACGAE"]
[Wed Sep 30 01:09:50.562686 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:50.562969 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:50.564850 2026] [security2:error] [pid 276059:tid 276317] [client 152.56.240.85:58678] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1vXtqdHBwD77138e0nQAAAgk"]
[Wed Sep 30 01:09:50.577728 2026] [security2:error] [pid 270884:tid 271093] [client 20.219.2.60:11902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/myfile.php"] [unique_id "ary1viGeq9LtYp4zuPOdjwAAAEo"]
[Wed Sep 30 01:09:50.596927 2026] [security2:error] [pid 270884:tid 271134] [client 20.70.173.30:33330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/baru.php"] [unique_id "ary1viGeq9LtYp4zuPOdkAAAAHM"]
[Wed Sep 30 01:09:50.624085 2026] [security2:error] [pid 270884:tid 271102] [client 74.7.228.11:38514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "expertgas.net"] [uri "/robots.txt"] [unique_id "ary1viGeq9LtYp4zuPOdkgAAU2U"]
[Wed Sep 30 01:09:50.631980 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.632246 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.644014 2026] [security2:error] [pid 270884:tid 271031] [client 20.211.90.37:40418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/6.php"] [unique_id "ary1viGeq9LtYp4zuPOdlQAAAAw"]
[Wed Sep 30 01:09:50.660713 2026] [security2:error] [pid 276620:tid 276881] [client 116.197.133.25:54313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1vtPAdfEWqmGIkg1ayAAAAo4"]
[Wed Sep 30 01:09:50.660806 2026] [security2:error] [pid 276620:tid 276881] [client 116.197.133.25:54313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1vtPAdfEWqmGIkg1ayAAAAo4"]
[Wed Sep 30 01:09:50.671079 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.671346 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.768564 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.769033 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.772829 2026] [security2:error] [pid 276059:tid 276270] [client 4.196.65.241:2053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/pqfpcelx.php"] [unique_id "ary1vntqdHBwD77138e0pgAAAdo"]
[Wed Sep 30 01:09:50.786166 2026] [security2:error] [pid 270884:tid 271031] [client 52.172.226.14:39885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/222.php"] [unique_id "ary1viGeq9LtYp4zuPOdnQAAAAw"]
[Wed Sep 30 01:09:50.798121 2026] [security2:error] [pid 270884:tid 271063] [client 20.219.2.60:48065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/hplfuns.php"] [unique_id "ary1viGeq9LtYp4zuPOdngAAACw"]
[Wed Sep 30 01:09:50.800761 2026] [security2:error] [pid 270884:tid 271080] [client 20.198.74.230:23917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/new.php"] [unique_id "ary1viGeq9LtYp4zuPOdnwAAAD0"]
[Wed Sep 30 01:09:50.822351 2026] [security2:error] [pid 270884:tid 271068] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1viGeq9LtYp4zuPOdkQAAADE"]
[Wed Sep 30 01:09:50.824605 2026] [security2:error] [pid 270884:tid 271129] [client 155.190.6.18:45838] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1viGeq9LtYp4zuPOdjAAAAG4"]
[Wed Sep 30 01:09:50.853046 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.853322 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.915228 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.201.176:5956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:09:50.915625 2026] [access_compat:error] [pid 270884:tid 271043] [client 47.79.201.176:5956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:09:50.947395 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:50.947877 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:50.958276 2026] [security2:error] [pid 276620:tid 276769] [client 127.0.0.1:48684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary1vtPAdfEWqmGIkg1aywAAAh4"]
[Wed Sep 30 01:09:50.959749 2026] [security2:error] [pid 270884:tid 271093] [client 74.7.175.163:53778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.tzi.rog.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1viGeq9LtYp4zuPOdpgAASnI"]
[Wed Sep 30 01:09:50.988706 2026] [security2:error] [pid 270884:tid 271140] [client 223.181.60.167:20024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1viGeq9LtYp4zuPOdrAAAAHk"]
[Wed Sep 30 01:09:50.988836 2026] [security2:error] [pid 270884:tid 271140] [client 223.181.60.167:20024] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1viGeq9LtYp4zuPOdrAAAAHk"]
[Wed Sep 30 01:09:51.020334 2026] [security2:error] [pid 276620:tid 276884] [client 20.219.2.60:40765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/plugin-editor.php"] [unique_id "ary1v9PAdfEWqmGIkg1azwAAApE"]
[Wed Sep 30 01:09:51.035481 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.035750 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.055214 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:51.055646 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:51.081954 2026] [security2:error] [pid 276620:tid 276793] [client 20.204.42.136:3039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/CAE-2.5.php"] [unique_id "ary1v9PAdfEWqmGIkg1a0AAAAjY"]
[Wed Sep 30 01:09:51.096428 2026] [security2:error] [pid 276620:tid 276772] [client 45.138.12.32:43938] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.qyd.ewu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1v9PAdfEWqmGIkg1a1AAAAiE"]
[Wed Sep 30 01:09:51.128869 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.129304 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.145647 2026] [security2:error] [pid 276620:tid 276833] [client 20.194.30.107:17478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-content/index.php"] [unique_id "ary1v9PAdfEWqmGIkg1a3gAAAl4"]
[Wed Sep 30 01:09:51.216938 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.217197 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.260913 2026] [security2:error] [pid 276059:tid 276212] [client 20.70.173.30:56415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/edit.php"] [unique_id "ary1v3tqdHBwD77138e0sQAAAaA"]
[Wed Sep 30 01:09:51.309392 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.309654 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.322164 2026] [security2:error] [pid 276620:tid 276858] [client 20.219.2.60:45018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tfm.php"] [unique_id "ary1v9PAdfEWqmGIkg1a6QAAAnc"]
[Wed Sep 30 01:09:51.325775 2026] [security2:error] [pid 270884:tid 271068] [client 52.172.226.14:21418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/sallu.php"] [unique_id "ary1vyGeq9LtYp4zuPOdygAAADE"]
[Wed Sep 30 01:09:51.330223 2026] [qos:error] [pid 270884:tid 270912] [remote 86.92.184.134:45162] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.92.184.134, id=ary1vyGeq9LtYp4zuPOdywAADBo
[Wed Sep 30 01:09:51.361035 2026] [core:error] [pid 270884:tid 271072] [client 172.195.104.24:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:51.361062 2026] [core:error] [pid 270884:tid 271072] [client 172.195.104.24:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:51.394546 2026] [security2:error] [pid 270884:tid 271088] [client 103.168.67.253:8122] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/admin"] [unique_id "ary1vyGeq9LtYp4zuPOdzwAAAEU"]
[Wed Sep 30 01:09:51.406295 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.406756 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.491847 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.492134 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.520505 2026] [security2:error] [pid 270884:tid 271132] [client 20.219.2.60:26399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/plugin-install.php"] [unique_id "ary1vyGeq9LtYp4zuPOd2AAAAHE"]
[Wed Sep 30 01:09:51.577005 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:51.577264 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:51.580881 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.581143 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.622222 2026] [security2:error] [pid 270884:tid 271142] [client 20.70.173.30:3835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/baru.php"] [unique_id "ary1vyGeq9LtYp4zuPOd2gAAAHs"]
[Wed Sep 30 01:09:51.672982 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.673249 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.765940 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.766203 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.813266 2026] [security2:error] [pid 270884:tid 271094] [client 20.194.30.107:17350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-blog-header.php"] [unique_id "ary1vyGeq9LtYp4zuPOd5gAAAEs"]
[Wed Sep 30 01:09:51.826190 2026] [security2:error] [pid 276620:tid 276852] [client 20.204.42.136:3040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/ass.php"] [unique_id "ary1v9PAdfEWqmGIkg1a8QAAAnE"]
[Wed Sep 30 01:09:51.843433 2026] [security2:error] [pid 276059:tid 276251] [client 20.219.2.60:45099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/8573.php"] [unique_id "ary1v3tqdHBwD77138e0twAAAcc"]
[Wed Sep 30 01:09:51.856845 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.857188 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.877903 2026] [security2:error] [pid 276620:tid 276797] [client 89.41.42.39:15391] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary1v9PAdfEWqmGIkg1a7wAAAjo"]
[Wed Sep 30 01:09:51.879547 2026] [security2:error] [pid 276059:tid 276273] [client 103.241.204.139:56485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1v3tqdHBwD77138e0uAAAAd0"]
[Wed Sep 30 01:09:51.880191 2026] [security2:error] [pid 276059:tid 276273] [client 103.241.204.139:56485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1v3tqdHBwD77138e0uAAAAd0"]
[Wed Sep 30 01:09:51.896480 2026] [security2:error] [pid 270884:tid 271129] [client 52.172.226.14:39988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/k.php"] [unique_id "ary1vyGeq9LtYp4zuPOd6wAAAG4"]
[Wed Sep 30 01:09:51.924500 2026] [security2:error] [pid 270884:tid 271068] [client 4.196.65.241:53096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/df.php"] [unique_id "ary1vyGeq9LtYp4zuPOd7wAAADE"]
[Wed Sep 30 01:09:51.949325 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:51.949834 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:51.994883 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.2.60:26067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/profile.php"] [unique_id "ary1v9PAdfEWqmGIkg1a8gAAAik"]
[Wed Sep 30 01:09:52.038689 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.038977 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.039199 2026] [qos:error] [pid 276620:tid 276644] [remote 93.203.180.186:62433] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=93.203.180.186, id=ary1wNPAdfEWqmGIkg1a8wACGA4
[Wed Sep 30 01:09:52.070120 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:52.070400 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:52.092246 2026] [security2:error] [pid 276059:tid 276274] [client 20.219.2.60:11903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/sid3.php"] [unique_id "ary1wHtqdHBwD77138e0vAAAAd4"]
[Wed Sep 30 01:09:52.119267 2026] [qos:error] [pid 270884:tid 270975] [remote 38.25.53.129:9933] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=38.25.53.129, id=ary1wCGeq9LtYp4zuPOd9QAAFFU
[Wed Sep 30 01:09:52.128208 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.128478 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.136303 2026] [qos:error] [pid 276620:tid 276647] [remote 109.136.211.254:36724] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=109.136.211.254, id=ary1wNPAdfEWqmGIkg1a9QACihE
[Wed Sep 30 01:09:52.218648 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.218923 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.235198 2026] [security2:error] [pid 270884:tid 271130] [client 187.237.178.130:6873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.178.237.187.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-login.php"] [unique_id "ary1wCGeq9LtYp4zuPOd_wAAAG8"], referer: https://hopethroughrestoration.org/wp-login.php
[Wed Sep 30 01:09:52.263633 2026] [security2:error] [pid 276620:tid 276826] [client 20.211.90.37:39921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/12.php"] [unique_id "ary1wNPAdfEWqmGIkg1a-QAAAlc"]
[Wed Sep 30 01:09:52.275936 2026] [qos:error] [pid 270884:tid 270996] [remote 85.247.158.103:37438] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=85.247.158.103, id=ary1wCGeq9LtYp4zuPOeAQAALmo
[Wed Sep 30 01:09:52.314597 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.315043 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.385865 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:49338] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.grupowebmex.com"] [uri "/1.php"] [unique_id "ary1wNPAdfEWqmGIkg1a_QAAAkE"]
[Wed Sep 30 01:09:52.386034 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:49338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/1.php"] [unique_id "ary1wNPAdfEWqmGIkg1a_QAAAkE"]
[Wed Sep 30 01:09:52.413719 2026] [security2:error] [pid 270884:tid 271063] [client 20.70.173.30:59969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/xkSudf.php"] [unique_id "ary1wCGeq9LtYp4zuPOeCgAAACw"]
[Wed Sep 30 01:09:52.415926 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.416199 2026] [security2:error] [pid 276059:tid 276235] [client 52.172.226.14:39987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/24.php"] [unique_id "ary1wHtqdHBwD77138e0vwAAAbc"]
[Wed Sep 30 01:09:52.416442 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.474385 2026] [security2:error] [pid 270884:tid 271094] [client 20.219.2.60:26068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/class-t.api.php"] [unique_id "ary1wCGeq9LtYp4zuPOeDQAAAEs"]
[Wed Sep 30 01:09:52.516651 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.517100 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.526989 2026] [security2:error] [pid 276620:tid 276870] [client 20.204.42.136:3026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/felnggg.php"] [unique_id "ary1wNPAdfEWqmGIkg1bAwAAAoM"]
[Wed Sep 30 01:09:52.566077 2026] [security2:error] [pid 276059:tid 276243] [client 168.100.149.232:22128] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d0c410062f30b37fb979eaf8eb23f297.6e48.css.gz"] [unique_id "ary1wHtqdHBwD77138e0wQABv3M"]
[Wed Sep 30 01:09:52.585822 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.586120 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.608784 2026] [security2:error] [pid 276059:tid 276293] [client 20.219.19.141:20891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/aboutt.php"] [unique_id "ary1wHtqdHBwD77138e0wwAAAfE"]
[Wed Sep 30 01:09:52.615740 2026] [access_compat:error] [pid 276059:tid 276213] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:52.616077 2026] [access_compat:error] [pid 276059:tid 276213] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:09:52.668258 2026] [security2:error] [pid 276059:tid 276248] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1wHtqdHBwD77138e0xgAAAcQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:52.676604 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.676915 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.772422 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.772845 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.841385 2026] [security2:error] [pid 276620:tid 276732] [remote 74.7.227.56:50476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1wNPAdfEWqmGIkg1bCQACY2Y"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=625
[Wed Sep 30 01:09:52.868601 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.868877 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:52.931068 2026] [security2:error] [pid 270884:tid 271023] [client 20.70.173.30:27800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/0.php"] [unique_id "ary1wCGeq9LtYp4zuPOeJgAAAAQ"]
[Wed Sep 30 01:09:52.938403 2026] [security2:error] [pid 270884:tid 271049] [client 20.219.2.60:26138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-links-opml.php"] [unique_id "ary1wCGeq9LtYp4zuPOeJwAAAB4"]
[Wed Sep 30 01:09:52.939371 2026] [security2:error] [pid 276620:tid 276858] [client 20.219.2.60:33806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/term.php"] [unique_id "ary1wNPAdfEWqmGIkg1bCgAAAnc"]
[Wed Sep 30 01:09:52.942500 2026] [security2:error] [pid 276620:tid 276871] [client 52.172.226.14:21395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/blacks.php"] [unique_id "ary1wNPAdfEWqmGIkg1bCwAAAoQ"]
[Wed Sep 30 01:09:52.961024 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:52.961266 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.007569 2026] [http2:warn] [pid 251754:tid 251957] [client 52.167.144.25:47149] h2_stream(251754-1399-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:53.052704 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.052987 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.107482 2026] [access_compat:error] [pid 276059:tid 276222] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:53.107745 2026] [access_compat:error] [pid 276059:tid 276222] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:53.118781 2026] [security2:error] [pid 276059:tid 276310] [client 20.204.42.136:3022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/felnggg.update.php"] [unique_id "ary1wXtqdHBwD77138e0ygAAAgI"]
[Wed Sep 30 01:09:53.143727 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.144000 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.235052 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.235322 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.272700 2026] [security2:error] [pid 270884:tid 271020] [client 20.70.173.30:8155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/robots.php"] [unique_id "ary1wSGeq9LtYp4zuPOeNAAAAAE"]
[Wed Sep 30 01:09:53.327624 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.327908 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.372443 2026] [security2:error] [pid 276059:tid 276215] [client 20.198.74.230:23580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/ava.php"] [unique_id "ary1wXtqdHBwD77138e0zAAAAaM"]
[Wed Sep 30 01:09:53.412678 2026] [security2:error] [pid 276059:tid 276278] [client 20.219.2.60:49333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-content/radio.php"] [unique_id "ary1wXtqdHBwD77138e0zQAAAeI"]
[Wed Sep 30 01:09:53.415443 2026] [security2:error] [pid 276059:tid 276225] [client 20.194.96.176:31261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/run.php"] [unique_id "ary1wXtqdHBwD77138e0zgAAAa0"]
[Wed Sep 30 01:09:53.421675 2026] [security2:error] [pid 276059:tid 276234] [client 20.219.2.60:26083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-class-api.php"] [unique_id "ary1wXtqdHBwD77138e0zwAAAbY"]
[Wed Sep 30 01:09:53.426061 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.426530 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.452371 2026] [security2:error] [pid 270884:tid 271063] [client 37.41.16.35:57840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1wSGeq9LtYp4zuPOePAAAACw"]
[Wed Sep 30 01:09:53.452595 2026] [security2:error] [pid 270884:tid 271063] [client 37.41.16.35:57840] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1wSGeq9LtYp4zuPOePAAAACw"]
[Wed Sep 30 01:09:53.455207 2026] [security2:error] [pid 270884:tid 271142] [client 52.172.226.14:39980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/anom.php"] [unique_id "ary1wSGeq9LtYp4zuPOePQAAAHs"]
[Wed Sep 30 01:09:53.515150 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.515549 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.564046 2026] [security2:error] [pid 276620:tid 276850] [client 20.28.180.172:34282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/0x.php"] [unique_id "ary1wdPAdfEWqmGIkg1bFQAAAm8"]
[Wed Sep 30 01:09:53.570065 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:53.570327 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:53.598949 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.599363 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.612959 2026] [security2:error] [pid 276620:tid 276836] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary1wdPAdfEWqmGIkg1bGAAAAmE"]
[Wed Sep 30 01:09:53.676784 2026] [security2:error] [pid 270884:tid 271026] [client 20.204.42.136:2960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/jybkxer.php"] [unique_id "ary1wSGeq9LtYp4zuPOeSQAAAAc"]
[Wed Sep 30 01:09:53.690722 2026] [security2:error] [pid 270884:tid 271052] [client 187.237.178.130:37635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.178.237.187.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-login.php"] [unique_id "ary1wSGeq9LtYp4zuPOeSwAAACE"], referer: https://hopethroughrestoration.org/wp-login.php
[Wed Sep 30 01:09:53.691963 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.692212 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.740409 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.79.201.21:1276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:09:53.740867 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.79.201.21:1276] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:09:53.781769 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.782051 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.826498 2026] [core:error] [pid 276620:tid 276878] (104)Connection reset by peer: [client 172.232.190.19:65357] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:09:53.870292 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.870569 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:53.892782 2026] [security2:error] [pid 270884:tid 271039] [client 20.219.2.60:48090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/155.php"] [unique_id "ary1wSGeq9LtYp4zuPOeVQAAABQ"]
[Wed Sep 30 01:09:53.911951 2026] [security2:error] [pid 270884:tid 271026] [client 20.194.30.107:28418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/css.php"] [unique_id "ary1wSGeq9LtYp4zuPOeWAAAAAc"]
[Wed Sep 30 01:09:53.948265 2026] [security2:error] [pid 270884:tid 271063] [client 4.240.25.22:43812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/ops.php"] [unique_id "ary1wSGeq9LtYp4zuPOeXAAAACw"]
[Wed Sep 30 01:09:53.966748 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:53.967145 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.011674 2026] [security2:error] [pid 270884:tid 271049] [client 20.219.2.60:40745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-class-atom.php"] [unique_id "ary1wiGeq9LtYp4zuPOeYQAAAB4"]
[Wed Sep 30 01:09:54.028240 2026] [security2:error] [pid 270884:tid 271138] [client 52.172.226.14:39955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/groud3.php"] [unique_id "ary1wiGeq9LtYp4zuPOeYwAAAHc"]
[Wed Sep 30 01:09:54.054022 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.054371 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.071285 2026] [security2:error] [pid 276059:tid 276246] [client 20.219.2.60:11684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/666.php"] [unique_id "ary1wntqdHBwD77138e03wAAAcI"]
[Wed Sep 30 01:09:54.107410 2026] [security2:error] [pid 276620:tid 276802] [client 20.213.164.196:21207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/il.php"] [unique_id "ary1wtPAdfEWqmGIkg1bIQAAAj8"]
[Wed Sep 30 01:09:54.114449 2026] [access_compat:error] [pid 276059:tid 276252] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:54.114700 2026] [access_compat:error] [pid 276059:tid 276252] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:54.145400 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.145672 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.173782 2026] [security2:error] [pid 276059:tid 276312] [client 4.240.25.22:13081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/pJPoKA.php"] [unique_id "ary1wntqdHBwD77138e04QAAAgQ"]
[Wed Sep 30 01:09:54.229427 2026] [security2:error] [pid 270884:tid 271142] [client 20.204.42.136:2998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/edit-tags.php"] [unique_id "ary1wiGeq9LtYp4zuPOecQAAAHs"]
[Wed Sep 30 01:09:54.241224 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.241491 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.293965 2026] [security2:error] [pid 276620:tid 276786] [client 20.70.173.30:39129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/a.php"] [unique_id "ary1wtPAdfEWqmGIkg1bJAAAAi8"]
[Wed Sep 30 01:09:54.333249 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.333538 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.362741 2026] [security2:error] [pid 276620:tid 276778] [client 20.28.180.172:18320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/sa.php7"] [unique_id "ary1wtPAdfEWqmGIkg1bJQAAAic"]
[Wed Sep 30 01:09:54.401110 2026] [security2:error] [pid 276059:tid 276212] [client 20.219.2.60:49283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-the.php"] [unique_id "ary1wntqdHBwD77138e04wAAAaA"]
[Wed Sep 30 01:09:54.437089 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.437542 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.480307 2026] [security2:error] [pid 276059:tid 276320] [client 20.219.2.60:26419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-block.php"] [unique_id "ary1wntqdHBwD77138e05wAAAgw"]
[Wed Sep 30 01:09:54.497134 2026] [security2:error] [pid 276620:tid 276861] [client 45.138.12.32:31436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.itb.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1wtPAdfEWqmGIkg1bKwAAAno"]
[Wed Sep 30 01:09:54.503355 2026] [security2:error] [pid 276620:tid 276825] [client 52.172.226.14:39913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/gaxby.php"] [unique_id "ary1wtPAdfEWqmGIkg1bLAAAAlY"]
[Wed Sep 30 01:09:54.516693 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.516963 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.565922 2026] [security2:error] [pid 276620:tid 276806] [client 168.100.149.188:19010] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/db8592e8a0b53ea8387d6703f3eadb8f.13f2.css.gz"] [unique_id "ary1wtPAdfEWqmGIkg1bMAACQws"]
[Wed Sep 30 01:09:54.569553 2026] [security2:error] [pid 276620:tid 276651] [remote 57.141.14.54:37762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary1wtPAdfEWqmGIkg1bLgACRhU"]
[Wed Sep 30 01:09:54.576531 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:54.576824 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:54.579266 2026] [security2:error] [pid 270884:tid 271112] [client 45.138.12.32:23800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ioy.ppv.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1wiGeq9LtYp4zuPOehgAAAF0"]
[Wed Sep 30 01:09:54.605816 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.606106 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.654886 2026] [security2:error] [pid 270884:tid 271074] [client 201.32.215.149:5416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1wiGeq9LtYp4zuPOejAAAADc"]
[Wed Sep 30 01:09:54.655000 2026] [security2:error] [pid 270884:tid 271074] [client 201.32.215.149:5416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1wiGeq9LtYp4zuPOejAAAADc"]
[Wed Sep 30 01:09:54.702168 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.702645 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.766806 2026] [security2:error] [pid 270884:tid 271052] [client 20.204.42.136:2956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/nauik.php"] [unique_id "ary1wiGeq9LtYp4zuPOelQAAACE"]
[Wed Sep 30 01:09:54.789517 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.789831 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.872530 2026] [security2:error] [pid 276620:tid 276853] [client 20.219.2.60:48104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp5.php"] [unique_id "ary1wtPAdfEWqmGIkg1bNAAAAnI"]
[Wed Sep 30 01:09:54.889968 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.890274 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:54.892762 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.19.141:20863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wp-whe.php"] [unique_id "ary1wiGeq9LtYp4zuPOemwAAAAE"]
[Wed Sep 30 01:09:54.903503 2026] [security2:error] [pid 276620:tid 276775] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/account"] [unique_id "ary1wtPAdfEWqmGIkg1bMwAAAiQ"]
[Wed Sep 30 01:09:54.939989 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:26382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-signup.php"] [unique_id "ary1wiGeq9LtYp4zuPOenQAAAHw"]
[Wed Sep 30 01:09:54.977704 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:54.977993 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.010190 2026] [security2:error] [pid 270884:tid 271105] [client 52.172.226.14:21420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/dh9u7.php"] [unique_id "ary1wyGeq9LtYp4zuPOepgAAAFY"]
[Wed Sep 30 01:09:55.041539 2026] [http2:warn] [pid 251754:tid 251921] [client 52.167.144.188:61624] h2_stream(251754-1436-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:09:55.065111 2026] [security2:error] [pid 270884:tid 271026] [client 20.28.180.172:29593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/accesson.php"] [unique_id "ary1wyGeq9LtYp4zuPOeqQAAAAc"]
[Wed Sep 30 01:09:55.071615 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.072052 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.095146 2026] [security2:error] [pid 270884:tid 271129] [client 20.204.42.136:35753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/un.php"] [unique_id "ary1wyGeq9LtYp4zuPOeqwAAAG4"]
[Wed Sep 30 01:09:55.106393 2026] [security2:error] [pid 276620:tid 276879] [client 20.70.173.30:37122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary1w9PAdfEWqmGIkg1bNgAAAow"]
[Wed Sep 30 01:09:55.114325 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:55.114611 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:55.160843 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.161119 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.243141 2026] [security2:error] [pid 276620:tid 276819] [client 49.43.163.212:63462] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1w9PAdfEWqmGIkg1bNwAAAlA"]
[Wed Sep 30 01:09:55.243265 2026] [security2:error] [pid 276620:tid 276819] [client 49.43.163.212:63462] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary1w9PAdfEWqmGIkg1bNwAAAlA"]
[Wed Sep 30 01:09:55.253856 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.254149 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.269209 2026] [security2:error] [pid 270884:tid 271105] [client 4.240.25.22:41695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/or.php"] [unique_id "ary1wyGeq9LtYp4zuPOerwAAAFY"]
[Wed Sep 30 01:09:55.345607 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.345919 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.375506 2026] [security2:error] [pid 270884:tid 271138] [client 20.219.2.60:48119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-access.php"] [unique_id "ary1wyGeq9LtYp4zuPOeswAAAHc"]
[Wed Sep 30 01:09:55.392103 2026] [security2:error] [pid 270884:tid 271142] [client 20.219.2.60:26378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-xmlsia.php"] [unique_id "ary1wyGeq9LtYp4zuPOetAAAAHs"]
[Wed Sep 30 01:09:55.442697 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.443166 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.497261 2026] [security2:error] [pid 270884:tid 271023] [client 52.172.226.14:21392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/koiy.php"] [unique_id "ary1wyGeq9LtYp4zuPOeugAAAAQ"]
[Wed Sep 30 01:09:55.506230 2026] [security2:error] [pid 270884:tid 271143] [client 20.204.42.136:3024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wander.php"] [unique_id "ary1wyGeq9LtYp4zuPOeuwAAAHw"]
[Wed Sep 30 01:09:55.527017 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.527287 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.549549 2026] [security2:error] [pid 276620:tid 276852] [client 4.196.65.241:2580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/or.php"] [unique_id "ary1w9PAdfEWqmGIkg1bPQAAAnE"]
[Wed Sep 30 01:09:55.556704 2026] [security2:error] [pid 276059:tid 276282] [client 74.7.175.155:54092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.axa.fme.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary1w3tqdHBwD77138e08wAB5h8"]
[Wed Sep 30 01:09:55.575347 2026] [security2:error] [pid 276620:tid 276865] [client 20.211.90.37:39956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/0.php"] [unique_id "ary1w9PAdfEWqmGIkg1bPgAAAn4"]
[Wed Sep 30 01:09:55.595248 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:55.595522 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:55.617867 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.618139 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.666239 2026] [security2:error] [pid 270884:tid 271068] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary1wyGeq9LtYp4zuPOewwAAADE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:09:55.690353 2026] [autoindex:error] [pid 270884:tid 270895] [remote 74.7.227.32:38092] AH01276: Cannot serve directory /home4/axafmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:09:55.708910 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.709190 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.727502 2026] [security2:error] [pid 270884:tid 271116] [client 4.240.25.22:8467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/df.php"] [unique_id "ary1wyGeq9LtYp4zuPOexgAAAGE"]
[Wed Sep 30 01:09:55.797670 2026] [security2:error] [pid 276620:tid 276771] [client 20.70.173.30:19143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/pJPoKA.php"] [unique_id "ary1w9PAdfEWqmGIkg1bQQAAAiA"]
[Wed Sep 30 01:09:55.806388 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.806704 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.827246 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.2.60:44996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/hots.php"] [unique_id "ary1wyGeq9LtYp4zuPOe0gAAAAE"]
[Wed Sep 30 01:09:55.858540 2026] [security2:error] [pid 270884:tid 271105] [client 20.219.2.60:61464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/wp-inic3.php"] [unique_id "ary1wyGeq9LtYp4zuPOe1gAAAFY"]
[Wed Sep 30 01:09:55.904590 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.904885 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:55.949041 2026] [security2:error] [pid 270884:tid 271063] [client 20.219.2.60:11671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/xxw.php"] [unique_id "ary1wyGeq9LtYp4zuPOe3gAAACw"]
[Wed Sep 30 01:09:55.990030 2026] [security2:error] [pid 270884:tid 271143] [client 52.172.226.14:39922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wordfence-waf.php"] [unique_id "ary1wyGeq9LtYp4zuPOe4QAAAHw"]
[Wed Sep 30 01:09:55.991948 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:55.992202 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.007954 2026] [security2:error] [pid 276059:tid 276300] [client 203.122.45.246:53875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1xHtqdHBwD77138e0-wAAAfg"]
[Wed Sep 30 01:09:56.008051 2026] [security2:error] [pid 276059:tid 276300] [client 203.122.45.246:53875] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1xHtqdHBwD77138e0-wAAAfg"]
[Wed Sep 30 01:09:56.008282 2026] [security2:error] [pid 270884:tid 271074] [client 20.28.180.172:61223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/jp.php"] [unique_id "ary1xCGeq9LtYp4zuPOe4wAAADc"]
[Wed Sep 30 01:09:56.069340 2026] [access_compat:error] [pid 276059:tid 276234] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:56.069626 2026] [access_compat:error] [pid 276059:tid 276234] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:56.072881 2026] [security2:error] [pid 270884:tid 271026] [client 20.204.42.136:2944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wsd.php"] [unique_id "ary1xCGeq9LtYp4zuPOe6AAAAAc"]
[Wed Sep 30 01:09:56.081980 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.082235 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.174279 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.174566 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.183257 2026] [security2:error] [pid 270884:tid 271138] [client 152.59.165.7:14410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1xCGeq9LtYp4zuPOe9AAAAHc"]
[Wed Sep 30 01:09:56.183594 2026] [security2:error] [pid 270884:tid 271138] [client 152.59.165.7:14410] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1xCGeq9LtYp4zuPOe9AAAAHc"]
[Wed Sep 30 01:09:56.198683 2026] [core:error] [pid 270884:tid 271072] [client 45.138.12.48:46886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:56.198702 2026] [core:error] [pid 270884:tid 271072] [client 45.138.12.48:46886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:09:56.266732 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.267013 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.320229 2026] [security2:error] [pid 270884:tid 271072] [client 20.211.90.37:40391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary1xCGeq9LtYp4zuPOfAgAAADU"]
[Wed Sep 30 01:09:56.321281 2026] [security2:error] [pid 270884:tid 271129] [client 20.219.2.60:48121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/admin-footer.php"] [unique_id "ary1xCGeq9LtYp4zuPOfAwAAAG4"]
[Wed Sep 30 01:09:56.360148 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.360686 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.454077 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.454544 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.538349 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.538668 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.539475 2026] [access_compat:error] [pid 276059:tid 276232] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:56.539930 2026] [access_compat:error] [pid 276059:tid 276232] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:56.589193 2026] [security2:error] [pid 276059:tid 276239] [client 168.100.149.87:55880] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/61555f1502b8c210841a8269c43041bf.98.css.gz"] [unique_id "ary1xHtqdHBwD77138e1CAABu2U"]
[Wed Sep 30 01:09:56.605800 2026] [security2:error] [pid 270884:tid 271028] [client 52.172.226.14:39926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/em.php"] [unique_id "ary1xCGeq9LtYp4zuPOfFwAAAAk"]
[Wed Sep 30 01:09:56.629453 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.629710 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.632237 2026] [security2:error] [pid 270884:tid 271138] [client 20.213.164.196:21204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/1klopedf.php"] [unique_id "ary1xCGeq9LtYp4zuPOfGgAAAHc"]
[Wed Sep 30 01:09:56.680948 2026] [security2:error] [pid 276620:tid 276806] [client 20.204.42.136:2963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/media.php"] [unique_id "ary1xNPAdfEWqmGIkg1bTwAAAkM"]
[Wed Sep 30 01:09:56.718595 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.718869 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.811848 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:45032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws84.php"] [unique_id "ary1xCGeq9LtYp4zuPOfJAAAAHw"]
[Wed Sep 30 01:09:56.812287 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.812562 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.877895 2026] [security2:error] [pid 270884:tid 271022] [client 20.211.90.37:40424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary1xCGeq9LtYp4zuPOfKgAAAAM"]
[Wed Sep 30 01:09:56.905192 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:56.905461 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:53749] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:56.943581 2026] [security2:error] [pid 276620:tid 276870] [client 20.194.30.107:17308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-manager.php"] [unique_id "ary1xNPAdfEWqmGIkg1bUAAAAoM"]
[Wed Sep 30 01:09:56.999588 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.000099 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.013840 2026] [security2:error] [pid 270884:tid 271079] [client 20.70.173.30:8183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/k.php"] [unique_id "ary1xSGeq9LtYp4zuPOfMwAAADw"]
[Wed Sep 30 01:09:57.023962 2026] [security2:error] [pid 270884:tid 271042] [client 45.138.12.32:31504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iwl.buu.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1xSGeq9LtYp4zuPOfNQAAABc"]
[Wed Sep 30 01:09:57.027462 2026] [security2:error] [pid 270884:tid 271121] [client 104.207.56.68:43843] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary1xCGeq9LtYp4zuPOfLgAAAGY"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:09:57.050134 2026] [access_compat:error] [pid 276059:tid 276246] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:57.050412 2026] [access_compat:error] [pid 276059:tid 276246] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:57.087218 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.087506 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.150186 2026] [security2:error] [pid 270884:tid 271104] [client 52.172.226.14:39985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/hp.php"] [unique_id "ary1xSGeq9LtYp4zuPOfPwAAAFU"]
[Wed Sep 30 01:09:57.170086 2026] [security2:error] [pid 270884:tid 271020] [client 202.179.95.79:56802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1xSGeq9LtYp4zuPOfQgAAAAE"]
[Wed Sep 30 01:09:57.170544 2026] [security2:error] [pid 270884:tid 271020] [client 202.179.95.79:56802] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1xSGeq9LtYp4zuPOfQgAAAAE"]
[Wed Sep 30 01:09:57.176176 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.176466 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.228121 2026] [autoindex:error] [pid 270884:tid 271104] [client 20.70.173.30:0] AH01276: Cannot serve directory /home3/habeshac/public_html/hairofsheba/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:09:57.266130 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.266395 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.270507 2026] [security2:error] [pid 270884:tid 271052] [client 20.204.42.136:3049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/images.php"] [unique_id "ary1xSGeq9LtYp4zuPOfSQAAACE"]
[Wed Sep 30 01:09:57.303063 2026] [security2:error] [pid 270884:tid 271027] [client 20.219.19.141:20898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/ssixta.php"] [unique_id "ary1xSGeq9LtYp4zuPOfTAAAAAg"]
[Wed Sep 30 01:09:57.308274 2026] [security2:error] [pid 270884:tid 271093] [client 216.73.216.46:53749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1xSGeq9LtYp4zuPOfTgAAAEo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5NDE4
[Wed Sep 30 01:09:57.337755 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.2.60:45114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/bnm.php"] [unique_id "ary1xdPAdfEWqmGIkg1bUgAAAoQ"]
[Wed Sep 30 01:09:57.360648 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.361108 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.395715 2026] [security2:error] [pid 276620:tid 276873] [client 4.196.65.241:2535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/wmore1.php"] [unique_id "ary1xdPAdfEWqmGIkg1bUwAAAoY"]
[Wed Sep 30 01:09:57.461041 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.461490 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.492368 2026] [security2:error] [pid 276620:tid 276775] [client 20.211.90.37:39904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/02.php"] [unique_id "ary1xdPAdfEWqmGIkg1bVQAAAiQ"]
[Wed Sep 30 01:09:57.528736 2026] [qos:error] [pid 270884:tid 271123] [client 138.84.45.27:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1xSGeq9LtYp4zuPOfWQAAAGg
[Wed Sep 30 01:09:57.528757 2026] [qos:error] [pid 276620:tid 276798] [client 109.91.244.237:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=102, c=50.6.92.44, id=ary1xdPAdfEWqmGIkg1bWgAAAjs
[Wed Sep 30 01:09:57.536035 2026] [security2:error] [pid 270884:tid 271097] [client 20.213.164.196:21241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/zv.php"] [unique_id "ary1xSGeq9LtYp4zuPOfWgAAAE4"]
[Wed Sep 30 01:09:57.539642 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:57.540056 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:57.592408 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.592705 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.600144 2026] [security2:error] [pid 270884:tid 271121] [client 4.240.25.22:8425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/av.php"] [unique_id "ary1xSGeq9LtYp4zuPOfYwAAAGY"]
[Wed Sep 30 01:09:57.625534 2026] [security2:error] [pid 270884:tid 271110] [client 151.245.21.149:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1xSGeq9LtYp4zuPOfZwAAAFs"]
[Wed Sep 30 01:09:57.626284 2026] [security2:error] [pid 270884:tid 270926] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1xSGeq9LtYp4zuPOfaQAAfCg"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D94244
[Wed Sep 30 01:09:57.633596 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.634100 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.635508 2026] [security2:error] [pid 270884:tid 271070] [client 20.198.74.230:23883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "ary1xSGeq9LtYp4zuPOfawAAADM"]
[Wed Sep 30 01:09:57.640486 2026] [security2:error] [pid 270884:tid 271131] [client 52.172.226.14:39903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.buyclenbuterolstore.info"] [uri "/wpuse.php"] [unique_id "ary1xSGeq9LtYp4zuPOfbAAAAHA"]
[Wed Sep 30 01:09:57.724520 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.724817 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.774575 2026] [qos:error] [pid 270884:tid 270922] [remote 89.183.233.184:50767] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.183.233.184, id=ary1xSGeq9LtYp4zuPOfcwAALCQ
[Wed Sep 30 01:09:57.813728 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.814022 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.831574 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.2.60:44997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/amax.php"] [unique_id "ary1xSGeq9LtYp4zuPOfdQAAADI"]
[Wed Sep 30 01:09:57.862179 2026] [qos:error] [pid 270884:tid 270920] [remote 212.252.143.34:53611] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=212.252.143.34, id=ary1xSGeq9LtYp4zuPOfeAAAWCI
[Wed Sep 30 01:09:57.898472 2026] [security2:error] [pid 276620:tid 276836] [client 20.204.42.136:3030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/ops.php"] [unique_id "ary1xdPAdfEWqmGIkg1bXAAAAmE"]
[Wed Sep 30 01:09:57.906120 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.906467 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:57.918129 2026] [qos:error] [pid 276620:tid 276661] [remote 124.36.47.146:7947] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=124.36.47.146, id=ary1xdPAdfEWqmGIkg1bXQACaB8
[Wed Sep 30 01:09:57.961095 2026] [security2:error] [pid 276620:tid 276815] [client 151.245.37.138:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1xdPAdfEWqmGIkg1bXwAAAkw"]
[Wed Sep 30 01:09:57.995417 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:57.995869 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.037416 2026] [access_compat:error] [pid 276059:tid 276250] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:58.037688 2026] [access_compat:error] [pid 276059:tid 276250] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:58.067129 2026] [security2:error] [pid 270884:tid 271020] [client 15.252.178.110:47420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cdi.vpv.mybluehost.me"] [uri "/index.php"] [unique_id "ary1xiGeq9LtYp4zuPOfigAAAAE"]
[Wed Sep 30 01:09:58.081831 2026] [security2:error] [pid 270884:tid 271143] [client 20.211.90.37:40390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/go.php"] [unique_id "ary1xiGeq9LtYp4zuPOfjAAAAHw"]
[Wed Sep 30 01:09:58.089868 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.090135 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.099276 2026] [security2:error] [pid 276620:tid 276795] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/account"] [unique_id "ary1xtPAdfEWqmGIkg1bYgAAAjg"]
[Wed Sep 30 01:09:58.104340 2026] [security2:error] [pid 270884:tid 271046] [client 182.69.182.151:15751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1xiGeq9LtYp4zuPOfjwAAABs"]
[Wed Sep 30 01:09:58.104456 2026] [security2:error] [pid 270884:tid 271046] [client 182.69.182.151:15751] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1xiGeq9LtYp4zuPOfjwAAABs"]
[Wed Sep 30 01:09:58.140298 2026] [security2:error] [pid 270884:tid 270944] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfkAAAATo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=465&t=20588
[Wed Sep 30 01:09:58.140319 2026] [security2:error] [pid 270884:tid 270944] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfkAAAATo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=465&t=20588
[Wed Sep 30 01:09:58.178462 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.178730 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.221860 2026] [security2:error] [pid 276620:tid 276812] [client 20.194.30.107:17353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/fling.php"] [unique_id "ary1xtPAdfEWqmGIkg1bYwAAAkk"]
[Wed Sep 30 01:09:58.259299 2026] [security2:error] [pid 270884:tid 271112] [client 112.86.225.76:50214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "glorymfb.com"] [uri "/our-board/"] [unique_id "ary1xiGeq9LtYp4zuPOfkgAAAF0"]
[Wed Sep 30 01:09:58.259476 2026] [security2:error] [pid 270884:tid 271112] [client 112.86.225.76:50214] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "glorymfb.com"] [uri "/our-board/"] [unique_id "ary1xiGeq9LtYp4zuPOfkgAAAF0"]
[Wed Sep 30 01:09:58.263611 2026] [security2:error] [pid 270884:tid 271121] [client 103.211.18.63:54453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1xiGeq9LtYp4zuPOflwAAAGY"]
[Wed Sep 30 01:09:58.263732 2026] [security2:error] [pid 270884:tid 271121] [client 103.211.18.63:54453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1xiGeq9LtYp4zuPOflwAAAGY"]
[Wed Sep 30 01:09:58.268702 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.269295 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.289245 2026] [security2:error] [pid 276059:tid 276277] [client 20.28.180.172:34271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/bn.php"] [unique_id "ary1xntqdHBwD77138e1IQAAAeE"]
[Wed Sep 30 01:09:58.290738 2026] [security2:error] [pid 276620:tid 276792] [client 20.219.2.60:45077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/66.php"] [unique_id "ary1xtPAdfEWqmGIkg1bZAAAAjU"]
[Wed Sep 30 01:09:58.366559 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.366997 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.401199 2026] [security2:error] [pid 276620:tid 276864] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/account"] [unique_id "ary1xtPAdfEWqmGIkg1bZQAAAn0"]
[Wed Sep 30 01:09:58.446465 2026] [security2:error] [pid 276620:tid 276662] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1xtPAdfEWqmGIkg1baQACICA"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D200536
[Wed Sep 30 01:09:58.446507 2026] [security2:error] [pid 276620:tid 276662] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1xtPAdfEWqmGIkg1baQACICA"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D200536
[Wed Sep 30 01:09:58.464877 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.465615 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.481552 2026] [security2:error] [pid 270884:tid 270904] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfpAAACBI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=165&t=1538
[Wed Sep 30 01:09:58.481593 2026] [security2:error] [pid 270884:tid 270904] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfpAAACBI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=165&t=1538
[Wed Sep 30 01:09:58.494308 2026] [security2:error] [pid 270884:tid 271131] [client 45.138.12.32:44154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iou.pcx.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1xiGeq9LtYp4zuPOfpwAAAHA"]
[Wed Sep 30 01:09:58.507633 2026] [qos:error] [pid 270884:tid 270934] [remote 2.211.250.29:55165] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=2.211.250.29, id=ary1xiGeq9LtYp4zuPOfqAAABzA
[Wed Sep 30 01:09:58.537948 2026] [access_compat:error] [pid 276059:tid 276242] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:58.538274 2026] [access_compat:error] [pid 276059:tid 276242] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:58.546323 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.546625 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.549257 2026] [security2:error] [pid 270884:tid 271020] [client 20.204.42.136:3050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/BDKR28WP.php"] [unique_id "ary1xiGeq9LtYp4zuPOfqgAAAAE"]
[Wed Sep 30 01:09:58.583263 2026] [security2:error] [pid 276620:tid 276841] [client 168.100.149.220:51504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d90fd24eea681ccef30790b86cd0ce2b.17c.css.gz"] [unique_id "ary1xtPAdfEWqmGIkg1bbAACZno"]
[Wed Sep 30 01:09:58.601275 2026] [security2:error] [pid 270884:tid 270981] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfrAAAWFs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ae9e69708731426a4a6a3f11fb85bf58&start=210&t=21812
[Wed Sep 30 01:09:58.601310 2026] [security2:error] [pid 270884:tid 270981] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1xiGeq9LtYp4zuPOfrAAAWFs"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ae9e69708731426a4a6a3f11fb85bf58&start=210&t=21812
[Wed Sep 30 01:09:58.635444 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.636112 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.640850 2026] [qos:error] [pid 270884:tid 270969] [remote 86.125.46.32:49228] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.125.46.32, id=ary1xiGeq9LtYp4zuPOfrwAAcE8
[Wed Sep 30 01:09:58.662783 2026] [security2:error] [pid 270884:tid 271026] [client 20.211.90.37:40387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/ee.php"] [unique_id "ary1xiGeq9LtYp4zuPOfsAAAAAc"]
[Wed Sep 30 01:09:58.677491 2026] [security2:error] [pid 270884:tid 271049] [client 20.213.164.196:21224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/zv.update.php"] [unique_id "ary1xiGeq9LtYp4zuPOfsQAAAB4"]
[Wed Sep 30 01:09:58.727279 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.727554 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.752649 2026] [security2:error] [pid 276620:tid 276813] [client 20.219.2.60:49343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/public/file.php"] [unique_id "ary1xtPAdfEWqmGIkg1bbQAAAko"]
[Wed Sep 30 01:09:58.765861 2026] [security2:error] [pid 270884:tid 271097] [client 4.240.25.22:8416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/css.php"] [unique_id "ary1xiGeq9LtYp4zuPOftgAAAE4"]
[Wed Sep 30 01:09:58.783088 2026] [security2:error] [pid 270884:tid 271123] [client 20.28.180.172:18124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-good.php"] [unique_id "ary1xiGeq9LtYp4zuPOftwAAAGg"]
[Wed Sep 30 01:09:58.817955 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.818350 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.835519 2026] [security2:error] [pid 276620:tid 276835] [client 20.70.173.30:8163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/blurbs.php"] [unique_id "ary1xtPAdfEWqmGIkg1bbgAAAmA"]
[Wed Sep 30 01:09:58.908180 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:58.908459 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:58.963350 2026] [qos:error] [pid 270884:tid 270902] [remote 71.197.150.24:51346] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.197.150.24, id=ary1xiGeq9LtYp4zuPOfwAAAWBA
[Wed Sep 30 01:09:58.970796 2026] [security2:error] [pid 276059:tid 276273] [client 43.227.131.37:26148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1xntqdHBwD77138e1JAAAAd0"]
[Wed Sep 30 01:09:58.970931 2026] [security2:error] [pid 276059:tid 276273] [client 43.227.131.37:26148] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1xntqdHBwD77138e1JAAAAd0"]
[Wed Sep 30 01:09:58.982677 2026] [security2:error] [pid 270884:tid 271121] [client 162.43.226.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1xiGeq9LtYp4zuPOfwgAAAGY"]
[Wed Sep 30 01:09:59.004333 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.004765 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.095275 2026] [access_compat:error] [pid 276059:tid 276207] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:59.095413 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.095621 2026] [access_compat:error] [pid 276059:tid 276207] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:09:59.095669 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.104385 2026] [security2:error] [pid 276620:tid 276769] [client 116.193.128.26:55357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1x9PAdfEWqmGIkg1bcQAAAh4"]
[Wed Sep 30 01:09:59.104527 2026] [security2:error] [pid 276620:tid 276769] [client 116.193.128.26:55357] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1x9PAdfEWqmGIkg1bcQAAAh4"]
[Wed Sep 30 01:09:59.113856 2026] [security2:error] [pid 276059:tid 276219] [client 20.204.42.136:3016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/mac.php"] [unique_id "ary1x3tqdHBwD77138e1KAAAAac"]
[Wed Sep 30 01:09:59.114958 2026] [security2:error] [pid 270884:tid 271129] [client 78.58.63.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1xyGeq9LtYp4zuPOf0wAAAG4"]
[Wed Sep 30 01:09:59.123320 2026] [security2:error] [pid 270884:tid 271052] [client 4.240.25.22:13780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/admin.php"] [unique_id "ary1xyGeq9LtYp4zuPOf1AAAACE"]
[Wed Sep 30 01:09:59.189045 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.189520 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.214463 2026] [security2:error] [pid 276620:tid 276858] [client 20.219.2.60:11682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-png.php"] [unique_id "ary1x9PAdfEWqmGIkg1bcwAAAnc"]
[Wed Sep 30 01:09:59.217938 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.2.60:45084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/166.php"] [unique_id "ary1xyGeq9LtYp4zuPOf3AAAADI"]
[Wed Sep 30 01:09:59.238501 2026] [security2:error] [pid 276620:tid 276820] [client 77.236.24.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1x9PAdfEWqmGIkg1bdAAAAlE"]
[Wed Sep 30 01:09:59.273030 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.273303 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.284306 2026] [qos:error] [pid 276620:tid 276755] [remote 5.14.139.100:34391] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=5.14.139.100, id=ary1x9PAdfEWqmGIkg1bdQACNn0
[Wed Sep 30 01:09:59.290346 2026] [security2:error] [pid 276059:tid 276266] [client 122.173.27.10:25128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1x3tqdHBwD77138e1KwAAAdY"]
[Wed Sep 30 01:09:59.290519 2026] [security2:error] [pid 276059:tid 276266] [client 122.173.27.10:25128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1x3tqdHBwD77138e1KwAAAdY"]
[Wed Sep 30 01:09:59.378408 2026] [security2:error] [pid 270884:tid 271053] [client 20.194.96.176:55800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/vpn.php"] [unique_id "ary1xyGeq9LtYp4zuPOf5AAAACI"]
[Wed Sep 30 01:09:59.382777 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.383600 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.400591 2026] [security2:error] [pid 270884:tid 271121] [client 20.28.180.172:29459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/dsfsa.php"] [unique_id "ary1xyGeq9LtYp4zuPOf5wAAAGY"]
[Wed Sep 30 01:09:59.463033 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.463470 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.513622 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.19.141:20813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/tesla.php"] [unique_id "ary1xyGeq9LtYp4zuPOf6wAAACc"]
[Wed Sep 30 01:09:59.546105 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.546426 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.561294 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:59.561729 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:09:59.636208 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.636484 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.648862 2026] [security2:error] [pid 276059:tid 276307] [client 20.204.42.136:3000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wmore1.php"] [unique_id "ary1x3tqdHBwD77138e1NgAAAf8"]
[Wed Sep 30 01:09:59.695406 2026] [security2:error] [pid 276059:tid 276253] [client 20.219.2.60:45017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/ws77.php"] [unique_id "ary1x3tqdHBwD77138e1NwAAAck"]
[Wed Sep 30 01:09:59.726892 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.727158 2026] [access_compat:error] [pid 270884:tid 271063] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.777856 2026] [security2:error] [pid 276620:tid 276784] [client 20.211.90.37:39983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/an.php"] [unique_id "ary1x9PAdfEWqmGIkg1begAAAi0"]
[Wed Sep 30 01:09:59.818389 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.818653 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:28076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.885041 2026] [security2:error] [pid 270884:tid 271141] [client 74.7.241.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "afrilech.org"] [uri "/"] [unique_id "ary1xyGeq9LtYp4zuPOgAAAAAHo"], referer: http://www.backlinkstree.com
[Wed Sep 30 01:09:59.905310 2026] [security2:error] [pid 270884:tid 271034] [client 20.213.164.196:21328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/wquosqsi.php"] [unique_id "ary1xyGeq9LtYp4zuPOgAwAAAA8"]
[Wed Sep 30 01:09:59.910401 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:09:59.910682 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:09:59.993492 2026] [security2:error] [pid 276620:tid 276865] [client 20.70.173.30:38788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/mac.php"] [unique_id "ary1x9PAdfEWqmGIkg1bfQAAAn4"]
[Wed Sep 30 01:09:59.997783 2026] [security2:error] [pid 270884:tid 271123] [client 106.214.2.47:10444] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1xyGeq9LtYp4zuPOgBwAAAGg"]
[Wed Sep 30 01:09:59.997913 2026] [security2:error] [pid 270884:tid 271123] [client 106.214.2.47:10444] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1xyGeq9LtYp4zuPOgBwAAAGg"]
[Wed Sep 30 01:10:00.000274 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.000558 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.042266 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:00.042568 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:00.093605 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.093869 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.167144 2026] [security2:error] [pid 276620:tid 276838] [client 20.204.42.136:3008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wp-ainefgskk.php"] [unique_id "ary1yNPAdfEWqmGIkg1bfwAAAmM"]
[Wed Sep 30 01:10:00.177564 2026] [security2:error] [pid 276059:tid 276276] [client 20.219.2.60:48096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/www.php"] [unique_id "ary1yHtqdHBwD77138e1PQAAAeA"]
[Wed Sep 30 01:10:00.183358 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.183643 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.245113 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:28076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1yCGeq9LtYp4zuPOgDQAAAAk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5My9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MC9kcml2ZXIvY3B1OQ%3D%3D
[Wed Sep 30 01:10:00.273181 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.273462 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.314575 2026] [security2:error] [pid 270884:tid 270935] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1yCGeq9LtYp4zuPOgDwAACzE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=150&t=1083
[Wed Sep 30 01:10:00.314597 2026] [security2:error] [pid 270884:tid 270935] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1yCGeq9LtYp4zuPOgDwAACzE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=150&t=1083
[Wed Sep 30 01:10:00.362699 2026] [security2:error] [pid 270884:tid 271039] [client 20.219.19.141:20808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/222.php"] [unique_id "ary1yCGeq9LtYp4zuPOgEgAAABQ"]
[Wed Sep 30 01:10:00.374912 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.375390 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.384241 2026] [security2:error] [pid 276620:tid 276768] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/account"] [unique_id "ary1yNPAdfEWqmGIkg1bgQAAAh0"]
[Wed Sep 30 01:10:00.428745 2026] [security2:error] [pid 276059:tid 276316] [client 45.138.12.32:44090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iqw.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1yHtqdHBwD77138e1RAAAAgg"]
[Wed Sep 30 01:10:00.464270 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.464725 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.535923 2026] [security2:error] [pid 276620:tid 276787] [client 152.56.240.85:59222] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1yNPAdfEWqmGIkg1bhAAAAjA"]
[Wed Sep 30 01:10:00.537835 2026] [security2:error] [pid 276620:tid 276787] [client 152.56.240.85:59222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1yNPAdfEWqmGIkg1bhAAAAjA"]
[Wed Sep 30 01:10:00.547273 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.547556 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.553064 2026] [access_compat:error] [pid 276059:tid 276254] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:00.553429 2026] [access_compat:error] [pid 276059:tid 276254] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:00.560751 2026] [security2:error] [pid 276620:tid 276754] [remote 57.141.14.11:31650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "ary1yNPAdfEWqmGIkg1bggAChXw"]
[Wed Sep 30 01:10:00.567447 2026] [security2:error] [pid 270884:tid 271052] [client 188.164.199.55:48820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.199.164.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "diazmedical.com"] [uri "/wp-login.php"] [unique_id "ary1yCGeq9LtYp4zuPOgGgAAACE"]
[Wed Sep 30 01:10:00.579458 2026] [security2:error] [pid 270884:tid 271049] [client 168.100.149.70:37334] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/5e86d2dfeca32ff95fce19a8191ed627.1a6.css.gz"] [unique_id "ary1yCGeq9LtYp4zuPOgGwAAHkA"]
[Wed Sep 30 01:10:00.580291 2026] [security2:error] [pid 270884:tid 271028] [client 20.28.180.172:18176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/a5.php"] [unique_id "ary1yCGeq9LtYp4zuPOgHAAAAAk"]
[Wed Sep 30 01:10:00.640621 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.641051 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.657424 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.2.60:48084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/adoms.php"] [unique_id "ary1yNPAdfEWqmGIkg1bjAAAAmw"]
[Wed Sep 30 01:10:00.707222 2026] [security2:error] [pid 270884:tid 271017] [remote 220.181.108.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary1yCGeq9LtYp4zuPOgIgAAB38"]
[Wed Sep 30 01:10:00.729753 2026] [access_compat:error] [pid 270884:tid 271125] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.730031 2026] [access_compat:error] [pid 270884:tid 271125] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.763904 2026] [security2:error] [pid 276620:tid 276884] [client 20.204.42.136:2950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/ab.php"] [unique_id "ary1yNPAdfEWqmGIkg1bjgAAApE"]
[Wed Sep 30 01:10:00.783621 2026] [security2:error] [pid 270884:tid 271097] [client 15.252.178.110:33342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.178.252.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cdi.vpv.mybluehost.me"] [uri "/index.php"] [unique_id "ary1yCGeq9LtYp4zuPOgKAAAAE4"]
[Wed Sep 30 01:10:00.798930 2026] [security2:error] [pid 276620:tid 276667] [remote 64.23.166.180:17948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.wellnesswithage.dennis-cooper.com"] [uri "/.env"] [unique_id "ary1yNPAdfEWqmGIkg1bkAACjSU"]
[Wed Sep 30 01:10:00.801514 2026] [security2:error] [pid 270884:tid 271072] [client 186.223.179.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1yCGeq9LtYp4zuPOgKQAAADU"]
[Wed Sep 30 01:10:00.803922 2026] [security2:error] [pid 270884:tid 271006] [remote 64.23.166.180:17938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.wellnesswithage.com"] [uri "/.env"] [unique_id "ary1yCGeq9LtYp4zuPOgKgAAJnQ"]
[Wed Sep 30 01:10:00.817944 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.818212 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:00.838250 2026] [security2:error] [pid 270884:tid 271064] [client 223.235.102.107:26452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1yCGeq9LtYp4zuPOgMAAAAC0"]
[Wed Sep 30 01:10:00.838392 2026] [security2:error] [pid 270884:tid 271064] [client 223.235.102.107:26452] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1yCGeq9LtYp4zuPOgMAAAAC0"]
[Wed Sep 30 01:10:00.838917 2026] [security2:error] [pid 270884:tid 271063] [client 20.70.173.30:27795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/admin.php"] [unique_id "ary1yCGeq9LtYp4zuPOgMQAAACw"]
[Wed Sep 30 01:10:00.909593 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:00.909866 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.003315 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.003593 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.022323 2026] [security2:error] [pid 270884:tid 271058] [client 155.190.6.18:49744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1ySGeq9LtYp4zuPOgQgAAACc"]
[Wed Sep 30 01:10:01.072723 2026] [access_compat:error] [pid 276059:tid 276196] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:01.073006 2026] [access_compat:error] [pid 276059:tid 276196] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:01.093780 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.094052 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.096636 2026] [security2:error] [pid 276059:tid 276255] [client 20.28.180.172:34243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wdone1.php"] [unique_id "ary1yXtqdHBwD77138e1TAAAAcs"]
[Wed Sep 30 01:10:01.126718 2026] [security2:error] [pid 270884:tid 271034] [client 20.219.2.60:45116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/tymn.php"] [unique_id "ary1ySGeq9LtYp4zuPOgTgAAAA8"]
[Wed Sep 30 01:10:01.127951 2026] [security2:error] [pid 270884:tid 271117] [client 116.197.133.25:54933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1ySGeq9LtYp4zuPOgTwAAAGI"]
[Wed Sep 30 01:10:01.131238 2026] [security2:error] [pid 270884:tid 271117] [client 116.197.133.25:54933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1ySGeq9LtYp4zuPOgTwAAAGI"]
[Wed Sep 30 01:10:01.186242 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.186593 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.276796 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.277069 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.280970 2026] [security2:error] [pid 276620:tid 276835] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1ydPAdfEWqmGIkg1blQAAAmA"]
[Wed Sep 30 01:10:01.301036 2026] [security2:error] [pid 270884:tid 271058] [client 155.190.6.18:49744] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1ySGeq9LtYp4zuPOgQgAAACc"]
[Wed Sep 30 01:10:01.373567 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.374054 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.410598 2026] [security2:error] [pid 276620:tid 276806] [client 20.211.90.37:39937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp.php"] [unique_id "ary1ydPAdfEWqmGIkg1bmAAAAkM"]
[Wed Sep 30 01:10:01.455086 2026] [security2:error] [pid 270884:tid 271099] [client 20.219.19.141:20855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/media.php"] [unique_id "ary1ySGeq9LtYp4zuPOgYgAAAFA"]
[Wed Sep 30 01:10:01.501681 2026] [security2:error] [pid 270884:tid 270940] [remote 2a03:2880:f814:b:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1ySGeq9LtYp4zuPOgZQAASjY"]
[Wed Sep 30 01:10:01.501714 2026] [security2:error] [pid 270884:tid 270940] [remote 2a03:2880:f814:b:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary1ySGeq9LtYp4zuPOgZQAASjY"]
[Wed Sep 30 01:10:01.518391 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.518663 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.538198 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:01.538576 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:01.547535 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.547849 2026] [access_compat:error] [pid 270884:tid 271066] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.587681 2026] [security2:error] [pid 270884:tid 271061] [client 20.219.2.60:45078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/eetu.php"] [unique_id "ary1ySGeq9LtYp4zuPOgaAAAACo"]
[Wed Sep 30 01:10:01.598380 2026] [security2:error] [pid 276059:tid 276210] [client 223.181.60.167:7367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1yXtqdHBwD77138e1UAAAAZ4"]
[Wed Sep 30 01:10:01.598518 2026] [security2:error] [pid 276059:tid 276210] [client 223.181.60.167:7367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1yXtqdHBwD77138e1UAAAAZ4"]
[Wed Sep 30 01:10:01.646493 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.646836 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.700802 2026] [security2:error] [pid 276059:tid 276212] [client 20.70.173.30:38869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/abcd.php"] [unique_id "ary1yXtqdHBwD77138e1UQAAAaA"]
[Wed Sep 30 01:10:01.732356 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.732624 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.761317 2026] [security2:error] [pid 276059:tid 276314] [client 20.194.5.96:25219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1yXtqdHBwD77138e1UgAAAgY"]
[Wed Sep 30 01:10:01.825339 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.825790 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.825904 2026] [security2:error] [pid 270884:tid 271123] [client 20.204.42.136:3056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/dairg.php"] [unique_id "ary1ySGeq9LtYp4zuPOgeQAAAGg"]
[Wed Sep 30 01:10:01.836982 2026] [access_compat:error] [pid 270884:tid 271099] [client 47.79.13.234:35184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:10:01.837393 2026] [access_compat:error] [pid 270884:tid 271099] [client 47.79.13.234:35184] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:10:01.917114 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:01.917587 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:01.927707 2026] [security2:error] [pid 270884:tid 271056] [client 161.118.214.16:55402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "weg.lrq.mybluehost.me"] [uri "/"] [unique_id "ary1ySGeq9LtYp4zuPOgUAAAACU"]
[Wed Sep 30 01:10:01.992711 2026] [security2:error] [pid 276620:tid 276870] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1ydPAdfEWqmGIkg1bpwAAAoM"]
[Wed Sep 30 01:10:02.005551 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.005990 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.036342 2026] [security2:error] [pid 270884:tid 271086] [client 4.196.65.241:2524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/kerang.php"] [unique_id "ary1yiGeq9LtYp4zuPOghQAAAEM"]
[Wed Sep 30 01:10:02.051173 2026] [security2:error] [pid 276059:tid 276251] [client 20.219.2.60:45102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/dx.php"] [unique_id "ary1yntqdHBwD77138e1VgAAAcc"]
[Wed Sep 30 01:10:02.054125 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:02.054416 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:02.074720 2026] [security2:error] [pid 276620:tid 276850] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1ytPAdfEWqmGIkg1bqgAAAm8"]
[Wed Sep 30 01:10:02.098981 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.099420 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.140158 2026] [core:error] [pid 276620:tid 276767] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.140189 2026] [core:error] [pid 276620:tid 276767] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.167313 2026] [core:error] [pid 276620:tid 276865] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.167334 2026] [core:error] [pid 276620:tid 276865] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.185677 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.186104 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.257192 2026] [qos:error] [pid 276620:tid 276794] [client 84.30.88.119:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1ytPAdfEWqmGIkg1bsQAAAjc
[Wed Sep 30 01:10:02.258860 2026] [qos:error] [pid 270884:tid 271028] [client 142.134.79.91:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1yiGeq9LtYp4zuPOglgAAAAk
[Wed Sep 30 01:10:02.277306 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.277594 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.303501 2026] [qos:error] [pid 270884:tid 271070] [client 78.241.58.242:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1yiGeq9LtYp4zuPOgngAAADM
[Wed Sep 30 01:10:02.328689 2026] [security2:error] [pid 276059:tid 276317] [client 20.219.2.60:11891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/222.php"] [unique_id "ary1yntqdHBwD77138e1WwAAAgk"]
[Wed Sep 30 01:10:02.339327 2026] [qos:error] [pid 270884:tid 270989] [remote 73.218.44.87:55114] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.218.44.87, id=ary1yiGeq9LtYp4zuPOgoAAAL2M
[Wed Sep 30 01:10:02.366531 2026] [security2:error] [pid 276059:tid 276207] [client 20.194.5.96:25050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1yntqdHBwD77138e1XAAAAZw"]
[Wed Sep 30 01:10:02.374924 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.375378 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.387131 2026] [security2:error] [pid 270884:tid 271026] [client 103.241.204.139:57028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1yiGeq9LtYp4zuPOgowAAAAc"]
[Wed Sep 30 01:10:02.387388 2026] [security2:error] [pid 270884:tid 271026] [client 103.241.204.139:57028] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1yiGeq9LtYp4zuPOgowAAAAc"]
[Wed Sep 30 01:10:02.448473 2026] [security2:error] [pid 276059:tid 276219] [client 20.28.180.172:29952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/c3c427fa59.php"] [unique_id "ary1yntqdHBwD77138e1XQAAAac"]
[Wed Sep 30 01:10:02.470114 2026] [core:error] [pid 276059:tid 276257] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.470163 2026] [core:error] [pid 276059:tid 276257] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.470646 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.471170 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.480217 2026] [security2:error] [pid 276059:tid 276244] [client 20.204.42.136:3051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/z60.php"] [unique_id "ary1yntqdHBwD77138e1ZAAAAcA"]
[Wed Sep 30 01:10:02.515036 2026] [security2:error] [pid 276059:tid 276282] [client 20.219.2.60:45057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-kikikoko.php"] [unique_id "ary1yntqdHBwD77138e1agAAAeY"]
[Wed Sep 30 01:10:02.516859 2026] [core:error] [pid 276059:tid 276243] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.516875 2026] [core:error] [pid 276059:tid 276243] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.549694 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.550067 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.586944 2026] [security2:error] [pid 270884:tid 271028] [client 168.100.149.109:36982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/2d66d79e7ae8b8979e3b957728eb774a.b51.css.gz"] [unique_id "ary1yiGeq9LtYp4zuPOgqgAACVU"]
[Wed Sep 30 01:10:02.614180 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:02.614451 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:02.641365 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.641649 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.688431 2026] [security2:error] [pid 270884:tid 271058] [client 20.213.164.196:55182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/asset.php"] [unique_id "ary1yiGeq9LtYp4zuPOgrwAAACc"]
[Wed Sep 30 01:10:02.734830 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.735287 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.808894 2026] [security2:error] [pid 270884:tid 271026] [client 20.211.90.37:39946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary1yiGeq9LtYp4zuPOgswAAAAc"]
[Wed Sep 30 01:10:02.830445 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.830734 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.907421 2026] [core:error] [pid 270884:tid 271131] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.907453 2026] [core:error] [pid 270884:tid 271131] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.913501 2026] [core:error] [pid 276059:tid 276223] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.913519 2026] [core:error] [pid 276059:tid 276223] [client 34.62.154.185:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:02.918366 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:02.918651 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:02.950101 2026] [qos:error] [pid 276620:tid 276688] [remote 2.49.222.251:34538] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=2.49.222.251, id=ary1ytPAdfEWqmGIkg1byAACgDo
[Wed Sep 30 01:10:02.958099 2026] [security2:error] [pid 276620:tid 276841] [client 4.240.25.22:8487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/images.php"] [unique_id "ary1ytPAdfEWqmGIkg1byQAAAmY"]
[Wed Sep 30 01:10:02.980144 2026] [security2:error] [pid 276059:tid 276319] [client 20.219.2.60:44544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/file61.php"] [unique_id "ary1yntqdHBwD77138e1dQAAAgs"]
[Wed Sep 30 01:10:03.006905 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.007204 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.055606 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:03.056113 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:03.067281 2026] [security2:error] [pid 270884:tid 271127] [client 20.204.42.136:2951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/imageskir.php"] [unique_id "ary1yyGeq9LtYp4zuPOgyAAAAGw"]
[Wed Sep 30 01:10:03.096935 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.097202 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.100203 2026] [security2:error] [pid 270884:tid 271058] [client 167.234.120.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary1yyGeq9LtYp4zuPOgywAAACc"]
[Wed Sep 30 01:10:03.118535 2026] [security2:error] [pid 270884:tid 271075] [client 20.219.19.141:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/24.php"] [unique_id "ary1yyGeq9LtYp4zuPOgzgAAADg"]
[Wed Sep 30 01:10:03.144534 2026] [security2:error] [pid 270884:tid 271052] [client 20.194.5.96:25243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/adminfuns.php"] [unique_id "ary1yyGeq9LtYp4zuPOg0QAAACE"]
[Wed Sep 30 01:10:03.190774 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.191053 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.214996 2026] [security2:error] [pid 270884:tid 271123] [client 34.62.154.185:58945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1yyGeq9LtYp4zuPOg1gAAAGg"]
[Wed Sep 30 01:10:03.226449 2026] [security2:error] [pid 270884:tid 271034] [client 34.62.154.185:56452] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary1yyGeq9LtYp4zuPOg1wAAAA8"]
[Wed Sep 30 01:10:03.277575 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.277844 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.380770 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.381207 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.388582 2026] [core:error] [pid 276620:tid 276796] [client 45.138.12.48:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:03.388609 2026] [core:error] [pid 276620:tid 276796] [client 45.138.12.48:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:03.428819 2026] [security2:error] [pid 270884:tid 271066] [client 20.28.180.172:62365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/amp.php"] [unique_id "ary1yyGeq9LtYp4zuPOg4AAAAC8"]
[Wed Sep 30 01:10:03.444916 2026] [security2:error] [pid 270884:tid 271075] [client 20.219.2.60:48107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/xx.php"] [unique_id "ary1yyGeq9LtYp4zuPOg4QAAADg"]
[Wed Sep 30 01:10:03.466895 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.467327 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.490826 2026] [security2:error] [pid 270884:tid 271056] [client 179.105.122.52:52225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1yyGeq9LtYp4zuPOg3QAAACU"]
[Wed Sep 30 01:10:03.503503 2026] [security2:error] [pid 276620:tid 276798] [client 47.128.49.188:59948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gycblinds.com"] [uri "/robots.txt"] [unique_id "ary1y9PAdfEWqmGIkg1b0gAAAjs"]
[Wed Sep 30 01:10:03.504485 2026] [security2:error] [pid 276620:tid 276845] [client 4.240.25.22:18812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/BDKR28WP.php"] [unique_id "ary1y9PAdfEWqmGIkg1b0wAAAmo"]
[Wed Sep 30 01:10:03.518069 2026] [security2:error] [pid 276620:tid 276788] [client 34.62.154.185:61155] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1y9PAdfEWqmGIkg1b1AAAAjE"]
[Wed Sep 30 01:10:03.525183 2026] [security2:error] [pid 276059:tid 276312] [client 20.204.42.136:35777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/asax.php"] [unique_id "ary1y3tqdHBwD77138e1fgAAAgQ"]
[Wed Sep 30 01:10:03.550902 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.551180 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.561338 2026] [security2:error] [pid 276620:tid 276824] [client 34.62.154.185:64654] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary1y9PAdfEWqmGIkg1b1QAAAlU"]
[Wed Sep 30 01:10:03.578932 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:03.579201 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:03.642045 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.642314 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.705306 2026] [security2:error] [pid 276620:tid 276870] [client 20.28.180.172:34248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/kgblegacy.php"] [unique_id "ary1y9PAdfEWqmGIkg1b2AAAAoM"]
[Wed Sep 30 01:10:03.731174 2026] [security2:error] [pid 276620:tid 276827] [client 20.211.90.37:39907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/admin.php"] [unique_id "ary1y9PAdfEWqmGIkg1b2gAAAlg"]
[Wed Sep 30 01:10:03.733912 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.734183 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.792180 2026] [security2:error] [pid 270884:tid 271131] [client 20.194.5.96:25245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/av.php"] [unique_id "ary1yyGeq9LtYp4zuPOg9wAAAHA"]
[Wed Sep 30 01:10:03.818206 2026] [security2:error] [pid 276620:tid 276784] [client 34.62.154.185:62586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1y9PAdfEWqmGIkg1b3gAAAi0"]
[Wed Sep 30 01:10:03.831045 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.831298 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.893143 2026] [security2:error] [pid 270884:tid 271133] [client 20.204.42.136:3042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/backup-helper.php"] [unique_id "ary1yyGeq9LtYp4zuPOg_gAAAHI"]
[Wed Sep 30 01:10:03.895898 2026] [security2:error] [pid 270884:tid 271103] [client 34.62.154.185:54492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary1yyGeq9LtYp4zuPOg_wAAAFQ"]
[Wed Sep 30 01:10:03.913506 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:03.913766 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:03.939001 2026] [security2:error] [pid 270884:tid 271070] [client 37.41.16.35:58466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1yyGeq9LtYp4zuPOhBAAAADM"]
[Wed Sep 30 01:10:03.939467 2026] [security2:error] [pid 270884:tid 271070] [client 37.41.16.35:58466] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary1yyGeq9LtYp4zuPOhBAAAADM"]
[Wed Sep 30 01:10:03.966343 2026] [security2:error] [pid 276059:tid 276210] [client 20.219.2.60:45043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/Jcrop.php"] [unique_id "ary1y3tqdHBwD77138e1ggAAAZ4"]
[Wed Sep 30 01:10:03.966642 2026] [security2:error] [pid 276620:tid 276843] [client 45.138.12.32:31536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.izn.soq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1y9PAdfEWqmGIkg1b3wAAAmg"]
[Wed Sep 30 01:10:04.005304 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.005585 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.062540 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:04.062814 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:04.095941 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.096208 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.097237 2026] [security2:error] [pid 276059:tid 276304] [client 45.138.12.32:44264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.itb.pgp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1zHtqdHBwD77138e1hAAAAfw"]
[Wed Sep 30 01:10:04.117406 2026] [security2:error] [pid 270884:tid 270903] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zCGeq9LtYp4zuPOhDAAAcBE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ded547a83bcd23a094f6a0443fa42201&start=210&t=21812
[Wed Sep 30 01:10:04.117448 2026] [security2:error] [pid 270884:tid 270903] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zCGeq9LtYp4zuPOhDAAAcBE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ded547a83bcd23a094f6a0443fa42201&start=210&t=21812
[Wed Sep 30 01:10:04.117903 2026] [security2:error] [pid 276620:tid 276871] [client 20.194.30.107:17531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/edit.php"] [unique_id "ary1zNPAdfEWqmGIkg1b4QAAAoQ"]
[Wed Sep 30 01:10:04.118543 2026] [security2:error] [pid 276059:tid 276301] [client 34.62.154.185:63781] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary1zHtqdHBwD77138e1hQAAAfk"]
[Wed Sep 30 01:10:04.188045 2026] [security2:error] [pid 270884:tid 271044] [client 34.62.154.185:60893] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary1zCGeq9LtYp4zuPOhDwAAABk"]
[Wed Sep 30 01:10:04.188467 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.188687 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.214519 2026] [security2:error] [pid 270884:tid 271034] [client 20.194.5.96:25052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/dex.php"] [unique_id "ary1zCGeq9LtYp4zuPOhEwAAAA8"]
[Wed Sep 30 01:10:04.278796 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.279170 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.332785 2026] [security2:error] [pid 276620:tid 276838] [client 20.219.2.60:11715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-blog.php"] [unique_id "ary1zNPAdfEWqmGIkg1b4gAAAmM"]
[Wed Sep 30 01:10:04.378954 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.379429 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.398405 2026] [security2:error] [pid 276620:tid 276773] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1zNPAdfEWqmGIkg1b4wAAAiI"]
[Wed Sep 30 01:10:04.406716 2026] [security2:error] [pid 270884:tid 271058] [client 34.62.154.185:50446] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary1zCGeq9LtYp4zuPOhGwAAACc"]
[Wed Sep 30 01:10:04.441779 2026] [security2:error] [pid 270884:tid 271028] [client 20.219.2.60:44604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/rip.php"] [unique_id "ary1zCGeq9LtYp4zuPOhHwAAAAk"]
[Wed Sep 30 01:10:04.455160 2026] [autoindex:error] [pid 270884:tid 271071] [client 104.28.254.46:33730] AH01276: Cannot serve directory /home4/wptmzlmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/search?q=wpt.mzl.mybluehost.me
[Wed Sep 30 01:10:04.464053 2026] [security2:error] [pid 270884:tid 271099] [client 20.70.173.30:56408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/min.php"] [unique_id "ary1zCGeq9LtYp4zuPOhIgAAAFA"]
[Wed Sep 30 01:10:04.472642 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.473109 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.508493 2026] [security2:error] [pid 276620:tid 276795] [client 34.62.154.185:57374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1zNPAdfEWqmGIkg1b5QAAAjg"]
[Wed Sep 30 01:10:04.553637 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:04.553903 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:04.555390 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.555674 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.581659 2026] [security2:error] [pid 276620:tid 276819] [client 168.100.149.120:29306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b2e24df155af00acbc2bed2b9657bc5f.2679.css.gz"] [unique_id "ary1zNPAdfEWqmGIkg1b5wACUD4"]
[Wed Sep 30 01:10:04.587471 2026] [security2:error] [pid 276620:tid 276792] [client 20.204.42.136:3070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/1xmomo.php"] [unique_id "ary1zNPAdfEWqmGIkg1b6AAAAjU"]
[Wed Sep 30 01:10:04.649132 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.649451 2026] [security2:error] [pid 270884:tid 270886] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zCGeq9LtYp4zuPOhKgAAJwA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=399f55a44502383d9bea065275e307d3&start=210&t=21812
[Wed Sep 30 01:10:04.649470 2026] [security2:error] [pid 270884:tid 270886] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zCGeq9LtYp4zuPOhKgAAJwA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=399f55a44502383d9bea065275e307d3&start=210&t=21812
[Wed Sep 30 01:10:04.649562 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.668913 2026] [security2:error] [pid 270884:tid 271034] [client 20.194.5.96:25251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/chosen.php"] [unique_id "ary1zCGeq9LtYp4zuPOhKwAAAA8"]
[Wed Sep 30 01:10:04.684577 2026] [security2:error] [pid 270884:tid 271099] [client 20.70.173.30:38815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/w.php"] [unique_id "ary1zCGeq9LtYp4zuPOhLAAAAFA"]
[Wed Sep 30 01:10:04.696018 2026] [security2:error] [pid 276620:tid 276848] [client 34.62.154.185:50884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary1zNPAdfEWqmGIkg1b7QAAAm0"]
[Wed Sep 30 01:10:04.734638 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.735059 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.751548 2026] [security2:error] [pid 270884:tid 271044] [client 20.194.30.107:42229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-content/index.php"] [unique_id "ary1zCGeq9LtYp4zuPOhMQAAABk"]
[Wed Sep 30 01:10:04.818417 2026] [security2:error] [pid 270884:tid 271123] [client 45.138.12.32:44334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iwl.buu.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1zCGeq9LtYp4zuPOhNQAAAGg"]
[Wed Sep 30 01:10:04.826803 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.827087 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.836049 2026] [security2:error] [pid 270884:tid 271071] [client 34.62.154.185:54135] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary1zCGeq9LtYp4zuPOhNwAAADQ"]
[Wed Sep 30 01:10:04.919837 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:04.920275 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:04.928156 2026] [security2:error] [pid 270884:tid 271110] [client 20.211.90.37:39951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/admin.php"] [unique_id "ary1zCGeq9LtYp4zuPOhPAAAAFs"]
[Wed Sep 30 01:10:04.932349 2026] [qos:error] [pid 276620:tid 276858] [client 86.183.2.136:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1zNPAdfEWqmGIkg1b8wAAAnc
[Wed Sep 30 01:10:04.932947 2026] [security2:error] [pid 276620:tid 276772] [client 20.219.2.60:45065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/new4.php"] [unique_id "ary1zNPAdfEWqmGIkg1b9AAAAiE"]
[Wed Sep 30 01:10:04.997418 2026] [security2:error] [pid 276620:tid 276863] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1zNPAdfEWqmGIkg1b9QAAAnw"]
[Wed Sep 30 01:10:05.000414 2026] [qos:error] [pid 270884:tid 271132] [client 172.125.183.163:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1zCGeq9LtYp4zuPOhQQAAAHE
[Wed Sep 30 01:10:05.002532 2026] [security2:error] [pid 270884:tid 271120] [client 34.62.154.185:50448] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary1zSGeq9LtYp4zuPOhQwAAAGU"]
[Wed Sep 30 01:10:05.007964 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.008228 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.040271 2026] [security2:error] [pid 270884:tid 271131] [client 20.198.74.230:24131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/2fa307c31b.php"] [unique_id "ary1zSGeq9LtYp4zuPOhRQAAAHA"]
[Wed Sep 30 01:10:05.042361 2026] [access_compat:error] [pid 276059:tid 276303] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:05.042645 2026] [access_compat:error] [pid 276059:tid 276303] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:05.092243 2026] [security2:error] [pid 270884:tid 271028] [client 4.196.65.241:27301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/local.php"] [unique_id "ary1zSGeq9LtYp4zuPOhSQAAAAk"]
[Wed Sep 30 01:10:05.098633 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.098915 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.169744 2026] [security2:error] [pid 270884:tid 271120] [client 34.62.154.185:53117] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1zSGeq9LtYp4zuPOhTAAAAGU"]
[Wed Sep 30 01:10:05.179165 2026] [security2:error] [pid 270884:tid 271070] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary1zSGeq9LtYp4zuPOhTQAAADM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:10:05.189009 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.189275 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.189463 2026] [security2:error] [pid 270884:tid 271052] [client 45.138.12.32:44316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.iri.yrw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1zSGeq9LtYp4zuPOhTwAAACE"]
[Wed Sep 30 01:10:05.201873 2026] [security2:error] [pid 270884:tid 271131] [client 20.204.42.136:2973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/almafkew.php"] [unique_id "ary1zSGeq9LtYp4zuPOhUAAAAHA"]
[Wed Sep 30 01:10:05.209261 2026] [security2:error] [pid 270884:tid 271028] [client 20.219.19.141:20843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/xwpg.php"] [unique_id "ary1zSGeq9LtYp4zuPOhUgAAAAk"]
[Wed Sep 30 01:10:05.210095 2026] [security2:error] [pid 270884:tid 271099] [client 20.28.180.172:18330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/abrand.php"] [unique_id "ary1zSGeq9LtYp4zuPOhUwAAAFA"]
[Wed Sep 30 01:10:05.278984 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.279260 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.287500 2026] [qos:error] [pid 270884:tid 271070] [client 146.90.115.7:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1zSGeq9LtYp4zuPOhWAAAADM
[Wed Sep 30 01:10:05.312524 2026] [security2:error] [pid 270884:tid 271052] [client 4.240.25.22:8468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/0.php"] [unique_id "ary1zSGeq9LtYp4zuPOhWQAAACE"]
[Wed Sep 30 01:10:05.319761 2026] [security2:error] [pid 270884:tid 271131] [client 20.194.5.96:25275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/radio.php"] [unique_id "ary1zSGeq9LtYp4zuPOhWgAAAHA"]
[Wed Sep 30 01:10:05.370421 2026] [security2:error] [pid 276620:tid 276834] [client 34.62.154.185:52451] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary1zdPAdfEWqmGIkg1b_gAAAl8"]
[Wed Sep 30 01:10:05.380220 2026] [security2:error] [pid 276620:tid 276880] [client 20.70.173.30:60018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/red.php"] [unique_id "ary1zdPAdfEWqmGIkg1b_wAAAo0"]
[Wed Sep 30 01:10:05.381204 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.381647 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.390076 2026] [security2:error] [pid 270884:tid 271129] [client 49.37.102.248:55099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1zSGeq9LtYp4zuPOhXgAAAG4"]
[Wed Sep 30 01:10:05.390288 2026] [security2:error] [pid 270884:tid 271129] [client 49.37.102.248:55099] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary1zSGeq9LtYp4zuPOhXgAAAG4"]
[Wed Sep 30 01:10:05.398306 2026] [security2:error] [pid 276620:tid 276808] [client 20.211.90.37:39948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary1zdPAdfEWqmGIkg1cAAAAAkU"]
[Wed Sep 30 01:10:05.417450 2026] [security2:error] [pid 270884:tid 271058] [client 20.219.2.60:33804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/aa.php"] [unique_id "ary1zSGeq9LtYp4zuPOhXwAAACc"]
[Wed Sep 30 01:10:05.443923 2026] [security2:error] [pid 270884:tid 271071] [client 201.32.215.149:5867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1zSGeq9LtYp4zuPOhYQAAADQ"]
[Wed Sep 30 01:10:05.444090 2026] [security2:error] [pid 270884:tid 271071] [client 201.32.215.149:5867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1zSGeq9LtYp4zuPOhYQAAADQ"]
[Wed Sep 30 01:10:05.466070 2026] [security2:error] [pid 276059:tid 276194] [client 34.62.154.185:52542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1zXtqdHBwD77138e1jQAAAY8"]
[Wed Sep 30 01:10:05.471316 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.471791 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.543306 2026] [access_compat:error] [pid 276059:tid 276207] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:05.543616 2026] [access_compat:error] [pid 276059:tid 276207] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:05.556153 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.556436 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.571474 2026] [security2:error] [pid 270884:tid 271143] [client 20.213.164.196:21203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/cued.php"] [unique_id "ary1zSGeq9LtYp4zuPOhZAAAAHw"]
[Wed Sep 30 01:10:05.578092 2026] [security2:error] [pid 270884:tid 271052] [client 20.194.30.107:1758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/edit.php"] [unique_id "ary1zSGeq9LtYp4zuPOhZQAAACE"]
[Wed Sep 30 01:10:05.619479 2026] [core:error] [pid 276620:tid 276795] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.619500 2026] [core:error] [pid 276620:tid 276795] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.632064 2026] [core:error] [pid 270884:tid 271134] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.632087 2026] [core:error] [pid 270884:tid 271134] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.639862 2026] [core:error] [pid 270884:tid 271133] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.639878 2026] [core:error] [pid 270884:tid 271133] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.643097 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.643373 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.658457 2026] [security2:error] [pid 270884:tid 271061] [client 34.62.154.185:58480] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary1zSGeq9LtYp4zuPOhbwAAACo"]
[Wed Sep 30 01:10:05.663241 2026] [core:error] [pid 270884:tid 271071] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.663256 2026] [core:error] [pid 270884:tid 271071] [client 150.251.225.162:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:05.680436 2026] [security2:error] [pid 276620:tid 276801] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary1zdPAdfEWqmGIkg1cDwAAAj4"]
[Wed Sep 30 01:10:05.719613 2026] [security2:error] [pid 276059:tid 276280] [client 20.204.42.136:2965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/database2.php"] [unique_id "ary1zXtqdHBwD77138e1kQAAAeQ"]
[Wed Sep 30 01:10:05.739899 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.740343 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.803482 2026] [security2:error] [pid 276620:tid 276812] [client 34.62.154.185:60284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1zdPAdfEWqmGIkg1cFQAAAkk"]
[Wed Sep 30 01:10:05.807340 2026] [security2:error] [pid 276620:tid 276816] [client 57.129.146.219:49870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "beetreefolkschool.org"] [uri "/wp-login.php"] [unique_id "ary1zNPAdfEWqmGIkg1b8QAAAk0"]
[Wed Sep 30 01:10:05.831109 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.831558 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.837738 2026] [security2:error] [pid 270884:tid 271108] [client 20.211.90.37:39970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/index/function.php"] [unique_id "ary1zSGeq9LtYp4zuPOhfAAAAFk"]
[Wed Sep 30 01:10:05.871030 2026] [security2:error] [pid 276059:tid 276256] [client 20.219.2.60:45035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/jk.php"] [unique_id "ary1zXtqdHBwD77138e1kgAAAcw"]
[Wed Sep 30 01:10:05.892685 2026] [security2:error] [pid 270884:tid 271120] [client 4.240.25.22:63657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/media.php"] [unique_id "ary1zSGeq9LtYp4zuPOhggAAAGU"]
[Wed Sep 30 01:10:05.894550 2026] [security2:error] [pid 276620:tid 276826] [client 20.194.5.96:25032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wp_blog_footer.php"] [unique_id "ary1zdPAdfEWqmGIkg1cGAAAAlc"]
[Wed Sep 30 01:10:05.918359 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:05.918632 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:05.927197 2026] [access_compat:error] [pid 276620:tid 276829] [client 47.79.13.78:37552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:10:05.927466 2026] [access_compat:error] [pid 276620:tid 276829] [client 47.79.13.78:37552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:10:05.947023 2026] [security2:error] [pid 276059:tid 276282] [client 34.62.154.185:65462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary1zXtqdHBwD77138e1lAAAAeY"]
[Wed Sep 30 01:10:06.008998 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.009263 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.069481 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:06.069757 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:06.099155 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.099458 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.113825 2026] [security2:error] [pid 270884:tid 271110] [client 34.62.154.185:57912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1ziGeq9LtYp4zuPOhiQAAAFs"]
[Wed Sep 30 01:10:06.146228 2026] [security2:error] [pid 270884:tid 271134] [client 20.70.173.30:8161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/100.php"] [unique_id "ary1ziGeq9LtYp4zuPOhigAAAHM"]
[Wed Sep 30 01:10:06.150142 2026] [security2:error] [pid 276620:tid 276772] [client 20.219.2.60:11900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary1ztPAdfEWqmGIkg1cGwAAAiE"]
[Wed Sep 30 01:10:06.182017 2026] [security2:error] [pid 270884:tid 271070] [client 20.194.30.107:17358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/felnggg.php"] [unique_id "ary1ziGeq9LtYp4zuPOhiwAAADM"]
[Wed Sep 30 01:10:06.192311 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.192763 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.198977 2026] [security2:error] [pid 276620:tid 276821] [client 20.28.180.172:34276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/NzxXWLD25py.php"] [unique_id "ary1ztPAdfEWqmGIkg1cHAAAAlI"]
[Wed Sep 30 01:10:06.202576 2026] [security2:error] [pid 276620:tid 276769] [client 20.204.42.136:2964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/aa.php"] [unique_id "ary1ztPAdfEWqmGIkg1cHQAAAh4"]
[Wed Sep 30 01:10:06.241853 2026] [security2:error] [pid 270884:tid 271127] [client 34.62.154.185:49274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary1ziGeq9LtYp4zuPOhkQAAAGw"]
[Wed Sep 30 01:10:06.247856 2026] [security2:error] [pid 276620:tid 276869] [client 20.194.5.96:25053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/k.php"] [unique_id "ary1ztPAdfEWqmGIkg1cHwAAAoI"]
[Wed Sep 30 01:10:06.285172 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.285441 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.323033 2026] [security2:error] [pid 276620:tid 276777] [client 20.70.173.30:19154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/wp-login.php"] [unique_id "ary1ztPAdfEWqmGIkg1cIgAAAiY"]
[Wed Sep 30 01:10:06.345225 2026] [security2:error] [pid 270884:tid 271034] [client 20.219.2.60:48117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/gcqoa.php"] [unique_id "ary1ziGeq9LtYp4zuPOhlQAAAA8"]
[Wed Sep 30 01:10:06.383235 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.383698 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.419044 2026] [security2:error] [pid 276059:tid 276224] [client 34.62.154.185:58958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1zntqdHBwD77138e1lwAAAaw"]
[Wed Sep 30 01:10:06.472803 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.473271 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.533019 2026] [security2:error] [pid 270884:tid 271101] [client 34.62.154.185:59986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "giselekabbachmd.orontes-tech.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary1ziGeq9LtYp4zuPOhpAAAAFI"]
[Wed Sep 30 01:10:06.546363 2026] [security2:error] [pid 276620:tid 276775] [client 20.28.180.172:18337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/init.php"] [unique_id "ary1ztPAdfEWqmGIkg1cJQAAAiQ"]
[Wed Sep 30 01:10:06.553872 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.554137 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.576609 2026] [security2:error] [pid 270884:tid 271034] [client 168.100.149.225:30174] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/12bf3921e180bf3a3dc12d158b05ba9a.b130.css.gz"] [unique_id "ary1ziGeq9LtYp4zuPOhpwAAD1M"]
[Wed Sep 30 01:10:06.582361 2026] [access_compat:error] [pid 276059:tid 276253] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:06.582647 2026] [access_compat:error] [pid 276059:tid 276253] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:06.639195 2026] [security2:error] [pid 270884:tid 271122] [client 203.122.45.246:54495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1ziGeq9LtYp4zuPOhsAAAAGc"]
[Wed Sep 30 01:10:06.639316 2026] [security2:error] [pid 270884:tid 271122] [client 203.122.45.246:54495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1ziGeq9LtYp4zuPOhsAAAAGc"]
[Wed Sep 30 01:10:06.644840 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.645097 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.687872 2026] [security2:error] [pid 270884:tid 271131] [client 20.194.5.96:25240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/133.php"] [unique_id "ary1ziGeq9LtYp4zuPOhswAAAHA"]
[Wed Sep 30 01:10:06.692922 2026] [security2:error] [pid 270884:tid 271048] [client 20.211.90.37:40401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary1ziGeq9LtYp4zuPOhtAAAAB0"]
[Wed Sep 30 01:10:06.725015 2026] [security2:error] [pid 270884:tid 271071] [client 65.111.9.232:27563] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary1ziGeq9LtYp4zuPOhrAAAADQ"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:06.725991 2026] [security2:error] [pid 276620:tid 276842] [client 45.138.12.32:44352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.izn.soq.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1ztPAdfEWqmGIkg1cKAAAAmc"]
[Wed Sep 30 01:10:06.734476 2026] [security2:error] [pid 270884:tid 271034] [client 20.204.42.136:3063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/pJPoKA.php"] [unique_id "ary1ziGeq9LtYp4zuPOhuAAAAA8"]
[Wed Sep 30 01:10:06.736138 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.736404 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.741181 2026] [security2:error] [pid 270884:tid 271123] [client 20.198.74.230:23898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/aqotrjkg.php"] [unique_id "ary1ziGeq9LtYp4zuPOhuQAAAGg"]
[Wed Sep 30 01:10:06.774451 2026] [autoindex:error] [pid 276059:tid 276226] [client 20.162.8.144:0] AH01276: Cannot serve directory /home3/whconsul/public_html/website_6ef7ddcb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:10:06.775266 2026] [core:error] [pid 276059:tid 276226] [client 20.162.8.144:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:06.799597 2026] [security2:error] [pid 276620:tid 276857] [client 152.59.165.7:59189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1ztPAdfEWqmGIkg1cKQAAAnY"]
[Wed Sep 30 01:10:06.799701 2026] [security2:error] [pid 276620:tid 276857] [client 152.59.165.7:59189] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary1ztPAdfEWqmGIkg1cKQAAAnY"]
[Wed Sep 30 01:10:06.809556 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:45064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/plugin-editor.php"] [unique_id "ary1ziGeq9LtYp4zuPOhvAAAAAA"]
[Wed Sep 30 01:10:06.829854 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.830127 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.911423 2026] [autoindex:error] [pid 276620:tid 276810] [client 104.28.254.46:33736] AH01276: Cannot serve directory /home4/wptmzlmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://wpt.mzl.mybluehost.me/
[Wed Sep 30 01:10:06.918957 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:06.919232 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:06.934615 2026] [security2:error] [pid 270884:tid 271099] [client 122.173.27.10:16790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1ziGeq9LtYp4zuPOhwQAAAFA"]
[Wed Sep 30 01:10:06.934685 2026] [security2:error] [pid 270884:tid 271099] [client 122.173.27.10:16790] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1ziGeq9LtYp4zuPOhwQAAAFA"]
[Wed Sep 30 01:10:07.010565 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.010858 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.059665 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:07.059940 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:07.064437 2026] [authz_core:error] [pid 270884:tid 271052] [client 152.53.36.14:44888] AH01630: client denied by server configuration: /home1/dennisc1/public_html/wp-content/plugins/litespeed-cache/guest.vary.php, referer: https://dennis-cooper.com/biography/
[Wed Sep 30 01:10:07.099989 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.100281 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.177744 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.19.141:20821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/blacks.php"] [unique_id "ary1zyGeq9LtYp4zuPOhzAAAAGU"]
[Wed Sep 30 01:10:07.180361 2026] [security2:error] [pid 270884:tid 271045] [client 4.240.25.22:41668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/baru.php"] [unique_id "ary1zyGeq9LtYp4zuPOhzQAAABo"]
[Wed Sep 30 01:10:07.192213 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.192499 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.200714 2026] [qos:error] [pid 276620:tid 276884] [client 45.48.129.225:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1z9PAdfEWqmGIkg1cMAAAApE
[Wed Sep 30 01:10:07.203457 2026] [security2:error] [pid 276620:tid 276795] [client 20.194.5.96:25221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wsd.php"] [unique_id "ary1z9PAdfEWqmGIkg1cMgAAAjg"]
[Wed Sep 30 01:10:07.205398 2026] [security2:error] [pid 270884:tid 270950] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zyGeq9LtYp4zuPOh0AAAM0A"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=14338
[Wed Sep 30 01:10:07.205420 2026] [security2:error] [pid 270884:tid 270950] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1zyGeq9LtYp4zuPOh0AAAM0A"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=14338
[Wed Sep 30 01:10:07.287845 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.288300 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.295032 2026] [security2:error] [pid 270884:tid 271048] [client 20.219.2.60:45082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/plugin-install.php"] [unique_id "ary1zyGeq9LtYp4zuPOh1AAAAB0"]
[Wed Sep 30 01:10:07.314136 2026] [security2:error] [pid 270884:tid 271140] [client 20.204.42.136:3058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/24.php"] [unique_id "ary1zyGeq9LtYp4zuPOh1gAAAHk"]
[Wed Sep 30 01:10:07.384673 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.385095 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.400306 2026] [qos:error] [pid 276059:tid 276202] [client 185.146.112.44:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary1z3tqdHBwD77138e1nQAAAZc
[Wed Sep 30 01:10:07.478562 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.479162 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:53858] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.489329 2026] [security2:error] [pid 276059:tid 276288] [client 20.213.164.196:21235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/sd.php"] [unique_id "ary1z3tqdHBwD77138e1oAAAAew"]
[Wed Sep 30 01:10:07.522419 2026] [security2:error] [pid 276620:tid 276846] [client 20.211.90.37:39979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/license.php"] [unique_id "ary1z9PAdfEWqmGIkg1cOQAAAms"]
[Wed Sep 30 01:10:07.551115 2026] [security2:error] [pid 276620:tid 276826] [client 20.58.177.98:45594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1z9PAdfEWqmGIkg1cPAAAAlc"]
[Wed Sep 30 01:10:07.556520 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.556766 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.571402 2026] [security2:error] [pid 270884:tid 271126] [client 20.70.173.30:2512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/min.php"] [unique_id "ary1zyGeq9LtYp4zuPOh5QAAAGs"]
[Wed Sep 30 01:10:07.575126 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:07.575393 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:07.648293 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.648558 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.739003 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.739285 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.773095 2026] [security2:error] [pid 270884:tid 271026] [client 20.219.2.60:45014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/profile.php"] [unique_id "ary1zyGeq9LtYp4zuPOh8gAAAAc"]
[Wed Sep 30 01:10:07.835138 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.835615 2026] [security2:error] [pid 270884:tid 271109] [client 202.179.95.79:57369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1zyGeq9LtYp4zuPOh9AAAAFo"]
[Wed Sep 30 01:10:07.835733 2026] [security2:error] [pid 270884:tid 271109] [client 202.179.95.79:57369] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1zyGeq9LtYp4zuPOh9AAAAFo"]
[Wed Sep 30 01:10:07.835923 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.845719 2026] [security2:error] [pid 270884:tid 271130] [client 20.70.173.30:59563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/classwithtostring.php"] [unique_id "ary1zyGeq9LtYp4zuPOh9gAAAG8"]
[Wed Sep 30 01:10:07.863744 2026] [security2:error] [pid 276059:tid 276318] [client 20.204.42.136:2984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/42b5827789index.php"] [unique_id "ary1z3tqdHBwD77138e1pAAAAgo"]
[Wed Sep 30 01:10:07.903875 2026] [security2:error] [pid 276620:tid 276815] [client 20.194.5.96:25252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/BDKR28WP.php"] [unique_id "ary1z9PAdfEWqmGIkg1cSAAAAkw"]
[Wed Sep 30 01:10:07.907218 2026] [security2:error] [pid 270884:tid 271108] [client 216.73.216.46:53858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary1zyGeq9LtYp4zuPOh-QAAAFk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDcvbm9kZTAvbWVtb3J5MTM1
[Wed Sep 30 01:10:07.921623 2026] [security2:error] [pid 276620:tid 276845] [client 20.204.42.136:35164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/esp.php"] [unique_id "ary1z9PAdfEWqmGIkg1cSQAAAmo"]
[Wed Sep 30 01:10:07.932167 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:07.932677 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:07.937353 2026] [security2:error] [pid 276620:tid 276807] [client 20.58.177.98:49927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1z9PAdfEWqmGIkg1cSgAAAkQ"]
[Wed Sep 30 01:10:07.988356 2026] [security2:error] [pid 270884:tid 271122] [client 57.141.18.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary1zyGeq9LtYp4zuPOh-wAAAGc"]
[Wed Sep 30 01:10:08.017925 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.018203 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.079256 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:08.079532 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:08.107797 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.108116 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.121584 2026] [security2:error] [pid 276620:tid 276806] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary10NPAdfEWqmGIkg1cSwAAAkM"]
[Wed Sep 30 01:10:08.127128 2026] [security2:error] [pid 270884:tid 271004] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary10CGeq9LtYp4zuPOh_wAAIHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewforum.php?f=3&sid=5f760c2c6fa1c336b91a156ac501f24d
[Wed Sep 30 01:10:08.127147 2026] [security2:error] [pid 270884:tid 271004] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary10CGeq9LtYp4zuPOh_wAAIHI"], referer: https://mail.uxa.hoh.mybluehost.me/viewforum.php?f=3&sid=5f760c2c6fa1c336b91a156ac501f24d
[Wed Sep 30 01:10:08.199240 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.199532 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.239168 2026] [security2:error] [pid 276620:tid 276785] [client 20.219.2.60:48103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/class-t.api.php"] [unique_id "ary10NPAdfEWqmGIkg1cTQAAAi4"]
[Wed Sep 30 01:10:08.256017 2026] [security2:error] [pid 270884:tid 271122] [client 20.211.90.37:39966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/radio.php"] [unique_id "ary10CGeq9LtYp4zuPOiBgAAAGc"]
[Wed Sep 30 01:10:08.294986 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.295452 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.300906 2026] [security2:error] [pid 276620:tid 276840] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:4" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary10NPAdfEWqmGIkg1cTAAAAmU"]
[Wed Sep 30 01:10:08.303024 2026] [security2:error] [pid 270884:tid 271080] [client 20.28.180.172:34268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ded.php"] [unique_id "ary10CGeq9LtYp4zuPOiDQAAAD0"]
[Wed Sep 30 01:10:08.314516 2026] [security2:error] [pid 270884:tid 270956] [remote 57.141.14.55:28904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/wp-json/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-includes/wlwmanifest.xml"] [unique_id "ary10CGeq9LtYp4zuPOiDwAAQkI"]
[Wed Sep 30 01:10:08.367790 2026] [security2:error] [pid 276059:tid 276297] [client 20.70.173.30:33389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/a.php"] [unique_id "ary10HtqdHBwD77138e1rAAAAfU"]
[Wed Sep 30 01:10:08.391997 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.392450 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.428942 2026] [security2:error] [pid 276059:tid 276281] [client 74.7.242.1:48262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary10HtqdHBwD77138e1rgAAAeU"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:10:08.435151 2026] [security2:error] [pid 270884:tid 270894] [remote 64.23.166.180:33652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hpb.vui.mybluehost.me"] [uri "/.env"] [unique_id "ary10CGeq9LtYp4zuPOiFAAAZwg"]
[Wed Sep 30 01:10:08.509541 2026] [security2:error] [pid 270884:tid 271088] [client 20.204.42.136:3028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/mmq.php"] [unique_id "ary10CGeq9LtYp4zuPOiFwAAAEU"]
[Wed Sep 30 01:10:08.511835 2026] [security2:error] [pid 276620:tid 276775] [client 20.194.5.96:25051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wmore1.php"] [unique_id "ary10NPAdfEWqmGIkg1cUAAAAiQ"]
[Wed Sep 30 01:10:08.524849 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.525119 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.552034 2026] [core:error] [pid 270884:tid 271051] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:08.552052 2026] [core:error] [pid 270884:tid 271051] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:08.563822 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.564158 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.576438 2026] [security2:error] [pid 276620:tid 276808] [client 168.100.149.146:59606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/8598d3fde5ff61aea8fd061416ed45c2.d39b.css.gz"] [unique_id "ary10NPAdfEWqmGIkg1cUwACRVA"]
[Wed Sep 30 01:10:08.589432 2026] [security2:error] [pid 270884:tid 271089] [client 20.70.173.30:33804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/m.php"] [unique_id "ary10CGeq9LtYp4zuPOiGwAAAEY"]
[Wed Sep 30 01:10:08.604411 2026] [security2:error] [pid 270884:tid 271099] [client 20.58.177.98:45598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary10CGeq9LtYp4zuPOiHQAAAFA"]
[Wed Sep 30 01:10:08.610853 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:08.611121 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:08.647739 2026] [security2:error] [pid 276620:tid 276818] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary10NPAdfEWqmGIkg1cTwAAAk8"]
[Wed Sep 30 01:10:08.656359 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.656644 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.662748 2026] [security2:error] [pid 276059:tid 276203] [client 182.69.182.151:11515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary10HtqdHBwD77138e1swAAAZg"]
[Wed Sep 30 01:10:08.662860 2026] [security2:error] [pid 276059:tid 276203] [client 182.69.182.151:11515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary10HtqdHBwD77138e1swAAAZg"]
[Wed Sep 30 01:10:08.685784 2026] [security2:error] [pid 276620:tid 276810] [client 20.219.2.60:45086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-links-opml.php"] [unique_id "ary10NPAdfEWqmGIkg1cVwAAAkc"]
[Wed Sep 30 01:10:08.729948 2026] [security2:error] [pid 276620:tid 276843] [client 4.196.65.241:27288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/Jcrop.php"] [unique_id "ary10NPAdfEWqmGIkg1cWwAAAmg"]
[Wed Sep 30 01:10:08.750953 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.751373 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.767465 2026] [security2:error] [pid 270884:tid 271062] [client 168.107.70.193:61951] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.nelsonfarmstn.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "ary10CGeq9LtYp4zuPOiIwAAACs"]
[Wed Sep 30 01:10:08.807489 2026] [security2:error] [pid 276059:tid 276306] [client 49.43.163.212:64123] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary10HtqdHBwD77138e1tAAAAf4"]
[Wed Sep 30 01:10:08.807683 2026] [security2:error] [pid 276059:tid 276306] [client 49.43.163.212:64123] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary10HtqdHBwD77138e1tAAAAf4"]
[Wed Sep 30 01:10:08.838145 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.838490 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.932939 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:08.933382 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:08.955349 2026] [security2:error] [pid 270884:tid 271024] [client 20.58.177.98:49933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/aa.php"] [unique_id "ary10CGeq9LtYp4zuPOiKAAAAAU"]
[Wed Sep 30 01:10:09.020151 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.020439 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.039125 2026] [security2:error] [pid 276059:tid 276212] [client 20.204.42.136:3010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/fryvbbn.php"] [unique_id "ary10XtqdHBwD77138e1tgAAAaA"]
[Wed Sep 30 01:10:09.042934 2026] [security2:error] [pid 270884:tid 271121] [client 20.219.2.60:11364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/lib.php"] [unique_id "ary10SGeq9LtYp4zuPOiLQAAAGY"]
[Wed Sep 30 01:10:09.080480 2026] [security2:error] [pid 270884:tid 271133] [client 20.213.164.196:21340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/ans.php"] [unique_id "ary10SGeq9LtYp4zuPOiMQAAAHI"]
[Wed Sep 30 01:10:09.112261 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.112495 2026] [access_compat:error] [pid 276059:tid 276301] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:09.112517 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.112747 2026] [access_compat:error] [pid 276059:tid 276301] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:09.150888 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:45046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-class-api.php"] [unique_id "ary10SGeq9LtYp4zuPOiNQAAAGs"]
[Wed Sep 30 01:10:09.177539 2026] [security2:error] [pid 270884:tid 271122] [client 103.211.18.63:55017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiNgAAAGc"]
[Wed Sep 30 01:10:09.177621 2026] [security2:error] [pid 270884:tid 271122] [client 103.211.18.63:55017] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiNgAAAGc"]
[Wed Sep 30 01:10:09.185086 2026] [security2:error] [pid 276620:tid 276792] [client 103.168.67.253:4978] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:0" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1093"] [id "350147"] [rev "155"] [msg "Atomicorp.com WAF Rules: Potentially Untrusted Web Content Detected"] [severity "CRITICAL"] [hostname "dklhardwareconstruction.com"] [uri "/auth/callback"] [unique_id "ary10dPAdfEWqmGIkg1cXwAAAjU"]
[Wed Sep 30 01:10:09.200691 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.200970 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.256010 2026] [security2:error] [pid 270884:tid 271051] [client 20.194.5.96:25248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/177.php"] [unique_id "ary10SGeq9LtYp4zuPOiOwAAACA"]
[Wed Sep 30 01:10:09.290188 2026] [security2:error] [pid 270884:tid 271070] [client 20.70.173.30:59524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary10SGeq9LtYp4zuPOiPwAAADM"]
[Wed Sep 30 01:10:09.291500 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.291779 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.298957 2026] [security2:error] [pid 270884:tid 271101] [client 20.194.30.107:1562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/11.php"] [unique_id "ary10SGeq9LtYp4zuPOiQAAAAFI"]
[Wed Sep 30 01:10:09.299598 2026] [security2:error] [pid 270884:tid 271141] [client 20.194.96.176:15779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/alfa.php"] [unique_id "ary10SGeq9LtYp4zuPOiQQAAAHo"]
[Wed Sep 30 01:10:09.312245 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.19.141:20826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/class-wp-http-client.php"] [unique_id "ary10SGeq9LtYp4zuPOiQgAAAGs"]
[Wed Sep 30 01:10:09.388999 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.389470 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:8915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.408967 2026] [security2:error] [pid 276059:tid 276292] [client 20.211.90.37:40437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/info.php"] [unique_id "ary10XtqdHBwD77138e1uAAAAfA"]
[Wed Sep 30 01:10:09.425851 2026] [security2:error] [pid 276620:tid 276776] [client 4.240.25.22:63643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/bthil.php"] [unique_id "ary10dPAdfEWqmGIkg1cYwAAAiU"]
[Wed Sep 30 01:10:09.475647 2026] [security2:error] [pid 276620:tid 276827] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary10dPAdfEWqmGIkg1cZgAAAlg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:10:09.478790 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.479239 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.480032 2026] [security2:error] [pid 270884:tid 271070] [client 4.240.25.22:8389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/pJPoKA.php"] [unique_id "ary10SGeq9LtYp4zuPOiSAAAADM"]
[Wed Sep 30 01:10:09.589666 2026] [security2:error] [pid 270884:tid 271108] [client 43.227.131.37:28453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiSwAAAFk"]
[Wed Sep 30 01:10:09.589825 2026] [security2:error] [pid 270884:tid 271108] [client 43.227.131.37:28453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiSwAAAFk"]
[Wed Sep 30 01:10:09.618380 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.618629 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.621209 2026] [security2:error] [pid 276620:tid 276813] [client 20.219.2.60:45040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-class-atom.php"] [unique_id "ary10dPAdfEWqmGIkg1cZwAAAko"]
[Wed Sep 30 01:10:09.622185 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:09.622450 2026] [access_compat:error] [pid 276059:tid 276317] [client 74.7.243.227:42078] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:09.662884 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.663316 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.746680 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.746954 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.758017 2026] [security2:error] [pid 276059:tid 276244] [client 20.194.5.96:25031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/ccc.php"] [unique_id "ary10XtqdHBwD77138e1wQAAAcA"]
[Wed Sep 30 01:10:09.791850 2026] [security2:error] [pid 270884:tid 271130] [client 116.193.128.26:56003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiUQAAAG8"]
[Wed Sep 30 01:10:09.792031 2026] [security2:error] [pid 270884:tid 271130] [client 116.193.128.26:56003] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary10SGeq9LtYp4zuPOiUQAAAG8"]
[Wed Sep 30 01:10:09.795756 2026] [security2:error] [pid 276059:tid 276228] [client 20.204.42.136:3062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/ff.update.php"] [unique_id "ary10XtqdHBwD77138e1wgAAAbA"]
[Wed Sep 30 01:10:09.800902 2026] [security2:error] [pid 270884:tid 271070] [client 216.73.216.46:8915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary10SGeq9LtYp4zuPOiUgAAADM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzQvbm9kZTAvY3B1MC9kcml2ZXIvY3B1MS9kcml2ZXI%3D
[Wed Sep 30 01:10:09.807404 2026] [security2:error] [pid 276620:tid 276873] [client 20.70.173.30:33331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/m.php"] [unique_id "ary10dPAdfEWqmGIkg1cawAAAoY"]
[Wed Sep 30 01:10:09.834947 2026] [security2:error] [pid 276620:tid 276821] [client 20.58.177.98:49975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/z70.php"] [unique_id "ary10dPAdfEWqmGIkg1cbgAAAlI"]
[Wed Sep 30 01:10:09.837765 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.838038 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.838194 2026] [access_compat:error] [pid 270884:tid 271080] [client 47.79.206.119:14480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:10:09.838487 2026] [access_compat:error] [pid 270884:tid 271080] [client 47.79.206.119:14480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:10:09.838510 2026] [security2:error] [pid 276620:tid 276872] [client 20.219.2.60:11860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/edit.php"] [unique_id "ary10dPAdfEWqmGIkg1cbwAAAoU"]
[Wed Sep 30 01:10:09.929599 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:09.930042 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:09.983548 2026] [security2:error] [pid 270884:tid 271126] [client 20.211.90.37:39969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/alfanew.php"] [unique_id "ary10SGeq9LtYp4zuPOiVwAAAGs"]
[Wed Sep 30 01:10:10.020746 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.021032 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.076899 2026] [security2:error] [pid 276620:tid 276760] [client 20.194.5.96:25049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/0xD.php"] [unique_id "ary10tPAdfEWqmGIkg1cdwAAAhU"]
[Wed Sep 30 01:10:10.078963 2026] [security2:error] [pid 270884:tid 271141] [client 104.28.222.47:61012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.222.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wpt.mzl.mybluehost.me"] [uri "/wp-config.php"] [unique_id "ary10iGeq9LtYp4zuPOiWwAAAHo"], referer: https://www.google.com/search?q=wpt.mzl.mybluehost.me
[Wed Sep 30 01:10:10.097038 2026] [security2:error] [pid 276620:tid 276858] [client 20.219.2.60:45108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-block.php"] [unique_id "ary10tPAdfEWqmGIkg1ceQAAAnc"]
[Wed Sep 30 01:10:10.098661 2026] [security2:error] [pid 270884:tid 271099] [client 104.28.222.47:22908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "wpt.mzl.mybluehost.me"] [uri "/wp-config.php.bak"] [unique_id "ary10iGeq9LtYp4zuPOiXQAAAFA"]
[Wed Sep 30 01:10:10.111363 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.111640 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.139213 2026] [security2:error] [pid 276620:tid 276839] [client 20.219.19.141:20836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/zoo2.php"] [unique_id "ary10tPAdfEWqmGIkg1cfQAAAmQ"]
[Wed Sep 30 01:10:10.160666 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:10.160977 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:10.170691 2026] [security2:error] [pid 276620:tid 276796] [client 161.118.214.16:58132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "webdisk.codeproblem.com"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "ary10tPAdfEWqmGIkg1cfwAAAjk"]
[Wed Sep 30 01:10:10.203631 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.203906 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.293273 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.293544 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.377577 2026] [security2:error] [pid 270884:tid 271051] [client 20.28.180.172:18332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gettest.php"] [unique_id "ary10iGeq9LtYp4zuPOiZgAAACA"]
[Wed Sep 30 01:10:10.384140 2026] [security2:error] [pid 270884:tid 271124] [client 20.58.177.98:49926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/f35.php"] [unique_id "ary10iGeq9LtYp4zuPOiZwAAAGk"]
[Wed Sep 30 01:10:10.391345 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.391821 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.450598 2026] [security2:error] [pid 276059:tid 276076] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary10ntqdHBwD77138e1xwABoQw"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dreply%26t%3D21135
[Wed Sep 30 01:10:10.479374 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.479650 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.506834 2026] [security2:error] [pid 276620:tid 276884] [client 191.53.218.144:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary10tPAdfEWqmGIkg1chgAAApE"]
[Wed Sep 30 01:10:10.554071 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.2.60:45022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-signup.php"] [unique_id "ary10iGeq9LtYp4zuPOibQAAAGs"]
[Wed Sep 30 01:10:10.558854 2026] [security2:error] [pid 270884:tid 270920] [remote 57.141.14.66:23056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/tag/transportation/page/4/"] [unique_id "ary10iGeq9LtYp4zuPOibwAAByI"]
[Wed Sep 30 01:10:10.567480 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.567796 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.584886 2026] [security2:error] [pid 276620:tid 276831] [client 168.100.149.98:48546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/caa6764a50a20e366040fd51e0e662ec.43.css.gz"] [unique_id "ary10tPAdfEWqmGIkg1ciQACXCM"]
[Wed Sep 30 01:10:10.626829 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:10.627278 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:10.653972 2026] [security2:error] [pid 276059:tid 276270] [client 20.70.173.30:51215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/100.php"] [unique_id "ary10ntqdHBwD77138e1ywAAAdo"]
[Wed Sep 30 01:10:10.657943 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.658196 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.706415 2026] [security2:error] [pid 270884:tid 271130] [client 106.214.2.47:16778] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary10iGeq9LtYp4zuPOidAAAAG8"]
[Wed Sep 30 01:10:10.706536 2026] [security2:error] [pid 270884:tid 271130] [client 106.214.2.47:16778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary10iGeq9LtYp4zuPOidAAAAG8"]
[Wed Sep 30 01:10:10.708866 2026] [security2:error] [pid 270884:tid 271080] [client 104.28.222.46:43425] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "wpt.mzl.mybluehost.me"] [uri "/.env.backup"] [unique_id "ary10iGeq9LtYp4zuPOidQAAAD0"], referer: http://wpt.mzl.mybluehost.me/.env.backup
[Wed Sep 30 01:10:10.713108 2026] [security2:error] [pid 276059:tid 276307] [client 20.204.42.136:3019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/lzlhihzi.php"] [unique_id "ary10ntqdHBwD77138e1zQAAAf8"]
[Wed Sep 30 01:10:10.751279 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.751547 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.755870 2026] [security2:error] [pid 276620:tid 276881] [client 4.240.25.22:43820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/a.php"] [unique_id "ary10tPAdfEWqmGIkg1cjQAAAo4"]
[Wed Sep 30 01:10:10.762011 2026] [security2:error] [pid 276620:tid 276761] [client 20.194.5.96:25224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/sallu.php"] [unique_id "ary10tPAdfEWqmGIkg1cjgAAAhY"]
[Wed Sep 30 01:10:10.777360 2026] [security2:error] [pid 270884:tid 271062] [client 20.58.177.98:45580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/adminfuns.php"] [unique_id "ary10iGeq9LtYp4zuPOifAAAACs"]
[Wed Sep 30 01:10:10.840631 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.840905 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:10.877265 2026] [security2:error] [pid 276059:tid 276240] [client 104.28.222.47:44892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "wpt.mzl.mybluehost.me"] [uri "/.env"] [unique_id "ary10ntqdHBwD77138e10AAAAbw"], referer: http://wpt.mzl.mybluehost.me/.env
[Wed Sep 30 01:10:10.933334 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:10.933791 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.009595 2026] [security2:error] [pid 276620:tid 276826] [client 20.28.180.172:34298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/dex.php"] [unique_id "ary109PAdfEWqmGIkg1ckQAAAlc"]
[Wed Sep 30 01:10:11.022529 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.022818 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.026418 2026] [security2:error] [pid 270884:tid 271124] [client 20.213.164.196:55190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/cns.php"] [unique_id "ary10yGeq9LtYp4zuPOihwAAAGk"]
[Wed Sep 30 01:10:11.046590 2026] [security2:error] [pid 270884:tid 271139] [client 20.194.5.96:25056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/ops.php"] [unique_id "ary10yGeq9LtYp4zuPOiigAAAHg"]
[Wed Sep 30 01:10:11.078091 2026] [security2:error] [pid 276620:tid 276829] [client 20.219.2.60:45047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-xmlsia.php"] [unique_id "ary109PAdfEWqmGIkg1ckgAAAlo"]
[Wed Sep 30 01:10:11.107282 2026] [access_compat:error] [pid 276620:tid 276866] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:11.107569 2026] [access_compat:error] [pid 276620:tid 276866] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:11.117783 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.118209 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.150941 2026] [security2:error] [pid 270884:tid 271116] [client 20.211.90.37:39994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/inputs.php"] [unique_id "ary10yGeq9LtYp4zuPOijQAAAGE"]
[Wed Sep 30 01:10:11.157464 2026] [security2:error] [pid 270884:tid 271060] [client 4.240.25.22:63677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/file.php"] [unique_id "ary10yGeq9LtYp4zuPOijwAAACk"]
[Wed Sep 30 01:10:11.188000 2026] [security2:error] [pid 270884:tid 271070] [client 152.56.240.85:59739] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOikQAAADM"]
[Wed Sep 30 01:10:11.188134 2026] [security2:error] [pid 270884:tid 271070] [client 152.56.240.85:59739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOikQAAADM"]
[Wed Sep 30 01:10:11.188427 2026] [security2:error] [pid 270884:tid 271108] [client 20.58.177.98:49968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/av.php"] [unique_id "ary10yGeq9LtYp4zuPOikgAAAFk"]
[Wed Sep 30 01:10:11.205017 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.205308 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.295830 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.296222 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.392470 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.392930 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.400446 2026] [security2:error] [pid 276620:tid 276821] [client 20.219.19.141:20916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/zoo1.php"] [unique_id "ary109PAdfEWqmGIkg1clwAAAlI"]
[Wed Sep 30 01:10:11.439209 2026] [security2:error] [pid 270884:tid 271141] [client 20.219.2.60:11760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ioxi-o.php"] [unique_id "ary10yGeq9LtYp4zuPOiowAAAHo"]
[Wed Sep 30 01:10:11.485501 2026] [security2:error] [pid 270884:tid 271099] [client 155.190.6.18:53838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOipAAAAFA"]
[Wed Sep 30 01:10:11.495201 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.495633 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.546036 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.2.60:44484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.grupowebmex.com"] [uri "/wp-inic3.php"] [unique_id "ary10yGeq9LtYp4zuPOipwAAACE"]
[Wed Sep 30 01:10:11.571130 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.571560 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.615533 2026] [security2:error] [pid 270884:tid 271126] [client 20.194.5.96:25264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/mac.php"] [unique_id "ary10yGeq9LtYp4zuPOiqwAAAGs"]
[Wed Sep 30 01:10:11.618328 2026] [security2:error] [pid 270884:tid 271080] [client 20.58.177.98:49967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/dex.php"] [unique_id "ary10yGeq9LtYp4zuPOirAAAAD0"]
[Wed Sep 30 01:10:11.626221 2026] [security2:error] [pid 270884:tid 271051] [client 20.204.42.136:2961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/bfdghfgv.php"] [unique_id "ary10yGeq9LtYp4zuPOirgAAACA"]
[Wed Sep 30 01:10:11.650465 2026] [access_compat:error] [pid 276620:tid 276802] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:11.650740 2026] [access_compat:error] [pid 276620:tid 276802] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:11.659280 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.659555 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.663160 2026] [security2:error] [pid 270884:tid 271074] [client 4.240.25.22:33686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/one.php"] [unique_id "ary10yGeq9LtYp4zuPOisAAAADc"]
[Wed Sep 30 01:10:11.681006 2026] [security2:error] [pid 270884:tid 271023] [client 116.197.133.25:55560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOisgAAAAQ"]
[Wed Sep 30 01:10:11.681116 2026] [security2:error] [pid 270884:tid 271023] [client 116.197.133.25:55560] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOisgAAAAQ"]
[Wed Sep 30 01:10:11.750859 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.751126 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.765563 2026] [security2:error] [pid 270884:tid 271099] [client 155.190.6.18:53838] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary10yGeq9LtYp4zuPOipAAAAFA"]
[Wed Sep 30 01:10:11.842919 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.843189 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.922818 2026] [security2:error] [pid 270884:tid 271132] [client 152.232.185.41:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary10yGeq9LtYp4zuPOivAAAAHE"]
[Wed Sep 30 01:10:11.933570 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:11.933925 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:11.968417 2026] [security2:error] [pid 276620:tid 276873] [client 223.235.102.107:24507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary109PAdfEWqmGIkg1cnAAAAoY"]
[Wed Sep 30 01:10:11.968538 2026] [security2:error] [pid 276620:tid 276873] [client 223.235.102.107:24507] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary109PAdfEWqmGIkg1cnAAAAoY"]
[Wed Sep 30 01:10:12.023917 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.024179 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.115162 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.115450 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.128280 2026] [access_compat:error] [pid 276620:tid 276858] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:12.128564 2026] [access_compat:error] [pid 276620:tid 276858] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:12.197959 2026] [security2:error] [pid 270884:tid 271024] [client 212.125.15.81:15982] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary11CGeq9LtYp4zuPOixAAAAAU"], referer: https://www.clenbuterol4you.com/xmlrpc.php
[Wed Sep 30 01:10:12.206105 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.206385 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.233132 2026] [security2:error] [pid 276620:tid 276845] [client 223.181.60.167:1154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary11NPAdfEWqmGIkg1cngAAAmo"]
[Wed Sep 30 01:10:12.233319 2026] [security2:error] [pid 276620:tid 276845] [client 223.181.60.167:1154] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary11NPAdfEWqmGIkg1cngAAAmo"]
[Wed Sep 30 01:10:12.264562 2026] [security2:error] [pid 270884:tid 271128] [client 20.58.177.98:49930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/chosen.php"] [unique_id "ary11CGeq9LtYp4zuPOiyAAAAG0"]
[Wed Sep 30 01:10:12.297285 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.297569 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.325482 2026] [security2:error] [pid 276620:tid 276856] [client 20.70.173.30:33381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/adminfuns.php"] [unique_id "ary11NPAdfEWqmGIkg1coAAAAnU"]
[Wed Sep 30 01:10:12.334798 2026] [security2:error] [pid 276620:tid 276806] [client 20.70.173.30:50738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/kir.php"] [unique_id "ary11NPAdfEWqmGIkg1coQAAAkM"]
[Wed Sep 30 01:10:12.356536 2026] [security2:error] [pid 276059:tid 276305] [client 20.194.5.96:25024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/myglu.php"] [unique_id "ary11HtqdHBwD77138e15gAAAf0"]
[Wed Sep 30 01:10:12.391916 2026] [security2:error] [pid 276059:tid 276312] [client 20.204.42.136:2954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/Dss.php"] [unique_id "ary11HtqdHBwD77138e16AAAAgQ"]
[Wed Sep 30 01:10:12.398847 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.399323 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.471572 2026] [security2:error] [pid 276059:tid 276239] [client 45.138.12.48:47026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.graphicdesignmmd.com"] [uri "/wp-links-opml.php"] [unique_id "ary11HtqdHBwD77138e16gAAAbs"]
[Wed Sep 30 01:10:12.482725 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.483001 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.569641 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.569936 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.571391 2026] [security2:error] [pid 276059:tid 276255] [client 4.240.25.22:12459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/m.php"] [unique_id "ary11HtqdHBwD77138e16wAAAcs"]
[Wed Sep 30 01:10:12.585287 2026] [security2:error] [pid 276059:tid 276300] [client 168.100.149.120:42710] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/1abcef0186db68d98267d164e61b537e.503b.css.gz"] [unique_id "ary11HtqdHBwD77138e17AAB-Co"]
[Wed Sep 30 01:10:12.585680 2026] [access_compat:error] [pid 276620:tid 276808] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:12.585952 2026] [access_compat:error] [pid 276620:tid 276808] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:12.622121 2026] [security2:error] [pid 270884:tid 271126] [client 20.28.180.172:60316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/myfile.php"] [unique_id "ary11CGeq9LtYp4zuPOi1AAAAGs"]
[Wed Sep 30 01:10:12.661344 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.661615 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.671256 2026] [security2:error] [pid 276620:tid 276842] [client 20.213.164.196:21363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/faiy.php"] [unique_id "ary11NPAdfEWqmGIkg1cqAAAAmc"]
[Wed Sep 30 01:10:12.745782 2026] [security2:error] [pid 270884:tid 271116] [client 20.211.90.37:40413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/admin/function.php"] [unique_id "ary11CGeq9LtYp4zuPOi1QAAAGE"]
[Wed Sep 30 01:10:12.750766 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.751035 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.785836 2026] [security2:error] [pid 270884:tid 271137] [client 20.194.5.96:25244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/aboutt.php"] [unique_id "ary11CGeq9LtYp4zuPOi2QAAAHY"]
[Wed Sep 30 01:10:12.785836 2026] [security2:error] [pid 270884:tid 271051] [client 4.240.25.22:8414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/admin.php"] [unique_id "ary11CGeq9LtYp4zuPOi2AAAACA"]
[Wed Sep 30 01:10:12.841649 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.841941 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.845315 2026] [security2:error] [pid 276620:tid 276737] [remote 74.7.227.56:33512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary11NPAdfEWqmGIkg1csAACI2s"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:10:12.934173 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:12.934478 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:12.964630 2026] [security2:error] [pid 276620:tid 276764] [client 103.241.204.139:57571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary11NPAdfEWqmGIkg1cuQAAAhk"]
[Wed Sep 30 01:10:12.964755 2026] [security2:error] [pid 276620:tid 276764] [client 103.241.204.139:57571] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary11NPAdfEWqmGIkg1cuQAAAhk"]
[Wed Sep 30 01:10:12.985887 2026] [security2:error] [pid 276620:tid 276819] [client 4.240.25.22:63635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/as.php"] [unique_id "ary11NPAdfEWqmGIkg1cvAAAAlA"]
[Wed Sep 30 01:10:12.993230 2026] [security2:error] [pid 270884:tid 271024] [client 20.58.177.98:49956] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.bowrattler.com"] [uri "/1.php"] [unique_id "ary11CGeq9LtYp4zuPOi4wAAAAU"]
[Wed Sep 30 01:10:12.993342 2026] [security2:error] [pid 270884:tid 271024] [client 20.58.177.98:49956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/1.php"] [unique_id "ary11CGeq9LtYp4zuPOi4wAAAAU"]
[Wed Sep 30 01:10:12.995841 2026] [security2:error] [pid 270884:tid 271023] [client 47.79.13.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary11CGeq9LtYp4zuPOi4gAAAAQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:10:13.029995 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.030430 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.067459 2026] [security2:error] [pid 270884:tid 271052] [client 20.204.42.136:3018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/uploaxa1.php"] [unique_id "ary11SGeq9LtYp4zuPOi5wAAACE"]
[Wed Sep 30 01:10:13.086077 2026] [security2:error] [pid 270884:tid 271113] [client 20.70.173.30:50710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/term.php"] [unique_id "ary11SGeq9LtYp4zuPOi6wAAAF4"]
[Wed Sep 30 01:10:13.114590 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.114872 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.119417 2026] [access_compat:error] [pid 276620:tid 276803] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:13.119872 2026] [access_compat:error] [pid 276620:tid 276803] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:13.178775 2026] [security2:error] [pid 270884:tid 271132] [client 20.194.5.96:25268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wp-whe.php"] [unique_id "ary11SGeq9LtYp4zuPOi8AAAAHE"]
[Wed Sep 30 01:10:13.207355 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.207632 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.213277 2026] [security2:error] [pid 276620:tid 276765] [client 212.125.15.81:15990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "www.clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary11dPAdfEWqmGIkg1cwQAAAho"], referer: https://www.clenbuterol4you.com/xmlrpc.php
[Wed Sep 30 01:10:13.240902 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.2.60:11864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ajax.php"] [unique_id "ary11SGeq9LtYp4zuPOi9gAAAG0"]
[Wed Sep 30 01:10:13.285215 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.19.141:20803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/class-ajax.php"] [unique_id "ary11dPAdfEWqmGIkg1cyQAAAmw"]
[Wed Sep 30 01:10:13.302468 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.302906 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.330907 2026] [http2:warn] [pid 263262:tid 263402] [client 40.77.167.224:51805] h2_stream(263262-1368-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:13.392789 2026] [security2:error] [pid 276059:tid 276301] [client 20.211.90.37:40403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ary11XtqdHBwD77138e18gAAAfk"]
[Wed Sep 30 01:10:13.401574 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.402040 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.459838 2026] [http2:warn] [pid 263262:tid 263448] [client 40.77.167.224:51793] h2_stream(263262-741-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:13.490398 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.491254 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.540990 2026] [security2:error] [pid 276620:tid 276780] [client 20.58.177.98:45583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/radio.php"] [unique_id "ary11dPAdfEWqmGIkg1c2wAAAik"]
[Wed Sep 30 01:10:13.571109 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.571540 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.589884 2026] [security2:error] [pid 276059:tid 276251] [client 45.138.12.32:31814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jft.tkn.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary11XtqdHBwD77138e1-QAAAcc"]
[Wed Sep 30 01:10:13.621739 2026] [access_compat:error] [pid 276620:tid 276818] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:13.622056 2026] [access_compat:error] [pid 276620:tid 276818] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:13.661748 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.662028 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.692544 2026] [security2:error] [pid 270884:tid 271126] [client 104.28.254.46:38298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "wpt.mzl.mybluehost.me"] [uri "/.env.old"] [unique_id "ary11SGeq9LtYp4zuPOjCgAAAGs"], referer: http://wpt.mzl.mybluehost.me/.env.old
[Wed Sep 30 01:10:13.737506 2026] [security2:error] [pid 276620:tid 276794] [client 85.203.36.120:29189] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11dPAdfEWqmGIkg1c3wAAAjc"]
[Wed Sep 30 01:10:13.744849 2026] [security2:error] [pid 276620:tid 276851] [client 85.203.36.87:21087] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11dPAdfEWqmGIkg1c4AAAAnA"]
[Wed Sep 30 01:10:13.745598 2026] [security2:error] [pid 270884:tid 271051] [client 20.204.42.136:3014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/uploartg.php"] [unique_id "ary11SGeq9LtYp4zuPOjDgAAACA"]
[Wed Sep 30 01:10:13.746541 2026] [security2:error] [pid 270884:tid 271060] [client 20.194.5.96:25357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/ssixta.php"] [unique_id "ary11SGeq9LtYp4zuPOjDwAAACk"]
[Wed Sep 30 01:10:13.748198 2026] [security2:error] [pid 270884:tid 271077] [client 85.203.36.126:36313] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11SGeq9LtYp4zuPOjEAAAADo"]
[Wed Sep 30 01:10:13.753500 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.753775 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.781287 2026] [security2:error] [pid 276059:tid 276233] [client 85.203.36.90:58315] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11XtqdHBwD77138e1_QAAAbU"]
[Wed Sep 30 01:10:13.842999 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.843269 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.873586 2026] [security2:error] [pid 270884:tid 271130] [client 20.70.173.30:39130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/adminfuns.php"] [unique_id "ary11SGeq9LtYp4zuPOjFwAAAG8"]
[Wed Sep 30 01:10:13.882867 2026] [security2:error] [pid 270884:tid 271132] [client 85.203.36.91:35217] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11SGeq9LtYp4zuPOjGAAAAHE"]
[Wed Sep 30 01:10:13.933627 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:13.933918 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:13.970287 2026] [security2:error] [pid 270884:tid 271085] [client 45.89.242.83:25883] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/000.php"] [unique_id "ary11SGeq9LtYp4zuPOjGgAAAEI"]
[Wed Sep 30 01:10:14.009433 2026] [security2:error] [pid 276620:tid 276789] [client 20.58.177.98:45573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/blacks.php"] [unique_id "ary11tPAdfEWqmGIkg1c5gAAAjI"]
[Wed Sep 30 01:10:14.028299 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.028594 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.064615 2026] [security2:error] [pid 270884:tid 271084] [client 20.194.5.96:25038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/tesla.php"] [unique_id "ary11iGeq9LtYp4zuPOjHgAAAEE"]
[Wed Sep 30 01:10:14.093043 2026] [security2:error] [pid 276059:tid 276309] [client 85.203.36.97:57035] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/000.php"] [unique_id "ary11ntqdHBwD77138e2BQAAAgE"]
[Wed Sep 30 01:10:14.106330 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:14.106610 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:14.115896 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.116164 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.125983 2026] [security2:error] [pid 276620:tid 276868] [client 104.28.254.46:35773] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "wpt.mzl.mybluehost.me"] [uri "/.env.bak"] [unique_id "ary11tPAdfEWqmGIkg1c6gAAAoE"], referer: http://wpt.mzl.mybluehost.me/.env.bak
[Wed Sep 30 01:10:14.168096 2026] [security2:error] [pid 270884:tid 271054] [client 20.211.90.37:39953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-admin/images/index.php"] [unique_id "ary11iGeq9LtYp4zuPOjIgAAACM"]
[Wed Sep 30 01:10:14.168979 2026] [security2:error] [pid 270884:tid 271036] [client 4.240.25.22:13091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/wp-login.php"] [unique_id "ary11iGeq9LtYp4zuPOjIwAAABE"]
[Wed Sep 30 01:10:14.170052 2026] [security2:error] [pid 270884:tid 271146] [client 85.203.36.116:55771] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/000.php"] [unique_id "ary11iGeq9LtYp4zuPOjJAAAAH8"]
[Wed Sep 30 01:10:14.207235 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.207537 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.297860 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.298120 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.311520 2026] [security2:error] [pid 270884:tid 271024] [client 20.204.42.136:2955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/bgbagbcw.php"] [unique_id "ary11iGeq9LtYp4zuPOjLAAAAAU"]
[Wed Sep 30 01:10:14.384890 2026] [security2:error] [pid 276620:tid 276881] [client 20.58.177.98:49929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/alfa.php"] [unique_id "ary11tPAdfEWqmGIkg1c7gAAAo4"]
[Wed Sep 30 01:10:14.387197 2026] [security2:error] [pid 270884:tid 271108] [client 20.194.5.96:25030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/222.php"] [unique_id "ary11iGeq9LtYp4zuPOjLwAAAFk"]
[Wed Sep 30 01:10:14.395938 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.396420 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.410018 2026] [access_compat:error] [pid 270884:tid 271131] [client 47.79.13.1:57024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:10:14.410478 2026] [access_compat:error] [pid 270884:tid 271131] [client 47.79.13.1:57024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:10:14.413506 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.19.141:20822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/gm.php"] [unique_id "ary11iGeq9LtYp4zuPOjMgAAAGs"]
[Wed Sep 30 01:10:14.452227 2026] [security2:error] [pid 270884:tid 271128] [client 85.203.36.109:35851] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11iGeq9LtYp4zuPOjNAAAAG0"]
[Wed Sep 30 01:10:14.468267 2026] [security2:error] [pid 270884:tid 271084] [client 20.219.2.60:11881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/install.php"] [unique_id "ary11iGeq9LtYp4zuPOjNwAAAEE"]
[Wed Sep 30 01:10:14.469739 2026] [security2:error] [pid 270884:tid 271077] [client 20.70.173.30:38872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/aaa.php"] [unique_id "ary11iGeq9LtYp4zuPOjOAAAADo"]
[Wed Sep 30 01:10:14.489333 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.489763 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.495282 2026] [security2:error] [pid 270884:tid 271089] [client 37.41.16.35:59274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary11iGeq9LtYp4zuPOjOgAAAEY"]
[Wed Sep 30 01:10:14.495468 2026] [security2:error] [pid 270884:tid 271089] [client 37.41.16.35:59274] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary11iGeq9LtYp4zuPOjOgAAAEY"]
[Wed Sep 30 01:10:14.501708 2026] [http2:warn] [pid 263262:tid 263434] [client 40.77.167.224:62676] h2_stream(263262-70-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:14.557130 2026] [security2:error] [pid 270884:tid 271071] [client 52.231.30.175:40066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary11iGeq9LtYp4zuPOjPgAAADQ"]
[Wed Sep 30 01:10:14.571870 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.572144 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.586803 2026] [security2:error] [pid 270884:tid 271113] [client 168.100.149.196:28830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ea958276b7de454bd3c2873f0dc47e5f.105a.css.gz"] [unique_id "ary11iGeq9LtYp4zuPOjQAAAXkI"]
[Wed Sep 30 01:10:14.605622 2026] [access_compat:error] [pid 276620:tid 276803] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:14.606068 2026] [access_compat:error] [pid 276620:tid 276803] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:14.660577 2026] [security2:error] [pid 270884:tid 271088] [client 114.116.249.208:53866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "cantrade.com.sg"] [uri "/wp-login.php"] [unique_id "ary11iGeq9LtYp4zuPOjNQAAAEU"], referer: https://cantrade.com.sg/wp-login.php
[Wed Sep 30 01:10:14.663740 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.664027 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.666231 2026] [security2:error] [pid 276620:tid 276765] [client 20.28.180.172:62353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/sid3.php"] [unique_id "ary11tPAdfEWqmGIkg1c9gAAAho"]
[Wed Sep 30 01:10:14.695861 2026] [security2:error] [pid 270884:tid 271131] [client 20.211.90.37:40385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/default.php"] [unique_id "ary11iGeq9LtYp4zuPOjRgAAAHA"]
[Wed Sep 30 01:10:14.754016 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.754285 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.816738 2026] [security2:error] [pid 270884:tid 271132] [client 20.58.177.98:45585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wp_blog_footer.php"] [unique_id "ary11iGeq9LtYp4zuPOjTwAAAHE"]
[Wed Sep 30 01:10:14.847688 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.847963 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.883221 2026] [core:error] [pid 276620:tid 276760] [client 210.79.190.251:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:14.883238 2026] [core:error] [pid 276620:tid 276760] [client 210.79.190.251:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:14.885307 2026] [security2:error] [pid 270884:tid 271040] [client 52.231.30.175:40088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary11iGeq9LtYp4zuPOjUwAAABU"]
[Wed Sep 30 01:10:14.894079 2026] [security2:error] [pid 276620:tid 276849] [client 20.204.42.136:3071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/tegubsiu.php"] [unique_id "ary11tPAdfEWqmGIkg1dAAAAAm4"]
[Wed Sep 30 01:10:14.935447 2026] [access_compat:error] [pid 276620:tid 276876] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:14.935705 2026] [access_compat:error] [pid 276620:tid 276876] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:14.941614 2026] [security2:error] [pid 270884:tid 271088] [client 85.203.36.92:41535] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11iGeq9LtYp4zuPOjVAAAAEU"]
[Wed Sep 30 01:10:14.999871 2026] [security2:error] [pid 276620:tid 276779] [client 85.203.36.124:64457] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11tPAdfEWqmGIkg1dAwAAAig"]
[Wed Sep 30 01:10:15.000681 2026] [security2:error] [pid 270884:tid 271074] [client 85.203.36.96:55207] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11iGeq9LtYp4zuPOjVwAAADc"]
[Wed Sep 30 01:10:15.014779 2026] [security2:error] [pid 276620:tid 276845] [client 85.203.36.104:26973] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary119PAdfEWqmGIkg1dBAAAAmo"]
[Wed Sep 30 01:10:15.021864 2026] [security2:error] [pid 276620:tid 276856] [client 20.70.173.30:33375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ms-edit.php"] [unique_id "ary119PAdfEWqmGIkg1dBwAAAnU"]
[Wed Sep 30 01:10:15.027577 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.027855 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.096119 2026] [security2:error] [pid 270884:tid 271020] [client 85.203.36.92:48987] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11yGeq9LtYp4zuPOjWwAAAAE"]
[Wed Sep 30 01:10:15.103227 2026] [access_compat:error] [pid 276620:tid 276874] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:15.103510 2026] [access_compat:error] [pid 276620:tid 276874] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:15.118504 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.118763 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.130696 2026] [security2:error] [pid 270884:tid 271071] [client 85.203.36.121:54275] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/chosen.php"] [unique_id "ary11yGeq9LtYp4zuPOjXAAAADQ"]
[Wed Sep 30 01:10:15.147418 2026] [security2:error] [pid 270884:tid 271083] [client 20.194.5.96:25218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/media.php"] [unique_id "ary11yGeq9LtYp4zuPOjXgAAAEA"]
[Wed Sep 30 01:10:15.160627 2026] [security2:error] [pid 276620:tid 276796] [client 52.231.30.175:40174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/1ac.php"] [unique_id "ary119PAdfEWqmGIkg1dDgAAAjk"]
[Wed Sep 30 01:10:15.175543 2026] [security2:error] [pid 270884:tid 271132] [client 85.203.36.91:49717] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/chosen.php"] [unique_id "ary11yGeq9LtYp4zuPOjYAAAAHE"]
[Wed Sep 30 01:10:15.204760 2026] [security2:error] [pid 270884:tid 271109] [client 20.58.177.98:45582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/b8.php"] [unique_id "ary11yGeq9LtYp4zuPOjYQAAAFo"]
[Wed Sep 30 01:10:15.213797 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.214252 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.246842 2026] [security2:error] [pid 270884:tid 271070] [client 20.219.19.141:20831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/class-wp-site-list.php"] [unique_id "ary11yGeq9LtYp4zuPOjZgAAADM"]
[Wed Sep 30 01:10:15.248586 2026] [security2:error] [pid 276620:tid 276834] [client 20.211.90.37:40386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/lv.php"] [unique_id "ary119PAdfEWqmGIkg1dEAAAAl8"]
[Wed Sep 30 01:10:15.301675 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.301962 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.403633 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.404097 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.411430 2026] [security2:error] [pid 276620:tid 276851] [client 85.203.36.114:47123] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary119PAdfEWqmGIkg1dFQAAAnA"]
[Wed Sep 30 01:10:15.438345 2026] [security2:error] [pid 276620:tid 276884] [client 52.231.30.175:40125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/flm.php"] [unique_id "ary119PAdfEWqmGIkg1dFgAAApE"]
[Wed Sep 30 01:10:15.450458 2026] [security2:error] [pid 270884:tid 270966] [remote 122.14.224.38:48690] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.captpeacock.com"] [uri "/tackle-techniques.php"] [unique_id "ary11yGeq9LtYp4zuPOjawAAREw"]
[Wed Sep 30 01:10:15.484410 2026] [security2:error] [pid 276059:tid 276195] [client 20.194.5.96:25043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/24.php"] [unique_id "ary113tqdHBwD77138e2FAAAAZA"]
[Wed Sep 30 01:10:15.492560 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.492844 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.510322 2026] [security2:error] [pid 276620:tid 276871] [client 20.204.42.136:3047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/xxw.php"] [unique_id "ary119PAdfEWqmGIkg1dGgAAAoQ"]
[Wed Sep 30 01:10:15.518785 2026] [security2:error] [pid 276059:tid 276258] [client 46.28.198.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary113tqdHBwD77138e2FgAAAc4"]
[Wed Sep 30 01:10:15.534429 2026] [security2:error] [pid 270884:tid 271077] [client 20.213.164.196:21318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/gecho.php"] [unique_id "ary11yGeq9LtYp4zuPOjbwAAADo"]
[Wed Sep 30 01:10:15.549304 2026] [core:error] [pid 276620:tid 276829] (104)Connection reset by peer: [client 172.232.190.19:52084] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:10:15.578968 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.579405 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.601985 2026] [access_compat:error] [pid 276620:tid 276838] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:15.602246 2026] [access_compat:error] [pid 276620:tid 276838] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:15.666201 2026] [security2:error] [pid 276620:tid 276832] [client 20.58.177.98:49923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/xex.php"] [unique_id "ary119PAdfEWqmGIkg1dHgAAAl0"]
[Wed Sep 30 01:10:15.668370 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.668787 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.694060 2026] [security2:error] [pid 276059:tid 276288] [client 49.37.102.248:55639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary113tqdHBwD77138e2GQAAAew"]
[Wed Sep 30 01:10:15.694162 2026] [security2:error] [pid 276059:tid 276288] [client 49.37.102.248:55639] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary113tqdHBwD77138e2GQAAAew"]
[Wed Sep 30 01:10:15.717135 2026] [security2:error] [pid 270884:tid 271118] [client 52.231.30.175:40157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/40341.php"] [unique_id "ary11yGeq9LtYp4zuPOjewAAAGM"]
[Wed Sep 30 01:10:15.745449 2026] [security2:error] [pid 270884:tid 271100] [client 85.203.36.116:20779] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary11yGeq9LtYp4zuPOjfQAAAFE"]
[Wed Sep 30 01:10:15.756245 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.756515 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:26019] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.762201 2026] [security2:error] [pid 276059:tid 276241] [client 20.219.2.60:11391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/public/wp-blog.php"] [unique_id "ary113tqdHBwD77138e2GwAAAb0"]
[Wed Sep 30 01:10:15.790695 2026] [security2:error] [pid 276620:tid 276791] [client 20.28.180.172:34261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/php.php"] [unique_id "ary119PAdfEWqmGIkg1dHwAAAjQ"]
[Wed Sep 30 01:10:15.820198 2026] [security2:error] [pid 270884:tid 271087] [client 20.194.5.96:25267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/xwpg.php"] [unique_id "ary11yGeq9LtYp4zuPOjgAAAAEQ"]
[Wed Sep 30 01:10:15.845160 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.845433 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.941380 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:15.941826 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:15.951330 2026] [security2:error] [pid 270884:tid 271036] [client 20.211.90.37:40447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary11yGeq9LtYp4zuPOjiAAAABE"]
[Wed Sep 30 01:10:15.964255 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.30.107:48352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/edit.php"] [unique_id "ary113tqdHBwD77138e2HgAAAZ0"]
[Wed Sep 30 01:10:15.992635 2026] [security2:error] [pid 276620:tid 276797] [client 52.231.30.175:40149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-log.php"] [unique_id "ary119PAdfEWqmGIkg1dJQAAAjo"]
[Wed Sep 30 01:10:15.997417 2026] [security2:error] [pid 270884:tid 271054] [client 20.204.42.136:3064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/router.php"] [unique_id "ary11yGeq9LtYp4zuPOjjQAAACM"]
[Wed Sep 30 01:10:16.030494 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.030881 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.042707 2026] [security2:error] [pid 270884:tid 270920] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary12CGeq9LtYp4zuPOjkAAAeCI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=11127
[Wed Sep 30 01:10:16.042737 2026] [security2:error] [pid 270884:tid 270920] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary12CGeq9LtYp4zuPOjkAAAeCI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=11127
[Wed Sep 30 01:10:16.086212 2026] [access_compat:error] [pid 276620:tid 276862] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:16.086485 2026] [access_compat:error] [pid 276620:tid 276862] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:16.120669 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.120943 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.150051 2026] [security2:error] [pid 276059:tid 276281] [client 216.73.216.46:26019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary12HtqdHBwD77138e2HwAAAeU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTYzL25vZGUwL21lbW9yeTM2OS9wb3dlcg%3D%3D
[Wed Sep 30 01:10:16.189344 2026] [security2:error] [pid 270884:tid 271118] [client 20.58.177.98:45597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ass.php"] [unique_id "ary12CGeq9LtYp4zuPOjmQAAAGM"]
[Wed Sep 30 01:10:16.212229 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.212530 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.249265 2026] [security2:error] [pid 270884:tid 271088] [client 20.194.5.96:25040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/blacks.php"] [unique_id "ary12CGeq9LtYp4zuPOjmwAAAEU"]
[Wed Sep 30 01:10:16.254745 2026] [security2:error] [pid 276059:tid 276203] [client 52.231.30.175:40099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/sehryhv.php"] [unique_id "ary12HtqdHBwD77138e2IgAAAZg"]
[Wed Sep 30 01:10:16.257313 2026] [security2:error] [pid 270884:tid 271024] [client 20.70.173.30:37120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/kir.php"] [unique_id "ary12CGeq9LtYp4zuPOjnAAAAAU"]
[Wed Sep 30 01:10:16.307473 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.307919 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.343445 2026] [security2:error] [pid 270884:tid 271106] [client 20.194.96.176:31295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/w.php"] [unique_id "ary12CGeq9LtYp4zuPOjogAAAFc"]
[Wed Sep 30 01:10:16.380239 2026] [security2:error] [pid 276059:tid 276210] [client 85.203.36.86:42873] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12HtqdHBwD77138e2JQAAAZ4"]
[Wed Sep 30 01:10:16.386067 2026] [security2:error] [pid 276059:tid 276285] [client 85.203.36.100:34669] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12HtqdHBwD77138e2JgAAAek"]
[Wed Sep 30 01:10:16.398645 2026] [security2:error] [pid 276620:tid 276823] [client 45.89.242.86:63609] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12NPAdfEWqmGIkg1dNwAAAlQ"]
[Wed Sep 30 01:10:16.403452 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.403901 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.534435 2026] [security2:error] [pid 276059:tid 276299] [client 52.231.30.175:40179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/yich.php"] [unique_id "ary12HtqdHBwD77138e2KgAAAfc"]
[Wed Sep 30 01:10:16.539979 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.540410 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:38450] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.551041 2026] [security2:error] [pid 276059:tid 276316] [client 104.207.58.17:45511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary12HtqdHBwD77138e2KQAAAgg"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:16.574620 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.574899 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.596779 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:16.597186 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:16.599174 2026] [security2:error] [pid 276059:tid 276268] [client 168.100.149.248:40756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/a09cd868f4ff31f483d91b5de9b379da.4a.css.gz"] [unique_id "ary12HtqdHBwD77138e2KwAB2Cc"]
[Wed Sep 30 01:10:16.602763 2026] [security2:error] [pid 276620:tid 276874] [client 20.194.5.96:25223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/class-wp-http-client.php"] [unique_id "ary12NPAdfEWqmGIkg1dOwAAAoc"]
[Wed Sep 30 01:10:16.620095 2026] [security2:error] [pid 270884:tid 271074] [client 20.58.177.98:49942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wsd.php"] [unique_id "ary12CGeq9LtYp4zuPOjqQAAADc"]
[Wed Sep 30 01:10:16.666855 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.667150 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.673976 2026] [security2:error] [pid 270884:tid 271089] [client 20.28.180.172:61221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/666.php"] [unique_id "ary12CGeq9LtYp4zuPOjqwAAAEY"]
[Wed Sep 30 01:10:16.680902 2026] [security2:error] [pid 276620:tid 276808] [client 20.204.42.136:2974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/cibrkysaeng.php"] [unique_id "ary12NPAdfEWqmGIkg1dPwAAAkU"]
[Wed Sep 30 01:10:16.684901 2026] [security2:error] [pid 276620:tid 276796] [client 85.203.36.116:26007] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12NPAdfEWqmGIkg1dQAAAAjk"]
[Wed Sep 30 01:10:16.738593 2026] [security2:error] [pid 270884:tid 271106] [client 85.203.36.108:29591] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12CGeq9LtYp4zuPOjrgAAAFc"]
[Wed Sep 30 01:10:16.757887 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.758156 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.796538 2026] [security2:error] [pid 270884:tid 271073] [client 52.231.30.175:40148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-blink.php"] [unique_id "ary12CGeq9LtYp4zuPOjrwAAADY"]
[Wed Sep 30 01:10:16.823994 2026] [security2:error] [pid 270884:tid 271112] [client 85.203.36.90:65415] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12CGeq9LtYp4zuPOjtAAAAF0"]
[Wed Sep 30 01:10:16.848696 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:16.848957 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:16.886780 2026] [security2:error] [pid 270884:tid 271087] [client 201.32.215.149:6312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary12CGeq9LtYp4zuPOjtwAAAEQ"]
[Wed Sep 30 01:10:16.886876 2026] [security2:error] [pid 270884:tid 271087] [client 201.32.215.149:6312] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary12CGeq9LtYp4zuPOjtwAAAEQ"]
[Wed Sep 30 01:10:16.908501 2026] [security2:error] [pid 270884:tid 271081] [client 20.194.5.96:25074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/zoo2.php"] [unique_id "ary12CGeq9LtYp4zuPOjuQAAAD4"]
[Wed Sep 30 01:10:16.913963 2026] [security2:error] [pid 270884:tid 271146] [client 20.211.90.37:40446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/marijuana.php"] [unique_id "ary12CGeq9LtYp4zuPOjvAAAAH8"]
[Wed Sep 30 01:10:16.960218 2026] [security2:error] [pid 276620:tid 276885] [client 216.73.216.46:38450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary12NPAdfEWqmGIkg1dRgAAApI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTIvbm9kZTAvbWVtb3J5MTQw
[Wed Sep 30 01:10:17.040261 2026] [security2:error] [pid 270884:tid 271030] [client 45.89.242.82:20803] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12SGeq9LtYp4zuPOjvQAAAAs"]
[Wed Sep 30 01:10:17.041481 2026] [access_compat:error] [pid 276620:tid 276774] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:17.041750 2026] [access_compat:error] [pid 276620:tid 276774] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:17.058887 2026] [security2:error] [pid 270884:tid 271039] [client 52.231.30.175:40138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-logis.php"] [unique_id "ary12SGeq9LtYp4zuPOjvgAAABQ"]
[Wed Sep 30 01:10:17.112376 2026] [security2:error] [pid 270884:tid 271121] [client 20.58.177.98:45624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/BDKR28WP.php"] [unique_id "ary12SGeq9LtYp4zuPOjwAAAAGY"]
[Wed Sep 30 01:10:17.131381 2026] [security2:error] [pid 270884:tid 271116] [client 85.203.36.102:62425] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12SGeq9LtYp4zuPOjwwAAAGE"]
[Wed Sep 30 01:10:17.139455 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.139755 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.153208 2026] [security2:error] [pid 270884:tid 271137] [client 45.5.119.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printers/"] [unique_id "ary12SGeq9LtYp4zuPOjxQAAAHY"]
[Wed Sep 30 01:10:17.195794 2026] [security2:error] [pid 270884:tid 271131] [client 20.194.5.96:25265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/zoo1.php"] [unique_id "ary12SGeq9LtYp4zuPOjxwAAAHA"]
[Wed Sep 30 01:10:17.217663 2026] [security2:error] [pid 270884:tid 271126] [client 20.204.42.136:2921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.bryantomlinson.com"] [uri "/wp-wpbak.php"] [unique_id "ary12SGeq9LtYp4zuPOjyAAAAGs"]
[Wed Sep 30 01:10:17.231379 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.231651 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.246041 2026] [security2:error] [pid 270884:tid 271141] [client 65.111.12.218:36595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary12SGeq9LtYp4zuPOjwgAAAHo"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:17.254564 2026] [security2:error] [pid 270884:tid 271073] [client 20.70.173.30:50750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/f35.update.php"] [unique_id "ary12SGeq9LtYp4zuPOjyQAAADY"]
[Wed Sep 30 01:10:17.289594 2026] [security2:error] [pid 270884:tid 271077] [client 45.89.242.90:40601] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-includes/hp2.php"] [unique_id "ary12SGeq9LtYp4zuPOjzAAAADo"]
[Wed Sep 30 01:10:17.300045 2026] [security2:error] [pid 270884:tid 271132] [client 203.122.45.246:55119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOjzgAAAHE"]
[Wed Sep 30 01:10:17.300147 2026] [security2:error] [pid 270884:tid 271132] [client 203.122.45.246:55119] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOjzgAAAHE"]
[Wed Sep 30 01:10:17.313068 2026] [security2:error] [pid 270884:tid 271098] [client 85.203.36.97:43627] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12SGeq9LtYp4zuPOjzwAAAE8"]
[Wed Sep 30 01:10:17.322039 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.322330 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.326015 2026] [security2:error] [pid 270884:tid 271081] [client 178.211.139.240:50823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stemresourcepartners.com"] [uri "/filefuns.php"] [unique_id "ary12SGeq9LtYp4zuPOj0AAAAD4"]
[Wed Sep 30 01:10:17.331225 2026] [security2:error] [pid 270884:tid 271062] [client 52.231.30.175:40129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/esc.php"] [unique_id "ary12SGeq9LtYp4zuPOj0gAAACs"]
[Wed Sep 30 01:10:17.334168 2026] [security2:error] [pid 270884:tid 271113] [client 45.89.242.87:45353] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12SGeq9LtYp4zuPOj1AAAAF4"]
[Wed Sep 30 01:10:17.350713 2026] [security2:error] [pid 276620:tid 276866] [client 20.28.180.172:60308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/xxw.php"] [unique_id "ary12dPAdfEWqmGIkg1dTQAAAn8"]
[Wed Sep 30 01:10:17.398020 2026] [security2:error] [pid 270884:tid 271032] [client 152.59.165.7:59668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.165.59.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOj3AAAAA0"]
[Wed Sep 30 01:10:17.405036 2026] [security2:error] [pid 270884:tid 271032] [client 152.59.165.7:59668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOj3AAAAA0"]
[Wed Sep 30 01:10:17.417968 2026] [security2:error] [pid 276059:tid 276242] [client 4.240.25.22:13064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/wsd.php"] [unique_id "ary12XtqdHBwD77138e2LAAAAb4"]
[Wed Sep 30 01:10:17.429259 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.429760 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.455971 2026] [security2:error] [pid 270884:tid 271083] [client 194.187.51.185:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary12SGeq9LtYp4zuPOj4QAAAEA"]
[Wed Sep 30 01:10:17.462099 2026] [security2:error] [pid 270884:tid 271026] [client 118.193.45.77:41002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.45.193.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary12SGeq9LtYp4zuPOj4AAAAAc"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:10:17.552869 2026] [security2:error] [pid 270884:tid 271106] [client 20.211.90.37:39936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary12SGeq9LtYp4zuPOj4gAAAFc"]
[Wed Sep 30 01:10:17.554740 2026] [access_compat:error] [pid 276620:tid 276868] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:17.555018 2026] [access_compat:error] [pid 276620:tid 276868] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:17.556046 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.556300 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.595382 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.595665 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.603294 2026] [security2:error] [pid 270884:tid 271141] [client 52.231.30.175:40065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/2.php"] [unique_id "ary12SGeq9LtYp4zuPOj5AAAAHo"]
[Wed Sep 30 01:10:17.631978 2026] [security2:error] [pid 276620:tid 276643] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary12dPAdfEWqmGIkg1dVAACLQ0"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D88434
[Wed Sep 30 01:10:17.639705 2026] [security2:error] [pid 276059:tid 276204] [client 20.219.19.141:20847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/ttivnife.php"] [unique_id "ary12XtqdHBwD77138e2LwAAAZk"]
[Wed Sep 30 01:10:17.666354 2026] [access_compat:error] [pid 270884:tid 271064] [client 220.181.108.175:23234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.666643 2026] [access_compat:error] [pid 270884:tid 271064] [client 220.181.108.175:23234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.675584 2026] [security2:error] [pid 270884:tid 271118] [client 122.173.27.10:4210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOj7QAAAGM"]
[Wed Sep 30 01:10:17.675711 2026] [security2:error] [pid 270884:tid 271118] [client 122.173.27.10:4210] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary12SGeq9LtYp4zuPOj7QAAAGM"]
[Wed Sep 30 01:10:17.687980 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.688458 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.779712 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.780082 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.869673 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.869949 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:17.900472 2026] [security2:error] [pid 270884:tid 271023] [client 52.231.30.175:40100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/ba.php"] [unique_id "ary12SGeq9LtYp4zuPOj-QAAAAQ"]
[Wed Sep 30 01:10:17.920668 2026] [security2:error] [pid 276620:tid 276832] [client 104.207.39.178:58399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary12dPAdfEWqmGIkg1dWwAAAl0"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:17.959750 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:17.960009 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.010893 2026] [security2:error] [pid 270884:tid 271077] [client 20.58.177.98:49921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wmore1.php"] [unique_id "ary12iGeq9LtYp4zuPOkAQAAADo"]
[Wed Sep 30 01:10:18.012582 2026] [security2:error] [pid 270884:tid 271139] [client 20.194.30.107:23176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/BDKR28WP.php"] [unique_id "ary12iGeq9LtYp4zuPOkAgAAAHg"]
[Wed Sep 30 01:10:18.020564 2026] [security2:error] [pid 270884:tid 271054] [client 114.119.136.72:23675] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kgamc.com"] [uri "/"] [unique_id "ary12iGeq9LtYp4zuPOkBAAAACM"], referer: https://sisgroup.lk/quarterlinks-dofollow-article-links-just-for-25-5329/
[Wed Sep 30 01:10:18.052009 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.052465 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.055941 2026] [access_compat:error] [pid 276620:tid 276813] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:18.056199 2026] [access_compat:error] [pid 276620:tid 276813] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:18.141784 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.142216 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.166859 2026] [security2:error] [pid 270884:tid 271055] [client 52.231.30.175:40117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/great.php"] [unique_id "ary12iGeq9LtYp4zuPOkEAAAACQ"]
[Wed Sep 30 01:10:18.235755 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.236086 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.306066 2026] [security2:error] [pid 270884:tid 271089] [client 20.28.180.172:34258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xl9.php"] [unique_id "ary12iGeq9LtYp4zuPOkHAAAAEY"]
[Wed Sep 30 01:10:18.356240 2026] [security2:error] [pid 270884:tid 271100] [client 20.219.19.141:20911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/admin.php/2P.php"] [unique_id "ary12iGeq9LtYp4zuPOkIgAAAFE"]
[Wed Sep 30 01:10:18.430372 2026] [security2:error] [pid 276620:tid 276873] [client 52.231.30.175:38656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary12tPAdfEWqmGIkg1dbgAAAoY"]
[Wed Sep 30 01:10:18.444668 2026] [security2:error] [pid 276059:tid 276244] [client 20.194.5.96:25041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/class-ajax.php"] [unique_id "ary12ntqdHBwD77138e2MwAAAcA"]
[Wed Sep 30 01:10:18.454756 2026] [security2:error] [pid 270884:tid 271032] [client 20.211.90.37:40436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-content/403.php"] [unique_id "ary12iGeq9LtYp4zuPOkJgAAAA0"]
[Wed Sep 30 01:10:18.458432 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.458878 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.467089 2026] [security2:error] [pid 270884:tid 271124] [client 202.179.95.79:49461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary12iGeq9LtYp4zuPOkJwAAAGk"]
[Wed Sep 30 01:10:18.467322 2026] [security2:error] [pid 270884:tid 271124] [client 202.179.95.79:49461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary12iGeq9LtYp4zuPOkJwAAAGk"]
[Wed Sep 30 01:10:18.486258 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.486726 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.511617 2026] [security2:error] [pid 276620:tid 276860] [client 45.89.242.88:53025] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/bless.php"] [unique_id "ary12tPAdfEWqmGIkg1ddAAAAnk"]
[Wed Sep 30 01:10:18.557695 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.557979 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.575061 2026] [access_compat:error] [pid 276620:tid 276796] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:18.575330 2026] [access_compat:error] [pid 276620:tid 276796] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:18.587105 2026] [security2:error] [pid 270884:tid 271070] [client 168.100.149.12:59266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/867c6104b42d4b0a4a486e27d05279b4.fb7b.css.gz"] [unique_id "ary12iGeq9LtYp4zuPOkKQAAMxs"]
[Wed Sep 30 01:10:18.594945 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.595203 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.650176 2026] [security2:error] [pid 270884:tid 271055] [client 89.184.61.229:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary12iGeq9LtYp4zuPOkLgAAACQ"]
[Wed Sep 30 01:10:18.682753 2026] [security2:error] [pid 270884:tid 270984] [remote 47.128.58.111:40182] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gycblinds.com"] [uri "/robots.txt"] [unique_id "ary12iGeq9LtYp4zuPOkMAAANl4"]
[Wed Sep 30 01:10:18.687723 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.687994 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.694364 2026] [security2:error] [pid 276620:tid 276818] [client 52.231.30.175:40115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/robots.php"] [unique_id "ary12tPAdfEWqmGIkg1dfQAAAk8"]
[Wed Sep 30 01:10:18.713961 2026] [security2:error] [pid 270884:tid 271088] [client 20.219.2.60:11713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/nw.php"] [unique_id "ary12iGeq9LtYp4zuPOkMQAAAEU"]
[Wed Sep 30 01:10:18.734929 2026] [security2:error] [pid 270884:tid 271121] [client 20.28.180.172:18343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-png.php"] [unique_id "ary12iGeq9LtYp4zuPOkMwAAAGY"]
[Wed Sep 30 01:10:18.754958 2026] [security2:error] [pid 276620:tid 276885] [client 85.203.36.99:35101] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/gifclass.php"] [unique_id "ary12tPAdfEWqmGIkg1dfwAAApI"]
[Wed Sep 30 01:10:18.778165 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.778443 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.870045 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.870306 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.877109 2026] [security2:error] [pid 276620:tid 276884] [client 20.194.5.96:25269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/gm.php"] [unique_id "ary12tPAdfEWqmGIkg1dggAAApE"]
[Wed Sep 30 01:10:18.881697 2026] [security2:error] [pid 276620:tid 276799] [client 20.58.177.98:49938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/z60.php"] [unique_id "ary12tPAdfEWqmGIkg1dgwAAAjw"]
[Wed Sep 30 01:10:18.920575 2026] [security2:error] [pid 276620:tid 276871] [client 20.211.90.37:39963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/css/colors/coffee/index.php"] [unique_id "ary12tPAdfEWqmGIkg1dhQAAAoQ"]
[Wed Sep 30 01:10:18.961061 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:18.961350 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:18.966098 2026] [security2:error] [pid 276620:tid 276798] [client 52.231.30.175:38761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/k.php"] [unique_id "ary12tPAdfEWqmGIkg1dhwAAAjs"]
[Wed Sep 30 01:10:18.980765 2026] [security2:error] [pid 270884:tid 271019] [client 118.193.45.77:58176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.45.193.118.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/wp-login.php"] [unique_id "ary12iGeq9LtYp4zuPOkOwAAAAA"], referer: https://mngroup.com.au/wp-login.php
[Wed Sep 30 01:10:19.041427 2026] [security2:error] [pid 276059:tid 276235] [client 45.89.242.86:26993] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary123tqdHBwD77138e2NQAAAbc"]
[Wed Sep 30 01:10:19.041962 2026] [security2:error] [pid 270884:tid 271032] [client 85.203.36.107:60197] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/gifclass.php"] [unique_id "ary12yGeq9LtYp4zuPOkPAAAAA0"]
[Wed Sep 30 01:10:19.052520 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.052800 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.066008 2026] [access_compat:error] [pid 276620:tid 276840] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:19.066265 2026] [access_compat:error] [pid 276620:tid 276840] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:19.141706 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.141978 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.152524 2026] [security2:error] [pid 270884:tid 271109] [client 20.198.74.230:24167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/632e19b36dindex.php"] [unique_id "ary12yGeq9LtYp4zuPOkPwAAAFo"]
[Wed Sep 30 01:10:19.206376 2026] [security2:error] [pid 276620:tid 276814] [client 85.203.36.103:32179] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary129PAdfEWqmGIkg1djgAAAks"]
[Wed Sep 30 01:10:19.234387 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.234653 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.235192 2026] [security2:error] [pid 276620:tid 276866] [client 182.69.182.151:13105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary129PAdfEWqmGIkg1dkAAAAn8"]
[Wed Sep 30 01:10:19.235579 2026] [security2:error] [pid 276620:tid 276866] [client 182.69.182.151:13105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary129PAdfEWqmGIkg1dkAAAAn8"]
[Wed Sep 30 01:10:19.241584 2026] [security2:error] [pid 276620:tid 276792] [client 52.231.30.175:40173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/w.php"] [unique_id "ary129PAdfEWqmGIkg1dkQAAAjU"]
[Wed Sep 30 01:10:19.287150 2026] [security2:error] [pid 270884:tid 271052] [client 20.213.164.196:44169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/gu.php"] [unique_id "ary12yGeq9LtYp4zuPOkQQAAACE"]
[Wed Sep 30 01:10:19.318345 2026] [security2:error] [pid 276059:tid 276309] [client 20.211.90.37:39955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/css.php"] [unique_id "ary123tqdHBwD77138e2OwAAAgE"]
[Wed Sep 30 01:10:19.325393 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.325657 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.362543 2026] [security2:error] [pid 276059:tid 276213] [client 20.194.5.96:25387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/class-wp-site-list.php"] [unique_id "ary123tqdHBwD77138e2PAAAAaE"]
[Wed Sep 30 01:10:19.376255 2026] [security2:error] [pid 270884:tid 271116] [client 85.203.36.109:21711] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary12yGeq9LtYp4zuPOkSQAAAGE"]
[Wed Sep 30 01:10:19.437460 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.437917 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.477683 2026] [security2:error] [pid 276620:tid 276811] [client 20.58.177.98:49955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/pJPoKA.php"] [unique_id "ary129PAdfEWqmGIkg1dlwAAAkg"]
[Wed Sep 30 01:10:19.491321 2026] [security2:error] [pid 270884:tid 271083] [client 85.203.36.110:49495] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary12yGeq9LtYp4zuPOkTgAAAEA"]
[Wed Sep 30 01:10:19.505137 2026] [security2:error] [pid 270884:tid 271064] [client 52.231.30.175:38725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/ccc.php"] [unique_id "ary12yGeq9LtYp4zuPOkTwAAAC0"]
[Wed Sep 30 01:10:19.506614 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.506911 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.509253 2026] [security2:error] [pid 276620:tid 276826] [client 20.70.173.30:38858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/images.php"] [unique_id "ary129PAdfEWqmGIkg1dmQAAAlc"]
[Wed Sep 30 01:10:19.521020 2026] [security2:error] [pid 276620:tid 276802] [client 85.203.36.124:39381] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary129PAdfEWqmGIkg1dmgAAAj8"]
[Wed Sep 30 01:10:19.569990 2026] [access_compat:error] [pid 276620:tid 276841] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:19.570416 2026] [access_compat:error] [pid 276620:tid 276841] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:19.599502 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.599750 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.682454 2026] [security2:error] [pid 270884:tid 271074] [client 20.194.5.96:25055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/ttivnife.php"] [unique_id "ary12yGeq9LtYp4zuPOkUwAAADc"]
[Wed Sep 30 01:10:19.687938 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.688196 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.735399 2026] [security2:error] [pid 270884:tid 271119] [client 85.203.36.117:31245] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/bless.php"] [unique_id "ary12yGeq9LtYp4zuPOkVQAAAGQ"]
[Wed Sep 30 01:10:19.736062 2026] [security2:error] [pid 270884:tid 271090] [client 20.219.19.141:20838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/a.php"] [unique_id "ary12yGeq9LtYp4zuPOkVgAAAEc"]
[Wed Sep 30 01:10:19.744130 2026] [security2:error] [pid 270884:tid 271087] [client 20.194.30.107:23185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/dehnl.php"] [unique_id "ary12yGeq9LtYp4zuPOkVwAAAEQ"]
[Wed Sep 30 01:10:19.768315 2026] [security2:error] [pid 276620:tid 276854] [client 52.231.30.175:40091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/images.php"] [unique_id "ary129PAdfEWqmGIkg1dqAAAAnM"]
[Wed Sep 30 01:10:19.778155 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.778424 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.853653 2026] [security2:error] [pid 276620:tid 276806] [client 4.196.65.241:27286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/php8.php"] [unique_id "ary129PAdfEWqmGIkg1drAAAAkM"]
[Wed Sep 30 01:10:19.873031 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.873313 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:33427] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.917040 2026] [security2:error] [pid 270884:tid 271032] [client 20.211.90.37:39949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-admin/user/about.php"] [unique_id "ary12yGeq9LtYp4zuPOkYQAAAA0"]
[Wed Sep 30 01:10:19.922010 2026] [security2:error] [pid 276620:tid 276832] [client 103.211.18.63:55587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary129PAdfEWqmGIkg1drwAAAl0"]
[Wed Sep 30 01:10:19.922122 2026] [security2:error] [pid 276620:tid 276832] [client 103.211.18.63:55587] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary129PAdfEWqmGIkg1drwAAAl0"]
[Wed Sep 30 01:10:19.964158 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:19.964486 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:19.989190 2026] [security2:error] [pid 270884:tid 271054] [client 45.89.242.83:40543] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary12yGeq9LtYp4zuPOkZgAAACM"]
[Wed Sep 30 01:10:20.000746 2026] [security2:error] [pid 270884:tid 271048] [client 20.58.177.98:45575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/24.php"] [unique_id "ary12yGeq9LtYp4zuPOkZwAAAB0"]
[Wed Sep 30 01:10:20.029257 2026] [security2:error] [pid 270884:tid 271117] [client 52.231.30.175:40092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/alls.php"] [unique_id "ary13CGeq9LtYp4zuPOkagAAAGI"]
[Wed Sep 30 01:10:20.054817 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.055184 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.060315 2026] [security2:error] [pid 270884:tid 271098] [client 20.219.2.60:11865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tool.php"] [unique_id "ary13CGeq9LtYp4zuPOkawAAAE8"]
[Wed Sep 30 01:10:20.070307 2026] [security2:error] [pid 270884:tid 271052] [client 128.90.135.18:42600] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.gbepy.com"] [uri "/___proxy_subdomain_cpcontacts/wp-json/batch/v1"] [unique_id "ary13CGeq9LtYp4zuPOkbAAAACE"]
[Wed Sep 30 01:10:20.070311 2026] [security2:error] [pid 276059:tid 276201] [client 128.90.135.18:42628] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcalendars.gbepy.com"] [uri "/___proxy_subdomain_cpcalendars/wp-json/batch/v1"] [unique_id "ary13HtqdHBwD77138e2SQAAAZY"]
[Wed Sep 30 01:10:20.074092 2026] [access_compat:error] [pid 276620:tid 276818] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:20.074386 2026] [access_compat:error] [pid 276620:tid 276818] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:20.100594 2026] [security2:error] [pid 276059:tid 276195] [client 128.90.135.18:42614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.135.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.gbepy.com"] [uri "/wp-login.php"] [unique_id "ary13HtqdHBwD77138e2SgAAAZA"]
[Wed Sep 30 01:10:20.146879 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.147063 2026] [security2:error] [pid 276620:tid 276768] [client 85.203.36.106:56737] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13NPAdfEWqmGIkg1dtQAAAh0"]
[Wed Sep 30 01:10:20.147140 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.147173 2026] [security2:error] [pid 270884:tid 271110] [client 20.194.30.107:42843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/robots.php"] [unique_id "ary13CGeq9LtYp4zuPOkcgAAAFs"]
[Wed Sep 30 01:10:20.180451 2026] [security2:error] [pid 276620:tid 276839] [client 20.194.5.96:25274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/admin.php/2P.php"] [unique_id "ary13NPAdfEWqmGIkg1dtwAAAmQ"]
[Wed Sep 30 01:10:20.182855 2026] [security2:error] [pid 276620:tid 276873] [client 43.227.131.37:43064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary13NPAdfEWqmGIkg1dtgAAAoY"]
[Wed Sep 30 01:10:20.182949 2026] [security2:error] [pid 276620:tid 276873] [client 43.227.131.37:43064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary13NPAdfEWqmGIkg1dtgAAAoY"]
[Wed Sep 30 01:10:20.191581 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13CGeq9LtYp4zuPOkcwAAcDU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:20.191600 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13CGeq9LtYp4zuPOkcwAAcDU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:20.236575 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.236829 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.250388 2026] [security2:error] [pid 276059:tid 276232] [client 128.90.135.18:42628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcalendars.gbepy.com"] [uri "/"] [unique_id "ary13HtqdHBwD77138e2SwAAAbQ"]
[Wed Sep 30 01:10:20.254481 2026] [security2:error] [pid 270884:tid 271084] [client 128.90.135.18:42600] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.gbepy.com"] [uri "/___proxy_subdomain_cpcontacts/"] [unique_id "ary13CGeq9LtYp4zuPOkdQAAAEE"]
[Wed Sep 30 01:10:20.286268 2026] [security2:error] [pid 276620:tid 276871] [client 216.73.216.46:33427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary13NPAdfEWqmGIkg1duwAAAoQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTI4L25vZGUwL21lbW9yeTM2MA%3D%3D
[Wed Sep 30 01:10:20.299222 2026] [security2:error] [pid 276059:tid 276318] [client 52.231.30.175:40154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/admin.php"] [unique_id "ary13HtqdHBwD77138e2TAAAAgo"]
[Wed Sep 30 01:10:20.329560 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.329816 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.406035 2026] [security2:error] [pid 270884:tid 271029] [client 85.203.36.104:61909] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary13CGeq9LtYp4zuPOkfAAAAAo"]
[Wed Sep 30 01:10:20.412578 2026] [security2:error] [pid 276059:tid 276266] [client 85.203.36.94:39791] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/bless.php"] [unique_id "ary13HtqdHBwD77138e2TQAAAdY"]
[Wed Sep 30 01:10:20.431417 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.431873 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.481064 2026] [security2:error] [pid 276059:tid 276288] [client 85.203.36.106:53309] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13HtqdHBwD77138e2UQAAAew"]
[Wed Sep 30 01:10:20.485156 2026] [security2:error] [pid 276059:tid 276230] [client 20.211.90.37:39988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/about.php"] [unique_id "ary13HtqdHBwD77138e2UwAAAbI"]
[Wed Sep 30 01:10:20.491394 2026] [security2:error] [pid 276620:tid 276840] [client 20.58.177.98:49964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/xxw.php"] [unique_id "ary13NPAdfEWqmGIkg1dwwAAAmU"]
[Wed Sep 30 01:10:20.510244 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.510561 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.574424 2026] [security2:error] [pid 276059:tid 276287] [client 52.231.30.175:40103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/geck.php"] [unique_id "ary13HtqdHBwD77138e2VQAAAes"]
[Wed Sep 30 01:10:20.583201 2026] [access_compat:error] [pid 276620:tid 276791] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:20.583644 2026] [access_compat:error] [pid 276620:tid 276791] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTIvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:20.584212 2026] [security2:error] [pid 270884:tid 271065] [client 168.100.149.212:56596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b8f0a25484c53178d2d866dd99fe9ac4.ff.css.gz"] [unique_id "ary13CGeq9LtYp4zuPOkggAALh8"]
[Wed Sep 30 01:10:20.606178 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.606640 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.618727 2026] [security2:error] [pid 270884:tid 271099] [client 20.70.173.30:3791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/ms-edit.php"] [unique_id "ary13CGeq9LtYp4zuPOkgwAAAFA"]
[Wed Sep 30 01:10:20.648074 2026] [security2:error] [pid 270884:tid 271080] [client 116.193.128.26:56661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary13CGeq9LtYp4zuPOkhQAAAD0"]
[Wed Sep 30 01:10:20.648238 2026] [security2:error] [pid 270884:tid 271080] [client 116.193.128.26:56661] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary13CGeq9LtYp4zuPOkhQAAAD0"]
[Wed Sep 30 01:10:20.693473 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.693739 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.728994 2026] [security2:error] [pid 270884:tid 271030] [client 20.219.19.141:20861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/cord.php"] [unique_id "ary13CGeq9LtYp4zuPOkigAAAAs"]
[Wed Sep 30 01:10:20.731846 2026] [security2:error] [pid 270884:tid 271111] [client 85.203.36.100:52609] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13CGeq9LtYp4zuPOkiwAAAFw"]
[Wed Sep 30 01:10:20.788303 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.788734 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.790440 2026] [security2:error] [pid 270884:tid 271070] [client 45.89.242.82:45393] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13CGeq9LtYp4zuPOkjAAAADM"]
[Wed Sep 30 01:10:20.790702 2026] [security2:error] [pid 276620:tid 276809] [client 128.90.135.18:35036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcalendars.gbepy.com"] [uri "/wp-json/batch/v1"] [unique_id "ary13NPAdfEWqmGIkg1dzwAAAkY"]
[Wed Sep 30 01:10:20.799187 2026] [security2:error] [pid 276059:tid 276231] [client 128.90.135.18:35048] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcontacts.gbepy.com"] [uri "/wp-json/batch/v1"] [unique_id "ary13HtqdHBwD77138e2WAAAAbM"]
[Wed Sep 30 01:10:20.858012 2026] [security2:error] [pid 276620:tid 276802] [client 52.231.30.175:40159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/goods.php"] [unique_id "ary13NPAdfEWqmGIkg1d0wAAAj8"]
[Wed Sep 30 01:10:20.877664 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.877994 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:20.944128 2026] [security2:error] [pid 276620:tid 276773] [client 20.58.177.98:45592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/bnmtp.php"] [unique_id "ary13NPAdfEWqmGIkg1d2gAAAiI"]
[Wed Sep 30 01:10:20.957566 2026] [security2:error] [pid 270884:tid 270957] [remote 47.128.117.224:30630] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "www.alfareedfertilizers.com"] [uri "/robots.txt"] [unique_id "ary13CGeq9LtYp4zuPOkkgAAAkM"]
[Wed Sep 30 01:10:20.966731 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:20.967042 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.039619 2026] [security2:error] [pid 270884:tid 271139] [client 20.194.5.96:25270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/a.php"] [unique_id "ary13SGeq9LtYp4zuPOkkwAAAHg"]
[Wed Sep 30 01:10:21.053561 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:21.053866 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:21.056323 2026] [security2:error] [pid 270884:tid 271131] [client 20.211.90.37:39985] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/1.php"] [unique_id "ary13SGeq9LtYp4zuPOklAAAAHA"]
[Wed Sep 30 01:10:21.056421 2026] [security2:error] [pid 270884:tid 271131] [client 20.211.90.37:39985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/1.php"] [unique_id "ary13SGeq9LtYp4zuPOklAAAAHA"]
[Wed Sep 30 01:10:21.057166 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.057458 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.090416 2026] [security2:error] [pid 270884:tid 271094] [client 45.89.242.88:57823] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/goods.php"] [unique_id "ary13SGeq9LtYp4zuPOklgAAAEs"]
[Wed Sep 30 01:10:21.124573 2026] [security2:error] [pid 270884:tid 271095] [client 52.231.30.175:40150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/dejavu.php"] [unique_id "ary13SGeq9LtYp4zuPOklwAAAEw"]
[Wed Sep 30 01:10:21.153458 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.153901 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.208482 2026] [security2:error] [pid 276620:tid 276864] [client 85.203.36.119:32363] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13dPAdfEWqmGIkg1d4QAAAn0"]
[Wed Sep 30 01:10:21.237111 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.237409 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.289151 2026] [security2:error] [pid 276620:tid 276818] [client 45.89.242.82:34201] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13dPAdfEWqmGIkg1d6AAAAk8"]
[Wed Sep 30 01:10:21.329879 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.330149 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.333049 2026] [security2:error] [pid 276620:tid 276874] [client 128.90.135.18:35068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcalendars.gbepy.com"] [uri "/"] [unique_id "ary13dPAdfEWqmGIkg1d6wAAAoc"]
[Wed Sep 30 01:10:21.342555 2026] [security2:error] [pid 270884:tid 271112] [client 128.90.135.18:35078] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcontacts.gbepy.com"] [uri "/"] [unique_id "ary13SGeq9LtYp4zuPOkoAAAAF0"]
[Wed Sep 30 01:10:21.357832 2026] [security2:error] [pid 276620:tid 276770] [client 130.131.227.119:16119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/ahax.php"] [unique_id "ary13dPAdfEWqmGIkg1d7AAAAh8"]
[Wed Sep 30 01:10:21.393963 2026] [security2:error] [pid 270884:tid 271124] [client 52.231.30.175:40183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/h02ugyh.php"] [unique_id "ary13SGeq9LtYp4zuPOkowAAAGk"]
[Wed Sep 30 01:10:21.402032 2026] [security2:error] [pid 276059:tid 276299] [client 20.58.177.98:49960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ebkid.php"] [unique_id "ary13XtqdHBwD77138e2XgAAAfc"]
[Wed Sep 30 01:10:21.433445 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.433890 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.436845 2026] [security2:error] [pid 276059:tid 276203] [client 106.214.2.47:15953] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary13XtqdHBwD77138e2XwAAAZg"]
[Wed Sep 30 01:10:21.442941 2026] [security2:error] [pid 276059:tid 276203] [client 106.214.2.47:15953] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary13XtqdHBwD77138e2XwAAAZg"]
[Wed Sep 30 01:10:21.484456 2026] [security2:error] [pid 276059:tid 276268] [client 85.203.36.111:52431] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13XtqdHBwD77138e2YAAAAdg"]
[Wed Sep 30 01:10:21.511106 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.511382 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.531959 2026] [security2:error] [pid 276059:tid 276264] [client 130.131.227.119:16098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/breads1.php"] [unique_id "ary13XtqdHBwD77138e2YQAAAdQ"]
[Wed Sep 30 01:10:21.584476 2026] [security2:error] [pid 276620:tid 276853] [client 20.219.19.141:20837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/anom.php"] [unique_id "ary13dPAdfEWqmGIkg1d9wAAAnI"]
[Wed Sep 30 01:10:21.586519 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:21.586891 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:21.604223 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.604527 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.626596 2026] [security2:error] [pid 276620:tid 276792] [client 20.28.180.172:29489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/584062352875874akp.php"] [unique_id "ary13dPAdfEWqmGIkg1d-gAAAjU"]
[Wed Sep 30 01:10:21.636057 2026] [security2:error] [pid 270884:tid 271040] [client 20.28.180.172:60304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/222.php"] [unique_id "ary13SGeq9LtYp4zuPOkrAAAABU"]
[Wed Sep 30 01:10:21.656268 2026] [security2:error] [pid 270884:tid 271062] [client 20.194.5.96:25250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/cord.php"] [unique_id "ary13SGeq9LtYp4zuPOkrgAAACs"]
[Wed Sep 30 01:10:21.674434 2026] [security2:error] [pid 270884:tid 271026] [client 45.89.242.87:27745] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/goods.php"] [unique_id "ary13SGeq9LtYp4zuPOkrwAAAAc"]
[Wed Sep 30 01:10:21.675586 2026] [security2:error] [pid 276059:tid 276292] [client 52.231.30.175:40106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/155.php"] [unique_id "ary13XtqdHBwD77138e2ZAAAAfA"]
[Wed Sep 30 01:10:21.691081 2026] [security2:error] [pid 270884:tid 271101] [client 130.131.227.119:3935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/must.php"] [unique_id "ary13SGeq9LtYp4zuPOksQAAAFI"]
[Wed Sep 30 01:10:21.692676 2026] [core:error] [pid 276620:tid 276878] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:21.692702 2026] [core:error] [pid 276620:tid 276878] [client 107.173.171.201:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:21.693794 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.694119 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.696962 2026] [security2:error] [pid 276620:tid 276783] [client 20.211.90.37:39986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/marijuana.php"] [unique_id "ary13dPAdfEWqmGIkg1d_gAAAiw"]
[Wed Sep 30 01:10:21.708573 2026] [security2:error] [pid 276620:tid 276810] [client 4.240.25.22:12446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-blog-header.php"] [unique_id "ary13dPAdfEWqmGIkg1d_wAAAkc"]
[Wed Sep 30 01:10:21.758274 2026] [security2:error] [pid 270884:tid 271139] [client 20.58.177.98:49962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/133.php"] [unique_id "ary13SGeq9LtYp4zuPOktAAAAHg"]
[Wed Sep 30 01:10:21.783681 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.783967 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.822005 2026] [security2:error] [pid 276620:tid 276718] [remote 110.249.201.228:34652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.camera-roll.com"] [uri "/raiders-of-the-lost-ark-review/"] [unique_id "ary13dPAdfEWqmGIkg1eAgACJVg"]
[Wed Sep 30 01:10:21.823109 2026] [security2:error] [pid 276059:tid 276263] [client 45.89.242.84:29095] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13XtqdHBwD77138e2ZQAAAdM"]
[Wed Sep 30 01:10:21.873891 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.874156 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:21.900984 2026] [security2:error] [pid 270884:tid 271074] [client 128.90.135.18:42572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.135.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gbepy.com"] [uri "/wp-login.php"] [unique_id "ary13SGeq9LtYp4zuPOkuQAAADc"]
[Wed Sep 30 01:10:21.909531 2026] [security2:error] [pid 270884:tid 271064] [client 130.131.227.119:3912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/up.php"] [unique_id "ary13SGeq9LtYp4zuPOkugAAAC0"]
[Wed Sep 30 01:10:21.940335 2026] [security2:error] [pid 270884:tid 271119] [client 52.231.30.175:40094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/ops.php"] [unique_id "ary13SGeq9LtYp4zuPOkuwAAAGQ"]
[Wed Sep 30 01:10:21.962378 2026] [security2:error] [pid 276620:tid 276873] [client 155.190.6.18:48940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary13dPAdfEWqmGIkg1eCQAAAoY"]
[Wed Sep 30 01:10:21.965137 2026] [security2:error] [pid 276620:tid 276839] [client 152.56.240.85:60249] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary13dPAdfEWqmGIkg1eCwAAAmQ"]
[Wed Sep 30 01:10:21.965234 2026] [security2:error] [pid 276620:tid 276839] [client 152.56.240.85:60249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary13dPAdfEWqmGIkg1eCwAAAmQ"]
[Wed Sep 30 01:10:21.971754 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:21.972195 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.015166 2026] [security2:error] [pid 276620:tid 276789] [client 45.138.12.32:44698] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rde.xnn.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary13tPAdfEWqmGIkg1eDAAAAjI"]
[Wed Sep 30 01:10:22.047332 2026] [security2:error] [pid 270884:tid 271085] [client 85.203.36.93:47013] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13iGeq9LtYp4zuPOkwwAAAEI"]
[Wed Sep 30 01:10:22.057018 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.057287 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.083224 2026] [security2:error] [pid 270884:tid 271100] [client 85.203.36.125:44717] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary13iGeq9LtYp4zuPOkxwAAAFE"]
[Wed Sep 30 01:10:22.086982 2026] [security2:error] [pid 270884:tid 271073] [client 49.43.163.212:64789] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOkyAAAADY"]
[Wed Sep 30 01:10:22.087096 2026] [security2:error] [pid 270884:tid 271073] [client 49.43.163.212:64789] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOkyAAAADY"]
[Wed Sep 30 01:10:22.089733 2026] [security2:error] [pid 270884:tid 271036] [client 4.240.25.22:8392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-login.php"] [unique_id "ary13iGeq9LtYp4zuPOkyQAAABE"]
[Wed Sep 30 01:10:22.093573 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:22.094004 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:22.149551 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.149834 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.167834 2026] [security2:error] [pid 270884:tid 271050] [client 116.197.133.25:56178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOkzAAAAB8"]
[Wed Sep 30 01:10:22.167989 2026] [security2:error] [pid 270884:tid 271050] [client 116.197.133.25:56178] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOkzAAAAB8"]
[Wed Sep 30 01:10:22.191427 2026] [security2:error] [pid 270884:tid 271028] [client 130.131.227.119:16067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/155.php"] [unique_id "ary13iGeq9LtYp4zuPOkzQAAAAk"]
[Wed Sep 30 01:10:22.192891 2026] [security2:error] [pid 270884:tid 271020] [client 20.70.173.30:33386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/media.php"] [unique_id "ary13iGeq9LtYp4zuPOkzgAAAAE"]
[Wed Sep 30 01:10:22.203354 2026] [security2:error] [pid 270884:tid 271051] [client 128.90.135.18:42584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.135.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.gbepy.com"] [uri "/wp-login.php"] [unique_id "ary13iGeq9LtYp4zuPOk0AAAACA"]
[Wed Sep 30 01:10:22.207589 2026] [security2:error] [pid 270884:tid 271031] [client 52.231.30.175:40087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/mac.php"] [unique_id "ary13iGeq9LtYp4zuPOk0QAAAAw"]
[Wed Sep 30 01:10:22.238383 2026] [security2:error] [pid 276620:tid 276873] [client 155.190.6.18:48940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary13dPAdfEWqmGIkg1eCQAAAoY"]
[Wed Sep 30 01:10:22.239929 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.240200 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.270570 2026] [security2:error] [pid 276059:tid 276262] [client 20.219.19.141:20804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/plugins.php"] [unique_id "ary13ntqdHBwD77138e2agAAAdI"]
[Wed Sep 30 01:10:22.272363 2026] [security2:error] [pid 276620:tid 276849] [client 20.58.177.98:49972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/x33.php"] [unique_id "ary13tPAdfEWqmGIkg1eEwAAAm4"]
[Wed Sep 30 01:10:22.277485 2026] [security2:error] [pid 270884:tid 271081] [client 20.194.5.96:25247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/anom.php"] [unique_id "ary13iGeq9LtYp4zuPOk1AAAAD4"]
[Wed Sep 30 01:10:22.333309 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.333596 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.366835 2026] [security2:error] [pid 276620:tid 276854] [client 20.219.2.60:11854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/drhunthq.php"] [unique_id "ary13tPAdfEWqmGIkg1eFgAAAnM"]
[Wed Sep 30 01:10:22.368251 2026] [security2:error] [pid 270884:tid 271055] [client 130.131.227.119:42920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-update.php"] [unique_id "ary13iGeq9LtYp4zuPOk3QAAACQ"]
[Wed Sep 30 01:10:22.440766 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.441223 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.448264 2026] [security2:error] [pid 276620:tid 276832] [client 85.203.36.92:41961] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary13tPAdfEWqmGIkg1eGwAAAl0"]
[Wed Sep 30 01:10:22.472337 2026] [security2:error] [pid 270884:tid 271039] [client 85.203.36.107:51233] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/blurbs.php"] [unique_id "ary13iGeq9LtYp4zuPOk4QAAABQ"]
[Wed Sep 30 01:10:22.485278 2026] [security2:error] [pid 270884:tid 271054] [client 20.213.164.196:21330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/nck.php"] [unique_id "ary13iGeq9LtYp4zuPOk4gAAACM"]
[Wed Sep 30 01:10:22.487042 2026] [security2:error] [pid 276620:tid 276842] [client 52.231.30.175:40074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/makeasmtp.php"] [unique_id "ary13tPAdfEWqmGIkg1eHQAAAmc"]
[Wed Sep 30 01:10:22.515542 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.515799 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.523298 2026] [security2:error] [pid 276620:tid 276780] [client 130.131.227.119:42885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/xmrlpc.php"] [unique_id "ary13tPAdfEWqmGIkg1eIAAAAik"]
[Wed Sep 30 01:10:22.533235 2026] [security2:error] [pid 270884:tid 271073] [client 20.204.42.136:35781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/UT6UJndefault.php"] [unique_id "ary13iGeq9LtYp4zuPOk5AAAADY"]
[Wed Sep 30 01:10:22.534545 2026] [security2:error] [pid 270884:tid 271036] [client 45.89.242.85:41969] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13iGeq9LtYp4zuPOk5QAAABE"]
[Wed Sep 30 01:10:22.534761 2026] [security2:error] [pid 270884:tid 271077] [client 45.89.242.87:28549] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13iGeq9LtYp4zuPOk5gAAADo"]
[Wed Sep 30 01:10:22.565085 2026] [security2:error] [pid 270884:tid 270926] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13iGeq9LtYp4zuPOk6gAAXCg"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:22.565110 2026] [security2:error] [pid 270884:tid 270926] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13iGeq9LtYp4zuPOk6gAAXCg"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:22.567188 2026] [security2:error] [pid 270884:tid 271019] [client 154.27.138.19:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "nucreativesolutions.com"] [uri "/"] [unique_id "ary13iGeq9LtYp4zuPOk6wAAAAA"], referer: https://automaticbacklinks.shop/dir/website-growth-backlinks-150975
[Wed Sep 30 01:10:22.570311 2026] [access_compat:error] [pid 276620:tid 276820] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:22.570638 2026] [access_compat:error] [pid 276620:tid 276820] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:22.579438 2026] [security2:error] [pid 276620:tid 276877] [client 168.100.149.146:17522] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/bdc065699e42f43c3f04c2946bf1f7f7.61c2.css.gz"] [unique_id "ary13tPAdfEWqmGIkg1eIgACilo"]
[Wed Sep 30 01:10:22.605296 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.605565 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.608922 2026] [security2:error] [pid 270884:tid 271037] [client 85.203.36.90:42467] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/blurbs.php"] [unique_id "ary13iGeq9LtYp4zuPOk7AAAABI"]
[Wed Sep 30 01:10:22.674625 2026] [security2:error] [pid 270884:tid 271110] [client 178.211.139.240:60542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stemresourcepartners.com"] [uri "/txets.php"] [unique_id "ary13iGeq9LtYp4zuPOk9QAAAFs"]
[Wed Sep 30 01:10:22.685649 2026] [security2:error] [pid 270884:tid 271023] [client 4.240.25.22:13772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/dronishness.php"] [unique_id "ary13iGeq9LtYp4zuPOk9gAAAAQ"]
[Wed Sep 30 01:10:22.686739 2026] [security2:error] [pid 270884:tid 271081] [client 130.131.227.119:3743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/about/function.php"] [unique_id "ary13iGeq9LtYp4zuPOk9wAAAD4"]
[Wed Sep 30 01:10:22.697666 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.697969 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.747030 2026] [security2:error] [pid 270884:tid 271055] [client 52.231.30.175:40068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/pucci.php"] [unique_id "ary13iGeq9LtYp4zuPOk-wAAACQ"]
[Wed Sep 30 01:10:22.778064 2026] [security2:error] [pid 270884:tid 271119] [client 20.28.180.172:18185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-blog.php"] [unique_id "ary13iGeq9LtYp4zuPOk_QAAAGQ"]
[Wed Sep 30 01:10:22.793524 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.793975 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.845855 2026] [security2:error] [pid 270884:tid 271021] [client 223.181.60.167:17666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOlAAAAAAI"]
[Wed Sep 30 01:10:22.846130 2026] [security2:error] [pid 270884:tid 271021] [client 223.181.60.167:17666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary13iGeq9LtYp4zuPOlAAAAAAI"]
[Wed Sep 30 01:10:22.878213 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.878495 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:22.913676 2026] [security2:error] [pid 276620:tid 276790] [client 20.211.90.37:40406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/about/function.php"] [unique_id "ary13tPAdfEWqmGIkg1eKQAAAjM"]
[Wed Sep 30 01:10:22.935537 2026] [security2:error] [pid 276620:tid 276819] [client 130.131.227.119:16116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/an.php"] [unique_id "ary13tPAdfEWqmGIkg1eKwAAAlA"]
[Wed Sep 30 01:10:22.962272 2026] [security2:error] [pid 270884:tid 271101] [client 20.70.173.30:60027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/222.php"] [unique_id "ary13iGeq9LtYp4zuPOlBAAAAFI"]
[Wed Sep 30 01:10:22.972740 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:22.973180 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.006710 2026] [security2:error] [pid 276620:tid 276792] [client 52.231.30.175:40147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/puc.php"] [unique_id "ary139PAdfEWqmGIkg1eLwAAAjU"]
[Wed Sep 30 01:10:23.023345 2026] [security2:error] [pid 270884:tid 271085] [client 223.235.102.107:31977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary13yGeq9LtYp4zuPOlBwAAAEI"]
[Wed Sep 30 01:10:23.023538 2026] [security2:error] [pid 270884:tid 271085] [client 223.235.102.107:31977] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary13yGeq9LtYp4zuPOlBwAAAEI"]
[Wed Sep 30 01:10:23.025789 2026] [security2:error] [pid 270884:tid 271065] [client 20.194.5.96:25261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/plugins.php"] [unique_id "ary13yGeq9LtYp4zuPOlCAAAAC4"]
[Wed Sep 30 01:10:23.062318 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.062605 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:35465] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.065929 2026] [access_compat:error] [pid 276620:tid 276878] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:23.066165 2026] [access_compat:error] [pid 276620:tid 276878] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:23.102025 2026] [security2:error] [pid 270884:tid 271111] [client 20.70.173.30:38874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/chosen.php"] [unique_id "ary13yGeq9LtYp4zuPOlCwAAAFw"]
[Wed Sep 30 01:10:23.110228 2026] [security2:error] [pid 276620:tid 276784] [client 130.131.227.119:3928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/asw.php"] [unique_id "ary139PAdfEWqmGIkg1eMwAAAi0"]
[Wed Sep 30 01:10:23.140849 2026] [security2:error] [pid 270884:tid 271076] [client 20.58.177.98:30664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/cae.php"] [unique_id "ary13yGeq9LtYp4zuPOlDAAAADk"]
[Wed Sep 30 01:10:23.157085 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.157535 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.182572 2026] [security2:error] [pid 276620:tid 276782] [client 20.219.19.141:20885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/groud3.php"] [unique_id "ary139PAdfEWqmGIkg1eNQAAAis"]
[Wed Sep 30 01:10:23.243448 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.243738 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.247299 2026] [security2:error] [pid 270884:tid 271037] [client 85.203.36.91:28635] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary13yGeq9LtYp4zuPOlDQAAABI"]
[Wed Sep 30 01:10:23.286413 2026] [security2:error] [pid 270884:tid 271020] [client 130.131.227.119:3909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/item.php"] [unique_id "ary13yGeq9LtYp4zuPOlDgAAAAE"]
[Wed Sep 30 01:10:23.299673 2026] [security2:error] [pid 270884:tid 271026] [client 52.231.30.175:40178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/8.php"] [unique_id "ary13yGeq9LtYp4zuPOlDwAAAAc"]
[Wed Sep 30 01:10:23.323067 2026] [security2:error] [pid 270884:tid 270922] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary13yGeq9LtYp4zuPOlEAAARyQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=a8155008e810436e2b3a5e5c99d17002&start=210&t=21812
[Wed Sep 30 01:10:23.323092 2026] [security2:error] [pid 270884:tid 270922] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary13yGeq9LtYp4zuPOlEAAARyQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=a8155008e810436e2b3a5e5c99d17002&start=210&t=21812
[Wed Sep 30 01:10:23.327975 2026] [security2:error] [pid 270884:tid 271055] [client 20.70.173.30:50737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary13yGeq9LtYp4zuPOlEQAAACQ"]
[Wed Sep 30 01:10:23.333254 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.333518 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.429002 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.429504 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.431570 2026] [security2:error] [pid 276059:tid 276309] [client 45.89.242.88:58151] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary133tqdHBwD77138e2cwAAAgE"]
[Wed Sep 30 01:10:23.442651 2026] [security2:error] [pid 276620:tid 276797] [client 85.203.36.126:29831] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary139PAdfEWqmGIkg1eOgAAAjo"]
[Wed Sep 30 01:10:23.445852 2026] [security2:error] [pid 276059:tid 276212] [client 130.131.227.119:3757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/jga.php"] [unique_id "ary133tqdHBwD77138e2dQAAAaA"]
[Wed Sep 30 01:10:23.487652 2026] [security2:error] [pid 276620:tid 276813] [client 103.168.67.253:23552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary139PAdfEWqmGIkg1eOwAAAko"]
[Wed Sep 30 01:10:23.515108 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.515372 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.531555 2026] [security2:error] [pid 276620:tid 276841] [client 20.70.173.30:33370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wpxml.php"] [unique_id "ary139PAdfEWqmGIkg1ePwAAAmY"]
[Wed Sep 30 01:10:23.560000 2026] [security2:error] [pid 270884:tid 271050] [client 103.241.204.139:58127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary13yGeq9LtYp4zuPOlFAAAAB8"]
[Wed Sep 30 01:10:23.560089 2026] [security2:error] [pid 270884:tid 271050] [client 103.241.204.139:58127] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary13yGeq9LtYp4zuPOlFAAAAB8"]
[Wed Sep 30 01:10:23.563192 2026] [security2:error] [pid 276620:tid 276870] [client 52.231.30.175:40163] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.scottcoy.com"] [uri "/1.php"] [unique_id "ary139PAdfEWqmGIkg1eQQAAAoM"]
[Wed Sep 30 01:10:23.563291 2026] [security2:error] [pid 276620:tid 276870] [client 52.231.30.175:40163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/1.php"] [unique_id "ary139PAdfEWqmGIkg1eQQAAAoM"]
[Wed Sep 30 01:10:23.564117 2026] [access_compat:error] [pid 276620:tid 276764] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:23.564373 2026] [access_compat:error] [pid 276620:tid 276764] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:23.594712 2026] [security2:error] [pid 270884:tid 271116] [client 130.131.227.119:3954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/mac.php"] [unique_id "ary13yGeq9LtYp4zuPOlFQAAAGE"]
[Wed Sep 30 01:10:23.606651 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.606905 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.636442 2026] [security2:error] [pid 270884:tid 271040] [client 20.58.177.98:49961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/txets.php"] [unique_id "ary13yGeq9LtYp4zuPOlFgAAABU"]
[Wed Sep 30 01:10:23.678158 2026] [security2:error] [pid 270884:tid 271132] [client 93.180.194.0:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary13yGeq9LtYp4zuPOlGQAAAHE"]
[Wed Sep 30 01:10:23.695412 2026] [security2:error] [pid 270884:tid 271030] [client 20.194.5.96:25073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/groud3.php"] [unique_id "ary13yGeq9LtYp4zuPOlGgAAAAs"]
[Wed Sep 30 01:10:23.696664 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.696935 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.753168 2026] [security2:error] [pid 270884:tid 271113] [client 130.131.227.119:42939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/images/index.php"] [unique_id "ary13yGeq9LtYp4zuPOlGwAAAF4"]
[Wed Sep 30 01:10:23.770009 2026] [security2:error] [pid 270884:tid 271083] [client 20.211.90.37:39908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/simple.php"] [unique_id "ary13yGeq9LtYp4zuPOlHgAAAEA"]
[Wed Sep 30 01:10:23.776647 2026] [security2:error] [pid 270884:tid 270906] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13yGeq9LtYp4zuPOlHwAAIxQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:23.776667 2026] [security2:error] [pid 270884:tid 270906] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary13yGeq9LtYp4zuPOlHwAAIxQ"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301297&sid=5b32255df127cd1cd81cd6b9b086e8d5
[Wed Sep 30 01:10:23.787524 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.787798 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.827858 2026] [security2:error] [pid 276620:tid 276866] [client 52.231.30.175:40113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/admin.php"] [unique_id "ary139PAdfEWqmGIkg1eSQAAAn8"]
[Wed Sep 30 01:10:23.883031 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.883464 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:23.921246 2026] [security2:error] [pid 270884:tid 271036] [client 130.131.227.119:42935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/includes/index.php"] [unique_id "ary13yGeq9LtYp4zuPOlLgAAABE"]
[Wed Sep 30 01:10:23.970321 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:23.970596 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.022818 2026] [security2:error] [pid 276620:tid 276882] [client 20.58.177.98:49979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wp-update.php"] [unique_id "ary14NPAdfEWqmGIkg1eTQAAAo8"]
[Wed Sep 30 01:10:24.051868 2026] [access_compat:error] [pid 276620:tid 276876] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:24.052138 2026] [access_compat:error] [pid 276620:tid 276876] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:24.056820 2026] [security2:error] [pid 276620:tid 276854] [client 85.203.36.104:54909] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary14NPAdfEWqmGIkg1eUAAAAnM"]
[Wed Sep 30 01:10:24.061681 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.061956 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.064159 2026] [security2:error] [pid 270884:tid 271031] [client 85.203.36.104:54349] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14CGeq9LtYp4zuPOlMAAAAAw"]
[Wed Sep 30 01:10:24.092016 2026] [security2:error] [pid 270884:tid 271023] [client 52.231.30.175:40169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/edit.php"] [unique_id "ary14CGeq9LtYp4zuPOlMQAAAAQ"]
[Wed Sep 30 01:10:24.093429 2026] [security2:error] [pid 276059:tid 276222] [client 130.131.227.119:3744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/zafir1.php"] [unique_id "ary14HtqdHBwD77138e2egAAAao"]
[Wed Sep 30 01:10:24.153324 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.153641 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.170259 2026] [security2:error] [pid 276620:tid 276832] [client 85.203.36.116:53569] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary14NPAdfEWqmGIkg1eUgAAAl0"]
[Wed Sep 30 01:10:24.209130 2026] [security2:error] [pid 270884:tid 271026] [client 85.203.36.115:64951] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary14CGeq9LtYp4zuPOlNAAAAAc"]
[Wed Sep 30 01:10:24.234303 2026] [security2:error] [pid 270884:tid 271055] [client 85.203.36.124:39553] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/css/goods.php"] [unique_id "ary14CGeq9LtYp4zuPOlNQAAACQ"]
[Wed Sep 30 01:10:24.243967 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.244224 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.263738 2026] [security2:error] [pid 270884:tid 271074] [client 4.240.25.22:44353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/simple.php"] [unique_id "ary14CGeq9LtYp4zuPOlOAAAADc"]
[Wed Sep 30 01:10:24.268096 2026] [security2:error] [pid 276620:tid 276860] [client 130.131.227.119:3463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/abc.php"] [unique_id "ary14NPAdfEWqmGIkg1eVAAAAnk"]
[Wed Sep 30 01:10:24.276176 2026] [security2:error] [pid 270884:tid 271100] [client 116.73.178.100:50267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.178.73.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "counciloftherealms.com"] [uri "/xmlrpc.php"] [unique_id "ary14CGeq9LtYp4zuPOlNgAAAFE"]
[Wed Sep 30 01:10:24.276255 2026] [security2:error] [pid 270884:tid 271100] [client 116.73.178.100:50267] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "counciloftherealms.com"] [uri "/xmlrpc.php"] [unique_id "ary14CGeq9LtYp4zuPOlNgAAAFE"]
[Wed Sep 30 01:10:24.336269 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.336547 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.366141 2026] [security2:error] [pid 276059:tid 276272] [client 52.231.30.175:38781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/inputs.php"] [unique_id "ary14HtqdHBwD77138e2fAAAAdw"]
[Wed Sep 30 01:10:24.424514 2026] [security2:error] [pid 270884:tid 271088] [client 20.58.177.98:45612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/177.php"] [unique_id "ary14CGeq9LtYp4zuPOlRQAAAEU"]
[Wed Sep 30 01:10:24.427535 2026] [security2:error] [pid 276059:tid 276307] [client 20.211.90.37:39961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/goat1.php"] [unique_id "ary14HtqdHBwD77138e2fQAAAf8"]
[Wed Sep 30 01:10:24.437781 2026] [security2:error] [pid 276620:tid 276863] [client 130.131.227.119:16080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/c1.php"] [unique_id "ary14NPAdfEWqmGIkg1eXAAAAnw"]
[Wed Sep 30 01:10:24.439938 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.440389 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.476801 2026] [security2:error] [pid 276059:tid 276240] [client 20.194.5.96:25352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/gaxby.php"] [unique_id "ary14HtqdHBwD77138e2gAAAAbw"]
[Wed Sep 30 01:10:24.528503 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.532193 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.577957 2026] [access_compat:error] [pid 276620:tid 276867] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:24.578219 2026] [access_compat:error] [pid 276620:tid 276867] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:24.595817 2026] [security2:error] [pid 276620:tid 276875] [client 130.131.227.119:3926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/index.php/feed/atom/"] [unique_id "ary14NPAdfEWqmGIkg1eYQAAAog"]
[Wed Sep 30 01:10:24.602932 2026] [security2:error] [pid 276620:tid 276770] [client 168.100.149.249:49014] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7ac704ce03c758af7b89c4cd7e992aa6.1ea.css.gz"] [unique_id "ary14NPAdfEWqmGIkg1eYgACH3s"]
[Wed Sep 30 01:10:24.629393 2026] [security2:error] [pid 270884:tid 271037] [client 52.231.30.175:40145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/classwithtostring.php"] [unique_id "ary14CGeq9LtYp4zuPOlSwAAABI"]
[Wed Sep 30 01:10:24.660704 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.660973 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.698531 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.698778 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:41900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.736534 2026] [security2:error] [pid 270884:tid 271110] [client 45.138.12.48:45052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.graphicdesignmmd.com"] [uri "/wp-links-opml.php"] [unique_id "ary14CGeq9LtYp4zuPOlTQAAAFs"]
[Wed Sep 30 01:10:24.763707 2026] [security2:error] [pid 276059:tid 276223] [client 130.131.227.119:42908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/root.php"] [unique_id "ary14HtqdHBwD77138e2gQAAAas"]
[Wed Sep 30 01:10:24.789318 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.789594 2026] [access_compat:error] [pid 276620:tid 276843] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.791591 2026] [security2:error] [pid 276620:tid 276792] [client 20.58.177.98:49959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ccc.php"] [unique_id "ary14NPAdfEWqmGIkg1eaQAAAjU"]
[Wed Sep 30 01:10:24.850819 2026] [security2:error] [pid 270884:tid 271078] [client 103.168.67.253:23560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary14CGeq9LtYp4zuPOlUgAAADs"]
[Wed Sep 30 01:10:24.892311 2026] [security2:error] [pid 270884:tid 271020] [client 52.231.30.175:40080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/adminfuns.php"] [unique_id "ary14CGeq9LtYp4zuPOlUwAAAAE"]
[Wed Sep 30 01:10:24.934434 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:12793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.934694 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:12793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:24.936524 2026] [security2:error] [pid 276620:tid 276811] [client 130.131.227.119:56034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/shell.php"] [unique_id "ary14NPAdfEWqmGIkg1ecQAAAkg"]
[Wed Sep 30 01:10:24.973500 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:24.973768 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.009469 2026] [security2:error] [pid 276620:tid 276881] [client 20.211.90.37:40440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/chosen.php"] [unique_id "ary14dPAdfEWqmGIkg1edAAAAo4"]
[Wed Sep 30 01:10:25.023076 2026] [security2:error] [pid 270884:tid 271040] [client 20.28.180.172:34286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/909.php"] [unique_id "ary14SGeq9LtYp4zuPOlWgAAABU"]
[Wed Sep 30 01:10:25.038338 2026] [security2:error] [pid 276620:tid 276785] [client 37.41.16.35:60024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary14dPAdfEWqmGIkg1edgAAAi4"]
[Wed Sep 30 01:10:25.038472 2026] [security2:error] [pid 276620:tid 276785] [client 37.41.16.35:60024] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary14dPAdfEWqmGIkg1edgAAAi4"]
[Wed Sep 30 01:10:25.039086 2026] [security2:error] [pid 276620:tid 276883] [client 45.89.242.88:55861] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14dPAdfEWqmGIkg1edwAAApA"]
[Wed Sep 30 01:10:25.043079 2026] [access_compat:error] [pid 276620:tid 276870] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:25.043316 2026] [access_compat:error] [pid 276620:tid 276870] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:25.063872 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.064119 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.085694 2026] [security2:error] [pid 270884:tid 271041] [client 4.240.25.22:18753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary14SGeq9LtYp4zuPOlXAAAABY"]
[Wed Sep 30 01:10:25.089659 2026] [security2:error] [pid 276620:tid 276764] [client 130.131.227.119:56033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/user/index.php"] [unique_id "ary14dPAdfEWqmGIkg1eeQAAAhk"]
[Wed Sep 30 01:10:25.106151 2026] [security2:error] [pid 276620:tid 276789] [client 216.73.216.46:41900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary14dPAdfEWqmGIkg1eegAAAjI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAwL25vZGUwL21lbW9yeTM5OS9ub2RlMC94ODY%3D
[Wed Sep 30 01:10:25.131954 2026] [security2:error] [pid 270884:tid 271062] [client 147.92.98.194:9893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.98.92.147.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "davidgatti.com"] [uri "/xmlrpc.php"] [unique_id "ary14SGeq9LtYp4zuPOlWwAAACs"]
[Wed Sep 30 01:10:25.132029 2026] [security2:error] [pid 276620:tid 276802] [client 20.58.177.98:45602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/0xD.php"] [unique_id "ary14dPAdfEWqmGIkg1eewAAAj8"]
[Wed Sep 30 01:10:25.132119 2026] [security2:error] [pid 270884:tid 271062] [client 147.92.98.194:9893] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "davidgatti.com"] [uri "/xmlrpc.php"] [unique_id "ary14SGeq9LtYp4zuPOlWwAAACs"]
[Wed Sep 30 01:10:25.152499 2026] [security2:error] [pid 276620:tid 276788] [client 52.231.30.175:40102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/222.php"] [unique_id "ary14dPAdfEWqmGIkg1efQAAAjE"]
[Wed Sep 30 01:10:25.156980 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.157263 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.207743 2026] [security2:error] [pid 276620:tid 276821] [client 85.203.36.100:38833] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14dPAdfEWqmGIkg1egAAAAlI"]
[Wed Sep 30 01:10:25.246343 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.246619 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.250989 2026] [security2:error] [pid 276620:tid 276886] [client 130.131.227.119:16118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ary14dPAdfEWqmGIkg1egwAAApM"]
[Wed Sep 30 01:10:25.261719 2026] [security2:error] [pid 276620:tid 276862] [client 85.203.36.103:30225] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14dPAdfEWqmGIkg1egQAAAns"]
[Wed Sep 30 01:10:25.261897 2026] [security2:error] [pid 270884:tid 271030] [client 20.219.19.141:20858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/gaxby.php"] [unique_id "ary14SGeq9LtYp4zuPOlXwAAAAs"]
[Wed Sep 30 01:10:25.347657 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:12793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.347935 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:12793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.421753 2026] [security2:error] [pid 276059:tid 276208] [client 52.231.30.175:40119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/BDKR28WP.php"] [unique_id "ary14XtqdHBwD77138e2hQAAAZ0"]
[Wed Sep 30 01:10:25.434892 2026] [security2:error] [pid 276059:tid 276275] [client 130.131.227.119:3467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-header-json.php"] [unique_id "ary14XtqdHBwD77138e2hgAAAd8"]
[Wed Sep 30 01:10:25.444097 2026] [access_compat:error] [pid 276620:tid 276876] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.444407 2026] [access_compat:error] [pid 276620:tid 276876] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.492960 2026] [security2:error] [pid 276059:tid 276217] [client 85.203.36.95:42425] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/abcd.php"] [unique_id "ary14XtqdHBwD77138e2hwAAAaU"]
[Wed Sep 30 01:10:25.518894 2026] [security2:error] [pid 270884:tid 271028] [client 20.194.5.96:25042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/dh9u7.php"] [unique_id "ary14SGeq9LtYp4zuPOlagAAAAk"]
[Wed Sep 30 01:10:25.520911 2026] [security2:error] [pid 270884:tid 271036] [client 85.203.36.96:61831] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14SGeq9LtYp4zuPOlawAAABE"]
[Wed Sep 30 01:10:25.525798 2026] [security2:error] [pid 276059:tid 276198] [client 85.203.36.97:51903] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14XtqdHBwD77138e2iwAAAZM"]
[Wed Sep 30 01:10:25.528959 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.529204 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.540219 2026] [access_compat:error] [pid 276620:tid 276832] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:25.540500 2026] [access_compat:error] [pid 276620:tid 276832] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:25.545730 2026] [security2:error] [pid 276059:tid 276287] [client 85.203.36.89:36805] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14XtqdHBwD77138e2iAAAAes"]
[Wed Sep 30 01:10:25.608256 2026] [security2:error] [pid 270884:tid 271051] [client 130.131.227.119:56019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/zup.php"] [unique_id "ary14SGeq9LtYp4zuPOlbgAAACA"]
[Wed Sep 30 01:10:25.619935 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.620198 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.620447 2026] [security2:error] [pid 276059:tid 276261] [client 207.248.0.198:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary14XtqdHBwD77138e2jAAAAdE"]
[Wed Sep 30 01:10:25.672350 2026] [security2:error] [pid 270884:tid 271044] [client 85.203.36.122:50431] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/abcd.php"] [unique_id "ary14SGeq9LtYp4zuPOlbwAAABk"]
[Wed Sep 30 01:10:25.677060 2026] [security2:error] [pid 270884:tid 271139] [client 20.211.90.37:40384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-cron.php"] [unique_id "ary14SGeq9LtYp4zuPOlcAAAAHg"]
[Wed Sep 30 01:10:25.682885 2026] [security2:error] [pid 270884:tid 271105] [client 52.231.30.175:40107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp.php"] [unique_id "ary14SGeq9LtYp4zuPOlcQAAAFY"]
[Wed Sep 30 01:10:25.710715 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.711001 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.768481 2026] [security2:error] [pid 270884:tid 271126] [client 216.73.216.46:12793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary14SGeq9LtYp4zuPOldQAAAGs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvbWVtb3J5OTIvbm9kZTAvbWVtb3J5ODE%3D
[Wed Sep 30 01:10:25.773071 2026] [security2:error] [pid 270884:tid 271121] [client 130.131.227.119:3956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/a9.php"] [unique_id "ary14SGeq9LtYp4zuPOldgAAAGY"]
[Wed Sep 30 01:10:25.783832 2026] [security2:error] [pid 270884:tid 271059] [client 20.58.177.98:45569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/sallu.php"] [unique_id "ary14SGeq9LtYp4zuPOldwAAACg"]
[Wed Sep 30 01:10:25.802542 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.802815 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.892851 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:25.893122 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:47236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:25.937481 2026] [security2:error] [pid 270884:tid 271040] [client 130.131.227.119:3944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/admin/index.php"] [unique_id "ary14SGeq9LtYp4zuPOlfAAAABU"]
[Wed Sep 30 01:10:25.957698 2026] [security2:error] [pid 270884:tid 271050] [client 20.213.164.196:21329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/xtt.php"] [unique_id "ary14SGeq9LtYp4zuPOlfQAAAB8"]
[Wed Sep 30 01:10:25.965405 2026] [security2:error] [pid 270884:tid 271030] [client 52.231.30.175:40098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/simple.php"] [unique_id "ary14SGeq9LtYp4zuPOlfgAAAAs"]
[Wed Sep 30 01:10:26.031944 2026] [access_compat:error] [pid 276620:tid 276824] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:26.032200 2026] [access_compat:error] [pid 276620:tid 276824] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:26.035242 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.035516 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.082547 2026] [security2:error] [pid 270884:tid 271064] [client 20.194.5.96:25246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/yvnqcuic.php"] [unique_id "ary14iGeq9LtYp4zuPOlhQAAAC0"]
[Wed Sep 30 01:10:26.099602 2026] [security2:error] [pid 270884:tid 271042] [client 130.131.227.119:3736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/makeasmtp.php"] [unique_id "ary14iGeq9LtYp4zuPOlhgAAABc"]
[Wed Sep 30 01:10:26.139334 2026] [security2:error] [pid 270884:tid 271054] [client 4.240.25.22:13819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.traderootsltd.com"] [uri "/wp.php"] [unique_id "ary14iGeq9LtYp4zuPOliAAAACM"]
[Wed Sep 30 01:10:26.150520 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.151028 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.217338 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.217616 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.234591 2026] [security2:error] [pid 270884:tid 271024] [client 52.231.30.175:40127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/chosen.php"] [unique_id "ary14iGeq9LtYp4zuPOljgAAAAU"]
[Wed Sep 30 01:10:26.266136 2026] [security2:error] [pid 270884:tid 271118] [client 130.131.227.119:3491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/paku.php"] [unique_id "ary14iGeq9LtYp4zuPOlkAAAAGM"]
[Wed Sep 30 01:10:26.297675 2026] [security2:error] [pid 276620:tid 276800] [client 216.73.216.46:47236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary14tPAdfEWqmGIkg1ekgAAAj0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY4L25vZGUwL21lbW9yeTM5MS9ub2RlMA%3D%3D
[Wed Sep 30 01:10:26.308608 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.308895 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.347312 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.347596 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.375314 2026] [security2:error] [pid 270884:tid 271026] [client 49.37.102.248:56186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary14iGeq9LtYp4zuPOlkwAAAAc"]
[Wed Sep 30 01:10:26.375558 2026] [security2:error] [pid 270884:tid 271026] [client 49.37.102.248:56186] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary14iGeq9LtYp4zuPOlkwAAAAc"]
[Wed Sep 30 01:10:26.432909 2026] [security2:error] [pid 276620:tid 276867] [client 130.131.227.119:3943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/rtx.php"] [unique_id "ary14tPAdfEWqmGIkg1ekwAAAoA"]
[Wed Sep 30 01:10:26.443479 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.443928 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.456254 2026] [security2:error] [pid 270884:tid 271059] [client 20.194.5.96:25277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/koiy.php"] [unique_id "ary14iGeq9LtYp4zuPOlmgAAACg"]
[Wed Sep 30 01:10:26.486910 2026] [security2:error] [pid 276620:tid 276863] [client 20.70.173.30:59547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/samll.php"] [unique_id "ary14tPAdfEWqmGIkg1elAAAAnw"]
[Wed Sep 30 01:10:26.497822 2026] [security2:error] [pid 276620:tid 276799] [client 52.231.30.175:40112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/als.php"] [unique_id "ary14tPAdfEWqmGIkg1elQAAAjw"]
[Wed Sep 30 01:10:26.530049 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.530315 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:32020] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.549993 2026] [security2:error] [pid 270884:tid 271094] [client 85.203.36.103:24249] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14iGeq9LtYp4zuPOlnQAAAEs"]
[Wed Sep 30 01:10:26.574768 2026] [access_compat:error] [pid 276620:tid 276793] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:26.575047 2026] [access_compat:error] [pid 276620:tid 276793] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:26.602029 2026] [security2:error] [pid 270884:tid 271100] [client 130.131.227.119:3772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/update/da222.php"] [unique_id "ary14iGeq9LtYp4zuPOloQAAAFE"]
[Wed Sep 30 01:10:26.605957 2026] [security2:error] [pid 270884:tid 271031] [client 168.100.149.96:54386] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/8307800417f860ffa727e0e873ca43c7.38a.css.gz"] [unique_id "ary14iGeq9LtYp4zuPOloAAADBw"]
[Wed Sep 30 01:10:26.617161 2026] [security2:error] [pid 270884:tid 271060] [client 20.58.177.98:49983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/01.php"] [unique_id "ary14iGeq9LtYp4zuPOlowAAACk"]
[Wed Sep 30 01:10:26.621385 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.621645 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.710763 2026] [security2:error] [pid 270884:tid 271040] [client 85.203.36.115:22373] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14iGeq9LtYp4zuPOlpAAAABU"]
[Wed Sep 30 01:10:26.714911 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.715391 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.754469 2026] [core:error] [pid 270884:tid 271042] [client 74.7.175.165:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:26.754488 2026] [core:error] [pid 270884:tid 271042] [client 74.7.175.165:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:26.754606 2026] [security2:error] [pid 270884:tid 271042] [client 74.7.175.165:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.grupowebmex.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "ary14iGeq9LtYp4zuPOlqwAAABc"]
[Wed Sep 30 01:10:26.760697 2026] [security2:error] [pid 270884:tid 271142] [client 85.203.36.117:23249] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/cord.php"] [unique_id "ary14iGeq9LtYp4zuPOlrQAAAHs"]
[Wed Sep 30 01:10:26.761085 2026] [security2:error] [pid 270884:tid 271077] [client 20.211.90.37:40410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/yanz.php"] [unique_id "ary14iGeq9LtYp4zuPOlrgAAADo"]
[Wed Sep 30 01:10:26.762142 2026] [security2:error] [pid 270884:tid 271113] [client 4.240.25.22:63656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/new.php"] [unique_id "ary14iGeq9LtYp4zuPOlrwAAAF4"]
[Wed Sep 30 01:10:26.763544 2026] [security2:error] [pid 270884:tid 271101] [client 52.231.30.175:40124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/admin.php"] [unique_id "ary14iGeq9LtYp4zuPOlsAAAAFI"]
[Wed Sep 30 01:10:26.766400 2026] [security2:error] [pid 270884:tid 271129] [client 20.28.180.172:62377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-admin/css/bolt.php"] [unique_id "ary14iGeq9LtYp4zuPOlsQAAAG4"]
[Wed Sep 30 01:10:26.791766 2026] [security2:error] [pid 276620:tid 276835] [client 74.7.175.165:46322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.grupowebmex.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "ary14tPAdfEWqmGIkg1elwACYCk"]
[Wed Sep 30 01:10:26.804073 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.804375 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.861210 2026] [security2:error] [pid 270884:tid 271068] [client 20.219.19.141:20823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/dh9u7.php"] [unique_id "ary14iGeq9LtYp4zuPOltAAAADE"]
[Wed Sep 30 01:10:26.881189 2026] [security2:error] [pid 276620:tid 276790] [client 130.131.227.119:3513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/min.php"] [unique_id "ary14tPAdfEWqmGIkg1emgAAAjM"]
[Wed Sep 30 01:10:26.892077 2026] [security2:error] [pid 270884:tid 271141] [client 74.7.175.132:40538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "afghanjudofederation-af.accessart.af"] [uri "/robots.txt"] [unique_id "ary14iGeq9LtYp4zuPOluwAAegc"]
[Wed Sep 30 01:10:26.894708 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.894966 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:26.920554 2026] [security2:error] [pid 270884:tid 271070] [client 20.194.5.96:25025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wordfence-waf.php"] [unique_id "ary14iGeq9LtYp4zuPOlvwAAADM"]
[Wed Sep 30 01:10:26.950252 2026] [security2:error] [pid 270884:tid 271079] [client 216.73.216.46:32020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary14iGeq9LtYp4zuPOlwQAAADw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTA2L25vZGUwL21lbW9yeTM0OA%3D%3D
[Wed Sep 30 01:10:26.984226 2026] [security2:error] [pid 276620:tid 276775] [client 20.58.177.98:49932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ab.php"] [unique_id "ary14tPAdfEWqmGIkg1emwAAAiQ"]
[Wed Sep 30 01:10:26.998706 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:26.999138 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.010520 2026] [security2:error] [pid 270884:tid 271044] [client 4.240.25.22:18693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/mac.php"] [unique_id "ary14yGeq9LtYp4zuPOlxgAAABk"]
[Wed Sep 30 01:10:27.031547 2026] [security2:error] [pid 270884:tid 271046] [client 130.131.227.119:56050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "ary14yGeq9LtYp4zuPOlxwAAABs"]
[Wed Sep 30 01:10:27.041841 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:27.042134 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:27.046453 2026] [security2:error] [pid 276620:tid 276868] [client 52.231.30.175:40143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/f35.php"] [unique_id "ary149PAdfEWqmGIkg1enQAAAoE"]
[Wed Sep 30 01:10:27.051451 2026] [security2:error] [pid 270884:tid 271080] [client 85.203.36.112:34753] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary14yGeq9LtYp4zuPOlywAAAD0"]
[Wed Sep 30 01:10:27.076218 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.076485 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:4698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.092723 2026] [security2:error] [pid 270884:tid 271055] [client 85.203.36.116:64925] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14yGeq9LtYp4zuPOlyAAAACQ"]
[Wed Sep 30 01:10:27.099257 2026] [security2:error] [pid 270884:tid 271094] [client 85.203.36.95:52957] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14yGeq9LtYp4zuPOlygAAAEs"]
[Wed Sep 30 01:10:27.099734 2026] [security2:error] [pid 270884:tid 271048] [client 85.203.36.87:43937] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary14yGeq9LtYp4zuPOlyQAAAB0"]
[Wed Sep 30 01:10:27.157732 2026] [security2:error] [pid 270884:tid 271090] [client 20.70.173.30:8133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/term.php"] [unique_id "ary14yGeq9LtYp4zuPOl0gAAAEc"]
[Wed Sep 30 01:10:27.167886 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.168164 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.189263 2026] [security2:error] [pid 270884:tid 270907] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary14yGeq9LtYp4zuPOl1QAALRU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=c17ff36b55942b164a8a1185052c074e&start=210&t=21812
[Wed Sep 30 01:10:27.190074 2026] [security2:error] [pid 270884:tid 270907] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary14yGeq9LtYp4zuPOl1QAALRU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=c17ff36b55942b164a8a1185052c074e&start=210&t=21812
[Wed Sep 30 01:10:27.190594 2026] [security2:error] [pid 270884:tid 271132] [client 130.131.227.119:42892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/themes/min.php"] [unique_id "ary14yGeq9LtYp4zuPOl1gAAAHE"]
[Wed Sep 30 01:10:27.231131 2026] [security2:error] [pid 270884:tid 271039] [client 20.219.2.60:11889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/admin/index.php"] [unique_id "ary14yGeq9LtYp4zuPOl2AAAABQ"]
[Wed Sep 30 01:10:27.240073 2026] [security2:error] [pid 270884:tid 271142] [client 20.28.180.172:29585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/BtOCXH4W1V5.php"] [unique_id "ary14yGeq9LtYp4zuPOl2QAAAHs"]
[Wed Sep 30 01:10:27.260475 2026] [security2:error] [pid 270884:tid 271119] [client 20.194.30.107:17410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/edit.php"] [unique_id "ary14yGeq9LtYp4zuPOl2wAAAGQ"]
[Wed Sep 30 01:10:27.260856 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.261121 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.290696 2026] [security2:error] [pid 270884:tid 271054] [client 20.194.5.96:25039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wp5.php"] [unique_id "ary14yGeq9LtYp4zuPOl3AAAACM"]
[Wed Sep 30 01:10:27.317348 2026] [security2:error] [pid 270884:tid 271021] [client 52.231.30.175:40093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/aaa.php"] [unique_id "ary14yGeq9LtYp4zuPOl3gAAAAI"]
[Wed Sep 30 01:10:27.351169 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.351511 2026] [access_compat:error] [pid 270884:tid 271133] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.355899 2026] [security2:error] [pid 270884:tid 271091] [client 130.131.227.119:16089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "ary14yGeq9LtYp4zuPOl4wAAAEg"]
[Wed Sep 30 01:10:27.379151 2026] [security2:error] [pid 270884:tid 271036] [client 20.58.177.98:45587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/xwpg.php"] [unique_id "ary14yGeq9LtYp4zuPOl5QAAABE"]
[Wed Sep 30 01:10:27.442282 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.442751 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.494426 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:4698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary14yGeq9LtYp4zuPOl7QAAAAk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL21lbW9yeTMwOS9ub2RlMC9odWdlcGFnZXM%3D
[Wed Sep 30 01:10:27.518069 2026] [security2:error] [pid 270884:tid 271047] [client 45.138.12.32:44812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rde.xnn.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary14yGeq9LtYp4zuPOl7wAAABw"]
[Wed Sep 30 01:10:27.537310 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.537762 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.570155 2026] [security2:error] [pid 276620:tid 276769] [client 85.203.36.87:35617] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/css/colors/wp-login.php"] [unique_id "ary149PAdfEWqmGIkg1eqAAAAh4"]
[Wed Sep 30 01:10:27.570378 2026] [access_compat:error] [pid 276620:tid 276811] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:27.570648 2026] [access_compat:error] [pid 276620:tid 276811] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:27.588578 2026] [security2:error] [pid 270884:tid 271037] [client 52.231.30.175:40072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/gecko.php"] [unique_id "ary14yGeq9LtYp4zuPOl8wAAABI"]
[Wed Sep 30 01:10:27.622584 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.622932 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.651741 2026] [security2:error] [pid 276059:tid 276245] [client 130.131.227.119:3464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ary143tqdHBwD77138e2lQAAAcE"]
[Wed Sep 30 01:10:27.652868 2026] [security2:error] [pid 270884:tid 270935] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary14yGeq9LtYp4zuPOl_AAATDE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ded547a83bcd23a094f6a0443fa42201&start=210&t=21812
[Wed Sep 30 01:10:27.652892 2026] [security2:error] [pid 270884:tid 270935] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary14yGeq9LtYp4zuPOl_AAATDE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=ded547a83bcd23a094f6a0443fa42201&start=210&t=21812
[Wed Sep 30 01:10:27.653685 2026] [security2:error] [pid 270884:tid 271137] [client 104.207.45.207:40047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.45.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary14yGeq9LtYp4zuPOl-wAAAHY"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:27.714614 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.714893 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.724153 2026] [security2:error] [pid 276620:tid 276808] [client 52.172.226.14:31067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary149PAdfEWqmGIkg1eqgAAAkU"]
[Wed Sep 30 01:10:27.805235 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.805506 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.823296 2026] [security2:error] [pid 270884:tid 271101] [client 130.131.227.119:42889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-info.php"] [unique_id "ary14yGeq9LtYp4zuPOmBQAAAFI"]
[Wed Sep 30 01:10:27.859647 2026] [security2:error] [pid 270884:tid 271070] [client 52.231.30.175:40073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/xiugai.php"] [unique_id "ary14yGeq9LtYp4zuPOmCgAAADM"]
[Wed Sep 30 01:10:27.889222 2026] [security2:error] [pid 276059:tid 276279] [client 203.122.45.246:55747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary143tqdHBwD77138e2lgAAAeM"]
[Wed Sep 30 01:10:27.889387 2026] [security2:error] [pid 276059:tid 276279] [client 203.122.45.246:55747] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary143tqdHBwD77138e2lgAAAeM"]
[Wed Sep 30 01:10:27.898922 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.899187 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.990214 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:27.990493 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:27.990549 2026] [security2:error] [pid 276059:tid 276242] [client 20.194.96.176:34442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wp_blog_footer.php"] [unique_id "ary143tqdHBwD77138e2mAAAAb4"]
[Wed Sep 30 01:10:27.992900 2026] [security2:error] [pid 276059:tid 276263] [client 130.131.227.119:16090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-wordfence-waf.php"] [unique_id "ary143tqdHBwD77138e2mQAAAdM"]
[Wed Sep 30 01:10:28.056459 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:28.056740 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:28.086204 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.086506 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.131358 2026] [security2:error] [pid 270884:tid 271031] [client 20.58.177.98:45611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/flamini.php"] [unique_id "ary15CGeq9LtYp4zuPOmHgAAAAw"]
[Wed Sep 30 01:10:28.133509 2026] [security2:error] [pid 270884:tid 271090] [client 52.231.30.175:38758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/inx.php"] [unique_id "ary15CGeq9LtYp4zuPOmHwAAAEc"]
[Wed Sep 30 01:10:28.156055 2026] [security2:error] [pid 276059:tid 276320] [client 130.131.227.119:42906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/ws49.php"] [unique_id "ary15HtqdHBwD77138e2mwAAAgw"]
[Wed Sep 30 01:10:28.175732 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.176281 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.201059 2026] [security2:error] [pid 270884:tid 271139] [client 104.207.53.176:45919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.53.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary15CGeq9LtYp4zuPOmIQAAAHg"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:28.203578 2026] [security2:error] [pid 270884:tid 271140] [client 52.172.226.14:18632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary15CGeq9LtYp4zuPOmJAAAAHk"]
[Wed Sep 30 01:10:28.205248 2026] [security2:error] [pid 270884:tid 271119] [client 4.240.25.22:63653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/ops.php"] [unique_id "ary15CGeq9LtYp4zuPOmJQAAAGQ"]
[Wed Sep 30 01:10:28.234439 2026] [security2:error] [pid 276620:tid 276851] [client 85.203.36.116:30659] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary15NPAdfEWqmGIkg1erAAAAnA"]
[Wed Sep 30 01:10:28.244478 2026] [security2:error] [pid 270884:tid 271091] [client 178.211.139.240:60759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stemresourcepartners.com"] [uri "/postnews.php"] [unique_id "ary15CGeq9LtYp4zuPOmJwAAAEg"]
[Wed Sep 30 01:10:28.267697 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.267981 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.322026 2026] [security2:error] [pid 270884:tid 271036] [client 130.131.227.119:16096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/xxx.php"] [unique_id "ary15CGeq9LtYp4zuPOmLQAAABE"]
[Wed Sep 30 01:10:28.360937 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.361388 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.375940 2026] [security2:error] [pid 270884:tid 271146] [client 85.203.36.86:56991] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15CGeq9LtYp4zuPOmLwAAAH8"]
[Wed Sep 30 01:10:28.376767 2026] [security2:error] [pid 276620:tid 276764] [client 74.7.242.1:48002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary15NPAdfEWqmGIkg1ergAAAhk"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:10:28.379387 2026] [security2:error] [pid 276620:tid 276813] [client 182.75.216.230:60607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary15NPAdfEWqmGIkg1erwAAAko"]
[Wed Sep 30 01:10:28.379546 2026] [security2:error] [pid 276620:tid 276813] [client 182.75.216.230:60607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary15NPAdfEWqmGIkg1erwAAAko"]
[Wed Sep 30 01:10:28.385278 2026] [security2:error] [pid 276059:tid 276262] [client 45.89.242.87:37033] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary15HtqdHBwD77138e2nQAAAdI"]
[Wed Sep 30 01:10:28.397605 2026] [security2:error] [pid 270884:tid 271068] [client 122.173.27.10:28114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary15CGeq9LtYp4zuPOmMAAAADE"]
[Wed Sep 30 01:10:28.397755 2026] [security2:error] [pid 270884:tid 271068] [client 122.173.27.10:28114] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary15CGeq9LtYp4zuPOmMAAAADE"]
[Wed Sep 30 01:10:28.405497 2026] [security2:error] [pid 276620:tid 276789] [client 20.194.5.96:25266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/em.php"] [unique_id "ary15NPAdfEWqmGIkg1esAAAAjI"]
[Wed Sep 30 01:10:28.406909 2026] [security2:error] [pid 270884:tid 271145] [client 52.231.30.175:40185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/11.php"] [unique_id "ary15CGeq9LtYp4zuPOmMwAAAH4"]
[Wed Sep 30 01:10:28.413562 2026] [security2:error] [pid 270884:tid 271026] [client 20.219.19.141:20800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/yvnqcuic.php"] [unique_id "ary15CGeq9LtYp4zuPOmNgAAAAc"]
[Wed Sep 30 01:10:28.455907 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.456412 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.487617 2026] [security2:error] [pid 276620:tid 276788] [client 130.131.227.119:3756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/0x.php"] [unique_id "ary15NPAdfEWqmGIkg1etQAAAjE"]
[Wed Sep 30 01:10:28.488426 2026] [security2:error] [pid 276059:tid 276237] [client 20.58.177.98:49963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/themes.php"] [unique_id "ary15HtqdHBwD77138e2owAAAbk"]
[Wed Sep 30 01:10:28.494655 2026] [security2:error] [pid 276059:tid 276126] [remote 57.141.14.2:64782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/xmlrpc.php"] [unique_id "ary15HtqdHBwD77138e2nwAB5z4"]
[Wed Sep 30 01:10:28.567513 2026] [security2:error] [pid 270884:tid 271029] [client 85.203.36.122:64317] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary15CGeq9LtYp4zuPOmPgAAAAo"]
[Wed Sep 30 01:10:28.567877 2026] [security2:error] [pid 270884:tid 271078] [client 85.203.36.109:33803] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15CGeq9LtYp4zuPOmPwAAADs"]
[Wed Sep 30 01:10:28.570026 2026] [security2:error] [pid 276620:tid 276849] [client 85.203.36.105:56935] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary15NPAdfEWqmGIkg1etwAAAm4"]
[Wed Sep 30 01:10:28.576099 2026] [security2:error] [pid 276620:tid 276873] [client 85.203.36.115:32387] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/cord.php"] [unique_id "ary15NPAdfEWqmGIkg1euAAAAoY"]
[Wed Sep 30 01:10:28.593383 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.593799 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.593802 2026] [access_compat:error] [pid 276620:tid 276812] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:28.594137 2026] [access_compat:error] [pid 276620:tid 276812] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:28.594442 2026] [security2:error] [pid 276059:tid 276313] [client 168.100.149.172:33394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/8b853f1006241e40296dcded22610e5a.1f3.css.gz"] [unique_id "ary15HtqdHBwD77138e2pAACBUE"]
[Wed Sep 30 01:10:28.611204 2026] [security2:error] [pid 276059:tid 276235] [client 20.70.173.30:37157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/f35.update.php"] [unique_id "ary15HtqdHBwD77138e2pQAAAbc"]
[Wed Sep 30 01:10:28.630798 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.631089 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.639936 2026] [security2:error] [pid 270884:tid 271105] [client 130.131.227.119:3492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/CDX1.php"] [unique_id "ary15CGeq9LtYp4zuPOmRgAAAFY"]
[Wed Sep 30 01:10:28.662722 2026] [security2:error] [pid 276059:tid 276212] [client 52.172.226.14:18685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/b.php"] [unique_id "ary15HtqdHBwD77138e2pgAAAaA"]
[Wed Sep 30 01:10:28.674925 2026] [security2:error] [pid 270884:tid 271117] [client 201.32.215.149:6770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary15CGeq9LtYp4zuPOmRwAAAGI"]
[Wed Sep 30 01:10:28.675039 2026] [security2:error] [pid 270884:tid 271117] [client 201.32.215.149:6770] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary15CGeq9LtYp4zuPOmRwAAAGI"]
[Wed Sep 30 01:10:28.678781 2026] [security2:error] [pid 276620:tid 276823] [client 52.231.30.175:40171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/File.php"] [unique_id "ary15NPAdfEWqmGIkg1evAAAAlQ"]
[Wed Sep 30 01:10:28.681031 2026] [core:error] [pid 276620:tid 276866] [client 202.61.233.150:41542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:28.681055 2026] [core:error] [pid 276620:tid 276866] [client 202.61.233.150:41542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:28.726988 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.727416 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.800978 2026] [security2:error] [pid 270884:tid 271084] [client 45.138.12.32:32202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jra.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary15CGeq9LtYp4zuPOmSgAAAEE"]
[Wed Sep 30 01:10:28.811793 2026] [security2:error] [pid 276059:tid 276257] [client 130.131.227.119:3950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/akcc.php"] [unique_id "ary15HtqdHBwD77138e2pwAAAc0"]
[Wed Sep 30 01:10:28.819599 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.820057 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:51333] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:28.824013 2026] [security2:error] [pid 270884:tid 271090] [client 85.203.36.96:53901] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/cord.php"] [unique_id "ary15CGeq9LtYp4zuPOmTAAAAEc"]
[Wed Sep 30 01:10:28.859371 2026] [security2:error] [pid 276620:tid 276885] [client 20.194.5.96:25072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/hp.php"] [unique_id "ary15NPAdfEWqmGIkg1ewQAAApI"]
[Wed Sep 30 01:10:28.896656 2026] [security2:error] [pid 270884:tid 271020] [client 216.73.216.46:51333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary15CGeq9LtYp4zuPOmUQAAAAE"]
[Wed Sep 30 01:10:28.943387 2026] [security2:error] [pid 276620:tid 276877] [client 52.231.30.175:40071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary15NPAdfEWqmGIkg1ewwAAAoo"]
[Wed Sep 30 01:10:28.967741 2026] [security2:error] [pid 270884:tid 271039] [client 20.211.90.37:40415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/config.php"] [unique_id "ary15CGeq9LtYp4zuPOmVAAAABQ"]
[Wed Sep 30 01:10:28.973775 2026] [security2:error] [pid 276620:tid 276818] [client 20.70.173.30:59551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/ohct.php"] [unique_id "ary15NPAdfEWqmGIkg1exAAAAk8"]
[Wed Sep 30 01:10:28.978987 2026] [security2:error] [pid 270884:tid 271126] [client 130.131.227.119:56031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ary15CGeq9LtYp4zuPOmWAAAAGs"]
[Wed Sep 30 01:10:28.994442 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:28.994884 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.075696 2026] [access_compat:error] [pid 276620:tid 276846] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:29.075975 2026] [access_compat:error] [pid 276620:tid 276846] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:29.091245 2026] [security2:error] [pid 276620:tid 276834] [client 20.58.177.98:49969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/0.php"] [unique_id "ary15dPAdfEWqmGIkg1exgAAAl8"]
[Wed Sep 30 01:10:29.123184 2026] [security2:error] [pid 270884:tid 271046] [client 202.179.95.79:50037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary15SGeq9LtYp4zuPOmYwAAABs"]
[Wed Sep 30 01:10:29.123187 2026] [security2:error] [pid 276620:tid 276770] [client 52.172.226.14:31102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/admin.php"] [unique_id "ary15dPAdfEWqmGIkg1eyAAAAh8"]
[Wed Sep 30 01:10:29.123344 2026] [security2:error] [pid 270884:tid 271046] [client 202.179.95.79:50037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary15SGeq9LtYp4zuPOmYwAAABs"]
[Wed Sep 30 01:10:29.137484 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:2326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.137754 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:2326] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.156820 2026] [security2:error] [pid 276620:tid 276763] [client 130.131.227.119:16112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/s.php"] [unique_id "ary15dPAdfEWqmGIkg1eyQAAAhg"]
[Wed Sep 30 01:10:29.178406 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.178675 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.220944 2026] [core:error] [pid 270884:tid 271075] [client 202.61.233.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:29.220972 2026] [core:error] [pid 270884:tid 271075] [client 202.61.233.150:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:29.223280 2026] [security2:error] [pid 276620:tid 276852] [client 52.231.30.175:40114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary15dPAdfEWqmGIkg1ezAAAAnE"]
[Wed Sep 30 01:10:29.223695 2026] [security2:error] [pid 270884:tid 271143] [client 4.240.25.22:8508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wsd.php"] [unique_id "ary15SGeq9LtYp4zuPOmaAAAAHw"]
[Wed Sep 30 01:10:29.269373 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.269715 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.325057 2026] [security2:error] [pid 270884:tid 271061] [client 130.131.227.119:4456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/sagax.php"] [unique_id "ary15SGeq9LtYp4zuPOmbQAAACo"]
[Wed Sep 30 01:10:29.342506 2026] [security2:error] [pid 270884:tid 271122] [client 137.184.216.239:56672] ModSecurity: Warning. Pattern match "^\\\\/$" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1452"] [id "9011111"] [msg "SQUID data collection"] [hostname "50.87.79.78"] [uri "/"] [unique_id "ary15SGeq9LtYp4zuPOmbgAAAGc"]
[Wed Sep 30 01:10:29.355606 2026] [security2:error] [pid 270884:tid 271047] [client 137.184.216.239:0] ModSecurity: Warning. Pattern match "^\\\\/$" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1452"] [id "9011111"] [msg "SQUID data collection"] [hostname "50.87.79.78"] [uri "/"] [unique_id "ary15SGeq9LtYp4zuPOmcQAAABw"]
[Wed Sep 30 01:10:29.362384 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.362831 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.384890 2026] [security2:error] [pid 270884:tid 271115] [client 20.219.19.141:20870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/koiy.php"] [unique_id "ary15SGeq9LtYp4zuPOmdAAAAGA"]
[Wed Sep 30 01:10:29.436099 2026] [security2:error] [pid 276059:tid 276322] [client 20.194.5.96:25217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wpuse.php"] [unique_id "ary15XtqdHBwD77138e2qQAAAg4"]
[Wed Sep 30 01:10:29.441097 2026] [security2:error] [pid 276059:tid 276289] [client 20.219.2.60:11658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tfm.php"] [unique_id "ary15XtqdHBwD77138e2qgAAAe0"]
[Wed Sep 30 01:10:29.451935 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.452226 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.484840 2026] [security2:error] [pid 270884:tid 271040] [client 52.231.30.175:40084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary15SGeq9LtYp4zuPOmdgAAABU"]
[Wed Sep 30 01:10:29.536222 2026] [security2:error] [pid 270884:tid 271085] [client 20.28.180.172:29463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/jlex.php"] [unique_id "ary15SGeq9LtYp4zuPOmfAAAAEI"]
[Wed Sep 30 01:10:29.541524 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.541799 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.555136 2026] [security2:error] [pid 270884:tid 271106] [client 216.73.216.46:2326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary15SGeq9LtYp4zuPOmfgAAAFc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1Mi9kcml2ZXIvY3B1NQ%3D%3D
[Wed Sep 30 01:10:29.600050 2026] [security2:error] [pid 270884:tid 271084] [client 52.172.226.14:31062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/fling.php"] [unique_id "ary15SGeq9LtYp4zuPOmgwAAAEE"]
[Wed Sep 30 01:10:29.615702 2026] [access_compat:error] [pid 276620:tid 276794] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:29.615982 2026] [access_compat:error] [pid 276620:tid 276794] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:29.629894 2026] [security2:error] [pid 270884:tid 271062] [client 45.89.242.91:28703] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15SGeq9LtYp4zuPOmhQAAACs"]
[Wed Sep 30 01:10:29.632522 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.632851 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.665982 2026] [security2:error] [pid 276620:tid 276817] [client 130.131.227.119:3908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ary15dPAdfEWqmGIkg1e0QAAAk4"]
[Wed Sep 30 01:10:29.716136 2026] [security2:error] [pid 270884:tid 271091] [client 20.58.177.98:45588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/opsh.php"] [unique_id "ary15SGeq9LtYp4zuPOmjAAAAEg"]
[Wed Sep 30 01:10:29.724213 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.724472 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.748969 2026] [security2:error] [pid 270884:tid 271112] [client 202.61.233.150:41556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.233.61.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesoapmage.com"] [uri "/index.php"] [unique_id "ary15SGeq9LtYp4zuPOmjQAAAF0"]
[Wed Sep 30 01:10:29.753550 2026] [security2:error] [pid 270884:tid 271140] [client 52.231.30.175:38735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary15SGeq9LtYp4zuPOmjgAAAHk"]
[Wed Sep 30 01:10:29.812413 2026] [security2:error] [pid 270884:tid 271030] [client 85.203.36.100:33831] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary15SGeq9LtYp4zuPOmkQAAAAs"]
[Wed Sep 30 01:10:29.814317 2026] [security2:error] [pid 276620:tid 276810] [client 182.69.182.151:8866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary15dPAdfEWqmGIkg1e1QAAAkc"]
[Wed Sep 30 01:10:29.814411 2026] [security2:error] [pid 276620:tid 276810] [client 182.69.182.151:8866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary15dPAdfEWqmGIkg1e1QAAAkc"]
[Wed Sep 30 01:10:29.818796 2026] [security2:error] [pid 276620:tid 276798] [client 20.194.5.96:25079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/sm.php"] [unique_id "ary15dPAdfEWqmGIkg1e1gAAAjs"]
[Wed Sep 30 01:10:29.819645 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.820074 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.823461 2026] [security2:error] [pid 276620:tid 276811] [client 130.131.227.119:56026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/uploads/admin.php"] [unique_id "ary15dPAdfEWqmGIkg1e1wAAAkg"]
[Wed Sep 30 01:10:29.889551 2026] [security2:error] [pid 270884:tid 271036] [client 45.138.12.32:32198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqk.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary15SGeq9LtYp4zuPOmlQAAABE"]
[Wed Sep 30 01:10:29.904987 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.905258 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:29.908836 2026] [security2:error] [pid 270884:tid 271145] [client 85.203.36.102:27571] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15SGeq9LtYp4zuPOmmAAAAH4"]
[Wed Sep 30 01:10:29.997235 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:29.997503 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.000475 2026] [security2:error] [pid 276620:tid 276761] [client 4.240.25.22:18808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/echkm.php"] [unique_id "ary15dPAdfEWqmGIkg1e2gAAAhY"]
[Wed Sep 30 01:10:30.001768 2026] [security2:error] [pid 276620:tid 276841] [client 20.204.42.136:35752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/ccou.php"] [unique_id "ary15tPAdfEWqmGIkg1e2wAAAmY"]
[Wed Sep 30 01:10:30.033652 2026] [security2:error] [pid 276620:tid 276785] [client 52.231.30.175:40191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary15tPAdfEWqmGIkg1e3AAAAi4"]
[Wed Sep 30 01:10:30.046650 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:30.046957 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:30.063232 2026] [security2:error] [pid 276620:tid 276864] [client 20.58.177.98:49928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/media.php"] [unique_id "ary15tPAdfEWqmGIkg1e3wAAAn0"]
[Wed Sep 30 01:10:30.079172 2026] [security2:error] [pid 276620:tid 276839] [client 52.172.226.14:31045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary15tPAdfEWqmGIkg1e4AAAAmQ"]
[Wed Sep 30 01:10:30.079667 2026] [security2:error] [pid 276620:tid 276853] [client 20.219.19.141:20801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wordfence-waf.php"] [unique_id "ary15tPAdfEWqmGIkg1e4QAAAnI"]
[Wed Sep 30 01:10:30.085610 2026] [security2:error] [pid 270884:tid 271050] [client 85.203.36.88:52531] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15iGeq9LtYp4zuPOmngAAAB8"]
[Wed Sep 30 01:10:30.090857 2026] [security2:error] [pid 270884:tid 271037] [client 85.203.36.108:55745] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/dex.php"] [unique_id "ary15iGeq9LtYp4zuPOmnwAAABI"]
[Wed Sep 30 01:10:30.092650 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.093105 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.094687 2026] [security2:error] [pid 276620:tid 276848] [client 85.203.36.94:39289] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary15tPAdfEWqmGIkg1e4gAAAm0"]
[Wed Sep 30 01:10:30.104565 2026] [security2:error] [pid 276620:tid 276764] [client 85.203.36.102:56461] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15tPAdfEWqmGIkg1e4wAAAhk"]
[Wed Sep 30 01:10:30.127671 2026] [security2:error] [pid 276059:tid 276202] [client 130.131.227.119:56036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/z.php"] [unique_id "ary15ntqdHBwD77138e2sAAAAZc"]
[Wed Sep 30 01:10:30.183851 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.184259 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.185025 2026] [security2:error] [pid 270884:tid 271076] [client 20.211.90.37:40433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/network.php"] [unique_id "ary15iGeq9LtYp4zuPOmpAAAADk"]
[Wed Sep 30 01:10:30.260204 2026] [core:error] [pid 270884:tid 271053] [client 202.61.233.150:41558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:30.260226 2026] [core:error] [pid 270884:tid 271053] [client 202.61.233.150:41558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:30.268289 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.268573 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.271730 2026] [security2:error] [pid 270884:tid 271066] [client 4.196.65.241:27265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/coffe.php"] [unique_id "ary15iGeq9LtYp4zuPOmpwAAAC8"]
[Wed Sep 30 01:10:30.287543 2026] [security2:error] [pid 270884:tid 271107] [client 130.131.227.119:4466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/f35.php"] [unique_id "ary15iGeq9LtYp4zuPOmqAAAAFg"]
[Wed Sep 30 01:10:30.314481 2026] [security2:error] [pid 270884:tid 271038] [client 52.231.30.175:40082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary15iGeq9LtYp4zuPOmqwAAABM"]
[Wed Sep 30 01:10:30.361145 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.361439 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.405915 2026] [security2:error] [pid 270884:tid 270957] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary15iGeq9LtYp4zuPOmsQAAf0M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=19331
[Wed Sep 30 01:10:30.405942 2026] [security2:error] [pid 270884:tid 270957] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary15iGeq9LtYp4zuPOmsQAAf0M"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=19331
[Wed Sep 30 01:10:30.438433 2026] [security2:error] [pid 276620:tid 276837] [client 130.131.227.119:3489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/file61.php"] [unique_id "ary15tPAdfEWqmGIkg1e5QAAAmI"]
[Wed Sep 30 01:10:30.441366 2026] [security2:error] [pid 270884:tid 270940] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary15iGeq9LtYp4zuPOmtAAASTY"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D59029
[Wed Sep 30 01:10:30.452045 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.452299 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.498133 2026] [security2:error] [pid 276620:tid 276812] [client 85.203.36.100:43127] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/dex.php"] [unique_id "ary15tPAdfEWqmGIkg1e5gAAAkk"]
[Wed Sep 30 01:10:30.520114 2026] [security2:error] [pid 270884:tid 271031] [client 103.168.67.253:59342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary15iGeq9LtYp4zuPOmvgAAAAw"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:30.521092 2026] [security2:error] [pid 270884:tid 271108] [client 20.194.5.96:25064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/mknobgkg.php"] [unique_id "ary15iGeq9LtYp4zuPOmvwAAAFk"]
[Wed Sep 30 01:10:30.540868 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.540926 2026] [access_compat:error] [pid 276620:tid 276882] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:30.541165 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.541183 2026] [access_compat:error] [pid 276620:tid 276882] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:30.544669 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:12573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/adminfuns.php"] [unique_id "ary15iGeq9LtYp4zuPOmwwAAAA0"]
[Wed Sep 30 01:10:30.550613 2026] [security2:error] [pid 276620:tid 276823] [client 85.203.36.114:20293] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary15tPAdfEWqmGIkg1e6AAAAlQ"]
[Wed Sep 30 01:10:30.575759 2026] [security2:error] [pid 270884:tid 271091] [client 52.231.30.175:40067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/media.php"] [unique_id "ary15iGeq9LtYp4zuPOmxQAAAEg"]
[Wed Sep 30 01:10:30.577269 2026] [security2:error] [pid 270884:tid 271048] [client 105.112.178.79:38571] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.prt.imz.mybluehost.me"] [uri "/__ss_probe_f7f77012f1deecb0abec87bb34d33519__"] [unique_id "ary15iGeq9LtYp4zuPOmxgAAAB0"]
[Wed Sep 30 01:10:30.585526 2026] [security2:error] [pid 276620:tid 276876] [client 130.131.227.119:16065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/mah.php"] [unique_id "ary15tPAdfEWqmGIkg1e6QAAAok"]
[Wed Sep 30 01:10:30.627768 2026] [security2:error] [pid 270884:tid 271133] [client 20.58.177.98:45595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/images.php"] [unique_id "ary15iGeq9LtYp4zuPOmywAAAHI"]
[Wed Sep 30 01:10:30.630685 2026] [security2:error] [pid 270884:tid 271126] [client 168.100.149.105:37666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/964feba3513cb5f5e7d463f393f71048.6bb.css.gz"] [unique_id "ary15iGeq9LtYp4zuPOmygAAa0o"]
[Wed Sep 30 01:10:30.633357 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.633603 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.724191 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.724500 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.760860 2026] [security2:error] [pid 270884:tid 271067] [client 130.131.227.119:2992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/mini.php"] [unique_id "ary15iGeq9LtYp4zuPOmzgAAADA"]
[Wed Sep 30 01:10:30.815326 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.815695 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.844767 2026] [security2:error] [pid 270884:tid 271046] [client 52.231.30.175:40089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/inso.php"] [unique_id "ary15iGeq9LtYp4zuPOm1AAAABs"]
[Wed Sep 30 01:10:30.879091 2026] [security2:error] [pid 270884:tid 271078] [client 43.227.131.37:35357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary15iGeq9LtYp4zuPOm1QAAADs"]
[Wed Sep 30 01:10:30.879203 2026] [security2:error] [pid 270884:tid 271078] [client 43.227.131.37:35357] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary15iGeq9LtYp4zuPOm1QAAADs"]
[Wed Sep 30 01:10:30.906818 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.907244 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:30.924629 2026] [security2:error] [pid 276620:tid 276844] [client 130.131.227.119:2985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/v.php"] [unique_id "ary15tPAdfEWqmGIkg1e6wAAAmk"]
[Wed Sep 30 01:10:30.946303 2026] [security2:error] [pid 270884:tid 271019] [client 20.28.180.172:60327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/lib.php"] [unique_id "ary15iGeq9LtYp4zuPOm2wAAAAA"]
[Wed Sep 30 01:10:30.977094 2026] [security2:error] [pid 270884:tid 271122] [client 20.70.173.30:7372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary15iGeq9LtYp4zuPOm4AAAAGc"]
[Wed Sep 30 01:10:30.997329 2026] [security2:error] [pid 270884:tid 271127] [client 57.141.14.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary15iGeq9LtYp4zuPOm4gAAAGw"]
[Wed Sep 30 01:10:30.998683 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:30.998941 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.045657 2026] [security2:error] [pid 276059:tid 276296] [client 52.172.226.14:18654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/alfa.php"] [unique_id "ary153tqdHBwD77138e2sgAAAfQ"]
[Wed Sep 30 01:10:31.048513 2026] [security2:error] [pid 270884:tid 271066] [client 20.70.173.30:33307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/media.php"] [unique_id "ary15yGeq9LtYp4zuPOm4wAAAC8"]
[Wed Sep 30 01:10:31.066081 2026] [security2:error] [pid 276620:tid 276766] [client 20.28.180.172:29569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cong.php"] [unique_id "ary159PAdfEWqmGIkg1e7QAAAhs"]
[Wed Sep 30 01:10:31.068382 2026] [access_compat:error] [pid 276620:tid 276860] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:31.068649 2026] [access_compat:error] [pid 276620:tid 276860] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:31.085254 2026] [security2:error] [pid 270884:tid 271053] [client 130.131.227.119:56000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-admin/images/admin.php"] [unique_id "ary15yGeq9LtYp4zuPOm5QAAACI"]
[Wed Sep 30 01:10:31.090545 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.091079 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.117793 2026] [security2:error] [pid 270884:tid 271058] [client 52.231.30.175:40075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/shiny.php"] [unique_id "ary15yGeq9LtYp4zuPOm5wAAACc"]
[Wed Sep 30 01:10:31.132723 2026] [security2:error] [pid 270884:tid 271038] [client 85.203.36.110:34869] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary15yGeq9LtYp4zuPOm6AAAABM"]
[Wed Sep 30 01:10:31.135714 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.19.141:20904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wp5.php"] [unique_id "ary15yGeq9LtYp4zuPOm6QAAAA4"]
[Wed Sep 30 01:10:31.178137 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.178451 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.189970 2026] [security2:error] [pid 276620:tid 276847] [client 20.58.177.98:45600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ops.php"] [unique_id "ary159PAdfEWqmGIkg1e7gAAAmw"]
[Wed Sep 30 01:10:31.197182 2026] [security2:error] [pid 270884:tid 271085] [client 20.194.5.96:25227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/dairg.php"] [unique_id "ary15yGeq9LtYp4zuPOm7wAAAEI"]
[Wed Sep 30 01:10:31.205630 2026] [security2:error] [pid 276620:tid 276760] [client 116.193.128.26:57315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary159PAdfEWqmGIkg1e7wAAAhU"]
[Wed Sep 30 01:10:31.206168 2026] [security2:error] [pid 276620:tid 276760] [client 116.193.128.26:57315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary159PAdfEWqmGIkg1e7wAAAhU"]
[Wed Sep 30 01:10:31.234896 2026] [http2:warn] [pid 251754:tid 251894] [client 52.167.144.206:59157] h2_stream(251754-1375-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:31.265430 2026] [security2:error] [pid 270884:tid 271060] [client 130.131.227.119:56011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary15yGeq9LtYp4zuPOm8QAAACk"]
[Wed Sep 30 01:10:31.269971 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.270244 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.283333 2026] [security2:error] [pid 276059:tid 276234] [client 85.203.36.89:55891] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary153tqdHBwD77138e2swAAAbY"]
[Wed Sep 30 01:10:31.298591 2026] [security2:error] [pid 276620:tid 276768] [client 202.61.233.150:46384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.233.61.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesoapmage.com"] [uri "/index.php"] [unique_id "ary159PAdfEWqmGIkg1e8QAAAh0"]
[Wed Sep 30 01:10:31.361220 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.361509 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.379731 2026] [security2:error] [pid 270884:tid 271083] [client 52.231.30.175:40110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/403dd.php"] [unique_id "ary15yGeq9LtYp4zuPOm8wAAAEA"]
[Wed Sep 30 01:10:31.406803 2026] [security2:error] [pid 270884:tid 271095] [client 20.70.173.30:59968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/kj.php"] [unique_id "ary15yGeq9LtYp4zuPOm9AAAAEw"]
[Wed Sep 30 01:10:31.419385 2026] [security2:error] [pid 276620:tid 276877] [client 20.211.90.37:40420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-2019.php"] [unique_id "ary159PAdfEWqmGIkg1e9AAAAoo"]
[Wed Sep 30 01:10:31.433310 2026] [security2:error] [pid 276620:tid 276773] [client 130.131.227.119:3712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-includes/Text/index.php"] [unique_id "ary159PAdfEWqmGIkg1e9QAAAiI"]
[Wed Sep 30 01:10:31.452922 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.453203 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.495965 2026] [security2:error] [pid 276620:tid 276770] [client 85.203.36.92:23485] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary159PAdfEWqmGIkg1e-AAAAh8"]
[Wed Sep 30 01:10:31.496410 2026] [security2:error] [pid 276620:tid 276863] [client 85.203.36.98:40851] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary159PAdfEWqmGIkg1e-QAAAnw"]
[Wed Sep 30 01:10:31.531063 2026] [access_compat:error] [pid 276620:tid 276859] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:31.531340 2026] [access_compat:error] [pid 276620:tid 276859] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:31.531420 2026] [security2:error] [pid 276620:tid 276793] [client 85.203.36.95:42071] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary159PAdfEWqmGIkg1e-wAAAjY"]
[Wed Sep 30 01:10:31.537141 2026] [security2:error] [pid 276620:tid 276831] [client 85.203.36.95:61635] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary159PAdfEWqmGIkg1e_AAAAlw"]
[Wed Sep 30 01:10:31.542784 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.543060 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.552265 2026] [security2:error] [pid 276620:tid 276865] [client 103.168.67.253:59344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary159PAdfEWqmGIkg1e_QAAAn4"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:31.642878 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.643154 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.645484 2026] [security2:error] [pid 276620:tid 276862] [client 103.211.18.63:56162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary159PAdfEWqmGIkg1fBAAAAns"]
[Wed Sep 30 01:10:31.646680 2026] [security2:error] [pid 276620:tid 276862] [client 103.211.18.63:56162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary159PAdfEWqmGIkg1fBAAAAns"]
[Wed Sep 30 01:10:31.654400 2026] [security2:error] [pid 276620:tid 276779] [client 52.172.226.14:18633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/222.php"] [unique_id "ary159PAdfEWqmGIkg1fBQAAAig"]
[Wed Sep 30 01:10:31.661242 2026] [security2:error] [pid 270884:tid 271056] [client 52.231.30.175:38756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/baba.php"] [unique_id "ary15yGeq9LtYp4zuPOnAwAAACU"]
[Wed Sep 30 01:10:31.692848 2026] [security2:error] [pid 276620:tid 276879] [client 130.131.227.119:2950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/wp-index.php"] [unique_id "ary159PAdfEWqmGIkg1fBgAAAow"]
[Wed Sep 30 01:10:31.698779 2026] [security2:error] [pid 276620:tid 276843] [client 20.194.96.176:34457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/robot.php"] [unique_id "ary159PAdfEWqmGIkg1fCQAAAmg"]
[Wed Sep 30 01:10:31.733028 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.733316 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:64049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.773237 2026] [security2:error] [pid 270884:tid 270975] [remote 47.128.113.99:43214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/231/ppp-pti-stage-protest-demos-against-minor-girl-rape"] [unique_id "ary15yGeq9LtYp4zuPOnBgAAc1U"]
[Wed Sep 30 01:10:31.775702 2026] [security2:error] [pid 270884:tid 271064] [client 20.213.164.196:55193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cochranlake.org"] [uri "/go.php"] [unique_id "ary15yGeq9LtYp4zuPOnCAAAAC0"]
[Wed Sep 30 01:10:31.783149 2026] [security2:error] [pid 276620:tid 276878] [client 20.58.177.98:45591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/mac.php"] [unique_id "ary159PAdfEWqmGIkg1fDQAAAos"]
[Wed Sep 30 01:10:31.783553 2026] [security2:error] [pid 276620:tid 276632] [remote 57.141.14.15:48466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "ary159PAdfEWqmGIkg1fCwACMAI"]
[Wed Sep 30 01:10:31.784945 2026] [security2:error] [pid 270884:tid 271139] [client 213.135.6.58:35618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.6.135.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.eklipza.com"] [uri "/wp-login.php"] [unique_id "ary15yGeq9LtYp4zuPOnBwAAAHg"]
[Wed Sep 30 01:10:31.827051 2026] [security2:error] [pid 276059:tid 276270] [client 45.89.242.88:50757] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary153tqdHBwD77138e2tAAAAdo"]
[Wed Sep 30 01:10:31.856454 2026] [security2:error] [pid 276620:tid 276791] [client 130.131.227.119:2979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/ww2.php"] [unique_id "ary159PAdfEWqmGIkg1fEAAAAjQ"]
[Wed Sep 30 01:10:31.877099 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:31.877374 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:31.893785 2026] [security2:error] [pid 270884:tid 271021] [client 85.203.36.107:64391] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary15yGeq9LtYp4zuPOnDQAAAAI"]
[Wed Sep 30 01:10:31.910533 2026] [security2:error] [pid 270884:tid 271067] [client 85.203.36.120:31399] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary15yGeq9LtYp4zuPOnDgAAADA"]
[Wed Sep 30 01:10:31.929916 2026] [security2:error] [pid 270884:tid 271070] [client 52.231.30.175:40077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/site.php"] [unique_id "ary15yGeq9LtYp4zuPOnDwAAADM"]
[Wed Sep 30 01:10:31.932312 2026] [security2:error] [pid 276620:tid 276829] [client 20.28.180.172:29620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xmini4.php"] [unique_id "ary159PAdfEWqmGIkg1fEQAAAlo"]
[Wed Sep 30 01:10:31.972095 2026] [security2:error] [pid 276059:tid 276284] [client 4.240.25.22:12420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-manager.php"] [unique_id "ary153tqdHBwD77138e2tQAAAeg"]
[Wed Sep 30 01:10:32.012784 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.013105 2026] [access_compat:error] [pid 270884:tid 271046] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.013585 2026] [security2:error] [pid 270884:tid 271049] [client 130.131.227.119:56039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/7logs.php"] [unique_id "ary16CGeq9LtYp4zuPOnEQAAAB4"]
[Wed Sep 30 01:10:32.063741 2026] [security2:error] [pid 276620:tid 276772] [client 106.214.2.47:16494] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary16NPAdfEWqmGIkg1fEgAAAiE"]
[Wed Sep 30 01:10:32.063967 2026] [security2:error] [pid 276620:tid 276772] [client 106.214.2.47:16494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary16NPAdfEWqmGIkg1fEgAAAiE"]
[Wed Sep 30 01:10:32.100385 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.100632 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.105141 2026] [security2:error] [pid 276620:tid 276797] [client 20.58.177.98:49937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/pass4.php"] [unique_id "ary16NPAdfEWqmGIkg1fEwAAAjo"]
[Wed Sep 30 01:10:32.142582 2026] [security2:error] [pid 270884:tid 271141] [client 52.172.226.14:18663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary16CGeq9LtYp4zuPOnFgAAAHo"]
[Wed Sep 30 01:10:32.155082 2026] [security2:error] [pid 270884:tid 271061] [client 216.73.216.46:64049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary16CGeq9LtYp4zuPOnFwAAACo"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvbm9kZTAvbWVtb3J5NzU%3D
[Wed Sep 30 01:10:32.192947 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.193242 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.194493 2026] [security2:error] [pid 270884:tid 271019] [client 52.231.30.175:40130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/insc.php"] [unique_id "ary16CGeq9LtYp4zuPOnGQAAAAA"]
[Wed Sep 30 01:10:32.203020 2026] [security2:error] [pid 270884:tid 271103] [client 130.131.227.119:4889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/ac.php"] [unique_id "ary16CGeq9LtYp4zuPOnGwAAAFQ"]
[Wed Sep 30 01:10:32.206888 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:28857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.207164 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:28857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.346108 2026] [security2:error] [pid 270884:tid 271058] [client 20.194.30.107:17390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/CAE-2.5.php"] [unique_id "ary16CGeq9LtYp4zuPOnKAAAACc"]
[Wed Sep 30 01:10:32.359160 2026] [access_compat:error] [pid 276620:tid 276683] [remote 17.166.23.54:41346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.359480 2026] [access_compat:error] [pid 276620:tid 276683] [remote 17.166.23.54:41346] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.359651 2026] [security2:error] [pid 270884:tid 271024] [client 130.131.227.119:3499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/ctex1.php"] [unique_id "ary16CGeq9LtYp4zuPOnKwAAAAU"]
[Wed Sep 30 01:10:32.365356 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.365657 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.419637 2026] [security2:error] [pid 270884:tid 271040] [client 85.203.36.101:25835] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16CGeq9LtYp4zuPOnLAAAABU"]
[Wed Sep 30 01:10:32.427748 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.428014 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.438296 2026] [security2:error] [pid 270884:tid 271145] [client 20.219.19.141:20868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/em.php"] [unique_id "ary16CGeq9LtYp4zuPOnMQAAAH4"]
[Wed Sep 30 01:10:32.448581 2026] [security2:error] [pid 270884:tid 271094] [client 20.194.5.96:25374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/dronishness.php"] [unique_id "ary16CGeq9LtYp4zuPOnMgAAAEs"]
[Wed Sep 30 01:10:32.467142 2026] [access_compat:error] [pid 270884:tid 271087] [client 172.182.207.57:61191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:32.467591 2026] [access_compat:error] [pid 270884:tid 271087] [client 172.182.207.57:61191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:32.468373 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.468628 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:28857] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.472181 2026] [security2:error] [pid 276620:tid 276764] [client 20.219.2.60:11845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/a4.php"] [unique_id "ary16NPAdfEWqmGIkg1fGQAAAhk"]
[Wed Sep 30 01:10:32.482391 2026] [security2:error] [pid 270884:tid 271121] [client 52.231.30.175:38748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/file.php"] [unique_id "ary16CGeq9LtYp4zuPOnNgAAAGY"]
[Wed Sep 30 01:10:32.530722 2026] [security2:error] [pid 276059:tid 276223] [client 130.131.227.119:56045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/defaults.php"] [unique_id "ary16HtqdHBwD77138e2twAAAas"]
[Wed Sep 30 01:10:32.535920 2026] [security2:error] [pid 270884:tid 271083] [client 20.58.177.98:49934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/drttewyh.php"] [unique_id "ary16CGeq9LtYp4zuPOnOAAAAEA"]
[Wed Sep 30 01:10:32.537003 2026] [security2:error] [pid 270884:tid 271077] [client 155.190.6.18:54716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnNwAAADo"]
[Wed Sep 30 01:10:32.537135 2026] [security2:error] [pid 270884:tid 271077] [client 155.190.6.18:54716] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnNwAAADo"]
[Wed Sep 30 01:10:32.556483 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.556770 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.574071 2026] [security2:error] [pid 270884:tid 271086] [client 45.89.242.85:28281] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary16CGeq9LtYp4zuPOnPgAAAEM"]
[Wed Sep 30 01:10:32.609123 2026] [security2:error] [pid 276059:tid 276258] [client 168.100.149.104:53480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/c1e64c60067dbdc1ab0934442a5f63bd.d319.css.gz"] [unique_id "ary16HtqdHBwD77138e2uAABzjY"]
[Wed Sep 30 01:10:32.649393 2026] [security2:error] [pid 270884:tid 271128] [client 116.197.133.25:56797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnTQAAAG0"]
[Wed Sep 30 01:10:32.649548 2026] [security2:error] [pid 270884:tid 271128] [client 116.197.133.25:56797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnTQAAAG0"]
[Wed Sep 30 01:10:32.651214 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.651650 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.673113 2026] [security2:error] [pid 270884:tid 271064] [client 4.240.25.22:18731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ccc.php"] [unique_id "ary16CGeq9LtYp4zuPOnTgAAAC0"]
[Wed Sep 30 01:10:32.675786 2026] [security2:error] [pid 276059:tid 276288] [client 52.172.226.14:31082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/images.php"] [unique_id "ary16HtqdHBwD77138e2ugAAAew"]
[Wed Sep 30 01:10:32.680948 2026] [access_compat:error] [pid 276620:tid 276821] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:32.681413 2026] [access_compat:error] [pid 276620:tid 276821] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:32.686010 2026] [security2:error] [pid 270884:tid 271133] [client 130.131.227.119:4430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/domains.php"] [unique_id "ary16CGeq9LtYp4zuPOnTwAAAHI"]
[Wed Sep 30 01:10:32.697910 2026] [security2:error] [pid 270884:tid 271124] [client 152.56.240.85:60760] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnSAAAAGk"]
[Wed Sep 30 01:10:32.698078 2026] [security2:error] [pid 270884:tid 271124] [client 152.56.240.85:60760] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary16CGeq9LtYp4zuPOnSAAAAGk"]
[Wed Sep 30 01:10:32.730070 2026] [security2:error] [pid 270884:tid 271132] [client 20.28.180.172:29469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/n30n.php"] [unique_id "ary16CGeq9LtYp4zuPOnUAAAAHE"]
[Wed Sep 30 01:10:32.750166 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.750561 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.751148 2026] [security2:error] [pid 276620:tid 276873] [client 52.231.30.175:38683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/dex.php"] [unique_id "ary16NPAdfEWqmGIkg1fIgAAAoY"]
[Wed Sep 30 01:10:32.836041 2026] [security2:error] [pid 270884:tid 271143] [client 130.131.227.119:4445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/dropdown.php"] [unique_id "ary16CGeq9LtYp4zuPOnVwAAAHw"]
[Wed Sep 30 01:10:32.837343 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.837595 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.863993 2026] [security2:error] [pid 270884:tid 271019] [client 20.70.173.30:50693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-blog-header.php"] [unique_id "ary16CGeq9LtYp4zuPOnWgAAAAA"]
[Wed Sep 30 01:10:32.871279 2026] [security2:error] [pid 270884:tid 271076] [client 216.73.216.46:28857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary16CGeq9LtYp4zuPOnWwAAADk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5MTIz
[Wed Sep 30 01:10:32.881468 2026] [security2:error] [pid 270884:tid 271041] [client 4.240.25.22:12444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/ms-edit.php"] [unique_id "ary16CGeq9LtYp4zuPOnXAAAABY"]
[Wed Sep 30 01:10:32.928013 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:32.928278 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:32.960978 2026] [security2:error] [pid 276059:tid 276208] [client 85.203.36.121:45073] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary16HtqdHBwD77138e2vAAAAZ0"]
[Wed Sep 30 01:10:32.980093 2026] [security2:error] [pid 276059:tid 276157] [remote 74.7.227.56:55280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary16HtqdHBwD77138e2vQAB110"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:10:32.987537 2026] [security2:error] [pid 270884:tid 271043] [client 130.131.227.119:56029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/files/index.php"] [unique_id "ary16CGeq9LtYp4zuPOnXgAAABg"]
[Wed Sep 30 01:10:33.019386 2026] [security2:error] [pid 270884:tid 271114] [client 52.231.30.175:40158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/key.php"] [unique_id "ary16SGeq9LtYp4zuPOnYAAAAF8"]
[Wed Sep 30 01:10:33.019556 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.019832 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.038949 2026] [security2:error] [pid 270884:tid 271085] [client 85.203.36.106:42247] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary16SGeq9LtYp4zuPOnYQAAAEI"]
[Wed Sep 30 01:10:33.067554 2026] [security2:error] [pid 270884:tid 271113] [client 20.58.177.98:45607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/sh.php"] [unique_id "ary16SGeq9LtYp4zuPOnYgAAAF4"]
[Wed Sep 30 01:10:33.083268 2026] [security2:error] [pid 270884:tid 271130] [client 85.203.36.106:48975] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary16SGeq9LtYp4zuPOnZAAAAG8"]
[Wed Sep 30 01:10:33.107713 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.107990 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.134650 2026] [security2:error] [pid 270884:tid 270963] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnZwAAS0k"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=79740
[Wed Sep 30 01:10:33.134676 2026] [security2:error] [pid 270884:tid 270963] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnZwAAS0k"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=79740
[Wed Sep 30 01:10:33.145550 2026] [access_compat:error] [pid 276620:tid 276766] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:33.145831 2026] [access_compat:error] [pid 276620:tid 276766] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:33.148425 2026] [security2:error] [pid 270884:tid 271129] [client 20.194.5.96:25057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/Row_wsoo.php"] [unique_id "ary16SGeq9LtYp4zuPOnaAAAAG4"]
[Wed Sep 30 01:10:33.150098 2026] [security2:error] [pid 270884:tid 271040] [client 130.131.227.119:56041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rebelstudios.net"] [uri "/flower.php"] [unique_id "ary16SGeq9LtYp4zuPOnaQAAABU"]
[Wed Sep 30 01:10:33.180148 2026] [security2:error] [pid 270884:tid 271038] [client 52.172.226.14:31096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/media.php"] [unique_id "ary16SGeq9LtYp4zuPOnbgAAABM"]
[Wed Sep 30 01:10:33.203069 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.203420 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.244101 2026] [security2:error] [pid 270884:tid 271096] [client 4.240.25.22:18703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/abcd.php"] [unique_id "ary16SGeq9LtYp4zuPOncwAAAE0"]
[Wed Sep 30 01:10:33.279804 2026] [security2:error] [pid 270884:tid 271048] [client 52.231.30.175:40182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/kir.php"] [unique_id "ary16SGeq9LtYp4zuPOndQAAAB0"]
[Wed Sep 30 01:10:33.293038 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.293270 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.299154 2026] [security2:error] [pid 270884:tid 271055] [client 20.70.173.30:33393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/bthil.php"] [unique_id "ary16SGeq9LtYp4zuPOnegAAACQ"]
[Wed Sep 30 01:10:33.301781 2026] [security2:error] [pid 276620:tid 276760] [client 20.198.74.230:23921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/82.php"] [unique_id "ary16dPAdfEWqmGIkg1fKgAAAhU"]
[Wed Sep 30 01:10:33.382436 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.382705 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.428139 2026] [security2:error] [pid 270884:tid 271137] [client 85.203.36.118:37751] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/plugins/fix//wp%20sittnegc.php"] [unique_id "ary16SGeq9LtYp4zuPOngAAAAHY"]
[Wed Sep 30 01:10:33.438381 2026] [security2:error] [pid 270884:tid 271099] [client 85.203.36.101:42069] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16SGeq9LtYp4zuPOnggAAAFA"]
[Wed Sep 30 01:10:33.439187 2026] [security2:error] [pid 276059:tid 276211] [client 45.89.242.82:60255] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary16XtqdHBwD77138e2vgAAAZ8"]
[Wed Sep 30 01:10:33.474046 2026] [security2:error] [pid 276059:tid 276236] [client 20.194.5.96:25234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/x2.php"] [unique_id "ary16XtqdHBwD77138e2vwAAAbg"]
[Wed Sep 30 01:10:33.477605 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.477994 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.520130 2026] [security2:error] [pid 270884:tid 271025] [client 223.181.60.167:22339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary16SGeq9LtYp4zuPOnhwAAAAY"]
[Wed Sep 30 01:10:33.521122 2026] [security2:error] [pid 270884:tid 271025] [client 223.181.60.167:22339] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary16SGeq9LtYp4zuPOnhwAAAAY"]
[Wed Sep 30 01:10:33.524537 2026] [security2:error] [pid 270884:tid 271067] [client 85.203.36.107:37901] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16SGeq9LtYp4zuPOniAAAADA"]
[Wed Sep 30 01:10:33.539698 2026] [security2:error] [pid 270884:tid 271070] [client 52.231.30.175:40156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/fling.php"] [unique_id "ary16SGeq9LtYp4zuPOniQAAADM"]
[Wed Sep 30 01:10:33.545194 2026] [security2:error] [pid 270884:tid 271093] [client 43.104.4.223:30641] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary16SGeq9LtYp4zuPOniwAAAEo"], referer: https://coscharis-tech.com/product-category/power-products/stabilizers/?wlfilter=1&woolentor_product_cat=battery-packs%2Csignage-television%2Csolid-works-software
[Wed Sep 30 01:10:33.566594 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.566853 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.567186 2026] [security2:error] [pid 270884:tid 271074] [client 20.58.177.98:49965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/groud1.php"] [unique_id "ary16SGeq9LtYp4zuPOnkAAAADc"]
[Wed Sep 30 01:10:33.567899 2026] [security2:error] [pid 270884:tid 270981] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnjwAAeVs"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D237288
[Wed Sep 30 01:10:33.567918 2026] [security2:error] [pid 270884:tid 270981] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnjwAAeVs"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D237288
[Wed Sep 30 01:10:33.642433 2026] [security2:error] [pid 270884:tid 271118] [client 52.172.226.14:12545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/mac.php"] [unique_id "ary16SGeq9LtYp4zuPOnkQAAAGM"]
[Wed Sep 30 01:10:33.650339 2026] [access_compat:error] [pid 276620:tid 276768] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:33.650780 2026] [access_compat:error] [pid 276620:tid 276768] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:33.657559 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.657859 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.747692 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.747982 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.807721 2026] [security2:error] [pid 270884:tid 271114] [client 52.231.30.175:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/btyuio.php"] [unique_id "ary16SGeq9LtYp4zuPOnmwAAAF8"]
[Wed Sep 30 01:10:33.811640 2026] [security2:error] [pid 270884:tid 271033] [client 85.203.36.93:63639] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16SGeq9LtYp4zuPOnnQAAAA4"]
[Wed Sep 30 01:10:33.839023 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.839287 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.844353 2026] [security2:error] [pid 270884:tid 271014] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnoQAACnw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D233662
[Wed Sep 30 01:10:33.844373 2026] [security2:error] [pid 270884:tid 271014] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16SGeq9LtYp4zuPOnoQAACnw"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D233662
[Wed Sep 30 01:10:33.929771 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:33.930051 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:33.962877 2026] [security2:error] [pid 270884:tid 271037] [client 223.235.102.107:30077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary16SGeq9LtYp4zuPOnowAAABI"]
[Wed Sep 30 01:10:33.962984 2026] [security2:error] [pid 270884:tid 271037] [client 223.235.102.107:30077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary16SGeq9LtYp4zuPOnowAAABI"]
[Wed Sep 30 01:10:33.998676 2026] [security2:error] [pid 270884:tid 271109] [client 85.203.36.86:41485] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary16SGeq9LtYp4zuPOnpQAAAFo"]
[Wed Sep 30 01:10:33.999769 2026] [security2:error] [pid 270884:tid 271145] [client 20.58.177.98:49957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/bro.php"] [unique_id "ary16SGeq9LtYp4zuPOnpgAAAH4"]
[Wed Sep 30 01:10:34.020602 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.020883 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.022286 2026] [security2:error] [pid 270884:tid 271083] [client 49.43.163.212:65374] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary16iGeq9LtYp4zuPOnqAAAAEA"]
[Wed Sep 30 01:10:34.022466 2026] [security2:error] [pid 270884:tid 271083] [client 49.43.163.212:65374] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary16iGeq9LtYp4zuPOnqAAAAEA"]
[Wed Sep 30 01:10:34.086880 2026] [security2:error] [pid 276620:tid 276869] [client 52.231.30.175:38737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/sm.php"] [unique_id "ary16tPAdfEWqmGIkg1fNgAAAoI"]
[Wed Sep 30 01:10:34.112175 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.112437 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.156543 2026] [access_compat:error] [pid 276620:tid 276850] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:34.156832 2026] [access_compat:error] [pid 276620:tid 276850] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:34.169712 2026] [security2:error] [pid 276620:tid 276790] [client 52.172.226.14:12599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ops.php"] [unique_id "ary16tPAdfEWqmGIkg1fOQAAAjM"]
[Wed Sep 30 01:10:34.180335 2026] [security2:error] [pid 270884:tid 271092] [client 20.211.90.37:40389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/bypass.php"] [unique_id "ary16iGeq9LtYp4zuPOnrQAAAEk"]
[Wed Sep 30 01:10:34.184642 2026] [security2:error] [pid 270884:tid 271096] [client 20.28.180.172:18134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/edit.php"] [unique_id "ary16iGeq9LtYp4zuPOnrgAAAE0"]
[Wed Sep 30 01:10:34.203062 2026] [security2:error] [pid 276620:tid 276822] [client 20.194.96.176:64162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/sss.php"] [unique_id "ary16tPAdfEWqmGIkg1fOgAAAlM"]
[Wed Sep 30 01:10:34.204208 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.204472 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.260920 2026] [security2:error] [pid 270884:tid 270919] [remote 64.23.166.180:47508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hy-estates.com"] [uri "/.env"] [unique_id "ary16iGeq9LtYp4zuPOnsgAAcCE"]
[Wed Sep 30 01:10:34.261741 2026] [security2:error] [pid 276620:tid 276704] [remote 64.23.166.180:47524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hy-properties.us"] [uri "/.env"] [unique_id "ary16tPAdfEWqmGIkg1fPAACFEo"]
[Wed Sep 30 01:10:34.272123 2026] [security2:error] [pid 270884:tid 271087] [client 20.70.173.30:46830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-manager.php"] [unique_id "ary16iGeq9LtYp4zuPOnswAAAEQ"]
[Wed Sep 30 01:10:34.273616 2026] [security2:error] [pid 270884:tid 271091] [client 20.194.5.96:25379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/v4.php"] [unique_id "ary16iGeq9LtYp4zuPOntQAAAEg"]
[Wed Sep 30 01:10:34.292192 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.292456 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.318709 2026] [security2:error] [pid 270884:tid 271101] [client 20.58.177.98:45584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ac83.php"] [unique_id "ary16iGeq9LtYp4zuPOnuQAAAFI"]
[Wed Sep 30 01:10:34.347947 2026] [security2:error] [pid 270884:tid 271022] [client 52.231.30.175:40155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/a.php"] [unique_id "ary16iGeq9LtYp4zuPOnugAAAAM"]
[Wed Sep 30 01:10:34.371413 2026] [security2:error] [pid 270884:tid 271008] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16iGeq9LtYp4zuPOnuwAAQXY"], referer: https://forum.torquayfans.com/viewtopic.php?p=301313
[Wed Sep 30 01:10:34.371437 2026] [security2:error] [pid 270884:tid 271008] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16iGeq9LtYp4zuPOnuwAAQXY"], referer: https://forum.torquayfans.com/viewtopic.php?p=301313
[Wed Sep 30 01:10:34.384524 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.384821 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.436431 2026] [security2:error] [pid 276620:tid 276834] [client 103.241.204.139:58675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary16tPAdfEWqmGIkg1fQAAAAl8"]
[Wed Sep 30 01:10:34.437006 2026] [security2:error] [pid 276620:tid 276834] [client 103.241.204.139:58675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary16tPAdfEWqmGIkg1fQAAAAl8"]
[Wed Sep 30 01:10:34.454401 2026] [security2:error] [pid 276059:tid 276287] [client 85.203.36.112:64379] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16ntqdHBwD77138e2wQAAAes"]
[Wed Sep 30 01:10:34.475108 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.475369 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.536912 2026] [security2:error] [pid 276620:tid 276825] [client 85.203.36.98:33575] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary16tPAdfEWqmGIkg1fQwAAAlY"]
[Wed Sep 30 01:10:34.540510 2026] [security2:error] [pid 276059:tid 276281] [client 85.203.36.111:27953] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary16ntqdHBwD77138e2wgAAAeU"]
[Wed Sep 30 01:10:34.540989 2026] [security2:error] [pid 276620:tid 276810] [client 45.89.242.87:34969] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/bolt.php"] [unique_id "ary16tPAdfEWqmGIkg1fRAAAAkc"]
[Wed Sep 30 01:10:34.547411 2026] [security2:error] [pid 276620:tid 276791] [client 20.28.180.172:29578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/calmjpss.php"] [unique_id "ary16tPAdfEWqmGIkg1fRQAAAjQ"]
[Wed Sep 30 01:10:34.567613 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.567893 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.570552 2026] [security2:error] [pid 270884:tid 271137] [client 85.203.36.106:38943] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/bolt.php"] [unique_id "ary16iGeq9LtYp4zuPOnvwAAAHY"]
[Wed Sep 30 01:10:34.607976 2026] [security2:error] [pid 270884:tid 271135] [client 168.100.149.85:43004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/576bea7b6ca9397b55adc8d1a023a1a0.57b0.css.gz"] [unique_id "ary16iGeq9LtYp4zuPOnwQAAdAo"]
[Wed Sep 30 01:10:34.621748 2026] [security2:error] [pid 276059:tid 276319] [client 20.194.5.96:25238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/albin.php"] [unique_id "ary16ntqdHBwD77138e2wwAAAgs"]
[Wed Sep 30 01:10:34.626854 2026] [security2:error] [pid 276620:tid 276805] [client 52.231.30.175:40162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/sb.php"] [unique_id "ary16tPAdfEWqmGIkg1fSQAAAkI"]
[Wed Sep 30 01:10:34.643919 2026] [security2:error] [pid 270884:tid 271093] [client 52.172.226.14:18624] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "crm.novaklinings.com"] [uri "/1.php"] [unique_id "ary16iGeq9LtYp4zuPOnxAAAAEo"]
[Wed Sep 30 01:10:34.644012 2026] [security2:error] [pid 270884:tid 271093] [client 52.172.226.14:18624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/1.php"] [unique_id "ary16iGeq9LtYp4zuPOnxAAAAEo"]
[Wed Sep 30 01:10:34.651521 2026] [access_compat:error] [pid 276620:tid 276804] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:34.651792 2026] [access_compat:error] [pid 276620:tid 276804] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:34.656013 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.656279 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.687781 2026] [security2:error] [pid 276620:tid 276826] [client 20.58.177.98:49982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/class-wp-http-client.php"] [unique_id "ary16tPAdfEWqmGIkg1fTQAAAlc"]
[Wed Sep 30 01:10:34.704132 2026] [security2:error] [pid 270884:tid 271128] [client 190.225.171.196:60341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.171.225.190.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary16iGeq9LtYp4zuPOnyAAAAG0"]
[Wed Sep 30 01:10:34.704291 2026] [security2:error] [pid 270884:tid 271128] [client 190.225.171.196:60341] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary16iGeq9LtYp4zuPOnyAAAAG0"]
[Wed Sep 30 01:10:34.705536 2026] [security2:error] [pid 270884:tid 271081] [client 4.196.65.241:2073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/zpslrqry.php"] [unique_id "ary16iGeq9LtYp4zuPOnygAAAD4"]
[Wed Sep 30 01:10:34.752591 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.752909 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.754543 2026] [security2:error] [pid 276620:tid 276808] [client 127.0.0.1:21504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary16tPAdfEWqmGIkg1fTAAAAkU"]
[Wed Sep 30 01:10:34.754692 2026] [security2:error] [pid 276620:tid 276829] [client 74.7.228.54:60152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.wmz.pvq.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary16tPAdfEWqmGIkg1fSwACWlE"]
[Wed Sep 30 01:10:34.805939 2026] [security2:error] [pid 270884:tid 271122] [client 4.240.25.22:18797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-content/admin.php"] [unique_id "ary16iGeq9LtYp4zuPOn0AAAAGc"]
[Wed Sep 30 01:10:34.844053 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.844384 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:34.907237 2026] [security2:error] [pid 270884:tid 271050] [client 52.231.30.175:40151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/av.php"] [unique_id "ary16iGeq9LtYp4zuPOn2QAAAB8"]
[Wed Sep 30 01:10:34.910405 2026] [security2:error] [pid 270884:tid 271047] [client 4.240.25.22:41705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/fling.php"] [unique_id "ary16iGeq9LtYp4zuPOn2gAAABw"]
[Wed Sep 30 01:10:34.934635 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:34.935052 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.021651 2026] [security2:error] [pid 276620:tid 276848] [client 20.219.19.141:20875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/hp.php"] [unique_id "ary169PAdfEWqmGIkg1fVgAAAm0"]
[Wed Sep 30 01:10:35.040543 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.040793 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:57829] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.067337 2026] [security2:error] [pid 270884:tid 271112] [client 20.58.177.98:30685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/zoo2.php"] [unique_id "ary16yGeq9LtYp4zuPOn4AAAAF0"]
[Wed Sep 30 01:10:35.106538 2026] [security2:error] [pid 276620:tid 276816] [client 52.172.226.14:31079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/aaa.php"] [unique_id "ary169PAdfEWqmGIkg1fWAAAAk0"]
[Wed Sep 30 01:10:35.110608 2026] [access_compat:error] [pid 276620:tid 276765] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:35.110897 2026] [access_compat:error] [pid 276620:tid 276765] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:35.127617 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.127901 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.130002 2026] [security2:error] [pid 270884:tid 271043] [client 20.194.5.96:25263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/atkno.php"] [unique_id "ary16yGeq9LtYp4zuPOn5AAAABg"]
[Wed Sep 30 01:10:35.177247 2026] [security2:error] [pid 276620:tid 276845] [client 52.231.30.175:40167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/b8.php"] [unique_id "ary169PAdfEWqmGIkg1fWQAAAmo"]
[Wed Sep 30 01:10:35.218990 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.219251 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.309861 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.310136 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.401249 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.401533 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.445569 2026] [security2:error] [pid 270884:tid 271139] [client 52.231.30.175:40153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp_blog_footer.php"] [unique_id "ary16yGeq9LtYp4zuPOn9AAAAHg"]
[Wed Sep 30 01:10:35.460717 2026] [security2:error] [pid 270884:tid 271080] [client 216.73.216.46:57829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary16yGeq9LtYp4zuPOn9QAAAD0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvY3B1OS9kcml2ZXIvY3B1OS9ub2RlMC9jcHUw
[Wed Sep 30 01:10:35.472637 2026] [security2:error] [pid 270884:tid 271084] [client 20.58.177.98:45599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/zoo1.php"] [unique_id "ary16yGeq9LtYp4zuPOn9wAAAEE"]
[Wed Sep 30 01:10:35.475108 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16yGeq9LtYp4zuPOn9gAAUzk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D45%26t%3D4696
[Wed Sep 30 01:10:35.475130 2026] [security2:error] [pid 270884:tid 270943] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary16yGeq9LtYp4zuPOn9gAAUzk"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fstart%3D45%26t%3D4696
[Wed Sep 30 01:10:35.476877 2026] [security2:error] [pid 276059:tid 276210] [client 20.194.5.96:25069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/gptsh.php"] [unique_id "ary163tqdHBwD77138e2xgAAAZ4"]
[Wed Sep 30 01:10:35.490422 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.490688 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.576992 2026] [security2:error] [pid 270884:tid 271135] [client 20.70.173.30:38885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/log.php"] [unique_id "ary16yGeq9LtYp4zuPOn-gAAAHQ"]
[Wed Sep 30 01:10:35.580680 2026] [security2:error] [pid 276620:tid 276803] [client 52.172.226.14:12593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/chosen.php"] [unique_id "ary169PAdfEWqmGIkg1fXAAAAkA"]
[Wed Sep 30 01:10:35.583033 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.583304 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.596207 2026] [security2:error] [pid 276620:tid 276876] [client 85.203.36.116:43699] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary169PAdfEWqmGIkg1fXQAAAok"]
[Wed Sep 30 01:10:35.607001 2026] [security2:error] [pid 270884:tid 271029] [client 37.41.16.35:60653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary16yGeq9LtYp4zuPOn-wAAAAo"]
[Wed Sep 30 01:10:35.607109 2026] [security2:error] [pid 270884:tid 271029] [client 37.41.16.35:60653] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary16yGeq9LtYp4zuPOn-wAAAAo"]
[Wed Sep 30 01:10:35.673835 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.674108 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.674581 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:35.674851 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:35.710957 2026] [security2:error] [pid 270884:tid 271140] [client 20.70.173.30:59994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.transparentyouth.com"] [uri "/wp.php"] [unique_id "ary16yGeq9LtYp4zuPOoAAAAAHk"]
[Wed Sep 30 01:10:35.713530 2026] [security2:error] [pid 276059:tid 276285] [client 52.231.30.175:40161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/0.php"] [unique_id "ary163tqdHBwD77138e2yAAAAek"]
[Wed Sep 30 01:10:35.764280 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.764556 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.795547 2026] [security2:error] [pid 276620:tid 276788] [client 45.138.12.32:32276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqe.dvz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary169PAdfEWqmGIkg1fYgAAAjE"]
[Wed Sep 30 01:10:35.839895 2026] [security2:error] [pid 276620:tid 276842] [client 20.58.177.98:45593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/class-ajax.php"] [unique_id "ary169PAdfEWqmGIkg1fZQAAAmc"]
[Wed Sep 30 01:10:35.855171 2026] [security2:error] [pid 270884:tid 271049] [client 4.240.25.22:18757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/biufile.php"] [unique_id "ary16yGeq9LtYp4zuPOoBwAAAB4"]
[Wed Sep 30 01:10:35.855992 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.856279 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.897676 2026] [security2:error] [pid 276620:tid 276861] [client 20.194.5.96:25075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/rithin.php"] [unique_id "ary169PAdfEWqmGIkg1fZwAAAno"]
[Wed Sep 30 01:10:35.908751 2026] [security2:error] [pid 276620:tid 276857] [client 85.203.36.93:53103] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary169PAdfEWqmGIkg1faAAAAnY"]
[Wed Sep 30 01:10:35.946336 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:35.946605 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:35.979356 2026] [security2:error] [pid 276620:tid 276768] [client 52.231.30.175:40120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/fms.php"] [unique_id "ary169PAdfEWqmGIkg1fawAAAh0"]
[Wed Sep 30 01:10:36.002793 2026] [security2:error] [pid 276620:tid 276773] [client 45.138.12.32:32316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jvl.icl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary17NPAdfEWqmGIkg1fbAAAAiI"]
[Wed Sep 30 01:10:36.038609 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.038897 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.041339 2026] [security2:error] [pid 270884:tid 271075] [client 20.194.30.107:17293] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.kgamc.com"] [uri "/1.php"] [unique_id "ary17CGeq9LtYp4zuPOoCgAAADg"]
[Wed Sep 30 01:10:36.041459 2026] [security2:error] [pid 270884:tid 271075] [client 20.194.30.107:17293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/1.php"] [unique_id "ary17CGeq9LtYp4zuPOoCgAAADg"]
[Wed Sep 30 01:10:36.043361 2026] [security2:error] [pid 270884:tid 271065] [client 52.172.226.14:12594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/2P.php"] [unique_id "ary17CGeq9LtYp4zuPOoCwAAAC4"]
[Wed Sep 30 01:10:36.067469 2026] [core:error] [pid 276059:tid 276203] (104)Connection reset by peer: [client 172.232.190.19:65350] AH00574: ap_content_length_filter: apr_bucket_read() failed, referer: www.google.com
[Wed Sep 30 01:10:36.129195 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.129474 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.147118 2026] [security2:error] [pid 276059:tid 276299] [client 85.203.36.127:65333] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17HtqdHBwD77138e2zwAAAfc"]
[Wed Sep 30 01:10:36.169616 2026] [access_compat:error] [pid 276620:tid 276858] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:36.169899 2026] [access_compat:error] [pid 276620:tid 276858] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:36.205101 2026] [security2:error] [pid 270884:tid 271141] [client 20.58.177.98:49980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/gm.php"] [unique_id "ary17CGeq9LtYp4zuPOoDgAAAHo"]
[Wed Sep 30 01:10:36.218935 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.219364 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.236708 2026] [security2:error] [pid 270884:tid 271085] [client 4.240.25.22:8453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dronishness.php"] [unique_id "ary17CGeq9LtYp4zuPOoFAAAAEI"]
[Wed Sep 30 01:10:36.260210 2026] [security2:error] [pid 270884:tid 271039] [client 20.70.173.30:7388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-blog-header.php"] [unique_id "ary17CGeq9LtYp4zuPOoFwAAABQ"]
[Wed Sep 30 01:10:36.271954 2026] [security2:error] [pid 276620:tid 276846] [client 52.231.30.175:40176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/xyn.php"] [unique_id "ary17NPAdfEWqmGIkg1fcQAAAms"]
[Wed Sep 30 01:10:36.312211 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.312541 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.380802 2026] [security2:error] [pid 276620:tid 276763] [client 20.219.19.141:20830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wpuse.php"] [unique_id "ary17NPAdfEWqmGIkg1fcwAAAhg"]
[Wed Sep 30 01:10:36.393934 2026] [security2:error] [pid 270884:tid 271053] [client 89.19.25.234:42928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.25.19.89.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "diazmedical.com"] [uri "/wp-login.php"] [unique_id "ary17CGeq9LtYp4zuPOoHwAAACI"]
[Wed Sep 30 01:10:36.404209 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.404575 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.493540 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.493805 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.509445 2026] [security2:error] [pid 276059:tid 276292] [client 52.172.226.14:31066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/min.php"] [unique_id "ary17HtqdHBwD77138e20QAAAfA"]
[Wed Sep 30 01:10:36.526725 2026] [security2:error] [pid 276059:tid 276245] [client 4.240.25.22:63645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/admin.php"] [unique_id "ary17HtqdHBwD77138e20gAAAcE"]
[Wed Sep 30 01:10:36.540061 2026] [security2:error] [pid 276620:tid 276850] [client 20.194.5.96:25029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/il.php"] [unique_id "ary17NPAdfEWqmGIkg1feAAAAm8"]
[Wed Sep 30 01:10:36.554203 2026] [security2:error] [pid 276620:tid 276790] [client 52.231.30.175:38772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/min.php"] [unique_id "ary17NPAdfEWqmGIkg1feQAAAjM"]
[Wed Sep 30 01:10:36.583650 2026] [security2:error] [pid 276620:tid 276792] [client 20.198.74.230:23872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/yyjBRcdefault.php"] [unique_id "ary17NPAdfEWqmGIkg1fegAAAjU"]
[Wed Sep 30 01:10:36.584582 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.584880 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.617598 2026] [security2:error] [pid 276620:tid 276822] [client 168.100.149.102:15314] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7f5de6ddf3b46f5467eacc6e4f74320d.6a0.css.gz"] [unique_id "ary17NPAdfEWqmGIkg1fewACU10"]
[Wed Sep 30 01:10:36.641688 2026] [security2:error] [pid 276620:tid 276794] [client 20.58.177.98:49947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/class-wp-site-list.php"] [unique_id "ary17NPAdfEWqmGIkg1ffgAAAjc"]
[Wed Sep 30 01:10:36.646553 2026] [access_compat:error] [pid 276620:tid 276879] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:36.646885 2026] [access_compat:error] [pid 276620:tid 276879] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:36.648098 2026] [security2:error] [pid 276059:tid 276279] [client 45.89.242.83:44411] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary17HtqdHBwD77138e21AAAAeM"]
[Wed Sep 30 01:10:36.666274 2026] [security2:error] [pid 270884:tid 271066] [client 85.203.36.88:41633] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17CGeq9LtYp4zuPOoJgAAAC8"]
[Wed Sep 30 01:10:36.666654 2026] [security2:error] [pid 276620:tid 276807] [client 85.203.36.101:60219] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17NPAdfEWqmGIkg1fgAAAAkQ"]
[Wed Sep 30 01:10:36.670300 2026] [security2:error] [pid 270884:tid 271077] [client 85.203.36.116:25255] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary17CGeq9LtYp4zuPOoKAAAADo"]
[Wed Sep 30 01:10:36.670506 2026] [security2:error] [pid 270884:tid 271079] [client 85.203.36.118:34327] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/css/index.php"] [unique_id "ary17CGeq9LtYp4zuPOoKQAAADw"]
[Wed Sep 30 01:10:36.675109 2026] [security2:error] [pid 270884:tid 271131] [client 20.28.180.172:29484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ilex.php"] [unique_id "ary17CGeq9LtYp4zuPOoKgAAAHA"]
[Wed Sep 30 01:10:36.678784 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.679098 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.708670 2026] [security2:error] [pid 276620:tid 276798] [client 45.138.12.32:32312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jsp.gib.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary17NPAdfEWqmGIkg1fggAAAjs"]
[Wed Sep 30 01:10:36.720085 2026] [security2:error] [pid 276620:tid 276818] [client 85.203.36.93:64659] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17NPAdfEWqmGIkg1fgwAAAk8"]
[Wed Sep 30 01:10:36.766296 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.766608 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.822103 2026] [security2:error] [pid 270884:tid 271086] [client 52.231.30.175:40184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-whe.php"] [unique_id "ary17CGeq9LtYp4zuPOoNgAAAEM"]
[Wed Sep 30 01:10:36.856970 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.857268 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.948038 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:36.948336 2026] [access_compat:error] [pid 270884:tid 271124] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:36.960452 2026] [security2:error] [pid 276620:tid 276836] [client 20.70.173.30:33402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/file.php"] [unique_id "ary17NPAdfEWqmGIkg1fhgAAAmE"]
[Wed Sep 30 01:10:36.990653 2026] [security2:error] [pid 270884:tid 271062] [client 103.168.67.253:9360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary17CGeq9LtYp4zuPOoPgAAACs"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:36.994220 2026] [security2:error] [pid 270884:tid 271029] [client 20.58.177.98:49939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/asd2.php"] [unique_id "ary17CGeq9LtYp4zuPOoPwAAAAo"]
[Wed Sep 30 01:10:37.002493 2026] [security2:error] [pid 270884:tid 271090] [client 4.240.25.22:8396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp.php"] [unique_id "ary17SGeq9LtYp4zuPOoQAAAAEc"]
[Wed Sep 30 01:10:37.033271 2026] [security2:error] [pid 270884:tid 271068] [client 4.240.25.22:18788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/simple.php"] [unique_id "ary17SGeq9LtYp4zuPOoQgAAADE"]
[Wed Sep 30 01:10:37.039906 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.040192 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.098228 2026] [security2:error] [pid 276620:tid 276782] [client 52.231.30.175:38768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-filemanager1.php"] [unique_id "ary17dPAdfEWqmGIkg1fiQAAAis"]
[Wed Sep 30 01:10:37.100761 2026] [security2:error] [pid 270884:tid 271051] [client 20.70.173.30:46790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/fling.php"] [unique_id "ary17SGeq9LtYp4zuPOoQwAAACA"]
[Wed Sep 30 01:10:37.129688 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.129983 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.138381 2026] [security2:error] [pid 270884:tid 270907] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary17SGeq9LtYp4zuPOoRwAATBU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=105921
[Wed Sep 30 01:10:37.138410 2026] [security2:error] [pid 270884:tid 270907] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary17SGeq9LtYp4zuPOoRwAATBU"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=105921
[Wed Sep 30 01:10:37.141730 2026] [access_compat:error] [pid 276620:tid 276870] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:37.142008 2026] [access_compat:error] [pid 276620:tid 276870] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:37.156089 2026] [security2:error] [pid 270884:tid 271140] [client 20.211.90.37:39995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary17SGeq9LtYp4zuPOoSAAAAHk"]
[Wed Sep 30 01:10:37.166231 2026] [security2:error] [pid 270884:tid 271046] [client 49.37.102.248:56734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary17SGeq9LtYp4zuPOoSQAAABs"]
[Wed Sep 30 01:10:37.166351 2026] [security2:error] [pid 270884:tid 271046] [client 49.37.102.248:56734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary17SGeq9LtYp4zuPOoSQAAABs"]
[Wed Sep 30 01:10:37.190151 2026] [security2:error] [pid 276620:tid 276881] [client 20.219.19.141:20890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/sm.php"] [unique_id "ary17dPAdfEWqmGIkg1fiwAAAo4"]
[Wed Sep 30 01:10:37.217603 2026] [security2:error] [pid 276620:tid 276808] [client 168.107.70.193:56777] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.ata.hfj.mybluehost.me"] [uri "/"] [unique_id "ary17dPAdfEWqmGIkg1fjAAAAkU"]
[Wed Sep 30 01:10:37.221844 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.222105 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.225441 2026] [security2:error] [pid 276620:tid 276871] [client 179.105.122.52:52522] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary17dPAdfEWqmGIkg1fiAAAAoQ"]
[Wed Sep 30 01:10:37.242380 2026] [security2:error] [pid 276620:tid 276839] [client 20.70.173.30:25317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/chosen.php"] [unique_id "ary17dPAdfEWqmGIkg1fjQAAAmQ"]
[Wed Sep 30 01:10:37.276385 2026] [security2:error] [pid 270884:tid 271122] [client 85.203.36.88:49737] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17SGeq9LtYp4zuPOoTwAAAGc"]
[Wed Sep 30 01:10:37.313426 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.313723 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.393246 2026] [security2:error] [pid 270884:tid 271132] [client 52.231.30.175:38689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-freya.php"] [unique_id "ary17SGeq9LtYp4zuPOoVAAAAHE"]
[Wed Sep 30 01:10:37.405453 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.405770 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.409953 2026] [security2:error] [pid 270884:tid 271038] [client 85.203.36.117:47471] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17SGeq9LtYp4zuPOoVgAAABM"]
[Wed Sep 30 01:10:37.494163 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.494462 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.505936 2026] [security2:error] [pid 270884:tid 271043] [client 20.219.2.60:11710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wen.php"] [unique_id "ary17SGeq9LtYp4zuPOoWwAAABg"]
[Wed Sep 30 01:10:37.547908 2026] [security2:error] [pid 270884:tid 271047] [client 20.58.177.98:30676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/cdc.php"] [unique_id "ary17SGeq9LtYp4zuPOoXAAAABw"]
[Wed Sep 30 01:10:37.577861 2026] [security2:error] [pid 270884:tid 271061] [client 150.95.115.9:32790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.115.95.150.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taracom.net"] [uri "/wp-login.php"] [unique_id "ary17SGeq9LtYp4zuPOoXQAAACo"], referer: https://taracom.net/wp-login.php
[Wed Sep 30 01:10:37.587179 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.587479 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.587792 2026] [security2:error] [pid 276620:tid 276821] [client 20.194.30.107:1488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/k.php"] [unique_id "ary17dPAdfEWqmGIkg1fkQAAAlI"]
[Wed Sep 30 01:10:37.639983 2026] [access_compat:error] [pid 276620:tid 276769] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:37.640272 2026] [access_compat:error] [pid 276620:tid 276769] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:37.646853 2026] [security2:error] [pid 270884:tid 270889] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary17SGeq9LtYp4zuPOoYAAAbwM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D87786
[Wed Sep 30 01:10:37.650739 2026] [security2:error] [pid 276620:tid 276784] [client 20.28.180.172:29464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/2c88361384index.php"] [unique_id "ary17dPAdfEWqmGIkg1fkwAAAi0"]
[Wed Sep 30 01:10:37.659680 2026] [security2:error] [pid 270884:tid 271113] [client 52.231.30.175:38702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/admin.php/admin.php"] [unique_id "ary17SGeq9LtYp4zuPOoYQAAAF4"]
[Wed Sep 30 01:10:37.732406 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.732743 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.767255 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.767512 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.827535 2026] [security2:error] [pid 276620:tid 276851] [client 20.194.5.96:25370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/1klopedf.php"] [unique_id "ary17dPAdfEWqmGIkg1flQAAAnA"]
[Wed Sep 30 01:10:37.857515 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.857796 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.880844 2026] [security2:error] [pid 270884:tid 271117] [client 20.58.177.98:49940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/Components.php"] [unique_id "ary17SGeq9LtYp4zuPOobQAAAGI"]
[Wed Sep 30 01:10:37.883945 2026] [security2:error] [pid 270884:tid 271126] [client 52.172.226.14:31085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/great.php"] [unique_id "ary17SGeq9LtYp4zuPOobgAAAGs"]
[Wed Sep 30 01:10:37.923694 2026] [security2:error] [pid 276620:tid 276886] [client 52.231.30.175:40069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/faiy.php"] [unique_id "ary17dPAdfEWqmGIkg1flwAAApM"]
[Wed Sep 30 01:10:37.950543 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:37.950845 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:37.993632 2026] [security2:error] [pid 276620:tid 276764] [client 20.70.173.30:33384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/as.php"] [unique_id "ary17dPAdfEWqmGIkg1fmAAAAhk"]
[Wed Sep 30 01:10:38.005351 2026] [security2:error] [pid 276620:tid 276823] [client 20.28.180.172:62378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ioxi-o.php"] [unique_id "ary17tPAdfEWqmGIkg1fmQAAAlQ"]
[Wed Sep 30 01:10:38.038986 2026] [security2:error] [pid 270884:tid 271133] [client 4.196.65.241:2508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/w1px.php"] [unique_id "ary17iGeq9LtYp4zuPOocQAAAHI"]
[Wed Sep 30 01:10:38.040230 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.040510 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.092979 2026] [security2:error] [pid 270884:tid 271048] [client 85.203.36.111:22299] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary17iGeq9LtYp4zuPOocwAAAB0"]
[Wed Sep 30 01:10:38.095796 2026] [security2:error] [pid 270884:tid 271034] [client 85.203.36.93:22807] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/index.php"] [unique_id "ary17iGeq9LtYp4zuPOodAAAAA8"]
[Wed Sep 30 01:10:38.096110 2026] [security2:error] [pid 276620:tid 276882] [client 85.203.36.98:30967] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17tPAdfEWqmGIkg1fngAAAo8"]
[Wed Sep 30 01:10:38.099932 2026] [security2:error] [pid 276620:tid 276844] [client 45.89.242.86:58325] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17tPAdfEWqmGIkg1fnwAAAmk"]
[Wed Sep 30 01:10:38.118794 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:38.119064 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:38.128635 2026] [security2:error] [pid 276620:tid 276847] [client 85.203.36.92:50649] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17tPAdfEWqmGIkg1foQAAAmw"]
[Wed Sep 30 01:10:38.131081 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.131364 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.147548 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.19.141:20917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/mknobgkg.php"] [unique_id "ary17tPAdfEWqmGIkg1fogAAAik"]
[Wed Sep 30 01:10:38.212887 2026] [security2:error] [pid 270884:tid 271032] [client 52.231.30.175:40135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary17iGeq9LtYp4zuPOoegAAAA0"]
[Wed Sep 30 01:10:38.228040 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.228491 2026] [access_compat:error] [pid 270884:tid 271062] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.237113 2026] [security2:error] [pid 276620:tid 276767] [client 20.58.177.98:45579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/admin.php/xl9.php"] [unique_id "ary17tPAdfEWqmGIkg1fpAAAAhw"]
[Wed Sep 30 01:10:38.313769 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.314040 2026] [access_compat:error] [pid 270884:tid 271042] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.368771 2026] [security2:error] [pid 276620:tid 276761] [client 52.172.226.14:18644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/BDKR28WP.php"] [unique_id "ary17tPAdfEWqmGIkg1fpwAAAhY"]
[Wed Sep 30 01:10:38.375734 2026] [security2:error] [pid 270884:tid 271046] [client 20.70.173.30:37141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-manager.php"] [unique_id "ary17iGeq9LtYp4zuPOogwAAABs"]
[Wed Sep 30 01:10:38.405140 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.405420 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.462450 2026] [security2:error] [pid 270884:tid 271068] [client 85.10.154.175:59334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.154.10.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "agribiolink.com"] [uri "/wp-login.php"] [unique_id "ary17iGeq9LtYp4zuPOoiAAAADE"]
[Wed Sep 30 01:10:38.489410 2026] [security2:error] [pid 270884:tid 271076] [client 52.231.30.175:40085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/myglu.php"] [unique_id "ary17iGeq9LtYp4zuPOojQAAADk"]
[Wed Sep 30 01:10:38.494957 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.495244 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:31447] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.563701 2026] [security2:error] [pid 270884:tid 271085] [client 20.204.42.136:35782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/kbqhb.php"] [unique_id "ary17iGeq9LtYp4zuPOokAAAAEI"]
[Wed Sep 30 01:10:38.572529 2026] [security2:error] [pid 270884:tid 271086] [client 203.122.45.246:56372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary17iGeq9LtYp4zuPOokQAAAEM"]
[Wed Sep 30 01:10:38.572683 2026] [security2:error] [pid 270884:tid 271086] [client 203.122.45.246:56372] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary17iGeq9LtYp4zuPOokQAAAEM"]
[Wed Sep 30 01:10:38.577083 2026] [security2:error] [pid 276059:tid 276214] [client 20.194.5.96:25026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/zv.php"] [unique_id "ary17ntqdHBwD77138e23AAAAaI"]
[Wed Sep 30 01:10:38.587119 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.587394 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.605228 2026] [security2:error] [pid 270884:tid 271039] [client 20.58.177.98:30690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/gulu.php"] [unique_id "ary17iGeq9LtYp4zuPOokwAAABQ"]
[Wed Sep 30 01:10:38.615955 2026] [security2:error] [pid 270884:tid 271060] [client 168.100.149.68:63356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b95bebad1ee1f81204eba0eefd69339b.99b.css.gz"] [unique_id "ary17iGeq9LtYp4zuPOolAAAKVc"]
[Wed Sep 30 01:10:38.637470 2026] [security2:error] [pid 276059:tid 276303] [client 20.70.173.30:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/wp-the.php"] [unique_id "ary17ntqdHBwD77138e23gAAAfs"]
[Wed Sep 30 01:10:38.678042 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.678305 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.696793 2026] [security2:error] [pid 276620:tid 276865] [client 85.203.36.123:43135] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/index.php"] [unique_id "ary17tPAdfEWqmGIkg1frgAAAn4"]
[Wed Sep 30 01:10:38.699630 2026] [access_compat:error] [pid 276620:tid 276874] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:38.699910 2026] [access_compat:error] [pid 276620:tid 276874] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:38.754653 2026] [security2:error] [pid 270884:tid 271053] [client 52.231.30.175:40081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/bnmtp.php"] [unique_id "ary17iGeq9LtYp4zuPOonAAAACI"]
[Wed Sep 30 01:10:38.809546 2026] [security2:error] [pid 270884:tid 271037] [client 20.211.90.37:40419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary17iGeq9LtYp4zuPOonQAAABI"]
[Wed Sep 30 01:10:38.822135 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.822548 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.841752 2026] [security2:error] [pid 270884:tid 271079] [client 52.172.226.14:18465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/gigi.php"] [unique_id "ary17iGeq9LtYp4zuPOoogAAADw"]
[Wed Sep 30 01:10:38.851739 2026] [security2:error] [pid 270884:tid 271145] [client 4.240.25.22:8469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/sb.php"] [unique_id "ary17iGeq9LtYp4zuPOoowAAAH4"]
[Wed Sep 30 01:10:38.863436 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.863689 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:38.887332 2026] [security2:error] [pid 270884:tid 271144] [client 216.73.216.46:31447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary17iGeq9LtYp4zuPOopAAAAH0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDExL25vZGUwL21lbW9yeTM2NA%3D%3D
[Wed Sep 30 01:10:38.889336 2026] [security2:error] [pid 270884:tid 271131] [client 20.28.180.172:34257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/a11.php"] [unique_id "ary17iGeq9LtYp4zuPOopQAAAHA"]
[Wed Sep 30 01:10:38.948387 2026] [security2:error] [pid 270884:tid 271064] [client 20.58.177.98:49922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/bala.php"] [unique_id "ary17iGeq9LtYp4zuPOopgAAAC0"]
[Wed Sep 30 01:10:38.951277 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:38.951560 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.016525 2026] [security2:error] [pid 270884:tid 271101] [client 52.231.30.175:38750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/zeta.php"] [unique_id "ary17yGeq9LtYp4zuPOoqgAAAFI"]
[Wed Sep 30 01:10:39.041216 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.041494 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.118743 2026] [security2:error] [pid 270884:tid 271036] [client 122.173.27.10:12096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary17yGeq9LtYp4zuPOorgAAABE"]
[Wed Sep 30 01:10:39.119551 2026] [security2:error] [pid 270884:tid 271036] [client 122.173.27.10:12096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary17yGeq9LtYp4zuPOorgAAABE"]
[Wed Sep 30 01:10:39.132480 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.132730 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.154432 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:39.154721 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:39.222597 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.222874 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.259155 2026] [security2:error] [pid 270884:tid 271020] [client 150.95.115.9:39150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.115.95.150.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "taracom.net"] [uri "/wp-login.php"] [unique_id "ary17yGeq9LtYp4zuPOotQAAAAE"], referer: https://taracom.net/wp-login.php
[Wed Sep 30 01:10:39.263614 2026] [security2:error] [pid 270884:tid 271140] [client 20.198.74.230:24423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/gix.php"] [unique_id "ary17yGeq9LtYp4zuPOotwAAAHk"]
[Wed Sep 30 01:10:39.289931 2026] [security2:error] [pid 270884:tid 271097] [client 128.121.174.180:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary17yGeq9LtYp4zuPOouQAAAE4"]
[Wed Sep 30 01:10:39.292086 2026] [security2:error] [pid 276620:tid 276879] [client 52.231.30.175:38759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary179PAdfEWqmGIkg1fuAAAAow"]
[Wed Sep 30 01:10:39.310519 2026] [security2:error] [pid 276059:tid 276309] [client 85.203.36.107:23723] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary173tqdHBwD77138e24wAAAgE"]
[Wed Sep 30 01:10:39.315089 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.315442 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.328614 2026] [security2:error] [pid 270884:tid 271049] [client 52.172.226.14:12561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ant.php"] [unique_id "ary17yGeq9LtYp4zuPOouwAAAB4"]
[Wed Sep 30 01:10:39.338679 2026] [security2:error] [pid 270884:tid 271041] [client 20.194.5.96:25356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/zv.update.php"] [unique_id "ary17yGeq9LtYp4zuPOovgAAABY"]
[Wed Sep 30 01:10:39.362402 2026] [security2:error] [pid 270884:tid 271068] [client 20.58.177.98:49971] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bowrattler.com"] [uri "/c99.php"] [unique_id "ary17yGeq9LtYp4zuPOowgAAADE"]
[Wed Sep 30 01:10:39.362783 2026] [security2:error] [pid 270884:tid 271074] [client 85.203.36.100:56961] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary17yGeq9LtYp4zuPOowwAAADc"]
[Wed Sep 30 01:10:39.373400 2026] [security2:error] [pid 270884:tid 271119] [client 103.113.227.42:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary17yGeq9LtYp4zuPOoxQAAAGQ"]
[Wed Sep 30 01:10:39.406016 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.406278 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.414872 2026] [security2:error] [pid 270884:tid 271030] [client 85.203.36.97:60017] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17yGeq9LtYp4zuPOoxgAAAAs"]
[Wed Sep 30 01:10:39.485803 2026] [security2:error] [pid 270884:tid 271112] [client 45.138.12.32:45220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqk.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary17yGeq9LtYp4zuPOoywAAAF0"]
[Wed Sep 30 01:10:39.497671 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.497931 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.554542 2026] [security2:error] [pid 270884:tid 271110] [client 45.138.12.32:45188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jra.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary17yGeq9LtYp4zuPOo0QAAAFs"]
[Wed Sep 30 01:10:39.583582 2026] [security2:error] [pid 270884:tid 271021] [client 52.231.30.175:38681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary17yGeq9LtYp4zuPOo0gAAAAI"]
[Wed Sep 30 01:10:39.584504 2026] [security2:error] [pid 270884:tid 271028] [client 4.240.25.22:46319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/inputs.php"] [unique_id "ary17yGeq9LtYp4zuPOo0wAAAAk"]
[Wed Sep 30 01:10:39.590510 2026] [access_compat:error] [pid 276059:tid 276207] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.590789 2026] [access_compat:error] [pid 276059:tid 276207] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.613191 2026] [security2:error] [pid 276620:tid 276855] [client 20.194.96.176:29574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/or.php"] [unique_id "ary179PAdfEWqmGIkg1fvwAAAnQ"]
[Wed Sep 30 01:10:39.624160 2026] [security2:error] [pid 276620:tid 276836] [client 20.219.2.60:11389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ms.php"] [unique_id "ary179PAdfEWqmGIkg1fwAAAAmE"]
[Wed Sep 30 01:10:39.643240 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:39.643529 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:39.659010 2026] [security2:error] [pid 276620:tid 276843] [client 201.32.215.149:7221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary179PAdfEWqmGIkg1fwgAAAmg"]
[Wed Sep 30 01:10:39.659120 2026] [security2:error] [pid 276620:tid 276843] [client 201.32.215.149:7221] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary179PAdfEWqmGIkg1fwgAAAmg"]
[Wed Sep 30 01:10:39.667212 2026] [security2:error] [pid 270884:tid 270987] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary17yGeq9LtYp4zuPOo1gAAGWE"], referer: https://forum.torquayfans.com/viewtopic.php?p=206377
[Wed Sep 30 01:10:39.667240 2026] [security2:error] [pid 270884:tid 270987] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary17yGeq9LtYp4zuPOo1gAAGWE"], referer: https://forum.torquayfans.com/viewtopic.php?p=206377
[Wed Sep 30 01:10:39.679074 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.679356 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.688567 2026] [security2:error] [pid 276620:tid 276870] [client 85.203.36.96:39349] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary179PAdfEWqmGIkg1fwwAAAoM"]
[Wed Sep 30 01:10:39.713602 2026] [security2:error] [pid 270884:tid 271055] [client 202.179.95.79:50607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary17yGeq9LtYp4zuPOo2AAAACQ"]
[Wed Sep 30 01:10:39.713692 2026] [security2:error] [pid 270884:tid 271055] [client 202.179.95.79:50607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary17yGeq9LtYp4zuPOo2AAAACQ"]
[Wed Sep 30 01:10:39.714781 2026] [security2:error] [pid 270884:tid 271023] [client 85.203.36.122:64533] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary17yGeq9LtYp4zuPOo2QAAAAQ"]
[Wed Sep 30 01:10:39.736534 2026] [security2:error] [pid 270884:tid 271033] [client 20.70.173.30:38786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/baba.php"] [unique_id "ary17yGeq9LtYp4zuPOo2gAAAA4"]
[Wed Sep 30 01:10:39.738173 2026] [security2:error] [pid 270884:tid 271083] [client 85.203.36.107:55317] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary17yGeq9LtYp4zuPOo2wAAAEA"]
[Wed Sep 30 01:10:39.739184 2026] [security2:error] [pid 270884:tid 271079] [client 85.203.36.119:24481] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17yGeq9LtYp4zuPOo3AAAADw"]
[Wed Sep 30 01:10:39.740872 2026] [security2:error] [pid 270884:tid 271145] [client 45.89.242.85:61135] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary17yGeq9LtYp4zuPOo3QAAAH4"]
[Wed Sep 30 01:10:39.770649 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.770930 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.811466 2026] [security2:error] [pid 276620:tid 276839] [client 52.172.226.14:31098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/uejvv.php"] [unique_id "ary179PAdfEWqmGIkg1fxAAAAmQ"]
[Wed Sep 30 01:10:39.843112 2026] [security2:error] [pid 270884:tid 271036] [client 52.231.30.175:40101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary17yGeq9LtYp4zuPOo6AAAABE"]
[Wed Sep 30 01:10:39.861187 2026] [security2:error] [pid 276620:tid 276775] [client 20.58.177.98:30660] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bowrattler.com"] [uri "/c99.php"] [unique_id "ary179PAdfEWqmGIkg1fxgAAAiQ"]
[Wed Sep 30 01:10:39.863747 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.864198 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.898270 2026] [security2:error] [pid 270884:tid 271034] [client 20.194.5.96:25047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/wquosqsi.php"] [unique_id "ary17yGeq9LtYp4zuPOo6wAAAA8"]
[Wed Sep 30 01:10:39.952349 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:39.952622 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:39.962721 2026] [security2:error] [pid 270884:tid 271096] [client 20.28.180.172:34242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cns.php"] [unique_id "ary17yGeq9LtYp4zuPOo7QAAAE0"]
[Wed Sep 30 01:10:40.044680 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.044957 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.083510 2026] [security2:error] [pid 270884:tid 271118] [client 85.203.36.115:36983] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/plugins/index.php"] [unique_id "ary18CGeq9LtYp4zuPOo8gAAAGM"]
[Wed Sep 30 01:10:40.100052 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:40.100318 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:40.121148 2026] [security2:error] [pid 270884:tid 271128] [client 52.231.30.175:40064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/flamini.php"] [unique_id "ary18CGeq9LtYp4zuPOo9QAAAG0"]
[Wed Sep 30 01:10:40.137310 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.137598 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.173035 2026] [security2:error] [pid 270884:tid 271067] [client 20.219.19.141:21063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/dairg.php"] [unique_id "ary18CGeq9LtYp4zuPOo9wAAADA"]
[Wed Sep 30 01:10:40.229327 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.229602 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:27494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.235622 2026] [security2:error] [pid 270884:tid 271004] [remote 64.23.166.180:7892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.hzf.kga.mybluehost.me"] [uri "/.env"] [unique_id "ary18CGeq9LtYp4zuPOo_QAATHI"]
[Wed Sep 30 01:10:40.279491 2026] [security2:error] [pid 270884:tid 271065] [client 85.203.36.122:48365] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary18CGeq9LtYp4zuPOpAAAAAC4"]
[Wed Sep 30 01:10:40.315151 2026] [security2:error] [pid 270884:tid 271140] [client 182.69.182.151:18870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary18CGeq9LtYp4zuPOpAwAAAHk"]
[Wed Sep 30 01:10:40.315679 2026] [security2:error] [pid 270884:tid 271140] [client 182.69.182.151:18870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary18CGeq9LtYp4zuPOpAwAAAHk"]
[Wed Sep 30 01:10:40.318187 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.318463 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.323500 2026] [security2:error] [pid 276620:tid 276803] [client 45.138.12.32:32304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.juu.mzp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary18NPAdfEWqmGIkg1f1AAAAkA"]
[Wed Sep 30 01:10:40.328679 2026] [security2:error] [pid 276620:tid 276876] [client 20.194.30.107:17399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/js.php"] [unique_id "ary18NPAdfEWqmGIkg1f1QAAAok"]
[Wed Sep 30 01:10:40.382607 2026] [security2:error] [pid 276620:tid 276882] [client 52.231.30.175:38661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/myglu.php"] [unique_id "ary18NPAdfEWqmGIkg1f1wAAAo8"]
[Wed Sep 30 01:10:40.384832 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvbm9kZTA%3D
[Wed Sep 30 01:10:40.385278 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODAvbm9kZTA%3D
[Wed Sep 30 01:10:40.436639 2026] [security2:error] [pid 270884:tid 271127] [client 20.194.5.96:25077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/asset.php"] [unique_id "ary18CGeq9LtYp4zuPOpBQAAAGw"]
[Wed Sep 30 01:10:40.456614 2026] [security2:error] [pid 270884:tid 271073] [client 20.58.177.98:49973] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bowrattler.com"] [uri "/c99.php"] [unique_id "ary18CGeq9LtYp4zuPOpCAAAADY"]
[Wed Sep 30 01:10:40.460277 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.460542 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.498352 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.498617 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.512184 2026] [security2:error] [pid 270884:tid 271135] [client 85.203.36.122:47783] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary18CGeq9LtYp4zuPOpCwAAAHQ"]
[Wed Sep 30 01:10:40.569413 2026] [security2:error] [pid 270884:tid 271021] [client 103.168.67.253:9382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary18CGeq9LtYp4zuPOpDwAAAAI"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:40.575973 2026] [security2:error] [pid 270884:tid 271088] [client 85.203.36.107:43927] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/file.php"] [unique_id "ary18CGeq9LtYp4zuPOpEQAAAEU"]
[Wed Sep 30 01:10:40.591244 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.591756 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.608492 2026] [security2:error] [pid 276620:tid 276885] [client 168.100.149.77:19228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ef50cb5c759a2db82daeb7e24ca3b7b6.ed45.css.gz"] [unique_id "ary18NPAdfEWqmGIkg1f4wACknE"]
[Wed Sep 30 01:10:40.609880 2026] [access_compat:error] [pid 276620:tid 276781] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:40.610150 2026] [access_compat:error] [pid 276620:tid 276781] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:40.647590 2026] [security2:error] [pid 276059:tid 276289] [client 216.73.216.46:27494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary18HtqdHBwD77138e28AAAAe0"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTIvbm9kZTAvbWVtb3J5NjI%3D
[Wed Sep 30 01:10:40.651123 2026] [security2:error] [pid 270884:tid 271092] [client 52.231.30.175:40123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/alfa.php"] [unique_id "ary18CGeq9LtYp4zuPOpFgAAAEk"]
[Wed Sep 30 01:10:40.654799 2026] [security2:error] [pid 276620:tid 276761] [client 109.163.128.198:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary18NPAdfEWqmGIkg1f5gAAAhY"]
[Wed Sep 30 01:10:40.684333 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.684599 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.748854 2026] [security2:error] [pid 276620:tid 276824] [client 20.70.173.30:38864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/images.php"] [unique_id "ary18NPAdfEWqmGIkg1f6wAAAlU"]
[Wed Sep 30 01:10:40.752687 2026] [security2:error] [pid 270884:tid 271126] [client 45.186.199.8:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary18CGeq9LtYp4zuPOpIAAAAGs"]
[Wed Sep 30 01:10:40.773568 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.773847 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.814110 2026] [security2:error] [pid 270884:tid 271094] [client 20.58.177.98:45586] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bowrattler.com"] [uri "/c99.php"] [unique_id "ary18CGeq9LtYp4zuPOpJAAAAEs"]
[Wed Sep 30 01:10:40.833277 2026] [security2:error] [pid 270884:tid 271036] [client 45.89.242.84:36971] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/file.php"] [unique_id "ary18CGeq9LtYp4zuPOpJgAAABE"]
[Wed Sep 30 01:10:40.841212 2026] [security2:error] [pid 276620:tid 276763] [client 52.172.226.14:31050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/file.php"] [unique_id "ary18NPAdfEWqmGIkg1f7QAAAhg"]
[Wed Sep 30 01:10:40.865065 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.865328 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:40.867861 2026] [security2:error] [pid 270884:tid 271043] [client 45.89.242.86:57033] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/index.php"] [unique_id "ary18CGeq9LtYp4zuPOpJwAAABg"]
[Wed Sep 30 01:10:40.875139 2026] [security2:error] [pid 276620:tid 276779] [client 85.203.36.98:30627] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18NPAdfEWqmGIkg1f7wAAAig"]
[Wed Sep 30 01:10:40.886083 2026] [security2:error] [pid 270884:tid 271124] [client 20.219.2.60:11653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/hplfuns.php"] [unique_id "ary18CGeq9LtYp4zuPOpKAAAAGk"]
[Wed Sep 30 01:10:40.917021 2026] [security2:error] [pid 276620:tid 276850] [client 85.203.36.121:22241] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18NPAdfEWqmGIkg1f8AAAAm8"]
[Wed Sep 30 01:10:40.920898 2026] [security2:error] [pid 270884:tid 271114] [client 52.231.30.175:40076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/index.php"] [unique_id "ary18CGeq9LtYp4zuPOpLAAAAF8"]
[Wed Sep 30 01:10:40.956654 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:40.957094 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.038452 2026] [security2:error] [pid 270884:tid 271059] [client 103.168.67.253:9392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary18SGeq9LtYp4zuPOpNQAAACg"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:41.048419 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.048847 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.095712 2026] [security2:error] [pid 276059:tid 276286] [client 45.89.242.84:45323] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18XtqdHBwD77138e28gAAAeo"]
[Wed Sep 30 01:10:41.133582 2026] [security2:error] [pid 276620:tid 276868] [client 85.203.36.97:35903] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18dPAdfEWqmGIkg1f9gAAAoE"]
[Wed Sep 30 01:10:41.136538 2026] [security2:error] [pid 270884:tid 271041] [client 20.211.90.37:40388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/tiny.php"] [unique_id "ary18SGeq9LtYp4zuPOpOQAAABY"]
[Wed Sep 30 01:10:41.145194 2026] [access_compat:error] [pid 276620:tid 276834] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:41.145654 2026] [access_compat:error] [pid 276620:tid 276834] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:41.145938 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.146245 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:11183] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.175361 2026] [security2:error] [pid 276620:tid 276810] [client 136.242.98.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary18dPAdfEWqmGIkg1f-wAAAkc"]
[Wed Sep 30 01:10:41.191654 2026] [security2:error] [pid 276620:tid 276818] [client 52.231.30.175:38701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary18dPAdfEWqmGIkg1f_AAAAk8"]
[Wed Sep 30 01:10:41.235830 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.236118 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.255682 2026] [security2:error] [pid 270884:tid 271085] [client 20.219.19.141:20802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/dronishness.php"] [unique_id "ary18SGeq9LtYp4zuPOpQAAAAEI"]
[Wed Sep 30 01:10:41.285819 2026] [security2:error] [pid 270884:tid 271093] [client 103.211.18.63:56729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpQgAAAEo"]
[Wed Sep 30 01:10:41.285940 2026] [security2:error] [pid 270884:tid 271093] [client 103.211.18.63:56729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpQgAAAEo"]
[Wed Sep 30 01:10:41.307848 2026] [security2:error] [pid 270884:tid 271077] [client 52.172.226.14:12549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/elements.php"] [unique_id "ary18SGeq9LtYp4zuPOpQwAAADo"]
[Wed Sep 30 01:10:41.314638 2026] [security2:error] [pid 270884:tid 271112] [client 85.203.36.99:51909] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/index.php"] [unique_id "ary18SGeq9LtYp4zuPOpRAAAAF0"]
[Wed Sep 30 01:10:41.319237 2026] [security2:error] [pid 276620:tid 276772] [client 20.58.177.98:49958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/ttivnife.php"] [unique_id "ary18dPAdfEWqmGIkg1f_QAAAiE"]
[Wed Sep 30 01:10:41.329305 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.329591 2026] [access_compat:error] [pid 270884:tid 271027] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.341760 2026] [security2:error] [pid 270884:tid 271135] [client 20.70.173.30:38860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/0.php"] [unique_id "ary18SGeq9LtYp4zuPOpSAAAAHQ"]
[Wed Sep 30 01:10:41.398780 2026] [security2:error] [pid 270884:tid 271110] [client 105.112.178.79:38572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tourcom.com"] [uri "/__ss_probe_d8f3f79b61bf4f050b7dca215b2dc0ee__"] [unique_id "ary18SGeq9LtYp4zuPOpSQAAAFs"]
[Wed Sep 30 01:10:41.425999 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.426438 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.481123 2026] [security2:error] [pid 270884:tid 271084] [client 43.227.131.37:47975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpTQAAAEE"]
[Wed Sep 30 01:10:41.481311 2026] [security2:error] [pid 270884:tid 271084] [client 43.227.131.37:47975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpTQAAAEE"]
[Wed Sep 30 01:10:41.514013 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.514429 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:9650] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.530648 2026] [security2:error] [pid 276620:tid 276855] [client 216.73.216.46:11183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary18dPAdfEWqmGIkg1gAQAAAnQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NjAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTI3
[Wed Sep 30 01:10:41.611119 2026] [security2:error] [pid 270884:tid 271040] [client 85.203.36.120:22371] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/file.php"] [unique_id "ary18SGeq9LtYp4zuPOpUAAAABU"]
[Wed Sep 30 01:10:41.612251 2026] [security2:error] [pid 270884:tid 271099] [client 85.203.36.89:42513] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18SGeq9LtYp4zuPOpUQAAAFA"]
[Wed Sep 30 01:10:41.662917 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.663176 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.696511 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:41.696775 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:41.723042 2026] [security2:error] [pid 270884:tid 271130] [client 20.58.177.98:45601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/admin.php/2P.php"] [unique_id "ary18SGeq9LtYp4zuPOpVwAAAG8"]
[Wed Sep 30 01:10:41.748118 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.748384 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.758790 2026] [security2:error] [pid 270884:tid 271037] [client 52.231.30.175:38722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary18SGeq9LtYp4zuPOpWgAAABI"]
[Wed Sep 30 01:10:41.768667 2026] [security2:error] [pid 270884:tid 271139] [client 52.172.226.14:31063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/sitemap.php"] [unique_id "ary18SGeq9LtYp4zuPOpXAAAAHg"]
[Wed Sep 30 01:10:41.772720 2026] [security2:error] [pid 270884:tid 271048] [client 20.194.5.96:25045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/cued.php"] [unique_id "ary18SGeq9LtYp4zuPOpXQAAAB0"]
[Wed Sep 30 01:10:41.820098 2026] [security2:error] [pid 270884:tid 271039] [client 116.193.128.26:57969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpXwAAABQ"]
[Wed Sep 30 01:10:41.820204 2026] [security2:error] [pid 270884:tid 271039] [client 116.193.128.26:57969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary18SGeq9LtYp4zuPOpXwAAABQ"]
[Wed Sep 30 01:10:41.839144 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.839404 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.841520 2026] [security2:error] [pid 270884:tid 271033] [client 20.70.173.30:33333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/simple.php"] [unique_id "ary18SGeq9LtYp4zuPOpYgAAAA4"]
[Wed Sep 30 01:10:41.842703 2026] [security2:error] [pid 270884:tid 271079] [client 45.138.12.32:32422] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rfn.buu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary18SGeq9LtYp4zuPOpYwAAADw"]
[Wed Sep 30 01:10:41.848507 2026] [security2:error] [pid 270884:tid 271060] [client 20.194.30.107:42832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/blurbs.php"] [unique_id "ary18SGeq9LtYp4zuPOpZQAAACk"]
[Wed Sep 30 01:10:41.879131 2026] [security2:error] [pid 270884:tid 271059] [client 203.168.157.39:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary18SGeq9LtYp4zuPOpagAAACg"]
[Wed Sep 30 01:10:41.880666 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.880928 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.922059 2026] [security2:error] [pid 276620:tid 276871] [client 85.203.36.100:59971] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18dPAdfEWqmGIkg1gBgAAAoQ"]
[Wed Sep 30 01:10:41.926311 2026] [security2:error] [pid 270884:tid 271142] [client 216.73.216.46:9650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary18SGeq9LtYp4zuPOpbAAAAHs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5NDE2
[Wed Sep 30 01:10:41.951177 2026] [security2:error] [pid 270884:tid 271045] [client 45.89.242.90:39017] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18SGeq9LtYp4zuPOpbQAAABo"]
[Wed Sep 30 01:10:41.969285 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:41.969566 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:41.997534 2026] [security2:error] [pid 270884:tid 271106] [client 20.198.74.230:23880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/dot.php"] [unique_id "ary18SGeq9LtYp4zuPOpcAAAAFc"]
[Wed Sep 30 01:10:42.018927 2026] [security2:error] [pid 276620:tid 276820] [client 52.231.30.175:38727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/admin.php"] [unique_id "ary18tPAdfEWqmGIkg1gCAAAAlE"]
[Wed Sep 30 01:10:42.059099 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.059379 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.122635 2026] [security2:error] [pid 270884:tid 271058] [client 105.112.178.79:38573] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.prv.wng.mybluehost.me"] [uri "/__ss_probe_4080371c384d336bbabc85da62c38549__"] [unique_id "ary18iGeq9LtYp4zuPOpcwAAACc"]
[Wed Sep 30 01:10:42.143166 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:42.143464 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:42.150957 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.151234 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.158653 2026] [security2:error] [pid 270884:tid 271140] [client 20.58.177.98:30701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/a.php"] [unique_id "ary18iGeq9LtYp4zuPOpegAAAHk"]
[Wed Sep 30 01:10:42.177198 2026] [security2:error] [pid 276620:tid 276775] [client 85.203.36.124:46829] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/file.php"] [unique_id "ary18tPAdfEWqmGIkg1gCgAAAiQ"]
[Wed Sep 30 01:10:42.242300 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.242574 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.248835 2026] [security2:error] [pid 270884:tid 271056] [client 52.172.226.14:12574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/xetmolxr.php"] [unique_id "ary18iGeq9LtYp4zuPOpfAAAACU"]
[Wed Sep 30 01:10:42.285621 2026] [security2:error] [pid 270884:tid 271027] [client 52.231.30.175:38694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary18iGeq9LtYp4zuPOpggAAAAg"]
[Wed Sep 30 01:10:42.306718 2026] [security2:error] [pid 276620:tid 276821] [client 20.28.180.172:29606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/qnHOQSw8LXV.php"] [unique_id "ary18tPAdfEWqmGIkg1gDgAAAlI"]
[Wed Sep 30 01:10:42.335219 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.335660 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.425255 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.425554 2026] [access_compat:error] [pid 270884:tid 271130] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.433239 2026] [security2:error] [pid 270884:tid 271036] [client 85.203.36.112:37745] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/file.php"] [unique_id "ary18iGeq9LtYp4zuPOpkAAAABE"]
[Wed Sep 30 01:10:42.452320 2026] [security2:error] [pid 270884:tid 271094] [client 85.203.36.127:26121] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary18iGeq9LtYp4zuPOplAAAAEs"]
[Wed Sep 30 01:10:42.488685 2026] [security2:error] [pid 276059:tid 276284] [client 45.166.5.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary18ntqdHBwD77138e2-AAAAeg"]
[Wed Sep 30 01:10:42.516166 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.516442 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.526482 2026] [security2:error] [pid 270884:tid 271096] [client 20.58.177.98:49974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/cord.php"] [unique_id "ary18iGeq9LtYp4zuPOplwAAAE0"]
[Wed Sep 30 01:10:42.546697 2026] [security2:error] [pid 276059:tid 276201] [client 85.203.36.104:20127] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/plugins/fix/000.php"] [unique_id "ary18ntqdHBwD77138e2-QAAAZY"]
[Wed Sep 30 01:10:42.553702 2026] [security2:error] [pid 270884:tid 271059] [client 52.231.30.175:38660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary18iGeq9LtYp4zuPOpmQAAACg"]
[Wed Sep 30 01:10:42.602345 2026] [security2:error] [pid 270884:tid 271031] [client 20.194.5.96:25375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/sd.php"] [unique_id "ary18iGeq9LtYp4zuPOpnAAAAAw"]
[Wed Sep 30 01:10:42.607475 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.607727 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.609898 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:42.610157 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:42.624462 2026] [security2:error] [pid 276620:tid 276839] [client 106.214.2.47:20608] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary18tPAdfEWqmGIkg1gFAAAAmQ"]
[Wed Sep 30 01:10:42.624598 2026] [security2:error] [pid 276620:tid 276839] [client 106.214.2.47:20608] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary18tPAdfEWqmGIkg1gFAAAAmQ"]
[Wed Sep 30 01:10:42.625614 2026] [security2:error] [pid 270884:tid 271102] [client 168.100.149.69:36832] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/216e26ec8a0a267549f4a5625dbf60a5.355.css.gz"] [unique_id "ary18iGeq9LtYp4zuPOpngAAU28"]
[Wed Sep 30 01:10:42.698570 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.698849 2026] [access_compat:error] [pid 270884:tid 271075] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.706881 2026] [security2:error] [pid 270884:tid 271072] [client 20.70.173.30:56389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/fling.php"] [unique_id "ary18iGeq9LtYp4zuPOpogAAADU"]
[Wed Sep 30 01:10:42.724367 2026] [security2:error] [pid 270884:tid 271041] [client 52.172.226.14:12587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/mini.php"] [unique_id "ary18iGeq9LtYp4zuPOppAAAABY"]
[Wed Sep 30 01:10:42.788317 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.788600 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.795228 2026] [core:error] [pid 270884:tid 271090] [client 199.45.155.19:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:42.795248 2026] [core:error] [pid 270884:tid 271090] [client 199.45.155.19:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:10:42.834996 2026] [security2:error] [pid 270884:tid 271024] [client 20.211.90.37:39920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/lock.php"] [unique_id "ary18iGeq9LtYp4zuPOpugAAAAU"]
[Wed Sep 30 01:10:42.835670 2026] [security2:error] [pid 270884:tid 271122] [client 52.231.30.175:40170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/cgi-bin/index.php"] [unique_id "ary18iGeq9LtYp4zuPOpuwAAAGc"]
[Wed Sep 30 01:10:42.848723 2026] [security2:error] [pid 276620:tid 276812] [client 20.28.180.172:18140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ajax.php"] [unique_id "ary18tPAdfEWqmGIkg1gFwAAAkk"]
[Wed Sep 30 01:10:42.879819 2026] [access_compat:error] [pid 270884:tid 271055] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.880091 2026] [access_compat:error] [pid 270884:tid 271055] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.926896 2026] [security2:error] [pid 270884:tid 271130] [client 85.203.36.115:59687] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18iGeq9LtYp4zuPOpwAAAAG8"]
[Wed Sep 30 01:10:42.973379 2026] [security2:error] [pid 270884:tid 271048] [client 85.203.36.89:48849] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/file.php"] [unique_id "ary18iGeq9LtYp4zuPOpwwAAAB0"]
[Wed Sep 30 01:10:42.974477 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:42.974910 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:42.976559 2026] [security2:error] [pid 276620:tid 276882] [client 20.58.177.98:45610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/anom.php"] [unique_id "ary18tPAdfEWqmGIkg1gGQAAAo8"]
[Wed Sep 30 01:10:42.980304 2026] [security2:error] [pid 276620:tid 276766] [client 45.89.242.85:62883] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18tPAdfEWqmGIkg1gGgAAAhs"]
[Wed Sep 30 01:10:42.987214 2026] [security2:error] [pid 270884:tid 271141] [client 155.190.6.18:38940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary18iGeq9LtYp4zuPOpxAAAAHo"]
[Wed Sep 30 01:10:43.004962 2026] [security2:error] [pid 276620:tid 276764] [client 20.194.5.96:25054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/ans.php"] [unique_id "ary189PAdfEWqmGIkg1gGwAAAhk"]
[Wed Sep 30 01:10:43.009468 2026] [security2:error] [pid 270884:tid 271060] [client 20.194.30.107:17374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/echkm.php"] [unique_id "ary18yGeq9LtYp4zuPOpxQAAACk"]
[Wed Sep 30 01:10:43.062273 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.062552 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.070888 2026] [security2:error] [pid 270884:tid 271131] [client 20.219.19.141:20839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/Row_wsoo.php"] [unique_id "ary18yGeq9LtYp4zuPOpyAAAAHA"]
[Wed Sep 30 01:10:43.096456 2026] [security2:error] [pid 276620:tid 276788] [client 52.231.30.175:40165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-manager.php"] [unique_id "ary189PAdfEWqmGIkg1gHQAAAjE"]
[Wed Sep 30 01:10:43.100724 2026] [security2:error] [pid 270884:tid 271054] [client 116.197.133.25:57416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary18yGeq9LtYp4zuPOpyQAAACM"]
[Wed Sep 30 01:10:43.100910 2026] [security2:error] [pid 270884:tid 271054] [client 116.197.133.25:57416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary18yGeq9LtYp4zuPOpyQAAACM"]
[Wed Sep 30 01:10:43.137779 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:43.138214 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:10:43.153429 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.153696 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.249399 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.249847 2026] [access_compat:error] [pid 270884:tid 271129] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.251918 2026] [security2:error] [pid 270884:tid 271045] [client 52.172.226.14:31088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/zwso.php"] [unique_id "ary18yGeq9LtYp4zuPOp0gAAABo"]
[Wed Sep 30 01:10:43.252289 2026] [security2:error] [pid 270884:tid 271083] [client 152.56.240.85:61275] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary18yGeq9LtYp4zuPOp0QAAAEA"]
[Wed Sep 30 01:10:43.252429 2026] [security2:error] [pid 270884:tid 271083] [client 152.56.240.85:61275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary18yGeq9LtYp4zuPOp0QAAAEA"]
[Wed Sep 30 01:10:43.255712 2026] [security2:error] [pid 270884:tid 271103] [client 85.203.36.124:21403] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/file.php"] [unique_id "ary18yGeq9LtYp4zuPOp0wAAAFQ"]
[Wed Sep 30 01:10:43.262637 2026] [security2:error] [pid 270884:tid 271141] [client 155.190.6.18:38940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary18iGeq9LtYp4zuPOpxAAAAHo"]
[Wed Sep 30 01:10:43.340501 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.340942 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.344302 2026] [security2:error] [pid 270884:tid 271090] [client 20.58.177.98:30678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/plugins.php"] [unique_id "ary18yGeq9LtYp4zuPOp2QAAAEc"]
[Wed Sep 30 01:10:43.359164 2026] [security2:error] [pid 276059:tid 276258] [client 52.231.30.175:40070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary183tqdHBwD77138e2_QAAAc4"]
[Wed Sep 30 01:10:43.387542 2026] [security2:error] [pid 276620:tid 276773] [client 85.203.36.111:57743] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary189PAdfEWqmGIkg1gIwAAAiI"]
[Wed Sep 30 01:10:43.426780 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.427051 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.436316 2026] [security2:error] [pid 270884:tid 271116] [client 85.203.36.86:42967] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary18yGeq9LtYp4zuPOp3QAAAGE"]
[Wed Sep 30 01:10:43.440876 2026] [security2:error] [pid 270884:tid 271071] [client 179.49.63.61:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary18yGeq9LtYp4zuPOp3gAAADQ"]
[Wed Sep 30 01:10:43.520525 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.520790 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.521453 2026] [security2:error] [pid 270884:tid 271127] [client 20.194.96.176:42622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/b8.php"] [unique_id "ary18yGeq9LtYp4zuPOp5AAAAGw"]
[Wed Sep 30 01:10:43.532251 2026] [security2:error] [pid 270884:tid 271008] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary18yGeq9LtYp4zuPOp5gAARXY"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D228924
[Wed Sep 30 01:10:43.532282 2026] [security2:error] [pid 270884:tid 271008] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary18yGeq9LtYp4zuPOp5gAARXY"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D228924
[Wed Sep 30 01:10:43.571325 2026] [security2:error] [pid 270884:tid 271044] [client 85.203.36.97:44511] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18yGeq9LtYp4zuPOp5wAAABk"]
[Wed Sep 30 01:10:43.607999 2026] [access_compat:error] [pid 276620:tid 276800] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:43.608428 2026] [access_compat:error] [pid 276620:tid 276800] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:43.609700 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.610004 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.626536 2026] [security2:error] [pid 270884:tid 271110] [client 52.231.30.175:40133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary18yGeq9LtYp4zuPOp7QAAAFs"]
[Wed Sep 30 01:10:43.632664 2026] [security2:error] [pid 276620:tid 276801] [client 20.194.5.96:25035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/cns.php"] [unique_id "ary189PAdfEWqmGIkg1gKAAAAj4"]
[Wed Sep 30 01:10:43.700490 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.700749 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.733872 2026] [security2:error] [pid 276620:tid 276863] [client 52.172.226.14:12585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/tiny.php"] [unique_id "ary189PAdfEWqmGIkg1gKgAAAnw"]
[Wed Sep 30 01:10:43.738305 2026] [security2:error] [pid 276620:tid 276874] [client 20.58.177.98:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/zlwvxiyp.php"] [unique_id "ary189PAdfEWqmGIkg1gKwAAAoc"]
[Wed Sep 30 01:10:43.792190 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.792622 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.797616 2026] [security2:error] [pid 270884:tid 271019] [client 45.89.242.85:39721] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary18yGeq9LtYp4zuPOp9gAAAAA"]
[Wed Sep 30 01:10:43.828864 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary18yGeq9LtYp4zuPOp9wAACxg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=480&t=20588
[Wed Sep 30 01:10:43.828908 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary18yGeq9LtYp4zuPOp9wAACxg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=480&t=20588
[Wed Sep 30 01:10:43.836510 2026] [security2:error] [pid 270884:tid 271130] [client 85.203.36.90:26145] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18yGeq9LtYp4zuPOp-AAAAG8"]
[Wed Sep 30 01:10:43.887118 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.887574 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:45403] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:43.961225 2026] [security2:error] [pid 270884:tid 271048] [client 45.89.242.84:61305] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary18yGeq9LtYp4zuPOp-gAAAB0"]
[Wed Sep 30 01:10:43.978890 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:43.979321 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.059999 2026] [security2:error] [pid 270884:tid 271034] [client 20.58.177.98:45574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/1Be5IfrlWP.php"] [unique_id "ary19CGeq9LtYp4zuPOp_gAAAA8"]
[Wed Sep 30 01:10:44.069053 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.069482 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.088374 2026] [security2:error] [pid 270884:tid 271115] [client 85.203.36.105:48997] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/file.php"] [unique_id "ary19CGeq9LtYp4zuPOqAQAAAGA"]
[Wed Sep 30 01:10:44.112440 2026] [security2:error] [pid 276620:tid 276639] [remote 47.84.162.224:24096] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/wp-content/gallery/induction-of-new-board/thumbs/thumbs_dsc_8274.jpg"] [unique_id "ary19NPAdfEWqmGIkg1gMgACewk"]
[Wed Sep 30 01:10:44.132581 2026] [security2:error] [pid 276620:tid 276653] [remote 220.181.108.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary19NPAdfEWqmGIkg1gMwACKBc"]
[Wed Sep 30 01:10:44.143647 2026] [access_compat:error] [pid 276620:tid 276822] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:44.143948 2026] [access_compat:error] [pid 276620:tid 276822] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:44.156648 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.156934 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.230661 2026] [security2:error] [pid 270884:tid 271059] [client 52.172.226.14:46782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/simple.php"] [unique_id "ary19CGeq9LtYp4zuPOqAwAAACg"]
[Wed Sep 30 01:10:44.239788 2026] [security2:error] [pid 270884:tid 271137] [client 20.219.2.60:11650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tfm.php"] [unique_id "ary19CGeq9LtYp4zuPOqBQAAAHY"]
[Wed Sep 30 01:10:44.249268 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.249554 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.272005 2026] [security2:error] [pid 276620:tid 276868] [client 20.28.180.172:29472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/resp.php"] [unique_id "ary19NPAdfEWqmGIkg1gNwAAAoE"]
[Wed Sep 30 01:10:44.305376 2026] [security2:error] [pid 270884:tid 271142] [client 216.73.216.46:45403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary19CGeq9LtYp4zuPOqCwAAAHs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAzL25vZGUwL21lbW9yeTI2OS9ub2RlMC9jcHU2
[Wed Sep 30 01:10:44.307115 2026] [security2:error] [pid 270884:tid 271113] [client 20.211.90.37:39997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/mail.php"] [unique_id "ary19CGeq9LtYp4zuPOqDQAAAF4"]
[Wed Sep 30 01:10:44.318713 2026] [security2:error] [pid 276620:tid 276810] [client 52.231.30.175:40183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary19NPAdfEWqmGIkg1gOQAAAkc"]
[Wed Sep 30 01:10:44.339266 2026] [security2:error] [pid 270884:tid 271119] [client 20.194.5.96:25044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/faiy.php"] [unique_id "ary19CGeq9LtYp4zuPOqDwAAAGQ"]
[Wed Sep 30 01:10:44.344429 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.344861 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.412962 2026] [security2:error] [pid 276620:tid 276818] [client 85.203.36.99:45503] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary19NPAdfEWqmGIkg1gOwAAAk8"]
[Wed Sep 30 01:10:44.416188 2026] [security2:error] [pid 270884:tid 271068] [client 20.58.177.98:49976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary19CGeq9LtYp4zuPOqEAAAADE"]
[Wed Sep 30 01:10:44.431712 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.431998 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:17070] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.462000 2026] [security2:error] [pid 276620:tid 276793] [client 223.181.60.167:3559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gPgAAAjY"]
[Wed Sep 30 01:10:44.462175 2026] [security2:error] [pid 276620:tid 276793] [client 223.181.60.167:3559] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gPgAAAjY"]
[Wed Sep 30 01:10:44.488910 2026] [security2:error] [pid 276620:tid 276826] [client 20.219.19.141:20892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/x2.php"] [unique_id "ary19NPAdfEWqmGIkg1gQAAAAlc"]
[Wed Sep 30 01:10:44.511564 2026] [security2:error] [pid 270884:tid 271028] [client 114.119.136.15:45607] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.daytonago.org"] [uri "/academy.php"] [unique_id "ary19CGeq9LtYp4zuPOqEwAAAAk"], referer: https://www.daytonago.org/
[Wed Sep 30 01:10:44.521272 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.521544 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.582543 2026] [security2:error] [pid 276620:tid 276878] [client 52.231.30.175:40097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary19NPAdfEWqmGIkg1gRAAAAos"]
[Wed Sep 30 01:10:44.599985 2026] [security2:error] [pid 270884:tid 271073] [client 180.92.142.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary19CGeq9LtYp4zuPOqGAAAADY"]
[Wed Sep 30 01:10:44.608266 2026] [security2:error] [pid 270884:tid 271120] [client 168.100.149.67:57502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/877feabf83a577d6529f8aaf796d862d.1ed.css.gz"] [unique_id "ary19CGeq9LtYp4zuPOqGQAAZVA"]
[Wed Sep 30 01:10:44.611571 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:44.611862 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:44.632354 2026] [security2:error] [pid 270884:tid 271118] [client 85.203.36.117:32699] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary19CGeq9LtYp4zuPOqHAAAAGM"]
[Wed Sep 30 01:10:44.655876 2026] [security2:error] [pid 276620:tid 276782] [client 85.203.36.102:45195] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary19NPAdfEWqmGIkg1gSAAAAis"]
[Wed Sep 30 01:10:44.659232 2026] [access_compat:error] [pid 276620:tid 276855] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:44.659509 2026] [access_compat:error] [pid 276620:tid 276855] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:44.728648 2026] [security2:error] [pid 276620:tid 276827] [client 52.172.226.14:12555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/buy.php"] [unique_id "ary19NPAdfEWqmGIkg1gTAAAAlg"]
[Wed Sep 30 01:10:44.734323 2026] [security2:error] [pid 270884:tid 271023] [client 85.203.36.106:63969] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary19CGeq9LtYp4zuPOqIAAAAAQ"]
[Wed Sep 30 01:10:44.760428 2026] [security2:error] [pid 270884:tid 271020] [client 20.58.177.98:30703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/admin.php/c.php"] [unique_id "ary19CGeq9LtYp4zuPOqJAAAAAE"]
[Wed Sep 30 01:10:44.778607 2026] [security2:error] [pid 276059:tid 276246] [client 85.203.36.110:57645] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary19HtqdHBwD77138e3BwAAAcI"]
[Wed Sep 30 01:10:44.847610 2026] [security2:error] [pid 276620:tid 276789] [client 216.73.216.46:17070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary19NPAdfEWqmGIkg1gTQAAAjI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk4MS9ub2RlMC9jcHU2
[Wed Sep 30 01:10:44.852215 2026] [security2:error] [pid 270884:tid 271037] [client 68.167.72.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary19CGeq9LtYp4zuPOqKQAAABI"]
[Wed Sep 30 01:10:44.863790 2026] [security2:error] [pid 276620:tid 276879] [client 103.241.204.139:59217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gTgAAAow"]
[Wed Sep 30 01:10:44.863912 2026] [security2:error] [pid 276620:tid 276879] [client 103.241.204.139:59217] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gTgAAAow"]
[Wed Sep 30 01:10:44.880504 2026] [security2:error] [pid 270884:tid 271019] [client 185.165.171.177:58038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.171.165.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/wp-login.php"] [unique_id "ary19CGeq9LtYp4zuPOqJwAAAAA"], referer: http://kbm-realty.com/wp-login.php
[Wed Sep 30 01:10:44.941801 2026] [security2:error] [pid 276620:tid 276775] [client 20.194.5.96:25037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/gecho.php"] [unique_id "ary19NPAdfEWqmGIkg1gUAAAAiQ"]
[Wed Sep 30 01:10:44.973288 2026] [security2:error] [pid 276620:tid 276777] [client 223.235.102.107:24247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gUQAAAiY"]
[Wed Sep 30 01:10:44.973475 2026] [security2:error] [pid 276620:tid 276777] [client 223.235.102.107:24247] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary19NPAdfEWqmGIkg1gUQAAAiY"]
[Wed Sep 30 01:10:44.987689 2026] [security2:error] [pid 276620:tid 276853] [client 20.211.90.37:39875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/system_log.php"] [unique_id "ary19NPAdfEWqmGIkg1gUgAAAnI"]
[Wed Sep 30 01:10:45.001731 2026] [security2:error] [pid 270884:tid 271048] [client 45.89.242.83:22951] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary19SGeq9LtYp4zuPOqLwAAAB0"]
[Wed Sep 30 01:10:45.025893 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:45.026291 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:45.036748 2026] [security2:error] [pid 270884:tid 270942] [remote 64.23.166.180:7896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.iaa.tvp.mybluehost.me"] [uri "/.env"] [unique_id "ary19SGeq9LtYp4zuPOqNAAAGDg"]
[Wed Sep 30 01:10:45.043772 2026] [security2:error] [pid 270884:tid 271123] [client 4.240.25.22:33219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "ary19SGeq9LtYp4zuPOqNgAAAGg"]
[Wed Sep 30 01:10:45.073122 2026] [security2:error] [pid 270884:tid 271096] [client 45.89.242.85:35997] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary19SGeq9LtYp4zuPOqNwAAAE0"]
[Wed Sep 30 01:10:45.119813 2026] [security2:error] [pid 276620:tid 276784] [client 20.58.177.98:49946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/admin.php/go.php"] [unique_id "ary19dPAdfEWqmGIkg1gVAAAAi0"]
[Wed Sep 30 01:10:45.120843 2026] [access_compat:error] [pid 276620:tid 276769] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:45.121126 2026] [access_compat:error] [pid 276620:tid 276769] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:45.131719 2026] [security2:error] [pid 270884:tid 271146] [client 52.231.30.175:38679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/matcha.php"] [unique_id "ary19SGeq9LtYp4zuPOqOQAAAH8"]
[Wed Sep 30 01:10:45.183659 2026] [security2:error] [pid 276620:tid 276848] [client 4.240.25.22:63654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/one.php"] [unique_id "ary19dPAdfEWqmGIkg1gVQAAAm0"]
[Wed Sep 30 01:10:45.195345 2026] [security2:error] [pid 276059:tid 276281] [client 52.172.226.14:12544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ioxi-o.php"] [unique_id "ary19XtqdHBwD77138e3CwAAAeU"]
[Wed Sep 30 01:10:45.234515 2026] [security2:error] [pid 276620:tid 276783] [client 110.238.206.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary19dPAdfEWqmGIkg1gWAAAAiw"]
[Wed Sep 30 01:10:45.334595 2026] [security2:error] [pid 276620:tid 276645] [remote 220.181.108.111:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary19dPAdfEWqmGIkg1gWwACbg8"]
[Wed Sep 30 01:10:45.399158 2026] [security2:error] [pid 276620:tid 276814] [client 52.231.30.175:38746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/aboutt.php"] [unique_id "ary19dPAdfEWqmGIkg1gXQAAAks"]
[Wed Sep 30 01:10:45.498963 2026] [security2:error] [pid 270884:tid 271075] [client 20.58.177.98:30675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/groud3.php"] [unique_id "ary19SGeq9LtYp4zuPOqRAAAADg"]
[Wed Sep 30 01:10:45.525765 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:45.526048 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:45.541325 2026] [security2:error] [pid 270884:tid 271071] [client 85.203.36.124:65011] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary19SGeq9LtYp4zuPOqSAAAADQ"]
[Wed Sep 30 01:10:45.664632 2026] [security2:error] [pid 270884:tid 271047] [client 52.172.226.14:12588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ans.php"] [unique_id "ary19SGeq9LtYp4zuPOqTgAAABw"]
[Wed Sep 30 01:10:45.673117 2026] [access_compat:error] [pid 276620:tid 276761] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:45.673399 2026] [access_compat:error] [pid 276620:tid 276761] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:45.674078 2026] [security2:error] [pid 270884:tid 271053] [client 52.231.30.175:38720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/opsh.php"] [unique_id "ary19SGeq9LtYp4zuPOqUAAAACI"]
[Wed Sep 30 01:10:45.711737 2026] [security2:error] [pid 276620:tid 276860] [client 20.194.5.96:25253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/gu.php"] [unique_id "ary19dPAdfEWqmGIkg1gYgAAAnk"]
[Wed Sep 30 01:10:45.730823 2026] [security2:error] [pid 276620:tid 276842] [client 85.203.36.112:31655] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary19dPAdfEWqmGIkg1gZQAAAmc"]
[Wed Sep 30 01:10:45.837647 2026] [security2:error] [pid 270884:tid 271026] [client 20.58.177.98:30658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/gaxby.php"] [unique_id "ary19SGeq9LtYp4zuPOqVAAAAAc"]
[Wed Sep 30 01:10:45.915729 2026] [security2:error] [pid 270884:tid 271030] [client 20.219.2.60:11384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/8573.php"] [unique_id "ary19SGeq9LtYp4zuPOqWQAAAAs"]
[Wed Sep 30 01:10:45.929215 2026] [security2:error] [pid 270884:tid 271130] [client 222.167.117.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary19SGeq9LtYp4zuPOqWgAAAG8"]
[Wed Sep 30 01:10:45.937384 2026] [security2:error] [pid 270884:tid 271039] [client 52.231.30.175:40172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/photo.php"] [unique_id "ary19SGeq9LtYp4zuPOqWwAAABQ"]
[Wed Sep 30 01:10:46.023095 2026] [security2:error] [pid 270884:tid 271124] [client 45.89.242.86:38431] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary19iGeq9LtYp4zuPOqXgAAAGk"]
[Wed Sep 30 01:10:46.030832 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:46.031256 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:46.053141 2026] [security2:error] [pid 270884:tid 271115] [client 38.80.12.74:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary19iGeq9LtYp4zuPOqYQAAAGA"]
[Wed Sep 30 01:10:46.060348 2026] [security2:error] [pid 270884:tid 271054] [client 20.219.19.141:20805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/v4.php"] [unique_id "ary19iGeq9LtYp4zuPOqYgAAACM"]
[Wed Sep 30 01:10:46.080004 2026] [security2:error] [pid 276620:tid 276882] [client 49.43.163.212:49618] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary19tPAdfEWqmGIkg1gaAAAAo8"]
[Wed Sep 30 01:10:46.080124 2026] [security2:error] [pid 276620:tid 276882] [client 49.43.163.212:49618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary19tPAdfEWqmGIkg1gaAAAAo8"]
[Wed Sep 30 01:10:46.116464 2026] [security2:error] [pid 276620:tid 276847] [client 20.70.173.30:33397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/new.php"] [unique_id "ary19tPAdfEWqmGIkg1gaQAAAmw"]
[Wed Sep 30 01:10:46.121772 2026] [security2:error] [pid 270884:tid 271056] [client 20.194.5.96:25162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/nck.php"] [unique_id "ary19iGeq9LtYp4zuPOqZQAAACU"]
[Wed Sep 30 01:10:46.134482 2026] [security2:error] [pid 270884:tid 271025] [client 52.172.226.14:18686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/gf.php"] [unique_id "ary19iGeq9LtYp4zuPOqZgAAAAY"]
[Wed Sep 30 01:10:46.140681 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:46.140995 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:46.166376 2026] [security2:error] [pid 270884:tid 270984] [remote 220.181.108.155:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary19iGeq9LtYp4zuPOqZwAAaF4"]
[Wed Sep 30 01:10:46.200711 2026] [security2:error] [pid 270884:tid 271117] [client 20.58.177.98:30682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/dh9u7.php"] [unique_id "ary19iGeq9LtYp4zuPOqaQAAAGI"]
[Wed Sep 30 01:10:46.200798 2026] [security2:error] [pid 270884:tid 271146] [client 52.231.30.175:40188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-fxxxx.php"] [unique_id "ary19iGeq9LtYp4zuPOqagAAAH8"]
[Wed Sep 30 01:10:46.218194 2026] [security2:error] [pid 270884:tid 271028] [client 37.41.16.35:61286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary19iGeq9LtYp4zuPOqawAAAAk"]
[Wed Sep 30 01:10:46.218322 2026] [security2:error] [pid 270884:tid 271028] [client 37.41.16.35:61286] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary19iGeq9LtYp4zuPOqawAAAAk"]
[Wed Sep 30 01:10:46.225684 2026] [security2:error] [pid 276620:tid 276822] [client 20.211.90.37:39881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/file.php"] [unique_id "ary19tPAdfEWqmGIkg1gbQAAAlM"]
[Wed Sep 30 01:10:46.239579 2026] [security2:error] [pid 276620:tid 276759] [client 185.165.171.177:58044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.171.165.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kbm-realty.com"] [uri "/wp-login.php"] [unique_id "ary19tPAdfEWqmGIkg1gbgAAAhQ"], referer: http://kbm-realty.com/wp-login.php
[Wed Sep 30 01:10:46.267122 2026] [security2:error] [pid 270884:tid 271087] [client 45.89.242.83:39163] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary19iGeq9LtYp4zuPOqbgAAAEQ"]
[Wed Sep 30 01:10:46.286696 2026] [security2:error] [pid 270884:tid 271072] [client 20.28.180.172:18318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/install.php"] [unique_id "ary19iGeq9LtYp4zuPOqbwAAADU"]
[Wed Sep 30 01:10:46.306866 2026] [security2:error] [pid 270884:tid 271059] [client 4.240.25.22:8478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/11.php"] [unique_id "ary19iGeq9LtYp4zuPOqcgAAACg"]
[Wed Sep 30 01:10:46.449577 2026] [security2:error] [pid 270884:tid 271068] [client 20.198.74.230:24145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wp-9p3vdgw.php"] [unique_id "ary19iGeq9LtYp4zuPOqegAAADE"]
[Wed Sep 30 01:10:46.465201 2026] [security2:error] [pid 270884:tid 271071] [client 52.231.30.175:40079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary19iGeq9LtYp4zuPOqfAAAADQ"]
[Wed Sep 30 01:10:46.496970 2026] [security2:error] [pid 270884:tid 271095] [client 85.203.36.89:51829] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary19iGeq9LtYp4zuPOqfgAAAEw"]
[Wed Sep 30 01:10:46.525602 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:46.525875 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:46.597225 2026] [security2:error] [pid 270884:tid 271140] [client 52.172.226.14:12579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/man.php"] [unique_id "ary19iGeq9LtYp4zuPOqhAAAAHk"]
[Wed Sep 30 01:10:46.598096 2026] [security2:error] [pid 270884:tid 271061] [client 20.58.177.98:45609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/yvnqcuic.php"] [unique_id "ary19iGeq9LtYp4zuPOqhQAAACo"]
[Wed Sep 30 01:10:46.604798 2026] [security2:error] [pid 270884:tid 271122] [client 85.203.36.103:52047] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/txets.php"] [unique_id "ary19iGeq9LtYp4zuPOqhgAAAGc"]
[Wed Sep 30 01:10:46.610755 2026] [security2:error] [pid 270884:tid 271077] [client 168.100.149.28:38192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/1aed6e10b4078d18b3fbdd428dff7575.cd.css.gz"] [unique_id "ary19iGeq9LtYp4zuPOqhwAAOgk"]
[Wed Sep 30 01:10:46.637011 2026] [security2:error] [pid 276620:tid 276791] [client 20.194.5.96:25200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/xtt.php"] [unique_id "ary19tPAdfEWqmGIkg1gcwAAAjQ"]
[Wed Sep 30 01:10:46.667786 2026] [access_compat:error] [pid 276620:tid 276834] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:46.668069 2026] [access_compat:error] [pid 276620:tid 276834] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:46.743545 2026] [security2:error] [pid 270884:tid 271100] [client 52.231.30.175:38747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/ffl.php"] [unique_id "ary19iGeq9LtYp4zuPOqkQAAAFE"]
[Wed Sep 30 01:10:46.807260 2026] [security2:error] [pid 276620:tid 276771] [client 45.138.12.32:45422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jvl.icl.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary19tPAdfEWqmGIkg1geQAAAiA"]
[Wed Sep 30 01:10:46.831529 2026] [security2:error] [pid 270884:tid 270977] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary19iGeq9LtYp4zuPOqnAAAGFc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=435&t=20588
[Wed Sep 30 01:10:46.831561 2026] [security2:error] [pid 270884:tid 270977] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary19iGeq9LtYp4zuPOqnAAAGFc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?sid=11c44855710588f703e123b54daa37fa&start=435&t=20588
[Wed Sep 30 01:10:46.902005 2026] [security2:error] [pid 270884:tid 271054] [client 85.203.36.112:31709] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary19iGeq9LtYp4zuPOqoQAAACM"]
[Wed Sep 30 01:10:46.943091 2026] [security2:error] [pid 276620:tid 276828] [client 104.207.42.144:53201] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary19tPAdfEWqmGIkg1geAAAAlk"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:46.951243 2026] [security2:error] [pid 270884:tid 271065] [client 20.58.177.98:49924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/koiy.php"] [unique_id "ary19iGeq9LtYp4zuPOqowAAAC4"]
[Wed Sep 30 01:10:46.965468 2026] [security2:error] [pid 270884:tid 271017] [remote 57.141.14.97:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/wp-json/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "ary19iGeq9LtYp4zuPOqogAAeH8"]
[Wed Sep 30 01:10:46.998577 2026] [security2:error] [pid 270884:tid 271096] [client 20.194.5.96:25048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hc-hungary.mu"] [uri "/go.php"] [unique_id "ary19iGeq9LtYp4zuPOqpAAAAE0"]
[Wed Sep 30 01:10:47.011581 2026] [security2:error] [pid 276620:tid 276883] [client 52.231.30.175:38732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/wp5.php"] [unique_id "ary199PAdfEWqmGIkg1gfAAAApA"]
[Wed Sep 30 01:10:47.012396 2026] [security2:error] [pid 276620:tid 276855] [client 20.28.180.172:34255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cj5ha2rah8lyiqqdefault.php"] [unique_id "ary199PAdfEWqmGIkg1gfQAAAnQ"]
[Wed Sep 30 01:10:47.025814 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:47.026083 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:47.060980 2026] [security2:error] [pid 270884:tid 271137] [client 52.172.226.14:31073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/dev.php"] [unique_id "ary19yGeq9LtYp4zuPOqqQAAAHY"]
[Wed Sep 30 01:10:47.122729 2026] [security2:error] [pid 270884:tid 271042] [client 103.168.67.253:9418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary19yGeq9LtYp4zuPOqrgAAABc"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:47.133270 2026] [security2:error] [pid 270884:tid 271145] [client 85.203.36.119:45743] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary19yGeq9LtYp4zuPOqrwAAAH4"]
[Wed Sep 30 01:10:47.155935 2026] [access_compat:error] [pid 276620:tid 276808] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:47.156209 2026] [access_compat:error] [pid 276620:tid 276808] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:47.163491 2026] [security2:error] [pid 270884:tid 271121] [client 85.203.36.110:27885] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "ary19yGeq9LtYp4zuPOqsAAAAGY"]
[Wed Sep 30 01:10:47.185768 2026] [access_compat:error] [pid 270884:tid 271070] [client 47.79.207.15:3638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:10:47.186135 2026] [access_compat:error] [pid 270884:tid 271070] [client 47.79.207.15:3638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:10:47.189162 2026] [security2:error] [pid 270884:tid 271112] [client 85.203.36.101:28591] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary19yGeq9LtYp4zuPOqsgAAAF0"]
[Wed Sep 30 01:10:47.272237 2026] [security2:error] [pid 276620:tid 276870] [client 52.231.30.175:40134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/koiy.php"] [unique_id "ary199PAdfEWqmGIkg1ghQAAAoM"]
[Wed Sep 30 01:10:47.283896 2026] [security2:error] [pid 276620:tid 276879] [client 194.44.46.90:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary199PAdfEWqmGIkg1ghgAAAow"]
[Wed Sep 30 01:10:47.301781 2026] [security2:error] [pid 270884:tid 271064] [client 20.58.177.98:30694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wordfence-waf.php"] [unique_id "ary19yGeq9LtYp4zuPOqtgAAAC0"]
[Wed Sep 30 01:10:47.321184 2026] [security2:error] [pid 276620:tid 276777] [client 85.203.36.123:39853] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/ioxi-o.php"] [unique_id "ary199PAdfEWqmGIkg1giAAAAiY"]
[Wed Sep 30 01:10:47.321212 2026] [security2:error] [pid 270884:tid 271090] [client 181.46.112.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary19yGeq9LtYp4zuPOqtwAAAEc"]
[Wed Sep 30 01:10:47.379866 2026] [security2:error] [pid 270884:tid 271102] [client 20.219.19.141:21073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/albin.php"] [unique_id "ary19yGeq9LtYp4zuPOquwAAAFM"]
[Wed Sep 30 01:10:47.496679 2026] [security2:error] [pid 276620:tid 276797] [client 20.194.30.107:22989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/mac.php"] [unique_id "ary199PAdfEWqmGIkg1gigAAAjo"]
[Wed Sep 30 01:10:47.527989 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:47.528264 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:47.536859 2026] [security2:error] [pid 270884:tid 271047] [client 52.172.226.14:18649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ms-edit.php"] [unique_id "ary19yGeq9LtYp4zuPOqvwAAABw"]
[Wed Sep 30 01:10:47.538351 2026] [security2:error] [pid 270884:tid 271092] [client 52.231.30.175:40121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/bnmtp.php"] [unique_id "ary19yGeq9LtYp4zuPOqwAAAAEk"]
[Wed Sep 30 01:10:47.590978 2026] [security2:error] [pid 270884:tid 271058] [client 20.204.42.136:35716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/goeu.php"] [unique_id "ary19yGeq9LtYp4zuPOqwgAAACc"]
[Wed Sep 30 01:10:47.607543 2026] [security2:error] [pid 270884:tid 271068] [client 104.207.63.194:36099] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary19yGeq9LtYp4zuPOqvQAAADE"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:10:47.662140 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:47.662413 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:47.674313 2026] [security2:error] [pid 276620:tid 276873] [client 20.58.177.98:45603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wp5.php"] [unique_id "ary199PAdfEWqmGIkg1gkAAAAoY"]
[Wed Sep 30 01:10:47.681788 2026] [security2:error] [pid 276620:tid 276803] [client 20.70.173.30:2112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/felnggg.php"] [unique_id "ary199PAdfEWqmGIkg1gkgAAAkA"]
[Wed Sep 30 01:10:47.686677 2026] [security2:error] [pid 270884:tid 271078] [client 49.37.102.248:57273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary19yGeq9LtYp4zuPOqyQAAADs"]
[Wed Sep 30 01:10:47.686766 2026] [security2:error] [pid 270884:tid 271078] [client 49.37.102.248:57273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary19yGeq9LtYp4zuPOqyQAAADs"]
[Wed Sep 30 01:10:47.800881 2026] [security2:error] [pid 270884:tid 271022] [client 52.231.30.175:38757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/abbi.php"] [unique_id "ary19yGeq9LtYp4zuPOqzwAAAAM"]
[Wed Sep 30 01:10:47.901881 2026] [security2:error] [pid 270884:tid 271048] [client 20.70.173.30:37127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/felnggg.php"] [unique_id "ary19yGeq9LtYp4zuPOq1wAAAB0"]
[Wed Sep 30 01:10:48.000357 2026] [security2:error] [pid 270884:tid 271142] [client 52.172.226.14:18684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/txets.php"] [unique_id "ary19yGeq9LtYp4zuPOq3AAAAHs"]
[Wed Sep 30 01:10:48.023732 2026] [security2:error] [pid 270884:tid 271145] [client 20.58.177.98:30665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/em.php"] [unique_id "ary1-CGeq9LtYp4zuPOq3gAAAH4"]
[Wed Sep 30 01:10:48.035311 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:48.035580 2026] [access_compat:error] [pid 270884:tid 271020] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:48.077768 2026] [security2:error] [pid 270884:tid 271070] [client 52.231.30.175:38762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.30.231.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.scottcoy.com"] [uri "/asw.php"] [unique_id "ary1-CGeq9LtYp4zuPOq4QAAADM"]
[Wed Sep 30 01:10:48.099442 2026] [security2:error] [pid 270884:tid 271114] [client 85.203.36.100:44695] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-CGeq9LtYp4zuPOq5wAAAF8"]
[Wed Sep 30 01:10:48.100058 2026] [security2:error] [pid 276620:tid 276886] [client 85.203.36.98:43303] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1-NPAdfEWqmGIkg1glwAAApM"]
[Wed Sep 30 01:10:48.118339 2026] [security2:error] [pid 276620:tid 276861] [client 85.203.36.91:24389] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary1-NPAdfEWqmGIkg1gmAAAAno"]
[Wed Sep 30 01:10:48.156192 2026] [access_compat:error] [pid 276620:tid 276854] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:48.156600 2026] [access_compat:error] [pid 276620:tid 276854] [client 74.7.243.227:43046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:48.218743 2026] [security2:error] [pid 270884:tid 271028] [client 4.240.25.22:8410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/edit.php"] [unique_id "ary1-CGeq9LtYp4zuPOq8gAAAAk"]
[Wed Sep 30 01:10:48.236896 2026] [security2:error] [pid 270884:tid 271061] [client 20.194.30.107:23204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/abcd.php"] [unique_id "ary1-CGeq9LtYp4zuPOq9gAAACo"]
[Wed Sep 30 01:10:48.243854 2026] [security2:error] [pid 270884:tid 271072] [client 168.107.70.193:61017] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "cpcalendars.nessmalibya.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "ary1-CGeq9LtYp4zuPOq8wAAADU"]
[Wed Sep 30 01:10:48.252381 2026] [security2:error] [pid 270884:tid 271077] [client 85.203.36.94:30587] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-CGeq9LtYp4zuPOq-AAAADo"]
[Wed Sep 30 01:10:48.254219 2026] [security2:error] [pid 270884:tid 271047] [client 20.219.2.60:11376] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.magicdreampro.com"] [uri "/1.php"] [unique_id "ary1-CGeq9LtYp4zuPOq-QAAABw"]
[Wed Sep 30 01:10:48.254343 2026] [security2:error] [pid 270884:tid 271047] [client 20.219.2.60:11376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/1.php"] [unique_id "ary1-CGeq9LtYp4zuPOq-QAAABw"]
[Wed Sep 30 01:10:48.298183 2026] [access_compat:error] [pid 270884:tid 271068] [client 47.79.207.15:3638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:10:48.298624 2026] [access_compat:error] [pid 270884:tid 271068] [client 47.79.207.15:3638] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:10:48.313943 2026] [security2:error] [pid 276620:tid 276800] [client 45.138.12.32:45432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jsp.gib.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1-NPAdfEWqmGIkg1gnAAAAj0"]
[Wed Sep 30 01:10:48.343602 2026] [security2:error] [pid 270884:tid 271055] [client 20.70.173.30:33353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ops.php"] [unique_id "ary1-CGeq9LtYp4zuPOq_wAAACQ"]
[Wed Sep 30 01:10:48.344275 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:48.344688 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:48.356922 2026] [security2:error] [pid 270884:tid 271040] [client 20.58.177.98:49941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/hp.php"] [unique_id "ary1-CGeq9LtYp4zuPOrAAAAABU"]
[Wed Sep 30 01:10:48.385604 2026] [security2:error] [pid 270884:tid 271036] [client 74.7.242.1:41744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary1-CGeq9LtYp4zuPOrAQAAABE"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:10:48.466181 2026] [security2:error] [pid 270884:tid 271076] [client 52.172.226.14:31059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/hao.php"] [unique_id "ary1-CGeq9LtYp4zuPOrBgAAADk"]
[Wed Sep 30 01:10:48.498355 2026] [security2:error] [pid 270884:tid 271105] [client 85.203.36.106:22841] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary1-CGeq9LtYp4zuPOrDAAAAFY"]
[Wed Sep 30 01:10:48.507888 2026] [security2:error] [pid 276620:tid 276831] [client 45.89.242.91:36037] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary1-NPAdfEWqmGIkg1gnwAAAlw"]
[Wed Sep 30 01:10:48.510122 2026] [security2:error] [pid 270884:tid 271057] [client 85.203.36.116:21933] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/ioxi-o.php"] [unique_id "ary1-CGeq9LtYp4zuPOrDQAAACY"]
[Wed Sep 30 01:10:48.585061 2026] [security2:error] [pid 276620:tid 276770] [client 20.219.19.141:20881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/atkno.php"] [unique_id "ary1-NPAdfEWqmGIkg1gowAAAh8"]
[Wed Sep 30 01:10:48.596405 2026] [security2:error] [pid 276620:tid 276780] [client 20.198.74.230:24132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/UuAFIYGYKdefault.php"] [unique_id "ary1-NPAdfEWqmGIkg1gpQAAAik"]
[Wed Sep 30 01:10:48.626494 2026] [security2:error] [pid 276620:tid 276865] [client 168.100.149.83:26490] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/37b5eef6fbe6fa464121708015aa5311.2ba.css.gz"] [unique_id "ary1-NPAdfEWqmGIkg1gpgACfm4"]
[Wed Sep 30 01:10:48.668217 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:48.668502 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:48.679881 2026] [security2:error] [pid 270884:tid 271106] [client 85.203.36.101:26139] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/txets.php"] [unique_id "ary1-CGeq9LtYp4zuPOrIQAAAFc"]
[Wed Sep 30 01:10:48.767862 2026] [security2:error] [pid 270884:tid 271085] [client 20.58.177.98:49977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/wpuse.php"] [unique_id "ary1-CGeq9LtYp4zuPOrKgAAAEI"]
[Wed Sep 30 01:10:48.917165 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:48.917451 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:48.944875 2026] [security2:error] [pid 276620:tid 276805] [client 52.172.226.14:31058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/33.php"] [unique_id "ary1-NPAdfEWqmGIkg1gugAAAkI"]
[Wed Sep 30 01:10:49.007992 2026] [security2:error] [pid 276620:tid 276778] [client 20.28.180.172:34274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/XrdbXydefault.php"] [unique_id "ary1-dPAdfEWqmGIkg1gwgAAAic"]
[Wed Sep 30 01:10:49.116339 2026] [access_compat:error] [pid 270884:tid 271055] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:49.116616 2026] [access_compat:error] [pid 270884:tid 271055] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:49.175525 2026] [security2:error] [pid 270884:tid 271065] [client 203.122.45.246:57038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1-SGeq9LtYp4zuPOrNgAAAC4"]
[Wed Sep 30 01:10:49.175662 2026] [security2:error] [pid 270884:tid 271065] [client 203.122.45.246:57038] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary1-SGeq9LtYp4zuPOrNgAAAC4"]
[Wed Sep 30 01:10:49.217451 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:49.217936 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:49.235564 2026] [security2:error] [pid 270884:tid 271116] [client 20.58.177.98:45589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/file18x.php"] [unique_id "ary1-SGeq9LtYp4zuPOrOQAAAGE"]
[Wed Sep 30 01:10:49.374362 2026] [security2:error] [pid 270884:tid 271120] [client 86.149.67.62:35842] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "pempaleh.com"] [uri "/wp-login.php"] [unique_id "ary19yGeq9LtYp4zuPOqyAAAZWU"], referer: https://pempaleh.com/wp-login.php
[Wed Sep 30 01:10:49.423185 2026] [security2:error] [pid 276620:tid 276837] [client 52.172.226.14:12565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/adminner.php"] [unique_id "ary1-dPAdfEWqmGIkg1gzAAAAmI"]
[Wed Sep 30 01:10:49.463001 2026] [security2:error] [pid 270884:tid 271079] [client 20.219.14.152:38024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary1-SGeq9LtYp4zuPOrSQAAADw"]
[Wed Sep 30 01:10:49.521755 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:49.522029 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:49.538361 2026] [security2:error] [pid 276059:tid 276203] [client 85.203.36.103:56957] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-XtqdHBwD77138e3FAAAAZg"]
[Wed Sep 30 01:10:49.538796 2026] [security2:error] [pid 276620:tid 276766] [client 85.203.36.96:29735] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/txets.php"] [unique_id "ary1-dPAdfEWqmGIkg1gzgAAAhs"]
[Wed Sep 30 01:10:49.567029 2026] [security2:error] [pid 276059:tid 276299] [client 85.203.36.118:36725] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-XtqdHBwD77138e3FQAAAfc"]
[Wed Sep 30 01:10:49.567970 2026] [security2:error] [pid 276620:tid 276816] [client 85.203.36.109:45723] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1-dPAdfEWqmGIkg1gzwAAAk0"]
[Wed Sep 30 01:10:49.568849 2026] [security2:error] [pid 270884:tid 271106] [client 85.203.36.88:47305] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-SGeq9LtYp4zuPOrTgAAAFc"]
[Wed Sep 30 01:10:49.591249 2026] [security2:error] [pid 270884:tid 271113] [client 20.58.177.98:49951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/123viva.php"] [unique_id "ary1-SGeq9LtYp4zuPOrTwAAAF4"]
[Wed Sep 30 01:10:49.592989 2026] [security2:error] [pid 270884:tid 271037] [client 85.203.36.123:59493] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-SGeq9LtYp4zuPOrUAAAABI"]
[Wed Sep 30 01:10:49.620388 2026] [access_compat:error] [pid 270884:tid 271070] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:49.620642 2026] [access_compat:error] [pid 270884:tid 271070] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:49.730289 2026] [security2:error] [pid 270884:tid 271028] [client 20.28.180.172:61231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/public/wp-blog.php"] [unique_id "ary1-SGeq9LtYp4zuPOrUwAAAAk"]
[Wed Sep 30 01:10:49.771600 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.19.141:20896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/gptsh.php"] [unique_id "ary1-SGeq9LtYp4zuPOrWgAAAHw"]
[Wed Sep 30 01:10:49.774804 2026] [security2:error] [pid 270884:tid 271036] [client 122.173.27.10:19317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1-SGeq9LtYp4zuPOrWwAAABE"]
[Wed Sep 30 01:10:49.774930 2026] [security2:error] [pid 270884:tid 271036] [client 122.173.27.10:19317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary1-SGeq9LtYp4zuPOrWwAAABE"]
[Wed Sep 30 01:10:49.819931 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:49.820360 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:49.829686 2026] [security2:error] [pid 276620:tid 276761] [client 45.89.242.91:53031] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1-dPAdfEWqmGIkg1g2AAAAhY"]
[Wed Sep 30 01:10:49.900888 2026] [security2:error] [pid 276620:tid 276760] [client 52.172.226.14:18664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/thoms.php"] [unique_id "ary1-dPAdfEWqmGIkg1g3QAAAhU"]
[Wed Sep 30 01:10:49.931559 2026] [security2:error] [pid 270884:tid 271118] [client 20.58.177.98:49920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.177.58.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bowrattler.com"] [uri "/Components.update.php"] [unique_id "ary1-SGeq9LtYp4zuPOrZAAAAGM"]
[Wed Sep 30 01:10:49.943618 2026] [security2:error] [pid 270884:tid 271107] [client 20.219.14.152:38059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary1-SGeq9LtYp4zuPOrZQAAAFg"]
[Wed Sep 30 01:10:50.111705 2026] [access_compat:error] [pid 270884:tid 271073] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:50.112164 2026] [access_compat:error] [pid 270884:tid 271073] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:50.121073 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:50.121337 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:58654] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:50.143801 2026] [security2:error] [pid 276620:tid 276882] [client 85.203.36.108:56709] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-tPAdfEWqmGIkg1g4QAAAo8"]
[Wed Sep 30 01:10:50.200739 2026] [http2:warn] [pid 270884:tid 271035] [client 52.167.144.188:61579] h2_stream(270884-364-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:50.217820 2026] [security2:error] [pid 270884:tid 271028] [client 20.70.173.30:33358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/admin.php"] [unique_id "ary1-iGeq9LtYp4zuPOregAAAAk"]
[Wed Sep 30 01:10:50.247699 2026] [security2:error] [pid 270884:tid 271047] [client 20.70.173.30:25281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/log.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfAAAABw"]
[Wed Sep 30 01:10:50.258132 2026] [security2:error] [pid 270884:tid 270922] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfQAAGyQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10130
[Wed Sep 30 01:10:50.258170 2026] [security2:error] [pid 270884:tid 270922] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfQAAGyQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10130
[Wed Sep 30 01:10:50.268619 2026] [security2:error] [pid 270884:tid 271143] [client 20.219.2.60:11733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/term.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfgAAAHw"]
[Wed Sep 30 01:10:50.281438 2026] [security2:error] [pid 270884:tid 271061] [client 202.179.95.79:51169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfwAAACo"]
[Wed Sep 30 01:10:50.281573 2026] [security2:error] [pid 270884:tid 271061] [client 202.179.95.79:51169] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrfwAAACo"]
[Wed Sep 30 01:10:50.324788 2026] [http2:warn] [pid 263262:tid 263438] [client 52.167.144.188:61605] h2_stream(263262-1105-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:50.359707 2026] [security2:error] [pid 270884:tid 271021] [client 45.138.12.32:32592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kdw.dib.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1-iGeq9LtYp4zuPOrhAAAAAI"]
[Wed Sep 30 01:10:50.365762 2026] [security2:error] [pid 270884:tid 271040] [client 45.138.12.32:45506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.jqe.dvz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1-iGeq9LtYp4zuPOrhQAAABU"]
[Wed Sep 30 01:10:50.373202 2026] [security2:error] [pid 270884:tid 271055] [client 20.211.90.37:40417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary1-iGeq9LtYp4zuPOrhwAAACQ"]
[Wed Sep 30 01:10:50.384789 2026] [security2:error] [pid 276059:tid 276277] [client 52.172.226.14:31077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/a.php"] [unique_id "ary1-ntqdHBwD77138e3GgAAAeE"]
[Wed Sep 30 01:10:50.415093 2026] [security2:error] [pid 270884:tid 271101] [client 216.73.216.46:58654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1-iGeq9LtYp4zuPOriAAAAFI"]
[Wed Sep 30 01:10:50.443012 2026] [security2:error] [pid 276620:tid 276810] [client 20.219.14.152:63363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/makeasmtp.php"] [unique_id "ary1-tPAdfEWqmGIkg1g5wAAAkc"]
[Wed Sep 30 01:10:50.462885 2026] [security2:error] [pid 276059:tid 276102] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary1-ntqdHBwD77138e3GwABqSY"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D40139
[Wed Sep 30 01:10:50.473628 2026] [security2:error] [pid 276620:tid 276652] [remote 47.128.114.150:31290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/city/251/ncat/3"] [unique_id "ary1-tPAdfEWqmGIkg1g6AACNBY"]
[Wed Sep 30 01:10:50.498862 2026] [http2:warn] [pid 263262:tid 263425] [client 52.167.144.188:58911] h2_stream(263262-485-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:10:50.612479 2026] [security2:error] [pid 270884:tid 271088] [client 85.203.36.86:53011] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1-iGeq9LtYp4zuPOrkAAAAEU"]
[Wed Sep 30 01:10:50.617006 2026] [security2:error] [pid 276620:tid 276841] [client 168.100.149.65:53906] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b638cf8dbda96fa41b2e23ff62a5472f.641.css.gz"] [unique_id "ary1-tPAdfEWqmGIkg1g7gACZgo"]
[Wed Sep 30 01:10:50.628768 2026] [security2:error] [pid 276620:tid 276826] [client 20.70.173.30:7418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/reop3.php"] [unique_id "ary1-tPAdfEWqmGIkg1g7wAAAlc"]
[Wed Sep 30 01:10:50.664920 2026] [access_compat:error] [pid 270884:tid 271073] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:50.665192 2026] [access_compat:error] [pid 270884:tid 271073] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:50.693263 2026] [security2:error] [pid 270884:tid 271100] [client 85.203.36.112:32755] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-content/themes/txets.php"] [unique_id "ary1-iGeq9LtYp4zuPOrlAAAAFE"]
[Wed Sep 30 01:10:50.699046 2026] [security2:error] [pid 270884:tid 271098] [client 201.32.215.149:7667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrlQAAAE8"]
[Wed Sep 30 01:10:50.699151 2026] [security2:error] [pid 270884:tid 271098] [client 201.32.215.149:7667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrlQAAAE8"]
[Wed Sep 30 01:10:50.699855 2026] [security2:error] [pid 270884:tid 271025] [client 85.203.36.111:34737] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-iGeq9LtYp4zuPOrlgAAAAY"]
[Wed Sep 30 01:10:50.723096 2026] [security2:error] [pid 270884:tid 271145] [client 85.203.36.109:28731] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1-iGeq9LtYp4zuPOrmAAAAH4"]
[Wed Sep 30 01:10:50.772615 2026] [security2:error] [pid 270884:tid 271031] [client 85.203.36.98:46019] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-iGeq9LtYp4zuPOrngAAAAw"]
[Wed Sep 30 01:10:50.776051 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:50.776074 2026] [security2:error] [pid 270884:tid 271070] [client 85.203.36.88:38693] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1-iGeq9LtYp4zuPOrnwAAADM"]
[Wed Sep 30 01:10:50.776325 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:50.795653 2026] [security2:error] [pid 270884:tid 271108] [client 45.89.242.91:28691] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-iGeq9LtYp4zuPOroQAAAFk"]
[Wed Sep 30 01:10:50.855031 2026] [security2:error] [pid 270884:tid 271061] [client 52.172.226.14:31054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/b8.php"] [unique_id "ary1-iGeq9LtYp4zuPOrogAAACo"]
[Wed Sep 30 01:10:50.927147 2026] [security2:error] [pid 270884:tid 271040] [client 103.245.40.253:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1-iGeq9LtYp4zuPOrqgAAABU"]
[Wed Sep 30 01:10:50.935302 2026] [security2:error] [pid 270884:tid 271042] [client 182.69.182.151:21643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrqQAAABc"]
[Wed Sep 30 01:10:50.935396 2026] [security2:error] [pid 270884:tid 271042] [client 182.69.182.151:21643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary1-iGeq9LtYp4zuPOrqQAAABc"]
[Wed Sep 30 01:10:50.948037 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:50.948285 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:50.959091 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.14.152:63820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/radio.php"] [unique_id "ary1-iGeq9LtYp4zuPOrrwAAAH0"]
[Wed Sep 30 01:10:51.046822 2026] [security2:error] [pid 270884:tid 271126] [client 20.28.180.172:29455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/84300819ebindex.php"] [unique_id "ary1-yGeq9LtYp4zuPOrtwAAAGs"]
[Wed Sep 30 01:10:51.085555 2026] [security2:error] [pid 270884:tid 271100] [client 45.89.242.82:53763] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1-yGeq9LtYp4zuPOruQAAAFE"]
[Wed Sep 30 01:10:51.090258 2026] [security2:error] [pid 270884:tid 271145] [client 85.203.36.117:54515] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1-yGeq9LtYp4zuPOrugAAAH4"]
[Wed Sep 30 01:10:51.139254 2026] [access_compat:error] [pid 270884:tid 271097] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:51.139701 2026] [access_compat:error] [pid 270884:tid 271097] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:51.213907 2026] [security2:error] [pid 270884:tid 271023] [client 86.149.67.62:35842] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "pempaleh.com"] [uri "/xmlrpc.php"] [unique_id "ary1-yGeq9LtYp4zuPOruwAABC0"]
[Wed Sep 30 01:10:51.228584 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:51.228886 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:51.257031 2026] [security2:error] [pid 270884:tid 271101] [client 20.198.74.230:23573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/gif.php"] [unique_id "ary1-yGeq9LtYp4zuPOrxAAAAFI"]
[Wed Sep 30 01:10:51.341159 2026] [security2:error] [pid 270884:tid 271044] [client 52.172.226.14:18661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/sid.php"] [unique_id "ary1-yGeq9LtYp4zuPOrxgAAABk"]
[Wed Sep 30 01:10:51.452266 2026] [security2:error] [pid 276620:tid 276864] [client 20.70.173.30:3585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/wpxml.php"] [unique_id "ary1-9PAdfEWqmGIkg1g9gAAAn0"]
[Wed Sep 30 01:10:51.460520 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:51.460981 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:51.468403 2026] [security2:error] [pid 270884:tid 271079] [client 85.203.36.92:49457] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1-yGeq9LtYp4zuPOrzQAAADw"]
[Wed Sep 30 01:10:51.468917 2026] [security2:error] [pid 270884:tid 271116] [client 20.219.14.152:63388] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "harmonicaworkshop.com"] [uri "/1.php"] [unique_id "ary1-yGeq9LtYp4zuPOrzgAAAGE"]
[Wed Sep 30 01:10:51.469059 2026] [security2:error] [pid 270884:tid 271116] [client 20.219.14.152:63388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/1.php"] [unique_id "ary1-yGeq9LtYp4zuPOrzgAAAGE"]
[Wed Sep 30 01:10:51.483263 2026] [security2:error] [pid 276059:tid 276280] [client 85.203.36.111:53505] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1-3tqdHBwD77138e3JgAAAeQ"]
[Wed Sep 30 01:10:51.611476 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:51.611878 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:51.681093 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:18921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:51.681512 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:18921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:51.743393 2026] [security2:error] [pid 276620:tid 276844] [client 20.70.173.30:33392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/inputs.php"] [unique_id "ary1-9PAdfEWqmGIkg1hAgAAAmk"]
[Wed Sep 30 01:10:51.801090 2026] [security2:error] [pid 270884:tid 271097] [client 52.172.226.14:18676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/bro.php"] [unique_id "ary1-yGeq9LtYp4zuPOr4QAAAE4"]
[Wed Sep 30 01:10:51.851229 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:51.851516 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:51.855236 2026] [security2:error] [pid 270884:tid 271061] [client 20.219.2.60:11757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-content/radio.php"] [unique_id "ary1-yGeq9LtYp4zuPOr5QAAACo"]
[Wed Sep 30 01:10:51.954131 2026] [security2:error] [pid 276620:tid 276783] [client 20.219.14.152:63823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/simple.php"] [unique_id "ary1-9PAdfEWqmGIkg1hBAAAAiw"]
[Wed Sep 30 01:10:51.971726 2026] [security2:error] [pid 270884:tid 271128] [client 85.203.36.111:24537] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1-yGeq9LtYp4zuPOr6wAAAG0"]
[Wed Sep 30 01:10:52.020238 2026] [security2:error] [pid 276059:tid 276194] [client 43.227.131.37:25376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1_HtqdHBwD77138e3MQAAAY8"]
[Wed Sep 30 01:10:52.020366 2026] [security2:error] [pid 276059:tid 276194] [client 43.227.131.37:25376] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary1_HtqdHBwD77138e3MQAAAY8"]
[Wed Sep 30 01:10:52.071411 2026] [security2:error] [pid 270884:tid 271111] [client 85.203.36.109:41051] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1_CGeq9LtYp4zuPOr7wAAAFw"]
[Wed Sep 30 01:10:52.077738 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:18921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:52.078100 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:18921] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:52.110762 2026] [security2:error] [pid 270884:tid 271058] [client 85.203.36.103:57661] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-admin/txets.php"] [unique_id "ary1_CGeq9LtYp4zuPOr8gAAACc"]
[Wed Sep 30 01:10:52.149070 2026] [security2:error] [pid 270884:tid 271113] [client 85.203.36.101:50385] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1_CGeq9LtYp4zuPOr9QAAAF4"]
[Wed Sep 30 01:10:52.150625 2026] [security2:error] [pid 270884:tid 271081] [client 20.211.90.37:40432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary1_CGeq9LtYp4zuPOr9gAAAD4"]
[Wed Sep 30 01:10:52.165306 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:52.165580 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:52.180528 2026] [security2:error] [pid 270884:tid 271047] [client 103.211.18.63:57310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1_CGeq9LtYp4zuPOr-AAAABw"]
[Wed Sep 30 01:10:52.180631 2026] [security2:error] [pid 270884:tid 271047] [client 103.211.18.63:57310] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary1_CGeq9LtYp4zuPOr-AAAABw"]
[Wed Sep 30 01:10:52.261075 2026] [security2:error] [pid 276620:tid 276823] [client 52.172.226.14:12571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/xwpg.php"] [unique_id "ary1_NPAdfEWqmGIkg1hCQAAAlQ"]
[Wed Sep 30 01:10:52.303546 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:52.303828 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:52.356284 2026] [security2:error] [pid 276059:tid 276222] [client 45.138.12.32:45546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kdw.dib.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1_HtqdHBwD77138e3MwAAAao"]
[Wed Sep 30 01:10:52.420423 2026] [security2:error] [pid 276620:tid 276809] [client 85.203.36.116:59889] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1_NPAdfEWqmGIkg1hCwAAAkY"]
[Wed Sep 30 01:10:52.433904 2026] [security2:error] [pid 276059:tid 276286] [client 20.219.14.152:38079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/chosen.php"] [unique_id "ary1_HtqdHBwD77138e3NAAAAeo"]
[Wed Sep 30 01:10:52.464499 2026] [security2:error] [pid 270884:tid 271062] [client 4.240.25.22:18779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/aaa.php"] [unique_id "ary1_CGeq9LtYp4zuPOsAwAAACs"]
[Wed Sep 30 01:10:52.468918 2026] [security2:error] [pid 270884:tid 271101] [client 85.203.36.127:21681] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1_CGeq9LtYp4zuPOsBAAAAFI"]
[Wed Sep 30 01:10:52.485189 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:52.485473 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:52.530451 2026] [security2:error] [pid 270884:tid 271076] [client 85.203.36.126:27801] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1_CGeq9LtYp4zuPOsCwAAADk"]
[Wed Sep 30 01:10:52.531183 2026] [security2:error] [pid 270884:tid 271109] [client 177.97.180.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary1_CGeq9LtYp4zuPOsCgAAAFo"]
[Wed Sep 30 01:10:52.534487 2026] [security2:error] [pid 276620:tid 276770] [client 85.203.36.95:56741] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.checkboxdev.com"] [uri "/style.php"] [unique_id "ary1_NPAdfEWqmGIkg1hDQAAAh8"]
[Wed Sep 30 01:10:52.555872 2026] [security2:error] [pid 270884:tid 271065] [client 103.168.67.253:18500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary1_CGeq9LtYp4zuPOsDAAAAC4"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:52.582633 2026] [security2:error] [pid 270884:tid 271131] [client 116.193.128.26:58634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1_CGeq9LtYp4zuPOsDwAAAHA"]
[Wed Sep 30 01:10:52.582734 2026] [security2:error] [pid 270884:tid 271131] [client 116.193.128.26:58634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1_CGeq9LtYp4zuPOsDwAAAHA"]
[Wed Sep 30 01:10:52.595261 2026] [security2:error] [pid 270884:tid 271026] [client 192.161.186.248:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1_CGeq9LtYp4zuPOsEAAAAAc"]
[Wed Sep 30 01:10:52.620814 2026] [security2:error] [pid 270884:tid 271123] [client 168.100.149.114:16066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/cff2765bd4881d8fd523e6bf2f4b4314.b8d1.css.gz"] [unique_id "ary1_CGeq9LtYp4zuPOsFQAAaAw"]
[Wed Sep 30 01:10:52.635544 2026] [access_compat:error] [pid 270884:tid 271034] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:52.635881 2026] [access_compat:error] [pid 270884:tid 271034] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:52.638113 2026] [security2:error] [pid 276620:tid 276790] [client 20.211.90.37:39939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/manager.php"] [unique_id "ary1_NPAdfEWqmGIkg1hEAAAAjM"]
[Wed Sep 30 01:10:52.639139 2026] [security2:error] [pid 270884:tid 271116] [client 45.138.12.32:32674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kbi.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1_CGeq9LtYp4zuPOsGQAAAGE"]
[Wed Sep 30 01:10:52.666638 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:52.666923 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:52.721066 2026] [security2:error] [pid 270884:tid 271088] [client 20.70.173.30:37154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/CAE-2.5.php"] [unique_id "ary1_CGeq9LtYp4zuPOsGgAAAEU"]
[Wed Sep 30 01:10:52.723147 2026] [security2:error] [pid 276620:tid 276768] [client 52.172.226.14:12551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/radio.php"] [unique_id "ary1_NPAdfEWqmGIkg1hEgAAAh0"]
[Wed Sep 30 01:10:52.760413 2026] [security2:error] [pid 276059:tid 276224] [client 4.196.65.241:2050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/Isadore.php"] [unique_id "ary1_HtqdHBwD77138e3NwAAAaw"]
[Wed Sep 30 01:10:52.820218 2026] [security2:error] [pid 276620:tid 276794] [client 20.70.173.30:33299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/one.php"] [unique_id "ary1_NPAdfEWqmGIkg1hFgAAAjc"]
[Wed Sep 30 01:10:52.848050 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:52.848327 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:52.862405 2026] [security2:error] [pid 270884:tid 271106] [client 45.138.12.32:32648] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rhu.vbd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary1_CGeq9LtYp4zuPOsHQAAAFc"]
[Wed Sep 30 01:10:52.886597 2026] [security2:error] [pid 276620:tid 276667] [remote 74.7.227.56:46544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary1_NPAdfEWqmGIkg1hGgACdiU"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:10:52.948636 2026] [security2:error] [pid 270884:tid 271023] [client 20.219.14.152:38072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/manager.php"] [unique_id "ary1_CGeq9LtYp4zuPOsHgAAAAQ"]
[Wed Sep 30 01:10:52.978458 2026] [security2:error] [pid 270884:tid 271042] [client 20.194.96.176:29570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/xex.php"] [unique_id "ary1_CGeq9LtYp4zuPOsIgAAABc"]
[Wed Sep 30 01:10:53.027171 2026] [security2:error] [pid 276620:tid 276847] [client 114.119.148.187:42641] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "celadondragon.com"] [uri "/search.php"] [unique_id "ary1_dPAdfEWqmGIkg1hHAAAAmw"], referer: https://celadondragon.com/search.php?q=%E7%83%88%E7%84%B0&type=selectdecon&c=simp&id=12426
[Wed Sep 30 01:10:53.028595 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.028884 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.050962 2026] [security2:error] [pid 270884:tid 271118] [client 103.168.67.253:18524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary1_SGeq9LtYp4zuPOsJAAAAGM"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:53.055623 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.19.141:20811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/rithin.php"] [unique_id "ary1_SGeq9LtYp4zuPOsJQAAAGs"]
[Wed Sep 30 01:10:53.084742 2026] [security2:error] [pid 270884:tid 271028] [client 4.240.25.22:8454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/robots.php"] [unique_id "ary1_SGeq9LtYp4zuPOsKAAAAAk"]
[Wed Sep 30 01:10:53.182797 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:53.183252 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:53.186117 2026] [security2:error] [pid 270884:tid 271081] [client 52.172.226.14:46729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ccc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsLwAAAD4"]
[Wed Sep 30 01:10:53.194933 2026] [security2:error] [pid 270884:tid 271038] [client 85.203.36.104:42795] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-includes/txets.php"] [unique_id "ary1_SGeq9LtYp4zuPOsMAAAABM"]
[Wed Sep 30 01:10:53.209578 2026] [security2:error] [pid 270884:tid 271034] [client 85.203.36.90:56953] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1_SGeq9LtYp4zuPOsMQAAAA8"]
[Wed Sep 30 01:10:53.209685 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.209963 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.211684 2026] [security2:error] [pid 270884:tid 270901] [remote 64.23.166.180:31004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.ibs.ewu.mybluehost.me"] [uri "/.env"] [unique_id "ary1_SGeq9LtYp4zuPOsMgAAVA8"]
[Wed Sep 30 01:10:53.212888 2026] [security2:error] [pid 276620:tid 276850] [client 85.203.36.98:47523] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1_dPAdfEWqmGIkg1hHgAAAm8"]
[Wed Sep 30 01:10:53.216241 2026] [security2:error] [pid 270884:tid 271073] [client 45.89.242.88:39303] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1_SGeq9LtYp4zuPOsNAAAADY"]
[Wed Sep 30 01:10:53.326766 2026] [security2:error] [pid 270884:tid 271031] [client 106.214.2.47:2916] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsOAAAAAw"]
[Wed Sep 30 01:10:53.326891 2026] [security2:error] [pid 270884:tid 271031] [client 106.214.2.47:2916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsOAAAAAw"]
[Wed Sep 30 01:10:53.370434 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.370889 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.441586 2026] [security2:error] [pid 270884:tid 271042] [client 20.194.30.107:43438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/min.php"] [unique_id "ary1_SGeq9LtYp4zuPOsPgAAABc"]
[Wed Sep 30 01:10:53.442290 2026] [security2:error] [pid 270884:tid 271076] [client 45.138.12.32:45556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.juu.mzp.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary1_SGeq9LtYp4zuPOsQAAAADk"]
[Wed Sep 30 01:10:53.481071 2026] [security2:error] [pid 276059:tid 276293] [client 20.219.14.152:63402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/adminfuns.php"] [unique_id "ary1_XtqdHBwD77138e3OQAAAfE"]
[Wed Sep 30 01:10:53.501379 2026] [security2:error] [pid 276059:tid 276234] [client 85.203.36.106:32535] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/goods.php"] [unique_id "ary1_XtqdHBwD77138e3OgAAAbY"]
[Wed Sep 30 01:10:53.510962 2026] [security2:error] [pid 276059:tid 276270] [client 20.204.42.136:35801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/tinysd.php"] [unique_id "ary1_XtqdHBwD77138e3PgAAAdo"]
[Wed Sep 30 01:10:53.516576 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.516981 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.531944 2026] [security2:error] [pid 276059:tid 276232] [client 85.203.36.90:38301] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1_XtqdHBwD77138e3QgAAAbQ"]
[Wed Sep 30 01:10:53.580472 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9saWIva2JkL2tleW1hcHM%3D
[Wed Sep 30 01:10:53.580920 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9saWIva2JkL2tleW1hcHM%3D
[Wed Sep 30 01:10:53.582672 2026] [security2:error] [pid 276620:tid 276840] [client 85.203.36.119:45345] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1_dPAdfEWqmGIkg1hKwAAAmU"]
[Wed Sep 30 01:10:53.592990 2026] [security2:error] [pid 276620:tid 276805] [client 116.197.133.25:58035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1_dPAdfEWqmGIkg1hLQAAAkI"]
[Wed Sep 30 01:10:53.593168 2026] [security2:error] [pid 276620:tid 276805] [client 116.197.133.25:58035] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary1_dPAdfEWqmGIkg1hLQAAAkI"]
[Wed Sep 30 01:10:53.605577 2026] [security2:error] [pid 270884:tid 271022] [client 155.190.6.18:59018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsRwAAAAM"]
[Wed Sep 30 01:10:53.605747 2026] [security2:error] [pid 270884:tid 271022] [client 155.190.6.18:59018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsRwAAAAM"]
[Wed Sep 30 01:10:53.660308 2026] [security2:error] [pid 276620:tid 276834] [client 52.172.226.14:31081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wmore1.php"] [unique_id "ary1_dPAdfEWqmGIkg1hLwAAAl8"]
[Wed Sep 30 01:10:53.666681 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.667115 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.737533 2026] [access_compat:error] [pid 270884:tid 271100] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:53.737979 2026] [access_compat:error] [pid 270884:tid 271100] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:53.743321 2026] [security2:error] [pid 270884:tid 271103] [client 4.240.25.22:8496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-admin/js/index.php"] [unique_id "ary1_SGeq9LtYp4zuPOsTQAAAFQ"]
[Wed Sep 30 01:10:53.743557 2026] [security2:error] [pid 276059:tid 276201] [client 168.107.70.193:63139] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.atc.baf.mybluehost.me"] [uri "/"] [unique_id "ary1_XtqdHBwD77138e3SQAAAZY"]
[Wed Sep 30 01:10:53.800489 2026] [security2:error] [pid 276059:tid 276297] [client 45.89.242.85:55253] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/goods.php"] [unique_id "ary1_XtqdHBwD77138e3SwAAAfU"]
[Wed Sep 30 01:10:53.808797 2026] [security2:error] [pid 270884:tid 271133] [client 95.44.235.136:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary1_SGeq9LtYp4zuPOsUwAAAHI"]
[Wed Sep 30 01:10:53.815941 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.816364 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:53.916682 2026] [security2:error] [pid 270884:tid 271108] [client 152.56.240.85:61786] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsVwAAAFk"]
[Wed Sep 30 01:10:53.916818 2026] [security2:error] [pid 270884:tid 271108] [client 152.56.240.85:61786] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary1_SGeq9LtYp4zuPOsVwAAAFk"]
[Wed Sep 30 01:10:53.954996 2026] [security2:error] [pid 276059:tid 276211] [client 20.219.14.152:63417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/BDKR28WP.php"] [unique_id "ary1_XtqdHBwD77138e3TAAAAZ8"]
[Wed Sep 30 01:10:53.969308 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:53.969758 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.105234 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1_iGeq9LtYp4zuPOsXwAAFGg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=11589
[Wed Sep 30 01:10:54.105263 2026] [security2:error] [pid 270884:tid 270994] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary1_iGeq9LtYp4zuPOsXwAAFGg"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=11589
[Wed Sep 30 01:10:54.119364 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.119649 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.130656 2026] [security2:error] [pid 270884:tid 271055] [client 52.172.226.14:12563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/function.php"] [unique_id "ary1_iGeq9LtYp4zuPOsYgAAACQ"]
[Wed Sep 30 01:10:54.165132 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:54.165559 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:54.246079 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.246373 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.368138 2026] [security2:error] [pid 270884:tid 271098] [client 216.73.216.46:18921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary1_iGeq9LtYp4zuPOsbwAAAE8"]
[Wed Sep 30 01:10:54.371022 2026] [security2:error] [pid 276620:tid 276823] [client 85.203.36.98:64493] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/wp-editor.php"] [unique_id "ary1_tPAdfEWqmGIkg1hPgAAAlQ"]
[Wed Sep 30 01:10:54.383908 2026] [security2:error] [pid 276620:tid 276806] [client 85.203.36.117:61653] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.checkboxdev.com"] [uri "/style.php"] [unique_id "ary1_tPAdfEWqmGIkg1hPwAAAkM"]
[Wed Sep 30 01:10:54.407210 2026] [security2:error] [pid 276059:tid 276196] [client 20.70.173.30:33305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/222.php"] [unique_id "ary1_ntqdHBwD77138e3UAAAAZE"]
[Wed Sep 30 01:10:54.418732 2026] [security2:error] [pid 270884:tid 271057] [client 105.112.178.79:38577] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.prv.wng.mybluehost.me"] [uri "/.env"] [unique_id "ary1_iGeq9LtYp4zuPOscQAAACY"]
[Wed Sep 30 01:10:54.425437 2026] [security2:error] [pid 270884:tid 271088] [client 85.203.36.102:57105] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.com"] [uri "/style.php"] [unique_id "ary1_iGeq9LtYp4zuPOscgAAAEU"]
[Wed Sep 30 01:10:54.426542 2026] [security2:error] [pid 270884:tid 271044] [client 85.203.36.123:52143] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1_iGeq9LtYp4zuPOscwAAABk"]
[Wed Sep 30 01:10:54.428104 2026] [security2:error] [pid 270884:tid 271112] [client 85.203.36.105:50997] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1_iGeq9LtYp4zuPOsdAAAAF0"]
[Wed Sep 30 01:10:54.437019 2026] [security2:error] [pid 276620:tid 276809] [client 20.219.14.152:38064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/file5.php"] [unique_id "ary1_tPAdfEWqmGIkg1hQAAAAkY"]
[Wed Sep 30 01:10:54.494782 2026] [security2:error] [pid 276059:tid 276305] [client 20.28.180.172:34272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/hypo.php"] [unique_id "ary1_ntqdHBwD77138e3VAAAAf0"]
[Wed Sep 30 01:10:54.508839 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.509280 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.547535 2026] [security2:error] [pid 276620:tid 276780] [client 4.240.25.22:18785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/images.php"] [unique_id "ary1_tPAdfEWqmGIkg1hQwAAAik"]
[Wed Sep 30 01:10:54.564395 2026] [security2:error] [pid 276059:tid 276203] [client 4.196.65.241:2081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/samll.php"] [unique_id "ary1_ntqdHBwD77138e3VQAAAZg"]
[Wed Sep 30 01:10:54.567442 2026] [security2:error] [pid 276059:tid 276304] [client 20.28.180.172:18133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/nw.php"] [unique_id "ary1_ntqdHBwD77138e3VgAAAfw"]
[Wed Sep 30 01:10:54.595499 2026] [security2:error] [pid 276059:tid 276299] [client 52.172.226.14:12557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ab.php"] [unique_id "ary1_ntqdHBwD77138e3VwAAAfc"]
[Wed Sep 30 01:10:54.634628 2026] [security2:error] [pid 276059:tid 276238] [client 168.100.149.92:42296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/a29fd96d569bb0950633e80761247910.65.css.gz"] [unique_id "ary1_ntqdHBwD77138e3WAABunY"]
[Wed Sep 30 01:10:54.636831 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.637196 2026] [access_compat:error] [pid 270884:tid 271128] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.663930 2026] [security2:error] [pid 276620:tid 276768] [client 20.198.74.230:23569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/0mzrlfdt.php"] [unique_id "ary1_tPAdfEWqmGIkg1hRAAAAh0"]
[Wed Sep 30 01:10:54.670930 2026] [access_compat:error] [pid 270884:tid 271144] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:54.671194 2026] [access_compat:error] [pid 270884:tid 271144] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:54.761916 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.762190 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.829566 2026] [security2:error] [pid 270884:tid 271107] [client 85.203.36.86:30037] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1_iGeq9LtYp4zuPOsiwAAAFg"]
[Wed Sep 30 01:10:54.890831 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:54.891103 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:54.931115 2026] [security2:error] [pid 276620:tid 276877] [client 20.219.14.152:63419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/b8.php"] [unique_id "ary1_tPAdfEWqmGIkg1hSAAAAoo"]
[Wed Sep 30 01:10:54.970090 2026] [security2:error] [pid 276620:tid 276792] [client 45.89.242.91:22317] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/wp-editor.php"] [unique_id "ary1_tPAdfEWqmGIkg1hSgAAAjU"]
[Wed Sep 30 01:10:54.974680 2026] [security2:error] [pid 276620:tid 276807] [client 20.219.2.60:11341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/155.php"] [unique_id "ary1_tPAdfEWqmGIkg1hSwAAAkQ"]
[Wed Sep 30 01:10:55.007102 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.007428 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.056818 2026] [security2:error] [pid 270884:tid 271106] [client 52.172.226.14:12582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/css.php"] [unique_id "ary1_yGeq9LtYp4zuPOslgAAAFc"]
[Wed Sep 30 01:10:55.108416 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:55.108860 2026] [access_compat:error] [pid 270884:tid 271053] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:55.118102 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.118381 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.221506 2026] [security2:error] [pid 270884:tid 271040] [client 103.168.67.253:18530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary1_yGeq9LtYp4zuPOsmwAAABU"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:55.232250 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.232682 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.241776 2026] [security2:error] [pid 276620:tid 276826] [client 20.70.173.30:8135] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "api.orontes-tech.com"] [uri "/1.php"] [unique_id "ary1_9PAdfEWqmGIkg1hUwAAAlc"]
[Wed Sep 30 01:10:55.241891 2026] [security2:error] [pid 276620:tid 276826] [client 20.70.173.30:8135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/1.php"] [unique_id "ary1_9PAdfEWqmGIkg1hUwAAAlc"]
[Wed Sep 30 01:10:55.282938 2026] [security2:error] [pid 276620:tid 276883] [client 20.194.30.107:43416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/100.php"] [unique_id "ary1_9PAdfEWqmGIkg1hVAAAApA"]
[Wed Sep 30 01:10:55.344454 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.344720 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.404977 2026] [security2:error] [pid 270884:tid 271039] [client 103.168.67.253:47794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wp/index.php"] [unique_id "ary1_yGeq9LtYp4zuPOsogAAABQ"], referer: https://dklhardwareconstruction.com/wp/wp-admin/
[Wed Sep 30 01:10:55.405417 2026] [security2:error] [pid 276059:tid 276245] [client 223.181.60.167:21230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1_3tqdHBwD77138e3XAAAAcE"]
[Wed Sep 30 01:10:55.405559 2026] [security2:error] [pid 276059:tid 276245] [client 223.181.60.167:21230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary1_3tqdHBwD77138e3XAAAAcE"]
[Wed Sep 30 01:10:55.434088 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.14.152:63384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/133.php"] [unique_id "ary1_yGeq9LtYp4zuPOspAAAADI"]
[Wed Sep 30 01:10:55.464585 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.465028 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.467134 2026] [security2:error] [pid 270884:tid 271025] [client 4.240.25.22:8385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/k.php"] [unique_id "ary1_yGeq9LtYp4zuPOsqAAAAAY"]
[Wed Sep 30 01:10:55.480132 2026] [security2:error] [pid 270884:tid 271034] [client 103.241.204.139:59755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1_yGeq9LtYp4zuPOsqQAAAA8"]
[Wed Sep 30 01:10:55.480328 2026] [security2:error] [pid 270884:tid 271034] [client 103.241.204.139:59755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary1_yGeq9LtYp4zuPOsqQAAAA8"]
[Wed Sep 30 01:10:55.504864 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.19.141:20865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/il.php"] [unique_id "ary1_yGeq9LtYp4zuPOsrQAAACE"]
[Wed Sep 30 01:10:55.515010 2026] [security2:error] [pid 270884:tid 271044] [client 85.203.36.89:31405] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1_yGeq9LtYp4zuPOsrwAAABk"]
[Wed Sep 30 01:10:55.520186 2026] [security2:error] [pid 276059:tid 276294] [client 45.89.242.82:33603] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/lufix.php"] [unique_id "ary1_3tqdHBwD77138e3XQAAAfI"]
[Wed Sep 30 01:10:55.522293 2026] [security2:error] [pid 270884:tid 271108] [client 85.203.36.110:57699] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary1_yGeq9LtYp4zuPOssQAAAFk"]
[Wed Sep 30 01:10:55.522393 2026] [security2:error] [pid 270884:tid 271106] [client 52.172.226.14:46731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary1_yGeq9LtYp4zuPOssgAAAFc"]
[Wed Sep 30 01:10:55.571931 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.572212 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.586303 2026] [security2:error] [pid 276620:tid 276776] [client 154.54.100.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mail.jlyricz.com"] [uri "/.git/config"] [unique_id "ary1_9PAdfEWqmGIkg1hWwAAAiU"]
[Wed Sep 30 01:10:55.642706 2026] [access_compat:error] [pid 270884:tid 271091] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:55.642971 2026] [access_compat:error] [pid 270884:tid 271091] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:55.684648 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.684925 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.751529 2026] [security2:error] [pid 276059:tid 276277] [client 223.235.102.107:22103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1_3tqdHBwD77138e3YQAAAeE"]
[Wed Sep 30 01:10:55.751647 2026] [security2:error] [pid 276059:tid 276277] [client 223.235.102.107:22103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary1_3tqdHBwD77138e3YQAAAeE"]
[Wed Sep 30 01:10:55.786956 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.787281 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.888999 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.889456 2026] [access_compat:error] [pid 270884:tid 271039] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:55.918728 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.14.152:38022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/ano.php"] [unique_id "ary1_yGeq9LtYp4zuPOsuwAAAEY"]
[Wed Sep 30 01:10:55.937011 2026] [security2:error] [pid 270884:tid 271069] [client 85.203.36.87:28297] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpanel.checkboxdev.com"] [uri "/style.php"] [unique_id "ary1_yGeq9LtYp4zuPOsvgAAADI"]
[Wed Sep 30 01:10:55.988333 2026] [security2:error] [pid 276620:tid 276864] [client 52.172.226.14:18681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary1_9PAdfEWqmGIkg1hYQAAAn0"]
[Wed Sep 30 01:10:55.988723 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:55.988996 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.090558 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.090860 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.157044 2026] [security2:error] [pid 270884:tid 271040] [client 4.240.25.22:41717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/wpxml.php"] [unique_id "ary2ACGeq9LtYp4zuPOsyQAAABU"]
[Wed Sep 30 01:10:56.168705 2026] [security2:error] [pid 270884:tid 271141] [client 20.70.173.30:33306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2ACGeq9LtYp4zuPOsywAAAHo"]
[Wed Sep 30 01:10:56.174249 2026] [access_compat:error] [pid 270884:tid 271058] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:56.174510 2026] [access_compat:error] [pid 270884:tid 271058] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:56.174736 2026] [security2:error] [pid 270884:tid 271047] [client 85.203.36.107:58257] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/lufix.php"] [unique_id "ary2ACGeq9LtYp4zuPOszAAAABw"]
[Wed Sep 30 01:10:56.188599 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.188902 2026] [access_compat:error] [pid 270884:tid 271061] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.255792 2026] [security2:error] [pid 270884:tid 271096] [client 20.70.173.30:8166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/js.php"] [unique_id "ary2ACGeq9LtYp4zuPOszwAAAE0"]
[Wed Sep 30 01:10:56.291000 2026] [security2:error] [pid 270884:tid 271076] [client 20.28.180.172:34290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/tvbxn.php"] [unique_id "ary2ACGeq9LtYp4zuPOs0QAAADk"]
[Wed Sep 30 01:10:56.293816 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.294221 2026] [access_compat:error] [pid 270884:tid 271038] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.390586 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.391036 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.404182 2026] [security2:error] [pid 276620:tid 276803] [client 20.219.14.152:38034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/sf.php"] [unique_id "ary2ANPAdfEWqmGIkg1hZAAAAkA"]
[Wed Sep 30 01:10:56.453837 2026] [security2:error] [pid 276059:tid 276199] [client 52.172.226.14:18671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-links-opml.php"] [unique_id "ary2AHtqdHBwD77138e3YwAAAZQ"]
[Wed Sep 30 01:10:56.458012 2026] [security2:error] [pid 270884:tid 271006] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ACGeq9LtYp4zuPOs2AAAcnQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10130
[Wed Sep 30 01:10:56.458048 2026] [security2:error] [pid 270884:tid 271006] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ACGeq9LtYp4zuPOs2AAAcnQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10130
[Wed Sep 30 01:10:56.489117 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.489552 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.529792 2026] [security2:error] [pid 270884:tid 271052] [client 20.194.30.107:10144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/a.php"] [unique_id "ary2ACGeq9LtYp4zuPOs3QAAACE"]
[Wed Sep 30 01:10:56.567250 2026] [security2:error] [pid 276620:tid 276825] [client 20.28.180.172:62391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tool.php"] [unique_id "ary2ANPAdfEWqmGIkg1hZwAAAlY"]
[Wed Sep 30 01:10:56.569313 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.569580 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.616611 2026] [security2:error] [pid 276620:tid 276804] [client 168.100.149.36:42546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7d77fc0c141e7c05d05ca5028f4ecb40.155.css.gz"] [unique_id "ary2ANPAdfEWqmGIkg1haAACQUI"]
[Wed Sep 30 01:10:56.625243 2026] [security2:error] [pid 276620:tid 276764] [client 4.240.25.22:8463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/blurbs.php"] [unique_id "ary2ANPAdfEWqmGIkg1haQAAAhk"]
[Wed Sep 30 01:10:56.663950 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.664388 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.688039 2026] [security2:error] [pid 270884:tid 271118] [client 20.211.90.37:40400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/plugins/pwnd/as.php"] [unique_id "ary2ACGeq9LtYp4zuPOs6gAAAGM"]
[Wed Sep 30 01:10:56.692541 2026] [access_compat:error] [pid 270884:tid 271026] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:56.692990 2026] [access_compat:error] [pid 270884:tid 271026] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:56.737450 2026] [security2:error] [pid 276620:tid 276843] [client 85.203.36.117:56315] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "checkboxdev.hubach.com"] [uri "/style.php"] [unique_id "ary2ANPAdfEWqmGIkg1hawAAAmg"]
[Wed Sep 30 01:10:56.738924 2026] [security2:error] [pid 276059:tid 276265] [client 85.203.36.107:43581] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "cpcalendars.checkboxdev.com"] [uri "/style.php"] [unique_id "ary2AHtqdHBwD77138e3ZwAAAdU"]
[Wed Sep 30 01:10:56.747959 2026] [security2:error] [pid 270884:tid 271107] [client 37.41.16.35:61912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ACGeq9LtYp4zuPOs7QAAAFg"]
[Wed Sep 30 01:10:56.748086 2026] [security2:error] [pid 270884:tid 271107] [client 37.41.16.35:61912] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ACGeq9LtYp4zuPOs7QAAAFg"]
[Wed Sep 30 01:10:56.755681 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.756124 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.792976 2026] [security2:error] [pid 276620:tid 276796] [client 162.220.165.167:45986] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "globalaeroconsultants.com"] [uri "/"] [unique_id "ary2ANPAdfEWqmGIkg1hbQAAAjk"]
[Wed Sep 30 01:10:56.893756 2026] [security2:error] [pid 276620:tid 276765] [client 20.219.14.152:63360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/xx.php"] [unique_id "ary2ANPAdfEWqmGIkg1hbwAAAho"]
[Wed Sep 30 01:10:56.895826 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.896253 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.915080 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ACGeq9LtYp4zuPOs8gAAODU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13008
[Wed Sep 30 01:10:56.915103 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ACGeq9LtYp4zuPOs8gAAODU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13008
[Wed Sep 30 01:10:56.926521 2026] [security2:error] [pid 270884:tid 271121] [client 52.172.226.14:18476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/hp.php"] [unique_id "ary2ACGeq9LtYp4zuPOs8wAAAGY"]
[Wed Sep 30 01:10:56.984901 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:56.985167 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:56.988102 2026] [security2:error] [pid 270884:tid 271113] [client 45.89.242.88:63513] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.checkboxdev.com"] [uri "/style.php"] [unique_id "ary2ACGeq9LtYp4zuPOs9gAAAF4"]
[Wed Sep 30 01:10:57.024982 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.025421 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.052734 2026] [security2:error] [pid 270884:tid 271040] [client 4.196.65.241:2534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/abde5e1996.php"] [unique_id "ary2ASGeq9LtYp4zuPOs-wAAABU"]
[Wed Sep 30 01:10:57.055509 2026] [ssl:error] [pid 270884:tid 271024] [client 216.25.124.24:21432] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.txg.ucp.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:10:57.083311 2026] [security2:error] [pid 276620:tid 276800] [client 45.138.12.32:45654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rfn.buu.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary2AdPAdfEWqmGIkg1hcwAAAj0"]
[Wed Sep 30 01:10:57.113666 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:57.114114 2026] [access_compat:error] [pid 270884:tid 271128] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:10:57.115373 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.115609 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.208201 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.208632 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.291349 2026] [security2:error] [pid 270884:tid 271090] [client 64.23.210.159:37956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.210.23.64.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gycblinds.com"] [uri "/wp-login.php"] [unique_id "ary2ASGeq9LtYp4zuPOtAwAAAEc"]
[Wed Sep 30 01:10:57.295399 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.295660 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.376959 2026] [security2:error] [pid 270884:tid 271142] [client 20.219.14.152:38623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/file2.php"] [unique_id "ary2ASGeq9LtYp4zuPOtBwAAAHs"]
[Wed Sep 30 01:10:57.392793 2026] [security2:error] [pid 270884:tid 271069] [client 52.172.226.14:12592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/mo.php"] [unique_id "ary2ASGeq9LtYp4zuPOtCQAAADI"]
[Wed Sep 30 01:10:57.394081 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.394535 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.483358 2026] [security2:error] [pid 276620:tid 276791] [client 187.191.36.97:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/"] [unique_id "ary2AdPAdfEWqmGIkg1hgQAAAjQ"]
[Wed Sep 30 01:10:57.486926 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.487388 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.543603 2026] [security2:error] [pid 276620:tid 276828] [client 20.194.96.176:15913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/CAE-2.5.php"] [unique_id "ary2AdPAdfEWqmGIkg1hgwAAAlk"]
[Wed Sep 30 01:10:57.569766 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.570056 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.603758 2026] [access_compat:error] [pid 270884:tid 271103] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:57.604019 2026] [access_compat:error] [pid 270884:tid 271103] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:57.641492 2026] [security2:error] [pid 276620:tid 276697] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2AdPAdfEWqmGIkg1hhgAChEM"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D88177
[Wed Sep 30 01:10:57.653328 2026] [security2:error] [pid 276059:tid 276290] [client 43.163.81.168:36682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.81.163.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "ary2AXtqdHBwD77138e3bAAAAe4"], referer: https://clenbuterol4sale.com/wp-login.php
[Wed Sep 30 01:10:57.661077 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.661350 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:59149] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.751235 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.751525 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.845257 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.845690 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:57.853575 2026] [security2:error] [pid 276059:tid 276202] [client 52.172.226.14:18643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/ivmirgut.php"] [unique_id "ary2AXtqdHBwD77138e3bQAAAZc"]
[Wed Sep 30 01:10:57.869840 2026] [security2:error] [pid 270884:tid 271121] [client 20.219.14.152:63378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/m.php"] [unique_id "ary2ASGeq9LtYp4zuPOtIQAAAGY"]
[Wed Sep 30 01:10:57.921268 2026] [security2:error] [pid 276620:tid 276811] [client 20.28.180.172:34265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wpxml.php"] [unique_id "ary2AdPAdfEWqmGIkg1hjAAAAkg"]
[Wed Sep 30 01:10:57.932398 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:57.932670 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.000854 2026] [security2:error] [pid 270884:tid 271119] [client 20.219.19.141:20848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/1klopedf.php"] [unique_id "ary2AiGeq9LtYp4zuPOtLAAAAGQ"]
[Wed Sep 30 01:10:58.026626 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.026920 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.077608 2026] [security2:error] [pid 270884:tid 271108] [client 216.73.216.46:59149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2AiGeq9LtYp4zuPOtOQAAAFk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9zeXMvY2xhc3MvbXNy
[Wed Sep 30 01:10:58.118647 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.118956 2026] [access_compat:error] [pid 270884:tid 271143] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.146045 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:58.146321 2026] [access_compat:error] [pid 270884:tid 271074] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:58.198252 2026] [security2:error] [pid 276620:tid 276786] [client 20.70.173.30:25308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp-the.php"] [unique_id "ary2AtPAdfEWqmGIkg1hkwAAAi8"]
[Wed Sep 30 01:10:58.212161 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.212591 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.299917 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.300192 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:15227] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.315495 2026] [security2:error] [pid 276620:tid 276833] [client 49.37.102.248:57809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2AtPAdfEWqmGIkg1hmQAAAl4"]
[Wed Sep 30 01:10:58.315614 2026] [security2:error] [pid 276620:tid 276833] [client 49.37.102.248:57809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2AtPAdfEWqmGIkg1hmQAAAl4"]
[Wed Sep 30 01:10:58.319699 2026] [security2:error] [pid 276620:tid 276795] [client 52.172.226.14:12577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/baba.php"] [unique_id "ary2AtPAdfEWqmGIkg1hmgAAAjg"]
[Wed Sep 30 01:10:58.359899 2026] [security2:error] [pid 270884:tid 271054] [client 127.0.0.1:58762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary2AiGeq9LtYp4zuPOtQwAAACM"]
[Wed Sep 30 01:10:58.361157 2026] [security2:error] [pid 276620:tid 276803] [client 74.7.241.156:37886] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.rsm.imz.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2AtPAdfEWqmGIkg1hlwACQEA"]
[Wed Sep 30 01:10:58.368181 2026] [security2:error] [pid 270884:tid 271111] [client 20.219.14.152:63416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/33.php"] [unique_id "ary2AiGeq9LtYp4zuPOtRAAAAFw"]
[Wed Sep 30 01:10:58.379183 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:11851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-the.php"] [unique_id "ary2AiGeq9LtYp4zuPOtRQAAACY"]
[Wed Sep 30 01:10:58.397011 2026] [security2:error] [pid 270884:tid 271079] [client 20.194.30.107:10157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/m.php"] [unique_id "ary2AiGeq9LtYp4zuPOtRgAAADw"]
[Wed Sep 30 01:10:58.399506 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.399975 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.403918 2026] [security2:error] [pid 270884:tid 271090] [client 105.112.178.79:38578] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.tourcom.com"] [uri "/.env"] [unique_id "ary2AiGeq9LtYp4zuPOtRwAAAEc"]
[Wed Sep 30 01:10:58.485118 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.485410 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.518594 2026] [security2:error] [pid 270884:tid 271073] [client 20.70.173.30:37163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/echkm.php"] [unique_id "ary2AiGeq9LtYp4zuPOtSwAAADY"]
[Wed Sep 30 01:10:58.572499 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.572936 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.575312 2026] [security2:error] [pid 276620:tid 276765] [client 103.133.200.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/network-cables-networking"] [unique_id "ary2AtPAdfEWqmGIkg1hoQAAAho"]
[Wed Sep 30 01:10:58.615307 2026] [access_compat:error] [pid 270884:tid 271096] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:58.615588 2026] [access_compat:error] [pid 270884:tid 271096] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:58.627026 2026] [security2:error] [pid 276620:tid 276806] [client 168.100.149.166:19166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/9b205ca30234263fa79aed221f66c4da.179.css.gz"] [unique_id "ary2AtPAdfEWqmGIkg1howACQ0Y"]
[Wed Sep 30 01:10:58.661867 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.662128 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.722086 2026] [security2:error] [pid 270884:tid 271026] [client 216.73.216.46:15227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2AiGeq9LtYp4zuPOtVQAAAAc"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9saWIvcnBt
[Wed Sep 30 01:10:58.727263 2026] [security2:error] [pid 270884:tid 271029] [client 20.194.30.107:42177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/kir.php"] [unique_id "ary2AiGeq9LtYp4zuPOtVgAAAAo"]
[Wed Sep 30 01:10:58.730101 2026] [security2:error] [pid 270884:tid 271064] [client 85.203.36.98:44081] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "mail.checkboxdev.com"] [uri "/style.php"] [unique_id "ary2AiGeq9LtYp4zuPOtVwAAAC0"]
[Wed Sep 30 01:10:58.752199 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.752474 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.781852 2026] [security2:error] [pid 270884:tid 271111] [client 52.172.226.14:12598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/Components.php"] [unique_id "ary2AiGeq9LtYp4zuPOtWgAAAFw"]
[Wed Sep 30 01:10:58.848538 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.849006 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:58.875745 2026] [core:error] [pid 270884:tid 271044] [client 103.46.186.85:35630] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Wed Sep 30 01:10:58.930148 2026] [security2:error] [pid 270884:tid 271116] [client 152.228.219.218:38774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.219.228.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.org"] [uri "/wp-login.php"] [unique_id "ary2AiGeq9LtYp4zuPOtZAAAAGE"], referer: https://beetreeaudio.org/wp-login.php
[Wed Sep 30 01:10:58.934552 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:58.934814 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.031222 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.031674 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.033364 2026] [security2:error] [pid 270884:tid 271109] [client 43.163.81.168:45462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.81.163.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "ary2AyGeq9LtYp4zuPOtZwAAAFo"], referer: https://clenbuterol4sale.com/wp-login.php
[Wed Sep 30 01:10:59.110466 2026] [access_compat:error] [pid 270884:tid 271047] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:59.110740 2026] [access_compat:error] [pid 270884:tid 271047] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:10:59.116877 2026] [security2:error] [pid 270884:tid 271085] [client 20.28.180.172:18237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/drhunthq.php"] [unique_id "ary2AyGeq9LtYp4zuPOtagAAAEI"]
[Wed Sep 30 01:10:59.117682 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.117980 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.207189 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.207556 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.242931 2026] [security2:error] [pid 276059:tid 276246] [client 52.172.226.14:18682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/aboutt.php"] [unique_id "ary2A3tqdHBwD77138e3dQAAAcI"]
[Wed Sep 30 01:10:59.299038 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.299292 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.351094 2026] [security2:error] [pid 276059:tid 276267] [client 4.240.25.22:18702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/chosen.php"] [unique_id "ary2A3tqdHBwD77138e3eQAAAdc"]
[Wed Sep 30 01:10:59.399486 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.399957 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.491576 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.492090 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.497256 2026] [security2:error] [pid 270884:tid 271044] [client 4.240.25.22:8917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/min.php"] [unique_id "ary2AyGeq9LtYp4zuPOtfQAAABk"]
[Wed Sep 30 01:10:59.572693 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.573514 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.627534 2026] [security2:error] [pid 276620:tid 276809] [client 49.43.163.212:50472] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2A9PAdfEWqmGIkg1hswAAAkY"]
[Wed Sep 30 01:10:59.627716 2026] [security2:error] [pid 276620:tid 276809] [client 49.43.163.212:50472] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2A9PAdfEWqmGIkg1hswAAAkY"]
[Wed Sep 30 01:10:59.661992 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.662260 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.693837 2026] [security2:error] [pid 270884:tid 271023] [client 20.70.173.30:8151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ccc.php"] [unique_id "ary2AyGeq9LtYp4zuPOthgAAAAQ"]
[Wed Sep 30 01:10:59.704250 2026] [security2:error] [pid 276620:tid 276884] [client 52.172.226.14:31057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary2A9PAdfEWqmGIkg1htQAAApE"]
[Wed Sep 30 01:10:59.737748 2026] [security2:error] [pid 276059:tid 276220] [client 203.122.45.246:57791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2A3tqdHBwD77138e3gQAAAag"]
[Wed Sep 30 01:10:59.737863 2026] [security2:error] [pid 276059:tid 276220] [client 203.122.45.246:57791] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2A3tqdHBwD77138e3gQAAAag"]
[Wed Sep 30 01:10:59.755896 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.756327 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.768349 2026] [autoindex:error] [pid 276620:tid 276834] [client 20.219.14.152:0] AH01276: Cannot serve directory /home1/dennisc1/public_html/harmonicaworkshop.com/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:10:59.845314 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.845610 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:10:59.936413 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:10:59.936709 2026] [access_compat:error] [pid 270884:tid 271110] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.007890 2026] [security2:error] [pid 276620:tid 276864] [client 20.219.14.152:38017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/ccc.php"] [unique_id "ary2BNPAdfEWqmGIkg1huwAAAn0"]
[Wed Sep 30 01:11:00.078295 2026] [security2:error] [pid 270884:tid 271025] [client 20.211.90.37:39942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-configs.php"] [unique_id "ary2BCGeq9LtYp4zuPOtlgAAAAY"]
[Wed Sep 30 01:11:00.116870 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.117129 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.172843 2026] [security2:error] [pid 276620:tid 276875] [client 45.138.12.32:32844] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rla.yqe.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2BNPAdfEWqmGIkg1hvQAAAog"]
[Wed Sep 30 01:11:00.207432 2026] [security2:error] [pid 270884:tid 271057] [client 52.172.226.14:12607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/xx.php"] [unique_id "ary2BCGeq9LtYp4zuPOtoQAAACY"]
[Wed Sep 30 01:11:00.207711 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.207967 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.300195 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.300495 2026] [access_compat:error] [pid 270884:tid 271122] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.512872 2026] [security2:error] [pid 276059:tid 276301] [client 20.219.14.152:38070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/file15.php"] [unique_id "ary2BHtqdHBwD77138e3iwAAAfk"]
[Wed Sep 30 01:11:00.536232 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:4556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.536540 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:4556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.553580 2026] [security2:error] [pid 276620:tid 276833] [client 152.228.219.218:53094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.219.228.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.org"] [uri "/wp-login.php"] [unique_id "ary2BNPAdfEWqmGIkg1hwwAAAl4"], referer: https://beetreeaudio.org/wp-login.php
[Wed Sep 30 01:11:00.564146 2026] [security2:error] [pid 270884:tid 271113] [client 103.168.66.101:32846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/index.php"] [unique_id "ary2BCGeq9LtYp4zuPOtrAAAAF4"]
[Wed Sep 30 01:11:00.576750 2026] [core:error] [pid 270884:tid 271114] [client 103.46.186.85:35646] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh)
[Wed Sep 30 01:11:00.590663 2026] [security2:error] [pid 270884:tid 271075] [client 20.219.2.60:11697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp5.php"] [unique_id "ary2BCGeq9LtYp4zuPOtsgAAADg"]
[Wed Sep 30 01:11:00.603098 2026] [security2:error] [pid 276059:tid 276250] [client 191.182.164.25:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television"] [unique_id "ary2BHtqdHBwD77138e3jgAAAcY"]
[Wed Sep 30 01:11:00.625911 2026] [security2:error] [pid 270884:tid 271126] [client 122.173.27.10:1188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2BCGeq9LtYp4zuPOttQAAAGs"]
[Wed Sep 30 01:11:00.626019 2026] [security2:error] [pid 270884:tid 271126] [client 122.173.27.10:1188] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2BCGeq9LtYp4zuPOttQAAAGs"]
[Wed Sep 30 01:11:00.643202 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.643254 2026] [security2:error] [pid 276059:tid 276140] [remote 220.181.108.165:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2BHtqdHBwD77138e3kAAB00w"]
[Wed Sep 30 01:11:00.643486 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.678090 2026] [security2:error] [pid 270884:tid 271079] [client 52.172.226.14:12583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/gelay.php"] [unique_id "ary2BCGeq9LtYp4zuPOtvQAAADw"]
[Wed Sep 30 01:11:00.683471 2026] [security2:error] [pid 270884:tid 270904] [remote 220.181.108.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2BCGeq9LtYp4zuPOtvgAABhI"]
[Wed Sep 30 01:11:00.742491 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.742745 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.761057 2026] [security2:error] [pid 276620:tid 276783] [client 20.198.74.230:23891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/nmd.php"] [unique_id "ary2BNPAdfEWqmGIkg1hxgAAAiw"]
[Wed Sep 30 01:11:00.840706 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.840962 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.873026 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:4556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.873283 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:4556] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.912309 2026] [security2:error] [pid 276620:tid 276765] [client 20.219.19.141:20907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/zv.php"] [unique_id "ary2BNPAdfEWqmGIkg1hyAAAAho"]
[Wed Sep 30 01:11:00.914030 2026] [security2:error] [pid 270884:tid 271109] [client 20.70.173.30:39991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/media.php"] [unique_id "ary2BCGeq9LtYp4zuPOtyAAAAFo"]
[Wed Sep 30 01:11:00.914252 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:00.914524 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:00.916188 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.916602 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.918753 2026] [security2:error] [pid 276059:tid 276305] [client 202.179.95.79:51736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2BHtqdHBwD77138e3lAAAAf0"]
[Wed Sep 30 01:11:00.918854 2026] [security2:error] [pid 276059:tid 276305] [client 202.179.95.79:51736] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2BHtqdHBwD77138e3lAAAAf0"]
[Wed Sep 30 01:11:00.937759 2026] [security2:error] [pid 270884:tid 271135] [client 20.28.180.172:29570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wefile.php"] [unique_id "ary2BCGeq9LtYp4zuPOtzgAAAHQ"]
[Wed Sep 30 01:11:00.970912 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:20220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.971373 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:20220] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.972892 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:00.973327 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:9292] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:00.987096 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2BCGeq9LtYp4zuPOt0gAABhk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13189
[Wed Sep 30 01:11:00.987121 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2BCGeq9LtYp4zuPOt0gAABhk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13189
[Wed Sep 30 01:11:01.033856 2026] [security2:error] [pid 276620:tid 276781] [client 168.100.149.35:29660] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d97037189ec1434a885009a6788da172.a9.css.gz"] [unique_id "ary2BdPAdfEWqmGIkg1hzAACKkw"]
[Wed Sep 30 01:11:01.038137 2026] [security2:error] [pid 276620:tid 276861] [client 20.219.14.152:59468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/82.php"] [unique_id "ary2BdPAdfEWqmGIkg1hzQAAAno"]
[Wed Sep 30 01:11:01.108147 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:46941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.108414 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:46941] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.160820 2026] [security2:error] [pid 276620:tid 276865] [client 52.172.226.14:12590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/htaccess.php"] [unique_id "ary2BdPAdfEWqmGIkg1h0gAAAn4"]
[Wed Sep 30 01:11:01.172034 2026] [core:alert] [pid 276059:tid 276244] [client 130.131.227.119:4869] /home3/mypoolpl/public_html/.htaccess: php_value takes two arguments, PHP Value
[Wed Sep 30 01:11:01.199995 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:17002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.200271 2026] [access_compat:error] [pid 270884:tid 271088] [client 216.73.216.46:17002] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.248176 2026] [security2:error] [pid 270884:tid 271038] [client 4.196.65.241:2523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smartsafetycenter.com"] [uri "/cjhnp.php"] [unique_id "ary2BSGeq9LtYp4zuPOt3wAAABM"]
[Wed Sep 30 01:11:01.490336 2026] [security2:error] [pid 276620:tid 276841] [client 20.28.180.172:62394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/admin/index.php"] [unique_id "ary2BdPAdfEWqmGIkg1h2wAAAmY"]
[Wed Sep 30 01:11:01.517596 2026] [security2:error] [pid 276620:tid 276857] [client 20.219.14.152:59475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/admin.php/nope.php"] [unique_id "ary2BdPAdfEWqmGIkg1h3wAAAnY"]
[Wed Sep 30 01:11:01.520625 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.521078 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.540601 2026] [security2:error] [pid 270884:tid 271095] [client 20.204.42.136:35750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/ded.php"] [unique_id "ary2BSGeq9LtYp4zuPOt6AAAAEw"]
[Wed Sep 30 01:11:01.608297 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.608760 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.628007 2026] [security2:error] [pid 270884:tid 271093] [client 52.172.226.14:31052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/readme.php"] [unique_id "ary2BSGeq9LtYp4zuPOt7QAAAEo"]
[Wed Sep 30 01:11:01.633956 2026] [security2:error] [pid 276620:tid 276810] [client 182.69.182.151:31267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2BdPAdfEWqmGIkg1h6AAAAkc"]
[Wed Sep 30 01:11:01.634090 2026] [security2:error] [pid 276620:tid 276810] [client 182.69.182.151:31267] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2BdPAdfEWqmGIkg1h6AAAAkc"]
[Wed Sep 30 01:11:01.657636 2026] [security2:error] [pid 270884:tid 271141] [client 4.240.25.22:8493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/100.php"] [unique_id "ary2BSGeq9LtYp4zuPOt7gAAAHo"]
[Wed Sep 30 01:11:01.673473 2026] [access_compat:error] [pid 270884:tid 271047] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:01.673815 2026] [access_compat:error] [pid 270884:tid 271047] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:01.694949 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.695384 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.747040 2026] [security2:error] [pid 276059:tid 276199] [client 45.138.12.32:45740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kde.lez.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2BXtqdHBwD77138e3nQAAAZQ"]
[Wed Sep 30 01:11:01.764102 2026] [security2:error] [pid 276620:tid 276858] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/hello.world?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/hello.world"] [unique_id "ary2BdPAdfEWqmGIkg1h7AAAAnc"]
[Wed Sep 30 01:11:01.789296 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.789740 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.808814 2026] [security2:error] [pid 276620:tid 276786] [client 20.211.90.37:39947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary2BdPAdfEWqmGIkg1h7QAAAi8"]
[Wed Sep 30 01:11:01.828611 2026] [security2:error] [pid 276620:tid 276852] [client 201.32.215.149:8168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2BdPAdfEWqmGIkg1h7gAAAnE"]
[Wed Sep 30 01:11:01.831606 2026] [security2:error] [pid 276620:tid 276852] [client 201.32.215.149:8168] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2BdPAdfEWqmGIkg1h7gAAAnE"]
[Wed Sep 30 01:11:01.879955 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.880392 2026] [access_compat:error] [pid 270884:tid 271052] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.951188 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2BSGeq9LtYp4zuPOt9wAAARg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301616&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:11:01.951220 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2BSGeq9LtYp4zuPOt9wAAARg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301616&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:11:01.974144 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:01.974584 2026] [access_compat:error] [pid 270884:tid 271079] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:01.988911 2026] [security2:error] [pid 276620:tid 276793] [client 20.219.14.152:52091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/222.php"] [unique_id "ary2BdPAdfEWqmGIkg1h8AAAAjY"]
[Wed Sep 30 01:11:02.007010 2026] [ssl:error] [pid 270884:tid 271111] [client 199.45.155.29:43918] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname resourcefulplanner.co.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:11:02.063736 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.064169 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.098303 2026] [security2:error] [pid 276620:tid 276799] [client 52.172.226.14:31043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/max.php"] [unique_id "ary2BtPAdfEWqmGIkg1h8wAAAjw"]
[Wed Sep 30 01:11:02.100232 2026] [security2:error] [pid 276059:tid 276207] [client 20.219.2.60:11390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-access.php"] [unique_id "ary2BntqdHBwD77138e3ogAAAZw"]
[Wed Sep 30 01:11:02.143833 2026] [security2:error] [pid 276620:tid 276836] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/"] [unique_id "ary2BtPAdfEWqmGIkg1h9gAAAmE"]
[Wed Sep 30 01:11:02.157867 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.158319 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.194642 2026] [access_compat:error] [pid 270884:tid 271141] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:02.194914 2026] [access_compat:error] [pid 270884:tid 271141] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:02.251232 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.251754 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:14453] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.337318 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.337906 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.423085 2026] [security2:error] [pid 270884:tid 271019] [client 216.73.216.46:14453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2BiGeq9LtYp4zuPOuFAAAAAA"]
[Wed Sep 30 01:11:02.441599 2026] [security2:error] [pid 276620:tid 276837] [client 20.28.180.172:29581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ebkid.php"] [unique_id "ary2BtPAdfEWqmGIkg1h_gAAAmI"]
[Wed Sep 30 01:11:02.475155 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.14.152:38102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/sallu.php"] [unique_id "ary2BtPAdfEWqmGIkg1h_wAAAik"]
[Wed Sep 30 01:11:02.519238 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.519505 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.532859 2026] [security2:error] [pid 270884:tid 271079] [client 173.254.29.157:41190] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary2BiGeq9LtYp4zuPOuGAAAADw"]
[Wed Sep 30 01:11:02.534585 2026] [security2:error] [pid 276620:tid 276768] [client 173.254.29.157:41196] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary2BtPAdfEWqmGIkg1iAgAAAh0"]
[Wed Sep 30 01:11:02.575784 2026] [security2:error] [pid 270884:tid 271127] [client 52.172.226.14:12556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/post.php"] [unique_id "ary2BiGeq9LtYp4zuPOuGgAAAGw"]
[Wed Sep 30 01:11:02.578246 2026] [security2:error] [pid 276620:tid 276835] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/index.php?%add allow_url_include=1 %add auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/index.php"] [unique_id "ary2BtPAdfEWqmGIkg1iAwAAAmA"]
[Wed Sep 30 01:11:02.609901 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.610181 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.619394 2026] [security2:error] [pid 276620:tid 276833] [client 43.227.131.37:55081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2BtPAdfEWqmGIkg1iBQAAAl4"]
[Wed Sep 30 01:11:02.619520 2026] [security2:error] [pid 276620:tid 276833] [client 43.227.131.37:55081] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2BtPAdfEWqmGIkg1iBQAAAl4"]
[Wed Sep 30 01:11:02.651540 2026] [security2:error] [pid 270884:tid 271113] [client 168.100.149.210:30802] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/f09611a23c65e5231a96bb2f7a1631f0.5719.css.gz"] [unique_id "ary2BiGeq9LtYp4zuPOuIAAAXjg"]
[Wed Sep 30 01:11:02.657730 2026] [security2:error] [pid 276620:tid 276774] [client 103.211.18.63:57887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2BtPAdfEWqmGIkg1iBgAAAiM"]
[Wed Sep 30 01:11:02.657864 2026] [security2:error] [pid 276620:tid 276774] [client 103.211.18.63:57887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2BtPAdfEWqmGIkg1iBgAAAiM"]
[Wed Sep 30 01:11:02.685148 2026] [security2:error] [pid 276620:tid 276831] [client 20.28.180.172:18333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tfm.php"] [unique_id "ary2BtPAdfEWqmGIkg1iCQAAAlw"]
[Wed Sep 30 01:11:02.701722 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.701994 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.793623 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.793914 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.845644 2026] [security2:error] [pid 270884:tid 271027] [client 185.217.27.244:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2BiGeq9LtYp4zuPOuJQAAAAg"]
[Wed Sep 30 01:11:02.864175 2026] [security2:error] [pid 276620:tid 276820] [client 20.70.173.30:41871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/reop3.php"] [unique_id "ary2BtPAdfEWqmGIkg1iDwAAAlE"]
[Wed Sep 30 01:11:02.879124 2026] [security2:error] [pid 276620:tid 276858] [client 20.194.30.107:10001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/adminfuns.php"] [unique_id "ary2BtPAdfEWqmGIkg1iEgAAAnc"]
[Wed Sep 30 01:11:02.882910 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.883193 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.901845 2026] [security2:error] [pid 276620:tid 276847] [client 45.138.12.32:32884] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rlr.ewu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2BtPAdfEWqmGIkg1iEwAAAmw"]
[Wed Sep 30 01:11:02.955392 2026] [security2:error] [pid 270884:tid 271078] [client 20.198.74.230:24146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/dhlcu.php"] [unique_id "ary2BiGeq9LtYp4zuPOuMgAAADs"]
[Wed Sep 30 01:11:02.974687 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:02.974997 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:02.989628 2026] [security2:error] [pid 276059:tid 276272] [client 20.219.14.152:52057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/k.php"] [unique_id "ary2BntqdHBwD77138e3pQAAAdw"]
[Wed Sep 30 01:11:03.045423 2026] [access_compat:error] [pid 270884:tid 271086] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:03.045705 2026] [access_compat:error] [pid 270884:tid 271086] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:03.055150 2026] [security2:error] [pid 270884:tid 271057] [client 20.70.173.30:33295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/tool.php"] [unique_id "ary2ByGeq9LtYp4zuPOuOAAAACY"]
[Wed Sep 30 01:11:03.057521 2026] [security2:error] [pid 270884:tid 271144] [client 52.172.226.14:18683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/themes.php"] [unique_id "ary2ByGeq9LtYp4zuPOuOQAAAH0"]
[Wed Sep 30 01:11:03.065967 2026] [security2:error] [pid 276620:tid 276832] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/test.hello?%add allow_url_include=1 %add auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/test.hello"] [unique_id "ary2B9PAdfEWqmGIkg1iGQAAAl0"]
[Wed Sep 30 01:11:03.070368 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.070800 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.132526 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYi9leGlt
[Wed Sep 30 01:11:03.132826 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L2xpYi9leGlt
[Wed Sep 30 01:11:03.148635 2026] [security2:error] [pid 270884:tid 271093] [client 116.193.128.26:59295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ByGeq9LtYp4zuPOuPQAAAEo"]
[Wed Sep 30 01:11:03.148734 2026] [security2:error] [pid 270884:tid 271093] [client 116.193.128.26:59295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ByGeq9LtYp4zuPOuPQAAAEo"]
[Wed Sep 30 01:11:03.156493 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.156761 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.236203 2026] [security2:error] [pid 270884:tid 271079] [client 45.138.12.32:45738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kbi.fah.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2ByGeq9LtYp4zuPOuRQAAADw"]
[Wed Sep 30 01:11:03.248146 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.248432 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:46612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.338724 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.339010 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.343762 2026] [security2:error] [pid 270884:tid 271143] [client 20.70.173.30:25285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/baba.php"] [unique_id "ary2ByGeq9LtYp4zuPOuTgAAAHw"]
[Wed Sep 30 01:11:03.428021 2026] [security2:error] [pid 276620:tid 276808] [client 103.168.66.101:11302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/wp-login.php"] [unique_id "ary2B9PAdfEWqmGIkg1iIgAAAkU"]
[Wed Sep 30 01:11:03.434272 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.434709 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.515392 2026] [security2:error] [pid 270884:tid 271064] [client 20.219.14.152:38152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/24.php"] [unique_id "ary2ByGeq9LtYp4zuPOuUgAAAC0"]
[Wed Sep 30 01:11:03.521047 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.521314 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.526476 2026] [security2:error] [pid 276059:tid 276318] [client 52.172.226.14:46763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary2B3tqdHBwD77138e3rQAAAgo"]
[Wed Sep 30 01:11:03.543585 2026] [security2:error] [pid 276620:tid 276873] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/index.php?-d allow_url_include=on -d auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/index.php"] [unique_id "ary2B9PAdfEWqmGIkg1iJQAAAoY"]
[Wed Sep 30 01:11:03.617539 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.617982 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.673644 2026] [security2:error] [pid 270884:tid 271044] [client 198.13.198.116:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2ByGeq9LtYp4zuPOuWgAAABk"]
[Wed Sep 30 01:11:03.680134 2026] [access_compat:error] [pid 270884:tid 271108] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:03.680572 2026] [access_compat:error] [pid 270884:tid 271108] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:03.708520 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.708965 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.795561 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.795857 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.826133 2026] [security2:error] [pid 270884:tid 271073] [client 173.254.29.157:41214] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2ByGeq9LtYp4zuPOuaAAAADY"]
[Wed Sep 30 01:11:03.842775 2026] [security2:error] [pid 270884:tid 271116] [client 173.254.29.157:41224] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2ByGeq9LtYp4zuPOuawAAAGE"]
[Wed Sep 30 01:11:03.858056 2026] [security2:error] [pid 270884:tid 271050] [client 173.254.29.157:41228] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2ByGeq9LtYp4zuPOubQAAAB8"]
[Wed Sep 30 01:11:03.873944 2026] [security2:error] [pid 270884:tid 271115] [client 173.254.29.157:41234] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2ByGeq9LtYp4zuPOucAAAAGA"]
[Wed Sep 30 01:11:03.879140 2026] [security2:error] [pid 276620:tid 276868] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2B9PAdfEWqmGIkg1iKwAAAoE"]
[Wed Sep 30 01:11:03.886927 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.887208 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.906332 2026] [security2:error] [pid 270884:tid 271049] [client 20.219.19.141:21060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/zv.update.php"] [unique_id "ary2ByGeq9LtYp4zuPOucwAAAB4"]
[Wed Sep 30 01:11:03.966825 2026] [security2:error] [pid 276059:tid 276234] [client 106.214.2.47:27138] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2B3tqdHBwD77138e3swAAAbY"]
[Wed Sep 30 01:11:03.973572 2026] [security2:error] [pid 276059:tid 276234] [client 106.214.2.47:27138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2B3tqdHBwD77138e3swAAAbY"]
[Wed Sep 30 01:11:03.982992 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:03.983434 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:03.999478 2026] [security2:error] [pid 270884:tid 271093] [client 52.172.226.14:31103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary2ByGeq9LtYp4zuPOudwAAAEo"]
[Wed Sep 30 01:11:04.006799 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.14.152:38187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/blacks.php"] [unique_id "ary2CCGeq9LtYp4zuPOueAAAAGs"]
[Wed Sep 30 01:11:04.023924 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:11712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/hots.php"] [unique_id "ary2CCGeq9LtYp4zuPOuegAAAAA"]
[Wed Sep 30 01:11:04.044689 2026] [security2:error] [pid 270884:tid 271144] [client 116.197.133.25:58659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOuewAAAH0"]
[Wed Sep 30 01:11:04.044781 2026] [security2:error] [pid 270884:tid 271144] [client 116.197.133.25:58659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOuewAAAH0"]
[Wed Sep 30 01:11:04.069054 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.069304 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.070052 2026] [security2:error] [pid 276620:tid 276780] [client 155.190.6.18:57654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2CNPAdfEWqmGIkg1iMAAAAik"]
[Wed Sep 30 01:11:04.135866 2026] [security2:error] [pid 276620:tid 276769] [client 45.128.21.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2CNPAdfEWqmGIkg1iMgAAAh4"]
[Wed Sep 30 01:11:04.152449 2026] [security2:error] [pid 270884:tid 271050] [client 103.168.67.253:47802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2CCGeq9LtYp4zuPOuhgAAAB8"]
[Wed Sep 30 01:11:04.159556 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.159819 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.179095 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:04.179567 2026] [access_compat:error] [pid 270884:tid 271038] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:04.236412 2026] [security2:error] [pid 276620:tid 276781] [client 159.89.172.17:35194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.172.89.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary2CNPAdfEWqmGIkg1iNwAAAio"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:11:04.251767 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.252052 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.271842 2026] [security2:error] [pid 276620:tid 276763] [client 20.70.173.30:37131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-content/admin.php"] [unique_id "ary2CNPAdfEWqmGIkg1iOQAAAhg"]
[Wed Sep 30 01:11:04.343893 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.343958 2026] [security2:error] [pid 276620:tid 276828] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2CNPAdfEWqmGIkg1iPAAAAlk"]
[Wed Sep 30 01:11:04.344208 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.347610 2026] [security2:error] [pid 276620:tid 276780] [client 155.190.6.18:57654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2CNPAdfEWqmGIkg1iMAAAAik"]
[Wed Sep 30 01:11:04.392141 2026] [security2:error] [pid 276059:tid 276215] [client 20.28.180.172:29600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/edorxrr.php"] [unique_id "ary2CHtqdHBwD77138e3uAAAAaM"]
[Wed Sep 30 01:11:04.440544 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.440994 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.457401 2026] [security2:error] [pid 276620:tid 276845] [client 52.172.226.14:31072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/click.php"] [unique_id "ary2CNPAdfEWqmGIkg1iQAAAAmo"]
[Wed Sep 30 01:11:04.512756 2026] [security2:error] [pid 276059:tid 276206] [client 20.219.14.152:38130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/anom.php"] [unique_id "ary2CHtqdHBwD77138e3ugAAAZs"]
[Wed Sep 30 01:11:04.526209 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.526515 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.576156 2026] [security2:error] [pid 270884:tid 271099] [client 152.56.240.85:62296] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOulgAAAFA"]
[Wed Sep 30 01:11:04.576471 2026] [security2:error] [pid 270884:tid 271099] [client 152.56.240.85:62296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOulgAAAFA"]
[Wed Sep 30 01:11:04.582431 2026] [security2:error] [pid 270884:tid 271113] [client 181.113.151.66:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2CCGeq9LtYp4zuPOulwAAAF4"]
[Wed Sep 30 01:11:04.610029 2026] [security2:error] [pid 270884:tid 271023] [client 122.51.236.174:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "digitise.africa"] [uri "/"] [unique_id "ary2CCGeq9LtYp4zuPOumQAAAAQ"]
[Wed Sep 30 01:11:04.615904 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.616162 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.632481 2026] [security2:error] [pid 276059:tid 276255] [client 168.100.149.182:16508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ecb583d0aabb9b3dea7ca3ce8b1fd93f.80.css.gz"] [unique_id "ary2CHtqdHBwD77138e3wAAByxY"]
[Wed Sep 30 01:11:04.698076 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:04.698331 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:04.709338 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.709599 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.745119 2026] [security2:error] [pid 270884:tid 271127] [client 20.28.180.172:62387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/a4.php"] [unique_id "ary2CCGeq9LtYp4zuPOunQAAAGw"]
[Wed Sep 30 01:11:04.767729 2026] [security2:error] [pid 276620:tid 276759] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2CNPAdfEWqmGIkg1iRwAAAhQ"]
[Wed Sep 30 01:11:04.791675 2026] [security2:error] [pid 270884:tid 271100] [client 182.75.216.230:61407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOuoQAAAFE"]
[Wed Sep 30 01:11:04.791795 2026] [security2:error] [pid 270884:tid 271100] [client 182.75.216.230:61407] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2CCGeq9LtYp4zuPOuoQAAAFE"]
[Wed Sep 30 01:11:04.804387 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.804838 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.891469 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.891726 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:04.924690 2026] [security2:error] [pid 270884:tid 271050] [client 173.254.29.157:41244] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2CCGeq9LtYp4zuPOusQAAAB8"]
[Wed Sep 30 01:11:04.929150 2026] [security2:error] [pid 270884:tid 271047] [client 52.172.226.14:18666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/install.php"] [unique_id "ary2CCGeq9LtYp4zuPOusgAAABw"]
[Wed Sep 30 01:11:04.942405 2026] [security2:error] [pid 270884:tid 271078] [client 173.254.29.157:41256] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2CCGeq9LtYp4zuPOutAAAADs"]
[Wed Sep 30 01:11:04.959467 2026] [security2:error] [pid 270884:tid 271044] [client 173.254.29.157:41264] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2CCGeq9LtYp4zuPOutQAAABk"]
[Wed Sep 30 01:11:04.976831 2026] [security2:error] [pid 270884:tid 271115] [client 173.254.29.157:41272] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2CCGeq9LtYp4zuPOutgAAAGA"]
[Wed Sep 30 01:11:04.983422 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:04.983843 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.047862 2026] [security2:error] [pid 270884:tid 271102] [client 20.211.90.37:39967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary2CSGeq9LtYp4zuPOutwAAAFM"]
[Wed Sep 30 01:11:05.072244 2026] [security2:error] [pid 270884:tid 271141] [client 20.194.96.176:15879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/ass.php"] [unique_id "ary2CSGeq9LtYp4zuPOuuAAAAHo"]
[Wed Sep 30 01:11:05.075579 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.075890 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.077876 2026] [security2:error] [pid 270884:tid 271103] [client 20.198.74.230:23907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/go.php"] [unique_id "ary2CSGeq9LtYp4zuPOuuwAAAFQ"]
[Wed Sep 30 01:11:05.104892 2026] [security2:error] [pid 270884:tid 271054] [client 20.219.14.152:38093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/groud3.php"] [unique_id "ary2CSGeq9LtYp4zuPOuvQAAACM"]
[Wed Sep 30 01:11:05.133525 2026] [security2:error] [pid 270884:tid 271047] [client 4.240.25.22:18769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/sym.php"] [unique_id "ary2CSGeq9LtYp4zuPOuwAAAABw"]
[Wed Sep 30 01:11:05.142410 2026] [security2:error] [pid 276620:tid 276837] [client 181.45.117.212:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2CdPAdfEWqmGIkg1iSgAAAmI"]
[Wed Sep 30 01:11:05.142744 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:05.143018 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:05.149109 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9ldGMvcmJsZC5k
[Wed Sep 30 01:11:05.149547 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9ldGMvcmJsZC5k
[Wed Sep 30 01:11:05.166525 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.166792 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.207715 2026] [security2:error] [pid 276620:tid 276760] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2CdPAdfEWqmGIkg1iTAAAAhU"]
[Wed Sep 30 01:11:05.256296 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.256587 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.348157 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.348415 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.371770 2026] [security2:error] [pid 270884:tid 271006] [remote 47.128.52.180:60466] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "teapeak.net"] [uri "/robots.txt"] [unique_id "ary2CSGeq9LtYp4zuPOuygAAenQ"]
[Wed Sep 30 01:11:05.392283 2026] [security2:error] [pid 276620:tid 276873] [client 52.172.226.14:31064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/13k.php"] [unique_id "ary2CdPAdfEWqmGIkg1iTgAAAoY"]
[Wed Sep 30 01:11:05.438014 2026] [security2:error] [pid 276059:tid 276264] [client 20.219.2.60:30036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2CXtqdHBwD77138e3xgAAAdQ"]
[Wed Sep 30 01:11:05.447007 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.447547 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.473995 2026] [security2:error] [pid 276059:tid 276263] [client 20.219.2.60:11848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/admin-footer.php"] [unique_id "ary2CXtqdHBwD77138e3yAAAAdM"]
[Wed Sep 30 01:11:05.532194 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.532470 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.585726 2026] [security2:error] [pid 270884:tid 271110] [client 4.240.25.22:8455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/or.php"] [unique_id "ary2CSGeq9LtYp4zuPOu0QAAAFs"]
[Wed Sep 30 01:11:05.602921 2026] [security2:error] [pid 270884:tid 271044] [client 20.219.14.152:38087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/gaxby.php"] [unique_id "ary2CSGeq9LtYp4zuPOu0gAAABk"]
[Wed Sep 30 01:11:05.624998 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.625424 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.674827 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:05.675269 2026] [access_compat:error] [pid 270884:tid 271025] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:05.717554 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.718005 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.788058 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2CSGeq9LtYp4zuPOu3gAAdjU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301616&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:11:05.788094 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2CSGeq9LtYp4zuPOu3gAAdjU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301616&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:11:05.805148 2026] [security2:error] [pid 276620:tid 276765] [client 177.73.43.17:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2CdPAdfEWqmGIkg1iVAAAAho"]
[Wed Sep 30 01:11:05.806415 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.806707 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.857735 2026] [security2:error] [pid 276059:tid 276262] [client 52.172.226.14:12564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/up.php"] [unique_id "ary2CXtqdHBwD77138e3zgAAAdI"]
[Wed Sep 30 01:11:05.899572 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.900017 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:05.985994 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:05.986506 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.038622 2026] [security2:error] [pid 270884:tid 271025] [client 20.70.173.30:56394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/biufile.php"] [unique_id "ary2CiGeq9LtYp4zuPOu6wAAAAY"]
[Wed Sep 30 01:11:06.079387 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.079699 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.092969 2026] [security2:error] [pid 276620:tid 276851] [client 20.219.14.152:38086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/dh9u7.php"] [unique_id "ary2CtPAdfEWqmGIkg1iVwAAAnA"]
[Wed Sep 30 01:11:06.152447 2026] [security2:error] [pid 276620:tid 276785] [client 103.241.204.139:60301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2CtPAdfEWqmGIkg1iWgAAAi4"]
[Wed Sep 30 01:11:06.152581 2026] [security2:error] [pid 276620:tid 276785] [client 103.241.204.139:60301] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2CtPAdfEWqmGIkg1iWgAAAi4"]
[Wed Sep 30 01:11:06.169927 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.170272 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.187584 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:06.187948 2026] [access_compat:error] [pid 270884:tid 271045] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:06.266594 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.267047 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.272650 2026] [security2:error] [pid 276620:tid 276833] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2CtPAdfEWqmGIkg1iXgAAAl4"]
[Wed Sep 30 01:11:06.321823 2026] [security2:error] [pid 276620:tid 276829] [client 52.172.226.14:12547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/0x1949.php"] [unique_id "ary2CtPAdfEWqmGIkg1iYQAAAlo"]
[Wed Sep 30 01:11:06.356684 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.357153 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.358880 2026] [security2:error] [pid 270884:tid 271054] [client 65.0.239.170:38566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.239.0.65.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.vjw.vvt.mybluehost.me"] [uri "/index.php"] [unique_id "ary2CiGeq9LtYp4zuPOu9AAAACM"]
[Wed Sep 30 01:11:06.456776 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.457292 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.527132 2026] [security2:error] [pid 270884:tid 271144] [client 20.211.90.37:39941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary2CiGeq9LtYp4zuPOu9gAAAH0"]
[Wed Sep 30 01:11:06.538163 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.538460 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.577727 2026] [security2:error] [pid 270884:tid 271060] [client 20.219.14.152:52051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/koiy.php"] [unique_id "ary2CiGeq9LtYp4zuPOu-QAAACk"]
[Wed Sep 30 01:11:06.579092 2026] [security2:error] [pid 276059:tid 276210] [client 223.181.60.167:8227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2CntqdHBwD77138e32QAAAZ4"]
[Wed Sep 30 01:11:06.579799 2026] [security2:error] [pid 276059:tid 276210] [client 223.181.60.167:8227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2CntqdHBwD77138e32QAAAZ4"]
[Wed Sep 30 01:11:06.627267 2026] [security2:error] [pid 276620:tid 276884] [client 179.105.122.52:52759] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2CtPAdfEWqmGIkg1iZAAAApE"]
[Wed Sep 30 01:11:06.629095 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.629334 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.636797 2026] [security2:error] [pid 270884:tid 271021] [client 168.100.149.136:62952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d82e5e45fcbc7898d6196e02fe1d8bd1.a9.css.gz"] [unique_id "ary2CiGeq9LtYp4zuPOu_gAAAhc"]
[Wed Sep 30 01:11:06.689572 2026] [security2:error] [pid 270884:tid 271064] [client 20.219.19.141:20884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/wquosqsi.php"] [unique_id "ary2CiGeq9LtYp4zuPOvAAAAAC0"]
[Wed Sep 30 01:11:06.692297 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:06.692750 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:06.695204 2026] [security2:error] [pid 276059:tid 276277] [client 223.235.102.107:27447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2CntqdHBwD77138e32wAAAeE"]
[Wed Sep 30 01:11:06.695304 2026] [security2:error] [pid 276059:tid 276277] [client 223.235.102.107:27447] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2CntqdHBwD77138e32wAAAeE"]
[Wed Sep 30 01:11:06.703007 2026] [security2:error] [pid 270884:tid 271103] [client 20.28.180.172:34273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/Q7iw6mOdefault.php"] [unique_id "ary2CiGeq9LtYp4zuPOvAQAAAFQ"]
[Wed Sep 30 01:11:06.719187 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.719460 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.732900 2026] [security2:error] [pid 276620:tid 276860] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2CtPAdfEWqmGIkg1iZgAAAnk"]
[Wed Sep 30 01:11:06.809537 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.809818 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.811473 2026] [security2:error] [pid 270884:tid 271043] [client 52.172.226.14:18651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/cong.php"] [unique_id "ary2CiGeq9LtYp4zuPOvBwAAABg"]
[Wed Sep 30 01:11:06.852677 2026] [security2:error] [pid 276620:tid 276839] [client 20.70.173.30:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/images.php"] [unique_id "ary2CtPAdfEWqmGIkg1iawAAAmQ"]
[Wed Sep 30 01:11:06.857845 2026] [security2:error] [pid 276620:tid 276848] [client 46.28.196.244:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2CtPAdfEWqmGIkg1ibAAAAm0"]
[Wed Sep 30 01:11:06.871841 2026] [security2:error] [pid 270884:tid 271140] [client 4.240.25.22:18804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/mh.php"] [unique_id "ary2CiGeq9LtYp4zuPOvDQAAAHk"]
[Wed Sep 30 01:11:06.901182 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.901443 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.903281 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.2.60:11855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws84.php"] [unique_id "ary2CiGeq9LtYp4zuPOvDwAAAF4"]
[Wed Sep 30 01:11:06.986323 2026] [security2:error] [pid 276620:tid 276858] [client 20.194.30.107:1763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/term.php"] [unique_id "ary2CtPAdfEWqmGIkg1icAAAAnc"]
[Wed Sep 30 01:11:06.992227 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:06.992490 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:06.995458 2026] [security2:error] [pid 276620:tid 276820] [client 18.192.166.72:14650] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cityofmarional.com"] [uri "/index.php"] [unique_id "ary2CNPAdfEWqmGIkg1iRQAAAlE"], referer: https://cityofmarional.com
[Wed Sep 30 01:11:07.013241 2026] [security2:error] [pid 276059:tid 276232] [client 159.89.172.17:45416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.172.89.159.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary2C3tqdHBwD77138e34gAAAbQ"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:11:07.085956 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.086205 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.092639 2026] [security2:error] [pid 270884:tid 271051] [client 20.219.14.152:38174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wordfence-waf.php"] [unique_id "ary2CyGeq9LtYp4zuPOvGQAAACA"]
[Wed Sep 30 01:11:07.142619 2026] [security2:error] [pid 276620:tid 276832] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2C9PAdfEWqmGIkg1icgAAAl0"]
[Wed Sep 30 01:11:07.180213 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.180643 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.213028 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:07.213474 2026] [access_compat:error] [pid 270884:tid 271140] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:07.270205 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.270651 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.285683 2026] [security2:error] [pid 276059:tid 276271] [client 52.172.226.14:18454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/bs1.php"] [unique_id "ary2C3tqdHBwD77138e35wAAAds"]
[Wed Sep 30 01:11:07.308142 2026] [security2:error] [pid 270884:tid 271138] [client 37.41.16.35:62537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2CyGeq9LtYp4zuPOvJQAAAHc"]
[Wed Sep 30 01:11:07.308280 2026] [security2:error] [pid 270884:tid 271138] [client 37.41.16.35:62537] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2CyGeq9LtYp4zuPOvJQAAAHc"]
[Wed Sep 30 01:11:07.343482 2026] [security2:error] [pid 270884:tid 270958] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2CyGeq9LtYp4zuPOvKAAAfEQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13550
[Wed Sep 30 01:11:07.343529 2026] [security2:error] [pid 270884:tid 270958] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2CyGeq9LtYp4zuPOvKAAAfEQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=13550
[Wed Sep 30 01:11:07.345527 2026] [security2:error] [pid 276620:tid 276786] [client 20.219.2.60:30048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2C9PAdfEWqmGIkg1ifAAAAi8"]
[Wed Sep 30 01:11:07.378879 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.379307 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.391058 2026] [security2:error] [pid 270884:tid 271030] [client 20.28.180.172:62345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wen.php"] [unique_id "ary2CyGeq9LtYp4zuPOvKwAAAAs"]
[Wed Sep 30 01:11:07.414745 2026] [security2:error] [pid 276059:tid 276316] [client 20.204.42.136:35723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/qDAFu1Swzxyd4JIdefault.php"] [unique_id "ary2C3tqdHBwD77138e37AAAAgg"]
[Wed Sep 30 01:11:07.482655 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.483205 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.486083 2026] [security2:error] [pid 276620:tid 276760] [client 20.219.2.60:11732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/bnm.php"] [unique_id "ary2C9PAdfEWqmGIkg1ifgAAAhU"]
[Wed Sep 30 01:11:07.546856 2026] [security2:error] [pid 270884:tid 271110] [client 20.211.90.37:40405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/index/fucku.php"] [unique_id "ary2CyGeq9LtYp4zuPOvLQAAAFs"]
[Wed Sep 30 01:11:07.548392 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.548818 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.549086 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9iYWNrdXA%3D
[Wed Sep 30 01:11:07.549330 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9iYWNrdXA%3D
[Wed Sep 30 01:11:07.597983 2026] [security2:error] [pid 270884:tid 271111] [client 20.219.14.152:38194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/em.php"] [unique_id "ary2CyGeq9LtYp4zuPOvMQAAAFw"]
[Wed Sep 30 01:11:07.643435 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.643778 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.647607 2026] [security2:error] [pid 276620:tid 276867] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2C9PAdfEWqmGIkg1igwAAAoA"]
[Wed Sep 30 01:11:07.703147 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:07.703411 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:07.724627 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.724903 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.800050 2026] [security2:error] [pid 270884:tid 271054] [client 52.172.226.14:31091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary2CyGeq9LtYp4zuPOvPAAAACM"]
[Wed Sep 30 01:11:07.818773 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.819050 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.905629 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.905909 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:07.993937 2026] [security2:error] [pid 270884:tid 271068] [client 45.138.12.32:45788] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rlr.ewu.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2CyGeq9LtYp4zuPOvRwAAADE"]
[Wed Sep 30 01:11:07.998601 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:07.998907 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.059310 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.14.152:38578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/hp.php"] [unique_id "ary2DCGeq9LtYp4zuPOvSQAAADQ"]
[Wed Sep 30 01:11:08.077759 2026] [security2:error] [pid 276620:tid 276768] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2DNPAdfEWqmGIkg1iigAAAh0"]
[Wed Sep 30 01:11:08.090347 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.090708 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.112847 2026] [security2:error] [pid 270884:tid 271144] [client 4.240.25.22:8413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/baru.php"] [unique_id "ary2DCGeq9LtYp4zuPOvTgAAAH0"]
[Wed Sep 30 01:11:08.152878 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3RtcA%3D%3D
[Wed Sep 30 01:11:08.153155 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3RtcA%3D%3D
[Wed Sep 30 01:11:08.180324 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.180587 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.185951 2026] [security2:error] [pid 270884:tid 271028] [client 187.194.219.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2DCGeq9LtYp4zuPOvWQAAAAk"]
[Wed Sep 30 01:11:08.200063 2026] [security2:error] [pid 270884:tid 271126] [client 20.194.30.107:1772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/f35.update.php"] [unique_id "ary2DCGeq9LtYp4zuPOvWwAAAGs"]
[Wed Sep 30 01:11:08.218881 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:08.219314 2026] [access_compat:error] [pid 270884:tid 271120] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:08.270411 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.270693 2026] [access_compat:error] [pid 270884:tid 271087] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.284001 2026] [security2:error] [pid 270884:tid 271036] [client 52.172.226.14:12566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/termps.php"] [unique_id "ary2DCGeq9LtYp4zuPOvYQAAABE"]
[Wed Sep 30 01:11:08.373215 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.373673 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.390986 2026] [security2:error] [pid 270884:tid 271095] [client 20.219.2.60:11649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/amax.php"] [unique_id "ary2DCGeq9LtYp4zuPOvZwAAAEw"]
[Wed Sep 30 01:11:08.394902 2026] [security2:error] [pid 270884:tid 271093] [client 217.144.190.194:39886] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "rhinoglobalenterprises.com"] [uri "/"] [unique_id "ary2DCGeq9LtYp4zuPOvZgAAAEo"]
[Wed Sep 30 01:11:08.429847 2026] [security2:error] [pid 276059:tid 276304] [client 74.7.242.1:33598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2DHtqdHBwD77138e39gAAAfw"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:11:08.445911 2026] [security2:error] [pid 276620:tid 276823] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2DNPAdfEWqmGIkg1ijgAAAlQ"]
[Wed Sep 30 01:11:08.467328 2026] [security2:error] [pid 276620:tid 276791] [client 20.211.90.37:40441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/upload/wp-info.php"] [unique_id "ary2DNPAdfEWqmGIkg1ijwAAAjQ"]
[Wed Sep 30 01:11:08.484031 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.484571 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.557250 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.557532 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.578953 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.14.152:38533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wpuse.php"] [unique_id "ary2DNPAdfEWqmGIkg1ikgAAAkM"]
[Wed Sep 30 01:11:08.650658 2026] [security2:error] [pid 270884:tid 271144] [client 168.100.149.111:39304] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/0d87e190ed613b5ac856640bdabc087c.1ae9.css.gz"] [unique_id "ary2DCGeq9LtYp4zuPOvbwAAfUk"]
[Wed Sep 30 01:11:08.653530 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.653977 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.741668 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.742121 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.754291 2026] [security2:error] [pid 276620:tid 276845] [client 52.172.226.14:18648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/brand.php"] [unique_id "ary2DNPAdfEWqmGIkg1ilwAAAmo"]
[Wed Sep 30 01:11:08.820400 2026] [security2:error] [pid 276620:tid 276870] [client 20.70.173.30:56440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/simple.php"] [unique_id "ary2DNPAdfEWqmGIkg1imgAAAoM"]
[Wed Sep 30 01:11:08.835076 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.835517 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.924965 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:08.925268 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:08.926703 2026] [security2:error] [pid 276620:tid 276818] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2DNPAdfEWqmGIkg1imwAAAk8"]
[Wed Sep 30 01:11:09.012615 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.013046 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:32156] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.070900 2026] [security2:error] [pid 270884:tid 271021] [client 20.219.14.152:38532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/sm.php"] [unique_id "ary2DSGeq9LtYp4zuPOvewAAAAI"]
[Wed Sep 30 01:11:09.132727 2026] [security2:error] [pid 270884:tid 271078] [client 20.211.90.37:39954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/post.php"] [unique_id "ary2DSGeq9LtYp4zuPOvfgAAADs"]
[Wed Sep 30 01:11:09.152792 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.153112 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.193948 2026] [security2:error] [pid 276059:tid 276236] [client 49.37.102.248:58406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2DXtqdHBwD77138e3_AAAAbg"]
[Wed Sep 30 01:11:09.194072 2026] [security2:error] [pid 276059:tid 276236] [client 49.37.102.248:58406] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2DXtqdHBwD77138e3_AAAAbg"]
[Wed Sep 30 01:11:09.219106 2026] [security2:error] [pid 270884:tid 271058] [client 52.172.226.14:12560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/atomlib.php"] [unique_id "ary2DSGeq9LtYp4zuPOviQAAACc"]
[Wed Sep 30 01:11:09.222752 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.2.60:30054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ccs.php"] [unique_id "ary2DSGeq9LtYp4zuPOvigAAACY"]
[Wed Sep 30 01:11:09.246872 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.247169 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.286529 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.286784 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.367718 2026] [security2:error] [pid 270884:tid 271028] [client 4.240.25.22:33287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/az.php"] [unique_id "ary2DSGeq9LtYp4zuPOvlAAAAAk"]
[Wed Sep 30 01:11:09.371453 2026] [security2:error] [pid 276620:tid 276874] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2DdPAdfEWqmGIkg1inwAAAoc"]
[Wed Sep 30 01:11:09.385838 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.386266 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.482886 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.483328 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.558349 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.558658 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.564375 2026] [security2:error] [pid 270884:tid 271036] [client 20.219.14.152:38161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/mknobgkg.php"] [unique_id "ary2DSGeq9LtYp4zuPOvmQAAABE"]
[Wed Sep 30 01:11:09.570539 2026] [security2:error] [pid 270884:tid 271145] [client 20.28.180.172:60295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ms.php"] [unique_id "ary2DSGeq9LtYp4zuPOvmgAAAH4"]
[Wed Sep 30 01:11:09.582944 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:09.583385 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:09.628866 2026] [security2:error] [pid 270884:tid 271040] [client 20.219.2.60:11354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/66.php"] [unique_id "ary2DSGeq9LtYp4zuPOvoAAAABU"]
[Wed Sep 30 01:11:09.651329 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.651598 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.705950 2026] [security2:error] [pid 270884:tid 271095] [client 52.172.226.14:18630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/product.php"] [unique_id "ary2DSGeq9LtYp4zuPOvpQAAAEw"]
[Wed Sep 30 01:11:09.738467 2026] [security2:error] [pid 270884:tid 271060] [client 92.71.12.181:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2DSGeq9LtYp4zuPOvqQAAACk"]
[Wed Sep 30 01:11:09.739389 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.739696 2026] [access_compat:error] [pid 270884:tid 271064] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.799280 2026] [security2:error] [pid 276059:tid 276204] [client 20.214.191.94:61485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2DXtqdHBwD77138e4BgAAAZk"]
[Wed Sep 30 01:11:09.812379 2026] [security2:error] [pid 276620:tid 276793] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "ary2DdPAdfEWqmGIkg1ipQAAAjY"]
[Wed Sep 30 01:11:09.813343 2026] [security2:error] [pid 276059:tid 276134] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2DXtqdHBwD77138e4BwAB3UY"], referer: https://torquayfans.com/posting.php?mode=quote&p=246385
[Wed Sep 30 01:11:09.813379 2026] [security2:error] [pid 276059:tid 276134] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2DXtqdHBwD77138e4BwAB3UY"], referer: https://torquayfans.com/posting.php?mode=quote&p=246385
[Wed Sep 30 01:11:09.830190 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.830465 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:09.921167 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:09.921438 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.016557 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.017010 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.038090 2026] [access_compat:error] [pid 270884:tid 271064] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:10.038566 2026] [access_compat:error] [pid 270884:tid 271064] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:10.069082 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.14.152:38146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/dairg.php"] [unique_id "ary2DiGeq9LtYp4zuPOvtQAAAAA"]
[Wed Sep 30 01:11:10.088352 2026] [security2:error] [pid 270884:tid 271111] [client 20.214.191.94:58839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2DiGeq9LtYp4zuPOvtgAAAFw"]
[Wed Sep 30 01:11:10.106501 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.106749 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.166292 2026] [security2:error] [pid 270884:tid 271092] [client 103.168.67.253:41834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2DiGeq9LtYp4zuPOvvAAAAEk"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:10.170710 2026] [security2:error] [pid 276620:tid 276836] [client 52.172.226.14:31056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/function.php"] [unique_id "ary2DtPAdfEWqmGIkg1irAAAAmE"]
[Wed Sep 30 01:11:10.189019 2026] [security2:error] [pid 276620:tid 276861] [client 20.28.180.172:34280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zoo2.php"] [unique_id "ary2DtPAdfEWqmGIkg1irwAAAno"]
[Wed Sep 30 01:11:10.190763 2026] [security2:error] [pid 270884:tid 271140] [client 151.240.221.252:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2DiGeq9LtYp4zuPOvvwAAAHk"]
[Wed Sep 30 01:11:10.198602 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.199060 2026] [access_compat:error] [pid 270884:tid 271057] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.203969 2026] [security2:error] [pid 270884:tid 271078] [client 20.70.173.30:33308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/az.php"] [unique_id "ary2DiGeq9LtYp4zuPOvwwAAADs"]
[Wed Sep 30 01:11:10.252593 2026] [security2:error] [pid 270884:tid 271095] [client 20.194.96.176:25421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/felnggg.php"] [unique_id "ary2DiGeq9LtYp4zuPOvxgAAAEw"]
[Wed Sep 30 01:11:10.280045 2026] [security2:error] [pid 270884:tid 271108] [client 49.43.163.212:51075] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2DiGeq9LtYp4zuPOvyAAAAFk"]
[Wed Sep 30 01:11:10.280220 2026] [security2:error] [pid 270884:tid 271108] [client 49.43.163.212:51075] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2DiGeq9LtYp4zuPOvyAAAAFk"]
[Wed Sep 30 01:11:10.280498 2026] [security2:error] [pid 276620:tid 276855] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2DtPAdfEWqmGIkg1isgAAAnQ"]
[Wed Sep 30 01:11:10.286709 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.286978 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.318222 2026] [security2:error] [pid 270884:tid 271092] [client 4.240.25.22:43806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/media.php"] [unique_id "ary2DiGeq9LtYp4zuPOvyQAAAEk"]
[Wed Sep 30 01:11:10.364144 2026] [security2:error] [pid 270884:tid 271056] [client 20.214.191.94:61468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2DiGeq9LtYp4zuPOvygAAACU"]
[Wed Sep 30 01:11:10.386816 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.387346 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.391372 2026] [security2:error] [pid 270884:tid 271058] [client 203.122.45.246:58498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2DiGeq9LtYp4zuPOvywAAACc"]
[Wed Sep 30 01:11:10.391570 2026] [security2:error] [pid 270884:tid 271058] [client 203.122.45.246:58498] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2DiGeq9LtYp4zuPOvywAAACc"]
[Wed Sep 30 01:11:10.401818 2026] [security2:error] [pid 270884:tid 271087] [client 82.102.18.222:59350] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2DiGeq9LtYp4zuPOvzAAAAEQ"]
[Wed Sep 30 01:11:10.476181 2026] [security2:error] [pid 276620:tid 276725] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2DtPAdfEWqmGIkg1iuAACe18"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D50096
[Wed Sep 30 01:11:10.476661 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.477383 2026] [access_compat:error] [pid 270884:tid 271145] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.530053 2026] [access_compat:error] [pid 270884:tid 271068] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:10.530304 2026] [access_compat:error] [pid 270884:tid 271068] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:10.567143 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.567651 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.596373 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.14.152:38154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/dronishness.php"] [unique_id "ary2DiGeq9LtYp4zuPOv0AAAADQ"]
[Wed Sep 30 01:11:10.641329 2026] [security2:error] [pid 276620:tid 276809] [client 52.172.226.14:12558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/0x.php"] [unique_id "ary2DtPAdfEWqmGIkg1iugAAAkY"]
[Wed Sep 30 01:11:10.651738 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.652016 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.661546 2026] [security2:error] [pid 270884:tid 271021] [client 168.100.149.220:42778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/790b50a847667af0616d63bb3bde1792.1d73.css.gz"] [unique_id "ary2DiGeq9LtYp4zuPOv0wAAAg8"]
[Wed Sep 30 01:11:10.666106 2026] [security2:error] [pid 276620:tid 276768] [client 20.70.173.30:58564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2DtPAdfEWqmGIkg1ivAAAAh0"]
[Wed Sep 30 01:11:10.690178 2026] [security2:error] [pid 276620:tid 276869] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2DtPAdfEWqmGIkg1ivgAAAoI"]
[Wed Sep 30 01:11:10.698200 2026] [security2:error] [pid 270884:tid 271023] [client 20.204.42.136:35740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/e219b53abbindex.php"] [unique_id "ary2DiGeq9LtYp4zuPOv2QAAAAQ"]
[Wed Sep 30 01:11:10.700072 2026] [security2:error] [pid 276620:tid 276833] [client 20.214.191.94:61454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/aa.php"] [unique_id "ary2DtPAdfEWqmGIkg1ivwAAAl4"]
[Wed Sep 30 01:11:10.707465 2026] [security2:error] [pid 270884:tid 271077] [client 20.219.19.141:20899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/asset.php"] [unique_id "ary2DiGeq9LtYp4zuPOv2gAAADo"]
[Wed Sep 30 01:11:10.742264 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.742706 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.821886 2026] [security2:error] [pid 270884:tid 271111] [client 45.138.12.32:32956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kkj.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2DiGeq9LtYp4zuPOv3QAAAFw"]
[Wed Sep 30 01:11:10.833166 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.833432 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.923957 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:10.924215 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:63099] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:10.982673 2026] [security2:error] [pid 270884:tid 271078] [client 20.219.2.60:30075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/set.php"] [unique_id "ary2DiGeq9LtYp4zuPOv5gAAADs"]
[Wed Sep 30 01:11:10.994674 2026] [security2:error] [pid 270884:tid 271036] [client 20.214.191.94:58848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/z70.php"] [unique_id "ary2DiGeq9LtYp4zuPOv5wAAABE"]
[Wed Sep 30 01:11:10.996408 2026] [security2:error] [pid 276620:tid 276813] [client 20.211.90.37:40422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary2DtPAdfEWqmGIkg1ixQAAAko"]
[Wed Sep 30 01:11:11.006332 2026] [security2:error] [pid 270884:tid 271025] [client 20.219.2.60:11350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/public/file.php"] [unique_id "ary2DyGeq9LtYp4zuPOv6AAAAAY"]
[Wed Sep 30 01:11:11.009861 2026] [security2:error] [pid 276620:tid 276860] [client 216.73.216.46:63099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2D9PAdfEWqmGIkg1ixgAAAnk"]
[Wed Sep 30 01:11:11.068641 2026] [access_compat:error] [pid 270884:tid 271095] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:11.068913 2026] [access_compat:error] [pid 270884:tid 271095] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:11.108519 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.108780 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.116696 2026] [security2:error] [pid 270884:tid 271050] [client 20.219.14.152:47636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/Row_wsoo.php"] [unique_id "ary2DyGeq9LtYp4zuPOv7AAAAB8"]
[Wed Sep 30 01:11:11.132342 2026] [security2:error] [pid 270884:tid 271102] [client 52.172.226.14:31082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/index.php"] [unique_id "ary2DyGeq9LtYp4zuPOv7wAAAFM"]
[Wed Sep 30 01:11:11.144340 2026] [security2:error] [pid 276620:tid 276770] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2D9PAdfEWqmGIkg1iyAAAAh8"]
[Wed Sep 30 01:11:11.149100 2026] [security2:error] [pid 270884:tid 271023] [client 82.102.18.222:59352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2DyGeq9LtYp4zuPOv8AAAAAQ"]
[Wed Sep 30 01:11:11.157876 2026] [security2:error] [pid 276059:tid 276270] [client 20.194.96.176:9852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/felnggg.update.php"] [unique_id "ary2D3tqdHBwD77138e4EwAAAdo"]
[Wed Sep 30 01:11:11.199523 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.199853 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.206004 2026] [security2:error] [pid 276620:tid 276851] [client 122.173.27.10:7172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2D9PAdfEWqmGIkg1iyQAAAnA"]
[Wed Sep 30 01:11:11.206119 2026] [security2:error] [pid 276620:tid 276851] [client 122.173.27.10:7172] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2D9PAdfEWqmGIkg1iyQAAAnA"]
[Wed Sep 30 01:11:11.270603 2026] [security2:error] [pid 270884:tid 271102] [client 20.214.191.94:58846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/f35.php"] [unique_id "ary2DyGeq9LtYp4zuPOv-gAAAFM"]
[Wed Sep 30 01:11:11.290407 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.290676 2026] [access_compat:error] [pid 270884:tid 271023] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.388617 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.389111 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.459554 2026] [security2:error] [pid 270884:tid 271036] [client 82.102.18.222:59368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2DyGeq9LtYp4zuPOwAAAAABE"]
[Wed Sep 30 01:11:11.476730 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.477027 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.481214 2026] [security2:error] [pid 270884:tid 271077] [client 84.17.60.236:53882] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2DyGeq9LtYp4zuPOwAgAAADo"]
[Wed Sep 30 01:11:11.550049 2026] [security2:error] [pid 270884:tid 271113] [client 20.214.191.94:58847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/adminfuns.php"] [unique_id "ary2DyGeq9LtYp4zuPOwBwAAAF4"]
[Wed Sep 30 01:11:11.564561 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.564991 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.567105 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:11.567411 2026] [access_compat:error] [pid 270884:tid 271078] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:11.602929 2026] [security2:error] [pid 270884:tid 271144] [client 52.172.226.14:18659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary2DyGeq9LtYp4zuPOwCwAAAH0"]
[Wed Sep 30 01:11:11.626237 2026] [security2:error] [pid 270884:tid 271056] [client 20.219.14.152:38554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/x2.php"] [unique_id "ary2DyGeq9LtYp4zuPOwDQAAACU"]
[Wed Sep 30 01:11:11.647211 2026] [security2:error] [pid 270884:tid 271115] [client 202.179.95.79:52307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2DyGeq9LtYp4zuPOwDwAAAGA"]
[Wed Sep 30 01:11:11.648002 2026] [security2:error] [pid 270884:tid 271115] [client 202.179.95.79:52307] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2DyGeq9LtYp4zuPOwDwAAAGA"]
[Wed Sep 30 01:11:11.649067 2026] [security2:error] [pid 276620:tid 276847] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2D9PAdfEWqmGIkg1izgAAAmw"]
[Wed Sep 30 01:11:11.653116 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.653363 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.668518 2026] [security2:error] [pid 276620:tid 276820] [client 20.198.74.230:24160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/3.php"] [unique_id "ary2D9PAdfEWqmGIkg1izwAAAlE"]
[Wed Sep 30 01:11:11.745161 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.745531 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.787503 2026] [security2:error] [pid 270884:tid 271113] [client 82.102.18.222:59378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2DyGeq9LtYp4zuPOwGAAAAF4"]
[Wed Sep 30 01:11:11.810120 2026] [security2:error] [pid 270884:tid 271095] [client 84.17.60.236:53884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mujermag.com"] [uri "/xmlrpc.php"] [unique_id "ary2DyGeq9LtYp4zuPOwGwAAAEw"]
[Wed Sep 30 01:11:11.836474 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.836751 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.850018 2026] [security2:error] [pid 270884:tid 271115] [client 20.214.191.94:58845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/av.php"] [unique_id "ary2DyGeq9LtYp4zuPOwHgAAAGA"]
[Wed Sep 30 01:11:11.902295 2026] [security2:error] [pid 270884:tid 271143] [client 4.240.25.22:33234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/133.php"] [unique_id "ary2DyGeq9LtYp4zuPOwHwAAAHw"]
[Wed Sep 30 01:11:11.911549 2026] [qos:error] [pid 270884:tid 270893] [remote 108.174.164.71:51400] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=108.174.164.71, id=ary2DyGeq9LtYp4zuPOwIAAAcgc
[Wed Sep 30 01:11:11.928271 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:11.928550 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:11.931289 2026] [security2:error] [pid 270884:tid 271141] [client 20.28.180.172:61197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/hplfuns.php"] [unique_id "ary2DyGeq9LtYp4zuPOwIgAAAHo"]
[Wed Sep 30 01:11:11.932116 2026] [security2:error] [pid 270884:tid 271077] [client 20.194.96.176:9838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/jybkxer.php"] [unique_id "ary2DyGeq9LtYp4zuPOwIwAAADo"]
[Wed Sep 30 01:11:11.934967 2026] [qos:error] [pid 276620:tid 276727] [remote 174.170.6.46:54048] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=174.170.6.46, id=ary2D9PAdfEWqmGIkg1i0wACPGE
[Wed Sep 30 01:11:12.020889 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.021157 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.025394 2026] [access_compat:error] [pid 270884:tid 271115] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:12.025640 2026] [access_compat:error] [pid 270884:tid 271115] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:12.063605 2026] [security2:error] [pid 270884:tid 271058] [client 52.172.226.14:31046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/classwithtostring.php"] [unique_id "ary2ECGeq9LtYp4zuPOwJwAAACc"]
[Wed Sep 30 01:11:12.089631 2026] [security2:error] [pid 276620:tid 276776] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2ENPAdfEWqmGIkg1i1gAAAiU"]
[Wed Sep 30 01:11:12.113329 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.113599 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.121045 2026] [security2:error] [pid 270884:tid 271036] [client 82.102.18.222:59386] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2ECGeq9LtYp4zuPOwKQAAABE"]
[Wed Sep 30 01:11:12.142527 2026] [security2:error] [pid 276620:tid 276805] [client 20.219.2.60:11707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/166.php"] [unique_id "ary2ENPAdfEWqmGIkg1i1wAAAkI"]
[Wed Sep 30 01:11:12.171528 2026] [security2:error] [pid 270884:tid 270994] [remote 64.23.166.180:39720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.ien.rxf.mybluehost.me"] [uri "/.env"] [unique_id "ary2ECGeq9LtYp4zuPOwLgAAOmg"]
[Wed Sep 30 01:11:12.172520 2026] [security2:error] [pid 270884:tid 271042] [client 182.69.182.151:7386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2ECGeq9LtYp4zuPOwLwAAABc"]
[Wed Sep 30 01:11:12.173245 2026] [security2:error] [pid 270884:tid 271042] [client 182.69.182.151:7386] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2ECGeq9LtYp4zuPOwLwAAABc"]
[Wed Sep 30 01:11:12.184446 2026] [security2:error] [pid 270884:tid 271023] [client 20.219.14.152:47639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/v4.php"] [unique_id "ary2ECGeq9LtYp4zuPOwMQAAAAQ"]
[Wed Sep 30 01:11:12.198203 2026] [security2:error] [pid 270884:tid 270927] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ECGeq9LtYp4zuPOwMgAACSk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=11172
[Wed Sep 30 01:11:12.198230 2026] [security2:error] [pid 270884:tid 270927] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ECGeq9LtYp4zuPOwMgAACSk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=11172
[Wed Sep 30 01:11:12.199519 2026] [security2:error] [pid 276059:tid 276195] [client 20.214.191.94:61458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/dex.php"] [unique_id "ary2EHtqdHBwD77138e4FgAAAZA"]
[Wed Sep 30 01:11:12.199831 2026] [qos:error] [pid 270884:tid 270913] [remote 82.17.90.120:51948] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=82.17.90.120, id=ary2ECGeq9LtYp4zuPOwMwAAHxs
[Wed Sep 30 01:11:12.206815 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.207143 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.295893 2026] [security2:error] [pid 270884:tid 271021] [client 84.17.60.236:53892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2ECGeq9LtYp4zuPOwOAAAAAI"]
[Wed Sep 30 01:11:12.296514 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.296768 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.354987 2026] [security2:error] [pid 270884:tid 271073] [client 103.168.67.253:41836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2ECGeq9LtYp4zuPOwOQAAADY"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:12.395802 2026] [security2:error] [pid 270884:tid 271141] [client 20.70.173.30:25529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/0.php"] [unique_id "ary2ECGeq9LtYp4zuPOwPAAAAHo"]
[Wed Sep 30 01:11:12.397079 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.397516 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.443105 2026] [security2:error] [pid 276059:tid 276232] [client 82.102.18.222:59390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2EHtqdHBwD77138e4FwAAAbQ"]
[Wed Sep 30 01:11:12.472032 2026] [security2:error] [pid 276620:tid 276803] [client 20.214.191.94:61441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/chosen.php"] [unique_id "ary2ENPAdfEWqmGIkg1i2QAAAkA"]
[Wed Sep 30 01:11:12.484032 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.484466 2026] [security2:error] [pid 276620:tid 276836] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2ENPAdfEWqmGIkg1i2gAAAmE"]
[Wed Sep 30 01:11:12.484475 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.523018 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:12.523317 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:12.528501 2026] [security2:error] [pid 270884:tid 271064] [client 52.172.226.14:18655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/dropdown.php"] [unique_id "ary2ECGeq9LtYp4zuPOwQAAAAC0"]
[Wed Sep 30 01:11:12.571516 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.571852 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.574985 2026] [security2:error] [pid 276059:tid 276246] [client 20.219.19.141:20825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/cued.php"] [unique_id "ary2EHtqdHBwD77138e4GAAAAcI"]
[Wed Sep 30 01:11:12.624294 2026] [security2:error] [pid 276620:tid 276837] [client 84.17.60.236:53896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2ENPAdfEWqmGIkg1i2wAAAmI"]
[Wed Sep 30 01:11:12.629028 2026] [security2:error] [pid 270884:tid 271046] [client 168.100.149.209:35866] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7ce6fd6dc7c1ff85d86da1cfd10a82b5.91d.css.gz"] [unique_id "ary2ECGeq9LtYp4zuPOwQgAAG0A"]
[Wed Sep 30 01:11:12.664067 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.664358 2026] [access_compat:error] [pid 270884:tid 271060] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.686393 2026] [security2:error] [pid 270884:tid 271056] [client 20.219.14.152:38574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/albin.php"] [unique_id "ary2ECGeq9LtYp4zuPOwRwAAACU"]
[Wed Sep 30 01:11:12.734718 2026] [security2:error] [pid 270884:tid 271144] [client 20.214.191.94:61470] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.dse.net"] [uri "/1.php"] [unique_id "ary2ECGeq9LtYp4zuPOwSAAAAH0"]
[Wed Sep 30 01:11:12.734796 2026] [security2:error] [pid 270884:tid 271144] [client 20.214.191.94:61470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/1.php"] [unique_id "ary2ECGeq9LtYp4zuPOwSAAAAH0"]
[Wed Sep 30 01:11:12.755248 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.755705 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.795917 2026] [security2:error] [pid 270884:tid 271064] [client 82.102.18.222:59392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2ECGeq9LtYp4zuPOwTgAAAC0"]
[Wed Sep 30 01:11:12.844755 2026] [security2:error] [pid 270884:tid 271028] [client 201.32.215.149:8728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2ECGeq9LtYp4zuPOwUAAAAAk"]
[Wed Sep 30 01:11:12.844898 2026] [security2:error] [pid 270884:tid 271028] [client 201.32.215.149:8728] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2ECGeq9LtYp4zuPOwUAAAAAk"]
[Wed Sep 30 01:11:12.846615 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.846903 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.876077 2026] [qos:error] [pid 276620:tid 276643] [remote 71.198.175.87:35172] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.198.175.87, id=ary2ENPAdfEWqmGIkg1i3AACKA0
[Wed Sep 30 01:11:12.879622 2026] [security2:error] [pid 270884:tid 270984] [remote 74.7.227.56:52100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2ECGeq9LtYp4zuPOwUQAATF4"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:11:12.938003 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:12.938487 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:12.947760 2026] [security2:error] [pid 276620:tid 276855] [client 84.17.60.236:53910] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2ENPAdfEWqmGIkg1i3wAAAnQ"]
[Wed Sep 30 01:11:12.984445 2026] [security2:error] [pid 270884:tid 271143] [client 20.28.180.172:29468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/1b.php"] [unique_id "ary2ECGeq9LtYp4zuPOwXAAAAHw"]
[Wed Sep 30 01:11:12.991995 2026] [security2:error] [pid 270884:tid 271120] [client 52.172.226.14:18459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/moon.php"] [unique_id "ary2ECGeq9LtYp4zuPOwXQAAAGU"]
[Wed Sep 30 01:11:13.012988 2026] [security2:error] [pid 270884:tid 271102] [client 20.214.191.94:61473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/radio.php"] [unique_id "ary2ESGeq9LtYp4zuPOwXgAAAFM"]
[Wed Sep 30 01:11:13.017365 2026] [security2:error] [pid 276620:tid 276867] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2EdPAdfEWqmGIkg1i4QAAAoA"]
[Wed Sep 30 01:11:13.035740 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.036005 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.066061 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:13.066330 2026] [access_compat:error] [pid 270884:tid 271111] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:13.115242 2026] [security2:error] [pid 276059:tid 276220] [client 82.102.18.222:59396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2EXtqdHBwD77138e4GwAAAag"]
[Wed Sep 30 01:11:13.120273 2026] [security2:error] [pid 276059:tid 276215] [client 216.73.216.46:32156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2EXtqdHBwD77138e4HAAAAaM"]
[Wed Sep 30 01:11:13.149020 2026] [qos:error] [pid 276059:tid 276145] [remote 92.19.78.197:56564] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=92.19.78.197, id=ary2EXtqdHBwD77138e4HQACCFE
[Wed Sep 30 01:11:13.169666 2026] [security2:error] [pid 276059:tid 276214] [client 20.194.30.107:10047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/ms-edit.php"] [unique_id "ary2EXtqdHBwD77138e4HgAAAaI"]
[Wed Sep 30 01:11:13.186295 2026] [security2:error] [pid 276620:tid 276868] [client 20.219.14.152:38582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/atkno.php"] [unique_id "ary2EdPAdfEWqmGIkg1i5gAAAoE"]
[Wed Sep 30 01:11:13.188203 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.30.107:17404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-content/admin.php"] [unique_id "ary2EXtqdHBwD77138e4IAAAAZ0"]
[Wed Sep 30 01:11:13.219870 2026] [security2:error] [pid 276620:tid 276863] [client 43.227.131.37:45681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2EdPAdfEWqmGIkg1i5wAAAnw"]
[Wed Sep 30 01:11:13.219985 2026] [security2:error] [pid 276620:tid 276863] [client 43.227.131.37:45681] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2EdPAdfEWqmGIkg1i5wAAAnw"]
[Wed Sep 30 01:11:13.223206 2026] [security2:error] [pid 270884:tid 271058] [client 20.204.42.136:35724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/jj.php"] [unique_id "ary2ESGeq9LtYp4zuPOwZwAAACc"]
[Wed Sep 30 01:11:13.270396 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.270654 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.276362 2026] [security2:error] [pid 276620:tid 276761] [client 84.17.60.236:53920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2EdPAdfEWqmGIkg1i6AAAAhY"]
[Wed Sep 30 01:11:13.284770 2026] [http2:warn] [pid 270884:tid 271136] [client 40.77.167.224:51782] h2_stream(270884-589-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:11:13.305006 2026] [security2:error] [pid 276620:tid 276876] [client 20.214.191.94:58836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/blacks.php"] [unique_id "ary2EdPAdfEWqmGIkg1i6QAAAok"]
[Wed Sep 30 01:11:13.331004 2026] [http2:warn] [pid 263262:tid 263402] [client 40.77.167.224:51805] h2_stream(263262-1368-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:11:13.366174 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.366640 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.371978 2026] [security2:error] [pid 276620:tid 276809] [client 45.138.12.32:33052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kqn.png.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2EdPAdfEWqmGIkg1i7AAAAkY"]
[Wed Sep 30 01:11:13.386899 2026] [qos:error] [pid 276620:tid 276644] [remote 51.175.113.167:56794] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=51.175.113.167, id=ary2EdPAdfEWqmGIkg1i7QACHQ4
[Wed Sep 30 01:11:13.414227 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.414658 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.447223 2026] [security2:error] [pid 276620:tid 276833] [client 45.138.12.32:33014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kox.sul.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2EdPAdfEWqmGIkg1i7gAAAl4"]
[Wed Sep 30 01:11:13.449764 2026] [security2:error] [pid 270884:tid 271141] [client 45.138.12.32:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kqr.myw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2ESGeq9LtYp4zuPOwbAAAAHo"]
[Wed Sep 30 01:11:13.455464 2026] [security2:error] [pid 276620:tid 276773] [client 52.172.226.14:31093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/autoload_classmap.php"] [unique_id "ary2EdPAdfEWqmGIkg1i7wAAAiI"]
[Wed Sep 30 01:11:13.457077 2026] [security2:error] [pid 276620:tid 276785] [client 82.102.18.222:12518] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2EdPAdfEWqmGIkg1i8AAAAi4"]
[Wed Sep 30 01:11:13.459951 2026] [http2:warn] [pid 263262:tid 263448] [client 40.77.167.224:51793] h2_stream(263262-741-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:11:13.472339 2026] [security2:error] [pid 270884:tid 271115] [client 103.211.18.63:58462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2ESGeq9LtYp4zuPOwbQAAAGA"]
[Wed Sep 30 01:11:13.472520 2026] [security2:error] [pid 270884:tid 271115] [client 103.211.18.63:58462] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2ESGeq9LtYp4zuPOwbQAAAGA"]
[Wed Sep 30 01:11:13.493636 2026] [security2:error] [pid 270884:tid 271056] [client 43.104.4.204:51543] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary2ESGeq9LtYp4zuPOwbwAAACU"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:13.500548 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.500790 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.512787 2026] [security2:error] [pid 276620:tid 276813] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2EdPAdfEWqmGIkg1i8wAAAko"]
[Wed Sep 30 01:11:13.523899 2026] [access_compat:error] [pid 270884:tid 271143] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:13.524170 2026] [access_compat:error] [pid 270884:tid 271143] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:13.569592 2026] [security2:error] [pid 270884:tid 271099] [client 186.130.226.142:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2ESGeq9LtYp4zuPOweAAAAFA"]
[Wed Sep 30 01:11:13.577418 2026] [security2:error] [pid 270884:tid 271077] [client 20.214.191.94:61477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/alfa.php"] [unique_id "ary2ESGeq9LtYp4zuPOweQAAADo"]
[Wed Sep 30 01:11:13.590466 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.590995 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.605664 2026] [security2:error] [pid 270884:tid 271065] [client 84.17.60.236:53930] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2ESGeq9LtYp4zuPOwewAAAC4"]
[Wed Sep 30 01:11:13.682487 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.682758 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.683608 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.14.152:38158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/gptsh.php"] [unique_id "ary2ESGeq9LtYp4zuPOwgwAAADk"]
[Wed Sep 30 01:11:13.713659 2026] [security2:error] [pid 276620:tid 276828] [client 4.240.25.22:8456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/a.php"] [unique_id "ary2EdPAdfEWqmGIkg1i9QAAAlk"]
[Wed Sep 30 01:11:13.760440 2026] [security2:error] [pid 270884:tid 271143] [client 82.102.18.222:59414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2ESGeq9LtYp4zuPOwhAAAAHw"]
[Wed Sep 30 01:11:13.772359 2026] [security2:error] [pid 270884:tid 271021] [client 116.193.128.26:59947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ESGeq9LtYp4zuPOwhgAAAAI"]
[Wed Sep 30 01:11:13.772455 2026] [security2:error] [pid 270884:tid 271021] [client 116.193.128.26:59947] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ESGeq9LtYp4zuPOwhgAAAAI"]
[Wed Sep 30 01:11:13.773227 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.773497 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.855643 2026] [security2:error] [pid 276620:tid 276762] [client 20.214.191.94:61466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp_blog_footer.php"] [unique_id "ary2EdPAdfEWqmGIkg1i_AAAAhc"]
[Wed Sep 30 01:11:13.863798 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.864097 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:47724] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.875284 2026] [security2:error] [pid 276620:tid 276874] [client 20.28.180.172:18331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tfm.php"] [unique_id "ary2EdPAdfEWqmGIkg1i_gAAAoc"]
[Wed Sep 30 01:11:13.918307 2026] [security2:error] [pid 276059:tid 276291] [client 52.172.226.14:31076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/default.php"] [unique_id "ary2EXtqdHBwD77138e4JAAAAe8"]
[Wed Sep 30 01:11:13.933150 2026] [security2:error] [pid 276059:tid 276255] [client 84.17.60.236:53938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2EXtqdHBwD77138e4JQAAAcs"]
[Wed Sep 30 01:11:13.955380 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:13.955797 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:13.956213 2026] [security2:error] [pid 270884:tid 271056] [client 20.219.2.60:11329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/ws77.php"] [unique_id "ary2ESGeq9LtYp4zuPOwjAAAACU"]
[Wed Sep 30 01:11:13.982357 2026] [security2:error] [pid 276620:tid 276786] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2EdPAdfEWqmGIkg1jAQAAAi8"]
[Wed Sep 30 01:11:14.016385 2026] [qos:error] [pid 270884:tid 271006] [remote 176.248.17.165:48064] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=176.248.17.165, id=ary2EiGeq9LtYp4zuPOwjgAAF3Q
[Wed Sep 30 01:11:14.030280 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:14.030567 2026] [access_compat:error] [pid 270884:tid 271060] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:14.048691 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.049125 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.102964 2026] [security2:error] [pid 276059:tid 276304] [client 82.102.18.222:59424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2EntqdHBwD77138e4KAAAAfw"]
[Wed Sep 30 01:11:14.133349 2026] [security2:error] [pid 276620:tid 276856] [client 20.214.191.94:61453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/b8.php"] [unique_id "ary2EtPAdfEWqmGIkg1jCgAAAnU"]
[Wed Sep 30 01:11:14.138020 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.138285 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.219255 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.14.152:38835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/rithin.php"] [unique_id "ary2EiGeq9LtYp4zuPOwlQAAAH0"]
[Wed Sep 30 01:11:14.231157 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.231448 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.266933 2026] [security2:error] [pid 276620:tid 276880] [client 84.17.60.236:53940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2EtPAdfEWqmGIkg1jDAAAAo0"]
[Wed Sep 30 01:11:14.272610 2026] [security2:error] [pid 270884:tid 271023] [client 20.70.173.30:37129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/yawa.php"] [unique_id "ary2EiGeq9LtYp4zuPOwlwAAAAQ"]
[Wed Sep 30 01:11:14.300224 2026] [security2:error] [pid 270884:tid 271055] [client 216.73.216.46:47724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2EiGeq9LtYp4zuPOwmAAAACQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvY3B1
[Wed Sep 30 01:11:14.304555 2026] [security2:error] [pid 270884:tid 271089] [client 4.240.25.22:33297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/wp-filemannger.php"] [unique_id "ary2EiGeq9LtYp4zuPOwmQAAAEY"]
[Wed Sep 30 01:11:14.320521 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.320794 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.405728 2026] [security2:error] [pid 276620:tid 276759] [client 52.172.226.14:18453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary2EtPAdfEWqmGIkg1jDQAAAhQ"]
[Wed Sep 30 01:11:14.407752 2026] [security2:error] [pid 270884:tid 270967] [remote 5.135.149.244:44370] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\$Windows; U; Windows NT 5\\\\.1; en-US; rv:1\\\\.8\\\\.1\\\\.\\\\d+\\\$ Gecko\\\\/20\\\\d+ Firefox\\\\/" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "354"] [id "900278"] [msg "Old FireFOX UA Used in exploits"] [hostname "www.mrbradgoreski.com"] [uri "/product/category/9218272091850"] [unique_id "ary2EiGeq9LtYp4zuPOwnAAALk0"]
[Wed Sep 30 01:11:14.421290 2026] [security2:error] [pid 276620:tid 276862] [client 82.102.18.222:59428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2EtPAdfEWqmGIkg1jEAAAAns"]
[Wed Sep 30 01:11:14.424736 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.425290 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.453824 2026] [security2:error] [pid 276620:tid 276834] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2EtPAdfEWqmGIkg1jEgAAAl8"]
[Wed Sep 30 01:11:14.461305 2026] [security2:error] [pid 276059:tid 276314] [client 20.214.191.94:58824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/xex.php"] [unique_id "ary2EntqdHBwD77138e4KwAAAgY"]
[Wed Sep 30 01:11:14.505406 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.505705 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.529480 2026] [access_compat:error] [pid 270884:tid 271064] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:14.529758 2026] [access_compat:error] [pid 270884:tid 271064] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:14.565586 2026] [security2:error] [pid 276620:tid 276776] [client 106.214.2.47:29813] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2EtPAdfEWqmGIkg1jFQAAAiU"]
[Wed Sep 30 01:11:14.565709 2026] [security2:error] [pid 276620:tid 276776] [client 106.214.2.47:29813] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2EtPAdfEWqmGIkg1jFQAAAiU"]
[Wed Sep 30 01:11:14.589769 2026] [security2:error] [pid 270884:tid 271028] [client 84.17.60.236:53944] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2EiGeq9LtYp4zuPOwowAAAAk"]
[Wed Sep 30 01:11:14.592727 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.593010 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.615283 2026] [security2:error] [pid 276059:tid 276301] [client 155.190.6.18:40936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2EntqdHBwD77138e4LAAAAfk"]
[Wed Sep 30 01:11:14.615391 2026] [security2:error] [pid 276059:tid 276301] [client 155.190.6.18:40936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2EntqdHBwD77138e4LAAAAfk"]
[Wed Sep 30 01:11:14.654850 2026] [security2:error] [pid 270884:tid 271055] [client 168.100.149.231:62796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/dc2b71a185b781176717997addf6a97c.3cd9.css.gz"] [unique_id "ary2EiGeq9LtYp4zuPOwpwAAJEI"]
[Wed Sep 30 01:11:14.673022 2026] [security2:error] [pid 276620:tid 276879] [client 92.71.23.179:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2EtPAdfEWqmGIkg1jGQAAAow"]
[Wed Sep 30 01:11:14.683444 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.683877 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.713896 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.19.141:20901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/sd.php"] [unique_id "ary2EiGeq9LtYp4zuPOwqwAAAH8"]
[Wed Sep 30 01:11:14.753146 2026] [security2:error] [pid 270884:tid 271077] [client 20.219.14.152:38540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/il.php"] [unique_id "ary2EiGeq9LtYp4zuPOwsgAAADo"]
[Wed Sep 30 01:11:14.753177 2026] [security2:error] [pid 270884:tid 271064] [client 20.214.191.94:61446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ass.php"] [unique_id "ary2EiGeq9LtYp4zuPOwswAAAC0"]
[Wed Sep 30 01:11:14.756840 2026] [security2:error] [pid 270884:tid 271036] [client 82.102.18.222:59438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2EiGeq9LtYp4zuPOwtAAAABE"]
[Wed Sep 30 01:11:14.777851 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.778306 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.823253 2026] [security2:error] [pid 276620:tid 276813] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2EtPAdfEWqmGIkg1jIQAAAko"]
[Wed Sep 30 01:11:14.867183 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.867489 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:14.884085 2026] [security2:error] [pid 270884:tid 271146] [client 52.172.226.14:46736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary2EiGeq9LtYp4zuPOwugAAAH8"]
[Wed Sep 30 01:11:14.913940 2026] [security2:error] [pid 270884:tid 271019] [client 20.194.96.176:21586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/edit-tags.php"] [unique_id "ary2EiGeq9LtYp4zuPOwuwAAAAA"]
[Wed Sep 30 01:11:14.924385 2026] [security2:error] [pid 270884:tid 271120] [client 84.17.60.236:53960] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2EiGeq9LtYp4zuPOwvAAAAGU"]
[Wed Sep 30 01:11:14.957512 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:14.957784 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.035862 2026] [security2:error] [pid 270884:tid 270936] [remote 5.135.149.244:44384] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\$Windows; U; Windows NT 5\\\\.1; en-US; rv:1\\\\.8\\\\.1\\\\.\\\\d+\\\$ Gecko\\\\/20\\\\d+ Firefox\\\\/" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "354"] [id "900278"] [msg "Old FireFOX UA Used in exploits"] [hostname "www.mrbradgoreski.com"] [uri "/product/category/9218272091850"] [unique_id "ary2EyGeq9LtYp4zuPOwxwAAeDI"]
[Wed Sep 30 01:11:15.047272 2026] [access_compat:error] [pid 270884:tid 271070] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:15.047592 2026] [access_compat:error] [pid 270884:tid 271070] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:15.054531 2026] [security2:error] [pid 276059:tid 276280] [client 20.214.191.94:61486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wsd.php"] [unique_id "ary2E3tqdHBwD77138e4MQAAAeQ"]
[Wed Sep 30 01:11:15.054791 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.055223 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:5529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.061841 2026] [security2:error] [pid 270884:tid 271055] [client 20.219.2.60:11687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/www.php"] [unique_id "ary2EyGeq9LtYp4zuPOwyQAAACQ"]
[Wed Sep 30 01:11:15.064450 2026] [security2:error] [pid 270884:tid 271095] [client 82.102.18.222:59448] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.kbi.fah.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2EyGeq9LtYp4zuPOwygAAAEw"]
[Wed Sep 30 01:11:15.089778 2026] [security2:error] [pid 270884:tid 271065] [client 20.219.2.60:30039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/mode.php"] [unique_id "ary2EyGeq9LtYp4zuPOwzAAAAC4"]
[Wed Sep 30 01:11:15.093922 2026] [security2:error] [pid 270884:tid 271019] [client 20.211.90.37:40429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/adminfuns.php"] [unique_id "ary2EyGeq9LtYp4zuPOwzQAAAAA"]
[Wed Sep 30 01:11:15.119556 2026] [security2:error] [pid 276059:tid 276197] [client 116.197.133.25:59283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2E3tqdHBwD77138e4MgAAAZI"]
[Wed Sep 30 01:11:15.119674 2026] [security2:error] [pid 276059:tid 276197] [client 116.197.133.25:59283] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2E3tqdHBwD77138e4MgAAAZI"]
[Wed Sep 30 01:11:15.135034 2026] [security2:error] [pid 270884:tid 271123] [client 20.28.180.172:29483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/curldect.php"] [unique_id "ary2EyGeq9LtYp4zuPOw0QAAAGg"]
[Wed Sep 30 01:11:15.142822 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.143259 2026] [access_compat:error] [pid 270884:tid 271036] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.154255 2026] [security2:error] [pid 270884:tid 271113] [client 152.56.240.85:62806] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2EyGeq9LtYp4zuPOw1AAAAF4"]
[Wed Sep 30 01:11:15.154355 2026] [security2:error] [pid 270884:tid 271113] [client 152.56.240.85:62806] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2EyGeq9LtYp4zuPOw1AAAAF4"]
[Wed Sep 30 01:11:15.230778 2026] [security2:error] [pid 276059:tid 276238] [client 168.107.70.193:54935] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "odw.nqt.mybluehost.me"] [uri "/"] [unique_id "ary2E3tqdHBwD77138e4MwAAAbo"]
[Wed Sep 30 01:11:15.230875 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.231156 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.248156 2026] [security2:error] [pid 276620:tid 276762] [client 84.17.60.236:53966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2E9PAdfEWqmGIkg1jLQAAAhc"]
[Wed Sep 30 01:11:15.256167 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.14.152:47665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/1klopedf.php"] [unique_id "ary2EyGeq9LtYp4zuPOw4AAAAH8"]
[Wed Sep 30 01:11:15.270163 2026] [security2:error] [pid 276620:tid 276852] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2E9PAdfEWqmGIkg1jLgAAAnE"]
[Wed Sep 30 01:11:15.295782 2026] [security2:error] [pid 276620:tid 276798] [client 103.168.67.253:41838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2E9PAdfEWqmGIkg1jLwAAAjs"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:15.322318 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.322577 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.326100 2026] [security2:error] [pid 276620:tid 276782] [client 20.214.191.94:61501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/BDKR28WP.php"] [unique_id "ary2E9PAdfEWqmGIkg1jMQAAAis"]
[Wed Sep 30 01:11:15.340449 2026] [security2:error] [pid 270884:tid 271071] [client 20.198.74.230:23911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/mentos.php"] [unique_id "ary2EyGeq9LtYp4zuPOw6AAAADQ"]
[Wed Sep 30 01:11:15.366774 2026] [security2:error] [pid 270884:tid 271023] [client 52.172.226.14:31084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary2EyGeq9LtYp4zuPOw6QAAAAQ"]
[Wed Sep 30 01:11:15.423862 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.424310 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.481049 2026] [security2:error] [pid 276620:tid 276781] [client 216.73.216.46:5529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2E9PAdfEWqmGIkg1jNQAAAio"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWIvZGVidWcvdXNy
[Wed Sep 30 01:11:15.513522 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.513995 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.525853 2026] [security2:error] [pid 276620:tid 276825] [client 161.123.124.246:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2E9PAdfEWqmGIkg1jNgAAAlY"]
[Wed Sep 30 01:11:15.547215 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:15.547647 2026] [access_compat:error] [pid 270884:tid 271071] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:15.577148 2026] [security2:error] [pid 276620:tid 276861] [client 84.17.60.236:53972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2E9PAdfEWqmGIkg1jOgAAAno"]
[Wed Sep 30 01:11:15.607618 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.608081 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.622746 2026] [security2:error] [pid 270884:tid 271113] [client 4.240.25.22:8485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/m.php"] [unique_id "ary2EyGeq9LtYp4zuPOw9wAAAF4"]
[Wed Sep 30 01:11:15.656275 2026] [security2:error] [pid 270884:tid 271133] [client 20.194.30.107:17397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/biufile.php"] [unique_id "ary2EyGeq9LtYp4zuPOw-QAAAHI"]
[Wed Sep 30 01:11:15.669249 2026] [security2:error] [pid 270884:tid 271077] [client 20.214.191.94:61449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wmore1.php"] [unique_id "ary2EyGeq9LtYp4zuPOw_AAAADo"]
[Wed Sep 30 01:11:15.674240 2026] [security2:error] [pid 276620:tid 276786] [client 104.207.58.116:48675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2E9PAdfEWqmGIkg1jOAAAAi8"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:15.695498 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.695948 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.759566 2026] [security2:error] [pid 276620:tid 276873] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2E9PAdfEWqmGIkg1jOwAAAoY"]
[Wed Sep 30 01:11:15.775267 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.14.152:38833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/zv.php"] [unique_id "ary2EyGeq9LtYp4zuPOxAQAAADQ"]
[Wed Sep 30 01:11:15.785733 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.786016 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.798734 2026] [security2:error] [pid 270884:tid 271050] [client 20.194.30.107:9994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/media.php"] [unique_id "ary2EyGeq9LtYp4zuPOxBAAAAB8"]
[Wed Sep 30 01:11:15.818168 2026] [security2:error] [pid 270884:tid 271070] [client 52.172.226.14:18864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/mail.php"] [unique_id "ary2EyGeq9LtYp4zuPOxBwAAADM"]
[Wed Sep 30 01:11:15.850241 2026] [security2:error] [pid 276620:tid 276849] [client 20.70.173.30:56416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/sym.php"] [unique_id "ary2E9PAdfEWqmGIkg1jPAAAAm4"]
[Wed Sep 30 01:11:15.862519 2026] [security2:error] [pid 270884:tid 271146] [client 82.102.18.126:34354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2EyGeq9LtYp4zuPOxCQAAAH8"]
[Wed Sep 30 01:11:15.877793 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.878103 2026] [access_compat:error] [pid 270884:tid 271077] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:15.898608 2026] [qos:error] [pid 270884:tid 271134] [client 187.190.136.101:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2EyGeq9LtYp4zuPOxDgAAAHM
[Wed Sep 30 01:11:15.899255 2026] [security2:error] [pid 270884:tid 271076] [client 84.17.60.236:53978] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2EyGeq9LtYp4zuPOxDwAAADk"]
[Wed Sep 30 01:11:15.957534 2026] [security2:error] [pid 270884:tid 271068] [client 20.214.191.94:61500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/z60.php"] [unique_id "ary2EyGeq9LtYp4zuPOxEQAAADE"]
[Wed Sep 30 01:11:15.973652 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:15.973929 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.041428 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:16.041706 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:16.060992 2026] [security2:error] [pid 270884:tid 271112] [client 20.70.173.30:38790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/wp-login.php"] [unique_id "ary2FCGeq9LtYp4zuPOxEwAAAF0"]
[Wed Sep 30 01:11:16.067789 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.068062 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.154987 2026] [security2:error] [pid 270884:tid 271139] [client 20.70.173.30:61773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/pJPoKA.php"] [unique_id "ary2FCGeq9LtYp4zuPOxHQAAAHg"]
[Wed Sep 30 01:11:16.159899 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.160335 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.165968 2026] [security2:error] [pid 276620:tid 276850] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FNPAdfEWqmGIkg1jPgAAAm8"]
[Wed Sep 30 01:11:16.209774 2026] [security2:error] [pid 276620:tid 276834] [client 82.102.18.126:34366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary2FNPAdfEWqmGIkg1jQgAAAl8"]
[Wed Sep 30 01:11:16.219633 2026] [security2:error] [pid 270884:tid 271146] [client 20.214.191.94:58818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/pJPoKA.php"] [unique_id "ary2FCGeq9LtYp4zuPOxIQAAAH8"]
[Wed Sep 30 01:11:16.232872 2026] [security2:error] [pid 270884:tid 271028] [client 84.17.60.236:53988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2FCGeq9LtYp4zuPOxIgAAAAk"]
[Wed Sep 30 01:11:16.240828 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.14.152:38811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/zv.update.php"] [unique_id "ary2FCGeq9LtYp4zuPOxJAAAAF4"]
[Wed Sep 30 01:11:16.246890 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.247145 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:25359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.271386 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:18637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/sx.php"] [unique_id "ary2FCGeq9LtYp4zuPOxJgAAAA0"]
[Wed Sep 30 01:11:16.332320 2026] [security2:error] [pid 270884:tid 271060] [client 216.73.216.46:25359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2FCGeq9LtYp4zuPOxKgAAACk"]
[Wed Sep 30 01:11:16.333036 2026] [security2:error] [pid 270884:tid 271123] [client 104.207.56.46:54241] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2FCGeq9LtYp4zuPOxIAAAAGg"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:16.437400 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.437876 2026] [access_compat:error] [pid 270884:tid 271021] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.521615 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.521925 2026] [access_compat:error] [pid 270884:tid 271058] [client 216.73.216.46:17191] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.525468 2026] [security2:error] [pid 270884:tid 271134] [client 27.46.69.10:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/robots.txt"] [unique_id "ary2FCGeq9LtYp4zuPOxMQAAAHM"], referer: https://glorymfb.com/robots.txt
[Wed Sep 30 01:11:16.555391 2026] [security2:error] [pid 270884:tid 271019] [client 84.17.60.236:54002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2FCGeq9LtYp4zuPOxNAAAAAA"]
[Wed Sep 30 01:11:16.556983 2026] [security2:error] [pid 270884:tid 271107] [client 20.214.191.94:58825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/24.php"] [unique_id "ary2FCGeq9LtYp4zuPOxNQAAAFg"]
[Wed Sep 30 01:11:16.559572 2026] [access_compat:error] [pid 270884:tid 271065] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:16.559841 2026] [access_compat:error] [pid 270884:tid 271065] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:16.605078 2026] [security2:error] [pid 270884:tid 271095] [client 216.73.216.46:17191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2FCGeq9LtYp4zuPOxNwAAAEw"]
[Wed Sep 30 01:11:16.607943 2026] [security2:error] [pid 276620:tid 276866] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FNPAdfEWqmGIkg1jTgAAAn8"]
[Wed Sep 30 01:11:16.613639 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.2.60:11868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/adoms.php"] [unique_id "ary2FCGeq9LtYp4zuPOxOAAAAA4"]
[Wed Sep 30 01:11:16.641140 2026] [security2:error] [pid 270884:tid 271031] [client 168.100.149.112:54948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/261181e2eb1c587348a04c03b2cf6b69.d20.css.gz"] [unique_id "ary2FCGeq9LtYp4zuPOxOwAADFk"]
[Wed Sep 30 01:11:16.687619 2026] [security2:error] [pid 270884:tid 271143] [client 82.102.18.126:34374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2FCGeq9LtYp4zuPOxQAAAAHw"]
[Wed Sep 30 01:11:16.701425 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.701678 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.730315 2026] [security2:error] [pid 270884:tid 271099] [client 103.241.204.139:60839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2FCGeq9LtYp4zuPOxQwAAAFA"]
[Wed Sep 30 01:11:16.730419 2026] [security2:error] [pid 270884:tid 271099] [client 103.241.204.139:60839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2FCGeq9LtYp4zuPOxQwAAAFA"]
[Wed Sep 30 01:11:16.746966 2026] [access_compat:error] [pid 270884:tid 270963] [remote 17.166.21.189:52364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.747238 2026] [access_compat:error] [pid 270884:tid 270963] [remote 17.166.21.189:52364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.755697 2026] [security2:error] [pid 276059:tid 276232] [client 52.172.226.14:46781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary2FHtqdHBwD77138e4QwAAAbQ"]
[Wed Sep 30 01:11:16.763772 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.19.141:20895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/ans.php"] [unique_id "ary2FCGeq9LtYp4zuPOxRgAAAAA"]
[Wed Sep 30 01:11:16.765697 2026] [security2:error] [pid 270884:tid 271071] [client 20.219.14.152:47619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wquosqsi.php"] [unique_id "ary2FCGeq9LtYp4zuPOxRwAAADQ"]
[Wed Sep 30 01:11:16.788025 2026] [security2:error] [pid 270884:tid 271056] [client 185.10.4.184:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2FCGeq9LtYp4zuPOxSgAAACU"]
[Wed Sep 30 01:11:16.793748 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.794036 2026] [access_compat:error] [pid 270884:tid 271115] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.805261 2026] [security2:error] [pid 270884:tid 271111] [client 20.70.173.30:5772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2FCGeq9LtYp4zuPOxTQAAAFw"]
[Wed Sep 30 01:11:16.823287 2026] [security2:error] [pid 270884:tid 271133] [client 20.214.191.94:58844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/xxw.php"] [unique_id "ary2FCGeq9LtYp4zuPOxTgAAAHI"]
[Wed Sep 30 01:11:16.886129 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:16.886399 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:16.887989 2026] [security2:error] [pid 270884:tid 271123] [client 84.17.60.236:54008] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mujermag.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2FCGeq9LtYp4zuPOxUAAAAGg"]
[Wed Sep 30 01:11:16.899278 2026] [security2:error] [pid 270884:tid 271077] [client 20.28.180.172:62380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/8573.php"] [unique_id "ary2FCGeq9LtYp4zuPOxUQAAADo"]
[Wed Sep 30 01:11:16.946500 2026] [security2:error] [pid 270884:tid 271036] [client 13.70.4.78:19755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2FCGeq9LtYp4zuPOxVAAAABE"]
[Wed Sep 30 01:11:16.997566 2026] [security2:error] [pid 270884:tid 271095] [client 82.102.18.126:34378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2FCGeq9LtYp4zuPOxVgAAAEw"]
[Wed Sep 30 01:11:17.027214 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.027489 2026] [access_compat:error] [pid 270884:tid 271056] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.051398 2026] [access_compat:error] [pid 270884:tid 271115] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:17.051668 2026] [access_compat:error] [pid 270884:tid 271115] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:17.064891 2026] [security2:error] [pid 276620:tid 276831] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FdPAdfEWqmGIkg1jUQAAAlw"]
[Wed Sep 30 01:11:17.068013 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.068268 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.096452 2026] [security2:error] [pid 270884:tid 271077] [client 20.214.191.94:61481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/bnmtp.php"] [unique_id "ary2FSGeq9LtYp4zuPOxYQAAADo"]
[Wed Sep 30 01:11:17.132190 2026] [security2:error] [pid 276620:tid 276813] [client 20.28.180.172:29587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zwso.php"] [unique_id "ary2FdPAdfEWqmGIkg1jUgAAAko"]
[Wed Sep 30 01:11:17.163145 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.163436 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.222881 2026] [security2:error] [pid 276059:tid 276214] [client 52.172.226.14:46773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/article.php"] [unique_id "ary2FXtqdHBwD77138e4TAAAAaI"]
[Wed Sep 30 01:11:17.253003 2026] [security2:error] [pid 270884:tid 271115] [client 45.138.12.32:46056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kqn.png.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2FSGeq9LtYp4zuPOxaQAAAGA"]
[Wed Sep 30 01:11:17.254654 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.254944 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.260489 2026] [security2:error] [pid 270884:tid 271133] [client 20.219.14.152:38791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/asset.php"] [unique_id "ary2FSGeq9LtYp4zuPOxagAAAHI"]
[Wed Sep 30 01:11:17.310343 2026] [security2:error] [pid 270884:tid 271060] [client 82.102.18.126:34392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2FSGeq9LtYp4zuPOxbgAAACk"]
[Wed Sep 30 01:11:17.342450 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.342725 2026] [access_compat:error] [pid 270884:tid 271070] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.349694 2026] [security2:error] [pid 276620:tid 276787] [client 103.168.67.253:32050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2FdPAdfEWqmGIkg1jUwAAAjA"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:17.353545 2026] [security2:error] [pid 276620:tid 276824] [client 20.198.74.230:24129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zejjyvzu.php"] [unique_id "ary2FdPAdfEWqmGIkg1jVAAAAlU"]
[Wed Sep 30 01:11:17.370450 2026] [security2:error] [pid 270884:tid 271058] [client 13.70.4.78:19751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2FSGeq9LtYp4zuPOxcgAAACc"]
[Wed Sep 30 01:11:17.379558 2026] [security2:error] [pid 270884:tid 271099] [client 20.214.191.94:58829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ebkid.php"] [unique_id "ary2FSGeq9LtYp4zuPOxcwAAAFA"]
[Wed Sep 30 01:11:17.379989 2026] [security2:error] [pid 270884:tid 271134] [client 223.181.60.167:32420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxcQAAAHM"]
[Wed Sep 30 01:11:17.380181 2026] [security2:error] [pid 270884:tid 271134] [client 223.181.60.167:32420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxcQAAAHM"]
[Wed Sep 30 01:11:17.389567 2026] [qos:error] [pid 270884:tid 270931] [remote 197.52.88.222:44936] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=197.52.88.222, id=ary2FSGeq9LtYp4zuPOxdQAAAy0
[Wed Sep 30 01:11:17.417626 2026] [security2:error] [pid 276620:tid 276846] [client 4.240.25.22:8430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/adminfuns.php"] [unique_id "ary2FdPAdfEWqmGIkg1jVgAAAms"]
[Wed Sep 30 01:11:17.444173 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.444620 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.465049 2026] [security2:error] [pid 276620:tid 276789] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FdPAdfEWqmGIkg1jWAAAAjI"]
[Wed Sep 30 01:11:17.529780 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.530220 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.571847 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:17.572116 2026] [access_compat:error] [pid 270884:tid 271019] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:17.579904 2026] [security2:error] [pid 270884:tid 271146] [client 20.219.2.60:11888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/tymn.php"] [unique_id "ary2FSGeq9LtYp4zuPOxewAAAH8"]
[Wed Sep 30 01:11:17.584582 2026] [security2:error] [pid 270884:tid 270890] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2FSGeq9LtYp4zuPOxfAAADwQ"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D93773
[Wed Sep 30 01:11:17.640829 2026] [security2:error] [pid 270884:tid 271033] [client 82.102.18.126:34400] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2FSGeq9LtYp4zuPOxfgAAAA4"]
[Wed Sep 30 01:11:17.644058 2026] [security2:error] [pid 270884:tid 271113] [client 223.235.102.107:5227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxgAAAAF4"]
[Wed Sep 30 01:11:17.645101 2026] [security2:error] [pid 270884:tid 271113] [client 223.235.102.107:5227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxgAAAAF4"]
[Wed Sep 30 01:11:17.650059 2026] [security2:error] [pid 270884:tid 271124] [client 20.214.191.94:58855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/133.php"] [unique_id "ary2FSGeq9LtYp4zuPOxggAAAGk"]
[Wed Sep 30 01:11:17.672468 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.672728 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.686574 2026] [security2:error] [pid 270884:tid 271077] [client 52.172.226.14:31087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/link.php"] [unique_id "ary2FSGeq9LtYp4zuPOxiAAAADo"]
[Wed Sep 30 01:11:17.702166 2026] [security2:error] [pid 270884:tid 271070] [client 13.70.4.78:19750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2FSGeq9LtYp4zuPOxiQAAADM"]
[Wed Sep 30 01:11:17.757562 2026] [security2:error] [pid 270884:tid 271085] [client 216.73.216.46:9110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2FSGeq9LtYp4zuPOxjAAAAEI"]
[Wed Sep 30 01:11:17.809312 2026] [security2:error] [pid 276059:tid 276229] [client 45.78.94.217:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2FXtqdHBwD77138e4TwAAAbE"]
[Wed Sep 30 01:11:17.819444 2026] [security2:error] [pid 270884:tid 271113] [client 20.219.14.152:38810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/cued.php"] [unique_id "ary2FSGeq9LtYp4zuPOxkAAAAF4"]
[Wed Sep 30 01:11:17.837932 2026] [security2:error] [pid 270884:tid 271031] [client 37.41.16.35:63162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxkQAAAAw"]
[Wed Sep 30 01:11:17.838164 2026] [security2:error] [pid 270884:tid 271031] [client 37.41.16.35:63162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2FSGeq9LtYp4zuPOxkQAAAAw"]
[Wed Sep 30 01:11:17.839445 2026] [security2:error] [pid 270884:tid 271046] [client 45.138.12.32:46034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kkj.lfk.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2FSGeq9LtYp4zuPOxkwAAABs"]
[Wed Sep 30 01:11:17.856303 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.856587 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.889675 2026] [security2:error] [pid 270884:tid 271077] [client 20.219.2.60:30025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ok.php"] [unique_id "ary2FSGeq9LtYp4zuPOxmAAAADo"]
[Wed Sep 30 01:11:17.920248 2026] [security2:error] [pid 270884:tid 271073] [client 20.214.191.94:61476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/x33.php"] [unique_id "ary2FSGeq9LtYp4zuPOxnAAAADY"]
[Wed Sep 30 01:11:17.928238 2026] [security2:error] [pid 270884:tid 271129] [client 130.131.227.119:6344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/ahax.php"] [unique_id "ary2FSGeq9LtYp4zuPOxnQAAAG4"]
[Wed Sep 30 01:11:17.941032 2026] [security2:error] [pid 276620:tid 276845] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FdPAdfEWqmGIkg1jXAAAAmo"]
[Wed Sep 30 01:11:17.946019 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.946283 2026] [access_compat:error] [pid 270884:tid 271107] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:17.969539 2026] [security2:error] [pid 270884:tid 271034] [client 82.102.18.126:34412] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2FSGeq9LtYp4zuPOxnwAAAA8"]
[Wed Sep 30 01:11:17.987220 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:17.987477 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.076875 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.077155 2026] [access_compat:error] [pid 270884:tid 271031] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.077590 2026] [security2:error] [pid 270884:tid 271121] [client 130.131.227.119:13238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/breads1.php"] [unique_id "ary2FiGeq9LtYp4zuPOxpgAAAGY"]
[Wed Sep 30 01:11:18.078563 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:18.078840 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:18.092616 2026] [security2:error] [pid 276059:tid 276243] [client 13.70.4.78:19775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/aa.php"] [unique_id "ary2FntqdHBwD77138e4UAAAAb8"]
[Wed Sep 30 01:11:18.163758 2026] [security2:error] [pid 270884:tid 271129] [client 52.172.226.14:12591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/lock360.php"] [unique_id "ary2FiGeq9LtYp4zuPOxqwAAAG4"]
[Wed Sep 30 01:11:18.171551 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.171828 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.185195 2026] [security2:error] [pid 276620:tid 276852] [client 20.214.191.94:58828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/cae.php"] [unique_id "ary2FtPAdfEWqmGIkg1jXgAAAnE"]
[Wed Sep 30 01:11:18.196143 2026] [security2:error] [pid 270884:tid 271146] [client 20.204.42.136:35764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/wp-trackback.php"] [unique_id "ary2FiGeq9LtYp4zuPOxsAAAAH8"]
[Wed Sep 30 01:11:18.218275 2026] [security2:error] [pid 270884:tid 271034] [client 170.244.18.66:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2FiGeq9LtYp4zuPOxsQAAAA8"]
[Wed Sep 30 01:11:18.232391 2026] [security2:error] [pid 276059:tid 276298] [client 130.131.227.119:51755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/must.php"] [unique_id "ary2FntqdHBwD77138e4UgAAAfY"]
[Wed Sep 30 01:11:18.258939 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.259206 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.272727 2026] [security2:error] [pid 276620:tid 276798] [client 82.102.18.126:34420] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2FtPAdfEWqmGIkg1jXwAAAjs"]
[Wed Sep 30 01:11:18.301952 2026] [security2:error] [pid 276620:tid 276805] [client 20.219.2.60:11657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/eetu.php"] [unique_id "ary2FtPAdfEWqmGIkg1jYgAAAkI"]
[Wed Sep 30 01:11:18.335643 2026] [security2:error] [pid 270884:tid 271068] [client 27.46.69.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "glorymfb.com"] [uri "/robots.txt"] [unique_id "ary2FiGeq9LtYp4zuPOxuQAAADE"], referer: https://glorymfb.com/robots.txt
[Wed Sep 30 01:11:18.360327 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.360785 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.371763 2026] [security2:error] [pid 270884:tid 271073] [client 20.219.14.152:38785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/sd.php"] [unique_id "ary2FiGeq9LtYp4zuPOxuwAAADY"]
[Wed Sep 30 01:11:18.417132 2026] [security2:error] [pid 270884:tid 271058] [client 130.131.227.119:13213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/up.php"] [unique_id "ary2FiGeq9LtYp4zuPOxvAAAACc"]
[Wed Sep 30 01:11:18.449104 2026] [security2:error] [pid 276059:tid 276261] [client 20.214.191.94:58849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/txets.php"] [unique_id "ary2FntqdHBwD77138e4VAAAAdE"]
[Wed Sep 30 01:11:18.452557 2026] [security2:error] [pid 276620:tid 276847] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FtPAdfEWqmGIkg1jZAAAAmw"]
[Wed Sep 30 01:11:18.454910 2026] [security2:error] [pid 276059:tid 276279] [client 20.70.173.30:25926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/133.php"] [unique_id "ary2FntqdHBwD77138e4VQAAAeM"]
[Wed Sep 30 01:11:18.499949 2026] [security2:error] [pid 270884:tid 271139] [client 20.70.173.30:7361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/mh.php"] [unique_id "ary2FiGeq9LtYp4zuPOxxAAAAHg"]
[Wed Sep 30 01:11:18.501996 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.502256 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.579041 2026] [security2:error] [pid 270884:tid 271146] [client 82.102.18.126:34424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2FiGeq9LtYp4zuPOxyQAAAH8"]
[Wed Sep 30 01:11:18.592126 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:52003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.592402 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:52003] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.613031 2026] [access_compat:error] [pid 270884:tid 271029] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:18.613302 2026] [access_compat:error] [pid 270884:tid 271029] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:18.631362 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.631650 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.639280 2026] [security2:error] [pid 270884:tid 271129] [client 168.100.149.219:20122] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3057148b43e55427970a1d86c58103ab.1037.css.gz"] [unique_id "ary2FiGeq9LtYp4zuPOxzgAAbns"]
[Wed Sep 30 01:11:18.644837 2026] [security2:error] [pid 270884:tid 271062] [client 52.172.226.14:46720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-trackback.php"] [unique_id "ary2FiGeq9LtYp4zuPOxzwAAACs"]
[Wed Sep 30 01:11:18.658322 2026] [security2:error] [pid 276620:tid 276837] [client 130.131.227.119:59612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/155.php"] [unique_id "ary2FtPAdfEWqmGIkg1jZwAAAmI"]
[Wed Sep 30 01:11:18.678171 2026] [security2:error] [pid 270884:tid 271094] [client 20.219.19.141:20812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/cns.php"] [unique_id "ary2FiGeq9LtYp4zuPOx0AAAAEs"]
[Wed Sep 30 01:11:18.701030 2026] [security2:error] [pid 270884:tid 271085] [client 20.211.90.37:39882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/about.php"] [unique_id "ary2FiGeq9LtYp4zuPOx0gAAAEI"]
[Wed Sep 30 01:11:18.716351 2026] [security2:error] [pid 276620:tid 276760] [client 13.70.4.78:19719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/z70.php"] [unique_id "ary2FtPAdfEWqmGIkg1jaAAAAhU"]
[Wed Sep 30 01:11:18.720281 2026] [security2:error] [pid 276620:tid 276839] [client 20.214.191.94:61499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp-update.php"] [unique_id "ary2FtPAdfEWqmGIkg1jaQAAAmQ"]
[Wed Sep 30 01:11:18.749153 2026] [security2:error] [pid 270884:tid 271128] [client 20.28.180.172:29973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/js.php"] [unique_id "ary2FiGeq9LtYp4zuPOx1gAAAG0"]
[Wed Sep 30 01:11:18.822309 2026] [security2:error] [pid 270884:tid 271101] [client 130.131.227.119:59607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-update.php"] [unique_id "ary2FiGeq9LtYp4zuPOx2AAAAFI"]
[Wed Sep 30 01:11:18.832499 2026] [security2:error] [pid 270884:tid 271129] [client 20.219.14.152:38794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/ans.php"] [unique_id "ary2FiGeq9LtYp4zuPOx2QAAAG4"]
[Wed Sep 30 01:11:18.911658 2026] [security2:error] [pid 276620:tid 276878] [client 82.102.18.126:34438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2FtPAdfEWqmGIkg1jagAAAos"]
[Wed Sep 30 01:11:18.938323 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:18.938612 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:18.956220 2026] [security2:error] [pid 276620:tid 276786] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2FtPAdfEWqmGIkg1jawAAAi8"]
[Wed Sep 30 01:11:18.987073 2026] [security2:error] [pid 270884:tid 271142] [client 130.131.227.119:51737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/xmrlpc.php"] [unique_id "ary2FiGeq9LtYp4zuPOx4QAAAHs"]
[Wed Sep 30 01:11:19.000989 2026] [security2:error] [pid 276059:tid 276292] [client 20.214.191.94:58838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/177.php"] [unique_id "ary2FntqdHBwD77138e4WgAAAfA"]
[Wed Sep 30 01:11:19.031591 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.031885 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.095728 2026] [security2:error] [pid 270884:tid 271094] [client 4.240.25.22:33335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/pfm.php"] [unique_id "ary2FyGeq9LtYp4zuPOx6QAAAEs"]
[Wed Sep 30 01:11:19.097474 2026] [security2:error] [pid 270884:tid 271139] [client 4.240.25.22:8471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ms-edit.php"] [unique_id "ary2FyGeq9LtYp4zuPOx6wAAAHg"]
[Wed Sep 30 01:11:19.111731 2026] [security2:error] [pid 276620:tid 276792] [client 13.70.4.78:20424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/f35.php"] [unique_id "ary2F9PAdfEWqmGIkg1jbAAAAjU"]
[Wed Sep 30 01:11:19.115226 2026] [security2:error] [pid 276620:tid 276867] [client 52.172.226.14:18668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/.well-known/index.php"] [unique_id "ary2F9PAdfEWqmGIkg1jbQAAAoA"]
[Wed Sep 30 01:11:19.121505 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.121938 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.142161 2026] [security2:error] [pid 276620:tid 276803] [client 130.131.227.119:6347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/about/function.php"] [unique_id "ary2F9PAdfEWqmGIkg1jbgAAAkA"]
[Wed Sep 30 01:11:19.148773 2026] [security2:error] [pid 276620:tid 276873] [client 20.70.173.30:25243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/admin.php"] [unique_id "ary2F9PAdfEWqmGIkg1jbwAAAoY"]
[Wed Sep 30 01:11:19.159935 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:19.160220 2026] [access_compat:error] [pid 270884:tid 271133] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:19.211318 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.211601 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.224964 2026] [security2:error] [pid 276620:tid 276849] [client 20.28.180.172:61215] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/1.php"] [unique_id "ary2F9PAdfEWqmGIkg1jcAAAAm4"]
[Wed Sep 30 01:11:19.225071 2026] [security2:error] [pid 276620:tid 276849] [client 20.28.180.172:61215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/1.php"] [unique_id "ary2F9PAdfEWqmGIkg1jcAAAAm4"]
[Wed Sep 30 01:11:19.249445 2026] [security2:error] [pid 276620:tid 276863] [client 82.102.18.126:34444] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2F9PAdfEWqmGIkg1jcgAAAnw"]
[Wed Sep 30 01:11:19.281686 2026] [security2:error] [pid 276059:tid 276282] [client 20.219.2.60:30072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/zoo.php"] [unique_id "ary2F3tqdHBwD77138e4XwAAAeY"]
[Wed Sep 30 01:11:19.301374 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.301638 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.320782 2026] [security2:error] [pid 276059:tid 276219] [client 20.214.191.94:58852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ccc.php"] [unique_id "ary2F3tqdHBwD77138e4YgAAAac"]
[Wed Sep 30 01:11:19.332224 2026] [security2:error] [pid 270884:tid 271056] [client 130.131.227.119:41602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/an.php"] [unique_id "ary2FyGeq9LtYp4zuPOx-wAAACU"]
[Wed Sep 30 01:11:19.342208 2026] [security2:error] [pid 276620:tid 276834] [client 20.219.14.152:47668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/cns.php"] [unique_id "ary2F9PAdfEWqmGIkg1jeAAAAl8"]
[Wed Sep 30 01:11:19.370208 2026] [security2:error] [pid 276620:tid 276776] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2F9PAdfEWqmGIkg1jeQAAAiU"]
[Wed Sep 30 01:11:19.405269 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.405712 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:57769] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.457976 2026] [security2:error] [pid 276620:tid 276876] [client 13.70.4.78:20422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/adminfuns.php"] [unique_id "ary2F9PAdfEWqmGIkg1jegAAAok"]
[Wed Sep 30 01:11:19.465001 2026] [security2:error] [pid 270884:tid 271112] [client 20.194.30.107:23558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2FyGeq9LtYp4zuPOx_wAAAF0"]
[Wed Sep 30 01:11:19.468997 2026] [security2:error] [pid 276620:tid 276868] [client 20.194.96.176:25460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/nauik.php"] [unique_id "ary2F9PAdfEWqmGIkg1jewAAAoE"]
[Wed Sep 30 01:11:19.480210 2026] [security2:error] [pid 270884:tid 271133] [client 216.73.216.46:57769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2FyGeq9LtYp4zuPOyAAAAAHI"]
[Wed Sep 30 01:11:19.533421 2026] [security2:error] [pid 276059:tid 276273] [client 130.131.227.119:59593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/asw.php"] [unique_id "ary2F3tqdHBwD77138e4ZAAAAd0"]
[Wed Sep 30 01:11:19.561255 2026] [security2:error] [pid 276620:tid 276769] [client 82.102.18.126:34452] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2F9PAdfEWqmGIkg1jfQAAAh4"]
[Wed Sep 30 01:11:19.576355 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.576640 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.578656 2026] [security2:error] [pid 270884:tid 271029] [client 103.168.67.253:32064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2FyGeq9LtYp4zuPOyBwAAAAo"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:19.591358 2026] [security2:error] [pid 270884:tid 271071] [client 52.172.226.14:18660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary2FyGeq9LtYp4zuPOyCAAAADQ"]
[Wed Sep 30 01:11:19.619481 2026] [security2:error] [pid 270884:tid 271078] [client 20.214.191.94:61445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/0xD.php"] [unique_id "ary2FyGeq9LtYp4zuPOyCwAAADs"]
[Wed Sep 30 01:11:19.624258 2026] [access_compat:error] [pid 270884:tid 271107] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:19.624535 2026] [access_compat:error] [pid 270884:tid 271107] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:19.668056 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.668329 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.760308 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.760585 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.804283 2026] [security2:error] [pid 270884:tid 271112] [client 20.70.173.30:7407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/cycfruf.php"] [unique_id "ary2FyGeq9LtYp4zuPOyEwAAAF0"]
[Wed Sep 30 01:11:19.817787 2026] [security2:error] [pid 276620:tid 276789] [client 130.131.227.119:6363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/item.php"] [unique_id "ary2F9PAdfEWqmGIkg1jgwAAAjI"]
[Wed Sep 30 01:11:19.832575 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.14.152:38541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/faiy.php"] [unique_id "ary2F9PAdfEWqmGIkg1jhQAAAkM"]
[Wed Sep 30 01:11:19.852477 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.852753 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.863293 2026] [security2:error] [pid 276620:tid 276835] [client 4.240.25.22:41697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/reop3.php"] [unique_id "ary2F9PAdfEWqmGIkg1jhgAAAmA"]
[Wed Sep 30 01:11:19.873648 2026] [security2:error] [pid 276620:tid 276828] [client 20.194.30.107:17384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/simple.php"] [unique_id "ary2F9PAdfEWqmGIkg1jhwAAAlk"]
[Wed Sep 30 01:11:19.874072 2026] [qos:error] [pid 270884:tid 270950] [remote 96.231.178.137:47730] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=96.231.178.137, id=ary2FyGeq9LtYp4zuPOyFwAACkA
[Wed Sep 30 01:11:19.895832 2026] [security2:error] [pid 276620:tid 276860] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2F9PAdfEWqmGIkg1jiAAAAnk"]
[Wed Sep 30 01:11:19.902316 2026] [security2:error] [pid 276620:tid 276823] [client 82.102.18.126:34454] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2F9PAdfEWqmGIkg1jiQAAAlQ"]
[Wed Sep 30 01:11:19.941763 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:19.942049 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:19.943145 2026] [security2:error] [pid 270884:tid 271071] [client 20.214.191.94:58816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/sallu.php"] [unique_id "ary2FyGeq9LtYp4zuPOyGQAAADQ"]
[Wed Sep 30 01:11:20.008025 2026] [security2:error] [pid 276620:tid 276771] [client 13.70.4.78:19720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/av.php"] [unique_id "ary2GNPAdfEWqmGIkg1jigAAAiA"]
[Wed Sep 30 01:11:20.021399 2026] [security2:error] [pid 270884:tid 271101] [client 130.131.227.119:59621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/jga.php"] [unique_id "ary2GCGeq9LtYp4zuPOyGwAAAFI"]
[Wed Sep 30 01:11:20.036345 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.036783 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.051182 2026] [security2:error] [pid 270884:tid 271068] [client 170.84.176.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2GCGeq9LtYp4zuPOyIAAAADE"]
[Wed Sep 30 01:11:20.061786 2026] [security2:error] [pid 270884:tid 271112] [client 52.172.226.14:31047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2GCGeq9LtYp4zuPOyIgAAAF0"]
[Wed Sep 30 01:11:20.122663 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.122937 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.134533 2026] [access_compat:error] [pid 270884:tid 271146] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:20.134973 2026] [access_compat:error] [pid 270884:tid 271146] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:20.215031 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.215315 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.243704 2026] [security2:error] [pid 276059:tid 276313] [client 82.102.18.126:34460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2GHtqdHBwD77138e4ZgAAAgU"]
[Wed Sep 30 01:11:20.252251 2026] [security2:error] [pid 270884:tid 271019] [client 130.131.227.119:2387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/mac.php"] [unique_id "ary2GCGeq9LtYp4zuPOyKgAAAAA"]
[Wed Sep 30 01:11:20.263369 2026] [security2:error] [pid 276620:tid 276790] [client 20.214.191.94:61479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/01.php"] [unique_id "ary2GNPAdfEWqmGIkg1jjQAAAjM"]
[Wed Sep 30 01:11:20.304367 2026] [security2:error] [pid 276620:tid 276783] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "/Util/PHP/eval-stdin\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1512"] [id "900414"] [msg "block PHPUnit eval-stdin.php"] [hostname "50.87.124.230"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ary2GNPAdfEWqmGIkg1jjgAAAiw"]
[Wed Sep 30 01:11:20.305222 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.305503 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.323134 2026] [security2:error] [pid 270884:tid 271107] [client 20.219.14.152:38793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/gecho.php"] [unique_id "ary2GCGeq9LtYp4zuPOyLQAAAFg"]
[Wed Sep 30 01:11:20.376252 2026] [security2:error] [pid 270884:tid 271128] [client 20.194.30.107:45798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary2GCGeq9LtYp4zuPOyMAAAAG0"]
[Wed Sep 30 01:11:20.408344 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.408888 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.432023 2026] [security2:error] [pid 270884:tid 271091] [client 43.104.4.220:59304] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary2GCGeq9LtYp4zuPOyMgAAAEg"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:20.433100 2026] [security2:error] [pid 270884:tid 271112] [client 130.131.227.119:51718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/images/index.php"] [unique_id "ary2GCGeq9LtYp4zuPOyMwAAAF0"]
[Wed Sep 30 01:11:20.442840 2026] [security2:error] [pid 276059:tid 276317] [client 13.70.4.78:20427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/dex.php"] [unique_id "ary2GHtqdHBwD77138e4ZwAAAgk"]
[Wed Sep 30 01:11:20.491701 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.491996 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.497346 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.2.60:11366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/dx.php"] [unique_id "ary2GCGeq9LtYp4zuPOyNQAAAEY"]
[Wed Sep 30 01:11:20.507499 2026] [security2:error] [pid 270884:tid 271041] [client 20.219.19.141:20922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/faiy.php"] [unique_id "ary2GCGeq9LtYp4zuPOyNgAAABY"]
[Wed Sep 30 01:11:20.538425 2026] [security2:error] [pid 270884:tid 271061] [client 52.172.226.14:18638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2GCGeq9LtYp4zuPOyNwAAACo"]
[Wed Sep 30 01:11:20.556845 2026] [security2:error] [pid 270884:tid 271019] [client 20.28.180.172:61227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/term.php"] [unique_id "ary2GCGeq9LtYp4zuPOyOgAAAAA"]
[Wed Sep 30 01:11:20.557753 2026] [security2:error] [pid 276059:tid 276245] [client 82.102.18.126:34470] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2GHtqdHBwD77138e4aAAAAcE"]
[Wed Sep 30 01:11:20.566597 2026] [security2:error] [pid 270884:tid 271073] [client 20.214.191.94:61440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ab.php"] [unique_id "ary2GCGeq9LtYp4zuPOyOwAAADY"]
[Wed Sep 30 01:11:20.577001 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.577276 2026] [access_compat:error] [pid 270884:tid 271121] [client 216.73.216.46:34575] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.608985 2026] [security2:error] [pid 270884:tid 271139] [client 130.131.227.119:15574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ary2GCGeq9LtYp4zuPOyPgAAAHg"]
[Wed Sep 30 01:11:20.621856 2026] [security2:error] [pid 276620:tid 276829] [client 103.168.67.253:32076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2GNPAdfEWqmGIkg1jjwAAAlo"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:20.636313 2026] [security2:error] [pid 276059:tid 276222] [client 13.70.1.101:21402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2GHtqdHBwD77138e4bAAAAao"]
[Wed Sep 30 01:11:20.645749 2026] [security2:error] [pid 270884:tid 271068] [client 168.100.149.36:59534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/6d6a6ec6b26fc16febae6c942bef4a1d.95.css.gz"] [unique_id "ary2GCGeq9LtYp4zuPOyPwAAMVc"]
[Wed Sep 30 01:11:20.670480 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.670930 2026] [access_compat:error] [pid 270884:tid 271091] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.726938 2026] [security2:error] [pid 270884:tid 271061] [client 20.198.74.230:24136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/pqfpcelx.php"] [unique_id "ary2GCGeq9LtYp4zuPOySgAAACo"]
[Wed Sep 30 01:11:20.762003 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.762263 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.765888 2026] [access_compat:error] [pid 270884:tid 271139] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:20.766381 2026] [access_compat:error] [pid 270884:tid 271139] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:20.767036 2026] [security2:error] [pid 270884:tid 271032] [client 130.131.227.119:6338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/zafir1.php"] [unique_id "ary2GCGeq9LtYp4zuPOyTgAAAA0"]
[Wed Sep 30 01:11:20.799220 2026] [security2:error] [pid 270884:tid 271133] [client 13.70.4.78:19758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/chosen.php"] [unique_id "ary2GCGeq9LtYp4zuPOyTwAAAHI"]
[Wed Sep 30 01:11:20.849254 2026] [security2:error] [pid 276620:tid 276874] [client 20.214.191.94:58853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/xwpg.php"] [unique_id "ary2GNPAdfEWqmGIkg1jkwAAAoc"]
[Wed Sep 30 01:11:20.856139 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.856587 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.863227 2026] [security2:error] [pid 270884:tid 271094] [client 43.104.4.220:59304] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary2GCGeq9LtYp4zuPOyUgAAAEs"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:20.863864 2026] [security2:error] [pid 270884:tid 271132] [client 20.219.14.152:47671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/gu.php"] [unique_id "ary2GCGeq9LtYp4zuPOyUwAAAHE"]
[Wed Sep 30 01:11:20.888785 2026] [security2:error] [pid 276059:tid 276266] [client 20.211.90.37:40445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/BDKR28WP.php"] [unique_id "ary2GHtqdHBwD77138e4bgAAAdY"]
[Wed Sep 30 01:11:20.894523 2026] [security2:error] [pid 270884:tid 271021] [client 82.102.18.126:34482] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.dbo.vdl.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2GCGeq9LtYp4zuPOyVAAAAAI"]
[Wed Sep 30 01:11:20.917105 2026] [security2:error] [pid 270884:tid 271101] [client 130.131.227.119:6393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/abc.php"] [unique_id "ary2GCGeq9LtYp4zuPOyVQAAAFI"]
[Wed Sep 30 01:11:20.926278 2026] [security2:error] [pid 270884:tid 271085] [client 203.122.45.246:59131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2GCGeq9LtYp4zuPOyVgAAAEI"]
[Wed Sep 30 01:11:20.926421 2026] [security2:error] [pid 270884:tid 271085] [client 203.122.45.246:59131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2GCGeq9LtYp4zuPOyVgAAAEI"]
[Wed Sep 30 01:11:20.946015 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:20.946326 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:20.977180 2026] [security2:error] [pid 276059:tid 276286] [client 13.70.1.101:21393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2GHtqdHBwD77138e4bwAAAeo"]
[Wed Sep 30 01:11:20.995021 2026] [security2:error] [pid 270884:tid 271098] [client 216.73.216.46:34575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2GCGeq9LtYp4zuPOyWAAAAE8"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMva2VybmVs
[Wed Sep 30 01:11:21.002312 2026] [security2:error] [pid 276620:tid 276878] [client 52.172.226.14:12559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary2GdPAdfEWqmGIkg1jlQAAAos"]
[Wed Sep 30 01:11:21.016186 2026] [security2:error] [pid 276620:tid 276855] [client 4.240.25.22:38752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/ops.php"] [unique_id "ary2GdPAdfEWqmGIkg1jlwAAAnQ"]
[Wed Sep 30 01:11:21.033485 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.033756 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.037639 2026] [security2:error] [pid 276620:tid 276677] [remote 57.141.14.2:22796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary2GdPAdfEWqmGIkg1jmAACLy8"]
[Wed Sep 30 01:11:21.063597 2026] [qos:error] [pid 270884:tid 271095] [client 76.106.104.167:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2GSGeq9LtYp4zuPOyXQAAAEw
[Wed Sep 30 01:11:21.084061 2026] [security2:error] [pid 270884:tid 271032] [client 130.131.227.119:59610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/c1.php"] [unique_id "ary2GSGeq9LtYp4zuPOyXwAAAA0"]
[Wed Sep 30 01:11:21.112366 2026] [security2:error] [pid 270884:tid 271021] [client 20.214.191.94:58833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/flamini.php"] [unique_id "ary2GSGeq9LtYp4zuPOyYgAAAAI"]
[Wed Sep 30 01:11:21.124613 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.124907 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.134792 2026] [qos:error] [pid 270884:tid 271112] [client 99.101.66.241:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2GSGeq9LtYp4zuPOyaAAAAF0
[Wed Sep 30 01:11:21.138383 2026] [access_compat:error] [pid 270884:tid 271098] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:21.138674 2026] [access_compat:error] [pid 270884:tid 271098] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:21.159530 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:30066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/gaza.php"] [unique_id "ary2GSGeq9LtYp4zuPOyagAAADk"]
[Wed Sep 30 01:11:21.216511 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.216787 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.230118 2026] [security2:error] [pid 276620:tid 276834] [client 87.199.197.121:7944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:contact-form-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "eccl.co.uk"] [uri "/products/databird/"] [unique_id "ary2GdPAdfEWqmGIkg1jnwAAAl8"], referer: http://eccl.co.uk/products/databird/
[Wed Sep 30 01:11:21.263123 2026] [security2:error] [pid 270884:tid 271107] [client 130.131.227.119:59615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/index.php/feed/atom/"] [unique_id "ary2GSGeq9LtYp4zuPOycgAAAFg"]
[Wed Sep 30 01:11:21.266060 2026] [security2:error] [pid 270884:tid 271123] [client 74.7.175.186:46136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.nek.pxp.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2GSGeq9LtYp4zuPOycQAAaD4"]
[Wed Sep 30 01:11:21.298937 2026] [security2:error] [pid 270884:tid 271073] [client 13.70.4.78:19756] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/1.php"] [unique_id "ary2GSGeq9LtYp4zuPOycwAAADY"]
[Wed Sep 30 01:11:21.299040 2026] [security2:error] [pid 270884:tid 271073] [client 13.70.4.78:19756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/1.php"] [unique_id "ary2GSGeq9LtYp4zuPOycwAAADY"]
[Wed Sep 30 01:11:21.305757 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.306076 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.342946 2026] [qos:error] [pid 270884:tid 271091] [client 109.199.95.18:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2GSGeq9LtYp4zuPOydwAAAEg
[Wed Sep 30 01:11:21.358278 2026] [security2:error] [pid 270884:tid 271133] [client 20.211.90.37:39887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/file5.php"] [unique_id "ary2GSGeq9LtYp4zuPOyeAAAAHI"]
[Wed Sep 30 01:11:21.365381 2026] [security2:error] [pid 270884:tid 271061] [client 13.70.1.101:38412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/b.php"] [unique_id "ary2GSGeq9LtYp4zuPOyeQAAACo"]
[Wed Sep 30 01:11:21.379940 2026] [security2:error] [pid 270884:tid 271019] [client 20.214.191.94:61498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/themes.php"] [unique_id "ary2GSGeq9LtYp4zuPOyegAAAAA"]
[Wed Sep 30 01:11:21.403744 2026] [security2:error] [pid 276620:tid 276886] [client 20.219.14.152:38530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/nck.php"] [unique_id "ary2GdPAdfEWqmGIkg1joQAAApM"]
[Wed Sep 30 01:11:21.416615 2026] [autoindex:error] [pid 270884:tid 270995] [remote 74.7.242.29:42640] AH01276: Cannot serve directory /home4/nekpxpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:21.417476 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.417902 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.441130 2026] [security2:error] [pid 270884:tid 271078] [client 130.131.227.119:2384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/root.php"] [unique_id "ary2GSGeq9LtYp4zuPOygAAAADs"]
[Wed Sep 30 01:11:21.476450 2026] [security2:error] [pid 270884:tid 271085] [client 43.104.4.220:59304] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/cache/wpo-minify/1787712162/assets/wpo-minify-footer-woolentor-block-main1781597927.min.js"] [unique_id "ary2GSGeq9LtYp4zuPOygQAAAEI"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:21.485211 2026] [security2:error] [pid 276059:tid 276246] [client 52.172.226.14:31070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary2GXtqdHBwD77138e4dAAAAcI"]
[Wed Sep 30 01:11:21.497824 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.498264 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.528087 2026] [security2:error] [pid 270884:tid 271073] [client 87.199.197.121:7953] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:contact-form-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "eccl.co.uk"] [uri "/products/databird/"] [unique_id "ary2GSGeq9LtYp4zuPOyhQAAADY"], referer: http://eccl.co.uk/products/databird/
[Wed Sep 30 01:11:21.556273 2026] [security2:error] [pid 270884:tid 271091] [client 4.240.25.22:8451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/media.php"] [unique_id "ary2GSGeq9LtYp4zuPOyhwAAAEg"]
[Wed Sep 30 01:11:21.581146 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.581508 2026] [access_compat:error] [pid 270884:tid 271139] [client 216.73.216.46:24161] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.594541 2026] [security2:error] [pid 276620:tid 276802] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "^ " at ARGS_NAMES: config-create /. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "148"] [id "390720"] [rev "6"] [msg "Atomicorp.com WAF Rules: Possible Impedence Mismatch attack on PHP appliction using space to start argument name"] [data ".php"] [severity "ALERT"] [tag "no_ar"] [hostname "50.87.124.230"] [uri "/index.php"] [unique_id "ary2GdPAdfEWqmGIkg1jowAAAj8"]
[Wed Sep 30 01:11:21.634336 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:21.634629 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:21.645324 2026] [security2:error] [pid 270884:tid 271061] [client 20.214.191.94:58832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/0.php"] [unique_id "ary2GSGeq9LtYp4zuPOyjAAAACo"]
[Wed Sep 30 01:11:21.666880 2026] [security2:error] [pid 276620:tid 276801] [client 130.131.227.119:59620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/shell.php"] [unique_id "ary2GdPAdfEWqmGIkg1jpwAAAj4"]
[Wed Sep 30 01:11:21.669474 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.669785 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.702892 2026] [security2:error] [pid 270884:tid 271112] [client 45.138.12.32:25032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kqr.myw.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2GSGeq9LtYp4zuPOykAAAAF0"]
[Wed Sep 30 01:11:21.709313 2026] [security2:error] [pid 270884:tid 271101] [client 13.70.4.78:19769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/radio.php"] [unique_id "ary2GSGeq9LtYp4zuPOykgAAAFI"]
[Wed Sep 30 01:11:21.761199 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.761629 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.802120 2026] [security2:error] [pid 270884:tid 271133] [client 13.70.1.101:45879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/admin.php"] [unique_id "ary2GSGeq9LtYp4zuPOymAAAAHI"]
[Wed Sep 30 01:11:21.817140 2026] [security2:error] [pid 270884:tid 271132] [client 20.28.180.172:34262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zuk.php"] [unique_id "ary2GSGeq9LtYp4zuPOymQAAAHE"]
[Wed Sep 30 01:11:21.841556 2026] [security2:error] [pid 276620:tid 276809] [client 130.131.227.119:6336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/user/index.php"] [unique_id "ary2GdPAdfEWqmGIkg1jqAAAAkY"]
[Wed Sep 30 01:11:21.845743 2026] [security2:error] [pid 270884:tid 271041] [client 43.104.4.217:33927] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woolentor-addons/assets/js/slick.min.js"] [unique_id "ary2GSGeq9LtYp4zuPOymgAAABY"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:21.850187 2026] [security2:error] [pid 270884:tid 271078] [client 43.104.4.201:22425] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js"] [unique_id "ary2GSGeq9LtYp4zuPOymwAAADs"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:21.853787 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.854062 2026] [security2:error] [pid 270884:tid 271085] [client 43.104.4.180:24830] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woolentor-addons/assets/js/accordion.min.js"] [unique_id "ary2GSGeq9LtYp4zuPOynQAAAEI"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:21.854222 2026] [access_compat:error] [pid 270884:tid 271117] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.870934 2026] [security2:error] [pid 270884:tid 271101] [client 20.204.42.136:35731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/pep.php"] [unique_id "ary2GSGeq9LtYp4zuPOynwAAAFI"]
[Wed Sep 30 01:11:21.911299 2026] [security2:error] [pid 270884:tid 271128] [client 20.214.191.94:61456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/opsh.php"] [unique_id "ary2GSGeq9LtYp4zuPOyoQAAAG0"]
[Wed Sep 30 01:11:21.919532 2026] [security2:error] [pid 270884:tid 271073] [client 20.219.14.152:38177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/xtt.php"] [unique_id "ary2GSGeq9LtYp4zuPOyogAAADY"]
[Wed Sep 30 01:11:21.944025 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:21.944325 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:21.948541 2026] [security2:error] [pid 276059:tid 276208] [client 52.172.226.14:18650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary2GXtqdHBwD77138e4eAAAAZ0"]
[Wed Sep 30 01:11:21.954230 2026] [security2:error] [pid 276059:tid 276310] [client 122.173.27.10:19018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2GXtqdHBwD77138e4eQAAAgI"]
[Wed Sep 30 01:11:21.954444 2026] [security2:error] [pid 276059:tid 276310] [client 122.173.27.10:19018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2GXtqdHBwD77138e4eQAAAgI"]
[Wed Sep 30 01:11:21.961160 2026] [security2:error] [pid 276620:tid 276787] [client 103.46.186.85:35670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:lang. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:lang"] [severity "CRITICAL"] [hostname "50.87.124.230"] [uri "/index.php"] [unique_id "ary2GdPAdfEWqmGIkg1jqQAAAjA"]
[Wed Sep 30 01:11:21.964247 2026] [security2:error] [pid 270884:tid 271137] [client 43.104.4.227:49516] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js"] [unique_id "ary2GSGeq9LtYp4zuPOypQAAAHY"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:22.009630 2026] [security2:error] [pid 270884:tid 271024] [client 216.73.216.46:24161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2GiGeq9LtYp4zuPOypgAAAAU"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9kYg%3D%3D
[Wed Sep 30 01:11:22.028603 2026] [security2:error] [pid 270884:tid 271089] [client 43.104.4.180:24830] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js"] [unique_id "ary2GiGeq9LtYp4zuPOypwAAAEY"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:22.034481 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.034786 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.063122 2026] [security2:error] [pid 270884:tid 271085] [client 20.211.90.37:39978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/b8.php"] [unique_id "ary2GiGeq9LtYp4zuPOyqQAAAEI"]
[Wed Sep 30 01:11:22.070605 2026] [security2:error] [pid 270884:tid 271114] [client 130.131.227.119:59618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ary2GiGeq9LtYp4zuPOyqgAAAF8"]
[Wed Sep 30 01:11:22.071128 2026] [security2:error] [pid 276620:tid 276824] [client 20.194.30.107:17393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/yawa.php"] [unique_id "ary2GtPAdfEWqmGIkg1jqgAAAlU"]
[Wed Sep 30 01:11:22.097346 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.19.141:20814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/gecho.php"] [unique_id "ary2GiGeq9LtYp4zuPOyrAAAAFI"]
[Wed Sep 30 01:11:22.105522 2026] [security2:error] [pid 270884:tid 271128] [client 13.70.4.78:19735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/blacks.php"] [unique_id "ary2GiGeq9LtYp4zuPOyrQAAAG0"]
[Wed Sep 30 01:11:22.115730 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:22.116130 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:22.127573 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.127977 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.202357 2026] [security2:error] [pid 270884:tid 271112] [client 20.214.191.94:46984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/media.php"] [unique_id "ary2GiGeq9LtYp4zuPOytgAAAF0"]
[Wed Sep 30 01:11:22.210035 2026] [security2:error] [pid 270884:tid 271071] [client 20.70.173.30:7422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/gecko.php"] [unique_id "ary2GiGeq9LtYp4zuPOyuQAAADQ"]
[Wed Sep 30 01:11:22.217139 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.217521 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.244102 2026] [security2:error] [pid 270884:tid 271089] [client 130.131.227.119:2428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-header-json.php"] [unique_id "ary2GiGeq9LtYp4zuPOyugAAAEY"]
[Wed Sep 30 01:11:22.252738 2026] [security2:error] [pid 270884:tid 271114] [client 43.104.4.180:24830] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/cache/wpo-minify/1787712162/assets/wpo-minify-footer-hello-theme-frontend1787712160.min.js"] [unique_id "ary2GiGeq9LtYp4zuPOyuwAAAF8"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:22.303571 2026] [security2:error] [pid 270884:tid 271019] [client 13.70.1.101:21027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/fling.php"] [unique_id "ary2GiGeq9LtYp4zuPOywAAAAAA"]
[Wed Sep 30 01:11:22.309900 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.310178 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.377036 2026] [qos:error] [pid 270884:tid 270925] [remote 187.189.36.117:7072] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=187.189.36.117, id=ary2GiGeq9LtYp4zuPOyxQAANic
[Wed Sep 30 01:11:22.379081 2026] [security2:error] [pid 270884:tid 271085] [client 74.7.244.51:56114] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.gsm.hyx.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2GiGeq9LtYp4zuPOyvQAAQjc"]
[Wed Sep 30 01:11:22.379209 2026] [security2:error] [pid 270884:tid 271128] [client 127.0.0.1:47026] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary2GiGeq9LtYp4zuPOyvgAAAG0"]
[Wed Sep 30 01:11:22.387061 2026] [security2:error] [pid 270884:tid 271091] [client 202.179.95.79:64242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOyxgAAAEg"]
[Wed Sep 30 01:11:22.387306 2026] [security2:error] [pid 270884:tid 271091] [client 202.179.95.79:64242] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOyxgAAAEg"]
[Wed Sep 30 01:11:22.401065 2026] [security2:error] [pid 270884:tid 271097] [client 130.131.227.119:2374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/zup.php"] [unique_id "ary2GiGeq9LtYp4zuPOyygAAAE4"]
[Wed Sep 30 01:11:22.407469 2026] [security2:error] [pid 270884:tid 271114] [client 52.172.226.14:18641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/filemanager/dialog.php"] [unique_id "ary2GiGeq9LtYp4zuPOyywAAAF8"]
[Wed Sep 30 01:11:22.415983 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.416406 2026] [access_compat:error] [pid 270884:tid 271071] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.456242 2026] [security2:error] [pid 270884:tid 271078] [client 43.104.4.227:49516] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/ui/slider.min.js"] [unique_id "ary2GiGeq9LtYp4zuPOyzAAAADs"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:22.464081 2026] [security2:error] [pid 276059:tid 276228] [client 13.70.4.78:19723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/alfa.php"] [unique_id "ary2GntqdHBwD77138e4fAAAAbA"]
[Wed Sep 30 01:11:22.469905 2026] [security2:error] [pid 270884:tid 271019] [client 20.214.191.94:61457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/images.php"] [unique_id "ary2GiGeq9LtYp4zuPOyzQAAAAA"]
[Wed Sep 30 01:11:22.495129 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.495430 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:27802] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.501220 2026] [security2:error] [pid 270884:tid 271121] [client 49.43.163.212:51753] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOy0AAAAGY"]
[Wed Sep 30 01:11:22.501378 2026] [security2:error] [pid 270884:tid 271121] [client 49.43.163.212:51753] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOy0AAAAGY"]
[Wed Sep 30 01:11:22.530756 2026] [autoindex:error] [pid 270884:tid 271132] [client 20.162.8.144:0] AH01276: Cannot serve directory /home2/medredis/public_html/jkyn/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:22.576198 2026] [security2:error] [pid 270884:tid 271091] [client 216.73.216.46:27802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2GiGeq9LtYp4zuPOy1gAAAEg"]
[Wed Sep 30 01:11:22.581189 2026] [security2:error] [pid 270884:tid 271033] [client 130.131.227.119:59587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/a9.php"] [unique_id "ary2GiGeq9LtYp4zuPOy1wAAAA4"]
[Wed Sep 30 01:11:22.612607 2026] [qos:error] [pid 276620:tid 276637] [remote 37.120.113.242:64673] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=37.120.113.242, id=ary2GtPAdfEWqmGIkg1jrwACIAc
[Wed Sep 30 01:11:22.653514 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:22.653793 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:22.656310 2026] [security2:error] [pid 276620:tid 276845] [client 168.100.149.0:23820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d4cba801c7d188c3e97984d995f24305.664.css.gz"] [unique_id "ary2GtPAdfEWqmGIkg1jsgACakI"]
[Wed Sep 30 01:11:22.658216 2026] [security2:error] [pid 270884:tid 271032] [client 13.70.1.101:45871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2GiGeq9LtYp4zuPOy2wAAAA0"]
[Wed Sep 30 01:11:22.676215 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.676491 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.677586 2026] [security2:error] [pid 270884:tid 271132] [client 20.70.173.30:64229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp-login.php"] [unique_id "ary2GiGeq9LtYp4zuPOy3gAAAHE"]
[Wed Sep 30 01:11:22.696445 2026] [security2:error] [pid 270884:tid 270978] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2GiGeq9LtYp4zuPOy4AAABVg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300854&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:11:22.696470 2026] [security2:error] [pid 270884:tid 270978] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2GiGeq9LtYp4zuPOy4AAABVg"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300854&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:11:22.705096 2026] [security2:error] [pid 270884:tid 271101] [client 182.69.182.151:2500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOy4QAAAFI"]
[Wed Sep 30 01:11:22.705763 2026] [security2:error] [pid 270884:tid 271101] [client 182.69.182.151:2500] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOy4QAAAFI"]
[Wed Sep 30 01:11:22.733178 2026] [security2:error] [pid 270884:tid 271128] [client 20.219.19.141:28025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2GiGeq9LtYp4zuPOy4wAAAG0"]
[Wed Sep 30 01:11:22.741433 2026] [security2:error] [pid 270884:tid 271058] [client 43.104.4.227:49516] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js"] [unique_id "ary2GiGeq9LtYp4zuPOy5AAAACc"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:22.745035 2026] [security2:error] [pid 270884:tid 271097] [client 20.214.191.94:61465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ops.php"] [unique_id "ary2GiGeq9LtYp4zuPOy5QAAAE4"]
[Wed Sep 30 01:11:22.766987 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.767257 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.784004 2026] [security2:error] [pid 270884:tid 271026] [client 130.131.227.119:6358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/admin/index.php"] [unique_id "ary2GiGeq9LtYp4zuPOy6gAAAAc"]
[Wed Sep 30 01:11:22.800998 2026] [security2:error] [pid 270884:tid 271019] [client 13.70.4.78:19727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2GiGeq9LtYp4zuPOy7AAAAAA"]
[Wed Sep 30 01:11:22.802962 2026] [security2:error] [pid 270884:tid 270916] [remote 57.141.14.103:50426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "ary2GiGeq9LtYp4zuPOy5gAAXx4"]
[Wed Sep 30 01:11:22.808158 2026] [security2:error] [pid 270884:tid 271121] [client 191.107.237.50:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2GiGeq9LtYp4zuPOy7QAAAGY"]
[Wed Sep 30 01:11:22.858220 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.858560 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:22.870848 2026] [security2:error] [pid 270884:tid 271098] [client 52.172.226.14:12602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/index/function.php"] [unique_id "ary2GiGeq9LtYp4zuPOy7wAAAE8"]
[Wed Sep 30 01:11:22.944307 2026] [security2:error] [pid 270884:tid 271091] [client 130.131.227.119:59636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/makeasmtp.php"] [unique_id "ary2GiGeq9LtYp4zuPOy9wAAAEg"]
[Wed Sep 30 01:11:22.951563 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:22.952038 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.010804 2026] [security2:error] [pid 270884:tid 271098] [client 20.214.191.94:46985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/mac.php"] [unique_id "ary2GyGeq9LtYp4zuPOy_AAAAE8"]
[Wed Sep 30 01:11:23.051002 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.051465 2026] [access_compat:error] [pid 270884:tid 271094] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.060626 2026] [qos:error] [pid 270884:tid 270922] [remote 187.188.243.83:7689] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=187.188.243.83, id=ary2GyGeq9LtYp4zuPOzAQAARiQ
[Wed Sep 30 01:11:23.071742 2026] [qos:error] [pid 270884:tid 270912] [remote 92.211.0.128:55542] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=92.211.0.128, id=ary2GyGeq9LtYp4zuPOzAgAACRo
[Wed Sep 30 01:11:23.104748 2026] [security2:error] [pid 270884:tid 271112] [client 43.104.4.227:49516] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary2GyGeq9LtYp4zuPOzBAAAAF0"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:23.119790 2026] [security2:error] [pid 276059:tid 276307] [client 130.131.227.119:51771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/paku.php"] [unique_id "ary2G3tqdHBwD77138e4gAAAAf8"]
[Wed Sep 30 01:11:23.131293 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.131537 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.143869 2026] [security2:error] [pid 270884:tid 271114] [client 13.70.4.78:19762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/b8.php"] [unique_id "ary2GyGeq9LtYp4zuPOzCQAAAF8"]
[Wed Sep 30 01:11:23.151046 2026] [access_compat:error] [pid 270884:tid 271089] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:23.151302 2026] [access_compat:error] [pid 270884:tid 271089] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:23.151889 2026] [security2:error] [pid 270884:tid 271091] [client 103.168.67.253:32092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2GyGeq9LtYp4zuPOzCwAAAEg"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:23.197585 2026] [security2:error] [pid 270884:tid 271032] [client 20.211.90.37:39616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/133.php"] [unique_id "ary2GyGeq9LtYp4zuPOzDQAAAA0"]
[Wed Sep 30 01:11:23.228580 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.229032 2026] [access_compat:error] [pid 270884:tid 271095] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.250470 2026] [security2:error] [pid 270884:tid 271096] [client 20.28.180.172:62389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-content/radio.php"] [unique_id "ary2GyGeq9LtYp4zuPOzEQAAAE0"]
[Wed Sep 30 01:11:23.264989 2026] [security2:error] [pid 270884:tid 271067] [client 13.70.1.101:45881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/adminfuns.php"] [unique_id "ary2GyGeq9LtYp4zuPOzEgAAADA"]
[Wed Sep 30 01:11:23.283331 2026] [security2:error] [pid 276620:tid 276874] [client 20.214.191.94:61484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/pass4.php"] [unique_id "ary2G9PAdfEWqmGIkg1juwAAAoc"]
[Wed Sep 30 01:11:23.302427 2026] [security2:error] [pid 270884:tid 271026] [client 20.219.19.141:28026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2GyGeq9LtYp4zuPOzEwAAAAc"]
[Wed Sep 30 01:11:23.315721 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.316029 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.341068 2026] [security2:error] [pid 270884:tid 271114] [client 52.172.226.14:12553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary2GyGeq9LtYp4zuPOzFQAAAF8"]
[Wed Sep 30 01:11:23.344552 2026] [security2:error] [pid 270884:tid 271097] [client 130.131.227.119:51715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/rtx.php"] [unique_id "ary2GyGeq9LtYp4zuPOzFgAAAE4"]
[Wed Sep 30 01:11:23.400870 2026] [security2:error] [pid 276059:tid 276203] [client 20.219.2.60:30055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/grsiuk.php"] [unique_id "ary2G3tqdHBwD77138e4ggAAAZg"]
[Wed Sep 30 01:11:23.422693 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.423315 2026] [access_compat:error] [pid 270884:tid 271019] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.445848 2026] [qos:error] [pid 270884:tid 270992] [remote 80.236.67.245:39724] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=80.236.67.245, id=ary2GyGeq9LtYp4zuPOzGAAACmY
[Wed Sep 30 01:11:23.498575 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.498883 2026] [access_compat:error] [pid 270884:tid 271085] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.533823 2026] [security2:error] [pid 270884:tid 271078] [client 130.131.227.119:6379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/update/da222.php"] [unique_id "ary2GyGeq9LtYp4zuPOzHQAAADs"]
[Wed Sep 30 01:11:23.576012 2026] [security2:error] [pid 270884:tid 271048] [client 20.214.191.94:61494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/drttewyh.php"] [unique_id "ary2GyGeq9LtYp4zuPOzJQAAAB0"]
[Wed Sep 30 01:11:23.578519 2026] [security2:error] [pid 276059:tid 276261] [client 13.70.4.78:20431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/xex.php"] [unique_id "ary2G3tqdHBwD77138e4hAAAAdE"]
[Wed Sep 30 01:11:23.580767 2026] [qos:error] [pid 270884:tid 271026] [client 72.89.18.74:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2GyGeq9LtYp4zuPOzJgAAAAc
[Wed Sep 30 01:11:23.592818 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.593228 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.628638 2026] [security2:error] [pid 270884:tid 271019] [client 13.70.1.101:38448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/alfa.php"] [unique_id "ary2GyGeq9LtYp4zuPOzKAAAAAA"]
[Wed Sep 30 01:11:23.672712 2026] [security2:error] [pid 270884:tid 271024] [client 20.219.19.141:21069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/gu.php"] [unique_id "ary2GyGeq9LtYp4zuPOzLAAAAAU"]
[Wed Sep 30 01:11:23.679014 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.679473 2026] [access_compat:error] [pid 270884:tid 271048] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.679758 2026] [access_compat:error] [pid 270884:tid 271095] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:23.680189 2026] [access_compat:error] [pid 270884:tid 271095] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:23.737525 2026] [security2:error] [pid 270884:tid 271128] [client 4.240.25.22:38768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/admin.php"] [unique_id "ary2GyGeq9LtYp4zuPOzLwAAAG0"]
[Wed Sep 30 01:11:23.754968 2026] [security2:error] [pid 270884:tid 271089] [client 130.131.227.119:59599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/min.php"] [unique_id "ary2GyGeq9LtYp4zuPOzMAAAAEY"]
[Wed Sep 30 01:11:23.771673 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.772014 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.803120 2026] [security2:error] [pid 270884:tid 271032] [client 52.172.226.14:46742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary2GyGeq9LtYp4zuPOzMwAAAA0"]
[Wed Sep 30 01:11:23.825956 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.19.141:27921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/adminfuns.php"] [unique_id "ary2GyGeq9LtYp4zuPOzNAAAAAA"]
[Wed Sep 30 01:11:23.835962 2026] [security2:error] [pid 276059:tid 276312] [client 4.240.25.22:41714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/bthil.php"] [unique_id "ary2G3tqdHBwD77138e4iQAAAgQ"]
[Wed Sep 30 01:11:23.839118 2026] [security2:error] [pid 270884:tid 271139] [client 20.214.191.94:58851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/sh.php"] [unique_id "ary2GyGeq9LtYp4zuPOzOAAAAHg"]
[Wed Sep 30 01:11:23.857348 2026] [security2:error] [pid 276059:tid 276304] [client 20.219.2.60:11358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-kikikoko.php"] [unique_id "ary2G3tqdHBwD77138e4igAAAfw"]
[Wed Sep 30 01:11:23.864728 2026] [security2:error] [pid 276620:tid 276855] [client 43.227.131.37:6523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2G9PAdfEWqmGIkg1jvwAAAnQ"]
[Wed Sep 30 01:11:23.864859 2026] [security2:error] [pid 276620:tid 276855] [client 43.227.131.37:6523] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2G9PAdfEWqmGIkg1jvwAAAnQ"]
[Wed Sep 30 01:11:23.866407 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.866652 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:23.884335 2026] [access_compat:error] [pid 270884:tid 271121] [client 47.79.205.240:16438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:11:23.884646 2026] [access_compat:error] [pid 270884:tid 271121] [client 47.79.205.240:16438] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:11:23.910946 2026] [security2:error] [pid 270884:tid 271097] [client 130.131.227.119:15585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "ary2GyGeq9LtYp4zuPOzPgAAAE4"]
[Wed Sep 30 01:11:23.957470 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:23.957733 2026] [access_compat:error] [pid 270884:tid 271114] [client 216.73.216.46:29545] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.015931 2026] [security2:error] [pid 276059:tid 276299] [client 13.70.4.78:20426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/ass.php"] [unique_id "ary2HHtqdHBwD77138e4jAAAAfc"]
[Wed Sep 30 01:11:24.065772 2026] [security2:error] [pid 270884:tid 271033] [client 13.70.1.101:21395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/222.php"] [unique_id "ary2HCGeq9LtYp4zuPOzRQAAAA4"]
[Wed Sep 30 01:11:24.088155 2026] [security2:error] [pid 276620:tid 276863] [client 130.131.227.119:15614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/themes/min.php"] [unique_id "ary2HNPAdfEWqmGIkg1jwgAAAnw"]
[Wed Sep 30 01:11:24.117962 2026] [access_compat:error] [pid 270884:tid 271098] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:24.118249 2026] [access_compat:error] [pid 270884:tid 271098] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:24.120308 2026] [security2:error] [pid 270884:tid 271019] [client 20.214.191.94:58819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/groud1.php"] [unique_id "ary2HCGeq9LtYp4zuPOzRwAAAAA"]
[Wed Sep 30 01:11:24.136967 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:42523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.137249 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:42523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.137938 2026] [security2:error] [pid 270884:tid 271067] [client 20.28.180.172:18117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/155.php"] [unique_id "ary2HCGeq9LtYp4zuPOzSAAAADA"]
[Wed Sep 30 01:11:24.156146 2026] [security2:error] [pid 270884:tid 271123] [client 103.211.18.63:59046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2HCGeq9LtYp4zuPOzSgAAAGg"]
[Wed Sep 30 01:11:24.156297 2026] [security2:error] [pid 270884:tid 271123] [client 103.211.18.63:59046] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2HCGeq9LtYp4zuPOzSgAAAGg"]
[Wed Sep 30 01:11:24.163257 2026] [security2:error] [pid 276620:tid 276885] [client 212.156.70.154:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "webdisk.chizlaw.com"] [uri "/___proxy_subdomain_webdisk/___proxy_subdomain_webdisk/"] [unique_id "ary2HNPAdfEWqmGIkg1jxQAAApI"]
[Wed Sep 30 01:11:24.192788 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.193159 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.201147 2026] [security2:error] [pid 270884:tid 271058] [client 4.240.25.22:33216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/well.php"] [unique_id "ary2HCGeq9LtYp4zuPOzTAAAACc"]
[Wed Sep 30 01:11:24.204706 2026] [security2:error] [pid 276620:tid 276793] [client 201.32.215.149:5190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2HNPAdfEWqmGIkg1jxwAAAjY"]
[Wed Sep 30 01:11:24.204804 2026] [security2:error] [pid 276620:tid 276793] [client 201.32.215.149:5190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2HNPAdfEWqmGIkg1jxwAAAjY"]
[Wed Sep 30 01:11:24.224723 2026] [security2:error] [pid 270884:tid 271061] [client 216.73.216.46:29545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2HCGeq9LtYp4zuPOzTgAAACo"]
[Wed Sep 30 01:11:24.264841 2026] [security2:error] [pid 276620:tid 276876] [client 52.172.226.14:18642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary2HNPAdfEWqmGIkg1jyQAAAok"]
[Wed Sep 30 01:11:24.273181 2026] [security2:error] [pid 270884:tid 271096] [client 130.131.227.119:51773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "ary2HCGeq9LtYp4zuPOzUQAAAE0"]
[Wed Sep 30 01:11:24.302872 2026] [qos:error] [pid 270884:tid 271114] [client 80.0.171.233:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2HCGeq9LtYp4zuPOzUwAAAF8
[Wed Sep 30 01:11:24.323298 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.323554 2026] [access_compat:error] [pid 270884:tid 271098] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.333254 2026] [qos:error] [pid 276620:tid 276681] [remote 172.56.219.236:11531] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.56.219.236, id=ary2HNPAdfEWqmGIkg1jygACjTM
[Wed Sep 30 01:11:24.344865 2026] [security2:error] [pid 276620:tid 276801] [client 20.211.90.37:39959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/ano.php"] [unique_id "ary2HNPAdfEWqmGIkg1jywAAAj4"]
[Wed Sep 30 01:11:24.376549 2026] [security2:error] [pid 276059:tid 276282] [client 13.70.4.78:20430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wsd.php"] [unique_id "ary2HHtqdHBwD77138e4jQAAAeY"]
[Wed Sep 30 01:11:24.411782 2026] [security2:error] [pid 270884:tid 271033] [client 20.214.191.94:61475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/bro.php"] [unique_id "ary2HCGeq9LtYp4zuPOzWgAAAA4"]
[Wed Sep 30 01:11:24.418572 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.418999 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.419219 2026] [security2:error] [pid 276620:tid 276766] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/"] [unique_id "ary2HNPAdfEWqmGIkg1jzAAAAhs"]
[Wed Sep 30 01:11:24.439942 2026] [security2:error] [pid 270884:tid 271028] [client 20.194.30.107:17344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/sym.php"] [unique_id "ary2HCGeq9LtYp4zuPOzXQAAAAk"]
[Wed Sep 30 01:11:24.442608 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.19.141:27969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/av.php"] [unique_id "ary2HCGeq9LtYp4zuPOzXwAAAE0"]
[Wed Sep 30 01:11:24.450899 2026] [qos:error] [pid 276620:tid 276632] [remote 189.133.210.197:56888] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.133.210.197, id=ary2HNPAdfEWqmGIkg1jzQACPQI
[Wed Sep 30 01:11:24.459508 2026] [security2:error] [pid 270884:tid 271067] [client 103.168.67.253:32098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2HCGeq9LtYp4zuPOzYAAAADA"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:24.495956 2026] [security2:error] [pid 270884:tid 271123] [client 13.70.1.101:42707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2HCGeq9LtYp4zuPOzYwAAAGg"]
[Wed Sep 30 01:11:24.505887 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.506197 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.533542 2026] [security2:error] [pid 270884:tid 271139] [client 130.131.227.119:2427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ary2HCGeq9LtYp4zuPOzZAAAAHg"]
[Wed Sep 30 01:11:24.595211 2026] [qos:error] [pid 270884:tid 270997] [remote 74.117.87.157:40819] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=74.117.87.157, id=ary2HCGeq9LtYp4zuPOzaQAAOWs
[Wed Sep 30 01:11:24.597418 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:42523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.597678 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:42523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.625871 2026] [security2:error] [pid 276620:tid 276834] [client 116.193.128.26:60601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2HNPAdfEWqmGIkg1j0wAAAl8"]
[Wed Sep 30 01:11:24.626029 2026] [security2:error] [pid 276620:tid 276834] [client 116.193.128.26:60601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2HNPAdfEWqmGIkg1j0wAAAl8"]
[Wed Sep 30 01:11:24.650469 2026] [security2:error] [pid 270884:tid 271061] [client 168.100.149.134:58392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/55b60a3389f19c34d57922ff9d90cb81.3395.css.gz"] [unique_id "ary2HCGeq9LtYp4zuPOzawAAKiY"]
[Wed Sep 30 01:11:24.704958 2026] [security2:error] [pid 270884:tid 271123] [client 130.131.227.119:15583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-info.php"] [unique_id "ary2HCGeq9LtYp4zuPOzbgAAAGg"]
[Wed Sep 30 01:11:24.705991 2026] [security2:error] [pid 270884:tid 271058] [client 20.214.191.94:58850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ac83.php"] [unique_id "ary2HCGeq9LtYp4zuPOzbwAAACc"]
[Wed Sep 30 01:11:24.719257 2026] [security2:error] [pid 276620:tid 276722] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HNPAdfEWqmGIkg1j1AACMlw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=98785
[Wed Sep 30 01:11:24.719284 2026] [security2:error] [pid 276620:tid 276722] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HNPAdfEWqmGIkg1j1AACMlw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=98785
[Wed Sep 30 01:11:24.727116 2026] [security2:error] [pid 270884:tid 271097] [client 52.172.226.14:12596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/about/function.php"] [unique_id "ary2HCGeq9LtYp4zuPOzcAAAAE4"]
[Wed Sep 30 01:11:24.740506 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.740879 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.756790 2026] [security2:error] [pid 270884:tid 270971] [remote 47.128.113.96:45442] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/1960/tii-for-nishan-e-haider-to-shaheed-aitzaz-hassan"] [unique_id "ary2HCGeq9LtYp4zuPOzcQAAUFE"]
[Wed Sep 30 01:11:24.762105 2026] [security2:error] [pid 276620:tid 276811] [client 13.70.4.78:19770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/BDKR28WP.php"] [unique_id "ary2HNPAdfEWqmGIkg1j1gAAAkg"]
[Wed Sep 30 01:11:24.812073 2026] [security2:error] [pid 276620:tid 276835] [client 85.89.223.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2HNPAdfEWqmGIkg1j1wAAAmA"]
[Wed Sep 30 01:11:24.840165 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.840650 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.848057 2026] [access_compat:error] [pid 276620:tid 276773] [client 132.196.86.13:37291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:24.848334 2026] [access_compat:error] [pid 276620:tid 276773] [client 132.196.86.13:37291] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:24.872477 2026] [security2:error] [pid 270884:tid 271094] [client 20.194.30.107:1753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-blog-header.php"] [unique_id "ary2HCGeq9LtYp4zuPOzdQAAAEs"]
[Wed Sep 30 01:11:24.895956 2026] [security2:error] [pid 270884:tid 271132] [client 130.131.227.119:51757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-wordfence-waf.php"] [unique_id "ary2HCGeq9LtYp4zuPOzdgAAAHE"]
[Wed Sep 30 01:11:24.925369 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.19.141:28016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/dex.php"] [unique_id "ary2HCGeq9LtYp4zuPOzeAAAAA4"]
[Wed Sep 30 01:11:24.925507 2026] [security2:error] [pid 270884:tid 271073] [client 20.219.19.141:20878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/nck.php"] [unique_id "ary2HCGeq9LtYp4zuPOzeQAAADY"]
[Wed Sep 30 01:11:24.927739 2026] [security2:error] [pid 276620:tid 276858] [client 13.70.1.101:45856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/images.php"] [unique_id "ary2HNPAdfEWqmGIkg1j2gAAAnc"]
[Wed Sep 30 01:11:24.934191 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:24.934625 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:24.960644 2026] [security2:error] [pid 276620:tid 276798] [client 216.73.216.46:42523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2HNPAdfEWqmGIkg1j2wAAAjs"]
[Wed Sep 30 01:11:25.000997 2026] [security2:error] [pid 270884:tid 271128] [client 20.214.191.94:58879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/class-wp-http-client.php"] [unique_id "ary2HSGeq9LtYp4zuPOzegAAAG0"]
[Wed Sep 30 01:11:25.004612 2026] [security2:error] [pid 276059:tid 276309] [client 4.240.25.22:8414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wpxml.php"] [unique_id "ary2HXtqdHBwD77138e4jwAAAgE"]
[Wed Sep 30 01:11:25.051438 2026] [security2:error] [pid 276620:tid 276813] [client 116.197.133.25:59915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2HdPAdfEWqmGIkg1j3QAAAko"]
[Wed Sep 30 01:11:25.051548 2026] [security2:error] [pid 276620:tid 276813] [client 116.197.133.25:59915] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2HdPAdfEWqmGIkg1j3QAAAko"]
[Wed Sep 30 01:11:25.068299 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.068763 2026] [access_compat:error] [pid 270884:tid 271132] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.072740 2026] [security2:error] [pid 270884:tid 271121] [client 130.131.227.119:2409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/ws49.php"] [unique_id "ary2HSGeq9LtYp4zuPOzhAAAAGY"]
[Wed Sep 30 01:11:25.118885 2026] [security2:error] [pid 276059:tid 276274] [client 13.70.4.78:19763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wmore1.php"] [unique_id "ary2HXtqdHBwD77138e4kwAAAd4"]
[Wed Sep 30 01:11:25.124793 2026] [security2:error] [pid 270884:tid 271028] [client 20.28.180.172:34253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/faze.php"] [unique_id "ary2HSGeq9LtYp4zuPOziAAAAAk"]
[Wed Sep 30 01:11:25.125680 2026] [security2:error] [pid 270884:tid 271098] [client 155.190.6.18:39150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2HSGeq9LtYp4zuPOziQAAAE8"]
[Wed Sep 30 01:11:25.159326 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.159585 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.198190 2026] [security2:error] [pid 276059:tid 276302] [client 52.172.226.14:29771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary2HXtqdHBwD77138e4mAAAAfo"]
[Wed Sep 30 01:11:25.204938 2026] [security2:error] [pid 276620:tid 276839] [client 106.214.2.47:30585] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2HdPAdfEWqmGIkg1j4AAAAmQ"]
[Wed Sep 30 01:11:25.210768 2026] [security2:error] [pid 276620:tid 276839] [client 106.214.2.47:30585] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2HdPAdfEWqmGIkg1j4AAAAmQ"]
[Wed Sep 30 01:11:25.234801 2026] [security2:error] [pid 276059:tid 276317] [client 130.131.227.119:51655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/xxx.php"] [unique_id "ary2HXtqdHBwD77138e4mQAAAgk"]
[Wed Sep 30 01:11:25.259037 2026] [security2:error] [pid 276059:tid 276222] [client 20.70.173.30:37149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/8.php"] [unique_id "ary2HXtqdHBwD77138e4mgAAAao"]
[Wed Sep 30 01:11:25.262876 2026] [security2:error] [pid 276059:tid 276303] [client 20.214.191.94:58860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/zoo2.php"] [unique_id "ary2HXtqdHBwD77138e4mwAAAfs"]
[Wed Sep 30 01:11:25.298019 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:25.298279 2026] [access_compat:error] [pid 270884:tid 271123] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:25.300014 2026] [security2:error] [pid 276620:tid 276790] [client 20.198.74.230:23576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/df.php"] [unique_id "ary2HdPAdfEWqmGIkg1j4wAAAjM"]
[Wed Sep 30 01:11:25.307680 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.308115 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.341505 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.341756 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.399243 2026] [security2:error] [pid 270884:tid 271098] [client 155.190.6.18:39150] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2HSGeq9LtYp4zuPOziQAAAE8"]
[Wed Sep 30 01:11:25.415929 2026] [security2:error] [pid 276620:tid 276829] [client 130.131.227.119:2431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/0x.php"] [unique_id "ary2HdPAdfEWqmGIkg1j5gAAAlo"]
[Wed Sep 30 01:11:25.438090 2026] [security2:error] [pid 276059:tid 276246] [client 20.219.19.141:27976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/chosen.php"] [unique_id "ary2HXtqdHBwD77138e4ngAAAcI"]
[Wed Sep 30 01:11:25.449539 2026] [security2:error] [pid 270884:tid 271094] [client 20.211.90.37:39892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/sf.php"] [unique_id "ary2HSGeq9LtYp4zuPOzkgAAAEs"]
[Wed Sep 30 01:11:25.451700 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.456686 2026] [access_compat:error] [pid 270884:tid 271112] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.540410 2026] [security2:error] [pid 270884:tid 271109] [client 13.70.1.101:45880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/media.php"] [unique_id "ary2HSGeq9LtYp4zuPOzmgAAAFo"]
[Wed Sep 30 01:11:25.570817 2026] [security2:error] [pid 270884:tid 271029] [client 13.70.4.78:19722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/z60.php"] [unique_id "ary2HSGeq9LtYp4zuPOznAAAAAo"]
[Wed Sep 30 01:11:25.578739 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.579006 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.587526 2026] [security2:error] [pid 270884:tid 271076] [client 130.131.227.119:6373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/CDX1.php"] [unique_id "ary2HSGeq9LtYp4zuPOzngAAADk"]
[Wed Sep 30 01:11:25.587863 2026] [qos:error] [pid 270884:tid 271010] [remote 78.33.99.93:36950] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=78.33.99.93, id=ary2HSGeq9LtYp4zuPOznwAAB3g
[Wed Sep 30 01:11:25.602560 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.191.94:61503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/zoo1.php"] [unique_id "ary2HdPAdfEWqmGIkg1j6QAAAl0"]
[Wed Sep 30 01:11:25.613995 2026] [security2:error] [pid 276620:tid 276864] [client 20.204.42.136:35788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/bhigtouj.php"] [unique_id "ary2HdPAdfEWqmGIkg1j6gAAAn0"]
[Wed Sep 30 01:11:25.625762 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.626019 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.660733 2026] [security2:error] [pid 270884:tid 271128] [client 103.168.67.253:52942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2HSGeq9LtYp4zuPOzoQAAAG0"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:25.670767 2026] [security2:error] [pid 270884:tid 271109] [client 52.172.226.14:12567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/admin/function.php"] [unique_id "ary2HSGeq9LtYp4zuPOzogAAAFo"]
[Wed Sep 30 01:11:25.725540 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.726001 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.729904 2026] [security2:error] [pid 270884:tid 271067] [client 43.104.4.198:9490] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary2HSGeq9LtYp4zuPOzowAAADA"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:11:25.768867 2026] [security2:error] [pid 270884:tid 271121] [client 20.219.2.60:30061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-act.php"] [unique_id "ary2HSGeq9LtYp4zuPOzpAAAAGY"]
[Wed Sep 30 01:11:25.771286 2026] [security2:error] [pid 270884:tid 271061] [client 130.131.227.119:15577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/akcc.php"] [unique_id "ary2HSGeq9LtYp4zuPOzpQAAACo"]
[Wed Sep 30 01:11:25.781790 2026] [security2:error] [pid 276059:tid 276277] [client 152.56.240.85:63338] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2HXtqdHBwD77138e4owAAAeE"]
[Wed Sep 30 01:11:25.781925 2026] [security2:error] [pid 276059:tid 276277] [client 152.56.240.85:63338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2HXtqdHBwD77138e4owAAAeE"]
[Wed Sep 30 01:11:25.801698 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:25.802069 2026] [access_compat:error] [pid 270884:tid 271028] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:25.805912 2026] [security2:error] [pid 270884:tid 271019] [client 43.104.4.193:6007] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary2HSGeq9LtYp4zuPOzpwAAAAA"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:11:25.815379 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.815646 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.851391 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HSGeq9LtYp4zuPOzqgAAORg"], referer: https://torquayfans.com/viewtopic.php?p=236176
[Wed Sep 30 01:11:25.851433 2026] [security2:error] [pid 270884:tid 270910] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HSGeq9LtYp4zuPOzqgAAORg"], referer: https://torquayfans.com/viewtopic.php?p=236176
[Wed Sep 30 01:11:25.906717 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:25.906998 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:25.907767 2026] [security2:error] [pid 270884:tid 271128] [client 20.194.30.107:17426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/blurbs.php"] [unique_id "ary2HSGeq9LtYp4zuPOzqwAAAG0"]
[Wed Sep 30 01:11:25.925870 2026] [security2:error] [pid 270884:tid 271041] [client 13.70.4.78:19715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/24.php"] [unique_id "ary2HSGeq9LtYp4zuPOzrAAAABY"]
[Wed Sep 30 01:11:25.931083 2026] [security2:error] [pid 270884:tid 271048] [client 130.131.227.119:51659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ary2HSGeq9LtYp4zuPOzrQAAAB0"]
[Wed Sep 30 01:11:25.934107 2026] [security2:error] [pid 270884:tid 271132] [client 20.214.191.94:61467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/class-ajax.php"] [unique_id "ary2HSGeq9LtYp4zuPOzrgAAAHE"]
[Wed Sep 30 01:11:25.935377 2026] [security2:error] [pid 276059:tid 276310] [client 20.194.96.176:25411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wander.php"] [unique_id "ary2HXtqdHBwD77138e4pAAAAgI"]
[Wed Sep 30 01:11:25.987954 2026] [security2:error] [pid 276620:tid 276886] [client 13.70.1.101:45842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/mac.php"] [unique_id "ary2HdPAdfEWqmGIkg1j8gAAApM"]
[Wed Sep 30 01:11:26.007750 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.008098 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.019654 2026] [qos:error] [pid 276620:tid 276687] [remote 71.82.29.29:49848] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.82.29.29, id=ary2HtPAdfEWqmGIkg1j9AACVzk
[Wed Sep 30 01:11:26.019997 2026] [security2:error] [pid 270884:tid 271099] [client 20.219.19.141:27916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/radio.php"] [unique_id "ary2HiGeq9LtYp4zuPOzsgAAAFA"]
[Wed Sep 30 01:11:26.065980 2026] [security2:error] [pid 270884:tid 271078] [client 65.111.23.61:58703] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2HSGeq9LtYp4zuPOzrwAAADs"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:26.096091 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.096356 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.121767 2026] [security2:error] [pid 270884:tid 271098] [client 130.131.227.119:2369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/s.php"] [unique_id "ary2HiGeq9LtYp4zuPOzuAAAAE8"]
[Wed Sep 30 01:11:26.135315 2026] [security2:error] [pid 276620:tid 276776] [client 52.172.226.14:18674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/9.php"] [unique_id "ary2HtPAdfEWqmGIkg1j9wAAAiU"]
[Wed Sep 30 01:11:26.151973 2026] [security2:error] [pid 270884:tid 271096] [client 93.71.65.152:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2HiGeq9LtYp4zuPOzvQAAAE0"]
[Wed Sep 30 01:11:26.187170 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.187444 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.211955 2026] [security2:error] [pid 270884:tid 271061] [client 20.219.19.141:20921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/xtt.php"] [unique_id "ary2HiGeq9LtYp4zuPOzwgAAACo"]
[Wed Sep 30 01:11:26.276284 2026] [security2:error] [pid 270884:tid 271112] [client 13.70.4.78:20425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/xxw.php"] [unique_id "ary2HiGeq9LtYp4zuPOzxQAAAF0"]
[Wed Sep 30 01:11:26.281695 2026] [qos:error] [pid 270884:tid 270975] [remote 86.120.188.42:55406] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.120.188.42, id=ary2HiGeq9LtYp4zuPOzxgAAX1U
[Wed Sep 30 01:11:26.287484 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.287770 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.293113 2026] [security2:error] [pid 270884:tid 271121] [client 130.131.227.119:2400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/sagax.php"] [unique_id "ary2HiGeq9LtYp4zuPOzyAAAAGY"]
[Wed Sep 30 01:11:26.296330 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:26.296589 2026] [access_compat:error] [pid 270884:tid 271085] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:26.345356 2026] [qos:error] [pid 270884:tid 270903] [remote 212.69.136.184:56942] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=212.69.136.184, id=ary2HiGeq9LtYp4zuPOzyQAAUBE
[Wed Sep 30 01:11:26.388159 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.388616 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.475983 2026] [security2:error] [pid 276059:tid 276276] [client 20.214.191.94:61448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/gm.php"] [unique_id "ary2HntqdHBwD77138e4pgAAAeA"]
[Wed Sep 30 01:11:26.480212 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.480652 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.499948 2026] [security2:error] [pid 276059:tid 276267] [client 130.131.227.119:6371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ary2HntqdHBwD77138e4pwAAAdc"]
[Wed Sep 30 01:11:26.548931 2026] [security2:error] [pid 270884:tid 271029] [client 45.138.12.32:33368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kyk.cbe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2HiGeq9LtYp4zuPOz0gAAAAo"]
[Wed Sep 30 01:11:26.555773 2026] [security2:error] [pid 270884:tid 271048] [client 13.70.1.101:45862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ops.php"] [unique_id "ary2HiGeq9LtYp4zuPOz1QAAAB0"]
[Wed Sep 30 01:11:26.559768 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.560058 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.594780 2026] [security2:error] [pid 270884:tid 271047] [client 52.172.226.14:12572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary2HiGeq9LtYp4zuPOz1wAAABw"]
[Wed Sep 30 01:11:26.616828 2026] [security2:error] [pid 270884:tid 271049] [client 13.70.4.78:19766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/bnmtp.php"] [unique_id "ary2HiGeq9LtYp4zuPOz2AAAAB4"]
[Wed Sep 30 01:11:26.619154 2026] [security2:error] [pid 276620:tid 276866] [client 20.219.19.141:27983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wp_blog_footer.php"] [unique_id "ary2HtPAdfEWqmGIkg1kAwAAAn8"]
[Wed Sep 30 01:11:26.621124 2026] [security2:error] [pid 270884:tid 270949] [remote 2a03:2880:f814:36:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HiGeq9LtYp4zuPOz2QAASz8"]
[Wed Sep 30 01:11:26.621142 2026] [security2:error] [pid 270884:tid 270949] [remote 2a03:2880:f814:36:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2HiGeq9LtYp4zuPOz2QAASz8"]
[Wed Sep 30 01:11:26.655350 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.655609 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.661992 2026] [security2:error] [pid 276620:tid 276879] [client 168.100.149.56:58380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/79856810601f8ba397d7e2c7b2bf1a95.2f6b.css.gz"] [unique_id "ary2HtPAdfEWqmGIkg1kBQACjEA"]
[Wed Sep 30 01:11:26.700854 2026] [authz_core:error] [pid 270884:tid 271085] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Wed Sep 30 01:11:26.735366 2026] [security2:error] [pid 270884:tid 271041] [client 20.28.180.172:18313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-the.php"] [unique_id "ary2HiGeq9LtYp4zuPOz4gAAABY"]
[Wed Sep 30 01:11:26.747858 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.748110 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.759101 2026] [security2:error] [pid 276620:tid 276824] [client 130.131.227.119:51721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "ary2HtPAdfEWqmGIkg1kCAAAAlU"]
[Wed Sep 30 01:11:26.835714 2026] [access_compat:error] [pid 270884:tid 271046] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:26.836042 2026] [access_compat:error] [pid 270884:tid 271046] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:26.846926 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.847201 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.855978 2026] [security2:error] [pid 270884:tid 271061] [client 20.214.191.94:61487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/class-wp-site-list.php"] [unique_id "ary2HiGeq9LtYp4zuPOz6QAAACo"]
[Wed Sep 30 01:11:26.926143 2026] [security2:error] [pid 270884:tid 271119] [client 13.70.1.101:45884] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.domakshelter.com"] [uri "/1.php"] [unique_id "ary2HiGeq9LtYp4zuPOz7AAAAGQ"]
[Wed Sep 30 01:11:26.926265 2026] [security2:error] [pid 270884:tid 271119] [client 13.70.1.101:45884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/1.php"] [unique_id "ary2HiGeq9LtYp4zuPOz7AAAAGQ"]
[Wed Sep 30 01:11:26.936822 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:26.937140 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:26.956667 2026] [security2:error] [pid 270884:tid 271109] [client 13.70.4.78:20449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/ebkid.php"] [unique_id "ary2HiGeq9LtYp4zuPOz7QAAAFo"]
[Wed Sep 30 01:11:26.991295 2026] [security2:error] [pid 276620:tid 276818] [client 130.131.227.119:51738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/z.php"] [unique_id "ary2HtPAdfEWqmGIkg1kEgAAAk8"]
[Wed Sep 30 01:11:27.000427 2026] [security2:error] [pid 270884:tid 271041] [client 20.211.90.37:39940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/xx.php"] [unique_id "ary2HiGeq9LtYp4zuPOz7wAAABY"]
[Wed Sep 30 01:11:27.030971 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.031240 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.049987 2026] [security2:error] [pid 270884:tid 271028] [client 31.189.214.146:51984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2HyGeq9LtYp4zuPOz8gAAAAk"]
[Wed Sep 30 01:11:27.050117 2026] [security2:error] [pid 270884:tid 271028] [client 31.189.214.146:51984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2HyGeq9LtYp4zuPOz8gAAAAk"]
[Wed Sep 30 01:11:27.060352 2026] [security2:error] [pid 270884:tid 271049] [client 52.172.226.14:18457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/.well-known/log.php"] [unique_id "ary2HyGeq9LtYp4zuPOz9gAAAB4"]
[Wed Sep 30 01:11:27.102295 2026] [security2:error] [pid 270884:tid 271027] [client 20.70.173.30:56430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/b8.php"] [unique_id "ary2HyGeq9LtYp4zuPOz-AAAAAg"]
[Wed Sep 30 01:11:27.119447 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.119716 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.127628 2026] [security2:error] [pid 276620:tid 276839] [client 45.138.12.32:46266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.kox.sul.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2H9PAdfEWqmGIkg1kFgAAAmQ"]
[Wed Sep 30 01:11:27.202013 2026] [security2:error] [pid 270884:tid 271109] [client 130.131.227.119:51713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/f35.php"] [unique_id "ary2HyGeq9LtYp4zuPOz_QAAAFo"]
[Wed Sep 30 01:11:27.217174 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.217453 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.238582 2026] [security2:error] [pid 276620:tid 276825] [client 20.214.191.94:46996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/asd2.php"] [unique_id "ary2H9PAdfEWqmGIkg1kGQAAAlY"]
[Wed Sep 30 01:11:27.264534 2026] [security2:error] [pid 276059:tid 276273] [client 178.128.111.173:56648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "cochranlake.org"] [uri "/wp-login.php"] [unique_id "ary2HXtqdHBwD77138e4kQAAAd0"]
[Wed Sep 30 01:11:27.274131 2026] [security2:error] [pid 270884:tid 271112] [client 13.70.4.78:20432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/133.php"] [unique_id "ary2HyGeq9LtYp4zuPOz_wAAAF0"]
[Wed Sep 30 01:11:27.299930 2026] [access_compat:error] [pid 270884:tid 271048] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:27.300193 2026] [access_compat:error] [pid 270884:tid 271048] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:27.310531 2026] [security2:error] [pid 276620:tid 276838] [client 20.219.19.141:27918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/k.php"] [unique_id "ary2H9PAdfEWqmGIkg1kHAAAAmM"]
[Wed Sep 30 01:11:27.313565 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.313867 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.362363 2026] [security2:error] [pid 276059:tid 276307] [client 13.70.1.101:21029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/aaa.php"] [unique_id "ary2H3tqdHBwD77138e4qwAAAf8"]
[Wed Sep 30 01:11:27.375235 2026] [security2:error] [pid 276620:tid 276872] [client 130.131.227.119:15564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/file61.php"] [unique_id "ary2H9PAdfEWqmGIkg1kHgAAAoU"]
[Wed Sep 30 01:11:27.412533 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.412992 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.419230 2026] [security2:error] [pid 270884:tid 271108] [client 103.241.204.139:61389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2HyGeq9LtYp4zuPO0AgAAAFk"]
[Wed Sep 30 01:11:27.419380 2026] [security2:error] [pid 270884:tid 271108] [client 103.241.204.139:61389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2HyGeq9LtYp4zuPO0AgAAAFk"]
[Wed Sep 30 01:11:27.505884 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.506224 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:33831] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.516967 2026] [security2:error] [pid 270884:tid 271046] [client 167.160.164.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2HyGeq9LtYp4zuPO0CgAAABs"]
[Wed Sep 30 01:11:27.526214 2026] [security2:error] [pid 276059:tid 276203] [client 130.131.227.119:15593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/mah.php"] [unique_id "ary2H3tqdHBwD77138e4rwAAAZg"]
[Wed Sep 30 01:11:27.528107 2026] [security2:error] [pid 276059:tid 276319] [client 52.172.226.14:12576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/class.php"] [unique_id "ary2H3tqdHBwD77138e4sAAAAgs"]
[Wed Sep 30 01:11:27.563231 2026] [security2:error] [pid 276059:tid 276301] [client 20.28.180.172:29633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/mar.php"] [unique_id "ary2H3tqdHBwD77138e4sQAAAfk"]
[Wed Sep 30 01:11:27.577025 2026] [security2:error] [pid 276059:tid 276312] [client 4.240.25.22:38739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/inputs.php"] [unique_id "ary2H3tqdHBwD77138e4sgAAAgQ"]
[Wed Sep 30 01:11:27.578026 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.19.141:20816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dixonnapper.com.au"] [uri "/go.php"] [unique_id "ary2HyGeq9LtYp4zuPO0CwAAAEY"]
[Wed Sep 30 01:11:27.599165 2026] [security2:error] [pid 270884:tid 271027] [client 13.70.4.78:19745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/x33.php"] [unique_id "ary2HyGeq9LtYp4zuPO0DAAAAAg"]
[Wed Sep 30 01:11:27.616520 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.616785 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.662373 2026] [security2:error] [pid 270884:tid 271128] [client 20.214.191.94:47001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/cdc.php"] [unique_id "ary2HyGeq9LtYp4zuPO0EAAAAG0"]
[Wed Sep 30 01:11:27.697019 2026] [security2:error] [pid 276620:tid 276855] [client 130.131.227.119:51728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/mini.php"] [unique_id "ary2H9PAdfEWqmGIkg1kJwAAAnQ"]
[Wed Sep 30 01:11:27.714933 2026] [security2:error] [pid 276620:tid 276865] [client 20.28.180.172:18308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp5.php"] [unique_id "ary2H9PAdfEWqmGIkg1kKQAAAn4"]
[Wed Sep 30 01:11:27.717416 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.717688 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.809905 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.810166 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.822509 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:27.822951 2026] [access_compat:error] [pid 270884:tid 271132] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:27.856494 2026] [security2:error] [pid 270884:tid 271088] [client 130.131.227.119:59633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/v.php"] [unique_id "ary2HyGeq9LtYp4zuPO0FgAAAEU"]
[Wed Sep 30 01:11:27.860867 2026] [security2:error] [pid 270884:tid 271058] [client 103.168.67.253:52950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2HyGeq9LtYp4zuPO0FwAAACc"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:27.867861 2026] [security2:error] [pid 270884:tid 271073] [client 13.70.1.101:21047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/chosen.php"] [unique_id "ary2HyGeq9LtYp4zuPO0GAAAADY"]
[Wed Sep 30 01:11:27.899053 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.899360 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:27.940085 2026] [security2:error] [pid 270884:tid 271086] [client 13.70.4.78:19724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/cae.php"] [unique_id "ary2HyGeq9LtYp4zuPO0HAAAAEM"]
[Wed Sep 30 01:11:27.970538 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.2.60:30068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/cu.php"] [unique_id "ary2HyGeq9LtYp4zuPO0HQAAAE0"]
[Wed Sep 30 01:11:27.987338 2026] [security2:error] [pid 270884:tid 271112] [client 52.172.226.14:12580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/lock360.php"] [unique_id "ary2HyGeq9LtYp4zuPO0HwAAAF0"]
[Wed Sep 30 01:11:27.988938 2026] [security2:error] [pid 270884:tid 271109] [client 20.219.19.141:27922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/133.php"] [unique_id "ary2HyGeq9LtYp4zuPO0IAAAAFo"]
[Wed Sep 30 01:11:27.995051 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:27.995464 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.044515 2026] [security2:error] [pid 270884:tid 271028] [client 130.131.227.119:59588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ary2ICGeq9LtYp4zuPO0IwAAAAk"]
[Wed Sep 30 01:11:28.075179 2026] [security2:error] [pid 276620:tid 276801] [client 216.73.216.46:33831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2INPAdfEWqmGIkg1kMwAAAj4"]
[Wed Sep 30 01:11:28.082682 2026] [security2:error] [pid 276620:tid 276784] [client 20.214.191.94:61450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/Components.php"] [unique_id "ary2INPAdfEWqmGIkg1kNAAAAi0"]
[Wed Sep 30 01:11:28.091393 2026] [security2:error] [pid 276620:tid 276802] [client 20.211.90.37:39943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/file2.php"] [unique_id "ary2INPAdfEWqmGIkg1kNQAAAj8"]
[Wed Sep 30 01:11:28.176200 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.176475 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.205643 2026] [security2:error] [pid 270884:tid 271073] [client 74.7.175.174:59144] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.wpg.ozt.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2ICGeq9LtYp4zuPO0KAAANlc"]
[Wed Sep 30 01:11:28.214301 2026] [security2:error] [pid 276620:tid 276730] [remote 57.141.14.59:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kNgACZmQ"]
[Wed Sep 30 01:11:28.222872 2026] [security2:error] [pid 270884:tid 271079] [client 130.131.227.119:59622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2ICGeq9LtYp4zuPO0LQAAADw"]
[Wed Sep 30 01:11:28.265645 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.265978 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.285297 2026] [security2:error] [pid 276620:tid 276850] [client 13.70.4.78:19746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/txets.php"] [unique_id "ary2INPAdfEWqmGIkg1kOwAAAm8"]
[Wed Sep 30 01:11:28.288478 2026] [security2:error] [pid 270884:tid 271026] [client 13.70.1.101:42727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/2P.php"] [unique_id "ary2ICGeq9LtYp4zuPO0MAAAAAc"]
[Wed Sep 30 01:11:28.299925 2026] [autoindex:error] [pid 270884:tid 270921] [remote 74.7.227.63:36410] AH01276: Cannot serve directory /home4/wpgoztmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:28.300581 2026] [security2:error] [pid 276620:tid 276765] [client 37.41.16.35:63791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kPAAAAho"]
[Wed Sep 30 01:11:28.300672 2026] [security2:error] [pid 276620:tid 276765] [client 37.41.16.35:63791] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kPAAAAho"]
[Wed Sep 30 01:11:28.309869 2026] [access_compat:error] [pid 270884:tid 271119] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:28.310337 2026] [access_compat:error] [pid 270884:tid 271119] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:28.312942 2026] [security2:error] [pid 276620:tid 276707] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2INPAdfEWqmGIkg1kPQACS00"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D60562
[Wed Sep 30 01:11:28.312963 2026] [security2:error] [pid 276620:tid 276707] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2INPAdfEWqmGIkg1kPQACS00"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D60562
[Wed Sep 30 01:11:28.366141 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.366852 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.382266 2026] [security2:error] [pid 276059:tid 276315] [client 20.70.173.30:7366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/amax.php"] [unique_id "ary2IHtqdHBwD77138e4tQAAAgc"]
[Wed Sep 30 01:11:28.382960 2026] [security2:error] [pid 276620:tid 276811] [client 130.131.227.119:41603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-includes/Text/index.php"] [unique_id "ary2INPAdfEWqmGIkg1kQgAAAkg"]
[Wed Sep 30 01:11:28.405015 2026] [security2:error] [pid 276620:tid 276876] [client 223.181.60.167:3838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kQwAAAok"]
[Wed Sep 30 01:11:28.407771 2026] [security2:error] [pid 276620:tid 276818] [client 20.214.191.94:58831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/admin.php/xl9.php"] [unique_id "ary2INPAdfEWqmGIkg1kRAAAAk8"]
[Wed Sep 30 01:11:28.408332 2026] [security2:error] [pid 276620:tid 276876] [client 223.181.60.167:3838] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kQwAAAok"]
[Wed Sep 30 01:11:28.419690 2026] [security2:error] [pid 276620:tid 276851] [client 74.7.242.1:48836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2INPAdfEWqmGIkg1kRgAAAnA"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:11:28.461598 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.462047 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.468944 2026] [security2:error] [pid 276059:tid 276197] [client 52.172.226.14:12546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.226.172.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crm.novaklinings.com"] [uri "/system_log.php"] [unique_id "ary2IHtqdHBwD77138e4uQAAAZI"]
[Wed Sep 30 01:11:28.498515 2026] [security2:error] [pid 270884:tid 271079] [client 20.194.30.107:10155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wpxml.php"] [unique_id "ary2ICGeq9LtYp4zuPO0NwAAADw"]
[Wed Sep 30 01:11:28.522059 2026] [security2:error] [pid 276620:tid 276710] [remote 130.43.62.22:42068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.62.43.130.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ary2INPAdfEWqmGIkg1kSQACZVA"], referer: https://rhinoglobalenterprises.com/wp-login.php
[Wed Sep 30 01:11:28.546062 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.546445 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.590026 2026] [security2:error] [pid 276620:tid 276878] [client 91.233.111.167:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2INPAdfEWqmGIkg1kTAAAAos"]
[Wed Sep 30 01:11:28.600357 2026] [security2:error] [pid 276059:tid 276235] [client 130.131.227.119:6369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/wp-index.php"] [unique_id "ary2IHtqdHBwD77138e4wAAAAbc"]
[Wed Sep 30 01:11:28.619075 2026] [security2:error] [pid 276059:tid 276265] [client 13.70.4.78:19771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wp-update.php"] [unique_id "ary2IHtqdHBwD77138e4wQAAAdU"]
[Wed Sep 30 01:11:28.635706 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.636263 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.644330 2026] [security2:error] [pid 276620:tid 276881] [client 168.100.149.158:64136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ff5da7e8d43cb135978ddc791a8e3a4c.6ca.css.gz"] [unique_id "ary2INPAdfEWqmGIkg1kTgACjko"]
[Wed Sep 30 01:11:28.672674 2026] [security2:error] [pid 276620:tid 276829] [client 20.219.19.141:27920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wsd.php"] [unique_id "ary2INPAdfEWqmGIkg1kTwAAAlo"]
[Wed Sep 30 01:11:28.732047 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.732491 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.748112 2026] [security2:error] [pid 270884:tid 271128] [client 13.70.1.101:42703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/min.php"] [unique_id "ary2ICGeq9LtYp4zuPO0QAAAAG0"]
[Wed Sep 30 01:11:28.751611 2026] [security2:error] [pid 276059:tid 276268] [client 130.131.227.119:59625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/ww2.php"] [unique_id "ary2IHtqdHBwD77138e4xAAAAdg"]
[Wed Sep 30 01:11:28.786635 2026] [security2:error] [pid 270884:tid 271089] [client 45.138.12.44:38192] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.amazingbirthdays.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2ICGeq9LtYp4zuPO0QQAAAEY"]
[Wed Sep 30 01:11:28.810947 2026] [access_compat:error] [pid 270884:tid 271086] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:28.811361 2026] [access_compat:error] [pid 270884:tid 271086] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:28.818087 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.818348 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.854903 2026] [security2:error] [pid 276620:tid 276786] [client 20.198.74.230:23893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/or.php"] [unique_id "ary2INPAdfEWqmGIkg1kVAAAAi8"]
[Wed Sep 30 01:11:28.868193 2026] [security2:error] [pid 270884:tid 271099] [client 223.235.102.107:19129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ICGeq9LtYp4zuPO0RAAAAFA"]
[Wed Sep 30 01:11:28.868766 2026] [security2:error] [pid 270884:tid 271099] [client 223.235.102.107:19129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2ICGeq9LtYp4zuPO0RAAAAFA"]
[Wed Sep 30 01:11:28.879425 2026] [security2:error] [pid 276620:tid 276874] [client 20.214.191.94:47017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/gulu.php"] [unique_id "ary2INPAdfEWqmGIkg1kVQAAAoc"]
[Wed Sep 30 01:11:28.908745 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:28.909021 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:28.922290 2026] [security2:error] [pid 270884:tid 271020] [client 130.131.227.119:15557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/7logs.php"] [unique_id "ary2ICGeq9LtYp4zuPO0SgAAAAE"]
[Wed Sep 30 01:11:28.945414 2026] [security2:error] [pid 276620:tid 276781] [client 13.70.4.78:19740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/177.php"] [unique_id "ary2INPAdfEWqmGIkg1kVwAAAio"]
[Wed Sep 30 01:11:28.951651 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.2.60:11348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/file61.php"] [unique_id "ary2INPAdfEWqmGIkg1kWAAAAmw"]
[Wed Sep 30 01:11:29.001854 2026] [security2:error] [pid 276620:tid 276865] [client 4.240.25.22:8429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/media.php"] [unique_id "ary2IdPAdfEWqmGIkg1kWwAAAn4"]
[Wed Sep 30 01:11:29.004619 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.005054 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.083982 2026] [security2:error] [pid 276620:tid 276759] [client 130.131.227.119:2383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/ac.php"] [unique_id "ary2IdPAdfEWqmGIkg1kXAAAAhQ"]
[Wed Sep 30 01:11:29.090996 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.091253 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.183333 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.183622 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.222903 2026] [security2:error] [pid 270884:tid 271049] [client 20.214.191.94:61495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/bala.php"] [unique_id "ary2ISGeq9LtYp4zuPO0VQAAAB4"]
[Wed Sep 30 01:11:29.254586 2026] [security2:error] [pid 270884:tid 271103] [client 13.70.1.101:21417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/great.php"] [unique_id "ary2ISGeq9LtYp4zuPO0VwAAAFQ"]
[Wed Sep 30 01:11:29.271779 2026] [security2:error] [pid 276620:tid 276817] [client 20.219.19.141:28423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/BDKR28WP.php"] [unique_id "ary2IdPAdfEWqmGIkg1kYQAAAk4"]
[Wed Sep 30 01:11:29.275460 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.275779 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.288121 2026] [security2:error] [pid 270884:tid 271046] [client 130.131.227.119:59592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/ctex1.php"] [unique_id "ary2ISGeq9LtYp4zuPO0WQAAABs"]
[Wed Sep 30 01:11:29.291605 2026] [security2:error] [pid 270884:tid 271020] [client 181.0.166.182:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2ISGeq9LtYp4zuPO0WAAAAAE"]
[Wed Sep 30 01:11:29.308007 2026] [access_compat:error] [pid 270884:tid 271139] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:29.308304 2026] [access_compat:error] [pid 270884:tid 271139] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:29.322129 2026] [security2:error] [pid 270884:tid 271067] [client 13.70.4.78:19747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/ccc.php"] [unique_id "ary2ISGeq9LtYp4zuPO0XgAAADA"]
[Wed Sep 30 01:11:29.341709 2026] [security2:error] [pid 270884:tid 271078] [client 20.28.180.172:62363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-access.php"] [unique_id "ary2ISGeq9LtYp4zuPO0XwAAADs"]
[Wed Sep 30 01:11:29.372389 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.372885 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.378281 2026] [security2:error] [pid 270884:tid 271104] [client 20.194.30.107:1791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/wp-manager.php"] [unique_id "ary2ISGeq9LtYp4zuPO0YAAAAFU"]
[Wed Sep 30 01:11:29.417076 2026] [security2:error] [pid 276620:tid 276714] [remote 130.43.62.22:42068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.62.43.130.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/wp-login.php"] [unique_id "ary2IdPAdfEWqmGIkg1kZQACblQ"], referer: https://rhinoglobalenterprises.com/wp-admin/
[Wed Sep 30 01:11:29.467146 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.467593 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.474758 2026] [security2:error] [pid 276620:tid 276834] [client 130.131.227.119:59635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/defaults.php"] [unique_id "ary2IdPAdfEWqmGIkg1kawAAAl8"]
[Wed Sep 30 01:11:29.478755 2026] [security2:error] [pid 276620:tid 276803] [client 49.43.128.226:54246] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2INPAdfEWqmGIkg1kUAAAAkA"]
[Wed Sep 30 01:11:29.552266 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ISGeq9LtYp4zuPO0aQAAZTU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=16863
[Wed Sep 30 01:11:29.552291 2026] [security2:error] [pid 270884:tid 270939] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ISGeq9LtYp4zuPO0aQAAZTU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=16863
[Wed Sep 30 01:11:29.555230 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.555662 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.570846 2026] [security2:error] [pid 270884:tid 271096] [client 20.214.191.94:58843] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.dse.net"] [uri "/c99.php"] [unique_id "ary2ISGeq9LtYp4zuPO0awAAAE0"]
[Wed Sep 30 01:11:29.638670 2026] [security2:error] [pid 270884:tid 271099] [client 130.131.227.119:15581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/domains.php"] [unique_id "ary2ISGeq9LtYp4zuPO0bwAAAFA"]
[Wed Sep 30 01:11:29.640211 2026] [security2:error] [pid 276620:tid 276774] [client 13.70.4.78:19765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/0xD.php"] [unique_id "ary2IdPAdfEWqmGIkg1kcQAAAiM"]
[Wed Sep 30 01:11:29.642179 2026] [security2:error] [pid 270884:tid 271119] [client 20.211.90.37:39872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/m.php"] [unique_id "ary2ISGeq9LtYp4zuPO0cAAAAGQ"]
[Wed Sep 30 01:11:29.643009 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.643262 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.698374 2026] [security2:error] [pid 276620:tid 276825] [client 13.70.1.101:53465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/BDKR28WP.php"] [unique_id "ary2IdPAdfEWqmGIkg1kdQAAAlY"]
[Wed Sep 30 01:11:29.737717 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.738001 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.777167 2026] [security2:error] [pid 270884:tid 271130] [client 20.194.5.96:44932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2ISGeq9LtYp4zuPO0dAAAAG8"]
[Wed Sep 30 01:11:29.789934 2026] [security2:error] [pid 276620:tid 276808] [client 20.194.30.107:30400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/media.php"] [unique_id "ary2IdPAdfEWqmGIkg1keQAAAkU"]
[Wed Sep 30 01:11:29.798900 2026] [security2:error] [pid 270884:tid 271058] [client 130.131.227.119:6388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/dropdown.php"] [unique_id "ary2ISGeq9LtYp4zuPO0dgAAACc"]
[Wed Sep 30 01:11:29.827781 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.828045 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.837439 2026] [security2:error] [pid 276620:tid 276716] [remote 178.211.139.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/filefuns.php"] [unique_id "ary2IdPAdfEWqmGIkg1kewACZVY"]
[Wed Sep 30 01:11:29.849772 2026] [security2:error] [pid 270884:tid 271117] [client 103.168.67.253:52970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2ISGeq9LtYp4zuPO0dwAAAGI"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:29.859226 2026] [access_compat:error] [pid 270884:tid 271116] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:29.859507 2026] [access_compat:error] [pid 270884:tid 271116] [client 74.7.243.227:48796] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:29.862965 2026] [security2:error] [pid 276620:tid 276806] [client 20.28.180.172:29577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/abde5e1996index.php"] [unique_id "ary2IdPAdfEWqmGIkg1kfAAAAkM"]
[Wed Sep 30 01:11:29.912562 2026] [security2:error] [pid 276620:tid 276767] [client 4.240.25.22:33306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2IdPAdfEWqmGIkg1kfgAAAhw"]
[Wed Sep 30 01:11:29.917231 2026] [security2:error] [pid 276620:tid 276770] [client 20.219.19.141:27909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wmore1.php"] [unique_id "ary2IdPAdfEWqmGIkg1kfwAAAh8"]
[Wed Sep 30 01:11:29.917943 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:29.918204 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:21275] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:29.945958 2026] [security2:error] [pid 270884:tid 271080] [client 130.131.227.119:51758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/files/index.php"] [unique_id "ary2ISGeq9LtYp4zuPO0egAAAD0"]
[Wed Sep 30 01:11:29.961371 2026] [security2:error] [pid 276620:tid 276775] [client 13.70.4.78:19730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/sallu.php"] [unique_id "ary2IdPAdfEWqmGIkg1kggAAAiQ"]
[Wed Sep 30 01:11:30.016470 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.016747 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.034394 2026] [security2:error] [pid 276620:tid 276847] [client 13.70.1.101:42696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/gigi.php"] [unique_id "ary2ItPAdfEWqmGIkg1kiwAAAmw"]
[Wed Sep 30 01:11:30.036021 2026] [security2:error] [pid 270884:tid 271123] [client 162.55.55.199:35206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.55.55.162.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/index.php"] [unique_id "ary2IiGeq9LtYp4zuPO0gAAAAGg"]
[Wed Sep 30 01:11:30.101250 2026] [security2:error] [pid 276620:tid 276826] [client 130.131.227.119:51662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.227.131.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holizertechnical.com"] [uri "/flower.php"] [unique_id "ary2ItPAdfEWqmGIkg1kjwAAAlc"]
[Wed Sep 30 01:11:30.109685 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.109964 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.163535 2026] [security2:error] [pid 270884:tid 271105] [client 20.214.191.94:61451] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.dse.net"] [uri "/c99.php"] [unique_id "ary2IiGeq9LtYp4zuPO0hAAAAFY"]
[Wed Sep 30 01:11:30.204905 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.205357 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:27927] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.270566 2026] [security2:error] [pid 276620:tid 276765] [client 65.0.239.170:34414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.239.0.65.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.vjw.vvt.mybluehost.me"] [uri "/index.php"] [unique_id "ary2ItPAdfEWqmGIkg1klQAAAho"]
[Wed Sep 30 01:11:30.296594 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.296874 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.346696 2026] [security2:error] [pid 276620:tid 276803] [client 216.73.216.46:21275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ItPAdfEWqmGIkg1kmAAAAkA"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWI2NC9wZXJsNS9hdXRv
[Wed Sep 30 01:11:30.360266 2026] [security2:error] [pid 276620:tid 276661] [remote 130.43.62.22:42068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.62.43.130.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "ary2ItPAdfEWqmGIkg1kmQACjR8"]
[Wed Sep 30 01:11:30.360696 2026] [security2:error] [pid 276620:tid 276880] [client 130.43.62.22:42068] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "rhinoglobalenterprises.com"] [uri "/xmlrpc.php"] [unique_id "ary2ItPAdfEWqmGIkg1kmQACjR8"]
[Wed Sep 30 01:11:30.369606 2026] [security2:error] [pid 270884:tid 271089] [client 13.70.4.78:20372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/xwpg.php"] [unique_id "ary2IiGeq9LtYp4zuPO0iQAAAEY"]
[Wed Sep 30 01:11:30.388856 2026] [access_compat:error] [pid 276059:tid 276310] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:30.389298 2026] [access_compat:error] [pid 276059:tid 276310] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:30.404643 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.405104 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.409380 2026] [security2:error] [pid 276059:tid 276293] [client 13.70.1.101:45867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ant.php"] [unique_id "ary2IntqdHBwD77138e40AAAAfE"]
[Wed Sep 30 01:11:30.438367 2026] [security2:error] [pid 276059:tid 276064] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2IntqdHBwD77138e40gACCAA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D49218
[Wed Sep 30 01:11:30.460062 2026] [security2:error] [pid 276059:tid 276220] [client 177.104.194.227:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2IntqdHBwD77138e40wAAAag"]
[Wed Sep 30 01:11:30.479857 2026] [security2:error] [pid 270884:tid 270991] [remote 178.211.139.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/txets.php"] [unique_id "ary2IiGeq9LtYp4zuPO0iwAAYWU"]
[Wed Sep 30 01:11:30.494064 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.494343 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.542817 2026] [security2:error] [pid 276620:tid 276787] [client 20.219.19.141:27990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/177.php"] [unique_id "ary2ItPAdfEWqmGIkg1kngAAAjA"]
[Wed Sep 30 01:11:30.547565 2026] [security2:error] [pid 270884:tid 271019] [client 20.214.191.94:46358] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.dse.net"] [uri "/c99.php"] [unique_id "ary2IiGeq9LtYp4zuPO0jgAAAAA"]
[Wed Sep 30 01:11:30.550723 2026] [security2:error] [pid 270884:tid 271049] [client 20.194.5.96:55427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2IiGeq9LtYp4zuPO0jwAAAB4"]
[Wed Sep 30 01:11:30.594633 2026] [security2:error] [pid 276620:tid 276658] [remote 57.141.14.79:48626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary2ItPAdfEWqmGIkg1knwACRhw"]
[Wed Sep 30 01:11:30.630163 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.630424 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.657652 2026] [security2:error] [pid 276620:tid 276794] [client 168.100.149.214:24156] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/c3a871208a91ad67ffbfb7b567cfe646.2c40.css.gz"] [unique_id "ary2ItPAdfEWqmGIkg1kogACNxs"]
[Wed Sep 30 01:11:30.670960 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.671214 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.707945 2026] [security2:error] [pid 276620:tid 276829] [client 13.70.4.78:20473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/flamini.php"] [unique_id "ary2ItPAdfEWqmGIkg1kpgAAAlo"]
[Wed Sep 30 01:11:30.749547 2026] [security2:error] [pid 276620:tid 276735] [remote 178.211.139.240:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sergil.net"] [uri "/postnews.php"] [unique_id "ary2ItPAdfEWqmGIkg1kqAACXWk"]
[Wed Sep 30 01:11:30.761688 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.761952 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:5793] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:30.800217 2026] [security2:error] [pid 276620:tid 276767] [client 13.70.1.101:21030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/uejvv.php"] [unique_id "ary2ItPAdfEWqmGIkg1kqQAAAhw"]
[Wed Sep 30 01:11:30.849741 2026] [security2:error] [pid 276620:tid 276770] [client 216.73.216.46:27927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ItPAdfEWqmGIkg1kqgAAAh8"]
[Wed Sep 30 01:11:30.877716 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:30.878174 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:30.936328 2026] [security2:error] [pid 270884:tid 271058] [client 20.211.90.37:39962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/33.php"] [unique_id "ary2IiGeq9LtYp4zuPO0pAAAACc"]
[Wed Sep 30 01:11:30.946589 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:30.946874 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.008821 2026] [security2:error] [pid 270884:tid 271052] [client 20.214.191.94:47003] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.dse.net"] [uri "/c99.php"] [unique_id "ary2IyGeq9LtYp4zuPO0qQAAACE"]
[Wed Sep 30 01:11:31.034358 2026] [security2:error] [pid 276059:tid 276216] [client 13.70.4.78:19774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/themes.php"] [unique_id "ary2I3tqdHBwD77138e42AAAAaQ"]
[Wed Sep 30 01:11:31.038038 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.038290 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.114620 2026] [security2:error] [pid 276620:tid 276779] [client 176.117.90.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2I9PAdfEWqmGIkg1krwAAAig"]
[Wed Sep 30 01:11:31.135878 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.136325 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.152265 2026] [security2:error] [pid 276620:tid 276874] [client 20.219.19.141:27972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/ccc.php"] [unique_id "ary2I9PAdfEWqmGIkg1ksAAAAoc"]
[Wed Sep 30 01:11:31.207360 2026] [security2:error] [pid 270884:tid 271068] [client 216.73.216.46:5793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2IyGeq9LtYp4zuPO0sAAAADE"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci93d3cvaWNvbnM%3D
[Wed Sep 30 01:11:31.225587 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.226043 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.294804 2026] [security2:error] [pid 270884:tid 271130] [client 20.70.173.30:37146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/dex.php"] [unique_id "ary2IyGeq9LtYp4zuPO0sQAAAG8"]
[Wed Sep 30 01:11:31.312648 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.312929 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.342102 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:31.342366 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:31.372724 2026] [security2:error] [pid 270884:tid 271023] [client 13.70.4.78:20440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/0.php"] [unique_id "ary2IyGeq9LtYp4zuPO0tAAAAAQ"]
[Wed Sep 30 01:11:31.379533 2026] [security2:error] [pid 270884:tid 271047] [client 20.214.191.94:58875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/ttivnife.php"] [unique_id "ary2IyGeq9LtYp4zuPO0tQAAABw"]
[Wed Sep 30 01:11:31.394235 2026] [security2:error] [pid 276059:tid 276277] [client 103.168.67.253:52972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/wordpress/index.php"] [unique_id "ary2I3tqdHBwD77138e43AAAAeE"], referer: https://dklhardwareconstruction.com/wordpress/wp-admin/
[Wed Sep 30 01:11:31.449590 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.450076 2026] [access_compat:error] [pid 270884:tid 271119] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.494573 2026] [security2:error] [pid 276059:tid 276319] [client 74.7.228.22:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "linxconsult.com"] [uri "/cgi-sys/404.html"] [unique_id "ary2I3tqdHBwD77138e43gAAAgs"]
[Wed Sep 30 01:11:31.498554 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.498846 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.504854 2026] [security2:error] [pid 270884:tid 271128] [client 203.122.45.246:59757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2IyGeq9LtYp4zuPO0vQAAAG0"]
[Wed Sep 30 01:11:31.504981 2026] [security2:error] [pid 270884:tid 271128] [client 203.122.45.246:59757] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2IyGeq9LtYp4zuPO0vQAAAG0"]
[Wed Sep 30 01:11:31.512282 2026] [security2:error] [pid 270884:tid 271067] [client 13.70.1.101:21400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/file.php"] [unique_id "ary2IyGeq9LtYp4zuPO0vgAAADA"]
[Wed Sep 30 01:11:31.524431 2026] [security2:error] [pid 276059:tid 276298] [client 74.7.228.22:50342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "linxconsult.com"] [uri "/robots.txt"] [unique_id "ary2I3tqdHBwD77138e43QAB9kM"]
[Wed Sep 30 01:11:31.550214 2026] [security2:error] [pid 276620:tid 276850] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2I9PAdfEWqmGIkg1kvAAAAm8"]
[Wed Sep 30 01:11:31.585462 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.585759 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.630747 2026] [security2:error] [pid 276059:tid 276300] [client 20.219.19.141:28013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/0xD.php"] [unique_id "ary2I3tqdHBwD77138e44AAAAfg"]
[Wed Sep 30 01:11:31.683889 2026] [security2:error] [pid 276059:tid 276292] [client 20.219.2.60:11895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/xx.php"] [unique_id "ary2I3tqdHBwD77138e44QAAAfA"]
[Wed Sep 30 01:11:31.707157 2026] [security2:error] [pid 270884:tid 271068] [client 20.214.191.94:46988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/admin.php/2P.php"] [unique_id "ary2IyGeq9LtYp4zuPO0vwAAADE"]
[Wed Sep 30 01:11:31.725457 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.725816 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.806579 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:31.806903 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:31.818459 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:16380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.818732 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:16380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.825003 2026] [security2:error] [pid 270884:tid 271023] [client 13.70.4.78:19754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/opsh.php"] [unique_id "ary2IyGeq9LtYp4zuPO0ywAAAAQ"]
[Wed Sep 30 01:11:31.857893 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:31.858163 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:31.883883 2026] [security2:error] [pid 270884:tid 271089] [client 20.194.5.96:44962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/adminfuns.php"] [unique_id "ary2IyGeq9LtYp4zuPO0zwAAAEY"]
[Wed Sep 30 01:11:31.887760 2026] [security2:error] [pid 270884:tid 271126] [client 13.70.1.101:21406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/elements.php"] [unique_id "ary2IyGeq9LtYp4zuPO00QAAAGs"]
[Wed Sep 30 01:11:31.964199 2026] [security2:error] [pid 270884:tid 271104] [client 20.194.96.176:44970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wsd.php"] [unique_id "ary2IyGeq9LtYp4zuPO03AAAAFU"]
[Wed Sep 30 01:11:31.996137 2026] [security2:error] [pid 276059:tid 276236] [client 189.217.196.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2I3tqdHBwD77138e47AAAAbg"]
[Wed Sep 30 01:11:32.001998 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.002440 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.006803 2026] [security2:error] [pid 270884:tid 270891] [remote 162.240.171.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ary2JCGeq9LtYp4zuPO05AAAEwU"]
[Wed Sep 30 01:11:32.040523 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.040786 2026] [access_compat:error] [pid 270884:tid 271029] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.052644 2026] [security2:error] [pid 276620:tid 276771] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JNPAdfEWqmGIkg1kxQAAAiA"]
[Wed Sep 30 01:11:32.099794 2026] [security2:error] [pid 270884:tid 271130] [client 20.211.90.37:40416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/ccc.php"] [unique_id "ary2JCGeq9LtYp4zuPO07gAAAG8"]
[Wed Sep 30 01:11:32.113026 2026] [qos:error] [pid 270884:tid 271019] [client 47.154.47.236:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2JCGeq9LtYp4zuPO07wAAAAA
[Wed Sep 30 01:11:32.119587 2026] [security2:error] [pid 276620:tid 276879] [client 68.167.73.96:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JNPAdfEWqmGIkg1kxwAAAow"]
[Wed Sep 30 01:11:32.129798 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.130085 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.135351 2026] [security2:error] [pid 276620:tid 276828] [client 20.28.180.172:61243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/hots.php"] [unique_id "ary2JNPAdfEWqmGIkg1kyQAAAlk"]
[Wed Sep 30 01:11:32.163914 2026] [security2:error] [pid 276620:tid 276858] [client 13.70.4.78:20363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/pass4.php"] [unique_id "ary2JNPAdfEWqmGIkg1kygAAAnc"]
[Wed Sep 30 01:11:32.181832 2026] [security2:error] [pid 270884:tid 271131] [client 20.214.191.94:58842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/a.php"] [unique_id "ary2JCGeq9LtYp4zuPO08AAAAHA"]
[Wed Sep 30 01:11:32.215465 2026] [security2:error] [pid 270884:tid 271058] [client 13.70.1.101:21379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/sitemap.php"] [unique_id "ary2JCGeq9LtYp4zuPO08QAAACc"]
[Wed Sep 30 01:11:32.224702 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.224994 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.239692 2026] [security2:error] [pid 270884:tid 271116] [client 20.219.2.60:30347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/8.php"] [unique_id "ary2JCGeq9LtYp4zuPO08wAAAGE"]
[Wed Sep 30 01:11:32.280461 2026] [security2:error] [pid 270884:tid 271059] [client 20.70.173.30:56427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/mac.php"] [unique_id "ary2JCGeq9LtYp4zuPO09gAAACg"]
[Wed Sep 30 01:11:32.282821 2026] [security2:error] [pid 276059:tid 276285] [client 168.107.70.193:61485] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.ath.rcn.mybluehost.me"] [uri "/"] [unique_id "ary2JHtqdHBwD77138e48AAAAek"]
[Wed Sep 30 01:11:32.295344 2026] [access_compat:error] [pid 276059:tid 276218] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:32.295604 2026] [access_compat:error] [pid 276059:tid 276218] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:32.315362 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.315649 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.319717 2026] [security2:error] [pid 270884:tid 271019] [client 4.240.25.22:38778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/one.php"] [unique_id "ary2JCGeq9LtYp4zuPO0-QAAAAA"]
[Wed Sep 30 01:11:32.377061 2026] [security2:error] [pid 270884:tid 271041] [client 20.194.30.107:1787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/fling.php"] [unique_id "ary2JCGeq9LtYp4zuPO0_AAAABY"]
[Wed Sep 30 01:11:32.400874 2026] [security2:error] [pid 270884:tid 271029] [client 216.73.216.46:16380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2JCGeq9LtYp4zuPO0_wAAAAo"]
[Wed Sep 30 01:11:32.474123 2026] [security2:error] [pid 276059:tid 276309] [client 20.214.191.94:61474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/cord.php"] [unique_id "ary2JHtqdHBwD77138e49AAAAgE"]
[Wed Sep 30 01:11:32.490268 2026] [security2:error] [pid 276059:tid 276222] [client 13.70.4.78:19728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/drttewyh.php"] [unique_id "ary2JHtqdHBwD77138e49QAAAao"]
[Wed Sep 30 01:11:32.492383 2026] [security2:error] [pid 270884:tid 271089] [client 20.219.19.141:27913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/sallu.php"] [unique_id "ary2JCGeq9LtYp4zuPO1AgAAAEY"]
[Wed Sep 30 01:11:32.509959 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.510380 2026] [access_compat:error] [pid 270884:tid 271123] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.597402 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.597680 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.601993 2026] [security2:error] [pid 270884:tid 271128] [client 20.198.74.230:23925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/wmore1.php"] [unique_id "ary2JCGeq9LtYp4zuPO1CwAAAG0"]
[Wed Sep 30 01:11:32.637053 2026] [security2:error] [pid 276059:tid 276268] [client 122.173.27.10:24984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2JHtqdHBwD77138e4-AAAAdg"]
[Wed Sep 30 01:11:32.637194 2026] [security2:error] [pid 276059:tid 276268] [client 122.173.27.10:24984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2JHtqdHBwD77138e4-AAAAdg"]
[Wed Sep 30 01:11:32.657200 2026] [security2:error] [pid 276620:tid 276835] [client 13.70.1.101:21021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/xetmolxr.php"] [unique_id "ary2JNPAdfEWqmGIkg1kzQAAAmA"]
[Wed Sep 30 01:11:32.659368 2026] [security2:error] [pid 276620:tid 276748] [remote 162.240.171.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ary2JNPAdfEWqmGIkg1kzgACZ3Y"], referer: https://levantsoleil.com/wp-login.php
[Wed Sep 30 01:11:32.662118 2026] [security2:error] [pid 276059:tid 276286] [client 168.100.149.243:37322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/e537a0eb78f6475c5c481d8e3102edd8.6c6.css.gz"] [unique_id "ary2JHtqdHBwD77138e4-QAB6nM"]
[Wed Sep 30 01:11:32.671912 2026] [security2:error] [pid 276620:tid 276825] [client 151.245.31.173:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JNPAdfEWqmGIkg1kzwAAAlY"]
[Wed Sep 30 01:11:32.690387 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.690688 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.704714 2026] [security2:error] [pid 276059:tid 276234] [client 20.194.5.96:64511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/av.php"] [unique_id "ary2JHtqdHBwD77138e4_AAAAbY"]
[Wed Sep 30 01:11:32.774784 2026] [security2:error] [pid 270884:tid 271123] [client 20.214.191.94:46377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/anom.php"] [unique_id "ary2JCGeq9LtYp4zuPO1FgAAAGg"]
[Wed Sep 30 01:11:32.777783 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.778069 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.811523 2026] [security2:error] [pid 270884:tid 271093] [client 13.70.4.78:19738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/sh.php"] [unique_id "ary2JCGeq9LtYp4zuPO1FwAAAEo"]
[Wed Sep 30 01:11:32.819486 2026] [security2:error] [pid 270884:tid 271019] [client 20.219.2.60:11332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/Jcrop.php"] [unique_id "ary2JCGeq9LtYp4zuPO1GAAAAAA"]
[Wed Sep 30 01:11:32.841623 2026] [security2:error] [pid 270884:tid 270971] [remote 74.7.227.56:58596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2JCGeq9LtYp4zuPO1GQAAQ1E"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=750
[Wed Sep 30 01:11:32.841917 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:32.842191 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:32.849330 2026] [security2:error] [pid 276059:tid 276246] [client 20.70.173.30:33346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-filemannger.php"] [unique_id "ary2JHtqdHBwD77138e4_gAAAcI"]
[Wed Sep 30 01:11:32.872781 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.873241 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.901787 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.241.5:39398] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2JCGeq9LtYp4zuPO1HQAAJxk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=1414f8c3b1ddd785a0d62e7c4478f33a&start=180&t=1465
[Wed Sep 30 01:11:32.901820 2026] [security2:error] [pid 270884:tid 270911] [remote 74.7.241.5:39398] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2JCGeq9LtYp4zuPO1HQAAJxk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=1414f8c3b1ddd785a0d62e7c4478f33a&start=180&t=1465
[Wed Sep 30 01:11:32.961563 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:32.961844 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:32.984255 2026] [security2:error] [pid 276620:tid 276724] [remote 162.240.171.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/xmlrpc.php"] [unique_id "ary2JNPAdfEWqmGIkg1k0QACY14"]
[Wed Sep 30 01:11:32.984472 2026] [security2:error] [pid 276620:tid 276838] [client 162.240.171.12:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "levantsoleil.com"] [uri "/xmlrpc.php"] [unique_id "ary2JNPAdfEWqmGIkg1k0QACY14"]
[Wed Sep 30 01:11:32.997798 2026] [security2:error] [pid 270884:tid 271034] [client 13.70.1.101:21040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/mini.php"] [unique_id "ary2JCGeq9LtYp4zuPO1JgAAAA8"]
[Wed Sep 30 01:11:33.040908 2026] [security2:error] [pid 276620:tid 276837] [client 20.214.191.94:61492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/plugins.php"] [unique_id "ary2JdPAdfEWqmGIkg1k0gAAAmI"]
[Wed Sep 30 01:11:33.055847 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.056282 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.112913 2026] [qos:error] [pid 270884:tid 271089] [client 170.203.218.150:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2JSGeq9LtYp4zuPO1LgAAAEY
[Wed Sep 30 01:11:33.130625 2026] [security2:error] [pid 270884:tid 271123] [client 13.70.4.78:20417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/groud1.php"] [unique_id "ary2JSGeq9LtYp4zuPO1MgAAAGg"]
[Wed Sep 30 01:11:33.141526 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.141814 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.145773 2026] [qos:error] [pid 270884:tid 270898] [remote 108.252.222.169:47702] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=108.252.222.169, id=ary2JSGeq9LtYp4zuPO1MwAAQww
[Wed Sep 30 01:11:33.234341 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.234614 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:24451] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.320750 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:33.321042 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:33.325486 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.325737 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.369969 2026] [security2:error] [pid 276620:tid 276775] [client 13.70.1.101:42729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/zwso.php"] [unique_id "ary2JdPAdfEWqmGIkg1k2wAAAiQ"]
[Wed Sep 30 01:11:33.428198 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.428670 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.439478 2026] [security2:error] [pid 276620:tid 276779] [client 4.240.25.22:41711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/file.php"] [unique_id "ary2JdPAdfEWqmGIkg1k3QAAAig"]
[Wed Sep 30 01:11:33.455100 2026] [security2:error] [pid 270884:tid 271093] [client 20.219.19.141:27977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/ops.php"] [unique_id "ary2JSGeq9LtYp4zuPO1QQAAAEo"]
[Wed Sep 30 01:11:33.458496 2026] [security2:error] [pid 276059:tid 276213] [client 13.70.4.78:19721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/bro.php"] [unique_id "ary2JXtqdHBwD77138e5AgAAAaE"]
[Wed Sep 30 01:11:33.471838 2026] [security2:error] [pid 276620:tid 276886] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JdPAdfEWqmGIkg1k3wAAApM"]
[Wed Sep 30 01:11:33.492894 2026] [security2:error] [pid 276620:tid 276797] [client 152.232.187.222:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JdPAdfEWqmGIkg1k4AAAAjo"]
[Wed Sep 30 01:11:33.498403 2026] [security2:error] [pid 270884:tid 271116] [client 202.179.95.79:64893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2JSGeq9LtYp4zuPO1RwAAAGE"]
[Wed Sep 30 01:11:33.498507 2026] [security2:error] [pid 270884:tid 271116] [client 202.179.95.79:64893] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2JSGeq9LtYp4zuPO1RwAAAGE"]
[Wed Sep 30 01:11:33.507628 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.507899 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.534877 2026] [qos:error] [pid 270884:tid 270903] [remote 86.83.162.221:33110] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.83.162.221, id=ary2JSGeq9LtYp4zuPO1SgAAGhE
[Wed Sep 30 01:11:33.574016 2026] [security2:error] [pid 276620:tid 276826] [client 20.204.42.136:35748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/simple.php"] [unique_id "ary2JdPAdfEWqmGIkg1k4QAAAlc"]
[Wed Sep 30 01:11:33.593359 2026] [security2:error] [pid 270884:tid 271100] [client 20.211.90.37:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/file15.php"] [unique_id "ary2JSGeq9LtYp4zuPO1TAAAAFE"]
[Wed Sep 30 01:11:33.598800 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.599079 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:6127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.612176 2026] [security2:error] [pid 276059:tid 276316] [client 114.119.145.7:61675] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mngroup.com.au"] [uri "/commercial-cleaning-werribee/"] [unique_id "ary2JXtqdHBwD77138e5BQAAAgg"], referer: https://mngroup.com.au/medical-facility-cleaning/
[Wed Sep 30 01:11:33.648186 2026] [security2:error] [pid 276620:tid 276873] [client 216.73.216.46:24451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2JdPAdfEWqmGIkg1k4gAAAoY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9ldGMvbGxkcGQuZA%3D%3D
[Wed Sep 30 01:11:33.688143 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.688439 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.703615 2026] [security2:error] [pid 276620:tid 276856] [client 13.70.1.101:53483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/tiny.php"] [unique_id "ary2JdPAdfEWqmGIkg1k5AAAAnU"]
[Wed Sep 30 01:11:33.728962 2026] [security2:error] [pid 276620:tid 276764] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JdPAdfEWqmGIkg1k5QAAAhk"]
[Wed Sep 30 01:11:33.734432 2026] [security2:error] [pid 276620:tid 276821] [client 20.70.173.30:7393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/txets.php"] [unique_id "ary2JdPAdfEWqmGIkg1k5gAAAlI"]
[Wed Sep 30 01:11:33.778922 2026] [security2:error] [pid 270884:tid 271089] [client 13.70.4.78:20429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/class-wp-http-client.php"] [unique_id "ary2JSGeq9LtYp4zuPO1TwAAAEY"]
[Wed Sep 30 01:11:33.780177 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.780443 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.804826 2026] [access_compat:error] [pid 276059:tid 276243] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:33.805096 2026] [access_compat:error] [pid 276059:tid 276243] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:33.862306 2026] [security2:error] [pid 270884:tid 271086] [client 20.28.180.172:29631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/000.php"] [unique_id "ary2JSGeq9LtYp4zuPO1UQAAAEM"]
[Wed Sep 30 01:11:33.868642 2026] [qos:error] [pid 270884:tid 270908] [remote 89.149.105.30:11873] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.149.105.30, id=ary2JSGeq9LtYp4zuPO1UwAAcBY
[Wed Sep 30 01:11:33.870215 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.870630 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:30591] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.909114 2026] [security2:error] [pid 276620:tid 276817] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JdPAdfEWqmGIkg1k5wAAAk4"]
[Wed Sep 30 01:11:33.962386 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:33.962669 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:33.968205 2026] [security2:error] [pid 276620:tid 276850] [client 20.214.191.94:61483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/zlwvxiyp.php"] [unique_id "ary2JdPAdfEWqmGIkg1k6QAAAm8"]
[Wed Sep 30 01:11:34.007833 2026] [security2:error] [pid 276620:tid 276763] [client 176.117.90.13:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JtPAdfEWqmGIkg1k7AAAAhg"]
[Wed Sep 30 01:11:34.026726 2026] [security2:error] [pid 276620:tid 276790] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JtPAdfEWqmGIkg1k7QAAAjM"]
[Wed Sep 30 01:11:34.034349 2026] [security2:error] [pid 270884:tid 271044] [client 13.70.1.101:38424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/simple.php"] [unique_id "ary2JiGeq9LtYp4zuPO1VwAAABk"]
[Wed Sep 30 01:11:34.107167 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.107469 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.163822 2026] [security2:error] [pid 276620:tid 276814] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JtPAdfEWqmGIkg1k7wAAAks"]
[Wed Sep 30 01:11:34.200745 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.201051 2026] [access_compat:error] [pid 270884:tid 271045] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.205070 2026] [security2:error] [pid 276059:tid 276279] [client 13.70.4.78:20438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/zoo2.php"] [unique_id "ary2JntqdHBwD77138e5CwAAAeM"]
[Wed Sep 30 01:11:34.236960 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.237225 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.291372 2026] [proxy:warn] [pid 276059:tid 276306] [client 43.159.62.129:57630] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be goldensnifferproducts.com for uri /400.shtml
[Wed Sep 30 01:11:34.309768 2026] [access_compat:error] [pid 276059:tid 276319] [client 43.159.62.129:0] AH01797: client denied by server configuration: /home4/golden38/public_html/400.shtml
[Wed Sep 30 01:11:34.310412 2026] [access_compat:error] [pid 276059:tid 276319] [client 43.159.62.129:0] AH01797: client denied by server configuration: /home4/golden38/public_html/403.html
[Wed Sep 30 01:11:34.327709 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.327987 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.333697 2026] [access_compat:error] [pid 276059:tid 276301] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:34.334006 2026] [access_compat:error] [pid 276059:tid 276301] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:34.338248 2026] [security2:error] [pid 270884:tid 271104] [client 20.214.191.94:58871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/1Be5IfrlWP.php"] [unique_id "ary2JiGeq9LtYp4zuPO1YAAAAFU"]
[Wed Sep 30 01:11:34.361047 2026] [security2:error] [pid 276620:tid 276803] [client 13.70.1.101:45841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/buy.php"] [unique_id "ary2JtPAdfEWqmGIkg1k8QAAAkA"]
[Wed Sep 30 01:11:34.384798 2026] [security2:error] [pid 276620:tid 276804] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JtPAdfEWqmGIkg1k8wAAAkE"]
[Wed Sep 30 01:11:34.390247 2026] [security2:error] [pid 270884:tid 271135] [client 4.240.25.22:8501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/bthil.php"] [unique_id "ary2JiGeq9LtYp4zuPO1YwAAAHQ"]
[Wed Sep 30 01:11:34.425924 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.426367 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.442365 2026] [security2:error] [pid 276620:tid 276858] [client 20.219.19.141:28029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/mac.php"] [unique_id "ary2JtPAdfEWqmGIkg1k9QAAAnc"]
[Wed Sep 30 01:11:34.468863 2026] [security2:error] [pid 276620:tid 276880] [client 31.22.56.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JtPAdfEWqmGIkg1k9gAAAo0"]
[Wed Sep 30 01:11:34.471095 2026] [security2:error] [pid 276620:tid 276846] [client 20.219.2.60:30344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws60.php"] [unique_id "ary2JtPAdfEWqmGIkg1k9wAAAms"]
[Wed Sep 30 01:11:34.490125 2026] [security2:error] [pid 270884:tid 271123] [client 43.227.131.37:20494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2JiGeq9LtYp4zuPO1ZwAAAGg"]
[Wed Sep 30 01:11:34.490257 2026] [security2:error] [pid 270884:tid 271123] [client 43.227.131.37:20494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2JiGeq9LtYp4zuPO1ZwAAAGg"]
[Wed Sep 30 01:11:34.511173 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.511442 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.535711 2026] [security2:error] [pid 276620:tid 276842] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:author_exclude"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2JtPAdfEWqmGIkg1k-wAAAmc"]
[Wed Sep 30 01:11:34.552682 2026] [qos:error] [pid 270884:tid 271089] [client 172.91.197.15:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2JiGeq9LtYp4zuPO1awAAAEY
[Wed Sep 30 01:11:34.573788 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L2Rldg%3D%3D
[Wed Sep 30 01:11:34.574071 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L2Rldg%3D%3D
[Wed Sep 30 01:11:34.600789 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.601105 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.627730 2026] [autoindex:error] [pid 276620:tid 276727] [remote 93.152.209.11:2828] AH01276: Cannot serve directory /home4/cvgmzpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:34.639414 2026] [security2:error] [pid 270884:tid 271043] [client 216.244.66.227:33636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nels.pikarthouse.com"] [uri "/footwear-demo/"] [unique_id "ary2JiGeq9LtYp4zuPO1bgAAABg"]
[Wed Sep 30 01:11:34.639518 2026] [security2:error] [pid 270884:tid 271043] [client 216.244.66.227:33636] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "nels.pikarthouse.com"] [uri "/footwear-demo/"] [unique_id "ary2JiGeq9LtYp4zuPO1bgAAABg"]
[Wed Sep 30 01:11:34.644979 2026] [security2:error] [pid 270884:tid 271040] [client 20.194.5.96:64449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/dex.php"] [unique_id "ary2JiGeq9LtYp4zuPO1bwAAABU"]
[Wed Sep 30 01:11:34.667675 2026] [security2:error] [pid 270884:tid 271093] [client 168.100.149.25:22320] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/905086db3d1ed0dae5740da51dbef071.39c6.css.gz"] [unique_id "ary2JiGeq9LtYp4zuPO1cAAASgc"]
[Wed Sep 30 01:11:34.690794 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.691067 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.704187 2026] [security2:error] [pid 270884:tid 271024] [client 13.70.1.101:38400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ioxi-o.php"] [unique_id "ary2JiGeq9LtYp4zuPO1cQAAAAU"]
[Wed Sep 30 01:11:34.738766 2026] [security2:error] [pid 270884:tid 271119] [client 20.214.191.94:61489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary2JiGeq9LtYp4zuPO1cgAAAGQ"]
[Wed Sep 30 01:11:34.782023 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.782279 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.808108 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.4.78:20444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/zoo1.php"] [unique_id "ary2JiGeq9LtYp4zuPO1dQAAAG8"]
[Wed Sep 30 01:11:34.832268 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:34.832549 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:34.866903 2026] [security2:error] [pid 270884:tid 271118] [client 103.211.18.63:59614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2JiGeq9LtYp4zuPO1dwAAAGM"]
[Wed Sep 30 01:11:34.867017 2026] [security2:error] [pid 270884:tid 271118] [client 103.211.18.63:59614] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2JiGeq9LtYp4zuPO1dwAAAGM"]
[Wed Sep 30 01:11:34.871508 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.871763 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.937535 2026] [security2:error] [pid 270884:tid 271123] [client 20.211.90.37:39992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/82.php"] [unique_id "ary2JiGeq9LtYp4zuPO1eAAAAGg"]
[Wed Sep 30 01:11:34.945800 2026] [security2:error] [pid 270884:tid 271024] [client 4.240.25.22:41678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/as.php"] [unique_id "ary2JiGeq9LtYp4zuPO1eQAAAAU"]
[Wed Sep 30 01:11:34.964836 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:34.965104 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:34.974331 2026] [qos:error] [pid 270884:tid 270907] [remote 71.163.24.225:51348] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.163.24.225, id=ary2JiGeq9LtYp4zuPO1ewAAYRU
[Wed Sep 30 01:11:35.013786 2026] [security2:error] [pid 276620:tid 276775] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2J9PAdfEWqmGIkg1lBwAAAiQ"]
[Wed Sep 30 01:11:35.031838 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.1.101:53459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ans.php"] [unique_id "ary2JyGeq9LtYp4zuPO1fQAAAG8"]
[Wed Sep 30 01:11:35.058033 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.058450 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.083381 2026] [security2:error] [pid 270884:tid 270927] [remote 89.151.18.26:51856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.18.151.89.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ary2JyGeq9LtYp4zuPO1gAAACyk"], referer: https://inspirationalspeakerstm.ca/wp-login.php
[Wed Sep 30 01:11:35.143643 2026] [security2:error] [pid 270884:tid 271040] [client 13.70.4.78:19741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/class-ajax.php"] [unique_id "ary2JyGeq9LtYp4zuPO1hAAAABU"]
[Wed Sep 30 01:11:35.150624 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.151066 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.237377 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.237399 2026] [security2:error] [pid 270884:tid 271119] [client 74.208.150.137:45280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.150.208.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "graphicdesignmmd.com"] [uri "/wp-login.php"] [unique_id "ary2JyGeq9LtYp4zuPO1iAAAAGQ"]
[Wed Sep 30 01:11:35.237842 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.272057 2026] [security2:error] [pid 270884:tid 271104] [client 116.193.128.26:61255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1iwAAAFU"]
[Wed Sep 30 01:11:35.272148 2026] [security2:error] [pid 270884:tid 271104] [client 116.193.128.26:61255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1iwAAAFU"]
[Wed Sep 30 01:11:35.295496 2026] [qos:error] [pid 270884:tid 270913] [remote 24.244.101.81:33218] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=24.244.101.81, id=ary2JyGeq9LtYp4zuPO1jQAAMRs
[Wed Sep 30 01:11:35.302091 2026] [security2:error] [pid 270884:tid 271118] [client 167.234.98.173:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2JyGeq9LtYp4zuPO1jgAAAGM"]
[Wed Sep 30 01:11:35.315943 2026] [security2:error] [pid 270884:tid 271043] [client 20.219.19.141:27957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/myglu.php"] [unique_id "ary2JyGeq9LtYp4zuPO1jwAAABg"]
[Wed Sep 30 01:11:35.329650 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.330109 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.332948 2026] [access_compat:error] [pid 276059:tid 276244] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:35.333220 2026] [access_compat:error] [pid 276059:tid 276244] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:35.365481 2026] [security2:error] [pid 276059:tid 276260] [client 13.70.1.101:45878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/gf.php"] [unique_id "ary2J3tqdHBwD77138e5GgAAAdA"]
[Wed Sep 30 01:11:35.372430 2026] [security2:error] [pid 270884:tid 271130] [client 20.214.191.94:46339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/admin.php/c.php"] [unique_id "ary2JyGeq9LtYp4zuPO1kAAAAG8"]
[Wed Sep 30 01:11:35.426487 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.426949 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.475660 2026] [security2:error] [pid 276620:tid 276844] [client 13.70.4.78:19736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gm.php"] [unique_id "ary2J9PAdfEWqmGIkg1lEAAAAmk"]
[Wed Sep 30 01:11:35.508893 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.509164 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.509851 2026] [security2:error] [pid 270884:tid 271116] [client 201.32.215.149:5650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1lwAAAGE"]
[Wed Sep 30 01:11:35.509964 2026] [security2:error] [pid 270884:tid 271116] [client 201.32.215.149:5650] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1lwAAAGE"]
[Wed Sep 30 01:11:35.520686 2026] [security2:error] [pid 276059:tid 276284] [client 116.197.133.25:60547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2J3tqdHBwD77138e5HgAAAeg"]
[Wed Sep 30 01:11:35.520861 2026] [security2:error] [pid 276059:tid 276284] [client 116.197.133.25:60547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2J3tqdHBwD77138e5HgAAAeg"]
[Wed Sep 30 01:11:35.524194 2026] [security2:error] [pid 270884:tid 271040] [client 20.219.2.60:11894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/rip.php"] [unique_id "ary2JyGeq9LtYp4zuPO1mQAAABU"]
[Wed Sep 30 01:11:35.546778 2026] [security2:error] [pid 270884:tid 271123] [client 20.28.180.172:62350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/admin-footer.php"] [unique_id "ary2JyGeq9LtYp4zuPO1mgAAAGg"]
[Wed Sep 30 01:11:35.601531 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.601787 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.615451 2026] [security2:error] [pid 270884:tid 271034] [client 155.190.6.18:35280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1oAAAAA8"]
[Wed Sep 30 01:11:35.615576 2026] [security2:error] [pid 270884:tid 271034] [client 155.190.6.18:35280] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2JyGeq9LtYp4zuPO1oAAAAA8"]
[Wed Sep 30 01:11:35.684139 2026] [security2:error] [pid 270884:tid 271078] [client 13.70.1.101:45839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/man.php"] [unique_id "ary2JyGeq9LtYp4zuPO1ogAAADs"]
[Wed Sep 30 01:11:35.693386 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.693823 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.696224 2026] [security2:error] [pid 276620:tid 276781] [client 20.70.173.30:7410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/cilus.php"] [unique_id "ary2J9PAdfEWqmGIkg1lGQAAAio"]
[Wed Sep 30 01:11:35.756095 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvcGNw
[Wed Sep 30 01:11:35.756359 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=pwnkit&p=L3Zhci9saWIvcGNw
[Wed Sep 30 01:11:35.762327 2026] [security2:error] [pid 276620:tid 276803] [client 177.223.162.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2J9PAdfEWqmGIkg1lHAAAAkA"]
[Wed Sep 30 01:11:35.784686 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.785126 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.808599 2026] [security2:error] [pid 276059:tid 276262] [client 20.214.191.94:61497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/admin.php/go.php"] [unique_id "ary2J3tqdHBwD77138e5IgAAAdI"]
[Wed Sep 30 01:11:35.811517 2026] [security2:error] [pid 276059:tid 276219] [client 201.1.12.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/toners"] [unique_id "ary2J3tqdHBwD77138e5IwAAAac"]
[Wed Sep 30 01:11:35.822851 2026] [security2:error] [pid 270884:tid 271086] [client 20.211.90.37:40402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/admin.php/nope.php"] [unique_id "ary2JyGeq9LtYp4zuPO1sgAAAEM"]
[Wed Sep 30 01:11:35.835564 2026] [security2:error] [pid 276620:tid 276817] [client 217.181.91.197:53921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2J9PAdfEWqmGIkg1lGgAAAk4"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:35.865743 2026] [access_compat:error] [pid 276059:tid 276235] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:35.866025 2026] [access_compat:error] [pid 276059:tid 276235] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:35.875998 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.876259 2026] [access_compat:error] [pid 270884:tid 271116] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:35.935236 2026] [security2:error] [pid 276059:tid 276299] [client 20.28.180.172:29956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wp5.php"] [unique_id "ary2J3tqdHBwD77138e5JQAAAfc"]
[Wed Sep 30 01:11:35.950039 2026] [security2:error] [pid 276620:tid 276792] [client 106.214.2.47:14336] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2J9PAdfEWqmGIkg1lIAAAAjU"]
[Wed Sep 30 01:11:35.956427 2026] [security2:error] [pid 276620:tid 276792] [client 106.214.2.47:14336] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2J9PAdfEWqmGIkg1lIAAAAjU"]
[Wed Sep 30 01:11:35.964745 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:35.965241 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.005036 2026] [security2:error] [pid 270884:tid 271131] [client 13.70.1.101:42706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/dev.php"] [unique_id "ary2KCGeq9LtYp4zuPO1uAAAAHA"]
[Wed Sep 30 01:11:36.015887 2026] [security2:error] [pid 270884:tid 271119] [client 13.70.4.78:19767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/class-wp-site-list.php"] [unique_id "ary2KCGeq9LtYp4zuPO1ugAAAGQ"]
[Wed Sep 30 01:11:36.055422 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.055681 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.107203 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.30.107:30432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/bthil.php"] [unique_id "ary2KCGeq9LtYp4zuPO1vAAAAAU"]
[Wed Sep 30 01:11:36.127904 2026] [security2:error] [pid 270884:tid 271126] [client 182.69.182.151:16988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2KCGeq9LtYp4zuPO1vQAAAGs"]
[Wed Sep 30 01:11:36.128470 2026] [security2:error] [pid 270884:tid 271126] [client 182.69.182.151:16988] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2KCGeq9LtYp4zuPO1vQAAAGs"]
[Wed Sep 30 01:11:36.147749 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.148036 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.156216 2026] [security2:error] [pid 276059:tid 276245] [client 20.219.19.141:28003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/aboutt.php"] [unique_id "ary2KHtqdHBwD77138e5KQAAAcE"]
[Wed Sep 30 01:11:36.221866 2026] [security2:error] [pid 270884:tid 271130] [client 20.214.191.94:47024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/groud3.php"] [unique_id "ary2KCGeq9LtYp4zuPO1wgAAAG8"]
[Wed Sep 30 01:11:36.238640 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.238937 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.311363 2026] [security2:error] [pid 270884:tid 271131] [client 20.219.2.60:30035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/vanda.php"] [unique_id "ary2KCGeq9LtYp4zuPO1yQAAAHA"]
[Wed Sep 30 01:11:36.315991 2026] [security2:error] [pid 270884:tid 271100] [client 13.70.1.101:42736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ms-edit.php"] [unique_id "ary2KCGeq9LtYp4zuPO1ygAAAFE"]
[Wed Sep 30 01:11:36.332501 2026] [access_compat:error] [pid 276059:tid 276210] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.332948 2026] [access_compat:error] [pid 276059:tid 276210] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.338643 2026] [security2:error] [pid 276620:tid 276654] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2KNPAdfEWqmGIkg1lJAACbhg"], referer: https://forum.torquayfans.com/viewtopic.php?p=249714
[Wed Sep 30 01:11:36.338665 2026] [security2:error] [pid 276620:tid 276654] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2KNPAdfEWqmGIkg1lJAACbhg"], referer: https://forum.torquayfans.com/viewtopic.php?p=249714
[Wed Sep 30 01:11:36.339382 2026] [security2:error] [pid 270884:tid 271068] [client 179.105.122.52:52970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2KCGeq9LtYp4zuPO1wQAAADE"]
[Wed Sep 30 01:11:36.375652 2026] [access_compat:error] [pid 276059:tid 276222] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:36.376106 2026] [access_compat:error] [pid 276059:tid 276222] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:36.411341 2026] [security2:error] [pid 276620:tid 276818] [client 152.56.240.85:63849] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2KNPAdfEWqmGIkg1lJQAAAk8"]
[Wed Sep 30 01:11:36.411657 2026] [security2:error] [pid 276620:tid 276818] [client 152.56.240.85:63849] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2KNPAdfEWqmGIkg1lJQAAAk8"]
[Wed Sep 30 01:11:36.428212 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.428681 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.459383 2026] [security2:error] [pid 270884:tid 271126] [client 20.70.173.30:38791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/dronishness.php"] [unique_id "ary2KCGeq9LtYp4zuPO1zgAAAGs"]
[Wed Sep 30 01:11:36.515475 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.515895 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.594697 2026] [security2:error] [pid 270884:tid 271068] [client 13.70.4.78:20476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/asd2.php"] [unique_id "ary2KCGeq9LtYp4zuPO10gAAADE"]
[Wed Sep 30 01:11:36.603146 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.603564 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.633780 2026] [security2:error] [pid 276620:tid 276806] [client 57.141.14.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2KNPAdfEWqmGIkg1lMAAAAkM"]
[Wed Sep 30 01:11:36.643097 2026] [security2:error] [pid 270884:tid 271059] [client 13.70.1.101:53486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/txets.php"] [unique_id "ary2KCGeq9LtYp4zuPO11gAAACg"]
[Wed Sep 30 01:11:36.672362 2026] [security2:error] [pid 276620:tid 276775] [client 20.194.5.96:64461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/chosen.php"] [unique_id "ary2KNPAdfEWqmGIkg1lMQAAAiQ"]
[Wed Sep 30 01:11:36.676928 2026] [security2:error] [pid 270884:tid 271118] [client 168.100.149.153:57946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3fcfc76cd24f6a77e9afe4acbcb40721.7b.css.gz"] [unique_id "ary2KCGeq9LtYp4zuPO11wAAYyE"]
[Wed Sep 30 01:11:36.692037 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.692312 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:61337] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.783927 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.784183 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.820134 2026] [security2:error] [pid 270884:tid 271130] [client 20.214.191.94:61471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/gaxby.php"] [unique_id "ary2KCGeq9LtYp4zuPO13wAAAG8"]
[Wed Sep 30 01:11:36.838187 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:36.838481 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:36.877292 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.877861 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.930095 2026] [security2:error] [pid 276620:tid 276779] [client 20.194.96.176:42638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/media.php"] [unique_id "ary2KNPAdfEWqmGIkg1lNgAAAig"]
[Wed Sep 30 01:11:36.965839 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:36.966090 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:36.978697 2026] [security2:error] [pid 270884:tid 271030] [client 13.70.1.101:21015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/hao.php"] [unique_id "ary2KCGeq9LtYp4zuPO15AAAAAs"]
[Wed Sep 30 01:11:37.033843 2026] [security2:error] [pid 270884:tid 271034] [client 103.168.67.253:52986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2KSGeq9LtYp4zuPO16AAAAA8"]
[Wed Sep 30 01:11:37.060904 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.061185 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.078709 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.4.78:19737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/cdc.php"] [unique_id "ary2KSGeq9LtYp4zuPO16QAAAG8"]
[Wed Sep 30 01:11:37.111118 2026] [security2:error] [pid 270884:tid 271090] [client 216.73.216.46:61337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2KSGeq9LtYp4zuPO16gAAAEc"], referer: http://www.homs.co.ke/?action=adminer&p=L3Zhci9hc2w%3D
[Wed Sep 30 01:11:37.140047 2026] [security2:error] [pid 270884:tid 271078] [client 20.211.90.37:39982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/222.php"] [unique_id "ary2KSGeq9LtYp4zuPO16wAAADs"]
[Wed Sep 30 01:11:37.148931 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.149196 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.238209 2026] [security2:error] [pid 270884:tid 271100] [client 4.240.25.22:11570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/simple.php"] [unique_id "ary2KSGeq9LtYp4zuPO17QAAAFE"]
[Wed Sep 30 01:11:37.239652 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.239939 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.302992 2026] [security2:error] [pid 276059:tid 276215] [client 13.70.1.101:45858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/33.php"] [unique_id "ary2KXtqdHBwD77138e5NwAAAaM"]
[Wed Sep 30 01:11:37.329276 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.329551 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.349675 2026] [access_compat:error] [pid 276059:tid 276199] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:37.349949 2026] [access_compat:error] [pid 276059:tid 276199] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:37.375502 2026] [security2:error] [pid 270884:tid 271086] [client 20.198.74.230:23899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/kerang.php"] [unique_id "ary2KSGeq9LtYp4zuPO18QAAAEM"]
[Wed Sep 30 01:11:37.433529 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.433980 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.506895 2026] [security2:error] [pid 270884:tid 271034] [client 20.214.191.94:61463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/dh9u7.php"] [unique_id "ary2KSGeq9LtYp4zuPO19QAAAA8"]
[Wed Sep 30 01:11:37.512713 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.512997 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.540572 2026] [security2:error] [pid 270884:tid 271126] [client 20.219.19.141:28010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wp-whe.php"] [unique_id "ary2KSGeq9LtYp4zuPO1-QAAAGs"]
[Wed Sep 30 01:11:37.587375 2026] [security2:error] [pid 270884:tid 271040] [client 31.189.214.146:52618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2KSGeq9LtYp4zuPO1_wAAABU"]
[Wed Sep 30 01:11:37.587948 2026] [security2:error] [pid 270884:tid 271040] [client 31.189.214.146:52618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2KSGeq9LtYp4zuPO1_wAAABU"]
[Wed Sep 30 01:11:37.601227 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.601495 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.622629 2026] [security2:error] [pid 270884:tid 270941] [remote 89.151.18.26:51856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.18.151.89.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ary2KSGeq9LtYp4zuPO2AQAASjc"], referer: https://inspirationalspeakerstm.ca/wp-admin/
[Wed Sep 30 01:11:37.630333 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.1.101:38443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/adminner.php"] [unique_id "ary2KSGeq9LtYp4zuPO2AgAAAG8"]
[Wed Sep 30 01:11:37.636273 2026] [security2:error] [pid 270884:tid 270909] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2KSGeq9LtYp4zuPO2AwAAURc"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D90790
[Wed Sep 30 01:11:37.638337 2026] [security2:error] [pid 270884:tid 271096] [client 20.70.173.30:25939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/pfm.php"] [unique_id "ary2KSGeq9LtYp4zuPO2BAAAAE0"]
[Wed Sep 30 01:11:37.645405 2026] [security2:error] [pid 276620:tid 276763] [client 20.70.173.30:38873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/wp.php"] [unique_id "ary2KdPAdfEWqmGIkg1lPgAAAhg"]
[Wed Sep 30 01:11:37.651964 2026] [security2:error] [pid 276620:tid 276850] [client 20.211.90.37:39977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/sallu.php"] [unique_id "ary2KdPAdfEWqmGIkg1lQAAAAm8"]
[Wed Sep 30 01:11:37.662113 2026] [security2:error] [pid 270884:tid 271087] [client 172.234.224.112:62631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.224.234.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "odeonsite-stalbans.co.uk"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ary2KSGeq9LtYp4zuPO2BQAAAEQ"]
[Wed Sep 30 01:11:37.677280 2026] [qos:error] [pid 270884:tid 271006] [remote 72.218.206.82:60578] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=72.218.206.82, id=ary2KSGeq9LtYp4zuPO2CgAAFXQ
[Wed Sep 30 01:11:37.692656 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.692957 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.732767 2026] [security2:error] [pid 276620:tid 276882] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KdPAdfEWqmGIkg1lRQAAAo8"]
[Wed Sep 30 01:11:37.755191 2026] [security2:error] [pid 276059:tid 276303] [client 45.138.12.44:10296] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.amazingbirthdays.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2KXtqdHBwD77138e5PgAAAfs"]
[Wed Sep 30 01:11:37.780374 2026] [security2:error] [pid 276059:tid 276258] [client 20.214.191.94:47010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/yvnqcuic.php"] [unique_id "ary2KXtqdHBwD77138e5QAAAAc4"]
[Wed Sep 30 01:11:37.785617 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.785895 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.815945 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.4.78:20379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gulu.php"] [unique_id "ary2KdPAdfEWqmGIkg1lSAAAAn0"]
[Wed Sep 30 01:11:37.835134 2026] [qos:error] [pid 276059:tid 276102] [remote 153.66.205.181:35430] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=153.66.205.181, id=ary2KXtqdHBwD77138e5QQABoSY
[Wed Sep 30 01:11:37.849794 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:37.850149 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:37.876623 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.876906 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:37.926612 2026] [qos:error] [pid 270884:tid 270894] [remote 73.213.180.77:49814] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.213.180.77, id=ary2KSGeq9LtYp4zuPO2DwAAFQg
[Wed Sep 30 01:11:37.939306 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9kZXYvYmxvY2s%3D
[Wed Sep 30 01:11:37.939581 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly9kZXYvYmxvY2s%3D
[Wed Sep 30 01:11:37.944311 2026] [security2:error] [pid 276620:tid 276786] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KdPAdfEWqmGIkg1lSwAAAi8"]
[Wed Sep 30 01:11:37.948964 2026] [security2:error] [pid 270884:tid 271130] [client 20.70.173.30:8150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2KSGeq9LtYp4zuPO2EwAAAG8"]
[Wed Sep 30 01:11:37.956740 2026] [security2:error] [pid 276620:tid 276771] [client 13.70.1.101:21007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/thoms.php"] [unique_id "ary2KdPAdfEWqmGIkg1lTAAAAiA"]
[Wed Sep 30 01:11:37.967788 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:37.968063 2026] [access_compat:error] [pid 270884:tid 271100] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.016772 2026] [security2:error] [pid 270884:tid 271131] [client 103.241.204.139:61932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2KiGeq9LtYp4zuPO2FgAAAHA"]
[Wed Sep 30 01:11:38.016941 2026] [security2:error] [pid 270884:tid 271131] [client 103.241.204.139:61932] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2KiGeq9LtYp4zuPO2FgAAAHA"]
[Wed Sep 30 01:11:38.060416 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.060695 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.062260 2026] [security2:error] [pid 276620:tid 276885] [client 20.214.191.94:46341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/koiy.php"] [unique_id "ary2KtPAdfEWqmGIkg1lUAAAApI"]
[Wed Sep 30 01:11:38.105390 2026] [security2:error] [pid 270884:tid 271096] [client 173.254.29.157:52298] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2KiGeq9LtYp4zuPO2HQAAAE0"]
[Wed Sep 30 01:11:38.121932 2026] [security2:error] [pid 270884:tid 271090] [client 173.254.29.157:52308] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2KiGeq9LtYp4zuPO2HgAAAEc"]
[Wed Sep 30 01:11:38.137582 2026] [security2:error] [pid 270884:tid 271089] [client 173.254.29.157:52312] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2KiGeq9LtYp4zuPO2HwAAAEY"]
[Wed Sep 30 01:11:38.149608 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.149883 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.152761 2026] [security2:error] [pid 270884:tid 271068] [client 173.254.29.157:52318] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2KiGeq9LtYp4zuPO2IgAAADE"]
[Wed Sep 30 01:11:38.209865 2026] [security2:error] [pid 270884:tid 271119] [client 13.70.4.78:20442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/bala.php"] [unique_id "ary2KiGeq9LtYp4zuPO2JAAAAGQ"]
[Wed Sep 30 01:11:38.221397 2026] [security2:error] [pid 270884:tid 271068] [client 20.28.180.172:29629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/new.php"] [unique_id "ary2KiGeq9LtYp4zuPO2JQAAADE"]
[Wed Sep 30 01:11:38.241941 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.242231 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.285504 2026] [security2:error] [pid 270884:tid 271086] [client 13.70.1.101:53461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/a.php"] [unique_id "ary2KiGeq9LtYp4zuPO2KwAAAEM"]
[Wed Sep 30 01:11:38.331133 2026] [qos:error] [pid 276620:tid 276652] [remote 109.166.97.226:33144] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=109.166.97.226, id=ary2KtPAdfEWqmGIkg1lWQACahY
[Wed Sep 30 01:11:38.332381 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.332635 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.336215 2026] [security2:error] [pid 276620:tid 276794] [client 20.214.191.94:47014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wordfence-waf.php"] [unique_id "ary2KtPAdfEWqmGIkg1lWgAAAjc"]
[Wed Sep 30 01:11:38.365007 2026] [security2:error] [pid 276620:tid 276853] [client 20.28.180.172:18341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws84.php"] [unique_id "ary2KtPAdfEWqmGIkg1lWwAAAnI"]
[Wed Sep 30 01:11:38.373482 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:38.373924 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:38.428194 2026] [security2:error] [pid 276620:tid 276808] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KtPAdfEWqmGIkg1lXQAAAkU"]
[Wed Sep 30 01:11:38.433092 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.433535 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.471143 2026] [security2:error] [pid 270884:tid 271068] [client 20.219.2.60:30056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/domains.php"] [unique_id "ary2KiGeq9LtYp4zuPO2MAAAADE"]
[Wed Sep 30 01:11:38.485624 2026] [security2:error] [pid 270884:tid 271059] [client 20.194.5.96:64497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/radio.php"] [unique_id "ary2KiGeq9LtYp4zuPO2MgAAACg"]
[Wed Sep 30 01:11:38.491529 2026] [security2:error] [pid 270884:tid 271130] [client 20.204.42.136:35755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/29.php"] [unique_id "ary2KiGeq9LtYp4zuPO2MwAAAG8"]
[Wed Sep 30 01:11:38.515777 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.516114 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.540676 2026] [security2:error] [pid 276059:tid 276216] [client 13.70.4.78:20451] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/c99.php"] [unique_id "ary2KntqdHBwD77138e5SAAAAaQ"]
[Wed Sep 30 01:11:38.574634 2026] [security2:error] [pid 276620:tid 276805] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KtPAdfEWqmGIkg1lXgAAAkI"]
[Wed Sep 30 01:11:38.600214 2026] [security2:error] [pid 276059:tid 276198] [client 20.214.191.94:58820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wp5.php"] [unique_id "ary2KntqdHBwD77138e5SgAAAZM"]
[Wed Sep 30 01:11:38.604995 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.605245 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.606457 2026] [security2:error] [pid 270884:tid 271096] [client 13.70.1.101:45847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/b8.php"] [unique_id "ary2KiGeq9LtYp4zuPO2NgAAAE0"]
[Wed Sep 30 01:11:38.658438 2026] [security2:error] [pid 270884:tid 271119] [client 168.100.149.214:41078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/76a3a3788aec692e2727f78ee70eb913.1df7.css.gz"] [unique_id "ary2KiGeq9LtYp4zuPO2OgAAZAE"]
[Wed Sep 30 01:11:38.695549 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.695881 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.709685 2026] [security2:error] [pid 276620:tid 276770] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KtPAdfEWqmGIkg1lXwAAAh8"]
[Wed Sep 30 01:11:38.716637 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.2.60:11747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/new4.php"] [unique_id "ary2KiGeq9LtYp4zuPO2PAAAAE0"]
[Wed Sep 30 01:11:38.767216 2026] [security2:error] [pid 270884:tid 271093] [client 20.211.90.37:39968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/k.php"] [unique_id "ary2KiGeq9LtYp4zuPO2PwAAAEo"]
[Wed Sep 30 01:11:38.771634 2026] [security2:error] [pid 270884:tid 271119] [client 151.244.96.45:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2KiGeq9LtYp4zuPO2QQAAAGQ"]
[Wed Sep 30 01:11:38.785760 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.786024 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.788910 2026] [security2:error] [pid 276059:tid 276277] [client 20.194.30.107:23693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2KntqdHBwD77138e5TQAAAeE"]
[Wed Sep 30 01:11:38.828061 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:38.828332 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:38.837277 2026] [security2:error] [pid 276620:tid 276773] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2KtPAdfEWqmGIkg1lYwAAAiI"]
[Wed Sep 30 01:11:38.862325 2026] [security2:error] [pid 276620:tid 276813] [client 37.41.16.35:64413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2KtPAdfEWqmGIkg1lZAAAAko"]
[Wed Sep 30 01:11:38.862451 2026] [security2:error] [pid 276620:tid 276813] [client 37.41.16.35:64413] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2KtPAdfEWqmGIkg1lZAAAAko"]
[Wed Sep 30 01:11:38.876237 2026] [security2:error] [pid 270884:tid 271068] [client 20.214.191.94:58854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/em.php"] [unique_id "ary2KiGeq9LtYp4zuPO2QwAAADE"]
[Wed Sep 30 01:11:38.878651 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.878937 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.895158 2026] [security2:error] [pid 270884:tid 271116] [client 13.70.4.78:20469] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/c99.php"] [unique_id "ary2KiGeq9LtYp4zuPO2SAAAAGE"]
[Wed Sep 30 01:11:38.936117 2026] [security2:error] [pid 270884:tid 271047] [client 13.70.1.101:20997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/sid.php"] [unique_id "ary2KiGeq9LtYp4zuPO2SwAAABw"]
[Wed Sep 30 01:11:38.970111 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:38.970435 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:38.974892 2026] [security2:error] [pid 270884:tid 271057] [client 20.219.19.141:27998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/ssixta.php"] [unique_id "ary2KiGeq9LtYp4zuPO2TQAAACY"]
[Wed Sep 30 01:11:39.060996 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.061265 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.065261 2026] [security2:error] [pid 270884:tid 271057] [client 177.101.116.224:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2KyGeq9LtYp4zuPO2VAAAACY"]
[Wed Sep 30 01:11:39.082537 2026] [security2:error] [pid 270884:tid 271057] [client 4.240.25.22:8503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/term.php"] [unique_id "ary2KyGeq9LtYp4zuPO2VQAAACY"]
[Wed Sep 30 01:11:39.152307 2026] [security2:error] [pid 270884:tid 271068] [client 20.214.191.94:61496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/hp.php"] [unique_id "ary2KyGeq9LtYp4zuPO2WQAAADE"]
[Wed Sep 30 01:11:39.153194 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.153600 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.158325 2026] [security2:error] [pid 270884:tid 270923] [remote 89.151.18.26:51856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.18.151.89.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2WgAAXyU"]
[Wed Sep 30 01:11:39.158569 2026] [security2:error] [pid 270884:tid 271114] [client 89.151.18.26:51856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2WgAAXyU"]
[Wed Sep 30 01:11:39.191684 2026] [authz_core:error] [pid 270884:tid 271057] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Wed Sep 30 01:11:39.247297 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.247743 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:45735] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.252185 2026] [security2:error] [pid 270884:tid 271078] [client 45.138.12.32:33640] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rst.pwx.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2KyGeq9LtYp4zuPO2YQAAADs"]
[Wed Sep 30 01:11:39.258924 2026] [security2:error] [pid 270884:tid 271057] [client 13.70.1.101:45844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/bro.php"] [unique_id "ary2KyGeq9LtYp4zuPO2YwAAACY"]
[Wed Sep 30 01:11:39.281402 2026] [qos:error] [pid 270884:tid 270963] [remote 189.196.205.134:40337] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.196.205.134, id=ary2KyGeq9LtYp4zuPO2ZQAAcEk
[Wed Sep 30 01:11:39.309544 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:39.309818 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzc1NDgzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:39.316200 2026] [security2:error] [pid 276620:tid 276873] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2K9PAdfEWqmGIkg1lZwAAAoY"]
[Wed Sep 30 01:11:39.333272 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.333539 2026] [access_compat:error] [pid 270884:tid 271093] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.391907 2026] [security2:error] [pid 276620:tid 276812] [client 13.70.4.78:20462] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/c99.php"] [unique_id "ary2K9PAdfEWqmGIkg1laAAAAkk"]
[Wed Sep 30 01:11:39.404221 2026] [qos:error] [pid 270884:tid 270998] [remote 139.28.41.53:50072] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=139.28.41.53, id=ary2KyGeq9LtYp4zuPO2ZwAAYWw
[Wed Sep 30 01:11:39.404241 2026] [qos:error] [pid 270884:tid 270979] [remote 99.110.25.189:38412] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=102, c=99.110.25.189, id=ary2KyGeq9LtYp4zuPO2aAAATVk
[Wed Sep 30 01:11:39.435230 2026] [security2:error] [pid 270884:tid 270930] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2KyGeq9LtYp4zuPO2agAASSw"]
[Wed Sep 30 01:11:39.438973 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.440389 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.445002 2026] [security2:error] [pid 276059:tid 276312] [client 20.214.191.94:61455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/wpuse.php"] [unique_id "ary2K3tqdHBwD77138e5UwAAAgQ"]
[Wed Sep 30 01:11:39.465795 2026] [security2:error] [pid 276620:tid 276874] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2K9PAdfEWqmGIkg1lbAAAAoc"]
[Wed Sep 30 01:11:39.500626 2026] [security2:error] [pid 270884:tid 271004] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2KyGeq9LtYp4zuPO2bAAAJnI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147560&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:11:39.500662 2026] [security2:error] [pid 270884:tid 271004] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2KyGeq9LtYp4zuPO2bAAAJnI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147560&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:11:39.501713 2026] [security2:error] [pid 276059:tid 276302] [client 20.28.180.172:29499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/ava.php"] [unique_id "ary2K3tqdHBwD77138e5VAAAAfo"]
[Wed Sep 30 01:11:39.506681 2026] [security2:error] [pid 276059:tid 276292] [client 20.211.90.37:39635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/24.php"] [unique_id "ary2K3tqdHBwD77138e5VQAAAfA"]
[Wed Sep 30 01:11:39.515774 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.516061 2026] [access_compat:error] [pid 270884:tid 271040] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.526716 2026] [security2:error] [pid 276059:tid 276254] [client 20.194.5.96:64504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2K3tqdHBwD77138e5VgAAAco"]
[Wed Sep 30 01:11:39.586247 2026] [security2:error] [pid 270884:tid 271047] [client 223.181.60.167:32788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2cAAAABw"]
[Wed Sep 30 01:11:39.586356 2026] [security2:error] [pid 270884:tid 271047] [client 223.181.60.167:32788] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2cAAAABw"]
[Wed Sep 30 01:11:39.594017 2026] [security2:error] [pid 276620:tid 276831] [client 13.70.1.101:38452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/xwpg.php"] [unique_id "ary2K9PAdfEWqmGIkg1lbQAAAlw"]
[Wed Sep 30 01:11:39.607861 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.608151 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.615486 2026] [security2:error] [pid 270884:tid 270931] [remote 84.17.60.251:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.hamaraquetta.com"] [uri "/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2cgAAei0"]
[Wed Sep 30 01:11:39.617786 2026] [security2:error] [pid 276620:tid 276763] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2K9PAdfEWqmGIkg1lcAAAAhg"]
[Wed Sep 30 01:11:39.660995 2026] [security2:error] [pid 276059:tid 276314] [client 216.73.216.46:45735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2K3tqdHBwD77138e5WwAAAgY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvZ2FtZXM%3D
[Wed Sep 30 01:11:39.676073 2026] [security2:error] [pid 276620:tid 276850] [client 20.70.173.30:38794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/sb.php"] [unique_id "ary2K9PAdfEWqmGIkg1lcQAAAm8"]
[Wed Sep 30 01:11:39.700508 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.700773 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.718964 2026] [security2:error] [pid 276620:tid 276807] [client 20.214.191.94:46355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/file18x.php"] [unique_id "ary2K9PAdfEWqmGIkg1ldAAAAkQ"]
[Wed Sep 30 01:11:39.790948 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.791379 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.834773 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:39.835038 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:39.886304 2026] [security2:error] [pid 270884:tid 271069] [client 13.70.4.78:20358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/ttivnife.php"] [unique_id "ary2KyGeq9LtYp4zuPO2fwAAADI"]
[Wed Sep 30 01:11:39.886837 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.887328 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:39.904860 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:30349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/144.php"] [unique_id "ary2K9PAdfEWqmGIkg1lewAAAkE"]
[Wed Sep 30 01:11:39.927151 2026] [security2:error] [pid 276620:tid 276817] [client 13.70.1.101:53453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/radio.php"] [unique_id "ary2K9PAdfEWqmGIkg1lfAAAAk4"]
[Wed Sep 30 01:11:39.973524 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:39.973799 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.003299 2026] [security2:error] [pid 270884:tid 271140] [client 20.214.191.94:46992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/123viva.php"] [unique_id "ary2LCGeq9LtYp4zuPO2hgAAAHk"]
[Wed Sep 30 01:11:40.010977 2026] [security2:error] [pid 270884:tid 270886] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2LCGeq9LtYp4zuPO2hwAAMQA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300854&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:11:40.011009 2026] [security2:error] [pid 270884:tid 270886] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2LCGeq9LtYp4zuPO2hwAAMQA"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300854&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:11:40.037724 2026] [security2:error] [pid 270884:tid 271059] [client 20.211.90.37:39987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/blacks.php"] [unique_id "ary2LCGeq9LtYp4zuPO2iAAAACg"]
[Wed Sep 30 01:11:40.039311 2026] [security2:error] [pid 270884:tid 271010] [remote 57.141.14.26:55704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary2KyGeq9LtYp4zuPO2hQAAX3g"]
[Wed Sep 30 01:11:40.064361 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.064633 2026] [access_compat:error] [pid 270884:tid 271069] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.132613 2026] [security2:error] [pid 270884:tid 271096] [client 223.235.102.107:31348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2LCGeq9LtYp4zuPO2iwAAAE0"]
[Wed Sep 30 01:11:40.132723 2026] [security2:error] [pid 270884:tid 271096] [client 223.235.102.107:31348] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2LCGeq9LtYp4zuPO2iwAAAE0"]
[Wed Sep 30 01:11:40.154747 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.155034 2026] [access_compat:error] [pid 270884:tid 271141] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.176659 2026] [qos:error] [pid 270884:tid 270974] [remote 100.38.220.20:43136] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=100.38.220.20, id=ary2LCGeq9LtYp4zuPO2kAAAElQ
[Wed Sep 30 01:11:40.199405 2026] [qos:error] [pid 270884:tid 270960] [remote 99.158.226.194:48574] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=99.158.226.194, id=ary2LCGeq9LtYp4zuPO2kwAAMUY
[Wed Sep 30 01:11:40.214149 2026] [security2:error] [pid 270884:tid 271059] [client 181.229.137.120:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2LCGeq9LtYp4zuPO2lQAAACg"]
[Wed Sep 30 01:11:40.245567 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.245849 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.260596 2026] [security2:error] [pid 276620:tid 276825] [client 13.70.1.101:45826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ccc.php"] [unique_id "ary2LNPAdfEWqmGIkg1lgwAAAlY"]
[Wed Sep 30 01:11:40.278552 2026] [security2:error] [pid 276620:tid 276828] [client 13.70.4.78:20419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/admin.php/2P.php"] [unique_id "ary2LNPAdfEWqmGIkg1lhAAAAlk"]
[Wed Sep 30 01:11:40.300446 2026] [security2:error] [pid 270884:tid 271059] [client 20.214.191.94:58864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dse.net"] [uri "/Components.update.php"] [unique_id "ary2LCGeq9LtYp4zuPO2mgAAACg"]
[Wed Sep 30 01:11:40.300797 2026] [security2:error] [pid 276620:tid 276871] [client 20.194.5.96:44972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/k.php"] [unique_id "ary2LNPAdfEWqmGIkg1lhQAAAoQ"]
[Wed Sep 30 01:11:40.336721 2026] [security2:error] [pid 276620:tid 276792] [client 20.70.173.30:7406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/reviall.php"] [unique_id "ary2LNPAdfEWqmGIkg1lhwAAAjU"]
[Wed Sep 30 01:11:40.350414 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:40.350873 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:40.366236 2026] [security2:error] [pid 270884:tid 271131] [client 182.75.216.230:62179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2LCGeq9LtYp4zuPO2nAAAAHA"]
[Wed Sep 30 01:11:40.366402 2026] [security2:error] [pid 270884:tid 271131] [client 182.75.216.230:62179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2LCGeq9LtYp4zuPO2nAAAAHA"]
[Wed Sep 30 01:11:40.378154 2026] [security2:error] [pid 270884:tid 271114] [client 20.211.90.37:39879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/anom.php"] [unique_id "ary2LCGeq9LtYp4zuPO2nQAAAF8"]
[Wed Sep 30 01:11:40.380234 2026] [security2:error] [pid 270884:tid 271114] [client 20.70.173.30:59134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/dronishness.php"] [unique_id "ary2LCGeq9LtYp4zuPO2ngAAAF8"]
[Wed Sep 30 01:11:40.397701 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.398160 2026] [access_compat:error] [pid 270884:tid 271032] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.406562 2026] [security2:error] [pid 270884:tid 271059] [client 103.168.67.253:24954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2LCGeq9LtYp4zuPO2oAAAACg"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:40.485765 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.486056 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.519340 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.519607 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.590414 2026] [security2:error] [pid 270884:tid 271085] [client 13.70.1.101:53489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wmore1.php"] [unique_id "ary2LCGeq9LtYp4zuPO2rAAAAEI"]
[Wed Sep 30 01:11:40.617158 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.617582 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.635731 2026] [security2:error] [pid 276620:tid 276849] [client 13.70.4.78:19743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/cord.php"] [unique_id "ary2LNPAdfEWqmGIkg1ljgAAAm4"]
[Wed Sep 30 01:11:40.704340 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.704760 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.742433 2026] [security2:error] [pid 270884:tid 271137] [client 20.211.90.37:39976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/groud3.php"] [unique_id "ary2LCGeq9LtYp4zuPO2swAAAHY"]
[Wed Sep 30 01:11:40.791002 2026] [security2:error] [pid 276620:tid 276775] [client 20.198.74.230:23909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/local.php"] [unique_id "ary2LNPAdfEWqmGIkg1lkQAAAiQ"]
[Wed Sep 30 01:11:40.793090 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.793341 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.870540 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:40.870834 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:40.884346 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.887094 2026] [access_compat:error] [pid 270884:tid 271104] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:40.907600 2026] [security2:error] [pid 270884:tid 271137] [client 13.70.1.101:45852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/function.php"] [unique_id "ary2LCGeq9LtYp4zuPO2uAAAAHY"]
[Wed Sep 30 01:11:40.924904 2026] [security2:error] [pid 270884:tid 271068] [client 20.219.2.60:11893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/aa.php"] [unique_id "ary2LCGeq9LtYp4zuPO2ugAAADE"]
[Wed Sep 30 01:11:40.977853 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:40.978190 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:62925] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.038089 2026] [security2:error] [pid 270884:tid 271037] [client 13.70.4.78:20448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/anom.php"] [unique_id "ary2LSGeq9LtYp4zuPO2wAAAABI"]
[Wed Sep 30 01:11:41.065593 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.065868 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.158566 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.158829 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.193561 2026] [security2:error] [pid 276620:tid 276776] [client 20.194.5.96:44944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/133.php"] [unique_id "ary2LdPAdfEWqmGIkg1llwAAAiU"]
[Wed Sep 30 01:11:41.204435 2026] [qos:error] [pid 270884:tid 270973] [remote 108.41.239.115:38364] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=108.41.239.115, id=ary2LSGeq9LtYp4zuPO2xgAAMVM
[Wed Sep 30 01:11:41.214154 2026] [security2:error] [pid 270884:tid 271057] [client 20.211.90.37:39636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/gaxby.php"] [unique_id "ary2LSGeq9LtYp4zuPO2xwAAACY"]
[Wed Sep 30 01:11:41.222617 2026] [security2:error] [pid 270884:tid 271032] [client 13.70.1.101:21378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ab.php"] [unique_id "ary2LSGeq9LtYp4zuPO2yAAAAA0"]
[Wed Sep 30 01:11:41.265373 2026] [security2:error] [pid 270884:tid 270913] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2LSGeq9LtYp4zuPO2zAAAMRs"]
[Wed Sep 30 01:11:41.313631 2026] [security2:error] [pid 270884:tid 271144] [client 168.100.149.232:50328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary2LCGeq9LtYp4zuPO2rgAAfT8"]
[Wed Sep 30 01:11:41.314785 2026] [security2:error] [pid 270884:tid 271068] [client 20.70.173.30:33387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/well.php"] [unique_id "ary2LSGeq9LtYp4zuPO20AAAADE"]
[Wed Sep 30 01:11:41.382555 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:41.382986 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:41.392109 2026] [security2:error] [pid 276620:tid 276857] [client 216.73.216.46:62925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2LdPAdfEWqmGIkg1lmQAAAnY"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9saWI2NC9hdWRpdA%3D%3D
[Wed Sep 30 01:11:41.419846 2026] [security2:error] [pid 276059:tid 276321] [client 20.70.173.30:38886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/ops.php"] [unique_id "ary2LXtqdHBwD77138e5cgAAAg0"]
[Wed Sep 30 01:11:41.433922 2026] [security2:error] [pid 270884:tid 270935] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2LSGeq9LtYp4zuPO21AAAFTE"]
[Wed Sep 30 01:11:41.450008 2026] [security2:error] [pid 270884:tid 271032] [client 13.70.4.78:20356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/plugins.php"] [unique_id "ary2LSGeq9LtYp4zuPO21QAAAA0"]
[Wed Sep 30 01:11:41.450840 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.451269 2026] [access_compat:error] [pid 270884:tid 271078] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.491867 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.492294 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.508025 2026] [security2:error] [pid 270884:tid 271144] [client 20.219.19.141:28031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/tesla.php"] [unique_id "ary2LSGeq9LtYp4zuPO22AAAAH0"]
[Wed Sep 30 01:11:41.508945 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.511105 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.521446 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.521735 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.552220 2026] [security2:error] [pid 270884:tid 271095] [client 13.70.1.101:53487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/css.php"] [unique_id "ary2LSGeq9LtYp4zuPO22wAAAEw"]
[Wed Sep 30 01:11:41.599429 2026] [security2:error] [pid 270884:tid 270957] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2LSGeq9LtYp4zuPO23gAALkM"]
[Wed Sep 30 01:11:41.603207 2026] [security2:error] [pid 270884:tid 271042] [client 4.240.25.22:41698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/new.php"] [unique_id "ary2LSGeq9LtYp4zuPO24AAAABc"]
[Wed Sep 30 01:11:41.610891 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.611186 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.702706 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.703000 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.761376 2026] [security2:error] [pid 270884:tid 270928] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2LSGeq9LtYp4zuPO25wAALio"]
[Wed Sep 30 01:11:41.783680 2026] [security2:error] [pid 276620:tid 276884] [client 20.194.5.96:44988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wsd.php"] [unique_id "ary2LdPAdfEWqmGIkg1loQAAApE"]
[Wed Sep 30 01:11:41.802483 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.802921 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.821142 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:41.821578 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:41.869528 2026] [security2:error] [pid 276620:tid 276795] [client 66.249.74.14:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary2LdPAdfEWqmGIkg1lpQAAAjg"]
[Wed Sep 30 01:11:41.876478 2026] [security2:error] [pid 276059:tid 276214] [client 43.104.4.227:25495] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js"] [unique_id "ary2LXtqdHBwD77138e5ewAAAaI"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:41.884431 2026] [security2:error] [pid 270884:tid 271081] [client 13.70.1.101:42694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2LSGeq9LtYp4zuPO26wAAAD4"]
[Wed Sep 30 01:11:41.887538 2026] [security2:error] [pid 270884:tid 271037] [client 20.219.2.60:30340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/asd.php"] [unique_id "ary2LSGeq9LtYp4zuPO27AAAABI"]
[Wed Sep 30 01:11:41.888531 2026] [security2:error] [pid 276620:tid 276790] [client 103.168.67.253:24960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2LdPAdfEWqmGIkg1lpgAAAjM"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:41.890176 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.890426 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:51513] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:41.922921 2026] [security2:error] [pid 270884:tid 270921] [remote 74.7.227.17:38460] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2LSGeq9LtYp4zuPO27gAAFSM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302274&sid=4b305c258a93932e8c023b32c1b28291
[Wed Sep 30 01:11:41.922948 2026] [security2:error] [pid 270884:tid 270921] [remote 74.7.227.17:38460] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2LSGeq9LtYp4zuPO27gAAFSM"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302274&sid=4b305c258a93932e8c023b32c1b28291
[Wed Sep 30 01:11:41.924859 2026] [security2:error] [pid 270884:tid 270915] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2LSGeq9LtYp4zuPO27wAALh0"]
[Wed Sep 30 01:11:41.947696 2026] [security2:error] [pid 276620:tid 276793] [client 20.194.96.176:25412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/images.php"] [unique_id "ary2LdPAdfEWqmGIkg1lqAAAAjY"]
[Wed Sep 30 01:11:41.980547 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:41.980824 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.071360 2026] [security2:error] [pid 270884:tid 271065] [client 20.211.90.37:40423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/dh9u7.php"] [unique_id "ary2LiGeq9LtYp4zuPO29gAAAC4"]
[Wed Sep 30 01:11:42.073980 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.074446 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.095524 2026] [security2:error] [pid 270884:tid 270989] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2LiGeq9LtYp4zuPO2-AAAImM"]
[Wed Sep 30 01:11:42.111405 2026] [security2:error] [pid 270884:tid 271137] [client 203.122.45.246:60374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2LiGeq9LtYp4zuPO2-QAAAHY"]
[Wed Sep 30 01:11:42.111561 2026] [security2:error] [pid 270884:tid 271137] [client 203.122.45.246:60374] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2LiGeq9LtYp4zuPO2-QAAAHY"]
[Wed Sep 30 01:11:42.113532 2026] [security2:error] [pid 276620:tid 276798] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2LtPAdfEWqmGIkg1lqgAAAjs"]
[Wed Sep 30 01:11:42.191551 2026] [security2:error] [pid 270884:tid 271096] [client 13.70.4.78:19739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/groud3.php"] [unique_id "ary2LiGeq9LtYp4zuPO2-gAAAE0"]
[Wed Sep 30 01:11:42.214778 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.215076 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.219884 2026] [security2:error] [pid 270884:tid 271065] [client 13.70.1.101:45853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2LiGeq9LtYp4zuPO2-wAAAC4"]
[Wed Sep 30 01:11:42.243055 2026] [security2:error] [pid 276620:tid 276871] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2LtPAdfEWqmGIkg1lrgAAAoQ"]
[Wed Sep 30 01:11:42.260168 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.260629 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:15523] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.276462 2026] [security2:error] [pid 270884:tid 270948] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2LiGeq9LtYp4zuPO3AAAATT4"]
[Wed Sep 30 01:11:42.305960 2026] [security2:error] [pid 276059:tid 276318] [client 216.73.216.46:51513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2LntqdHBwD77138e5fwAAAgo"], referer: http://www.homs.co.ke/?action=adminer&p=Ly9wcm9jL2lycQ%3D%3D
[Wed Sep 30 01:11:42.313452 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:42.313719 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:42.324182 2026] [security2:error] [pid 270884:tid 271081] [client 20.28.180.172:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/bnm.php"] [unique_id "ary2LiGeq9LtYp4zuPO3AQAAAD4"]
[Wed Sep 30 01:11:42.344910 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.345179 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.443519 2026] [security2:error] [pid 270884:tid 270995] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2LiGeq9LtYp4zuPO3BQAATmk"]
[Wed Sep 30 01:11:42.491410 2026] [security2:error] [pid 276059:tid 276285] [client 4.240.25.22:38769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/222.php"] [unique_id "ary2LntqdHBwD77138e5gwAAAek"]
[Wed Sep 30 01:11:42.501280 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:9414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.501796 2026] [access_compat:error] [pid 270884:tid 271068] [client 216.73.216.46:9414] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.518737 2026] [security2:error] [pid 276059:tid 276187] [remote 57.141.14.69:20544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary2LntqdHBwD77138e5gQAB2ns"]
[Wed Sep 30 01:11:42.540524 2026] [security2:error] [pid 270884:tid 271144] [client 20.28.180.172:34281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "ary2LiGeq9LtYp4zuPO3CAAAAH0"]
[Wed Sep 30 01:11:42.547749 2026] [security2:error] [pid 276620:tid 276760] [client 13.70.1.101:42700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-links-opml.php"] [unique_id "ary2LtPAdfEWqmGIkg1ltgAAAhU"]
[Wed Sep 30 01:11:42.573731 2026] [security2:error] [pid 276059:tid 276228] [client 216.73.216.46:64490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2LntqdHBwD77138e5hAAAAbA"]
[Wed Sep 30 01:11:42.613101 2026] [security2:error] [pid 270884:tid 270967] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2LiGeq9LtYp4zuPO3DQAATk0"]
[Wed Sep 30 01:11:42.614469 2026] [security2:error] [pid 276620:tid 276818] [client 13.70.4.78:20364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gaxby.php"] [unique_id "ary2LtPAdfEWqmGIkg1lugAAAk8"]
[Wed Sep 30 01:11:42.620694 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.621051 2026] [access_compat:error] [pid 270884:tid 271047] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.662062 2026] [security2:error] [pid 276059:tid 276216] [client 20.204.42.136:35832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/olvxz.php"] [unique_id "ary2LntqdHBwD77138e5hQAAAaQ"]
[Wed Sep 30 01:11:42.671600 2026] [security2:error] [pid 276620:tid 276794] [client 168.100.149.72:38840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/5a96ca46a4613789749e08682f20efb6.3a.css.gz"] [unique_id "ary2LtPAdfEWqmGIkg1lvQACNxk"]
[Wed Sep 30 01:11:42.710583 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.710862 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.740010 2026] [security2:error] [pid 270884:tid 271047] [client 20.194.5.96:44987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/BDKR28WP.php"] [unique_id "ary2LiGeq9LtYp4zuPO3EAAAABw"]
[Wed Sep 30 01:11:42.775198 2026] [security2:error] [pid 270884:tid 270986] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2LiGeq9LtYp4zuPO3EQAATmA"]
[Wed Sep 30 01:11:42.796113 2026] [security2:error] [pid 276059:tid 276198] [client 20.70.173.30:5784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/xiugai.php"] [unique_id "ary2LntqdHBwD77138e5hgAAAZM"]
[Wed Sep 30 01:11:42.797251 2026] [security2:error] [pid 276620:tid 276688] [remote 47.128.114.170:51410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/ncat/9/pg/13"] [unique_id "ary2LtPAdfEWqmGIkg1lwAACYzo"]
[Wed Sep 30 01:11:42.806170 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.806594 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.820492 2026] [security2:error] [pid 276059:tid 276240] [client 20.211.90.37:40428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/koiy.php"] [unique_id "ary2LntqdHBwD77138e5hwAAAbw"]
[Wed Sep 30 01:11:42.826824 2026] [security2:error] [pid 276620:tid 276881] [client 20.219.2.60:11846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/jk.php"] [unique_id "ary2LtPAdfEWqmGIkg1lxAAAAo4"]
[Wed Sep 30 01:11:42.837201 2026] [qos:error] [pid 270884:tid 270939] [remote 38.236.124.38:36062] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=38.236.124.38, id=ary2LiGeq9LtYp4zuPO3FQAALjU
[Wed Sep 30 01:11:42.860948 2026] [security2:error] [pid 270884:tid 271081] [client 13.70.1.101:53440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/hp.php"] [unique_id "ary2LiGeq9LtYp4zuPO3FwAAAD4"]
[Wed Sep 30 01:11:42.891704 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.891976 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:42.901162 2026] [access_compat:error] [pid 276059:tid 276273] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:42.901450 2026] [access_compat:error] [pid 276059:tid 276273] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:42.940958 2026] [security2:error] [pid 276059:tid 276279] [client 43.104.4.227:25495] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary2LntqdHBwD77138e5iQAAAeM"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:42.941128 2026] [security2:error] [pid 270884:tid 271144] [client 13.70.4.78:20434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/dh9u7.php"] [unique_id "ary2LiGeq9LtYp4zuPO3GwAAAH0"]
[Wed Sep 30 01:11:42.982694 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:42.982957 2026] [access_compat:error] [pid 270884:tid 271144] [client 216.73.216.46:32150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.021046 2026] [security2:error] [pid 270884:tid 271068] [client 216.244.66.197:35670] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "crayons-couleur.com"] [uri "/robots.txt"] [unique_id "ary2LyGeq9LtYp4zuPO3IAAAADE"]
[Wed Sep 30 01:11:43.021145 2026] [security2:error] [pid 270884:tid 271068] [client 216.244.66.197:35670] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "crayons-couleur.com"] [uri "/robots.txt"] [unique_id "ary2LyGeq9LtYp4zuPO3IAAAADE"]
[Wed Sep 30 01:11:43.029405 2026] [qos:error] [pid 270884:tid 270938] [remote 176.88.23.247:35997] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=176.88.23.247, id=ary2LyGeq9LtYp4zuPO3IgAAfTQ
[Wed Sep 30 01:11:43.040871 2026] [security2:error] [pid 276620:tid 276847] [client 43.104.4.205:49713] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary2L9PAdfEWqmGIkg1lxwAAAmw"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:43.044103 2026] [qos:error] [pid 270884:tid 270941] [remote 174.160.56.86:38890] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=174.160.56.86, id=ary2LyGeq9LtYp4zuPO3IwAAfTc
[Wed Sep 30 01:11:43.062714 2026] [security2:error] [pid 270884:tid 271081] [client 20.219.2.60:30346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/zc-104.php"] [unique_id "ary2LyGeq9LtYp4zuPO3JAAAAD4"]
[Wed Sep 30 01:11:43.074026 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.074300 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.111559 2026] [security2:error] [pid 276059:tid 276252] [client 4.240.25.22:8920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/f35.update.php"] [unique_id "ary2L3tqdHBwD77138e5igAAAcg"]
[Wed Sep 30 01:11:43.167661 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.168032 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.173919 2026] [security2:error] [pid 276059:tid 276302] [client 13.70.1.101:21424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/mo.php"] [unique_id "ary2L3tqdHBwD77138e5jAAAAfo"]
[Wed Sep 30 01:11:43.183954 2026] [security2:error] [pid 276620:tid 276826] [client 103.168.67.253:24974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2L9PAdfEWqmGIkg1lygAAAlc"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:43.265881 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.266159 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.281783 2026] [security2:error] [pid 276059:tid 276253] [client 13.70.4.78:19744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/koiy.php"] [unique_id "ary2L3tqdHBwD77138e5kgAAAck"]
[Wed Sep 30 01:11:43.282343 2026] [security2:error] [pid 276620:tid 276769] [client 122.173.27.10:19868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2L9PAdfEWqmGIkg1lzQAAAh4"]
[Wed Sep 30 01:11:43.282491 2026] [security2:error] [pid 276620:tid 276769] [client 122.173.27.10:19868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2L9PAdfEWqmGIkg1lzQAAAh4"]
[Wed Sep 30 01:11:43.296769 2026] [security2:error] [pid 276620:tid 276697] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2L9PAdfEWqmGIkg1lzgACk0M"]
[Wed Sep 30 01:11:43.346107 2026] [access_compat:error] [pid 276059:tid 276244] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:43.346358 2026] [access_compat:error] [pid 276059:tid 276244] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:43.358933 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.359376 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.390672 2026] [security2:error] [pid 270884:tid 271106] [client 20.194.5.96:64500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wmore1.php"] [unique_id "ary2LyGeq9LtYp4zuPO3KwAAAFc"]
[Wed Sep 30 01:11:43.458958 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.459399 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.463446 2026] [security2:error] [pid 276620:tid 276701] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2L9PAdfEWqmGIkg1l0QACHEc"]
[Wed Sep 30 01:11:43.488489 2026] [security2:error] [pid 270884:tid 271065] [client 13.70.1.101:21364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/ivmirgut.php"] [unique_id "ary2LyGeq9LtYp4zuPO3LwAAAC4"]
[Wed Sep 30 01:11:43.499676 2026] [security2:error] [pid 276620:tid 276815] [client 43.104.4.211:22952] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary2L9PAdfEWqmGIkg1l0gAAAkw"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:11:43.508843 2026] [security2:error] [pid 270884:tid 271106] [client 103.168.67.253:24990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2LyGeq9LtYp4zuPO3MAAAAFc"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:43.588772 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:9915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.589049 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:9915] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.613262 2026] [security2:error] [pid 276059:tid 276284] [client 13.70.4.78:19742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wordfence-waf.php"] [unique_id "ary2L3tqdHBwD77138e5lgAAAeg"]
[Wed Sep 30 01:11:43.629223 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.629540 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.630706 2026] [security2:error] [pid 276620:tid 276693] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2L9PAdfEWqmGIkg1l2wACLz8"]
[Wed Sep 30 01:11:43.636144 2026] [security2:error] [pid 276620:tid 276811] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "benchmark(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2L9PAdfEWqmGIkg1l3AAAAkg"]
[Wed Sep 30 01:11:43.684760 2026] [security2:error] [pid 276620:tid 276858] [client 20.211.90.37:39898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wordfence-waf.php"] [unique_id "ary2L9PAdfEWqmGIkg1l3QAAAnc"]
[Wed Sep 30 01:11:43.772839 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.773093 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.798856 2026] [security2:error] [pid 276620:tid 276681] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2L9PAdfEWqmGIkg1l3gACiDM"]
[Wed Sep 30 01:11:43.825580 2026] [security2:error] [pid 270884:tid 271097] [client 13.70.1.101:53443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/baba.php"] [unique_id "ary2LyGeq9LtYp4zuPO3PgAAAE4"]
[Wed Sep 30 01:11:43.835497 2026] [access_compat:error] [pid 276059:tid 276257] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:43.835945 2026] [access_compat:error] [pid 276059:tid 276257] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIxL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:43.836238 2026] [autoindex:error] [pid 276059:tid 276322] [client 194.163.128.162:52609] AH01276: Cannot serve directory /home2/kawasak2/public_html/kawasakiz1/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Sep 30 01:11:43.863519 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.863785 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.870100 2026] [qos:error] [pid 276620:tid 276825] [client 196.3.214.39:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2L9PAdfEWqmGIkg1l4gAAAlY
[Wed Sep 30 01:11:43.907186 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.907461 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:48402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:43.913921 2026] [security2:error] [pid 270884:tid 271097] [client 20.70.173.30:38809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/or.php"] [unique_id "ary2LyGeq9LtYp4zuPO3QQAAAE4"]
[Wed Sep 30 01:11:43.967145 2026] [security2:error] [pid 270884:tid 271026] [client 182.69.182.151:29945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2LyGeq9LtYp4zuPO3QgAAAAc"]
[Wed Sep 30 01:11:43.967549 2026] [security2:error] [pid 270884:tid 271026] [client 182.69.182.151:29945] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2LyGeq9LtYp4zuPO3QgAAAAc"]
[Wed Sep 30 01:11:43.973448 2026] [security2:error] [pid 276620:tid 276722] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2L9PAdfEWqmGIkg1l5AACNFw"]
[Wed Sep 30 01:11:43.998672 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:43.999112 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.000345 2026] [security2:error] [pid 276059:tid 276293] [client 43.104.4.193:3819] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/cache/wpo-minify/1787712162/assets/wpo-minify-footer-woolentor-quickview1781597927.min.js"] [unique_id "ary2L3tqdHBwD77138e5mQAAAfE"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:44.008292 2026] [security2:error] [pid 276620:tid 276821] [client 216.73.216.46:9915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2MNPAdfEWqmGIkg1l5QAAAlI"], referer: http://www.homs.co.ke/?action=adminer&p=L3Byb2MvbmV0L25mc2Zz
[Wed Sep 30 01:11:44.025131 2026] [security2:error] [pid 270884:tid 271144] [client 202.179.95.79:65469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2MCGeq9LtYp4zuPO3RQAAAH0"]
[Wed Sep 30 01:11:44.025216 2026] [security2:error] [pid 270884:tid 271144] [client 202.179.95.79:65469] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2MCGeq9LtYp4zuPO3RQAAAH0"]
[Wed Sep 30 01:11:44.037249 2026] [security2:error] [pid 270884:tid 271106] [client 13.70.4.78:20443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wp5.php"] [unique_id "ary2MCGeq9LtYp4zuPO3RwAAAFc"]
[Wed Sep 30 01:11:44.064332 2026] [security2:error] [pid 270884:tid 271081] [client 20.219.19.141:28008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/222.php"] [unique_id "ary2MCGeq9LtYp4zuPO3SgAAAD4"]
[Wed Sep 30 01:11:44.070984 2026] [security2:error] [pid 270884:tid 271074] [client 20.28.180.172:29610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/2fa307c31b.php"] [unique_id "ary2MCGeq9LtYp4zuPO3SwAAADc"]
[Wed Sep 30 01:11:44.087407 2026] [qos:error] [pid 270884:tid 271132] [client 99.8.5.1:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2MCGeq9LtYp4zuPO3TQAAAHE
[Wed Sep 30 01:11:44.088678 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.089091 2026] [access_compat:error] [pid 270884:tid 271065] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.124656 2026] [security2:error] [pid 270884:tid 271096] [client 20.70.173.30:33335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2MCGeq9LtYp4zuPO3TgAAAE0"]
[Wed Sep 30 01:11:44.145494 2026] [security2:error] [pid 276620:tid 276640] [remote 84.17.60.251:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.hamaraquetta.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2MNPAdfEWqmGIkg1l6AACYAo"]
[Wed Sep 30 01:11:44.170694 2026] [security2:error] [pid 276620:tid 276870] [client 13.70.1.101:38457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/Components.php"] [unique_id "ary2MNPAdfEWqmGIkg1l6wAAAoM"]
[Wed Sep 30 01:11:44.185102 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.185550 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.214742 2026] [security2:error] [pid 270884:tid 271026] [client 20.194.30.107:23595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/xiugai.php"] [unique_id "ary2MCGeq9LtYp4zuPO3UQAAAAc"]
[Wed Sep 30 01:11:44.272280 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.272568 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.311144 2026] [security2:error] [pid 276620:tid 276849] [client 216.73.216.46:48402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2MNPAdfEWqmGIkg1l7QAAAm4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvbGliL2luaXRyYW1mcw%3D%3D
[Wed Sep 30 01:11:44.330525 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:44.330822 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:44.361028 2026] [security2:error] [pid 270884:tid 271144] [client 20.70.173.30:7412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/666.php"] [unique_id "ary2MCGeq9LtYp4zuPO3VwAAAH0"]
[Wed Sep 30 01:11:44.366089 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.366526 2026] [access_compat:error] [pid 270884:tid 271074] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.407384 2026] [security2:error] [pid 276620:tid 276775] [client 20.28.180.172:62356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/amax.php"] [unique_id "ary2MNPAdfEWqmGIkg1l8AAAAiQ"]
[Wed Sep 30 01:11:44.442456 2026] [security2:error] [pid 270884:tid 271096] [client 13.70.4.78:19725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/em.php"] [unique_id "ary2MCGeq9LtYp4zuPO3WAAAAE0"]
[Wed Sep 30 01:11:44.463826 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.464279 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.506619 2026] [security2:error] [pid 270884:tid 271144] [client 13.70.1.101:42735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/aboutt.php"] [unique_id "ary2MCGeq9LtYp4zuPO3WgAAAH0"]
[Wed Sep 30 01:11:44.544548 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.544980 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.636081 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.636436 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.646013 2026] [security2:error] [pid 270884:tid 271096] [client 20.194.5.96:44978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/177.php"] [unique_id "ary2MCGeq9LtYp4zuPO3YwAAAE0"]
[Wed Sep 30 01:11:44.646091 2026] [security2:error] [pid 276620:tid 276868] [client 185.252.168.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2MNPAdfEWqmGIkg1l9wAAAoE"]
[Wed Sep 30 01:11:44.658906 2026] [security2:error] [pid 276620:tid 276881] [client 168.100.149.166:64842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/c3be9e612baf8fc4af612de8af4c0864.230.css.gz"] [unique_id "ary2MNPAdfEWqmGIkg1l-QACjjQ"]
[Wed Sep 30 01:11:44.724376 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.724649 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.748863 2026] [security2:error] [pid 270884:tid 271074] [client 45.138.12.32:33748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lfm.ieo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2MCGeq9LtYp4zuPO3awAAADc"]
[Wed Sep 30 01:11:44.792792 2026] [security2:error] [pid 276059:tid 276239] [client 13.70.4.78:20420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/hp.php"] [unique_id "ary2MHtqdHBwD77138e5oQAAAbs"]
[Wed Sep 30 01:11:44.800252 2026] [security2:error] [pid 276059:tid 276236] [client 20.219.2.60:30059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/rzki.php"] [unique_id "ary2MHtqdHBwD77138e5ogAAAbg"]
[Wed Sep 30 01:11:44.821571 2026] [security2:error] [pid 270884:tid 271026] [client 13.70.1.101:21433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary2MCGeq9LtYp4zuPO3bwAAAAc"]
[Wed Sep 30 01:11:44.838868 2026] [access_compat:error] [pid 276059:tid 276283] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:44.839302 2026] [access_compat:error] [pid 276059:tid 276283] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:44.847889 2026] [security2:error] [pid 276059:tid 276317] [client 20.211.90.37:39894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/em.php"] [unique_id "ary2MHtqdHBwD77138e5pQAAAgk"]
[Wed Sep 30 01:11:44.868430 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.868746 2026] [access_compat:error] [pid 270884:tid 271026] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.907386 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.907665 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:30733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:44.998451 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:44.998718 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.046400 2026] [security2:error] [pid 270884:tid 271134] [client 43.227.131.37:12628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.131.227.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3dAAAAHM"]
[Wed Sep 30 01:11:45.046603 2026] [security2:error] [pid 270884:tid 271134] [client 43.227.131.37:12628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentalcareeducation.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3dAAAAHM"]
[Wed Sep 30 01:11:45.076737 2026] [security2:error] [pid 270884:tid 271026] [client 4.240.25.22:18726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/gecko.php"] [unique_id "ary2MSGeq9LtYp4zuPO3dQAAAAc"]
[Wed Sep 30 01:11:45.103998 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.104464 2026] [access_compat:error] [pid 270884:tid 271113] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.134101 2026] [security2:error] [pid 276059:tid 276264] [client 84.17.60.236:42074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "networkwestmichigan.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2MXtqdHBwD77138e5pgAAAdQ"]
[Wed Sep 30 01:11:45.146874 2026] [security2:error] [pid 276620:tid 276801] [client 13.70.1.101:45850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/xx.php"] [unique_id "ary2MdPAdfEWqmGIkg1l_gAAAj4"]
[Wed Sep 30 01:11:45.179686 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.179960 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.199087 2026] [security2:error] [pid 270884:tid 271134] [client 13.70.4.78:20366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wpuse.php"] [unique_id "ary2MSGeq9LtYp4zuPO3eQAAAHM"]
[Wed Sep 30 01:11:45.270445 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.270715 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.278711 2026] [security2:error] [pid 276620:tid 276786] [client 45.138.12.44:10528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.amazingbirthdays.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary2MdPAdfEWqmGIkg1mBAAAAi8"]
[Wed Sep 30 01:11:45.280220 2026] [security2:error] [pid 270884:tid 271102] [client 20.219.2.60:11383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/gcqoa.php"] [unique_id "ary2MSGeq9LtYp4zuPO3fQAAAFM"]
[Wed Sep 30 01:11:45.313997 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:45.314251 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODEwMDE2L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:45.334559 2026] [security2:error] [pid 270884:tid 271096] [client 112.197.57.27:53935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.57.197.112.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "devinmooredesign.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3fwAAAE0"]
[Wed Sep 30 01:11:45.334759 2026] [security2:error] [pid 270884:tid 271096] [client 112.197.57.27:53935] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "devinmooredesign.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3fwAAAE0"]
[Wed Sep 30 01:11:45.337377 2026] [security2:error] [pid 276620:tid 276861] [client 20.211.90.37:39973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/hp.php"] [unique_id "ary2MdPAdfEWqmGIkg1mBQAAAno"]
[Wed Sep 30 01:11:45.342892 2026] [qos:error] [pid 276620:tid 276689] [remote 87.197.92.16:44996] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=87.197.92.16, id=ary2MdPAdfEWqmGIkg1mBgACNjs
[Wed Sep 30 01:11:45.368854 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.369292 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.395446 2026] [qos:error] [pid 270884:tid 270887] [remote 68.37.173.102:46002] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=68.37.173.102, id=ary2MSGeq9LtYp4zuPO3gAAAVwE
[Wed Sep 30 01:11:45.458478 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.458954 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.466900 2026] [security2:error] [pid 276620:tid 276825] [client 20.194.5.96:44951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/ccc.php"] [unique_id "ary2MdPAdfEWqmGIkg1mCgAAAlY"]
[Wed Sep 30 01:11:45.484664 2026] [security2:error] [pid 270884:tid 271050] [client 13.70.1.101:45882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/gelay.php"] [unique_id "ary2MSGeq9LtYp4zuPO3gwAAAB8"]
[Wed Sep 30 01:11:45.496429 2026] [security2:error] [pid 270884:tid 271134] [client 20.70.173.30:60225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/xkSudf.php"] [unique_id "ary2MSGeq9LtYp4zuPO3hAAAAHM"]
[Wed Sep 30 01:11:45.519333 2026] [security2:error] [pid 270884:tid 271096] [client 20.219.19.141:28434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/media.php"] [unique_id "ary2MSGeq9LtYp4zuPO3hQAAAE0"]
[Wed Sep 30 01:11:45.548450 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.548901 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.579774 2026] [security2:error] [pid 276620:tid 276874] [client 103.211.18.63:60237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2MdPAdfEWqmGIkg1mDAAAAoc"]
[Wed Sep 30 01:11:45.579951 2026] [security2:error] [pid 276620:tid 276874] [client 103.211.18.63:60237] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2MdPAdfEWqmGIkg1mDAAAAoc"]
[Wed Sep 30 01:11:45.607078 2026] [security2:error] [pid 270884:tid 271102] [client 65.111.31.150:44777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.31.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2MSGeq9LtYp4zuPO3hwAAAFM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:45.616574 2026] [security2:error] [pid 270884:tid 271081] [client 20.198.74.230:24140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/Jcrop.php"] [unique_id "ary2MSGeq9LtYp4zuPO3iAAAAD4"]
[Wed Sep 30 01:11:45.635182 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.635456 2026] [access_compat:error] [pid 270884:tid 271096] [client 216.73.216.46:65127] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.641698 2026] [security2:error] [pid 270884:tid 271053] [client 13.70.4.78:20467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/file18x.php"] [unique_id "ary2MSGeq9LtYp4zuPO3jAAAACI"]
[Wed Sep 30 01:11:45.724051 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.724304 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.768541 2026] [security2:error] [pid 270884:tid 271025] [client 20.211.90.37:39909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dklhardwareconstruction.com"] [uri "/wpuse.php"] [unique_id "ary2MSGeq9LtYp4zuPO3lQAAAAY"]
[Wed Sep 30 01:11:45.786982 2026] [security2:error] [pid 276620:tid 276882] [client 84.17.60.236:42082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/xmlrpc.php"] [unique_id "ary2MdPAdfEWqmGIkg1mDwAAAo8"]
[Wed Sep 30 01:11:45.798534 2026] [security2:error] [pid 276620:tid 276828] [client 13.70.1.101:42725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/htaccess.php"] [unique_id "ary2MdPAdfEWqmGIkg1mEAAAAlk"]
[Wed Sep 30 01:11:45.810840 2026] [security2:error] [pid 270884:tid 270920] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2MSGeq9LtYp4zuPO3mAAAMyI"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?t=1881
[Wed Sep 30 01:11:45.810871 2026] [security2:error] [pid 270884:tid 270920] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2MSGeq9LtYp4zuPO3mAAAMyI"], referer: https://torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?t=1881
[Wed Sep 30 01:11:45.817187 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.817506 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:16846] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.833189 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:45.833613 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:45.846859 2026] [security2:error] [pid 276059:tid 276218] [client 43.104.4.193:5155] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js"] [unique_id "ary2MXtqdHBwD77138e5qwAAAaY"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:45.891575 2026] [security2:error] [pid 276620:tid 276818] [client 20.70.173.30:38817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/baru.php"] [unique_id "ary2MdPAdfEWqmGIkg1mFQAAAk8"]
[Wed Sep 30 01:11:45.924209 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.2.60:30021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/xsas.php"] [unique_id "ary2MdPAdfEWqmGIkg1mGAAAAkM"]
[Wed Sep 30 01:11:45.970599 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:45.971020 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:45.974536 2026] [security2:error] [pid 270884:tid 271023] [client 116.193.128.26:61911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3oQAAAAQ"]
[Wed Sep 30 01:11:45.974637 2026] [security2:error] [pid 270884:tid 271023] [client 116.193.128.26:61911] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2MSGeq9LtYp4zuPO3oQAAAAQ"]
[Wed Sep 30 01:11:46.000827 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.001106 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.004707 2026] [security2:error] [pid 270884:tid 271034] [client 116.197.133.25:61179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2MiGeq9LtYp4zuPO3ogAAAA8"]
[Wed Sep 30 01:11:46.004866 2026] [security2:error] [pid 270884:tid 271034] [client 116.197.133.25:61179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2MiGeq9LtYp4zuPO3ogAAAA8"]
[Wed Sep 30 01:11:46.091662 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.092079 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.116732 2026] [security2:error] [pid 270884:tid 271074] [client 155.190.6.18:50644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2MiGeq9LtYp4zuPO3pAAAADc"]
[Wed Sep 30 01:11:46.125421 2026] [security2:error] [pid 276620:tid 276802] [client 13.70.1.101:20996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/readme.php"] [unique_id "ary2MtPAdfEWqmGIkg1mIwAAAj8"]
[Wed Sep 30 01:11:46.182509 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.182935 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.271191 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.271585 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.344568 2026] [security2:error] [pid 276620:tid 276886] [client 20.194.5.96:64452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/0xD.php"] [unique_id "ary2MtPAdfEWqmGIkg1mKgAAApM"]
[Wed Sep 30 01:11:46.350526 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:46.350796 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:46.365929 2026] [qos:error] [pid 270884:tid 270979] [remote 50.60.165.117:55605] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.60.165.117, id=ary2MiGeq9LtYp4zuPO3qAAAV1k
[Wed Sep 30 01:11:46.372545 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.373016 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.389035 2026] [security2:error] [pid 270884:tid 271074] [client 155.190.6.18:50644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2MiGeq9LtYp4zuPO3pAAAADc"]
[Wed Sep 30 01:11:46.396953 2026] [qos:error] [pid 270884:tid 270998] [remote 213.109.224.68:53270] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=213.109.224.68, id=ary2MiGeq9LtYp4zuPO3qQAAVmw
[Wed Sep 30 01:11:46.439774 2026] [security2:error] [pid 276620:tid 276789] [client 13.70.1.101:21478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/max.php"] [unique_id "ary2MtPAdfEWqmGIkg1mMAAAAjI"]
[Wed Sep 30 01:11:46.449997 2026] [security2:error] [pid 276620:tid 276834] [client 20.28.180.172:60302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/66.php"] [unique_id "ary2MtPAdfEWqmGIkg1mMQAAAl8"]
[Wed Sep 30 01:11:46.469836 2026] [security2:error] [pid 276620:tid 276884] [client 177.137.205.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2MtPAdfEWqmGIkg1mMgAAApE"]
[Wed Sep 30 01:11:46.506494 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.506784 2026] [access_compat:error] [pid 270884:tid 271097] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.515321 2026] [security2:error] [pid 276620:tid 276803] [client 13.70.4.78:19733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/123viva.php"] [unique_id "ary2MtPAdfEWqmGIkg1mNgAAAkA"]
[Wed Sep 30 01:11:46.601060 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.601504 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.606886 2026] [security2:error] [pid 276620:tid 276852] [client 49.43.163.212:52985] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mOQAAAnE"]
[Wed Sep 30 01:11:46.607002 2026] [security2:error] [pid 276620:tid 276852] [client 49.43.163.212:52985] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mOQAAAnE"]
[Wed Sep 30 01:11:46.612662 2026] [security2:error] [pid 276620:tid 276830] [client 201.32.215.149:6117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mOgAAAls"]
[Wed Sep 30 01:11:46.612753 2026] [security2:error] [pid 276620:tid 276830] [client 201.32.215.149:6117] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mOgAAAls"]
[Wed Sep 30 01:11:46.621963 2026] [security2:error] [pid 276620:tid 276782] [client 45.138.12.32:33838] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rxk.svd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2MtPAdfEWqmGIkg1mOwAAAis"]
[Wed Sep 30 01:11:46.629674 2026] [security2:error] [pid 270884:tid 271074] [client 20.28.180.172:29445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/aqotrjkg.php"] [unique_id "ary2MiGeq9LtYp4zuPO3rgAAADc"]
[Wed Sep 30 01:11:46.677059 2026] [security2:error] [pid 270884:tid 271023] [client 168.100.149.171:15706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/95479f266ff5086036ce67fe404b602a.10c1.css.gz"] [unique_id "ary2MiGeq9LtYp4zuPO3rwAABEs"]
[Wed Sep 30 01:11:46.689635 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.689915 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.695728 2026] [security2:error] [pid 276620:tid 276837] [client 106.214.2.47:25554] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mPgAAAmI"]
[Wed Sep 30 01:11:46.695872 2026] [security2:error] [pid 276620:tid 276837] [client 106.214.2.47:25554] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mPgAAAmI"]
[Wed Sep 30 01:11:46.696406 2026] [security2:error] [pid 276620:tid 276874] [client 45.138.12.32:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ley.xio.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2MtPAdfEWqmGIkg1mPwAAAoc"]
[Wed Sep 30 01:11:46.775090 2026] [security2:error] [pid 276059:tid 276285] [client 13.70.1.101:21426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/post.php"] [unique_id "ary2MntqdHBwD77138e5tgAAAek"]
[Wed Sep 30 01:11:46.780873 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.781162 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.817927 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.818189 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:46.829948 2026] [security2:error] [pid 276620:tid 276846] [client 20.219.14.152:41883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2MtPAdfEWqmGIkg1mRQAAAms"]
[Wed Sep 30 01:11:46.868270 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:46.868543 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:46.896793 2026] [security2:error] [pid 270884:tid 271106] [client 13.70.4.78:20468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/Components.update.php"] [unique_id "ary2MiGeq9LtYp4zuPO3swAAAFc"]
[Wed Sep 30 01:11:46.907343 2026] [security2:error] [pid 270884:tid 271074] [client 20.194.96.176:42637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/ops.php"] [unique_id "ary2MiGeq9LtYp4zuPO3tAAAADc"]
[Wed Sep 30 01:11:46.910309 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:46.910579 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.002030 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.002298 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.063310 2026] [security2:error] [pid 276620:tid 276813] [client 152.56.240.85:64363] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mSwAAAko"]
[Wed Sep 30 01:11:47.063466 2026] [security2:error] [pid 276620:tid 276813] [client 152.56.240.85:64363] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2MtPAdfEWqmGIkg1mSwAAAko"]
[Wed Sep 30 01:11:47.069340 2026] [security2:error] [pid 276620:tid 276820] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "benchmark(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "psrecruit.org.uk"] [uri "/wp/v2/posts/999999"] [unique_id "ary2M9PAdfEWqmGIkg1mTQAAAlE"]
[Wed Sep 30 01:11:47.092020 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.092287 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.097752 2026] [security2:error] [pid 276620:tid 276775] [client 13.70.1.101:21385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/themes.php"] [unique_id "ary2M9PAdfEWqmGIkg1mTwAAAiQ"]
[Wed Sep 30 01:11:47.181433 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.181709 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.229429 2026] [security2:error] [pid 276059:tid 276277] [client 20.219.2.60:30350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/d12.php"] [unique_id "ary2M3tqdHBwD77138e5wgAAAeE"]
[Wed Sep 30 01:11:47.273220 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.273668 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.277708 2026] [security2:error] [pid 276620:tid 276717] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2M9PAdfEWqmGIkg1mVwACk1c"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=180&t=1538
[Wed Sep 30 01:11:47.277747 2026] [security2:error] [pid 276620:tid 276717] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2M9PAdfEWqmGIkg1mVwACk1c"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=180&t=1538
[Wed Sep 30 01:11:47.294257 2026] [security2:error] [pid 270884:tid 271050] [client 20.219.14.152:41911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2MyGeq9LtYp4zuPO3vAAAAB8"]
[Wed Sep 30 01:11:47.347759 2026] [security2:error] [pid 276620:tid 276854] [client 13.70.4.78:19717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/sm.php"] [unique_id "ary2M9PAdfEWqmGIkg1mWAAAAnM"]
[Wed Sep 30 01:11:47.383127 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.383580 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.411549 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:47.412076 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:47.423446 2026] [security2:error] [pid 276620:tid 276835] [client 13.70.1.101:53470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary2M9PAdfEWqmGIkg1mXQAAAmA"]
[Wed Sep 30 01:11:47.469035 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.470483 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.546637 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.546930 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.553065 2026] [security2:error] [pid 270884:tid 271060] [client 20.204.42.136:35137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/hywzd.php"] [unique_id "ary2MyGeq9LtYp4zuPO3wQAAACk"]
[Wed Sep 30 01:11:47.637633 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.637913 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.690714 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.4.78:20394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/mknobgkg.php"] [unique_id "ary2M9PAdfEWqmGIkg1mZQAAAn0"]
[Wed Sep 30 01:11:47.708792 2026] [security2:error] [pid 276620:tid 276771] [client 4.240.25.22:18789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/wp-the.php"] [unique_id "ary2M9PAdfEWqmGIkg1mZgAAAiA"]
[Wed Sep 30 01:11:47.723918 2026] [security2:error] [pid 276620:tid 276804] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/"] [unique_id "ary2M9PAdfEWqmGIkg1mZwAAAkE"]
[Wed Sep 30 01:11:47.727149 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.727518 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:20439] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:47.743201 2026] [security2:error] [pid 276620:tid 276782] [client 13.70.1.101:42715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary2M9PAdfEWqmGIkg1mawAAAis"]
[Wed Sep 30 01:11:47.756101 2026] [security2:error] [pid 270884:tid 271038] [client 20.219.14.152:41863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2MyGeq9LtYp4zuPO3zAAAABM"]
[Wed Sep 30 01:11:47.812459 2026] [security2:error] [pid 276620:tid 276829] [client 216.73.216.46:20439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2M9PAdfEWqmGIkg1mbQAAAlo"]
[Wed Sep 30 01:11:47.830899 2026] [security2:error] [pid 276059:tid 276122] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2M3tqdHBwD77138e50wAB5To"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=54307&sid=85513c1140f317dc5150149616bc74d4
[Wed Sep 30 01:11:47.830937 2026] [security2:error] [pid 276059:tid 276122] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2M3tqdHBwD77138e50wAB5To"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=54307&sid=85513c1140f317dc5150149616bc74d4
[Wed Sep 30 01:11:47.876214 2026] [security2:error] [pid 276620:tid 276874] [client 20.219.2.60:11659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/plugin-editor.php"] [unique_id "ary2M9PAdfEWqmGIkg1mbwAAAoc"]
[Wed Sep 30 01:11:47.889421 2026] [security2:error] [pid 276620:tid 276853] [client 103.168.66.101:62524] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/"] [unique_id "ary2M9PAdfEWqmGIkg1mcQAAAnI"]
[Wed Sep 30 01:11:47.893272 2026] [access_compat:error] [pid 276059:tid 276322] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 01:11:47.893542 2026] [access_compat:error] [pid 276059:tid 276322] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 01:11:47.904031 2026] [security2:error] [pid 276059:tid 276257] [client 84.17.60.236:42098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "networkwestmichigan.com"] [uri "/xmlrpc.php"] [unique_id "ary2M3tqdHBwD77138e52AAAAc0"]
[Wed Sep 30 01:11:47.904187 2026] [security2:error] [pid 276059:tid 276257] [client 84.17.60.236:42098] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "networkwestmichigan.com"] [uri "/xmlrpc.php"] [unique_id "ary2M3tqdHBwD77138e52AAAAc0"]
[Wed Sep 30 01:11:47.913314 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:47.913745 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.005651 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.006097 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.059032 2026] [security2:error] [pid 270884:tid 271077] [client 13.70.1.101:45886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/click.php"] [unique_id "ary2NCGeq9LtYp4zuPO30gAAADo"]
[Wed Sep 30 01:11:48.086772 2026] [security2:error] [pid 276620:tid 276818] [client 13.70.4.78:20404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/dairg.php"] [unique_id "ary2NNPAdfEWqmGIkg1meAAAAk8"]
[Wed Sep 30 01:11:48.092046 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.092308 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.138390 2026] [security2:error] [pid 270884:tid 271124] [client 20.219.19.141:28425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/24.php"] [unique_id "ary2NCGeq9LtYp4zuPO30wAAAGk"]
[Wed Sep 30 01:11:48.186919 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.187344 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.230948 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.14.152:41899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/aa.php"] [unique_id "ary2NCGeq9LtYp4zuPO31wAAAAo"]
[Wed Sep 30 01:11:48.274845 2026] [security2:error] [pid 276620:tid 276832] [client 20.194.5.96:64490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/sallu.php"] [unique_id "ary2NNPAdfEWqmGIkg1mgQAAAl0"]
[Wed Sep 30 01:11:48.275105 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.275359 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.352496 2026] [access_compat:error] [pid 276059:tid 276278] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:48.352797 2026] [access_compat:error] [pid 276059:tid 276278] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:48.380544 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.381024 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:2035] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.396043 2026] [security2:error] [pid 276620:tid 276868] [client 13.70.1.101:57081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/install.php"] [unique_id "ary2NNPAdfEWqmGIkg1mgwAAAoE"]
[Wed Sep 30 01:11:48.406198 2026] [security2:error] [pid 276059:tid 276264] [client 74.7.242.1:39178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2NHtqdHBwD77138e55AAAAdQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:11:48.465136 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.468548 2026] [security2:error] [pid 276059:tid 276212] [client 13.70.4.78:20396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/dronishness.php"] [unique_id "ary2NHtqdHBwD77138e55gAAAaA"]
[Wed Sep 30 01:11:48.469604 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.524180 2026] [security2:error] [pid 270884:tid 271038] [client 20.219.2.60:30358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/okxh.php"] [unique_id "ary2NCGeq9LtYp4zuPO33QAAABM"]
[Wed Sep 30 01:11:48.548620 2026] [security2:error] [pid 276620:tid 276841] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary2NNPAdfEWqmGIkg1mjAAAAmY"]
[Wed Sep 30 01:11:48.550021 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.550379 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.615483 2026] [security2:error] [pid 276620:tid 276849] [client 103.241.204.139:62465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2NNPAdfEWqmGIkg1mjQAAAm4"]
[Wed Sep 30 01:11:48.615647 2026] [security2:error] [pid 276620:tid 276849] [client 103.241.204.139:62465] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2NNPAdfEWqmGIkg1mjQAAAm4"]
[Wed Sep 30 01:11:48.641331 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.641746 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.662772 2026] [security2:error] [pid 276620:tid 276819] [client 45.138.12.32:46640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lfm.ieo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2NNPAdfEWqmGIkg1mjwAAAlA"]
[Wed Sep 30 01:11:48.680604 2026] [security2:error] [pid 276620:tid 276883] [client 168.100.149.49:17434] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d8d13985b13590a9554e53fa38af6c22.177b.css.gz"] [unique_id "ary2NNPAdfEWqmGIkg1mkAACkBo"]
[Wed Sep 30 01:11:48.710239 2026] [security2:error] [pid 276620:tid 276786] [client 20.219.14.152:41477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/z70.php"] [unique_id "ary2NNPAdfEWqmGIkg1mkQAAAi8"]
[Wed Sep 30 01:11:48.730048 2026] [security2:error] [pid 270884:tid 271106] [client 13.70.1.101:45831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/13k.php"] [unique_id "ary2NCGeq9LtYp4zuPO35AAAAFc"]
[Wed Sep 30 01:11:48.732973 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.733379 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:48.799886 2026] [security2:error] [pid 276620:tid 276803] [client 216.73.216.46:2035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2NNPAdfEWqmGIkg1mlwAAAkA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvaTJj
[Wed Sep 30 01:11:48.818449 2026] [security2:error] [pid 270884:tid 271106] [client 13.70.4.78:20437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/Row_wsoo.php"] [unique_id "ary2NCGeq9LtYp4zuPO36gAAAFc"]
[Wed Sep 30 01:11:48.848967 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 01:11:48.849226 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 01:11:48.959867 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:48.960139 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.035550 2026] [security2:error] [pid 276059:tid 276248] [client 20.28.180.172:61198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/public/file.php"] [unique_id "ary2NXtqdHBwD77138e57QAAAcQ"]
[Wed Sep 30 01:11:49.049909 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.050166 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.058326 2026] [security2:error] [pid 270884:tid 271023] [client 13.70.1.101:42701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/up.php"] [unique_id "ary2NSGeq9LtYp4zuPO38gAAAAQ"]
[Wed Sep 30 01:11:49.141048 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.141309 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.196570 2026] [security2:error] [pid 276059:tid 276230] [client 20.219.14.152:41871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/f35.php"] [unique_id "ary2NXtqdHBwD77138e58QAAAbI"]
[Wed Sep 30 01:11:49.207103 2026] [security2:error] [pid 276059:tid 276266] [client 13.70.4.78:20452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/x2.php"] [unique_id "ary2NXtqdHBwD77138e58gAAAdY"]
[Wed Sep 30 01:11:49.233692 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.233972 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:20813] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.275493 2026] [security2:error] [pid 276059:tid 276303] [client 43.104.4.193:5155] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary2NXtqdHBwD77138e58wAAAfs"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:49.304963 2026] [access_compat:error] [pid 276059:tid 276318] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 01:11:49.305226 2026] [access_compat:error] [pid 276059:tid 276318] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDY=
[Wed Sep 30 01:11:49.324250 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.324519 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.383221 2026] [security2:error] [pid 276059:tid 276226] [client 20.219.2.60:30046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/55b76.php"] [unique_id "ary2NXtqdHBwD77138e59QAAAa4"]
[Wed Sep 30 01:11:49.386626 2026] [security2:error] [pid 276059:tid 276285] [client 13.70.1.101:42740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/0x1949.php"] [unique_id "ary2NXtqdHBwD77138e59gAAAek"]
[Wed Sep 30 01:11:49.411276 2026] [security2:error] [pid 270884:tid 271124] [client 37.41.16.35:65041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2NSGeq9LtYp4zuPO3-AAAAGk"]
[Wed Sep 30 01:11:49.411442 2026] [security2:error] [pid 270884:tid 271124] [client 37.41.16.35:65041] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2NSGeq9LtYp4zuPO3-AAAAGk"]
[Wed Sep 30 01:11:49.423707 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.424160 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.509547 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.509794 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.542678 2026] [security2:error] [pid 270884:tid 271029] [client 13.70.4.78:20371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/v4.php"] [unique_id "ary2NSGeq9LtYp4zuPO3-gAAAAo"]
[Wed Sep 30 01:11:49.579563 2026] [security2:error] [pid 276059:tid 276216] [client 20.194.5.96:55433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/ops.php"] [unique_id "ary2NXtqdHBwD77138e5-gAAAaQ"]
[Wed Sep 30 01:11:49.597631 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.597914 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.647903 2026] [security2:error] [pid 276620:tid 276817] [client 216.73.216.46:20813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2NdPAdfEWqmGIkg1mqwAAAk4"], referer: http://www.homs.co.ke/?action=adminer&p=Ly91c3Ivc2hhcmUvbWFuL21hbjQ%3D
[Wed Sep 30 01:11:49.667494 2026] [security2:error] [pid 276059:tid 276198] [client 20.219.14.152:41488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/adminfuns.php"] [unique_id "ary2NXtqdHBwD77138e5_AAAAZM"]
[Wed Sep 30 01:11:49.687006 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.687248 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.712197 2026] [security2:error] [pid 270884:tid 271124] [client 13.70.1.101:38456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/cong.php"] [unique_id "ary2NSGeq9LtYp4zuPO3_AAAAGk"]
[Wed Sep 30 01:11:49.758023 2026] [security2:error] [pid 276059:tid 276252] [client 43.104.4.193:5155] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js"] [unique_id "ary2NXtqdHBwD77138e5_gAAAcg"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:49.762066 2026] [security2:error] [pid 276620:tid 276810] [client 20.219.2.60:11690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/plugin-install.php"] [unique_id "ary2NdPAdfEWqmGIkg1msAAAAkc"]
[Wed Sep 30 01:11:49.784272 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.784711 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.791910 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:49.792161 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:49.814630 2026] [security2:error] [pid 270884:tid 271087] [client 20.194.30.107:23681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/sxxb.php"] [unique_id "ary2NSGeq9LtYp4zuPO3_gAAAEQ"]
[Wed Sep 30 01:11:49.879853 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.880134 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:49.902610 2026] [security2:error] [pid 270884:tid 271023] [client 13.70.4.78:20457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/albin.php"] [unique_id "ary2NSGeq9LtYp4zuPO4AAAAAAQ"]
[Wed Sep 30 01:11:49.917881 2026] [security2:error] [pid 276620:tid 276844] [client 4.240.25.22:8910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary2NdPAdfEWqmGIkg1mtQAAAmk"]
[Wed Sep 30 01:11:49.928168 2026] [security2:error] [pid 276620:tid 276857] [client 20.204.42.136:35779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/eb06f5f3c7index.php"] [unique_id "ary2NdPAdfEWqmGIkg1mtgAAAnY"]
[Wed Sep 30 01:11:49.937605 2026] [security2:error] [pid 276620:tid 276790] [client 4.240.25.22:8473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/file.php"] [unique_id "ary2NdPAdfEWqmGIkg1muAAAAjM"]
[Wed Sep 30 01:11:49.949320 2026] [security2:error] [pid 276620:tid 276841] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/showLogin.cc"] [unique_id "ary2NdPAdfEWqmGIkg1muwAAAmY"]
[Wed Sep 30 01:11:49.969243 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:49.969503 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.004747 2026] [security2:error] [pid 276620:tid 276834] [client 20.194.96.176:35018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/BDKR28WP.php"] [unique_id "ary2NtPAdfEWqmGIkg1mwgAAAl8"]
[Wed Sep 30 01:11:50.054378 2026] [security2:error] [pid 270884:tid 271077] [client 13.70.1.101:21014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/bs1.php"] [unique_id "ary2NiGeq9LtYp4zuPO4AgAAADo"]
[Wed Sep 30 01:11:50.062234 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.062501 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.136544 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.14.152:41490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/av.php"] [unique_id "ary2NtPAdfEWqmGIkg1mxAAAAmw"]
[Wed Sep 30 01:11:50.157673 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.158101 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.200825 2026] [http2:warn] [pid 270884:tid 271035] [client 52.167.144.188:61579] h2_stream(270884-364-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:11:50.243141 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.243401 2026] [access_compat:error] [pid 270884:tid 271050] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.244491 2026] [security2:error] [pid 270884:tid 271062] [client 13.70.4.78:19716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/atkno.php"] [unique_id "ary2NiGeq9LtYp4zuPO4CAAAACs"]
[Wed Sep 30 01:11:50.310064 2026] [core:error] [pid 270884:tid 271053] [client 20.70.173.30:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:11:50.310083 2026] [core:error] [pid 270884:tid 271053] [client 20.70.173.30:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:11:50.333339 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.333604 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.340569 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvbmV0
[Wed Sep 30 01:11:50.340854 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvbmV0
[Wed Sep 30 01:11:50.380135 2026] [security2:error] [pid 276620:tid 276766] [client 43.104.4.223:44022] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2NtPAdfEWqmGIkg1mzQAAAhs"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:11:50.431229 2026] [security2:error] [pid 270884:tid 270932] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2NiGeq9LtYp4zuPO4EQAAfy4"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D42779
[Wed Sep 30 01:11:50.433425 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.433851 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.452644 2026] [security2:error] [pid 270884:tid 271021] [client 20.219.19.141:27971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/xwpg.php"] [unique_id "ary2NiGeq9LtYp4zuPO4EwAAAAI"]
[Wed Sep 30 01:11:50.453872 2026] [security2:error] [pid 270884:tid 271023] [client 20.70.173.30:25934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ccc.php"] [unique_id "ary2NiGeq9LtYp4zuPO4FAAAAAQ"]
[Wed Sep 30 01:11:50.462645 2026] [security2:error] [pid 276620:tid 276884] [client 13.70.1.101:57045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary2NtPAdfEWqmGIkg1mzwAAApE"]
[Wed Sep 30 01:11:50.500918 2026] [security2:error] [pid 270884:tid 271129] [client 20.219.2.60:30345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/tt.php"] [unique_id "ary2NiGeq9LtYp4zuPO4FwAAAG4"]
[Wed Sep 30 01:11:50.514845 2026] [security2:error] [pid 276059:tid 276320] [client 20.70.173.30:8168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/red.php"] [unique_id "ary2NntqdHBwD77138e6BAAAAgw"]
[Wed Sep 30 01:11:50.518331 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.518593 2026] [access_compat:error] [pid 270884:tid 271134] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.608293 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.608573 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.612154 2026] [security2:error] [pid 276620:tid 276825] [client 103.168.67.253:25000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2NtPAdfEWqmGIkg1m0wAAAlY"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:50.613144 2026] [security2:error] [pid 270884:tid 271123] [client 20.219.14.152:41910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/dex.php"] [unique_id "ary2NiGeq9LtYp4zuPO4GgAAAGg"]
[Wed Sep 30 01:11:50.628250 2026] [security2:error] [pid 270884:tid 271053] [client 13.70.4.78:20447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gptsh.php"] [unique_id "ary2NiGeq9LtYp4zuPO4JQAAACI"]
[Wed Sep 30 01:11:50.694768 2026] [security2:error] [pid 276059:tid 276160] [remote 168.100.149.77:54118] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/e4021a9e3e6fec948499235bd51c1e9a.263.css.gz"] [unique_id "ary2NntqdHBwD77138e6BwAB8GA"]
[Wed Sep 30 01:11:50.694829 2026] [security2:error] [pid 276620:tid 276639] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2NtPAdfEWqmGIkg1m1wACeAk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=45&t=14119
[Wed Sep 30 01:11:50.694864 2026] [security2:error] [pid 276620:tid 276639] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2NtPAdfEWqmGIkg1m1wACeAk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=45&t=14119
[Wed Sep 30 01:11:50.700692 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.700965 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.723578 2026] [security2:error] [pid 276059:tid 276076] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2NntqdHBwD77138e6CAABuQw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=205435&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:11:50.723604 2026] [security2:error] [pid 276059:tid 276076] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2NntqdHBwD77138e6CAABuQw"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=205435&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:11:50.724658 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.2.60:11663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/profile.php"] [unique_id "ary2NiGeq9LtYp4zuPO4JwAAAFI"]
[Wed Sep 30 01:11:50.743764 2026] [security2:error] [pid 276620:tid 276861] [client 223.181.60.167:29007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2NtPAdfEWqmGIkg1m2QAAAno"]
[Wed Sep 30 01:11:50.743906 2026] [security2:error] [pid 276620:tid 276861] [client 223.181.60.167:29007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2NtPAdfEWqmGIkg1m2QAAAno"]
[Wed Sep 30 01:11:50.747933 2026] [qos:error] [pid 276620:tid 276750] [remote 188.29.95.56:38575] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=188.29.95.56, id=ary2NtPAdfEWqmGIkg1m2gACF3g
[Wed Sep 30 01:11:50.790931 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.791209 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.793764 2026] [security2:error] [pid 270884:tid 271077] [client 13.70.1.101:45837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/termps.php"] [unique_id "ary2NiGeq9LtYp4zuPO4KAAAADo"]
[Wed Sep 30 01:11:50.815173 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:11:50.815449 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:11:50.853243 2026] [security2:error] [pid 276620:tid 276848] [client 223.235.102.107:30207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2NtPAdfEWqmGIkg1m3AAAAm0"]
[Wed Sep 30 01:11:50.853441 2026] [security2:error] [pid 276620:tid 276848] [client 223.235.102.107:30207] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2NtPAdfEWqmGIkg1m3AAAAm0"]
[Wed Sep 30 01:11:50.883360 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.883646 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.961845 2026] [security2:error] [pid 270884:tid 271129] [client 43.104.4.211:51376] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary2NiGeq9LtYp4zuPO4KgAAAG4"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:11:50.972876 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:50.973136 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:50.980226 2026] [security2:error] [pid 276620:tid 276793] [client 13.70.4.78:19761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/rithin.php"] [unique_id "ary2NtPAdfEWqmGIkg1m3wAAAjY"]
[Wed Sep 30 01:11:51.064916 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.065345 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.075649 2026] [security2:error] [pid 270884:tid 271077] [client 20.219.14.152:41893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/chosen.php"] [unique_id "ary2NyGeq9LtYp4zuPO4LAAAADo"]
[Wed Sep 30 01:11:51.121666 2026] [security2:error] [pid 276620:tid 276881] [client 49.43.128.226:55634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2NtPAdfEWqmGIkg1mzgAAAo4"]
[Wed Sep 30 01:11:51.127360 2026] [security2:error] [pid 276620:tid 276775] [client 13.70.1.101:42704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/brand.php"] [unique_id "ary2N9PAdfEWqmGIkg1m5AAAAiQ"]
[Wed Sep 30 01:11:51.160069 2026] [security2:error] [pid 276620:tid 276832] [client 20.198.74.230:23932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/php8.php"] [unique_id "ary2N9PAdfEWqmGIkg1m5gAAAl0"]
[Wed Sep 30 01:11:51.160679 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.161101 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.163658 2026] [security2:error] [pid 276059:tid 276106] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2N3tqdHBwD77138e6CwABqSo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=295881&sid=722087482a581cc38cd248c54ad6ad17
[Wed Sep 30 01:11:51.163688 2026] [security2:error] [pid 276059:tid 276106] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2N3tqdHBwD77138e6CwABqSo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=295881&sid=722087482a581cc38cd248c54ad6ad17
[Wed Sep 30 01:11:51.230886 2026] [qos:error] [pid 270884:tid 270935] [remote 187.188.79.110:45712] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=187.188.79.110, id=ary2NyGeq9LtYp4zuPO4OAAAaTE
[Wed Sep 30 01:11:51.246780 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.247061 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.307832 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 01:11:51.308274 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 01:11:51.336882 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.337159 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.339476 2026] [security2:error] [pid 270884:tid 271029] [client 13.70.4.78:20463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/il.php"] [unique_id "ary2NyGeq9LtYp4zuPO4PAAAAAo"]
[Wed Sep 30 01:11:51.402714 2026] [security2:error] [pid 276059:tid 276305] [client 4.240.25.22:38724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2N3tqdHBwD77138e6DgAAAf0"]
[Wed Sep 30 01:11:51.441229 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.441771 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.448155 2026] [security2:error] [pid 276059:tid 276239] [client 20.70.173.30:24596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp.php"] [unique_id "ary2N3tqdHBwD77138e6EgAAAbs"]
[Wed Sep 30 01:11:51.520167 2026] [security2:error] [pid 270884:tid 271074] [client 20.219.19.141:28009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/blacks.php"] [unique_id "ary2NyGeq9LtYp4zuPO4PgAAADc"]
[Wed Sep 30 01:11:51.535568 2026] [security2:error] [pid 270884:tid 271101] [client 13.70.1.101:42734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/atomlib.php"] [unique_id "ary2NyGeq9LtYp4zuPO4PwAAAFI"]
[Wed Sep 30 01:11:51.536631 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.536952 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.593538 2026] [security2:error] [pid 276620:tid 276834] [client 20.219.14.152:41516] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.bradgoreski.co"] [uri "/1.php"] [unique_id "ary2N9PAdfEWqmGIkg1m8AAAAl8"]
[Wed Sep 30 01:11:51.593660 2026] [security2:error] [pid 276620:tid 276834] [client 20.219.14.152:41516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/1.php"] [unique_id "ary2N9PAdfEWqmGIkg1m8AAAAl8"]
[Wed Sep 30 01:11:51.610748 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.611022 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.695213 2026] [security2:error] [pid 270884:tid 271141] [client 13.70.4.78:20436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/1klopedf.php"] [unique_id "ary2NyGeq9LtYp4zuPO4QQAAAHo"]
[Wed Sep 30 01:11:51.701045 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.701350 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.739670 2026] [security2:error] [pid 276620:tid 276885] [client 20.28.180.172:29630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/632e19b36dindex.php"] [unique_id "ary2N9PAdfEWqmGIkg1m9gAAApI"]
[Wed Sep 30 01:11:51.795603 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.796050 2026] [access_compat:error] [pid 270884:tid 271106] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.807425 2026] [security2:error] [pid 276620:tid 276806] [client 20.194.5.96:55432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/mac.php"] [unique_id "ary2N9PAdfEWqmGIkg1m-AAAAkM"]
[Wed Sep 30 01:11:51.818704 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:51.818975 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODM4MzcyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:51.886467 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:51.886903 2026] [access_compat:error] [pid 270884:tid 271101] [client 216.73.216.46:49815] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:51.929396 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:30071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/maul.php"] [unique_id "ary2NyGeq9LtYp4zuPO4SwAAADk"]
[Wed Sep 30 01:11:51.966738 2026] [security2:error] [pid 270884:tid 271134] [client 216.73.216.46:49815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2NyGeq9LtYp4zuPO4TAAAAHM"]
[Wed Sep 30 01:11:51.969231 2026] [security2:error] [pid 270884:tid 271124] [client 13.70.1.101:42709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/product.php"] [unique_id "ary2NyGeq9LtYp4zuPO4TQAAAGk"]
[Wed Sep 30 01:11:52.017119 2026] [security2:error] [pid 276059:tid 276247] [client 105.112.178.79:38584] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fje.cbe.mybluehost.me"] [uri "/.env"] [unique_id "ary2OHtqdHBwD77138e6FgAAAcM"]
[Wed Sep 30 01:11:52.038231 2026] [security2:error] [pid 270884:tid 271053] [client 13.70.4.78:19729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/zv.php"] [unique_id "ary2OCGeq9LtYp4zuPO4UQAAACI"]
[Wed Sep 30 01:11:52.065432 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.065704 2026] [access_compat:error] [pid 276620:tid 276791] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.074626 2026] [security2:error] [pid 276620:tid 276825] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "ary2ONPAdfEWqmGIkg1m_wAAAlY"]
[Wed Sep 30 01:11:52.100777 2026] [security2:error] [pid 276620:tid 276837] [client 4.240.25.22:8391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/as.php"] [unique_id "ary2ONPAdfEWqmGIkg1nAAAAAmI"]
[Wed Sep 30 01:11:52.124593 2026] [security2:error] [pid 270884:tid 271123] [client 20.219.2.60:11359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/class-t.api.php"] [unique_id "ary2OCGeq9LtYp4zuPO4VQAAAGg"]
[Wed Sep 30 01:11:52.174575 2026] [security2:error] [pid 276620:tid 276859] [client 20.219.14.152:41856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/radio.php"] [unique_id "ary2ONPAdfEWqmGIkg1nAgAAAng"]
[Wed Sep 30 01:11:52.210162 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.210458 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.248472 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.248732 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.297471 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:52.297925 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL2N3ZC9saWI2NA==
[Wed Sep 30 01:11:52.340976 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.341246 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.352074 2026] [security2:error] [pid 270884:tid 271134] [client 13.70.1.101:53488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/function.php"] [unique_id "ary2OCGeq9LtYp4zuPO4VgAAAHM"]
[Wed Sep 30 01:11:52.361395 2026] [security2:error] [pid 276059:tid 276299] [client 20.28.180.172:18351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/166.php"] [unique_id "ary2OHtqdHBwD77138e6HAAAAfc"]
[Wed Sep 30 01:11:52.395559 2026] [security2:error] [pid 270884:tid 271129] [client 103.168.67.253:32156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2OCGeq9LtYp4zuPO4VwAAAG4"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:52.405064 2026] [security2:error] [pid 276059:tid 276300] [client 20.219.19.141:28000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/class-wp-http-client.php"] [unique_id "ary2OHtqdHBwD77138e6HQAAAfg"]
[Wed Sep 30 01:11:52.436904 2026] [security2:error] [pid 276620:tid 276772] [client 13.70.4.78:19714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/zv.update.php"] [unique_id "ary2ONPAdfEWqmGIkg1nBgAAAiE"]
[Wed Sep 30 01:11:52.447227 2026] [access_compat:error] [pid 276059:tid 276196] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.447695 2026] [access_compat:error] [pid 276059:tid 276196] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.475935 2026] [security2:error] [pid 276059:tid 276206] [client 20.194.5.96:44940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/myglu.php"] [unique_id "ary2OHtqdHBwD77138e6HwAAAZs"]
[Wed Sep 30 01:11:52.480023 2026] [security2:error] [pid 276620:tid 276819] [client 105.112.178.79:38581] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fjj.lks.mybluehost.me"] [uri "/__ss_probe_6844c3e3f3ea6070081390bc645859b5__"] [unique_id "ary2ONPAdfEWqmGIkg1nCAAAAlA"]
[Wed Sep 30 01:11:52.520682 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.521041 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.540412 2026] [security2:error] [pid 276620:tid 276823] [client 49.37.102.248:59967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2ONPAdfEWqmGIkg1nDgAAAlQ"]
[Wed Sep 30 01:11:52.540510 2026] [security2:error] [pid 276620:tid 276823] [client 49.37.102.248:59967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2ONPAdfEWqmGIkg1nDgAAAlQ"]
[Wed Sep 30 01:11:52.595457 2026] [security2:error] [pid 276620:tid 276829] [client 103.168.66.101:62524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/index.php"] [unique_id "ary2ONPAdfEWqmGIkg1nDwAAAlo"]
[Wed Sep 30 01:11:52.613155 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.613618 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:62009] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.643746 2026] [security2:error] [pid 276620:tid 276788] [client 203.122.45.246:60994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2ONPAdfEWqmGIkg1nEQAAAjE"]
[Wed Sep 30 01:11:52.643911 2026] [security2:error] [pid 276620:tid 276788] [client 203.122.45.246:60994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2ONPAdfEWqmGIkg1nEQAAAjE"]
[Wed Sep 30 01:11:52.685664 2026] [security2:error] [pid 276620:tid 276820] [client 168.100.149.15:31882] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/468e31a8a2318ffec75e18589e2a7330.835b.css.gz"] [unique_id "ary2ONPAdfEWqmGIkg1nEwACURI"]
[Wed Sep 30 01:11:52.697488 2026] [security2:error] [pid 276620:tid 276775] [client 216.73.216.46:62009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ONPAdfEWqmGIkg1nFAAAAiQ"]
[Wed Sep 30 01:11:52.746249 2026] [security2:error] [pid 270884:tid 271061] [client 13.70.1.101:45885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/0x.php"] [unique_id "ary2OCGeq9LtYp4zuPO4WgAAACo"]
[Wed Sep 30 01:11:52.758863 2026] [security2:error] [pid 270884:tid 271101] [client 20.219.14.152:41479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/blacks.php"] [unique_id "ary2OCGeq9LtYp4zuPO4WwAAAFI"]
[Wed Sep 30 01:11:52.797630 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.798018 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.840577 2026] [security2:error] [pid 270884:tid 270929] [remote 74.7.227.56:47820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2OCGeq9LtYp4zuPO4XQAAEis"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=50
[Wed Sep 30 01:11:52.842281 2026] [access_compat:error] [pid 276059:tid 276248] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:52.842553 2026] [access_compat:error] [pid 276059:tid 276248] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:52.846718 2026] [qos:error] [pid 276059:tid 276098] [remote 46.232.159.141:63740] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=46.232.159.141, id=ary2OHtqdHBwD77138e6JAABxyI
[Wed Sep 30 01:11:52.859297 2026] [security2:error] [pid 276620:tid 276827] [client 20.194.96.176:29829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/mac.php"] [unique_id "ary2ONPAdfEWqmGIkg1nGAAAAlg"]
[Wed Sep 30 01:11:52.885573 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.885836 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.977382 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:52.977658 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:52.979866 2026] [security2:error] [pid 276620:tid 276886] [client 13.70.4.78:19712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/wquosqsi.php"] [unique_id "ary2ONPAdfEWqmGIkg1nHAAAApM"]
[Wed Sep 30 01:11:52.982791 2026] [security2:error] [pid 276059:tid 276220] [client 20.219.2.60:11380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-links-opml.php"] [unique_id "ary2OHtqdHBwD77138e6KAAAAag"]
[Wed Sep 30 01:11:53.017671 2026] [security2:error] [pid 276059:tid 276266] [client 20.28.180.172:29448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/82.php"] [unique_id "ary2OXtqdHBwD77138e6KgAAAdY"]
[Wed Sep 30 01:11:53.068330 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.068599 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.092770 2026] [security2:error] [pid 270884:tid 271037] [client 13.70.1.101:38411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/index.php"] [unique_id "ary2OSGeq9LtYp4zuPO4ZgAAABI"]
[Wed Sep 30 01:11:53.159883 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.160136 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.228297 2026] [security2:error] [pid 276059:tid 276243] [client 20.70.173.30:60648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/sb.php"] [unique_id "ary2OXtqdHBwD77138e6MQAAAb8"]
[Wed Sep 30 01:11:53.247830 2026] [security2:error] [pid 276620:tid 276885] [client 20.219.14.152:41865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/alfa.php"] [unique_id "ary2OdPAdfEWqmGIkg1nHwAAApI"]
[Wed Sep 30 01:11:53.251186 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.251474 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.285116 2026] [security2:error] [pid 276620:tid 276858] [client 13.70.1.101:5810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2OdPAdfEWqmGIkg1nIAAAAnc"]
[Wed Sep 30 01:11:53.307165 2026] [access_compat:error] [pid 276059:tid 276214] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:53.307448 2026] [access_compat:error] [pid 276059:tid 276214] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzk1L2N3ZC9saWI2NA==
[Wed Sep 30 01:11:53.340712 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.340984 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.349932 2026] [qos:error] [pid 276620:tid 276669] [remote 187.73.93.171:65107] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=187.73.93.171, id=ary2OdPAdfEWqmGIkg1nIgACPyc
[Wed Sep 30 01:11:53.414463 2026] [security2:error] [pid 270884:tid 271134] [client 13.70.4.78:19732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/asset.php"] [unique_id "ary2OSGeq9LtYp4zuPO4ZwAAAHM"]
[Wed Sep 30 01:11:53.440759 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.441209 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.505338 2026] [security2:error] [pid 276059:tid 276202] [client 20.70.173.30:38909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/a.php"] [unique_id "ary2OXtqdHBwD77138e6NgAAAZc"]
[Wed Sep 30 01:11:53.524531 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.524829 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.560743 2026] [security2:error] [pid 270884:tid 271061] [client 13.70.1.101:42728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary2OSGeq9LtYp4zuPO4bAAAACo"]
[Wed Sep 30 01:11:53.582327 2026] [security2:error] [pid 270884:tid 271053] [client 20.219.19.141:27994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/zoo2.php"] [unique_id "ary2OSGeq9LtYp4zuPO4bgAAACI"]
[Wed Sep 30 01:11:53.600357 2026] [security2:error] [pid 270884:tid 271134] [client 185.226.198.7:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/login.do"] [unique_id "ary2OSGeq9LtYp4zuPO4cgAAAHM"]
[Wed Sep 30 01:11:53.617088 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.617552 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.620998 2026] [qos:error] [pid 276620:tid 276660] [remote 189.252.111.150:36964] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.252.111.150, id=ary2OdPAdfEWqmGIkg1nKQACKx4
[Wed Sep 30 01:11:53.631304 2026] [security2:error] [pid 270884:tid 271094] [client 13.70.1.101:5791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2OSGeq9LtYp4zuPO4dQAAAEs"]
[Wed Sep 30 01:11:53.633718 2026] [qos:error] [pid 270884:tid 270921] [remote 138.186.29.81:9009] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=138.186.29.81, id=ary2OSGeq9LtYp4zuPO4dgAAHyM
[Wed Sep 30 01:11:53.681096 2026] [qos:error] [pid 276059:tid 276128] [remote 134.41.166.148:54842] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=134.41.166.148, id=ary2OXtqdHBwD77138e6OQABuUA
[Wed Sep 30 01:11:53.706549 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.706839 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.715451 2026] [qos:error] [pid 276059:tid 276103] [remote 174.167.178.180:34668] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=174.167.178.180, id=ary2OXtqdHBwD77138e6OwAB3yc
[Wed Sep 30 01:11:53.751332 2026] [security2:error] [pid 270884:tid 271109] [client 20.219.14.152:41885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wp_blog_footer.php"] [unique_id "ary2OSGeq9LtYp4zuPO4eAAAAFo"]
[Wed Sep 30 01:11:53.794203 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 01:11:53.794473 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=wp-admin&p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 01:11:53.806772 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.807036 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:41421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.808157 2026] [security2:error] [pid 270884:tid 271077] [client 13.70.4.78:20428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/cued.php"] [unique_id "ary2OSGeq9LtYp4zuPO4eQAAADo"]
[Wed Sep 30 01:11:53.852978 2026] [security2:error] [pid 270884:tid 271109] [client 20.194.5.96:44959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/aboutt.php"] [unique_id "ary2OSGeq9LtYp4zuPO4egAAAFo"]
[Wed Sep 30 01:11:53.889977 2026] [security2:error] [pid 276620:tid 276766] [client 216.73.216.46:41421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2OdPAdfEWqmGIkg1nKwAAAhs"]
[Wed Sep 30 01:11:53.901869 2026] [security2:error] [pid 276620:tid 276884] [client 103.211.87.173:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2OdPAdfEWqmGIkg1nLAAAApE"]
[Wed Sep 30 01:11:53.950278 2026] [security2:error] [pid 276059:tid 276132] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2OXtqdHBwD77138e6PQACDkQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277637&sid=826c70772871f04886d09ff061b688de
[Wed Sep 30 01:11:53.950302 2026] [security2:error] [pid 276059:tid 276132] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2OXtqdHBwD77138e6PQACDkQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277637&sid=826c70772871f04886d09ff061b688de
[Wed Sep 30 01:11:53.989503 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:53.990036 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:53.992682 2026] [security2:error] [pid 276620:tid 276806] [client 122.173.27.10:6944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2OdPAdfEWqmGIkg1nMQAAAkM"]
[Wed Sep 30 01:11:53.992829 2026] [security2:error] [pid 276620:tid 276806] [client 122.173.27.10:6944] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2OdPAdfEWqmGIkg1nMQAAAkM"]
[Wed Sep 30 01:11:54.005319 2026] [security2:error] [pid 276620:tid 276791] [client 20.28.180.172:61209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/ws77.php"] [unique_id "ary2OtPAdfEWqmGIkg1nMgAAAjQ"]
[Wed Sep 30 01:11:54.024187 2026] [security2:error] [pid 270884:tid 271109] [client 13.70.1.101:6081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/atomlib.php"] [unique_id "ary2OiGeq9LtYp4zuPO4gQAAAFo"]
[Wed Sep 30 01:11:54.024227 2026] [security2:error] [pid 270884:tid 271129] [client 13.70.1.101:20993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/classwithtostring.php"] [unique_id "ary2OiGeq9LtYp4zuPO4gAAAAG4"]
[Wed Sep 30 01:11:54.083071 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.083532 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.113316 2026] [security2:error] [pid 270884:tid 271053] [client 4.240.25.22:8395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/simple.php"] [unique_id "ary2OiGeq9LtYp4zuPO4hQAAACI"]
[Wed Sep 30 01:11:54.220517 2026] [security2:error] [pid 276620:tid 276762] [client 20.219.19.141:27929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/zoo1.php"] [unique_id "ary2OtPAdfEWqmGIkg1nNgAAAhc"]
[Wed Sep 30 01:11:54.222706 2026] [security2:error] [pid 276620:tid 276828] [client 20.219.14.152:41859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/b8.php"] [unique_id "ary2OtPAdfEWqmGIkg1nNwAAAlk"]
[Wed Sep 30 01:11:54.229067 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.229436 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.263979 2026] [access_compat:error] [pid 276059:tid 276305] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.264233 2026] [access_compat:error] [pid 276059:tid 276305] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.265445 2026] [security2:error] [pid 276059:tid 276211] [client 20.219.2.60:11346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-class-api.php"] [unique_id "ary2OntqdHBwD77138e6QQAAAZ8"]
[Wed Sep 30 01:11:54.266870 2026] [security2:error] [pid 270884:tid 271061] [client 13.70.4.78:19731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/sd.php"] [unique_id "ary2OiGeq9LtYp4zuPO4iQAAACo"]
[Wed Sep 30 01:11:54.278419 2026] [security2:error] [pid 270884:tid 271146] [client 20.70.173.30:7375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/classwithtostring.php"] [unique_id "ary2OiGeq9LtYp4zuPO4jAAAAH8"]
[Wed Sep 30 01:11:54.299077 2026] [authz_core:error] [pid 270884:tid 271053] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/widgets/error_log, referer: binance.com
[Wed Sep 30 01:11:54.301641 2026] [security2:error] [pid 276059:tid 276148] [remote 220.181.108.104:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2OntqdHBwD77138e6QgABwVQ"]
[Wed Sep 30 01:11:54.335586 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25z
[Wed Sep 30 01:11:54.335871 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL25z
[Wed Sep 30 01:11:54.353265 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.353550 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.387032 2026] [security2:error] [pid 276059:tid 276317] [client 13.70.1.101:6129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/a.php"] [unique_id "ary2OntqdHBwD77138e6RwAAAgk"]
[Wed Sep 30 01:11:54.461077 2026] [security2:error] [pid 276059:tid 276235] [client 13.70.1.101:21010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/dropdown.php"] [unique_id "ary2OntqdHBwD77138e6SAAAAbc"]
[Wed Sep 30 01:11:54.492513 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.30.107:17372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/cycfruf.php"] [unique_id "ary2OntqdHBwD77138e6SwAAAZ0"]
[Wed Sep 30 01:11:54.499969 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.500397 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.535109 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.535367 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.548953 2026] [security2:error] [pid 276059:tid 276299] [client 20.219.2.60:30040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/5b9ac.php"] [unique_id "ary2OntqdHBwD77138e6TQAAAfc"]
[Wed Sep 30 01:11:54.625318 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.625585 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.657485 2026] [security2:error] [pid 276059:tid 276083] [remote 116.179.32.49:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2OntqdHBwD77138e6UQAB4hM"]
[Wed Sep 30 01:11:54.690518 2026] [security2:error] [pid 270884:tid 271109] [client 168.100.149.167:17054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/231acc98c4ba44b6110feb046635e878.1e620.css.gz"] [unique_id "ary2OiGeq9LtYp4zuPO4lwAAWmc"]
[Wed Sep 30 01:11:54.720346 2026] [security2:error] [pid 276059:tid 276321] [client 20.219.14.152:41916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/xex.php"] [unique_id "ary2OntqdHBwD77138e6UwAAAg0"]
[Wed Sep 30 01:11:54.721912 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.722186 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:14939] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.762921 2026] [security2:error] [pid 270884:tid 271076] [client 13.70.4.78:20464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/ans.php"] [unique_id "ary2OiGeq9LtYp4zuPO4mgAAADk"]
[Wed Sep 30 01:11:54.778592 2026] [security2:error] [pid 270884:tid 271120] [client 13.70.1.101:6093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/v.php"] [unique_id "ary2OiGeq9LtYp4zuPO4mwAAAGU"]
[Wed Sep 30 01:11:54.797394 2026] [access_compat:error] [pid 276059:tid 276256] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:54.797824 2026] [access_compat:error] [pid 276059:tid 276256] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:11:54.800590 2026] [security2:error] [pid 270884:tid 271037] [client 20.219.19.141:27984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/class-ajax.php"] [unique_id "ary2OiGeq9LtYp4zuPO4nwAAABI"]
[Wed Sep 30 01:11:54.811731 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.812005 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:54.814711 2026] [security2:error] [pid 270884:tid 271107] [client 45.138.12.32:34002] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rzm.pgp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2OiGeq9LtYp4zuPO4ogAAAFg"]
[Wed Sep 30 01:11:54.899848 2026] [security2:error] [pid 276059:tid 276205] [client 216.73.216.46:14939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2OntqdHBwD77138e6WAAAAZo"]
[Wed Sep 30 01:11:54.919171 2026] [security2:error] [pid 276059:tid 276230] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary2OntqdHBwD77138e6XAAAAbI"]
[Wed Sep 30 01:11:54.920315 2026] [security2:error] [pid 270884:tid 271027] [client 13.70.1.101:45825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/moon.php"] [unique_id "ary2OiGeq9LtYp4zuPO4pQAAAAg"]
[Wed Sep 30 01:11:54.947600 2026] [security2:error] [pid 270884:tid 271061] [client 202.179.95.79:60740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2OiGeq9LtYp4zuPO4qAAAACo"]
[Wed Sep 30 01:11:54.947675 2026] [security2:error] [pid 270884:tid 271061] [client 202.179.95.79:60740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2OiGeq9LtYp4zuPO4qAAAACo"]
[Wed Sep 30 01:11:54.983881 2026] [security2:error] [pid 270884:tid 271109] [client 185.226.198.4:32168] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/cf_scripts/scripts/ajax/ckeditor/ckeditor.js"] [unique_id "ary2OiGeq9LtYp4zuPO4qgAAAFo"]
[Wed Sep 30 01:11:54.997777 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:54.998097 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:8496] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.003089 2026] [security2:error] [pid 276059:tid 276272] [client 195.62.95.212:42772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.95.62.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "graphicdesignmmd.com"] [uri "/wp-login.php"] [unique_id "ary2OntqdHBwD77138e6XgAAAdw"]
[Wed Sep 30 01:11:55.039194 2026] [security2:error] [pid 270884:tid 271051] [client 20.28.180.172:29486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/yyjBRcdefault.php"] [unique_id "ary2OyGeq9LtYp4zuPO4rAAAACA"]
[Wed Sep 30 01:11:55.078269 2026] [security2:error] [pid 270884:tid 271107] [client 20.211.90.37:18830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2OyGeq9LtYp4zuPO4rwAAAFg"]
[Wed Sep 30 01:11:55.081106 2026] [security2:error] [pid 270884:tid 271088] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/admin/"] [unique_id "ary2OyGeq9LtYp4zuPO4sAAAAEU"]
[Wed Sep 30 01:11:55.087349 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.087623 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.137396 2026] [security2:error] [pid 270884:tid 271027] [client 20.194.5.96:64488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wp-whe.php"] [unique_id "ary2OyGeq9LtYp4zuPO4tAAAAAg"]
[Wed Sep 30 01:11:55.160029 2026] [security2:error] [pid 270884:tid 271114] [client 20.194.30.107:23552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/classwithtostring.php"] [unique_id "ary2OyGeq9LtYp4zuPO4twAAAF8"]
[Wed Sep 30 01:11:55.164349 2026] [security2:error] [pid 270884:tid 271073] [client 13.70.1.101:6099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/d2.php"] [unique_id "ary2OyGeq9LtYp4zuPO4uAAAADY"]
[Wed Sep 30 01:11:55.172331 2026] [security2:error] [pid 276059:tid 276303] [client 216.73.216.46:8496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2O3tqdHBwD77138e6XwAAAfs"]
[Wed Sep 30 01:11:55.203069 2026] [security2:error] [pid 270884:tid 271112] [client 20.219.14.152:41857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ass.php"] [unique_id "ary2OyGeq9LtYp4zuPO4uwAAAF0"]
[Wed Sep 30 01:11:55.227625 2026] [security2:error] [pid 270884:tid 271050] [client 13.70.4.78:19734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/cns.php"] [unique_id "ary2OyGeq9LtYp4zuPO4vAAAAB8"]
[Wed Sep 30 01:11:55.269895 2026] [security2:error] [pid 270884:tid 271123] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/cgi-bin/authLogin.cgi"] [unique_id "ary2OyGeq9LtYp4zuPO4vgAAAGg"]
[Wed Sep 30 01:11:55.270573 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.270856 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.293122 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:11:55.293399 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNzI0NTIx
[Wed Sep 30 01:11:55.300886 2026] [security2:error] [pid 270884:tid 271047] [client 13.70.1.101:42730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/autoload_classmap.php"] [unique_id "ary2OyGeq9LtYp4zuPO4wQAAABw"]
[Wed Sep 30 01:11:55.404053 2026] [security2:error] [pid 276059:tid 276267] [client 20.211.90.37:18705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2O3tqdHBwD77138e6YgAAAdc"]
[Wed Sep 30 01:11:55.422281 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.422868 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.435908 2026] [security2:error] [pid 270884:tid 271107] [client 4.240.25.22:8902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/new.php"] [unique_id "ary2OyGeq9LtYp4zuPO4xwAAAFg"]
[Wed Sep 30 01:11:55.451366 2026] [security2:error] [pid 270884:tid 271137] [client 193.56.28.45:30045] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2OyGeq9LtYp4zuPO4vwAAAHY"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:55.457362 2026] [security2:error] [pid 276620:tid 276834] [client 20.219.19.141:27919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/gm.php"] [unique_id "ary2O9PAdfEWqmGIkg1nSQAAAl8"]
[Wed Sep 30 01:11:55.460865 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.461289 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5095] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.547260 2026] [security2:error] [pid 270884:tid 271050] [client 13.70.4.78:19772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/faiy.php"] [unique_id "ary2OyGeq9LtYp4zuPO4zAAAAB8"]
[Wed Sep 30 01:11:55.547992 2026] [security2:error] [pid 270884:tid 270977] [remote 2a03:2880:f814:a:::0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2OyGeq9LtYp4zuPO4ywAAIlc"]
[Wed Sep 30 01:11:55.548015 2026] [security2:error] [pid 270884:tid 270977] [remote 2a03:2880:f814:a:::0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2OyGeq9LtYp4zuPO4ywAAIlc"]
[Wed Sep 30 01:11:55.607740 2026] [security2:error] [pid 276620:tid 276818] [client 172.86.125.30:62212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "adamwoodruff.net"] [uri "/Search-Replace-DB-master/"] [unique_id "ary2O9PAdfEWqmGIkg1nTAAAAk8"]
[Wed Sep 30 01:11:55.610147 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:51077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.610414 2026] [access_compat:error] [pid 270884:tid 271146] [client 216.73.216.46:51077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.628047 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:5095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2O9PAdfEWqmGIkg1nTQAAAkg"]
[Wed Sep 30 01:11:55.630009 2026] [security2:error] [pid 270884:tid 271114] [client 13.70.1.101:6086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/xc.php"] [unique_id "ary2OyGeq9LtYp4zuPO40wAAAF8"]
[Wed Sep 30 01:11:55.672029 2026] [security2:error] [pid 276620:tid 276864] [client 20.219.14.152:41858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wsd.php"] [unique_id "ary2O9PAdfEWqmGIkg1nTgAAAn0"]
[Wed Sep 30 01:11:55.725278 2026] [security2:error] [pid 276620:tid 276831] [client 4.240.25.22:38781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/tool.php"] [unique_id "ary2O9PAdfEWqmGIkg1nTwAAAlw"]
[Wed Sep 30 01:11:55.726738 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:51077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.727016 2026] [access_compat:error] [pid 270884:tid 271109] [client 216.73.216.46:51077] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:55.759532 2026] [security2:error] [pid 276620:tid 276785] [client 20.211.90.37:18729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/1ac.php"] [unique_id "ary2O9PAdfEWqmGIkg1nUAAAAi4"]
[Wed Sep 30 01:11:55.799462 2026] [security2:error] [pid 270884:tid 271098] [client 13.70.1.101:21043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/default.php"] [unique_id "ary2OyGeq9LtYp4zuPO43AAAAE8"]
[Wed Sep 30 01:11:55.819791 2026] [security2:error] [pid 270884:tid 271051] [client 216.73.216.46:51077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2OyGeq9LtYp4zuPO44AAAACA"]
[Wed Sep 30 01:11:55.888149 2026] [security2:error] [pid 270884:tid 271037] [client 13.70.4.78:20352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gecho.php"] [unique_id "ary2OyGeq9LtYp4zuPO44gAAABI"]
[Wed Sep 30 01:11:55.889069 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 01:11:55.889331 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQ=
[Wed Sep 30 01:11:55.892385 2026] [security2:error] [pid 276620:tid 276822] [client 45.138.12.32:46696] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.rxk.svd.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2O9PAdfEWqmGIkg1nUwAAAlM"]
[Wed Sep 30 01:11:55.916867 2026] [security2:error] [pid 276620:tid 276833] [client 20.28.180.172:62367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/www.php"] [unique_id "ary2O9PAdfEWqmGIkg1nVQAAAl4"]
[Wed Sep 30 01:11:55.916990 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:55.917261 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.007901 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.008167 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.065005 2026] [security2:error] [pid 270884:tid 271120] [client 104.207.47.21:46573] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2OyGeq9LtYp4zuPO45QAAAGU"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:11:56.095751 2026] [security2:error] [pid 276620:tid 276883] [client 20.211.90.37:18821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/flm.php"] [unique_id "ary2PNPAdfEWqmGIkg1nWgAAApA"]
[Wed Sep 30 01:11:56.108095 2026] [security2:error] [pid 270884:tid 271081] [client 20.219.2.60:30027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/hehe.php"] [unique_id "ary2PCGeq9LtYp4zuPO47wAAAD4"]
[Wed Sep 30 01:11:56.109787 2026] [security2:error] [pid 276620:tid 276771] [client 213.6.243.242:54821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.243.6.213.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cyprusyouth.org"] [uri "/xmlrpc.php"] [unique_id "ary2PNPAdfEWqmGIkg1nWQAAAiA"]
[Wed Sep 30 01:11:56.109901 2026] [security2:error] [pid 276620:tid 276771] [client 213.6.243.242:54821] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "cyprusyouth.org"] [uri "/xmlrpc.php"] [unique_id "ary2PNPAdfEWqmGIkg1nWQAAAiA"]
[Wed Sep 30 01:11:56.144203 2026] [security2:error] [pid 270884:tid 271027] [client 20.219.14.152:41919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/BDKR28WP.php"] [unique_id "ary2PCGeq9LtYp4zuPO48AAAAAg"]
[Wed Sep 30 01:11:56.151244 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.151555 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.187140 2026] [security2:error] [pid 276059:tid 276279] [client 13.70.1.101:5808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/g.php"] [unique_id "ary2PHtqdHBwD77138e6aQAAAeM"]
[Wed Sep 30 01:11:56.188798 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.19.141:28006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/class-wp-site-list.php"] [unique_id "ary2PNPAdfEWqmGIkg1nXQAAAkM"]
[Wed Sep 30 01:11:56.229297 2026] [security2:error] [pid 270884:tid 271120] [client 20.70.173.30:24593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/ops.php"] [unique_id "ary2PCGeq9LtYp4zuPO48QAAAGU"]
[Wed Sep 30 01:11:56.240851 2026] [security2:error] [pid 276620:tid 276875] [client 13.70.4.78:20400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/gu.php"] [unique_id "ary2PNPAdfEWqmGIkg1nYQAAAog"]
[Wed Sep 30 01:11:56.245345 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.245759 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.252734 2026] [security2:error] [pid 270884:tid 271068] [client 103.168.67.253:32160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2PCGeq9LtYp4zuPO48gAAADE"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:56.283387 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.283645 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.302359 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:11:56.302634 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3NTkx
[Wed Sep 30 01:11:56.310198 2026] [security2:error] [pid 276620:tid 276780] [client 13.70.1.101:45887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary2PNPAdfEWqmGIkg1nZQAAAik"]
[Wed Sep 30 01:11:56.333399 2026] [security2:error] [pid 270884:tid 271051] [client 20.70.173.30:35639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary2PCGeq9LtYp4zuPO49QAAACA"]
[Wed Sep 30 01:11:56.359882 2026] [security2:error] [pid 276059:tid 276201] [client 20.194.30.107:17375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/gecko.php"] [unique_id "ary2PHtqdHBwD77138e6awAAAZY"]
[Wed Sep 30 01:11:56.383873 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.384312 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.420150 2026] [autoindex:error] [pid 270884:tid 271053] [client 57.131.131.17:42504] AH01276: Cannot serve directory /home4/thermali/public_html/website_01e827cf/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:56.427114 2026] [security2:error] [pid 276620:tid 276795] [client 20.211.90.37:18716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/40341.php"] [unique_id "ary2PNPAdfEWqmGIkg1naAAAAjg"]
[Wed Sep 30 01:11:56.429111 2026] [security2:error] [pid 276620:tid 276846] [client 4.240.25.22:33231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/memberfuns.php"] [unique_id "ary2PNPAdfEWqmGIkg1naQAAAms"]
[Wed Sep 30 01:11:56.449802 2026] [security2:error] [pid 270884:tid 271146] [client 103.211.18.63:60814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO49wAAAH8"]
[Wed Sep 30 01:11:56.450161 2026] [security2:error] [pid 270884:tid 271146] [client 103.211.18.63:60814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO49wAAAH8"]
[Wed Sep 30 01:11:56.466108 2026] [security2:error] [pid 270884:tid 271076] [client 116.197.133.25:61807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.133.197.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO4-QAAADk"]
[Wed Sep 30 01:11:56.466256 2026] [security2:error] [pid 270884:tid 271076] [client 116.197.133.25:61807] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO4-QAAADk"]
[Wed Sep 30 01:11:56.473012 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.473467 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.484122 2026] [security2:error] [pid 276620:tid 276817] [client 185.226.198.7:11318] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/js/NewWindow_2_all.js"] [unique_id "ary2PNPAdfEWqmGIkg1nbQAAAk4"]
[Wed Sep 30 01:11:56.514834 2026] [security2:error] [pid 270884:tid 271118] [client 143.105.25.139:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2PCGeq9LtYp4zuPO4_AAAAGM"]
[Wed Sep 30 01:11:56.555015 2026] [security2:error] [pid 276620:tid 276788] [client 185.226.198.7:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/aspera/faspex/"] [unique_id "ary2PNPAdfEWqmGIkg1ndAAAAjE"]
[Wed Sep 30 01:11:56.561466 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.561912 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:24804] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.591929 2026] [security2:error] [pid 276620:tid 276824] [client 13.70.1.101:5803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/gmo.php"] [unique_id "ary2PNPAdfEWqmGIkg1ndQAAAlU"]
[Wed Sep 30 01:11:56.593933 2026] [security2:error] [pid 270884:tid 271081] [client 4.240.25.22:18795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/baba.php"] [unique_id "ary2PCGeq9LtYp4zuPO4_wAAAD4"]
[Wed Sep 30 01:11:56.604975 2026] [security2:error] [pid 270884:tid 271033] [client 20.219.14.152:41903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wmore1.php"] [unique_id "ary2PCGeq9LtYp4zuPO5AAAAAA4"]
[Wed Sep 30 01:11:56.614774 2026] [security2:error] [pid 270884:tid 271037] [client 155.190.6.18:47482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO5AgAAABI"]
[Wed Sep 30 01:11:56.634105 2026] [security2:error] [pid 270884:tid 271137] [client 116.193.128.26:62556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO5AwAAAHY"]
[Wed Sep 30 01:11:56.634207 2026] [security2:error] [pid 270884:tid 271137] [client 116.193.128.26:62556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO5AwAAAHY"]
[Wed Sep 30 01:11:56.647865 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.648140 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.671930 2026] [security2:error] [pid 270884:tid 271027] [client 13.70.4.78:19752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/nck.php"] [unique_id "ary2PCGeq9LtYp4zuPO5BgAAAAg"]
[Wed Sep 30 01:11:56.678716 2026] [security2:error] [pid 276620:tid 276770] [client 168.100.149.139:53604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/bfec49ab5a99857392fb8c65313a449d.4dd.css.gz"] [unique_id "ary2PNPAdfEWqmGIkg1neQACHyg"]
[Wed Sep 30 01:11:56.685104 2026] [security2:error] [pid 276620:tid 276850] [client 13.70.1.101:53442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary2PNPAdfEWqmGIkg1negAAAm8"]
[Wed Sep 30 01:11:56.709853 2026] [security2:error] [pid 276620:tid 276760] [client 185.226.198.4:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/favicon.ico"] [unique_id "ary2PNPAdfEWqmGIkg1nfAAAAhU"]
[Wed Sep 30 01:11:56.729949 2026] [security2:error] [pid 276620:tid 276834] [client 20.219.19.141:28021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/ttivnife.php"] [unique_id "ary2PNPAdfEWqmGIkg1nfwAAAl8"]
[Wed Sep 30 01:11:56.740741 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.741027 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.785468 2026] [security2:error] [pid 270884:tid 271073] [client 20.198.74.230:23931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/coffe.php"] [unique_id "ary2PCGeq9LtYp4zuPO5CwAAADY"]
[Wed Sep 30 01:11:56.813975 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:11:56.814239 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTk2ODIx
[Wed Sep 30 01:11:56.829432 2026] [security2:error] [pid 270884:tid 271099] [client 185.226.198.4:32194] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/favicon-32x32.png"] [unique_id "ary2PCGeq9LtYp4zuPO5DAAAAFA"]
[Wed Sep 30 01:11:56.833192 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.833634 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.855214 2026] [security2:error] [pid 270884:tid 271027] [client 20.194.5.96:44982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/ssixta.php"] [unique_id "ary2PCGeq9LtYp4zuPO5DgAAAAg"]
[Wed Sep 30 01:11:56.866000 2026] [security2:error] [pid 270884:tid 271057] [client 20.211.90.37:18822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-log.php"] [unique_id "ary2PCGeq9LtYp4zuPO5EAAAACY"]
[Wed Sep 30 01:11:56.901794 2026] [security2:error] [pid 270884:tid 271037] [client 155.190.6.18:47482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2PCGeq9LtYp4zuPO5AgAAABI"]
[Wed Sep 30 01:11:56.904419 2026] [security2:error] [pid 270884:tid 271079] [client 185.226.198.4:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/zabbix/favicon.ico"] [unique_id "ary2PCGeq9LtYp4zuPO5FAAAADw"]
[Wed Sep 30 01:11:56.922066 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:56.922334 2026] [access_compat:error] [pid 276620:tid 276826] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:56.962604 2026] [security2:error] [pid 270884:tid 271137] [client 13.70.1.101:6137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/11.php"] [unique_id "ary2PCGeq9LtYp4zuPO5FQAAAHY"]
[Wed Sep 30 01:11:56.979640 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:24804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2PNPAdfEWqmGIkg1nhQAAAkg"], referer: http://www.homs.co.ke/?action=adminer&p=L2xpYjY0L2F1ZGl0
[Wed Sep 30 01:11:57.013979 2026] [security2:error] [pid 270884:tid 271053] [client 13.70.4.78:20360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/xtt.php"] [unique_id "ary2PSGeq9LtYp4zuPO5GwAAACI"]
[Wed Sep 30 01:11:57.015138 2026] [security2:error] [pid 276620:tid 276821] [client 20.219.2.60:11718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-class-atom.php"] [unique_id "ary2PdPAdfEWqmGIkg1niAAAAlI"]
[Wed Sep 30 01:11:57.016573 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.016858 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.054343 2026] [security2:error] [pid 276620:tid 276815] [client 13.70.1.101:21051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary2PdPAdfEWqmGIkg1nigAAAkw"]
[Wed Sep 30 01:11:57.084310 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.14.152:41485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/z60.php"] [unique_id "ary2PSGeq9LtYp4zuPO5HgAAAGU"]
[Wed Sep 30 01:11:57.111649 2026] [security2:error] [pid 276620:tid 276767] [client 20.70.173.30:38904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/m.php"] [unique_id "ary2PdPAdfEWqmGIkg1nkQAAAhw"]
[Wed Sep 30 01:11:57.120752 2026] [security2:error] [pid 270884:tid 271052] [client 20.204.42.136:35157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/b8.php"] [unique_id "ary2PSGeq9LtYp4zuPO5IwAAACE"]
[Wed Sep 30 01:11:57.133848 2026] [security2:error] [pid 270884:tid 271122] [client 85.89.209.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2PSGeq9LtYp4zuPO5JAAAAGc"]
[Wed Sep 30 01:11:57.164260 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.164704 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.207757 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.208022 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.233523 2026] [security2:error] [pid 276059:tid 276202] [client 103.168.67.253:21340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2PXtqdHBwD77138e6dgAAAZc"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:57.253136 2026] [security2:error] [pid 270884:tid 271122] [client 20.211.90.37:18722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/sehryhv.php"] [unique_id "ary2PSGeq9LtYp4zuPO5KQAAAGc"]
[Wed Sep 30 01:11:57.257915 2026] [security2:error] [pid 270884:tid 271027] [client 20.219.19.141:27953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/admin.php/2P.php"] [unique_id "ary2PSGeq9LtYp4zuPO5KgAAAAg"]
[Wed Sep 30 01:11:57.296154 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.296448 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.304501 2026] [security2:error] [pid 276620:tid 276837] [client 13.70.1.101:5773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/20.php"] [unique_id "ary2PdPAdfEWqmGIkg1nmQAAAmI"]
[Wed Sep 30 01:11:57.312196 2026] [security2:error] [pid 276620:tid 276825] [client 45.138.12.32:46772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.rxk.svd.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary2PdPAdfEWqmGIkg1nmgAAAlY"]
[Wed Sep 30 01:11:57.340104 2026] [security2:error] [pid 276620:tid 276853] [client 20.194.30.107:10011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/as.php"] [unique_id "ary2PdPAdfEWqmGIkg1nngAAAnI"]
[Wed Sep 30 01:11:57.344336 2026] [security2:error] [pid 276620:tid 276873] [client 62.101.177.127:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2PdPAdfEWqmGIkg1nnwAAAoY"]
[Wed Sep 30 01:11:57.344462 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:11:57.344727 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQwODA2
[Wed Sep 30 01:11:57.367556 2026] [security2:error] [pid 270884:tid 271068] [client 106.214.2.47:24796] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2PSGeq9LtYp4zuPO5MQAAADE"]
[Wed Sep 30 01:11:57.367761 2026] [security2:error] [pid 270884:tid 271068] [client 106.214.2.47:24796] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2PSGeq9LtYp4zuPO5MQAAADE"]
[Wed Sep 30 01:11:57.400878 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.401311 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.406621 2026] [security2:error] [pid 276620:tid 276795] [client 13.70.4.78:20391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.turnbullsmith.com"] [uri "/go.php"] [unique_id "ary2PdPAdfEWqmGIkg1noQAAAjg"]
[Wed Sep 30 01:11:57.448197 2026] [security2:error] [pid 276059:tid 276224] [client 20.28.180.172:62373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/adoms.php"] [unique_id "ary2PXtqdHBwD77138e6ewAAAaw"]
[Wed Sep 30 01:11:57.453601 2026] [security2:error] [pid 270884:tid 271037] [client 13.70.1.101:38430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/mail.php"] [unique_id "ary2PSGeq9LtYp4zuPO5MwAAABI"]
[Wed Sep 30 01:11:57.485743 2026] [security2:error] [pid 276620:tid 276678] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2PdPAdfEWqmGIkg1nowACgjA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=45&t=14119
[Wed Sep 30 01:11:57.485800 2026] [security2:error] [pid 276620:tid 276678] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2PdPAdfEWqmGIkg1nowACgjA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=6a97e6af41ed43308bb681a88033334c&start=45&t=14119
[Wed Sep 30 01:11:57.502616 2026] [access_compat:error] [pid 270884:tid 271103] [client 47.79.201.159:37150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:11:57.502769 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.503048 2026] [access_compat:error] [pid 270884:tid 271103] [client 47.79.201.159:37150] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:11:57.503195 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.570116 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.570394 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.571479 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.14.152:41881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/pJPoKA.php"] [unique_id "ary2PSGeq9LtYp4zuPO5OQAAACE"]
[Wed Sep 30 01:11:57.656004 2026] [security2:error] [pid 270884:tid 271049] [client 103.168.66.101:48756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/index.php"] [unique_id "ary2PSGeq9LtYp4zuPO5OgAAAB4"], referer: https://psrecruit.org.uk/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:11:57.658416 2026] [security2:error] [pid 276620:tid 276632] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2PdPAdfEWqmGIkg1nqQACgAI"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D15775
[Wed Sep 30 01:11:57.665746 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.666206 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.667059 2026] [security2:error] [pid 276620:tid 276788] [client 20.211.90.37:18720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/yich.php"] [unique_id "ary2PdPAdfEWqmGIkg1nqgAAAjE"]
[Wed Sep 30 01:11:57.758622 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.759079 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.766664 2026] [security2:error] [pid 270884:tid 271073] [client 152.56.240.85:64879] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2PSGeq9LtYp4zuPO5PgAAADY"]
[Wed Sep 30 01:11:57.766801 2026] [security2:error] [pid 270884:tid 271073] [client 152.56.240.85:64879] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2PSGeq9LtYp4zuPO5PgAAADY"]
[Wed Sep 30 01:11:57.791833 2026] [security2:error] [pid 276620:tid 276832] [client 20.219.19.141:27937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/a.php"] [unique_id "ary2PdPAdfEWqmGIkg1nrwAAAl0"]
[Wed Sep 30 01:11:57.832493 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:11:57.832935 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODAwNjg2
[Wed Sep 30 01:11:57.846052 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.846353 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.908128 2026] [security2:error] [pid 276620:tid 276770] [client 13.70.1.101:21050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/sx.php"] [unique_id "ary2PdPAdfEWqmGIkg1nswAAAh8"]
[Wed Sep 30 01:11:57.936590 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:57.936939 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:57.958444 2026] [security2:error] [pid 276620:tid 276874] [client 20.28.180.172:29452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/gix.php"] [unique_id "ary2PdPAdfEWqmGIkg1nuAAAAoc"]
[Wed Sep 30 01:11:57.979628 2026] [autoindex:error] [pid 276620:tid 276759] [client 84.17.60.236:32826] AH01276: Cannot serve directory /home1/craigbro/public_html/hybridcloudinnovation/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:58.014182 2026] [security2:error] [pid 270884:tid 271028] [client 20.211.90.37:18700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-blink.php"] [unique_id "ary2PiGeq9LtYp4zuPO5RgAAAAk"]
[Wed Sep 30 01:11:58.029080 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.029343 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:36977] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.033457 2026] [security2:error] [pid 270884:tid 271122] [client 45.138.12.32:47344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.llz.xcs.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2PiGeq9LtYp4zuPO5RwAAAGc"]
[Wed Sep 30 01:11:58.057582 2026] [security2:error] [pid 270884:tid 271073] [client 20.194.5.96:44942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/tesla.php"] [unique_id "ary2PiGeq9LtYp4zuPO5SgAAADY"]
[Wed Sep 30 01:11:58.066497 2026] [security2:error] [pid 270884:tid 271077] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/favicon.ico"] [unique_id "ary2PiGeq9LtYp4zuPO5SwAAADo"]
[Wed Sep 30 01:11:58.072059 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.2.60:30355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary2PiGeq9LtYp4zuPO5TAAAAGU"]
[Wed Sep 30 01:11:58.120738 2026] [security2:error] [pid 270884:tid 271048] [client 13.70.1.101:6142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/f35.php"] [unique_id "ary2PiGeq9LtYp4zuPO5TgAAAB0"]
[Wed Sep 30 01:11:58.120952 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.121260 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.139936 2026] [security2:error] [pid 276620:tid 276836] [client 84.17.60.236:32826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2PtPAdfEWqmGIkg1nvAAAAmE"]
[Wed Sep 30 01:11:58.163609 2026] [security2:error] [pid 270884:tid 270990] [remote 220.181.108.144:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 144.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2PiGeq9LtYp4zuPO5TwAAUGQ"]
[Wed Sep 30 01:11:58.211264 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.211555 2026] [access_compat:error] [pid 270884:tid 271028] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.278979 2026] [security2:error] [pid 270884:tid 271120] [client 20.219.19.141:28018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/cord.php"] [unique_id "ary2PiGeq9LtYp4zuPO5WAAAAGU"]
[Wed Sep 30 01:11:58.288232 2026] [security2:error] [pid 276059:tid 276295] [client 13.70.1.101:21427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary2PntqdHBwD77138e6hAAAAfM"]
[Wed Sep 30 01:11:58.300100 2026] [access_compat:error] [pid 276059:tid 276208] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:11:58.300562 2026] [access_compat:error] [pid 276059:tid 276208] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA4
[Wed Sep 30 01:11:58.303040 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.303278 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.382587 2026] [security2:error] [pid 276059:tid 276299] [client 20.211.90.37:18692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-logis.php"] [unique_id "ary2PntqdHBwD77138e6iAAAAfc"]
[Wed Sep 30 01:11:58.397071 2026] [autoindex:error] [pid 270884:tid 271068] [client 57.131.131.17:42546] AH01276: Cannot serve directory /home4/thermali/public_html/website_01e827cf/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:58.410017 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.410471 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.413527 2026] [security2:error] [pid 276620:tid 276802] [client 177.10.186.50:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2PtPAdfEWqmGIkg1nwwAAAj8"]
[Wed Sep 30 01:11:58.453745 2026] [security2:error] [pid 276620:tid 276886] [client 216.73.216.46:36977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2PtPAdfEWqmGIkg1nxQAAApM"], referer: http://www.homs.co.ke/?action=adminer&p=L2V0Yy9kcGtn
[Wed Sep 30 01:11:58.487928 2026] [security2:error] [pid 276620:tid 276872] [client 20.219.2.60:11725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-block.php"] [unique_id "ary2PtPAdfEWqmGIkg1nyAAAAoU"]
[Wed Sep 30 01:11:58.489729 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.490018 2026] [access_compat:error] [pid 270884:tid 271099] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.514597 2026] [security2:error] [pid 276620:tid 276801] [client 13.70.1.101:6114] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "nelsonfarmstn.com"] [uri "/1.php"] [unique_id "ary2PtPAdfEWqmGIkg1nywAAAj4"]
[Wed Sep 30 01:11:58.514710 2026] [security2:error] [pid 276620:tid 276801] [client 13.70.1.101:6114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/1.php"] [unique_id "ary2PtPAdfEWqmGIkg1nywAAAj4"]
[Wed Sep 30 01:11:58.581182 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.581588 2026] [access_compat:error] [pid 270884:tid 271081] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.605603 2026] [security2:error] [pid 270884:tid 271142] [client 20.194.30.107:23566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2PiGeq9LtYp4zuPO5ZgAAAHs"]
[Wed Sep 30 01:11:58.665394 2026] [security2:error] [pid 270884:tid 271107] [client 168.100.149.226:64540] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/087a97f2583855f8909d61f63886a761.32.css.gz"] [unique_id "ary2PiGeq9LtYp4zuPO5bQAAWGo"]
[Wed Sep 30 01:11:58.675121 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.675604 2026] [access_compat:error] [pid 270884:tid 271072] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.688426 2026] [security2:error] [pid 270884:tid 271020] [client 127.0.0.1:17130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary2PiGeq9LtYp4zuPO5agAAAAE"]
[Wed Sep 30 01:11:58.688669 2026] [security2:error] [pid 270884:tid 271028] [client 74.7.175.177:39634] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.mlj.vhc.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2PiGeq9LtYp4zuPO5aQAACSI"]
[Wed Sep 30 01:11:58.690118 2026] [security2:error] [pid 270884:tid 271099] [client 187.21.174.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2PiGeq9LtYp4zuPO5cAAAAFA"]
[Wed Sep 30 01:11:58.765106 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.765359 2026] [access_compat:error] [pid 270884:tid 271137] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.773136 2026] [security2:error] [pid 276059:tid 276248] [client 13.70.1.101:21475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/article.php"] [unique_id "ary2PntqdHBwD77138e6jgAAAcQ"]
[Wed Sep 30 01:11:58.791086 2026] [security2:error] [pid 276059:tid 276195] [client 84.17.60.236:58482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/xmlrpc.php"] [unique_id "ary2PntqdHBwD77138e6kQAAAZA"]
[Wed Sep 30 01:11:58.818776 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:58.819046 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvbmV0
[Wed Sep 30 01:11:58.821514 2026] [security2:error] [pid 276620:tid 276771] [client 20.211.90.37:18737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/esc.php"] [unique_id "ary2PtPAdfEWqmGIkg1n1AAAAiA"]
[Wed Sep 30 01:11:58.826437 2026] [security2:error] [pid 276059:tid 276232] [client 31.189.214.146:53865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2PntqdHBwD77138e6kwAAAbQ"]
[Wed Sep 30 01:11:58.827146 2026] [security2:error] [pid 276059:tid 276232] [client 31.189.214.146:53865] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2PntqdHBwD77138e6kwAAAbQ"]
[Wed Sep 30 01:11:58.855933 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.856211 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.875639 2026] [security2:error] [pid 270884:tid 271052] [client 188.211.250.91:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2PiGeq9LtYp4zuPO5ewAAACE"]
[Wed Sep 30 01:11:58.882658 2026] [security2:error] [pid 276620:tid 276885] [client 201.32.215.149:6558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2PtPAdfEWqmGIkg1n2gAAApI"]
[Wed Sep 30 01:11:58.882770 2026] [security2:error] [pid 276620:tid 276885] [client 201.32.215.149:6558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2PtPAdfEWqmGIkg1n2gAAApI"]
[Wed Sep 30 01:11:58.924862 2026] [security2:error] [pid 276620:tid 276846] [client 20.219.19.141:28015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/anom.php"] [unique_id "ary2PtPAdfEWqmGIkg1n2wAAAms"]
[Wed Sep 30 01:11:58.946339 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:58.946607 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:58.954428 2026] [security2:error] [pid 276059:tid 276205] [client 51.195.6.20:49926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.6.195.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary2PntqdHBwD77138e6lwAAAZo"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:11:58.991506 2026] [security2:error] [pid 276620:tid 276786] [client 20.70.173.30:8927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/adminfuns.php"] [unique_id "ary2PtPAdfEWqmGIkg1n3QAAAi8"]
[Wed Sep 30 01:11:58.991830 2026] [security2:error] [pid 276620:tid 276800] [client 13.70.1.101:5772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/c.php"] [unique_id "ary2PtPAdfEWqmGIkg1n3gAAAj0"]
[Wed Sep 30 01:11:59.011954 2026] [security2:error] [pid 270884:tid 271067] [client 20.194.5.96:44964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/222.php"] [unique_id "ary2PyGeq9LtYp4zuPO5fgAAADA"]
[Wed Sep 30 01:11:59.041456 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.041899 2026] [access_compat:error] [pid 270884:tid 271034] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.062685 2026] [security2:error] [pid 270884:tid 271108] [client 20.219.14.152:41888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/24.php"] [unique_id "ary2PyGeq9LtYp4zuPO5ggAAAFk"]
[Wed Sep 30 01:11:59.070366 2026] [autoindex:error] [pid 270884:tid 270970] [remote 93.152.209.11:17570] AH01276: Cannot serve directory /home4/cwkmlymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:59.102940 2026] [security2:error] [pid 270884:tid 271026] [client 45.138.12.32:34032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lkq.woo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2PyGeq9LtYp4zuPO5gwAAAAc"]
[Wed Sep 30 01:11:59.132021 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.132463 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.133994 2026] [security2:error] [pid 270884:tid 271053] [client 20.70.173.30:33357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/memberfuns.php"] [unique_id "ary2PyGeq9LtYp4zuPO5hwAAACI"]
[Wed Sep 30 01:11:59.177084 2026] [security2:error] [pid 270884:tid 271099] [client 20.198.74.230:23928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/zpslrqry.php"] [unique_id "ary2PyGeq9LtYp4zuPO5iQAAAFA"]
[Wed Sep 30 01:11:59.232164 2026] [security2:error] [pid 270884:tid 271057] [client 13.70.1.101:57053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/link.php"] [unique_id "ary2PyGeq9LtYp4zuPO5igAAACY"]
[Wed Sep 30 01:11:59.267661 2026] [security2:error] [pid 276620:tid 276832] [client 20.211.90.37:18721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/2.php"] [unique_id "ary2P9PAdfEWqmGIkg1n5QAAAl0"]
[Wed Sep 30 01:11:59.272803 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.273066 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.286276 2026] [security2:error] [pid 276620:tid 276791] [client 103.241.204.139:63005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2P9PAdfEWqmGIkg1n5wAAAjQ"]
[Wed Sep 30 01:11:59.286435 2026] [security2:error] [pid 276620:tid 276791] [client 103.241.204.139:63005] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2P9PAdfEWqmGIkg1n5wAAAjQ"]
[Wed Sep 30 01:11:59.311323 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.311632 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.356003 2026] [security2:error] [pid 276620:tid 276839] [client 43.104.4.218:50957] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2P9PAdfEWqmGIkg1n6wAAAmQ"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:11:59.359248 2026] [access_compat:error] [pid 276059:tid 276229] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:11:59.359669 2026] [access_compat:error] [pid 276059:tid 276229] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA1
[Wed Sep 30 01:11:59.362222 2026] [security2:error] [pid 270884:tid 271120] [client 49.43.163.212:53628] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2PyGeq9LtYp4zuPO5kAAAAGU"]
[Wed Sep 30 01:11:59.362450 2026] [security2:error] [pid 270884:tid 271120] [client 49.43.163.212:53628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2PyGeq9LtYp4zuPO5kAAAAGU"]
[Wed Sep 30 01:11:59.411047 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.411466 2026] [access_compat:error] [pid 270884:tid 271142] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.425862 2026] [security2:error] [pid 276620:tid 276841] [client 20.219.19.141:28420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/plugins.php"] [unique_id "ary2P9PAdfEWqmGIkg1n7QAAAmY"]
[Wed Sep 30 01:11:59.473831 2026] [autoindex:error] [pid 270884:tid 271068] [client 84.17.60.236:58492] AH01276: Cannot serve directory /home1/craigbro/public_html/hybridcloudinnovation/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:11:59.509470 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.509900 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.533601 2026] [security2:error] [pid 276059:tid 276201] [client 20.219.14.152:41487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/xxw.php"] [unique_id "ary2P3tqdHBwD77138e6oAAAAZY"]
[Wed Sep 30 01:11:59.536513 2026] [security2:error] [pid 276059:tid 276268] [client 13.70.1.101:5821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/build.php"] [unique_id "ary2P3tqdHBwD77138e6oQAAAdg"]
[Wed Sep 30 01:11:59.567213 2026] [security2:error] [pid 276059:tid 276274] [client 20.28.180.172:18345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/tymn.php"] [unique_id "ary2P3tqdHBwD77138e6ogAAAd4"]
[Wed Sep 30 01:11:59.580991 2026] [security2:error] [pid 270884:tid 271120] [client 185.226.198.7:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/api/session/properties"] [unique_id "ary2PyGeq9LtYp4zuPO5mAAAAGU"]
[Wed Sep 30 01:11:59.597154 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.597585 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.612017 2026] [security2:error] [pid 276059:tid 276260] [client 20.70.173.30:8128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/222.php"] [unique_id "ary2P3tqdHBwD77138e6owAAAdA"]
[Wed Sep 30 01:11:59.635988 2026] [security2:error] [pid 270884:tid 271049] [client 84.17.60.236:58492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2PyGeq9LtYp4zuPO5mwAAAB4"]
[Wed Sep 30 01:11:59.638591 2026] [security2:error] [pid 270884:tid 271080] [client 103.168.67.253:21356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2PyGeq9LtYp4zuPO5nAAAAD0"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:11:59.647396 2026] [security2:error] [pid 276620:tid 276802] [client 4.240.25.22:8919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ops.php"] [unique_id "ary2P9PAdfEWqmGIkg1n9wAAAj8"]
[Wed Sep 30 01:11:59.674017 2026] [security2:error] [pid 276620:tid 276816] [client 43.104.4.180:27000] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary2P9PAdfEWqmGIkg1n-AAAAk0"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:11:59.680564 2026] [security2:error] [pid 270884:tid 271067] [client 43.104.4.189:1447] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary2PyGeq9LtYp4zuPO5oAAAADA"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:11:59.689791 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.690270 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.715518 2026] [security2:error] [pid 270884:tid 271120] [client 4.240.25.22:38727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/az.php"] [unique_id "ary2PyGeq9LtYp4zuPO5qAAAAGU"]
[Wed Sep 30 01:11:59.754654 2026] [security2:error] [pid 276620:tid 276886] [client 20.211.90.37:18817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/ba.php"] [unique_id "ary2P9PAdfEWqmGIkg1n-gAAApM"]
[Wed Sep 30 01:11:59.777476 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.777740 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.857861 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:11:59.858265 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvbmV0
[Wed Sep 30 01:11:59.868573 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.868878 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:11:59.922876 2026] [security2:error] [pid 276620:tid 276813] [client 13.70.1.101:5768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/bless.php"] [unique_id "ary2P9PAdfEWqmGIkg1oAQAAAko"]
[Wed Sep 30 01:11:59.923837 2026] [security2:error] [pid 276620:tid 276850] [client 37.41.16.35:49280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2P9PAdfEWqmGIkg1oAgAAAm8"]
[Wed Sep 30 01:11:59.924039 2026] [security2:error] [pid 276620:tid 276850] [client 37.41.16.35:49280] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2P9PAdfEWqmGIkg1oAgAAAm8"]
[Wed Sep 30 01:11:59.933395 2026] [security2:error] [pid 270884:tid 271022] [client 20.219.19.141:27934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/groud3.php"] [unique_id "ary2PyGeq9LtYp4zuPO5sQAAAAM"]
[Wed Sep 30 01:11:59.957755 2026] [security2:error] [pid 276059:tid 276317] [client 13.70.1.101:21410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/lock360.php"] [unique_id "ary2P3tqdHBwD77138e6rgAAAgk"]
[Wed Sep 30 01:11:59.958581 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:11:59.958841 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.008770 2026] [security2:error] [pid 270884:tid 271020] [client 20.219.14.152:41474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/bnmtp.php"] [unique_id "ary2QCGeq9LtYp4zuPO5tAAAAAE"]
[Wed Sep 30 01:12:00.042316 2026] [security2:error] [pid 276059:tid 276137] [remote 47.128.114.155:29778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/12355/2"] [unique_id "ary2QHtqdHBwD77138e6sAABj0k"]
[Wed Sep 30 01:12:00.053335 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.053623 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.144691 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.145140 2026] [access_compat:error] [pid 270884:tid 271120] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.172711 2026] [security2:error] [pid 276059:tid 276313] [client 20.211.90.37:18717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/great.php"] [unique_id "ary2QHtqdHBwD77138e6sgAAAgU"]
[Wed Sep 30 01:12:00.232525 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.232794 2026] [access_compat:error] [pid 270884:tid 271108] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.291465 2026] [security2:error] [pid 276620:tid 276812] [client 84.17.60.236:58508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2QNPAdfEWqmGIkg1oDAAAAkk"]
[Wed Sep 30 01:12:00.315606 2026] [security2:error] [pid 276620:tid 276714] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2QNPAdfEWqmGIkg1oDQACelQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=11989
[Wed Sep 30 01:12:00.315641 2026] [security2:error] [pid 276620:tid 276714] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2QNPAdfEWqmGIkg1oDQACelQ"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=11989
[Wed Sep 30 01:12:00.323323 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.323603 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.343004 2026] [security2:error] [pid 270884:tid 271022] [client 13.70.1.101:5774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/admin/upload/css.php"] [unique_id "ary2QCGeq9LtYp4zuPO5xAAAAAM"]
[Wed Sep 30 01:12:00.374200 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:12:00.374660 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzA0
[Wed Sep 30 01:12:00.426417 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.426872 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.451036 2026] [security2:error] [pid 276059:tid 276290] [client 20.219.19.141:27991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/gaxby.php"] [unique_id "ary2QHtqdHBwD77138e6wAAAAe4"]
[Wed Sep 30 01:12:00.472781 2026] [security2:error] [pid 276059:tid 276259] [client 20.219.14.152:41886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ebkid.php"] [unique_id "ary2QHtqdHBwD77138e6wgAAAc8"]
[Wed Sep 30 01:12:00.511214 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.511583 2026] [security2:error] [pid 276620:tid 276867] [client 51.195.6.20:44114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.6.195.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/wp-login.php"] [unique_id "ary2QNPAdfEWqmGIkg1oGAAAAoA"], referer: https://co-opportunities.org/wp-login.php
[Wed Sep 30 01:12:00.511739 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.514181 2026] [security2:error] [pid 276620:tid 276859] [client 13.70.1.101:21017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-trackback.php"] [unique_id "ary2QNPAdfEWqmGIkg1oGQAAAng"]
[Wed Sep 30 01:12:00.530177 2026] [security2:error] [pid 276059:tid 276271] [client 20.194.5.96:64482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/media.php"] [unique_id "ary2QHtqdHBwD77138e6wwAAAds"]
[Wed Sep 30 01:12:00.563928 2026] [security2:error] [pid 276059:tid 276195] [client 20.211.90.37:18751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary2QHtqdHBwD77138e6xAAAAZA"]
[Wed Sep 30 01:12:00.579258 2026] [security2:error] [pid 270884:tid 271099] [client 103.168.67.253:21370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2QCGeq9LtYp4zuPO5ygAAAFA"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:12:00.591483 2026] [security2:error] [pid 270884:tid 271022] [client 191.188.184.240:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2QCGeq9LtYp4zuPO5ywAAAAM"]
[Wed Sep 30 01:12:00.595251 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.595526 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.604026 2026] [security2:error] [pid 276620:tid 276782] [client 43.104.4.205:42471] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary2QNPAdfEWqmGIkg1oHgAAAis"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:12:00.692338 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.692824 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.695993 2026] [security2:error] [pid 276620:tid 276860] [client 168.100.149.216:39980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/099f6d6a7cc8925af4794da560d34e45.d386.css.gz"] [unique_id "ary2QNPAdfEWqmGIkg1oIQACeVg"]
[Wed Sep 30 01:12:00.778511 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.778795 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.825980 2026] [security2:error] [pid 276620:tid 276810] [client 13.70.1.101:5777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/lock360.php"] [unique_id "ary2QNPAdfEWqmGIkg1oIgAAAkc"]
[Wed Sep 30 01:12:00.864225 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.1.101:21012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/.well-known/index.php"] [unique_id "ary2QNPAdfEWqmGIkg1oJAAAAn0"]
[Wed Sep 30 01:12:00.906001 2026] [access_compat:error] [pid 276059:tid 276285] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 01:12:00.906276 2026] [access_compat:error] [pid 276059:tid 276285] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 01:12:00.912461 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.912705 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.934100 2026] [security2:error] [pid 276620:tid 276877] [client 20.219.14.152:41486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/133.php"] [unique_id "ary2QNPAdfEWqmGIkg1oJwAAAoo"]
[Wed Sep 30 01:12:00.939086 2026] [security2:error] [pid 270884:tid 271080] [client 84.17.60.236:58514] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2QCGeq9LtYp4zuPO5zwAAAD0"]
[Wed Sep 30 01:12:00.960956 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:00.961223 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:00.981767 2026] [security2:error] [pid 270884:tid 271028] [client 20.28.180.172:62388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/eetu.php"] [unique_id "ary2QCGeq9LtYp4zuPO50QAAAAk"]
[Wed Sep 30 01:12:00.985150 2026] [security2:error] [pid 276620:tid 276802] [client 20.211.90.37:18728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/robots.php"] [unique_id "ary2QNPAdfEWqmGIkg1oKAAAAj8"]
[Wed Sep 30 01:12:01.051509 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.051854 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.100597 2026] [security2:error] [pid 276620:tid 276811] [client 20.219.19.141:27955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/dh9u7.php"] [unique_id "ary2QdPAdfEWqmGIkg1oLAAAAkg"]
[Wed Sep 30 01:12:01.147772 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.148229 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.233863 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.234124 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.247062 2026] [security2:error] [pid 270884:tid 271022] [client 13.70.1.101:6126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/4.php"] [unique_id "ary2QSGeq9LtYp4zuPO57gAAAAM"]
[Wed Sep 30 01:12:01.276591 2026] [security2:error] [pid 276620:tid 276863] [client 43.104.4.185:27023] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2QdPAdfEWqmGIkg1oLwAAAnw"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:12:01.291440 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 01:12:01.291694 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvdGFzay8xMDQxOA==
[Wed Sep 30 01:12:01.325511 2026] [security2:error] [pid 276620:tid 276759] [client 223.235.102.107:16316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2QdPAdfEWqmGIkg1oMwAAAhQ"]
[Wed Sep 30 01:12:01.325623 2026] [security2:error] [pid 276620:tid 276759] [client 223.235.102.107:16316] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2QdPAdfEWqmGIkg1oMwAAAhQ"]
[Wed Sep 30 01:12:01.326928 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.327192 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.349108 2026] [security2:error] [pid 276059:tid 276198] [client 20.211.90.37:18712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/k.php"] [unique_id "ary2QXtqdHBwD77138e60QAAAZM"]
[Wed Sep 30 01:12:01.392430 2026] [security2:error] [pid 276059:tid 276306] [client 13.70.1.101:21032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary2QXtqdHBwD77138e61gAAAf4"]
[Wed Sep 30 01:12:01.406194 2026] [security2:error] [pid 276059:tid 276214] [client 20.219.14.152:41882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/x33.php"] [unique_id "ary2QXtqdHBwD77138e62gAAAaI"]
[Wed Sep 30 01:12:01.420512 2026] [security2:error] [pid 276059:tid 276312] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/WebInterface/"] [unique_id "ary2QXtqdHBwD77138e62wAAAgQ"]
[Wed Sep 30 01:12:01.425254 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:11360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-signup.php"] [unique_id "ary2QSGeq9LtYp4zuPO58wAAADk"]
[Wed Sep 30 01:12:01.455699 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.457672 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.461002 2026] [security2:error] [pid 276059:tid 276157] [remote 57.141.14.18:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "ary2QXtqdHBwD77138e62AABvF0"]
[Wed Sep 30 01:12:01.513164 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.513433 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.600786 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.601064 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:64773] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.615229 2026] [security2:error] [pid 276059:tid 276307] [client 84.17.60.236:58524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2QXtqdHBwD77138e63wAAAf8"]
[Wed Sep 30 01:12:01.622123 2026] [security2:error] [pid 276059:tid 276202] [client 20.194.5.96:55434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/24.php"] [unique_id "ary2QXtqdHBwD77138e64AAAAZc"]
[Wed Sep 30 01:12:01.623127 2026] [security2:error] [pid 276059:tid 276211] [client 13.70.1.101:6132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/about.php"] [unique_id "ary2QXtqdHBwD77138e64QAAAZ8"]
[Wed Sep 30 01:12:01.640613 2026] [security2:error] [pid 276059:tid 276223] [client 223.181.60.167:20533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2QXtqdHBwD77138e64wAAAas"]
[Wed Sep 30 01:12:01.640797 2026] [security2:error] [pid 276059:tid 276223] [client 223.181.60.167:20533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2QXtqdHBwD77138e64wAAAas"]
[Wed Sep 30 01:12:01.648939 2026] [security2:error] [pid 270884:tid 271052] [client 20.219.19.141:27941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/yvnqcuic.php"] [unique_id "ary2QSGeq9LtYp4zuPO59gAAACE"]
[Wed Sep 30 01:12:01.681791 2026] [security2:error] [pid 276620:tid 276861] [client 20.28.180.172:29458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/dot.php"] [unique_id "ary2QdPAdfEWqmGIkg1oOgAAAno"]
[Wed Sep 30 01:12:01.691657 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.691969 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.693731 2026] [security2:error] [pid 276059:tid 276270] [client 94.176.81.88:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2QXtqdHBwD77138e65QAAAdo"]
[Wed Sep 30 01:12:01.693782 2026] [security2:error] [pid 276059:tid 276236] [client 20.211.90.37:18695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/w.php"] [unique_id "ary2QXtqdHBwD77138e65gAAAbg"]
[Wed Sep 30 01:12:01.696169 2026] [qos:error] [pid 276620:tid 276661] [remote 46.6.124.28:38250] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=46.6.124.28, id=ary2QdPAdfEWqmGIkg1oOwACgh8
[Wed Sep 30 01:12:01.738735 2026] [security2:error] [pid 270884:tid 271022] [client 20.219.2.60:30394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/varb.php"] [unique_id "ary2QSGeq9LtYp4zuPO5_QAAAAM"]
[Wed Sep 30 01:12:01.775091 2026] [security2:error] [pid 276620:tid 276859] [client 216.73.216.46:64773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2QdPAdfEWqmGIkg1oPAAAAng"]
[Wed Sep 30 01:12:01.834645 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:01.834936 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:01.866013 2026] [security2:error] [pid 276059:tid 276299] [client 20.219.14.152:41513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/cae.php"] [unique_id "ary2QXtqdHBwD77138e66gAAAfc"]
[Wed Sep 30 01:12:01.869585 2026] [security2:error] [pid 270884:tid 271037] [client 4.240.25.22:8505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-blog-header.php"] [unique_id "ary2QSGeq9LtYp4zuPO6BQAAABI"]
[Wed Sep 30 01:12:01.872276 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.872543 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.897582 2026] [security2:error] [pid 270884:tid 271080] [client 103.168.67.253:21384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2QSGeq9LtYp4zuPO6CQAAAD0"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:12:01.967257 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:01.967656 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:01.970268 2026] [security2:error] [pid 270884:tid 271108] [client 13.70.1.101:21008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2QSGeq9LtYp4zuPO6DAAAAFk"]
[Wed Sep 30 01:12:02.014503 2026] [security2:error] [pid 276059:tid 276218] [client 13.70.1.101:5788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/r.php"] [unique_id "ary2QntqdHBwD77138e67QAAAaY"]
[Wed Sep 30 01:12:02.043488 2026] [security2:error] [pid 270884:tid 271049] [client 49.37.102.248:60585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2QiGeq9LtYp4zuPO6DgAAAB4"]
[Wed Sep 30 01:12:02.043629 2026] [security2:error] [pid 270884:tid 271049] [client 49.37.102.248:60585] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2QiGeq9LtYp4zuPO6DgAAAB4"]
[Wed Sep 30 01:12:02.044883 2026] [security2:error] [pid 270884:tid 271142] [client 20.211.90.37:18823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/ccc.php"] [unique_id "ary2QiGeq9LtYp4zuPO6DwAAAHs"]
[Wed Sep 30 01:12:02.056505 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.056760 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:8744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.140851 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:8744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2QiGeq9LtYp4zuPO6EQAAAAk"]
[Wed Sep 30 01:12:02.217265 2026] [security2:error] [pid 270884:tid 271049] [client 20.219.19.141:28011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/koiy.php"] [unique_id "ary2QiGeq9LtYp4zuPO6EgAAAB4"]
[Wed Sep 30 01:12:02.228820 2026] [security2:error] [pid 270884:tid 271001] [remote 220.181.108.146:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2QiGeq9LtYp4zuPO6FAAAY28"]
[Wed Sep 30 01:12:02.237871 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.238147 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.251214 2026] [security2:error] [pid 270884:tid 271111] [client 84.17.60.236:58534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2QiGeq9LtYp4zuPO6GQAAAFw"]
[Wed Sep 30 01:12:02.289300 2026] [security2:error] [pid 270884:tid 271041] [client 103.168.67.253:21386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dklhardwareconstruction.com"] [uri "/blog/index.php"] [unique_id "ary2QiGeq9LtYp4zuPO6HQAAABY"], referer: https://dklhardwareconstruction.com/blog/wp-admin/
[Wed Sep 30 01:12:02.317719 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 01:12:02.318170 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 01:12:02.319350 2026] [security2:error] [pid 270884:tid 271142] [client 13.70.1.101:53464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2QiGeq9LtYp4zuPO6IAAAAHs"]
[Wed Sep 30 01:12:02.330003 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.330410 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.339029 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.14.152:41879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/txets.php"] [unique_id "ary2QiGeq9LtYp4zuPO6IgAAAGM"]
[Wed Sep 30 01:12:02.386355 2026] [security2:error] [pid 276059:tid 276210] [client 13.70.1.101:6100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/v4.php"] [unique_id "ary2QntqdHBwD77138e68QAAAZ4"]
[Wed Sep 30 01:12:02.428594 2026] [security2:error] [pid 276620:tid 276825] [client 45.138.12.32:34128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lollyandpopsfarm.com"] [uri "/wp-links-opml.php"] [unique_id "ary2QtPAdfEWqmGIkg1oQAAAAlY"]
[Wed Sep 30 01:12:02.431956 2026] [security2:error] [pid 276059:tid 276284] [client 20.70.173.30:7391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/samll.php"] [unique_id "ary2QntqdHBwD77138e69QAAAeg"]
[Wed Sep 30 01:12:02.485629 2026] [security2:error] [pid 276620:tid 276800] [client 20.211.90.37:18746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/images.php"] [unique_id "ary2QtPAdfEWqmGIkg1oRAAAAj0"]
[Wed Sep 30 01:12:02.497560 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.497842 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.504160 2026] [security2:error] [pid 276059:tid 276286] [client 20.194.5.96:44947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/xwpg.php"] [unique_id "ary2QntqdHBwD77138e6-AAAAeo"]
[Wed Sep 30 01:12:02.514059 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.514323 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.587769 2026] [security2:error] [pid 276620:tid 276826] [client 20.219.2.60:11867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-xmlsia.php"] [unique_id "ary2QtPAdfEWqmGIkg1oSAAAAlc"]
[Wed Sep 30 01:12:02.603292 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.603568 2026] [access_compat:error] [pid 270884:tid 271041] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.647047 2026] [security2:error] [pid 276059:tid 276212] [client 43.104.4.192:63788] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js"] [unique_id "ary2QntqdHBwD77138e6-gAAAaA"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:12:02.693697 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.693986 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.754884 2026] [access_compat:error] [pid 270884:tid 270911] [remote 17.166.150.7:59878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.755067 2026] [security2:error] [pid 276620:tid 276810] [client 13.70.1.101:6127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-22.php"] [unique_id "ary2QtPAdfEWqmGIkg1oUAAAAkc"]
[Wed Sep 30 01:12:02.755430 2026] [access_compat:error] [pid 270884:tid 270911] [remote 17.166.150.7:59878] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.759553 2026] [security2:error] [pid 270884:tid 271118] [client 20.219.19.141:27980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wordfence-waf.php"] [unique_id "ary2QiGeq9LtYp4zuPO6MAAAAGM"]
[Wed Sep 30 01:12:02.776861 2026] [security2:error] [pid 270884:tid 271028] [client 189.139.141.77:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2QiGeq9LtYp4zuPO6MgAAAAk"]
[Wed Sep 30 01:12:02.779112 2026] [security2:error] [pid 276620:tid 276814] [client 20.198.74.230:23577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/w1px.php"] [unique_id "ary2QtPAdfEWqmGIkg1oUwAAAks"]
[Wed Sep 30 01:12:02.788107 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.788556 2026] [access_compat:error] [pid 270884:tid 271033] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.812542 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 01:12:02.813018 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvdGFzay8xMDQxMQ==
[Wed Sep 30 01:12:02.823417 2026] [security2:error] [pid 270884:tid 271022] [client 20.219.14.152:41868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wp-update.php"] [unique_id "ary2QiGeq9LtYp4zuPO6NAAAAAM"]
[Wed Sep 30 01:12:02.846680 2026] [security2:error] [pid 276059:tid 276258] [client 13.70.1.101:42693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary2QntqdHBwD77138e6_gAAAc4"]
[Wed Sep 30 01:12:02.876416 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.876738 2026] [access_compat:error] [pid 270884:tid 271025] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.905385 2026] [security2:error] [pid 270884:tid 271128] [client 84.17.60.236:58542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2QiGeq9LtYp4zuPO6OwAAAG0"]
[Wed Sep 30 01:12:02.967274 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:02.967548 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:55767] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:02.986233 2026] [security2:error] [pid 276620:tid 276818] [client 20.211.90.37:18711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/alls.php"] [unique_id "ary2QtPAdfEWqmGIkg1oVQAAAk8"]
[Wed Sep 30 01:12:03.049890 2026] [security2:error] [pid 270884:tid 271076] [client 216.73.216.46:55767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2QyGeq9LtYp4zuPO6QQAAADk"]
[Wed Sep 30 01:12:03.085977 2026] [security2:error] [pid 270884:tid 271043] [client 13.70.1.101:45254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/makeasmtp.php"] [unique_id "ary2QyGeq9LtYp4zuPO6QwAAABg"]
[Wed Sep 30 01:12:03.148156 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.148434 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.176516 2026] [security2:error] [pid 270884:tid 271043] [client 185.226.198.7:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/sitecore/shell/sitecore.version.xml"] [unique_id "ary2QyGeq9LtYp4zuPO6TAAAABg"]
[Wed Sep 30 01:12:03.197179 2026] [security2:error] [pid 270884:tid 271138] [client 13.70.1.101:53468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary2QyGeq9LtYp4zuPO6TgAAAHc"]
[Wed Sep 30 01:12:03.238275 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.238550 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.277330 2026] [security2:error] [pid 270884:tid 271030] [client 20.219.19.141:27961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wp5.php"] [unique_id "ary2QyGeq9LtYp4zuPO6VAAAAAs"]
[Wed Sep 30 01:12:03.278213 2026] [security2:error] [pid 276620:tid 276792] [client 203.122.45.246:61616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2Q9PAdfEWqmGIkg1oVwAAAjU"]
[Wed Sep 30 01:12:03.278335 2026] [security2:error] [pid 276620:tid 276792] [client 203.122.45.246:61616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2Q9PAdfEWqmGIkg1oVwAAAjU"]
[Wed Sep 30 01:12:03.280029 2026] [security2:error] [pid 270884:tid 271043] [client 20.194.30.107:17291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/8.php"] [unique_id "ary2QyGeq9LtYp4zuPO6VQAAABg"]
[Wed Sep 30 01:12:03.284514 2026] [security2:error] [pid 270884:tid 271138] [client 20.219.14.152:41908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/177.php"] [unique_id "ary2QyGeq9LtYp4zuPO6VgAAAHc"]
[Wed Sep 30 01:12:03.329625 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.329892 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.340694 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:12:03.341159 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODA0NDUw
[Wed Sep 30 01:12:03.370284 2026] [security2:error] [pid 270884:tid 271076] [client 20.219.2.60:30369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/lm15.php"] [unique_id "ary2QyGeq9LtYp4zuPO6WwAAADk"]
[Wed Sep 30 01:12:03.422455 2026] [security2:error] [pid 270884:tid 271108] [client 20.211.90.37:18731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/admin.php"] [unique_id "ary2QyGeq9LtYp4zuPO6YgAAAFk"]
[Wed Sep 30 01:12:03.427351 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.427803 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.441535 2026] [security2:error] [pid 270884:tid 271073] [client 13.70.1.101:45303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/system_log.php"] [unique_id "ary2QyGeq9LtYp4zuPO6ZQAAADY"]
[Wed Sep 30 01:12:03.515795 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.516100 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.551480 2026] [security2:error] [pid 270884:tid 271073] [client 20.194.96.176:33452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wmore1.php"] [unique_id "ary2QyGeq9LtYp4zuPO6aAAAADY"]
[Wed Sep 30 01:12:03.552258 2026] [security2:error] [pid 276059:tid 276248] [client 84.17.60.236:58550] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2Q3tqdHBwD77138e7AwAAAcQ"]
[Wed Sep 30 01:12:03.606061 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.606328 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.617820 2026] [security2:error] [pid 270884:tid 271054] [client 13.70.1.101:53480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary2QyGeq9LtYp4zuPO6agAAACM"]
[Wed Sep 30 01:12:03.664484 2026] [security2:error] [pid 270884:tid 271111] [client 20.70.173.30:33406] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "hairofsheba.com"] [uri "/1.php"] [unique_id "ary2QyGeq9LtYp4zuPO6bQAAAFw"]
[Wed Sep 30 01:12:03.664573 2026] [security2:error] [pid 270884:tid 271111] [client 20.70.173.30:33406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/1.php"] [unique_id "ary2QyGeq9LtYp4zuPO6bQAAAFw"]
[Wed Sep 30 01:12:03.697052 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.697487 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.706387 2026] [qos:error] [pid 276620:tid 276847] [client 174.94.46.8:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2Q9PAdfEWqmGIkg1oYgAAAmw
[Wed Sep 30 01:12:03.723442 2026] [security2:error] [pid 276059:tid 276277] [client 20.28.180.172:29580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wp-9p3vdgw.php"] [unique_id "ary2Q3tqdHBwD77138e7BAAAAeE"]
[Wed Sep 30 01:12:03.750945 2026] [security2:error] [pid 270884:tid 271053] [client 20.219.14.152:41895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ccc.php"] [unique_id "ary2QyGeq9LtYp4zuPO6cwAAACI"]
[Wed Sep 30 01:12:03.761510 2026] [security2:error] [pid 276059:tid 276198] [client 20.211.90.37:18709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/geck.php"] [unique_id "ary2Q3tqdHBwD77138e7BQAAAZM"]
[Wed Sep 30 01:12:03.791493 2026] [security2:error] [pid 270884:tid 271043] [client 13.70.1.101:45308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/NewFile.php"] [unique_id "ary2QyGeq9LtYp4zuPO6dQAAABg"]
[Wed Sep 30 01:12:03.792935 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.793264 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.825826 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:03.826124 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:03.849642 2026] [security2:error] [pid 276059:tid 276310] [client 20.219.19.141:28429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/em.php"] [unique_id "ary2Q3tqdHBwD77138e7BwAAAgI"]
[Wed Sep 30 01:12:03.881221 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:03.881492 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:2258] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:03.967701 2026] [security2:error] [pid 270884:tid 271054] [client 216.73.216.46:2258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2QyGeq9LtYp4zuPO6eQAAACM"]
[Wed Sep 30 01:12:03.990896 2026] [security2:error] [pid 270884:tid 271044] [client 13.70.1.101:57043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/filemanager/dialog.php"] [unique_id "ary2QyGeq9LtYp4zuPO6egAAABk"]
[Wed Sep 30 01:12:04.036470 2026] [security2:error] [pid 270884:tid 271080] [client 45.138.12.32:46892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lkq.woo.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2RCGeq9LtYp4zuPO6fAAAAD0"]
[Wed Sep 30 01:12:04.080166 2026] [security2:error] [pid 270884:tid 271043] [client 4.240.25.22:18775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/images.php"] [unique_id "ary2RCGeq9LtYp4zuPO6fQAAABg"]
[Wed Sep 30 01:12:04.123214 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.123659 2026] [access_compat:error] [pid 270884:tid 271073] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.140591 2026] [qos:error] [pid 270884:tid 271030] [client 217.142.20.37:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RCGeq9LtYp4zuPO6ggAAAAs
[Wed Sep 30 01:12:04.157677 2026] [security2:error] [pid 270884:tid 271054] [client 20.211.90.37:18835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/goods.php"] [unique_id "ary2RCGeq9LtYp4zuPO6hQAAACM"]
[Wed Sep 30 01:12:04.197763 2026] [security2:error] [pid 270884:tid 271111] [client 13.70.1.101:5805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/t.php"] [unique_id "ary2RCGeq9LtYp4zuPO6iAAAAFw"]
[Wed Sep 30 01:12:04.200683 2026] [security2:error] [pid 276059:tid 276274] [client 20.219.14.152:41905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/0xD.php"] [unique_id "ary2RHtqdHBwD77138e7CwAAAd4"]
[Wed Sep 30 01:12:04.202374 2026] [security2:error] [pid 276620:tid 276861] [client 84.17.60.236:58562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2RNPAdfEWqmGIkg1oaAAAAno"]
[Wed Sep 30 01:12:04.209769 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:20653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.210057 2026] [access_compat:error] [pid 270884:tid 271080] [client 216.73.216.46:20653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.212464 2026] [security2:error] [pid 276059:tid 276261] [client 156.245.246.121:56392] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "taetaebobateashop.com"] [uri "/wp-comments-post.php"] [unique_id "ary2RHtqdHBwD77138e7CgAAAdE"], referer: https://taetaebobateashop.com
[Wed Sep 30 01:12:04.236264 2026] [security2:error] [pid 270884:tid 271024] [client 20.70.173.30:8171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/ohct.php"] [unique_id "ary2RCGeq9LtYp4zuPO6jAAAAAU"]
[Wed Sep 30 01:12:04.248173 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.248616 2026] [access_compat:error] [pid 270884:tid 271111] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.263968 2026] [qos:error] [pid 270884:tid 271138] [client 158.62.252.225:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RCGeq9LtYp4zuPO6kQAAAHc
[Wed Sep 30 01:12:04.312244 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:04.312506 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:04.322641 2026] [security2:error] [pid 270884:tid 271073] [client 20.219.2.60:11751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.magicdreampro.com"] [uri "/wp-inic3.php"] [unique_id "ary2RCGeq9LtYp4zuPO6lQAAADY"]
[Wed Sep 30 01:12:04.329895 2026] [security2:error] [pid 276059:tid 276261] [client 156.245.246.121:56392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "taetaebobateashop.com"] [uri "/wp-comments-post.php"] [unique_id "ary2RHtqdHBwD77138e7CgAAAdE"], referer: https://taetaebobateashop.com
[Wed Sep 30 01:12:04.339035 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.339293 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:14777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.353142 2026] [security2:error] [pid 270884:tid 271022] [client 20.204.42.136:35739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/wpxml.php"] [unique_id "ary2RCGeq9LtYp4zuPO6lwAAAAM"]
[Wed Sep 30 01:12:04.408576 2026] [security2:error] [pid 270884:tid 271138] [client 4.240.25.22:38740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/133.php"] [unique_id "ary2RCGeq9LtYp4zuPO6mQAAAHc"]
[Wed Sep 30 01:12:04.433236 2026] [security2:error] [pid 270884:tid 271022] [client 216.73.216.46:14777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2RCGeq9LtYp4zuPO6mgAAAAM"]
[Wed Sep 30 01:12:04.437567 2026] [security2:error] [pid 276620:tid 276800] [client 20.219.19.141:27987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/hp.php"] [unique_id "ary2RNPAdfEWqmGIkg1obgAAAj0"]
[Wed Sep 30 01:12:04.445500 2026] [security2:error] [pid 276059:tid 276302] [client 13.70.1.101:21052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/index/function.php"] [unique_id "ary2RHtqdHBwD77138e7DwAAAfo"]
[Wed Sep 30 01:12:04.482156 2026] [security2:error] [pid 276620:tid 276838] [client 43.104.4.205:42471] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary2RNPAdfEWqmGIkg1ocQAAAmM"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:12:04.486466 2026] [security2:error] [pid 276620:tid 276826] [client 4.240.25.22:8462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-manager.php"] [unique_id "ary2RNPAdfEWqmGIkg1ocgAAAlc"]
[Wed Sep 30 01:12:04.497404 2026] [security2:error] [pid 276059:tid 276292] [client 20.211.90.37:18859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/dejavu.php"] [unique_id "ary2RHtqdHBwD77138e7EQAAAfA"]
[Wed Sep 30 01:12:04.529077 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:20653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.529331 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:20653] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.551458 2026] [security2:error] [pid 276620:tid 276841] [client 20.194.5.96:64450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/blacks.php"] [unique_id "ary2RNPAdfEWqmGIkg1ocwAAAmY"]
[Wed Sep 30 01:12:04.585139 2026] [qos:error] [pid 276620:tid 276781] [client 172.58.51.210:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RNPAdfEWqmGIkg1odAAAAio
[Wed Sep 30 01:12:04.594729 2026] [security2:error] [pid 276059:tid 276273] [client 13.70.1.101:6124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/ee.php"] [unique_id "ary2RHtqdHBwD77138e7FgAAAd0"]
[Wed Sep 30 01:12:04.612319 2026] [security2:error] [pid 270884:tid 271028] [client 216.73.216.46:20653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2RCGeq9LtYp4zuPO6oAAAAAk"]
[Wed Sep 30 01:12:04.635198 2026] [security2:error] [pid 270884:tid 271076] [client 122.173.27.10:21372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2RCGeq9LtYp4zuPO6oQAAADk"]
[Wed Sep 30 01:12:04.635346 2026] [security2:error] [pid 270884:tid 271076] [client 122.173.27.10:21372] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2RCGeq9LtYp4zuPO6oQAAADk"]
[Wed Sep 30 01:12:04.640134 2026] [access_compat:error] [pid 276059:tid 276094] [remote 40.77.167.38:5555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.640576 2026] [access_compat:error] [pid 276059:tid 276094] [remote 40.77.167.38:5555] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.657362 2026] [security2:error] [pid 276620:tid 276768] [client 20.219.14.152:41875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/sallu.php"] [unique_id "ary2RNPAdfEWqmGIkg1odwAAAh0"]
[Wed Sep 30 01:12:04.664224 2026] [security2:error] [pid 270884:tid 271022] [client 103.168.66.101:48760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/index.php"] [unique_id "ary2RCGeq9LtYp4zuPO6owAAAAM"], referer: https://psrecruit.org.uk/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:12:04.667985 2026] [qos:error] [pid 276059:tid 276317] [client 173.32.140.29:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RHtqdHBwD77138e7GAAAAgk
[Wed Sep 30 01:12:04.686021 2026] [security2:error] [pid 276620:tid 276805] [client 168.100.149.155:28864] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3115009359288e1733c96512d984a164.3328e.css.gz"] [unique_id "ary2RNPAdfEWqmGIkg1oeAACQmA"]
[Wed Sep 30 01:12:04.691157 2026] [security2:error] [pid 276620:tid 276818] [client 185.226.198.5:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary2RNPAdfEWqmGIkg1oewAAAk8"]
[Wed Sep 30 01:12:04.757041 2026] [security2:error] [pid 276059:tid 276095] [remote 43.162.96.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.96.162.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ary2RHtqdHBwD77138e7GgACAB8"], referer: https://levantsoleil.com/wp-login.php
[Wed Sep 30 01:12:04.761657 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.761933 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.770734 2026] [security2:error] [pid 276059:tid 276254] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/solr/"] [unique_id "ary2RHtqdHBwD77138e7HgAAAco"]
[Wed Sep 30 01:12:04.830690 2026] [security2:error] [pid 276620:tid 276801] [client 20.211.90.37:18733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/h02ugyh.php"] [unique_id "ary2RNPAdfEWqmGIkg1oggAAAj4"]
[Wed Sep 30 01:12:04.835039 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:04.835329 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:04.846523 2026] [security2:error] [pid 270884:tid 271037] [client 20.70.173.30:38811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/ms-edit.php"] [unique_id "ary2RCGeq9LtYp4zuPO6pgAAABI"]
[Wed Sep 30 01:12:04.851517 2026] [security2:error] [pid 276620:tid 276855] [client 84.17.60.236:58574] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2RNPAdfEWqmGIkg1ogwAAAnQ"]
[Wed Sep 30 01:12:04.855775 2026] [qos:error] [pid 276059:tid 276144] [remote 72.39.101.223:33818] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=72.39.101.223, id=ary2RHtqdHBwD77138e7IAAB9FA
[Wed Sep 30 01:12:04.859048 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.859322 2026] [access_compat:error] [pid 270884:tid 271030] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.879101 2026] [qos:error] [pid 270884:tid 271044] [client 68.131.4.191:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RCGeq9LtYp4zuPO6qwAAABk
[Wed Sep 30 01:12:04.898504 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.898775 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:04.909030 2026] [security2:error] [pid 276620:tid 276642] [remote 43.162.96.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.96.162.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "levantsoleil.com"] [uri "/wp-login.php"] [unique_id "ary2RNPAdfEWqmGIkg1ohgACIAw"], referer: https://levantsoleil.com/wp-login.php
[Wed Sep 30 01:12:04.909181 2026] [security2:error] [pid 276620:tid 276848] [client 8.162.11.86:48878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary2RNPAdfEWqmGIkg1ohQAAAm0"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:12:04.964082 2026] [security2:error] [pid 270884:tid 271022] [client 20.219.19.141:27999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wpuse.php"] [unique_id "ary2RCGeq9LtYp4zuPO6rgAAAAM"]
[Wed Sep 30 01:12:04.992039 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:04.992287 2026] [access_compat:error] [pid 270884:tid 271044] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.010926 2026] [security2:error] [pid 270884:tid 271135] [client 13.70.1.101:6085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/2.php"] [unique_id "ary2RSGeq9LtYp4zuPO6sgAAAHQ"]
[Wed Sep 30 01:12:05.052633 2026] [qos:error] [pid 270884:tid 271105] [client 187.199.160.21:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RSGeq9LtYp4zuPO6tAAAAFY
[Wed Sep 30 01:12:05.083798 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.084071 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.122224 2026] [security2:error] [pid 270884:tid 271127] [client 13.70.1.101:38414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary2RSGeq9LtYp4zuPO6tgAAAGw"]
[Wed Sep 30 01:12:05.132015 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.14.152:41915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/01.php"] [unique_id "ary2RdPAdfEWqmGIkg1oiQAAAmw"]
[Wed Sep 30 01:12:05.141390 2026] [security2:error] [pid 276620:tid 276814] [client 105.112.178.79:36582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.psrecruit.org.uk"] [uri "/__ss_probe_a5a3dd8f7f0a196a57176caf462b581b__"] [unique_id "ary2RdPAdfEWqmGIkg1oigAAAks"]
[Wed Sep 30 01:12:05.157582 2026] [security2:error] [pid 270884:tid 271024] [client 20.211.90.37:18825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/155.php"] [unique_id "ary2RSGeq9LtYp4zuPO6twAAAAU"]
[Wed Sep 30 01:12:05.231009 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.231444 2026] [access_compat:error] [pid 270884:tid 271049] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.266324 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.266577 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.301049 2026] [security2:error] [pid 270884:tid 271067] [client 20.194.30.107:30407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/simple.php"] [unique_id "ary2RSGeq9LtYp4zuPO6vAAAADA"]
[Wed Sep 30 01:12:05.301240 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL29wdA==
[Wed Sep 30 01:12:05.301686 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL29wdA==
[Wed Sep 30 01:12:05.357113 2026] [security2:error] [pid 276620:tid 276869] [client 13.70.1.101:6087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/gmo.php"] [unique_id "ary2RdPAdfEWqmGIkg1ojAAAAoI"]
[Wed Sep 30 01:12:05.360726 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.361183 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.368193 2026] [security2:error] [pid 276059:tid 276297] [client 20.194.30.107:17412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/100.php"] [unique_id "ary2RXtqdHBwD77138e7KQAAAfU"]
[Wed Sep 30 01:12:05.380004 2026] [security2:error] [pid 270884:tid 270986] [remote 202.46.62.90:5891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ary2RSGeq9LtYp4zuPO6vwAAEmA"]
[Wed Sep 30 01:12:05.461080 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.461560 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.468980 2026] [security2:error] [pid 276620:tid 276772] [client 20.219.19.141:27978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/sm.php"] [unique_id "ary2RdPAdfEWqmGIkg1ojgAAAiE"]
[Wed Sep 30 01:12:05.491513 2026] [security2:error] [pid 276059:tid 276227] [client 20.211.90.37:18725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/ops.php"] [unique_id "ary2RXtqdHBwD77138e7KwAAAa8"]
[Wed Sep 30 01:12:05.491704 2026] [security2:error] [pid 270884:tid 271022] [client 84.17.60.236:58586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2RSGeq9LtYp4zuPO6wwAAAAM"]
[Wed Sep 30 01:12:05.542035 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.542462 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.590701 2026] [security2:error] [pid 270884:tid 271105] [client 13.70.1.101:21418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary2RSGeq9LtYp4zuPO6ygAAAFY"]
[Wed Sep 30 01:12:05.598770 2026] [security2:error] [pid 270884:tid 271044] [client 43.104.4.212:23459] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary2RSGeq9LtYp4zuPO6ywAAABk"], referer: https://coscharis-tech.com/product-category/networking/network-cables-networking/?wlfilter=1&woolentor_product_cat=3d-design-animation-software,antivirus-software,interactive-smart-panels,keyboards,mouse,power-banks,solar-panels,ups
[Wed Sep 30 01:12:05.608061 2026] [security2:error] [pid 270884:tid 271045] [client 20.194.5.96:44949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/class-wp-http-client.php"] [unique_id "ary2RSGeq9LtYp4zuPO6zAAAABo"]
[Wed Sep 30 01:12:05.612659 2026] [security2:error] [pid 276620:tid 276791] [client 20.219.14.152:41472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ab.php"] [unique_id "ary2RdPAdfEWqmGIkg1okQAAAjQ"]
[Wed Sep 30 01:12:05.634408 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.634817 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.675491 2026] [security2:error] [pid 276059:tid 276298] [client 13.70.1.101:5798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/6.php"] [unique_id "ary2RXtqdHBwD77138e7MQAAAfY"]
[Wed Sep 30 01:12:05.676887 2026] [security2:error] [pid 276620:tid 276797] [client 20.219.2.60:30045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/clss.php"] [unique_id "ary2RdPAdfEWqmGIkg1okgAAAjo"]
[Wed Sep 30 01:12:05.681525 2026] [security2:error] [pid 270884:tid 271028] [client 202.179.95.79:61314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2RSGeq9LtYp4zuPO6zgAAAAk"]
[Wed Sep 30 01:12:05.681950 2026] [security2:error] [pid 270884:tid 271028] [client 202.179.95.79:61314] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2RSGeq9LtYp4zuPO6zgAAAAk"]
[Wed Sep 30 01:12:05.721231 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.721518 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.817236 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.817505 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.840015 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:12:05.840265 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIx
[Wed Sep 30 01:12:05.851040 2026] [security2:error] [pid 276620:tid 276838] [client 20.28.180.172:29590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/UuAFIYGYKdefault.php"] [unique_id "ary2RdPAdfEWqmGIkg1olwAAAmM"]
[Wed Sep 30 01:12:05.886386 2026] [security2:error] [pid 270884:tid 270899] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2RSGeq9LtYp4zuPO60QAAIw0"], referer: https://torquayfans.com/posting.php?mode=quote&p=157633
[Wed Sep 30 01:12:05.886420 2026] [security2:error] [pid 270884:tid 270899] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2RSGeq9LtYp4zuPO60QAAIw0"], referer: https://torquayfans.com/posting.php?mode=quote&p=157633
[Wed Sep 30 01:12:05.886885 2026] [security2:error] [pid 270884:tid 271045] [client 45.138.12.32:46946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lollyandpopsfarm.com"] [uri "/wp-links-opml.php"] [unique_id "ary2RSGeq9LtYp4zuPO60wAAABo"]
[Wed Sep 30 01:12:05.909111 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:05.909378 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:35295] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:05.946882 2026] [security2:error] [pid 276620:tid 276760] [client 20.194.5.96:55444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/zoo2.php"] [unique_id "ary2RdPAdfEWqmGIkg1omQAAAhU"]
[Wed Sep 30 01:12:05.948834 2026] [security2:error] [pid 276620:tid 276808] [client 20.219.19.141:28012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/mknobgkg.php"] [unique_id "ary2RdPAdfEWqmGIkg1omgAAAkU"]
[Wed Sep 30 01:12:05.963920 2026] [security2:error] [pid 270884:tid 271043] [client 13.70.1.101:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary2RSGeq9LtYp4zuPO61wAAABg"]
[Wed Sep 30 01:12:05.993935 2026] [security2:error] [pid 276059:tid 276219] [client 216.73.216.46:35295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2RXtqdHBwD77138e7OQAAAac"]
[Wed Sep 30 01:12:05.997135 2026] [qos:error] [pid 270884:tid 271127] [client 99.145.87.39:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RSGeq9LtYp4zuPO62AAAAGw
[Wed Sep 30 01:12:06.010285 2026] [security2:error] [pid 276620:tid 276845] [client 13.70.1.101:45256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/12.php"] [unique_id "ary2RtPAdfEWqmGIkg1onQAAAmo"]
[Wed Sep 30 01:12:06.060794 2026] [security2:error] [pid 270884:tid 271054] [client 20.211.90.37:18689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/mac.php"] [unique_id "ary2RiGeq9LtYp4zuPO62gAAACM"]
[Wed Sep 30 01:12:06.062976 2026] [security2:error] [pid 276059:tid 276244] [client 20.219.14.152:41909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/xwpg.php"] [unique_id "ary2RntqdHBwD77138e7OgAAAcA"]
[Wed Sep 30 01:12:06.092131 2026] [security2:error] [pid 276059:tid 276201] [client 189.221.229.110:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tvs/monitor-television"] [unique_id "ary2RntqdHBwD77138e7PAAAAZY"]
[Wed Sep 30 01:12:06.092993 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.093265 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.148548 2026] [security2:error] [pid 270884:tid 271126] [client 84.17.60.236:58602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2RiGeq9LtYp4zuPO63wAAAGs"]
[Wed Sep 30 01:12:06.186479 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.186733 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.224797 2026] [security2:error] [pid 276620:tid 276767] [client 4.240.25.22:8421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/fling.php"] [unique_id "ary2RtPAdfEWqmGIkg1oowAAAhw"]
[Wed Sep 30 01:12:06.276263 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.276530 2026] [access_compat:error] [pid 270884:tid 271043] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.294081 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:06.294363 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:06.324931 2026] [security2:error] [pid 270884:tid 271030] [client 13.70.1.101:42737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/about/function.php"] [unique_id "ary2RiGeq9LtYp4zuPO65gAAAAs"]
[Wed Sep 30 01:12:06.355370 2026] [security2:error] [pid 270884:tid 271045] [client 8.162.11.86:48340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary2RiGeq9LtYp4zuPO65wAAABo"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:12:06.357357 2026] [qos:error] [pid 270884:tid 271067] [client 172.56.40.102:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RiGeq9LtYp4zuPO66AAAADA
[Wed Sep 30 01:12:06.376688 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.377114 2026] [access_compat:error] [pid 270884:tid 271024] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.401472 2026] [security2:error] [pid 276620:tid 276790] [client 4.240.25.22:18770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/b8.php"] [unique_id "ary2RtPAdfEWqmGIkg1opwAAAjM"]
[Wed Sep 30 01:12:06.425033 2026] [security2:error] [pid 276059:tid 276202] [client 20.219.19.141:27993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/dairg.php"] [unique_id "ary2RntqdHBwD77138e7QAAAAZc"]
[Wed Sep 30 01:12:06.433589 2026] [security2:error] [pid 276059:tid 276211] [client 13.70.1.101:5771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/0.php"] [unique_id "ary2RntqdHBwD77138e7QQAAAZ8"]
[Wed Sep 30 01:12:06.442851 2026] [security2:error] [pid 276620:tid 276863] [client 20.211.90.37:18699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/makeasmtp.php"] [unique_id "ary2RtPAdfEWqmGIkg1oqgAAAnw"]
[Wed Sep 30 01:12:06.463624 2026] [security2:error] [pid 270884:tid 271044] [client 20.28.180.172:34287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/gif.php"] [unique_id "ary2RiGeq9LtYp4zuPO67QAAABk"]
[Wed Sep 30 01:12:06.469481 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.469925 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.523151 2026] [security2:error] [pid 276059:tid 276322] [client 20.219.14.152:41225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/flamini.php"] [unique_id "ary2RntqdHBwD77138e7RQAAAg4"]
[Wed Sep 30 01:12:06.551618 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.551920 2026] [access_compat:error] [pid 270884:tid 271037] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.573828 2026] [security2:error] [pid 270884:tid 271043] [client 4.240.25.22:8393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/felnggg.php"] [unique_id "ary2RiGeq9LtYp4zuPO68AAAABg"]
[Wed Sep 30 01:12:06.610444 2026] [security2:error] [pid 276620:tid 276878] [client 20.28.180.172:18338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/dx.php"] [unique_id "ary2RtPAdfEWqmGIkg1osAAAAos"]
[Wed Sep 30 01:12:06.645706 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.646144 2026] [access_compat:error] [pid 270884:tid 271067] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.698916 2026] [security2:error] [pid 276620:tid 276850] [client 168.100.149.90:33862] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/92a029276ade6bc3864e99639e8d15e6.1215.css.gz"] [unique_id "ary2RtPAdfEWqmGIkg1osgACb1o"]
[Wed Sep 30 01:12:06.731327 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.5.96:59165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/zoo1.php"] [unique_id "ary2RiGeq9LtYp4zuPO6-AAAAAU"]
[Wed Sep 30 01:12:06.732947 2026] [qos:error] [pid 270884:tid 271138] [client 86.25.53.227:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RiGeq9LtYp4zuPO6-QAAAHc
[Wed Sep 30 01:12:06.734800 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.735223 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.773968 2026] [security2:error] [pid 270884:tid 271043] [client 13.70.1.101:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary2RiGeq9LtYp4zuPO6_AAAABg"]
[Wed Sep 30 01:12:06.775968 2026] [security2:error] [pid 276059:tid 276224] [client 20.211.90.37:18738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/pucci.php"] [unique_id "ary2RntqdHBwD77138e7RgAAAaw"]
[Wed Sep 30 01:12:06.788048 2026] [qos:error] [pid 276620:tid 276866] [client 79.56.81.29:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RtPAdfEWqmGIkg1otAAAAn8
[Wed Sep 30 01:12:06.790061 2026] [security2:error] [pid 276620:tid 276837] [client 84.17.60.236:58604] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2RtPAdfEWqmGIkg1otQAAAmI"]
[Wed Sep 30 01:12:06.790773 2026] [security2:error] [pid 270884:tid 271090] [client 13.70.1.101:21031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary2RiGeq9LtYp4zuPO6_wAAAEc"]
[Wed Sep 30 01:12:06.823974 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.824235 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.849462 2026] [access_compat:error] [pid 276059:tid 276253] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:06.849740 2026] [access_compat:error] [pid 276059:tid 276253] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:06.916059 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:06.916336 2026] [access_compat:error] [pid 270884:tid 271138] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:06.936417 2026] [qos:error] [pid 270884:tid 271022] [client 73.178.144.217:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RiGeq9LtYp4zuPO7BAAAAAM
[Wed Sep 30 01:12:07.000766 2026] [security2:error] [pid 270884:tid 271054] [client 20.219.14.152:41506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/themes.php"] [unique_id "ary2RiGeq9LtYp4zuPO7BwAAACM"]
[Wed Sep 30 01:12:07.008064 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.008432 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.011424 2026] [security2:error] [pid 270884:tid 271083] [client 20.219.19.141:27979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/dronishness.php"] [unique_id "ary2RyGeq9LtYp4zuPO7CAAAAEA"]
[Wed Sep 30 01:12:07.072518 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvbWFuL3J1
[Wed Sep 30 01:12:07.072793 2026] [access_compat:error] [pid 270884:tid 271126] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=Ly91c3Ivc2hhcmUvbWFuL3J1
[Wed Sep 30 01:12:07.088387 2026] [security2:error] [pid 276620:tid 276831] [client 179.105.122.52:53180] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2RtPAdfEWqmGIkg1otgAAAlw"]
[Wed Sep 30 01:12:07.095943 2026] [security2:error] [pid 276620:tid 276839] [client 20.211.90.37:18723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/puc.php"] [unique_id "ary2R9PAdfEWqmGIkg1ouAAAAmQ"]
[Wed Sep 30 01:12:07.097489 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.097742 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.097828 2026] [security2:error] [pid 276620:tid 276840] [client 20.198.74.230:24182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/Isadore.php"] [unique_id "ary2R9PAdfEWqmGIkg1ouQAAAmU"]
[Wed Sep 30 01:12:07.114085 2026] [security2:error] [pid 276620:tid 276788] [client 155.190.6.18:60514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2R9PAdfEWqmGIkg1ougAAAjE"]
[Wed Sep 30 01:12:07.114233 2026] [security2:error] [pid 276620:tid 276788] [client 155.190.6.18:60514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2R9PAdfEWqmGIkg1ougAAAjE"]
[Wed Sep 30 01:12:07.181408 2026] [qos:error] [pid 270884:tid 271049] [client 46.53.133.53:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2RyGeq9LtYp4zuPO7DgAAAB4
[Wed Sep 30 01:12:07.189116 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.189358 2026] [access_compat:error] [pid 270884:tid 271135] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.200250 2026] [security2:error] [pid 270884:tid 271103] [client 13.70.1.101:5766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary2RyGeq9LtYp4zuPO7EAAAAFQ"]
[Wed Sep 30 01:12:07.228752 2026] [security2:error] [pid 276620:tid 276812] [client 116.193.128.26:63213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2R9PAdfEWqmGIkg1ovwAAAkk"]
[Wed Sep 30 01:12:07.228905 2026] [security2:error] [pid 276620:tid 276812] [client 116.193.128.26:63213] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2R9PAdfEWqmGIkg1ovwAAAkk"]
[Wed Sep 30 01:12:07.239179 2026] [security2:error] [pid 270884:tid 271044] [client 13.70.1.101:20877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/admin/function.php"] [unique_id "ary2RyGeq9LtYp4zuPO7FAAAABk"]
[Wed Sep 30 01:12:07.267251 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.5.96:64454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/class-ajax.php"] [unique_id "ary2RyGeq9LtYp4zuPO7FgAAAAU"]
[Wed Sep 30 01:12:07.278591 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.278886 2026] [access_compat:error] [pid 270884:tid 271053] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.307103 2026] [security2:error] [pid 270884:tid 271111] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/identity"] [unique_id "ary2RyGeq9LtYp4zuPO7GgAAAFw"]
[Wed Sep 30 01:12:07.335484 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:12:07.335767 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4
[Wed Sep 30 01:12:07.378540 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.378972 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.438054 2026] [security2:error] [pid 276059:tid 276280] [client 84.17.60.236:58618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2R3tqdHBwD77138e7TAAAAeQ"]
[Wed Sep 30 01:12:07.457532 2026] [security2:error] [pid 270884:tid 271037] [client 20.211.90.37:18833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/8.php"] [unique_id "ary2RyGeq9LtYp4zuPO7IgAAABI"]
[Wed Sep 30 01:12:07.475651 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.476093 2026] [access_compat:error] [pid 270884:tid 271103] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.492011 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.14.152:41887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/0.php"] [unique_id "ary2RyGeq9LtYp4zuPO7JAAAADI"]
[Wed Sep 30 01:12:07.552467 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.552793 2026] [access_compat:error] [pid 270884:tid 271140] [client 216.73.216.46:32980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.573327 2026] [security2:error] [pid 276059:tid 276208] [client 43.104.4.191:61542] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary2R3tqdHBwD77138e7TgAAAZ0"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:12:07.581013 2026] [security2:error] [pid 270884:tid 271130] [client 13.70.1.101:6111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/02.php"] [unique_id "ary2RyGeq9LtYp4zuPO7KQAAAG8"]
[Wed Sep 30 01:12:07.666540 2026] [security2:error] [pid 270884:tid 271111] [client 20.70.173.30:25951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2RyGeq9LtYp4zuPO7LAAAAFw"]
[Wed Sep 30 01:12:07.690856 2026] [security2:error] [pid 270884:tid 271083] [client 13.70.1.101:21439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/9.php"] [unique_id "ary2RyGeq9LtYp4zuPO7MAAAAEA"]
[Wed Sep 30 01:12:07.692900 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.693156 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.713899 2026] [security2:error] [pid 270884:tid 271127] [client 20.219.2.60:30352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/44.php"] [unique_id "ary2RyGeq9LtYp4zuPO7MQAAAGw"]
[Wed Sep 30 01:12:07.726315 2026] [security2:error] [pid 270884:tid 271090] [client 216.73.216.46:32980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2RyGeq9LtYp4zuPO7MwAAAEc"]
[Wed Sep 30 01:12:07.730054 2026] [security2:error] [pid 270884:tid 271029] [client 20.219.19.141:28007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/Row_wsoo.php"] [unique_id "ary2RyGeq9LtYp4zuPO7NAAAAAo"]
[Wed Sep 30 01:12:07.775325 2026] [security2:error] [pid 270884:tid 271118] [client 182.69.182.151:21485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2RyGeq9LtYp4zuPO7NQAAAGM"]
[Wed Sep 30 01:12:07.775459 2026] [security2:error] [pid 270884:tid 271118] [client 182.69.182.151:21485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2RyGeq9LtYp4zuPO7NQAAAGM"]
[Wed Sep 30 01:12:07.790047 2026] [security2:error] [pid 270884:tid 271127] [client 20.211.90.37:18740] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.pearlcogop.com"] [uri "/1.php"] [unique_id "ary2RyGeq9LtYp4zuPO7OwAAAGw"]
[Wed Sep 30 01:12:07.790136 2026] [security2:error] [pid 270884:tid 271127] [client 20.211.90.37:18740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/1.php"] [unique_id "ary2RyGeq9LtYp4zuPO7OwAAAGw"]
[Wed Sep 30 01:12:07.815803 2026] [access_compat:error] [pid 276059:tid 276218] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:07.816235 2026] [access_compat:error] [pid 276059:tid 276218] [client 74.7.243.227:43250] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:07.828116 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.828519 2026] [access_compat:error] [pid 270884:tid 271090] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.914801 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:07.915100 2026] [access_compat:error] [pid 270884:tid 271083] [client 216.73.216.46:57868] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:07.953567 2026] [security2:error] [pid 270884:tid 271044] [client 13.70.1.101:6125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/go.php"] [unique_id "ary2RyGeq9LtYp4zuPO7RQAAABk"]
[Wed Sep 30 01:12:07.980625 2026] [security2:error] [pid 270884:tid 271140] [client 20.219.14.152:41491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/opsh.php"] [unique_id "ary2RyGeq9LtYp4zuPO7SAAAAHk"]
[Wed Sep 30 01:12:08.009153 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.009553 2026] [access_compat:error] [pid 270884:tid 271105] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.040217 2026] [security2:error] [pid 270884:tid 271101] [client 13.70.1.101:45834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary2SCGeq9LtYp4zuPO7SgAAAFI"]
[Wed Sep 30 01:12:08.051386 2026] [security2:error] [pid 276620:tid 276880] [client 103.211.18.63:61388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2SNPAdfEWqmGIkg1oywAAAo0"]
[Wed Sep 30 01:12:08.051512 2026] [security2:error] [pid 276620:tid 276880] [client 103.211.18.63:61388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2SNPAdfEWqmGIkg1oywAAAo0"]
[Wed Sep 30 01:12:08.076843 2026] [security2:error] [pid 270884:tid 271049] [client 84.17.60.236:58624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hybridcloudinnovation.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2SCGeq9LtYp4zuPO7SwAAAB4"]
[Wed Sep 30 01:12:08.095264 2026] [security2:error] [pid 276620:tid 276823] [client 106.214.2.47:32893] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2SNPAdfEWqmGIkg1oygAAAlQ"]
[Wed Sep 30 01:12:08.096282 2026] [security2:error] [pid 276620:tid 276823] [client 106.214.2.47:32893] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2SNPAdfEWqmGIkg1oygAAAlQ"]
[Wed Sep 30 01:12:08.096307 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.096566 2026] [access_compat:error] [pid 270884:tid 271127] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.181323 2026] [security2:error] [pid 270884:tid 271037] [client 20.211.90.37:18702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/admin.php"] [unique_id "ary2SCGeq9LtYp4zuPO7VAAAABI"]
[Wed Sep 30 01:12:08.182817 2026] [security2:error] [pid 270884:tid 271030] [client 20.28.180.172:34284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/0mzrlfdt.php"] [unique_id "ary2SCGeq9LtYp4zuPO7VgAAAAs"]
[Wed Sep 30 01:12:08.188307 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.188571 2026] [access_compat:error] [pid 270884:tid 271118] [client 216.73.216.46:6158] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.328188 2026] [security2:error] [pid 270884:tid 271140] [client 216.73.216.46:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2SCGeq9LtYp4zuPO7WwAAAHk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvcnVu
[Wed Sep 30 01:12:08.329986 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.330250 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.341724 2026] [access_compat:error] [pid 270884:tid 271093] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:08.342009 2026] [access_compat:error] [pid 270884:tid 271093] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:08.348775 2026] [security2:error] [pid 270884:tid 271101] [client 13.70.1.101:6089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/ee.php"] [unique_id "ary2SCGeq9LtYp4zuPO7XQAAAFI"]
[Wed Sep 30 01:12:08.367952 2026] [security2:error] [pid 270884:tid 271030] [client 216.73.216.46:6158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2SCGeq9LtYp4zuPO7XwAAAAs"]
[Wed Sep 30 01:12:08.373662 2026] [security2:error] [pid 276059:tid 276271] [client 20.219.19.141:27982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/x2.php"] [unique_id "ary2SHtqdHBwD77138e7VAAAAds"]
[Wed Sep 30 01:12:08.397005 2026] [security2:error] [pid 276059:tid 276294] [client 74.7.242.1:36178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2SHtqdHBwD77138e7VgAAAfI"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:12:08.438707 2026] [security2:error] [pid 276059:tid 276265] [client 13.70.1.101:53449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/.well-known/log.php"] [unique_id "ary2SHtqdHBwD77138e7VwAAAdU"]
[Wed Sep 30 01:12:08.445120 2026] [security2:error] [pid 270884:tid 271084] [client 20.219.14.152:41890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/media.php"] [unique_id "ary2SCGeq9LtYp4zuPO7ZAAAAEE"]
[Wed Sep 30 01:12:08.449380 2026] [security2:error] [pid 276059:tid 276295] [client 20.194.5.96:64468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/gm.php"] [unique_id "ary2SHtqdHBwD77138e7WAAAAfM"]
[Wed Sep 30 01:12:08.467847 2026] [security2:error] [pid 270884:tid 271100] [client 152.56.240.85:65400] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2SCGeq9LtYp4zuPO7ZwAAAFE"]
[Wed Sep 30 01:12:08.467882 2026] [security2:error] [pid 270884:tid 271103] [client 185.226.198.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/"] [unique_id "ary2SCGeq9LtYp4zuPO7aAAAAFQ"]
[Wed Sep 30 01:12:08.468059 2026] [security2:error] [pid 270884:tid 271100] [client 152.56.240.85:65400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2SCGeq9LtYp4zuPO7ZwAAAFE"]
[Wed Sep 30 01:12:08.513371 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.513654 2026] [access_compat:error] [pid 270884:tid 271089] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.517577 2026] [security2:error] [pid 270884:tid 271116] [client 20.211.90.37:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/edit.php"] [unique_id "ary2SCGeq9LtYp4zuPO7bgAAAGE"]
[Wed Sep 30 01:12:08.526464 2026] [security2:error] [pid 270884:tid 271043] [client 4.240.25.22:8412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/admin.php"] [unique_id "ary2SCGeq9LtYp4zuPO7bwAAABg"]
[Wed Sep 30 01:12:08.533207 2026] [security2:error] [pid 270884:tid 271118] [client 185.226.198.7:40200] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/index.jsp"] [unique_id "ary2SCGeq9LtYp4zuPO7cAAAAGM"]
[Wed Sep 30 01:12:08.552650 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.552919 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.557247 2026] [security2:error] [pid 270884:tid 271090] [client 4.240.25.22:18814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/amax.php"] [unique_id "ary2SCGeq9LtYp4zuPO7cwAAAEc"]
[Wed Sep 30 01:12:08.643518 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.643791 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.698504 2026] [security2:error] [pid 276620:tid 276806] [client 168.100.149.108:42456] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/a7a79471a90b43266188791cc4b59a72.39.css.gz"] [unique_id "ary2SNPAdfEWqmGIkg1o2QACQx0"]
[Wed Sep 30 01:12:08.703022 2026] [security2:error] [pid 270884:tid 271049] [client 13.70.1.101:6128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/an.php"] [unique_id "ary2SCGeq9LtYp4zuPO7fQAAAB4"]
[Wed Sep 30 01:12:08.733020 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.733282 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:4597] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.737831 2026] [security2:error] [pid 270884:tid 271092] [client 20.219.2.60:30032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/a5e0a.php"] [unique_id "ary2SCGeq9LtYp4zuPO7fgAAAEk"]
[Wed Sep 30 01:12:08.797552 2026] [security2:error] [pid 270884:tid 271138] [client 13.70.1.101:20919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/class.php"] [unique_id "ary2SCGeq9LtYp4zuPO7hAAAAHc"]
[Wed Sep 30 01:12:08.798573 2026] [authz_core:error] [pid 270884:tid 271059] [client 213.136.69.135:0] AH01630: client denied by server configuration: /home2/yourkat1/public_html/yod/wp-includes/widgets/error_log, referer: binance.com
[Wed Sep 30 01:12:08.837589 2026] [security2:error] [pid 276620:tid 276801] [client 105.112.178.79:38588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fjj.lks.mybluehost.me"] [uri "/.env"] [unique_id "ary2SNPAdfEWqmGIkg1o3wAAAj4"]
[Wed Sep 30 01:12:08.871727 2026] [security2:error] [pid 270884:tid 271089] [client 20.211.90.37:18698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/inputs.php"] [unique_id "ary2SCGeq9LtYp4zuPO7iwAAAEY"]
[Wed Sep 30 01:12:08.872254 2026] [access_compat:error] [pid 270884:tid 271056] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:12:08.872572 2026] [access_compat:error] [pid 270884:tid 271056] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjk5
[Wed Sep 30 01:12:08.879948 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:08.880419 2026] [access_compat:error] [pid 270884:tid 271131] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:08.909041 2026] [security2:error] [pid 276620:tid 276813] [client 216.73.216.46:4597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2SNPAdfEWqmGIkg1o4wAAAko"]
[Wed Sep 30 01:12:08.921824 2026] [security2:error] [pid 276620:tid 276797] [client 20.219.14.152:41898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/images.php"] [unique_id "ary2SNPAdfEWqmGIkg1o5gAAAjo"]
[Wed Sep 30 01:12:08.941190 2026] [security2:error] [pid 270884:tid 271145] [client 110.172.137.41:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2SCGeq9LtYp4zuPO7kQAAAH4"]
[Wed Sep 30 01:12:09.009103 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.009377 2026] [access_compat:error] [pid 270884:tid 271059] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.033105 2026] [security2:error] [pid 270884:tid 271111] [client 20.198.74.230:24148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/samll.php"] [unique_id "ary2SSGeq9LtYp4zuPO7mQAAAFw"]
[Wed Sep 30 01:12:09.071920 2026] [security2:error] [pid 270884:tid 271131] [client 13.70.1.101:5817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp.php"] [unique_id "ary2SSGeq9LtYp4zuPO7ngAAAHA"]
[Wed Sep 30 01:12:09.098639 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.098977 2026] [access_compat:error] [pid 270884:tid 271022] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.121211 2026] [security2:error] [pid 276620:tid 276826] [client 13.70.1.101:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/lock360.php"] [unique_id "ary2SdPAdfEWqmGIkg1o6gAAAlc"]
[Wed Sep 30 01:12:09.148683 2026] [security2:error] [pid 270884:tid 271024] [client 20.194.30.107:17493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/kir.php"] [unique_id "ary2SSGeq9LtYp4zuPO7pAAAAAU"]
[Wed Sep 30 01:12:09.156248 2026] [security2:error] [pid 270884:tid 271069] [client 20.219.19.141:27923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/v4.php"] [unique_id "ary2SSGeq9LtYp4zuPO7pQAAADI"]
[Wed Sep 30 01:12:09.188563 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.188897 2026] [access_compat:error] [pid 270884:tid 271084] [client 216.73.216.46:39932] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.207099 2026] [security2:error] [pid 270884:tid 271056] [client 20.211.90.37:18703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/classwithtostring.php"] [unique_id "ary2SSGeq9LtYp4zuPO7rAAAACU"]
[Wed Sep 30 01:12:09.213361 2026] [security2:error] [pid 276620:tid 276809] [client 85.204.70.118:36276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2SdPAdfEWqmGIkg1o7QAAAkY"]
[Wed Sep 30 01:12:09.280333 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.280628 2026] [access_compat:error] [pid 270884:tid 271086] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.314033 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:12:09.314319 2026] [access_compat:error] [pid 270884:tid 271127] [client 74.7.243.227:50282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:12:09.364094 2026] [security2:error] [pid 276059:tid 276230] [client 20.28.180.172:34293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/nmd.php"] [unique_id "ary2SXtqdHBwD77138e7YAAAAbI"]
[Wed Sep 30 01:12:09.378519 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.378971 2026] [access_compat:error] [pid 270884:tid 271054] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.391564 2026] [security2:error] [pid 276620:tid 276845] [client 20.219.14.152:41481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ops.php"] [unique_id "ary2SdPAdfEWqmGIkg1o8AAAAmo"]
[Wed Sep 30 01:12:09.407020 2026] [security2:error] [pid 276620:tid 276882] [client 13.70.1.101:6104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary2SdPAdfEWqmGIkg1o8wAAAo8"]
[Wed Sep 30 01:12:09.421023 2026] [security2:error] [pid 270884:tid 271056] [client 20.194.5.96:64455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/class-wp-site-list.php"] [unique_id "ary2SSGeq9LtYp4zuPO7tQAAACU"]
[Wed Sep 30 01:12:09.471091 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.471551 2026] [access_compat:error] [pid 270884:tid 271076] [client 216.73.216.46:45733] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.502333 2026] [security2:error] [pid 270884:tid 271049] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary2SSGeq9LtYp4zuPO7uAAAAB4"]
[Wed Sep 30 01:12:09.523636 2026] [security2:error] [pid 270884:tid 271119] [client 85.204.70.118:30110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary2SSGeq9LtYp4zuPO7uQAAAGQ"]
[Wed Sep 30 01:12:09.536869 2026] [security2:error] [pid 276620:tid 276830] [client 13.70.1.101:20864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.domakshelter.com"] [uri "/system_log.php"] [unique_id "ary2SdPAdfEWqmGIkg1o9gAAAls"]
[Wed Sep 30 01:12:09.547150 2026] [security2:error] [pid 270884:tid 271138] [client 216.73.216.46:45733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2SSGeq9LtYp4zuPO7ugAAAHc"]
[Wed Sep 30 01:12:09.601182 2026] [security2:error] [pid 276620:tid 276776] [client 20.211.90.37:18748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/adminfuns.php"] [unique_id "ary2SdPAdfEWqmGIkg1o-AAAAiU"]
[Wed Sep 30 01:12:09.679121 2026] [security2:error] [pid 270884:tid 271059] [client 201.32.215.149:7006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2SSGeq9LtYp4zuPO7vQAAACg"]
[Wed Sep 30 01:12:09.682377 2026] [security2:error] [pid 270884:tid 271059] [client 201.32.215.149:7006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2SSGeq9LtYp4zuPO7vQAAACg"]
[Wed Sep 30 01:12:09.693525 2026] [security2:error] [pid 276059:tid 276310] [client 202.46.62.106:64550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.loohan.com"] [uri "/viewtopic.php"] [unique_id "ary2SXtqdHBwD77138e7ZwAAAgI"]
[Wed Sep 30 01:12:09.718022 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.718508 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.733408 2026] [security2:error] [pid 276059:tid 276252] [client 185.226.198.4:22702] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/sugar_version.json"] [unique_id "ary2SXtqdHBwD77138e7agAAAcg"]
[Wed Sep 30 01:12:09.752902 2026] [security2:error] [pid 276059:tid 276244] [client 13.70.1.101:5764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/admin.php"] [unique_id "ary2SXtqdHBwD77138e7bAAAAcA"]
[Wed Sep 30 01:12:09.782602 2026] [security2:error] [pid 276059:tid 276256] [client 43.104.4.227:19046] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js"] [unique_id "ary2SXtqdHBwD77138e7bgAAAcw"], referer: https://coscharis-tech.com/product-category/tvs/monitor-television/?wlfilter=1&woolentor_product_cat=antivirus-software%2Cinverters%2Cmobile-phones%2Cprinting-paper%2Crouters-networking%2Csamsung%2Csmart-ups%2Csolid-works-software%2Csurveillance-cameras%2Cswitches-networking%2Ctablets-smart-phones%2Ctoners
[Wed Sep 30 01:12:09.786420 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.786861 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.797023 2026] [security2:error] [pid 276059:tid 276228] [client 103.241.204.139:63545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2SXtqdHBwD77138e7cQAAAbA"]
[Wed Sep 30 01:12:09.797156 2026] [security2:error] [pid 276059:tid 276228] [client 103.241.204.139:63545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2SXtqdHBwD77138e7cQAAAbA"]
[Wed Sep 30 01:12:09.827562 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.827840 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.851375 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:09.851658 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:09.854733 2026] [security2:error] [pid 276620:tid 276807] [client 20.219.14.152:41489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/mac.php"] [unique_id "ary2SdPAdfEWqmGIkg1pAQAAAkQ"]
[Wed Sep 30 01:12:09.874685 2026] [security2:error] [pid 276059:tid 276204] [client 20.219.19.141:28030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/albin.php"] [unique_id "ary2SXtqdHBwD77138e7eAAAAZk"]
[Wed Sep 30 01:12:09.919620 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:09.919885 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:09.970991 2026] [security2:error] [pid 276059:tid 276224] [client 4.240.25.22:18796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/0.php"] [unique_id "ary2SXtqdHBwD77138e7ewAAAaw"]
[Wed Sep 30 01:12:10.009149 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.009410 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.033770 2026] [security2:error] [pid 276059:tid 276308] [client 20.211.90.37:18732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/222.php"] [unique_id "ary2SntqdHBwD77138e7fwAAAgA"]
[Wed Sep 30 01:12:10.087463 2026] [security2:error] [pid 276620:tid 276859] [client 4.240.25.22:8897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/reop3.php"] [unique_id "ary2StPAdfEWqmGIkg1pDwAAAng"]
[Wed Sep 30 01:12:10.101221 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.101668 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.159531 2026] [security2:error] [pid 276620:tid 276839] [client 13.70.1.101:5787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/admin.php"] [unique_id "ary2StPAdfEWqmGIkg1pEQAAAmQ"]
[Wed Sep 30 01:12:10.179025 2026] [security2:error] [pid 276620:tid 276782] [client 20.194.30.107:10010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/new.php"] [unique_id "ary2StPAdfEWqmGIkg1pFAAAAis"]
[Wed Sep 30 01:12:10.195020 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.195455 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.204337 2026] [security2:error] [pid 276059:tid 276299] [client 85.204.70.118:16812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2SntqdHBwD77138e7hAAAAfc"]
[Wed Sep 30 01:12:10.247448 2026] [security2:error] [pid 276620:tid 276886] [client 20.194.5.96:64463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/ttivnife.php"] [unique_id "ary2StPAdfEWqmGIkg1pFwAAApM"]
[Wed Sep 30 01:12:10.284324 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.284603 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.301623 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:10.301948 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkyL3Jvb3QvcHJvYw==
[Wed Sep 30 01:12:10.321451 2026] [security2:error] [pid 276620:tid 276875] [client 20.219.14.152:41901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/pass4.php"] [unique_id "ary2StPAdfEWqmGIkg1pGgAAAog"]
[Wed Sep 30 01:12:10.364432 2026] [security2:error] [pid 276620:tid 276845] [client 20.28.180.172:29453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/dhlcu.php"] [unique_id "ary2StPAdfEWqmGIkg1pHQAAAmo"]
[Wed Sep 30 01:12:10.381629 2026] [security2:error] [pid 276620:tid 276882] [client 20.219.19.141:27914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/atkno.php"] [unique_id "ary2StPAdfEWqmGIkg1pHgAAAo8"]
[Wed Sep 30 01:12:10.385901 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.386343 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.414099 2026] [security2:error] [pid 276620:tid 276815] [client 179.238.40.84:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2StPAdfEWqmGIkg1pIAAAAkw"]
[Wed Sep 30 01:12:10.429395 2026] [security2:error] [pid 276620:tid 276781] [client 20.211.90.37:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/BDKR28WP.php"] [unique_id "ary2StPAdfEWqmGIkg1pIgAAAio"]
[Wed Sep 30 01:12:10.467164 2026] [security2:error] [pid 276620:tid 276678] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2StPAdfEWqmGIkg1pJgACKDA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D52147
[Wed Sep 30 01:12:10.470251 2026] [security2:error] [pid 276620:tid 276856] [client 37.41.16.35:49914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2StPAdfEWqmGIkg1pJwAAAnU"]
[Wed Sep 30 01:12:10.470423 2026] [security2:error] [pid 276620:tid 276856] [client 37.41.16.35:49914] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2StPAdfEWqmGIkg1pJwAAAnU"]
[Wed Sep 30 01:12:10.506206 2026] [security2:error] [pid 276059:tid 276271] [client 85.204.70.118:36300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2SntqdHBwD77138e7kAAAAds"]
[Wed Sep 30 01:12:10.569936 2026] [security2:error] [pid 276620:tid 276681] [remote 57.141.14.17:56816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/index.php"] [unique_id "ary2StPAdfEWqmGIkg1pMAACbjM"]
[Wed Sep 30 01:12:10.588609 2026] [security2:error] [pid 276620:tid 276820] [client 4.240.25.22:33224] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/1.php"] [unique_id "ary2StPAdfEWqmGIkg1pMQAAAlE"]
[Wed Sep 30 01:12:10.588735 2026] [security2:error] [pid 276620:tid 276820] [client 4.240.25.22:33224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/1.php"] [unique_id "ary2StPAdfEWqmGIkg1pMQAAAlE"]
[Wed Sep 30 01:12:10.665310 2026] [security2:error] [pid 276059:tid 276265] [client 13.70.1.101:58659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2SntqdHBwD77138e7kgAAAdU"]
[Wed Sep 30 01:12:10.690170 2026] [security2:error] [pid 276620:tid 276846] [client 168.100.149.152:23682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/f91efea0e7630a05257d5237f42dac9c.1796.css.gz"] [unique_id "ary2StPAdfEWqmGIkg1pMgACawI"]
[Wed Sep 30 01:12:10.729475 2026] [security2:error] [pid 276620:tid 276769] [client 20.28.180.172:61236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-kikikoko.php"] [unique_id "ary2StPAdfEWqmGIkg1pNQAAAh4"]
[Wed Sep 30 01:12:10.746220 2026] [security2:error] [pid 276620:tid 276805] [client 80.225.203.231:33596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.203.225.80.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jvl.icl.mybluehost.me"] [uri "/index.php"] [unique_id "ary2StPAdfEWqmGIkg1pNgAAAkI"]
[Wed Sep 30 01:12:10.764706 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.765019 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.785675 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.14.152:41902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/drttewyh.php"] [unique_id "ary2StPAdfEWqmGIkg1pOAAAAmw"]
[Wed Sep 30 01:12:10.796661 2026] [security2:error] [pid 276059:tid 276227] [client 85.204.70.118:36314] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2SntqdHBwD77138e7lQAAAa8"]
[Wed Sep 30 01:12:10.819303 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:10.819593 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:10.834555 2026] [security2:error] [pid 276059:tid 276276] [client 20.211.90.37:18741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp.php"] [unique_id "ary2SntqdHBwD77138e7lwAAAeA"]
[Wed Sep 30 01:12:10.870112 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.870426 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:10.876527 2026] [security2:error] [pid 276620:tid 276777] [client 20.219.19.141:27996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/gptsh.php"] [unique_id "ary2StPAdfEWqmGIkg1pOwAAAiY"]
[Wed Sep 30 01:12:10.940784 2026] [access_compat:error] [pid 276059:tid 276210] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:10.941072 2026] [access_compat:error] [pid 276059:tid 276210] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.015412 2026] [security2:error] [pid 276620:tid 276845] [client 13.70.1.101:6140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/index/function.php"] [unique_id "ary2S9PAdfEWqmGIkg1pQAAAAmo"]
[Wed Sep 30 01:12:11.034268 2026] [security2:error] [pid 276059:tid 276205] [client 20.70.173.30:7401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/kj.php"] [unique_id "ary2S3tqdHBwD77138e7nAAAAZo"]
[Wed Sep 30 01:12:11.034335 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.034616 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.079224 2026] [security2:error] [pid 276620:tid 276815] [client 85.204.70.118:21905] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2S9PAdfEWqmGIkg1pQQAAAkw"]
[Wed Sep 30 01:12:11.124239 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.124549 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.203940 2026] [security2:error] [pid 276620:tid 276694] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2S9PAdfEWqmGIkg1pQwACJUA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1651
[Wed Sep 30 01:12:11.203969 2026] [security2:error] [pid 276620:tid 276694] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2S9PAdfEWqmGIkg1pQwACJUA"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1651
[Wed Sep 30 01:12:11.213567 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.213844 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.235451 2026] [security2:error] [pid 276059:tid 276248] [client 20.219.14.152:41217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/sh.php"] [unique_id "ary2S3tqdHBwD77138e7oQAAAcQ"]
[Wed Sep 30 01:12:11.236620 2026] [security2:error] [pid 276059:tid 276283] [client 20.28.180.172:34244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/go.php"] [unique_id "ary2S3tqdHBwD77138e7ogAAAec"]
[Wed Sep 30 01:12:11.248777 2026] [security2:error] [pid 276059:tid 276310] [client 20.204.42.136:35772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/cae2.3.php"] [unique_id "ary2S3tqdHBwD77138e7owAAAgI"]
[Wed Sep 30 01:12:11.294206 2026] [security2:error] [pid 276059:tid 276256] [client 20.211.90.37:18816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/simple.php"] [unique_id "ary2S3tqdHBwD77138e7pAAAAcw"]
[Wed Sep 30 01:12:11.304190 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.304463 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.332386 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:11.332677 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:11.350664 2026] [security2:error] [pid 276059:tid 276261] [client 13.70.1.101:58635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary2S3tqdHBwD77138e7pwAAAdE"]
[Wed Sep 30 01:12:11.361742 2026] [security2:error] [pid 276620:tid 276819] [client 85.204.70.118:36342] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2S9PAdfEWqmGIkg1pRgAAAlA"]
[Wed Sep 30 01:12:11.377346 2026] [security2:error] [pid 276059:tid 276228] [client 4.240.25.22:18803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/dex.php"] [unique_id "ary2S3tqdHBwD77138e7qQAAAbA"]
[Wed Sep 30 01:12:11.415276 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.415748 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.484170 2026] [security2:error] [pid 276059:tid 276211] [client 45.78.82.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2S3tqdHBwD77138e7rgAAAZ8"]
[Wed Sep 30 01:12:11.488587 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.488870 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.541111 2026] [security2:error] [pid 276620:tid 276778] [client 20.219.19.141:27927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/rithin.php"] [unique_id "ary2S9PAdfEWqmGIkg1pUQAAAic"]
[Wed Sep 30 01:12:11.583296 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.583598 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.642702 2026] [security2:error] [pid 276059:tid 276257] [client 85.204.70.118:36344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2S3tqdHBwD77138e7tQAAAc0"]
[Wed Sep 30 01:12:11.668972 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.669285 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.681450 2026] [security2:error] [pid 276059:tid 276199] [client 20.211.90.37:18846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/chosen.php"] [unique_id "ary2S3tqdHBwD77138e7ugAAAZQ"]
[Wed Sep 30 01:12:11.690602 2026] [security2:error] [pid 276620:tid 276814] [client 20.219.14.152:41503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/groud1.php"] [unique_id "ary2S9PAdfEWqmGIkg1pVgAAAks"]
[Wed Sep 30 01:12:11.749701 2026] [security2:error] [pid 276059:tid 276263] [client 13.70.1.101:45273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/license.php"] [unique_id "ary2S3tqdHBwD77138e7wAAAAdM"]
[Wed Sep 30 01:12:11.761407 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.761669 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.769090 2026] [security2:error] [pid 276620:tid 276813] [client 20.28.180.172:29568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/3.php"] [unique_id "ary2S9PAdfEWqmGIkg1pXwAAAko"]
[Wed Sep 30 01:12:11.803588 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:11.804051 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:11.854826 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.855171 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.941051 2026] [security2:error] [pid 276620:tid 276777] [client 85.204.70.118:36356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2S9PAdfEWqmGIkg1pZwAAAiY"]
[Wed Sep 30 01:12:11.945022 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:11.945272 2026] [access_compat:error] [pid 276059:tid 276221] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:11.966864 2026] [security2:error] [pid 276620:tid 276831] [client 20.194.5.96:44958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/admin.php/2P.php"] [unique_id "ary2S9PAdfEWqmGIkg1pagAAAlw"]
[Wed Sep 30 01:12:12.019342 2026] [security2:error] [pid 276620:tid 276823] [client 49.43.163.212:54272] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pbwAAAlQ"]
[Wed Sep 30 01:12:12.019698 2026] [security2:error] [pid 276620:tid 276823] [client 49.43.163.212:54272] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pbwAAAlQ"]
[Wed Sep 30 01:12:12.027641 2026] [security2:error] [pid 276059:tid 276269] [client 20.211.90.37:18719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/als.php"] [unique_id "ary2THtqdHBwD77138e7ywAAAdk"]
[Wed Sep 30 01:12:12.034576 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.034838 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.072255 2026] [security2:error] [pid 276620:tid 276860] [client 223.235.102.107:15109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pcgAAAnk"]
[Wed Sep 30 01:12:12.072463 2026] [security2:error] [pid 276620:tid 276860] [client 223.235.102.107:15109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pcgAAAnk"]
[Wed Sep 30 01:12:12.080686 2026] [ssl:error] [pid 276620:tid 276792] [client 216.25.124.24:58731] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.pnb.yuj.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:12:12.080745 2026] [security2:error] [pid 276620:tid 276845] [client 20.219.19.141:27912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/il.php"] [unique_id "ary2TNPAdfEWqmGIkg1pcwAAAmo"]
[Wed Sep 30 01:12:12.125094 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.125367 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.128520 2026] [security2:error] [pid 276620:tid 276810] [client 13.70.1.101:5793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/radio.php"] [unique_id "ary2TNPAdfEWqmGIkg1pdgAAAkc"]
[Wed Sep 30 01:12:12.134415 2026] [security2:error] [pid 276620:tid 276785] [client 49.43.128.226:56428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2S9PAdfEWqmGIkg1pSAAAAi4"]
[Wed Sep 30 01:12:12.144512 2026] [http2:warn] [pid 270884:tid 271082] [client 40.77.167.224:51786] h2_stream(270884-1059-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:12:12.152856 2026] [security2:error] [pid 276620:tid 276856] [client 20.219.14.152:41873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/bro.php"] [unique_id "ary2TNPAdfEWqmGIkg1pdwAAAnU"]
[Wed Sep 30 01:12:12.216767 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.217054 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.222751 2026] [security2:error] [pid 276620:tid 276809] [client 85.204.70.118:45868] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2TNPAdfEWqmGIkg1pewAAAkY"]
[Wed Sep 30 01:12:12.251772 2026] [core:error] [pid 276620:tid 276788] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:12.251793 2026] [core:error] [pid 276620:tid 276788] [client 154.54.100.187:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:12.305499 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:12.305521 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.305761 2026] [access_compat:error] [pid 276059:tid 276262] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:12.305783 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.352793 2026] [security2:error] [pid 276620:tid 276814] [client 20.211.90.37:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/admin.php"] [unique_id "ary2TNPAdfEWqmGIkg1pggAAAks"]
[Wed Sep 30 01:12:12.375229 2026] [security2:error] [pid 276059:tid 276284] [client 223.181.60.167:32153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2THtqdHBwD77138e70gAAAeg"]
[Wed Sep 30 01:12:12.375398 2026] [security2:error] [pid 276059:tid 276284] [client 223.181.60.167:32153] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2THtqdHBwD77138e70gAAAeg"]
[Wed Sep 30 01:12:12.425980 2026] [security2:error] [pid 276620:tid 276806] [client 45.138.12.32:17092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.llz.xcs.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2TNPAdfEWqmGIkg1phQAAAkM"]
[Wed Sep 30 01:12:12.485017 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.485472 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.494845 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.495262 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.521181 2026] [security2:error] [pid 276620:tid 276801] [client 85.204.70.118:29400] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2TNPAdfEWqmGIkg1pigAAAj4"]
[Wed Sep 30 01:12:12.528454 2026] [security2:error] [pid 276059:tid 276279] [client 20.194.5.96:55461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/a.php"] [unique_id "ary2THtqdHBwD77138e75AAAAeM"]
[Wed Sep 30 01:12:12.539352 2026] [security2:error] [pid 276620:tid 276769] [client 13.70.1.101:6138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/info.php"] [unique_id "ary2TNPAdfEWqmGIkg1piwAAAh4"]
[Wed Sep 30 01:12:12.580343 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.580622 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:54709] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.607611 2026] [security2:error] [pid 276059:tid 276285] [client 20.219.19.141:27992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/1klopedf.php"] [unique_id "ary2THtqdHBwD77138e75gAAAek"]
[Wed Sep 30 01:12:12.629759 2026] [security2:error] [pid 276059:tid 276211] [client 20.219.14.152:41864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ac83.php"] [unique_id "ary2THtqdHBwD77138e75wAAAZ8"]
[Wed Sep 30 01:12:12.676359 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.676640 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.682361 2026] [security2:error] [pid 276620:tid 276776] [client 49.37.102.248:61127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pkQAAAiU"]
[Wed Sep 30 01:12:12.682469 2026] [security2:error] [pid 276620:tid 276776] [client 49.37.102.248:61127] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2TNPAdfEWqmGIkg1pkQAAAiU"]
[Wed Sep 30 01:12:12.700626 2026] [security2:error] [pid 276059:tid 276282] [client 20.211.90.37:18726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/f35.php"] [unique_id "ary2THtqdHBwD77138e76QAAAeY"]
[Wed Sep 30 01:12:12.707102 2026] [security2:error] [pid 276059:tid 276223] [client 168.100.149.227:24694] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ef6c996d44a11b1a2feb12794245da08.138ca.css.gz"] [unique_id "ary2THtqdHBwD77138e76gABqzQ"]
[Wed Sep 30 01:12:12.753225 2026] [security2:error] [pid 276620:tid 276831] [client 20.70.173.30:53466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/wp.php"] [unique_id "ary2TNPAdfEWqmGIkg1pkwAAAlw"]
[Wed Sep 30 01:12:12.772367 2026] [security2:error] [pid 276059:tid 276198] [client 4.240.25.22:8411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/inputs.php"] [unique_id "ary2THtqdHBwD77138e77QAAAZM"]
[Wed Sep 30 01:12:12.773101 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.773528 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.785616 2026] [security2:error] [pid 276620:tid 276783] [client 20.219.2.60:30074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/bo.php"] [unique_id "ary2TNPAdfEWqmGIkg1plAAAAiw"]
[Wed Sep 30 01:12:12.809026 2026] [security2:error] [pid 276059:tid 276261] [client 122.177.240.90:18216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2THtqdHBwD77138e77gAAAdE"]
[Wed Sep 30 01:12:12.809141 2026] [security2:error] [pid 276059:tid 276261] [client 122.177.240.90:18216] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2THtqdHBwD77138e77gAAAdE"]
[Wed Sep 30 01:12:12.816637 2026] [security2:error] [pid 276059:tid 276231] [client 85.204.70.118:36370] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2THtqdHBwD77138e77wAAAbM"]
[Wed Sep 30 01:12:12.855272 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:12.855735 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:12.856753 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:12.857026 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:12.867356 2026] [security2:error] [pid 276620:tid 276763] [client 177.185.58.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2TNPAdfEWqmGIkg1pmAAAAhg"]
[Wed Sep 30 01:12:12.901835 2026] [security2:error] [pid 276620:tid 276716] [remote 74.7.227.56:58322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2TNPAdfEWqmGIkg1pmQACFVY"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:12:12.927275 2026] [security2:error] [pid 276059:tid 276239] [client 20.28.180.172:34252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/mentos.php"] [unique_id "ary2THtqdHBwD77138e7-AAAAbs"]
[Wed Sep 30 01:12:12.950170 2026] [security2:error] [pid 276059:tid 276247] [client 13.70.1.101:45248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/alfanew.php"] [unique_id "ary2THtqdHBwD77138e7-QAAAcM"]
[Wed Sep 30 01:12:13.002106 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.002368 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.002854 2026] [security2:error] [pid 276059:tid 276242] [client 216.73.216.46:54709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2TXtqdHBwD77138e8AAAAAb4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvbWVtb3J5MTIy
[Wed Sep 30 01:12:13.041986 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.042256 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.048903 2026] [security2:error] [pid 276620:tid 276785] [client 20.211.90.37:18819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/aaa.php"] [unique_id "ary2TdPAdfEWqmGIkg1poAAAAi4"]
[Wed Sep 30 01:12:13.100184 2026] [security2:error] [pid 276059:tid 276206] [client 85.204.70.118:33836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2TXtqdHBwD77138e8BwAAAZs"]
[Wed Sep 30 01:12:13.114335 2026] [security2:error] [pid 276059:tid 276250] [client 20.219.14.152:41913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/class-wp-http-client.php"] [unique_id "ary2TXtqdHBwD77138e8CAAAAcY"]
[Wed Sep 30 01:12:13.132708 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.132981 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.178120 2026] [security2:error] [pid 276059:tid 276277] [client 80.225.203.231:57122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.203.225.80.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jvl.icl.mybluehost.me"] [uri "/index.php"] [unique_id "ary2TXtqdHBwD77138e8CgAAAeE"]
[Wed Sep 30 01:12:13.225140 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.225423 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.241762 2026] [security2:error] [pid 276620:tid 276837] [client 20.219.19.141:27924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/zv.php"] [unique_id "ary2TdPAdfEWqmGIkg1ppQAAAmI"]
[Wed Sep 30 01:12:13.276472 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.1.101:58624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/inputs.php"] [unique_id "ary2TdPAdfEWqmGIkg1pqAAAAn0"]
[Wed Sep 30 01:12:13.284825 2026] [http2:warn] [pid 270884:tid 271136] [client 40.77.167.224:51782] h2_stream(270884-589-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:12:13.312718 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 01:12:13.313152 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL3J1bg==
[Wed Sep 30 01:12:13.315334 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.315774 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.331086 2026] [http2:warn] [pid 263262:tid 263402] [client 40.77.167.224:51805] h2_stream(263262-1368-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:12:13.383503 2026] [security2:error] [pid 276059:tid 276276] [client 85.204.70.118:36392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2TXtqdHBwD77138e8DwAAAeA"]
[Wed Sep 30 01:12:13.399418 2026] [security2:error] [pid 276059:tid 276287] [client 4.240.25.22:8465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/CAE-2.5.php"] [unique_id "ary2TXtqdHBwD77138e8EQAAAes"]
[Wed Sep 30 01:12:13.426225 2026] [security2:error] [pid 276059:tid 276272] [client 20.211.90.37:18710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/gecko.php"] [unique_id "ary2TXtqdHBwD77138e8FQAAAdw"]
[Wed Sep 30 01:12:13.432025 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.432951 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.508153 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.508432 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.549309 2026] [security2:error] [pid 276059:tid 276223] [client 20.194.5.96:44956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/cord.php"] [unique_id "ary2TXtqdHBwD77138e8HQAAAas"]
[Wed Sep 30 01:12:13.550335 2026] [security2:error] [pid 276059:tid 276274] [client 20.70.173.30:62373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/or.php"] [unique_id "ary2TXtqdHBwD77138e8HgAAAd4"]
[Wed Sep 30 01:12:13.575411 2026] [security2:error] [pid 276059:tid 276270] [client 20.219.14.152:41245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/zoo2.php"] [unique_id "ary2TXtqdHBwD77138e8HwAAAdo"]
[Wed Sep 30 01:12:13.598584 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.598868 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.663611 2026] [security2:error] [pid 276620:tid 276805] [client 85.204.70.118:36396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2TdPAdfEWqmGIkg1psgAAAkI"]
[Wed Sep 30 01:12:13.689021 2026] [qos:error] [pid 276059:tid 276253] [client 74.109.210.99:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2TXtqdHBwD77138e8JQAAAck
[Wed Sep 30 01:12:13.692301 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.692696 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.711911 2026] [security2:error] [pid 276620:tid 276801] [client 13.70.1.101:5765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/admin/function.php"] [unique_id "ary2TdPAdfEWqmGIkg1pswAAAj4"]
[Wed Sep 30 01:12:13.757456 2026] [security2:error] [pid 276059:tid 276292] [client 20.219.19.141:27956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/zv.update.php"] [unique_id "ary2TXtqdHBwD77138e8JgAAAfA"]
[Wed Sep 30 01:12:13.781035 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.781288 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.799991 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:13.800260 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:13.811535 2026] [security2:error] [pid 276620:tid 276852] [client 20.211.90.37:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/xiugai.php"] [unique_id "ary2TdPAdfEWqmGIkg1ptQAAAnE"]
[Wed Sep 30 01:12:13.841458 2026] [security2:error] [pid 276620:tid 276802] [client 203.122.45.246:62238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2TdPAdfEWqmGIkg1ptgAAAj8"]
[Wed Sep 30 01:12:13.841550 2026] [security2:error] [pid 276620:tid 276802] [client 203.122.45.246:62238] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2TdPAdfEWqmGIkg1ptgAAAj8"]
[Wed Sep 30 01:12:13.877102 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.877372 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.947139 2026] [security2:error] [pid 276620:tid 276847] [client 85.204.70.118:36412] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2TdPAdfEWqmGIkg1puAAAAmw"]
[Wed Sep 30 01:12:13.975264 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:13.975546 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:13.984000 2026] [qos:error] [pid 276620:tid 276824] [client 181.93.203.233:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2TdPAdfEWqmGIkg1pvAAAAlU
[Wed Sep 30 01:12:14.036484 2026] [security2:error] [pid 276620:tid 276841] [client 20.28.180.172:29572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zejjyvzu.php"] [unique_id "ary2TtPAdfEWqmGIkg1pvwAAAmY"]
[Wed Sep 30 01:12:14.042384 2026] [security2:error] [pid 276620:tid 276831] [client 20.198.74.230:24135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/abde5e1996.php"] [unique_id "ary2TtPAdfEWqmGIkg1pwAAAAlw"]
[Wed Sep 30 01:12:14.051320 2026] [access_compat:error] [pid 276620:tid 276799] [client 47.79.201.42:6930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:12:14.051593 2026] [access_compat:error] [pid 276620:tid 276799] [client 47.79.201.42:6930] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:12:14.061268 2026] [security2:error] [pid 276059:tid 276236] [client 20.219.14.152:41507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/zoo1.php"] [unique_id "ary2TntqdHBwD77138e8MAAAAbg"]
[Wed Sep 30 01:12:14.067233 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.067513 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.126323 2026] [qos:error] [pid 276620:tid 276832] [client 191.5.204.221:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2TtPAdfEWqmGIkg1pxAAAAl0
[Wed Sep 30 01:12:14.150761 2026] [qos:error] [pid 276059:tid 276224] [client 104.163.180.231:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2TntqdHBwD77138e8MgAAAaw
[Wed Sep 30 01:12:14.157329 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.157595 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.163128 2026] [security2:error] [pid 276059:tid 276277] [client 20.211.90.37:18879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/inx.php"] [unique_id "ary2TntqdHBwD77138e8NAAAAeE"]
[Wed Sep 30 01:12:14.219311 2026] [security2:error] [pid 276620:tid 276787] [client 13.70.1.101:5792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ary2TtPAdfEWqmGIkg1pyAAAAjA"]
[Wed Sep 30 01:12:14.229635 2026] [security2:error] [pid 276620:tid 276779] [client 85.204.70.118:36418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.ebt.hdk.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2TtPAdfEWqmGIkg1pyQAAAig"]
[Wed Sep 30 01:12:14.254364 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.254799 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.307916 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:14.308177 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Rldg==
[Wed Sep 30 01:12:14.324959 2026] [security2:error] [pid 276059:tid 276251] [client 20.219.19.141:28433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/wquosqsi.php"] [unique_id "ary2TntqdHBwD77138e8NwAAAcc"]
[Wed Sep 30 01:12:14.351342 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.351619 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.423207 2026] [security2:error] [pid 276059:tid 276145] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2TntqdHBwD77138e8OwABv1E"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=157098&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:12:14.423321 2026] [security2:error] [pid 276059:tid 276145] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2TntqdHBwD77138e8OwABv1E"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=157098&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:12:14.455459 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.455911 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.524824 2026] [security2:error] [pid 276059:tid 276272] [client 20.219.14.152:41475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/class-ajax.php"] [unique_id "ary2TntqdHBwD77138e8QAAAAdw"]
[Wed Sep 30 01:12:14.534953 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.535212 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.554849 2026] [security2:error] [pid 276059:tid 276267] [client 13.70.1.101:5816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/images/index.php"] [unique_id "ary2TntqdHBwD77138e8QgAAAdc"]
[Wed Sep 30 01:12:14.563890 2026] [security2:error] [pid 276620:tid 276815] [client 20.211.90.37:18730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/11.php"] [unique_id "ary2TtPAdfEWqmGIkg1p0wAAAkw"]
[Wed Sep 30 01:12:14.607802 2026] [security2:error] [pid 276059:tid 276281] [client 20.194.5.96:55443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/anom.php"] [unique_id "ary2TntqdHBwD77138e8RAAAAeU"]
[Wed Sep 30 01:12:14.625767 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.626032 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.685286 2026] [security2:error] [pid 276059:tid 276319] [client 168.100.149.41:29318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/aeab080e0c2249e47442bbadb0dbdeb5.2011.css.gz"] [unique_id "ary2TntqdHBwD77138e8RgACCyc"]
[Wed Sep 30 01:12:14.718586 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.718894 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.747435 2026] [security2:error] [pid 276059:tid 276201] [client 20.194.30.107:17334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/b8.php"] [unique_id "ary2TntqdHBwD77138e8SAAAAZY"]
[Wed Sep 30 01:12:14.786975 2026] [security2:error] [pid 276059:tid 276258] [client 20.219.2.60:30062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/56c53.php"] [unique_id "ary2TntqdHBwD77138e8SQAAAc4"]
[Wed Sep 30 01:12:14.809634 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.809909 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.815835 2026] [security2:error] [pid 276059:tid 276255] [client 20.219.19.141:27942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/asset.php"] [unique_id "ary2TntqdHBwD77138e8SwAAAcs"]
[Wed Sep 30 01:12:14.835888 2026] [access_compat:error] [pid 276059:tid 276252] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:12:14.836147 2026] [access_compat:error] [pid 276059:tid 276252] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:12:14.895218 2026] [security2:error] [pid 276059:tid 276239] [client 13.70.1.101:5781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/default.php"] [unique_id "ary2TntqdHBwD77138e8VwAAAbs"]
[Wed Sep 30 01:12:14.898789 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.899058 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:14.909862 2026] [qos:error] [pid 276059:tid 276247] [client 74.56.94.226:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2TntqdHBwD77138e8WgAAAcM
[Wed Sep 30 01:12:14.953903 2026] [security2:error] [pid 276620:tid 276816] [client 217.181.92.171:46517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2TtPAdfEWqmGIkg1p2QAAAk0"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:14.967074 2026] [security2:error] [pid 276620:tid 276769] [client 20.211.90.37:18708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/File.php"] [unique_id "ary2TtPAdfEWqmGIkg1p3gAAAh4"]
[Wed Sep 30 01:12:14.989038 2026] [security2:error] [pid 276620:tid 276802] [client 20.219.14.152:41484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/gm.php"] [unique_id "ary2TtPAdfEWqmGIkg1p3wAAAj8"]
[Wed Sep 30 01:12:14.994655 2026] [security2:error] [pid 276620:tid 276852] [client 198.13.223.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2TtPAdfEWqmGIkg1p4AAAAnE"]
[Wed Sep 30 01:12:14.995642 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:14.995938 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.077921 2026] [qos:error] [pid 276059:tid 276203] [client 23.154.96.230:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2T3tqdHBwD77138e8XwAAAZg
[Wed Sep 30 01:12:15.086187 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.086457 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.097911 2026] [security2:error] [pid 276059:tid 276320] [client 45.138.12.44:38718] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ata.hfj.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2T3tqdHBwD77138e8YQAAAgw"]
[Wed Sep 30 01:12:15.176435 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.176696 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.269187 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.269482 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.284608 2026] [security2:error] [pid 276059:tid 276294] [client 13.70.1.101:5790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/lv.php"] [unique_id "ary2T3tqdHBwD77138e8aAAAAfI"]
[Wed Sep 30 01:12:15.319008 2026] [security2:error] [pid 276620:tid 276782] [client 103.168.66.101:33296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "psrecruit.org.uk"] [uri "/index.php"] [unique_id "ary2T9PAdfEWqmGIkg1p6AAAAis"], referer: https://psrecruit.org.uk/wp-admin/admin.php?page=gravitysmtp-settings
[Wed Sep 30 01:12:15.323249 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0L25ldA==
[Wed Sep 30 01:12:15.323567 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI3ODA0L25ldA==
[Wed Sep 30 01:12:15.330261 2026] [qos:error] [pid 276620:tid 276787] [client 67.145.66.206:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2T9PAdfEWqmGIkg1p6QAAAjA
[Wed Sep 30 01:12:15.356408 2026] [security2:error] [pid 276059:tid 276276] [client 20.219.19.141:28017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/cued.php"] [unique_id "ary2T3tqdHBwD77138e8bwAAAeA"]
[Wed Sep 30 01:12:15.363236 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.363685 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.453308 2026] [security2:error] [pid 276059:tid 276319] [client 20.219.14.152:41900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/class-wp-site-list.php"] [unique_id "ary2T3tqdHBwD77138e8cwAAAgs"]
[Wed Sep 30 01:12:15.457773 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.458236 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.548843 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.549288 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.627622 2026] [security2:error] [pid 276059:tid 276255] [client 13.70.1.101:6117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2T3tqdHBwD77138e8gQAAAcs"]
[Wed Sep 30 01:12:15.638864 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.639297 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.678605 2026] [security2:error] [pid 276059:tid 276253] [client 173.254.29.157:12104] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2T3tqdHBwD77138e8hgAAAck"]
[Wed Sep 30 01:12:15.699357 2026] [security2:error] [pid 276620:tid 276774] [client 173.254.29.157:12116] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2T9PAdfEWqmGIkg1p-AAAAiM"]
[Wed Sep 30 01:12:15.719326 2026] [security2:error] [pid 276620:tid 276846] [client 173.254.29.157:12118] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2T9PAdfEWqmGIkg1p-QAAAms"]
[Wed Sep 30 01:12:15.730290 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.730744 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.739115 2026] [security2:error] [pid 276620:tid 276833] [client 173.254.29.157:12128] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2T9PAdfEWqmGIkg1p-gAAAl4"]
[Wed Sep 30 01:12:15.766607 2026] [security2:error] [pid 276620:tid 276816] [client 20.194.96.176:32562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/wp-ainefgskk.php"] [unique_id "ary2T9PAdfEWqmGIkg1p-wAAAk0"]
[Wed Sep 30 01:12:15.777576 2026] [security2:error] [pid 276620:tid 276866] [client 20.28.180.172:61225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/file61.php"] [unique_id "ary2T9PAdfEWqmGIkg1p_AAAAn8"]
[Wed Sep 30 01:12:15.795800 2026] [access_compat:error] [pid 276059:tid 276235] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:15.796080 2026] [access_compat:error] [pid 276059:tid 276235] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:15.817816 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.818114 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.819935 2026] [security2:error] [pid 276059:tid 276241] [client 20.211.90.37:19332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2T3tqdHBwD77138e8igAAAb0"]
[Wed Sep 30 01:12:15.828392 2026] [qos:error] [pid 276059:tid 276120] [remote 190.213.230.152:39036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=190.213.230.152, id=ary2T3tqdHBwD77138e8iwABszg
[Wed Sep 30 01:12:15.861825 2026] [security2:error] [pid 276059:tid 276206] [client 20.219.19.141:27930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/sd.php"] [unique_id "ary2T3tqdHBwD77138e8jAAAAZs"]
[Wed Sep 30 01:12:15.908817 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:15.909081 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:45617] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:15.912153 2026] [security2:error] [pid 276059:tid 276250] [client 20.219.14.152:41228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/asd2.php"] [unique_id "ary2T3tqdHBwD77138e8jgAAAcY"]
[Wed Sep 30 01:12:15.953542 2026] [security2:error] [pid 276059:tid 276320] [client 20.28.180.172:29573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/pqfpcelx.php"] [unique_id "ary2T3tqdHBwD77138e8kAAAAgw"]
[Wed Sep 30 01:12:15.968250 2026] [security2:error] [pid 276059:tid 276321] [client 13.70.1.101:45269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/marijuana.php"] [unique_id "ary2T3tqdHBwD77138e8kQAAAg0"]
[Wed Sep 30 01:12:15.988139 2026] [security2:error] [pid 276620:tid 276649] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2T9PAdfEWqmGIkg1qAQACXBM"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=4418d150f6b3e7360dd4e3de982689ef
[Wed Sep 30 01:12:15.988164 2026] [security2:error] [pid 276620:tid 276649] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2T9PAdfEWqmGIkg1qAQACXBM"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=4418d150f6b3e7360dd4e3de982689ef
[Wed Sep 30 01:12:16.003499 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.003987 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.093179 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.093594 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:33046] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.142022 2026] [qos:error] [pid 276620:tid 276650] [remote 172.56.140.85:7869] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.56.140.85, id=ary2UNPAdfEWqmGIkg1qBQACbhQ
[Wed Sep 30 01:12:16.155738 2026] [security2:error] [pid 276059:tid 276238] [client 4.240.25.22:63652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp_blog_footer.php"] [unique_id "ary2UHtqdHBwD77138e8lQAAAbo"]
[Wed Sep 30 01:12:16.217939 2026] [security2:error] [pid 276059:tid 276110] [remote 57.141.14.33:53074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-includes/wlwmanifest.xml"] [unique_id "ary2UHtqdHBwD77138e8mQAB4C4"]
[Wed Sep 30 01:12:16.233835 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:30221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.234138 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:30221] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.237514 2026] [security2:error] [pid 276620:tid 276763] [client 20.194.5.96:44977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/plugins.php"] [unique_id "ary2UNPAdfEWqmGIkg1qCQAAAhg"]
[Wed Sep 30 01:12:16.309845 2026] [security2:error] [pid 276059:tid 276281] [client 216.73.216.46:45617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2UHtqdHBwD77138e8nQAAAeU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzE5L25vZGUwL2NwdTM%3D
[Wed Sep 30 01:12:16.315951 2026] [access_compat:error] [pid 276059:tid 276287] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:16.316243 2026] [access_compat:error] [pid 276059:tid 276287] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:16.326635 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.326923 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.328943 2026] [security2:error] [pid 276620:tid 276779] [client 20.211.90.37:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2UNPAdfEWqmGIkg1qDwAAAig"]
[Wed Sep 30 01:12:16.330911 2026] [security2:error] [pid 276620:tid 276797] [client 202.179.95.79:61889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2UNPAdfEWqmGIkg1qEAAAAjo"]
[Wed Sep 30 01:12:16.331009 2026] [security2:error] [pid 276620:tid 276797] [client 202.179.95.79:61889] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2UNPAdfEWqmGIkg1qEAAAAjo"]
[Wed Sep 30 01:12:16.349523 2026] [security2:error] [pid 276620:tid 276827] [client 13.70.1.101:5760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary2UNPAdfEWqmGIkg1qEQAAAlg"]
[Wed Sep 30 01:12:16.387700 2026] [security2:error] [pid 276059:tid 276275] [client 4.240.25.22:33320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2UHtqdHBwD77138e8ngAAAd8"]
[Wed Sep 30 01:12:16.389919 2026] [security2:error] [pid 276620:tid 276842] [client 20.219.14.152:41482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/cdc.php"] [unique_id "ary2UNPAdfEWqmGIkg1qFQAAAmc"]
[Wed Sep 30 01:12:16.433684 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.435195 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.439080 2026] [security2:error] [pid 276059:tid 276285] [client 4.240.25.22:18764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/pJPoKA.php"] [unique_id "ary2UHtqdHBwD77138e8oAAAAek"]
[Wed Sep 30 01:12:16.451846 2026] [security2:error] [pid 276059:tid 276201] [client 200.33.167.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2UHtqdHBwD77138e8oQAAAZY"]
[Wed Sep 30 01:12:16.458143 2026] [security2:error] [pid 276059:tid 276255] [client 20.219.19.141:28465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/ans.php"] [unique_id "ary2UHtqdHBwD77138e8owAAAcs"]
[Wed Sep 30 01:12:16.507621 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.507912 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.510661 2026] [security2:error] [pid 276059:tid 276254] [client 216.73.216.46:33046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2UHtqdHBwD77138e8pAAAAco"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvbWVtb3J5NDc1
[Wed Sep 30 01:12:16.520173 2026] [security2:error] [pid 276620:tid 276780] [client 74.7.175.171:60248] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.csn.htc.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2UNPAdfEWqmGIkg1qHAACKVo"]
[Wed Sep 30 01:12:16.601821 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.602128 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.636761 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.637031 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.686568 2026] [security2:error] [pid 276620:tid 276839] [client 13.70.1.101:45298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-content/403.php"] [unique_id "ary2UNPAdfEWqmGIkg1qKQAAAmQ"]
[Wed Sep 30 01:12:16.689397 2026] [security2:error] [pid 276059:tid 276282] [client 216.73.216.46:30221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2UHtqdHBwD77138e8pgAAAeY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTUvbm9kZTAvbWVtb3J5OA%3D%3D
[Wed Sep 30 01:12:16.692829 2026] [security2:error] [pid 276620:tid 276841] [client 168.100.149.32:28524] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/29eaa1bf0d16374e8304d14476920af8.cb11.css.gz"] [unique_id "ary2UNPAdfEWqmGIkg1qKwACZiQ"]
[Wed Sep 30 01:12:16.732889 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.733150 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.743525 2026] [security2:error] [pid 276620:tid 276745] [remote 64.23.166.180:17388] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.infraas.digital"] [uri "/.env"] [unique_id "ary2UNPAdfEWqmGIkg1qLwACJXM"]
[Wed Sep 30 01:12:16.755259 2026] [security2:error] [pid 276620:tid 276852] [client 20.211.90.37:18706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2UNPAdfEWqmGIkg1qMAAAAnE"]
[Wed Sep 30 01:12:16.757100 2026] [security2:error] [pid 276620:tid 276855] [client 20.70.173.30:53443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/users.php"] [unique_id "ary2UNPAdfEWqmGIkg1qMQAAAnQ"]
[Wed Sep 30 01:12:16.781354 2026] [security2:error] [pid 276059:tid 276317] [client 74.7.175.152:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "crishuffman.com"] [uri "/robots.txt"] [unique_id "ary2UHtqdHBwD77138e8qgAAAgk"]
[Wed Sep 30 01:12:16.783863 2026] [security2:error] [pid 276059:tid 276259] [client 74.7.175.152:39902] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "crishuffman.com"] [uri "/robots.txt"] [unique_id "ary2UHtqdHBwD77138e8qQABzys"]
[Wed Sep 30 01:12:16.823949 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.824219 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.835775 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L25ldA==
[Wed Sep 30 01:12:16.836078 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI1L25ldA==
[Wed Sep 30 01:12:16.846633 2026] [security2:error] [pid 276059:tid 276214] [client 20.70.173.30:33327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/cdc.php"] [unique_id "ary2UHtqdHBwD77138e8rgAAAaI"]
[Wed Sep 30 01:12:16.854418 2026] [security2:error] [pid 276620:tid 276777] [client 20.219.14.152:41511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/Components.php"] [unique_id "ary2UNPAdfEWqmGIkg1qNgAAAiY"]
[Wed Sep 30 01:12:16.889365 2026] [access_compat:error] [pid 276620:tid 276641] [remote 17.166.154.30:34468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.889636 2026] [access_compat:error] [pid 276620:tid 276641] [remote 17.166.154.30:34468] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.906747 2026] [security2:error] [pid 276059:tid 276298] [client 74.7.175.152:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "crishuffman.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ary2UHtqdHBwD77138e8rwAAAfY"], referer: https://crishuffman.com/robots.txt
[Wed Sep 30 01:12:16.909782 2026] [security2:error] [pid 276059:tid 276252] [client 74.7.175.152:39902] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "crishuffman.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ary2UHtqdHBwD77138e8qwAByDs"], referer: https://crishuffman.com/robots.txt
[Wed Sep 30 01:12:16.915191 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:16.915461 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:16.974868 2026] [security2:error] [pid 276059:tid 276242] [client 20.219.19.141:27905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/cns.php"] [unique_id "ary2UHtqdHBwD77138e8sAAAAb4"]
[Wed Sep 30 01:12:16.981824 2026] [security2:error] [pid 276059:tid 276302] [client 20.28.180.172:34292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/df.php"] [unique_id "ary2UHtqdHBwD77138e8sQAAAfo"]
[Wed Sep 30 01:12:17.006116 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.006395 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.031732 2026] [security2:error] [pid 276620:tid 276803] [client 13.70.1.101:45263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/css/colors/coffee/index.php"] [unique_id "ary2UdPAdfEWqmGIkg1qPAAAAkA"]
[Wed Sep 30 01:12:17.098061 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.098342 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.103522 2026] [security2:error] [pid 276620:tid 276813] [client 20.194.5.96:44984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/groud3.php"] [unique_id "ary2UdPAdfEWqmGIkg1qQQAAAko"]
[Wed Sep 30 01:12:17.187969 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.188222 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.257976 2026] [security2:error] [pid 276620:tid 276797] [client 20.194.30.107:23224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/images.php"] [unique_id "ary2UdPAdfEWqmGIkg1qTAAAAjo"]
[Wed Sep 30 01:12:17.277856 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.278118 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.316089 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:17.316835 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:17.329461 2026] [security2:error] [pid 276059:tid 276250] [client 20.219.14.152:41509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/admin.php/xl9.php"] [unique_id "ary2UXtqdHBwD77138e8twAAAcY"]
[Wed Sep 30 01:12:17.352389 2026] [security2:error] [pid 276059:tid 276069] [remote 57.141.14.45:44780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.org"] [uri "/index.php/calendarevent/dc-ecowomen-guided-hike-through-kenilworth-park-aquatic-gardens/"] [unique_id "ary2UXtqdHBwD77138e8uAACDAU"]
[Wed Sep 30 01:12:17.381062 2026] [security2:error] [pid 276620:tid 276842] [client 13.70.1.101:45307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/css.php"] [unique_id "ary2UdPAdfEWqmGIkg1qVgAAAmc"]
[Wed Sep 30 01:12:17.381694 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.382129 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.459006 2026] [security2:error] [pid 276059:tid 276300] [client 92.71.9.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2UXtqdHBwD77138e8uwAAAfg"]
[Wed Sep 30 01:12:17.470339 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.470834 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.494297 2026] [qos:error] [pid 276620:tid 276734] [remote 78.172.220.13:55422] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=78.172.220.13, id=ary2UdPAdfEWqmGIkg1qXAACLWg
[Wed Sep 30 01:12:17.551014 2026] [security2:error] [pid 276620:tid 276862] [client 20.219.19.141:27911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/faiy.php"] [unique_id "ary2UdPAdfEWqmGIkg1qXgAAAns"]
[Wed Sep 30 01:12:17.553380 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.553661 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.643209 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.643486 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.649663 2026] [security2:error] [pid 276620:tid 276805] [client 155.190.6.18:47402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2UdPAdfEWqmGIkg1qYgAAAkI"]
[Wed Sep 30 01:12:17.649770 2026] [security2:error] [pid 276620:tid 276805] [client 155.190.6.18:47402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2UdPAdfEWqmGIkg1qYgAAAkI"]
[Wed Sep 30 01:12:17.651307 2026] [security2:error] [pid 276620:tid 276753] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2UdPAdfEWqmGIkg1qYwACKXs"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D87748
[Wed Sep 30 01:12:17.656710 2026] [security2:error] [pid 276620:tid 276856] [client 103.113.225.43:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2UdPAdfEWqmGIkg1qZQAAAnU"]
[Wed Sep 30 01:12:17.692350 2026] [security2:error] [pid 276620:tid 276772] [client 20.28.180.172:60330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/xx.php"] [unique_id "ary2UdPAdfEWqmGIkg1qaAAAAiE"]
[Wed Sep 30 01:12:17.730909 2026] [access_compat:error] [pid 276059:tid 276147] [remote 57.141.20.60:46582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.731058 2026] [security2:error] [pid 276059:tid 276281] [client 13.70.1.101:6108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-admin/user/about.php"] [unique_id "ary2UXtqdHBwD77138e8xAAAAeU"]
[Wed Sep 30 01:12:17.731353 2026] [access_compat:error] [pid 276059:tid 276147] [remote 57.141.20.60:46582] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.733986 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.734240 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.755307 2026] [security2:error] [pid 276059:tid 276319] [client 20.211.90.37:19333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary2UXtqdHBwD77138e8xwAAAgs"]
[Wed Sep 30 01:12:17.759425 2026] [security2:error] [pid 276059:tid 276309] [client 20.194.5.96:64505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/gaxby.php"] [unique_id "ary2UXtqdHBwD77138e8yAAAAgE"]
[Wed Sep 30 01:12:17.773127 2026] [security2:error] [pid 276620:tid 276763] [client 103.211.18.63:61966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2UdPAdfEWqmGIkg1qbwAAAhg"]
[Wed Sep 30 01:12:17.773299 2026] [security2:error] [pid 276620:tid 276763] [client 103.211.18.63:61966] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2UdPAdfEWqmGIkg1qbwAAAhg"]
[Wed Sep 30 01:12:17.798687 2026] [security2:error] [pid 276620:tid 276800] [client 20.219.14.152:41502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/gulu.php"] [unique_id "ary2UdPAdfEWqmGIkg1qcAAAAj0"]
[Wed Sep 30 01:12:17.824551 2026] [access_compat:error] [pid 276059:tid 276307] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:17.824829 2026] [access_compat:error] [pid 276059:tid 276307] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:17.827408 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.827683 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:17.840646 2026] [security2:error] [pid 276620:tid 276668] [remote 184.168.30.57:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.30.168.184.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ary2UdPAdfEWqmGIkg1qcgACdCY"]
[Wed Sep 30 01:12:17.916891 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:17.917157 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:24353] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.008110 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.008405 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.020630 2026] [security2:error] [pid 276620:tid 276845] [client 116.193.128.26:63865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.128.193.116.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qeQAAAmo"]
[Wed Sep 30 01:12:18.022115 2026] [security2:error] [pid 276620:tid 276845] [client 116.193.128.26:63865] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qeQAAAmo"]
[Wed Sep 30 01:12:18.057765 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.1.101:45253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/about.php"] [unique_id "ary2UtPAdfEWqmGIkg1qegAAAn0"]
[Wed Sep 30 01:12:18.100294 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.100577 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.124392 2026] [security2:error] [pid 276620:tid 276786] [client 20.211.90.37:18688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary2UtPAdfEWqmGIkg1qfAAAAi8"]
[Wed Sep 30 01:12:18.156012 2026] [security2:error] [pid 276620:tid 276671] [remote 184.168.30.57:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.30.168.184.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/wp-login.php"] [unique_id "ary2UtPAdfEWqmGIkg1qfQACIyk"], referer: https://scholarsofsharlayan.com/wp-login.php
[Wed Sep 30 01:12:18.171996 2026] [security2:error] [pid 276059:tid 276127] [remote 47.128.114.103:19364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/city/66/ncat/1"] [unique_id "ary2UntqdHBwD77138e8ywAB8T8"]
[Wed Sep 30 01:12:18.191351 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.191620 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.239306 2026] [security2:error] [pid 276620:tid 276630] [remote 184.168.30.57:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 57.30.168.184.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scholarsofsharlayan.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qgAACNwA"]
[Wed Sep 30 01:12:18.239467 2026] [security2:error] [pid 276620:tid 276794] [client 184.168.30.57:39820] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scholarsofsharlayan.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qgAACNwA"]
[Wed Sep 30 01:12:18.265747 2026] [security2:error] [pid 276620:tid 276803] [client 20.219.14.152:41884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/bala.php"] [unique_id "ary2UtPAdfEWqmGIkg1qgQAAAkA"]
[Wed Sep 30 01:12:18.281298 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.281596 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.299552 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:18.299673 2026] [security2:error] [pid 276059:tid 276269] [client 122.173.27.10:9585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2UntqdHBwD77138e8zwAAAdk"]
[Wed Sep 30 01:12:18.299745 2026] [security2:error] [pid 276059:tid 276269] [client 122.173.27.10:9585] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2UntqdHBwD77138e8zwAAAdk"]
[Wed Sep 30 01:12:18.299955 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:18.308403 2026] [security2:error] [pid 276620:tid 276775] [client 20.198.74.230:24166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.74.198.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staging.michellemattar.com"] [uri "/cjhnp.php"] [unique_id "ary2UtPAdfEWqmGIkg1qgwAAAiQ"]
[Wed Sep 30 01:12:18.320235 2026] [security2:error] [pid 276620:tid 276814] [client 216.73.216.46:24353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2UtPAdfEWqmGIkg1qhQAAAks"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnkxOTIvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:12:18.384317 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.384749 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.412334 2026] [security2:error] [pid 276059:tid 276258] [client 13.70.1.101:45271] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "nelsonfarmstn.com"] [uri "/1.php"] [unique_id "ary2UntqdHBwD77138e81AAAAc4"]
[Wed Sep 30 01:12:18.412490 2026] [security2:error] [pid 276059:tid 276258] [client 13.70.1.101:45271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/1.php"] [unique_id "ary2UntqdHBwD77138e81AAAAc4"]
[Wed Sep 30 01:12:18.476174 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.476626 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.479744 2026] [security2:error] [pid 276059:tid 276214] [client 20.194.5.96:44928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/dh9u7.php"] [unique_id "ary2UntqdHBwD77138e81gAAAaI"]
[Wed Sep 30 01:12:18.484319 2026] [security2:error] [pid 276059:tid 276306] [client 20.219.19.141:27988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/gecho.php"] [unique_id "ary2UntqdHBwD77138e81wAAAf4"]
[Wed Sep 30 01:12:18.547057 2026] [security2:error] [pid 276620:tid 276812] [client 182.69.182.151:12402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qjwAAAkk"]
[Wed Sep 30 01:12:18.548111 2026] [security2:error] [pid 276620:tid 276812] [client 182.69.182.151:12402] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2UtPAdfEWqmGIkg1qjwAAAkk"]
[Wed Sep 30 01:12:18.566539 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.566790 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.569504 2026] [security2:error] [pid 276059:tid 276274] [client 20.211.90.37:18715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary2UntqdHBwD77138e82gAAAd4"]
[Wed Sep 30 01:12:18.571449 2026] [security2:error] [pid 276059:tid 276226] [client 106.214.2.47:25547] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2UntqdHBwD77138e82wAAAa4"]
[Wed Sep 30 01:12:18.578504 2026] [security2:error] [pid 276059:tid 276226] [client 106.214.2.47:25547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2UntqdHBwD77138e82wAAAa4"]
[Wed Sep 30 01:12:18.603519 2026] [security2:error] [pid 276620:tid 276778] [client 20.28.180.172:29450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/or.php"] [unique_id "ary2UtPAdfEWqmGIkg1qkgAAAic"]
[Wed Sep 30 01:12:18.624141 2026] [qos:error] [pid 276059:tid 276216] [client 73.130.228.87:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2UntqdHBwD77138e83AAAAaQ
[Wed Sep 30 01:12:18.659651 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.659924 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.668850 2026] [security2:error] [pid 276620:tid 276849] [client 103.168.66.101:8478] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/wp/"] [unique_id "ary2UtPAdfEWqmGIkg1qlgAAAm4"]
[Wed Sep 30 01:12:18.701499 2026] [security2:error] [pid 276620:tid 276852] [client 168.100.149.83:47328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/8dad9d881661a5984711193b2500b438.3230.css.gz"] [unique_id "ary2UtPAdfEWqmGIkg1qlwACcQg"]
[Wed Sep 30 01:12:18.734756 2026] [security2:error] [pid 276620:tid 276779] [client 13.70.1.101:5784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/marijuana.php"] [unique_id "ary2UtPAdfEWqmGIkg1qmwAAAig"]
[Wed Sep 30 01:12:18.735517 2026] [security2:error] [pid 276620:tid 276847] [client 20.219.14.152:41493] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bradgoreski.co"] [uri "/c99.php"] [unique_id "ary2UtPAdfEWqmGIkg1qnAAAAmw"]
[Wed Sep 30 01:12:18.750294 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.750557 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.819768 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 01:12:18.820217 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 01:12:18.843093 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.843371 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.946839 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:18.947105 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:18.966450 2026] [security2:error] [pid 276620:tid 276883] [client 20.219.2.60:30363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/tx78.php"] [unique_id "ary2UtPAdfEWqmGIkg1qowAAApA"]
[Wed Sep 30 01:12:19.030030 2026] [security2:error] [pid 276620:tid 276780] [client 20.194.5.96:44985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/yvnqcuic.php"] [unique_id "ary2U9PAdfEWqmGIkg1qpQAAAik"]
[Wed Sep 30 01:12:19.035767 2026] [security2:error] [pid 276620:tid 276772] [client 20.211.90.37:18826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/media.php"] [unique_id "ary2U9PAdfEWqmGIkg1qpwAAAiE"]
[Wed Sep 30 01:12:19.038916 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.039176 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:24534] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.071177 2026] [security2:error] [pid 276059:tid 276223] [client 152.56.240.85:49524] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2U3tqdHBwD77138e84wAAAas"]
[Wed Sep 30 01:12:19.071336 2026] [security2:error] [pid 276059:tid 276223] [client 152.56.240.85:49524] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2U3tqdHBwD77138e84wAAAas"]
[Wed Sep 30 01:12:19.076934 2026] [security2:error] [pid 276059:tid 276311] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2U3tqdHBwD77138e85AAAAgM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:19.106707 2026] [security2:error] [pid 276620:tid 276814] [client 13.70.1.101:6131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/about/function.php"] [unique_id "ary2U9PAdfEWqmGIkg1qqQAAAks"]
[Wed Sep 30 01:12:19.117717 2026] [fcgid:warn] [pid 276620:tid 276854] (70014)End of file found: [client 66.132.172.38:28768] mod_fcgid: can't get data from http client
[Wed Sep 30 01:12:19.130687 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.130978 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.214641 2026] [qos:error] [pid 276059:tid 276236] [client 91.95.6.177:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2U3tqdHBwD77138e85gAAAbg
[Wed Sep 30 01:12:19.220996 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.221255 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.249891 2026] [security2:error] [pid 276059:tid 276279] [client 20.219.14.152:41520] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bradgoreski.co"] [uri "/c99.php"] [unique_id "ary2U3tqdHBwD77138e87AAAAeM"]
[Wed Sep 30 01:12:19.289226 2026] [qos:error] [pid 276059:tid 276266] [client 176.240.224.61:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2U3tqdHBwD77138e87gAAAdY
[Wed Sep 30 01:12:19.318572 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.319037 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.322797 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:19.323264 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:19.345875 2026] [security2:error] [pid 276620:tid 276841] [client 20.219.19.141:27906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/gu.php"] [unique_id "ary2U9PAdfEWqmGIkg1qtAAAAmY"]
[Wed Sep 30 01:12:19.349839 2026] [security2:error] [pid 276059:tid 276307] [client 20.194.30.107:17524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/term.php"] [unique_id "ary2U3tqdHBwD77138e88QAAAf8"]
[Wed Sep 30 01:12:19.413960 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.414430 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.427316 2026] [security2:error] [pid 276620:tid 276766] [client 216.73.216.46:24534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2U9PAdfEWqmGIkg1qugAAAhs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDI4L25vZGUwL21lbW9yeTM2
[Wed Sep 30 01:12:19.455965 2026] [security2:error] [pid 276059:tid 276287] [client 20.211.90.37:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/inso.php"] [unique_id "ary2U3tqdHBwD77138e89wAAAes"]
[Wed Sep 30 01:12:19.457570 2026] [security2:error] [pid 276059:tid 276228] [client 94.45.121.145:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2U3tqdHBwD77138e89gAAAbA"]
[Wed Sep 30 01:12:19.464838 2026] [security2:error] [pid 276620:tid 276782] [client 4.240.25.22:33284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/cdc.php"] [unique_id "ary2U9PAdfEWqmGIkg1qvAAAAis"]
[Wed Sep 30 01:12:19.468646 2026] [security2:error] [pid 276620:tid 276852] [client 13.70.1.101:6098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/simple.php"] [unique_id "ary2U9PAdfEWqmGIkg1qvQAAAnE"]
[Wed Sep 30 01:12:19.502730 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.503172 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.589095 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.589361 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.681079 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.681349 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.711664 2026] [security2:error] [pid 276059:tid 276274] [client 20.219.14.152:41907] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bradgoreski.co"] [uri "/c99.php"] [unique_id "ary2U3tqdHBwD77138e9AQAAAd4"]
[Wed Sep 30 01:12:19.749550 2026] [core:error] [pid 276059:tid 276242] [client 119.28.81.192:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.749581 2026] [core:error] [pid 276059:tid 276242] [client 119.28.81.192:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.777712 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.778002 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.808010 2026] [security2:error] [pid 276620:tid 276856] [client 20.211.90.37:18848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/shiny.php"] [unique_id "ary2U9PAdfEWqmGIkg1qxwAAAnU"]
[Wed Sep 30 01:12:19.808279 2026] [security2:error] [pid 276059:tid 276216] [client 13.70.1.101:45305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/goat1.php"] [unique_id "ary2U3tqdHBwD77138e9BwAAAaQ"]
[Wed Sep 30 01:12:19.820394 2026] [qos:error] [pid 276059:tid 276153] [remote 85.96.17.211:54474] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=85.96.17.211, id=ary2U3tqdHBwD77138e9CQACCVk
[Wed Sep 30 01:12:19.821006 2026] [security2:error] [pid 276059:tid 276250] [client 20.219.19.141:27908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/nck.php"] [unique_id "ary2U3tqdHBwD77138e9CgAAAcY"]
[Wed Sep 30 01:12:19.828434 2026] [core:error] [pid 276620:tid 276814] [client 43.134.127.109:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.828447 2026] [core:error] [pid 276620:tid 276814] [client 43.134.127.109:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.828456 2026] [core:error] [pid 276059:tid 276203] [client 43.135.184.212:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.828465 2026] [core:error] [pid 276059:tid 276203] [client 43.135.184.212:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:19.840089 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:19.840348 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:19.870277 2026] [qos:error] [pid 276620:tid 276681] [remote 68.228.246.187:49746] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=68.228.246.187, id=ary2U9PAdfEWqmGIkg1qzQAChzM
[Wed Sep 30 01:12:19.871945 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.872202 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.909462 2026] [security2:error] [pid 276620:tid 276853] [client 89.41.42.39:16044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary2U9PAdfEWqmGIkg1qwgAAAnI"]
[Wed Sep 30 01:12:19.931477 2026] [security2:error] [pid 276620:tid 276632] [remote 216.244.66.196:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2U9PAdfEWqmGIkg1q0AACdAI"]
[Wed Sep 30 01:12:19.931605 2026] [security2:error] [pid 276620:tid 276855] [client 216.244.66.196:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2U9PAdfEWqmGIkg1q0AACdAI"]
[Wed Sep 30 01:12:19.966016 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:19.966271 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:19.975666 2026] [security2:error] [pid 276620:tid 276766] [client 4.240.25.22:12455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/echkm.php"] [unique_id "ary2U9PAdfEWqmGIkg1q0gAAAhs"]
[Wed Sep 30 01:12:20.058615 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.058919 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.136584 2026] [security2:error] [pid 276620:tid 276879] [client 13.70.1.101:5809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/chosen.php"] [unique_id "ary2VNPAdfEWqmGIkg1q2QAAAow"]
[Wed Sep 30 01:12:20.148404 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.148676 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.175325 2026] [security2:error] [pid 276620:tid 276770] [client 20.219.14.152:41917] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.bradgoreski.co"] [uri "/c99.php"] [unique_id "ary2VNPAdfEWqmGIkg1q3QAAAh8"]
[Wed Sep 30 01:12:20.192459 2026] [qos:error] [pid 276620:tid 276680] [remote 92.238.149.96:59184] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=92.238.149.96, id=ary2VNPAdfEWqmGIkg1q3gACdzI
[Wed Sep 30 01:12:20.238780 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.239039 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.329041 2026] [security2:error] [pid 276620:tid 276776] [client 4.240.25.22:8474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/one.php"] [unique_id "ary2VNPAdfEWqmGIkg1q4wAAAiU"]
[Wed Sep 30 01:12:20.331259 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.331516 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.332696 2026] [qos:error] [pid 276620:tid 276682] [remote 147.185.167.186:47246] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=147.185.167.186, id=ary2VNPAdfEWqmGIkg1q5AACQDQ
[Wed Sep 30 01:12:20.335153 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:20.335439 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:20.371595 2026] [security2:error] [pid 276620:tid 276783] [client 20.219.19.141:28417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/xtt.php"] [unique_id "ary2VNPAdfEWqmGIkg1q5gAAAiw"]
[Wed Sep 30 01:12:20.406432 2026] [security2:error] [pid 276059:tid 276319] [client 20.211.90.37:18831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/403dd.php"] [unique_id "ary2VHtqdHBwD77138e9FgAAAgs"]
[Wed Sep 30 01:12:20.424278 2026] [security2:error] [pid 276620:tid 276854] [client 103.168.66.101:8478] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/wordpress/"] [unique_id "ary2VNPAdfEWqmGIkg1q6gAAAnM"]
[Wed Sep 30 01:12:20.436011 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.436481 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.477195 2026] [security2:error] [pid 276620:tid 276849] [client 103.241.204.139:64091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2VNPAdfEWqmGIkg1q7QAAAm4"]
[Wed Sep 30 01:12:20.477353 2026] [security2:error] [pid 276620:tid 276849] [client 103.241.204.139:64091] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2VNPAdfEWqmGIkg1q7QAAAm4"]
[Wed Sep 30 01:12:20.512532 2026] [security2:error] [pid 276059:tid 276197] [client 105.112.178.79:38591] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.psx.jhe.mybluehost.me"] [uri "/__ss_probe_d97eed737f594ac35236a46ec12dbb63__"] [unique_id "ary2VHtqdHBwD77138e9GAAAAZI"]
[Wed Sep 30 01:12:20.518026 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.518278 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.527918 2026] [security2:error] [pid 276059:tid 276262] [client 13.70.1.101:6096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-cron.php"] [unique_id "ary2VHtqdHBwD77138e9GQAAAdI"]
[Wed Sep 30 01:12:20.563580 2026] [security2:error] [pid 276620:tid 276812] [client 20.194.5.96:64456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/koiy.php"] [unique_id "ary2VNPAdfEWqmGIkg1q7wAAAkk"]
[Wed Sep 30 01:12:20.585674 2026] [security2:error] [pid 276620:tid 276792] [client 4.240.25.22:18744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/admin.php"] [unique_id "ary2VNPAdfEWqmGIkg1q8AAAAjU"]
[Wed Sep 30 01:12:20.609738 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.610039 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.643978 2026] [security2:error] [pid 276059:tid 276276] [client 20.219.14.152:41874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/ttivnife.php"] [unique_id "ary2VHtqdHBwD77138e9HQAAAeA"]
[Wed Sep 30 01:12:20.674782 2026] [security2:error] [pid 276620:tid 276886] [client 20.219.2.60:30030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws80.php"] [unique_id "ary2VNPAdfEWqmGIkg1q8gAAApM"]
[Wed Sep 30 01:12:20.685910 2026] [security2:error] [pid 276059:tid 276200] [client 168.100.149.129:51702] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/209fc7b9ec170092729121a14efc3ac2.e08.css.gz"] [unique_id "ary2VHtqdHBwD77138e9HgABlXw"]
[Wed Sep 30 01:12:20.698155 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.698411 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.791178 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.791465 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.829866 2026] [access_compat:error] [pid 276059:tid 276258] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:20.830153 2026] [access_compat:error] [pid 276059:tid 276258] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:20.849093 2026] [security2:error] [pid 276059:tid 276316] [client 13.70.1.101:6143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/yanz.php"] [unique_id "ary2VHtqdHBwD77138e9IgAAAgg"]
[Wed Sep 30 01:12:20.866315 2026] [security2:error] [pid 276059:tid 276286] [client 20.70.173.30:64791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/classwithtostring.php"] [unique_id "ary2VHtqdHBwD77138e9IwAAAeo"]
[Wed Sep 30 01:12:20.881124 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.881367 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:20.935229 2026] [security2:error] [pid 276620:tid 276870] [client 182.75.216.230:62957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2VNPAdfEWqmGIkg1rAQAAAoM"]
[Wed Sep 30 01:12:20.935403 2026] [security2:error] [pid 276620:tid 276870] [client 182.75.216.230:62957] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2VNPAdfEWqmGIkg1rAQAAAoM"]
[Wed Sep 30 01:12:20.946903 2026] [security2:error] [pid 276620:tid 276770] [client 20.219.19.141:28005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.19.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steaminnovationfoundation.org"] [uri "/go.php"] [unique_id "ary2VNPAdfEWqmGIkg1rAgAAAh8"]
[Wed Sep 30 01:12:20.976487 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:20.976764 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:28314] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.063764 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.064065 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.111551 2026] [security2:error] [pid 276059:tid 276298] [client 20.219.14.152:41870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/admin.php/2P.php"] [unique_id "ary2VXtqdHBwD77138e9KQAAAfY"]
[Wed Sep 30 01:12:21.146177 2026] [security2:error] [pid 276059:tid 276263] [client 37.41.16.35:50541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2VXtqdHBwD77138e9KgAAAdM"]
[Wed Sep 30 01:12:21.146349 2026] [security2:error] [pid 276059:tid 276263] [client 37.41.16.35:50541] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2VXtqdHBwD77138e9KgAAAdM"]
[Wed Sep 30 01:12:21.156928 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.157238 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.173275 2026] [security2:error] [pid 276620:tid 276794] [client 103.168.66.101:8478] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "psrecruit.org.uk"] [uri "/blog/"] [unique_id "ary2VdPAdfEWqmGIkg1rCQAAAjc"]
[Wed Sep 30 01:12:21.192642 2026] [security2:error] [pid 276620:tid 276883] [client 13.70.1.101:6119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/config.php"] [unique_id "ary2VdPAdfEWqmGIkg1rCgAAApA"]
[Wed Sep 30 01:12:21.204171 2026] [security2:error] [pid 276059:tid 276226] [client 20.194.30.107:30405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/ops.php"] [unique_id "ary2VXtqdHBwD77138e9KwAAAa4"]
[Wed Sep 30 01:12:21.247471 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.247744 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.266674 2026] [security2:error] [pid 276620:tid 276849] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2VdPAdfEWqmGIkg1rEgAAAm4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:21.267209 2026] [security2:error] [pid 276620:tid 276848] [client 4.240.25.22:18787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/mac.php"] [unique_id "ary2VdPAdfEWqmGIkg1rEwAAAm0"]
[Wed Sep 30 01:12:21.330395 2026] [access_compat:error] [pid 276059:tid 276302] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:12:21.330690 2026] [access_compat:error] [pid 276059:tid 276302] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:12:21.335281 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.335558 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.368226 2026] [security2:error] [pid 276620:tid 276853] [client 216.73.216.46:28314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2VdPAdfEWqmGIkg1rFgAAAnI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzAvbm9kZTAvbWVtb3J5MTMy
[Wed Sep 30 01:12:21.434779 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.435271 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.490211 2026] [security2:error] [pid 276620:tid 276786] [client 201.32.215.149:7389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2VdPAdfEWqmGIkg1rHwAAAi8"]
[Wed Sep 30 01:12:21.490564 2026] [security2:error] [pid 276620:tid 276786] [client 201.32.215.149:7389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2VdPAdfEWqmGIkg1rHwAAAi8"]
[Wed Sep 30 01:12:21.569259 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:9777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.569540 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:9777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.581679 2026] [security2:error] [pid 276059:tid 276229] [client 209.40.209.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2VXtqdHBwD77138e9NQAAAbE"]
[Wed Sep 30 01:12:21.593916 2026] [security2:error] [pid 276059:tid 276206] [client 20.219.14.152:41889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/a.php"] [unique_id "ary2VXtqdHBwD77138e9NgAAAZs"]
[Wed Sep 30 01:12:21.609210 2026] [security2:error] [pid 276059:tid 276095] [remote 47.128.127.177:34776] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/robots.txt"] [unique_id "ary2VXtqdHBwD77138e9NwACDB8"]
[Wed Sep 30 01:12:21.615599 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.615886 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.626236 2026] [security2:error] [pid 276059:tid 276224] [client 13.70.1.101:58639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/network.php"] [unique_id "ary2VXtqdHBwD77138e9OAAAAaw"]
[Wed Sep 30 01:12:21.630373 2026] [security2:error] [pid 276059:tid 276294] [client 20.70.173.30:25932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/f35.php"] [unique_id "ary2VXtqdHBwD77138e9OQAAAfI"]
[Wed Sep 30 01:12:21.658718 2026] [security2:error] [pid 276059:tid 276231] [client 20.211.90.37:19352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/baba.php"] [unique_id "ary2VXtqdHBwD77138e9OwAAAbM"]
[Wed Sep 30 01:12:21.700537 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.700794 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.715572 2026] [security2:error] [pid 276620:tid 276866] [client 20.28.180.172:29502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/wmore1.php"] [unique_id "ary2VdPAdfEWqmGIkg1rKAAAAn8"]
[Wed Sep 30 01:12:21.737947 2026] [security2:error] [pid 276620:tid 276817] [client 20.204.42.136:35743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/pudym.php"] [unique_id "ary2VdPAdfEWqmGIkg1rLAAAAk4"]
[Wed Sep 30 01:12:21.757888 2026] [security2:error] [pid 276059:tid 276311] [client 45.138.12.32:34482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lvv.xqt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2VXtqdHBwD77138e9PQAAAgM"]
[Wed Sep 30 01:12:21.795297 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.795757 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.796069 2026] [access_compat:error] [pid 276059:tid 276227] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:12:21.796528 2026] [access_compat:error] [pid 276059:tid 276227] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:12:21.868195 2026] [security2:error] [pid 276620:tid 276783] [client 20.194.5.96:64457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wordfence-waf.php"] [unique_id "ary2VdPAdfEWqmGIkg1rNQAAAiw"]
[Wed Sep 30 01:12:21.881964 2026] [security2:error] [pid 276620:tid 276848] [client 20.70.173.30:58385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "api.orontes-tech.com"] [uri "/cabs.php"] [unique_id "ary2VdPAdfEWqmGIkg1rOAAAAm0"]
[Wed Sep 30 01:12:21.884768 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.885191 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:21.936975 2026] [security2:error] [pid 276620:tid 276812] [client 4.240.25.22:8424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/222.php"] [unique_id "ary2VdPAdfEWqmGIkg1rOwAAAkk"]
[Wed Sep 30 01:12:21.985134 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:21.985560 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.026632 2026] [security2:error] [pid 276059:tid 276275] [client 105.112.178.79:36584] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.psrecruit.org.uk"] [uri "/.env"] [unique_id "ary2VntqdHBwD77138e9QwAAAd8"]
[Wed Sep 30 01:12:22.040332 2026] [security2:error] [pid 276620:tid 276806] [client 13.70.1.101:5785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-2019.php"] [unique_id "ary2VtPAdfEWqmGIkg1rQQAAAkM"]
[Wed Sep 30 01:12:22.055579 2026] [security2:error] [pid 276059:tid 276197] [client 20.219.14.152:41531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/cord.php"] [unique_id "ary2VntqdHBwD77138e9RAAAAZI"]
[Wed Sep 30 01:12:22.065946 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.066398 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.139508 2026] [security2:error] [pid 276620:tid 276832] [client 20.211.90.37:18749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/site.php"] [unique_id "ary2VtPAdfEWqmGIkg1rRgAAAl0"]
[Wed Sep 30 01:12:22.158393 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.158693 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.171415 2026] [security2:error] [pid 276059:tid 276238] [client 20.28.180.172:61228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/Jcrop.php"] [unique_id "ary2VntqdHBwD77138e9SQAAAbo"]
[Wed Sep 30 01:12:22.213820 2026] [security2:error] [pid 276620:tid 276842] [client 45.138.12.48:50744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jmb.mht.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2VtPAdfEWqmGIkg1rTwAAAmc"]
[Wed Sep 30 01:12:22.228030 2026] [security2:error] [pid 276620:tid 276768] [client 4.240.25.22:8432] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary2VtPAdfEWqmGIkg1rUAAAAh0"]
[Wed Sep 30 01:12:22.228176 2026] [security2:error] [pid 276620:tid 276768] [client 4.240.25.22:8432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary2VtPAdfEWqmGIkg1rUAAAAh0"]
[Wed Sep 30 01:12:22.250977 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.251223 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.261399 2026] [security2:error] [pid 276620:tid 276783] [client 4.240.25.22:12442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/admin.php"] [unique_id "ary2VtPAdfEWqmGIkg1rVAAAAiw"]
[Wed Sep 30 01:12:22.325299 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L25ldA==
[Wed Sep 30 01:12:22.325579 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzM3L25ldA==
[Wed Sep 30 01:12:22.339070 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.339315 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.412335 2026] [security2:error] [pid 276620:tid 276857] [client 13.70.1.101:5800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/bypass.php"] [unique_id "ary2VtPAdfEWqmGIkg1rWwAAAnY"]
[Wed Sep 30 01:12:22.438429 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.438892 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.506129 2026] [security2:error] [pid 276620:tid 276786] [client 20.219.14.152:41230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/anom.php"] [unique_id "ary2VtPAdfEWqmGIkg1rXgAAAi8"]
[Wed Sep 30 01:12:22.519954 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:9777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.520216 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:9777] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.538348 2026] [security2:error] [pid 276620:tid 276760] [client 20.211.90.37:18697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/insc.php"] [unique_id "ary2VtPAdfEWqmGIkg1rYAAAAhU"]
[Wed Sep 30 01:12:22.614064 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.614331 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.699657 2026] [security2:error] [pid 276059:tid 276306] [client 168.100.149.45:27040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/66ff047f4dd1ec68a31636c1419295c6.13a.css.gz"] [unique_id "ary2VntqdHBwD77138e9UQAB_mg"]
[Wed Sep 30 01:12:22.703551 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.703822 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.747611 2026] [security2:error] [pid 276620:tid 276848] [client 13.70.1.101:5812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary2VtPAdfEWqmGIkg1rbQAAAm0"]
[Wed Sep 30 01:12:22.797171 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.797448 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55671] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.803470 2026] [access_compat:error] [pid 276059:tid 276278] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:22.803734 2026] [access_compat:error] [pid 276059:tid 276278] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:22.910856 2026] [security2:error] [pid 276620:tid 276639] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2VtPAdfEWqmGIkg1rcgAChAk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=e6bb342140d1363989642c6c9f0f6f0c&start=30&t=11118
[Wed Sep 30 01:12:22.910897 2026] [security2:error] [pid 276620:tid 276639] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2VtPAdfEWqmGIkg1rcgAChAk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=e6bb342140d1363989642c6c9f0f6f0c&start=30&t=11118
[Wed Sep 30 01:12:22.926949 2026] [security2:error] [pid 276620:tid 276792] [client 216.73.216.46:9777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2VtPAdfEWqmGIkg1rdQAAAjU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvbm9kZTAvbWVtb3J5MjIw
[Wed Sep 30 01:12:22.941994 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:22.942425 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:22.949019 2026] [security2:error] [pid 276620:tid 276886] [client 45.138.12.44:11390] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.ata.hfj.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2VtPAdfEWqmGIkg1reAAAApM"]
[Wed Sep 30 01:12:22.956360 2026] [security2:error] [pid 276620:tid 276784] [client 170.81.201.74:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2VtPAdfEWqmGIkg1reQAAAi0"]
[Wed Sep 30 01:12:22.960093 2026] [security2:error] [pid 276059:tid 276229] [client 20.219.14.152:41896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/plugins.php"] [unique_id "ary2VntqdHBwD77138e9VQAAAbE"]
[Wed Sep 30 01:12:22.968780 2026] [access_compat:error] [pid 276620:tid 276855] [client 47.79.13.64:60572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:22.969074 2026] [access_compat:error] [pid 276620:tid 276855] [client 47.79.13.64:60572] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:22.999451 2026] [security2:error] [pid 276620:tid 276724] [remote 57.141.14.41:55352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "ary2VtPAdfEWqmGIkg1rfgACQl4"]
[Wed Sep 30 01:12:23.030781 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.031063 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.049611 2026] [security2:error] [pid 276620:tid 276872] [client 122.177.240.90:10311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rgAAAAoU"]
[Wed Sep 30 01:12:23.049711 2026] [security2:error] [pid 276620:tid 276872] [client 122.177.240.90:10311] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rgAAAAoU"]
[Wed Sep 30 01:12:23.072443 2026] [security2:error] [pid 276620:tid 276822] [client 223.181.60.167:31670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rggAAAlM"]
[Wed Sep 30 01:12:23.072783 2026] [security2:error] [pid 276620:tid 276822] [client 223.181.60.167:31670] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rggAAAlM"]
[Wed Sep 30 01:12:23.095635 2026] [security2:error] [pid 276620:tid 276858] [client 20.211.90.37:18827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/file.php"] [unique_id "ary2V9PAdfEWqmGIkg1rhgAAAnc"]
[Wed Sep 30 01:12:23.121550 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.121803 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.142193 2026] [security2:error] [pid 276620:tid 276865] [client 13.70.1.101:45260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary2V9PAdfEWqmGIkg1riAAAAn4"]
[Wed Sep 30 01:12:23.144049 2026] [security2:error] [pid 276620:tid 276764] [client 223.235.102.107:16367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rigAAAhk"]
[Wed Sep 30 01:12:23.144165 2026] [security2:error] [pid 276620:tid 276764] [client 223.235.102.107:16367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rigAAAhk"]
[Wed Sep 30 01:12:23.160921 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.161374 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.161423 2026] [qos:error] [pid 276620:tid 276725] [remote 47.149.184.106:38220] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=47.149.184.106, id=ary2V9PAdfEWqmGIkg1rjQACHl8
[Wed Sep 30 01:12:23.206464 2026] [security2:error] [pid 276620:tid 276806] [client 216.73.216.46:55671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2V9PAdfEWqmGIkg1rjgAAAkM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDIvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTYy
[Wed Sep 30 01:12:23.237517 2026] [access_compat:error] [pid 276620:tid 276853] [client 116.179.32.15:55975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.237788 2026] [access_compat:error] [pid 276620:tid 276853] [client 116.179.32.15:55975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.255130 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.255402 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.264508 2026] [security2:error] [pid 276620:tid 276779] [client 69.57.172.4:51736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary2V9PAdfEWqmGIkg1rkgAAAig"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 01:12:23.294648 2026] [qos:error] [pid 276059:tid 276182] [remote 73.212.217.204:35374] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.212.217.204, id=ary2V3tqdHBwD77138e9XQAB8nY
[Wed Sep 30 01:12:23.297249 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL25ldA==
[Wed Sep 30 01:12:23.297668 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAyL25ldA==
[Wed Sep 30 01:12:23.344409 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.344688 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.386507 2026] [security2:error] [pid 276059:tid 276250] [client 49.37.102.248:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2V3tqdHBwD77138e9XwAAAcY"]
[Wed Sep 30 01:12:23.386685 2026] [security2:error] [pid 276059:tid 276250] [client 49.37.102.248:61681] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2V3tqdHBwD77138e9XwAAAcY"]
[Wed Sep 30 01:12:23.428429 2026] [security2:error] [pid 276620:tid 276770] [client 20.219.14.152:41492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/zlwvxiyp.php"] [unique_id "ary2V9PAdfEWqmGIkg1rlgAAAh8"]
[Wed Sep 30 01:12:23.429831 2026] [qos:error] [pid 276059:tid 276150] [remote 201.192.183.139:14485] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=201.192.183.139, id=ary2V3tqdHBwD77138e9YgABslY
[Wed Sep 30 01:12:23.443004 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.443451 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.462077 2026] [security2:error] [pid 276059:tid 276227] [client 13.70.1.101:45266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/tiny.php"] [unique_id "ary2V3tqdHBwD77138e9YwAAAa8"]
[Wed Sep 30 01:12:23.471517 2026] [security2:error] [pid 276620:tid 276866] [client 20.219.2.60:30079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/jga.php"] [unique_id "ary2V9PAdfEWqmGIkg1rnAAAAn8"]
[Wed Sep 30 01:12:23.524608 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.524880 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:35421] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.549230 2026] [qos:error] [pid 276620:tid 276644] [remote 47.187.188.40:33832] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=47.187.188.40, id=ary2V9PAdfEWqmGIkg1roAACUw4
[Wed Sep 30 01:12:23.616247 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.616517 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.623474 2026] [security2:error] [pid 276620:tid 276814] [client 4.240.25.22:43792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/inputs.php"] [unique_id "ary2V9PAdfEWqmGIkg1rogAAAks"]
[Wed Sep 30 01:12:23.640464 2026] [security2:error] [pid 276620:tid 276874] [client 4.240.25.22:8403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/js.php"] [unique_id "ary2V9PAdfEWqmGIkg1rpAAAAoc"]
[Wed Sep 30 01:12:23.698928 2026] [security2:error] [pid 276059:tid 276312] [client 20.194.30.107:17422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/f35.update.php"] [unique_id "ary2V3tqdHBwD77138e9awAAAgQ"]
[Wed Sep 30 01:12:23.706607 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.706913 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.769670 2026] [security2:error] [pid 276620:tid 276779] [client 20.211.90.37:18739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/dex.php"] [unique_id "ary2V9PAdfEWqmGIkg1rqAAAAig"]
[Wed Sep 30 01:12:23.771940 2026] [access_compat:error] [pid 276620:tid 276768] [client 20.162.8.144:53561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.772395 2026] [access_compat:error] [pid 276620:tid 276768] [client 20.162.8.144:53561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.790265 2026] [qos:error] [pid 276059:tid 276065] [remote 152.166.29.243:60516] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=152.166.29.243, id=ary2V3tqdHBwD77138e9bgABuwE
[Wed Sep 30 01:12:23.800051 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.800329 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.803412 2026] [security2:error] [pid 276059:tid 276200] [client 13.70.1.101:58652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/lock.php"] [unique_id "ary2V3tqdHBwD77138e9bwAAAZU"]
[Wed Sep 30 01:12:23.810568 2026] [qos:error] [pid 276059:tid 276073] [remote 69.221.121.246:36842] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=69.221.121.246, id=ary2V3tqdHBwD77138e9cAABuQk
[Wed Sep 30 01:12:23.825963 2026] [access_compat:error] [pid 276059:tid 276213] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:23.826241 2026] [access_compat:error] [pid 276059:tid 276213] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:23.896465 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.896892 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:23.899156 2026] [security2:error] [pid 276620:tid 276866] [client 20.219.14.152:41480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/1Be5IfrlWP.php"] [unique_id "ary2V9PAdfEWqmGIkg1rsAAAAn8"]
[Wed Sep 30 01:12:23.941284 2026] [security2:error] [pid 276620:tid 276805] [client 216.73.216.46:35421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2V9PAdfEWqmGIkg1rsgAAAkI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDM2L25vZGUwL21lbW9yeTM2MQ%3D%3D
[Wed Sep 30 01:12:23.954516 2026] [security2:error] [pid 276620:tid 276810] [client 49.43.163.212:54907] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rsQAAAkc"]
[Wed Sep 30 01:12:23.954676 2026] [security2:error] [pid 276620:tid 276810] [client 49.43.163.212:54907] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2V9PAdfEWqmGIkg1rsQAAAkc"]
[Wed Sep 30 01:12:23.976148 2026] [security2:error] [pid 276620:tid 276870] [client 20.70.173.30:64773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/key.php"] [unique_id "ary2V9PAdfEWqmGIkg1rtQAAAoM"]
[Wed Sep 30 01:12:23.985330 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:23.985767 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.072366 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.072657 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.073194 2026] [qos:error] [pid 276620:tid 276648] [remote 31.216.11.82:51398] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=31.216.11.82, id=ary2WNPAdfEWqmGIkg1ruQACGBI
[Wed Sep 30 01:12:24.163104 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.163154 2026] [security2:error] [pid 276059:tid 276247] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2WHtqdHBwD77138e9dwAAAcM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:24.163423 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.172181 2026] [security2:error] [pid 276620:tid 276768] [client 13.70.1.101:6112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/mail.php"] [unique_id "ary2WNPAdfEWqmGIkg1rvgAAAh0"]
[Wed Sep 30 01:12:24.183290 2026] [mime:warn] [pid 276620:tid 276857] AH01602: Cannot get media parameter.
[Wed Sep 30 01:12:24.212069 2026] [qos:error] [pid 276620:tid 276654] [remote 97.91.244.49:36304] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=97.91.244.49, id=ary2WNPAdfEWqmGIkg1rwwACTxg
[Wed Sep 30 01:12:24.244405 2026] [security2:error] [pid 276620:tid 276866] [client 20.194.5.96:44933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wp5.php"] [unique_id "ary2WNPAdfEWqmGIkg1rxQAAAn8"]
[Wed Sep 30 01:12:24.253737 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.254018 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.319769 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:12:24.320214 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZA==
[Wed Sep 30 01:12:24.346244 2026] [access_compat:error] [pid 276620:tid 276852] [client 20.162.8.144:56449] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-login.php
[Wed Sep 30 01:12:24.350632 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.351065 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.359938 2026] [security2:error] [pid 276059:tid 276220] [client 20.219.14.152:41218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/admin.php/bootstrap.inc.php"] [unique_id "ary2WHtqdHBwD77138e9egAAAag"]
[Wed Sep 30 01:12:24.444694 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.445161 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.481154 2026] [security2:error] [pid 276059:tid 276206] [client 20.28.180.172:61247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/rip.php"] [unique_id "ary2WHtqdHBwD77138e9fQAAAZs"]
[Wed Sep 30 01:12:24.518625 2026] [security2:error] [pid 276620:tid 276765] [client 168.100.149.24:24388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3809d85fdd109c572c0fd40d0855d8d4.6e.css.gz"] [unique_id "ary2WNPAdfEWqmGIkg1r0wACGnM"]
[Wed Sep 30 01:12:24.529614 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.530036 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.569906 2026] [security2:error] [pid 276620:tid 276874] [client 203.122.45.246:62873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2WNPAdfEWqmGIkg1r1QAAAoc"]
[Wed Sep 30 01:12:24.570029 2026] [security2:error] [pid 276620:tid 276874] [client 203.122.45.246:62873] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2WNPAdfEWqmGIkg1r1QAAAoc"]
[Wed Sep 30 01:12:24.618018 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.618289 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.638468 2026] [security2:error] [pid 276620:tid 276786] [client 13.70.1.101:6122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/system_log.php"] [unique_id "ary2WNPAdfEWqmGIkg1r2AAAAi8"]
[Wed Sep 30 01:12:24.647221 2026] [security2:error] [pid 276059:tid 276322] [client 20.211.90.37:18860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/key.php"] [unique_id "ary2WHtqdHBwD77138e9fgAAAg4"]
[Wed Sep 30 01:12:24.663228 2026] [access_compat:error] [pid 276620:tid 276787] [client 20.162.8.144:53101] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/index.php4
[Wed Sep 30 01:12:24.664907 2026] [access_compat:error] [pid 276620:tid 276787] [client 20.162.8.144:53101] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/index.php3
[Wed Sep 30 01:12:24.668166 2026] [access_compat:error] [pid 276620:tid 276787] [client 20.162.8.144:53101] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/index.phtml
[Wed Sep 30 01:12:24.674652 2026] [access_compat:error] [pid 276620:tid 276787] [client 20.162.8.144:53101] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/index.php5
[Wed Sep 30 01:12:24.700589 2026] [security2:error] [pid 276059:tid 276223] [client 168.100.149.78:61014] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/e8b921854473983acf1b211bf3e7c55f.655.css.gz"] [unique_id "ary2WHtqdHBwD77138e9fwABqw4"]
[Wed Sep 30 01:12:24.709045 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.709291 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.718561 2026] [security2:error] [pid 276059:tid 276230] [client 20.70.173.30:38789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/wpxml.php"] [unique_id "ary2WHtqdHBwD77138e9ggAAAbI"]
[Wed Sep 30 01:12:24.745293 2026] [security2:error] [pid 276620:tid 276866] [client 20.28.180.172:29442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/kerang.php"] [unique_id "ary2WNPAdfEWqmGIkg1r3AAAAn8"]
[Wed Sep 30 01:12:24.799574 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.799863 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.822297 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL25ldA==
[Wed Sep 30 01:12:24.822755 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAzL25ldA==
[Wed Sep 30 01:12:24.824280 2026] [security2:error] [pid 276620:tid 276812] [client 20.219.14.152:41876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/admin.php/c.php"] [unique_id "ary2WNPAdfEWqmGIkg1r4gAAAkk"]
[Wed Sep 30 01:12:24.825828 2026] [security2:error] [pid 276059:tid 276231] [client 4.240.25.22:63637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/tool.php"] [unique_id "ary2WHtqdHBwD77138e9hgAAAbM"]
[Wed Sep 30 01:12:24.836188 2026] [security2:error] [pid 276620:tid 276822] [client 104.207.49.176:33519] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2WNPAdfEWqmGIkg1r2gAAAlM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:24.891053 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.891334 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:24.908228 2026] [security2:error] [pid 276059:tid 276239] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2WHtqdHBwD77138e9iAAAAbs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:24.911257 2026] [security2:error] [pid 276059:tid 276197] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2WHtqdHBwD77138e9iQAAAZI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:24.982356 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:24.982641 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.038977 2026] [security2:error] [pid 276059:tid 276253] [client 13.70.1.101:45284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/file.php"] [unique_id "ary2WXtqdHBwD77138e9jwAAAck"]
[Wed Sep 30 01:12:25.073919 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.074185 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.103966 2026] [qos:error] [pid 276059:tid 276140] [remote 67.191.50.63:43732] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=67.191.50.63, id=ary2WXtqdHBwD77138e9kQABwkw
[Wed Sep 30 01:12:25.111484 2026] [security2:error] [pid 276620:tid 276784] [client 20.211.90.37:18850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/kir.php"] [unique_id "ary2WdPAdfEWqmGIkg1r7QAAAi0"]
[Wed Sep 30 01:12:25.164557 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.164834 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.180415 2026] [access_compat:error] [pid 276620:tid 276774] [client 20.162.8.144:56591] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/admin-ajax.php
[Wed Sep 30 01:12:25.212173 2026] [security2:error] [pid 276620:tid 276875] [client 20.194.5.96:44966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/em.php"] [unique_id "ary2WdPAdfEWqmGIkg1r8gAAAog"]
[Wed Sep 30 01:12:25.215542 2026] [security2:error] [pid 276620:tid 276870] [client 4.240.25.22:18638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/wp-login.php"] [unique_id "ary2WdPAdfEWqmGIkg1r8AAAAoM"]
[Wed Sep 30 01:12:25.255287 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.255568 2026] [access_compat:error] [pid 276620:tid 276808] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.256818 2026] [qos:error] [pid 276620:tid 276740] [remote 45.167.95.126:36572] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=45.167.95.126, id=ary2WdPAdfEWqmGIkg1r9AACMm4
[Wed Sep 30 01:12:25.296934 2026] [security2:error] [pid 276059:tid 276211] [client 20.219.14.152:41235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/admin.php/go.php"] [unique_id "ary2WXtqdHBwD77138e9lgAAAZ8"]
[Wed Sep 30 01:12:25.306099 2026] [access_compat:error] [pid 276059:tid 276242] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:25.306372 2026] [access_compat:error] [pid 276059:tid 276242] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2V0Yw==
[Wed Sep 30 01:12:25.346143 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.346413 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.368819 2026] [security2:error] [pid 276620:tid 276634] [remote 47.128.127.177:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "hamaraquetta.com"] [uri "/robots.txt"] [unique_id "ary2WdPAdfEWqmGIkg1r-gACNgQ"]
[Wed Sep 30 01:12:25.400225 2026] [security2:error] [pid 276620:tid 276871] [client 13.70.1.101:6102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary2WdPAdfEWqmGIkg1r-wAAAoQ"]
[Wed Sep 30 01:12:25.447581 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.448016 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.503613 2026] [security2:error] [pid 276620:tid 276818] [client 184.154.139.33:55534] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.alberga.net"] [uri "/cgi-sys/404.html"] [unique_id "ary2WdPAdfEWqmGIkg1sAgAAAk8"]
[Wed Sep 30 01:12:25.528169 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.528448 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.543466 2026] [security2:error] [pid 276620:tid 276812] [client 65.111.26.160:32987] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2WdPAdfEWqmGIkg1r_AAAAkk"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:25.626191 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.626634 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.691452 2026] [access_compat:error] [pid 276059:tid 276278] [client 20.162.8.144:55107] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/install.php
[Wed Sep 30 01:12:25.703365 2026] [security2:error] [pid 276059:tid 276321] [client 20.28.180.172:29441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/local.php"] [unique_id "ary2WXtqdHBwD77138e9owAAAg0"]
[Wed Sep 30 01:12:25.708307 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.708564 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.731751 2026] [security2:error] [pid 276620:tid 276708] [remote 57.141.14.31:37138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/xmlrpc.php"] [unique_id "ary2WdPAdfEWqmGIkg1sCAACQE4"]
[Wed Sep 30 01:12:25.759536 2026] [security2:error] [pid 276620:tid 276793] [client 13.70.1.101:45302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2WdPAdfEWqmGIkg1sDQAAAjY"]
[Wed Sep 30 01:12:25.768150 2026] [security2:error] [pid 276620:tid 276838] [client 20.219.14.152:41234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/groud3.php"] [unique_id "ary2WdPAdfEWqmGIkg1sDwAAAmM"]
[Wed Sep 30 01:12:25.801998 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.802515 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.835152 2026] [security2:error] [pid 276620:tid 276835] [client 20.211.90.37:18707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/fling.php"] [unique_id "ary2WdPAdfEWqmGIkg1sFAAAAmA"]
[Wed Sep 30 01:12:25.840053 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:25.840471 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2V0Yw==
[Wed Sep 30 01:12:25.851344 2026] [security2:error] [pid 276059:tid 276279] [client 20.194.30.107:10119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/admin.php"] [unique_id "ary2WXtqdHBwD77138e9qwAAAeM"]
[Wed Sep 30 01:12:25.891447 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.891734 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.907769 2026] [qos:error] [pid 276620:tid 276753] [remote 68.4.134.131:56846] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=68.4.134.131, id=ary2WdPAdfEWqmGIkg1sFgACdns
[Wed Sep 30 01:12:25.947292 2026] [security2:error] [pid 276059:tid 276219] [client 202.51.87.155:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2WXtqdHBwD77138e9rgAAAac"]
[Wed Sep 30 01:12:25.958796 2026] [security2:error] [pid 276620:tid 276764] [client 122.173.27.10:10066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2WdPAdfEWqmGIkg1sGgAAAhk"]
[Wed Sep 30 01:12:25.958909 2026] [security2:error] [pid 276620:tid 276764] [client 122.173.27.10:10066] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2WdPAdfEWqmGIkg1sGgAAAhk"]
[Wed Sep 30 01:12:25.972650 2026] [access_compat:error] [pid 276620:tid 276778] [client 20.162.8.144:64393] AH01797: client denied by server configuration: /home3/homscoke/public_html/wp-admin/upgrade.php
[Wed Sep 30 01:12:25.979492 2026] [security2:error] [pid 276620:tid 276866] [client 20.70.173.30:38867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/media.php"] [unique_id "ary2WdPAdfEWqmGIkg1sHQAAAn8"]
[Wed Sep 30 01:12:25.982142 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:25.982444 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:25.984354 2026] [security2:error] [pid 276620:tid 276856] [client 182.69.182.151:32609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2WdPAdfEWqmGIkg1sHwAAAnU"]
[Wed Sep 30 01:12:25.985108 2026] [security2:error] [pid 276620:tid 276856] [client 182.69.182.151:32609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2WdPAdfEWqmGIkg1sHwAAAnU"]
[Wed Sep 30 01:12:25.986330 2026] [security2:error] [pid 276059:tid 276228] [client 20.194.5.96:59189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/hp.php"] [unique_id "ary2WXtqdHBwD77138e9sAAAAbA"]
[Wed Sep 30 01:12:26.013068 2026] [security2:error] [pid 276059:tid 276200] [client 69.57.172.4:42736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "japaneseclassicmotorcycles.com"] [uri "/wp-login.php"] [unique_id "ary2WntqdHBwD77138e9sQAAAZU"], referer: https://japaneseclassicmotorcycles.com/wp-login.php
[Wed Sep 30 01:12:26.030790 2026] [security2:error] [pid 276059:tid 276237] [client 20.219.2.60:30356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/fs.php"] [unique_id "ary2WntqdHBwD77138e9sgAAAbk"]
[Wed Sep 30 01:12:26.039668 2026] [qos:error] [pid 276059:tid 276143] [remote 172.56.167.31:4511] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.56.167.31, id=ary2WntqdHBwD77138e9swAB-E8
[Wed Sep 30 01:12:26.075326 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.075614 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.113359 2026] [security2:error] [pid 276620:tid 276814] [client 20.70.173.30:25396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/baru.php"] [unique_id "ary2WtPAdfEWqmGIkg1sIQAAAks"]
[Wed Sep 30 01:12:26.134306 2026] [security2:error] [pid 276620:tid 276803] [client 13.70.1.101:6121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/manager.php"] [unique_id "ary2WtPAdfEWqmGIkg1sIgAAAkA"]
[Wed Sep 30 01:12:26.165327 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.165713 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.242078 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.14.152:41504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/gaxby.php"] [unique_id "ary2WtPAdfEWqmGIkg1sJQAAAoQ"]
[Wed Sep 30 01:12:26.262777 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.263356 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.347764 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.348082 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.407968 2026] [qos:error] [pid 276620:tid 276684] [remote 209.173.195.206:62969] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=209.173.195.206, id=ary2WtPAdfEWqmGIkg1sLgACJzY
[Wed Sep 30 01:12:26.443651 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.444072 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.472714 2026] [security2:error] [pid 276059:tid 276255] [client 20.194.30.107:9998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/inputs.php"] [unique_id "ary2WntqdHBwD77138e9tgAAAcs"]
[Wed Sep 30 01:12:26.495832 2026] [security2:error] [pid 276620:tid 276790] [client 13.70.1.101:45251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/plugins/pwnd/as.php"] [unique_id "ary2WtPAdfEWqmGIkg1sMQAAAjM"]
[Wed Sep 30 01:12:26.530301 2026] [access_compat:error] [pid 276059:tid 276280] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.530565 2026] [access_compat:error] [pid 276059:tid 276280] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.539789 2026] [security2:error] [pid 276059:tid 276263] [client 68.167.73.233:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2WntqdHBwD77138e9uQAAAdM"]
[Wed Sep 30 01:12:26.611885 2026] [security2:error] [pid 276620:tid 276847] [client 20.211.90.37:19343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/btyuio.php"] [unique_id "ary2WtPAdfEWqmGIkg1sNAAAAmw"]
[Wed Sep 30 01:12:26.640485 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.640760 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.710062 2026] [security2:error] [pid 276620:tid 276765] [client 20.219.14.152:41861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/dh9u7.php"] [unique_id "ary2WtPAdfEWqmGIkg1sNwAAAho"]
[Wed Sep 30 01:12:26.710317 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.710592 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.722554 2026] [security2:error] [pid 276620:tid 276792] [client 168.100.149.98:43204] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/fb2b3abf0b2df0f862e05a4e370c3d84.658a.css.gz"] [unique_id "ary2WtPAdfEWqmGIkg1sOAACNQA"]
[Wed Sep 30 01:12:26.800984 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.801238 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.892753 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.893046 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.924640 2026] [security2:error] [pid 276059:tid 276292] [client 202.179.95.79:62467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2WntqdHBwD77138e9yQAAAfA"]
[Wed Sep 30 01:12:26.924761 2026] [security2:error] [pid 276059:tid 276292] [client 202.179.95.79:62467] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2WntqdHBwD77138e9yQAAAfA"]
[Wed Sep 30 01:12:26.962754 2026] [security2:error] [pid 276620:tid 276778] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2WtPAdfEWqmGIkg1sQAAAAic"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:26.984299 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:26.984690 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:26.991620 2026] [security2:error] [pid 276059:tid 276245] [client 13.70.1.101:58685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-configs.php"] [unique_id "ary2WntqdHBwD77138e9zAAAAcE"]
[Wed Sep 30 01:12:27.071514 2026] [security2:error] [pid 276620:tid 276816] [client 20.194.30.107:22990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/chosen.php"] [unique_id "ary2W9PAdfEWqmGIkg1sRQAAAk0"]
[Wed Sep 30 01:12:27.074170 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.074654 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.076172 2026] [security2:error] [pid 276620:tid 276670] [remote 57.141.14.6:63156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/wp-json/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "ary2W9PAdfEWqmGIkg1sQgAChig"]
[Wed Sep 30 01:12:27.088302 2026] [security2:error] [pid 276620:tid 276875] [client 20.70.173.30:33316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/about.php"] [unique_id "ary2W9PAdfEWqmGIkg1sRgAAAog"]
[Wed Sep 30 01:12:27.165462 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.165773 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.177511 2026] [security2:error] [pid 276620:tid 276805] [client 20.219.14.152:41505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/yvnqcuic.php"] [unique_id "ary2W9PAdfEWqmGIkg1sSgAAAkI"]
[Wed Sep 30 01:12:27.205824 2026] [qos:error] [pid 276620:tid 276878] [client 129.222.135.137:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2W9PAdfEWqmGIkg1sTwAAAos
[Wed Sep 30 01:12:27.206816 2026] [security2:error] [pid 276059:tid 276320] [client 201.80.0.227:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/software/solid-works-software"] [unique_id "ary2W3tqdHBwD77138e90QAAAgw"]
[Wed Sep 30 01:12:27.206918 2026] [security2:error] [pid 276620:tid 276793] [client 20.194.30.107:28476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/reop3.php"] [unique_id "ary2W9PAdfEWqmGIkg1sUAAAAjY"]
[Wed Sep 30 01:12:27.255585 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.255857 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.261049 2026] [security2:error] [pid 276059:tid 276228] [client 4.240.25.22:33341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/f35.php"] [unique_id "ary2W3tqdHBwD77138e91gAAAbA"]
[Wed Sep 30 01:12:27.348446 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.348715 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.351110 2026] [access_compat:error] [pid 276059:tid 276237] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 01:12:27.351394 2026] [access_compat:error] [pid 276059:tid 276237] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzU5MjI2L25ldA==
[Wed Sep 30 01:12:27.384463 2026] [security2:error] [pid 276620:tid 276856] [client 181.44.168.39:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2W9PAdfEWqmGIkg1sWAAAAnU"]
[Wed Sep 30 01:12:27.385124 2026] [security2:error] [pid 276059:tid 276254] [client 13.70.1.101:6130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary2W3tqdHBwD77138e92wAAAco"]
[Wed Sep 30 01:12:27.448123 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.448576 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.480024 2026] [qos:error] [pid 276059:tid 276177] [remote 170.233.82.188:62449] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=170.233.82.188, id=ary2W3tqdHBwD77138e93wAB7XE
[Wed Sep 30 01:12:27.529887 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.530130 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.553839 2026] [qos:error] [pid 276059:tid 276071] [remote 196.3.217.72:53254] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=196.3.217.72, id=ary2W3tqdHBwD77138e94QABzwc
[Wed Sep 30 01:12:27.562040 2026] [security2:error] [pid 276620:tid 276793] [client 4.240.25.22:41700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/one.php"] [unique_id "ary2W9PAdfEWqmGIkg1sYQAAAjY"]
[Wed Sep 30 01:12:27.563223 2026] [security2:error] [pid 276620:tid 276878] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2W9PAdfEWqmGIkg1sYAAAAos"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:27.620353 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.620640 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.645503 2026] [security2:error] [pid 276620:tid 276814] [client 20.211.90.37:18828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/sm.php"] [unique_id "ary2W9PAdfEWqmGIkg1sYwAAAks"]
[Wed Sep 30 01:12:27.661005 2026] [security2:error] [pid 276620:tid 276855] [client 20.219.14.152:41496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/koiy.php"] [unique_id "ary2W9PAdfEWqmGIkg1sZAAAAnQ"]
[Wed Sep 30 01:12:27.711124 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.711399 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.711758 2026] [security2:error] [pid 276620:tid 276769] [client 20.70.173.30:5774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/BDKR28WP.php"] [unique_id "ary2W9PAdfEWqmGIkg1saQAAAh4"]
[Wed Sep 30 01:12:27.758665 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.1.101:45261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary2W9PAdfEWqmGIkg1sbQAAAn0"]
[Wed Sep 30 01:12:27.759002 2026] [security2:error] [pid 276620:tid 276835] [client 20.194.5.96:64451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wpuse.php"] [unique_id "ary2W9PAdfEWqmGIkg1sbgAAAmA"]
[Wed Sep 30 01:12:27.802127 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.802393 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:22937] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.826517 2026] [security2:error] [pid 276620:tid 276856] [client 4.240.25.22:8899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/echkm.php"] [unique_id "ary2W9PAdfEWqmGIkg1sdgAAAnU"]
[Wed Sep 30 01:12:27.893189 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.893455 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:27.949702 2026] [qos:error] [pid 276059:tid 276089] [remote 170.250.19.171:33210] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=170.250.19.171, id=ary2W3tqdHBwD77138e95wAB_hk
[Wed Sep 30 01:12:27.984130 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:27.984408 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.018175 2026] [security2:error] [pid 276620:tid 276828] [client 4.240.25.22:18758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/wsd.php"] [unique_id "ary2XNPAdfEWqmGIkg1seQAAAlk"]
[Wed Sep 30 01:12:28.065436 2026] [security2:error] [pid 276059:tid 276321] [client 20.28.180.172:30006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/Jcrop.php"] [unique_id "ary2XHtqdHBwD77138e96gAAAg0"]
[Wed Sep 30 01:12:28.073367 2026] [security2:error] [pid 276620:tid 276838] [client 13.70.1.101:6134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary2XNPAdfEWqmGIkg1segAAAmM"]
[Wed Sep 30 01:12:28.078647 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.079099 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.091485 2026] [security2:error] [pid 276620:tid 276793] [client 20.211.90.37:18696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/a.php"] [unique_id "ary2XNPAdfEWqmGIkg1sewAAAjY"]
[Wed Sep 30 01:12:28.125595 2026] [security2:error] [pid 276059:tid 276203] [client 20.219.14.152:41495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wordfence-waf.php"] [unique_id "ary2XHtqdHBwD77138e97QAAAZg"]
[Wed Sep 30 01:12:28.126873 2026] [security2:error] [pid 276620:tid 276805] [client 20.194.30.107:17446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary2XNPAdfEWqmGIkg1sfAAAAkI"]
[Wed Sep 30 01:12:28.155047 2026] [security2:error] [pid 276620:tid 276784] [client 20.70.173.30:62349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/a.php"] [unique_id "ary2XNPAdfEWqmGIkg1sfwAAAi0"]
[Wed Sep 30 01:12:28.167061 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.167319 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.188518 2026] [security2:error] [pid 276620:tid 276768] [client 155.190.6.18:57362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2XNPAdfEWqmGIkg1sgQAAAh0"]
[Wed Sep 30 01:12:28.188626 2026] [security2:error] [pid 276620:tid 276768] [client 155.190.6.18:57362] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2XNPAdfEWqmGIkg1sgQAAAh0"]
[Wed Sep 30 01:12:28.196798 2026] [security2:error] [pid 276059:tid 276281] [client 85.204.70.116:45090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2XHtqdHBwD77138e98AAAAeU"]
[Wed Sep 30 01:12:28.207384 2026] [security2:error] [pid 276620:tid 276814] [client 216.73.216.46:22937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2XNPAdfEWqmGIkg1sggAAAks"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MTcy
[Wed Sep 30 01:12:28.261219 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.261492 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.347483 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.347763 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.390112 2026] [security2:error] [pid 276059:tid 276311] [client 74.7.242.1:39322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2XHtqdHBwD77138e99gAAAgM"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:12:28.430826 2026] [security2:error] [pid 276059:tid 276236] [client 13.70.1.101:5293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/index/fucku.php"] [unique_id "ary2XHtqdHBwD77138e9-AAAAbg"]
[Wed Sep 30 01:12:28.446388 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.446870 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.483463 2026] [security2:error] [pid 276059:tid 276276] [client 85.204.70.116:45106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary2XHtqdHBwD77138e9-gAAAeA"]
[Wed Sep 30 01:12:28.506984 2026] [security2:error] [pid 276620:tid 276875] [client 103.211.18.63:62546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2XNPAdfEWqmGIkg1siAAAAog"]
[Wed Sep 30 01:12:28.507119 2026] [security2:error] [pid 276620:tid 276875] [client 103.211.18.63:62546] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2XNPAdfEWqmGIkg1siAAAAog"]
[Wed Sep 30 01:12:28.513186 2026] [security2:error] [pid 276620:tid 276822] [client 20.211.90.37:19377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/sb.php"] [unique_id "ary2XNPAdfEWqmGIkg1siQAAAlM"]
[Wed Sep 30 01:12:28.559934 2026] [security2:error] [pid 276620:tid 276782] [client 20.194.30.107:23179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/log.php"] [unique_id "ary2XNPAdfEWqmGIkg1sigAAAis"]
[Wed Sep 30 01:12:28.585659 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.585933 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.587550 2026] [security2:error] [pid 276059:tid 276275] [client 20.219.14.152:41526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wp5.php"] [unique_id "ary2XHtqdHBwD77138e9_QAAAd8"]
[Wed Sep 30 01:12:28.625789 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.626545 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.703531 2026] [security2:error] [pid 276620:tid 276838] [client 168.100.149.242:22960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/1a219adfd099b6da33ceafc5e46a31ca.340.css.gz"] [unique_id "ary2XNPAdfEWqmGIkg1sjAACYz8"]
[Wed Sep 30 01:12:28.715948 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.716212 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.743042 2026] [security2:error] [pid 276059:tid 276234] [client 213.136.69.135:51923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "ary2XHtqdHBwD77138e-AgAAAbY"], referer: binance.com
[Wed Sep 30 01:12:28.805767 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.806043 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.823598 2026] [security2:error] [pid 276059:tid 276319] [client 13.70.1.101:45297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/upload/wp-info.php"] [unique_id "ary2XHtqdHBwD77138e-BgAAAgs"]
[Wed Sep 30 01:12:28.828340 2026] [security2:error] [pid 276620:tid 276835] [client 20.70.173.30:19167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2XNPAdfEWqmGIkg1slAAAAmA"]
[Wed Sep 30 01:12:28.836824 2026] [access_compat:error] [pid 276059:tid 276198] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:12:28.837141 2026] [access_compat:error] [pid 276059:tid 276198] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:12:28.884922 2026] [security2:error] [pid 276059:tid 276316] [client 209.139.90.38:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2XHtqdHBwD77138e-CQAAAgg"]
[Wed Sep 30 01:12:28.897216 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.897497 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:28.927177 2026] [security2:error] [pid 276620:tid 276842] [client 85.204.70.116:45110] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2XNPAdfEWqmGIkg1smQAAAmc"]
[Wed Sep 30 01:12:28.943913 2026] [security2:error] [pid 276059:tid 276298] [client 20.28.180.172:29607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/php8.php"] [unique_id "ary2XHtqdHBwD77138e-CwAAAfY"]
[Wed Sep 30 01:12:28.960743 2026] [security2:error] [pid 276059:tid 276287] [client 20.211.90.37:19334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/av.php"] [unique_id "ary2XHtqdHBwD77138e-DAAAAes"]
[Wed Sep 30 01:12:28.989258 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:28.989511 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.063775 2026] [security2:error] [pid 276059:tid 276299] [client 20.219.14.152:41500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/em.php"] [unique_id "ary2XXtqdHBwD77138e-EgAAAfc"]
[Wed Sep 30 01:12:29.082128 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.082550 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.086863 2026] [security2:error] [pid 276059:tid 276302] [client 4.240.25.22:44365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/az.php"] [unique_id "ary2XXtqdHBwD77138e-FgAAAfo"]
[Wed Sep 30 01:12:29.096402 2026] [security2:error] [pid 276059:tid 276306] [client 4.240.25.22:41682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/222.php"] [unique_id "ary2XXtqdHBwD77138e-FwAAAf4"]
[Wed Sep 30 01:12:29.160282 2026] [security2:error] [pid 276059:tid 276321] [client 13.70.1.101:5820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/post.php"] [unique_id "ary2XXtqdHBwD77138e-GAAAAg0"]
[Wed Sep 30 01:12:29.176689 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.176988 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.211577 2026] [security2:error] [pid 276059:tid 276309] [client 85.204.70.116:45120] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2XXtqdHBwD77138e-HAAAAgE"]
[Wed Sep 30 01:12:29.269349 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.269637 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.288277 2026] [security2:error] [pid 276059:tid 276246] [client 20.194.5.96:55452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/sm.php"] [unique_id "ary2XXtqdHBwD77138e-IAAAAcI"]
[Wed Sep 30 01:12:29.300843 2026] [qos:error] [pid 276620:tid 276723] [remote 71.188.124.5:51108] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.188.124.5, id=ary2XdPAdfEWqmGIkg1spAACi10
[Wed Sep 30 01:12:29.309085 2026] [qos:error] [pid 276620:tid 276683] [remote 67.167.151.204:55872] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=67.167.151.204, id=ary2XdPAdfEWqmGIkg1spQACHTU
[Wed Sep 30 01:12:29.338777 2026] [security2:error] [pid 276620:tid 276829] [client 106.214.2.47:8998] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2XdPAdfEWqmGIkg1spgAAAlo"]
[Wed Sep 30 01:12:29.358262 2026] [security2:error] [pid 276620:tid 276829] [client 106.214.2.47:8998] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2XdPAdfEWqmGIkg1spgAAAlo"]
[Wed Sep 30 01:12:29.361487 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.361939 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.455525 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.455970 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.490596 2026] [security2:error] [pid 276620:tid 276855] [client 94.176.59.94:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2XdPAdfEWqmGIkg1sqQAAAnQ"]
[Wed Sep 30 01:12:29.495666 2026] [security2:error] [pid 276620:tid 276806] [client 85.204.70.116:45122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2XdPAdfEWqmGIkg1sqgAAAkM"]
[Wed Sep 30 01:12:29.528846 2026] [security2:error] [pid 276059:tid 276267] [client 20.211.90.37:18870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/b8.php"] [unique_id "ary2XXtqdHBwD77138e-JAAAAdc"]
[Wed Sep 30 01:12:29.532087 2026] [security2:error] [pid 276620:tid 276885] [client 20.219.14.152:41259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/hp.php"] [unique_id "ary2XdPAdfEWqmGIkg1sqwAAApI"]
[Wed Sep 30 01:12:29.540621 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.540886 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.562953 2026] [security2:error] [pid 276620:tid 276814] [client 13.70.1.101:5762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary2XdPAdfEWqmGIkg1srAAAAks"]
[Wed Sep 30 01:12:29.629772 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.630033 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.646002 2026] [security2:error] [pid 276620:tid 276689] [remote 57.141.14.90:39558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "ary2XdPAdfEWqmGIkg1srQACTTs"]
[Wed Sep 30 01:12:29.726068 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.726349 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.733592 2026] [security2:error] [pid 276620:tid 276873] [client 20.28.180.172:18149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/new4.php"] [unique_id "ary2XdPAdfEWqmGIkg1ssgAAAoY"]
[Wed Sep 30 01:12:29.792959 2026] [security2:error] [pid 276620:tid 276812] [client 85.204.70.116:45136] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2XdPAdfEWqmGIkg1stAAAAkk"]
[Wed Sep 30 01:12:29.818664 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.818952 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.846240 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL25ldA==
[Wed Sep 30 01:12:29.846521 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyMzkwL25ldA==
[Wed Sep 30 01:12:29.891852 2026] [security2:error] [pid 276059:tid 276255] [client 13.70.1.101:5815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/adminfuns.php"] [unique_id "ary2XXtqdHBwD77138e-NQAAAcs"]
[Wed Sep 30 01:12:29.919801 2026] [security2:error] [pid 276620:tid 276878] [client 20.194.30.107:17492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-blog-header.php"] [unique_id "ary2XdPAdfEWqmGIkg1stQAAAos"]
[Wed Sep 30 01:12:29.926791 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:29.927066 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:29.929984 2026] [security2:error] [pid 276059:tid 276259] [client 20.28.180.172:29953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/coffe.php"] [unique_id "ary2XXtqdHBwD77138e-NwAAAc8"]
[Wed Sep 30 01:12:29.944194 2026] [security2:error] [pid 276620:tid 276838] [client 20.219.2.60:30371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/byypas.php"] [unique_id "ary2XdPAdfEWqmGIkg1stgAAAmM"]
[Wed Sep 30 01:12:30.017902 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.018191 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.022076 2026] [security2:error] [pid 276059:tid 276263] [client 20.219.14.152:41914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/wpuse.php"] [unique_id "ary2XntqdHBwD77138e-OgAAAdM"]
[Wed Sep 30 01:12:30.098455 2026] [security2:error] [pid 276059:tid 276306] [client 85.204.70.116:45152] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2XntqdHBwD77138e-OwAAAf4"]
[Wed Sep 30 01:12:30.109192 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.109469 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.159304 2026] [security2:error] [pid 276620:tid 276875] [client 20.211.90.37:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2XtPAdfEWqmGIkg1suQAAAog"]
[Wed Sep 30 01:12:30.188165 2026] [security2:error] [pid 276059:tid 276206] [client 20.194.5.96:55447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/mknobgkg.php"] [unique_id "ary2XntqdHBwD77138e-PwAAAZs"]
[Wed Sep 30 01:12:30.197533 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.197788 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.257099 2026] [qos:error] [pid 276620:tid 276711] [remote 201.97.68.3:40906] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=201.97.68.3, id=ary2XtPAdfEWqmGIkg1svQACdFE
[Wed Sep 30 01:12:30.266894 2026] [security2:error] [pid 276059:tid 276266] [client 13.70.1.101:5822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/about.php"] [unique_id "ary2XntqdHBwD77138e-RgAAAdY"]
[Wed Sep 30 01:12:30.289466 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.289739 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.372700 2026] [security2:error] [pid 276620:tid 276864] [client 4.240.25.22:8402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ccc.php"] [unique_id "ary2XtPAdfEWqmGIkg1swQAAAn0"]
[Wed Sep 30 01:12:30.379035 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 01:12:30.379471 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 01:12:30.390116 2026] [security2:error] [pid 276059:tid 276320] [client 85.204.70.116:1615] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2XntqdHBwD77138e-TQAAAgw"]
[Wed Sep 30 01:12:30.423291 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.423749 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.433119 2026] [security2:error] [pid 276059:tid 276267] [client 20.204.42.136:35722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/ccc.php"] [unique_id "ary2XntqdHBwD77138e-UAAAAdc"]
[Wed Sep 30 01:12:30.463844 2026] [security2:error] [pid 276059:tid 276275] [client 4.240.25.22:18792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/dronishness.php"] [unique_id "ary2XntqdHBwD77138e-UgAAAd8"]
[Wed Sep 30 01:12:30.469130 2026] [security2:error] [pid 276620:tid 276717] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2XtPAdfEWqmGIkg1swwACklc"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D20458
[Wed Sep 30 01:12:30.481692 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.482158 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.496703 2026] [security2:error] [pid 276620:tid 276837] [client 20.219.14.152:41224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/file18x.php"] [unique_id "ary2XtPAdfEWqmGIkg1sxQAAAmI"]
[Wed Sep 30 01:12:30.530354 2026] [security2:error] [pid 276059:tid 276247] [client 173.254.248.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2XntqdHBwD77138e-VQAAAcM"]
[Wed Sep 30 01:12:30.586554 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.586824 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.608705 2026] [security2:error] [pid 276059:tid 276230] [client 13.70.1.101:6141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/BDKR28WP.php"] [unique_id "ary2XntqdHBwD77138e-WAAAAbI"]
[Wed Sep 30 01:12:30.615412 2026] [security2:error] [pid 276620:tid 276766] [client 20.211.90.37:18820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/0.php"] [unique_id "ary2XtPAdfEWqmGIkg1syQAAAhs"]
[Wed Sep 30 01:12:30.681941 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.681996 2026] [security2:error] [pid 276620:tid 276861] [client 85.204.70.116:42048] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2XtPAdfEWqmGIkg1sywAAAno"]
[Wed Sep 30 01:12:30.682387 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.696286 2026] [security2:error] [pid 276059:tid 276277] [client 168.100.149.219:31870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/1112fe3b06c4c993baabd9caa259fa75.24.css.gz"] [unique_id "ary2XntqdHBwD77138e-WwAB4WQ"]
[Wed Sep 30 01:12:30.707484 2026] [security2:error] [pid 276620:tid 276765] [client 20.194.5.96:44990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/dairg.php"] [unique_id "ary2XtPAdfEWqmGIkg1szQAAAho"]
[Wed Sep 30 01:12:30.769210 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.769504 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.789414 2026] [security2:error] [pid 276620:tid 276816] [client 20.70.173.30:25162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/m.php"] [unique_id "ary2XtPAdfEWqmGIkg1s3AAAAk0"]
[Wed Sep 30 01:12:30.849278 2026] [access_compat:error] [pid 276059:tid 276214] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL25ldA==
[Wed Sep 30 01:12:30.849733 2026] [access_compat:error] [pid 276059:tid 276214] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzAzL25ldA==
[Wed Sep 30 01:12:30.860604 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.860929 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.910495 2026] [qos:error] [pid 276620:tid 276728] [remote 79.53.155.50:60182] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=79.53.155.50, id=ary2XtPAdfEWqmGIkg1s5QACMGI
[Wed Sep 30 01:12:30.937302 2026] [security2:error] [pid 276620:tid 276750] [remote 57.141.14.105:49602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary2XtPAdfEWqmGIkg1s4QACQng"]
[Wed Sep 30 01:12:30.950349 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:30.950635 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:30.961175 2026] [security2:error] [pid 276620:tid 276806] [client 191.36.188.180:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2XtPAdfEWqmGIkg1s5wAAAkM"]
[Wed Sep 30 01:12:30.961176 2026] [security2:error] [pid 276059:tid 276227] [client 181.164.106.146:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2XntqdHBwD77138e-awAAAa8"]
[Wed Sep 30 01:12:30.965516 2026] [qos:error] [pid 276059:tid 276175] [remote 186.82.85.218:23334] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=186.82.85.218, id=ary2XntqdHBwD77138e-bAABrG8
[Wed Sep 30 01:12:30.969968 2026] [security2:error] [pid 276620:tid 276822] [client 20.219.14.152:41524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/123viva.php"] [unique_id "ary2XtPAdfEWqmGIkg1s6AAAAlM"]
[Wed Sep 30 01:12:30.973898 2026] [security2:error] [pid 276059:tid 276211] [client 13.70.1.101:5801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/file5.php"] [unique_id "ary2XntqdHBwD77138e-bQAAAZ8"]
[Wed Sep 30 01:12:30.980970 2026] [security2:error] [pid 276059:tid 276281] [client 152.56.240.85:50074] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2XntqdHBwD77138e-bgAAAeU"]
[Wed Sep 30 01:12:30.981072 2026] [security2:error] [pid 276059:tid 276281] [client 152.56.240.85:50074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2XntqdHBwD77138e-bgAAAeU"]
[Wed Sep 30 01:12:30.993942 2026] [security2:error] [pid 276620:tid 276766] [client 85.204.70.116:7629] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2XtPAdfEWqmGIkg1s6gAAAhs"]
[Wed Sep 30 01:12:31.000883 2026] [qos:error] [pid 276620:tid 276725] [remote 172.58.212.22:1303] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.58.212.22, id=ary2XtPAdfEWqmGIkg1s6wACj18
[Wed Sep 30 01:12:31.009566 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:29924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/b.php"] [unique_id "ary2X9PAdfEWqmGIkg1s7AAAAkE"]
[Wed Sep 30 01:12:31.040486 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.040729 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.052454 2026] [security2:error] [pid 276620:tid 276849] [client 20.211.90.37:18837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/fms.php"] [unique_id "ary2X9PAdfEWqmGIkg1s7QAAAm4"]
[Wed Sep 30 01:12:31.103267 2026] [security2:error] [pid 276059:tid 276276] [client 45.138.12.32:47370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lvv.xqt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2X3tqdHBwD77138e-cQAAAeA"]
[Wed Sep 30 01:12:31.107562 2026] [qos:error] [pid 276059:tid 276107] [remote 67.233.154.11:56518] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=67.233.154.11, id=ary2X3tqdHBwD77138e-cgAB3ys
[Wed Sep 30 01:12:31.131764 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.132022 2026] [access_compat:error] [pid 276059:tid 276322] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.160492 2026] [security2:error] [pid 276620:tid 276858] [client 103.241.204.139:64647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2X9PAdfEWqmGIkg1s7wAAAnc"]
[Wed Sep 30 01:12:31.160608 2026] [security2:error] [pid 276620:tid 276858] [client 103.241.204.139:64647] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2X9PAdfEWqmGIkg1s7wAAAnc"]
[Wed Sep 30 01:12:31.222208 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.222490 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.276484 2026] [security2:error] [pid 276059:tid 276247] [client 85.204.70.116:43663] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2X3tqdHBwD77138e-dgAAAcM"]
[Wed Sep 30 01:12:31.314922 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.315185 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.339742 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:31.340018 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:31.349675 2026] [security2:error] [pid 276620:tid 276812] [client 45.138.12.44:38978] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.aynabeautystudio.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2X9PAdfEWqmGIkg1s-wAAAkk"]
[Wed Sep 30 01:12:31.376172 2026] [security2:error] [pid 276059:tid 276200] [client 13.70.1.101:45292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/b8.php"] [unique_id "ary2X3tqdHBwD77138e-eQAAAZU"]
[Wed Sep 30 01:12:31.416272 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.416759 2026] [access_compat:error] [pid 276059:tid 276237] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.460118 2026] [security2:error] [pid 276059:tid 276319] [client 20.219.14.152:41894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.14.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bradgoreski.co"] [uri "/Components.update.php"] [unique_id "ary2X3tqdHBwD77138e-fAAAAgs"]
[Wed Sep 30 01:12:31.467387 2026] [security2:error] [pid 276059:tid 276316] [client 20.211.90.37:18838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/xyn.php"] [unique_id "ary2X3tqdHBwD77138e-fQAAAgg"]
[Wed Sep 30 01:12:31.481566 2026] [security2:error] [pid 276620:tid 276838] [client 4.240.25.22:33327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/about.php"] [unique_id "ary2X9PAdfEWqmGIkg1s_wAAAmM"]
[Wed Sep 30 01:12:31.485744 2026] [ssl:error] [pid 276059:tid 276300] [client 216.25.124.25:40225] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname takeme2turkey.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:12:31.498910 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.499258 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.558079 2026] [security2:error] [pid 276620:tid 276849] [client 85.204.70.116:45198] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2X9PAdfEWqmGIkg1tAwAAAm4"]
[Wed Sep 30 01:12:31.594733 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.595169 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.653861 2026] [security2:error] [pid 276620:tid 276814] [client 37.41.16.35:51163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2X9PAdfEWqmGIkg1tBAAAAks"]
[Wed Sep 30 01:12:31.653980 2026] [security2:error] [pid 276620:tid 276814] [client 37.41.16.35:51163] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2X9PAdfEWqmGIkg1tBAAAAks"]
[Wed Sep 30 01:12:31.667353 2026] [security2:error] [pid 276059:tid 276077] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2X3tqdHBwD77138e-ggAB8g0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=284794&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:12:31.667391 2026] [security2:error] [pid 276059:tid 276077] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2X3tqdHBwD77138e-ggAB8g0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=284794&sid=1ee1ce7283719a2921ed61606610115e
[Wed Sep 30 01:12:31.680205 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.680466 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.687195 2026] [security2:error] [pid 276620:tid 276768] [client 20.219.2.60:30375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws49.php"] [unique_id "ary2X9PAdfEWqmGIkg1tBQAAAh0"]
[Wed Sep 30 01:12:31.717624 2026] [security2:error] [pid 276620:tid 276873] [client 20.28.180.172:29584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/zpslrqry.php"] [unique_id "ary2X9PAdfEWqmGIkg1tBwAAAoY"]
[Wed Sep 30 01:12:31.766771 2026] [security2:error] [pid 276620:tid 276769] [client 20.194.30.107:23219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/wp-the.php"] [unique_id "ary2X9PAdfEWqmGIkg1tDAAAAh4"]
[Wed Sep 30 01:12:31.769661 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.769942 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.806221 2026] [security2:error] [pid 276059:tid 276321] [client 20.211.90.37:18736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/min.php"] [unique_id "ary2X3tqdHBwD77138e-hwAAAg0"]
[Wed Sep 30 01:12:31.815597 2026] [security2:error] [pid 276059:tid 276245] [client 13.70.1.101:58640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/133.php"] [unique_id "ary2X3tqdHBwD77138e-iAAAAcE"]
[Wed Sep 30 01:12:31.844780 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAxL25ldA==
[Wed Sep 30 01:12:31.845156 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvODkyNDAxL25ldA==
[Wed Sep 30 01:12:31.865419 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.865684 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.866726 2026] [security2:error] [pid 276059:tid 276297] [client 85.204.70.116:45206] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2X3tqdHBwD77138e-jAAAAfU"]
[Wed Sep 30 01:12:31.957004 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:31.957323 2026] [access_compat:error] [pid 276059:tid 276302] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:31.959068 2026] [security2:error] [pid 276620:tid 276856] [client 187.132.243.225:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2X9PAdfEWqmGIkg1tEQAAAnU"]
[Wed Sep 30 01:12:32.047543 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.047796 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.111655 2026] [security2:error] [pid 276620:tid 276873] [client 20.194.30.107:10038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/one.php"] [unique_id "ary2YNPAdfEWqmGIkg1tHQAAAoY"]
[Wed Sep 30 01:12:32.139017 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.139264 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.150549 2026] [security2:error] [pid 276620:tid 276829] [client 85.204.70.116:45214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2YNPAdfEWqmGIkg1tHwAAAlo"]
[Wed Sep 30 01:12:32.190786 2026] [security2:error] [pid 276620:tid 276816] [client 20.211.90.37:18714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-whe.php"] [unique_id "ary2YNPAdfEWqmGIkg1tIAAAAk0"]
[Wed Sep 30 01:12:32.207208 2026] [security2:error] [pid 276620:tid 276826] [client 13.70.1.101:5794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/ano.php"] [unique_id "ary2YNPAdfEWqmGIkg1tIQAAAlc"]
[Wed Sep 30 01:12:32.213548 2026] [security2:error] [pid 276620:tid 276805] [client 4.240.25.22:46298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/133.php"] [unique_id "ary2YNPAdfEWqmGIkg1tIwAAAkI"]
[Wed Sep 30 01:12:32.230795 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.231075 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.286160 2026] [qos:error] [pid 276059:tid 276312] [client 38.252.236.47:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2YHtqdHBwD77138e-lgAAAgQ
[Wed Sep 30 01:12:32.322670 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.323162 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.334535 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:12:32.334950 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:12:32.425990 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.426443 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.434755 2026] [security2:error] [pid 276059:tid 276237] [client 85.204.70.116:44058] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2YHtqdHBwD77138e-mgAAAbk"]
[Wed Sep 30 01:12:32.515967 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.516430 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.518521 2026] [access_compat:error] [pid 276620:tid 276885] [client 47.79.13.58:39912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:32.518931 2026] [access_compat:error] [pid 276620:tid 276885] [client 47.79.13.58:39912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:32.532132 2026] [security2:error] [pid 276620:tid 276878] [client 20.211.90.37:18844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-filemanager1.php"] [unique_id "ary2YNPAdfEWqmGIkg1tNwAAAos"]
[Wed Sep 30 01:12:32.535585 2026] [access_compat:error] [pid 276620:tid 276792] [client 47.79.13.71:55024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:32.535893 2026] [access_compat:error] [pid 276620:tid 276792] [client 47.79.13.71:55024] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:32.579091 2026] [security2:error] [pid 276620:tid 276825] [client 13.70.1.101:6088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/sf.php"] [unique_id "ary2YNPAdfEWqmGIkg1tOQAAAlY"]
[Wed Sep 30 01:12:32.612219 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.612679 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.631632 2026] [security2:error] [pid 276059:tid 276201] [client 20.219.2.60:29911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-blog-header.php"] [unique_id "ary2YHtqdHBwD77138e-oQAAAZY"]
[Wed Sep 30 01:12:32.691667 2026] [security2:error] [pid 276620:tid 276806] [client 20.194.30.107:17476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-manager.php"] [unique_id "ary2YNPAdfEWqmGIkg1tPgAAAkM"]
[Wed Sep 30 01:12:32.699839 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.700110 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:58491] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.704651 2026] [security2:error] [pid 276059:tid 276200] [client 201.32.215.149:7806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2YHtqdHBwD77138e-pAAAAZU"]
[Wed Sep 30 01:12:32.704742 2026] [security2:error] [pid 276059:tid 276200] [client 201.32.215.149:7806] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2YHtqdHBwD77138e-pAAAAZU"]
[Wed Sep 30 01:12:32.715754 2026] [security2:error] [pid 276059:tid 276239] [client 85.204.70.116:45547] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2YHtqdHBwD77138e-pQAAAbs"]
[Wed Sep 30 01:12:32.730243 2026] [security2:error] [pid 276620:tid 276873] [client 20.28.180.172:62385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/aa.php"] [unique_id "ary2YNPAdfEWqmGIkg1tQAAAAoY"]
[Wed Sep 30 01:12:32.753650 2026] [security2:error] [pid 276620:tid 276882] [client 168.100.149.176:25672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/45db5de1ea175d5e1a0c849a69d77892.4e9a.css.gz"] [unique_id "ary2YNPAdfEWqmGIkg1tQgACjwQ"]
[Wed Sep 30 01:12:32.798772 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.799138 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.840652 2026] [security2:error] [pid 276620:tid 276805] [client 4.240.25.22:8926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-content/admin.php"] [unique_id "ary2YNPAdfEWqmGIkg1tRQAAAkI"]
[Wed Sep 30 01:12:32.859724 2026] [security2:error] [pid 276059:tid 276137] [remote 74.7.227.56:60630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2YHtqdHBwD77138e-qQABokk"], referer: https://www.uxa.hoh.mybluehost.me/viewtopic.php?p=135836&sid=66769390544140066c67955412391e93
[Wed Sep 30 01:12:32.861643 2026] [security2:error] [pid 276620:tid 276861] [client 20.211.90.37:19331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-freya.php"] [unique_id "ary2YNPAdfEWqmGIkg1tRwAAAno"]
[Wed Sep 30 01:12:32.866282 2026] [security2:error] [pid 276620:tid 276845] [client 20.194.5.96:64479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/dronishness.php"] [unique_id "ary2YNPAdfEWqmGIkg1tSQAAAmo"]
[Wed Sep 30 01:12:32.872495 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:32.872946 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:32.899377 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.899798 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.934902 2026] [security2:error] [pid 276620:tid 276844] [client 13.70.1.101:45249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/xx.php"] [unique_id "ary2YNPAdfEWqmGIkg1tUAAAAmk"]
[Wed Sep 30 01:12:32.979611 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:32.979890 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:32.986870 2026] [qos:error] [pid 276620:tid 276708] [remote 67.225.18.232:58168] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=67.225.18.232, id=ary2YNPAdfEWqmGIkg1tUwACkk4
[Wed Sep 30 01:12:33.014686 2026] [security2:error] [pid 276059:tid 276281] [client 85.204.70.116:45234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.lai.wmq.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2YXtqdHBwD77138e-sQAAAeU"]
[Wed Sep 30 01:12:33.079823 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.080228 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.130467 2026] [security2:error] [pid 276059:tid 276219] [client 216.73.216.46:58491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2YXtqdHBwD77138e-tQAAAac"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnk0NTk%3D
[Wed Sep 30 01:12:33.169090 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.169359 2026] [access_compat:error] [pid 276059:tid 276267] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.230590 2026] [security2:error] [pid 276059:tid 276275] [client 20.194.5.96:55431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/Row_wsoo.php"] [unique_id "ary2YXtqdHBwD77138e-uAAAAd8"]
[Wed Sep 30 01:12:33.237188 2026] [security2:error] [pid 276620:tid 276786] [client 20.211.90.37:18872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/admin.php/admin.php"] [unique_id "ary2YdPAdfEWqmGIkg1tWwAAAi8"]
[Wed Sep 30 01:12:33.243916 2026] [security2:error] [pid 276620:tid 276753] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2YdPAdfEWqmGIkg1tXAACMHs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1651
[Wed Sep 30 01:12:33.243941 2026] [security2:error] [pid 276620:tid 276753] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2YdPAdfEWqmGIkg1tXAACMHs"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=135&t=1651
[Wed Sep 30 01:12:33.261480 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.261933 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.293317 2026] [security2:error] [pid 276620:tid 276759] [client 13.70.1.101:5767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/file2.php"] [unique_id "ary2YdPAdfEWqmGIkg1tXgAAAhQ"]
[Wed Sep 30 01:12:33.345440 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:33.345882 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:33.350284 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.350718 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.426285 2026] [security2:error] [pid 276620:tid 276782] [client 49.43.128.226:57443] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2YNPAdfEWqmGIkg1tQwAAAis"]
[Wed Sep 30 01:12:33.447397 2026] [security2:error] [pid 276059:tid 276246] [client 20.194.30.107:23182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/baba.php"] [unique_id "ary2YXtqdHBwD77138e-wAAAAcI"]
[Wed Sep 30 01:12:33.448055 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.448488 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.467508 2026] [qos:error] [pid 276059:tid 276156] [remote 47.229.114.83:37742] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=47.229.114.83, id=ary2YXtqdHBwD77138e-wQABllw
[Wed Sep 30 01:12:33.547485 2026] [security2:error] [pid 276059:tid 276250] [client 122.177.240.90:2138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2YXtqdHBwD77138e-wgAAAcY"]
[Wed Sep 30 01:12:33.547606 2026] [security2:error] [pid 276059:tid 276250] [client 122.177.240.90:2138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2YXtqdHBwD77138e-wgAAAcY"]
[Wed Sep 30 01:12:33.587042 2026] [security2:error] [pid 276620:tid 276844] [client 20.211.90.37:18868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/faiy.php"] [unique_id "ary2YdPAdfEWqmGIkg1taQAAAmk"]
[Wed Sep 30 01:12:33.589414 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.589669 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.624526 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.624788 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.665071 2026] [security2:error] [pid 276620:tid 276828] [client 13.70.1.101:58627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/m.php"] [unique_id "ary2YdPAdfEWqmGIkg1tbgAAAlk"]
[Wed Sep 30 01:12:33.674004 2026] [security2:error] [pid 276620:tid 276812] [client 20.70.173.30:38875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/bthil.php"] [unique_id "ary2YdPAdfEWqmGIkg1tbwAAAkk"]
[Wed Sep 30 01:12:33.676333 2026] [qos:error] [pid 276059:tid 276119] [remote 73.200.160.99:45858] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.200.160.99, id=ary2YXtqdHBwD77138e-yQABwTc
[Wed Sep 30 01:12:33.715853 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.716130 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.744332 2026] [qos:error] [pid 276059:tid 276189] [remote 73.252.50.96:43786] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.252.50.96, id=ary2YXtqdHBwD77138e-zAABrH0
[Wed Sep 30 01:12:33.745048 2026] [qos:error] [pid 276059:tid 276163] [remote 174.49.57.112:52454] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=174.49.57.112, id=ary2YXtqdHBwD77138e-zQAB3mM
[Wed Sep 30 01:12:33.764534 2026] [security2:error] [pid 276620:tid 276880] [client 20.194.30.107:23553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/dehnl.php"] [unique_id "ary2YdPAdfEWqmGIkg1tdAAAAo0"]
[Wed Sep 30 01:12:33.781433 2026] [security2:error] [pid 276620:tid 276805] [client 20.213.164.196:21912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2YdPAdfEWqmGIkg1tdQAAAkI"]
[Wed Sep 30 01:12:33.805378 2026] [security2:error] [pid 276620:tid 276773] [client 223.181.60.167:11992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2YdPAdfEWqmGIkg1tdgAAAiI"]
[Wed Sep 30 01:12:33.805501 2026] [security2:error] [pid 276620:tid 276773] [client 223.181.60.167:11992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2YdPAdfEWqmGIkg1tdgAAAiI"]
[Wed Sep 30 01:12:33.807299 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.807571 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.860435 2026] [security2:error] [pid 276059:tid 276259] [client 20.194.30.107:17348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/dex.php"] [unique_id "ary2YXtqdHBwD77138e-0AAAAc8"]
[Wed Sep 30 01:12:33.870365 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 01:12:33.870647 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 01:12:33.898940 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.899223 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:33.906579 2026] [security2:error] [pid 276620:tid 276886] [client 4.240.25.22:18713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/wp.php"] [unique_id "ary2YdPAdfEWqmGIkg1tegAAApM"]
[Wed Sep 30 01:12:33.943701 2026] [security2:error] [pid 276059:tid 276236] [client 20.194.5.96:44943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/x2.php"] [unique_id "ary2YXtqdHBwD77138e-0wAAAbg"]
[Wed Sep 30 01:12:33.984849 2026] [security2:error] [pid 276059:tid 276255] [client 49.37.102.248:62223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2YXtqdHBwD77138e-1QAAAcs"]
[Wed Sep 30 01:12:33.984965 2026] [security2:error] [pid 276059:tid 276255] [client 49.37.102.248:62223] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2YXtqdHBwD77138e-1QAAAcs"]
[Wed Sep 30 01:12:33.990802 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:33.991237 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.044934 2026] [security2:error] [pid 276620:tid 276766] [client 13.70.1.101:5797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/33.php"] [unique_id "ary2YtPAdfEWqmGIkg1thwAAAhs"]
[Wed Sep 30 01:12:34.085381 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.085660 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.163708 2026] [security2:error] [pid 276620:tid 276835] [client 20.211.90.37:19365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary2YtPAdfEWqmGIkg1tiQAAAmA"]
[Wed Sep 30 01:12:34.174767 2026] [qos:error] [pid 276059:tid 276152] [remote 64.13.112.128:59772] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=64.13.112.128, id=ary2YntqdHBwD77138e-2wABs1g
[Wed Sep 30 01:12:34.178054 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.178331 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.196210 2026] [security2:error] [pid 276059:tid 276279] [client 223.235.102.107:15693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2YntqdHBwD77138e-3AAAAeM"]
[Wed Sep 30 01:12:34.196562 2026] [security2:error] [pid 276059:tid 276279] [client 223.235.102.107:15693] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2YntqdHBwD77138e-3AAAAeM"]
[Wed Sep 30 01:12:34.200254 2026] [security2:error] [pid 276059:tid 276250] [client 4.240.25.22:8387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/biufile.php"] [unique_id "ary2YntqdHBwD77138e-3QAAAcY"]
[Wed Sep 30 01:12:34.231268 2026] [qos:error] [pid 276620:tid 276651] [remote 70.95.51.230:34004] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=70.95.51.230, id=ary2YtPAdfEWqmGIkg1tigACPRU
[Wed Sep 30 01:12:34.269062 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.269325 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.279029 2026] [security2:error] [pid 276059:tid 276298] [client 20.213.164.196:21926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2YntqdHBwD77138e-3wAAAfY"]
[Wed Sep 30 01:12:34.292010 2026] [security2:error] [pid 276620:tid 276886] [client 202.61.233.150:44424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.233.61.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.sjh.ybc.mybluehost.me"] [uri "/index.php"] [unique_id "ary2YtPAdfEWqmGIkg1tiwAAApM"]
[Wed Sep 30 01:12:34.365889 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.366326 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.370742 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 01:12:34.371227 2026] [access_compat:error] [pid 276059:tid 276292] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzE5
[Wed Sep 30 01:12:34.484438 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.484971 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.487345 2026] [security2:error] [pid 276620:tid 276688] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2YtPAdfEWqmGIkg1tlQACWjo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=46b074c40134d51d3488df1ebda49877&start=15&t=17774
[Wed Sep 30 01:12:34.487388 2026] [security2:error] [pid 276620:tid 276688] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2YtPAdfEWqmGIkg1tlQACWjo"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=46b074c40134d51d3488df1ebda49877&start=15&t=17774
[Wed Sep 30 01:12:34.504517 2026] [security2:error] [pid 276059:tid 276289] [client 4.240.25.22:33337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/dex.php"] [unique_id "ary2YntqdHBwD77138e-6QAAAe0"]
[Wed Sep 30 01:12:34.534894 2026] [security2:error] [pid 276620:tid 276858] [client 103.199.207.50:11551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.207.199.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2YtPAdfEWqmGIkg1tlwAAAnc"]
[Wed Sep 30 01:12:34.535051 2026] [security2:error] [pid 276620:tid 276858] [client 103.199.207.50:11551] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2YtPAdfEWqmGIkg1tlwAAAnc"]
[Wed Sep 30 01:12:34.564579 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.564891 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.652078 2026] [security2:error] [pid 276059:tid 276291] [client 20.213.164.196:21902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/adminfuns.php"] [unique_id "ary2YntqdHBwD77138e-7wAAAe8"]
[Wed Sep 30 01:12:34.653029 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.653290 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.664699 2026] [security2:error] [pid 276620:tid 276821] [client 20.211.90.37:18745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/myglu.php"] [unique_id "ary2YtPAdfEWqmGIkg1tmwAAAlI"]
[Wed Sep 30 01:12:34.677716 2026] [security2:error] [pid 276620:tid 276796] [client 45.138.12.48:48452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jqk.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2YtPAdfEWqmGIkg1tnQAAAjk"]
[Wed Sep 30 01:12:34.722530 2026] [security2:error] [pid 276059:tid 276259] [client 168.100.149.155:30424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/97203806e2ae25fa3e214588ab33bed3.3f.css.gz"] [unique_id "ary2YntqdHBwD77138e-8wABzx4"]
[Wed Sep 30 01:12:34.744866 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.745338 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.788031 2026] [qos:error] [pid 276620:tid 276696] [remote 68.73.202.235:51782] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=68.73.202.235, id=ary2YtPAdfEWqmGIkg1tnwACPUI
[Wed Sep 30 01:12:34.790141 2026] [security2:error] [pid 276620:tid 276829] [client 20.70.173.30:62356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/adminfuns.php"] [unique_id "ary2YtPAdfEWqmGIkg1toAAAAlo"]
[Wed Sep 30 01:12:34.812733 2026] [qos:error] [pid 276620:tid 276672] [remote 98.97.118.182:48854] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=98.97.118.182, id=ary2YtPAdfEWqmGIkg1togACIyo
[Wed Sep 30 01:12:34.828619 2026] [security2:error] [pid 276620:tid 276872] [client 20.219.2.60:30372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/bgymj.php"] [unique_id "ary2YtPAdfEWqmGIkg1towAAAoU"]
[Wed Sep 30 01:12:34.835103 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:34.835361 2026] [access_compat:error] [pid 276059:tid 276255] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:34.852909 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.853171 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:34.890655 2026] [qos:error] [pid 276620:tid 276756] [remote 97.233.25.249:55788] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=97.233.25.249, id=ary2YtPAdfEWqmGIkg1tpQACL34
[Wed Sep 30 01:12:34.938359 2026] [security2:error] [pid 276059:tid 276247] [client 20.204.42.136:35780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/sm.php"] [unique_id "ary2YntqdHBwD77138e--wAAAcM"]
[Wed Sep 30 01:12:34.949391 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:34.949819 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.026827 2026] [security2:error] [pid 276059:tid 276299] [client 20.194.5.96:44948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/v4.php"] [unique_id "ary2Y3tqdHBwD77138e_FwAAAfc"]
[Wed Sep 30 01:12:35.035908 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.036175 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.041015 2026] [security2:error] [pid 276620:tid 276796] [client 20.211.90.37:18824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/bnmtp.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tqAAAAjk"]
[Wed Sep 30 01:12:35.044503 2026] [security2:error] [pid 276620:tid 276773] [client 20.213.164.196:21950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/av.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tqQAAAiI"]
[Wed Sep 30 01:12:35.104005 2026] [access_compat:error] [pid 276059:tid 276231] [client 13.70.1.101:0] AH01797: client denied by server configuration: /home1/thenelso/public_html/wp-content/uploads/wc-logs/
[Wed Sep 30 01:12:35.110948 2026] [access_compat:error] [pid 276059:tid 276231] [client 13.70.1.101:0] AH01797: client denied by server configuration: /home1/thenelso/public_html/wp-content/uploads/woocommerce_uploads/
[Wed Sep 30 01:12:35.118567 2026] [access_compat:error] [pid 276059:tid 276231] [client 13.70.1.101:0] AH01797: client denied by server configuration: /home1/thenelso/public_html/wp-content/uploads/wp-rollback/
[Wed Sep 30 01:12:35.125216 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.125470 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.221890 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.222174 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:36702] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.333942 2026] [security2:error] [pid 276620:tid 276779] [client 13.70.1.101:5271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/ccc.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tsQAAAig"]
[Wed Sep 30 01:12:35.335612 2026] [security2:error] [pid 276059:tid 276226] [client 216.73.216.46:36702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2Y3tqdHBwD77138e_IQAAAa4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzI5
[Wed Sep 30 01:12:35.367173 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.367642 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.415030 2026] [security2:error] [pid 276059:tid 276234] [client 203.122.45.246:63511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2Y3tqdHBwD77138e_JAAAAbY"]
[Wed Sep 30 01:12:35.415218 2026] [security2:error] [pid 276059:tid 276234] [client 203.122.45.246:63511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2Y3tqdHBwD77138e_JAAAAbY"]
[Wed Sep 30 01:12:35.416190 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.416672 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.416731 2026] [security2:error] [pid 276620:tid 276885] [client 20.211.90.37:18744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/zeta.php"] [unique_id "ary2Y9PAdfEWqmGIkg1ttQAAApI"]
[Wed Sep 30 01:12:35.417648 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 01:12:35.418047 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzI5
[Wed Sep 30 01:12:35.441657 2026] [security2:error] [pid 276620:tid 276803] [client 20.213.164.196:21901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/dex.php"] [unique_id "ary2Y9PAdfEWqmGIkg1ttgAAAkA"]
[Wed Sep 30 01:12:35.498245 2026] [security2:error] [pid 276059:tid 276279] [client 151.123.176.161:37919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2Y3tqdHBwD77138e_IAAAAeM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:35.548929 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.548982 2026] [security2:error] [pid 276059:tid 276278] [client 4.240.25.22:46304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp-filemannger.php"] [unique_id "ary2Y3tqdHBwD77138e_KAAAAeI"]
[Wed Sep 30 01:12:35.549188 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.588949 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.589226 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.658560 2026] [security2:error] [pid 276620:tid 276861] [client 4.240.25.22:18762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/sb.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tvwAAAno"]
[Wed Sep 30 01:12:35.679417 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.679685 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.754779 2026] [security2:error] [pid 276620:tid 276821] [client 13.70.1.101:6135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/file15.php"] [unique_id "ary2Y9PAdfEWqmGIkg1twwAAAlI"]
[Wed Sep 30 01:12:35.759079 2026] [security2:error] [pid 276620:tid 276844] [client 20.211.90.37:19362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary2Y9PAdfEWqmGIkg1txAAAAmk"]
[Wed Sep 30 01:12:35.771840 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.772112 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.810558 2026] [security2:error] [pid 276620:tid 276880] [client 20.70.173.30:33344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/dex.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tyAAAAo0"]
[Wed Sep 30 01:12:35.837759 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9kZXY=
[Wed Sep 30 01:12:35.838029 2026] [access_compat:error] [pid 276059:tid 276251] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9kZXY=
[Wed Sep 30 01:12:35.862199 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.862623 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:35.919440 2026] [security2:error] [pid 276620:tid 276878] [client 20.194.5.96:55435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/albin.php"] [unique_id "ary2Y9PAdfEWqmGIkg1tzAAAAos"]
[Wed Sep 30 01:12:35.955199 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:35.955506 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.002876 2026] [security2:error] [pid 276620:tid 276829] [client 20.213.164.196:21908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/chosen.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t1AAAAlo"]
[Wed Sep 30 01:12:36.006791 2026] [security2:error] [pid 276620:tid 276828] [client 202.61.233.150:41498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.233.61.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.sjh.ybc.mybluehost.me"] [uri "/index.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t1QAAAlk"]
[Wed Sep 30 01:12:36.036609 2026] [security2:error] [pid 276620:tid 276861] [client 20.219.2.60:30338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/gfd.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t2QAAAno"]
[Wed Sep 30 01:12:36.046560 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.046835 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.131899 2026] [security2:error] [pid 276620:tid 276829] [client 20.211.90.37:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t4AAAAlo"]
[Wed Sep 30 01:12:36.157788 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.158069 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.180587 2026] [security2:error] [pid 276620:tid 276861] [client 13.70.1.101:58636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/82.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t4gAAAno"]
[Wed Sep 30 01:12:36.217061 2026] [security2:error] [pid 276059:tid 276247] [client 65.111.31.145:37637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2ZHtqdHBwD77138e_RQAAAcM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:36.218179 2026] [qos:error] [pid 276059:tid 276114] [remote 79.116.238.219:41264] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=79.116.238.219, id=ary2ZHtqdHBwD77138e_RgAB1jI
[Wed Sep 30 01:12:36.249029 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.249297 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.340713 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.341018 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.342660 2026] [security2:error] [pid 276059:tid 276201] [client 20.213.164.196:21844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/radio.php"] [unique_id "ary2ZHtqdHBwD77138e_RwAAAZY"]
[Wed Sep 30 01:12:36.375393 2026] [access_compat:error] [pid 276059:tid 276268] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 01:12:36.375835 2026] [access_compat:error] [pid 276059:tid 276268] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzI4OTE1
[Wed Sep 30 01:12:36.450320 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.450756 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:35842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.469541 2026] [security2:error] [pid 276620:tid 276821] [client 20.28.180.172:62369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/jk.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t7QAAAlI"]
[Wed Sep 30 01:12:36.529252 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.529524 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.578103 2026] [security2:error] [pid 276620:tid 276852] [client 182.69.182.151:33155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t8gAAAnE"]
[Wed Sep 30 01:12:36.580507 2026] [security2:error] [pid 276620:tid 276852] [client 182.69.182.151:33155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t8gAAAnE"]
[Wed Sep 30 01:12:36.603028 2026] [security2:error] [pid 276059:tid 276319] [client 20.194.30.107:23685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2ZHtqdHBwD77138e_TgAAAgs"]
[Wed Sep 30 01:12:36.610615 2026] [security2:error] [pid 276059:tid 276196] [client 13.70.1.101:45283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/admin.php/nope.php"] [unique_id "ary2ZHtqdHBwD77138e_TwAAAZE"]
[Wed Sep 30 01:12:36.624135 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.624573 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.697622 2026] [security2:error] [pid 276620:tid 276878] [client 122.173.27.10:3499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t9QAAAos"]
[Wed Sep 30 01:12:36.697776 2026] [security2:error] [pid 276620:tid 276878] [client 122.173.27.10:3499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t9QAAAos"]
[Wed Sep 30 01:12:36.710512 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.710554 2026] [security2:error] [pid 276620:tid 276766] [client 168.100.149.74:25224] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-45001-Certified_col-300x126.png"] [unique_id "ary2ZNPAdfEWqmGIkg1t9wACG0g"]
[Wed Sep 30 01:12:36.710784 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.716942 2026] [security2:error] [pid 276059:tid 276264] [client 4.240.25.22:8480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/simple.php"] [unique_id "ary2ZHtqdHBwD77138e_UgAAAdQ"]
[Wed Sep 30 01:12:36.734186 2026] [security2:error] [pid 276620:tid 276822] [client 20.213.164.196:21904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t-QAAAlM"]
[Wed Sep 30 01:12:36.776437 2026] [security2:error] [pid 276059:tid 276302] [client 20.70.173.30:38852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/file.php"] [unique_id "ary2ZHtqdHBwD77138e_VgAAAfo"]
[Wed Sep 30 01:12:36.800873 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.801169 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.855996 2026] [security2:error] [pid 276620:tid 276885] [client 20.211.90.37:18852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary2ZNPAdfEWqmGIkg1t_wAAApI"]
[Wed Sep 30 01:12:36.866480 2026] [security2:error] [pid 276620:tid 276766] [client 216.73.216.46:35842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ZNPAdfEWqmGIkg1uAwAAAhs"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5Mzk4
[Wed Sep 30 01:12:36.883075 2026] [security2:error] [pid 276620:tid 276821] [client 45.138.12.44:11760] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.aynabeautystudio.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2ZNPAdfEWqmGIkg1uBAAAAlI"]
[Wed Sep 30 01:12:36.892742 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.893177 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:36.893341 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:36.893607 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:36.902402 2026] [security2:error] [pid 276620:tid 276879] [client 20.194.30.107:23590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2ZNPAdfEWqmGIkg1uCAAAAow"]
[Wed Sep 30 01:12:36.984333 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:36.984758 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.068147 2026] [security2:error] [pid 276620:tid 276849] [client 13.70.1.101:45288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/222.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uFwAAAm4"]
[Wed Sep 30 01:12:37.075154 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.075461 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.147155 2026] [security2:error] [pid 276620:tid 276759] [client 20.213.164.196:21841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/k.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uGAAAAhQ"]
[Wed Sep 30 01:12:37.165131 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.165400 2026] [access_compat:error] [pid 276059:tid 276246] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.238404 2026] [security2:error] [pid 276059:tid 276227] [client 20.211.90.37:19337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/flamini.php"] [unique_id "ary2ZXtqdHBwD77138e_ZgAAAa8"]
[Wed Sep 30 01:12:37.254259 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.254529 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.339342 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:37.339617 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:37.345799 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.346069 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.348374 2026] [security2:error] [pid 276059:tid 276291] [client 105.112.178.79:38593] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.psx.jhe.mybluehost.me"] [uri "/.env"] [unique_id "ary2ZXtqdHBwD77138e_awAAAe8"]
[Wed Sep 30 01:12:37.446845 2026] [security2:error] [pid 276620:tid 276786] [client 20.194.5.96:44969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/atkno.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uIgAAAi8"]
[Wed Sep 30 01:12:37.448720 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.449168 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.514167 2026] [security2:error] [pid 276059:tid 276135] [remote 64.23.166.180:37870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.inspirationalspeakerstm.ca"] [uri "/.env"] [unique_id "ary2ZXtqdHBwD77138e_bQABpkc"]
[Wed Sep 30 01:12:37.530570 2026] [access_compat:error] [pid 276059:tid 276296] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.530853 2026] [access_compat:error] [pid 276059:tid 276296] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.549290 2026] [security2:error] [pid 276059:tid 276304] [client 13.70.1.101:58672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/sallu.php"] [unique_id "ary2ZXtqdHBwD77138e_cwAAAfw"]
[Wed Sep 30 01:12:37.551430 2026] [security2:error] [pid 276059:tid 276250] [client 47.79.13.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2ZXtqdHBwD77138e_cgAAAcY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:37.577569 2026] [security2:error] [pid 276059:tid 276234] [client 20.211.90.37:19357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/myglu.php"] [unique_id "ary2ZXtqdHBwD77138e_dAAAAbY"]
[Wed Sep 30 01:12:37.583477 2026] [security2:error] [pid 276620:tid 276835] [client 202.179.95.79:63045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uJwAAAmA"]
[Wed Sep 30 01:12:37.583785 2026] [security2:error] [pid 276620:tid 276835] [client 202.179.95.79:63045] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uJwAAAmA"]
[Wed Sep 30 01:12:37.592314 2026] [security2:error] [pid 276059:tid 276132] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2ZXtqdHBwD77138e_dQABo0Q"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D34643
[Wed Sep 30 01:12:37.603965 2026] [security2:error] [pid 276059:tid 276236] [client 45.138.12.44:11918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.aynabeautystudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary2ZXtqdHBwD77138e_dgAAAbg"]
[Wed Sep 30 01:12:37.619738 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.619997 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.635651 2026] [security2:error] [pid 276059:tid 276289] [client 20.213.164.196:21825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/133.php"] [unique_id "ary2ZXtqdHBwD77138e_eAAAAe0"]
[Wed Sep 30 01:12:37.717976 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.718442 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:19518] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.801050 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.801338 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.874009 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:37.874332 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:37.892270 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:37.892532 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:3229] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:37.899298 2026] [security2:error] [pid 276059:tid 276203] [client 20.211.90.37:18866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/alfa.php"] [unique_id "ary2ZXtqdHBwD77138e_fQAAAZg"]
[Wed Sep 30 01:12:37.909337 2026] [security2:error] [pid 276620:tid 276779] [client 37.218.243.186:44288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-login.php/wp-login.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uMAAAAig"], referer: https://yod.ninja/wp-login.php/wp-login.php
[Wed Sep 30 01:12:37.999160 2026] [security2:error] [pid 276620:tid 276766] [client 20.219.2.60:29898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/callback.php"] [unique_id "ary2ZdPAdfEWqmGIkg1uOAAAAhs"]
[Wed Sep 30 01:12:38.001528 2026] [security2:error] [pid 276620:tid 276844] [client 20.213.164.196:21922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wsd.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uOQAAAmk"]
[Wed Sep 30 01:12:38.035569 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.035831 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.057376 2026] [qos:error] [pid 276620:tid 276759] [client 186.189.104.223:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2ZtPAdfEWqmGIkg1uPgAAAhQ
[Wed Sep 30 01:12:38.088190 2026] [security2:error] [pid 276620:tid 276852] [client 4.240.25.22:18766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/ops.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uPwAAAnE"]
[Wed Sep 30 01:12:38.127296 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.127574 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.128774 2026] [security2:error] [pid 276059:tid 276260] [client 216.73.216.46:19518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ZntqdHBwD77138e_gwAAAdA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTQvbm9kZTAvbWVtb3J5MTA3
[Wed Sep 30 01:12:38.165749 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.166021 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.192268 2026] [security2:error] [pid 276059:tid 276227] [client 13.70.1.101:58643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/k.php"] [unique_id "ary2ZntqdHBwD77138e_hgAAAa8"]
[Wed Sep 30 01:12:38.203593 2026] [access_compat:error] [pid 276059:tid 276259] [client 47.79.13.177:49760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:38.203890 2026] [access_compat:error] [pid 276059:tid 276259] [client 47.79.13.177:49760] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:38.258457 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.258722 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:9681] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.304929 2026] [security2:error] [pid 276620:tid 276852] [client 216.73.216.46:3229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uRwAAAnE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODcvbm9kZTAvbWVtb3J5NDY4
[Wed Sep 30 01:12:38.314960 2026] [qos:error] [pid 276059:tid 276161] [remote 189.18.6.59:54564] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.18.6.59, id=ary2ZntqdHBwD77138e_igABtGE
[Wed Sep 30 01:12:38.317655 2026] [security2:error] [pid 276620:tid 276760] [client 20.211.90.37:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/index.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uSAAAAhU"]
[Wed Sep 30 01:12:38.322555 2026] [qos:error] [pid 276620:tid 276828] [client 51.235.150.112:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2ZtPAdfEWqmGIkg1uSQAAAlk
[Wed Sep 30 01:12:38.336532 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:38.336593 2026] [security2:error] [pid 276620:tid 276835] [client 20.213.164.196:21905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/BDKR28WP.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uSgAAAmA"]
[Wed Sep 30 01:12:38.336800 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:38.347910 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.348164 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.446445 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.446903 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.468375 2026] [security2:error] [pid 276620:tid 276852] [client 74.225.148.80:11221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uUQAAAnE"]
[Wed Sep 30 01:12:38.586692 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.587123 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.600495 2026] [security2:error] [pid 276620:tid 276822] [client 20.70.173.30:38842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/as.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uWwAAAlM"]
[Wed Sep 30 01:12:38.622610 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.622886 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.635437 2026] [security2:error] [pid 276620:tid 276807] [client 13.70.1.101:45294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/24.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uYQAAAkQ"]
[Wed Sep 30 01:12:38.680291 2026] [security2:error] [pid 276620:tid 276774] [client 179.105.122.52:53374] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uZAAAAiM"]
[Wed Sep 30 01:12:38.680784 2026] [security2:error] [pid 276620:tid 276774] [client 179.105.122.52:53374] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uZAAAAiM"]
[Wed Sep 30 01:12:38.698639 2026] [security2:error] [pid 276059:tid 276250] [client 216.73.216.46:9681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ZntqdHBwD77138e_kgAAAcY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTMvbm9kZTAvbWVtb3J5MTg3
[Wed Sep 30 01:12:38.700756 2026] [security2:error] [pid 276059:tid 276223] [client 20.213.164.196:21907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wmore1.php"] [unique_id "ary2ZntqdHBwD77138e_kwAAAas"]
[Wed Sep 30 01:12:38.712976 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.713242 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.718361 2026] [security2:error] [pid 276620:tid 276779] [client 20.211.90.37:18869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary2ZtPAdfEWqmGIkg1uaAAAAig"]
[Wed Sep 30 01:12:38.762451 2026] [security2:error] [pid 276620:tid 276810] [client 155.190.6.18:41452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2ZtPAdfEWqmGIkg1ubQAAAkc"]
[Wed Sep 30 01:12:38.762646 2026] [security2:error] [pid 276620:tid 276810] [client 155.190.6.18:41452] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2ZtPAdfEWqmGIkg1ubQAAAkc"]
[Wed Sep 30 01:12:38.789386 2026] [security2:error] [pid 276059:tid 276319] [client 20.219.2.60:30342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/file.php"] [unique_id "ary2ZntqdHBwD77138e_lwAAAgs"]
[Wed Sep 30 01:12:38.802956 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.803251 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.817242 2026] [security2:error] [pid 276059:tid 276194] [client 168.100.149.240:21152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/10.png"] [unique_id "ary2ZntqdHBwD77138e_lAABpiU"]
[Wed Sep 30 01:12:38.862343 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:38.862627 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTE4NzI5
[Wed Sep 30 01:12:38.896341 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.896803 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:38.942070 2026] [security2:error] [pid 276620:tid 276822] [client 20.70.173.30:62368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/ms-edit.php"] [unique_id "ary2ZtPAdfEWqmGIkg1ueQAAAlM"]
[Wed Sep 30 01:12:38.974290 2026] [security2:error] [pid 276620:tid 276882] [client 13.70.1.101:45278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/blacks.php"] [unique_id "ary2ZtPAdfEWqmGIkg1ufAAAAo8"]
[Wed Sep 30 01:12:38.978024 2026] [security2:error] [pid 276059:tid 276203] [client 74.225.148.80:65021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2ZntqdHBwD77138e_mgAAAZg"]
[Wed Sep 30 01:12:38.988760 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:38.989178 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.013104 2026] [security2:error] [pid 276620:tid 276796] [client 20.194.5.96:44970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/gptsh.php"] [unique_id "ary2Z9PAdfEWqmGIkg1ufgAAAjk"]
[Wed Sep 30 01:12:39.081901 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.082334 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.149092 2026] [qos:error] [pid 276620:tid 276631] [remote 69.250.225.180:35920] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=69.250.225.180, id=ary2Z9PAdfEWqmGIkg1uggACOQE
[Wed Sep 30 01:12:39.166917 2026] [security2:error] [pid 276620:tid 276766] [client 20.213.164.196:21942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/177.php"] [unique_id "ary2Z9PAdfEWqmGIkg1uhAAAAhs"]
[Wed Sep 30 01:12:39.167391 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.167640 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.186448 2026] [security2:error] [pid 276620:tid 276834] [client 105.112.178.79:38594] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fkg.yuj.mybluehost.me"] [uri "/__ss_probe_fd7b4a26ead54110bf3c40a07ca542da__"] [unique_id "ary2Z9PAdfEWqmGIkg1uhQAAAl8"]
[Wed Sep 30 01:12:39.202205 2026] [security2:error] [pid 276620:tid 276828] [client 37.218.243.186:39330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.243.218.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-login.php/wp-login.php"] [unique_id "ary2Z9PAdfEWqmGIkg1uhgAAAlk"], referer: https://yod.ninja/wp-login.php/wp-login.php
[Wed Sep 30 01:12:39.260207 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.260482 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.303008 2026] [security2:error] [pid 276620:tid 276774] [client 20.194.30.107:17305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/mac.php"] [unique_id "ary2Z9PAdfEWqmGIkg1ujAAAAiM"]
[Wed Sep 30 01:12:39.314056 2026] [security2:error] [pid 276620:tid 276768] [client 13.70.1.101:5799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/anom.php"] [unique_id "ary2Z9PAdfEWqmGIkg1ujQAAAh0"]
[Wed Sep 30 01:12:39.341854 2026] [security2:error] [pid 276620:tid 276760] [client 103.211.18.63:63128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2Z9PAdfEWqmGIkg1ujgAAAhU"]
[Wed Sep 30 01:12:39.341960 2026] [security2:error] [pid 276620:tid 276760] [client 103.211.18.63:63128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2Z9PAdfEWqmGIkg1ujgAAAhU"]
[Wed Sep 30 01:12:39.349853 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.350066 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:12:39.350171 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.350318 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ldGM=
[Wed Sep 30 01:12:39.419846 2026] [qos:error] [pid 276059:tid 276178] [remote 24.100.36.226:41152] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=24.100.36.226, id=ary2Z3tqdHBwD77138e_qwAB13I
[Wed Sep 30 01:12:39.442923 2026] [security2:error] [pid 276059:tid 276232] [client 74.225.148.80:11255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/b.php"] [unique_id "ary2Z3tqdHBwD77138e_rAAAAbQ"]
[Wed Sep 30 01:12:39.448734 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.449173 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.462087 2026] [security2:error] [pid 276620:tid 276759] [client 20.70.173.30:46253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-content/admin.php"] [unique_id "ary2Z9PAdfEWqmGIkg1umgAAAhQ"]
[Wed Sep 30 01:12:39.489305 2026] [security2:error] [pid 276620:tid 276850] [client 45.138.12.32:34946] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.scx.pgp.mybluehost.me"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2Z9PAdfEWqmGIkg1unAAAAm8"]
[Wed Sep 30 01:12:39.518164 2026] [autoindex:error] [pid 276620:tid 276774] [client 20.162.8.144:0] AH01276: Cannot serve directory /home3/visumboa/public_html/weddingsbyleigh.com/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:12:39.535245 2026] [security2:error] [pid 276620:tid 276759] [client 20.213.164.196:21939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/ccc.php"] [unique_id "ary2Z9PAdfEWqmGIkg1uogAAAhQ"]
[Wed Sep 30 01:12:39.544408 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.544850 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.592704 2026] [qos:error] [pid 276059:tid 276118] [remote 69.160.103.75:11532] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=69.160.103.75, id=ary2Z3tqdHBwD77138e_sQABwjY
[Wed Sep 30 01:12:39.596168 2026] [security2:error] [pid 276059:tid 276284] [client 20.211.90.37:18747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary2Z3tqdHBwD77138e_sgAAAeg"]
[Wed Sep 30 01:12:39.624277 2026] [qos:error] [pid 276059:tid 276123] [remote 66.66.221.132:58796] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=66.66.221.132, id=ary2Z3tqdHBwD77138e_swABlzs
[Wed Sep 30 01:12:39.626875 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.627130 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.720526 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.720961 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.782903 2026] [security2:error] [pid 276059:tid 276234] [client 13.70.1.101:45255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/groud3.php"] [unique_id "ary2Z3tqdHBwD77138e_twAAAbY"]
[Wed Sep 30 01:12:39.806005 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.806273 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.811559 2026] [security2:error] [pid 276620:tid 276852] [client 47.79.13.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary2Z9PAdfEWqmGIkg1urQAAAnE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:39.826554 2026] [security2:error] [pid 276059:tid 276299] [client 106.214.2.47:30301] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2Z3tqdHBwD77138e_uwAAAfc"]
[Wed Sep 30 01:12:39.826665 2026] [security2:error] [pid 276059:tid 276299] [client 106.214.2.47:30301] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2Z3tqdHBwD77138e_uwAAAfc"]
[Wed Sep 30 01:12:39.833232 2026] [security2:error] [pid 276620:tid 276796] [client 20.194.30.107:10152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/222.php"] [unique_id "ary2Z9PAdfEWqmGIkg1urgAAAjk"]
[Wed Sep 30 01:12:39.861417 2026] [access_compat:error] [pid 276059:tid 276274] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:39.861686 2026] [access_compat:error] [pid 276059:tid 276274] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:39.897638 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.897901 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.908214 2026] [security2:error] [pid 276620:tid 276832] [client 74.225.148.80:11219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/admin.php"] [unique_id "ary2Z9PAdfEWqmGIkg1usAAAAl0"]
[Wed Sep 30 01:12:39.964527 2026] [security2:error] [pid 276620:tid 276822] [client 20.28.180.172:60311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/gcqoa.php"] [unique_id "ary2Z9PAdfEWqmGIkg1usQAAAlM"]
[Wed Sep 30 01:12:39.964728 2026] [qos:error] [pid 276059:tid 276127] [remote 168.227.42.39:60236] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=168.227.42.39, id=ary2Z3tqdHBwD77138e_vQABsj8
[Wed Sep 30 01:12:39.989982 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:39.990247 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:39.998530 2026] [security2:error] [pid 276620:tid 276856] [client 20.211.90.37:18734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/admin.php"] [unique_id "ary2Z9PAdfEWqmGIkg1utQAAAnU"]
[Wed Sep 30 01:12:40.028544 2026] [security2:error] [pid 276620:tid 276781] [client 4.240.25.22:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/or.php"] [unique_id "ary2aNPAdfEWqmGIkg1utgAAAio"]
[Wed Sep 30 01:12:40.059862 2026] [security2:error] [pid 276059:tid 276203] [client 20.213.164.196:21933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/0xD.php"] [unique_id "ary2aHtqdHBwD77138e_vwAAAZg"]
[Wed Sep 30 01:12:40.081416 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.081681 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.091434 2026] [security2:error] [pid 276059:tid 276286] [client 20.194.5.96:55463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/rithin.php"] [unique_id "ary2aHtqdHBwD77138e_wgAAAeo"]
[Wed Sep 30 01:12:40.110900 2026] [security2:error] [pid 276059:tid 276205] [client 13.70.1.101:5775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/gaxby.php"] [unique_id "ary2aHtqdHBwD77138e_wwAAAZo"]
[Wed Sep 30 01:12:40.170203 2026] [qos:error] [pid 276620:tid 276666] [remote 138.117.15.86:58913] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=138.117.15.86, id=ary2aNPAdfEWqmGIkg1uvwACUyQ
[Wed Sep 30 01:12:40.171628 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.171911 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.181225 2026] [qos:error] [pid 276620:tid 276733] [remote 99.57.113.1:40142] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=99.57.113.1, id=ary2aNPAdfEWqmGIkg1uwQACdWc
[Wed Sep 30 01:12:40.264117 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.264392 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.355592 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.360533 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.365373 2026] [security2:error] [pid 276059:tid 276266] [client 20.194.30.107:17475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/fling.php"] [unique_id "ary2aHtqdHBwD77138e_zAAAAdY"]
[Wed Sep 30 01:12:40.392802 2026] [security2:error] [pid 276059:tid 276314] [client 74.225.148.80:10820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/fling.php"] [unique_id "ary2aHtqdHBwD77138e_zQAAAgY"]
[Wed Sep 30 01:12:40.408783 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:40.409253 2026] [access_compat:error] [pid 276059:tid 276238] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:40.434895 2026] [security2:error] [pid 276620:tid 276810] [client 20.211.90.37:19378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2aNPAdfEWqmGIkg1uywAAAkc"]
[Wed Sep 30 01:12:40.451726 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.452174 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.458833 2026] [security2:error] [pid 276620:tid 276872] [client 13.70.1.101:5789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/dh9u7.php"] [unique_id "ary2aNPAdfEWqmGIkg1uzgAAAoU"]
[Wed Sep 30 01:12:40.481004 2026] [security2:error] [pid 276059:tid 276227] [client 20.219.2.60:29890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/bolt.php"] [unique_id "ary2aHtqdHBwD77138e_0QAAAa8"]
[Wed Sep 30 01:12:40.536494 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.536772 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.571635 2026] [security2:error] [pid 276059:tid 276224] [client 20.28.180.172:29621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/w1px.php"] [unique_id "ary2aHtqdHBwD77138e_1QAAAaw"]
[Wed Sep 30 01:12:40.597793 2026] [access_compat:error] [pid 276620:tid 276773] [client 47.79.13.175:56068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:40.598171 2026] [access_compat:error] [pid 276620:tid 276773] [client 47.79.13.175:56068] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:40.628010 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.628264 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.681477 2026] [security2:error] [pid 276620:tid 276811] [client 20.213.164.196:21832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/sallu.php"] [unique_id "ary2aNPAdfEWqmGIkg1u2QAAAkg"]
[Wed Sep 30 01:12:40.687702 2026] [security2:error] [pid 276059:tid 276237] [client 20.70.173.30:25168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/media.php"] [unique_id "ary2aHtqdHBwD77138e_1gAAAbk"]
[Wed Sep 30 01:12:40.793900 2026] [security2:error] [pid 276620:tid 276759] [client 20.194.30.107:17518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/felnggg.php"] [unique_id "ary2aNPAdfEWqmGIkg1u3wAAAhQ"]
[Wed Sep 30 01:12:40.818118 2026] [security2:error] [pid 276620:tid 276781] [client 168.100.149.244:20462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/4.png"] [unique_id "ary2aNPAdfEWqmGIkg1u2gACkk4"]
[Wed Sep 30 01:12:40.845453 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:40.845711 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:40.852280 2026] [security2:error] [pid 276620:tid 276773] [client 20.194.5.96:55430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/il.php"] [unique_id "ary2aNPAdfEWqmGIkg1u4gAAAiI"]
[Wed Sep 30 01:12:40.858998 2026] [security2:error] [pid 276620:tid 276868] [client 74.225.148.80:10863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/themes/index.php"] [unique_id "ary2aNPAdfEWqmGIkg1u4wAAAoE"]
[Wed Sep 30 01:12:40.869768 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.870050 2026] [access_compat:error] [pid 276620:tid 276774] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:40.931276 2026] [security2:error] [pid 276059:tid 276226] [client 20.211.90.37:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2aHtqdHBwD77138e_3gAAAa4"]
[Wed Sep 30 01:12:40.941840 2026] [security2:error] [pid 276059:tid 276268] [client 13.70.1.101:6107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/koiy.php"] [unique_id "ary2aHtqdHBwD77138e_3wAAAdg"]
[Wed Sep 30 01:12:40.963535 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:40.963795 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.041182 2026] [security2:error] [pid 276620:tid 276844] [client 4.240.25.22:8420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/yawa.php"] [unique_id "ary2adPAdfEWqmGIkg1u6wAAAmk"]
[Wed Sep 30 01:12:41.053075 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.053349 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.103188 2026] [security2:error] [pid 276059:tid 276277] [client 20.213.164.196:21947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/ops.php"] [unique_id "ary2aXtqdHBwD77138e_5AAAAeE"]
[Wed Sep 30 01:12:41.145255 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.145516 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.223727 2026] [security2:error] [pid 276620:tid 276779] [client 20.70.173.30:38865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/simple.php"] [unique_id "ary2adPAdfEWqmGIkg1u9AAAAig"]
[Wed Sep 30 01:12:41.235304 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.235584 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.256467 2026] [security2:error] [pid 276059:tid 276279] [client 20.211.90.37:18693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/cgi-bin/index.php"] [unique_id "ary2aXtqdHBwD77138e_5wAAAeM"]
[Wed Sep 30 01:12:41.325247 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.325541 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.337919 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:41.338188 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:41.341394 2026] [security2:error] [pid 276059:tid 276211] [client 74.225.148.80:10841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/adminfuns.php"] [unique_id "ary2aXtqdHBwD77138e_6gAAAZ8"]
[Wed Sep 30 01:12:41.432895 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.433349 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.500273 2026] [security2:error] [pid 276620:tid 276885] [client 13.70.1.101:5814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wordfence-waf.php"] [unique_id "ary2adPAdfEWqmGIkg1vAQAAApI"]
[Wed Sep 30 01:12:41.508978 2026] [security2:error] [pid 276620:tid 276822] [client 4.240.25.22:41691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/wp-content/admin.php"] [unique_id "ary2adPAdfEWqmGIkg1vBAAAAlM"]
[Wed Sep 30 01:12:41.514149 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.514568 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.560340 2026] [security2:error] [pid 276059:tid 276212] [client 20.213.164.196:21944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/mac.php"] [unique_id "ary2aXtqdHBwD77138e_9wAAAaA"]
[Wed Sep 30 01:12:41.598532 2026] [security2:error] [pid 276620:tid 276842] [client 20.211.90.37:18851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-manager.php"] [unique_id "ary2adPAdfEWqmGIkg1vBwAAAmc"]
[Wed Sep 30 01:12:41.608235 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.608508 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.623461 2026] [security2:error] [pid 276059:tid 276199] [client 20.28.180.172:34260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/Isadore.php"] [unique_id "ary2aXtqdHBwD77138e_-gAAAZQ"]
[Wed Sep 30 01:12:41.692803 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.693252 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.745977 2026] [security2:error] [pid 276620:tid 276651] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2adPAdfEWqmGIkg1vDQACXhU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=10002
[Wed Sep 30 01:12:41.746004 2026] [security2:error] [pid 276620:tid 276651] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2adPAdfEWqmGIkg1vDQACXhU"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=230ce6417cac15409922c2dc6b87d804&start=15&t=10002
[Wed Sep 30 01:12:41.780742 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.781021 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.807036 2026] [security2:error] [pid 276620:tid 276768] [client 20.194.5.96:59192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/1klopedf.php"] [unique_id "ary2adPAdfEWqmGIkg1vDwAAAh0"]
[Wed Sep 30 01:12:41.807304 2026] [security2:error] [pid 276620:tid 276852] [client 74.225.148.80:10844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/alfa.php"] [unique_id "ary2adPAdfEWqmGIkg1vEAAAAnE"]
[Wed Sep 30 01:12:41.832971 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:12:41.833232 2026] [access_compat:error] [pid 276059:tid 276224] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9ldGM=
[Wed Sep 30 01:12:41.871662 2026] [security2:error] [pid 276620:tid 276885] [client 4.240.25.22:18772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/baru.php"] [unique_id "ary2adPAdfEWqmGIkg1vEgAAApI"]
[Wed Sep 30 01:12:41.874661 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.875111 2026] [access_compat:error] [pid 276620:tid 276810] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:41.883885 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:30078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-blogs.php"] [unique_id "ary2adPAdfEWqmGIkg1vEwAAAkE"]
[Wed Sep 30 01:12:41.888682 2026] [security2:error] [pid 276620:tid 276809] [client 13.70.1.101:5807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/em.php"] [unique_id "ary2adPAdfEWqmGIkg1vFAAAAkY"]
[Wed Sep 30 01:12:41.926105 2026] [security2:error] [pid 276620:tid 276872] [client 20.213.164.196:21919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/myglu.php"] [unique_id "ary2adPAdfEWqmGIkg1vFQAAAoU"]
[Wed Sep 30 01:12:41.958028 2026] [security2:error] [pid 276059:tid 276308] [client 103.241.204.139:65198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2aXtqdHBwD77138e__QAAAgA"]
[Wed Sep 30 01:12:41.958186 2026] [security2:error] [pid 276059:tid 276308] [client 103.241.204.139:65198] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2aXtqdHBwD77138e__QAAAgA"]
[Wed Sep 30 01:12:41.963283 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:41.963556 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.053971 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.054250 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.103420 2026] [security2:error] [pid 276620:tid 276811] [client 20.211.90.37:19388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2atPAdfEWqmGIkg1vGQAAAkg"]
[Wed Sep 30 01:12:42.143496 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.143755 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:56583] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.181601 2026] [security2:error] [pid 276059:tid 276259] [client 37.41.16.35:51792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2antqdHBwD77138fAAwAAAc8"]
[Wed Sep 30 01:12:42.181766 2026] [security2:error] [pid 276059:tid 276259] [client 37.41.16.35:51792] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2antqdHBwD77138fAAwAAAc8"]
[Wed Sep 30 01:12:42.234852 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.235194 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.256311 2026] [security2:error] [pid 276620:tid 276868] [client 13.70.1.101:6127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/hp.php"] [unique_id "ary2atPAdfEWqmGIkg1vIwAAAoE"]
[Wed Sep 30 01:12:42.263728 2026] [security2:error] [pid 276620:tid 276872] [client 20.28.180.172:18223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/plugin-editor.php"] [unique_id "ary2atPAdfEWqmGIkg1vJAAAAoU"]
[Wed Sep 30 01:12:42.267469 2026] [security2:error] [pid 276620:tid 276766] [client 74.225.148.80:11036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/222.php"] [unique_id "ary2atPAdfEWqmGIkg1vJQAAAhs"]
[Wed Sep 30 01:12:42.330533 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.330956 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.358774 2026] [security2:error] [pid 276620:tid 276788] [client 20.213.164.196:21935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/aboutt.php"] [unique_id "ary2atPAdfEWqmGIkg1vLgAAAjE"]
[Wed Sep 30 01:12:42.376232 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:42.376674 2026] [access_compat:error] [pid 276059:tid 276277] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:42.427971 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.428414 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.500996 2026] [security2:error] [pid 276059:tid 276233] [client 20.211.90.37:18855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2antqdHBwD77138fACAAAAbU"]
[Wed Sep 30 01:12:42.505763 2026] [security2:error] [pid 276620:tid 276866] [client 20.28.180.172:29957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/samll.php"] [unique_id "ary2atPAdfEWqmGIkg1vMQAAAn8"]
[Wed Sep 30 01:12:42.536852 2026] [security2:error] [pid 276620:tid 276759] [client 216.73.216.46:56583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2atPAdfEWqmGIkg1vNAAAAhQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDkvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 01:12:42.562204 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.562478 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.599862 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.600115 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.691297 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.691601 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.715745 2026] [security2:error] [pid 276620:tid 276759] [client 74.225.148.80:11246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2atPAdfEWqmGIkg1vPwAAAhQ"]
[Wed Sep 30 01:12:42.724279 2026] [security2:error] [pid 276620:tid 276819] [client 168.100.149.191:44008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/MN-Logo-2-e1690778645432.png"] [unique_id "ary2atPAdfEWqmGIkg1vQQACUEc"]
[Wed Sep 30 01:12:42.779613 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.779918 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.828004 2026] [security2:error] [pid 276620:tid 276768] [client 13.70.1.101:45267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.1.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nelsonfarmstn.com"] [uri "/wpuse.php"] [unique_id "ary2atPAdfEWqmGIkg1vRwAAAh0"]
[Wed Sep 30 01:12:42.841412 2026] [security2:error] [pid 276620:tid 276830] [client 20.219.2.60:30034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/zlnckdxn.php"] [unique_id "ary2atPAdfEWqmGIkg1vSAAAAls"]
[Wed Sep 30 01:12:42.857533 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:42.857795 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:42.872139 2026] [security2:error] [pid 276620:tid 276811] [client 20.213.164.196:21936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wp-whe.php"] [unique_id "ary2atPAdfEWqmGIkg1vTAAAAkg"]
[Wed Sep 30 01:12:42.872379 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.872637 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:42.910109 2026] [security2:error] [pid 276620:tid 276833] [client 152.56.240.85:50574] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2atPAdfEWqmGIkg1vTQAAAl4"]
[Wed Sep 30 01:12:42.910280 2026] [security2:error] [pid 276620:tid 276833] [client 152.56.240.85:50574] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2atPAdfEWqmGIkg1vTQAAAl4"]
[Wed Sep 30 01:12:42.965815 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:42.966083 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.005897 2026] [security2:error] [pid 276059:tid 276272] [client 20.194.5.96:44963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/zv.php"] [unique_id "ary2a3tqdHBwD77138fAEAAAAdw"]
[Wed Sep 30 01:12:43.054841 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.055113 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.064941 2026] [security2:error] [pid 276059:tid 276270] [client 49.43.128.226:57919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2antqdHBwD77138fABAAAAdo"]
[Wed Sep 30 01:12:43.129803 2026] [security2:error] [pid 276059:tid 276227] [client 4.240.25.22:8499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/sym.php"] [unique_id "ary2a3tqdHBwD77138fAGAAAAa8"]
[Wed Sep 30 01:12:43.148009 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.148277 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.196911 2026] [security2:error] [pid 276059:tid 276260] [client 74.225.148.80:11228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/images.php"] [unique_id "ary2a3tqdHBwD77138fAGQAAAdA"]
[Wed Sep 30 01:12:43.238001 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.238264 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:64402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.321647 2026] [security2:error] [pid 276620:tid 276788] [client 216.73.216.46:64402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2a9PAdfEWqmGIkg1vYQAAAjE"]
[Wed Sep 30 01:12:43.335176 2026] [access_compat:error] [pid 276059:tid 276263] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:43.335455 2026] [access_compat:error] [pid 276059:tid 276263] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:43.383349 2026] [security2:error] [pid 276620:tid 276882] [client 20.211.90.37:19380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2a9PAdfEWqmGIkg1vYgAAAo8"]
[Wed Sep 30 01:12:43.384727 2026] [security2:error] [pid 276620:tid 276852] [client 20.70.173.30:19148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2a9PAdfEWqmGIkg1vYwAAAnE"]
[Wed Sep 30 01:12:43.387477 2026] [security2:error] [pid 276059:tid 276202] [client 20.213.164.196:21827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/ssixta.php"] [unique_id "ary2a3tqdHBwD77138fAHgAAAZc"]
[Wed Sep 30 01:12:43.388527 2026] [qos:error] [pid 276620:tid 276674] [remote 81.146.22.46:44496] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=81.146.22.46, id=ary2a9PAdfEWqmGIkg1vZAACcSw
[Wed Sep 30 01:12:43.426346 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.426827 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.561985 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.562264 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.578488 2026] [security2:error] [pid 276620:tid 276773] [client 163.172.46.59:58804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.46.172.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary2a9PAdfEWqmGIkg1vbQAAAiI"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:12:43.613742 2026] [qos:error] [pid 276620:tid 276679] [remote 71.28.32.237:55268] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=71.28.32.237, id=ary2a9PAdfEWqmGIkg1vcwACMjE
[Wed Sep 30 01:12:43.619098 2026] [security2:error] [pid 276620:tid 276852] [client 20.194.30.107:17378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/txets.php"] [unique_id "ary2a9PAdfEWqmGIkg1vdAAAAnE"]
[Wed Sep 30 01:12:43.655884 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.656272 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.657563 2026] [security2:error] [pid 276059:tid 276226] [client 74.225.148.80:11212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/media.php"] [unique_id "ary2a3tqdHBwD77138fAIQAAAa4"]
[Wed Sep 30 01:12:43.683694 2026] [qos:error] [pid 276620:tid 276680] [remote 174.81.152.223:50502] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=174.81.152.223, id=ary2a9PAdfEWqmGIkg1veQACSDI
[Wed Sep 30 01:12:43.692706 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.693041 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.693925 2026] [security2:error] [pid 276620:tid 276773] [client 20.194.5.96:44945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/zv.update.php"] [unique_id "ary2a9PAdfEWqmGIkg1vewAAAiI"]
[Wed Sep 30 01:12:43.725428 2026] [security2:error] [pid 276059:tid 276085] [remote 57.141.14.2:40796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/comments/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/xmlrpc.php"] [unique_id "ary2a3tqdHBwD77138fAIgABzxU"]
[Wed Sep 30 01:12:43.737633 2026] [security2:error] [pid 276620:tid 276852] [client 20.211.90.37:19340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary2a9PAdfEWqmGIkg1vfAAAAnE"]
[Wed Sep 30 01:12:43.785144 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.785412 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.785746 2026] [security2:error] [pid 276620:tid 276804] [client 20.194.30.107:23700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/mac.php"] [unique_id "ary2a9PAdfEWqmGIkg1vfgAAAkE"]
[Wed Sep 30 01:12:43.843411 2026] [security2:error] [pid 276620:tid 276867] [client 201.32.215.149:8322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2a9PAdfEWqmGIkg1vgQAAAoA"]
[Wed Sep 30 01:12:43.843545 2026] [security2:error] [pid 276620:tid 276867] [client 201.32.215.149:8322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2a9PAdfEWqmGIkg1vgQAAAoA"]
[Wed Sep 30 01:12:43.857087 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:43.857374 2026] [access_compat:error] [pid 276059:tid 276220] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:43.879659 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.879953 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:43.914440 2026] [security2:error] [pid 276620:tid 276781] [client 20.213.164.196:21941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/tesla.php"] [unique_id "ary2a9PAdfEWqmGIkg1viAAAAio"]
[Wed Sep 30 01:12:43.922234 2026] [security2:error] [pid 276620:tid 276804] [client 20.219.2.60:30019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/fs6.php"] [unique_id "ary2a9PAdfEWqmGIkg1viQAAAkE"]
[Wed Sep 30 01:12:43.965487 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:43.965755 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.051319 2026] [security2:error] [pid 276620:tid 276793] [client 122.177.240.90:11005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vkQAAAjY"]
[Wed Sep 30 01:12:44.051412 2026] [security2:error] [pid 276620:tid 276793] [client 122.177.240.90:11005] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vkQAAAjY"]
[Wed Sep 30 01:12:44.056154 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.056425 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.125899 2026] [security2:error] [pid 276620:tid 276809] [client 74.225.148.80:10850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/mac.php"] [unique_id "ary2bNPAdfEWqmGIkg1vlQAAAkY"]
[Wed Sep 30 01:12:44.147636 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.147916 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.206625 2026] [security2:error] [pid 276059:tid 276196] [client 20.28.180.172:18355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/plugin-install.php"] [unique_id "ary2bHtqdHBwD77138fAKAAAAZE"]
[Wed Sep 30 01:12:44.237761 2026] [security2:error] [pid 276620:tid 276804] [client 20.70.173.30:25345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wpxml.php"] [unique_id "ary2bNPAdfEWqmGIkg1vngAAAkE"]
[Wed Sep 30 01:12:44.240805 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.241060 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.252081 2026] [qos:error] [pid 276059:tid 276173] [remote 90.250.94.64:33070] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=90.250.94.64, id=ary2bHtqdHBwD77138fALQAB3W0
[Wed Sep 30 01:12:44.317178 2026] [security2:error] [pid 276059:tid 276203] [client 20.213.164.196:21946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/222.php"] [unique_id "ary2bHtqdHBwD77138fALwAAAZg"]
[Wed Sep 30 01:12:44.329798 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.330078 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.366292 2026] [security2:error] [pid 276620:tid 276867] [client 20.194.5.96:64485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/wquosqsi.php"] [unique_id "ary2bNPAdfEWqmGIkg1vogAAAoA"]
[Wed Sep 30 01:12:44.374640 2026] [access_compat:error] [pid 276620:tid 276842] [client 47.79.13.176:46042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:44.377697 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:44.378157 2026] [access_compat:error] [pid 276059:tid 276264] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:44.378392 2026] [access_compat:error] [pid 276620:tid 276842] [client 47.79.13.176:46042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:44.431619 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.432062 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.451645 2026] [security2:error] [pid 276620:tid 276786] [client 20.211.90.37:18871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/matcha.php"] [unique_id "ary2bNPAdfEWqmGIkg1vpAAAAi8"]
[Wed Sep 30 01:12:44.511579 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.511835 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.517952 2026] [ssl:error] [pid 276620:tid 276833] [client 216.25.124.25:19410] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname cpanel.nek.pxp.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:12:44.594271 2026] [security2:error] [pid 276059:tid 276260] [client 74.225.148.80:10878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ops.php"] [unique_id "ary2bHtqdHBwD77138fANgAAAdA"]
[Wed Sep 30 01:12:44.603064 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.603335 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.615459 2026] [security2:error] [pid 276620:tid 276768] [client 49.37.102.248:62775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vrAAAAh0"]
[Wed Sep 30 01:12:44.615560 2026] [security2:error] [pid 276620:tid 276768] [client 49.37.102.248:62775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vrAAAAh0"]
[Wed Sep 30 01:12:44.625570 2026] [security2:error] [pid 276620:tid 276702] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2bNPAdfEWqmGIkg1vrQACU0g"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10558
[Wed Sep 30 01:12:44.625601 2026] [security2:error] [pid 276620:tid 276702] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2bNPAdfEWqmGIkg1vrQACU0g"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=10558
[Wed Sep 30 01:12:44.693504 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.693764 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.700149 2026] [security2:error] [pid 276059:tid 276205] [client 223.181.60.167:5079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2bHtqdHBwD77138fAPgAAAZo"]
[Wed Sep 30 01:12:44.700261 2026] [security2:error] [pid 276059:tid 276205] [client 223.181.60.167:5079] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2bHtqdHBwD77138fAPgAAAZo"]
[Wed Sep 30 01:12:44.788898 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.789224 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.795570 2026] [security2:error] [pid 276059:tid 276319] [client 4.240.25.22:38779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/pfm.php"] [unique_id "ary2bHtqdHBwD77138fARAAAAgs"]
[Wed Sep 30 01:12:44.813325 2026] [security2:error] [pid 276620:tid 276773] [client 103.199.207.50:11708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.207.199.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vsgAAAiI"]
[Wed Sep 30 01:12:44.813429 2026] [security2:error] [pid 276620:tid 276773] [client 103.199.207.50:11708] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2bNPAdfEWqmGIkg1vsgAAAiI"]
[Wed Sep 30 01:12:44.842056 2026] [security2:error] [pid 276059:tid 276268] [client 20.211.90.37:18691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/aboutt.php"] [unique_id "ary2bHtqdHBwD77138fARwAAAdg"]
[Wed Sep 30 01:12:44.845960 2026] [security2:error] [pid 276620:tid 276868] [client 168.100.149.92:30550] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/1.png"] [unique_id "ary2bNPAdfEWqmGIkg1vrwACPDk"]
[Wed Sep 30 01:12:44.869052 2026] [security2:error] [pid 276620:tid 276793] [client 163.172.46.59:56898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.46.172.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "uniabujamfb.com"] [uri "/wp-login.php"] [unique_id "ary2bNPAdfEWqmGIkg1vtQAAAjY"], referer: https://uniabujamfb.com/wp-login.php
[Wed Sep 30 01:12:44.876160 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.876469 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:44.894779 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:44.895298 2026] [access_compat:error] [pid 276059:tid 276219] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:44.968848 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:44.969106 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.030650 2026] [qos:error] [pid 276059:tid 276078] [remote 81.99.162.3:58084] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=81.99.162.3, id=ary2bXtqdHBwD77138fAUQAB4Q4
[Wed Sep 30 01:12:45.058954 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.059209 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.095438 2026] [security2:error] [pid 276620:tid 276799] [client 74.225.148.80:11252] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.bradgoreski.co"] [uri "/1.php"] [unique_id "ary2bdPAdfEWqmGIkg1vwwAAAjw"]
[Wed Sep 30 01:12:45.095550 2026] [security2:error] [pid 276620:tid 276799] [client 74.225.148.80:11252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/1.php"] [unique_id "ary2bdPAdfEWqmGIkg1vwwAAAjw"]
[Wed Sep 30 01:12:45.098200 2026] [security2:error] [pid 276620:tid 276786] [client 20.213.164.196:21843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/media.php"] [unique_id "ary2bdPAdfEWqmGIkg1vxgAAAi8"]
[Wed Sep 30 01:12:45.150454 2026] [security2:error] [pid 276059:tid 276232] [client 4.240.25.22:18790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/a.php"] [unique_id "ary2bXtqdHBwD77138fAVgAAAbQ"]
[Wed Sep 30 01:12:45.150585 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.150872 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.158893 2026] [security2:error] [pid 276059:tid 276247] [client 20.211.90.37:18742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/opsh.php"] [unique_id "ary2bXtqdHBwD77138fAWAAAAcM"]
[Wed Sep 30 01:12:45.220587 2026] [qos:error] [pid 276059:tid 276109] [remote 32.210.107.4:36242] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=32.210.107.4, id=ary2bXtqdHBwD77138fAWgABry0
[Wed Sep 30 01:12:45.243588 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.243865 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.269343 2026] [security2:error] [pid 276059:tid 276283] [client 20.194.5.96:64472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/asset.php"] [unique_id "ary2bXtqdHBwD77138fAXQAAAec"]
[Wed Sep 30 01:12:45.331477 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.331741 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.355152 2026] [access_compat:error] [pid 276059:tid 276318] [client 47.79.13.71:49522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:45.355599 2026] [access_compat:error] [pid 276059:tid 276318] [client 47.79.13.71:49522] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:45.393062 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:45.393494 2026] [access_compat:error] [pid 276059:tid 276289] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:45.432833 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.433271 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.484605 2026] [security2:error] [pid 276620:tid 276811] [client 223.235.102.107:9974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2bdPAdfEWqmGIkg1v1AAAAkg"]
[Wed Sep 30 01:12:45.484820 2026] [security2:error] [pid 276620:tid 276811] [client 223.235.102.107:9974] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2bdPAdfEWqmGIkg1v1AAAAkg"]
[Wed Sep 30 01:12:45.487709 2026] [security2:error] [pid 276059:tid 276319] [client 20.211.90.37:18858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/photo.php"] [unique_id "ary2bXtqdHBwD77138fAYgAAAgs"]
[Wed Sep 30 01:12:45.515280 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.515579 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.553056 2026] [security2:error] [pid 276620:tid 276852] [client 43.104.4.205:24874] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary2bdPAdfEWqmGIkg1v3AAAAnE"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:12:45.593715 2026] [security2:error] [pid 276059:tid 276219] [client 74.225.148.80:10822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/aaa.php"] [unique_id "ary2bXtqdHBwD77138fAaQAAAac"]
[Wed Sep 30 01:12:45.609392 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.609831 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.695583 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.695860 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.731073 2026] [security2:error] [pid 276620:tid 276868] [client 20.213.164.196:51055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2bdPAdfEWqmGIkg1v3wAAAoE"]
[Wed Sep 30 01:12:45.773066 2026] [security2:error] [pid 276059:tid 276271] [client 20.219.2.60:29897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/xwzs.php"] [unique_id "ary2bXtqdHBwD77138fAagAAAds"]
[Wed Sep 30 01:12:45.785904 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.786167 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.815162 2026] [security2:error] [pid 276059:tid 276232] [client 20.213.164.196:21932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/24.php"] [unique_id "ary2bXtqdHBwD77138fAawAAAbQ"]
[Wed Sep 30 01:12:45.877673 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.877990 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.890084 2026] [access_compat:error] [pid 276059:tid 276260] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:45.890139 2026] [security2:error] [pid 276059:tid 276263] [client 20.211.90.37:19366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-fxxxx.php"] [unique_id "ary2bXtqdHBwD77138fAbQAAAdM"]
[Wed Sep 30 01:12:45.890354 2026] [access_compat:error] [pid 276059:tid 276260] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:45.967462 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:45.967735 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:45.996498 2026] [security2:error] [pid 276620:tid 276852] [client 20.204.42.136:35765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/a65.php"] [unique_id "ary2bdPAdfEWqmGIkg1v6QAAAnE"]
[Wed Sep 30 01:12:46.041236 2026] [security2:error] [pid 276059:tid 276270] [client 65.111.29.172:57611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.29.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2bntqdHBwD77138fAdAAAAdo"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:12:46.055091 2026] [security2:error] [pid 276059:tid 276289] [client 74.225.148.80:11249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/chosen.php"] [unique_id "ary2bntqdHBwD77138fAdgAAAe0"]
[Wed Sep 30 01:12:46.059908 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.060195 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:37744] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.063165 2026] [qos:error] [pid 276620:tid 276690] [remote 177.249.171.149:47543] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=177.249.171.149, id=ary2btPAdfEWqmGIkg1v7wACYTw
[Wed Sep 30 01:12:46.080078 2026] [security2:error] [pid 276620:tid 276867] [client 203.122.45.246:64143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2btPAdfEWqmGIkg1v8AAAAoA"]
[Wed Sep 30 01:12:46.080198 2026] [security2:error] [pid 276620:tid 276867] [client 203.122.45.246:64143] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2btPAdfEWqmGIkg1v8AAAAoA"]
[Wed Sep 30 01:12:46.147644 2026] [qos:error] [pid 276059:tid 276140] [remote 177.239.81.253:59176] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=177.239.81.253, id=ary2bntqdHBwD77138fAeAACC0w
[Wed Sep 30 01:12:46.151390 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.151639 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.176126 2026] [security2:error] [pid 276620:tid 276824] [client 20.28.180.172:34241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/abde5e1996.php"] [unique_id "ary2btPAdfEWqmGIkg1v8wAAAlU"]
[Wed Sep 30 01:12:46.241614 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.241893 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.253336 2026] [security2:error] [pid 276059:tid 276250] [client 20.213.164.196:60641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2bntqdHBwD77138fAegAAAcY"]
[Wed Sep 30 01:12:46.266525 2026] [security2:error] [pid 276059:tid 276308] [client 20.211.90.37:18743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary2bntqdHBwD77138fAewAAAgA"]
[Wed Sep 30 01:12:46.330872 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.331131 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.361605 2026] [security2:error] [pid 276620:tid 276852] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2btPAdfEWqmGIkg1v-AAAAnE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:46.388346 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:46.388798 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:46.432999 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.433455 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.472587 2026] [security2:error] [pid 276620:tid 276868] [client 216.73.216.46:37744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2btPAdfEWqmGIkg1v_QAAAoE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDQvbm9kZTAvY3B1MS9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1NQ%3D%3D
[Wed Sep 30 01:12:46.514741 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.515059 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.539790 2026] [security2:error] [pid 276620:tid 276842] [client 74.225.148.80:11032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/2P.php"] [unique_id "ary2btPAdfEWqmGIkg1wBAAAAmc"]
[Wed Sep 30 01:12:46.611229 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.611520 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.664006 2026] [security2:error] [pid 276059:tid 276208] [client 20.211.90.37:19336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/ffl.php"] [unique_id "ary2bntqdHBwD77138fAhwAAAZ0"]
[Wed Sep 30 01:12:46.682519 2026] [security2:error] [pid 276059:tid 276243] [client 20.213.164.196:51048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/adminfuns.php"] [unique_id "ary2bntqdHBwD77138fAiAAAAb8"]
[Wed Sep 30 01:12:46.697059 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.697327 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.708608 2026] [security2:error] [pid 276620:tid 276872] [client 20.213.164.196:21840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/xwpg.php"] [unique_id "ary2btPAdfEWqmGIkg1wDgAAAoU"]
[Wed Sep 30 01:12:46.724942 2026] [security2:error] [pid 276059:tid 276217] [client 168.100.149.63:24852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/6.png"] [unique_id "ary2bntqdHBwD77138fAiQABpSk"]
[Wed Sep 30 01:12:46.728179 2026] [security2:error] [pid 276059:tid 276122] [remote 122.14.227.80:48352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "captpeacock.com"] [uri "/img/slider/slide_06.jpg"] [unique_id "ary2bntqdHBwD77138fAiwABoDo"]
[Wed Sep 30 01:12:46.779373 2026] [security2:error] [pid 276620:tid 276802] [client 45.138.12.44:39188] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "autodiscover.bashertcontractors.com"] [uri "/wp-content/plugins/web-to-print-online-designer/readme.txt"] [unique_id "ary2btPAdfEWqmGIkg1wEQAAAj8"]
[Wed Sep 30 01:12:46.785722 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.785986 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.804240 2026] [security2:error] [pid 276059:tid 276293] [client 20.219.2.60:30337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-admin/network/users.php"] [unique_id "ary2bntqdHBwD77138fAkAAAAfE"]
[Wed Sep 30 01:12:46.877936 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.878204 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.878399 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:46.878805 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:46.971365 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:46.971793 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:46.994607 2026] [security2:error] [pid 276620:tid 276811] [client 20.194.5.96:44965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/cued.php"] [unique_id "ary2btPAdfEWqmGIkg1wIQAAAkg"]
[Wed Sep 30 01:12:47.055121 2026] [security2:error] [pid 276059:tid 276228] [client 74.225.148.80:11259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/min.php"] [unique_id "ary2b3tqdHBwD77138fAlwAAAbA"]
[Wed Sep 30 01:12:47.070650 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.071117 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.073963 2026] [security2:error] [pid 276620:tid 276802] [client 20.194.30.107:10043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2b9PAdfEWqmGIkg1wJQAAAj8"]
[Wed Sep 30 01:12:47.114499 2026] [security2:error] [pid 276620:tid 276819] [client 182.69.182.151:24658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2b9PAdfEWqmGIkg1wJwAAAlA"]
[Wed Sep 30 01:12:47.114630 2026] [security2:error] [pid 276620:tid 276819] [client 182.69.182.151:24658] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2b9PAdfEWqmGIkg1wJwAAAlA"]
[Wed Sep 30 01:12:47.149677 2026] [security2:error] [pid 276620:tid 276827] [client 20.211.90.37:18845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/wp5.php"] [unique_id "ary2b9PAdfEWqmGIkg1wKAAAAlg"]
[Wed Sep 30 01:12:47.160803 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.161265 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.193419 2026] [security2:error] [pid 276059:tid 276231] [client 173.254.29.157:58922] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2b3tqdHBwD77138fAmAAAAbM"]
[Wed Sep 30 01:12:47.231883 2026] [security2:error] [pid 276620:tid 276762] [client 173.254.29.157:58932] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2b9PAdfEWqmGIkg1wOAAAAhc"]
[Wed Sep 30 01:12:47.253848 2026] [security2:error] [pid 276620:tid 276819] [client 173.254.29.157:58950] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2b9PAdfEWqmGIkg1wPgAAAlA"]
[Wed Sep 30 01:12:47.255270 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.255724 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.257964 2026] [security2:error] [pid 276620:tid 276804] [client 20.28.180.172:61239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/profile.php"] [unique_id "ary2b9PAdfEWqmGIkg1wPwAAAkE"]
[Wed Sep 30 01:12:47.267148 2026] [security2:error] [pid 276620:tid 276860] [client 20.213.164.196:21878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/blacks.php"] [unique_id "ary2b9PAdfEWqmGIkg1wQAAAAnk"]
[Wed Sep 30 01:12:47.275753 2026] [security2:error] [pid 276620:tid 276866] [client 173.254.29.157:58958] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2b9PAdfEWqmGIkg1wQgAAAn8"]
[Wed Sep 30 01:12:47.277166 2026] [security2:error] [pid 276620:tid 276759] [client 43.104.4.205:24874] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary2b9PAdfEWqmGIkg1wQQAAAhQ"], referer: https://coscharis-tech.com/product-category/printer-accessories/toners/?wlfilter=1&woolentor_product_cat=solid-works-brands
[Wed Sep 30 01:12:47.317435 2026] [security2:error] [pid 276059:tid 276272] [client 122.173.27.10:7582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2b3tqdHBwD77138fAnAAAAdw"]
[Wed Sep 30 01:12:47.317557 2026] [security2:error] [pid 276059:tid 276272] [client 122.173.27.10:7582] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2b3tqdHBwD77138fAnAAAAdw"]
[Wed Sep 30 01:12:47.339512 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.339759 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.393072 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:47.393525 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:47.445433 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.445869 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.527178 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.527642 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.553136 2026] [security2:error] [pid 276059:tid 276208] [client 20.213.164.196:51019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/av.php"] [unique_id "ary2b3tqdHBwD77138fApQAAAZ0"]
[Wed Sep 30 01:12:47.560096 2026] [security2:error] [pid 276620:tid 276840] [client 20.211.90.37:18842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/koiy.php"] [unique_id "ary2b9PAdfEWqmGIkg1wVAAAAmU"]
[Wed Sep 30 01:12:47.612864 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.613131 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.696351 2026] [security2:error] [pid 276620:tid 276882] [client 20.213.164.196:21851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/class-wp-http-client.php"] [unique_id "ary2b9PAdfEWqmGIkg1wXQAAAo8"]
[Wed Sep 30 01:12:47.704116 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.704427 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.743995 2026] [security2:error] [pid 276059:tid 276198] [client 45.138.12.32:53408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mcr.pyt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2b3tqdHBwD77138fAqQAAAZM"]
[Wed Sep 30 01:12:47.780677 2026] [security2:error] [pid 276620:tid 276815] [client 74.225.148.80:11051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/great.php"] [unique_id "ary2b9PAdfEWqmGIkg1wYAAAAkw"]
[Wed Sep 30 01:12:47.800154 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.800581 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.850111 2026] [security2:error] [pid 276620:tid 276827] [client 20.194.30.107:10015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/tool.php"] [unique_id "ary2b9PAdfEWqmGIkg1wZAAAAlg"]
[Wed Sep 30 01:12:47.865791 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:47.866082 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:47.885979 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.886258 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:47.915239 2026] [autoindex:error] [pid 276059:tid 276244] [client 20.70.173.30:33393] AH01276: Cannot serve directory /home3/habeshac/public_html/hairofsheba/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:12:47.919605 2026] [security2:error] [pid 276620:tid 276799] [client 20.211.90.37:18834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/bnmtp.php"] [unique_id "ary2b9PAdfEWqmGIkg1waAAAAjw"]
[Wed Sep 30 01:12:47.953590 2026] [security2:error] [pid 276620:tid 276804] [client 4.240.25.22:38730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/well.php"] [unique_id "ary2b9PAdfEWqmGIkg1wbQAAAkE"]
[Wed Sep 30 01:12:47.978328 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:47.978604 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.004780 2026] [security2:error] [pid 276620:tid 276785] [client 20.213.164.196:51595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/dex.php"] [unique_id "ary2cNPAdfEWqmGIkg1wcgAAAi4"]
[Wed Sep 30 01:12:48.027881 2026] [security2:error] [pid 276620:tid 276793] [client 20.194.30.107:38115] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.hairofsheba.com"] [uri "/1.php"] [unique_id "ary2cNPAdfEWqmGIkg1wdwAAAjY"]
[Wed Sep 30 01:12:48.027973 2026] [security2:error] [pid 276620:tid 276793] [client 20.194.30.107:38115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/1.php"] [unique_id "ary2cNPAdfEWqmGIkg1wdwAAAjY"]
[Wed Sep 30 01:12:48.060330 2026] [security2:error] [pid 276059:tid 276202] [client 20.70.173.30:46264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/biufile.php"] [unique_id "ary2cHtqdHBwD77138fArwAAAZc"]
[Wed Sep 30 01:12:48.072974 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.073426 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.076340 2026] [security2:error] [pid 276059:tid 276199] [client 20.194.30.107:17409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/reop3.php"] [unique_id "ary2cHtqdHBwD77138fAsAAAAZQ"]
[Wed Sep 30 01:12:48.090598 2026] [security2:error] [pid 276620:tid 276820] [client 49.43.163.212:56124] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2cNPAdfEWqmGIkg1wfAAAAlE"]
[Wed Sep 30 01:12:48.090822 2026] [security2:error] [pid 276620:tid 276820] [client 49.43.163.212:56124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2cNPAdfEWqmGIkg1wfAAAAlE"]
[Wed Sep 30 01:12:48.160967 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.161230 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.184204 2026] [security2:error] [pid 276620:tid 276776] [client 4.240.25.22:18798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/cilus.php"] [unique_id "ary2cNPAdfEWqmGIkg1wgQAAAiU"]
[Wed Sep 30 01:12:48.243026 2026] [security2:error] [pid 276059:tid 276224] [client 74.225.148.80:11243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/BDKR28WP.php"] [unique_id "ary2cHtqdHBwD77138fAsgAAAaw"]
[Wed Sep 30 01:12:48.252635 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.252908 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.300160 2026] [qos:error] [pid 276620:tid 276664] [remote 76.157.195.179:47600] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=76.157.195.179, id=ary2cNPAdfEWqmGIkg1whwACPyI
[Wed Sep 30 01:12:48.314416 2026] [security2:error] [pid 276620:tid 276859] [client 20.219.2.60:30378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws66.php"] [unique_id "ary2cNPAdfEWqmGIkg1wiQAAAng"]
[Wed Sep 30 01:12:48.322287 2026] [security2:error] [pid 276620:tid 276846] [client 202.179.95.79:63635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2cNPAdfEWqmGIkg1wiAAAAms"]
[Wed Sep 30 01:12:48.322403 2026] [security2:error] [pid 276620:tid 276846] [client 202.179.95.79:63635] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2cNPAdfEWqmGIkg1wiAAAAms"]
[Wed Sep 30 01:12:48.329398 2026] [security2:error] [pid 276059:tid 276308] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2cHtqdHBwD77138fAtgAAAgA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:48.344287 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.344576 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.345041 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:48.345311 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:48.361021 2026] [security2:error] [pid 276620:tid 276785] [client 20.194.5.96:59176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/sd.php"] [unique_id "ary2cNPAdfEWqmGIkg1wiwAAAi4"]
[Wed Sep 30 01:12:48.411034 2026] [security2:error] [pid 276620:tid 276793] [client 20.213.164.196:60631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/chosen.php"] [unique_id "ary2cNPAdfEWqmGIkg1wjgAAAjY"]
[Wed Sep 30 01:12:48.415757 2026] [security2:error] [pid 276620:tid 276798] [client 74.7.242.1:57828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2cNPAdfEWqmGIkg1wjwAAAjs"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:12:48.417592 2026] [security2:error] [pid 276620:tid 276827] [client 20.211.90.37:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/abbi.php"] [unique_id "ary2cNPAdfEWqmGIkg1wkQAAAlg"]
[Wed Sep 30 01:12:48.426314 2026] [security2:error] [pid 276620:tid 276809] [client 20.213.164.196:21834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/zoo2.php"] [unique_id "ary2cNPAdfEWqmGIkg1wkgAAAkY"]
[Wed Sep 30 01:12:48.445007 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.445424 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.527194 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.527462 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.619017 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.619275 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.693064 2026] [security2:error] [pid 276059:tid 276283] [client 74.225.148.80:11034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/gigi.php"] [unique_id "ary2cHtqdHBwD77138fAwQAAAec"]
[Wed Sep 30 01:12:48.699232 2026] [qos:error] [pid 276059:tid 276204] [client 24.22.144.119:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2cHtqdHBwD77138fAwgAAAZk
[Wed Sep 30 01:12:48.707610 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.707875 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.749823 2026] [security2:error] [pid 276620:tid 276830] [client 20.211.90.37:19275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pearlcogop.com"] [uri "/asw.php"] [unique_id "ary2cNPAdfEWqmGIkg1wowAAAls"]
[Wed Sep 30 01:12:48.790084 2026] [security2:error] [pid 276059:tid 276232] [client 20.213.164.196:51596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/radio.php"] [unique_id "ary2cHtqdHBwD77138fAxAAAAbQ"]
[Wed Sep 30 01:12:48.794493 2026] [qos:error] [pid 276620:tid 276820] [client 95.91.215.156:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2cNPAdfEWqmGIkg1wqAAAAlE
[Wed Sep 30 01:12:48.800643 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.800938 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.825196 2026] [security2:error] [pid 276620:tid 276815] [client 168.100.149.176:15548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/11.png"] [unique_id "ary2cNPAdfEWqmGIkg1wogACi30"]
[Wed Sep 30 01:12:48.833205 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:48.833484 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:48.873622 2026] [security2:error] [pid 276059:tid 276212] [client 20.194.30.107:23690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/abcd.php"] [unique_id "ary2cHtqdHBwD77138fAxwAAAaA"]
[Wed Sep 30 01:12:48.889848 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.890100 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:48.900554 2026] [security2:error] [pid 276620:tid 276771] [client 20.213.164.196:21859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/zoo1.php"] [unique_id "ary2cNPAdfEWqmGIkg1wqgAAAiA"]
[Wed Sep 30 01:12:48.937388 2026] [security2:error] [pid 276620:tid 276859] [client 20.194.30.107:44670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/js.php"] [unique_id "ary2cNPAdfEWqmGIkg1wrgAAAng"]
[Wed Sep 30 01:12:48.964795 2026] [security2:error] [pid 276620:tid 276846] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary2cNPAdfEWqmGIkg1wsQAAAms"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:48.979882 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:48.980142 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.074733 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.075175 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.158558 2026] [security2:error] [pid 276620:tid 276788] [client 74.225.148.80:10816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ant.php"] [unique_id "ary2cdPAdfEWqmGIkg1wvAAAAjE"]
[Wed Sep 30 01:12:49.164195 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.164477 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.177305 2026] [security2:error] [pid 276620:tid 276854] [client 20.28.180.172:18191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/class-t.api.php"] [unique_id "ary2cdPAdfEWqmGIkg1wvQAAAnM"]
[Wed Sep 30 01:12:49.201308 2026] [security2:error] [pid 276059:tid 276307] [client 155.190.6.18:45234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2cXtqdHBwD77138fAzAAAAf8"]
[Wed Sep 30 01:12:49.210025 2026] [security2:error] [pid 276620:tid 276867] [client 20.70.173.30:5769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2cdPAdfEWqmGIkg1wvgAAAoA"]
[Wed Sep 30 01:12:49.247909 2026] [qos:error] [pid 276620:tid 276878] [client 190.122.202.171:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2cdPAdfEWqmGIkg1wwAAAAos
[Wed Sep 30 01:12:49.255429 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.255696 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.256513 2026] [security2:error] [pid 276620:tid 276776] [client 20.213.164.196:60661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2cdPAdfEWqmGIkg1wwgAAAiU"]
[Wed Sep 30 01:12:49.337071 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:49.337341 2026] [access_compat:error] [pid 276059:tid 276217] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:49.347916 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.348202 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.357136 2026] [security2:error] [pid 276059:tid 276276] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2cXtqdHBwD77138fA0QAAAeA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:49.440874 2026] [security2:error] [pid 276620:tid 276844] [client 20.194.30.107:9836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/az.php"] [unique_id "ary2cdPAdfEWqmGIkg1wyAAAAmk"]
[Wed Sep 30 01:12:49.447975 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.448421 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.470687 2026] [security2:error] [pid 276059:tid 276177] [remote 57.141.14.110:30464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/xmlrpc.php"] [unique_id "ary2cXtqdHBwD77138fA0gABxXE"]
[Wed Sep 30 01:12:49.484877 2026] [security2:error] [pid 276059:tid 276307] [client 155.190.6.18:45234] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2cXtqdHBwD77138fAzAAAAf8"]
[Wed Sep 30 01:12:49.536149 2026] [security2:error] [pid 276059:tid 276231] [client 20.219.2.60:30362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ewe.php"] [unique_id "ary2cXtqdHBwD77138fA1AAAAbM"]
[Wed Sep 30 01:12:49.539845 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.540280 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.545272 2026] [security2:error] [pid 276620:tid 276781] [client 20.194.96.176:32553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/z60.php"] [unique_id "ary2cdPAdfEWqmGIkg1wzwAAAio"]
[Wed Sep 30 01:12:49.561116 2026] [security2:error] [pid 276059:tid 276106] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2cXtqdHBwD77138fA1QAB9Co"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293299&sid=2393f12295c83486318daa9524aeb699
[Wed Sep 30 01:12:49.561137 2026] [security2:error] [pid 276059:tid 276106] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2cXtqdHBwD77138fA1QAB9Co"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=293299&sid=2393f12295c83486318daa9524aeb699
[Wed Sep 30 01:12:49.629703 2026] [security2:error] [pid 276620:tid 276799] [client 74.225.148.80:11204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/uejvv.php"] [unique_id "ary2cdPAdfEWqmGIkg1w0gAAAjw"]
[Wed Sep 30 01:12:49.630334 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.630635 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.686919 2026] [security2:error] [pid 276620:tid 276824] [client 20.213.164.196:21934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/class-ajax.php"] [unique_id "ary2cdPAdfEWqmGIkg1w1wAAAlU"]
[Wed Sep 30 01:12:49.718454 2026] [security2:error] [pid 276059:tid 276277] [client 4.240.25.22:38760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2cXtqdHBwD77138fA2QAAAeE"]
[Wed Sep 30 01:12:49.722199 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.722468 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.766738 2026] [security2:error] [pid 276620:tid 276804] [client 20.213.164.196:60614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/k.php"] [unique_id "ary2cdPAdfEWqmGIkg1w2QAAAkE"]
[Wed Sep 30 01:12:49.816775 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.817058 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.830880 2026] [security2:error] [pid 276059:tid 276283] [client 20.28.180.172:29575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridcloudinnovation.com"] [uri "/cjhnp.php"] [unique_id "ary2cXtqdHBwD77138fA2gAAAec"]
[Wed Sep 30 01:12:49.854492 2026] [access_compat:error] [pid 276059:tid 276204] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:49.854752 2026] [access_compat:error] [pid 276059:tid 276204] [client 74.7.243.227:50284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:49.906507 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.906763 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:49.998971 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:49.999260 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.091201 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.091488 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.169941 2026] [security2:error] [pid 276620:tid 276779] [client 20.213.164.196:51609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/133.php"] [unique_id "ary2ctPAdfEWqmGIkg1w7AAAAig"]
[Wed Sep 30 01:12:50.181119 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.181400 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:55358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.188025 2026] [security2:error] [pid 276620:tid 276763] [client 20.213.164.196:21921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/gm.php"] [unique_id "ary2ctPAdfEWqmGIkg1w7gAAAhg"]
[Wed Sep 30 01:12:50.200919 2026] [http2:warn] [pid 270884:tid 271035] [client 52.167.144.188:61579] h2_stream(270884-364-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:12:50.203393 2026] [access_compat:error] [pid 276620:tid 276816] [client 47.79.13.1:33980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:50.203674 2026] [access_compat:error] [pid 276620:tid 276816] [client 47.79.13.1:33980] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:50.217665 2026] [qos:error] [pid 276059:tid 276136] [remote 47.197.246.133:49282] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=47.197.246.133, id=ary2cntqdHBwD77138fA4AABv0g
[Wed Sep 30 01:12:50.239307 2026] [qos:error] [pid 276059:tid 276271] [client 80.140.158.2:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2cntqdHBwD77138fA4QAAAds
[Wed Sep 30 01:12:50.272937 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.273203 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.280785 2026] [security2:error] [pid 276620:tid 276867] [client 20.219.2.60:29902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/aboute.php"] [unique_id "ary2ctPAdfEWqmGIkg1w8gAAAoA"]
[Wed Sep 30 01:12:50.301704 2026] [security2:error] [pid 276059:tid 276321] [client 103.211.18.63:63716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2cntqdHBwD77138fA4gAAAg0"]
[Wed Sep 30 01:12:50.301804 2026] [security2:error] [pid 276059:tid 276321] [client 103.211.18.63:63716] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2cntqdHBwD77138fA4gAAAg0"]
[Wed Sep 30 01:12:50.313433 2026] [security2:error] [pid 276620:tid 276788] [client 20.194.5.96:64483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/ans.php"] [unique_id "ary2ctPAdfEWqmGIkg1w8wAAAjE"]
[Wed Sep 30 01:12:50.372804 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.373254 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.393057 2026] [access_compat:error] [pid 276059:tid 276274] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:50.393496 2026] [access_compat:error] [pid 276059:tid 276274] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:50.437957 2026] [security2:error] [pid 276620:tid 276697] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2ctPAdfEWqmGIkg1w-wACcUM"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D68365
[Wed Sep 30 01:12:50.479650 2026] [security2:error] [pid 276620:tid 276860] [client 106.214.2.47:3565] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ctPAdfEWqmGIkg1w_QAAAnk"]
[Wed Sep 30 01:12:50.479869 2026] [security2:error] [pid 276620:tid 276860] [client 106.214.2.47:3565] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ctPAdfEWqmGIkg1w_QAAAnk"]
[Wed Sep 30 01:12:50.508475 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.508730 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.542546 2026] [security2:error] [pid 276059:tid 276234] [client 4.240.25.22:33331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/c.php"] [unique_id "ary2cntqdHBwD77138fA6QAAAbY"]
[Wed Sep 30 01:12:50.547489 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.547733 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.596266 2026] [security2:error] [pid 276059:tid 276289] [client 20.213.164.196:60619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wsd.php"] [unique_id "ary2cntqdHBwD77138fA6gAAAe0"]
[Wed Sep 30 01:12:50.602234 2026] [security2:error] [pid 276620:tid 276793] [client 216.73.216.46:55358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ctPAdfEWqmGIkg1xAQAAAjY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTMvbm9kZTAvbWVtb3J5NDg2
[Wed Sep 30 01:12:50.622055 2026] [security2:error] [pid 276620:tid 276827] [client 74.225.148.80:11213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/file.php"] [unique_id "ary2ctPAdfEWqmGIkg1xAgAAAlg"]
[Wed Sep 30 01:12:50.638274 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.638555 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:2975] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.719899 2026] [security2:error] [pid 276620:tid 276813] [client 168.100.149.194:41954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/10/tinywow_MN-Logo-New_31710656_1-crop-252x300.jpg"] [unique_id "ary2ctPAdfEWqmGIkg1xCgACSiw"]
[Wed Sep 30 01:12:50.727387 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.727663 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.792443 2026] [security2:error] [pid 276059:tid 276215] [client 20.213.164.196:21839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/class-wp-site-list.php"] [unique_id "ary2cntqdHBwD77138fA7AAAAaM"]
[Wed Sep 30 01:12:50.871794 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.872069 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.886408 2026] [security2:error] [pid 276059:tid 276273] [client 4.240.25.22:38770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/ccc.php"] [unique_id "ary2cntqdHBwD77138fA8AAAAd0"]
[Wed Sep 30 01:12:50.898219 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:12:50.898478 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIzL2N3ZC9ldGM=
[Wed Sep 30 01:12:50.914364 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:50.914643 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:50.969589 2026] [security2:error] [pid 276620:tid 276883] [client 20.194.5.96:64480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/cns.php"] [unique_id "ary2ctPAdfEWqmGIkg1xFAAAApA"]
[Wed Sep 30 01:12:50.971600 2026] [qos:error] [pid 276620:tid 276679] [remote 69.255.32.32:43524] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=69.255.32.32, id=ary2ctPAdfEWqmGIkg1xFQACZzE
[Wed Sep 30 01:12:50.975020 2026] [access_compat:error] [pid 276620:tid 276820] [client 47.82.11.53:49286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:12:50.975291 2026] [access_compat:error] [pid 276620:tid 276820] [client 47.82.11.53:49286] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:12:50.980632 2026] [security2:error] [pid 276059:tid 276250] [client 45.138.12.48:47072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jqk.qmh.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2cntqdHBwD77138fA8gAAAcY"]
[Wed Sep 30 01:12:51.005836 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.006192 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.051306 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:2975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2c9PAdfEWqmGIkg1xGgAAAkg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzUvbm9kZTAvY3B1OS9kcml2ZXIvY3B1MTI%3D
[Wed Sep 30 01:12:51.088383 2026] [security2:error] [pid 276059:tid 276203] [client 74.225.148.80:11211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/elements.php"] [unique_id "ary2c3tqdHBwD77138fA9gAAAZg"]
[Wed Sep 30 01:12:51.095516 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.095884 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.185904 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.186180 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.193692 2026] [security2:error] [pid 276059:tid 276314] [client 20.213.164.196:21903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/ttivnife.php"] [unique_id "ary2c3tqdHBwD77138fA-QAAAgY"]
[Wed Sep 30 01:12:51.195181 2026] [security2:error] [pid 276620:tid 276763] [client 20.213.164.196:51611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/BDKR28WP.php"] [unique_id "ary2c9PAdfEWqmGIkg1xHQAAAhg"]
[Wed Sep 30 01:12:51.218289 2026] [security2:error] [pid 276059:tid 276211] [client 4.240.25.22:18641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2c3tqdHBwD77138fA-gAAAZ8"]
[Wed Sep 30 01:12:51.276996 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.277263 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.304297 2026] [qos:error] [pid 276059:tid 276172] [remote 98.97.49.81:58196] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=98.97.49.81, id=ary2c3tqdHBwD77138fA-wAB-2w
[Wed Sep 30 01:12:51.338091 2026] [access_compat:error] [pid 276059:tid 276318] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:51.338364 2026] [access_compat:error] [pid 276059:tid 276318] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:51.342008 2026] [security2:error] [pid 276620:tid 276698] [remote 57.141.14.83:44138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary2c9PAdfEWqmGIkg1xIAACZ0Q"]
[Wed Sep 30 01:12:51.373867 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.374309 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.446095 2026] [security2:error] [pid 276620:tid 276852] [client 20.70.173.30:2401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/simple.php"] [unique_id "ary2c9PAdfEWqmGIkg1xIwAAAnE"]
[Wed Sep 30 01:12:51.472895 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.473167 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.552752 2026] [security2:error] [pid 276059:tid 276292] [client 74.225.148.80:11208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/sitemap.php"] [unique_id "ary2c3tqdHBwD77138fBAgAAAfA"]
[Wed Sep 30 01:12:51.560831 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.561109 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.614327 2026] [security2:error] [pid 276620:tid 276763] [client 20.213.164.196:60668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wmore1.php"] [unique_id "ary2c9PAdfEWqmGIkg1xLwAAAhg"]
[Wed Sep 30 01:12:51.649082 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.649385 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:28055] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.696845 2026] [security2:error] [pid 276620:tid 276768] [client 20.213.164.196:22165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/admin.php/2P.php"] [unique_id "ary2c9PAdfEWqmGIkg1xNQAAAh0"]
[Wed Sep 30 01:12:51.740433 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.740701 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.774202 2026] [security2:error] [pid 276620:tid 276771] [client 20.194.30.107:10013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/133.php"] [unique_id "ary2c9PAdfEWqmGIkg1xOAAAAiA"]
[Wed Sep 30 01:12:51.803167 2026] [security2:error] [pid 276059:tid 276195] [client 20.219.2.60:30376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/x9.php"] [unique_id "ary2c3tqdHBwD77138fBBAAAAZA"]
[Wed Sep 30 01:12:51.830542 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.830803 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:51.873317 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:12:51.873580 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzM4NjEyL2N3ZC9ldGM=
[Wed Sep 30 01:12:51.893191 2026] [security2:error] [pid 276620:tid 276798] [client 20.28.180.172:61217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-links-opml.php"] [unique_id "ary2c9PAdfEWqmGIkg1xOgAAAjs"]
[Wed Sep 30 01:12:51.909181 2026] [security2:error] [pid 276620:tid 276830] [client 4.240.25.22:8954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/tool.php"] [unique_id "ary2c9PAdfEWqmGIkg1xPAAAAls"]
[Wed Sep 30 01:12:51.929512 2026] [security2:error] [pid 276620:tid 276799] [client 20.70.173.30:25201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/media.php"] [unique_id "ary2c9PAdfEWqmGIkg1xPQAAAjw"]
[Wed Sep 30 01:12:51.936459 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:51.936717 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.018082 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.018542 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.042828 2026] [security2:error] [pid 276059:tid 276216] [client 74.225.148.80:11258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/xetmolxr.php"] [unique_id "ary2dHtqdHBwD77138fBDQAAAaQ"]
[Wed Sep 30 01:12:52.075965 2026] [security2:error] [pid 276620:tid 276771] [client 20.213.164.196:21900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/a.php"] [unique_id "ary2dNPAdfEWqmGIkg1xSgAAAiA"]
[Wed Sep 30 01:12:52.105240 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.105541 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.110394 2026] [security2:error] [pid 276620:tid 276866] [client 216.73.216.46:28055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2dNPAdfEWqmGIkg1xTAAAAn8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzUvbm9kZTAvbWVtb3J5MTYx
[Wed Sep 30 01:12:52.188167 2026] [security2:error] [pid 276620:tid 276713] [remote 220.181.108.101:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2dNPAdfEWqmGIkg1xTgACTlM"]
[Wed Sep 30 01:12:52.203198 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.203473 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.231094 2026] [security2:error] [pid 276620:tid 276867] [client 20.213.164.196:51598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/177.php"] [unique_id "ary2dNPAdfEWqmGIkg1xUwAAAoA"]
[Wed Sep 30 01:12:52.292093 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.292345 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.342268 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:52.342541 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:52.368165 2026] [security2:error] [pid 276620:tid 276635] [remote 220.181.108.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2dNPAdfEWqmGIkg1xWQACWwU"]
[Wed Sep 30 01:12:52.388855 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.389287 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.389747 2026] [security2:error] [pid 276059:tid 276279] [client 105.112.178.79:38595] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fkn.gcl.mybluehost.me"] [uri "/__ss_probe_aea6c9b35919b3ba6140811a3ed6e9a1__"] [unique_id "ary2dHtqdHBwD77138fBGwAAAeM"]
[Wed Sep 30 01:12:52.530004 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.530246 2026] [security2:error] [pid 276620:tid 276792] [client 74.225.148.80:11218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/mini.php"] [unique_id "ary2dNPAdfEWqmGIkg1xagAAAjU"]
[Wed Sep 30 01:12:52.530266 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.562740 2026] [security2:error] [pid 276059:tid 276232] [client 82.102.18.126:36902] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2dHtqdHBwD77138fBIwAAAbQ"]
[Wed Sep 30 01:12:52.562834 2026] [security2:error] [pid 276059:tid 276243] [client 20.219.2.60:30357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/an.php"] [unique_id "ary2dHtqdHBwD77138fBJAAAAb8"]
[Wed Sep 30 01:12:52.566326 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.566615 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.567185 2026] [security2:error] [pid 276620:tid 276808] [client 20.213.164.196:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/cord.php"] [unique_id "ary2dNPAdfEWqmGIkg1xawAAAkU"]
[Wed Sep 30 01:12:52.603493 2026] [security2:error] [pid 276620:tid 276762] [client 103.241.204.139:49364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2dNPAdfEWqmGIkg1xbAAAAhc"]
[Wed Sep 30 01:12:52.603827 2026] [security2:error] [pid 276620:tid 276762] [client 103.241.204.139:49364] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2dNPAdfEWqmGIkg1xbAAAAhc"]
[Wed Sep 30 01:12:52.605486 2026] [security2:error] [pid 276059:tid 276321] [client 20.213.164.196:60657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/ccc.php"] [unique_id "ary2dHtqdHBwD77138fBJQAAAg0"]
[Wed Sep 30 01:12:52.658372 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.658647 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.721413 2026] [security2:error] [pid 276059:tid 276322] [client 168.100.149.140:40046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/5-e1669632696515.png"] [unique_id "ary2dHtqdHBwD77138fBKAACDlU"]
[Wed Sep 30 01:12:52.731291 2026] [qos:error] [pid 276620:tid 276874] [client 38.253.148.100:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2dNPAdfEWqmGIkg1xegAAAoc
[Wed Sep 30 01:12:52.732995 2026] [security2:error] [pid 276620:tid 276874] [client 20.70.173.30:33403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/c.php"] [unique_id "ary2dNPAdfEWqmGIkg1xewAAAoc"]
[Wed Sep 30 01:12:52.751767 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.752212 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.809040 2026] [security2:error] [pid 276620:tid 276768] [client 4.240.25.22:18807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/reviall.php"] [unique_id "ary2dNPAdfEWqmGIkg1xfQAAAh0"]
[Wed Sep 30 01:12:52.839289 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.839567 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.870573 2026] [access_compat:error] [pid 276059:tid 276234] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 01:12:52.871024 2026] [access_compat:error] [pid 276059:tid 276234] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?del=admin&p=L3Byb2MvOTU0NDAzL2N3ZA==
[Wed Sep 30 01:12:52.881192 2026] [security2:error] [pid 276059:tid 276069] [remote 74.7.227.56:48734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2dHtqdHBwD77138fBLwABsgU"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=550
[Wed Sep 30 01:12:52.926458 2026] [qos:error] [pid 276620:tid 276759] [client 72.218.67.245:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2dNPAdfEWqmGIkg1xiQAAAhQ
[Wed Sep 30 01:12:52.931067 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:52.931558 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:52.959548 2026] [security2:error] [pid 276620:tid 276866] [client 37.41.16.35:52424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2dNPAdfEWqmGIkg1xigAAAn8"]
[Wed Sep 30 01:12:52.959838 2026] [security2:error] [pid 276620:tid 276866] [client 37.41.16.35:52424] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2dNPAdfEWqmGIkg1xigAAAn8"]
[Wed Sep 30 01:12:52.969731 2026] [security2:error] [pid 276620:tid 276820] [client 20.213.164.196:60627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/0xD.php"] [unique_id "ary2dNPAdfEWqmGIkg1xjAAAAlE"]
[Wed Sep 30 01:12:52.977792 2026] [security2:error] [pid 276620:tid 276818] [client 20.194.5.96:64473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/faiy.php"] [unique_id "ary2dNPAdfEWqmGIkg1xjgAAAk8"]
[Wed Sep 30 01:12:52.981583 2026] [qos:error] [pid 276620:tid 276830] [client 69.250.109.40:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2dNPAdfEWqmGIkg1xkAAAAls
[Wed Sep 30 01:12:52.988962 2026] [security2:error] [pid 276620:tid 276811] [client 74.225.148.80:11061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/zwso.php"] [unique_id "ary2dNPAdfEWqmGIkg1xkQAAAkg"]
[Wed Sep 30 01:12:53.020905 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.021176 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.034010 2026] [security2:error] [pid 276620:tid 276848] [client 20.213.164.196:21910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/anom.php"] [unique_id "ary2ddPAdfEWqmGIkg1xlAAAAm0"]
[Wed Sep 30 01:12:53.114042 2026] [access_compat:error] [pid 276059:tid 276224] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.114490 2026] [access_compat:error] [pid 276059:tid 276224] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.203906 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.204164 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.270692 2026] [security2:error] [pid 276620:tid 276820] [client 82.102.18.126:36912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2ddPAdfEWqmGIkg1xlgAAAlE"]
[Wed Sep 30 01:12:53.295652 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.295960 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.350724 2026] [security2:error] [pid 276059:tid 276272] [client 20.219.2.60:30044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/aboutc.php"] [unique_id "ary2dXtqdHBwD77138fBOQAAAdw"]
[Wed Sep 30 01:12:53.371529 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 01:12:53.372024 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzIxL25ldA==
[Wed Sep 30 01:12:53.399244 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.399692 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.461242 2026] [security2:error] [pid 276620:tid 276881] [client 74.225.148.80:11240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/tiny.php"] [unique_id "ary2ddPAdfEWqmGIkg1xoAAAAo4"]
[Wed Sep 30 01:12:53.491947 2026] [security2:error] [pid 276059:tid 276211] [client 20.213.164.196:21874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/plugins.php"] [unique_id "ary2dXtqdHBwD77138fBPQAAAZ8"]
[Wed Sep 30 01:12:53.520756 2026] [security2:error] [pid 276620:tid 276783] [client 20.213.164.196:51061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/sallu.php"] [unique_id "ary2ddPAdfEWqmGIkg1xpAAAAiw"]
[Wed Sep 30 01:12:53.529154 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.529420 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.568058 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.568499 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:44912] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.572591 2026] [security2:error] [pid 276620:tid 276785] [client 82.102.18.126:39124] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2ddPAdfEWqmGIkg1xqAAAAi4"]
[Wed Sep 30 01:12:53.639768 2026] [security2:error] [pid 276059:tid 276229] [client 216.73.216.46:44912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2dXtqdHBwD77138fBQgAAAbE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MzAz
[Wed Sep 30 01:12:53.661312 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.661593 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.684945 2026] [security2:error] [pid 276620:tid 276767] [client 20.70.173.30:39947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/admin.php"] [unique_id "ary2ddPAdfEWqmGIkg1xqQAAAhw"]
[Wed Sep 30 01:12:53.750096 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.750349 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.757762 2026] [security2:error] [pid 276620:tid 276634] [remote 220.181.108.102:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2ddPAdfEWqmGIkg1xrgACbQQ"]
[Wed Sep 30 01:12:53.847060 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.847524 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.852607 2026] [security2:error] [pid 276620:tid 276675] [remote 220.181.108.166:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2ddPAdfEWqmGIkg1xtgACRS0"]
[Wed Sep 30 01:12:53.876559 2026] [security2:error] [pid 276059:tid 276243] [client 82.102.18.126:39130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2dXtqdHBwD77138fBSwAAAb8"]
[Wed Sep 30 01:12:53.894481 2026] [security2:error] [pid 276620:tid 276691] [remote 57.141.14.32:48102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/wp-json/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/xmlrpc.php"] [unique_id "ary2ddPAdfEWqmGIkg1xtQAChz0"]
[Wed Sep 30 01:12:53.894702 2026] [security2:error] [pid 276059:tid 276304] [client 20.213.164.196:51070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/ops.php"] [unique_id "ary2dXtqdHBwD77138fBTAAAAfw"]
[Wed Sep 30 01:12:53.900203 2026] [security2:error] [pid 276059:tid 276321] [client 20.70.173.30:19183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2dXtqdHBwD77138fBTQAAAg0"]
[Wed Sep 30 01:12:53.922571 2026] [security2:error] [pid 276620:tid 276820] [client 74.225.148.80:11241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/simple.php"] [unique_id "ary2ddPAdfEWqmGIkg1xtwAAAlE"]
[Wed Sep 30 01:12:53.936138 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:53.936419 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:53.942804 2026] [security2:error] [pid 276620:tid 276772] [client 20.213.164.196:21883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/groud3.php"] [unique_id "ary2ddPAdfEWqmGIkg1xuAAAAiE"]
[Wed Sep 30 01:12:53.992968 2026] [security2:error] [pid 276620:tid 276794] [client 20.70.173.30:25373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/bthil.php"] [unique_id "ary2ddPAdfEWqmGIkg1xvAAAAjc"]
[Wed Sep 30 01:12:54.026573 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.026890 2026] [access_compat:error] [pid 276059:tid 276260] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.070434 2026] [access_compat:error] [pid 276059:tid 276208] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 01:12:54.070700 2026] [access_compat:error] [pid 276059:tid 276208] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L25ldA==
[Wed Sep 30 01:12:54.077150 2026] [security2:error] [pid 276620:tid 276830] [client 4.240.25.22:8448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/mh.php"] [unique_id "ary2dtPAdfEWqmGIkg1xvwAAAls"]
[Wed Sep 30 01:12:54.119010 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.119443 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.207715 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.207994 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.214565 2026] [security2:error] [pid 276620:tid 276883] [client 82.102.18.126:39140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2dtPAdfEWqmGIkg1xwQAAApA"]
[Wed Sep 30 01:12:54.298826 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.299099 2026] [access_compat:error] [pid 276059:tid 276249] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.338269 2026] [security2:error] [pid 276620:tid 276782] [client 20.194.30.107:17555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/CAE-2.5.php"] [unique_id "ary2dtPAdfEWqmGIkg1xxAAAAis"]
[Wed Sep 30 01:12:54.366931 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:12:54.367359 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMzQyMjA2L2N3ZA==
[Wed Sep 30 01:12:54.378795 2026] [security2:error] [pid 276059:tid 276231] [client 20.213.164.196:21951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/gaxby.php"] [unique_id "ary2dntqdHBwD77138fBYAAAAbM"]
[Wed Sep 30 01:12:54.386463 2026] [security2:error] [pid 276620:tid 276770] [client 74.225.148.80:11009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/buy.php"] [unique_id "ary2dtPAdfEWqmGIkg1xyAAAAh8"]
[Wed Sep 30 01:12:54.393861 2026] [security2:error] [pid 276059:tid 276241] [client 20.194.96.176:12509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/imageskir.php"] [unique_id "ary2dntqdHBwD77138fBYgAAAb0"]
[Wed Sep 30 01:12:54.395716 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.396172 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:46707] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.419484 2026] [security2:error] [pid 276059:tid 276273] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2dntqdHBwD77138fBZQAAAd0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:54.489096 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.489369 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.495283 2026] [security2:error] [pid 276620:tid 276767] [client 20.194.5.96:64477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/gecho.php"] [unique_id "ary2dtPAdfEWqmGIkg1xzAAAAhw"]
[Wed Sep 30 01:12:54.535834 2026] [security2:error] [pid 276620:tid 276852] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2dtPAdfEWqmGIkg1xzwAAAnE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:54.542449 2026] [security2:error] [pid 276059:tid 276314] [client 82.102.18.126:39156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2dntqdHBwD77138fBbAAAAgY"]
[Wed Sep 30 01:12:54.551479 2026] [security2:error] [pid 276620:tid 276762] [client 20.194.30.107:1823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/echkm.php"] [unique_id "ary2dtPAdfEWqmGIkg1x0gAAAhc"]
[Wed Sep 30 01:12:54.579660 2026] [security2:error] [pid 276620:tid 276783] [client 122.177.240.90:13949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2dtPAdfEWqmGIkg1x1AAAAiw"]
[Wed Sep 30 01:12:54.579752 2026] [security2:error] [pid 276620:tid 276783] [client 122.177.240.90:13949] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2dtPAdfEWqmGIkg1x1AAAAiw"]
[Wed Sep 30 01:12:54.627001 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.627280 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.661799 2026] [security2:error] [pid 276620:tid 276828] [client 4.240.25.22:12457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/tool.php"] [unique_id "ary2dtPAdfEWqmGIkg1x1wAAAlk"]
[Wed Sep 30 01:12:54.665466 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.665727 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.679379 2026] [security2:error] [pid 276620:tid 276811] [client 20.213.164.196:51013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/mac.php"] [unique_id "ary2dtPAdfEWqmGIkg1x2AAAAkg"]
[Wed Sep 30 01:12:54.729852 2026] [security2:error] [pid 276059:tid 276243] [client 20.213.164.196:21867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/dh9u7.php"] [unique_id "ary2dntqdHBwD77138fBbgAAAb8"]
[Wed Sep 30 01:12:54.755716 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.755990 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.786402 2026] [security2:error] [pid 276059:tid 276220] [client 20.70.173.30:49926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/yawa.php"] [unique_id "ary2dntqdHBwD77138fBcAAAAag"]
[Wed Sep 30 01:12:54.797751 2026] [security2:error] [pid 276059:tid 276277] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2dntqdHBwD77138fBcQAAAeE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:54.815457 2026] [security2:error] [pid 276059:tid 276299] [client 216.73.216.46:46707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2dntqdHBwD77138fBcgAAAfc"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MzIvbm9kZTAvbWVtb3J5MzAz
[Wed Sep 30 01:12:54.825252 2026] [security2:error] [pid 276059:tid 276322] [client 168.100.149.217:65000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/8.png"] [unique_id "ary2dntqdHBwD77138fBbQAB0zc"]
[Wed Sep 30 01:12:54.848637 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.848915 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:54.851650 2026] [security2:error] [pid 276059:tid 276195] [client 74.225.148.80:10825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ioxi-o.php"] [unique_id "ary2dntqdHBwD77138fBcwAAAZA"]
[Wed Sep 30 01:12:54.861883 2026] [security2:error] [pid 276059:tid 276260] [client 82.102.18.126:39170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2dntqdHBwD77138fBdAAAAdA"]
[Wed Sep 30 01:12:54.878117 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 01:12:54.878379 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMyL2N3ZA==
[Wed Sep 30 01:12:54.938230 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:54.938518 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.029875 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.030156 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.032077 2026] [security2:error] [pid 276620:tid 276842] [client 20.213.164.196:60662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/myglu.php"] [unique_id "ary2d9PAdfEWqmGIkg1x5gAAAmc"]
[Wed Sep 30 01:12:55.034502 2026] [security2:error] [pid 276620:tid 276785] [client 4.240.25.22:33226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/adminan.php"] [unique_id "ary2d9PAdfEWqmGIkg1x5wAAAi4"]
[Wed Sep 30 01:12:55.119389 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.119663 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:15141] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.180015 2026] [security2:error] [pid 276620:tid 276820] [client 216.73.216.46:15141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2d9PAdfEWqmGIkg1x6gAAAlE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvbm9kZTAvbWVtb3J5OTIvbm9kZTAvbWVtb3J5MTY2
[Wed Sep 30 01:12:55.198832 2026] [security2:error] [pid 276620:tid 276871] [client 82.102.18.126:39178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2d9PAdfEWqmGIkg1x7AAAAoQ"]
[Wed Sep 30 01:12:55.202831 2026] [security2:error] [pid 276620:tid 276853] [client 20.213.164.196:22177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/yvnqcuic.php"] [unique_id "ary2d9PAdfEWqmGIkg1x7gAAAnI"]
[Wed Sep 30 01:12:55.210039 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.210313 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.217608 2026] [security2:error] [pid 276620:tid 276870] [client 20.28.180.172:61195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-class-api.php"] [unique_id "ary2d9PAdfEWqmGIkg1x8AAAAoM"]
[Wed Sep 30 01:12:55.303393 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.303666 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.318859 2026] [security2:error] [pid 276059:tid 276274] [client 223.181.60.167:29133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2d3tqdHBwD77138fBfAAAAd4"]
[Wed Sep 30 01:12:55.320583 2026] [security2:error] [pid 276059:tid 276274] [client 223.181.60.167:29133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2d3tqdHBwD77138fBfAAAAd4"]
[Wed Sep 30 01:12:55.330266 2026] [security2:error] [pid 276620:tid 276881] [client 74.225.148.80:10859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ans.php"] [unique_id "ary2d9PAdfEWqmGIkg1x8gAAAo4"]
[Wed Sep 30 01:12:55.382969 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:55.383428 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:55.432048 2026] [security2:error] [pid 276620:tid 276785] [client 20.70.173.30:39972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/inputs.php"] [unique_id "ary2d9PAdfEWqmGIkg1x-AAAAi4"]
[Wed Sep 30 01:12:55.448665 2026] [security2:error] [pid 276059:tid 276248] [client 20.194.5.96:44974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/gu.php"] [unique_id "ary2d3tqdHBwD77138fBfwAAAcQ"]
[Wed Sep 30 01:12:55.455082 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.455644 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.487262 2026] [security2:error] [pid 276620:tid 276870] [client 20.219.2.60:30060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/gdn.php"] [unique_id "ary2d9PAdfEWqmGIkg1x_wAAAoM"]
[Wed Sep 30 01:12:55.490793 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.491246 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.518325 2026] [security2:error] [pid 276059:tid 276250] [client 82.102.18.126:39180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2d3tqdHBwD77138fBgQAAAcY"]
[Wed Sep 30 01:12:55.545849 2026] [security2:error] [pid 276620:tid 276794] [client 49.37.102.248:63320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2d9PAdfEWqmGIkg1yAwAAAjc"]
[Wed Sep 30 01:12:55.545998 2026] [security2:error] [pid 276620:tid 276794] [client 49.37.102.248:63320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2d9PAdfEWqmGIkg1yAwAAAjc"]
[Wed Sep 30 01:12:55.562622 2026] [security2:error] [pid 276620:tid 276788] [client 20.213.164.196:6982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/aboutt.php"] [unique_id "ary2d9PAdfEWqmGIkg1yBAAAAjE"]
[Wed Sep 30 01:12:55.576117 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.576582 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.609678 2026] [security2:error] [pid 276620:tid 276808] [client 20.70.173.30:33313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/adminan.php"] [unique_id "ary2d9PAdfEWqmGIkg1yBwAAAkU"]
[Wed Sep 30 01:12:55.666573 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.666858 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.696916 2026] [security2:error] [pid 276059:tid 276199] [client 152.56.240.85:51141] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2d3tqdHBwD77138fBhAAAAZQ"]
[Wed Sep 30 01:12:55.697095 2026] [security2:error] [pid 276059:tid 276199] [client 152.56.240.85:51141] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2d3tqdHBwD77138fBhAAAAZQ"]
[Wed Sep 30 01:12:55.757911 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.758176 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.764330 2026] [security2:error] [pid 276620:tid 276811] [client 20.213.164.196:21861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/koiy.php"] [unique_id "ary2d9PAdfEWqmGIkg1yDQAAAkg"]
[Wed Sep 30 01:12:55.783696 2026] [access_compat:error] [pid 276620:tid 276817] [client 47.79.201.239:18226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:12:55.784021 2026] [access_compat:error] [pid 276620:tid 276817] [client 47.79.201.239:18226] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:12:55.795999 2026] [security2:error] [pid 276620:tid 276794] [client 74.225.148.80:11227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/gf.php"] [unique_id "ary2d9PAdfEWqmGIkg1yEgAAAjc"]
[Wed Sep 30 01:12:55.834456 2026] [security2:error] [pid 276620:tid 276828] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2d9PAdfEWqmGIkg1yFQAAAlk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:55.847429 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.847685 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.857739 2026] [security2:error] [pid 276620:tid 276842] [client 82.102.18.126:39184] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2d9PAdfEWqmGIkg1yGQAAAmc"]
[Wed Sep 30 01:12:55.863174 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:55.863449 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:55.940372 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:55.940658 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:55.958418 2026] [security2:error] [pid 276620:tid 276883] [client 20.213.164.196:60613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wp-whe.php"] [unique_id "ary2d9PAdfEWqmGIkg1yHQAAApA"]
[Wed Sep 30 01:12:56.030732 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.031011 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.059796 2026] [security2:error] [pid 276059:tid 276289] [client 74.7.230.39:53276] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.pearlcogop.com"] [uri "/robots.txt"] [unique_id "ary2eHtqdHBwD77138fBiwAB7WM"]
[Wed Sep 30 01:12:56.120456 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.120815 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.185404 2026] [security2:error] [pid 276620:tid 276877] [client 82.102.18.126:39186] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2eNPAdfEWqmGIkg1yLgAAAoo"]
[Wed Sep 30 01:12:56.211715 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.211993 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:49124] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.258403 2026] [security2:error] [pid 276620:tid 276881] [client 74.225.148.80:11239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/man.php"] [unique_id "ary2eNPAdfEWqmGIkg1yMwAAAo4"]
[Wed Sep 30 01:12:56.275394 2026] [security2:error] [pid 276059:tid 276304] [client 34.143.195.196:47960] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1626"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "aikidoofalamo.yourkatana.com"] [uri "/"] [unique_id "ary2eHtqdHBwD77138fBjQAAAfw"]
[Wed Sep 30 01:12:56.305797 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.306066 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.357581 2026] [qos:error] [pid 276620:tid 276756] [remote 142.182.173.136:30559] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=142.182.173.136, id=ary2eNPAdfEWqmGIkg1yNwACZ34
[Wed Sep 30 01:12:56.377369 2026] [qos:error] [pid 276059:tid 276124] [remote 50.5.163.50:47028] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.5.163.50, id=ary2eHtqdHBwD77138fBjwABwzw
[Wed Sep 30 01:12:56.402106 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.402541 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.449941 2026] [security2:error] [pid 276620:tid 276808] [client 20.213.164.196:7124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/ssixta.php"] [unique_id "ary2eNPAdfEWqmGIkg1yOQAAAkU"]
[Wed Sep 30 01:12:56.464186 2026] [security2:error] [pid 276059:tid 276285] [client 20.213.164.196:21831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wordfence-waf.php"] [unique_id "ary2eHtqdHBwD77138fBkgAAAek"]
[Wed Sep 30 01:12:56.491031 2026] [security2:error] [pid 276620:tid 276866] [client 82.102.18.126:39192] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2eNPAdfEWqmGIkg1yPQAAAn8"]
[Wed Sep 30 01:12:56.491085 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.491339 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.556527 2026] [security2:error] [pid 276620:tid 276783] [client 223.235.102.107:28072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2eNPAdfEWqmGIkg1yPgAAAiw"]
[Wed Sep 30 01:12:56.557127 2026] [security2:error] [pid 276620:tid 276783] [client 223.235.102.107:28072] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2eNPAdfEWqmGIkg1yPgAAAiw"]
[Wed Sep 30 01:12:56.577920 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.578189 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.589137 2026] [security2:error] [pid 276620:tid 276811] [client 4.240.25.22:11906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/az.php"] [unique_id "ary2eNPAdfEWqmGIkg1yQQAAAkg"]
[Wed Sep 30 01:12:56.626043 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2xpYg==
[Wed Sep 30 01:12:56.626311 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dkL2xpYg==
[Wed Sep 30 01:12:56.630856 2026] [security2:error] [pid 276620:tid 276830] [client 216.73.216.46:49124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2eNPAdfEWqmGIkg1yQgAAAls"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODMvbm9kZTAvbWVtb3J5MjQ3
[Wed Sep 30 01:12:56.702172 2026] [security2:error] [pid 276620:tid 276788] [client 203.122.45.246:64781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2eNPAdfEWqmGIkg1ySgAAAjE"]
[Wed Sep 30 01:12:56.702305 2026] [security2:error] [pid 276620:tid 276788] [client 203.122.45.246:64781] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2eNPAdfEWqmGIkg1ySgAAAjE"]
[Wed Sep 30 01:12:56.706644 2026] [security2:error] [pid 276620:tid 276828] [client 20.219.2.60:30058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/first.php"] [unique_id "ary2eNPAdfEWqmGIkg1ySwAAAlk"]
[Wed Sep 30 01:12:56.723387 2026] [security2:error] [pid 276620:tid 276881] [client 74.225.148.80:10849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/dev.php"] [unique_id "ary2eNPAdfEWqmGIkg1yTgAAAo4"]
[Wed Sep 30 01:12:56.733975 2026] [security2:error] [pid 276059:tid 276216] [client 168.100.149.168:28292] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/7-e1669632641851.png"] [unique_id "ary2eHtqdHBwD77138fBnQABpGY"]
[Wed Sep 30 01:12:56.760220 2026] [security2:error] [pid 276059:tid 276197] [client 20.70.173.30:58602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/mac.php"] [unique_id "ary2eHtqdHBwD77138fBoQAAAZI"]
[Wed Sep 30 01:12:56.763158 2026] [security2:error] [pid 276059:tid 276322] [client 105.112.178.79:38597] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fkg.yuj.mybluehost.me"] [uri "/.env"] [unique_id "ary2eHtqdHBwD77138fBowAAAg4"]
[Wed Sep 30 01:12:56.771535 2026] [security2:error] [pid 276059:tid 276254] [client 20.213.164.196:60648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/tesla.php"] [unique_id "ary2eHtqdHBwD77138fBpAAAAco"]
[Wed Sep 30 01:12:56.823269 2026] [security2:error] [pid 276059:tid 276200] [client 82.102.18.126:39200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2eHtqdHBwD77138fBpQAAAZU"]
[Wed Sep 30 01:12:56.826510 2026] [security2:error] [pid 276620:tid 276818] [client 74.7.230.39:53288] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "pearlcogop.com"] [uri "/w_api/Handler.php"] [unique_id "ary2eNPAdfEWqmGIkg1yMAACT0M"], referer: https://mail.pearlcogop.com/robots.txt
[Wed Sep 30 01:12:56.865014 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:56.865273 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:56.891354 2026] [security2:error] [pid 276620:tid 276802] [client 20.213.164.196:21914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wp5.php"] [unique_id "ary2eNPAdfEWqmGIkg1yVAAAAj8"]
[Wed Sep 30 01:12:56.947327 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:56.947595 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:56.956831 2026] [qos:error] [pid 276620:tid 276817] [client 87.140.82.174:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2eNPAdfEWqmGIkg1yWwAAAk4
[Wed Sep 30 01:12:57.022328 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.022622 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:58540] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.024129 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.024463 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.050161 2026] [access_compat:error] [pid 276059:tid 276304] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.050441 2026] [access_compat:error] [pid 276059:tid 276304] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.074845 2026] [security2:error] [pid 276620:tid 276881] [client 4.240.25.22:8494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/az.php"] [unique_id "ary2edPAdfEWqmGIkg1yYwAAAo4"]
[Wed Sep 30 01:12:57.085110 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.085387 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.123544 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.123840 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.153332 2026] [security2:error] [pid 276059:tid 276230] [client 82.102.18.126:39212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2eXtqdHBwD77138fBtQAAAbI"]
[Wed Sep 30 01:12:57.159241 2026] [security2:error] [pid 276620:tid 276830] [client 20.213.164.196:51069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/222.php"] [unique_id "ary2edPAdfEWqmGIkg1yaAAAAls"]
[Wed Sep 30 01:12:57.180853 2026] [security2:error] [pid 276620:tid 276877] [client 74.225.148.80:62564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ms-edit.php"] [unique_id "ary2edPAdfEWqmGIkg1yaQAAAoo"]
[Wed Sep 30 01:12:57.208869 2026] [security2:error] [pid 276059:tid 276299] [client 20.213.164.196:21871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/em.php"] [unique_id "ary2eXtqdHBwD77138fBtwAAAfc"]
[Wed Sep 30 01:12:57.217042 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.217293 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.243165 2026] [qos:error] [pid 276620:tid 276723] [remote 173.174.29.37:55362] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=173.174.29.37, id=ary2edPAdfEWqmGIkg1yawACM10
[Wed Sep 30 01:12:57.259425 2026] [qos:error] [pid 276620:tid 276702] [remote 134.215.158.161:38760] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=134.215.158.161, id=ary2edPAdfEWqmGIkg1ybAACH0g
[Wed Sep 30 01:12:57.280684 2026] [security2:error] [pid 276059:tid 276234] [client 20.70.173.30:33284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/fling.php"] [unique_id "ary2eXtqdHBwD77138fBuAAAAbY"]
[Wed Sep 30 01:12:57.305840 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.306098 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.327731 2026] [security2:error] [pid 276620:tid 276785] [client 20.194.30.107:10147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/wp-filemannger.php"] [unique_id "ary2edPAdfEWqmGIkg1ybQAAAi4"]
[Wed Sep 30 01:12:57.339435 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2N3ZA==
[Wed Sep 30 01:12:57.339717 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjg3L2N3ZA==
[Wed Sep 30 01:12:57.351008 2026] [security2:error] [pid 276620:tid 276881] [client 20.70.173.30:25178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/file.php"] [unique_id "ary2edPAdfEWqmGIkg1ybgAAAo4"]
[Wed Sep 30 01:12:57.403435 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.403875 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.481780 2026] [security2:error] [pid 276620:tid 276828] [client 82.102.18.126:39216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.awt.yno.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2edPAdfEWqmGIkg1ydgAAAlk"]
[Wed Sep 30 01:12:57.497896 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.498328 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.509953 2026] [security2:error] [pid 276620:tid 276853] [client 20.219.2.60:30354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/redixsx.php"] [unique_id "ary2edPAdfEWqmGIkg1yeQAAAnI"]
[Wed Sep 30 01:12:57.511178 2026] [security2:error] [pid 276620:tid 276792] [client 20.213.164.196:51022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/media.php"] [unique_id "ary2edPAdfEWqmGIkg1yegAAAjU"]
[Wed Sep 30 01:12:57.577292 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.577550 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.647585 2026] [security2:error] [pid 276620:tid 276763] [client 74.225.148.80:10842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/txets.php"] [unique_id "ary2edPAdfEWqmGIkg1yfAAAAhg"]
[Wed Sep 30 01:12:57.654068 2026] [security2:error] [pid 276059:tid 276165] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2eXtqdHBwD77138fBxAABxWU"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D88755
[Wed Sep 30 01:12:57.670390 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.670684 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.716739 2026] [security2:error] [pid 276059:tid 276267] [client 182.69.182.151:21769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2eXtqdHBwD77138fBygAAAdc"]
[Wed Sep 30 01:12:57.717235 2026] [security2:error] [pid 276059:tid 276267] [client 182.69.182.151:21769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2eXtqdHBwD77138fBygAAAdc"]
[Wed Sep 30 01:12:57.764848 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.765275 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.818914 2026] [security2:error] [pid 276620:tid 276874] [client 20.213.164.196:21852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/hp.php"] [unique_id "ary2edPAdfEWqmGIkg1ygwAAAoc"]
[Wed Sep 30 01:12:57.853150 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.853434 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:57.856455 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:57.856713 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MDQvcm9vdC9saWI2NA==
[Wed Sep 30 01:12:57.926535 2026] [security2:error] [pid 276620:tid 276818] [client 20.213.164.196:51009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/24.php"] [unique_id "ary2edPAdfEWqmGIkg1yhQAAAk8"]
[Wed Sep 30 01:12:57.942883 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:57.943152 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.032584 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.032854 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.117630 2026] [security2:error] [pid 276059:tid 276269] [client 74.225.148.80:10830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/hao.php"] [unique_id "ary2entqdHBwD77138fB2QAAAdk"]
[Wed Sep 30 01:12:58.124233 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.124497 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.134107 2026] [security2:error] [pid 276059:tid 276234] [client 20.194.5.96:44968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/nck.php"] [unique_id "ary2entqdHBwD77138fB3AAAAbY"]
[Wed Sep 30 01:12:58.163322 2026] [security2:error] [pid 276620:tid 276784] [client 122.173.27.10:10021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2etPAdfEWqmGIkg1yjQAAAi0"]
[Wed Sep 30 01:12:58.163453 2026] [security2:error] [pid 276620:tid 276784] [client 122.173.27.10:10021] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2etPAdfEWqmGIkg1yjQAAAi0"]
[Wed Sep 30 01:12:58.202219 2026] [security2:error] [pid 276059:tid 276270] [client 204.44.118.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2entqdHBwD77138fB4gAAAdo"]
[Wed Sep 30 01:12:58.216247 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.216527 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.224028 2026] [security2:error] [pid 276620:tid 276770] [client 20.213.164.196:21886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wpuse.php"] [unique_id "ary2etPAdfEWqmGIkg1yjgAAAh8"]
[Wed Sep 30 01:12:58.236618 2026] [security2:error] [pid 276059:tid 276322] [client 173.254.241.233:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2entqdHBwD77138fB5gAAAg4"]
[Wed Sep 30 01:12:58.254022 2026] [security2:error] [pid 276059:tid 276277] [client 20.213.164.196:51615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/xwpg.php"] [unique_id "ary2entqdHBwD77138fB6AAAAeE"]
[Wed Sep 30 01:12:58.292742 2026] [security2:error] [pid 276059:tid 276263] [client 4.240.25.22:8388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/133.php"] [unique_id "ary2entqdHBwD77138fB6gAAAdM"]
[Wed Sep 30 01:12:58.302072 2026] [security2:error] [pid 276620:tid 276798] [client 20.70.173.30:19171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/xiugai.php"] [unique_id "ary2etPAdfEWqmGIkg1ykAAAAjs"]
[Wed Sep 30 01:12:58.309307 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.309635 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.368259 2026] [security2:error] [pid 276620:tid 276852] [client 20.219.2.60:30361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/cpp2.php"] [unique_id "ary2etPAdfEWqmGIkg1ylQAAAnE"]
[Wed Sep 30 01:12:58.370627 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:58.371134 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:58.405940 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.406398 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.447971 2026] [security2:error] [pid 276059:tid 276142] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2entqdHBwD77138fB7gABs04"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=297382&sid=938e93d03923948e7404662d0fa8f8e3
[Wed Sep 30 01:12:58.448023 2026] [security2:error] [pid 276059:tid 276142] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2entqdHBwD77138fB7gABs04"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=297382&sid=938e93d03923948e7404662d0fa8f8e3
[Wed Sep 30 01:12:58.488081 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.488344 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.549879 2026] [security2:error] [pid 276620:tid 276814] [client 20.214.151.17:64795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2etPAdfEWqmGIkg1ymgAAAks"]
[Wed Sep 30 01:12:58.579680 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.579881 2026] [security2:error] [pid 276620:tid 276785] [client 74.225.148.80:10871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/33.php"] [unique_id "ary2etPAdfEWqmGIkg1ymwAAAi4"]
[Wed Sep 30 01:12:58.579962 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.614952 2026] [security2:error] [pid 276620:tid 276763] [client 20.213.164.196:21913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/sm.php"] [unique_id "ary2etPAdfEWqmGIkg1ynAAAAhg"]
[Wed Sep 30 01:12:58.636720 2026] [security2:error] [pid 276620:tid 276792] [client 20.213.164.196:51602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/blacks.php"] [unique_id "ary2etPAdfEWqmGIkg1ynQAAAjU"]
[Wed Sep 30 01:12:58.674765 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.675187 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.716509 2026] [security2:error] [pid 276620:tid 276877] [client 20.194.30.107:17283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/cilus.php"] [unique_id "ary2etPAdfEWqmGIkg1ynwAAAoo"]
[Wed Sep 30 01:12:58.733728 2026] [security2:error] [pid 276620:tid 276811] [client 168.100.149.112:28934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/elementor/thumbs/VIC-CHAMBER-OF-COMMERCE-MEMBER-BADGE--r9qkoy9o0xbuy29zargi5p8qgkomzkal0yxwnclr8k.webp"] [unique_id "ary2etPAdfEWqmGIkg1yowACSHI"]
[Wed Sep 30 01:12:58.761704 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.761979 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.781639 2026] [security2:error] [pid 276620:tid 276798] [client 13.70.4.78:37932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2etPAdfEWqmGIkg1ypwAAAjs"]
[Wed Sep 30 01:12:58.810516 2026] [security2:error] [pid 276620:tid 276763] [client 20.214.151.17:64799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2etPAdfEWqmGIkg1yqQAAAhg"]
[Wed Sep 30 01:12:58.833236 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:58.833516 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:12:58.852756 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.853047 2026] [access_compat:error] [pid 276059:tid 276247] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.945028 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:58.945339 2026] [access_compat:error] [pid 276059:tid 276195] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:58.972366 2026] [security2:error] [pid 276620:tid 276847] [client 20.204.42.136:35758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/koiy.php"] [unique_id "ary2etPAdfEWqmGIkg1yswAAAmw"]
[Wed Sep 30 01:12:58.986689 2026] [security2:error] [pid 276059:tid 276236] [client 202.179.95.79:64324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2entqdHBwD77138fCAAAAAbg"]
[Wed Sep 30 01:12:58.986820 2026] [security2:error] [pid 276059:tid 276236] [client 202.179.95.79:64324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2entqdHBwD77138fCAAAAAbg"]
[Wed Sep 30 01:12:58.986990 2026] [qos:error] [pid 276620:tid 276826] [client 45.189.116.74:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2etPAdfEWqmGIkg1ytQAAAlc
[Wed Sep 30 01:12:59.035941 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.036257 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.053829 2026] [security2:error] [pid 276620:tid 276767] [client 74.225.148.80:11216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/adminner.php"] [unique_id "ary2e9PAdfEWqmGIkg1yuAAAAhw"]
[Wed Sep 30 01:12:59.094109 2026] [security2:error] [pid 276620:tid 276811] [client 20.214.151.17:64797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/b.php"] [unique_id "ary2e9PAdfEWqmGIkg1yvgAAAkg"]
[Wed Sep 30 01:12:59.129877 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.130280 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.135400 2026] [security2:error] [pid 276059:tid 276243] [client 20.213.164.196:60637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/class-wp-http-client.php"] [unique_id "ary2e3tqdHBwD77138fCBgAAAb8"]
[Wed Sep 30 01:12:59.159190 2026] [security2:error] [pid 276620:tid 276769] [client 20.213.164.196:21896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/mknobgkg.php"] [unique_id "ary2e9PAdfEWqmGIkg1yywAAAh4"]
[Wed Sep 30 01:12:59.218959 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.219221 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.258925 2026] [security2:error] [pid 276620:tid 276767] [client 13.70.4.78:37948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2e9PAdfEWqmGIkg1y0gAAAhw"]
[Wed Sep 30 01:12:59.264842 2026] [security2:error] [pid 276059:tid 276194] [client 20.219.2.60:30398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/admlo.php"] [unique_id "ary2e3tqdHBwD77138fCCgAAAY8"]
[Wed Sep 30 01:12:59.299800 2026] [core:error] [pid 276620:tid 276847] [client 45.138.12.16:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:59.299829 2026] [core:error] [pid 276620:tid 276847] [client 45.138.12.16:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:12:59.310986 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.311259 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.339439 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:59.339708 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:12:59.360527 2026] [security2:error] [pid 276059:tid 276263] [client 20.214.151.17:64847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/admin.php"] [unique_id "ary2e3tqdHBwD77138fCFQAAAdM"]
[Wed Sep 30 01:12:59.378725 2026] [security2:error] [pid 276620:tid 276769] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2e9PAdfEWqmGIkg1y3QAAAh4"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:12:59.416063 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.416512 2026] [access_compat:error] [pid 276059:tid 276289] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.494884 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.495377 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.510341 2026] [security2:error] [pid 276620:tid 276818] [client 20.213.164.196:21915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/dairg.php"] [unique_id "ary2e9PAdfEWqmGIkg1y5AAAAk8"]
[Wed Sep 30 01:12:59.520599 2026] [security2:error] [pid 276620:tid 276847] [client 74.225.148.80:10874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/thoms.php"] [unique_id "ary2e9PAdfEWqmGIkg1y5QAAAmw"]
[Wed Sep 30 01:12:59.561466 2026] [security2:error] [pid 276620:tid 276783] [client 20.70.173.30:62389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/as.php"] [unique_id "ary2e9PAdfEWqmGIkg1y5gAAAiw"]
[Wed Sep 30 01:12:59.586134 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.586553 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.590200 2026] [security2:error] [pid 276059:tid 276267] [client 20.213.164.196:51608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/zoo2.php"] [unique_id "ary2e3tqdHBwD77138fCHAAAAdc"]
[Wed Sep 30 01:12:59.607333 2026] [security2:error] [pid 276059:tid 276314] [client 13.70.4.78:37911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/b.php"] [unique_id "ary2e3tqdHBwD77138fCHgAAAgY"]
[Wed Sep 30 01:12:59.627082 2026] [security2:error] [pid 276620:tid 276765] [client 20.214.151.17:64449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/fling.php"] [unique_id "ary2e9PAdfEWqmGIkg1y6QAAAho"]
[Wed Sep 30 01:12:59.672312 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.672580 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.733000 2026] [security2:error] [pid 276059:tid 276273] [client 155.190.6.18:47648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2e3tqdHBwD77138fCKAAAAd0"]
[Wed Sep 30 01:12:59.733169 2026] [security2:error] [pid 276059:tid 276273] [client 155.190.6.18:47648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2e3tqdHBwD77138fCKAAAAd0"]
[Wed Sep 30 01:12:59.764199 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.764453 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.834965 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 01:12:59.835275 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTU0NDAzL25ldA==
[Wed Sep 30 01:12:59.837744 2026] [security2:error] [pid 276620:tid 276873] [client 74.7.230.0:42100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.mnn.wnu.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2e9PAdfEWqmGIkg1y9QAChhg"]
[Wed Sep 30 01:12:59.856193 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.856544 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.879490 2026] [security2:error] [pid 276620:tid 276785] [client 20.213.164.196:22148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/dronishness.php"] [unique_id "ary2e9PAdfEWqmGIkg1y9gAAAi4"]
[Wed Sep 30 01:12:59.899281 2026] [security2:error] [pid 276620:tid 276864] [client 20.214.151.17:64837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2e9PAdfEWqmGIkg1y-AAAAn0"]
[Wed Sep 30 01:12:59.946607 2026] [security2:error] [pid 276620:tid 276767] [client 4.240.25.22:33340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/fling.php"] [unique_id "ary2e9PAdfEWqmGIkg1y_AAAAhw"]
[Wed Sep 30 01:12:59.949699 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:12:59.950019 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:12:59.972630 2026] [security2:error] [pid 276620:tid 276818] [client 74.225.148.80:10875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/a.php"] [unique_id "ary2e9PAdfEWqmGIkg1zAAAAAk8"]
[Wed Sep 30 01:13:00.003060 2026] [security2:error] [pid 276620:tid 276783] [client 20.204.42.136:35767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/faiy.php"] [unique_id "ary2fNPAdfEWqmGIkg1zAwAAAiw"]
[Wed Sep 30 01:13:00.003690 2026] [security2:error] [pid 276620:tid 276798] [client 20.213.164.196:51046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/zoo1.php"] [unique_id "ary2fNPAdfEWqmGIkg1zBAAAAjs"]
[Wed Sep 30 01:13:00.005909 2026] [security2:error] [pid 276620:tid 276873] [client 13.70.4.78:38214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/admin.php"] [unique_id "ary2fNPAdfEWqmGIkg1zBQAAAoY"]
[Wed Sep 30 01:13:00.024523 2026] [security2:error] [pid 276059:tid 276206] [client 182.75.216.230:63870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2fHtqdHBwD77138fCQAAAAZs"]
[Wed Sep 30 01:13:00.024673 2026] [security2:error] [pid 276059:tid 276206] [client 182.75.216.230:63870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2fHtqdHBwD77138fCQAAAAZs"]
[Wed Sep 30 01:13:00.038918 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.039230 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.057507 2026] [qos:error] [pid 276620:tid 276642] [remote 104.218.89.250:37374] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=104.218.89.250, id=ary2fNPAdfEWqmGIkg1zBwACGAw
[Wed Sep 30 01:13:00.130072 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.130312 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.164658 2026] [security2:error] [pid 276059:tid 276268] [client 20.214.151.17:64834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/adminfuns.php"] [unique_id "ary2fHtqdHBwD77138fCRAAAAdg"]
[Wed Sep 30 01:13:00.181816 2026] [security2:error] [pid 276620:tid 276765] [client 20.28.180.172:18328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-class-atom.php"] [unique_id "ary2fNPAdfEWqmGIkg1zDQAAAho"]
[Wed Sep 30 01:13:00.185264 2026] [qos:error] [pid 276620:tid 276707] [remote 89.77.214.192:37582] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=89.77.214.192, id=ary2fNPAdfEWqmGIkg1zDgACS00
[Wed Sep 30 01:13:00.222133 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.222579 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.280419 2026] [security2:error] [pid 276059:tid 276261] [client 20.219.2.60:30077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/admin-ajax.php"] [unique_id "ary2fHtqdHBwD77138fCRwAAAdE"]
[Wed Sep 30 01:13:00.312411 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.312683 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.347917 2026] [security2:error] [pid 276620:tid 276770] [client 20.213.164.196:21828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/Row_wsoo.php"] [unique_id "ary2fNPAdfEWqmGIkg1zFgAAAh8"]
[Wed Sep 30 01:13:00.394744 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:00.395209 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:00.414177 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.414637 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.428023 2026] [security2:error] [pid 276059:tid 276289] [client 13.70.4.78:45650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/fling.php"] [unique_id "ary2fHtqdHBwD77138fCSwAAAe0"]
[Wed Sep 30 01:13:00.429883 2026] [security2:error] [pid 276059:tid 276266] [client 20.70.173.30:33407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/chosen.php"] [unique_id "ary2fHtqdHBwD77138fCTAAAAdY"]
[Wed Sep 30 01:13:00.440692 2026] [security2:error] [pid 276059:tid 276200] [client 74.225.148.80:11224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/b8.php"] [unique_id "ary2fHtqdHBwD77138fCTQAAAZU"]
[Wed Sep 30 01:13:00.448819 2026] [security2:error] [pid 276620:tid 276814] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2fNPAdfEWqmGIkg1zHAAAAks"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:00.452436 2026] [security2:error] [pid 276059:tid 276216] [client 20.214.151.17:47378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/alfa.php"] [unique_id "ary2fHtqdHBwD77138fCTgAAAaQ"]
[Wed Sep 30 01:13:00.504727 2026] [security2:error] [pid 276059:tid 276215] [client 20.70.173.30:64814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/abcd.php"] [unique_id "ary2fHtqdHBwD77138fCUgAAAaM"]
[Wed Sep 30 01:13:00.508769 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.509214 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.509577 2026] [security2:error] [pid 276059:tid 276314] [client 4.240.25.22:8502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-filemannger.php"] [unique_id "ary2fHtqdHBwD77138fCVAAAAgY"]
[Wed Sep 30 01:13:00.510985 2026] [security2:error] [pid 276059:tid 276290] [client 49.43.163.212:56763] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2fHtqdHBwD77138fCUwAAAe4"]
[Wed Sep 30 01:13:00.511166 2026] [security2:error] [pid 276059:tid 276290] [client 49.43.163.212:56763] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2fHtqdHBwD77138fCUwAAAe4"]
[Wed Sep 30 01:13:00.590020 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.590547 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.610949 2026] [security2:error] [pid 276620:tid 276872] [client 92.71.9.138:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2fNPAdfEWqmGIkg1zJAAAAoU"]
[Wed Sep 30 01:13:00.631186 2026] [security2:error] [pid 276620:tid 276765] [client 80.64.84.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2fNPAdfEWqmGIkg1zJQAAAho"]
[Wed Sep 30 01:13:00.676939 2026] [security2:error] [pid 276059:tid 276321] [client 20.213.164.196:60640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/class-ajax.php"] [unique_id "ary2fHtqdHBwD77138fCXAAAAg0"]
[Wed Sep 30 01:13:00.678303 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.678573 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.721308 2026] [security2:error] [pid 276059:tid 276288] [client 20.214.151.17:64873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/222.php"] [unique_id "ary2fHtqdHBwD77138fCXgAAAew"]
[Wed Sep 30 01:13:00.732976 2026] [security2:error] [pid 276620:tid 276675] [remote 57.141.14.6:42458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/wp-json/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/feed/xmlrpc.php"] [unique_id "ary2fNPAdfEWqmGIkg1zKgACHy0"]
[Wed Sep 30 01:13:00.745252 2026] [security2:error] [pid 276059:tid 276296] [client 168.100.149.17:38882] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/Web-Design-40-1.png"] [unique_id "ary2fHtqdHBwD77138fCXwAB9EA"]
[Wed Sep 30 01:13:00.768196 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.768632 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.768913 2026] [security2:error] [pid 276620:tid 276873] [client 20.194.5.96:55425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/xtt.php"] [unique_id "ary2fNPAdfEWqmGIkg1zLAAAAoY"]
[Wed Sep 30 01:13:00.801222 2026] [security2:error] [pid 276620:tid 276855] [client 13.70.4.78:37941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2fNPAdfEWqmGIkg1zLwAAAnQ"]
[Wed Sep 30 01:13:00.821085 2026] [security2:error] [pid 276059:tid 276204] [client 20.219.2.60:30396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/amthd.php"] [unique_id "ary2fHtqdHBwD77138fCYgAAAZk"]
[Wed Sep 30 01:13:00.840825 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:00.841284 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:00.842819 2026] [security2:error] [pid 276059:tid 276229] [client 20.70.173.30:27778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/sxxb.php"] [unique_id "ary2fHtqdHBwD77138fCZAAAAbE"]
[Wed Sep 30 01:13:00.861800 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.862246 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.873331 2026] [security2:error] [pid 276059:tid 276319] [client 200.53.200.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2fHtqdHBwD77138fCaAAAAgs"]
[Wed Sep 30 01:13:00.892071 2026] [security2:error] [pid 276620:tid 276785] [client 74.225.148.80:62557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/sid.php"] [unique_id "ary2fNPAdfEWqmGIkg1zNAAAAi4"]
[Wed Sep 30 01:13:00.949399 2026] [access_compat:error] [pid 276059:tid 276248] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:00.949658 2026] [access_compat:error] [pid 276059:tid 276248] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:00.986238 2026] [security2:error] [pid 276620:tid 276842] [client 20.214.151.17:64877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2fNPAdfEWqmGIkg1zOQAAAmc"]
[Wed Sep 30 01:13:01.040780 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.041054 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:46431] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.100019 2026] [security2:error] [pid 276059:tid 276250] [client 103.211.18.63:64305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2fXtqdHBwD77138fCbQAAAcY"]
[Wed Sep 30 01:13:01.100136 2026] [security2:error] [pid 276059:tid 276250] [client 103.211.18.63:64305] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2fXtqdHBwD77138fCbQAAAcY"]
[Wed Sep 30 01:13:01.133214 2026] [security2:error] [pid 276620:tid 276847] [client 106.214.2.47:8515] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2fdPAdfEWqmGIkg1zPwAAAmw"]
[Wed Sep 30 01:13:01.134245 2026] [security2:error] [pid 276620:tid 276847] [client 106.214.2.47:8515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2fdPAdfEWqmGIkg1zPwAAAmw"]
[Wed Sep 30 01:13:01.136713 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.137154 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.149542 2026] [security2:error] [pid 276059:tid 276231] [client 20.213.164.196:21924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/x2.php"] [unique_id "ary2fXtqdHBwD77138fCbgAAAbM"]
[Wed Sep 30 01:13:01.167361 2026] [security2:error] [pid 276620:tid 276811] [client 151.245.23.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2fdPAdfEWqmGIkg1zQwAAAkg"]
[Wed Sep 30 01:13:01.184274 2026] [security2:error] [pid 276620:tid 276842] [client 13.70.4.78:45683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/adminfuns.php"] [unique_id "ary2fdPAdfEWqmGIkg1zRAAAAmc"]
[Wed Sep 30 01:13:01.188573 2026] [security2:error] [pid 276059:tid 276271] [client 20.213.164.196:60624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/gm.php"] [unique_id "ary2fXtqdHBwD77138fCcAAAAds"]
[Wed Sep 30 01:13:01.229468 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.229940 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.247967 2026] [security2:error] [pid 276620:tid 276798] [client 20.214.151.17:47365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/images.php"] [unique_id "ary2fdPAdfEWqmGIkg1zSQAAAjs"]
[Wed Sep 30 01:13:01.316563 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.317000 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.335045 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:01.335468 2026] [access_compat:error] [pid 276059:tid 276241] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:01.356154 2026] [security2:error] [pid 276059:tid 276322] [client 74.225.148.80:11067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/bro.php"] [unique_id "ary2fXtqdHBwD77138fCegAAAg4"]
[Wed Sep 30 01:13:01.402189 2026] [security2:error] [pid 276059:tid 276236] [client 20.194.96.176:15388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/backup-helper.php"] [unique_id "ary2fXtqdHBwD77138fCfQAAAbg"]
[Wed Sep 30 01:13:01.444548 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.445025 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.461540 2026] [security2:error] [pid 276059:tid 276211] [client 216.73.216.46:46431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2fXtqdHBwD77138fCgQAAAZ8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzM5L25vZGUwL21lbW9yeTM3OS9ub2RlMA%3D%3D
[Wed Sep 30 01:13:01.510380 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.510834 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.514124 2026] [security2:error] [pid 276620:tid 276778] [client 20.214.151.17:64868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/media.php"] [unique_id "ary2fdPAdfEWqmGIkg1zVgAAAic"]
[Wed Sep 30 01:13:01.517996 2026] [security2:error] [pid 276620:tid 276852] [client 20.70.173.30:19178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2fdPAdfEWqmGIkg1zVwAAAnE"]
[Wed Sep 30 01:13:01.564974 2026] [qos:error] [pid 276620:tid 276646] [remote 189.197.218.57:33028] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.197.218.57, id=ary2fdPAdfEWqmGIkg1zXwACLBA
[Wed Sep 30 01:13:01.568840 2026] [security2:error] [pid 276620:tid 276855] [client 13.70.4.78:38209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/alfa.php"] [unique_id "ary2fdPAdfEWqmGIkg1zYQAAAnQ"]
[Wed Sep 30 01:13:01.590464 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.590971 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.644073 2026] [qos:error] [pid 276059:tid 276186] [remote 190.94.41.206:49992] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=190.94.41.206, id=ary2fXtqdHBwD77138fChQABvHo
[Wed Sep 30 01:13:01.650910 2026] [security2:error] [pid 276620:tid 276770] [client 20.213.164.196:60670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/class-wp-site-list.php"] [unique_id "ary2fdPAdfEWqmGIkg1zZAAAAh8"]
[Wed Sep 30 01:13:01.666123 2026] [qos:error] [pid 276059:tid 276139] [remote 86.182.69.25:45500] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=86.182.69.25, id=ary2fXtqdHBwD77138fCiAACC0s
[Wed Sep 30 01:13:01.683394 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.683791 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.689523 2026] [security2:error] [pid 276059:tid 276309] [client 20.70.173.30:19155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/classwithtostring.php"] [unique_id "ary2fXtqdHBwD77138fCjAAAAgE"]
[Wed Sep 30 01:13:01.696000 2026] [security2:error] [pid 276059:tid 276270] [client 47.79.13.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2fXtqdHBwD77138fCjgAAAdo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:01.696512 2026] [security2:error] [pid 276059:tid 276242] [client 20.194.30.107:17535] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.hubach.com"] [uri "/1.php"] [unique_id "ary2fXtqdHBwD77138fCjwAAAb4"]
[Wed Sep 30 01:13:01.696620 2026] [security2:error] [pid 276059:tid 276242] [client 20.194.30.107:17535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/1.php"] [unique_id "ary2fXtqdHBwD77138fCjwAAAb4"]
[Wed Sep 30 01:13:01.774084 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.774363 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.794376 2026] [security2:error] [pid 276059:tid 276216] [client 20.214.151.17:64851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/mac.php"] [unique_id "ary2fXtqdHBwD77138fCkgAAAaQ"]
[Wed Sep 30 01:13:01.814690 2026] [security2:error] [pid 276059:tid 276124] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2fXtqdHBwD77138fCkwABkjw"], referer: https://torquayfans.com/ucp.php?mode=login&p=4976&redirect=posting.php?mode=quote
[Wed Sep 30 01:13:01.814719 2026] [security2:error] [pid 276059:tid 276124] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2fXtqdHBwD77138fCkwABkjw"], referer: https://torquayfans.com/ucp.php?mode=login&p=4976&redirect=posting.php?mode=quote
[Wed Sep 30 01:13:01.824760 2026] [security2:error] [pid 276059:tid 276271] [client 74.225.148.80:10870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/xwpg.php"] [unique_id "ary2fXtqdHBwD77138fClAAAAds"]
[Wed Sep 30 01:13:01.832965 2026] [access_compat:error] [pid 276059:tid 276246] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:01.833232 2026] [access_compat:error] [pid 276059:tid 276246] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:01.862538 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.862926 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:01.871340 2026] [security2:error] [pid 276059:tid 276247] [client 20.213.164.196:21835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/v4.php"] [unique_id "ary2fXtqdHBwD77138fCmAAAAcM"]
[Wed Sep 30 01:13:01.893906 2026] [security2:error] [pid 276620:tid 276785] [client 45.138.12.32:26410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mcr.pyt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2fdPAdfEWqmGIkg1zbwAAAi4"]
[Wed Sep 30 01:13:01.953136 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:01.953576 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.015563 2026] [security2:error] [pid 276059:tid 276280] [client 13.70.4.78:45682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/222.php"] [unique_id "ary2fntqdHBwD77138fCnQAAAeQ"]
[Wed Sep 30 01:13:02.042728 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.043012 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.055187 2026] [security2:error] [pid 276620:tid 276847] [client 20.214.151.17:47398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ops.php"] [unique_id "ary2ftPAdfEWqmGIkg1zegAAAmw"]
[Wed Sep 30 01:13:02.106755 2026] [security2:error] [pid 276059:tid 276288] [client 114.119.159.177:54847] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "domakshelter.com"] [uri "/home/property_area/harmony-court"] [unique_id "ary2fntqdHBwD77138fCngAAAew"], referer: https://domakshelter.com/home/property_area/harmony-court
[Wed Sep 30 01:13:02.134183 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.134445 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.163678 2026] [qos:error] [pid 276059:tid 276076] [remote 209.128.10.84:37054] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=209.128.10.84, id=ary2fntqdHBwD77138fCnwABrgw
[Wed Sep 30 01:13:02.227719 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.228081 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.259792 2026] [security2:error] [pid 276620:tid 276778] [client 20.213.164.196:51593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/ttivnife.php"] [unique_id "ary2ftPAdfEWqmGIkg1zhQAAAic"]
[Wed Sep 30 01:13:02.277315 2026] [security2:error] [pid 276620:tid 276783] [client 74.225.148.80:11230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/radio.php"] [unique_id "ary2ftPAdfEWqmGIkg1zhgAAAiw"]
[Wed Sep 30 01:13:02.305043 2026] [security2:error] [pid 276620:tid 276806] [client 20.70.173.30:33367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ty.php"] [unique_id "ary2ftPAdfEWqmGIkg1zigAAAkM"]
[Wed Sep 30 01:13:02.320102 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.320555 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.323243 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.151.17:64787] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/1.php"] [unique_id "ary2ftPAdfEWqmGIkg1zjAAAAoo"]
[Wed Sep 30 01:13:02.323770 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.151.17:64787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/1.php"] [unique_id "ary2ftPAdfEWqmGIkg1zjAAAAoo"]
[Wed Sep 30 01:13:02.372663 2026] [access_compat:error] [pid 276059:tid 276199] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:02.373125 2026] [access_compat:error] [pid 276059:tid 276199] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:02.373654 2026] [security2:error] [pid 276059:tid 276194] [client 20.213.164.196:21929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/albin.php"] [unique_id "ary2fntqdHBwD77138fCpgAAAY8"]
[Wed Sep 30 01:13:02.416536 2026] [security2:error] [pid 276620:tid 276842] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2ftPAdfEWqmGIkg1zkwAAAmc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:02.419438 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.419887 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.435269 2026] [fcgid:warn] [pid 276620:tid 276800] (70014)End of file found: [client 199.45.155.32:57266] mod_fcgid: can't get data from http client
[Wed Sep 30 01:13:02.497125 2026] [security2:error] [pid 276059:tid 276285] [client 13.70.4.78:39470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2fntqdHBwD77138fCrQAAAek"]
[Wed Sep 30 01:13:02.513111 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.513553 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.524769 2026] [qos:error] [pid 276059:tid 276215] [client 138.84.38.135:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2fntqdHBwD77138fCsQAAAaM
[Wed Sep 30 01:13:02.542100 2026] [security2:error] [pid 276620:tid 276787] [client 20.194.5.96:55440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.5.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fragrancej.com"] [uri "/go.php"] [unique_id "ary2ftPAdfEWqmGIkg1znAAAAjA"]
[Wed Sep 30 01:13:02.569375 2026] [access_compat:error] [pid 276620:tid 276884] [client 47.79.201.75:33282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:13:02.569803 2026] [access_compat:error] [pid 276620:tid 276884] [client 47.79.201.75:33282] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:13:02.577873 2026] [qos:error] [pid 276059:tid 276271] [client 198.34.58.89:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2fntqdHBwD77138fCswAAAds
[Wed Sep 30 01:13:02.578061 2026] [security2:error] [pid 276620:tid 276877] [client 20.219.2.60:30348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/8xyz.php"] [unique_id "ary2ftPAdfEWqmGIkg1znwAAAoo"]
[Wed Sep 30 01:13:02.597218 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.597503 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.630524 2026] [security2:error] [pid 276059:tid 276232] [client 20.214.151.17:64822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/aaa.php"] [unique_id "ary2fntqdHBwD77138fCtAAAAbQ"]
[Wed Sep 30 01:13:02.672473 2026] [qos:error] [pid 276059:tid 276173] [remote 172.56.112.76:1192] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=172.56.112.76, id=ary2fntqdHBwD77138fCtwACDG0
[Wed Sep 30 01:13:02.688579 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.688853 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.706150 2026] [qos:error] [pid 276059:tid 276241] [client 184.97.4.131:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2fntqdHBwD77138fCugAAAb0
[Wed Sep 30 01:13:02.724113 2026] [security2:error] [pid 276059:tid 276290] [client 168.100.149.203:38414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/Web-Design-41-2.png"] [unique_id "ary2fntqdHBwD77138fCuwAB7h4"]
[Wed Sep 30 01:13:02.731185 2026] [security2:error] [pid 276059:tid 276322] [client 74.225.148.80:10845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ccc.php"] [unique_id "ary2fntqdHBwD77138fCvAAAAg4"]
[Wed Sep 30 01:13:02.736122 2026] [security2:error] [pid 276059:tid 276236] [client 20.213.164.196:51029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/admin.php/2P.php"] [unique_id "ary2fntqdHBwD77138fCvQAAAbg"]
[Wed Sep 30 01:13:02.779018 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.779295 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.805768 2026] [security2:error] [pid 276620:tid 276884] [client 4.240.25.22:8470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cycfruf.php"] [unique_id "ary2ftPAdfEWqmGIkg1zqgAAApE"]
[Wed Sep 30 01:13:02.811012 2026] [security2:error] [pid 276620:tid 276783] [client 4.240.25.22:43779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/133.php"] [unique_id "ary2ftPAdfEWqmGIkg1zqwAAAiw"]
[Wed Sep 30 01:13:02.840739 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:02.841024 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:02.845669 2026] [security2:error] [pid 276620:tid 276785] [client 4.240.25.22:40907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/well.php"] [unique_id "ary2ftPAdfEWqmGIkg1zrQAAAi4"]
[Wed Sep 30 01:13:02.870484 2026] [security2:error] [pid 276620:tid 276842] [client 13.70.4.78:37892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/images.php"] [unique_id "ary2ftPAdfEWqmGIkg1zsAAAAmc"]
[Wed Sep 30 01:13:02.882201 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.882634 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:02.937805 2026] [security2:error] [pid 276620:tid 276814] [client 20.214.151.17:47417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/chosen.php"] [unique_id "ary2ftPAdfEWqmGIkg1zugAAAks"]
[Wed Sep 30 01:13:02.941076 2026] [qos:error] [pid 276059:tid 276111] [remote 38.56.219.201:11105] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=38.56.219.201, id=ary2fntqdHBwD77138fCxQABpS8
[Wed Sep 30 01:13:02.974330 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:02.974591 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.047400 2026] [security2:error] [pid 276059:tid 276249] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2f3tqdHBwD77138fCygAAAcU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:03.052502 2026] [security2:error] [pid 276620:tid 276817] [client 74.7.175.184:56926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.new.izubaplanners.com"] [uri "/index.php"] [unique_id "ary2edPAdfEWqmGIkg1yZwACTno"]
[Wed Sep 30 01:13:03.094302 2026] [qos:error] [pid 276620:tid 276874] [client 38.78.163.142:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2f9PAdfEWqmGIkg1zxQAAAoc
[Wed Sep 30 01:13:03.140151 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.140597 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.181823 2026] [security2:error] [pid 276620:tid 276883] [client 103.241.204.139:49909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2f9PAdfEWqmGIkg1zzAAAApA"]
[Wed Sep 30 01:13:03.181950 2026] [security2:error] [pid 276620:tid 276883] [client 103.241.204.139:49909] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2f9PAdfEWqmGIkg1zzAAAApA"]
[Wed Sep 30 01:13:03.200146 2026] [security2:error] [pid 276620:tid 276828] [client 74.225.148.80:11029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wmore1.php"] [unique_id "ary2f9PAdfEWqmGIkg1zzgAAAlk"]
[Wed Sep 30 01:13:03.201182 2026] [security2:error] [pid 276620:tid 276806] [client 20.214.151.17:64864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/2P.php"] [unique_id "ary2f9PAdfEWqmGIkg1zzwAAAkM"]
[Wed Sep 30 01:13:03.237244 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.237527 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.254934 2026] [security2:error] [pid 276059:tid 276286] [client 20.194.30.107:17361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2f3tqdHBwD77138fC0gAAAeo"]
[Wed Sep 30 01:13:03.274902 2026] [security2:error] [pid 276620:tid 276811] [client 13.70.4.78:45652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/media.php"] [unique_id "ary2f9PAdfEWqmGIkg1z0gAAAkg"]
[Wed Sep 30 01:13:03.309682 2026] [security2:error] [pid 276620:tid 276778] [client 20.213.164.196:21911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/atkno.php"] [unique_id "ary2f9PAdfEWqmGIkg1z1AAAAic"]
[Wed Sep 30 01:13:03.327542 2026] [security2:error] [pid 276620:tid 276770] [client 20.213.164.196:60643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/a.php"] [unique_id "ary2f9PAdfEWqmGIkg1z1gAAAh8"]
[Wed Sep 30 01:13:03.328492 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.328752 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.401982 2026] [access_compat:error] [pid 276059:tid 276276] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL2N3ZA==
[Wed Sep 30 01:13:03.402725 2026] [access_compat:error] [pid 276059:tid 276276] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNDg1MzMzL2N3ZA==
[Wed Sep 30 01:13:03.425403 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.425860 2026] [access_compat:error] [pid 276620:tid 276874] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.479019 2026] [security2:error] [pid 276620:tid 276687] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2f9PAdfEWqmGIkg1z4QACLjk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=743e31d6e7c22510dc62711cd0544370&t=22212
[Wed Sep 30 01:13:03.479062 2026] [security2:error] [pid 276620:tid 276687] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2f9PAdfEWqmGIkg1z4QACLjk"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=743e31d6e7c22510dc62711cd0544370&t=22212
[Wed Sep 30 01:13:03.484873 2026] [security2:error] [pid 276059:tid 276236] [client 20.214.151.17:64452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/min.php"] [unique_id "ary2f3tqdHBwD77138fC3QAAAbg"]
[Wed Sep 30 01:13:03.514125 2026] [security2:error] [pid 276059:tid 276294] [client 179.48.40.203:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2f3tqdHBwD77138fC3gAAAfI"]
[Wed Sep 30 01:13:03.514652 2026] [autoindex:error] [pid 276620:tid 276805] [client 66.249.74.229:0] AH01276: Cannot serve directory /home3/visumboa/public_html/weddingsbyleigh.com/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:03.515693 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.516028 2026] [access_compat:error] [pid 276059:tid 276266] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.550356 2026] [security2:error] [pid 276620:tid 276785] [client 20.219.2.60:30377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/mini.php"] [unique_id "ary2f9PAdfEWqmGIkg1z5AAAAi4"]
[Wed Sep 30 01:13:03.600733 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.601004 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.608005 2026] [security2:error] [pid 276620:tid 276763] [client 13.70.4.78:45674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/mac.php"] [unique_id "ary2f9PAdfEWqmGIkg1z5QAAAhg"]
[Wed Sep 30 01:13:03.672818 2026] [security2:error] [pid 276620:tid 276880] [client 74.225.148.80:10836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/function.php"] [unique_id "ary2f9PAdfEWqmGIkg1z6gAAAo0"]
[Wed Sep 30 01:13:03.677865 2026] [security2:error] [pid 276620:tid 276829] [client 4.240.25.22:8407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/gecko.php"] [unique_id "ary2f9PAdfEWqmGIkg1z7AAAAlo"]
[Wed Sep 30 01:13:03.690653 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.690941 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.717607 2026] [security2:error] [pid 276620:tid 276877] [client 158.94.192.52:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2f9PAdfEWqmGIkg1z8gAAAoo"]
[Wed Sep 30 01:13:03.718898 2026] [security2:error] [pid 276620:tid 276869] [client 20.213.164.196:21854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/gptsh.php"] [unique_id "ary2f9PAdfEWqmGIkg1z9AAAAoI"]
[Wed Sep 30 01:13:03.769581 2026] [security2:error] [pid 276059:tid 276243] [client 169.40.142.131:55866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.dcd.rdg.mybluehost.me"] [uri "/index.php"] [unique_id "ary2f3tqdHBwD77138fC6wAAAb8"]
[Wed Sep 30 01:13:03.782883 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.783286 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.859612 2026] [access_compat:error] [pid 276059:tid 276249] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:03.859913 2026] [access_compat:error] [pid 276059:tid 276249] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:03.874966 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.875232 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:03.882677 2026] [core:error] [pid 276059:tid 276317] [client 45.138.12.48:48892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:03.882694 2026] [core:error] [pid 276059:tid 276317] [client 45.138.12.48:48892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:03.892775 2026] [qos:error] [pid 276620:tid 276869] [client 87.182.146.205:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2f9PAdfEWqmGIkg10AwAAAoI
[Wed Sep 30 01:13:03.898304 2026] [security2:error] [pid 276620:tid 276817] [client 20.213.164.196:60622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/cord.php"] [unique_id "ary2f9PAdfEWqmGIkg10BAAAAk4"]
[Wed Sep 30 01:13:03.919846 2026] [security2:error] [pid 276620:tid 276811] [client 4.240.25.22:8935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/pfm.php"] [unique_id "ary2f9PAdfEWqmGIkg10BQAAAkg"]
[Wed Sep 30 01:13:03.965455 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:03.965734 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.009711 2026] [security2:error] [pid 276059:tid 276319] [client 13.70.4.78:37928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ops.php"] [unique_id "ary2gHtqdHBwD77138fC9gAAAgs"]
[Wed Sep 30 01:13:04.054804 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.055087 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.141925 2026] [security2:error] [pid 276059:tid 276282] [client 74.225.148.80:11026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ab.php"] [unique_id "ary2gHtqdHBwD77138fC_gAAAeY"]
[Wed Sep 30 01:13:04.153650 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.154104 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.162413 2026] [security2:error] [pid 276620:tid 276787] [client 37.41.16.35:53049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2gNPAdfEWqmGIkg10GQAAAjA"]
[Wed Sep 30 01:13:04.162604 2026] [security2:error] [pid 276620:tid 276787] [client 37.41.16.35:53049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2gNPAdfEWqmGIkg10GQAAAjA"]
[Wed Sep 30 01:13:04.238287 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.239152 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.242034 2026] [security2:error] [pid 276059:tid 276117] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2gHtqdHBwD77138fDCAAB7jU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=320c560676d5401e1fdd40e09c41f6c1
[Wed Sep 30 01:13:04.242069 2026] [security2:error] [pid 276059:tid 276117] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2gHtqdHBwD77138fDCAAB7jU"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301755&sid=320c560676d5401e1fdd40e09c41f6c1
[Wed Sep 30 01:13:04.244432 2026] [security2:error] [pid 276059:tid 276225] [client 20.213.164.196:21837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/rithin.php"] [unique_id "ary2gHtqdHBwD77138fDCgAAAa0"]
[Wed Sep 30 01:13:04.259739 2026] [security2:error] [pid 276059:tid 276294] [client 20.194.30.107:17503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/js.php"] [unique_id "ary2gHtqdHBwD77138fDCwAAAfI"]
[Wed Sep 30 01:13:04.283101 2026] [security2:error] [pid 276059:tid 276271] [client 20.70.173.30:25153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/simple.php"] [unique_id "ary2gHtqdHBwD77138fDDAAAAds"]
[Wed Sep 30 01:13:04.327802 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.328304 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.382870 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:13:04.383331 2026] [access_compat:error] [pid 276059:tid 276259] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:13:04.412336 2026] [fcgid:warn] [pid 276620:tid 276844] (70014)End of file found: [client 139.162.88.198:34774] mod_fcgid: can't get data from http client
[Wed Sep 30 01:13:04.421767 2026] [security2:error] [pid 276059:tid 276288] [client 20.213.164.196:60660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/anom.php"] [unique_id "ary2gHtqdHBwD77138fDEQAAAew"]
[Wed Sep 30 01:13:04.425744 2026] [security2:error] [pid 276620:tid 276866] [client 20.214.151.17:64842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/great.php"] [unique_id "ary2gNPAdfEWqmGIkg10HgAAAn8"]
[Wed Sep 30 01:13:04.433265 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.433712 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.455177 2026] [security2:error] [pid 276620:tid 276869] [client 13.70.4.78:37902] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.legardinia.com"] [uri "/1.php"] [unique_id "ary2gNPAdfEWqmGIkg10HwAAAoI"]
[Wed Sep 30 01:13:04.455336 2026] [security2:error] [pid 276620:tid 276869] [client 13.70.4.78:37902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/1.php"] [unique_id "ary2gNPAdfEWqmGIkg10HwAAAoI"]
[Wed Sep 30 01:13:04.482021 2026] [security2:error] [pid 276620:tid 276631] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2gNPAdfEWqmGIkg10IQACQwE"], referer: https://forum.torquayfans.com/viewtopic.php?p=298635
[Wed Sep 30 01:13:04.482062 2026] [security2:error] [pid 276620:tid 276631] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2gNPAdfEWqmGIkg10IQACQwE"], referer: https://forum.torquayfans.com/viewtopic.php?p=298635
[Wed Sep 30 01:13:04.507713 2026] [qos:error] [pid 276620:tid 276812] [client 97.128.130.174:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gNPAdfEWqmGIkg10JQAAAkk
[Wed Sep 30 01:13:04.515698 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.515976 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.605753 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.606032 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.620591 2026] [security2:error] [pid 276059:tid 276199] [client 74.225.148.80:65022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/css.php"] [unique_id "ary2gHtqdHBwD77138fDFwAAAZQ"]
[Wed Sep 30 01:13:04.633101 2026] [qos:error] [pid 276059:tid 276279] [client 67.166.183.137:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gHtqdHBwD77138fDGAAAAeM
[Wed Sep 30 01:13:04.678773 2026] [security2:error] [pid 276059:tid 276268] [client 20.213.164.196:21846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/il.php"] [unique_id "ary2gHtqdHBwD77138fDGwAAAdg"]
[Wed Sep 30 01:13:04.693803 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.694094 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.696511 2026] [qos:error] [pid 276620:tid 276770] [client 32.218.77.16:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gNPAdfEWqmGIkg10LQAAAh8
[Wed Sep 30 01:13:04.723840 2026] [security2:error] [pid 276059:tid 276229] [client 20.214.151.17:64841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/BDKR28WP.php"] [unique_id "ary2gHtqdHBwD77138fDHQAAAbE"]
[Wed Sep 30 01:13:04.731435 2026] [security2:error] [pid 276620:tid 276836] [client 154.27.132.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/online-ups"] [unique_id "ary2gNPAdfEWqmGIkg10MQAAAmE"]
[Wed Sep 30 01:13:04.737314 2026] [security2:error] [pid 276059:tid 276194] [client 168.100.149.23:35630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-9001-Certified_col-300x126.png"] [unique_id "ary2gHtqdHBwD77138fDHgABj3E"]
[Wed Sep 30 01:13:04.761959 2026] [security2:error] [pid 276620:tid 276880] [client 62.112.12.130:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2gNPAdfEWqmGIkg10MwAAAo0"]
[Wed Sep 30 01:13:04.762466 2026] [security2:error] [pid 276620:tid 276811] [client 20.194.96.176:21957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2gNPAdfEWqmGIkg10NAAAAkg"]
[Wed Sep 30 01:13:04.784796 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.785065 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.837406 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:04.837692 2026] [access_compat:error] [pid 276059:tid 276290] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:04.858211 2026] [security2:error] [pid 276620:tid 276855] [client 13.70.4.78:45637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/aaa.php"] [unique_id "ary2gNPAdfEWqmGIkg10OQAAAnQ"]
[Wed Sep 30 01:13:04.881949 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.882400 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:04.934459 2026] [qos:error] [pid 276620:tid 276852] [client 46.59.232.240:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gNPAdfEWqmGIkg10PAAAAnE
[Wed Sep 30 01:13:04.969308 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:04.969569 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.051312 2026] [security2:error] [pid 276059:tid 276211] [client 20.214.151.17:47366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/gigi.php"] [unique_id "ary2gXtqdHBwD77138fDKgAAAZ8"]
[Wed Sep 30 01:13:05.059397 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.059647 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.092823 2026] [qos:error] [pid 276620:tid 276817] [client 84.236.117.84:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gdPAdfEWqmGIkg10QQAAAk4
[Wed Sep 30 01:13:05.111563 2026] [security2:error] [pid 276620:tid 276812] [client 20.213.164.196:21841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/1klopedf.php"] [unique_id "ary2gdPAdfEWqmGIkg10RAAAAkk"]
[Wed Sep 30 01:13:05.113143 2026] [security2:error] [pid 276620:tid 276855] [client 74.225.148.80:10853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2gdPAdfEWqmGIkg10RgAAAnQ"]
[Wed Sep 30 01:13:05.129770 2026] [security2:error] [pid 276620:tid 276798] [client 122.177.240.90:29737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2gdPAdfEWqmGIkg10SQAAAjs"]
[Wed Sep 30 01:13:05.129895 2026] [security2:error] [pid 276620:tid 276798] [client 122.177.240.90:29737] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2gdPAdfEWqmGIkg10SQAAAjs"]
[Wed Sep 30 01:13:05.133276 2026] [security2:error] [pid 276059:tid 276239] [client 20.28.180.172:18329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-block.php"] [unique_id "ary2gXtqdHBwD77138fDMAAAAbs"]
[Wed Sep 30 01:13:05.150976 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.151225 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.154251 2026] [qos:error] [pid 276059:tid 276267] [client 68.48.15.205:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.6.92.44, id=ary2gXtqdHBwD77138fDMQAAAdc
[Wed Sep 30 01:13:05.235731 2026] [security2:error] [pid 276059:tid 276287] [client 20.213.164.196:51021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/plugins.php"] [unique_id "ary2gXtqdHBwD77138fDNQAAAes"]
[Wed Sep 30 01:13:05.242749 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.243052 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.249999 2026] [security2:error] [pid 276620:tid 276866] [client 20.194.96.176:7645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2gdPAdfEWqmGIkg10TgAAAn8"]
[Wed Sep 30 01:13:05.252079 2026] [security2:error] [pid 276620:tid 276770] [client 13.70.4.78:45632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/chosen.php"] [unique_id "ary2gdPAdfEWqmGIkg10TwAAAh8"]
[Wed Sep 30 01:13:05.337709 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.338104 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.342637 2026] [security2:error] [pid 276059:tid 276204] [client 20.214.151.17:64858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ant.php"] [unique_id "ary2gXtqdHBwD77138fDOAAAAZk"]
[Wed Sep 30 01:13:05.397710 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:05.398196 2026] [access_compat:error] [pid 276059:tid 276279] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:05.432474 2026] [security2:error] [pid 276620:tid 276877] [client 20.204.42.136:35785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/12.php"] [unique_id "ary2gdPAdfEWqmGIkg10WAAAAoo"]
[Wed Sep 30 01:13:05.433130 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.433596 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.518568 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.518845 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.563687 2026] [security2:error] [pid 276620:tid 276836] [client 169.40.142.131:59248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.dcd.rdg.mybluehost.me"] [uri "/index.php"] [unique_id "ary2gdPAdfEWqmGIkg10YQAAAmE"]
[Wed Sep 30 01:13:05.572461 2026] [security2:error] [pid 276620:tid 276778] [client 74.225.148.80:10839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2gdPAdfEWqmGIkg10YgAAAic"]
[Wed Sep 30 01:13:05.588443 2026] [security2:error] [pid 276620:tid 276838] [client 13.70.4.78:45660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/2P.php"] [unique_id "ary2gdPAdfEWqmGIkg10ZAAAAmM"]
[Wed Sep 30 01:13:05.592582 2026] [security2:error] [pid 276620:tid 276877] [client 20.213.164.196:21847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/zv.php"] [unique_id "ary2gdPAdfEWqmGIkg10ZgAAAoo"]
[Wed Sep 30 01:13:05.604733 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.605020 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.684831 2026] [security2:error] [pid 276620:tid 276787] [client 20.214.151.17:47423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/uejvv.php"] [unique_id "ary2gdPAdfEWqmGIkg10agAAAjA"]
[Wed Sep 30 01:13:05.696347 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.696619 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.724520 2026] [security2:error] [pid 276620:tid 276842] [client 45.175.162.44:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2gdPAdfEWqmGIkg10bwAAAmc"]
[Wed Sep 30 01:13:05.792944 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.793416 2026] [access_compat:error] [pid 276059:tid 276285] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.854087 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:13:05.854352 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTEvY3dkL2Jpbg==
[Wed Sep 30 01:13:05.856162 2026] [security2:error] [pid 276620:tid 276855] [client 20.213.164.196:51015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/groud3.php"] [unique_id "ary2gdPAdfEWqmGIkg10dwAAAnQ"]
[Wed Sep 30 01:13:05.879057 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.879310 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.887684 2026] [security2:error] [pid 276059:tid 276259] [client 103.199.207.50:11718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.207.199.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2gXtqdHBwD77138fDTAAAAc8"]
[Wed Sep 30 01:13:05.887836 2026] [security2:error] [pid 276059:tid 276259] [client 103.199.207.50:11718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2gXtqdHBwD77138fDTAAAAc8"]
[Wed Sep 30 01:13:05.912729 2026] [security2:error] [pid 276059:tid 276215] [client 20.70.173.30:33282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2gXtqdHBwD77138fDTQAAAaM"]
[Wed Sep 30 01:13:05.919565 2026] [qos:error] [pid 276620:tid 276691] [remote 76.112.23.72:45172] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=76.112.23.72, id=ary2gdPAdfEWqmGIkg10fQACfz0
[Wed Sep 30 01:13:05.925545 2026] [security2:error] [pid 276620:tid 276884] [client 13.70.4.78:37933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/min.php"] [unique_id "ary2gdPAdfEWqmGIkg10fgAAApE"]
[Wed Sep 30 01:13:05.933173 2026] [security2:error] [pid 276059:tid 276230] [client 47.79.13.177:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2gXtqdHBwD77138fDTgAAAbI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:05.971719 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:05.972013 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:05.995468 2026] [security2:error] [pid 276059:tid 276268] [client 49.37.102.248:63870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2gXtqdHBwD77138fDUAAAAdg"]
[Wed Sep 30 01:13:05.995584 2026] [security2:error] [pid 276059:tid 276268] [client 49.37.102.248:63870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2gXtqdHBwD77138fDUAAAAdg"]
[Wed Sep 30 01:13:06.017918 2026] [qos:error] [pid 276620:tid 276666] [remote 64.121.240.44:58992] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=64.121.240.44, id=ary2gtPAdfEWqmGIkg10gAACSCQ
[Wed Sep 30 01:13:06.035997 2026] [security2:error] [pid 276620:tid 276866] [client 173.254.29.157:30880] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-cron.php"] [unique_id "ary2gtPAdfEWqmGIkg10gQAAAn8"]
[Wed Sep 30 01:13:06.039487 2026] [security2:error] [pid 276620:tid 276787] [client 20.213.164.196:21850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/zv.update.php"] [unique_id "ary2gtPAdfEWqmGIkg10ggAAAjA"]
[Wed Sep 30 01:13:06.048270 2026] [security2:error] [pid 276059:tid 276321] [client 74.225.148.80:11059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-links-opml.php"] [unique_id "ary2gntqdHBwD77138fDVQAAAg0"]
[Wed Sep 30 01:13:06.059919 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.060187 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.096776 2026] [security2:error] [pid 276620:tid 276869] [client 20.194.96.176:55345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/f35.update.php"] [unique_id "ary2gtPAdfEWqmGIkg10hwAAAoI"]
[Wed Sep 30 01:13:06.152631 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.152914 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.202880 2026] [qos:error] [pid 276059:tid 276098] [remote 73.233.1.43:38140] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=73.233.1.43, id=ary2gntqdHBwD77138fDXgAB5CI
[Wed Sep 30 01:13:06.243171 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.243443 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.321253 2026] [security2:error] [pid 276059:tid 276229] [client 20.219.2.60:30042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws68.php"] [unique_id "ary2gntqdHBwD77138fDYwAAAbE"]
[Wed Sep 30 01:13:06.334166 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.334441 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.346429 2026] [qos:error] [pid 276059:tid 276125] [remote 189.154.172.188:43902] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=189.154.172.188, id=ary2gntqdHBwD77138fDZQAB4D0
[Wed Sep 30 01:13:06.347392 2026] [security2:error] [pid 276059:tid 276216] [client 13.70.4.78:37914] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/css/"] [unique_id "ary2gntqdHBwD77138fDZgAAAaQ"]
[Wed Sep 30 01:13:06.399353 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:06.400698 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:35090] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:06.434480 2026] [security2:error] [pid 276059:tid 276285] [client 4.240.25.22:18802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/666.php"] [unique_id "ary2gntqdHBwD77138fDagAAAek"]
[Wed Sep 30 01:13:06.444272 2026] [security2:error] [pid 276059:tid 276225] [client 20.213.164.196:21829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/wquosqsi.php"] [unique_id "ary2gntqdHBwD77138fDawAAAa0"]
[Wed Sep 30 01:13:06.445901 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.446299 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.496557 2026] [security2:error] [pid 276620:tid 276824] [client 20.213.164.196:51599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/gaxby.php"] [unique_id "ary2gtPAdfEWqmGIkg10kQAAAlU"]
[Wed Sep 30 01:13:06.510881 2026] [security2:error] [pid 276059:tid 276278] [client 74.225.148.80:11203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/hp.php"] [unique_id "ary2gntqdHBwD77138fDbQAAAeI"]
[Wed Sep 30 01:13:06.519485 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.519749 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.586007 2026] [security2:error] [pid 276620:tid 276832] [client 157.100.104.236:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/brands/"] [unique_id "ary2gtPAdfEWqmGIkg10mAAAAl0"]
[Wed Sep 30 01:13:06.612692 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.612993 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.644059 2026] [security2:error] [pid 276620:tid 276817] [client 20.214.151.17:64455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/file.php"] [unique_id "ary2gtPAdfEWqmGIkg10mgAAAk4"]
[Wed Sep 30 01:13:06.677952 2026] [security2:error] [pid 276620:tid 276879] [client 4.240.25.22:33332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/chosen.php"] [unique_id "ary2gtPAdfEWqmGIkg10ngAAAow"]
[Wed Sep 30 01:13:06.679434 2026] [security2:error] [pid 276620:tid 276795] [client 13.70.4.78:45635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/great.php"] [unique_id "ary2gtPAdfEWqmGIkg10nwAAAjg"]
[Wed Sep 30 01:13:06.703367 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.703622 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.745803 2026] [security2:error] [pid 276620:tid 276858] [client 168.100.149.29:28374] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/Web-Design-39-1.png"] [unique_id "ary2gtPAdfEWqmGIkg10oQACdyk"]
[Wed Sep 30 01:13:06.794986 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.795264 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.798267 2026] [security2:error] [pid 276620:tid 276826] [client 152.56.240.85:51756] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2gtPAdfEWqmGIkg10oAAAAlc"]
[Wed Sep 30 01:13:06.798431 2026] [security2:error] [pid 276620:tid 276826] [client 152.56.240.85:51756] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2gtPAdfEWqmGIkg10oAAAAlc"]
[Wed Sep 30 01:13:06.806967 2026] [security2:error] [pid 276620:tid 276721] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2gtPAdfEWqmGIkg10ogACdFs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=88617
[Wed Sep 30 01:13:06.806999 2026] [security2:error] [pid 276620:tid 276721] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2gtPAdfEWqmGIkg10ogACdFs"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=88617
[Wed Sep 30 01:13:06.852222 2026] [security2:error] [pid 276059:tid 276280] [client 74.7.243.227:35090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2gntqdHBwD77138fDegAAAeQ"], referer: http://www.homs.co.ke/?p=L3Byb2MvMTA0MTgvY3dk
[Wed Sep 30 01:13:06.853278 2026] [security2:error] [pid 276059:tid 276314] [client 20.213.164.196:21930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/asset.php"] [unique_id "ary2gntqdHBwD77138fDewAAAgY"]
[Wed Sep 30 01:13:06.871944 2026] [security2:error] [pid 276620:tid 276817] [client 20.213.164.196:35801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2gtPAdfEWqmGIkg10qQAAAk4"]
[Wed Sep 30 01:13:06.885730 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.886000 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:06.912186 2026] [security2:error] [pid 276059:tid 276288] [client 173.254.29.157:30902] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2gntqdHBwD77138fDfgAAAew"]
[Wed Sep 30 01:13:06.919989 2026] [security2:error] [pid 276620:tid 276645] [remote 217.64.102.75:2750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.102.64.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ary2gtPAdfEWqmGIkg10rAACOA8"]
[Wed Sep 30 01:13:06.928956 2026] [security2:error] [pid 276620:tid 276869] [client 173.254.29.157:30912] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2gtPAdfEWqmGIkg10rQAAAoI"]
[Wed Sep 30 01:13:06.943614 2026] [security2:error] [pid 276620:tid 276787] [client 173.254.29.157:30920] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2gtPAdfEWqmGIkg10rgAAAjA"]
[Wed Sep 30 01:13:06.946043 2026] [security2:error] [pid 276059:tid 276254] [client 20.214.151.17:64820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/elements.php"] [unique_id "ary2gntqdHBwD77138fDfwAAAco"]
[Wed Sep 30 01:13:06.958505 2026] [security2:error] [pid 276620:tid 276796] [client 173.254.29.157:30930] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2gtPAdfEWqmGIkg10rwAAAjk"]
[Wed Sep 30 01:13:06.970514 2026] [security2:error] [pid 276620:tid 276858] [client 74.225.148.80:10854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/mo.php"] [unique_id "ary2gtPAdfEWqmGIkg10sAAAAnc"]
[Wed Sep 30 01:13:06.976834 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:06.977100 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.027828 2026] [security2:error] [pid 276059:tid 276229] [client 85.204.70.118:43164] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2g3tqdHBwD77138fDgwAAAbE"]
[Wed Sep 30 01:13:07.028168 2026] [security2:error] [pid 276620:tid 276827] [client 13.70.4.78:38233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/BDKR28WP.php"] [unique_id "ary2g9PAdfEWqmGIkg10sgAAAlg"]
[Wed Sep 30 01:13:07.068927 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.069206 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.159590 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.159875 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.170919 2026] [security2:error] [pid 276620:tid 276719] [remote 217.64.102.75:2750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.102.64.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/wp-login.php"] [unique_id "ary2g9PAdfEWqmGIkg10uAACglk"], referer: https://inspirationalspeakerstm.ca/wp-login.php
[Wed Sep 30 01:13:07.230642 2026] [security2:error] [pid 276059:tid 276278] [client 20.213.164.196:60636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/dh9u7.php"] [unique_id "ary2g3tqdHBwD77138fDkQAAAeI"]
[Wed Sep 30 01:13:07.252368 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.252775 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.285602 2026] [security2:error] [pid 276059:tid 276205] [client 20.214.151.17:47394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/sitemap.php"] [unique_id "ary2g3tqdHBwD77138fDkwAAAZo"]
[Wed Sep 30 01:13:07.311999 2026] [security2:error] [pid 276059:tid 276266] [client 85.204.70.118:43176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary2g3tqdHBwD77138fDlAAAAdY"]
[Wed Sep 30 01:13:07.317503 2026] [security2:error] [pid 276620:tid 276796] [client 20.213.164.196:21889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/cued.php"] [unique_id "ary2g9PAdfEWqmGIkg10vQAAAjk"]
[Wed Sep 30 01:13:07.344612 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.344892 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.353745 2026] [security2:error] [pid 276059:tid 276239] [client 13.70.4.78:38256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/gigi.php"] [unique_id "ary2g3tqdHBwD77138fDmAAAAbs"]
[Wed Sep 30 01:13:07.415322 2026] [security2:error] [pid 276620:tid 276798] [client 203.122.45.246:65418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2g9PAdfEWqmGIkg10xQAAAjs"]
[Wed Sep 30 01:13:07.415508 2026] [security2:error] [pid 276620:tid 276798] [client 203.122.45.246:65418] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2g9PAdfEWqmGIkg10xQAAAjs"]
[Wed Sep 30 01:13:07.434646 2026] [security2:error] [pid 276620:tid 276637] [remote 217.64.102.75:2750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.102.64.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "ary2g9PAdfEWqmGIkg10xgACYQc"]
[Wed Sep 30 01:13:07.444664 2026] [security2:error] [pid 276620:tid 276836] [client 217.64.102.75:2750] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inspirationalspeakerstm.ca"] [uri "/xmlrpc.php"] [unique_id "ary2g9PAdfEWqmGIkg10xgACYQc"]
[Wed Sep 30 01:13:07.445014 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:39052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:07.445387 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.445473 2026] [access_compat:error] [pid 276059:tid 276269] [client 74.7.243.227:39052] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:07.445799 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.457798 2026] [security2:error] [pid 276620:tid 276817] [client 74.225.148.80:10869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/ivmirgut.php"] [unique_id "ary2g9PAdfEWqmGIkg10ygAAAk4"]
[Wed Sep 30 01:13:07.461744 2026] [security2:error] [pid 276620:tid 276884] [client 20.213.164.196:15957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2g9PAdfEWqmGIkg10ywAAApE"]
[Wed Sep 30 01:13:07.522641 2026] [security2:error] [pid 276059:tid 276212] [client 105.112.178.79:38600] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fkn.gcl.mybluehost.me"] [uri "/.env"] [unique_id "ary2g3tqdHBwD77138fDoQAAAaA"]
[Wed Sep 30 01:13:07.534292 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.534570 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.584238 2026] [security2:error] [pid 276059:tid 276314] [client 20.194.96.176:21953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/adminfuns.php"] [unique_id "ary2g3tqdHBwD77138fDpwAAAgY"]
[Wed Sep 30 01:13:07.592648 2026] [security2:error] [pid 276620:tid 276836] [client 20.214.151.17:64872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/xetmolxr.php"] [unique_id "ary2g9PAdfEWqmGIkg100QAAAmE"]
[Wed Sep 30 01:13:07.630079 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.630336 2026] [access_compat:error] [pid 276059:tid 276283] [client 216.73.216.46:43128] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.656197 2026] [security2:error] [pid 276059:tid 276226] [client 223.235.102.107:12110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2g3tqdHBwD77138fDqwAAAa4"]
[Wed Sep 30 01:13:07.656419 2026] [security2:error] [pid 276059:tid 276226] [client 223.235.102.107:12110] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2g3tqdHBwD77138fDqwAAAa4"]
[Wed Sep 30 01:13:07.656957 2026] [security2:error] [pid 276620:tid 276796] [client 20.213.164.196:60609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/yvnqcuic.php"] [unique_id "ary2g9PAdfEWqmGIkg101AAAAjk"]
[Wed Sep 30 01:13:07.701370 2026] [security2:error] [pid 276620:tid 276798] [client 13.70.4.78:38229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ant.php"] [unique_id "ary2g9PAdfEWqmGIkg101QAAAjs"]
[Wed Sep 30 01:13:07.715307 2026] [security2:error] [pid 276620:tid 276856] [client 20.213.164.196:21943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/sd.php"] [unique_id "ary2g9PAdfEWqmGIkg101wAAAnU"]
[Wed Sep 30 01:13:07.720782 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.721051 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.746579 2026] [security2:error] [pid 276059:tid 276250] [client 85.204.70.118:16739] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2g3tqdHBwD77138fDrQAAAcY"]
[Wed Sep 30 01:13:07.819873 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.820291 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:5311] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:07.903444 2026] [security2:error] [pid 276620:tid 276879] [client 4.240.25.22:46288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2g9PAdfEWqmGIkg104wAAAow"]
[Wed Sep 30 01:13:07.930902 2026] [security2:error] [pid 276059:tid 276273] [client 74.225.148.80:11020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/baba.php"] [unique_id "ary2g3tqdHBwD77138fDsQAAAd0"]
[Wed Sep 30 01:13:07.947874 2026] [security2:error] [pid 276620:tid 276817] [client 43.104.4.193:38711] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary2g9PAdfEWqmGIkg105QAAAk4"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:07.951217 2026] [security2:error] [pid 276059:tid 276276] [client 20.214.151.17:64870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/mini.php"] [unique_id "ary2g3tqdHBwD77138fDsgAAAeA"]
[Wed Sep 30 01:13:07.961087 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:07.961350 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.031098 2026] [security2:error] [pid 276620:tid 276884] [client 13.70.4.78:45694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/uejvv.php"] [unique_id "ary2hNPAdfEWqmGIkg106AAAApE"]
[Wed Sep 30 01:13:08.032069 2026] [security2:error] [pid 276620:tid 276832] [client 85.204.70.118:43188] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2hNPAdfEWqmGIkg106QAAAl0"]
[Wed Sep 30 01:13:08.039982 2026] [security2:error] [pid 276059:tid 276285] [client 216.73.216.46:43128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2hHtqdHBwD77138fDtQAAAek"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTEvbm9kZTAvY3B1OS9kcml2ZXIvY3B1NS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 01:13:08.041003 2026] [security2:error] [pid 276059:tid 276218] [client 20.28.180.172:18348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-signup.php"] [unique_id "ary2hHtqdHBwD77138fDtgAAAaY"]
[Wed Sep 30 01:13:08.053979 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.054440 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.066397 2026] [security2:error] [pid 276620:tid 276845] [client 223.181.60.167:21033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg106wAAAmo"]
[Wed Sep 30 01:13:08.066558 2026] [security2:error] [pid 276620:tid 276845] [client 223.181.60.167:21033] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg106wAAAmo"]
[Wed Sep 30 01:13:08.070795 2026] [security2:error] [pid 276620:tid 276844] [client 20.213.164.196:22171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/ans.php"] [unique_id "ary2hNPAdfEWqmGIkg107gAAAmk"]
[Wed Sep 30 01:13:08.072632 2026] [security2:error] [pid 276620:tid 276686] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2hNPAdfEWqmGIkg107AACkjg"], referer: https://forum.torquayfans.com/viewtopic.php?start=15&t=6880
[Wed Sep 30 01:13:08.072653 2026] [security2:error] [pid 276620:tid 276686] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2hNPAdfEWqmGIkg107AACkjg"], referer: https://forum.torquayfans.com/viewtopic.php?start=15&t=6880
[Wed Sep 30 01:13:08.089197 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.089461 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.111637 2026] [security2:error] [pid 276059:tid 276189] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hHtqdHBwD77138fDuQAB_H0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=630b13e0483211077c5eeb57305c6f32
[Wed Sep 30 01:13:08.111671 2026] [security2:error] [pid 276059:tid 276189] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hHtqdHBwD77138fDuQAB_H0"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302233&sid=630b13e0483211077c5eeb57305c6f32
[Wed Sep 30 01:13:08.130513 2026] [security2:error] [pid 276059:tid 276259] [client 74.7.243.227:39052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2hHtqdHBwD77138fDuwAAAc8"], referer: http://www.homs.co.ke/?del=razor-agent.log&p=L3Byb2MvMTA0MTEvY3dk
[Wed Sep 30 01:13:08.139134 2026] [security2:error] [pid 276620:tid 276827] [client 20.213.164.196:51589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/koiy.php"] [unique_id "ary2hNPAdfEWqmGIkg108AAAAlg"]
[Wed Sep 30 01:13:08.184377 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.184749 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.242326 2026] [security2:error] [pid 276620:tid 276817] [client 216.73.216.46:5311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2hNPAdfEWqmGIkg109AAAAk4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvbm9kZTAvbWVtb3J5NDQ0
[Wed Sep 30 01:13:08.253312 2026] [security2:error] [pid 276620:tid 276855] [client 182.69.182.151:24279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg109gAAAnQ"]
[Wed Sep 30 01:13:08.253489 2026] [security2:error] [pid 276620:tid 276855] [client 182.69.182.151:24279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg109gAAAnQ"]
[Wed Sep 30 01:13:08.276992 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.277241 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.313816 2026] [security2:error] [pid 276620:tid 276796] [client 85.204.70.118:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2hNPAdfEWqmGIkg10-gAAAjk"]
[Wed Sep 30 01:13:08.364694 2026] [security2:error] [pid 276059:tid 276306] [client 13.70.4.78:37923] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ary2hHtqdHBwD77138fDwwAAAf4"]
[Wed Sep 30 01:13:08.375668 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.376119 2026] [access_compat:error] [pid 276059:tid 276303] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.395623 2026] [security2:error] [pid 276620:tid 276774] [client 74.225.148.80:10838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/Components.php"] [unique_id "ary2hNPAdfEWqmGIkg10_QAAAiM"]
[Wed Sep 30 01:13:08.408566 2026] [security2:error] [pid 276059:tid 276213] [client 20.214.151.17:64780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/zwso.php"] [unique_id "ary2hHtqdHBwD77138fDxAAAAaE"]
[Wed Sep 30 01:13:08.420629 2026] [security2:error] [pid 276059:tid 276315] [client 74.7.242.1:34916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2hHtqdHBwD77138fDxQAAAgc"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:13:08.469208 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.469643 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.474784 2026] [security2:error] [pid 276620:tid 276836] [client 20.213.164.196:35808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/adminfuns.php"] [unique_id "ary2hNPAdfEWqmGIkg11AAAAAmE"]
[Wed Sep 30 01:13:08.476648 2026] [security2:error] [pid 276620:tid 276826] [client 208.109.214.58:46268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.214.109.208.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/wp-login.php"] [unique_id "ary2hNPAdfEWqmGIkg10_wAAAlc"]
[Wed Sep 30 01:13:08.503876 2026] [security2:error] [pid 276620:tid 276842] [client 201.32.215.149:5094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg11AgAAAmc"]
[Wed Sep 30 01:13:08.504021 2026] [security2:error] [pid 276620:tid 276842] [client 201.32.215.149:5094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg11AgAAAmc"]
[Wed Sep 30 01:13:08.548755 2026] [security2:error] [pid 276059:tid 276290] [client 20.194.96.176:55307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2hHtqdHBwD77138fDyQAAAe4"]
[Wed Sep 30 01:13:08.555391 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.555650 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.561931 2026] [security2:error] [pid 276620:tid 276774] [client 20.213.164.196:22180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/cns.php"] [unique_id "ary2hNPAdfEWqmGIkg11BQAAAiM"]
[Wed Sep 30 01:13:08.565580 2026] [security2:error] [pid 276620:tid 276764] [client 20.213.164.196:51606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wordfence-waf.php"] [unique_id "ary2hNPAdfEWqmGIkg11BgAAAhk"]
[Wed Sep 30 01:13:08.611408 2026] [security2:error] [pid 276620:tid 276842] [client 85.204.70.118:43210] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2hNPAdfEWqmGIkg11CwAAAmc"]
[Wed Sep 30 01:13:08.647440 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.647700 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.705375 2026] [security2:error] [pid 276059:tid 276242] [client 20.214.151.17:47410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/tiny.php"] [unique_id "ary2hHtqdHBwD77138fD0AAAAb4"]
[Wed Sep 30 01:13:08.711064 2026] [security2:error] [pid 276620:tid 276809] [client 13.70.4.78:37900] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1587"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ary2hNPAdfEWqmGIkg11EQAAAkY"]
[Wed Sep 30 01:13:08.745693 2026] [security2:error] [pid 276059:tid 276203] [client 168.100.149.15:59172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/MN-Logo-2-e1690778637691-265x300.png"] [unique_id "ary2hHtqdHBwD77138fD0gABmHw"]
[Wed Sep 30 01:13:08.748128 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.748412 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:55004] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.754535 2026] [security2:error] [pid 276620:tid 276855] [client 4.240.25.22:33314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/ty.php"] [unique_id "ary2hNPAdfEWqmGIkg11FwAAAnQ"]
[Wed Sep 30 01:13:08.759393 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:08.759651 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:08.797889 2026] [security2:error] [pid 276620:tid 276824] [client 122.173.27.10:30005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg11GQAAAlU"]
[Wed Sep 30 01:13:08.798078 2026] [security2:error] [pid 276620:tid 276824] [client 122.173.27.10:30005] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2hNPAdfEWqmGIkg11GQAAAlU"]
[Wed Sep 30 01:13:08.824771 2026] [security2:error] [pid 276620:tid 276679] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hNPAdfEWqmGIkg11HAACOzE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=4839d995d358d13315e93e294c91c497&t=22217
[Wed Sep 30 01:13:08.824797 2026] [security2:error] [pid 276620:tid 276679] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hNPAdfEWqmGIkg11HAACOzE"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=4839d995d358d13315e93e294c91c497&t=22217
[Wed Sep 30 01:13:08.838056 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.838320 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.868985 2026] [security2:error] [pid 276620:tid 276842] [client 74.225.148.80:65016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/aboutt.php"] [unique_id "ary2hNPAdfEWqmGIkg11HwAAAmc"]
[Wed Sep 30 01:13:08.908762 2026] [security2:error] [pid 276620:tid 276844] [client 85.204.70.118:43212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2hNPAdfEWqmGIkg11IAAAAmk"]
[Wed Sep 30 01:13:08.910109 2026] [security2:error] [pid 276620:tid 276836] [client 20.213.164.196:21891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/faiy.php"] [unique_id "ary2hNPAdfEWqmGIkg11IQAAAmE"]
[Wed Sep 30 01:13:08.911664 2026] [security2:error] [pid 276059:tid 276199] [client 20.213.164.196:35789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/av.php"] [unique_id "ary2hHtqdHBwD77138fD1QAAAZQ"]
[Wed Sep 30 01:13:08.912167 2026] [security2:error] [pid 276059:tid 276279] [client 20.213.164.196:51617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wp5.php"] [unique_id "ary2hHtqdHBwD77138fD1gAAAeM"]
[Wed Sep 30 01:13:08.936438 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:08.936709 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:08.992300 2026] [security2:error] [pid 276620:tid 276809] [client 20.214.151.17:47419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/simple.php"] [unique_id "ary2hNPAdfEWqmGIkg11JQAAAkY"]
[Wed Sep 30 01:13:09.024398 2026] [security2:error] [pid 276059:tid 276283] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2hXtqdHBwD77138fD3AAAAec"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:09.029162 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.029425 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.047272 2026] [security2:error] [pid 276620:tid 276824] [client 13.70.4.78:45684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/file.php"] [unique_id "ary2hdPAdfEWqmGIkg11KwAAAlU"]
[Wed Sep 30 01:13:09.110034 2026] [security2:error] [pid 276620:tid 276877] [client 20.70.173.30:25368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/new.php"] [unique_id "ary2hdPAdfEWqmGIkg11LwAAAoo"]
[Wed Sep 30 01:13:09.118566 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.118829 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.136265 2026] [security2:error] [pid 276620:tid 276764] [client 20.194.96.176:21961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2hdPAdfEWqmGIkg11MQAAAhk"]
[Wed Sep 30 01:13:09.158397 2026] [security2:error] [pid 276620:tid 276795] [client 20.219.2.60:30069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/xxx.php"] [unique_id "ary2hdPAdfEWqmGIkg11MgAAAjg"]
[Wed Sep 30 01:13:09.172843 2026] [security2:error] [pid 276059:tid 276216] [client 216.73.216.46:55004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2hXtqdHBwD77138fD3gAAAaQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODQvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDAw
[Wed Sep 30 01:13:09.188048 2026] [security2:error] [pid 276059:tid 276236] [client 85.204.70.118:43224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2hXtqdHBwD77138fD4AAAAbg"]
[Wed Sep 30 01:13:09.208772 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.209053 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:36668] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.332769 2026] [security2:error] [pid 276620:tid 276880] [client 74.225.148.80:10852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/maint/14.php"] [unique_id "ary2hdPAdfEWqmGIkg11OwAAAo0"]
[Wed Sep 30 01:13:09.334014 2026] [security2:error] [pid 276620:tid 276855] [client 20.214.151.17:47416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/buy.php"] [unique_id "ary2hdPAdfEWqmGIkg11PAAAAnQ"]
[Wed Sep 30 01:13:09.359650 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.364315 2026] [access_compat:error] [pid 276059:tid 276259] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.387856 2026] [security2:error] [pid 276059:tid 276266] [client 13.70.4.78:45655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/elements.php"] [unique_id "ary2hXtqdHBwD77138fD5wAAAdY"]
[Wed Sep 30 01:13:09.463942 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.464429 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.474431 2026] [security2:error] [pid 276059:tid 276213] [client 85.204.70.118:43849] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2hXtqdHBwD77138fD6QAAAaE"]
[Wed Sep 30 01:13:09.489520 2026] [security2:error] [pid 276059:tid 276293] [client 80.225.203.231:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.203.225.80.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "appludi.coimage.net"] [uri "/index.php"] [unique_id "ary2hXtqdHBwD77138fD6wAAAfE"]
[Wed Sep 30 01:13:09.496241 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.496514 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.516791 2026] [security2:error] [pid 276620:tid 276858] [client 20.213.164.196:51059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/em.php"] [unique_id "ary2hdPAdfEWqmGIkg11PgAAAnc"]
[Wed Sep 30 01:13:09.520764 2026] [security2:error] [pid 276620:tid 276817] [client 20.213.164.196:21875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/gecho.php"] [unique_id "ary2hdPAdfEWqmGIkg11PwAAAk4"]
[Wed Sep 30 01:13:09.589054 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.589411 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.614469 2026] [access_compat:error] [pid 276059:tid 276228] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:09.614719 2026] [access_compat:error] [pid 276059:tid 276228] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:09.639832 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:36668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2hdPAdfEWqmGIkg11RAAAAkg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NS9ub2RlMC9jcHUxMi9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MA%3D%3D
[Wed Sep 30 01:13:09.645665 2026] [security2:error] [pid 276620:tid 276858] [client 4.240.25.22:63632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/ccc.php"] [unique_id "ary2hdPAdfEWqmGIkg11RQAAAnc"]
[Wed Sep 30 01:13:09.680379 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.680635 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.759020 2026] [autoindex:error] [pid 276059:tid 276173] [remote 74.7.241.35:50952] AH01276: Cannot serve directory /home4/mnnwnumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:09.768607 2026] [security2:error] [pid 276620:tid 276795] [client 85.204.70.118:43234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2hdPAdfEWqmGIkg11SgAAAjg"]
[Wed Sep 30 01:13:09.770683 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.770971 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.789122 2026] [security2:error] [pid 276620:tid 276817] [client 20.194.30.107:32135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2hdPAdfEWqmGIkg11TgAAAk4"]
[Wed Sep 30 01:13:09.792997 2026] [security2:error] [pid 276620:tid 276762] [client 74.225.148.80:10847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/xx.php"] [unique_id "ary2hdPAdfEWqmGIkg11TwAAAhc"]
[Wed Sep 30 01:13:09.826973 2026] [security2:error] [pid 276620:tid 276827] [client 202.179.95.79:52097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2hdPAdfEWqmGIkg11UQAAAlg"]
[Wed Sep 30 01:13:09.827587 2026] [security2:error] [pid 276620:tid 276827] [client 202.179.95.79:52097] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2hdPAdfEWqmGIkg11UQAAAlg"]
[Wed Sep 30 01:13:09.864802 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.865067 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:09.883108 2026] [security2:error] [pid 276620:tid 276809] [client 13.70.4.78:38231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/sitemap.php"] [unique_id "ary2hdPAdfEWqmGIkg11VAAAAkY"]
[Wed Sep 30 01:13:09.885224 2026] [security2:error] [pid 276059:tid 276283] [client 20.213.164.196:51018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/hp.php"] [unique_id "ary2hXtqdHBwD77138fD_QAAAec"]
[Wed Sep 30 01:13:09.928116 2026] [security2:error] [pid 276059:tid 276094] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hXtqdHBwD77138fD_gABsR4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302271&sid=b2522ee998e329fd3e702b3f02341534
[Wed Sep 30 01:13:09.928146 2026] [security2:error] [pid 276059:tid 276094] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2hXtqdHBwD77138fD_gABsR4"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=302271&sid=b2522ee998e329fd3e702b3f02341534
[Wed Sep 30 01:13:09.929033 2026] [security2:error] [pid 276620:tid 276762] [client 20.213.164.196:21873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/gu.php"] [unique_id "ary2hdPAdfEWqmGIkg11WwAAAhc"]
[Wed Sep 30 01:13:09.943633 2026] [security2:error] [pid 276620:tid 276803] [client 20.214.151.17:64884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ioxi-o.php"] [unique_id "ary2hdPAdfEWqmGIkg11ZQAAAkA"]
[Wed Sep 30 01:13:09.952063 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:09.952348 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.048299 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.048756 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.067400 2026] [security2:error] [pid 276620:tid 276817] [client 85.204.70.118:43250] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2htPAdfEWqmGIkg11fwAAAk4"]
[Wed Sep 30 01:13:10.074891 2026] [security2:error] [pid 276059:tid 276298] [client 45.138.12.32:48084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mhx.yqe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2hntqdHBwD77138fEAQAAAfY"]
[Wed Sep 30 01:13:10.139835 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.140241 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.227435 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.227900 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.250032 2026] [security2:error] [pid 276620:tid 276805] [client 13.70.4.78:38227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/xetmolxr.php"] [unique_id "ary2htPAdfEWqmGIkg11jAAAAkI"]
[Wed Sep 30 01:13:10.253370 2026] [security2:error] [pid 276620:tid 276855] [client 155.190.6.18:45778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2htPAdfEWqmGIkg11jQAAAnQ"]
[Wed Sep 30 01:13:10.253491 2026] [security2:error] [pid 276620:tid 276855] [client 155.190.6.18:45778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2htPAdfEWqmGIkg11jQAAAnQ"]
[Wed Sep 30 01:13:10.261583 2026] [security2:error] [pid 276620:tid 276809] [client 74.225.148.80:11021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/gelay.php"] [unique_id "ary2htPAdfEWqmGIkg11jwAAAkY"]
[Wed Sep 30 01:13:10.272326 2026] [security2:error] [pid 276620:tid 276877] [client 20.213.164.196:35825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/dex.php"] [unique_id "ary2htPAdfEWqmGIkg11kAAAAoo"]
[Wed Sep 30 01:13:10.274330 2026] [security2:error] [pid 276059:tid 276232] [client 20.213.164.196:21838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/nck.php"] [unique_id "ary2hntqdHBwD77138fECQAAAbQ"]
[Wed Sep 30 01:13:10.275443 2026] [security2:error] [pid 276059:tid 276205] [client 20.214.151.17:47387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ans.php"] [unique_id "ary2hntqdHBwD77138fECgAAAZo"]
[Wed Sep 30 01:13:10.319108 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.319402 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.348705 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:10.348989 2026] [access_compat:error] [pid 276059:tid 276225] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:10.362682 2026] [security2:error] [pid 276620:tid 276795] [client 85.204.70.118:43266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2htPAdfEWqmGIkg11kwAAAjg"]
[Wed Sep 30 01:13:10.412581 2026] [security2:error] [pid 276620:tid 276764] [client 20.213.164.196:60611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wpuse.php"] [unique_id "ary2htPAdfEWqmGIkg11lgAAAhk"]
[Wed Sep 30 01:13:10.421958 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.422407 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.434248 2026] [security2:error] [pid 276059:tid 276262] [client 4.240.25.22:18791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/xkSudf.php"] [unique_id "ary2hntqdHBwD77138fEEQAAAdI"]
[Wed Sep 30 01:13:10.442671 2026] [security2:error] [pid 276059:tid 276085] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2hntqdHBwD77138fEEwABwhU"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D80305
[Wed Sep 30 01:13:10.483121 2026] [security2:error] [pid 276059:tid 276102] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.aws/.env"] [unique_id "ary2hntqdHBwD77138fEFwAB3SY"]
[Wed Sep 30 01:13:10.486884 2026] [security2:error] [pid 276059:tid 276185] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.aws/credentials.bak"] [unique_id "ary2hntqdHBwD77138fEGwAB3Xk"]
[Wed Sep 30 01:13:10.487298 2026] [security2:error] [pid 276059:tid 276167] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.docker/.env"] [unique_id "ary2hntqdHBwD77138fEIQAB3Wc"]
[Wed Sep 30 01:13:10.487331 2026] [security2:error] [pid 276059:tid 276155] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ary2hntqdHBwD77138fEHgAB3Vs"]
[Wed Sep 30 01:13:10.488307 2026] [security2:error] [pid 276059:tid 276167] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env"] [unique_id "ary2hntqdHBwD77138fEIwAB3Wc"]
[Wed Sep 30 01:13:10.500954 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.501404 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.556130 2026] [security2:error] [pid 276059:tid 276270] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2hntqdHBwD77138fELgAAAdo"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:10.592404 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.592656 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.598001 2026] [security2:error] [pid 276620:tid 276817] [client 20.194.96.176:55337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/av.php"] [unique_id "ary2htPAdfEWqmGIkg11nwAAAk4"]
[Wed Sep 30 01:13:10.624831 2026] [security2:error] [pid 276059:tid 276086] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env.bak"] [unique_id "ary2hntqdHBwD77138fENQABzxY"]
[Wed Sep 30 01:13:10.624844 2026] [security2:error] [pid 276059:tid 276151] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env.backup"] [unique_id "ary2hntqdHBwD77138fENAABz1c"]
[Wed Sep 30 01:13:10.643642 2026] [security2:error] [pid 276620:tid 276809] [client 85.204.70.118:43274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2htPAdfEWqmGIkg11pwAAAkY"]
[Wed Sep 30 01:13:10.652966 2026] [security2:error] [pid 276059:tid 276113] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env.old"] [unique_id "ary2hntqdHBwD77138fEQwABzzE"]
[Wed Sep 30 01:13:10.656956 2026] [security2:error] [pid 276059:tid 276247] [client 20.214.151.17:47400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/gf.php"] [unique_id "ary2hntqdHBwD77138fERQAAAcM"]
[Wed Sep 30 01:13:10.675775 2026] [security2:error] [pid 276620:tid 276877] [client 20.213.164.196:22151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/xtt.php"] [unique_id "ary2htPAdfEWqmGIkg11sgAAAoo"]
[Wed Sep 30 01:13:10.683885 2026] [security2:error] [pid 276059:tid 276257] [client 179.105.122.52:53562] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2hntqdHBwD77138fESAAAAc0"]
[Wed Sep 30 01:13:10.684305 2026] [security2:error] [pid 276059:tid 276257] [client 179.105.122.52:53562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2hntqdHBwD77138fESAAAAc0"]
[Wed Sep 30 01:13:10.742145 2026] [security2:error] [pid 276059:tid 276174] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.aws/.env"] [unique_id "ary2hntqdHBwD77138fESQABrm4"]
[Wed Sep 30 01:13:10.742442 2026] [security2:error] [pid 276059:tid 276093] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.aws/credentials.bak"] [unique_id "ary2hntqdHBwD77138fETgABrh0"]
[Wed Sep 30 01:13:10.744949 2026] [security2:error] [pid 276059:tid 276161] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.docker/.env"] [unique_id "ary2hntqdHBwD77138fEVQABrmE"]
[Wed Sep 30 01:13:10.745374 2026] [security2:error] [pid 276620:tid 276782] [client 168.100.149.102:36604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2026/01/ISO-14001-Certified_col-300x126.png"] [unique_id "ary2htPAdfEWqmGIkg11tQACKzs"]
[Wed Sep 30 01:13:10.745504 2026] [security2:error] [pid 276059:tid 276103] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env"] [unique_id "ary2hntqdHBwD77138fEVgABric"]
[Wed Sep 30 01:13:10.748643 2026] [security2:error] [pid 276059:tid 276106] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "ary2hntqdHBwD77138fEVwABrio"]
[Wed Sep 30 01:13:10.749063 2026] [security2:error] [pid 276620:tid 276877] [client 74.225.148.80:11010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/htaccess.php"] [unique_id "ary2htPAdfEWqmGIkg11uQAAAoo"]
[Wed Sep 30 01:13:10.756349 2026] [security2:error] [pid 276059:tid 276158] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env.php"] [unique_id "ary2hntqdHBwD77138fEWgABml4"]
[Wed Sep 30 01:13:10.787465 2026] [security2:error] [pid 276059:tid 276098] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env.swp"] [unique_id "ary2hntqdHBwD77138fEYgABmiI"]
[Wed Sep 30 01:13:10.790304 2026] [security2:error] [pid 276059:tid 276101] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/.env~"] [unique_id "ary2hntqdHBwD77138fEZQABmiU"]
[Wed Sep 30 01:13:10.869292 2026] [security2:error] [pid 276059:tid 276206] [client 20.70.173.30:33365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/df.php"] [unique_id "ary2hntqdHBwD77138fEeQAAAZs"]
[Wed Sep 30 01:13:10.885432 2026] [security2:error] [pid 276059:tid 276123] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env.bak"] [unique_id "ary2hntqdHBwD77138fEgAABqzs"]
[Wed Sep 30 01:13:10.885492 2026] [security2:error] [pid 276059:tid 276070] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env.backup"] [unique_id "ary2hntqdHBwD77138fEfwABqwY"]
[Wed Sep 30 01:13:10.892430 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.892722 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:2085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.930089 2026] [security2:error] [pid 276620:tid 276820] [client 85.204.70.118:49882] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2htPAdfEWqmGIkg11zgAAAlE"]
[Wed Sep 30 01:13:10.952757 2026] [access_compat:error] [pid 276059:tid 276285] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:10.953024 2026] [access_compat:error] [pid 276059:tid 276285] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:10.984761 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:10.985073 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:10.995216 2026] [security2:error] [pid 276620:tid 276762] [client 13.70.4.78:45661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/mini.php"] [unique_id "ary2htPAdfEWqmGIkg112QAAAhc"]
[Wed Sep 30 01:13:10.998249 2026] [security2:error] [pid 276620:tid 276795] [client 185.115.34.240:59200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:your-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "www.jfootsteps.com"] [uri "/"] [unique_id "ary2htPAdfEWqmGIkg112AAAAjg"], referer: http://www.jfootsteps.com/
[Wed Sep 30 01:13:11.009353 2026] [security2:error] [pid 276620:tid 276782] [client 20.214.151.17:47415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/man.php"] [unique_id "ary2h9PAdfEWqmGIkg113wAAAis"]
[Wed Sep 30 01:13:11.015989 2026] [security2:error] [pid 276059:tid 276179] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts.co.uk"] [uri "/.env.php"] [unique_id "ary2h3tqdHBwD77138fEpwACBHM"]
[Wed Sep 30 01:13:11.016906 2026] [security2:error] [pid 276059:tid 276119] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env.old"] [unique_id "ary2h3tqdHBwD77138fEpgACBDc"]
[Wed Sep 30 01:13:11.019155 2026] [security2:error] [pid 276059:tid 276163] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/api/.env"] [unique_id "ary2h3tqdHBwD77138fEqwABmmM"]
[Wed Sep 30 01:13:11.035390 2026] [security2:error] [pid 276620:tid 276842] [client 20.219.2.60:30367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/njxjtooj.php"] [unique_id "ary2h9PAdfEWqmGIkg115wAAAmc"]
[Wed Sep 30 01:13:11.059537 2026] [security2:error] [pid 276059:tid 276265] [client 74.7.175.178:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.nelsonfarmstn.com"] [uri "/index.php"] [unique_id "ary2hntqdHBwD77138fEfQAAAdU"]
[Wed Sep 30 01:13:11.071113 2026] [security2:error] [pid 276059:tid 276115] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/api/phpinfo.php"] [unique_id "ary2h3tqdHBwD77138fErwAB0jM"]
[Wed Sep 30 01:13:11.072018 2026] [security2:error] [pid 276059:tid 276130] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/app/.env"] [unique_id "ary2h3tqdHBwD77138fEsgAB0kI"]
[Wed Sep 30 01:13:11.072021 2026] [security2:error] [pid 276059:tid 276097] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/application/.env"] [unique_id "ary2h3tqdHBwD77138fEsQAB0iE"]
[Wed Sep 30 01:13:11.078025 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.078334 2026] [access_compat:error] [pid 276059:tid 276320] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.082430 2026] [security2:error] [pid 276059:tid 276210] [client 20.213.164.196:60667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/sm.php"] [unique_id "ary2h3tqdHBwD77138fEvAAAAZ4"]
[Wed Sep 30 01:13:11.092599 2026] [security2:error] [pid 276059:tid 276232] [client 74.7.175.178:33426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.nelsonfarmstn.com"] [uri "/robots.txt"] [unique_id "ary2hntqdHBwD77138fEaQABtAI"]
[Wed Sep 30 01:13:11.096642 2026] [security2:error] [pid 276059:tid 276173] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env.swp"] [unique_id "ary2h3tqdHBwD77138fEvQACBG0"]
[Wed Sep 30 01:13:11.131430 2026] [security2:error] [pid 276059:tid 276096] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/.env~"] [unique_id "ary2h3tqdHBwD77138fEwAAB1iA"]
[Wed Sep 30 01:13:11.138189 2026] [security2:error] [pid 276059:tid 276111] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/back/.env"] [unique_id "ary2h3tqdHBwD77138fEwgAB2S8"]
[Wed Sep 30 01:13:11.140843 2026] [security2:error] [pid 276059:tid 276157] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/backend/.env"] [unique_id "ary2h3tqdHBwD77138fEwwABo10"]
[Wed Sep 30 01:13:11.144727 2026] [security2:error] [pid 276059:tid 276138] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/backup/.env"] [unique_id "ary2h3tqdHBwD77138fExwAB7ko"]
[Wed Sep 30 01:13:11.146608 2026] [security2:error] [pid 276059:tid 276064] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/cms/.env"] [unique_id "ary2h3tqdHBwD77138fEyAAB7gA"]
[Wed Sep 30 01:13:11.166672 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.167131 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.169587 2026] [security2:error] [pid 276059:tid 276206] [client 20.213.164.196:15971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/chosen.php"] [unique_id "ary2h3tqdHBwD77138fE0gAAAZs"]
[Wed Sep 30 01:13:11.181884 2026] [security2:error] [pid 276620:tid 276762] [client 20.213.164.196:21824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "getyourevildeathtoolhere.com"] [uri "/go.php"] [unique_id "ary2h9PAdfEWqmGIkg12AgAAAhc"]
[Wed Sep 30 01:13:11.208191 2026] [security2:error] [pid 276059:tid 276109] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/config.php"] [unique_id "ary2h3tqdHBwD77138fE2gAB3S0"]
[Wed Sep 30 01:13:11.208572 2026] [security2:error] [pid 276059:tid 276185] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/config/.env"] [unique_id "ary2h3tqdHBwD77138fE2wAB3Xk"]
[Wed Sep 30 01:13:11.210657 2026] [security2:error] [pid 276059:tid 276081] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/core/.env"] [unique_id "ary2h3tqdHBwD77138fE3wAB3RE"]
[Wed Sep 30 01:13:11.219386 2026] [security2:error] [pid 276620:tid 276803] [client 74.225.148.80:10876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/readme.php"] [unique_id "ary2h9PAdfEWqmGIkg12DQAAAkA"]
[Wed Sep 30 01:13:11.222310 2026] [security2:error] [pid 276620:tid 276832] [client 85.204.70.118:43282] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2h9PAdfEWqmGIkg12DgAAAl0"]
[Wed Sep 30 01:13:11.247364 2026] [security2:error] [pid 276059:tid 276113] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/api/.env"] [unique_id "ary2h3tqdHBwD77138fE7AAB_jE"]
[Wed Sep 30 01:13:11.262261 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.262695 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.268232 2026] [security2:error] [pid 276059:tid 276105] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts.co.uk"] [uri "/api/phpinfo.php"] [unique_id "ary2h3tqdHBwD77138fE7wAB_ik"]
[Wed Sep 30 01:13:11.278246 2026] [security2:error] [pid 276059:tid 276104] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/database.sql"] [unique_id "ary2h3tqdHBwD77138fE8QABwSg"]
[Wed Sep 30 01:13:11.280369 2026] [security2:error] [pid 276059:tid 276143] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/dev/.env"] [unique_id "ary2h3tqdHBwD77138fE8gAB1E8"]
[Wed Sep 30 01:13:11.292908 2026] [security2:error] [pid 276059:tid 276190] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/app/.env"] [unique_id "ary2h3tqdHBwD77138fE9gABkn4"]
[Wed Sep 30 01:13:11.305818 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:2085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2h9PAdfEWqmGIkg12GwAAAkg"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTMvbm9kZTAvbWVtb3J5OS9ub2RlMC9jcHU2
[Wed Sep 30 01:13:11.307551 2026] [security2:error] [pid 276059:tid 276164] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/application/.env"] [unique_id "ary2h3tqdHBwD77138fE-AAB9mQ"]
[Wed Sep 30 01:13:11.319194 2026] [security2:error] [pid 276620:tid 276764] [client 185.115.34.240:59214] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:< ?script|< ?(?:i?frame ?src|a ?href) ?= ?(?:ogg|tls|ssl|gopher|zlib|(ht|f)tps?)\\\\:/|document\\\\.write ?\\\\(|(?:<|< ?/) ?(?:(?:java|vb)script|applet|activex|chrome|qx?ss|embed)|< ?/?i?frame\\\\b)" at ARGS:your-message. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1139"] [id "340148"] [rev "152"] [msg "Atomicorp.com WAF Rules: Potential Cross Site Scripting Attack"] [data "<a href=https:/"] [severity "CRITICAL"] [hostname "www.jfootsteps.com"] [uri "/"] [unique_id "ary2h9PAdfEWqmGIkg12HAAAAhk"], referer: http://www.jfootsteps.com/
[Wed Sep 30 01:13:11.344585 2026] [security2:error] [pid 276059:tid 276103] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/frontend/.env"] [unique_id "ary2h3tqdHBwD77138fE_wABqyc"]
[Wed Sep 30 01:13:11.345555 2026] [security2:error] [pid 276059:tid 276136] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/back/.env"] [unique_id "ary2h3tqdHBwD77138fFAwAB00g"]
[Wed Sep 30 01:13:11.345978 2026] [security2:error] [pid 276059:tid 276136] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/info.php"] [unique_id "ary2h3tqdHBwD77138fFBAABq0g"]
[Wed Sep 30 01:13:11.347212 2026] [security2:error] [pid 276059:tid 276158] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/laravel/.env"] [unique_id "ary2h3tqdHBwD77138fFBQABq14"]
[Wed Sep 30 01:13:11.347282 2026] [security2:error] [pid 276059:tid 276101] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/backend/.env"] [unique_id "ary2h3tqdHBwD77138fFBgAB0yU"]
[Wed Sep 30 01:13:11.351439 2026] [security2:error] [pid 276059:tid 276275] [client 20.214.151.17:64815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/dev.php"] [unique_id "ary2h3tqdHBwD77138fFCAAAAd8"]
[Wed Sep 30 01:13:11.369793 2026] [security2:error] [pid 276059:tid 276161] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/backup/.env"] [unique_id "ary2h3tqdHBwD77138fFCQABpmE"]
[Wed Sep 30 01:13:11.375126 2026] [security2:error] [pid 276059:tid 276091] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/media/.env"] [unique_id "ary2h3tqdHBwD77138fFCgABqxs"]
[Wed Sep 30 01:13:11.393151 2026] [security2:error] [pid 276059:tid 276110] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/cms/.env"] [unique_id "ary2h3tqdHBwD77138fFDAAB1S4"]
[Wed Sep 30 01:13:11.394798 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:11.395260 2026] [access_compat:error] [pid 276059:tid 276316] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:11.395390 2026] [security2:error] [pid 276059:tid 276110] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/old/.env"] [unique_id "ary2h3tqdHBwD77138fFDQAB2C4"]
[Wed Sep 30 01:13:11.395999 2026] [security2:error] [pid 276059:tid 276132] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/new/.env"] [unique_id "ary2h3tqdHBwD77138fFDgAB2EQ"]
[Wed Sep 30 01:13:11.405975 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.406433 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.411823 2026] [security2:error] [pid 276059:tid 276070] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/phpinfo.php"] [unique_id "ary2h3tqdHBwD77138fFFAAB2AY"]
[Wed Sep 30 01:13:11.417884 2026] [security2:error] [pid 276059:tid 276121] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/public/.env"] [unique_id "ary2h3tqdHBwD77138fFFwAB2Dk"]
[Wed Sep 30 01:13:11.418002 2026] [security2:error] [pid 276059:tid 276125] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/production/.env"] [unique_id "ary2h3tqdHBwD77138fFFgAB2D0"]
[Wed Sep 30 01:13:11.426769 2026] [security2:error] [pid 276059:tid 276131] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts.co.uk"] [uri "/config.php"] [unique_id "ary2h3tqdHBwD77138fFGQAB0kM"]
[Wed Sep 30 01:13:11.443891 2026] [core:error] [pid 276620:tid 276795] [client 45.138.12.48:48980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:11.443913 2026] [core:error] [pid 276620:tid 276795] [client 45.138.12.48:48980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:11.447073 2026] [security2:error] [pid 276059:tid 276169] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/config/.env"] [unique_id "ary2h3tqdHBwD77138fFHwAB0mk"]
[Wed Sep 30 01:13:11.453504 2026] [security2:error] [pid 276059:tid 276107] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/server/.env"] [unique_id "ary2h3tqdHBwD77138fFIQAB2Cs"]
[Wed Sep 30 01:13:11.460142 2026] [security2:error] [pid 276059:tid 276128] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/core/.env"] [unique_id "ary2h3tqdHBwD77138fFJQAB0kA"]
[Wed Sep 30 01:13:11.490624 2026] [security2:error] [pid 276059:tid 276133] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/test/.env"] [unique_id "ary2h3tqdHBwD77138fFLAAB2EU"]
[Wed Sep 30 01:13:11.491187 2026] [security2:error] [pid 276059:tid 276139] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/database.sql"] [unique_id "ary2h3tqdHBwD77138fFMAAB0ks"]
[Wed Sep 30 01:13:11.491373 2026] [security2:error] [pid 276059:tid 276082] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/staging/.env"] [unique_id "ary2h3tqdHBwD77138fFLgAB2BI"]
[Wed Sep 30 01:13:11.491507 2026] [security2:error] [pid 276059:tid 276067] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/v1/.env"] [unique_id "ary2h3tqdHBwD77138fFLQAB2AM"]
[Wed Sep 30 01:13:11.492627 2026] [security2:error] [pid 276059:tid 276108] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/src/.env"] [unique_id "ary2h3tqdHBwD77138fFKQAB2Cw"]
[Wed Sep 30 01:13:11.499748 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.500347 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.503596 2026] [security2:error] [pid 276620:tid 276877] [client 85.204.70.118:43298] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcontacts.sxo.tcq.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2h9PAdfEWqmGIkg12JgAAAoo"]
[Wed Sep 30 01:13:11.509326 2026] [security2:error] [pid 276059:tid 276119] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/dev/.env"] [unique_id "ary2h3tqdHBwD77138fFNQAB0jc"]
[Wed Sep 30 01:13:11.511155 2026] [security2:error] [pid 276059:tid 276163] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/v2/.env"] [unique_id "ary2h3tqdHBwD77138fFNgAB2GM"]
[Wed Sep 30 01:13:11.530165 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.530454 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.531261 2026] [security2:error] [pid 276059:tid 276186] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/wp-config.php.bak"] [unique_id "ary2h3tqdHBwD77138fFOQABuno"]
[Wed Sep 30 01:13:11.533360 2026] [security2:error] [pid 276059:tid 276162] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/web/.env"] [unique_id "ary2h3tqdHBwD77138fFOwABumI"]
[Wed Sep 30 01:13:11.538523 2026] [security2:error] [pid 276059:tid 276319] [client 20.28.180.172:61216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-xmlsia.php"] [unique_id "ary2h3tqdHBwD77138fFPAAAAgs"]
[Wed Sep 30 01:13:11.551050 2026] [security2:error] [pid 276059:tid 276212] [client 20.213.164.196:51023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/mknobgkg.php"] [unique_id "ary2h3tqdHBwD77138fFPwAAAaA"]
[Wed Sep 30 01:13:11.563095 2026] [security2:error] [pid 276620:tid 276787] [client 20.194.30.107:17420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/echkm.php"] [unique_id "ary2h9PAdfEWqmGIkg12LwAAAjA"]
[Wed Sep 30 01:13:11.568214 2026] [security2:error] [pid 276059:tid 276294] [client 13.70.4.78:45644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/zwso.php"] [unique_id "ary2h3tqdHBwD77138fFSQAAAfI"]
[Wed Sep 30 01:13:11.589745 2026] [security2:error] [pid 276059:tid 276090] [remote 34.14.99.143:34218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts-co-uk.habeshacontacts.com"] [uri "/v3/.env"] [unique_id "ary2h3tqdHBwD77138fFTQABxxo"]
[Wed Sep 30 01:13:11.590658 2026] [security2:error] [pid 276059:tid 276076] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/frontend/.env"] [unique_id "ary2h3tqdHBwD77138fFTgAB0gw"]
[Wed Sep 30 01:13:11.598733 2026] [security2:error] [pid 276059:tid 276173] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts.co.uk"] [uri "/info.php"] [unique_id "ary2h3tqdHBwD77138fFUAACAm0"]
[Wed Sep 30 01:13:11.620493 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.620772 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:49225] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.630882 2026] [security2:error] [pid 276059:tid 276096] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/media/.env"] [unique_id "ary2h3tqdHBwD77138fFVQACDiA"]
[Wed Sep 30 01:13:11.630931 2026] [security2:error] [pid 276059:tid 276072] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/laravel/.env"] [unique_id "ary2h3tqdHBwD77138fFVAACDgg"]
[Wed Sep 30 01:13:11.637604 2026] [security2:error] [pid 276059:tid 276111] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/new/.env"] [unique_id "ary2h3tqdHBwD77138fFVgABsS8"]
[Wed Sep 30 01:13:11.647061 2026] [security2:error] [pid 276059:tid 276157] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/old/.env"] [unique_id "ary2h3tqdHBwD77138fFWAABlV0"]
[Wed Sep 30 01:13:11.651616 2026] [security2:error] [pid 276059:tid 276064] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.99.14.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salesforce-experts.co.uk"] [uri "/phpinfo.php"] [unique_id "ary2h3tqdHBwD77138fFWgAB0QA"]
[Wed Sep 30 01:13:11.652969 2026] [security2:error] [pid 276059:tid 276095] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/production/.env"] [unique_id "ary2h3tqdHBwD77138fFWwAB0R8"]
[Wed Sep 30 01:13:11.667493 2026] [security2:error] [pid 276620:tid 276788] [client 20.214.151.17:64888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ms-edit.php"] [unique_id "ary2h9PAdfEWqmGIkg12PQAAAjE"]
[Wed Sep 30 01:13:11.676219 2026] [security2:error] [pid 276059:tid 276140] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/public/.env"] [unique_id "ary2h3tqdHBwD77138fFXQAB0Uw"]
[Wed Sep 30 01:13:11.680591 2026] [security2:error] [pid 276620:tid 276844] [client 216.73.216.46:49225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2h9PAdfEWqmGIkg12QAAAAmk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTUvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5NDAx
[Wed Sep 30 01:13:11.697609 2026] [security2:error] [pid 276059:tid 276264] [client 74.225.148.80:10865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/max.php"] [unique_id "ary2h3tqdHBwD77138fFYAAAAdQ"]
[Wed Sep 30 01:13:11.705822 2026] [security2:error] [pid 276059:tid 276181] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/server/.env"] [unique_id "ary2h3tqdHBwD77138fFYQABwXU"]
[Wed Sep 30 01:13:11.711965 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.712228 2026] [access_compat:error] [pid 276059:tid 276197] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.728175 2026] [security2:error] [pid 276059:tid 276085] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/src/.env"] [unique_id "ary2h3tqdHBwD77138fFZAABpBU"]
[Wed Sep 30 01:13:11.732465 2026] [security2:error] [pid 276059:tid 276155] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/staging/.env"] [unique_id "ary2h3tqdHBwD77138fFZQABpVs"]
[Wed Sep 30 01:13:11.735778 2026] [security2:error] [pid 276059:tid 276084] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/test/.env"] [unique_id "ary2h3tqdHBwD77138fFZgABzxQ"]
[Wed Sep 30 01:13:11.737669 2026] [security2:error] [pid 276059:tid 276167] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/v1/.env"] [unique_id "ary2h3tqdHBwD77138fFZwABlGc"]
[Wed Sep 30 01:13:11.769132 2026] [security2:error] [pid 276059:tid 276109] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/v2/.env"] [unique_id "ary2h3tqdHBwD77138fFaQAB5C0"]
[Wed Sep 30 01:13:11.775025 2026] [security2:error] [pid 276059:tid 276078] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/web/.env"] [unique_id "ary2h3tqdHBwD77138fFawACDQ4"]
[Wed Sep 30 01:13:11.783513 2026] [security2:error] [pid 276059:tid 276148] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "salesforce-experts.co.uk"] [uri "/wp-config.php.bak"] [unique_id "ary2h3tqdHBwD77138fFbAAB6lQ"]
[Wed Sep 30 01:13:11.803535 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.803845 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.833222 2026] [security2:error] [pid 276059:tid 276113] [remote 34.14.99.143:34234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "salesforce-experts.co.uk"] [uri "/v3/.env"] [unique_id "ary2h3tqdHBwD77138fFdwAB0zE"]
[Wed Sep 30 01:13:11.859521 2026] [security2:error] [pid 276620:tid 276695] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2h9PAdfEWqmGIkg12TQACIkE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?start=120&t=9191
[Wed Sep 30 01:13:11.859586 2026] [security2:error] [pid 276620:tid 276695] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2h9PAdfEWqmGIkg12TQACIkE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?start=120&t=9191
[Wed Sep 30 01:13:11.895768 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.896066 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:11.909731 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:11.910019 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:11.955733 2026] [security2:error] [pid 276059:tid 276236] [client 103.211.18.63:64898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2h3tqdHBwD77138fFfgAAAbg"]
[Wed Sep 30 01:13:11.955916 2026] [security2:error] [pid 276059:tid 276236] [client 103.211.18.63:64898] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2h3tqdHBwD77138fFfgAAAbg"]
[Wed Sep 30 01:13:11.967315 2026] [security2:error] [pid 276059:tid 276312] [client 13.70.4.78:37908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/tiny.php"] [unique_id "ary2h3tqdHBwD77138fFfwAAAgQ"]
[Wed Sep 30 01:13:11.986186 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:11.986472 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.007816 2026] [security2:error] [pid 276620:tid 276858] [client 20.214.151.17:64779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/txets.php"] [unique_id "ary2iNPAdfEWqmGIkg12UQAAAnc"]
[Wed Sep 30 01:13:12.075112 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.075211 2026] [security2:error] [pid 276620:tid 276762] [client 20.213.164.196:35809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/radio.php"] [unique_id "ary2iNPAdfEWqmGIkg12VAAAAhc"]
[Wed Sep 30 01:13:12.075380 2026] [access_compat:error] [pid 276059:tid 276213] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.129147 2026] [security2:error] [pid 276620:tid 276775] [client 20.213.164.196:51037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/dairg.php"] [unique_id "ary2iNPAdfEWqmGIkg12VgAAAiQ"]
[Wed Sep 30 01:13:12.142273 2026] [security2:error] [pid 276620:tid 276738] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2iNPAdfEWqmGIkg12VwACGWw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=16851
[Wed Sep 30 01:13:12.142301 2026] [security2:error] [pid 276620:tid 276738] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2iNPAdfEWqmGIkg12VwACGWw"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=cf3a10107e8b94b56138e6e3539ae888&start=15&t=16851
[Wed Sep 30 01:13:12.144617 2026] [http2:warn] [pid 270884:tid 271082] [client 40.77.167.224:51786] h2_stream(270884-1059-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:13:12.167263 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.167553 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.172159 2026] [security2:error] [pid 276620:tid 276787] [client 74.225.148.80:11225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/post.php"] [unique_id "ary2iNPAdfEWqmGIkg12WQAAAjA"]
[Wed Sep 30 01:13:12.257595 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.257903 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.261181 2026] [security2:error] [pid 276620:tid 276782] [client 20.70.173.30:19170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/key.php"] [unique_id "ary2iNPAdfEWqmGIkg12YAAAAis"]
[Wed Sep 30 01:13:12.348307 2026] [security2:error] [pid 276620:tid 276856] [client 13.70.4.78:45695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/simple.php"] [unique_id "ary2iNPAdfEWqmGIkg12aAAAAnU"]
[Wed Sep 30 01:13:12.350376 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.350628 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.361978 2026] [security2:error] [pid 276620:tid 276757] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2iNPAdfEWqmGIkg12aQACJn8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=40814
[Wed Sep 30 01:13:12.362012 2026] [security2:error] [pid 276620:tid 276757] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2iNPAdfEWqmGIkg12aQACJn8"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=40814
[Wed Sep 30 01:13:12.384517 2026] [security2:error] [pid 276059:tid 276276] [client 20.214.151.17:64801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/hao.php"] [unique_id "ary2iHtqdHBwD77138fFjgAAAeA"]
[Wed Sep 30 01:13:12.398923 2026] [access_compat:error] [pid 276059:tid 276250] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:12.399384 2026] [access_compat:error] [pid 276059:tid 276250] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:12.450888 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.451371 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.467407 2026] [security2:error] [pid 276059:tid 276289] [client 20.219.2.60:29920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws85.php"] [unique_id "ary2iHtqdHBwD77138fFkQAAAe0"]
[Wed Sep 30 01:13:12.532467 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.532719 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.623686 2026] [security2:error] [pid 276620:tid 276782] [client 74.225.148.80:65338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/themes.php"] [unique_id "ary2iNPAdfEWqmGIkg12bQAAAis"]
[Wed Sep 30 01:13:12.628910 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.629354 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.692732 2026] [security2:error] [pid 276620:tid 276844] [client 3.104.242.142:45778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.242.104.3.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/wp-login.php"] [unique_id "ary2iNPAdfEWqmGIkg12cAAAAmk"]
[Wed Sep 30 01:13:12.694839 2026] [security2:error] [pid 276620:tid 276798] [client 13.70.4.78:38230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/buy.php"] [unique_id "ary2iNPAdfEWqmGIkg12cQAAAjs"]
[Wed Sep 30 01:13:12.712993 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.713251 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:29041] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.759492 2026] [security2:error] [pid 276620:tid 276775] [client 168.100.149.164:59762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/9.png"] [unique_id "ary2iNPAdfEWqmGIkg12cwACJEo"]
[Wed Sep 30 01:13:12.773316 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.151.17:64883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/33.php"] [unique_id "ary2iNPAdfEWqmGIkg12dAAAAl0"]
[Wed Sep 30 01:13:12.782951 2026] [security2:error] [pid 276620:tid 276842] [client 20.70.173.30:38907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/ops.php"] [unique_id "ary2iNPAdfEWqmGIkg12dQAAAmc"]
[Wed Sep 30 01:13:12.805892 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.806322 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.874263 2026] [security2:error] [pid 276620:tid 276694] [remote 74.7.227.56:54998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2iNPAdfEWqmGIkg12eQACQEA"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=25
[Wed Sep 30 01:13:12.879189 2026] [security2:error] [pid 276620:tid 276880] [client 20.213.164.196:7005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/dronishness.php"] [unique_id "ary2iNPAdfEWqmGIkg12egAAAo0"]
[Wed Sep 30 01:13:12.896294 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.896580 2026] [access_compat:error] [pid 276059:tid 276270] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:12.946566 2026] [security2:error] [pid 276620:tid 276832] [client 20.213.164.196:54657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2iNPAdfEWqmGIkg12fwAAAl0"]
[Wed Sep 30 01:13:12.965627 2026] [access_compat:error] [pid 276059:tid 276287] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:12.966091 2026] [access_compat:error] [pid 276059:tid 276287] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:12.979424 2026] [security2:error] [pid 276620:tid 276817] [client 20.70.173.30:33288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/av.php"] [unique_id "ary2iNPAdfEWqmGIkg12ggAAAk4"]
[Wed Sep 30 01:13:12.988735 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:12.989010 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.030944 2026] [security2:error] [pid 276620:tid 276803] [client 13.70.4.78:45658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ioxi-o.php"] [unique_id "ary2idPAdfEWqmGIkg12gwAAAkA"]
[Wed Sep 30 01:13:13.078036 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.078291 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.096840 2026] [security2:error] [pid 276620:tid 276805] [client 74.225.148.80:11062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/maint/about.php"] [unique_id "ary2idPAdfEWqmGIkg12hAAAAkI"]
[Wed Sep 30 01:13:13.104861 2026] [security2:error] [pid 276059:tid 276304] [client 216.73.216.46:29041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2iXtqdHBwD77138fFrAAAAfw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzIvbm9kZTAvY3B1OC9kcml2ZXIvY3B1MC9kcml2ZXI%3D
[Wed Sep 30 01:13:13.169120 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.169377 2026] [access_compat:error] [pid 276059:tid 276312] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.180861 2026] [security2:error] [pid 276620:tid 276856] [client 20.214.151.17:64789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/adminner.php"] [unique_id "ary2idPAdfEWqmGIkg12iAAAAnU"]
[Wed Sep 30 01:13:13.215689 2026] [security2:error] [pid 276620:tid 276817] [client 4.240.25.22:18778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/red.php"] [unique_id "ary2idPAdfEWqmGIkg12iQAAAk4"]
[Wed Sep 30 01:13:13.261246 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.261533 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.284901 2026] [http2:warn] [pid 270884:tid 271136] [client 40.77.167.224:51782] h2_stream(270884-589-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Wed Sep 30 01:13:13.290464 2026] [security2:error] [pid 276620:tid 276777] [client 20.213.164.196:7004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/Row_wsoo.php"] [unique_id "ary2idPAdfEWqmGIkg12jAAAAiY"]
[Wed Sep 30 01:13:13.351856 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.352134 2026] [access_compat:error] [pid 276059:tid 276206] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.358558 2026] [security2:error] [pid 276620:tid 276855] [client 80.225.203.231:36470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.203.225.80.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "appludi.coimage.net"] [uri "/index.php"] [unique_id "ary2idPAdfEWqmGIkg12jQAAAnQ"]
[Wed Sep 30 01:13:13.399824 2026] [security2:error] [pid 276620:tid 276782] [client 13.70.4.78:37897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ans.php"] [unique_id "ary2idPAdfEWqmGIkg12jgAAAis"]
[Wed Sep 30 01:13:13.401666 2026] [security2:error] [pid 276059:tid 276293] [client 20.213.164.196:15970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/k.php"] [unique_id "ary2iXtqdHBwD77138fFtAAAAfE"]
[Wed Sep 30 01:13:13.405893 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:13.406288 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:13.459576 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.460269 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.517191 2026] [security2:error] [pid 276059:tid 276268] [client 20.194.96.176:34710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/1xmomo.php"] [unique_id "ary2iXtqdHBwD77138fFuQAAAdg"]
[Wed Sep 30 01:13:13.520940 2026] [security2:error] [pid 276620:tid 276805] [client 20.214.151.17:47372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/thoms.php"] [unique_id "ary2idPAdfEWqmGIkg12kAAAAkI"]
[Wed Sep 30 01:13:13.533410 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.533665 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.572548 2026] [security2:error] [pid 276620:tid 276789] [client 74.225.148.80:11043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary2idPAdfEWqmGIkg12kgAAAjI"]
[Wed Sep 30 01:13:13.624597 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.624902 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.659696 2026] [security2:error] [pid 276059:tid 276098] [remote 111.225.149.136:44728] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.celadondragon.com"] [uri "/content/usingdictionaries/"] [unique_id "ary2iXtqdHBwD77138fFvQABziI"]
[Wed Sep 30 01:13:13.699417 2026] [security2:error] [pid 276059:tid 276136] [remote 52.167.144.195:33116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.daytonago.org"] [uri "/history.php"] [unique_id "ary2iXtqdHBwD77138fFvgAB90g"]
[Wed Sep 30 01:13:13.711016 2026] [security2:error] [pid 276620:tid 276777] [client 20.219.2.60:30339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws61.php"] [unique_id "ary2idPAdfEWqmGIkg12lgAAAiY"]
[Wed Sep 30 01:13:13.713762 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.714025 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.743695 2026] [security2:error] [pid 276059:tid 276263] [client 49.43.163.212:57422] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2iXtqdHBwD77138fFwQAAAdM"]
[Wed Sep 30 01:13:13.743804 2026] [security2:error] [pid 276059:tid 276263] [client 49.43.163.212:57422] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2iXtqdHBwD77138fFwQAAAdM"]
[Wed Sep 30 01:13:13.805654 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.805933 2026] [access_compat:error] [pid 276059:tid 276251] [client 216.73.216.46:6382] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.850804 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.151.17:64790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/a.php"] [unique_id "ary2idPAdfEWqmGIkg12nQAAAl0"]
[Wed Sep 30 01:13:13.916901 2026] [security2:error] [pid 276620:tid 276820] [client 13.70.4.78:37931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/gf.php"] [unique_id "ary2idPAdfEWqmGIkg12ogAAAlE"]
[Wed Sep 30 01:13:13.925696 2026] [security2:error] [pid 276620:tid 276803] [client 103.241.204.139:50468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2idPAdfEWqmGIkg12owAAAkA"]
[Wed Sep 30 01:13:13.925799 2026] [security2:error] [pid 276620:tid 276803] [client 103.241.204.139:50468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2idPAdfEWqmGIkg12owAAAkA"]
[Wed Sep 30 01:13:13.938309 2026] [access_compat:error] [pid 276059:tid 276273] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:13.938581 2026] [access_compat:error] [pid 276059:tid 276273] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:13.948011 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:13.948282 2026] [access_compat:error] [pid 276059:tid 276261] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:13.964648 2026] [security2:error] [pid 276059:tid 276238] [client 37.41.16.35:53667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2iXtqdHBwD77138fFywAAAbo"]
[Wed Sep 30 01:13:13.964756 2026] [security2:error] [pid 276059:tid 276238] [client 37.41.16.35:53667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2iXtqdHBwD77138fFywAAAbo"]
[Wed Sep 30 01:13:14.041899 2026] [security2:error] [pid 276620:tid 276782] [client 74.225.148.80:10827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/click.php"] [unique_id "ary2itPAdfEWqmGIkg12qQAAAis"]
[Wed Sep 30 01:13:14.042284 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.042555 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.053756 2026] [security2:error] [pid 276620:tid 276712] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2itPAdfEWqmGIkg12qgACGVI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=205222&sid=028228a8da40471a50a63a68583818a4
[Wed Sep 30 01:13:14.053779 2026] [security2:error] [pid 276620:tid 276712] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2itPAdfEWqmGIkg12qgACGVI"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?p=205222&sid=028228a8da40471a50a63a68583818a4
[Wed Sep 30 01:13:14.079773 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.079863 2026] [security2:error] [pid 276620:tid 276863] [client 20.194.96.176:7441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/dex.php"] [unique_id "ary2itPAdfEWqmGIkg12qwAAAnw"]
[Wed Sep 30 01:13:14.080049 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.088645 2026] [security2:error] [pid 276620:tid 276773] [client 65.111.9.216:20029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2idPAdfEWqmGIkg12pgAAAiI"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:13:14.211929 2026] [security2:error] [pid 276620:tid 276863] [client 20.213.164.196:60616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/x2.php"] [unique_id "ary2itPAdfEWqmGIkg12tAAAAnw"]
[Wed Sep 30 01:13:14.217177 2026] [security2:error] [pid 276059:tid 276298] [client 216.73.216.46:6382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2intqdHBwD77138fFzgAAAfY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NzIvbm9kZTAvY3B1MC9kcml2ZXIvY3B1OC9kcml2ZXI%3D
[Wed Sep 30 01:13:14.222061 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.222325 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.247227 2026] [security2:error] [pid 276620:tid 276792] [client 20.70.173.30:25383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/ops.php"] [unique_id "ary2itPAdfEWqmGIkg12tgAAAjU"]
[Wed Sep 30 01:13:14.250951 2026] [security2:error] [pid 276620:tid 276786] [client 20.214.151.17:47401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/b8.php"] [unique_id "ary2itPAdfEWqmGIkg12twAAAi8"]
[Wed Sep 30 01:13:14.262038 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.262302 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.266949 2026] [security2:error] [pid 276620:tid 276819] [client 20.194.30.107:32141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2itPAdfEWqmGIkg12uAAAAlA"]
[Wed Sep 30 01:13:14.352211 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.352486 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.422423 2026] [security2:error] [pid 276620:tid 276863] [client 20.28.180.172:18126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehomeinsulationcompany.co.uk"] [uri "/wp-inic3.php"] [unique_id "ary2itPAdfEWqmGIkg12vQAAAnw"]
[Wed Sep 30 01:13:14.425004 2026] [security2:error] [pid 276620:tid 276855] [client 13.70.4.78:45693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/man.php"] [unique_id "ary2itPAdfEWqmGIkg12vgAAAnQ"]
[Wed Sep 30 01:13:14.455196 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.455645 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.460034 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:14.460242 2026] [security2:error] [pid 276620:tid 276792] [client 20.70.173.30:19139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/wp.php"] [unique_id "ary2itPAdfEWqmGIkg12wAAAAjU"]
[Wed Sep 30 01:13:14.460475 2026] [access_compat:error] [pid 276059:tid 276286] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:14.513713 2026] [security2:error] [pid 276620:tid 276819] [client 20.219.2.60:30364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/iyy.php"] [unique_id "ary2itPAdfEWqmGIkg12wgAAAlA"]
[Wed Sep 30 01:13:14.530150 2026] [security2:error] [pid 276620:tid 276842] [client 20.214.151.17:64474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/sid.php"] [unique_id "ary2itPAdfEWqmGIkg12wwAAAmc"]
[Wed Sep 30 01:13:14.535147 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.535434 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.626044 2026] [security2:error] [pid 276620:tid 276680] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2itPAdfEWqmGIkg12xAACXTI"], referer: https://torquayfans.com/viewtopic.php?p=83403
[Wed Sep 30 01:13:14.626075 2026] [security2:error] [pid 276620:tid 276680] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2itPAdfEWqmGIkg12xAACXTI"], referer: https://torquayfans.com/viewtopic.php?p=83403
[Wed Sep 30 01:13:14.626556 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.626793 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.658034 2026] [security2:error] [pid 276620:tid 276775] [client 74.225.148.80:10879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/install.php"] [unique_id "ary2itPAdfEWqmGIkg12ygAAAiQ"]
[Wed Sep 30 01:13:14.715568 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.716004 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.737263 2026] [security2:error] [pid 276620:tid 276880] [client 20.213.164.196:54690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/133.php"] [unique_id "ary2itPAdfEWqmGIkg12zgAAAo0"]
[Wed Sep 30 01:13:14.810220 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.810485 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.814696 2026] [security2:error] [pid 276620:tid 276811] [client 13.70.4.78:45687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/dev.php"] [unique_id "ary2itPAdfEWqmGIkg122AAAAkg"]
[Wed Sep 30 01:13:14.823852 2026] [security2:error] [pid 276620:tid 276823] [client 20.214.151.17:64855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/bro.php"] [unique_id "ary2itPAdfEWqmGIkg122QAAAlQ"]
[Wed Sep 30 01:13:14.847546 2026] [security2:error] [pid 276620:tid 276833] [client 168.100.149.98:37440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/2.png"] [unique_id "ary2itPAdfEWqmGIkg12zQACfHo"]
[Wed Sep 30 01:13:14.882032 2026] [security2:error] [pid 276620:tid 276805] [client 106.214.2.47:6017] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2itPAdfEWqmGIkg121AAAAkI"]
[Wed Sep 30 01:13:14.882157 2026] [security2:error] [pid 276620:tid 276805] [client 106.214.2.47:6017] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2itPAdfEWqmGIkg121AAAAkI"]
[Wed Sep 30 01:13:14.886889 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:14.887164 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:14.901280 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.901637 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:14.917964 2026] [security2:error] [pid 276059:tid 276312] [client 20.213.164.196:51619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/v4.php"] [unique_id "ary2intqdHBwD77138fF4gAAAgQ"]
[Wed Sep 30 01:13:14.965441 2026] [security2:error] [pid 276620:tid 276841] [client 43.104.4.187:3273] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary2itPAdfEWqmGIkg122wAAAmY"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:14.991729 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:14.992041 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.075076 2026] [security2:error] [pid 276620:tid 276760] [client 93.180.202.117:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2i9PAdfEWqmGIkg123gAAAhU"]
[Wed Sep 30 01:13:15.082153 2026] [access_compat:error] [pid 276059:tid 276196] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.082414 2026] [access_compat:error] [pid 276059:tid 276196] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.124992 2026] [security2:error] [pid 276620:tid 276819] [client 20.214.151.17:64848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/xwpg.php"] [unique_id "ary2i9PAdfEWqmGIkg123wAAAlA"]
[Wed Sep 30 01:13:15.150882 2026] [security2:error] [pid 276059:tid 276266] [client 13.70.4.78:37942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ms-edit.php"] [unique_id "ary2i3tqdHBwD77138fF6AAAAdY"]
[Wed Sep 30 01:13:15.168566 2026] [security2:error] [pid 276620:tid 276710] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2i9PAdfEWqmGIkg124QACSFA"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=4169
[Wed Sep 30 01:13:15.168598 2026] [security2:error] [pid 276620:tid 276710] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2i9PAdfEWqmGIkg124QACSFA"], referer: https://forum.torquayfans.com/posting.php?mode=reply&t=4169
[Wed Sep 30 01:13:15.173281 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.173549 2026] [access_compat:error] [pid 276059:tid 276319] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.180326 2026] [security2:error] [pid 276059:tid 276268] [client 47.82.11.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2i3tqdHBwD77138fF6wAAAdg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:15.209056 2026] [security2:error] [pid 276620:tid 276769] [client 4.240.25.22:63679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/memberfuns.php"] [unique_id "ary2i9PAdfEWqmGIkg124gAAAh4"]
[Wed Sep 30 01:13:15.258309 2026] [security2:error] [pid 276620:tid 276773] [client 43.104.4.200:10848] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary2i9PAdfEWqmGIkg126AAAAiI"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:15.260604 2026] [security2:error] [pid 276620:tid 276840] [client 43.104.4.182:29928] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary2i9PAdfEWqmGIkg126QAAAmU"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:15.264678 2026] [security2:error] [pid 276059:tid 276283] [client 43.104.4.181:7068] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary2i3tqdHBwD77138fF7gAAAec"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:15.268488 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.268919 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.296402 2026] [security2:error] [pid 276620:tid 276858] [client 20.213.164.196:60626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/albin.php"] [unique_id "ary2i9PAdfEWqmGIkg127wAAAnc"]
[Wed Sep 30 01:13:15.339014 2026] [security2:error] [pid 276059:tid 276258] [client 74.225.148.80:62531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/13k.php"] [unique_id "ary2i3tqdHBwD77138fF8wAAAc4"]
[Wed Sep 30 01:13:15.354930 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.355399 2026] [access_compat:error] [pid 276059:tid 276214] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.361405 2026] [security2:error] [pid 276620:tid 276880] [client 20.213.164.196:15938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wsd.php"] [unique_id "ary2i9PAdfEWqmGIkg128AAAAo0"]
[Wed Sep 30 01:13:15.362887 2026] [security2:error] [pid 276620:tid 276775] [client 45.138.12.48:49020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.krosscorp.us"] [uri "/wp-links-opml.php"] [unique_id "ary2i9PAdfEWqmGIkg128QAAAiQ"]
[Wed Sep 30 01:13:15.376753 2026] [security2:error] [pid 276620:tid 276836] [client 20.70.173.30:33361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/css.php"] [unique_id "ary2i9PAdfEWqmGIkg128gAAAmE"]
[Wed Sep 30 01:13:15.382363 2026] [security2:error] [pid 276620:tid 276773] [client 20.194.96.176:7254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/chosen.php"] [unique_id "ary2i9PAdfEWqmGIkg129AAAAiI"]
[Wed Sep 30 01:13:15.392573 2026] [security2:error] [pid 276620:tid 276840] [client 20.214.151.17:64802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/radio.php"] [unique_id "ary2i9PAdfEWqmGIkg129QAAAmU"]
[Wed Sep 30 01:13:15.394940 2026] [security2:error] [pid 276620:tid 276856] [client 4.240.25.22:8419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/well.php"] [unique_id "ary2i9PAdfEWqmGIkg129gAAAnU"]
[Wed Sep 30 01:13:15.461922 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:15.462367 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:15.465711 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.466154 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.509796 2026] [security2:error] [pid 276059:tid 276289] [client 4.240.25.22:41669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/simple.php"] [unique_id "ary2i3tqdHBwD77138fF-QAAAe0"]
[Wed Sep 30 01:13:15.512676 2026] [security2:error] [pid 276059:tid 276203] [client 13.70.4.78:45665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/txets.php"] [unique_id "ary2i3tqdHBwD77138fF-gAAAZg"]
[Wed Sep 30 01:13:15.542509 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.542762 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.583355 2026] [security2:error] [pid 276620:tid 276775] [client 47.79.13.27:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2i9PAdfEWqmGIkg12_AAAAiQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:15.583600 2026] [security2:error] [pid 276620:tid 276836] [client 20.219.2.60:30064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/900.php"] [unique_id "ary2i9PAdfEWqmGIkg12_QAAAmE"]
[Wed Sep 30 01:13:15.604550 2026] [security2:error] [pid 276620:tid 276769] [client 122.177.240.90:8562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2i9PAdfEWqmGIkg12_gAAAh4"]
[Wed Sep 30 01:13:15.604762 2026] [security2:error] [pid 276620:tid 276769] [client 122.177.240.90:8562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2i9PAdfEWqmGIkg12_gAAAh4"]
[Wed Sep 30 01:13:15.621521 2026] [security2:error] [pid 276059:tid 276216] [client 20.194.30.107:17297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/reviall.php"] [unique_id "ary2i3tqdHBwD77138fF_AAAAaQ"]
[Wed Sep 30 01:13:15.628069 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.628344 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.655169 2026] [security2:error] [pid 276059:tid 276273] [client 20.194.30.107:17441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/ccc.php"] [unique_id "ary2i3tqdHBwD77138fF_gAAAd0"]
[Wed Sep 30 01:13:15.660540 2026] [security2:error] [pid 276620:tid 276780] [client 20.214.151.17:64786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ccc.php"] [unique_id "ary2i9PAdfEWqmGIkg13AAAAAik"]
[Wed Sep 30 01:13:15.719618 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.720012 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.736562 2026] [security2:error] [pid 276620:tid 276760] [client 20.194.96.176:16079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/almafkew.php"] [unique_id "ary2i9PAdfEWqmGIkg13BQAAAhU"]
[Wed Sep 30 01:13:15.811349 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.811599 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.846398 2026] [security2:error] [pid 276620:tid 276787] [client 20.213.164.196:7155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/atkno.php"] [unique_id "ary2i9PAdfEWqmGIkg13CwAAAjA"]
[Wed Sep 30 01:13:15.848322 2026] [security2:error] [pid 276059:tid 276280] [client 13.70.4.78:39446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/hao.php"] [unique_id "ary2i3tqdHBwD77138fGCQAAAeQ"]
[Wed Sep 30 01:13:15.901879 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.902170 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:15.921592 2026] [security2:error] [pid 276620:tid 276769] [client 74.225.148.80:11223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/up.php"] [unique_id "ary2i9PAdfEWqmGIkg13EAAAAh4"]
[Wed Sep 30 01:13:15.950914 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:15.951184 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:15.958894 2026] [security2:error] [pid 276059:tid 276295] [client 20.213.164.196:15974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/BDKR28WP.php"] [unique_id "ary2i3tqdHBwD77138fGDAAAAfM"]
[Wed Sep 30 01:13:15.986220 2026] [security2:error] [pid 276059:tid 276256] [client 20.214.151.17:64832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wmore1.php"] [unique_id "ary2i3tqdHBwD77138fGDQAAAcw"]
[Wed Sep 30 01:13:15.992925 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:15.993212 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.080149 2026] [security2:error] [pid 276620:tid 276862] [client 20.70.173.30:19161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/xiugai.php"] [unique_id "ary2jNPAdfEWqmGIkg13FQAAAns"]
[Wed Sep 30 01:13:16.085049 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.085311 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.090145 2026] [security2:error] [pid 276059:tid 276287] [client 20.70.173.30:27785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/BDKR28WP.php"] [unique_id "ary2jHtqdHBwD77138fGDgAAAes"]
[Wed Sep 30 01:13:16.175585 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.175861 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.177161 2026] [security2:error] [pid 276059:tid 276196] [client 13.70.4.78:45671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/33.php"] [unique_id "ary2jHtqdHBwD77138fGEQAAAZE"]
[Wed Sep 30 01:13:16.257521 2026] [security2:error] [pid 276059:tid 276271] [client 20.214.151.17:64893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/function.php"] [unique_id "ary2jHtqdHBwD77138fGEwAAAds"]
[Wed Sep 30 01:13:16.265711 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.265973 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.367840 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.369147 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.399244 2026] [autoindex:error] [pid 276059:tid 276305] [client 31.220.97.154:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/webmexsolutions/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:16.444309 2026] [access_compat:error] [pid 276059:tid 276311] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:16.444752 2026] [access_compat:error] [pid 276059:tid 276311] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:16.459618 2026] [security2:error] [pid 276059:tid 276242] [client 74.225.148.80:10846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/0x1949.php"] [unique_id "ary2jHtqdHBwD77138fGGwAAAb4"]
[Wed Sep 30 01:13:16.496729 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.497189 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.514438 2026] [security2:error] [pid 276620:tid 276837] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2jNPAdfEWqmGIkg13JAAAAmI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:16.538301 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.538569 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.545154 2026] [security2:error] [pid 276620:tid 276788] [client 13.70.4.78:38210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/adminner.php"] [unique_id "ary2jNPAdfEWqmGIkg13JQAAAjE"]
[Wed Sep 30 01:13:16.555035 2026] [security2:error] [pid 276620:tid 276844] [client 20.214.151.17:64454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ab.php"] [unique_id "ary2jNPAdfEWqmGIkg13JgAAAmk"]
[Wed Sep 30 01:13:16.575775 2026] [security2:error] [pid 276059:tid 276223] [client 49.37.102.248:64417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2jHtqdHBwD77138fGHwAAAas"]
[Wed Sep 30 01:13:16.575907 2026] [security2:error] [pid 276059:tid 276223] [client 49.37.102.248:64417] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2jHtqdHBwD77138fGHwAAAas"]
[Wed Sep 30 01:13:16.629901 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.630170 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.642410 2026] [security2:error] [pid 276620:tid 276789] [client 20.219.2.60:29894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/blsvgeyaza.php"] [unique_id "ary2jNPAdfEWqmGIkg13KAAAAjI"]
[Wed Sep 30 01:13:16.725500 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.725753 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.757841 2026] [security2:error] [pid 276620:tid 276813] [client 168.100.149.226:38934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/Web-Design-41-1-e1669632587158.png"] [unique_id "ary2jNPAdfEWqmGIkg13KQACShE"]
[Wed Sep 30 01:13:16.808569 2026] [security2:error] [pid 276620:tid 276782] [client 20.213.164.196:51625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/gptsh.php"] [unique_id "ary2jNPAdfEWqmGIkg13KwAAAis"]
[Wed Sep 30 01:13:16.811014 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.811424 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.831472 2026] [security2:error] [pid 276059:tid 276245] [client 20.214.151.17:64775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/css.php"] [unique_id "ary2jHtqdHBwD77138fGKgAAAcE"]
[Wed Sep 30 01:13:16.893560 2026] [security2:error] [pid 276620:tid 276842] [client 13.70.4.78:45662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/thoms.php"] [unique_id "ary2jNPAdfEWqmGIkg13NAAAAmc"]
[Wed Sep 30 01:13:16.904118 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:16.904381 2026] [access_compat:error] [pid 276059:tid 276288] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:16.906493 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.906914 2026] [access_compat:error] [pid 276059:tid 276238] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:16.933819 2026] [security2:error] [pid 276620:tid 276844] [client 74.225.148.80:65017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/cong.php"] [unique_id "ary2jNPAdfEWqmGIkg13NQAAAmk"]
[Wed Sep 30 01:13:16.994551 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:16.994801 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.037293 2026] [security2:error] [pid 276620:tid 276787] [client 223.181.60.167:10945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2jdPAdfEWqmGIkg13PAAAAjA"]
[Wed Sep 30 01:13:17.038607 2026] [security2:error] [pid 276620:tid 276787] [client 223.181.60.167:10945] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2jdPAdfEWqmGIkg13PAAAAjA"]
[Wed Sep 30 01:13:17.044421 2026] [security2:error] [pid 276059:tid 276280] [client 20.70.173.30:33394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-content/index.php"] [unique_id "ary2jXtqdHBwD77138fGNAAAAeQ"]
[Wed Sep 30 01:13:17.079411 2026] [security2:error] [pid 276620:tid 276823] [client 20.213.164.196:35798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wmore1.php"] [unique_id "ary2jdPAdfEWqmGIkg13PgAAAlQ"]
[Wed Sep 30 01:13:17.085743 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.086013 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:16842] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.100169 2026] [security2:error] [pid 276620:tid 276833] [client 20.214.151.17:64478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2jdPAdfEWqmGIkg13QQAAAl4"]
[Wed Sep 30 01:13:17.177130 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.177407 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.179823 2026] [security2:error] [pid 276620:tid 276711] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env"] [unique_id "ary2jdPAdfEWqmGIkg13RAACZ1E"]
[Wed Sep 30 01:13:17.179891 2026] [security2:error] [pid 276620:tid 276729] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ary2jdPAdfEWqmGIkg13RQACZ2M"]
[Wed Sep 30 01:13:17.180174 2026] [security2:error] [pid 276620:tid 276706] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.aws/credentials.bak"] [unique_id "ary2jdPAdfEWqmGIkg13SAACZ0w"]
[Wed Sep 30 01:13:17.180973 2026] [security2:error] [pid 276620:tid 276711] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.docker/.env"] [unique_id "ary2jdPAdfEWqmGIkg13SgACZ1E"]
[Wed Sep 30 01:13:17.181715 2026] [security2:error] [pid 276620:tid 276724] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.aws/.env"] [unique_id "ary2jdPAdfEWqmGIkg13UAACZ14"]
[Wed Sep 30 01:13:17.218384 2026] [security2:error] [pid 276059:tid 276265] [client 13.70.4.78:38269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/a.php"] [unique_id "ary2jXtqdHBwD77138fGOwAAAdU"]
[Wed Sep 30 01:13:17.267281 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.267586 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.303454 2026] [security2:error] [pid 276620:tid 276813] [client 20.70.173.30:25192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/admin.php"] [unique_id "ary2jdPAdfEWqmGIkg13XgAAAko"]
[Wed Sep 30 01:13:17.319069 2026] [security2:error] [pid 276620:tid 276658] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env.bak"] [unique_id "ary2jdPAdfEWqmGIkg13YwACKxw"]
[Wed Sep 30 01:13:17.319505 2026] [security2:error] [pid 276620:tid 276725] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env.backup"] [unique_id "ary2jdPAdfEWqmGIkg13ZAACK18"]
[Wed Sep 30 01:13:17.345386 2026] [access_compat:error] [pid 276059:tid 276298] [client 47.79.13.28:40398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:17.345653 2026] [access_compat:error] [pid 276059:tid 276298] [client 47.79.13.28:40398] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:17.363407 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.363869 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.372048 2026] [security2:error] [pid 276620:tid 276760] [client 20.214.151.17:64878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2jdPAdfEWqmGIkg13fwAAAhU"]
[Wed Sep 30 01:13:17.432389 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:17.432834 2026] [access_compat:error] [pid 276059:tid 276266] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:17.463638 2026] [security2:error] [pid 276620:tid 276750] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env.php"] [unique_id "ary2jdPAdfEWqmGIkg13hQACfHg"]
[Wed Sep 30 01:13:17.466557 2026] [security2:error] [pid 276620:tid 276880] [client 74.225.148.80:65298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/bs1.php"] [unique_id "ary2jdPAdfEWqmGIkg13igAAAo0"]
[Wed Sep 30 01:13:17.467588 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.468047 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.468386 2026] [security2:error] [pid 276620:tid 276642] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env.old"] [unique_id "ary2jdPAdfEWqmGIkg13gwACfAw"]
[Wed Sep 30 01:13:17.482740 2026] [access_compat:error] [pid 276059:tid 276309] [client 47.79.13.234:38628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:17.483192 2026] [access_compat:error] [pid 276059:tid 276309] [client 47.79.13.234:38628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:17.485638 2026] [security2:error] [pid 276059:tid 276254] [client 216.73.216.46:16842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2jXtqdHBwD77138fGRgAAAco"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5MzA0
[Wed Sep 30 01:13:17.495438 2026] [security2:error] [pid 276620:tid 276648] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env~"] [unique_id "ary2jdPAdfEWqmGIkg13kwACfBI"]
[Wed Sep 30 01:13:17.498419 2026] [security2:error] [pid 276620:tid 276636] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/.env.swp"] [unique_id "ary2jdPAdfEWqmGIkg13kQACfAY"]
[Wed Sep 30 01:13:17.512375 2026] [security2:error] [pid 276059:tid 276294] [client 152.232.247.178:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2jXtqdHBwD77138fGTgAAAfI"]
[Wed Sep 30 01:13:17.539748 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.540092 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.554873 2026] [autoindex:error] [pid 276059:tid 276269] [client 143.244.57.84:48248] AH01276: Cannot serve directory /home2/pfqwhymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:17.562236 2026] [security2:error] [pid 276620:tid 276836] [client 13.70.4.78:45685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/b8.php"] [unique_id "ary2jdPAdfEWqmGIkg13oQAAAmE"]
[Wed Sep 30 01:13:17.616552 2026] [security2:error] [pid 276620:tid 276864] [client 20.213.164.196:35816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/177.php"] [unique_id "ary2jdPAdfEWqmGIkg13qAAAAn0"]
[Wed Sep 30 01:13:17.632933 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.633378 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.663447 2026] [security2:error] [pid 276620:tid 276734] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/api/.env"] [unique_id "ary2jdPAdfEWqmGIkg13vQACQWg"]
[Wed Sep 30 01:13:17.663946 2026] [security2:error] [pid 276620:tid 276800] [client 20.70.173.30:19173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/dehnl.php"] [unique_id "ary2jdPAdfEWqmGIkg13vgAAAj0"]
[Wed Sep 30 01:13:17.668222 2026] [security2:error] [pid 276620:tid 276668] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/api/phpinfo.php"] [unique_id "ary2jdPAdfEWqmGIkg13wAACQSY"]
[Wed Sep 30 01:13:17.673668 2026] [security2:error] [pid 276620:tid 276719] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/app/.env"] [unique_id "ary2jdPAdfEWqmGIkg13wgACQVk"]
[Wed Sep 30 01:13:17.674221 2026] [security2:error] [pid 276620:tid 276637] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/application/.env"] [unique_id "ary2jdPAdfEWqmGIkg13wwACQQc"]
[Wed Sep 30 01:13:17.680239 2026] [security2:error] [pid 276620:tid 276726] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2jdPAdfEWqmGIkg13yAACdGA"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D90022
[Wed Sep 30 01:13:17.690125 2026] [security2:error] [pid 276059:tid 276251] [client 152.56.240.85:52295] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2jXtqdHBwD77138fGXAAAAcc"]
[Wed Sep 30 01:13:17.692917 2026] [security2:error] [pid 276059:tid 276251] [client 152.56.240.85:52295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2jXtqdHBwD77138fGXAAAAcc"]
[Wed Sep 30 01:13:17.692965 2026] [security2:error] [pid 276059:tid 276288] [client 143.244.57.84:48248] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary2jXtqdHBwD77138fGXQAAAew"]
[Wed Sep 30 01:13:17.713383 2026] [security2:error] [pid 276620:tid 276864] [client 20.214.151.17:64846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-links-opml.php"] [unique_id "ary2jdPAdfEWqmGIkg13ywAAAn0"]
[Wed Sep 30 01:13:17.723860 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.724133 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.798052 2026] [security2:error] [pid 276620:tid 276688] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/back/.env"] [unique_id "ary2jdPAdfEWqmGIkg130QACMzo"]
[Wed Sep 30 01:13:17.798989 2026] [security2:error] [pid 276059:tid 276310] [client 160.191.89.83:57598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.89.191.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "ary2jXtqdHBwD77138fGXgAAAgI"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:13:17.800936 2026] [security2:error] [pid 276620:tid 276674] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/backend/.env"] [unique_id "ary2jdPAdfEWqmGIkg130gACcyw"]
[Wed Sep 30 01:13:17.804890 2026] [security2:error] [pid 276620:tid 276686] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/backup/.env"] [unique_id "ary2jdPAdfEWqmGIkg131AACPTg"]
[Wed Sep 30 01:13:17.807169 2026] [security2:error] [pid 276620:tid 276676] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/cms/.env"] [unique_id "ary2jdPAdfEWqmGIkg131QACii4"]
[Wed Sep 30 01:13:17.812886 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.813176 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:24473] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.815111 2026] [security2:error] [pid 276620:tid 276679] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/config.php"] [unique_id "ary2jdPAdfEWqmGIkg132wACXzE"]
[Wed Sep 30 01:13:17.816544 2026] [security2:error] [pid 276620:tid 276710] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/config/.env"] [unique_id "ary2jdPAdfEWqmGIkg133QACX1A"]
[Wed Sep 30 01:13:17.888479 2026] [security2:error] [pid 276620:tid 276823] [client 20.213.164.196:51053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/rithin.php"] [unique_id "ary2jdPAdfEWqmGIkg135wAAAlQ"]
[Wed Sep 30 01:13:17.906450 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:17.906704 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:17.916177 2026] [security2:error] [pid 276620:tid 276662] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/core/.env"] [unique_id "ary2jdPAdfEWqmGIkg136gACKSA"]
[Wed Sep 30 01:13:17.921914 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:17.922309 2026] [access_compat:error] [pid 276059:tid 276270] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:17.937846 2026] [security2:error] [pid 276620:tid 276714] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/database.sql"] [unique_id "ary2jdPAdfEWqmGIkg138gACKVQ"]
[Wed Sep 30 01:13:17.942786 2026] [security2:error] [pid 276620:tid 276687] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/dev/.env"] [unique_id "ary2jdPAdfEWqmGIkg138wACKTk"]
[Wed Sep 30 01:13:17.954284 2026] [security2:error] [pid 276620:tid 276717] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/frontend/.env"] [unique_id "ary2jdPAdfEWqmGIkg13_AACKVc"]
[Wed Sep 30 01:13:17.969664 2026] [security2:error] [pid 276059:tid 276234] [client 152.39.218.197:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2jXtqdHBwD77138fGaQAAAbY"]
[Wed Sep 30 01:13:17.976952 2026] [security2:error] [pid 276059:tid 276265] [client 20.214.151.17:64788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/hp.php"] [unique_id "ary2jXtqdHBwD77138fGbAAAAdU"]
[Wed Sep 30 01:13:17.982884 2026] [security2:error] [pid 276620:tid 276790] [client 74.225.148.80:62539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary2jdPAdfEWqmGIkg14AAAAAjM"]
[Wed Sep 30 01:13:17.984967 2026] [security2:error] [pid 276620:tid 276631] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/info.php"] [unique_id "ary2jdPAdfEWqmGIkg14AgACdAE"]
[Wed Sep 30 01:13:17.997759 2026] [security2:error] [pid 276620:tid 276718] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/laravel/.env"] [unique_id "ary2jdPAdfEWqmGIkg14BAACF1g"]
[Wed Sep 30 01:13:17.998727 2026] [security2:error] [pid 276620:tid 276731] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/media/.env"] [unique_id "ary2jdPAdfEWqmGIkg14BQACF2U"]
[Wed Sep 30 01:13:18.025032 2026] [security2:error] [pid 276620:tid 276803] [client 45.187.163.99:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2jtPAdfEWqmGIkg14CAAAAkA"]
[Wed Sep 30 01:13:18.027185 2026] [security2:error] [pid 276059:tid 276108] [remote 114.119.145.129:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sergil.net"] [uri "/%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%A7%D9%86/%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D8%A7-%D9%88%D8%A7%D8%AD%D8%AF%D8%A9-%D8%A3%D9%85-%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D8%A7%D8%AA-%D9%85%D8%AA%D8%B9%D8%AF%D8%AF%D8%A9-%D8%9F/"] [unique_id "ary2jntqdHBwD77138fGbQABzyw"], referer: https://sergil.net/%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85-%D8%A7%D9%84%D8%A7%D9%86/%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D8%A7-%D9%88%D8%A7%D8%AD%D8%AF%D8%A9-%D8%A3%D9%85-%D8%A3%D9%88%D8%B1%D9%88%D8%A8%D8%A7%D8%AA-%D9%85%D8%AA%D8%B9%D8%AF%D8%AF%D8%A9-%D8%9F/
[Wed Sep 30 01:13:18.048657 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.048939 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.054981 2026] [security2:error] [pid 276620:tid 276702] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/new/.env"] [unique_id "ary2jtPAdfEWqmGIkg14DgACNUg"]
[Wed Sep 30 01:13:18.067667 2026] [security2:error] [pid 276620:tid 276844] [client 203.122.45.246:49675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2jtPAdfEWqmGIkg14DwAAAmk"]
[Wed Sep 30 01:13:18.067824 2026] [security2:error] [pid 276620:tid 276844] [client 203.122.45.246:49675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2jtPAdfEWqmGIkg14DwAAAmk"]
[Wed Sep 30 01:13:18.076209 2026] [security2:error] [pid 276620:tid 276742] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/old/.env"] [unique_id "ary2jtPAdfEWqmGIkg14EAACJXA"]
[Wed Sep 30 01:13:18.079631 2026] [security2:error] [pid 276620:tid 276754] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.206.156.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/phpinfo.php"] [unique_id "ary2jtPAdfEWqmGIkg14EgACJXw"]
[Wed Sep 30 01:13:18.086861 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.087128 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.092851 2026] [security2:error] [pid 276620:tid 276743] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/production/.env"] [unique_id "ary2jtPAdfEWqmGIkg14FgACJXE"]
[Wed Sep 30 01:13:18.092855 2026] [security2:error] [pid 276620:tid 276650] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/public/.env"] [unique_id "ary2jtPAdfEWqmGIkg14FwACJRQ"]
[Wed Sep 30 01:13:18.109489 2026] [security2:error] [pid 276620:tid 276749] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/src/.env"] [unique_id "ary2jtPAdfEWqmGIkg14HAACJXc"]
[Wed Sep 30 01:13:18.109516 2026] [security2:error] [pid 276620:tid 276635] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/server/.env"] [unique_id "ary2jtPAdfEWqmGIkg14GwACJQU"]
[Wed Sep 30 01:13:18.110540 2026] [security2:error] [pid 276620:tid 276749] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/staging/.env"] [unique_id "ary2jtPAdfEWqmGIkg14HgACJXc"]
[Wed Sep 30 01:13:18.115352 2026] [security2:error] [pid 276620:tid 276703] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/test/.env"] [unique_id "ary2jtPAdfEWqmGIkg14HwACJUk"]
[Wed Sep 30 01:13:18.122633 2026] [security2:error] [pid 276620:tid 276709] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/v1/.env"] [unique_id "ary2jtPAdfEWqmGIkg14IAACJU8"]
[Wed Sep 30 01:13:18.127394 2026] [security2:error] [pid 276059:tid 276196] [client 20.213.164.196:15946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/ccc.php"] [unique_id "ary2jntqdHBwD77138fGcgAAAZE"]
[Wed Sep 30 01:13:18.135486 2026] [security2:error] [pid 276620:tid 276728] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/v2/.env"] [unique_id "ary2jtPAdfEWqmGIkg14IQACJWI"]
[Wed Sep 30 01:13:18.162016 2026] [security2:error] [pid 276059:tid 276268] [client 20.219.2.60:30053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/gqhyti.php"] [unique_id "ary2jntqdHBwD77138fGdAAAAdg"]
[Wed Sep 30 01:13:18.181105 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.181545 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.193752 2026] [security2:error] [pid 276620:tid 276644] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/web/.env"] [unique_id "ary2jtPAdfEWqmGIkg14JAACKQ4"]
[Wed Sep 30 01:13:18.198070 2026] [security2:error] [pid 276620:tid 276858] [client 13.70.4.78:45647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/sid.php"] [unique_id "ary2jtPAdfEWqmGIkg14JQAAAnc"]
[Wed Sep 30 01:13:18.213313 2026] [security2:error] [pid 276620:tid 276632] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/wp-config.php.bak"] [unique_id "ary2jtPAdfEWqmGIkg14JgACMwI"]
[Wed Sep 30 01:13:18.220691 2026] [security2:error] [pid 276620:tid 276819] [client 216.73.216.46:24473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2jtPAdfEWqmGIkg14KAAAAlA"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODUvbm9kZTAvbWVtb3J5ODY%3D
[Wed Sep 30 01:13:18.242911 2026] [security2:error] [pid 276059:tid 276312] [client 20.214.151.17:64796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/mo.php"] [unique_id "ary2jntqdHBwD77138fGdgAAAgQ"]
[Wed Sep 30 01:13:18.246861 2026] [security2:error] [pid 276620:tid 276775] [client 20.70.173.30:33292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/edit.php"] [unique_id "ary2jtPAdfEWqmGIkg14MwAAAiQ"]
[Wed Sep 30 01:13:18.247171 2026] [security2:error] [pid 276620:tid 276727] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/backup.sql"] [unique_id "ary2jtPAdfEWqmGIkg14MQACJmE"]
[Wed Sep 30 01:13:18.252041 2026] [security2:error] [pid 276620:tid 276633] [remote 34.156.206.32:40056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "breakthesafe.habeshacontacts.com"] [uri "/aws/.env"] [unique_id "ary2jtPAdfEWqmGIkg14OAACJgM"]
[Wed Sep 30 01:13:18.252094 2026] [autoindex:error] [pid 276620:tid 276789] [client 143.244.57.84:48264] AH01276: Cannot serve directory /home2/pfqwhymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:18.267586 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.267853 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.366618 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.367064 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.393226 2026] [security2:error] [pid 276620:tid 276798] [client 143.244.57.84:48264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2jtPAdfEWqmGIkg14RwAAAjs"]
[Wed Sep 30 01:13:18.454820 2026] [security2:error] [pid 276059:tid 276233] [client 74.225.148.80:10823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/termps.php"] [unique_id "ary2jntqdHBwD77138fGgQAAAbU"]
[Wed Sep 30 01:13:18.462300 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.462755 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.487817 2026] [security2:error] [pid 276059:tid 276199] [client 20.194.30.107:17496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/wp-content/admin.php"] [unique_id "ary2jntqdHBwD77138fGggAAAZQ"]
[Wed Sep 30 01:13:18.509280 2026] [security2:error] [pid 276059:tid 276228] [client 20.214.151.17:64889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/ivmirgut.php"] [unique_id "ary2jntqdHBwD77138fGhAAAAbA"]
[Wed Sep 30 01:13:18.542632 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.542913 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.559103 2026] [security2:error] [pid 276620:tid 276798] [client 20.213.164.196:60635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/il.php"] [unique_id "ary2jtPAdfEWqmGIkg14UAAAAjs"]
[Wed Sep 30 01:13:18.586516 2026] [security2:error] [pid 276620:tid 276773] [client 13.70.4.78:37951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/bro.php"] [unique_id "ary2jtPAdfEWqmGIkg14UQAAAiI"]
[Wed Sep 30 01:13:18.598035 2026] [security2:error] [pid 276620:tid 276832] [client 20.194.96.176:55356] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "whconsults.com"] [uri "/1.php"] [unique_id "ary2jtPAdfEWqmGIkg14UgAAAl0"]
[Wed Sep 30 01:13:18.598173 2026] [security2:error] [pid 276620:tid 276832] [client 20.194.96.176:55356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/1.php"] [unique_id "ary2jtPAdfEWqmGIkg14UgAAAl0"]
[Wed Sep 30 01:13:18.632886 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.633155 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.657318 2026] [security2:error] [pid 276620:tid 276787] [client 20.194.30.107:62594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2jtPAdfEWqmGIkg14VAAAAjA"]
[Wed Sep 30 01:13:18.724763 2026] [security2:error] [pid 276059:tid 276296] [client 182.69.182.151:20556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2jntqdHBwD77138fGhgAAAfQ"]
[Wed Sep 30 01:13:18.724928 2026] [security2:error] [pid 276059:tid 276296] [client 182.69.182.151:20556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2jntqdHBwD77138fGhgAAAfQ"]
[Wed Sep 30 01:13:18.725233 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.725509 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.732607 2026] [security2:error] [pid 276620:tid 276863] [client 223.235.102.107:27850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2jtPAdfEWqmGIkg14VgAAAnw"]
[Wed Sep 30 01:13:18.732716 2026] [security2:error] [pid 276620:tid 276863] [client 223.235.102.107:27850] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2jtPAdfEWqmGIkg14VgAAAnw"]
[Wed Sep 30 01:13:18.751444 2026] [security2:error] [pid 276620:tid 276764] [client 20.219.2.60:30051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/autoxxi.php"] [unique_id "ary2jtPAdfEWqmGIkg14WQAAAhk"]
[Wed Sep 30 01:13:18.775068 2026] [security2:error] [pid 276620:tid 276777] [client 20.214.151.17:64465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/baba.php"] [unique_id "ary2jtPAdfEWqmGIkg14WgAAAiY"]
[Wed Sep 30 01:13:18.785367 2026] [access_compat:error] [pid 276620:tid 276813] [client 47.79.13.28:40402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:18.785628 2026] [access_compat:error] [pid 276620:tid 276813] [client 47.79.13.28:40402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:18.799212 2026] [security2:error] [pid 276620:tid 276790] [client 20.194.30.107:23178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/0.php"] [unique_id "ary2jtPAdfEWqmGIkg14XgAAAjM"]
[Wed Sep 30 01:13:18.815285 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.815556 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.844931 2026] [security2:error] [pid 276620:tid 276831] [client 168.100.149.236:20534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/3.png"] [unique_id "ary2jtPAdfEWqmGIkg14VwACWXM"]
[Wed Sep 30 01:13:18.859001 2026] [security2:error] [pid 276620:tid 276841] [client 20.213.164.196:35805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/0xD.php"] [unique_id "ary2jtPAdfEWqmGIkg14YAAAAmY"]
[Wed Sep 30 01:13:18.862017 2026] [security2:error] [pid 276059:tid 276225] [client 105.112.178.79:38602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fla.wja.mybluehost.me"] [uri "/__ss_probe_f0a42ebe796cb472ff2b856925fead4b__"] [unique_id "ary2jntqdHBwD77138fGiQAAAa0"]
[Wed Sep 30 01:13:18.908590 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.908853 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:18.924246 2026] [security2:error] [pid 276620:tid 276811] [client 13.70.4.78:38221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/xwpg.php"] [unique_id "ary2jtPAdfEWqmGIkg14ZAAAAkg"]
[Wed Sep 30 01:13:18.947073 2026] [security2:error] [pid 276059:tid 276245] [client 143.244.57.84:48276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2jntqdHBwD77138fGiwAAAcE"]
[Wed Sep 30 01:13:18.991559 2026] [security2:error] [pid 276620:tid 276877] [client 74.225.148.80:11027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/brand.php"] [unique_id "ary2jtPAdfEWqmGIkg14ZgAAAoo"]
[Wed Sep 30 01:13:18.999028 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:18.999297 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.059287 2026] [security2:error] [pid 276620:tid 276816] [client 20.214.151.17:64804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/Components.php"] [unique_id "ary2j9PAdfEWqmGIkg14agAAAk0"]
[Wed Sep 30 01:13:19.089439 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.089707 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:61994] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.164466 2026] [security2:error] [pid 276059:tid 276313] [client 20.213.164.196:51622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/1klopedf.php"] [unique_id "ary2j3tqdHBwD77138fGjQAAAgU"]
[Wed Sep 30 01:13:19.180398 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.180670 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.271551 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.271910 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.326290 2026] [security2:error] [pid 276059:tid 276205] [client 20.214.151.17:64876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/aboutt.php"] [unique_id "ary2j3tqdHBwD77138fGkwAAAZo"]
[Wed Sep 30 01:13:19.330329 2026] [security2:error] [pid 276059:tid 276217] [client 13.70.4.78:37919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/radio.php"] [unique_id "ary2j3tqdHBwD77138fGlQAAAaU"]
[Wed Sep 30 01:13:19.360923 2026] [security2:error] [pid 276059:tid 276317] [client 160.191.89.83:6608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.89.191.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avions-biddingestimates.com"] [uri "/wp-login.php"] [unique_id "ary2j3tqdHBwD77138fGmQAAAgk"], referer: https://avions-biddingestimates.com/wp-login.php
[Wed Sep 30 01:13:19.366916 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.367348 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.369208 2026] [security2:error] [pid 276059:tid 276270] [client 80.47.9.5:50426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "921"] [severity "CRITICAL"] [tag "SQLi"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2j3tqdHBwD77138fGmAAAAdo"]
[Wed Sep 30 01:13:19.378204 2026] [security2:error] [pid 276059:tid 276288] [client 122.173.27.10:4749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2j3tqdHBwD77138fGmgAAAew"]
[Wed Sep 30 01:13:19.378411 2026] [security2:error] [pid 276059:tid 276288] [client 122.173.27.10:4749] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2j3tqdHBwD77138fGmgAAAew"]
[Wed Sep 30 01:13:19.422080 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:19.422522 2026] [access_compat:error] [pid 276059:tid 276211] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:19.496928 2026] [security2:error] [pid 276620:tid 276880] [client 143.244.57.84:48280] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2j9PAdfEWqmGIkg14dAAAAo0"]
[Wed Sep 30 01:13:19.504222 2026] [security2:error] [pid 276620:tid 276813] [client 74.225.148.80:11248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/atomlib.php"] [unique_id "ary2j9PAdfEWqmGIkg14dQAAAko"]
[Wed Sep 30 01:13:19.504936 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.505212 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.510179 2026] [security2:error] [pid 276620:tid 276790] [client 216.73.216.46:61994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2j9PAdfEWqmGIkg14dgAAAjM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTE3L25vZGUwL21lbW9yeTM2OA%3D%3D
[Wed Sep 30 01:13:19.544313 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.544594 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.582736 2026] [security2:error] [pid 276620:tid 276858] [client 201.32.215.149:5521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2j9PAdfEWqmGIkg14eAAAAnc"]
[Wed Sep 30 01:13:19.582838 2026] [security2:error] [pid 276620:tid 276858] [client 201.32.215.149:5521] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2j9PAdfEWqmGIkg14eAAAAnc"]
[Wed Sep 30 01:13:19.591927 2026] [security2:error] [pid 276620:tid 276800] [client 20.214.151.17:64907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary2j9PAdfEWqmGIkg14eQAAAj0"]
[Wed Sep 30 01:13:19.635038 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.635303 2026] [access_compat:error] [pid 276059:tid 276230] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.660487 2026] [security2:error] [pid 276620:tid 276811] [client 4.240.25.22:8896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2j9PAdfEWqmGIkg14fQAAAkg"]
[Wed Sep 30 01:13:19.711245 2026] [security2:error] [pid 276059:tid 276254] [client 20.213.164.196:35795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/sallu.php"] [unique_id "ary2j3tqdHBwD77138fGowAAAco"]
[Wed Sep 30 01:13:19.717985 2026] [security2:error] [pid 276059:tid 276206] [client 20.213.164.196:60664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/zv.php"] [unique_id "ary2j3tqdHBwD77138fGpQAAAZs"]
[Wed Sep 30 01:13:19.726275 2026] [access_compat:error] [pid 276059:tid 276305] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.726546 2026] [access_compat:error] [pid 276059:tid 276305] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.743092 2026] [security2:error] [pid 276620:tid 276776] [client 78.96.84.129:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2j9PAdfEWqmGIkg14ggAAAiU"]
[Wed Sep 30 01:13:19.779394 2026] [security2:error] [pid 276620:tid 276773] [client 13.70.4.78:45672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ccc.php"] [unique_id "ary2j9PAdfEWqmGIkg14gwAAAiI"]
[Wed Sep 30 01:13:19.802417 2026] [security2:error] [pid 276059:tid 276293] [client 20.219.2.60:29905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/1144452145_error_log.php"] [unique_id "ary2j3tqdHBwD77138fGqgAAAfE"]
[Wed Sep 30 01:13:19.818365 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.818631 2026] [access_compat:error] [pid 276059:tid 276301] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.860738 2026] [security2:error] [pid 276620:tid 276842] [client 20.214.151.17:47390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/xx.php"] [unique_id "ary2j9PAdfEWqmGIkg14hgAAAmc"]
[Wed Sep 30 01:13:19.906279 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:19.906696 2026] [access_compat:error] [pid 276059:tid 276233] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:19.908751 2026] [security2:error] [pid 276620:tid 276846] [client 80.47.9.5:50699] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2j9PAdfEWqmGIkg14iAAAAms"]
[Wed Sep 30 01:13:19.912554 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:19.912999 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:19.988547 2026] [security2:error] [pid 276620:tid 276800] [client 74.225.148.80:11035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/product.php"] [unique_id "ary2j9PAdfEWqmGIkg14jwAAAj0"]
[Wed Sep 30 01:13:20.004918 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.005194 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.052092 2026] [security2:error] [pid 276620:tid 276799] [client 143.244.57.84:54380] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2kNPAdfEWqmGIkg14kgAAAjw"]
[Wed Sep 30 01:13:20.091603 2026] [security2:error] [pid 276620:tid 276815] [client 20.213.164.196:51068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/zv.update.php"] [unique_id "ary2kNPAdfEWqmGIkg14lAAAAkw"]
[Wed Sep 30 01:13:20.101871 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.102306 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.123851 2026] [security2:error] [pid 276620:tid 276776] [client 20.214.151.17:64840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/gelay.php"] [unique_id "ary2kNPAdfEWqmGIkg14lQAAAiU"]
[Wed Sep 30 01:13:20.138305 2026] [security2:error] [pid 276620:tid 276777] [client 169.40.142.132:44382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ypw.vhc.mybluehost.me"] [uri "/index.php"] [unique_id "ary2kNPAdfEWqmGIkg14lwAAAiY"]
[Wed Sep 30 01:13:20.168626 2026] [security2:error] [pid 276059:tid 276314] [client 13.70.4.78:45633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wmore1.php"] [unique_id "ary2kHtqdHBwD77138fGtQAAAgY"]
[Wed Sep 30 01:13:20.186936 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.187212 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.258674 2026] [security2:error] [pid 276620:tid 276822] [client 20.213.164.196:15958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/ops.php"] [unique_id "ary2kNPAdfEWqmGIkg14ngAAAlM"]
[Wed Sep 30 01:13:20.265414 2026] [security2:error] [pid 276620:tid 276855] [client 104.223.99.61:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2kNPAdfEWqmGIkg14nwAAAnQ"]
[Wed Sep 30 01:13:20.269023 2026] [security2:error] [pid 276620:tid 276778] [client 20.194.30.107:23699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/aaa.php"] [unique_id "ary2kNPAdfEWqmGIkg14oAAAAic"]
[Wed Sep 30 01:13:20.281683 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.282161 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.376762 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.377208 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.385317 2026] [security2:error] [pid 276059:tid 276299] [client 20.214.151.17:64486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/htaccess.php"] [unique_id "ary2kHtqdHBwD77138fGwQAAAfc"]
[Wed Sep 30 01:13:20.426029 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:20.426480 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:20.455739 2026] [security2:error] [pid 276620:tid 276828] [client 20.213.164.196:51603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/wquosqsi.php"] [unique_id "ary2kNPAdfEWqmGIkg14qQAAAlk"]
[Wed Sep 30 01:13:20.461719 2026] [security2:error] [pid 276620:tid 276846] [client 80.47.9.5:51024] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=http://:"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2kNPAdfEWqmGIkg14qAAAAms"]
[Wed Sep 30 01:13:20.472634 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.473087 2026] [access_compat:error] [pid 276059:tid 276313] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.483855 2026] [security2:error] [pid 276620:tid 276764] [client 74.225.148.80:10866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/function.php"] [unique_id "ary2kNPAdfEWqmGIkg14qgAAAhk"]
[Wed Sep 30 01:13:20.554213 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.554642 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.613023 2026] [security2:error] [pid 276620:tid 276844] [client 202.179.95.79:52680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2kNPAdfEWqmGIkg14sgAAAmk"]
[Wed Sep 30 01:13:20.613164 2026] [security2:error] [pid 276620:tid 276844] [client 202.179.95.79:52680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2kNPAdfEWqmGIkg14sgAAAmk"]
[Wed Sep 30 01:13:20.614119 2026] [security2:error] [pid 276620:tid 276815] [client 143.244.57.84:54390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2kNPAdfEWqmGIkg14swAAAkw"]
[Wed Sep 30 01:13:20.620419 2026] [security2:error] [pid 276620:tid 276799] [client 13.70.4.78:39438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/function.php"] [unique_id "ary2kNPAdfEWqmGIkg14tQAAAjw"]
[Wed Sep 30 01:13:20.621049 2026] [security2:error] [pid 276620:tid 276841] [client 20.219.2.60:29888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws48.php"] [unique_id "ary2kNPAdfEWqmGIkg14tgAAAmY"]
[Wed Sep 30 01:13:20.642088 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.642348 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.669008 2026] [security2:error] [pid 276620:tid 276779] [client 20.214.151.17:64880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/readme.php"] [unique_id "ary2kNPAdfEWqmGIkg14uAAAAig"]
[Wed Sep 30 01:13:20.716492 2026] [security2:error] [pid 276059:tid 276236] [client 20.213.164.196:15956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/mac.php"] [unique_id "ary2kHtqdHBwD77138fG0QAAAbg"]
[Wed Sep 30 01:13:20.733688 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.734103 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.741506 2026] [security2:error] [pid 276620:tid 276839] [client 20.70.173.30:33348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/11.php"] [unique_id "ary2kNPAdfEWqmGIkg14uwAAAmQ"]
[Wed Sep 30 01:13:20.764558 2026] [security2:error] [pid 276620:tid 276786] [client 168.100.149.47:57820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/header-footer-elementor/inc/js/frontend.js"] [unique_id "ary2kNPAdfEWqmGIkg14vQACL2A"]
[Wed Sep 30 01:13:20.789922 2026] [security2:error] [pid 276620:tid 276788] [client 155.190.6.18:32936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2kNPAdfEWqmGIkg14vgAAAjE"]
[Wed Sep 30 01:13:20.826846 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.827281 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.841886 2026] [security2:error] [pid 276059:tid 276090] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2kHtqdHBwD77138fG2AABkxo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20077&sid=f28e7f76d189c5d842d209d6181f02f7
[Wed Sep 30 01:13:20.841922 2026] [security2:error] [pid 276059:tid 276090] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2kHtqdHBwD77138fG2AABkxo"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20077&sid=f28e7f76d189c5d842d209d6181f02f7
[Wed Sep 30 01:13:20.843061 2026] [access_compat:error] [pid 276059:tid 276267] [client 47.82.11.32:45402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:20.843314 2026] [access_compat:error] [pid 276059:tid 276267] [client 47.82.11.32:45402] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:20.892136 2026] [security2:error] [pid 276620:tid 276764] [client 4.240.25.22:41690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/yawa.php"] [unique_id "ary2kNPAdfEWqmGIkg14yAAAAhk"]
[Wed Sep 30 01:13:20.919014 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:20.919599 2026] [access_compat:error] [pid 276059:tid 276203] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:20.920477 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:20.920954 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:20.934707 2026] [security2:error] [pid 276059:tid 276279] [client 20.214.151.17:64866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/max.php"] [unique_id "ary2kHtqdHBwD77138fG4AAAAeM"]
[Wed Sep 30 01:13:20.955133 2026] [security2:error] [pid 276620:tid 276800] [client 20.70.173.30:25154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/inputs.php"] [unique_id "ary2kNPAdfEWqmGIkg14zAAAAj0"]
[Wed Sep 30 01:13:20.984843 2026] [security2:error] [pid 276059:tid 276224] [client 20.213.164.196:51618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/asset.php"] [unique_id "ary2kHtqdHBwD77138fG4QAAAaw"]
[Wed Sep 30 01:13:20.998170 2026] [security2:error] [pid 276059:tid 276285] [client 80.47.9.5:51357] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "911"] [severity "CRITICAL"] [tag "SQLi"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2kHtqdHBwD77138fG4wAAAek"]
[Wed Sep 30 01:13:21.011036 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.011296 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.012312 2026] [security2:error] [pid 276620:tid 276780] [client 74.225.148.80:10851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/0x.php"] [unique_id "ary2kdPAdfEWqmGIkg14zwAAAik"]
[Wed Sep 30 01:13:21.013002 2026] [security2:error] [pid 276620:tid 276776] [client 13.70.4.78:37929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ab.php"] [unique_id "ary2kdPAdfEWqmGIkg140AAAAiU"]
[Wed Sep 30 01:13:21.020786 2026] [security2:error] [pid 276620:tid 276779] [client 20.211.90.37:27922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2kdPAdfEWqmGIkg140gAAAig"]
[Wed Sep 30 01:13:21.026897 2026] [security2:error] [pid 276620:tid 276751] [remote 220.181.108.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forum.torquayfans.com"] [uri "/viewtopic.php"] [unique_id "ary2kdPAdfEWqmGIkg141AACXHk"]
[Wed Sep 30 01:13:21.041121 2026] [security2:error] [pid 276059:tid 276252] [client 4.240.25.22:63660] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/1.php"] [unique_id "ary2kXtqdHBwD77138fG5gAAAcg"]
[Wed Sep 30 01:13:21.041211 2026] [security2:error] [pid 276059:tid 276252] [client 4.240.25.22:63660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/1.php"] [unique_id "ary2kXtqdHBwD77138fG5gAAAcg"]
[Wed Sep 30 01:13:21.063443 2026] [security2:error] [pid 276620:tid 276792] [client 4.240.25.22:8431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/ccc.php"] [unique_id "ary2kdPAdfEWqmGIkg142AAAAjU"]
[Wed Sep 30 01:13:21.069857 2026] [security2:error] [pid 276620:tid 276788] [client 155.190.6.18:32936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2kNPAdfEWqmGIkg14vgAAAjE"]
[Wed Sep 30 01:13:21.105847 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.106134 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.150034 2026] [security2:error] [pid 276620:tid 276858] [client 143.244.57.84:54394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2kdPAdfEWqmGIkg142wAAAnc"]
[Wed Sep 30 01:13:21.198120 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.198402 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.221667 2026] [security2:error] [pid 276620:tid 276764] [client 20.214.151.17:64506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/post.php"] [unique_id "ary2kdPAdfEWqmGIkg143QAAAhk"]
[Wed Sep 30 01:13:21.289396 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.289664 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.308998 2026] [security2:error] [pid 276620:tid 276829] [client 20.219.2.60:30047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-asyn-upload.php"] [unique_id "ary2kdPAdfEWqmGIkg143wAAAlo"]
[Wed Sep 30 01:13:21.365217 2026] [security2:error] [pid 276059:tid 276282] [client 13.70.4.78:37950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/css.php"] [unique_id "ary2kXtqdHBwD77138fG7wAAAeY"]
[Wed Sep 30 01:13:21.383468 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.389647 2026] [access_compat:error] [pid 276059:tid 276311] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.410140 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:21.412160 2026] [access_compat:error] [pid 276059:tid 276247] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:21.413413 2026] [security2:error] [pid 276620:tid 276797] [client 20.211.90.37:27947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2kdPAdfEWqmGIkg144wAAAjo"]
[Wed Sep 30 01:13:21.423433 2026] [security2:error] [pid 276059:tid 276261] [client 4.240.25.22:8394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/b8.php"] [unique_id "ary2kXtqdHBwD77138fG8wAAAdE"]
[Wed Sep 30 01:13:21.478663 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.479126 2026] [access_compat:error] [pid 276059:tid 276235] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.486272 2026] [security2:error] [pid 276059:tid 276269] [client 20.214.151.17:47360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/themes.php"] [unique_id "ary2kXtqdHBwD77138fG9QAAAdk"]
[Wed Sep 30 01:13:21.500745 2026] [security2:error] [pid 276059:tid 276214] [client 74.225.148.80:60736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/index.php"] [unique_id "ary2kXtqdHBwD77138fG9gAAAaI"]
[Wed Sep 30 01:13:21.539220 2026] [security2:error] [pid 276620:tid 276819] [client 20.213.164.196:15941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/myglu.php"] [unique_id "ary2kdPAdfEWqmGIkg146AAAAlA"]
[Wed Sep 30 01:13:21.540749 2026] [security2:error] [pid 276620:tid 276875] [client 80.47.9.5:51663] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2kdPAdfEWqmGIkg145wAAAog"]
[Wed Sep 30 01:13:21.562973 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.563362 2026] [access_compat:error] [pid 276059:tid 276229] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.585178 2026] [security2:error] [pid 276059:tid 276310] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2kXtqdHBwD77138fG-AAAAgI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:21.654318 2026] [access_compat:error] [pid 276059:tid 276280] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.654596 2026] [access_compat:error] [pid 276059:tid 276280] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.698013 2026] [security2:error] [pid 276620:tid 276779] [client 143.244.57.84:54402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2kdPAdfEWqmGIkg146wAAAig"]
[Wed Sep 30 01:13:21.714523 2026] [security2:error] [pid 276620:tid 276762] [client 13.70.4.78:37936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2kdPAdfEWqmGIkg147QAAAhc"]
[Wed Sep 30 01:13:21.744924 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.745193 2026] [access_compat:error] [pid 276059:tid 276218] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.764580 2026] [security2:error] [pid 276059:tid 276205] [client 20.214.151.17:64473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary2kXtqdHBwD77138fG-wAAAZo"]
[Wed Sep 30 01:13:21.836153 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.836434 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.859972 2026] [access_compat:error] [pid 276620:tid 276759] [client 47.79.201.136:16426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:13:21.860242 2026] [access_compat:error] [pid 276620:tid 276759] [client 47.79.201.136:16426] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:13:21.909083 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:21.909374 2026] [access_compat:error] [pid 276059:tid 276313] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:21.926227 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:21.926489 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:21.936863 2026] [security2:error] [pid 276620:tid 276764] [client 114.119.145.8:23175] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "argentoa.com"] [uri "/loader/index.htm"] [unique_id "ary2kdPAdfEWqmGIkg149QAAAhk"], referer: https://argentoa.com/
[Wed Sep 30 01:13:22.007820 2026] [security2:error] [pid 276620:tid 276862] [client 74.225.148.80:65292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary2ktPAdfEWqmGIkg149gAAAns"]
[Wed Sep 30 01:13:22.019353 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.019607 2026] [access_compat:error] [pid 276059:tid 276256] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.029303 2026] [security2:error] [pid 276620:tid 276815] [client 20.214.151.17:64869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary2ktPAdfEWqmGIkg14-AAAAkw"]
[Wed Sep 30 01:13:22.058653 2026] [security2:error] [pid 276059:tid 276194] [client 20.211.90.37:28377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/atomlib.php"] [unique_id "ary2kntqdHBwD77138fHBAAAAY8"]
[Wed Sep 30 01:13:22.087490 2026] [security2:error] [pid 276620:tid 276840] [client 80.47.9.5:52011] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "vettermysteryship.com"] [uri "/wp-json/batch/v1"] [unique_id "ary2ktPAdfEWqmGIkg14-gAAAmU"]
[Wed Sep 30 01:13:22.108358 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.108616 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.133601 2026] [security2:error] [pid 276620:tid 276786] [client 13.70.4.78:39425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2ktPAdfEWqmGIkg15AQAAAi8"]
[Wed Sep 30 01:13:22.173999 2026] [security2:error] [pid 276620:tid 276819] [client 179.6.3.157:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2ktPAdfEWqmGIkg15BAAAAlA"]
[Wed Sep 30 01:13:22.177751 2026] [access_compat:error] [pid 276620:tid 276877] [client 47.79.13.37:37340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:22.178032 2026] [access_compat:error] [pid 276620:tid 276877] [client 47.79.13.37:37340] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:22.200244 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.200505 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:46546] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.202596 2026] [security2:error] [pid 276620:tid 276822] [client 213.136.69.135:51921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/css/dist/registry.php"] [unique_id "ary2ktPAdfEWqmGIkg15BwAAAlM"], referer: binance.com
[Wed Sep 30 01:13:22.246676 2026] [security2:error] [pid 276620:tid 276799] [client 20.194.96.176:7651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/radio.php"] [unique_id "ary2ktPAdfEWqmGIkg15CgAAAjw"]
[Wed Sep 30 01:13:22.248256 2026] [security2:error] [pid 276620:tid 276793] [client 20.194.96.176:16003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/database2.php"] [unique_id "ary2ktPAdfEWqmGIkg15CwAAAjY"]
[Wed Sep 30 01:13:22.250912 2026] [security2:error] [pid 276620:tid 276852] [client 143.244.57.84:54416] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2ktPAdfEWqmGIkg15DAAAAnE"]
[Wed Sep 30 01:13:22.251590 2026] [security2:error] [pid 276620:tid 276832] [client 20.213.164.196:35788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/aboutt.php"] [unique_id "ary2ktPAdfEWqmGIkg15DgAAAl0"]
[Wed Sep 30 01:13:22.295373 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.295660 2026] [access_compat:error] [pid 276059:tid 276295] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.300889 2026] [security2:error] [pid 276059:tid 276236] [client 20.214.151.17:47376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/click.php"] [unique_id "ary2kntqdHBwD77138fHCAAAAbg"]
[Wed Sep 30 01:13:22.396358 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.396805 2026] [access_compat:error] [pid 276059:tid 276198] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.468112 2026] [security2:error] [pid 276059:tid 276254] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2kntqdHBwD77138fHDwAAAco"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:22.484579 2026] [access_compat:error] [pid 276059:tid 276267] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:22.485487 2026] [access_compat:error] [pid 276059:tid 276267] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:22.487877 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.488236 2026] [access_compat:error] [pid 276059:tid 276316] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.492140 2026] [security2:error] [pid 276620:tid 276844] [client 20.211.90.37:27967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/a.php"] [unique_id "ary2ktPAdfEWqmGIkg15FgAAAmk"]
[Wed Sep 30 01:13:22.492174 2026] [security2:error] [pid 276620:tid 276870] [client 45.138.12.32:35706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mml.ved.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2ktPAdfEWqmGIkg15FwAAAoM"]
[Wed Sep 30 01:13:22.501650 2026] [security2:error] [pid 276059:tid 276309] [client 74.225.148.80:65020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/classwithtostring.php"] [unique_id "ary2kntqdHBwD77138fHEQAAAgE"]
[Wed Sep 30 01:13:22.598065 2026] [security2:error] [pid 276620:tid 276825] [client 106.214.2.47:32829] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ktPAdfEWqmGIkg15GwAAAlY"]
[Wed Sep 30 01:13:22.598218 2026] [security2:error] [pid 276620:tid 276825] [client 106.214.2.47:32829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ktPAdfEWqmGIkg15GwAAAlY"]
[Wed Sep 30 01:13:22.598672 2026] [security2:error] [pid 276620:tid 276841] [client 103.211.18.63:65494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2ktPAdfEWqmGIkg15GgAAAmY"]
[Wed Sep 30 01:13:22.598833 2026] [security2:error] [pid 276620:tid 276841] [client 103.211.18.63:65494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2ktPAdfEWqmGIkg15GgAAAmY"]
[Wed Sep 30 01:13:22.620828 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.621124 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.622070 2026] [security2:error] [pid 276059:tid 276196] [client 216.73.216.46:46546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2kntqdHBwD77138fHFgAAAZE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTAvbm9kZTAvbWVtb3J5MjE4
[Wed Sep 30 01:13:22.626862 2026] [security2:error] [pid 276059:tid 276203] [client 47.79.13.158:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2kntqdHBwD77138fHFwAAAZg"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:22.640049 2026] [security2:error] [pid 276059:tid 276288] [client 20.214.151.17:64833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/install.php"] [unique_id "ary2kntqdHBwD77138fHGwAAAew"]
[Wed Sep 30 01:13:22.665529 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.665776 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.687255 2026] [security2:error] [pid 276059:tid 276252] [client 20.70.173.30:33300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/edit.php"] [unique_id "ary2kntqdHBwD77138fHHQAAAcg"]
[Wed Sep 30 01:13:22.756192 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.756465 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.779202 2026] [security2:error] [pid 276620:tid 276875] [client 168.100.149.80:23000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/frontend-modules.min.js"] [unique_id "ary2ktPAdfEWqmGIkg15IgACiB8"]
[Wed Sep 30 01:13:22.793192 2026] [security2:error] [pid 276620:tid 276836] [client 143.244.57.84:54422] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2ktPAdfEWqmGIkg15IwAAAmE"]
[Wed Sep 30 01:13:22.797364 2026] [security2:error] [pid 276620:tid 276789] [client 13.70.4.78:45668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-links-opml.php"] [unique_id "ary2ktPAdfEWqmGIkg15JAAAAjI"]
[Wed Sep 30 01:13:22.817179 2026] [security2:error] [pid 276620:tid 276822] [client 20.211.90.37:27957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/v.php"] [unique_id "ary2ktPAdfEWqmGIkg15JgAAAlM"]
[Wed Sep 30 01:13:22.819576 2026] [security2:error] [pid 276620:tid 276797] [client 20.219.2.60:29908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/schallfuns.php"] [unique_id "ary2ktPAdfEWqmGIkg15JwAAAjo"]
[Wed Sep 30 01:13:22.850609 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.850874 2026] [access_compat:error] [pid 276059:tid 276291] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.904785 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:22.905093 2026] [access_compat:error] [pid 276059:tid 276314] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:22.919957 2026] [security2:error] [pid 276620:tid 276858] [client 20.214.151.17:46782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/13k.php"] [unique_id "ary2ktPAdfEWqmGIkg15LAAAAnc"]
[Wed Sep 30 01:13:22.920580 2026] [security2:error] [pid 276620:tid 276854] [client 4.240.25.22:46312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2ktPAdfEWqmGIkg15LQAAAnM"]
[Wed Sep 30 01:13:22.938930 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:22.939198 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:22.985102 2026] [security2:error] [pid 276620:tid 276851] [client 20.213.164.196:15963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wp-whe.php"] [unique_id "ary2ktPAdfEWqmGIkg15LwAAAnA"]
[Wed Sep 30 01:13:23.034004 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.034416 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.044771 2026] [security2:error] [pid 276620:tid 276837] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2k9PAdfEWqmGIkg15MgAAAmI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:23.045570 2026] [security2:error] [pid 276620:tid 276833] [client 74.225.148.80:11233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/dropdown.php"] [unique_id "ary2k9PAdfEWqmGIkg15MwAAAl4"]
[Wed Sep 30 01:13:23.120591 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.120874 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.185259 2026] [security2:error] [pid 276059:tid 276247] [client 20.214.151.17:47374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/up.php"] [unique_id "ary2k3tqdHBwD77138fHLQAAAcM"]
[Wed Sep 30 01:13:23.210251 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.210527 2026] [access_compat:error] [pid 276059:tid 276255] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.301363 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.301624 2026] [access_compat:error] [pid 276059:tid 276257] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.322513 2026] [security2:error] [pid 276059:tid 276229] [client 20.211.90.37:27932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/d2.php"] [unique_id "ary2k3tqdHBwD77138fHNgAAAbE"]
[Wed Sep 30 01:13:23.344423 2026] [security2:error] [pid 276059:tid 276263] [client 143.244.57.84:54426] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2k3tqdHBwD77138fHNwAAAdM"]
[Wed Sep 30 01:13:23.403986 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.404441 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.409125 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:23.409562 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:23.491691 2026] [security2:error] [pid 276620:tid 276836] [client 13.70.4.78:39456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/hp.php"] [unique_id "ary2k9PAdfEWqmGIkg15PwAAAmE"]
[Wed Sep 30 01:13:23.492195 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.492477 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.507432 2026] [security2:error] [pid 276059:tid 276194] [client 20.214.151.17:64886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/0x1949.php"] [unique_id "ary2k3tqdHBwD77138fHPQAAAY8"]
[Wed Sep 30 01:13:23.524277 2026] [security2:error] [pid 276620:tid 276771] [client 74.225.148.80:65288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/moon.php"] [unique_id "ary2k9PAdfEWqmGIkg15QgAAAiA"]
[Wed Sep 30 01:13:23.559663 2026] [security2:error] [pid 276059:tid 276208] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2k3tqdHBwD77138fHQAAAAZ0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:23.588582 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.588860 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.656402 2026] [security2:error] [pid 276620:tid 276792] [client 20.70.173.30:38910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/admin.php"] [unique_id "ary2k9PAdfEWqmGIkg15TAAAAjU"]
[Wed Sep 30 01:13:23.678001 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.678270 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.742050 2026] [security2:error] [pid 276620:tid 276780] [client 20.211.90.37:27998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/xc.php"] [unique_id "ary2k9PAdfEWqmGIkg15UwAAAik"]
[Wed Sep 30 01:13:23.771311 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.771611 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.778622 2026] [security2:error] [pid 276620:tid 276815] [client 20.214.151.17:64453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/cong.php"] [unique_id "ary2k9PAdfEWqmGIkg15VQAAAkw"]
[Wed Sep 30 01:13:23.817659 2026] [security2:error] [pid 276620:tid 276870] [client 13.70.4.78:38219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/mo.php"] [unique_id "ary2k9PAdfEWqmGIkg15VgAAAoM"]
[Wed Sep 30 01:13:23.862484 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.862756 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.891435 2026] [security2:error] [pid 276059:tid 276211] [client 143.244.57.84:54436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2k3tqdHBwD77138fHTQAAAZ8"]
[Wed Sep 30 01:13:23.895972 2026] [security2:error] [pid 276059:tid 276287] [client 151.123.178.157:61545] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2k3tqdHBwD77138fHRwAAAes"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:13:23.900084 2026] [autoindex:error] [pid 276620:tid 276807] [client 103.21.166.251:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/norallahabuzekri/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://premiumlinkbuilding.online/dir/backlink-building-services-149821
[Wed Sep 30 01:13:23.902447 2026] [security2:error] [pid 276620:tid 276659] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2k9PAdfEWqmGIkg15WgACLx0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=743e31d6e7c22510dc62711cd0544370&t=22217
[Wed Sep 30 01:13:23.902485 2026] [security2:error] [pid 276620:tid 276659] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2k9PAdfEWqmGIkg15WgACLx0"], referer: https://uxa.hoh.mybluehost.me/viewtopic.php?sid=743e31d6e7c22510dc62711cd0544370&t=22217
[Wed Sep 30 01:13:23.909616 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:23.909888 2026] [access_compat:error] [pid 276059:tid 276271] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:23.954404 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:23.954666 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:23.995200 2026] [security2:error] [pid 276059:tid 276319] [client 162.43.6.77:54930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.6.43.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.org"] [uri "/wp-login.php"] [unique_id "ary2k3tqdHBwD77138fHUgAAAgs"], referer: https://beetreeaudio.org/wp-login.php
[Wed Sep 30 01:13:24.008680 2026] [security2:error] [pid 276059:tid 276206] [client 74.225.148.80:10826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/autoload_classmap.php"] [unique_id "ary2lHtqdHBwD77138fHVAAAAZs"]
[Wed Sep 30 01:13:24.018547 2026] [security2:error] [pid 276620:tid 276825] [client 145.239.10.137:51322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "takeoffjustlogo.org"] [uri "/z.php"] [unique_id "ary2lNPAdfEWqmGIkg15XgAAAlY"], referer: http://takeoffjustlogo.org/z.php
[Wed Sep 30 01:13:24.037246 2026] [security2:error] [pid 276620:tid 276778] [client 169.40.142.132:45826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.142.40.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ypw.vhc.mybluehost.me"] [uri "/index.php"] [unique_id "ary2lNPAdfEWqmGIkg15XwAAAic"]
[Wed Sep 30 01:13:24.045445 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.045696 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.059424 2026] [security2:error] [pid 276620:tid 276822] [client 20.214.151.17:64830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/bs1.php"] [unique_id "ary2lNPAdfEWqmGIkg15YQAAAlM"]
[Wed Sep 30 01:13:24.105888 2026] [access_compat:error] [pid 276620:tid 276759] [client 47.79.13.174:55900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:24.106225 2026] [access_compat:error] [pid 276620:tid 276759] [client 47.79.13.174:55900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:24.137191 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.137452 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.150677 2026] [security2:error] [pid 276620:tid 276799] [client 20.211.90.37:27965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/g.php"] [unique_id "ary2lNPAdfEWqmGIkg15aAAAAjw"]
[Wed Sep 30 01:13:24.190260 2026] [core:error] [pid 276620:tid 276857] [client 45.138.12.48:49060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:24.190285 2026] [core:error] [pid 276620:tid 276857] [client 45.138.12.48:49060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:24.225603 2026] [security2:error] [pid 276059:tid 276291] [client 13.70.4.78:47661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/ivmirgut.php"] [unique_id "ary2lHtqdHBwD77138fHWgAAAe8"]
[Wed Sep 30 01:13:24.226782 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.227170 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.227584 2026] [access_compat:error] [pid 276059:tid 276254] [client 47.79.13.53:48304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:24.227818 2026] [access_compat:error] [pid 276059:tid 276254] [client 47.79.13.53:48304] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:24.318410 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.318703 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.366391 2026] [security2:error] [pid 276059:tid 276237] [client 103.241.204.139:51014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2lHtqdHBwD77138fHXgAAAbk"]
[Wed Sep 30 01:13:24.366539 2026] [security2:error] [pid 276059:tid 276237] [client 103.241.204.139:51014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2lHtqdHBwD77138fHXgAAAbk"]
[Wed Sep 30 01:13:24.376296 2026] [security2:error] [pid 276059:tid 276226] [client 20.213.164.196:35824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/ssixta.php"] [unique_id "ary2lHtqdHBwD77138fHXwAAAa4"]
[Wed Sep 30 01:13:24.384561 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.151.17:47383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary2lNPAdfEWqmGIkg15cAAAAl0"]
[Wed Sep 30 01:13:24.417406 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.418298 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.438468 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:24.438903 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:24.439078 2026] [security2:error] [pid 276620:tid 276877] [client 143.244.57.84:54438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "pfq.why.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2lNPAdfEWqmGIkg15dQAAAoo"]
[Wed Sep 30 01:13:24.465571 2026] [security2:error] [pid 276059:tid 276305] [client 37.41.16.35:54289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2lHtqdHBwD77138fHYQAAAf0"]
[Wed Sep 30 01:13:24.465820 2026] [security2:error] [pid 276059:tid 276305] [client 37.41.16.35:54289] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2lHtqdHBwD77138fHYQAAAf0"]
[Wed Sep 30 01:13:24.499685 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.499956 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.509017 2026] [security2:error] [pid 276059:tid 276225] [client 74.225.148.80:11023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/default.php"] [unique_id "ary2lHtqdHBwD77138fHYgAAAa0"]
[Wed Sep 30 01:13:24.549675 2026] [security2:error] [pid 276620:tid 276776] [client 20.211.90.37:27928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/gmo.php"] [unique_id "ary2lNPAdfEWqmGIkg15ewAAAiU"]
[Wed Sep 30 01:13:24.560130 2026] [security2:error] [pid 276620:tid 276816] [client 20.194.30.107:23177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/pJPoKA.php"] [unique_id "ary2lNPAdfEWqmGIkg15fAAAAk0"]
[Wed Sep 30 01:13:24.591974 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.592255 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.650157 2026] [security2:error] [pid 276620:tid 276880] [client 13.70.4.78:38226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/baba.php"] [unique_id "ary2lNPAdfEWqmGIkg15fgAAAo0"]
[Wed Sep 30 01:13:24.683623 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.684066 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.685940 2026] [access_compat:error] [pid 276059:tid 276155] [remote 17.166.23.119:47494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.686186 2026] [access_compat:error] [pid 276059:tid 276155] [remote 17.166.23.119:47494] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.699827 2026] [security2:error] [pid 276620:tid 276852] [client 20.214.151.17:47370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/termps.php"] [unique_id "ary2lNPAdfEWqmGIkg15gQAAAnE"]
[Wed Sep 30 01:13:24.706447 2026] [security2:error] [pid 276620:tid 276863] [client 20.219.2.60:29934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/CDX1.php"] [unique_id "ary2lNPAdfEWqmGIkg15ggAAAnw"]
[Wed Sep 30 01:13:24.754596 2026] [security2:error] [pid 276620:tid 276825] [client 168.100.149.100:39774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/frontend.min.js"] [unique_id "ary2lNPAdfEWqmGIkg15hAACVhQ"]
[Wed Sep 30 01:13:24.773233 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.773514 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.864321 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.864600 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.907448 2026] [access_compat:error] [pid 276059:tid 276276] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:24.907711 2026] [access_compat:error] [pid 276059:tid 276276] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:24.963862 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:24.964124 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:24.981172 2026] [security2:error] [pid 276059:tid 276243] [client 20.211.90.37:28371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/11.php"] [unique_id "ary2lHtqdHBwD77138fHawAAAb8"]
[Wed Sep 30 01:13:24.990680 2026] [security2:error] [pid 276620:tid 276833] [client 13.70.4.78:37918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/Components.php"] [unique_id "ary2lNPAdfEWqmGIkg15jgAAAl4"]
[Wed Sep 30 01:13:24.993852 2026] [security2:error] [pid 276620:tid 276819] [client 20.214.151.17:47385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/brand.php"] [unique_id "ary2lNPAdfEWqmGIkg15jwAAAlA"]
[Wed Sep 30 01:13:25.026957 2026] [security2:error] [pid 276059:tid 276296] [client 20.70.173.30:25173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/one.php"] [unique_id "ary2lXtqdHBwD77138fHbAAAAfQ"]
[Wed Sep 30 01:13:25.033489 2026] [security2:error] [pid 276059:tid 276200] [client 74.225.148.80:11056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary2lXtqdHBwD77138fHbQAAAZU"]
[Wed Sep 30 01:13:25.055832 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.056104 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.076872 2026] [security2:error] [pid 276059:tid 276313] [client 20.70.173.30:39956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/222.php"] [unique_id "ary2lXtqdHBwD77138fHbgAAAgU"]
[Wed Sep 30 01:13:25.112277 2026] [security2:error] [pid 276059:tid 276245] [client 20.194.30.107:17287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/666.php"] [unique_id "ary2lXtqdHBwD77138fHbwAAAcE"]
[Wed Sep 30 01:13:25.145442 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.145709 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.163748 2026] [security2:error] [pid 276059:tid 276194] [client 20.70.173.30:38850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/inputs.php"] [unique_id "ary2lXtqdHBwD77138fHcQAAAY8"]
[Wed Sep 30 01:13:25.214184 2026] [security2:error] [pid 276620:tid 276878] [client 20.70.173.30:33350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/robots.php"] [unique_id "ary2ldPAdfEWqmGIkg15mgAAAos"]
[Wed Sep 30 01:13:25.222920 2026] [security2:error] [pid 276620:tid 276784] [client 20.213.164.196:35838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/tesla.php"] [unique_id "ary2ldPAdfEWqmGIkg15mwAAAi0"]
[Wed Sep 30 01:13:25.236993 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.237264 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.253681 2026] [security2:error] [pid 276059:tid 276238] [client 66.249.93.201:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/.well-known/traffic-advice"] [unique_id "ary2lXtqdHBwD77138fHdQAAAbo"]
[Wed Sep 30 01:13:25.254816 2026] [security2:error] [pid 276620:tid 276766] [client 20.214.151.17:64505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/atomlib.php"] [unique_id "ary2ldPAdfEWqmGIkg15nQAAAhs"]
[Wed Sep 30 01:13:25.264929 2026] [security2:error] [pid 276059:tid 276320] [client 20.213.164.196:6991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/cued.php"] [unique_id "ary2lXtqdHBwD77138fHdgAAAgw"]
[Wed Sep 30 01:13:25.307578 2026] [security2:error] [pid 276059:tid 276308] [client 20.70.173.30:19150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/sb.php"] [unique_id "ary2lXtqdHBwD77138fHeAAAAgA"]
[Wed Sep 30 01:13:25.327984 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.328469 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.341145 2026] [security2:error] [pid 276059:tid 276198] [client 13.70.4.78:37905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/aboutt.php"] [unique_id "ary2lXtqdHBwD77138fHeQAAAZM"]
[Wed Sep 30 01:13:25.370306 2026] [security2:error] [pid 276620:tid 276829] [client 20.194.30.107:17447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/biufile.php"] [unique_id "ary2ldPAdfEWqmGIkg15owAAAlo"]
[Wed Sep 30 01:13:25.370835 2026] [security2:error] [pid 276620:tid 276860] [client 20.211.90.37:27959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/20.php"] [unique_id "ary2ldPAdfEWqmGIkg15pAAAAnk"]
[Wed Sep 30 01:13:25.425202 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.425555 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:25.426000 2026] [access_compat:error] [pid 276059:tid 276236] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:25.434160 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.515868 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.516315 2026] [access_compat:error] [pid 276059:tid 276298] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.521155 2026] [security2:error] [pid 276059:tid 276316] [client 74.225.148.80:11033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/fucku.php"] [unique_id "ary2lXtqdHBwD77138fHfQAAAgg"]
[Wed Sep 30 01:13:25.563319 2026] [security2:error] [pid 276059:tid 276309] [client 162.43.6.77:38898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.6.43.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreeaudio.org"] [uri "/wp-login.php"] [unique_id "ary2lXtqdHBwD77138fHfgAAAgE"], referer: https://beetreeaudio.org/wp-login.php
[Wed Sep 30 01:13:25.584954 2026] [security2:error] [pid 276620:tid 276729] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2ldPAdfEWqmGIkg15qwACKGM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230737&sid=94e0a8b9e068ffaddc8e2d893e799e06
[Wed Sep 30 01:13:25.584995 2026] [security2:error] [pid 276620:tid 276729] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2ldPAdfEWqmGIkg15qwACKGM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230737&sid=94e0a8b9e068ffaddc8e2d893e799e06
[Wed Sep 30 01:13:25.590607 2026] [security2:error] [pid 276620:tid 276815] [client 20.214.151.17:64814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/product.php"] [unique_id "ary2ldPAdfEWqmGIkg15rAAAAkw"]
[Wed Sep 30 01:13:25.602151 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.602416 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.644987 2026] [security2:error] [pid 276059:tid 276081] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2lXtqdHBwD77138fHgQABxxE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277803&sid=826c70772871f04886d09ff061b688de
[Wed Sep 30 01:13:25.645021 2026] [security2:error] [pid 276059:tid 276081] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2lXtqdHBwD77138fHgQABxxE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=277803&sid=826c70772871f04886d09ff061b688de
[Wed Sep 30 01:13:25.686537 2026] [security2:error] [pid 276620:tid 276871] [client 13.70.4.78:37891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/maint/14.php"] [unique_id "ary2ldPAdfEWqmGIkg15rgAAAoQ"]
[Wed Sep 30 01:13:25.692184 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.692447 2026] [access_compat:error] [pid 276059:tid 276199] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.700229 2026] [security2:error] [pid 276059:tid 276265] [client 47.79.13.65:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/mercury-battery/"] [unique_id "ary2lXtqdHBwD77138fHhQAAAdU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:25.750754 2026] [security2:error] [pid 276059:tid 276301] [client 20.211.90.37:27933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/f35.php"] [unique_id "ary2lXtqdHBwD77138fHhwAAAfk"]
[Wed Sep 30 01:13:25.767614 2026] [security2:error] [pid 276059:tid 276314] [client 4.240.25.22:63678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/cdc.php"] [unique_id "ary2lXtqdHBwD77138fHiQAAAgY"]
[Wed Sep 30 01:13:25.780277 2026] [security2:error] [pid 276620:tid 276854] [client 162.120.187.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/"] [unique_id "ary2ldPAdfEWqmGIkg15sgAAAnM"], referer: https://www.google.com/
[Wed Sep 30 01:13:25.782482 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.782779 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.852245 2026] [security2:error] [pid 276620:tid 276760] [client 20.213.164.196:51601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/sd.php"] [unique_id "ary2ldPAdfEWqmGIkg15tAAAAhU"]
[Wed Sep 30 01:13:25.860661 2026] [security2:error] [pid 276059:tid 276237] [client 20.214.151.17:47375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/function.php"] [unique_id "ary2lXtqdHBwD77138fHjQAAAbk"]
[Wed Sep 30 01:13:25.875269 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.875538 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.885973 2026] [security2:error] [pid 276059:tid 276223] [client 20.194.30.107:62628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/xiugai.php"] [unique_id "ary2lXtqdHBwD77138fHkAAAAas"]
[Wed Sep 30 01:13:25.906826 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:25.907099 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:25.907176 2026] [security2:error] [pid 276059:tid 276211] [client 31.189.214.146:59236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2lXtqdHBwD77138fHjwAAAZ8"]
[Wed Sep 30 01:13:25.907340 2026] [security2:error] [pid 276059:tid 276211] [client 31.189.214.146:59236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2lXtqdHBwD77138fHjwAAAZ8"]
[Wed Sep 30 01:13:25.924633 2026] [security2:error] [pid 276620:tid 276831] [client 43.104.4.194:33405] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "ary2ldPAdfEWqmGIkg15uQAAAlw"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:25.965884 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:25.966139 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:14520] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:25.995151 2026] [security2:error] [pid 276059:tid 276246] [client 74.225.148.80:65282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/plugins/Cache/footer.php"] [unique_id "ary2lXtqdHBwD77138fHkwAAAcI"]
[Wed Sep 30 01:13:26.016218 2026] [security2:error] [pid 276620:tid 276784] [client 13.70.4.78:38213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/xx.php"] [unique_id "ary2ltPAdfEWqmGIkg15uwAAAi0"]
[Wed Sep 30 01:13:26.058268 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.058542 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:19807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.093672 2026] [security2:error] [pid 276620:tid 276766] [client 20.211.90.37:27906] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.isoltrading.com"] [uri "/1.php"] [unique_id "ary2ltPAdfEWqmGIkg15vgAAAhs"]
[Wed Sep 30 01:13:26.093832 2026] [security2:error] [pid 276620:tid 276766] [client 20.211.90.37:27906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/1.php"] [unique_id "ary2ltPAdfEWqmGIkg15vgAAAhs"]
[Wed Sep 30 01:13:26.103649 2026] [security2:error] [pid 276059:tid 276292] [client 122.177.240.90:20416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2lntqdHBwD77138fHlAAAAfA"]
[Wed Sep 30 01:13:26.103735 2026] [security2:error] [pid 276059:tid 276292] [client 122.177.240.90:20416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2lntqdHBwD77138fHlAAAAfA"]
[Wed Sep 30 01:13:26.144212 2026] [security2:error] [pid 276620:tid 276800] [client 20.214.151.17:64806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/0x.php"] [unique_id "ary2ltPAdfEWqmGIkg15wAAAAj0"]
[Wed Sep 30 01:13:26.176944 2026] [security2:error] [pid 276620:tid 276771] [client 49.43.163.212:23133] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2ltPAdfEWqmGIkg15wQAAAiA"]
[Wed Sep 30 01:13:26.177480 2026] [security2:error] [pid 276620:tid 276771] [client 49.43.163.212:23133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2ltPAdfEWqmGIkg15wQAAAiA"]
[Wed Sep 30 01:13:26.201632 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:23637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.201907 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:23637] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.260639 2026] [security2:error] [pid 276059:tid 276293] [client 51.75.19.210:34092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.19.75.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "ary2lntqdHBwD77138fHmQAAAfE"], referer: https://hairdefinitions.co.uk/wp-login.php
[Wed Sep 30 01:13:26.293505 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.293759 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.320970 2026] [security2:error] [pid 276620:tid 276860] [client 20.219.2.60:29705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/clasa99.php"] [unique_id "ary2ltPAdfEWqmGIkg15xgAAAnk"]
[Wed Sep 30 01:13:26.352570 2026] [security2:error] [pid 276620:tid 276863] [client 13.70.4.78:38257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/gelay.php"] [unique_id "ary2ltPAdfEWqmGIkg15xwAAAnw"]
[Wed Sep 30 01:13:26.368874 2026] [security2:error] [pid 276059:tid 276280] [client 216.73.216.46:14520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2lntqdHBwD77138fHnAAAAeQ"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvbm9kZTAvbWVtb3J5MTQx
[Wed Sep 30 01:13:26.374586 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:26.375030 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:26.389045 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:18705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.391180 2026] [access_compat:error] [pid 276059:tid 276243] [client 216.73.216.46:18705] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.429491 2026] [security2:error] [pid 276059:tid 276313] [client 20.211.90.37:27923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/c.php"] [unique_id "ary2lntqdHBwD77138fHpAAAAgU"]
[Wed Sep 30 01:13:26.431158 2026] [security2:error] [pid 276620:tid 276778] [client 20.214.151.17:47412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/index.php"] [unique_id "ary2ltPAdfEWqmGIkg15ywAAAic"]
[Wed Sep 30 01:13:26.454117 2026] [security2:error] [pid 276620:tid 276817] [client 216.73.216.46:19807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ltPAdfEWqmGIkg15zAAAAk4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzAzL25vZGUwL21lbW9yeTM4NQ%3D%3D
[Wed Sep 30 01:13:26.475169 2026] [security2:error] [pid 276059:tid 276245] [client 74.225.148.80:11019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/mail.php"] [unique_id "ary2lntqdHBwD77138fHpQAAAcE"]
[Wed Sep 30 01:13:26.490573 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.491283 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.514859 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.515142 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.525782 2026] [security2:error] [pid 276620:tid 276880] [client 20.70.173.30:8909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/one.php"] [unique_id "ary2ltPAdfEWqmGIkg15zwAAAo0"]
[Wed Sep 30 01:13:26.539327 2026] [security2:error] [pid 276620:tid 276857] [client 20.214.145.90:26314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2ltPAdfEWqmGIkg150AAAAnY"]
[Wed Sep 30 01:13:26.691259 2026] [security2:error] [pid 276620:tid 276815] [client 13.70.4.78:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/htaccess.php"] [unique_id "ary2ltPAdfEWqmGIkg150wAAAkw"]
[Wed Sep 30 01:13:26.726479 2026] [security2:error] [pid 276620:tid 276859] [client 20.213.164.196:51623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/ans.php"] [unique_id "ary2ltPAdfEWqmGIkg151QAAAng"]
[Wed Sep 30 01:13:26.727744 2026] [security2:error] [pid 276620:tid 276828] [client 216.73.216.46:23637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2ltPAdfEWqmGIkg151gAAAlk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTAvbm9kZTAvbWVtb3J5NDAvbm9kZTAvbWVtb3J5ODE%3D
[Wed Sep 30 01:13:26.728037 2026] [security2:error] [pid 276620:tid 276787] [client 20.194.30.107:22986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/admin.php"] [unique_id "ary2ltPAdfEWqmGIkg151wAAAjA"]
[Wed Sep 30 01:13:26.771824 2026] [security2:error] [pid 276059:tid 276259] [client 168.100.149.118:56796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js"] [unique_id "ary2lntqdHBwD77138fHqAABz2U"]
[Wed Sep 30 01:13:26.800002 2026] [security2:error] [pid 276059:tid 276295] [client 20.214.151.17:64460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary2lntqdHBwD77138fHqQAAAfM"]
[Wed Sep 30 01:13:26.853972 2026] [security2:error] [pid 276620:tid 276833] [client 20.214.145.90:26561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2ltPAdfEWqmGIkg153wAAAl4"]
[Wed Sep 30 01:13:26.862531 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:26.862792 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:26.865233 2026] [security2:error] [pid 276059:tid 276198] [client 216.73.216.46:18705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2lntqdHBwD77138fHrQAAAZM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NDAvbm9kZTAvbWVtb3J5MTAvbm9kZTAvbWVtb3J5ODE%3D
[Wed Sep 30 01:13:26.873791 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:26.874073 2026] [access_compat:error] [pid 276059:tid 276230] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:26.954247 2026] [security2:error] [pid 276620:tid 276878] [client 20.211.90.37:28362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/build.php"] [unique_id "ary2ltPAdfEWqmGIkg155gAAAos"]
[Wed Sep 30 01:13:26.964588 2026] [security2:error] [pid 276620:tid 276801] [client 74.225.148.80:10829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/sx.php"] [unique_id "ary2ltPAdfEWqmGIkg155wAAAj4"]
[Wed Sep 30 01:13:26.982407 2026] [security2:error] [pid 276620:tid 276800] [client 20.213.164.196:35836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/222.php"] [unique_id "ary2ltPAdfEWqmGIkg156gAAAj0"]
[Wed Sep 30 01:13:27.012745 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.013103 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.046105 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.046389 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.078282 2026] [security2:error] [pid 276620:tid 276816] [client 20.213.164.196:51063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/cns.php"] [unique_id "ary2l9PAdfEWqmGIkg157gAAAk0"]
[Wed Sep 30 01:13:27.086800 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.087070 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.092499 2026] [security2:error] [pid 276059:tid 276316] [client 13.70.4.78:47651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/readme.php"] [unique_id "ary2l3tqdHBwD77138fHsgAAAgg"]
[Wed Sep 30 01:13:27.129621 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.151.17:64845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/classwithtostring.php"] [unique_id "ary2l9PAdfEWqmGIkg159AAAAnw"]
[Wed Sep 30 01:13:27.130305 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.130586 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.146928 2026] [security2:error] [pid 276059:tid 276285] [client 20.194.30.107:23599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/images.php"] [unique_id "ary2l3tqdHBwD77138fHswAAAek"]
[Wed Sep 30 01:13:27.158707 2026] [security2:error] [pid 276059:tid 276298] [client 20.214.145.90:26564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/1ac.php"] [unique_id "ary2l3tqdHBwD77138fHtAAAAfY"]
[Wed Sep 30 01:13:27.161255 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.161522 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.166242 2026] [security2:error] [pid 276620:tid 276807] [client 167.234.115.72:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2l9PAdfEWqmGIkg159gAAAkQ"]
[Wed Sep 30 01:13:27.199703 2026] [security2:error] [pid 276620:tid 276775] [client 49.37.102.248:64967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2l9PAdfEWqmGIkg15-QAAAiQ"]
[Wed Sep 30 01:13:27.199790 2026] [security2:error] [pid 276620:tid 276775] [client 49.37.102.248:64967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2l9PAdfEWqmGIkg15-QAAAiQ"]
[Wed Sep 30 01:13:27.201400 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.201685 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.240912 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.241190 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.326843 2026] [security2:error] [pid 276620:tid 276788] [client 20.211.90.37:27988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/bless.php"] [unique_id "ary2l9PAdfEWqmGIkg16AwAAAjE"]
[Wed Sep 30 01:13:27.332488 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.332805 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.338926 2026] [security2:error] [pid 276059:tid 276317] [client 213.35.101.27:63880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.101.35.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "holinauthor.holin.us"] [uri "/wp-links-opml.php"] [unique_id "ary2l3tqdHBwD77138fHuAAAAgk"]
[Wed Sep 30 01:13:27.387594 2026] [security2:error] [pid 276059:tid 276251] [client 20.204.42.136:35804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/bnmtp.php"] [unique_id "ary2l3tqdHBwD77138fHuQAAAcc"]
[Wed Sep 30 01:13:27.408863 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.96.176:7444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/blacks.php"] [unique_id "ary2l3tqdHBwD77138fHugAAAZ0"]
[Wed Sep 30 01:13:27.426048 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.426327 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.433934 2026] [security2:error] [pid 276620:tid 276846] [client 20.214.145.90:26319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/flm.php"] [unique_id "ary2l9PAdfEWqmGIkg16BgAAAms"]
[Wed Sep 30 01:13:27.439471 2026] [security2:error] [pid 276059:tid 276265] [client 20.214.151.17:64772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/dropdown.php"] [unique_id "ary2l3tqdHBwD77138fHvAAAAdU"]
[Wed Sep 30 01:13:27.442504 2026] [access_compat:error] [pid 276059:tid 276307] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:27.442931 2026] [access_compat:error] [pid 276059:tid 276307] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:27.475876 2026] [security2:error] [pid 276059:tid 276281] [client 13.70.4.78:45659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/max.php"] [unique_id "ary2l3tqdHBwD77138fHvgAAAeU"]
[Wed Sep 30 01:13:27.518395 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.518737 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.536928 2026] [security2:error] [pid 276620:tid 276764] [client 20.213.164.196:15973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/media.php"] [unique_id "ary2l9PAdfEWqmGIkg16DAAAAhk"]
[Wed Sep 30 01:13:27.541185 2026] [security2:error] [pid 276620:tid 276798] [client 74.225.148.80:11232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary2l9PAdfEWqmGIkg16DQAAAjs"]
[Wed Sep 30 01:13:27.569288 2026] [security2:error] [pid 276620:tid 276831] [client 20.194.30.107:17341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/xkSudf.php"] [unique_id "ary2l9PAdfEWqmGIkg16EAAAAlw"]
[Wed Sep 30 01:13:27.605768 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.606068 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.666058 2026] [security2:error] [pid 276620:tid 276820] [client 223.181.60.167:30901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2l9PAdfEWqmGIkg16EwAAAlE"]
[Wed Sep 30 01:13:27.666179 2026] [security2:error] [pid 276620:tid 276820] [client 223.181.60.167:30901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2l9PAdfEWqmGIkg16EwAAAlE"]
[Wed Sep 30 01:13:27.669935 2026] [security2:error] [pid 276059:tid 276234] [client 20.211.90.37:27956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/admin/upload/css.php"] [unique_id "ary2l3tqdHBwD77138fHwAAAAbY"]
[Wed Sep 30 01:13:27.696913 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.697224 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.720663 2026] [security2:error] [pid 276620:tid 276800] [client 51.75.19.210:44682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.19.75.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairdefinitions.co.uk"] [uri "/wp-login.php"] [unique_id "ary2l9PAdfEWqmGIkg16FQAAAj0"], referer: https://hairdefinitions.co.uk/wp-login.php
[Wed Sep 30 01:13:27.725406 2026] [security2:error] [pid 276059:tid 276254] [client 20.214.151.17:64458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/moon.php"] [unique_id "ary2l3tqdHBwD77138fHwQAAAco"]
[Wed Sep 30 01:13:27.739752 2026] [security2:error] [pid 276059:tid 276237] [client 20.213.164.196:51064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/faiy.php"] [unique_id "ary2l3tqdHBwD77138fHwgAAAbk"]
[Wed Sep 30 01:13:27.742206 2026] [security2:error] [pid 276620:tid 276881] [client 20.214.145.90:26615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/40341.php"] [unique_id "ary2l9PAdfEWqmGIkg16FgAAAo4"]
[Wed Sep 30 01:13:27.787509 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.787785 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.877893 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.878161 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:5023] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.889914 2026] [security2:error] [pid 276620:tid 276762] [client 194.145.220.232:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2l9PAdfEWqmGIkg16HwAAAhc"]
[Wed Sep 30 01:13:27.909111 2026] [access_compat:error] [pid 276059:tid 276228] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:27.909373 2026] [access_compat:error] [pid 276059:tid 276228] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:27.933968 2026] [security2:error] [pid 276620:tid 276836] [client 13.70.4.78:47619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/post.php"] [unique_id "ary2l9PAdfEWqmGIkg16IgAAAmE"]
[Wed Sep 30 01:13:27.968891 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:27.969151 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:27.979894 2026] [security2:error] [pid 276059:tid 276314] [client 78.138.127.62:65481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.127.138.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "ary2l3tqdHBwD77138fHywAAAgY"], referer: https://www.clenbuterol4you.com/
[Wed Sep 30 01:13:27.980192 2026] [security2:error] [pid 276059:tid 276073] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2l3tqdHBwD77138fHzAABwwk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147605&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:13:27.980208 2026] [security2:error] [pid 276059:tid 276073] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2l3tqdHBwD77138fHzAABwwk"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=147605&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:13:28.011115 2026] [security2:error] [pid 276620:tid 276761] [client 20.194.96.176:16014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/aa.php"] [unique_id "ary2mNPAdfEWqmGIkg16KAAAAhY"]
[Wed Sep 30 01:13:28.014461 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.151.17:46783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/autoload_classmap.php"] [unique_id "ary2mNPAdfEWqmGIkg16KQAAAoo"]
[Wed Sep 30 01:13:28.025030 2026] [security2:error] [pid 276059:tid 276204] [client 74.225.148.80:11242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/article.php"] [unique_id "ary2mHtqdHBwD77138fHzQAAAZk"]
[Wed Sep 30 01:13:28.036319 2026] [security2:error] [pid 276620:tid 276788] [client 20.211.90.37:27961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/lock360.php"] [unique_id "ary2mNPAdfEWqmGIkg16LAAAAjE"]
[Wed Sep 30 01:13:28.060216 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.060515 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.074713 2026] [security2:error] [pid 276620:tid 276782] [client 201.32.215.149:5892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2mNPAdfEWqmGIkg16LwAAAis"]
[Wed Sep 30 01:13:28.074837 2026] [security2:error] [pid 276620:tid 276782] [client 201.32.215.149:5892] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2mNPAdfEWqmGIkg16LwAAAis"]
[Wed Sep 30 01:13:28.124069 2026] [security2:error] [pid 276620:tid 276853] [client 4.240.25.22:12435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/sym.php"] [unique_id "ary2mNPAdfEWqmGIkg16NAAAAnI"]
[Wed Sep 30 01:13:28.135877 2026] [access_compat:error] [pid 276059:tid 276232] [client 47.79.13.37:37342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:28.136320 2026] [access_compat:error] [pid 276059:tid 276232] [client 47.79.13.37:37342] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:28.154350 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.154784 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.185447 2026] [security2:error] [pid 276059:tid 276297] [client 20.213.164.196:60649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/gecho.php"] [unique_id "ary2mHtqdHBwD77138fH0gAAAfU"]
[Wed Sep 30 01:13:28.190371 2026] [security2:error] [pid 276620:tid 276798] [client 20.214.145.90:26590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-log.php"] [unique_id "ary2mNPAdfEWqmGIkg16OQAAAjs"]
[Wed Sep 30 01:13:28.242525 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.242798 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:39461] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.250728 2026] [security2:error] [pid 276620:tid 276799] [client 20.213.164.196:35832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/24.php"] [unique_id "ary2mNPAdfEWqmGIkg16PAAAAjw"]
[Wed Sep 30 01:13:28.289076 2026] [security2:error] [pid 276059:tid 276257] [client 13.70.4.78:37932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/themes.php"] [unique_id "ary2mHtqdHBwD77138fH1QAAAc0"]
[Wed Sep 30 01:13:28.293089 2026] [security2:error] [pid 276620:tid 276819] [client 20.70.173.30:33281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary2mNPAdfEWqmGIkg16PgAAAlA"]
[Wed Sep 30 01:13:28.295849 2026] [security2:error] [pid 276620:tid 276801] [client 216.73.216.46:5023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2mNPAdfEWqmGIkg16PwAAAj4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5ODEvbm9kZTAvY3B1OC9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MQ%3D%3D
[Wed Sep 30 01:13:28.332271 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.332532 2026] [access_compat:error] [pid 276620:tid 276827] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.358557 2026] [security2:error] [pid 276620:tid 276771] [client 20.214.151.17:64838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/default.php"] [unique_id "ary2mNPAdfEWqmGIkg16QwAAAiA"]
[Wed Sep 30 01:13:28.372633 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:28.373111 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:28.399458 2026] [security2:error] [pid 276059:tid 276214] [client 20.70.173.30:3594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2mHtqdHBwD77138fH2AAAAaI"]
[Wed Sep 30 01:13:28.418028 2026] [security2:error] [pid 276059:tid 276276] [client 74.7.242.1:47856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2mHtqdHBwD77138fH2QAAAeA"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:13:28.422865 2026] [security2:error] [pid 276620:tid 276649] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2mNPAdfEWqmGIkg16RgACcBM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230737&sid=94e0a8b9e068ffaddc8e2d893e799e06
[Wed Sep 30 01:13:28.422898 2026] [security2:error] [pid 276620:tid 276649] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2mNPAdfEWqmGIkg16RgACcBM"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=230737&sid=94e0a8b9e068ffaddc8e2d893e799e06
[Wed Sep 30 01:13:28.425885 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.426131 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.446772 2026] [security2:error] [pid 276620:tid 276800] [client 87.106.101.32:33224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.101.106.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "marionhandyman.com"] [uri "/wp-login.php"] [unique_id "ary2mNPAdfEWqmGIkg16RwAAAj0"]
[Wed Sep 30 01:13:28.456513 2026] [security2:error] [pid 276620:tid 276837] [client 20.211.90.37:27911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/4.php"] [unique_id "ary2mNPAdfEWqmGIkg16SAAAAmI"]
[Wed Sep 30 01:13:28.485699 2026] [security2:error] [pid 276059:tid 276195] [client 20.219.2.60:30073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/myfilexxx.php"] [unique_id "ary2mHtqdHBwD77138fH2gAAAZA"]
[Wed Sep 30 01:13:28.489508 2026] [security2:error] [pid 276620:tid 276860] [client 74.225.148.80:10862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/link.php"] [unique_id "ary2mNPAdfEWqmGIkg16TAAAAnk"]
[Wed Sep 30 01:13:28.515710 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.516020 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.608673 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.608995 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.617524 2026] [security2:error] [pid 276620:tid 276875] [client 20.214.145.90:26324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/sehryhv.php"] [unique_id "ary2mNPAdfEWqmGIkg16VAAAAog"]
[Wed Sep 30 01:13:28.656905 2026] [security2:error] [pid 276620:tid 276782] [client 216.73.216.46:39461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2mNPAdfEWqmGIkg16VgAAAis"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTQvbm9kZTAvbWVtb3J5MjU2
[Wed Sep 30 01:13:28.677422 2026] [security2:error] [pid 276620:tid 276804] [client 20.214.151.17:46735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary2mNPAdfEWqmGIkg16WQAAAkE"]
[Wed Sep 30 01:13:28.697408 2026] [security2:error] [pid 276059:tid 276258] [client 13.70.4.78:39463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/maint/about.php"] [unique_id "ary2mHtqdHBwD77138fH3gAAAc4"]
[Wed Sep 30 01:13:28.697793 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.698070 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.726880 2026] [security2:error] [pid 276059:tid 276261] [client 20.194.30.107:17414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/simple.php"] [unique_id "ary2mHtqdHBwD77138fH4AAAAdE"]
[Wed Sep 30 01:13:28.759798 2026] [security2:error] [pid 276620:tid 276838] [client 168.100.149.67:59124] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/presto-player/src/player/player-static.js"] [unique_id "ary2mNPAdfEWqmGIkg16XQACYz0"]
[Wed Sep 30 01:13:28.783764 2026] [security2:error] [pid 276059:tid 276321] [client 78.138.127.62:58645] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "78.138.127.62" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "ary2mHtqdHBwD77138fH4wAAAg0"], referer: https://www.clenbuterol4you.com/
[Wed Sep 30 01:13:28.794157 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.794597 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.803636 2026] [security2:error] [pid 276620:tid 276797] [client 187.0.5.144:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2mNPAdfEWqmGIkg16YQAAAjo"]
[Wed Sep 30 01:13:28.881477 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.881743 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.902149 2026] [security2:error] [pid 276620:tid 276787] [client 203.122.45.246:50313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2mNPAdfEWqmGIkg16aQAAAjA"]
[Wed Sep 30 01:13:28.902277 2026] [security2:error] [pid 276620:tid 276787] [client 203.122.45.246:50313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2mNPAdfEWqmGIkg16aQAAAjA"]
[Wed Sep 30 01:13:28.923227 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:28.923497 2026] [access_compat:error] [pid 276059:tid 276306] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:28.924299 2026] [security2:error] [pid 276059:tid 276198] [client 72.14.201.90:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/stm_event_category/committee-meetings/"] [unique_id "ary2mHtqdHBwD77138fH6gAAAZM"], referer: https://www.google.com/
[Wed Sep 30 01:13:28.935966 2026] [security2:error] [pid 276620:tid 276882] [client 20.214.145.90:26594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/yich.php"] [unique_id "ary2mNPAdfEWqmGIkg16bQAAAo8"]
[Wed Sep 30 01:13:28.949661 2026] [security2:error] [pid 276059:tid 276203] [client 20.213.164.196:51624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/gu.php"] [unique_id "ary2mHtqdHBwD77138fH7AAAAZg"]
[Wed Sep 30 01:13:28.952719 2026] [core:error] [pid 276059:tid 276196] [client 159.223.224.133:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:28.952755 2026] [core:error] [pid 276059:tid 276196] [client 159.223.224.133:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:28.962971 2026] [security2:error] [pid 276620:tid 276785] [client 74.225.148.80:65022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/lock360.php"] [unique_id "ary2mNPAdfEWqmGIkg16bgAAAi4"]
[Wed Sep 30 01:13:28.971345 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:28.971630 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:28.975852 2026] [security2:error] [pid 276059:tid 276282] [client 20.213.164.196:15948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/xwpg.php"] [unique_id "ary2mHtqdHBwD77138fH8AAAAeY"]
[Wed Sep 30 01:13:28.991183 2026] [security2:error] [pid 276059:tid 276271] [client 20.214.151.17:64773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary2mHtqdHBwD77138fH8gAAAds"]
[Wed Sep 30 01:13:29.014892 2026] [security2:error] [pid 276059:tid 276285] [client 13.70.4.78:39469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ary2mXtqdHBwD77138fH8wAAAek"]
[Wed Sep 30 01:13:29.016961 2026] [security2:error] [pid 276620:tid 276849] [client 20.211.90.37:28007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/about.php"] [unique_id "ary2mdPAdfEWqmGIkg16cQAAAm4"]
[Wed Sep 30 01:13:29.066747 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.067201 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.100988 2026] [lsapi:warn] [pid 276620:tid 276692] [remote 40.77.167.136:7826] [host www.craigbrownphd.com] Backend log: PHP Warning:  Trying to access array offset on value of type bool in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/widget-base.php on line 224\n
[Wed Sep 30 01:13:29.101015 2026] [lsapi:warn] [pid 276620:tid 276692] [remote 40.77.167.136:7826] [host www.craigbrownphd.com] Backend log: PHP Warning:  Undefined array key -1 in /home1/craigbro/public_html/wp-content/plugins/elementor/includes/base/controls-stack.php on line 696\n
[Wed Sep 30 01:13:29.152027 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.152292 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.155233 2026] [access_compat:error] [pid 276059:tid 276213] [client 47.79.13.1:48680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:29.155603 2026] [access_compat:error] [pid 276059:tid 276213] [client 47.79.13.1:48680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:29.215077 2026] [security2:error] [pid 276620:tid 276789] [client 20.214.145.90:26322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-blink.php"] [unique_id "ary2mdPAdfEWqmGIkg16egAAAjI"]
[Wed Sep 30 01:13:29.243508 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.243766 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.252839 2026] [security2:error] [pid 276059:tid 276114] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2mXtqdHBwD77138fH-AAB1zI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=258500&sid=24b12c0d65f00cfd1d9490651d1c0752
[Wed Sep 30 01:13:29.252864 2026] [security2:error] [pid 276059:tid 276114] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2mXtqdHBwD77138fH-AAB1zI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=258500&sid=24b12c0d65f00cfd1d9490651d1c0752
[Wed Sep 30 01:13:29.273172 2026] [security2:error] [pid 276620:tid 276762] [client 182.69.182.151:30227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16fAAAAhc"]
[Wed Sep 30 01:13:29.273519 2026] [security2:error] [pid 276620:tid 276762] [client 182.69.182.151:30227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16fAAAAhc"]
[Wed Sep 30 01:13:29.332575 2026] [security2:error] [pid 276620:tid 276793] [client 20.213.164.196:51594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/nck.php"] [unique_id "ary2mdPAdfEWqmGIkg16fwAAAjY"]
[Wed Sep 30 01:13:29.336820 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.337128 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.351632 2026] [security2:error] [pid 276620:tid 276782] [client 13.70.4.78:38238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/click.php"] [unique_id "ary2mdPAdfEWqmGIkg16ggAAAis"]
[Wed Sep 30 01:13:29.357538 2026] [security2:error] [pid 276620:tid 276885] [client 20.214.151.17:64810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary2mdPAdfEWqmGIkg16gwAAApI"]
[Wed Sep 30 01:13:29.359245 2026] [access_compat:error] [pid 276059:tid 276281] [client 47.79.13.158:46154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:29.359498 2026] [access_compat:error] [pid 276059:tid 276281] [client 47.79.13.158:46154] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:29.372717 2026] [security2:error] [pid 276059:tid 276210] [client 20.211.90.37:28406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/r.php"] [unique_id "ary2mXtqdHBwD77138fH_wAAAZ4"]
[Wed Sep 30 01:13:29.384700 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:29.384982 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:29.397900 2026] [security2:error] [pid 276620:tid 276839] [client 20.194.96.176:7621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/run.php"] [unique_id "ary2mdPAdfEWqmGIkg16hAAAAmQ"]
[Wed Sep 30 01:13:29.427435 2026] [security2:error] [pid 276620:tid 276813] [client 78.138.127.62:63357] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "78.138.127.62" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.clenbuterol4you.com"] [uri "/wp-login.php"] [unique_id "ary2mdPAdfEWqmGIkg16iAAAAko"], referer: https://www.clenbuterol4you.com/wp-login.php
[Wed Sep 30 01:13:29.428265 2026] [security2:error] [pid 276620:tid 276819] [client 223.235.102.107:31697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16iQAAAlA"]
[Wed Sep 30 01:13:29.428994 2026] [security2:error] [pid 276620:tid 276819] [client 223.235.102.107:31697] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16iQAAAlA"]
[Wed Sep 30 01:13:29.429992 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.430291 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.433872 2026] [security2:error] [pid 276620:tid 276832] [client 74.225.148.80:11013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-trackback.php"] [unique_id "ary2mdPAdfEWqmGIkg16igAAAl0"]
[Wed Sep 30 01:13:29.486751 2026] [security2:error] [pid 276620:tid 276786] [client 20.70.173.30:19180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2mdPAdfEWqmGIkg16jgAAAi8"]
[Wed Sep 30 01:13:29.509935 2026] [security2:error] [pid 276620:tid 276809] [client 20.214.145.90:26580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-logis.php"] [unique_id "ary2mdPAdfEWqmGIkg16kAAAAkY"]
[Wed Sep 30 01:13:29.523229 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.523669 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.526133 2026] [security2:error] [pid 276620:tid 276871] [client 20.213.164.196:35806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/blacks.php"] [unique_id "ary2mdPAdfEWqmGIkg16kgAAAoQ"]
[Wed Sep 30 01:13:29.560933 2026] [security2:error] [pid 276620:tid 276784] [client 152.56.240.85:52903] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16kwAAAi0"]
[Wed Sep 30 01:13:29.561047 2026] [security2:error] [pid 276620:tid 276784] [client 152.56.240.85:52903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2mdPAdfEWqmGIkg16kwAAAi0"]
[Wed Sep 30 01:13:29.610734 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.611165 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.659499 2026] [security2:error] [pid 276620:tid 276827] [client 20.214.151.17:64853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/mail.php"] [unique_id "ary2mdPAdfEWqmGIkg16ngAAAlg"]
[Wed Sep 30 01:13:29.723610 2026] [security2:error] [pid 276620:tid 276805] [client 20.213.164.196:60645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/xtt.php"] [unique_id "ary2mdPAdfEWqmGIkg16qAAAAkI"]
[Wed Sep 30 01:13:29.725928 2026] [security2:error] [pid 276620:tid 276775] [client 13.70.4.78:38217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/install.php"] [unique_id "ary2mdPAdfEWqmGIkg16qgAAAiQ"]
[Wed Sep 30 01:13:29.732273 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.732540 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.792701 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.793222 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.879242 2026] [security2:error] [pid 276620:tid 276819] [client 20.214.145.90:26334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/esc.php"] [unique_id "ary2mdPAdfEWqmGIkg16vAAAAlA"]
[Wed Sep 30 01:13:29.889481 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.889933 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.904324 2026] [security2:error] [pid 276620:tid 276809] [client 74.225.148.80:11046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/.well-known/index.php"] [unique_id "ary2mdPAdfEWqmGIkg16vgAAAkY"]
[Wed Sep 30 01:13:29.915020 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:29.915288 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:29.923936 2026] [security2:error] [pid 276620:tid 276780] [client 172.232.180.137:59113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary2mdPAdfEWqmGIkg16vwAAAik"], referer: www.google.com
[Wed Sep 30 01:13:29.932927 2026] [security2:error] [pid 276059:tid 276216] [client 172.232.180.137:59140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-plain.php"] [unique_id "ary2mXtqdHBwD77138fIDgAAAaQ"], referer: www.google.com
[Wed Sep 30 01:13:29.940818 2026] [security2:error] [pid 276620:tid 276884] [client 20.211.90.37:27945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/v4.php"] [unique_id "ary2mdPAdfEWqmGIkg16wQAAApE"]
[Wed Sep 30 01:13:29.972278 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:29.972540 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:29.983440 2026] [security2:error] [pid 276620:tid 276694] [remote 47.85.163.235:56676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.163.85.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/wp-login.php"] [unique_id "ary2mdPAdfEWqmGIkg16xAAChEA"]
[Wed Sep 30 01:13:29.996452 2026] [security2:error] [pid 276620:tid 276825] [client 20.214.151.17:64477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/sx.php"] [unique_id "ary2mdPAdfEWqmGIkg16yQAAAlY"]
[Wed Sep 30 01:13:30.011063 2026] [security2:error] [pid 276620:tid 276886] [client 190.210.32.116:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2mtPAdfEWqmGIkg16ygAAApM"]
[Wed Sep 30 01:13:30.014268 2026] [security2:error] [pid 276059:tid 276195] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2mntqdHBwD77138fIEQAAAZA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:30.053303 2026] [security2:error] [pid 276620:tid 276757] [remote 47.85.163.235:56676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.163.85.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/wp-login.php"] [unique_id "ary2mtPAdfEWqmGIkg16ywACan8"], referer: https://beetreefolkschool.net/wp-login.php
[Wed Sep 30 01:13:30.054149 2026] [security2:error] [pid 276059:tid 276312] [client 122.173.27.10:12629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2mntqdHBwD77138fIEwAAAgQ"]
[Wed Sep 30 01:13:30.054227 2026] [security2:error] [pid 276059:tid 276312] [client 122.173.27.10:12629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2mntqdHBwD77138fIEwAAAgQ"]
[Wed Sep 30 01:13:30.063852 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.064125 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.092146 2026] [security2:error] [pid 276620:tid 276869] [client 20.213.164.196:6985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "projectwatch-com-ng.jfootsteps.com"] [uri "/go.php"] [unique_id "ary2mtPAdfEWqmGIkg16zQAAAoI"]
[Wed Sep 30 01:13:30.113940 2026] [security2:error] [pid 276620:tid 276806] [client 20.213.164.196:35826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/class-wp-http-client.php"] [unique_id "ary2mtPAdfEWqmGIkg16zgAAAkM"]
[Wed Sep 30 01:13:30.119732 2026] [security2:error] [pid 276620:tid 276688] [remote 47.85.163.235:56676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.163.85.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2mtPAdfEWqmGIkg16zwACFTo"]
[Wed Sep 30 01:13:30.119895 2026] [security2:error] [pid 276620:tid 276760] [client 47.85.163.235:56676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2mtPAdfEWqmGIkg16zwACFTo"]
[Wed Sep 30 01:13:30.149575 2026] [security2:error] [pid 276059:tid 276241] [client 20.214.145.90:26309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/2.php"] [unique_id "ary2mntqdHBwD77138fIFAAAAb0"]
[Wed Sep 30 01:13:30.155634 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.155913 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.175959 2026] [security2:error] [pid 276620:tid 276771] [client 13.70.4.78:45686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/13k.php"] [unique_id "ary2mtPAdfEWqmGIkg160gAAAiA"]
[Wed Sep 30 01:13:30.245393 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.245697 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.272870 2026] [security2:error] [pid 276059:tid 276220] [client 20.70.173.30:33343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/k.php"] [unique_id "ary2mntqdHBwD77138fIGAAAAag"]
[Wed Sep 30 01:13:30.337712 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.338006 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.354203 2026] [security2:error] [pid 276059:tid 276261] [client 20.214.151.17:64451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary2mntqdHBwD77138fIGgAAAdE"]
[Wed Sep 30 01:13:30.375672 2026] [security2:error] [pid 276620:tid 276840] [client 74.225.148.80:10864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary2mtPAdfEWqmGIkg161wAAAmU"]
[Wed Sep 30 01:13:30.414024 2026] [security2:error] [pid 276059:tid 276299] [client 20.214.145.90:26304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/ba.php"] [unique_id "ary2mntqdHBwD77138fIHQAAAfc"]
[Wed Sep 30 01:13:30.417730 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:30.418136 2026] [access_compat:error] [pid 276059:tid 276200] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:30.426141 2026] [autoindex:error] [pid 276620:tid 276883] [client 103.189.178.93:52156] AH01276: Cannot serve directory /home4/bdcigmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:30.426907 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.427173 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.453822 2026] [security2:error] [pid 276620:tid 276751] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2mtPAdfEWqmGIkg163AACVHk"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D70738
[Wed Sep 30 01:13:30.458918 2026] [security2:error] [pid 276059:tid 276259] [client 47.79.13.58:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2mntqdHBwD77138fIHwAAAc8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:30.479595 2026] [security2:error] [pid 276620:tid 276834] [client 20.211.90.37:27954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-22.php"] [unique_id "ary2mtPAdfEWqmGIkg163wAAAl8"]
[Wed Sep 30 01:13:30.519745 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.520008 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.527103 2026] [security2:error] [pid 276059:tid 276310] [client 13.70.4.78:38216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/up.php"] [unique_id "ary2mntqdHBwD77138fIIwAAAgI"]
[Wed Sep 30 01:13:30.589106 2026] [security2:error] [pid 276620:tid 276777] [client 20.219.2.60:30016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/karma_144a.php"] [unique_id "ary2mtPAdfEWqmGIkg164wAAAiY"]
[Wed Sep 30 01:13:30.609991 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.610447 2026] [access_compat:error] [pid 276620:tid 276829] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.659196 2026] [access_compat:error] [pid 276059:tid 276212] [client 47.79.13.1:48680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:30.659492 2026] [access_compat:error] [pid 276059:tid 276212] [client 47.79.13.1:48680] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:30.702007 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.702289 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.731034 2026] [security2:error] [pid 276620:tid 276857] [client 20.214.145.90:26563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/great.php"] [unique_id "ary2mtPAdfEWqmGIkg167AAAAnY"]
[Wed Sep 30 01:13:30.746479 2026] [security2:error] [pid 276059:tid 276298] [client 20.213.164.196:15939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/zoo2.php"] [unique_id "ary2mntqdHBwD77138fIJwAAAfY"]
[Wed Sep 30 01:13:30.779984 2026] [security2:error] [pid 276059:tid 276172] [remote 207.46.13.36:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/posting.php"] [unique_id "ary2mntqdHBwD77138fIKgABm2w"]
[Wed Sep 30 01:13:30.790986 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.791258 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.814916 2026] [security2:error] [pid 276620:tid 276866] [client 20.214.151.17:64887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/article.php"] [unique_id "ary2mtPAdfEWqmGIkg168wAAAn8"]
[Wed Sep 30 01:13:30.835069 2026] [security2:error] [pid 276059:tid 276309] [client 168.100.149.22:49994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js"] [unique_id "ary2mntqdHBwD77138fILAACAVI"]
[Wed Sep 30 01:13:30.844037 2026] [security2:error] [pid 276620:tid 276880] [client 74.225.148.80:11206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2mtPAdfEWqmGIkg169QAAAo0"]
[Wed Sep 30 01:13:30.859797 2026] [security2:error] [pid 276620:tid 276831] [client 20.211.90.37:27909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/makeasmtp.php"] [unique_id "ary2mtPAdfEWqmGIkg169wAAAlw"]
[Wed Sep 30 01:13:30.881598 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.881861 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.925871 2026] [access_compat:error] [pid 276059:tid 276322] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:30.926146 2026] [access_compat:error] [pid 276059:tid 276322] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:30.974136 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:30.974416 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:30.978222 2026] [security2:error] [pid 276059:tid 276233] [client 13.70.4.78:37922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/0x1949.php"] [unique_id "ary2mntqdHBwD77138fIMgAAAbU"]
[Wed Sep 30 01:13:31.047823 2026] [security2:error] [pid 276620:tid 276865] [client 198.13.228.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2m9PAdfEWqmGIkg17AQAAAn4"]
[Wed Sep 30 01:13:31.063223 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.063492 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.094363 2026] [security2:error] [pid 276620:tid 276886] [client 20.214.145.90:26458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "ary2m9PAdfEWqmGIkg17AwAAApM"]
[Wed Sep 30 01:13:31.137046 2026] [security2:error] [pid 276620:tid 276839] [client 105.112.178.79:38603] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpcalendars.fla.wja.mybluehost.me"] [uri "/.env"] [unique_id "ary2m9PAdfEWqmGIkg17BgAAAmQ"]
[Wed Sep 30 01:13:31.154291 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.154560 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.157787 2026] [security2:error] [pid 276620:tid 276788] [client 20.213.164.196:54659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/zoo1.php"] [unique_id "ary2m9PAdfEWqmGIkg17CAAAAjE"]
[Wed Sep 30 01:13:31.181511 2026] [security2:error] [pid 276620:tid 276774] [client 20.70.173.30:27803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/ops.php"] [unique_id "ary2m9PAdfEWqmGIkg17CQAAAiM"]
[Wed Sep 30 01:13:31.208961 2026] [security2:error] [pid 276620:tid 276816] [client 20.214.151.17:47411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/link.php"] [unique_id "ary2m9PAdfEWqmGIkg17CgAAAk0"]
[Wed Sep 30 01:13:31.242386 2026] [security2:error] [pid 276620:tid 276773] [client 202.179.95.79:53262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2m9PAdfEWqmGIkg17DgAAAiI"]
[Wed Sep 30 01:13:31.242495 2026] [security2:error] [pid 276620:tid 276773] [client 202.179.95.79:53262] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2m9PAdfEWqmGIkg17DgAAAiI"]
[Wed Sep 30 01:13:31.246722 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.247012 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.272675 2026] [security2:error] [pid 276620:tid 276801] [client 20.211.90.37:28388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/system_log.php"] [unique_id "ary2m9PAdfEWqmGIkg17EgAAAj4"]
[Wed Sep 30 01:13:31.279312 2026] [security2:error] [pid 276620:tid 276764] [client 103.189.178.93:52158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "www.bdc.igm.mybluehost.me"] [uri "/"] [unique_id "ary2m9PAdfEWqmGIkg17EwAAAhk"]
[Wed Sep 30 01:13:31.318185 2026] [security2:error] [pid 276059:tid 276221] [client 74.225.148.80:65018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2m3tqdHBwD77138fIOwAAAak"]
[Wed Sep 30 01:13:31.333913 2026] [security2:error] [pid 276059:tid 276194] [client 155.190.6.18:34796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2m3tqdHBwD77138fIPAAAAY8"]
[Wed Sep 30 01:13:31.333999 2026] [security2:error] [pid 276059:tid 276194] [client 155.190.6.18:34796] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2m3tqdHBwD77138fIPAAAAY8"]
[Wed Sep 30 01:13:31.337650 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.337924 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.357914 2026] [security2:error] [pid 276620:tid 276827] [client 20.214.145.90:26346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/robots.php"] [unique_id "ary2m9PAdfEWqmGIkg17GAAAAlg"]
[Wed Sep 30 01:13:31.380708 2026] [security2:error] [pid 276620:tid 276811] [client 20.70.173.30:3620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/tool.php"] [unique_id "ary2m9PAdfEWqmGIkg17GQAAAkg"]
[Wed Sep 30 01:13:31.381842 2026] [security2:error] [pid 276059:tid 276314] [client 13.70.4.78:39430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/cong.php"] [unique_id "ary2m3tqdHBwD77138fIPQAAAgY"]
[Wed Sep 30 01:13:31.429388 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.429652 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.449665 2026] [access_compat:error] [pid 276059:tid 276204] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:31.449961 2026] [access_compat:error] [pid 276059:tid 276204] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:31.521231 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.521544 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.532771 2026] [security2:error] [pid 276620:tid 276834] [client 20.194.30.107:1187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/biufile.php"] [unique_id "ary2m9PAdfEWqmGIkg17IQAAAl8"]
[Wed Sep 30 01:13:31.570427 2026] [security2:error] [pid 276620:tid 276874] [client 20.70.173.30:27776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2m9PAdfEWqmGIkg17IwAAAoc"]
[Wed Sep 30 01:13:31.578661 2026] [security2:error] [pid 276620:tid 276772] [client 20.213.164.196:54086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/class-ajax.php"] [unique_id "ary2m9PAdfEWqmGIkg17JQAAAiE"]
[Wed Sep 30 01:13:31.593830 2026] [security2:error] [pid 276620:tid 276775] [client 20.211.90.37:27943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/NewFile.php"] [unique_id "ary2m9PAdfEWqmGIkg17JgAAAiQ"]
[Wed Sep 30 01:13:31.612769 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.613043 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:12236] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.634783 2026] [security2:error] [pid 276620:tid 276848] [client 20.214.145.90:26585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/k.php"] [unique_id "ary2m9PAdfEWqmGIkg17KAAAAm0"]
[Wed Sep 30 01:13:31.704303 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.704587 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.706743 2026] [security2:error] [pid 276620:tid 276782] [client 20.214.151.17:47393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/lock360.php"] [unique_id "ary2m9PAdfEWqmGIkg17LwAAAis"]
[Wed Sep 30 01:13:31.737025 2026] [security2:error] [pid 276620:tid 276877] [client 13.70.4.78:45654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/bs1.php"] [unique_id "ary2m9PAdfEWqmGIkg17MQAAAoo"]
[Wed Sep 30 01:13:31.793117 2026] [security2:error] [pid 276620:tid 276885] [client 74.225.148.80:62553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary2m9PAdfEWqmGIkg17NQAAApI"]
[Wed Sep 30 01:13:31.796799 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.797105 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.800795 2026] [security2:error] [pid 276620:tid 276861] [client 20.70.173.30:33303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/blurbs.php"] [unique_id "ary2m9PAdfEWqmGIkg17NgAAAno"]
[Wed Sep 30 01:13:31.837954 2026] [security2:error] [pid 276620:tid 276809] [client 4.240.25.22:38794] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.rhodaalbert.com"] [uri "/1.php"] [unique_id "ary2m9PAdfEWqmGIkg17OQAAAkY"]
[Wed Sep 30 01:13:31.838040 2026] [security2:error] [pid 276620:tid 276809] [client 4.240.25.22:38794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/1.php"] [unique_id "ary2m9PAdfEWqmGIkg17OQAAAkY"]
[Wed Sep 30 01:13:31.886412 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.886684 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:31.910798 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:31.911250 2026] [access_compat:error] [pid 276059:tid 276215] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:31.926232 2026] [security2:error] [pid 276620:tid 276799] [client 127.0.0.1:45554] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ary2m9PAdfEWqmGIkg17OgAAAjw"]
[Wed Sep 30 01:13:31.926355 2026] [security2:error] [pid 276059:tid 276229] [client 74.7.175.178:58780] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.zef.ghd.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2m3tqdHBwD77138fIRAABsXI"]
[Wed Sep 30 01:13:31.963799 2026] [security2:error] [pid 276620:tid 276871] [client 20.219.2.60:29717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/3586%20b64.php"] [unique_id "ary2m9PAdfEWqmGIkg17QAAAAoQ"]
[Wed Sep 30 01:13:31.980115 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:31.980418 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.021795 2026] [security2:error] [pid 276620:tid 276822] [client 216.73.216.46:12236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2nNPAdfEWqmGIkg17RAAAAlM"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzQvbm9kZTAvY3B1MS9kcml2ZXIvY3B1MTY%3D
[Wed Sep 30 01:13:32.025268 2026] [security2:error] [pid 276620:tid 276886] [client 20.214.145.90:26601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/w.php"] [unique_id "ary2nNPAdfEWqmGIkg17RQAAApM"]
[Wed Sep 30 01:13:32.064703 2026] [security2:error] [pid 276059:tid 276103] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2nHtqdHBwD77138fISAABxCc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=279017&sid=f93f2b034217978af2781a2f07ad7708
[Wed Sep 30 01:13:32.064731 2026] [security2:error] [pid 276059:tid 276103] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2nHtqdHBwD77138fISAABxCc"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=279017&sid=f93f2b034217978af2781a2f07ad7708
[Wed Sep 30 01:13:32.067881 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.068143 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.122608 2026] [security2:error] [pid 276620:tid 276794] [client 20.211.90.37:28410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/t.php"] [unique_id "ary2nNPAdfEWqmGIkg17UwAAAjc"]
[Wed Sep 30 01:13:32.148287 2026] [security2:error] [pid 276620:tid 276882] [client 20.213.164.196:15949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/gm.php"] [unique_id "ary2nNPAdfEWqmGIkg17VgAAAo8"]
[Wed Sep 30 01:13:32.152879 2026] [core:error] [pid 276620:tid 276771] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:32.152896 2026] [core:error] [pid 276620:tid 276771] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:32.154520 2026] [security2:error] [pid 276620:tid 276869] [client 172.232.180.137:56065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary2nNPAdfEWqmGIkg17WgAAAoI"], referer: www.google.com
[Wed Sep 30 01:13:32.158002 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.158261 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:19000] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.252643 2026] [security2:error] [pid 276620:tid 276805] [client 20.194.30.107:17405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/red.php"] [unique_id "ary2nNPAdfEWqmGIkg17YAAAAkI"]
[Wed Sep 30 01:13:32.266082 2026] [security2:error] [pid 276620:tid 276818] [client 74.225.148.80:65300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary2nNPAdfEWqmGIkg17YwAAAk8"]
[Wed Sep 30 01:13:32.268360 2026] [security2:error] [pid 276620:tid 276845] [client 43.104.4.215:49402] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2nNPAdfEWqmGIkg17YgAAAmo"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:32.307568 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.308011 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.311422 2026] [security2:error] [pid 276620:tid 276775] [client 20.214.145.90:26560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/ccc.php"] [unique_id "ary2nNPAdfEWqmGIkg17aQAAAiQ"]
[Wed Sep 30 01:13:32.312467 2026] [security2:error] [pid 276620:tid 276835] [client 13.70.4.78:45678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ary2nNPAdfEWqmGIkg17ZAAAAmA"]
[Wed Sep 30 01:13:32.394897 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.395169 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.415336 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:32.415722 2026] [access_compat:error] [pid 276059:tid 276296] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:32.433629 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.433951 2026] [access_compat:error] [pid 276620:tid 276766] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.477349 2026] [mime:warn] [pid 276620:tid 276861] AH01602: Cannot get media parameter.
[Wed Sep 30 01:13:32.484319 2026] [security2:error] [pid 276620:tid 276792] [client 172.232.180.137:56056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "ary2nNPAdfEWqmGIkg17dwAAAjU"]
[Wed Sep 30 01:13:32.507831 2026] [security2:error] [pid 276620:tid 276884] [client 20.214.151.17:64895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-trackback.php"] [unique_id "ary2nNPAdfEWqmGIkg17eAAAApE"]
[Wed Sep 30 01:13:32.523155 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.523423 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.569220 2026] [security2:error] [pid 276620:tid 276850] [client 216.73.216.46:19000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2nNPAdfEWqmGIkg17gAAAAm8"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MjU4L25vZGUwL21lbW9yeTM2
[Wed Sep 30 01:13:32.593631 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.145.90:26562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/images.php"] [unique_id "ary2nNPAdfEWqmGIkg17gwAAAnw"]
[Wed Sep 30 01:13:32.607860 2026] [security2:error] [pid 276059:tid 276250] [client 170.231.133.228:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2nHtqdHBwD77138fIUgAAAcY"]
[Wed Sep 30 01:13:32.610092 2026] [security2:error] [pid 276620:tid 276862] [client 20.194.96.176:7248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/vpn.php"] [unique_id "ary2nNPAdfEWqmGIkg17hQAAAns"]
[Wed Sep 30 01:13:32.617162 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.617562 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.663426 2026] [security2:error] [pid 276059:tid 276220] [client 45.138.12.48:47730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.krosscorp.us"] [uri "/wp-links-opml.php"] [unique_id "ary2nHtqdHBwD77138fIUwAAAag"]
[Wed Sep 30 01:13:32.708582 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.708892 2026] [access_compat:error] [pid 276620:tid 276771] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.722005 2026] [security2:error] [pid 276620:tid 276828] [client 62.106.92.26:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2nNPAdfEWqmGIkg17kQAAAlk"]
[Wed Sep 30 01:13:32.745761 2026] [security2:error] [pid 276620:tid 276834] [client 74.225.148.80:65019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-content/themes/about.php"] [unique_id "ary2nNPAdfEWqmGIkg17lAAAAl8"]
[Wed Sep 30 01:13:32.766295 2026] [security2:error] [pid 276620:tid 276827] [client 168.100.149.188:20940] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3c1552ed3884581a3aa8639f8d84ef23.75b.css.gz"] [unique_id "ary2nNPAdfEWqmGIkg17lwACWBA"]
[Wed Sep 30 01:13:32.793156 2026] [security2:error] [pid 276620:tid 276847] [client 20.211.90.37:27934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/ee.php"] [unique_id "ary2nNPAdfEWqmGIkg17nAAAAmw"]
[Wed Sep 30 01:13:32.797149 2026] [security2:error] [pid 276620:tid 276852] [client 20.213.164.196:15975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/class-wp-site-list.php"] [unique_id "ary2nNPAdfEWqmGIkg17nQAAAnE"]
[Wed Sep 30 01:13:32.804852 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.805113 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.873651 2026] [core:error] [pid 276620:tid 276857] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:32.873672 2026] [core:error] [pid 276620:tid 276857] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:32.874261 2026] [security2:error] [pid 276620:tid 276718] [remote 74.7.227.56:58098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2nNPAdfEWqmGIkg17owACdFg"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=75
[Wed Sep 30 01:13:32.877526 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:32.877828 2026] [access_compat:error] [pid 276059:tid 276320] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:32.889210 2026] [security2:error] [pid 276620:tid 276765] [client 20.214.145.90:26328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/alls.php"] [unique_id "ary2nNPAdfEWqmGIkg17pAAAAho"]
[Wed Sep 30 01:13:32.899785 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.900234 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:32.987940 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:32.988207 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.079115 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.079394 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.148419 2026] [security2:error] [pid 276620:tid 276851] [client 103.189.178.93:52174] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "www.bdc.igm.mybluehost.me"] [uri "/en"] [unique_id "ary2ndPAdfEWqmGIkg17swAAAnA"]
[Wed Sep 30 01:13:33.152115 2026] [security2:error] [pid 276620:tid 276767] [client 20.219.2.60:30018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws.php"] [unique_id "ary2ndPAdfEWqmGIkg17tAAAAhw"]
[Wed Sep 30 01:13:33.153639 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.145.90:26587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/admin.php"] [unique_id "ary2ndPAdfEWqmGIkg17tQAAAl0"]
[Wed Sep 30 01:13:33.186334 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.186650 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.224465 2026] [security2:error] [pid 276620:tid 276724] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ndPAdfEWqmGIkg17uQACU14"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9689cc9bbdd1497269b7674da45a63a7
[Wed Sep 30 01:13:33.224493 2026] [security2:error] [pid 276620:tid 276724] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2ndPAdfEWqmGIkg17uQACU14"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=9689cc9bbdd1497269b7674da45a63a7
[Wed Sep 30 01:13:33.234965 2026] [security2:error] [pid 276059:tid 276310] [client 74.225.148.80:11014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/filemanager/dialog.php"] [unique_id "ary2nXtqdHBwD77138fIYAAAAgI"]
[Wed Sep 30 01:13:33.253784 2026] [security2:error] [pid 276620:tid 276862] [client 20.213.164.196:35830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/ttivnife.php"] [unique_id "ary2ndPAdfEWqmGIkg17uwAAAns"]
[Wed Sep 30 01:13:33.274077 2026] [security2:error] [pid 276620:tid 276760] [client 106.214.2.47:18053] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ndPAdfEWqmGIkg17vQAAAhU"]
[Wed Sep 30 01:13:33.274229 2026] [security2:error] [pid 276620:tid 276760] [client 106.214.2.47:18053] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2ndPAdfEWqmGIkg17vQAAAhU"]
[Wed Sep 30 01:13:33.278830 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.279085 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.294725 2026] [security2:error] [pid 276059:tid 276256] [client 103.211.18.63:49723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2nXtqdHBwD77138fIYQAAAcw"]
[Wed Sep 30 01:13:33.294837 2026] [security2:error] [pid 276059:tid 276256] [client 103.211.18.63:49723] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2nXtqdHBwD77138fIYQAAAcw"]
[Wed Sep 30 01:13:33.309469 2026] [security2:error] [pid 276059:tid 276243] [client 20.70.173.30:3839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/az.php"] [unique_id "ary2nXtqdHBwD77138fIYwAAAb8"]
[Wed Sep 30 01:13:33.351681 2026] [security2:error] [pid 276059:tid 276308] [client 20.211.90.37:27992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/2.php"] [unique_id "ary2nXtqdHBwD77138fIZQAAAgA"]
[Wed Sep 30 01:13:33.367884 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.368144 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.397859 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:33.398138 2026] [access_compat:error] [pid 276059:tid 276282] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:33.418216 2026] [security2:error] [pid 276620:tid 276809] [client 20.214.145.90:26578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/geck.php"] [unique_id "ary2ndPAdfEWqmGIkg17wAAAAkY"]
[Wed Sep 30 01:13:33.444489 2026] [security2:error] [pid 276620:tid 276816] [client 20.31.129.34:57814] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.itware.org"] [uri "/___proxy_subdomain_webdisk/.env.old"] [unique_id "ary2ndPAdfEWqmGIkg17xAAAAk0"]
[Wed Sep 30 01:13:33.446422 2026] [security2:error] [pid 276059:tid 276231] [client 20.31.129.34:57780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.itware.org"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "ary2nXtqdHBwD77138fIaQAAAbM"]
[Wed Sep 30 01:13:33.451477 2026] [security2:error] [pid 276059:tid 276201] [client 20.31.129.34:57802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.itware.org"] [uri "/___proxy_subdomain_webdisk/.env.swp"] [unique_id "ary2nXtqdHBwD77138fIawAAAZY"]
[Wed Sep 30 01:13:33.453174 2026] [security2:error] [pid 276620:tid 276854] [client 20.31.129.34:57794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.itware.org"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "ary2ndPAdfEWqmGIkg17zAAAAnM"]
[Wed Sep 30 01:13:33.454428 2026] [security2:error] [pid 276620:tid 276872] [client 20.31.129.34:57856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.itware.org"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "ary2ndPAdfEWqmGIkg17zwAAAoU"]
[Wed Sep 30 01:13:33.457510 2026] [security2:error] [pid 276620:tid 276863] [client 168.107.70.193:61798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "mail.att.xqt.mybluehost.me"] [uri "/"] [unique_id "ary2ndPAdfEWqmGIkg171QAAAnw"]
[Wed Sep 30 01:13:33.458106 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.458386 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.472265 2026] [core:error] [pid 276620:tid 276790] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.472281 2026] [core:error] [pid 276620:tid 276790] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.472954 2026] [core:error] [pid 276620:tid 276823] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.472970 2026] [core:error] [pid 276620:tid 276823] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.473472 2026] [core:error] [pid 276620:tid 276773] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.473481 2026] [core:error] [pid 276620:tid 276773] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.474044 2026] [core:error] [pid 276620:tid 276829] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.474057 2026] [core:error] [pid 276620:tid 276829] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.475219 2026] [core:error] [pid 276620:tid 276785] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.475251 2026] [core:error] [pid 276620:tid 276785] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.475894 2026] [core:error] [pid 276620:tid 276852] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.475906 2026] [core:error] [pid 276620:tid 276852] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.476344 2026] [core:error] [pid 276620:tid 276847] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.476356 2026] [core:error] [pid 276620:tid 276847] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.479595 2026] [core:error] [pid 276620:tid 276835] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.479606 2026] [core:error] [pid 276620:tid 276835] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.479909 2026] [core:error] [pid 276620:tid 276775] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.479921 2026] [core:error] [pid 276620:tid 276775] [client 20.31.129.34:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:33.545354 2026] [security2:error] [pid 276620:tid 276802] [client 13.70.4.78:39455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/termps.php"] [unique_id "ary2ndPAdfEWqmGIkg176gAAAj8"]
[Wed Sep 30 01:13:33.551324 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.551608 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.645147 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.645564 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.725616 2026] [security2:error] [pid 276059:tid 276233] [client 20.214.151.17:64871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/.well-known/index.php"] [unique_id "ary2nXtqdHBwD77138fIcQAAAbU"]
[Wed Sep 30 01:13:33.733033 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.733318 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.760705 2026] [security2:error] [pid 276059:tid 276267] [client 74.225.148.80:11012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/index/function.php"] [unique_id "ary2nXtqdHBwD77138fIcgAAAdc"]
[Wed Sep 30 01:13:33.775704 2026] [security2:error] [pid 276620:tid 276864] [client 20.214.145.90:26565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/goods.php"] [unique_id "ary2ndPAdfEWqmGIkg17-QAAAn0"]
[Wed Sep 30 01:13:33.783318 2026] [security2:error] [pid 276059:tid 276205] [client 20.194.30.107:17377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/classwithtostring.php"] [unique_id "ary2nXtqdHBwD77138fIcwAAAZo"]
[Wed Sep 30 01:13:33.815643 2026] [security2:error] [pid 276620:tid 276816] [client 20.211.90.37:27930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/gmo.php"] [unique_id "ary2ndPAdfEWqmGIkg17-wAAAk0"]
[Wed Sep 30 01:13:33.823770 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.824077 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.886195 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:33.886475 2026] [access_compat:error] [pid 276059:tid 276294] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:33.894219 2026] [security2:error] [pid 276059:tid 276226] [client 13.70.4.78:45669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/brand.php"] [unique_id "ary2nXtqdHBwD77138fIeAAAAa4"]
[Wed Sep 30 01:13:33.914361 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:33.914622 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:33.998322 2026] [security2:error] [pid 276059:tid 276221] [client 20.213.164.196:15967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/admin.php/2P.php"] [unique_id "ary2nXtqdHBwD77138fIfAAAAak"]
[Wed Sep 30 01:13:34.006788 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.007079 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.037610 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.96.176:7661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/alfa.php"] [unique_id "ary2nntqdHBwD77138fIfQAAAZ0"]
[Wed Sep 30 01:13:34.097639 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.097930 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.186279 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.186555 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.202544 2026] [security2:error] [pid 276620:tid 276765] [client 20.214.145.90:26323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/dejavu.php"] [unique_id "ary2ntPAdfEWqmGIkg18EQAAAho"]
[Wed Sep 30 01:13:34.228785 2026] [security2:error] [pid 276620:tid 276794] [client 20.211.90.37:28381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/6.php"] [unique_id "ary2ntPAdfEWqmGIkg18FAAAAjc"]
[Wed Sep 30 01:13:34.247383 2026] [security2:error] [pid 276620:tid 276877] [client 13.70.4.78:37921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/atomlib.php"] [unique_id "ary2ntPAdfEWqmGIkg18FQAAAoo"]
[Wed Sep 30 01:13:34.255741 2026] [security2:error] [pid 276620:tid 276818] [client 74.225.148.80:65296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary2ntPAdfEWqmGIkg18FgAAAk8"]
[Wed Sep 30 01:13:34.263149 2026] [security2:error] [pid 276620:tid 276803] [client 20.214.151.17:64464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary2ntPAdfEWqmGIkg18FwAAAkA"]
[Wed Sep 30 01:13:34.279524 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.279858 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.369852 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.370120 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.409569 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:34.409850 2026] [access_compat:error] [pid 276059:tid 276293] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:34.461145 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.461419 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.511513 2026] [security2:error] [pid 276620:tid 276781] [client 177.37.237.48:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2ntPAdfEWqmGIkg18IwAAAio"]
[Wed Sep 30 01:13:34.519334 2026] [access_compat:error] [pid 276620:tid 276847] [client 47.79.13.168:47498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:34.519613 2026] [access_compat:error] [pid 276620:tid 276847] [client 47.79.13.168:47498] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:34.534606 2026] [security2:error] [pid 276620:tid 276761] [client 20.70.173.30:19157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/mac.php"] [unique_id "ary2ntPAdfEWqmGIkg18JgAAAhY"]
[Wed Sep 30 01:13:34.535294 2026] [security2:error] [pid 276059:tid 276247] [client 20.213.164.196:35780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/a.php"] [unique_id "ary2nntqdHBwD77138fIiQAAAcM"]
[Wed Sep 30 01:13:34.553296 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.553561 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.595606 2026] [security2:error] [pid 276620:tid 276885] [client 13.70.4.78:37901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/product.php"] [unique_id "ary2ntPAdfEWqmGIkg18KwAAApI"]
[Wed Sep 30 01:13:34.603433 2026] [security2:error] [pid 276059:tid 276250] [client 20.214.145.90:26606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/h02ugyh.php"] [unique_id "ary2nntqdHBwD77138fIjQAAAcY"]
[Wed Sep 30 01:13:34.637722 2026] [security2:error] [pid 276620:tid 276831] [client 20.214.151.17:64890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2ntPAdfEWqmGIkg18LgAAAlw"]
[Wed Sep 30 01:13:34.643931 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.644203 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.676267 2026] [security2:error] [pid 276620:tid 276798] [client 20.70.173.30:38807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/222.php"] [unique_id "ary2ntPAdfEWqmGIkg18LwAAAjs"]
[Wed Sep 30 01:13:34.737545 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.737949 2026] [access_compat:error] [pid 276620:tid 276867] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.743100 2026] [security2:error] [pid 276059:tid 276302] [client 20.219.2.60:29893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/bmi.php"] [unique_id "ary2nntqdHBwD77138fIjgAAAfo"]
[Wed Sep 30 01:13:34.785381 2026] [security2:error] [pid 276620:tid 276868] [client 168.100.149.141:29552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ec69115d814e600da55d6ae54f6d43b4.4fe.css.gz"] [unique_id "ary2ntPAdfEWqmGIkg18NgACgTc"]
[Wed Sep 30 01:13:34.825277 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.825783 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.827275 2026] [security2:error] [pid 276620:tid 276864] [client 74.225.148.80:11030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary2ntPAdfEWqmGIkg18PwAAAn0"]
[Wed Sep 30 01:13:34.859070 2026] [security2:error] [pid 276620:tid 276872] [client 20.211.90.37:27916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/12.php"] [unique_id "ary2ntPAdfEWqmGIkg18QAAAAoU"]
[Wed Sep 30 01:13:34.891144 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:34.891596 2026] [access_compat:error] [pid 276059:tid 276245] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:34.909379 2026] [security2:error] [pid 276059:tid 276217] [client 20.213.164.196:35831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/cord.php"] [unique_id "ary2nntqdHBwD77138fIkgAAAaU"]
[Wed Sep 30 01:13:34.917851 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:34.918110 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:34.939344 2026] [security2:error] [pid 276620:tid 276788] [client 20.214.145.90:26316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/155.php"] [unique_id "ary2ntPAdfEWqmGIkg18QwAAAjE"]
[Wed Sep 30 01:13:34.958473 2026] [security2:error] [pid 276620:tid 276852] [client 13.70.4.78:38240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/function.php"] [unique_id "ary2ntPAdfEWqmGIkg18RwAAAnE"]
[Wed Sep 30 01:13:34.963974 2026] [security2:error] [pid 276059:tid 276195] [client 179.105.122.52:53713] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2nntqdHBwD77138fIkAAAAZA"]
[Wed Sep 30 01:13:34.964118 2026] [security2:error] [pid 276059:tid 276195] [client 179.105.122.52:53713] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2nntqdHBwD77138fIkAAAAZA"]
[Wed Sep 30 01:13:34.967991 2026] [security2:error] [pid 276620:tid 276801] [client 37.41.16.35:54909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ntPAdfEWqmGIkg18SQAAAj4"]
[Wed Sep 30 01:13:34.968092 2026] [security2:error] [pid 276620:tid 276801] [client 37.41.16.35:54909] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ntPAdfEWqmGIkg18SQAAAj4"]
[Wed Sep 30 01:13:34.973756 2026] [security2:error] [pid 276620:tid 276874] [client 206.232.29.180:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2ntPAdfEWqmGIkg18SgAAAoc"]
[Wed Sep 30 01:13:35.009623 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.009915 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.097641 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.097923 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.113917 2026] [security2:error] [pid 276620:tid 276861] [client 103.241.204.139:51745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2n9PAdfEWqmGIkg18UwAAAno"]
[Wed Sep 30 01:13:35.113991 2026] [security2:error] [pid 276620:tid 276861] [client 103.241.204.139:51745] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2n9PAdfEWqmGIkg18UwAAAno"]
[Wed Sep 30 01:13:35.190309 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.190590 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.242146 2026] [security2:error] [pid 276620:tid 276848] [client 20.194.30.107:1803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/simple.php"] [unique_id "ary2n9PAdfEWqmGIkg18WQAAAm0"]
[Wed Sep 30 01:13:35.249697 2026] [security2:error] [pid 276059:tid 276239] [client 20.70.173.30:19138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/or.php"] [unique_id "ary2n3tqdHBwD77138fImQAAAbs"]
[Wed Sep 30 01:13:35.254291 2026] [security2:error] [pid 276620:tid 276761] [client 20.214.145.90:26604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/ops.php"] [unique_id "ary2n9PAdfEWqmGIkg18WwAAAhY"]
[Wed Sep 30 01:13:35.259756 2026] [security2:error] [pid 276620:tid 276787] [client 20.70.173.30:33404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/min.php"] [unique_id "ary2n9PAdfEWqmGIkg18XAAAAjA"]
[Wed Sep 30 01:13:35.283800 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.284249 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.332785 2026] [security2:error] [pid 276620:tid 276841] [client 74.225.148.80:65328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary2n9PAdfEWqmGIkg18XwAAAmY"]
[Wed Sep 30 01:13:35.370751 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.371018 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.371898 2026] [security2:error] [pid 276620:tid 276778] [client 20.211.90.37:28354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/0.php"] [unique_id "ary2n9PAdfEWqmGIkg18YwAAAic"]
[Wed Sep 30 01:13:35.415701 2026] [core:error] [pid 276059:tid 276243] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:35.431266 2026] [security2:error] [pid 276620:tid 276786] [client 20.213.164.196:54665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/anom.php"] [unique_id "ary2n9PAdfEWqmGIkg18awAAAi8"]
[Wed Sep 30 01:13:35.464045 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.464303 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.514847 2026] [security2:error] [pid 276620:tid 276804] [client 20.214.145.90:26331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/mac.php"] [unique_id "ary2n9PAdfEWqmGIkg18cAAAAkE"]
[Wed Sep 30 01:13:35.545302 2026] [security2:error] [pid 276620:tid 276882] [client 20.214.151.17:64476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2n9PAdfEWqmGIkg18cQAAAo8"]
[Wed Sep 30 01:13:35.553284 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.553566 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.582104 2026] [security2:error] [pid 276620:tid 276813] [client 13.70.4.78:45636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/0x.php"] [unique_id "ary2n9PAdfEWqmGIkg18eAAAAko"]
[Wed Sep 30 01:13:35.643196 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.643475 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.662689 2026] [security2:error] [pid 276620:tid 276777] [client 31.189.214.146:59872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2n9PAdfEWqmGIkg18fwAAAiY"]
[Wed Sep 30 01:13:35.663246 2026] [security2:error] [pid 276620:tid 276777] [client 31.189.214.146:59872] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2n9PAdfEWqmGIkg18fwAAAiY"]
[Wed Sep 30 01:13:35.722133 2026] [security2:error] [pid 276059:tid 276289] [client 20.219.2.60:30052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/bypltspd.php"] [unique_id "ary2n3tqdHBwD77138fIpQAAAe0"]
[Wed Sep 30 01:13:35.734654 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.734919 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.777568 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:35.777864 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:35.807920 2026] [security2:error] [pid 276059:tid 276218] [client 102.88.113.62:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/"] [unique_id "ary2n3tqdHBwD77138fIqQAAAaY"], referer: https://www.google.com/
[Wed Sep 30 01:13:35.819870 2026] [security2:error] [pid 276059:tid 276224] [client 74.225.148.80:11070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/about/function.php"] [unique_id "ary2n3tqdHBwD77138fIqgAAAaw"]
[Wed Sep 30 01:13:35.827926 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.828236 2026] [access_compat:error] [pid 276620:tid 276878] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.856971 2026] [security2:error] [pid 276620:tid 276803] [client 20.214.145.90:26605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/makeasmtp.php"] [unique_id "ary2n9PAdfEWqmGIkg18hwAAAkA"]
[Wed Sep 30 01:13:35.873342 2026] [security2:error] [pid 276620:tid 276827] [client 20.211.90.37:28364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary2n9PAdfEWqmGIkg18iQAAAlg"]
[Wed Sep 30 01:13:35.916209 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:35.916482 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:35.946523 2026] [security2:error] [pid 276059:tid 276213] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2n3tqdHBwD77138fIsQAAAaE"]
[Wed Sep 30 01:13:35.947614 2026] [security2:error] [pid 276620:tid 276869] [client 190.124.20.165:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2n9PAdfEWqmGIkg18jQAAAoI"]
[Wed Sep 30 01:13:36.008566 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.008846 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.099147 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.099485 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.111466 2026] [security2:error] [pid 276059:tid 276234] [client 20.194.96.176:55943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/pJPoKA.php"] [unique_id "ary2oHtqdHBwD77138fItQAAAbY"]
[Wed Sep 30 01:13:36.112676 2026] [security2:error] [pid 276059:tid 276210] [client 20.214.151.17:64807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary2oHtqdHBwD77138fItgAAAZ4"]
[Wed Sep 30 01:13:36.137442 2026] [security2:error] [pid 276059:tid 276226] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oHtqdHBwD77138fIuQAAAa4"]
[Wed Sep 30 01:13:36.144112 2026] [security2:error] [pid 276059:tid 276223] [client 13.70.4.78:45638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/index.php"] [unique_id "ary2oHtqdHBwD77138fIuwAAAas"]
[Wed Sep 30 01:13:36.157921 2026] [security2:error] [pid 276059:tid 276253] [client 20.214.145.90:26574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/pucci.php"] [unique_id "ary2oHtqdHBwD77138fIvQAAAck"]
[Wed Sep 30 01:13:36.189084 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.189356 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.281940 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.282223 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.282534 2026] [security2:error] [pid 276059:tid 276208] [client 20.213.164.196:35791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/plugins.php"] [unique_id "ary2oHtqdHBwD77138fIwQAAAZ0"]
[Wed Sep 30 01:13:36.288060 2026] [security2:error] [pid 276620:tid 276767] [client 74.225.148.80:10863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary2oNPAdfEWqmGIkg18oAAAAhw"]
[Wed Sep 30 01:13:36.292226 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:36.292477 2026] [access_compat:error] [pid 276059:tid 276194] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:36.295980 2026] [security2:error] [pid 276620:tid 276822] [client 172.232.180.137:58235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-plain.php"] [unique_id "ary2oNPAdfEWqmGIkg18oQAAAlM"], referer: www.google.com
[Wed Sep 30 01:13:36.298671 2026] [security2:error] [pid 276620:tid 276764] [client 172.232.180.137:58236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary2oNPAdfEWqmGIkg18owAAAhk"], referer: www.google.com
[Wed Sep 30 01:13:36.328307 2026] [security2:error] [pid 276059:tid 276311] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oHtqdHBwD77138fIxAAAAgM"]
[Wed Sep 30 01:13:36.340867 2026] [security2:error] [pid 276620:tid 276886] [client 20.211.90.37:27937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary2oNPAdfEWqmGIkg18pAAAApM"]
[Wed Sep 30 01:13:36.371943 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.372200 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.414142 2026] [security2:error] [pid 276620:tid 276830] [client 43.104.4.215:49402] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary2oNPAdfEWqmGIkg18qAAAAls"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:36.442696 2026] [security2:error] [pid 276059:tid 276216] [client 20.194.30.107:62643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/sxxb.php"] [unique_id "ary2oHtqdHBwD77138fIyQAAAaQ"]
[Wed Sep 30 01:13:36.464202 2026] [security2:error] [pid 276620:tid 276809] [client 20.214.151.17:64859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary2oNPAdfEWqmGIkg18qwAAAkY"]
[Wed Sep 30 01:13:36.465361 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.465626 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.476412 2026] [security2:error] [pid 276620:tid 276831] [client 13.70.4.78:37920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "ary2oNPAdfEWqmGIkg18rgAAAlw"]
[Wed Sep 30 01:13:36.516223 2026] [security2:error] [pid 276059:tid 276263] [client 20.214.145.90:26622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/puc.php"] [unique_id "ary2oHtqdHBwD77138fIywAAAdM"]
[Wed Sep 30 01:13:36.518603 2026] [security2:error] [pid 276059:tid 276293] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oHtqdHBwD77138fIzAAAAfE"]
[Wed Sep 30 01:13:36.549648 2026] [security2:error] [pid 276620:tid 276692] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2oNPAdfEWqmGIkg18swACMz4"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=8a2f7ac38bd8917fd0bd6feba439fc39
[Wed Sep 30 01:13:36.549672 2026] [security2:error] [pid 276620:tid 276692] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2oNPAdfEWqmGIkg18swACMz4"], referer: https://uxa.hoh.mybluehost.me/index.php?sid=8a2f7ac38bd8917fd0bd6feba439fc39
[Wed Sep 30 01:13:36.553667 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.553966 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.613733 2026] [core:error] [pid 276620:tid 276772] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:36.613760 2026] [core:error] [pid 276620:tid 276772] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:36.647043 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.647342 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.650639 2026] [security2:error] [pid 276620:tid 276884] [client 122.177.240.90:15047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2oNPAdfEWqmGIkg18uQAAApE"]
[Wed Sep 30 01:13:36.650722 2026] [security2:error] [pid 276620:tid 276884] [client 122.177.240.90:15047] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2oNPAdfEWqmGIkg18uQAAApE"]
[Wed Sep 30 01:13:36.710214 2026] [security2:error] [pid 276059:tid 276275] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oHtqdHBwD77138fIzwAAAd8"]
[Wed Sep 30 01:13:36.737672 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.737976 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:5262] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.746258 2026] [security2:error] [pid 276620:tid 276826] [client 74.225.148.80:11261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/admin/function.php"] [unique_id "ary2oNPAdfEWqmGIkg18vgAAAlc"]
[Wed Sep 30 01:13:36.763232 2026] [security2:error] [pid 276620:tid 276855] [client 168.100.149.170:51690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/2ef5ff5250bbfd953acc150d90cf5666.2055d.css.gz"] [unique_id "ary2oNPAdfEWqmGIkg18wQACdGc"]
[Wed Sep 30 01:13:36.776312 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:36.776587 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:36.802400 2026] [security2:error] [pid 276620:tid 276805] [client 13.70.4.78:37898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/classwithtostring.php"] [unique_id "ary2oNPAdfEWqmGIkg18wwAAAkI"]
[Wed Sep 30 01:13:36.824949 2026] [security2:error] [pid 276620:tid 276842] [client 20.214.151.17:47403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary2oNPAdfEWqmGIkg18xQAAAmc"]
[Wed Sep 30 01:13:36.831910 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.832317 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.852118 2026] [security2:error] [pid 276620:tid 276785] [client 20.211.90.37:28365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/02.php"] [unique_id "ary2oNPAdfEWqmGIkg18xgAAAi4"]
[Wed Sep 30 01:13:36.861533 2026] [security2:error] [pid 276620:tid 276803] [client 20.214.145.90:26579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/8.php"] [unique_id "ary2oNPAdfEWqmGIkg18xwAAAkA"]
[Wed Sep 30 01:13:36.901550 2026] [security2:error] [pid 276059:tid 276261] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oHtqdHBwD77138fI1AAAAdE"]
[Wed Sep 30 01:13:36.920064 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:36.920335 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:36.996275 2026] [security2:error] [pid 276620:tid 276836] [client 20.219.2.60:29899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/shell.php"] [unique_id "ary2oNPAdfEWqmGIkg18zQAAAmE"]
[Wed Sep 30 01:13:37.011122 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.011397 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.054057 2026] [security2:error] [pid 276620:tid 276776] [client 20.213.164.196:15953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/groud3.php"] [unique_id "ary2odPAdfEWqmGIkg180gAAAiU"]
[Wed Sep 30 01:13:37.093070 2026] [security2:error] [pid 276059:tid 276195] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oXtqdHBwD77138fI1wAAAZA"]
[Wed Sep 30 01:13:37.094676 2026] [access_compat:error] [pid 276620:tid 276835] [client 47.79.13.28:39612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:37.094933 2026] [access_compat:error] [pid 276620:tid 276835] [client 47.79.13.28:39612] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:37.102067 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.102351 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.141346 2026] [security2:error] [pid 276620:tid 276857] [client 216.73.216.46:5262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2odPAdfEWqmGIkg182QAAAnY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTUvbm9kZTAvbWVtb3J5MTc4
[Wed Sep 30 01:13:37.161270 2026] [security2:error] [pid 276059:tid 276249] [client 13.70.4.78:37927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/dropdown.php"] [unique_id "ary2oXtqdHBwD77138fI2gAAAcU"]
[Wed Sep 30 01:13:37.193040 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.193297 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.197424 2026] [security2:error] [pid 276620:tid 276822] [client 20.211.90.37:28374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/go.php"] [unique_id "ary2odPAdfEWqmGIkg184AAAAlM"]
[Wed Sep 30 01:13:37.198154 2026] [security2:error] [pid 276620:tid 276764] [client 20.214.145.90:26305] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.hannahjune.michellemattar.com"] [uri "/1.php"] [unique_id "ary2odPAdfEWqmGIkg184QAAAhk"]
[Wed Sep 30 01:13:37.198251 2026] [security2:error] [pid 276620:tid 276764] [client 20.214.145.90:26305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/1.php"] [unique_id "ary2odPAdfEWqmGIkg184QAAAhk"]
[Wed Sep 30 01:13:37.218415 2026] [security2:error] [pid 276620:tid 276846] [client 74.225.148.80:11209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/9.php"] [unique_id "ary2odPAdfEWqmGIkg184gAAAms"]
[Wed Sep 30 01:13:37.237657 2026] [security2:error] [pid 276620:tid 276768] [client 20.214.151.17:64457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/filemanager/dialog.php"] [unique_id "ary2odPAdfEWqmGIkg185AAAAh0"]
[Wed Sep 30 01:13:37.264582 2026] [security2:error] [pid 276620:tid 276797] [client 182.75.216.230:64894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2odPAdfEWqmGIkg185gAAAjo"]
[Wed Sep 30 01:13:37.264745 2026] [security2:error] [pid 276620:tid 276797] [client 182.75.216.230:64894] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2odPAdfEWqmGIkg185gAAAjo"]
[Wed Sep 30 01:13:37.283398 2026] [security2:error] [pid 276620:tid 276850] [client 20.70.173.30:27781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2odPAdfEWqmGIkg186AAAAm8"]
[Wed Sep 30 01:13:37.284075 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.284363 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.284901 2026] [security2:error] [pid 276059:tid 276259] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oXtqdHBwD77138fI3QAAAc8"]
[Wed Sep 30 01:13:37.316844 2026] [security2:error] [pid 276620:tid 276809] [client 20.70.173.30:3629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jadets.com"] [uri "/133.php"] [unique_id "ary2odPAdfEWqmGIkg186gAAAkY"]
[Wed Sep 30 01:13:37.374632 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.374908 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.465906 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.466169 2026] [access_compat:error] [pid 276620:tid 276856] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.474652 2026] [security2:error] [pid 276620:tid 276802] [client 20.214.145.90:26582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/admin.php"] [unique_id "ary2odPAdfEWqmGIkg188AAAAj8"]
[Wed Sep 30 01:13:37.476022 2026] [security2:error] [pid 276059:tid 276243] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oXtqdHBwD77138fI4AAAAb8"]
[Wed Sep 30 01:13:37.557796 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.558110 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.587305 2026] [security2:error] [pid 276620:tid 276874] [client 20.211.90.37:27952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/ee.php"] [unique_id "ary2odPAdfEWqmGIkg18-gAAAoc"]
[Wed Sep 30 01:13:37.589434 2026] [security2:error] [pid 276620:tid 276779] [client 13.70.4.78:37924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/moon.php"] [unique_id "ary2odPAdfEWqmGIkg18_AAAAig"]
[Wed Sep 30 01:13:37.600089 2026] [security2:error] [pid 276059:tid 276295] [client 20.70.173.30:25973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/100.php"] [unique_id "ary2oXtqdHBwD77138fI5QAAAfM"]
[Wed Sep 30 01:13:37.609138 2026] [security2:error] [pid 276059:tid 276313] [client 20.214.151.17:47369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/index/function.php"] [unique_id "ary2oXtqdHBwD77138fI5gAAAgU"]
[Wed Sep 30 01:13:37.638725 2026] [security2:error] [pid 276620:tid 276877] [client 20.213.164.196:15977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/gaxby.php"] [unique_id "ary2odPAdfEWqmGIkg19AgAAAoo"]
[Wed Sep 30 01:13:37.657320 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.657891 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.676628 2026] [security2:error] [pid 276059:tid 276299] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oXtqdHBwD77138fI5wAAAfc"]
[Wed Sep 30 01:13:37.682414 2026] [security2:error] [pid 276620:tid 276726] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2odPAdfEWqmGIkg19BQACZ2A"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D91696
[Wed Sep 30 01:13:37.685754 2026] [security2:error] [pid 276620:tid 276794] [client 74.225.148.80:10835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary2odPAdfEWqmGIkg19BgAAAjc"]
[Wed Sep 30 01:13:37.739305 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:37.739608 2026] [access_compat:error] [pid 276059:tid 276300] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:37.739908 2026] [security2:error] [pid 276059:tid 276289] [client 20.214.145.90:26599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/edit.php"] [unique_id "ary2oXtqdHBwD77138fI6wAAAe0"]
[Wed Sep 30 01:13:37.791445 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.791765 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.831805 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.832074 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.834245 2026] [security2:error] [pid 276059:tid 276201] [client 172.232.180.137:49173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ary2oXtqdHBwD77138fI7gAAAZY"], referer: www.google.com
[Wed Sep 30 01:13:37.867572 2026] [security2:error] [pid 276059:tid 276236] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2oXtqdHBwD77138fI8QAAAbg"]
[Wed Sep 30 01:13:37.904110 2026] [security2:error] [pid 276620:tid 276778] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2odPAdfEWqmGIkg19FgAAAic"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:37.922174 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:37.922513 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:37.935792 2026] [security2:error] [pid 276620:tid 276764] [client 13.70.4.78:45639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/autoload_classmap.php"] [unique_id "ary2odPAdfEWqmGIkg19GQAAAhk"]
[Wed Sep 30 01:13:37.948577 2026] [security2:error] [pid 276059:tid 276199] [client 20.211.90.37:28384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/an.php"] [unique_id "ary2oXtqdHBwD77138fI9AAAAZQ"]
[Wed Sep 30 01:13:38.016717 2026] [security2:error] [pid 276620:tid 276772] [client 49.37.102.248:65530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19JAAAAiE"]
[Wed Sep 30 01:13:38.016854 2026] [security2:error] [pid 276620:tid 276772] [client 49.37.102.248:65530] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19JAAAAiE"]
[Wed Sep 30 01:13:38.018969 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.019337 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.034714 2026] [security2:error] [pid 276620:tid 276831] [client 20.214.145.90:26589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/inputs.php"] [unique_id "ary2otPAdfEWqmGIkg19JQAAAlw"]
[Wed Sep 30 01:13:38.053852 2026] [security2:error] [pid 276620:tid 276771] [client 20.214.151.17:64777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary2otPAdfEWqmGIkg19JgAAAiA"]
[Wed Sep 30 01:13:38.059855 2026] [security2:error] [pid 276059:tid 276307] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2ontqdHBwD77138fI9QAAAf8"]
[Wed Sep 30 01:13:38.066665 2026] [security2:error] [pid 276059:tid 276316] [client 4.240.25.22:43778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/pfm.php"] [unique_id "ary2ontqdHBwD77138fI9gAAAgg"]
[Wed Sep 30 01:13:38.104572 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.104902 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.160137 2026] [security2:error] [pid 276620:tid 276851] [client 74.225.148.80:11207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/.well-known/log.php"] [unique_id "ary2otPAdfEWqmGIkg19LAAAAnA"]
[Wed Sep 30 01:13:38.196875 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.197184 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.222439 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:38.222781 2026] [access_compat:error] [pid 276059:tid 276210] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:38.251314 2026] [security2:error] [pid 276059:tid 276252] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2ontqdHBwD77138fI_AAAAcg"]
[Wed Sep 30 01:13:38.281735 2026] [security2:error] [pid 276620:tid 276783] [client 223.181.60.167:18214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19MwAAAiw"]
[Wed Sep 30 01:13:38.283034 2026] [security2:error] [pid 276620:tid 276783] [client 223.181.60.167:18214] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19MwAAAiw"]
[Wed Sep 30 01:13:38.288770 2026] [security2:error] [pid 276059:tid 276223] [client 13.70.4.78:37916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/default.php"] [unique_id "ary2ontqdHBwD77138fI_QAAAas"]
[Wed Sep 30 01:13:38.291136 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.291679 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.346422 2026] [security2:error] [pid 276620:tid 276860] [client 20.214.145.90:26337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/classwithtostring.php"] [unique_id "ary2otPAdfEWqmGIkg19OgAAAnk"]
[Wed Sep 30 01:13:38.350804 2026] [security2:error] [pid 276059:tid 276254] [client 20.213.164.196:35800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/dh9u7.php"] [unique_id "ary2ontqdHBwD77138fJAAAAAco"]
[Wed Sep 30 01:13:38.376424 2026] [security2:error] [pid 276059:tid 276267] [client 20.219.2.60:29914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-links-opml.php"] [unique_id "ary2ontqdHBwD77138fJBQAAAdc"]
[Wed Sep 30 01:13:38.376858 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.377139 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.400721 2026] [security2:error] [pid 276620:tid 276839] [client 49.43.163.212:58658] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19NgAAAmQ"]
[Wed Sep 30 01:13:38.400869 2026] [security2:error] [pid 276620:tid 276839] [client 49.43.163.212:58658] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19NgAAAmQ"]
[Wed Sep 30 01:13:38.426928 2026] [core:error] [pid 276059:tid 276318] [client 212.156.70.154:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:38.441604 2026] [security2:error] [pid 276620:tid 276775] [client 20.211.90.37:28379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp.php"] [unique_id "ary2otPAdfEWqmGIkg19PwAAAiQ"]
[Wed Sep 30 01:13:38.442721 2026] [security2:error] [pid 276059:tid 276288] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2ontqdHBwD77138fJCQAAAew"]
[Wed Sep 30 01:13:38.460375 2026] [security2:error] [pid 276059:tid 276208] [client 20.214.151.17:46780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary2ontqdHBwD77138fJCgAAAZ0"]
[Wed Sep 30 01:13:38.469458 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.469737 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.559995 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.560255 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.617778 2026] [security2:error] [pid 276620:tid 276817] [client 172.232.180.137:49185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "ary2otPAdfEWqmGIkg19RgAAAk4"]
[Wed Sep 30 01:13:38.632512 2026] [security2:error] [pid 276059:tid 276214] [client 20.194.30.107:23557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/chosen.php"] [unique_id "ary2ontqdHBwD77138fJDwAAAaI"]
[Wed Sep 30 01:13:38.635297 2026] [security2:error] [pid 276059:tid 276263] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2ontqdHBwD77138fJEAAAAdM"]
[Wed Sep 30 01:13:38.635725 2026] [security2:error] [pid 276620:tid 276871] [client 74.225.148.80:11016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/class.php"] [unique_id "ary2otPAdfEWqmGIkg19RwAAAoQ"]
[Wed Sep 30 01:13:38.648605 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.648879 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.666744 2026] [security2:error] [pid 276620:tid 276778] [client 20.214.145.90:26581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/adminfuns.php"] [unique_id "ary2otPAdfEWqmGIkg19SgAAAic"]
[Wed Sep 30 01:13:38.725452 2026] [security2:error] [pid 276620:tid 276752] [remote 57.141.14.84:36242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary2otPAdfEWqmGIkg19SwACMHo"]
[Wed Sep 30 01:13:38.741354 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:38.741616 2026] [access_compat:error] [pid 276059:tid 276280] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:38.742011 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.742284 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.765095 2026] [security2:error] [pid 276059:tid 276268] [client 13.70.4.78:38236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ary2ontqdHBwD77138fJEwAAAdg"]
[Wed Sep 30 01:13:38.770873 2026] [security2:error] [pid 276620:tid 276803] [client 168.100.149.80:19800] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7984fd17e6a9f7717898d6a4af6fe312.699.css.gz"] [unique_id "ary2otPAdfEWqmGIkg19TgACQDE"]
[Wed Sep 30 01:13:38.800230 2026] [security2:error] [pid 276059:tid 276232] [client 20.214.151.17:47420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary2ontqdHBwD77138fJFQAAAbQ"]
[Wed Sep 30 01:13:38.828167 2026] [security2:error] [pid 276059:tid 276312] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2ontqdHBwD77138fJFgAAAgQ"]
[Wed Sep 30 01:13:38.830703 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.831190 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.835845 2026] [autoindex:error] [pid 276620:tid 276825] [client 20.194.96.176:0] AH01276: Cannot serve directory /home3/whconsul/public_html/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:38.922303 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:38.922579 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:38.955566 2026] [security2:error] [pid 276620:tid 276846] [client 20.194.30.107:62595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/classwithtostring.php"] [unique_id "ary2otPAdfEWqmGIkg19VQAAAms"]
[Wed Sep 30 01:13:38.957148 2026] [security2:error] [pid 276059:tid 276225] [client 20.213.164.196:35811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/yvnqcuic.php"] [unique_id "ary2ontqdHBwD77138fJGgAAAa0"]
[Wed Sep 30 01:13:38.958136 2026] [security2:error] [pid 276620:tid 276768] [client 114.119.128.143:22143] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "riversho.org"] [uri "/robots.txt"] [unique_id "ary2otPAdfEWqmGIkg19VgAAAh0"], referer: https://riversho.org/robots.txt
[Wed Sep 30 01:13:38.979410 2026] [security2:error] [pid 276620:tid 276862] [client 20.214.145.90:26597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/222.php"] [unique_id "ary2otPAdfEWqmGIkg19WQAAAns"]
[Wed Sep 30 01:13:38.981646 2026] [security2:error] [pid 276059:tid 276302] [client 20.211.90.37:27935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary2ontqdHBwD77138fJGwAAAfo"]
[Wed Sep 30 01:13:39.015245 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.015552 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.020060 2026] [security2:error] [pid 276059:tid 276276] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJHAAAAeA"]
[Wed Sep 30 01:13:39.078069 2026] [security2:error] [pid 276620:tid 276886] [client 20.204.42.136:35819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/mssrt.php"] [unique_id "ary2o9PAdfEWqmGIkg19XAAAApM"]
[Wed Sep 30 01:13:39.091099 2026] [security2:error] [pid 276620:tid 276854] [client 74.225.148.80:11018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/lock360.php"] [unique_id "ary2o9PAdfEWqmGIkg19XQAAAnM"]
[Wed Sep 30 01:13:39.102290 2026] [security2:error] [pid 276620:tid 276845] [client 13.70.4.78:39429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/fucku.php"] [unique_id "ary2o9PAdfEWqmGIkg19XwAAAmo"]
[Wed Sep 30 01:13:39.106416 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.106670 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.135640 2026] [security2:error] [pid 276620:tid 276798] [client 201.32.215.149:6354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2o9PAdfEWqmGIkg19YgAAAjs"]
[Wed Sep 30 01:13:39.135757 2026] [security2:error] [pid 276620:tid 276798] [client 201.32.215.149:6354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2o9PAdfEWqmGIkg19YgAAAjs"]
[Wed Sep 30 01:13:39.142227 2026] [security2:error] [pid 276059:tid 276195] [client 20.194.96.176:7287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/w.php"] [unique_id "ary2o3tqdHBwD77138fJHQAAAZA"]
[Wed Sep 30 01:13:39.198196 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.198475 2026] [access_compat:error] [pid 276620:tid 276783] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.211657 2026] [security2:error] [pid 276059:tid 276262] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJHwAAAdI"]
[Wed Sep 30 01:13:39.224957 2026] [access_compat:error] [pid 276620:tid 276816] [client 47.82.11.53:54380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:39.225408 2026] [access_compat:error] [pid 276620:tid 276816] [client 47.82.11.53:54380] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:39.235447 2026] [security2:error] [pid 276620:tid 276800] [client 4.240.25.22:38762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2o9PAdfEWqmGIkg19agAAAj0"]
[Wed Sep 30 01:13:39.245557 2026] [access_compat:error] [pid 276059:tid 276249] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:39.245816 2026] [access_compat:error] [pid 276059:tid 276249] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:39.277337 2026] [security2:error] [pid 276620:tid 276855] [client 20.214.145.90:26327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/BDKR28WP.php"] [unique_id "ary2o9PAdfEWqmGIkg19bAAAAnQ"]
[Wed Sep 30 01:13:39.289575 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.289880 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.352270 2026] [security2:error] [pid 276620:tid 276807] [client 20.213.164.196:15960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/koiy.php"] [unique_id "ary2o9PAdfEWqmGIkg19bwAAAkQ"]
[Wed Sep 30 01:13:39.369474 2026] [security2:error] [pid 276620:tid 276814] [client 20.214.151.17:64791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/about/function.php"] [unique_id "ary2o9PAdfEWqmGIkg19cAAAAks"]
[Wed Sep 30 01:13:39.383875 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.384283 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.401984 2026] [security2:error] [pid 276059:tid 276284] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJIgAAAeg"]
[Wed Sep 30 01:13:39.415941 2026] [security2:error] [pid 276059:tid 276321] [client 20.211.90.37:28359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/admin.php"] [unique_id "ary2o3tqdHBwD77138fJIwAAAg0"]
[Wed Sep 30 01:13:39.435655 2026] [security2:error] [pid 276059:tid 276241] [client 13.70.4.78:37925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/plugins/Cache/footer.php"] [unique_id "ary2o3tqdHBwD77138fJJAAAAb0"]
[Wed Sep 30 01:13:39.447504 2026] [security2:error] [pid 276620:tid 276882] [client 203.122.45.246:50935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2o9PAdfEWqmGIkg19dgAAAo8"]
[Wed Sep 30 01:13:39.447592 2026] [security2:error] [pid 276620:tid 276882] [client 203.122.45.246:50935] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2o9PAdfEWqmGIkg19dgAAAo8"]
[Wed Sep 30 01:13:39.469649 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.469915 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.553041 2026] [security2:error] [pid 276620:tid 276835] [client 74.225.148.80:10831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.148.225.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.bradgoreski.co"] [uri "/system_log.php"] [unique_id "ary2o9PAdfEWqmGIkg19fQAAAmA"]
[Wed Sep 30 01:13:39.561061 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.561335 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.592865 2026] [security2:error] [pid 276059:tid 276304] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJJgAAAfw"]
[Wed Sep 30 01:13:39.654485 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.654741 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.705962 2026] [security2:error] [pid 276620:tid 276780] [client 20.214.151.17:47419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary2o9PAdfEWqmGIkg19ggAAAik"]
[Wed Sep 30 01:13:39.707642 2026] [security2:error] [pid 276620:tid 276822] [client 20.214.145.90:26306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp.php"] [unique_id "ary2o9PAdfEWqmGIkg19gwAAAlM"]
[Wed Sep 30 01:13:39.727506 2026] [security2:error] [pid 276620:tid 276766] [client 20.70.173.30:25210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/222.php"] [unique_id "ary2o9PAdfEWqmGIkg19hAAAAhs"]
[Wed Sep 30 01:13:39.745541 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.745965 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.766791 2026] [security2:error] [pid 276620:tid 276772] [client 20.211.90.37:28366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/admin.php"] [unique_id "ary2o9PAdfEWqmGIkg19iAAAAiE"]
[Wed Sep 30 01:13:39.767975 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:39.768464 2026] [access_compat:error] [pid 276059:tid 276298] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:39.784684 2026] [security2:error] [pid 276059:tid 276289] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJKwAAAe0"]
[Wed Sep 30 01:13:39.818795 2026] [security2:error] [pid 276620:tid 276812] [client 13.70.4.78:45690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/mail.php"] [unique_id "ary2o9PAdfEWqmGIkg19jQAAAkk"]
[Wed Sep 30 01:13:39.834154 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.834432 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.925479 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:39.925784 2026] [access_compat:error] [pid 276620:tid 276886] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:39.975401 2026] [security2:error] [pid 276059:tid 276236] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2o3tqdHBwD77138fJMgAAAbg"]
[Wed Sep 30 01:13:39.986102 2026] [security2:error] [pid 276059:tid 276319] [client 20.214.145.90:26313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/simple.php"] [unique_id "ary2o3tqdHBwD77138fJNAAAAgs"]
[Wed Sep 30 01:13:40.016415 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.016668 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.094830 2026] [security2:error] [pid 276620:tid 276800] [client 20.213.164.196:15988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wordfence-waf.php"] [unique_id "ary2pNPAdfEWqmGIkg19lwAAAj0"]
[Wed Sep 30 01:13:40.109928 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.110215 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.166937 2026] [security2:error] [pid 276059:tid 276210] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pHtqdHBwD77138fJNwAAAZ4"]
[Wed Sep 30 01:13:40.178619 2026] [security2:error] [pid 276620:tid 276838] [client 20.211.90.37:27941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2pNPAdfEWqmGIkg19ogAAAmM"]
[Wed Sep 30 01:13:40.197518 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.197777 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.205720 2026] [security2:error] [pid 276620:tid 276837] [client 20.194.30.107:22977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/wp-login.php"] [unique_id "ary2pNPAdfEWqmGIkg19nwAAAmI"]
[Wed Sep 30 01:13:40.212626 2026] [security2:error] [pid 276620:tid 276804] [client 13.70.4.78:38208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/sx.php"] [unique_id "ary2pNPAdfEWqmGIkg19qQAAAkE"]
[Wed Sep 30 01:13:40.239505 2026] [security2:error] [pid 276620:tid 276866] [client 20.214.151.17:64461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/admin/function.php"] [unique_id "ary2pNPAdfEWqmGIkg19qgAAAn8"]
[Wed Sep 30 01:13:40.246909 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:40.247186 2026] [access_compat:error] [pid 276059:tid 276223] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:40.247714 2026] [security2:error] [pid 276059:tid 276234] [client 20.214.145.90:26312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/chosen.php"] [unique_id "ary2pHtqdHBwD77138fJOwAAAbY"]
[Wed Sep 30 01:13:40.289906 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.290171 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.315917 2026] [security2:error] [pid 276620:tid 276841] [client 223.235.102.107:14326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2pNPAdfEWqmGIkg19rgAAAmY"]
[Wed Sep 30 01:13:40.316036 2026] [security2:error] [pid 276620:tid 276841] [client 223.235.102.107:14326] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2pNPAdfEWqmGIkg19rgAAAmY"]
[Wed Sep 30 01:13:40.357885 2026] [security2:error] [pid 276059:tid 276294] [client 20.194.30.107:17324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary2pHtqdHBwD77138fJPQAAAfI"]
[Wed Sep 30 01:13:40.359297 2026] [security2:error] [pid 276059:tid 276253] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pHtqdHBwD77138fJPAAAAck"]
[Wed Sep 30 01:13:40.380433 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.380703 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.471590 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.471914 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.533056 2026] [security2:error] [pid 276620:tid 276760] [client 20.214.151.17:64865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ary2pNPAdfEWqmGIkg19tAAAAhU"]
[Wed Sep 30 01:13:40.550079 2026] [security2:error] [pid 276059:tid 276315] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pHtqdHBwD77138fJRAAAAgc"]
[Wed Sep 30 01:13:40.554461 2026] [security2:error] [pid 276620:tid 276834] [client 20.211.90.37:28404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/index/function.php"] [unique_id "ary2pNPAdfEWqmGIkg19uAAAAl8"]
[Wed Sep 30 01:13:40.561080 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.561357 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:31299] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.577584 2026] [security2:error] [pid 276620:tid 276818] [client 74.7.244.36:42692] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.tum.mds.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2pNPAdfEWqmGIkg19uwACTxA"]
[Wed Sep 30 01:13:40.626448 2026] [security2:error] [pid 276059:tid 276208] [client 20.213.164.196:54660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wp5.php"] [unique_id "ary2pHtqdHBwD77138fJRgAAAZ0"]
[Wed Sep 30 01:13:40.642696 2026] [security2:error] [pid 276059:tid 276200] [client 20.214.145.90:26457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/als.php"] [unique_id "ary2pHtqdHBwD77138fJRwAAAZU"]
[Wed Sep 30 01:13:40.655043 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.655314 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.668943 2026] [security2:error] [pid 276059:tid 276213] [client 152.56.240.85:53589] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2pHtqdHBwD77138fJSAAAAaE"]
[Wed Sep 30 01:13:40.669164 2026] [security2:error] [pid 276059:tid 276213] [client 152.56.240.85:53589] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2pHtqdHBwD77138fJSAAAAaE"]
[Wed Sep 30 01:13:40.704766 2026] [security2:error] [pid 276620:tid 276830] [client 20.194.30.107:62621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/key.php"] [unique_id "ary2pNPAdfEWqmGIkg19xAAAAls"]
[Wed Sep 30 01:13:40.708956 2026] [access_compat:error] [pid 276620:tid 276718] [remote 40.77.167.38:3117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.709224 2026] [access_compat:error] [pid 276620:tid 276718] [remote 40.77.167.38:3117] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.741151 2026] [security2:error] [pid 276059:tid 276194] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pHtqdHBwD77138fJSQAAAY8"]
[Wed Sep 30 01:13:40.760314 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:40.760588 2026] [access_compat:error] [pid 276059:tid 276206] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:40.777715 2026] [security2:error] [pid 276620:tid 276809] [client 168.100.149.122:33768] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b0586bb0ba32b15e03c179b6684696ea.bdce.css.gz"] [unique_id "ary2pNPAdfEWqmGIkg19xwACRh0"]
[Wed Sep 30 01:13:40.819098 2026] [security2:error] [pid 276620:tid 276839] [client 122.173.27.10:32677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2pNPAdfEWqmGIkg19yAAAAmQ"]
[Wed Sep 30 01:13:40.819238 2026] [security2:error] [pid 276620:tid 276839] [client 122.173.27.10:32677] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2pNPAdfEWqmGIkg19yAAAAmQ"]
[Wed Sep 30 01:13:40.868002 2026] [security2:error] [pid 276059:tid 276240] [client 13.70.4.78:38222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ary2pHtqdHBwD77138fJTAAAAbw"]
[Wed Sep 30 01:13:40.913436 2026] [security2:error] [pid 276059:tid 276219] [client 20.70.173.30:33373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/kir.php"] [unique_id "ary2pHtqdHBwD77138fJTwAAAac"]
[Wed Sep 30 01:13:40.915297 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:40.915574 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:40.928545 2026] [security2:error] [pid 276059:tid 276263] [client 20.219.2.60:30029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-admin/network/edit.php"] [unique_id "ary2pHtqdHBwD77138fJUQAAAdM"]
[Wed Sep 30 01:13:40.931912 2026] [security2:error] [pid 276059:tid 276274] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pHtqdHBwD77138fJUgAAAd4"]
[Wed Sep 30 01:13:40.938284 2026] [security2:error] [pid 276059:tid 276248] [client 20.214.151.17:64860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-admin/setup-config.php"] [unique_id "ary2pHtqdHBwD77138fJVAAAAcQ"]
[Wed Sep 30 01:13:40.973003 2026] [security2:error] [pid 276620:tid 276849] [client 216.73.216.46:31299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2pNPAdfEWqmGIkg19zgAAAm4"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OC9ub2RlMC9jcHUxOS9kcml2ZXIvY3B1MTMvbm9kZTAvbWVtb3J5MTY2
[Wed Sep 30 01:13:40.990964 2026] [security2:error] [pid 276620:tid 276880] [client 20.214.145.90:26345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/admin.php"] [unique_id "ary2pNPAdfEWqmGIkg190AAAAo0"]
[Wed Sep 30 01:13:41.007255 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.007544 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.027942 2026] [security2:error] [pid 276620:tid 276884] [client 20.211.90.37:28397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary2pdPAdfEWqmGIkg190gAAApE"]
[Wed Sep 30 01:13:41.056134 2026] [security2:error] [pid 276620:tid 276851] [client 20.213.164.196:54698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/em.php"] [unique_id "ary2pdPAdfEWqmGIkg190wAAAnA"]
[Wed Sep 30 01:13:41.098308 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.098599 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.107320 2026] [security2:error] [pid 276059:tid 276320] [client 182.69.182.151:15552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2pXtqdHBwD77138fJVwAAAgw"]
[Wed Sep 30 01:13:41.107419 2026] [security2:error] [pid 276059:tid 276320] [client 182.69.182.151:15552] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2pXtqdHBwD77138fJVwAAAgw"]
[Wed Sep 30 01:13:41.122671 2026] [security2:error] [pid 276059:tid 276280] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pXtqdHBwD77138fJWAAAAeQ"]
[Wed Sep 30 01:13:41.131108 2026] [security2:error] [pid 276620:tid 276829] [client 20.194.30.107:45132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/yawa.php"] [unique_id "ary2pdPAdfEWqmGIkg191gAAAlo"]
[Wed Sep 30 01:13:41.187636 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.187914 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.244735 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:41.245009 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:41.250899 2026] [security2:error] [pid 276620:tid 276864] [client 20.70.173.30:43646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/cycfruf.php"] [unique_id "ary2pdPAdfEWqmGIkg194QAAAn0"]
[Wed Sep 30 01:13:41.274557 2026] [security2:error] [pid 276620:tid 276807] [client 20.214.145.90:26595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/f35.php"] [unique_id "ary2pdPAdfEWqmGIkg195AAAAkQ"]
[Wed Sep 30 01:13:41.280358 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.280634 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.313972 2026] [security2:error] [pid 276059:tid 276239] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pXtqdHBwD77138fJWwAAAbs"]
[Wed Sep 30 01:13:41.370612 2026] [security2:error] [pid 276620:tid 276796] [client 20.211.90.37:27958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/license.php"] [unique_id "ary2pdPAdfEWqmGIkg195gAAAjk"]
[Wed Sep 30 01:13:41.370833 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.371120 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.371403 2026] [security2:error] [pid 276059:tid 276292] [client 4.240.25.22:18695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/media.php"] [unique_id "ary2pXtqdHBwD77138fJXQAAAfA"]
[Wed Sep 30 01:13:41.380847 2026] [security2:error] [pid 276059:tid 276261] [client 13.70.4.78:37917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/article.php"] [unique_id "ary2pXtqdHBwD77138fJXgAAAdE"]
[Wed Sep 30 01:13:41.463895 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.464298 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.484927 2026] [security2:error] [pid 276620:tid 276760] [client 4.240.25.22:18776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary2pdPAdfEWqmGIkg198AAAAhU"]
[Wed Sep 30 01:13:41.505422 2026] [security2:error] [pid 276059:tid 276262] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pXtqdHBwD77138fJYwAAAdI"]
[Wed Sep 30 01:13:41.536461 2026] [security2:error] [pid 276620:tid 276778] [client 20.214.145.90:26566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/aaa.php"] [unique_id "ary2pdPAdfEWqmGIkg198gAAAic"]
[Wed Sep 30 01:13:41.552452 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.552735 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.593262 2026] [security2:error] [pid 276059:tid 276259] [client 20.214.151.17:64819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/wp-content/radio.php"] [unique_id "ary2pXtqdHBwD77138fJZAAAAc8"]
[Wed Sep 30 01:13:41.647568 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.648013 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.697126 2026] [security2:error] [pid 276059:tid 276273] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pXtqdHBwD77138fJaAAAAd0"]
[Wed Sep 30 01:13:41.723031 2026] [security2:error] [pid 276620:tid 276803] [client 20.211.90.37:28414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/radio.php"] [unique_id "ary2pdPAdfEWqmGIkg19-QAAAkA"]
[Wed Sep 30 01:13:41.733887 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.734153 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.788676 2026] [access_compat:error] [pid 276059:tid 276243] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:41.788961 2026] [access_compat:error] [pid 276059:tid 276243] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:41.805192 2026] [security2:error] [pid 276620:tid 276812] [client 20.213.164.196:15961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/hp.php"] [unique_id "ary2pdPAdfEWqmGIkg19_wAAAkk"]
[Wed Sep 30 01:13:41.818483 2026] [security2:error] [pid 276620:tid 276767] [client 20.214.145.90:26602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/gecko.php"] [unique_id "ary2pdPAdfEWqmGIkg1-AQAAAhw"]
[Wed Sep 30 01:13:41.828803 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.829234 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.833569 2026] [security2:error] [pid 276620:tid 276820] [client 155.190.6.18:39810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2pdPAdfEWqmGIkg1-AgAAAlE"]
[Wed Sep 30 01:13:41.833743 2026] [security2:error] [pid 276620:tid 276820] [client 155.190.6.18:39810] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2pdPAdfEWqmGIkg1-AgAAAlE"]
[Wed Sep 30 01:13:41.889041 2026] [security2:error] [pid 276059:tid 276295] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pXtqdHBwD77138fJawAAAfM"]
[Wed Sep 30 01:13:41.904318 2026] [security2:error] [pid 276620:tid 276761] [client 20.214.151.17:64812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary2pdPAdfEWqmGIkg1-BgAAAhY"]
[Wed Sep 30 01:13:41.916080 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:41.916351 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:41.994848 2026] [security2:error] [pid 276059:tid 276217] [client 202.179.95.79:53844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2pXtqdHBwD77138fJbQAAAaU"]
[Wed Sep 30 01:13:41.994954 2026] [security2:error] [pid 276059:tid 276217] [client 202.179.95.79:53844] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2pXtqdHBwD77138fJbQAAAaU"]
[Wed Sep 30 01:13:42.007864 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.008124 2026] [access_compat:error] [pid 276620:tid 276768] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.064272 2026] [security2:error] [pid 276059:tid 276231] [client 13.70.4.78:38220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/link.php"] [unique_id "ary2pntqdHBwD77138fJbgAAAbM"]
[Wed Sep 30 01:13:42.065541 2026] [security2:error] [pid 276620:tid 276804] [client 20.211.90.37:28394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/info.php"] [unique_id "ary2ptPAdfEWqmGIkg1-FwAAAkE"]
[Wed Sep 30 01:13:42.080312 2026] [security2:error] [pid 276059:tid 276286] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pntqdHBwD77138fJbwAAAeo"]
[Wed Sep 30 01:13:42.098958 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.099211 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.167656 2026] [security2:error] [pid 276059:tid 276256] [client 20.70.173.30:44042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/gecko.php"] [unique_id "ary2pntqdHBwD77138fJcQAAAcw"]
[Wed Sep 30 01:13:42.179564 2026] [access_compat:error] [pid 276059:tid 276126] [remote 17.166.235.181:54222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.179871 2026] [access_compat:error] [pid 276059:tid 276126] [remote 17.166.235.181:54222] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.192276 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.192730 2026] [access_compat:error] [pid 276620:tid 276793] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.212348 2026] [security2:error] [pid 276620:tid 276776] [client 20.214.145.90:26308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/xiugai.php"] [unique_id "ary2ptPAdfEWqmGIkg1-IAAAAiU"]
[Wed Sep 30 01:13:42.221440 2026] [security2:error] [pid 276620:tid 276860] [client 20.194.30.107:17415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/yawa.php"] [unique_id "ary2ptPAdfEWqmGIkg1-IgAAAnk"]
[Wed Sep 30 01:13:42.244482 2026] [access_compat:error] [pid 276059:tid 276201] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:42.244753 2026] [access_compat:error] [pid 276059:tid 276201] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:42.268923 2026] [security2:error] [pid 276620:tid 276805] [client 20.214.151.17:64456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/.well-known/log.php"] [unique_id "ary2ptPAdfEWqmGIkg1-JwAAAkI"]
[Wed Sep 30 01:13:42.271977 2026] [security2:error] [pid 276059:tid 276307] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pntqdHBwD77138fJdgAAAf8"]
[Wed Sep 30 01:13:42.285963 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.286421 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.348769 2026] [security2:error] [pid 276059:tid 276300] [client 20.194.96.176:20706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/24.php"] [unique_id "ary2pntqdHBwD77138fJdwAAAfg"]
[Wed Sep 30 01:13:42.377307 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.377776 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.422936 2026] [security2:error] [pid 276620:tid 276870] [client 13.70.4.78:47625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/lock360.php"] [unique_id "ary2ptPAdfEWqmGIkg1-MgAAAoM"]
[Wed Sep 30 01:13:42.424961 2026] [security2:error] [pid 276620:tid 276873] [client 4.240.25.22:8417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dex.php"] [unique_id "ary2ptPAdfEWqmGIkg1-MwAAAoY"]
[Wed Sep 30 01:13:42.435853 2026] [security2:error] [pid 276620:tid 276787] [client 20.70.173.30:5251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/aaa.php"] [unique_id "ary2ptPAdfEWqmGIkg1-NAAAAjA"]
[Wed Sep 30 01:13:42.455843 2026] [security2:error] [pid 276620:tid 276781] [client 20.211.90.37:27929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/alfanew.php"] [unique_id "ary2ptPAdfEWqmGIkg1-OQAAAio"]
[Wed Sep 30 01:13:42.461467 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.461722 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.463349 2026] [security2:error] [pid 276059:tid 276251] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pntqdHBwD77138fJegAAAcc"]
[Wed Sep 30 01:13:42.495575 2026] [security2:error] [pid 276059:tid 276285] [client 20.213.164.196:54672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wpuse.php"] [unique_id "ary2pntqdHBwD77138fJewAAAek"]
[Wed Sep 30 01:13:42.513057 2026] [security2:error] [pid 276059:tid 276233] [client 20.70.173.30:19155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2pntqdHBwD77138fJfAAAAbU"]
[Wed Sep 30 01:13:42.554312 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.554621 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.567478 2026] [security2:error] [pid 276620:tid 276839] [client 20.194.96.176:55352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2ptPAdfEWqmGIkg1-PwAAAmQ"]
[Wed Sep 30 01:13:42.568730 2026] [security2:error] [pid 276620:tid 276788] [client 20.214.151.17:64973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/class.php"] [unique_id "ary2ptPAdfEWqmGIkg1-QAAAAjE"]
[Wed Sep 30 01:13:42.577721 2026] [security2:error] [pid 276059:tid 276210] [client 20.194.30.107:1802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/sym.php"] [unique_id "ary2pntqdHBwD77138fJfQAAAZ4"]
[Wed Sep 30 01:13:42.581772 2026] [security2:error] [pid 276620:tid 276772] [client 20.214.145.90:26584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/inx.php"] [unique_id "ary2ptPAdfEWqmGIkg1-QQAAAiE"]
[Wed Sep 30 01:13:42.631445 2026] [security2:error] [pid 276620:tid 276848] [client 20.70.173.30:25965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/term.php"] [unique_id "ary2ptPAdfEWqmGIkg1-QgAAAm0"]
[Wed Sep 30 01:13:42.644848 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.645112 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.655029 2026] [security2:error] [pid 276059:tid 276294] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pntqdHBwD77138fJfgAAAfI"]
[Wed Sep 30 01:13:42.734036 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.734298 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.765034 2026] [security2:error] [pid 276620:tid 276864] [client 13.70.4.78:45677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-trackback.php"] [unique_id "ary2ptPAdfEWqmGIkg1-TQAAAn0"]
[Wed Sep 30 01:13:42.790739 2026] [security2:error] [pid 276620:tid 276773] [client 168.100.149.90:33530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/260e7fe052556d46d6ec3d821b69a4c0.d412.css.gz"] [unique_id "ary2ptPAdfEWqmGIkg1-TgACIg4"]
[Wed Sep 30 01:13:42.791623 2026] [security2:error] [pid 276620:tid 276822] [client 217.181.92.23:12693] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2ptPAdfEWqmGIkg1-RAAAAlM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:13:42.817956 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:42.818224 2026] [access_compat:error] [pid 276059:tid 276205] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:42.828101 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.828544 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.841474 2026] [security2:error] [pid 276620:tid 276798] [client 20.211.90.37:28367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/inputs.php"] [unique_id "ary2ptPAdfEWqmGIkg1-UQAAAjs"]
[Wed Sep 30 01:13:42.846347 2026] [security2:error] [pid 276059:tid 276221] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2pntqdHBwD77138fJgwAAAak"]
[Wed Sep 30 01:13:42.878160 2026] [security2:error] [pid 276620:tid 276759] [client 20.214.145.90:26350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/11.php"] [unique_id "ary2ptPAdfEWqmGIkg1-VAAAAhQ"]
[Wed Sep 30 01:13:42.879823 2026] [security2:error] [pid 276620:tid 276794] [client 4.232.144.219:36002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2ptPAdfEWqmGIkg1-UwAAAjc"]
[Wed Sep 30 01:13:42.916313 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:42.916575 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:42.949781 2026] [security2:error] [pid 276059:tid 276208] [client 20.214.151.17:47362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/lock360.php"] [unique_id "ary2pntqdHBwD77138fJhQAAAZ0"]
[Wed Sep 30 01:13:43.008213 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.008473 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.037370 2026] [security2:error] [pid 276059:tid 276254] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2p3tqdHBwD77138fJiAAAAco"]
[Wed Sep 30 01:13:43.039081 2026] [access_compat:error] [pid 276620:tid 276838] [client 47.79.13.158:33558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.039352 2026] [access_compat:error] [pid 276620:tid 276838] [client 47.79.13.158:33558] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.067125 2026] [security2:error] [pid 276620:tid 276835] [client 20.213.164.196:15991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/sm.php"] [unique_id "ary2p9PAdfEWqmGIkg1-YQAAAmA"]
[Wed Sep 30 01:13:43.096892 2026] [security2:error] [pid 276620:tid 276795] [client 13.70.4.78:45679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/.well-known/index.php"] [unique_id "ary2p9PAdfEWqmGIkg1-ZAAAAjg"]
[Wed Sep 30 01:13:43.099869 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.099973 2026] [access_compat:error] [pid 276620:tid 276851] [client 47.79.13.213:49272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.100153 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.100237 2026] [access_compat:error] [pid 276620:tid 276851] [client 47.79.13.213:49272] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.190452 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.190717 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.228421 2026] [security2:error] [pid 276059:tid 276206] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2p3tqdHBwD77138fJiwAAAZs"]
[Wed Sep 30 01:13:43.235993 2026] [security2:error] [pid 276620:tid 276826] [client 20.214.145.90:26623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/File.php"] [unique_id "ary2p9PAdfEWqmGIkg1-ZgAAAlc"]
[Wed Sep 30 01:13:43.242521 2026] [access_compat:error] [pid 276059:tid 276237] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:43.242776 2026] [access_compat:error] [pid 276059:tid 276237] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:43.269277 2026] [security2:error] [pid 276059:tid 276204] [client 4.232.144.219:26943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2p3tqdHBwD77138fJjQAAAZk"]
[Wed Sep 30 01:13:43.277282 2026] [security2:error] [pid 276620:tid 276844] [client 20.211.90.37:28405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/admin/function.php"] [unique_id "ary2p9PAdfEWqmGIkg1-aQAAAmk"]
[Wed Sep 30 01:13:43.281990 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.282257 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.373992 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.374349 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.379859 2026] [security2:error] [pid 276620:tid 276766] [client 20.214.151.17:64481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.151.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lisaferrante.lisamiastudios.com"] [uri "/system_log.php"] [unique_id "ary2p9PAdfEWqmGIkg1-cgAAAhs"]
[Wed Sep 30 01:13:43.420041 2026] [security2:error] [pid 276059:tid 276248] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2p3tqdHBwD77138fJkgAAAcQ"]
[Wed Sep 30 01:13:43.463468 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.463740 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.497725 2026] [security2:error] [pid 276059:tid 276215] [client 47.82.11.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2p3tqdHBwD77138fJlAAAAaM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:43.519603 2026] [security2:error] [pid 276620:tid 276815] [client 20.214.145.90:26452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2p9PAdfEWqmGIkg1-gAAAAkw"]
[Wed Sep 30 01:13:43.522518 2026] [security2:error] [pid 276620:tid 276867] [client 20.70.173.30:5395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/images.php"] [unique_id "ary2p9PAdfEWqmGIkg1-gwAAAoA"]
[Wed Sep 30 01:13:43.537825 2026] [access_compat:error] [pid 276620:tid 276830] [client 47.79.13.213:49280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.538238 2026] [access_compat:error] [pid 276620:tid 276830] [client 47.79.13.213:49280] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:43.555624 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.555891 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.562726 2026] [access_compat:error] [pid 276620:tid 276636] [remote 17.166.234.160:43102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.563012 2026] [access_compat:error] [pid 276620:tid 276636] [remote 17.166.234.160:43102] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.583765 2026] [security2:error] [pid 276620:tid 276848] [client 20.213.164.196:15984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/mknobgkg.php"] [unique_id "ary2p9PAdfEWqmGIkg1-hgAAAm0"]
[Wed Sep 30 01:13:43.618977 2026] [security2:error] [pid 276059:tid 276268] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2p3tqdHBwD77138fJlgAAAdg"]
[Wed Sep 30 01:13:43.634257 2026] [security2:error] [pid 276059:tid 276219] [client 179.254.42.21:63603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.42.254.179.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "djstardao.com"] [uri "/xmlrpc.php"] [unique_id "ary2p3tqdHBwD77138fJlQAAAac"]
[Wed Sep 30 01:13:43.634382 2026] [security2:error] [pid 276059:tid 276219] [client 179.254.42.21:63603] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "djstardao.com"] [uri "/xmlrpc.php"] [unique_id "ary2p3tqdHBwD77138fJlQAAAac"]
[Wed Sep 30 01:13:43.647089 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.647383 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.654111 2026] [security2:error] [pid 276620:tid 276868] [client 4.232.144.219:26936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ccs.php"] [unique_id "ary2p9PAdfEWqmGIkg1-iQAAAoE"]
[Wed Sep 30 01:13:43.694689 2026] [security2:error] [pid 276620:tid 276846] [client 13.70.4.78:45663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "ary2p9PAdfEWqmGIkg1-igAAAms"]
[Wed Sep 30 01:13:43.708422 2026] [security2:error] [pid 276620:tid 276857] [client 20.211.90.37:27949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ary2p9PAdfEWqmGIkg1-iwAAAnY"]
[Wed Sep 30 01:13:43.708443 2026] [security2:error] [pid 276620:tid 276831] [client 4.240.25.22:12458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/well.php"] [unique_id "ary2p9PAdfEWqmGIkg1-jAAAAlw"]
[Wed Sep 30 01:13:43.738402 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.738760 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.785410 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:43.785690 2026] [access_compat:error] [pid 276059:tid 276239] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:43.810567 2026] [security2:error] [pid 276059:tid 276292] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2p3tqdHBwD77138fJmAAAAfA"]
[Wed Sep 30 01:13:43.829760 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.830039 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.877112 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.145.90:26596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2p9PAdfEWqmGIkg1-lAAAAoo"]
[Wed Sep 30 01:13:43.921145 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:43.921433 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:43.963302 2026] [security2:error] [pid 276059:tid 276247] [client 65.21.113.206:52126] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "retaltravel.com"] [uri "/cgi-sys/404.html"] [unique_id "ary2p3tqdHBwD77138fJnQAAAcM"]
[Wed Sep 30 01:13:43.976097 2026] [security2:error] [pid 276059:tid 276293] [client 106.214.2.47:5031] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2p3tqdHBwD77138fJnwAAAfE"]
[Wed Sep 30 01:13:43.976193 2026] [security2:error] [pid 276059:tid 276293] [client 106.214.2.47:5031] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2p3tqdHBwD77138fJnwAAAfE"]
[Wed Sep 30 01:13:44.001611 2026] [security2:error] [pid 276059:tid 276195] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qHtqdHBwD77138fJoAAAAZA"]
[Wed Sep 30 01:13:44.011269 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.011545 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.013950 2026] [fcgid:warn] [pid 276620:tid 276841] (70014)End of file found: [client 47.77.193.105:34998] mod_fcgid: can't get data from http client
[Wed Sep 30 01:13:44.054178 2026] [fcgid:warn] [pid 276620:tid 276792] (70014)End of file found: [client 47.77.193.105:35002] mod_fcgid: can't get data from http client
[Wed Sep 30 01:13:44.102431 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.102712 2026] [access_compat:error] [pid 276620:tid 276806] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.120903 2026] [security2:error] [pid 276620:tid 276760] [client 20.211.90.37:28370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-admin/images/index.php"] [unique_id "ary2qNPAdfEWqmGIkg1-ogAAAhU"]
[Wed Sep 30 01:13:44.131429 2026] [security2:error] [pid 276620:tid 276860] [client 13.70.4.78:39444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ary2qNPAdfEWqmGIkg1-qQAAAnk"]
[Wed Sep 30 01:13:44.145362 2026] [security2:error] [pid 276620:tid 276838] [client 20.214.145.90:26462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "ary2qNPAdfEWqmGIkg1-qwAAAmM"]
[Wed Sep 30 01:13:44.192752 2026] [security2:error] [pid 276059:tid 276249] [client 213.35.101.27:64030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qHtqdHBwD77138fJoQAAAcU"]
[Wed Sep 30 01:13:44.196652 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.197223 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.258438 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:44.258711 2026] [access_compat:error] [pid 276059:tid 276321] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:44.283880 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.284150 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.307447 2026] [security2:error] [pid 276059:tid 276312] [client 103.211.18.63:50358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2qHtqdHBwD77138fJpwAAAgQ"]
[Wed Sep 30 01:13:44.307607 2026] [security2:error] [pid 276059:tid 276312] [client 103.211.18.63:50358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2qHtqdHBwD77138fJpwAAAgQ"]
[Wed Sep 30 01:13:44.308783 2026] [security2:error] [pid 276059:tid 276198] [client 20.194.30.107:23192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/wsd.php"] [unique_id "ary2qHtqdHBwD77138fJqAAAAZM"]
[Wed Sep 30 01:13:44.312310 2026] [security2:error] [pid 276620:tid 276799] [client 20.194.30.107:45869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/mh.php"] [unique_id "ary2qNPAdfEWqmGIkg1-uAAAAjw"]
[Wed Sep 30 01:13:44.318819 2026] [security2:error] [pid 276620:tid 276787] [client 4.232.144.219:36012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/set.php"] [unique_id "ary2qNPAdfEWqmGIkg1-uQAAAjA"]
[Wed Sep 30 01:13:44.341921 2026] [security2:error] [pid 276620:tid 276833] [client 20.213.164.196:35778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/dairg.php"] [unique_id "ary2qNPAdfEWqmGIkg1-uwAAAl4"]
[Wed Sep 30 01:13:44.376760 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.377058 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.380056 2026] [security2:error] [pid 276620:tid 276778] [client 216.244.66.233:41312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "co-opportunities.org"] [uri "/robots.txt"] [unique_id "ary2qNPAdfEWqmGIkg1-vgAAAic"]
[Wed Sep 30 01:13:44.380196 2026] [security2:error] [pid 276620:tid 276778] [client 216.244.66.233:41312] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "co-opportunities.org"] [uri "/robots.txt"] [unique_id "ary2qNPAdfEWqmGIkg1-vgAAAic"]
[Wed Sep 30 01:13:44.448165 2026] [ssl:error] [pid 276620:tid 276849] [client 216.25.124.25:31183] AH02032: Hostname just2086.justhost.com (default host as no SNI was provided) and hostname autodiscover.vetrytech.nucreativesolutions.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:13:44.453570 2026] [security2:error] [pid 276620:tid 276852] [client 20.214.145.90:26351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "ary2qNPAdfEWqmGIkg1-xQAAAnE"]
[Wed Sep 30 01:13:44.467954 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.468222 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.484670 2026] [security2:error] [pid 276620:tid 276820] [client 20.219.2.60:29918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws82.php"] [unique_id "ary2qNPAdfEWqmGIkg1-yQAAAlE"]
[Wed Sep 30 01:13:44.495853 2026] [security2:error] [pid 276620:tid 276771] [client 20.194.96.176:7618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/robot.php"] [unique_id "ary2qNPAdfEWqmGIkg1-zQAAAiA"]
[Wed Sep 30 01:13:44.498401 2026] [security2:error] [pid 276620:tid 276815] [client 20.70.173.30:19149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/xiugai.php"] [unique_id "ary2qNPAdfEWqmGIkg1-zwAAAkw"]
[Wed Sep 30 01:13:44.522918 2026] [security2:error] [pid 276620:tid 276817] [client 20.211.90.37:27946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/default.php"] [unique_id "ary2qNPAdfEWqmGIkg1-0gAAAk4"]
[Wed Sep 30 01:13:44.563091 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.563507 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.613692 2026] [security2:error] [pid 276059:tid 276284] [client 74.7.228.43:38480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "justincontursi.com"] [uri "/robots.txt"] [unique_id "ary2qHtqdHBwD77138fJrwAAAeg"]
[Wed Sep 30 01:13:44.616087 2026] [security2:error] [pid 276620:tid 276784] [client 162.120.188.245:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.esvarbon.gov.ng"] [uri "/"] [unique_id "ary2qNPAdfEWqmGIkg1-3AAAAi0"], referer: https://www.google.com/
[Wed Sep 30 01:13:44.631763 2026] [autoindex:error] [pid 276059:tid 276310] [client 65.21.113.206:52132] AH01276: Cannot serve directory /home1/retalvie/public_html/retaltravel/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:44.632637 2026] [security2:error] [pid 276059:tid 276310] [client 65.21.113.206:52132] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "retaltravel.com"] [uri "/cgi-sys/403.html"] [unique_id "ary2qHtqdHBwD77138fJsAAAAgI"]
[Wed Sep 30 01:13:44.654677 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.655072 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.723791 2026] [security2:error] [pid 276620:tid 276785] [client 4.232.144.219:26915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/mode.php"] [unique_id "ary2qNPAdfEWqmGIkg1-4gAAAi4"]
[Wed Sep 30 01:13:44.734252 2026] [security2:error] [pid 276059:tid 276303] [client 20.214.145.90:26460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "ary2qHtqdHBwD77138fJswAAAfs"]
[Wed Sep 30 01:13:44.741245 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.741520 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.745161 2026] [security2:error] [pid 276059:tid 276308] [client 74.7.228.43:41996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "justincontursi.com"] [uri "/robots.txt"] [unique_id "ary2qHtqdHBwD77138fJtAACABA"], referer: http://justincontursi.com/robots.txt
[Wed Sep 30 01:13:44.765513 2026] [security2:error] [pid 276620:tid 276848] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qNPAdfEWqmGIkg1-5gAAAm0"]
[Wed Sep 30 01:13:44.770119 2026] [security2:error] [pid 276620:tid 276862] [client 168.100.149.97:31108] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/daf2ee8273ea36fd892a8b4c60d0caeb.d390.css.gz"] [unique_id "ary2qNPAdfEWqmGIkg1-5wACe28"]
[Wed Sep 30 01:13:44.773189 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:44.773457 2026] [access_compat:error] [pid 276059:tid 276319] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:44.832592 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.832674 2026] [security2:error] [pid 276620:tid 276885] [client 173.212.198.43:54480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.198.212.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ary2qNPAdfEWqmGIkg1-6gAAApI"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 01:13:44.832874 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.922326 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:44.922651 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65454] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:44.930741 2026] [security2:error] [pid 276620:tid 276856] [client 20.211.90.37:27912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/lv.php"] [unique_id "ary2qNPAdfEWqmGIkg1-7gAAAnU"]
[Wed Sep 30 01:13:44.940396 2026] [security2:error] [pid 276620:tid 276763] [client 20.213.164.196:15950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/dronishness.php"] [unique_id "ary2qNPAdfEWqmGIkg1-8QAAAhg"]
[Wed Sep 30 01:13:44.956216 2026] [security2:error] [pid 276620:tid 276776] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qNPAdfEWqmGIkg1-9AAAAiU"]
[Wed Sep 30 01:13:45.044548 2026] [security2:error] [pid 276620:tid 276802] [client 13.70.4.78:37889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2qdPAdfEWqmGIkg1-9QAAAj8"]
[Wed Sep 30 01:13:45.045616 2026] [security2:error] [pid 276620:tid 276878] [client 20.214.145.90:26572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "ary2qdPAdfEWqmGIkg1-9gAAAos"]
[Wed Sep 30 01:13:45.066755 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.067024 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.112690 2026] [access_compat:error] [pid 276620:tid 276804] [client 47.79.13.175:33098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:45.112992 2026] [access_compat:error] [pid 276620:tid 276804] [client 47.79.13.175:33098] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:45.141151 2026] [security2:error] [pid 276620:tid 276832] [client 20.70.173.30:5264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/chosen.php"] [unique_id "ary2qdPAdfEWqmGIkg1--gAAAl0"]
[Wed Sep 30 01:13:45.147360 2026] [security2:error] [pid 276620:tid 276818] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qdPAdfEWqmGIkg1--wAAAk8"]
[Wed Sep 30 01:13:45.158147 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.158423 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.235657 2026] [security2:error] [pid 276620:tid 276870] [client 4.232.144.219:35992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ok.php"] [unique_id "ary2qdPAdfEWqmGIkg1_AAAAAoM"]
[Wed Sep 30 01:13:45.249137 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.249405 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.265348 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:45.265612 2026] [access_compat:error] [pid 276059:tid 276221] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:45.285500 2026] [security2:error] [pid 276059:tid 276281] [client 172.86.125.30:62272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "spectastore.com.ng"] [uri "/Search-Replace-DB-master/"] [unique_id "ary2qXtqdHBwD77138fJwwAAAeU"]
[Wed Sep 30 01:13:45.286020 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.286289 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.330989 2026] [security2:error] [pid 276620:tid 276814] [client 20.211.90.37:27955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2qdPAdfEWqmGIkg1_BAAAAks"]
[Wed Sep 30 01:13:45.337590 2026] [security2:error] [pid 276620:tid 276849] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qdPAdfEWqmGIkg1_BgAAAm4"]
[Wed Sep 30 01:13:45.338854 2026] [security2:error] [pid 276620:tid 276852] [client 20.214.145.90:26568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/media.php"] [unique_id "ary2qdPAdfEWqmGIkg1_BwAAAnE"]
[Wed Sep 30 01:13:45.376260 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.376545 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.402807 2026] [security2:error] [pid 276620:tid 276780] [client 4.240.25.22:8405] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary2qdPAdfEWqmGIkg1_DwAAAik"]
[Wed Sep 30 01:13:45.402939 2026] [security2:error] [pid 276620:tid 276780] [client 4.240.25.22:8405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/1.php"] [unique_id "ary2qdPAdfEWqmGIkg1_DwAAAik"]
[Wed Sep 30 01:13:45.458068 2026] [security2:error] [pid 276620:tid 276805] [client 216.73.216.46:65454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2qdPAdfEWqmGIkg1_EQAAAkI"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OTAvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mzk4
[Wed Sep 30 01:13:45.467565 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.467833 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.468878 2026] [autoindex:error] [pid 276059:tid 276291] [client 185.247.137.231:39831] AH01276: Cannot serve directory /home4/ycjqyzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.ycj.qyz.mybluehost.me
[Wed Sep 30 01:13:45.530275 2026] [security2:error] [pid 276620:tid 276839] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qdPAdfEWqmGIkg1_FAAAAmQ"]
[Wed Sep 30 01:13:45.563870 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.564102 2026] [security2:error] [pid 276620:tid 276854] [client 47.79.13.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2qdPAdfEWqmGIkg1_GAAAAnM"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:45.564298 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.571238 2026] [security2:error] [pid 276620:tid 276785] [client 4.232.144.219:35993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/zoo.php"] [unique_id "ary2qdPAdfEWqmGIkg1_GgAAAi4"]
[Wed Sep 30 01:13:45.573502 2026] [security2:error] [pid 276620:tid 276829] [client 37.41.16.35:55527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2qdPAdfEWqmGIkg1_GQAAAlo"]
[Wed Sep 30 01:13:45.573586 2026] [security2:error] [pid 276620:tid 276829] [client 37.41.16.35:55527] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2qdPAdfEWqmGIkg1_GQAAAlo"]
[Wed Sep 30 01:13:45.581592 2026] [security2:error] [pid 276059:tid 276213] [client 13.70.4.78:37888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ary2qXtqdHBwD77138fJygAAAaE"]
[Wed Sep 30 01:13:45.600672 2026] [security2:error] [pid 276059:tid 276288] [client 20.194.30.107:23564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/classwithtostring.php"] [unique_id "ary2qXtqdHBwD77138fJywAAAew"]
[Wed Sep 30 01:13:45.608551 2026] [security2:error] [pid 276620:tid 276844] [client 103.241.204.139:52414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2qdPAdfEWqmGIkg1_GwAAAmk"]
[Wed Sep 30 01:13:45.608746 2026] [security2:error] [pid 276620:tid 276844] [client 103.241.204.139:52414] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2qdPAdfEWqmGIkg1_GwAAAmk"]
[Wed Sep 30 01:13:45.615646 2026] [security2:error] [pid 276620:tid 276863] [client 20.213.164.196:35828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/Row_wsoo.php"] [unique_id "ary2qdPAdfEWqmGIkg1_HAAAAnw"]
[Wed Sep 30 01:13:45.649852 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.650112 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.694504 2026] [security2:error] [pid 276620:tid 276885] [client 20.211.90.37:28373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/marijuana.php"] [unique_id "ary2qdPAdfEWqmGIkg1_IQAAApI"]
[Wed Sep 30 01:13:45.705516 2026] [security2:error] [pid 276620:tid 276879] [client 20.194.30.107:23683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/log.php"] [unique_id "ary2qdPAdfEWqmGIkg1_IgAAAow"]
[Wed Sep 30 01:13:45.707386 2026] [security2:error] [pid 276620:tid 276842] [client 20.214.145.90:26583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/inso.php"] [unique_id "ary2qdPAdfEWqmGIkg1_IwAAAmc"]
[Wed Sep 30 01:13:45.721413 2026] [security2:error] [pid 276620:tid 276794] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qdPAdfEWqmGIkg1_JAAAAjc"]
[Wed Sep 30 01:13:45.741129 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.741400 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.750674 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:45.750946 2026] [access_compat:error] [pid 276059:tid 276309] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:45.766873 2026] [security2:error] [pid 276620:tid 276664] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2qdPAdfEWqmGIkg1_KAACdSI"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D81888
[Wed Sep 30 01:13:45.766895 2026] [security2:error] [pid 276620:tid 276664] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2qdPAdfEWqmGIkg1_KAACdSI"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D81888
[Wed Sep 30 01:13:45.832565 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.832845 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.911700 2026] [security2:error] [pid 276620:tid 276860] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qdPAdfEWqmGIkg1_LwAAAnk"]
[Wed Sep 30 01:13:45.925630 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:45.925910 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:45.982157 2026] [security2:error] [pid 276620:tid 276782] [client 4.232.144.219:35998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/gaza.php"] [unique_id "ary2qdPAdfEWqmGIkg1_NQAAAis"]
[Wed Sep 30 01:13:46.017559 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.018001 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.047695 2026] [security2:error] [pid 276620:tid 276871] [client 20.211.90.37:28383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary2qtPAdfEWqmGIkg1_NwAAAoQ"]
[Wed Sep 30 01:13:46.055233 2026] [security2:error] [pid 276059:tid 276257] [client 20.214.145.90:26618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/shiny.php"] [unique_id "ary2qntqdHBwD77138fJ0QAAAc0"]
[Wed Sep 30 01:13:46.102763 2026] [security2:error] [pid 276620:tid 276799] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_PQAAAjw"]
[Wed Sep 30 01:13:46.105428 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.105699 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.139296 2026] [security2:error] [pid 276620:tid 276873] [client 13.70.4.78:45689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ary2qtPAdfEWqmGIkg1_PwAAAoY"]
[Wed Sep 30 01:13:46.146358 2026] [security2:error] [pid 276620:tid 276778] [client 173.212.198.43:54490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.198.212.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellmoremerrickchildcare.com"] [uri "/wp-login.php"] [unique_id "ary2qtPAdfEWqmGIkg1_QQAAAic"], referer: http://bellmoremerrickchildcare.com/wp-login.php
[Wed Sep 30 01:13:46.182049 2026] [security2:error] [pid 276620:tid 276774] [client 163.172.46.59:53726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.46.172.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "ary2qtPAdfEWqmGIkg1_RwAAAiM"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 01:13:46.188473 2026] [security2:error] [pid 276620:tid 276852] [client 20.70.173.30:19188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/classwithtostring.php"] [unique_id "ary2qtPAdfEWqmGIkg1_SQAAAnE"]
[Wed Sep 30 01:13:46.199637 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.200072 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.245467 2026] [security2:error] [pid 276620:tid 276712] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2qtPAdfEWqmGIkg1_TAACKVI"], referer: https://forum.torquayfans.com/viewtopic.php?p=286010
[Wed Sep 30 01:13:46.245501 2026] [security2:error] [pid 276620:tid 276712] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2qtPAdfEWqmGIkg1_TAACKVI"], referer: https://forum.torquayfans.com/viewtopic.php?p=286010
[Wed Sep 30 01:13:46.267118 2026] [security2:error] [pid 276620:tid 276817] [client 20.194.96.176:7922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/sss.php"] [unique_id "ary2qtPAdfEWqmGIkg1_TQAAAk4"]
[Wed Sep 30 01:13:46.288635 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.289001 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.292580 2026] [security2:error] [pid 276620:tid 276797] [client 161.118.214.16:59624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lyz.umh.mybluehost.me"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_TgAAAjo"]
[Wed Sep 30 01:13:46.293587 2026] [security2:error] [pid 276620:tid 276861] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_UAAAAno"]
[Wed Sep 30 01:13:46.318686 2026] [access_compat:error] [pid 276059:tid 276268] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:46.318963 2026] [access_compat:error] [pid 276059:tid 276268] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:46.349309 2026] [security2:error] [pid 276620:tid 276880] [client 20.214.145.90:26310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/403dd.php"] [unique_id "ary2qtPAdfEWqmGIkg1_UwAAAo0"]
[Wed Sep 30 01:13:46.377945 2026] [security2:error] [pid 276620:tid 276865] [client 31.189.214.146:60502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2qtPAdfEWqmGIkg1_VwAAAn4"]
[Wed Sep 30 01:13:46.378061 2026] [security2:error] [pid 276620:tid 276865] [client 31.189.214.146:60502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2qtPAdfEWqmGIkg1_VwAAAn4"]
[Wed Sep 30 01:13:46.379339 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.379342 2026] [security2:error] [pid 276059:tid 276140] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2qntqdHBwD77138fJ2gABu0w"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300845&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:13:46.379377 2026] [security2:error] [pid 276059:tid 276140] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2qntqdHBwD77138fJ2gABu0w"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300845&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:13:46.379605 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.473646 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.474081 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.483537 2026] [security2:error] [pid 276620:tid 276822] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_XgAAAlM"]
[Wed Sep 30 01:13:46.493625 2026] [security2:error] [pid 276620:tid 276835] [client 4.232.144.219:36029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/grsiuk.php"] [unique_id "ary2qtPAdfEWqmGIkg1_YAAAAmA"]
[Wed Sep 30 01:13:46.583616 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.584070 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.600893 2026] [security2:error] [pid 276620:tid 276761] [client 20.211.90.37:27926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-content/403.php"] [unique_id "ary2qtPAdfEWqmGIkg1_ZQAAAhY"]
[Wed Sep 30 01:13:46.618311 2026] [security2:error] [pid 276059:tid 276250] [client 20.214.145.90:26362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/baba.php"] [unique_id "ary2qntqdHBwD77138fJ3QAAAcY"]
[Wed Sep 30 01:13:46.630428 2026] [security2:error] [pid 276620:tid 276869] [client 13.70.4.78:39471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/themes/about.php"] [unique_id "ary2qtPAdfEWqmGIkg1_ZwAAAoI"]
[Wed Sep 30 01:13:46.653107 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.653384 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.666501 2026] [security2:error] [pid 276620:tid 276798] [client 20.213.164.196:15947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/x2.php"] [unique_id "ary2qtPAdfEWqmGIkg1_awAAAjs"]
[Wed Sep 30 01:13:46.674245 2026] [security2:error] [pid 276620:tid 276882] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_bAAAAo8"]
[Wed Sep 30 01:13:46.744971 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.745252 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.761474 2026] [access_compat:error] [pid 276059:tid 276227] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:46.761758 2026] [access_compat:error] [pid 276059:tid 276227] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:46.785309 2026] [security2:error] [pid 276620:tid 276789] [client 168.100.149.53:24444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/a1f6e51aa8dda75c08a5220103ad3f0e.6e6a.css.gz"] [unique_id "ary2qtPAdfEWqmGIkg1_dAACMlA"]
[Wed Sep 30 01:13:46.835701 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.836003 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.865580 2026] [security2:error] [pid 276620:tid 276852] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2qtPAdfEWqmGIkg1_fgAAAnE"]
[Wed Sep 30 01:13:46.879817 2026] [security2:error] [pid 276620:tid 276814] [client 20.219.2.60:30360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/new.php"] [unique_id "ary2qtPAdfEWqmGIkg1_fwAAAks"]
[Wed Sep 30 01:13:46.923395 2026] [security2:error] [pid 276620:tid 276815] [client 20.70.173.30:43591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/8.php"] [unique_id "ary2qtPAdfEWqmGIkg1_hAAAAkw"]
[Wed Sep 30 01:13:46.928176 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:46.928497 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:46.969627 2026] [security2:error] [pid 276620:tid 276797] [client 20.194.30.107:10022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/well.php"] [unique_id "ary2qtPAdfEWqmGIkg1_iAAAAjo"]
[Wed Sep 30 01:13:46.995853 2026] [security2:error] [pid 276620:tid 276824] [client 20.214.145.90:26575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/site.php"] [unique_id "ary2qtPAdfEWqmGIkg1_kAAAAlU"]
[Wed Sep 30 01:13:47.019042 2026] [security2:error] [pid 276620:tid 276854] [client 45.138.12.32:48664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.msl.svd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2q9PAdfEWqmGIkg1_mgAAAnM"]
[Wed Sep 30 01:13:47.023307 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.023758 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.035560 2026] [security2:error] [pid 276620:tid 276875] [client 117.96.49.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/printer-accessories/printing-paper"] [unique_id "ary2q9PAdfEWqmGIkg1_ngAAAog"]
[Wed Sep 30 01:13:47.057802 2026] [security2:error] [pid 276620:tid 276837] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2q9PAdfEWqmGIkg1_nwAAAmI"]
[Wed Sep 30 01:13:47.090573 2026] [security2:error] [pid 276620:tid 276775] [client 4.232.144.219:35986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-act.php"] [unique_id "ary2q9PAdfEWqmGIkg1_oQAAAiQ"]
[Wed Sep 30 01:13:47.112669 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.113116 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.142141 2026] [security2:error] [pid 276620:tid 276884] [client 20.70.173.30:33321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/f35.update.php"] [unique_id "ary2q9PAdfEWqmGIkg1_pQAAApE"]
[Wed Sep 30 01:13:47.148394 2026] [security2:error] [pid 276620:tid 276878] [client 13.70.4.78:45645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/filemanager/dialog.php"] [unique_id "ary2q9PAdfEWqmGIkg1_pgAAAos"]
[Wed Sep 30 01:13:47.175233 2026] [security2:error] [pid 276620:tid 276801] [client 122.177.240.90:21075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2q9PAdfEWqmGIkg1_qAAAAj4"]
[Wed Sep 30 01:13:47.175353 2026] [security2:error] [pid 276620:tid 276801] [client 122.177.240.90:21075] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2q9PAdfEWqmGIkg1_qAAAAj4"]
[Wed Sep 30 01:13:47.199482 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.199819 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.237921 2026] [security2:error] [pid 276620:tid 276834] [client 20.213.164.196:15989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/v4.php"] [unique_id "ary2q9PAdfEWqmGIkg1_rAAAAl8"]
[Wed Sep 30 01:13:47.250047 2026] [security2:error] [pid 276620:tid 276776] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2q9PAdfEWqmGIkg1_rQAAAiU"]
[Wed Sep 30 01:13:47.263259 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:47.263528 2026] [access_compat:error] [pid 276059:tid 276304] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:47.289682 2026] [security2:error] [pid 276620:tid 276804] [client 20.214.145.90:26317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/insc.php"] [unique_id "ary2q9PAdfEWqmGIkg1_rwAAAkE"]
[Wed Sep 30 01:13:47.290590 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.290886 2026] [access_compat:error] [pid 276620:tid 276847] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.373264 2026] [security2:error] [pid 276620:tid 276799] [client 20.211.90.37:28403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/css/colors/coffee/index.php"] [unique_id "ary2q9PAdfEWqmGIkg1_sAAAAjw"]
[Wed Sep 30 01:13:47.382598 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.383024 2026] [access_compat:error] [pid 276620:tid 276803] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.440382 2026] [security2:error] [pid 276620:tid 276790] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2q9PAdfEWqmGIkg1_uAAAAjM"]
[Wed Sep 30 01:13:47.470303 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.470583 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.470880 2026] [security2:error] [pid 276620:tid 276829] [client 4.232.144.219:39609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/cu.php"] [unique_id "ary2q9PAdfEWqmGIkg1_vAAAAlo"]
[Wed Sep 30 01:13:47.472504 2026] [security2:error] [pid 276620:tid 276813] [client 163.172.46.59:59774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.46.172.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harmonicaworkshop.com"] [uri "/wp-login.php"] [unique_id "ary2q9PAdfEWqmGIkg1_vQAAAko"], referer: https://harmonicaworkshop.com/wp-login.php
[Wed Sep 30 01:13:47.486234 2026] [security2:error] [pid 276059:tid 276298] [client 13.70.4.78:39467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/index/function.php"] [unique_id "ary2q3tqdHBwD77138fJ6wAAAfY"]
[Wed Sep 30 01:13:47.539913 2026] [security2:error] [pid 276620:tid 276821] [client 20.194.96.176:7648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/or.php"] [unique_id "ary2q9PAdfEWqmGIkg1_vwAAAlI"]
[Wed Sep 30 01:13:47.564238 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.564521 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.623022 2026] [security2:error] [pid 276059:tid 276218] [client 20.214.145.90:26320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/file.php"] [unique_id "ary2q3tqdHBwD77138fJ7gAAAaY"]
[Wed Sep 30 01:13:47.631102 2026] [security2:error] [pid 276620:tid 276773] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2q9PAdfEWqmGIkg1_wgAAAiI"]
[Wed Sep 30 01:13:47.653649 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.653919 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.665181 2026] [security2:error] [pid 276620:tid 276852] [client 43.130.32.245:47654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.32.130.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/wp-admin/admin.php"] [unique_id "ary2q9PAdfEWqmGIkg1_wwAAAnE"]
[Wed Sep 30 01:13:47.726491 2026] [security2:error] [pid 276620:tid 276863] [client 102.129.153.69:27693] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "marlm.com"] [uri "/.env"] [unique_id "ary2q9PAdfEWqmGIkg1_xwAAAnw"]
[Wed Sep 30 01:13:47.733223 2026] [security2:error] [pid 276059:tid 276285] [client 20.213.164.196:54080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/albin.php"] [unique_id "ary2q3tqdHBwD77138fJ8wAAAek"]
[Wed Sep 30 01:13:47.744091 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.744366 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.788779 2026] [security2:error] [pid 276059:tid 276084] [remote 57.141.14.48:34158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-includes/wlwmanifest.xml"] [unique_id "ary2q3tqdHBwD77138fJ9AABlBQ"]
[Wed Sep 30 01:13:47.822122 2026] [security2:error] [pid 276620:tid 276794] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2q9PAdfEWqmGIkg1_zAAAAjc"]
[Wed Sep 30 01:13:47.831479 2026] [security2:error] [pid 276620:tid 276816] [client 13.70.4.78:45664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "ary2q9PAdfEWqmGIkg1_zgAAAk0"]
[Wed Sep 30 01:13:47.836544 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.836817 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.840776 2026] [access_compat:error] [pid 276059:tid 276202] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:47.841051 2026] [access_compat:error] [pid 276059:tid 276202] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:47.925369 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:47.925647 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:47.936485 2026] [security2:error] [pid 276620:tid 276882] [client 20.214.145.90:26455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/dex.php"] [unique_id "ary2q9PAdfEWqmGIkg1_2wAAAo8"]
[Wed Sep 30 01:13:47.941220 2026] [security2:error] [pid 276059:tid 276316] [client 4.232.144.219:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/8.php"] [unique_id "ary2q3tqdHBwD77138fJ_gAAAgg"]
[Wed Sep 30 01:13:47.948752 2026] [security2:error] [pid 276059:tid 276212] [client 45.138.12.16:50540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-%2A.php"] [unique_id "ary2q3tqdHBwD77138fKAQAAAaA"]
[Wed Sep 30 01:13:48.013106 2026] [security2:error] [pid 276620:tid 276801] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg1_4wAAAj4"]
[Wed Sep 30 01:13:48.027965 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.028286 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.111064 2026] [access_compat:error] [pid 276059:tid 276249] [client 47.79.206.136:30764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:13:48.111421 2026] [access_compat:error] [pid 276059:tid 276249] [client 47.79.206.136:30764] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:13:48.120830 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.121214 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.132184 2026] [security2:error] [pid 276620:tid 276659] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2rNPAdfEWqmGIkg1_7gACNh0"], referer: https://forum.torquayfans.com/viewtopic.php?t=3354
[Wed Sep 30 01:13:48.132218 2026] [security2:error] [pid 276620:tid 276659] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2rNPAdfEWqmGIkg1_7gACNh0"], referer: https://forum.torquayfans.com/viewtopic.php?t=3354
[Wed Sep 30 01:13:48.148422 2026] [security2:error] [pid 276620:tid 276804] [client 20.194.96.176:16040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/42b5827789index.php"] [unique_id "ary2rNPAdfEWqmGIkg1_8AAAAkE"]
[Wed Sep 30 01:13:48.191638 2026] [security2:error] [pid 276059:tid 276206] [client 20.70.173.30:19194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/sxxb.php"] [unique_id "ary2rHtqdHBwD77138fKDwAAAZs"]
[Wed Sep 30 01:13:48.204382 2026] [security2:error] [pid 276620:tid 276779] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg1_8gAAAig"]
[Wed Sep 30 01:13:48.212777 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.213096 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.237866 2026] [security2:error] [pid 276059:tid 276200] [client 20.214.145.90:26352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/key.php"] [unique_id "ary2rHtqdHBwD77138fKIQAAAZU"]
[Wed Sep 30 01:13:48.266254 2026] [security2:error] [pid 276620:tid 276765] [client 20.194.30.107:62634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/BDKR28WP.php"] [unique_id "ary2rNPAdfEWqmGIkg1_9gAAAho"]
[Wed Sep 30 01:13:48.282327 2026] [security2:error] [pid 276620:tid 276812] [client 20.211.90.37:28398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/css.php"] [unique_id "ary2rNPAdfEWqmGIkg1_-AAAAkk"]
[Wed Sep 30 01:13:48.303881 2026] [security2:error] [pid 276620:tid 276826] [client 20.213.164.196:35807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/atkno.php"] [unique_id "ary2rNPAdfEWqmGIkg1_-wAAAlc"]
[Wed Sep 30 01:13:48.307118 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.307794 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.333984 2026] [access_compat:error] [pid 276059:tid 276229] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:48.334426 2026] [access_compat:error] [pid 276059:tid 276229] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:48.391657 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.391946 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:7673] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.396026 2026] [security2:error] [pid 276620:tid 276768] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg1__gAAAh0"]
[Wed Sep 30 01:13:48.435590 2026] [security2:error] [pid 276059:tid 276296] [client 4.232.144.219:36007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws60.php"] [unique_id "ary2rHtqdHBwD77138fKKgAAAfQ"]
[Wed Sep 30 01:13:48.441313 2026] [security2:error] [pid 276059:tid 276214] [client 74.7.242.1:56794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2rHtqdHBwD77138fKKwAAAaI"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:13:48.452119 2026] [security2:error] [pid 276059:tid 276239] [client 13.70.4.78:38237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ary2rHtqdHBwD77138fKLgAAAbs"]
[Wed Sep 30 01:13:48.480886 2026] [fcgid:warn] [pid 276620:tid 276803] (70014)End of file found: [client 157.245.105.107:44646] mod_fcgid: can't get data from http client
[Wed Sep 30 01:13:48.481906 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.482181 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.544384 2026] [security2:error] [pid 276620:tid 276882] [client 20.214.145.90:26603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/kir.php"] [unique_id "ary2rNPAdfEWqmGIkg2ADgAAAo8"]
[Wed Sep 30 01:13:48.574753 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.575139 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.587286 2026] [security2:error] [pid 276620:tid 276805] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg2AEQAAAkI"]
[Wed Sep 30 01:13:48.620553 2026] [security2:error] [pid 276620:tid 276814] [client 185.231.155.169:51235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.155.231.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "ary2rNPAdfEWqmGIkg2AEgAAAks"], referer: https://www.clenbuterol4sale.com/wp-login.php?action=register
[Wed Sep 30 01:13:48.655711 2026] [security2:error] [pid 276620:tid 276878] [client 20.211.90.37:28392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-admin/user/about.php"] [unique_id "ary2rNPAdfEWqmGIkg2AFQAAAos"]
[Wed Sep 30 01:13:48.660170 2026] [access_compat:error] [pid 276620:tid 276848] [client 47.79.13.28:50678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:48.660436 2026] [access_compat:error] [pid 276620:tid 276848] [client 47.79.13.28:50678] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:48.662658 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.662929 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.759879 2026] [security2:error] [pid 276620:tid 276796] [client 20.213.164.196:35804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/gptsh.php"] [unique_id "ary2rNPAdfEWqmGIkg2AGQAAAjk"]
[Wed Sep 30 01:13:48.760285 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.760721 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.777110 2026] [security2:error] [pid 276620:tid 276880] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg2AHAAAAo0"]
[Wed Sep 30 01:13:48.784750 2026] [security2:error] [pid 276620:tid 276742] [remote 168.100.149.46:16662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary2rNPAdfEWqmGIkg2AGgACLXA"]
[Wed Sep 30 01:13:48.794551 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:48.794945 2026] [access_compat:error] [pid 276059:tid 276312] [client 74.7.243.227:39066] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:48.819273 2026] [security2:error] [pid 276620:tid 276860] [client 216.73.216.46:7673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2rNPAdfEWqmGIkg2AHgAAAnk"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5OS9ub2RlMC9tZW1vcnkyMzAvcG93ZXI%3D
[Wed Sep 30 01:13:48.845998 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.846269 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.872930 2026] [security2:error] [pid 276059:tid 276196] [client 45.138.12.16:50534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ary2rHtqdHBwD77138fKWAAAAZE"]
[Wed Sep 30 01:13:48.874976 2026] [security2:error] [pid 276620:tid 276778] [client 4.232.144.219:26903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/vanda.php"] [unique_id "ary2rNPAdfEWqmGIkg2AIgAAAic"]
[Wed Sep 30 01:13:48.881210 2026] [security2:error] [pid 276620:tid 276774] [client 20.214.145.90:26473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/fling.php"] [unique_id "ary2rNPAdfEWqmGIkg2AJAAAAiM"]
[Wed Sep 30 01:13:48.897389 2026] [security2:error] [pid 276620:tid 276818] [client 223.181.60.167:11025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2rNPAdfEWqmGIkg2AKAAAAk8"]
[Wed Sep 30 01:13:48.897521 2026] [security2:error] [pid 276620:tid 276818] [client 223.181.60.167:11025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2rNPAdfEWqmGIkg2AKAAAAk8"]
[Wed Sep 30 01:13:48.940108 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:48.940564 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:48.958661 2026] [security2:error] [pid 276620:tid 276690] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rNPAdfEWqmGIkg2ALAACSjw"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a729f2dda3024c82180b1a8781cc93e7
[Wed Sep 30 01:13:48.958697 2026] [security2:error] [pid 276620:tid 276690] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rNPAdfEWqmGIkg2ALAACSjw"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a729f2dda3024c82180b1a8781cc93e7
[Wed Sep 30 01:13:48.967336 2026] [security2:error] [pid 276059:tid 276231] [client 45.138.12.16:50532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "taetaebobateashop.com"] [uri "/xmlrpc.php"] [unique_id "ary2rHtqdHBwD77138fKWgAAAbM"]
[Wed Sep 30 01:13:48.967845 2026] [security2:error] [pid 276620:tid 276830] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rNPAdfEWqmGIkg2ALQAAAls"]
[Wed Sep 30 01:13:49.014402 2026] [security2:error] [pid 276620:tid 276835] [client 20.194.30.107:10020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "ary2rdPAdfEWqmGIkg2AMQAAAmA"]
[Wed Sep 30 01:13:49.014604 2026] [security2:error] [pid 276620:tid 276743] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2rdPAdfEWqmGIkg2ALwACbHE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dreply%26t%3D3160
[Wed Sep 30 01:13:49.014628 2026] [security2:error] [pid 276620:tid 276743] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2rdPAdfEWqmGIkg2ALwACbHE"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dreply%26t%3D3160
[Wed Sep 30 01:13:49.020583 2026] [security2:error] [pid 276620:tid 276841] [client 20.211.90.37:28368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/about.php"] [unique_id "ary2rdPAdfEWqmGIkg2AMgAAAmY"]
[Wed Sep 30 01:13:49.028558 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.028830 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.081000 2026] [security2:error] [pid 276620:tid 276879] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2rdPAdfEWqmGIkg2ANgAAAow"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:49.120064 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.120326 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.136005 2026] [security2:error] [pid 276620:tid 276842] [client 20.70.173.30:19171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/baru.php"] [unique_id "ary2rdPAdfEWqmGIkg2AOQAAAmc"]
[Wed Sep 30 01:13:49.159091 2026] [security2:error] [pid 276620:tid 276854] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rdPAdfEWqmGIkg2AOwAAAnM"]
[Wed Sep 30 01:13:49.187151 2026] [security2:error] [pid 276059:tid 276203] [client 13.70.4.78:38211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "ary2rXtqdHBwD77138fKeQAAAZg"]
[Wed Sep 30 01:13:49.210645 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.210939 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.257946 2026] [security2:error] [pid 276059:tid 276251] [client 20.214.145.90:26611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/btyuio.php"] [unique_id "ary2rXtqdHBwD77138fKfQAAAcc"]
[Wed Sep 30 01:13:49.275251 2026] [security2:error] [pid 276620:tid 276760] [client 4.232.144.219:26880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/domains.php"] [unique_id "ary2rdPAdfEWqmGIkg2AQgAAAhU"]
[Wed Sep 30 01:13:49.297931 2026] [security2:error] [pid 276059:tid 276097] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rXtqdHBwD77138fKfgAB8yE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20077&sid=f28e7f76d189c5d842d209d6181f02f7
[Wed Sep 30 01:13:49.297984 2026] [security2:error] [pid 276059:tid 276097] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rXtqdHBwD77138fKfgAB8yE"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=20077&sid=f28e7f76d189c5d842d209d6181f02f7
[Wed Sep 30 01:13:49.305168 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.305626 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.334764 2026] [security2:error] [pid 276620:tid 276823] [client 20.213.164.196:35787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/rithin.php"] [unique_id "ary2rdPAdfEWqmGIkg2ARQAAAlQ"]
[Wed Sep 30 01:13:49.350618 2026] [security2:error] [pid 276620:tid 276825] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rdPAdfEWqmGIkg2ARwAAAlY"]
[Wed Sep 30 01:13:49.358229 2026] [access_compat:error] [pid 276620:tid 276794] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:49.358510 2026] [access_compat:error] [pid 276620:tid 276794] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:49.385553 2026] [security2:error] [pid 276620:tid 276654] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rdPAdfEWqmGIkg2ASQACJBg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a6d7b399456ad0ba7ab67578900c07f6
[Wed Sep 30 01:13:49.385589 2026] [security2:error] [pid 276620:tid 276654] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2rdPAdfEWqmGIkg2ASQACJBg"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a6d7b399456ad0ba7ab67578900c07f6
[Wed Sep 30 01:13:49.393148 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.393600 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:51284] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.405285 2026] [security2:error] [pid 276620:tid 276855] [client 185.231.155.169:51820] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "185.231.155.169" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "ary2rdPAdfEWqmGIkg2ATAAAAnQ"], referer: https://www.clenbuterol4sale.com/wp-login.php?action=register
[Wed Sep 30 01:13:49.413894 2026] [security2:error] [pid 276620:tid 276805] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2rdPAdfEWqmGIkg2ATQAAAkI"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:49.440296 2026] [security2:error] [pid 276620:tid 276773] [client 20.194.30.107:23603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/wp-the.php"] [unique_id "ary2rdPAdfEWqmGIkg2ATgAAAiI"]
[Wed Sep 30 01:13:49.484711 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.485067 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.540295 2026] [security2:error] [pid 276620:tid 276848] [client 20.214.145.90:26333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/sm.php"] [unique_id "ary2rdPAdfEWqmGIkg2AUAAAAm0"]
[Wed Sep 30 01:13:49.542749 2026] [security2:error] [pid 276620:tid 276838] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rdPAdfEWqmGIkg2AUQAAAmM"]
[Wed Sep 30 01:13:49.547743 2026] [security2:error] [pid 276620:tid 276763] [client 20.194.96.176:7885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/b8.php"] [unique_id "ary2rdPAdfEWqmGIkg2AUgAAAhg"]
[Wed Sep 30 01:13:49.588099 2026] [security2:error] [pid 276059:tid 276277] [client 13.70.4.78:47635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/about/function.php"] [unique_id "ary2rXtqdHBwD77138fKhwAAAeE"]
[Wed Sep 30 01:13:49.629431 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.629866 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.652668 2026] [security2:error] [pid 276059:tid 276294] [client 20.211.90.37:28358] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.isoltrading.com"] [uri "/1.php"] [unique_id "ary2rXtqdHBwD77138fKiQAAAfI"]
[Wed Sep 30 01:13:49.652823 2026] [security2:error] [pid 276059:tid 276294] [client 20.211.90.37:28358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/1.php"] [unique_id "ary2rXtqdHBwD77138fKiQAAAfI"]
[Wed Sep 30 01:13:49.665427 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.665690 2026] [access_compat:error] [pid 276059:tid 276254] [client 216.73.216.46:40916] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.734051 2026] [security2:error] [pid 276620:tid 276880] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rdPAdfEWqmGIkg2AXgAAAo0"]
[Wed Sep 30 01:13:49.753263 2026] [security2:error] [pid 276059:tid 276318] [client 20.213.164.196:54094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/il.php"] [unique_id "ary2rXtqdHBwD77138fKjQAAAgo"]
[Wed Sep 30 01:13:49.814309 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.814745 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.819838 2026] [security2:error] [pid 276620:tid 276872] [client 216.73.216.46:51284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2rdPAdfEWqmGIkg2AYgAAAoU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTUvbm9kZTAvY3B1Mi9kcml2ZXIvY3B1OS9kcml2ZXIvY3B1MTM%3D
[Wed Sep 30 01:13:49.829149 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:49.829591 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:49.840273 2026] [security2:error] [pid 276059:tid 276200] [client 20.214.145.90:26586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/a.php"] [unique_id "ary2rXtqdHBwD77138fKkAAAAZU"]
[Wed Sep 30 01:13:49.847688 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.847986 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.925957 2026] [security2:error] [pid 276620:tid 276783] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rdPAdfEWqmGIkg2AYwAAAiw"]
[Wed Sep 30 01:13:49.938971 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:49.939242 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:49.946816 2026] [security2:error] [pid 276059:tid 276301] [client 4.232.144.219:53326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/144.php"] [unique_id "ary2rXtqdHBwD77138fKkwAAAfk"]
[Wed Sep 30 01:13:49.967963 2026] [security2:error] [pid 276059:tid 276257] [client 13.70.4.78:37943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ary2rXtqdHBwD77138fKlAAAAc0"]
[Wed Sep 30 01:13:49.977508 2026] [security2:error] [pid 276059:tid 276197] [client 20.70.173.30:33349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-admin/css/colors/modern/index.php"] [unique_id "ary2rXtqdHBwD77138fKlQAAAZI"]
[Wed Sep 30 01:13:50.003866 2026] [security2:error] [pid 276620:tid 276764] [client 203.122.45.246:51573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2rtPAdfEWqmGIkg2AZgAAAhk"]
[Wed Sep 30 01:13:50.004036 2026] [security2:error] [pid 276620:tid 276764] [client 203.122.45.246:51573] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2rtPAdfEWqmGIkg2AZgAAAhk"]
[Wed Sep 30 01:13:50.009916 2026] [security2:error] [pid 276059:tid 276111] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.env"] [unique_id "ary2rntqdHBwD77138fKmwAB5S8"]
[Wed Sep 30 01:13:50.009952 2026] [security2:error] [pid 276059:tid 276096] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.docker/.env"] [unique_id "ary2rntqdHBwD77138fKowAB5SA"]
[Wed Sep 30 01:13:50.009992 2026] [security2:error] [pid 276059:tid 276152] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.docker/laravel/app/.env"] [unique_id "ary2rntqdHBwD77138fKnAAB5Vg"]
[Wed Sep 30 01:13:50.010035 2026] [security2:error] [pid 276059:tid 276115] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.aws/.env"] [unique_id "ary2rntqdHBwD77138fKnwAB5TM"]
[Wed Sep 30 01:13:50.010283 2026] [security2:error] [pid 276059:tid 276144] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.aws/credentials.bak"] [unique_id "ary2rntqdHBwD77138fKogAB5VA"]
[Wed Sep 30 01:13:50.028580 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.028859 2026] [access_compat:error] [pid 276620:tid 276844] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.035309 2026] [security2:error] [pid 276059:tid 276311] [client 20.211.90.37:28396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/marijuana.php"] [unique_id "ary2rntqdHBwD77138fKqAAAAgM"]
[Wed Sep 30 01:13:50.051151 2026] [security2:error] [pid 276620:tid 276883] [client 49.43.163.212:59289] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2rtPAdfEWqmGIkg2AbwAAApA"]
[Wed Sep 30 01:13:50.051301 2026] [security2:error] [pid 276620:tid 276883] [client 49.43.163.212:59289] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2rtPAdfEWqmGIkg2AbwAAApA"]
[Wed Sep 30 01:13:50.084399 2026] [security2:error] [pid 276059:tid 276272] [client 216.73.216.46:40916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2rntqdHBwD77138fKqgAAAdw"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5NTYvc3Vic3lzdGVtL2RldmljZXMvbWVtb3J5Mjg1
[Wed Sep 30 01:13:50.117213 2026] [security2:error] [pid 276620:tid 276832] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rtPAdfEWqmGIkg2AcAAAAl0"]
[Wed Sep 30 01:13:50.120756 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.121028 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.146921 2026] [security2:error] [pid 276059:tid 276092] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.env.bak"] [unique_id "ary2rntqdHBwD77138fKrwAB5Rw"]
[Wed Sep 30 01:13:50.146929 2026] [security2:error] [pid 276059:tid 276181] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.env.backup"] [unique_id "ary2rntqdHBwD77138fKrgAB5XU"]
[Wed Sep 30 01:13:50.151928 2026] [security2:error] [pid 276620:tid 276790] [client 20.214.145.90:26576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/sb.php"] [unique_id "ary2rtPAdfEWqmGIkg2AdAAAAjM"]
[Wed Sep 30 01:13:50.195912 2026] [security2:error] [pid 276059:tid 276205] [client 201.32.215.149:6811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2rntqdHBwD77138fKvwAAAZo"]
[Wed Sep 30 01:13:50.196046 2026] [security2:error] [pid 276059:tid 276205] [client 201.32.215.149:6811] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2rntqdHBwD77138fKvwAAAZo"]
[Wed Sep 30 01:13:50.210832 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.211133 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.241709 2026] [security2:error] [pid 276059:tid 276252] [client 182.69.182.151:28591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2rntqdHBwD77138fKwAAAAcg"]
[Wed Sep 30 01:13:50.242070 2026] [security2:error] [pid 276059:tid 276252] [client 182.69.182.151:28591] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2rntqdHBwD77138fKwAAAAcg"]
[Wed Sep 30 01:13:50.253718 2026] [access_compat:error] [pid 276620:tid 276826] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:50.254032 2026] [access_compat:error] [pid 276620:tid 276826] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:50.284109 2026] [security2:error] [pid 276059:tid 276109] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.env.old"] [unique_id "ary2rntqdHBwD77138fKwgAB5S0"]
[Wed Sep 30 01:13:50.287182 2026] [security2:error] [pid 276620:tid 276877] [client 20.213.164.196:54673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/1klopedf.php"] [unique_id "ary2rtPAdfEWqmGIkg2AggAAAoo"]
[Wed Sep 30 01:13:50.300956 2026] [security2:error] [pid 276620:tid 276811] [client 20.219.2.60:29891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/press.php"] [unique_id "ary2rtPAdfEWqmGIkg2AhQAAAkg"]
[Wed Sep 30 01:13:50.301963 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.302238 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.307103 2026] [security2:error] [pid 276620:tid 276879] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rtPAdfEWqmGIkg2AhgAAAow"]
[Wed Sep 30 01:13:50.325512 2026] [security2:error] [pid 276059:tid 276232] [client 13.70.4.78:39439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/admin/function.php"] [unique_id "ary2rntqdHBwD77138fKwwAAAbQ"]
[Wed Sep 30 01:13:50.399771 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.400228 2026] [access_compat:error] [pid 276620:tid 276853] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.416329 2026] [access_compat:error] [pid 276059:tid 276297] [client 47.79.13.158:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:50.416816 2026] [access_compat:error] [pid 276059:tid 276297] [client 47.79.13.158:33564] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:50.435175 2026] [security2:error] [pid 276059:tid 276191] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2rntqdHBwD77138fKyAABrX8"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D34728
[Wed Sep 30 01:13:50.464314 2026] [security2:error] [pid 276059:tid 276279] [client 20.214.145.90:26471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/av.php"] [unique_id "ary2rntqdHBwD77138fKywAAAeM"]
[Wed Sep 30 01:13:50.477750 2026] [security2:error] [pid 276059:tid 276275] [client 4.232.144.219:26916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/asd.php"] [unique_id "ary2rntqdHBwD77138fKzAAAAd8"]
[Wed Sep 30 01:13:50.492190 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.492667 2026] [access_compat:error] [pid 276620:tid 276854] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.501526 2026] [security2:error] [pid 276620:tid 276863] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rtPAdfEWqmGIkg2AjQAAAnw"]
[Wed Sep 30 01:13:50.555476 2026] [security2:error] [pid 276620:tid 276857] [client 20.211.90.37:28001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/about/function.php"] [unique_id "ary2rtPAdfEWqmGIkg2AkAAAAnY"]
[Wed Sep 30 01:13:50.576460 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.576742 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.590192 2026] [security2:error] [pid 276620:tid 276864] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2rtPAdfEWqmGIkg2AlAAAAn0"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:50.665637 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.665952 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.692645 2026] [security2:error] [pid 276620:tid 276858] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rtPAdfEWqmGIkg2AmQAAAnc"]
[Wed Sep 30 01:13:50.731788 2026] [security2:error] [pid 276059:tid 276306] [client 20.214.145.90:26571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/b8.php"] [unique_id "ary2rntqdHBwD77138fK1gAAAf4"]
[Wed Sep 30 01:13:50.750366 2026] [security2:error] [pid 276620:tid 276788] [client 13.70.4.78:45675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ary2rtPAdfEWqmGIkg2AnAAAAjE"]
[Wed Sep 30 01:13:50.756626 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.756905 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.763982 2026] [security2:error] [pid 276059:tid 276231] [client 168.100.149.90:47480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/97b85e9db6456c011908da08be261265.358.css.gz"] [unique_id "ary2rntqdHBwD77138fK1wABszQ"]
[Wed Sep 30 01:13:50.789917 2026] [access_compat:error] [pid 276620:tid 276787] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:50.790192 2026] [access_compat:error] [pid 276620:tid 276787] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:50.821028 2026] [security2:error] [pid 276059:tid 276196] [client 43.104.4.210:3680] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/bdthemes-prime-slider-lite/assets/js/bdt-uikit.min.js"] [unique_id "ary2rntqdHBwD77138fK2AAAAZE"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:50.850347 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.850619 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.884788 2026] [security2:error] [pid 276620:tid 276781] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2rtPAdfEWqmGIkg2AowAAAio"]
[Wed Sep 30 01:13:50.914021 2026] [security2:error] [pid 276620:tid 276796] [client 20.194.30.107:10123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/ccc.php"] [unique_id "ary2rtPAdfEWqmGIkg2ApAAAAjk"]
[Wed Sep 30 01:13:50.939502 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:50.939774 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:50.964541 2026] [security2:error] [pid 276620:tid 276837] [client 4.240.25.22:38818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/cdc.php"] [unique_id "ary2rtPAdfEWqmGIkg2AqQAAAmI"]
[Wed Sep 30 01:13:50.996995 2026] [security2:error] [pid 276059:tid 276235] [client 20.214.145.90:26617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp_blog_footer.php"] [unique_id "ary2rntqdHBwD77138fK3AAAAbc"]
[Wed Sep 30 01:13:51.030308 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.030592 2026] [access_compat:error] [pid 276620:tid 276792] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.036784 2026] [security2:error] [pid 276620:tid 276881] [client 20.194.96.176:7294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/xex.php"] [unique_id "ary2r9PAdfEWqmGIkg2AsQAAAo4"]
[Wed Sep 30 01:13:51.076389 2026] [security2:error] [pid 276620:tid 276871] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2r9PAdfEWqmGIkg2AtAAAAoQ"]
[Wed Sep 30 01:13:51.088210 2026] [security2:error] [pid 276059:tid 276210] [client 20.211.90.37:28401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/simple.php"] [unique_id "ary2r3tqdHBwD77138fK3wAAAZ4"]
[Wed Sep 30 01:13:51.096243 2026] [security2:error] [pid 276620:tid 276859] [client 13.70.4.78:45673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-admin/setup-config.php"] [unique_id "ary2r9PAdfEWqmGIkg2AtgAAAng"]
[Wed Sep 30 01:13:51.120845 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.121115 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.159415 2026] [security2:error] [pid 276620:tid 276844] [client 4.232.144.219:36003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/zc-104.php"] [unique_id "ary2r9PAdfEWqmGIkg2AuwAAAmk"]
[Wed Sep 30 01:13:51.202850 2026] [security2:error] [pid 276620:tid 276827] [client 172.232.180.137:62797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "ary2r9PAdfEWqmGIkg2AvQAAAlg"]
[Wed Sep 30 01:13:51.211208 2026] [security2:error] [pid 276620:tid 276839] [client 20.213.164.196:15964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/zv.php"] [unique_id "ary2r9PAdfEWqmGIkg2AwAAAAmQ"]
[Wed Sep 30 01:13:51.212629 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.212920 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.266463 2026] [security2:error] [pid 276620:tid 276853] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2r9PAdfEWqmGIkg2AxgAAAnI"]
[Wed Sep 30 01:13:51.267730 2026] [access_compat:error] [pid 276620:tid 276807] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:51.268040 2026] [access_compat:error] [pid 276620:tid 276807] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:51.305835 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.306104 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:41816] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.330739 2026] [security2:error] [pid 276620:tid 276836] [client 20.214.145.90:26621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/0.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzAAAAmE"]
[Wed Sep 30 01:13:51.336411 2026] [security2:error] [pid 276620:tid 276805] [client 152.56.240.85:54175] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzQAAAkI"]
[Wed Sep 30 01:13:51.337443 2026] [security2:error] [pid 276620:tid 276805] [client 152.56.240.85:54175] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzQAAAkI"]
[Wed Sep 30 01:13:51.338355 2026] [security2:error] [pid 276620:tid 276857] [client 20.70.173.30:25930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-blog-header.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzgAAAnY"]
[Wed Sep 30 01:13:51.361577 2026] [security2:error] [pid 276620:tid 276838] [client 223.235.102.107:27659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzwAAAmM"]
[Wed Sep 30 01:13:51.361797 2026] [security2:error] [pid 276620:tid 276838] [client 223.235.102.107:27659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2r9PAdfEWqmGIkg2AzwAAAmM"]
[Wed Sep 30 01:13:51.403234 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.403688 2026] [access_compat:error] [pid 276059:tid 276284] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.415900 2026] [security2:error] [pid 276059:tid 276316] [client 13.70.4.78:37946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/wp-content/radio.php"] [unique_id "ary2r3tqdHBwD77138fK5AAAAgg"]
[Wed Sep 30 01:13:51.458600 2026] [security2:error] [pid 276620:tid 276825] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2r9PAdfEWqmGIkg2A0QAAAlY"]
[Wed Sep 30 01:13:51.469034 2026] [security2:error] [pid 276059:tid 276265] [client 20.211.90.37:27995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/goat1.php"] [unique_id "ary2r3tqdHBwD77138fK5QAAAdU"]
[Wed Sep 30 01:13:51.493220 2026] [security2:error] [pid 276059:tid 276303] [client 4.232.144.219:53322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/rzki.php"] [unique_id "ary2r3tqdHBwD77138fK5wAAAfs"]
[Wed Sep 30 01:13:51.508870 2026] [security2:error] [pid 276620:tid 276803] [client 4.240.25.22:18765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/222.php"] [unique_id "ary2r9PAdfEWqmGIkg2A0gAAAkA"]
[Wed Sep 30 01:13:51.538082 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.538357 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.577862 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.578190 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.646878 2026] [security2:error] [pid 276620:tid 276769] [client 20.214.145.90:26440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/fms.php"] [unique_id "ary2r9PAdfEWqmGIkg2A1wAAAh4"]
[Wed Sep 30 01:13:51.649091 2026] [security2:error] [pid 276620:tid 276781] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2r9PAdfEWqmGIkg2A2AAAAio"]
[Wed Sep 30 01:13:51.667334 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.667595 2026] [access_compat:error] [pid 276059:tid 276287] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.684480 2026] [security2:error] [pid 276620:tid 276795] [client 20.213.164.196:15959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/zv.update.php"] [unique_id "ary2r9PAdfEWqmGIkg2A2gAAAjg"]
[Wed Sep 30 01:13:51.705008 2026] [security2:error] [pid 276620:tid 276797] [client 20.70.173.30:25402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp_blog_footer.php"] [unique_id "ary2r9PAdfEWqmGIkg2A2wAAAjo"]
[Wed Sep 30 01:13:51.727987 2026] [security2:error] [pid 276620:tid 276792] [client 216.73.216.46:41816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2r9PAdfEWqmGIkg2A3QAAAjU"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MTY2L25vZGUwL2NwdTQvbm9kZTAvbWVtb3J5MjAz
[Wed Sep 30 01:13:51.745574 2026] [security2:error] [pid 276620:tid 276872] [client 13.70.4.78:37903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ary2r9PAdfEWqmGIkg2A3gAAAoU"]
[Wed Sep 30 01:13:51.762149 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.763138 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.772557 2026] [access_compat:error] [pid 276620:tid 276871] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:51.772831 2026] [access_compat:error] [pid 276620:tid 276871] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:51.840602 2026] [security2:error] [pid 276620:tid 276832] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2r9PAdfEWqmGIkg2A5AAAAl0"]
[Wed Sep 30 01:13:51.841497 2026] [security2:error] [pid 276620:tid 276790] [client 20.194.30.107:17403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/222.php"] [unique_id "ary2r9PAdfEWqmGIkg2A5QAAAjM"]
[Wed Sep 30 01:13:51.850008 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.850284 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.858873 2026] [security2:error] [pid 276620:tid 276870] [client 20.194.96.176:62722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/mmq.php"] [unique_id "ary2r9PAdfEWqmGIkg2A5gAAAoM"]
[Wed Sep 30 01:13:51.871125 2026] [security2:error] [pid 276620:tid 276812] [client 20.211.90.37:27964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/chosen.php"] [unique_id "ary2r9PAdfEWqmGIkg2A5wAAAkk"]
[Wed Sep 30 01:13:51.943056 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:51.943336 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:51.943348 2026] [security2:error] [pid 276059:tid 276200] [client 4.232.144.219:26883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/xsas.php"] [unique_id "ary2r3tqdHBwD77138fK9QAAAZU"]
[Wed Sep 30 01:13:51.988533 2026] [security2:error] [pid 276620:tid 276836] [client 20.214.145.90:26353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/xyn.php"] [unique_id "ary2r9PAdfEWqmGIkg2A7QAAAmE"]
[Wed Sep 30 01:13:52.031205 2026] [security2:error] [pid 276620:tid 276805] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2sNPAdfEWqmGIkg2A7gAAAkI"]
[Wed Sep 30 01:13:52.032685 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.032976 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.112530 2026] [security2:error] [pid 276059:tid 276257] [client 13.70.4.78:45667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/.well-known/log.php"] [unique_id "ary2sHtqdHBwD77138fK-QAAAc0"]
[Wed Sep 30 01:13:52.125942 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.126249 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.216138 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.216477 2026] [access_compat:error] [pid 276059:tid 276250] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.221454 2026] [security2:error] [pid 276620:tid 276794] [client 213.35.101.27:50811] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:pagename. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "%2f%2e%2e%2f,ARGS:pagename"] [severity "CRITICAL"] [hostname "holinauthor.holin.us"] [uri "/"] [unique_id "ary2sNPAdfEWqmGIkg2A-QAAAjc"]
[Wed Sep 30 01:13:52.240873 2026] [security2:error] [pid 276059:tid 276238] [client 20.211.90.37:28400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-cron.php"] [unique_id "ary2sHtqdHBwD77138fLAQAAAbo"]
[Wed Sep 30 01:13:52.249590 2026] [access_compat:error] [pid 276620:tid 276842] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:52.249855 2026] [access_compat:error] [pid 276620:tid 276842] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:52.302885 2026] [security2:error] [pid 276620:tid 276848] [client 20.213.164.196:54656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/wquosqsi.php"] [unique_id "ary2sNPAdfEWqmGIkg2A_QAAAm0"]
[Wed Sep 30 01:13:52.307506 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.307782 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.336935 2026] [core:error] [pid 276620:tid 276802] [client 119.8.41.86:13522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:52.336961 2026] [core:error] [pid 276620:tid 276802] [client 119.8.41.86:13522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:52.353458 2026] [security2:error] [pid 276620:tid 276866] [client 20.214.145.90:26432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/min.php"] [unique_id "ary2sNPAdfEWqmGIkg2BAAAAAn8"]
[Wed Sep 30 01:13:52.403481 2026] [security2:error] [pid 276059:tid 276194] [client 155.190.6.18:48848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2sHtqdHBwD77138fLBAAAAY8"]
[Wed Sep 30 01:13:52.410617 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.411108 2026] [access_compat:error] [pid 276059:tid 276276] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.419274 2026] [security2:error] [pid 276620:tid 276744] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2sNPAdfEWqmGIkg2BAQACLXI"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271803
[Wed Sep 30 01:13:52.419311 2026] [security2:error] [pid 276620:tid 276744] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2sNPAdfEWqmGIkg2BAQACLXI"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D271803
[Wed Sep 30 01:13:52.497310 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.497764 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.549745 2026] [security2:error] [pid 276620:tid 276797] [client 13.70.4.78:39434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/class.php"] [unique_id "ary2sNPAdfEWqmGIkg2BBQAAAjo"]
[Wed Sep 30 01:13:52.587666 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.588140 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.590208 2026] [security2:error] [pid 276620:tid 276862] [client 202.179.95.79:54393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.95.179.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2sNPAdfEWqmGIkg2BCAAAAns"]
[Wed Sep 30 01:13:52.590338 2026] [security2:error] [pid 276620:tid 276862] [client 202.179.95.79:54393] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "inplace-design.com"] [uri "/xmlrpc.php"] [unique_id "ary2sNPAdfEWqmGIkg2BCAAAAns"]
[Wed Sep 30 01:13:52.593630 2026] [security2:error] [pid 276059:tid 276205] [client 43.104.4.193:9026] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary2sHtqdHBwD77138fLBQAAAZo"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:52.607739 2026] [security2:error] [pid 276059:tid 276275] [client 4.232.144.219:26887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/d12.php"] [unique_id "ary2sHtqdHBwD77138fLCAAAAd8"]
[Wed Sep 30 01:13:52.646721 2026] [security2:error] [pid 276620:tid 276871] [client 20.211.90.37:28363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/yanz.php"] [unique_id "ary2sNPAdfEWqmGIkg2BCgAAAoQ"]
[Wed Sep 30 01:13:52.674749 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.675184 2026] [access_compat:error] [pid 276059:tid 276321] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.692684 2026] [security2:error] [pid 276059:tid 276194] [client 155.190.6.18:48848] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2sHtqdHBwD77138fLBAAAAY8"]
[Wed Sep 30 01:13:52.706351 2026] [security2:error] [pid 276059:tid 276299] [client 20.213.164.196:15998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/asset.php"] [unique_id "ary2sHtqdHBwD77138fLCwAAAfc"]
[Wed Sep 30 01:13:52.713988 2026] [security2:error] [pid 276059:tid 276312] [client 20.214.145.90:26318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-whe.php"] [unique_id "ary2sHtqdHBwD77138fLDAAAAgQ"]
[Wed Sep 30 01:13:52.754008 2026] [security2:error] [pid 276620:tid 276830] [client 20.194.96.176:7656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/CAE-2.5.php"] [unique_id "ary2sNPAdfEWqmGIkg2BCwAAAls"]
[Wed Sep 30 01:13:52.764088 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.764363 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.771372 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:52.771832 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:52.776417 2026] [security2:error] [pid 276059:tid 276247] [client 168.100.149.116:35976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/dbfc8877221a45c5513aecb26f344042.38c.css.gz"] [unique_id "ary2sHtqdHBwD77138fLDwABw1k"]
[Wed Sep 30 01:13:52.781247 2026] [security2:error] [pid 276620:tid 276826] [client 4.240.25.22:33281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/df.php"] [unique_id "ary2sNPAdfEWqmGIkg2BDwAAAlc"]
[Wed Sep 30 01:13:52.855859 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.856191 2026] [access_compat:error] [pid 276620:tid 276762] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.890224 2026] [security2:error] [pid 276059:tid 276166] [remote 74.7.227.56:37978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2sHtqdHBwD77138fLEQACC2Y"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=700
[Wed Sep 30 01:13:52.899504 2026] [access_compat:error] [pid 276620:tid 276832] [client 47.79.13.37:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:52.899962 2026] [access_compat:error] [pid 276620:tid 276832] [client 47.79.13.37:48696] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:52.914480 2026] [security2:error] [pid 276059:tid 276198] [client 65.111.0.28:56047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.0.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2sHtqdHBwD77138fLEAAAAZM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:13:52.944364 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:52.944625 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:52.961295 2026] [security2:error] [pid 276620:tid 276838] [client 4.232.144.219:36000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/okxh.php"] [unique_id "ary2sNPAdfEWqmGIkg2BGQAAAmM"]
[Wed Sep 30 01:13:53.001062 2026] [security2:error] [pid 276620:tid 276823] [client 20.214.145.90:26341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-filemanager1.php"] [unique_id "ary2sdPAdfEWqmGIkg2BGgAAAlQ"]
[Wed Sep 30 01:13:53.036702 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.036981 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.073794 2026] [core:error] [pid 276620:tid 276760] [client 202.170.91.69:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:53.073823 2026] [core:error] [pid 276620:tid 276760] [client 202.170.91.69:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:13:53.087339 2026] [security2:error] [pid 276059:tid 276251] [client 43.104.4.193:9026] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2sXtqdHBwD77138fLGQAAAcc"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:53.103820 2026] [security2:error] [pid 276059:tid 276284] [client 20.211.90.37:28393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/config.php"] [unique_id "ary2sXtqdHBwD77138fLGwAAAeg"]
[Wed Sep 30 01:13:53.105399 2026] [security2:error] [pid 276620:tid 276882] [client 20.213.164.196:35827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/cued.php"] [unique_id "ary2sdPAdfEWqmGIkg2BIAAAAo8"]
[Wed Sep 30 01:13:53.107882 2026] [security2:error] [pid 276059:tid 276265] [client 13.70.4.78:47638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/lock360.php"] [unique_id "ary2sXtqdHBwD77138fLHAAAAdU"]
[Wed Sep 30 01:13:53.128995 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.129381 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.173615 2026] [security2:error] [pid 276059:tid 276317] [client 20.194.30.107:17290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/samll.php"] [unique_id "ary2sXtqdHBwD77138fLHgAAAgk"]
[Wed Sep 30 01:13:53.220033 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.220328 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.265671 2026] [security2:error] [pid 276620:tid 276784] [client 20.214.145.90:26321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-freya.php"] [unique_id "ary2sdPAdfEWqmGIkg2BKgAAAi0"]
[Wed Sep 30 01:13:53.271972 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:53.272233 2026] [access_compat:error] [pid 276620:tid 276795] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:53.312243 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.312519 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.345927 2026] [security2:error] [pid 276620:tid 276809] [client 20.204.42.136:35736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/gxjybsva.php"] [unique_id "ary2sdPAdfEWqmGIkg2BLAAAAkY"]
[Wed Sep 30 01:13:53.408672 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.409155 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.448274 2026] [security2:error] [pid 276059:tid 276202] [client 20.214.191.94:42095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2sXtqdHBwD77138fLIgAAAZc"]
[Wed Sep 30 01:13:53.494781 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.495053 2026] [security2:error] [pid 276059:tid 276269] [client 13.70.4.78:37907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.4.70.13.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.legardinia.com"] [uri "/system_log.php"] [unique_id "ary2sXtqdHBwD77138fLJQAAAdk"]
[Wed Sep 30 01:13:53.495078 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.529822 2026] [security2:error] [pid 276620:tid 276881] [client 178.20.45.182:64739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.45.20.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenerdistheword.ca"] [uri "/index.php/contact-us-2/"] [unique_id "ary2sdPAdfEWqmGIkg2BNAAAAo4"], referer: http://thenerdistheword.ca/index.php/contact-us-2/
[Wed Sep 30 01:13:53.538421 2026] [security2:error] [pid 276620:tid 276862] [client 20.214.145.90:26437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/admin.php/admin.php"] [unique_id "ary2sdPAdfEWqmGIkg2BNQAAAns"]
[Wed Sep 30 01:13:53.546795 2026] [security2:error] [pid 276620:tid 276776] [client 4.232.144.219:53359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/55b76.php"] [unique_id "ary2sdPAdfEWqmGIkg2BNgAAAiU"]
[Wed Sep 30 01:13:53.559965 2026] [autoindex:error] [pid 276059:tid 276243] [client 169.40.142.138:48234] AH01276: Cannot serve directory /home4/pfwgdgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:53.563096 2026] [security2:error] [pid 276620:tid 276886] [client 193.56.28.177:18281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2sdPAdfEWqmGIkg2BMQAAApM"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:13:53.584341 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.584631 2026] [access_compat:error] [pid 276059:tid 276211] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.594703 2026] [security2:error] [pid 276059:tid 276213] [client 20.213.164.196:35820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/sd.php"] [unique_id "ary2sXtqdHBwD77138fLKQAAAaE"]
[Wed Sep 30 01:13:53.595433 2026] [security2:error] [pid 276059:tid 276300] [client 20.211.90.37:27966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/network.php"] [unique_id "ary2sXtqdHBwD77138fLKgAAAfg"]
[Wed Sep 30 01:13:53.675571 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.675865 2026] [access_compat:error] [pid 276059:tid 276274] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.753112 2026] [security2:error] [pid 276059:tid 276217] [client 20.214.191.94:42071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2sXtqdHBwD77138fLMAAAAaU"]
[Wed Sep 30 01:13:53.758667 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:53.758966 2026] [access_compat:error] [pid 276620:tid 276880] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:53.765963 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.766230 2026] [access_compat:error] [pid 276059:tid 276315] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.849945 2026] [security2:error] [pid 276620:tid 276839] [client 20.214.145.90:26481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/faiy.php"] [unique_id "ary2sdPAdfEWqmGIkg2BQQAAAmQ"]
[Wed Sep 30 01:13:53.856820 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.857095 2026] [access_compat:error] [pid 276059:tid 276309] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:53.947013 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:53.947300 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.006444 2026] [security2:error] [pid 276620:tid 276778] [client 45.138.12.32:36254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.myw.mly.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2stPAdfEWqmGIkg2BTAAAAic"]
[Wed Sep 30 01:13:54.039563 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.039857 2026] [access_compat:error] [pid 276059:tid 276293] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.073115 2026] [security2:error] [pid 276620:tid 276785] [client 20.214.191.94:42093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/atomlib.php"] [unique_id "ary2stPAdfEWqmGIkg2BTwAAAi4"]
[Wed Sep 30 01:13:54.084621 2026] [security2:error] [pid 276059:tid 276225] [client 4.232.144.219:53325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/tt.php"] [unique_id "ary2sntqdHBwD77138fLPQAAAa0"]
[Wed Sep 30 01:13:54.106204 2026] [security2:error] [pid 276620:tid 276882] [client 4.240.25.22:18698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/samll.php"] [unique_id "ary2stPAdfEWqmGIkg2BUQAAAo8"]
[Wed Sep 30 01:13:54.129725 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.130020 2026] [access_compat:error] [pid 276059:tid 276275] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.140630 2026] [security2:error] [pid 276620:tid 276816] [client 20.213.164.196:35814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/ans.php"] [unique_id "ary2stPAdfEWqmGIkg2BUwAAAk0"]
[Wed Sep 30 01:13:54.231038 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.231494 2026] [access_compat:error] [pid 276059:tid 276262] [client 216.73.216.46:62231] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.259018 2026] [security2:error] [pid 276620:tid 276842] [client 20.219.2.60:30393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/file-mancvgertdxz.php"] [unique_id "ary2stPAdfEWqmGIkg2BWAAAAmc"]
[Wed Sep 30 01:13:54.277034 2026] [security2:error] [pid 276620:tid 276819] [client 94.23.61.134:57730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.61.23.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-login.php"] [unique_id "ary2stPAdfEWqmGIkg2BVwAAAlA"]
[Wed Sep 30 01:13:54.282225 2026] [access_compat:error] [pid 276620:tid 276848] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:54.282499 2026] [access_compat:error] [pid 276620:tid 276848] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:54.319598 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.319929 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.351484 2026] [security2:error] [pid 276620:tid 276869] [client 20.214.191.94:42385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/a.php"] [unique_id "ary2stPAdfEWqmGIkg2BYAAAAoI"]
[Wed Sep 30 01:13:54.375803 2026] [security2:error] [pid 276059:tid 276247] [client 20.211.90.37:28015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-2019.php"] [unique_id "ary2sntqdHBwD77138fLRAAAAcM"]
[Wed Sep 30 01:13:54.447164 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.447640 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.464784 2026] [security2:error] [pid 276620:tid 276862] [client 20.214.145.90:26326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary2stPAdfEWqmGIkg2BZQAAAns"]
[Wed Sep 30 01:13:54.478733 2026] [security2:error] [pid 276620:tid 276797] [client 45.138.12.32:54542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mzx.auz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2stPAdfEWqmGIkg2BaAAAAjo"]
[Wed Sep 30 01:13:54.553276 2026] [security2:error] [pid 276059:tid 276258] [client 20.194.96.176:55298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/ass.php"] [unique_id "ary2sntqdHBwD77138fLUAAAAc4"]
[Wed Sep 30 01:13:54.554097 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.554382 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.592396 2026] [security2:error] [pid 276059:tid 276233] [client 20.213.164.196:35810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/cns.php"] [unique_id "ary2sntqdHBwD77138fLUQAAAbU"]
[Wed Sep 30 01:13:54.592608 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.592884 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.593880 2026] [security2:error] [pid 276059:tid 276235] [client 20.70.173.30:33280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-manager.php"] [unique_id "ary2sntqdHBwD77138fLUgAAAbc"]
[Wed Sep 30 01:13:54.602971 2026] [security2:error] [pid 276620:tid 276790] [client 4.232.144.219:35985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/maul.php"] [unique_id "ary2stPAdfEWqmGIkg2BbgAAAjM"]
[Wed Sep 30 01:13:54.651881 2026] [security2:error] [pid 276059:tid 276234] [client 216.73.216.46:62231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2sntqdHBwD77138fLVQAAAbY"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MzIvbm9kZTAvbWVtb3J5MTcz
[Wed Sep 30 01:13:54.675954 2026] [security2:error] [pid 276059:tid 276290] [client 20.214.191.94:42106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/v.php"] [unique_id "ary2sntqdHBwD77138fLVgAAAe4"]
[Wed Sep 30 01:13:54.684056 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.684341 2026] [access_compat:error] [pid 276620:tid 276767] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.686980 2026] [access_compat:error] [pid 276059:tid 276299] [client 157.245.105.107:54984] AH01797: client denied by server configuration: /home2/sprdalow/public_html/centralfuerth/server-status
[Wed Sep 30 01:13:54.709148 2026] [security2:error] [pid 276059:tid 276265] [client 4.240.25.22:38759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/f35.php"] [unique_id "ary2sntqdHBwD77138fLVwAAAdU"]
[Wed Sep 30 01:13:54.739750 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.145.90:26360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/myglu.php"] [unique_id "ary2stPAdfEWqmGIkg2BdQAAAl0"]
[Wed Sep 30 01:13:54.746576 2026] [access_compat:error] [pid 276620:tid 276836] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:54.746954 2026] [access_compat:error] [pid 276620:tid 276836] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:54.759075 2026] [security2:error] [pid 276059:tid 276311] [client 106.214.2.47:11952] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2sntqdHBwD77138fLWAAAAgM"]
[Wed Sep 30 01:13:54.759254 2026] [security2:error] [pid 276059:tid 276311] [client 106.214.2.47:11952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2sntqdHBwD77138fLWAAAAgM"]
[Wed Sep 30 01:13:54.773576 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.773866 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.780103 2026] [security2:error] [pid 276620:tid 276863] [client 168.100.149.11:31440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/f7492302d577386b4330e9acf069d0fb.8858.css.gz"] [unique_id "ary2stPAdfEWqmGIkg2BdwACfCQ"]
[Wed Sep 30 01:13:54.866053 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.866492 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.883703 2026] [security2:error] [pid 276059:tid 276317] [client 20.211.90.37:28356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/bypass.php"] [unique_id "ary2sntqdHBwD77138fLWwAAAgk"]
[Wed Sep 30 01:13:54.905964 2026] [security2:error] [pid 276059:tid 276251] [client 168.107.70.193:50840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "oee.qyz.mybluehost.me"] [uri "/"] [unique_id "ary2sntqdHBwD77138fLXQAAAcc"]
[Wed Sep 30 01:13:54.937960 2026] [security2:error] [pid 276059:tid 276222] [client 216.244.66.248:42840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "aplusprint.com"] [uri "/pictures/brown.jpg"] [unique_id "ary2sntqdHBwD77138fLYQAAAao"]
[Wed Sep 30 01:13:54.938095 2026] [security2:error] [pid 276059:tid 276222] [client 216.244.66.248:42840] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "aplusprint.com"] [uri "/pictures/brown.jpg"] [unique_id "ary2sntqdHBwD77138fLYQAAAao"]
[Wed Sep 30 01:13:54.956353 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:54.956618 2026] [access_compat:error] [pid 276620:tid 276851] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:54.970984 2026] [security2:error] [pid 276620:tid 276814] [client 20.194.30.107:23216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/dronishness.php"] [unique_id "ary2stPAdfEWqmGIkg2BhwAAAks"]
[Wed Sep 30 01:13:54.984022 2026] [security2:error] [pid 276059:tid 276286] [client 20.214.191.94:42091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/d2.php"] [unique_id "ary2sntqdHBwD77138fLYgAAAeo"]
[Wed Sep 30 01:13:55.002781 2026] [security2:error] [pid 276620:tid 276775] [client 20.70.173.30:19164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/w.php"] [unique_id "ary2s9PAdfEWqmGIkg2BiAAAAiQ"]
[Wed Sep 30 01:13:55.006264 2026] [security2:error] [pid 276620:tid 276802] [client 20.214.145.90:26592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/bnmtp.php"] [unique_id "ary2s9PAdfEWqmGIkg2BiQAAAj8"]
[Wed Sep 30 01:13:55.007635 2026] [security2:error] [pid 276620:tid 276768] [client 122.173.27.10:2783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2s9PAdfEWqmGIkg2BigAAAh0"]
[Wed Sep 30 01:13:55.007783 2026] [security2:error] [pid 276620:tid 276768] [client 122.173.27.10:2783] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2s9PAdfEWqmGIkg2BigAAAh0"]
[Wed Sep 30 01:13:55.014619 2026] [security2:error] [pid 276059:tid 276285] [client 34.53.167.100:60138] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2s3tqdHBwD77138fLYwAAAek"]
[Wed Sep 30 01:13:55.048440 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.048747 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.083918 2026] [security2:error] [pid 276059:tid 276206] [client 4.240.25.22:55396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2s3tqdHBwD77138fLaQAAAZs"]
[Wed Sep 30 01:13:55.101500 2026] [security2:error] [pid 276059:tid 276300] [client 20.28.180.172:8943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2s3tqdHBwD77138fLbAAAAfg"]
[Wed Sep 30 01:13:55.129205 2026] [security2:error] [pid 276059:tid 276198] [client 103.211.18.63:50960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2s3tqdHBwD77138fLbwAAAZM"]
[Wed Sep 30 01:13:55.129878 2026] [security2:error] [pid 276059:tid 276198] [client 103.211.18.63:50960] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2s3tqdHBwD77138fLbwAAAZM"]
[Wed Sep 30 01:13:55.137588 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.137875 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:50293] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.190703 2026] [security2:error] [pid 276059:tid 276240] [client 4.232.144.219:26913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/5b9ac.php"] [unique_id "ary2s3tqdHBwD77138fLcgAAAbw"]
[Wed Sep 30 01:13:55.215954 2026] [security2:error] [pid 276620:tid 276782] [client 20.213.164.196:54708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/faiy.php"] [unique_id "ary2s9PAdfEWqmGIkg2BkAAAAis"]
[Wed Sep 30 01:13:55.229402 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.229682 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.283240 2026] [security2:error] [pid 276059:tid 276254] [client 20.214.145.90:26480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/zeta.php"] [unique_id "ary2s3tqdHBwD77138fLcwAAAco"]
[Wed Sep 30 01:13:55.289489 2026] [security2:error] [pid 276620:tid 276872] [client 20.211.90.37:27969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary2s9PAdfEWqmGIkg2BlAAAAoU"]
[Wed Sep 30 01:13:55.291258 2026] [access_compat:error] [pid 276620:tid 276886] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:55.291545 2026] [access_compat:error] [pid 276620:tid 276886] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:55.300755 2026] [security2:error] [pid 276059:tid 276225] [client 20.214.191.94:42073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/xc.php"] [unique_id "ary2s3tqdHBwD77138fLdAAAAa0"]
[Wed Sep 30 01:13:55.326621 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.326923 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.417615 2026] [security2:error] [pid 276059:tid 276205] [client 173.254.29.157:38784] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/roboto.css"] [unique_id "ary2s3tqdHBwD77138fLeAAAAZo"]
[Wed Sep 30 01:13:55.425127 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.425443 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.449242 2026] [security2:error] [pid 276059:tid 276297] [client 173.254.29.157:38792] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/robotoslab.css"] [unique_id "ary2s3tqdHBwD77138fLeQAAAfU"]
[Wed Sep 30 01:13:55.489160 2026] [security2:error] [pid 276059:tid 276203] [client 43.104.4.193:9026] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/wp-util.min.js"] [unique_id "ary2s3tqdHBwD77138fLegAAAZg"], referer: https://coscharis-tech.com/product-category/software/solid-works-software/?wlfilter=1&woolentor_product_cat=3d-design-animation-software%2Casus
[Wed Sep 30 01:13:55.490021 2026] [security2:error] [pid 276059:tid 276307] [client 173.254.29.157:38802] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/poppins.css"] [unique_id "ary2s3tqdHBwD77138fLewAAAf8"]
[Wed Sep 30 01:13:55.548587 2026] [security2:error] [pid 276620:tid 276836] [client 216.73.216.46:50293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary2s9PAdfEWqmGIkg2BogAAAmE"], referer: http://www.homs.co.ke/?action=adminer&p=L3N5cy9idXMvbWVtb3J5L2RldmljZXMvbWVtb3J5MS9zdWJzeXN0ZW0vZGV2aWNlcw%3D%3D
[Wed Sep 30 01:13:55.560649 2026] [security2:error] [pid 276620:tid 276805] [client 20.213.164.196:54681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/gecho.php"] [unique_id "ary2s9PAdfEWqmGIkg2BowAAAkI"]
[Wed Sep 30 01:13:55.562089 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.562370 2026] [access_compat:error] [pid 276059:tid 276279] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.586168 2026] [security2:error] [pid 276620:tid 276871] [client 34.53.167.100:52938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2s9PAdfEWqmGIkg2BpQAAAoQ"]
[Wed Sep 30 01:13:55.588168 2026] [security2:error] [pid 276620:tid 276770] [client 20.214.145.90:26435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/upgrade/wp-firewall.php"] [unique_id "ary2s9PAdfEWqmGIkg2BpgAAAh8"]
[Wed Sep 30 01:13:55.605930 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.606408 2026] [access_compat:error] [pid 276620:tid 276838] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.620168 2026] [security2:error] [pid 276620:tid 276823] [client 20.214.191.94:42382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/g.php"] [unique_id "ary2s9PAdfEWqmGIkg2BqgAAAlQ"]
[Wed Sep 30 01:13:55.659420 2026] [security2:error] [pid 276620:tid 276852] [client 20.70.173.30:19176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/a.php"] [unique_id "ary2s9PAdfEWqmGIkg2BrAAAAnE"]
[Wed Sep 30 01:13:55.691073 2026] [security2:error] [pid 276059:tid 276258] [client 4.232.144.219:35982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/hehe.php"] [unique_id "ary2s3tqdHBwD77138fLgQAAAc4"]
[Wed Sep 30 01:13:55.692087 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.692358 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.773942 2026] [access_compat:error] [pid 276620:tid 276811] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:55.774215 2026] [access_compat:error] [pid 276620:tid 276811] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:55.776134 2026] [autoindex:error] [pid 276059:tid 276235] [client 20.162.8.144:0] AH01276: Cannot serve directory /home4/geyserjz/public_html/webmexsolutions/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:55.785568 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.786006 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.842165 2026] [security2:error] [pid 276620:tid 276795] [client 20.194.96.176:16092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/fryvbbn.php"] [unique_id "ary2s9PAdfEWqmGIkg2BuAAAAjg"]
[Wed Sep 30 01:13:55.875763 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.876060 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.888412 2026] [security2:error] [pid 276620:tid 276865] [client 20.213.164.196:35797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/gu.php"] [unique_id "ary2s9PAdfEWqmGIkg2BuwAAAn4"]
[Wed Sep 30 01:13:55.890279 2026] [security2:error] [pid 276620:tid 276806] [client 20.214.145.90:26610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-admin/includes/class-wp-site-list.php"] [unique_id "ary2s9PAdfEWqmGIkg2BvAAAAkM"]
[Wed Sep 30 01:13:55.891881 2026] [security2:error] [pid 276059:tid 276234] [client 20.211.90.37:27938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary2s3tqdHBwD77138fLhQAAAbY"]
[Wed Sep 30 01:13:55.968479 2026] [security2:error] [pid 276620:tid 276862] [client 4.240.25.22:18705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/ohct.php"] [unique_id "ary2s9PAdfEWqmGIkg2BvgAAAns"]
[Wed Sep 30 01:13:55.969332 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:55.969759 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:55.995142 2026] [security2:error] [pid 276620:tid 276783] [client 37.41.16.35:56147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2s9PAdfEWqmGIkg2BwAAAAiw"]
[Wed Sep 30 01:13:55.995310 2026] [security2:error] [pid 276620:tid 276783] [client 37.41.16.35:56147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2s9PAdfEWqmGIkg2BwAAAAiw"]
[Wed Sep 30 01:13:55.998282 2026] [security2:error] [pid 276059:tid 276299] [client 20.214.191.94:42375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/gmo.php"] [unique_id "ary2s3tqdHBwD77138fLhwAAAfc"]
[Wed Sep 30 01:13:56.054727 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.055026 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.057438 2026] [autoindex:error] [pid 276620:tid 276855] [client 185.247.137.41:34519] AH01276: Cannot serve directory /home4/dxvdnkmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.dxv.dnk.mybluehost.me
[Wed Sep 30 01:13:56.057522 2026] [security2:error] [pid 276620:tid 276861] [client 4.232.144.219:26902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "ary2tNPAdfEWqmGIkg2BxAAAAno"]
[Wed Sep 30 01:13:56.151838 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.152281 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.192481 2026] [security2:error] [pid 276620:tid 276882] [client 103.241.204.139:52970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2tNPAdfEWqmGIkg2ByAAAAo8"]
[Wed Sep 30 01:13:56.192590 2026] [security2:error] [pid 276620:tid 276882] [client 103.241.204.139:52970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2tNPAdfEWqmGIkg2ByAAAAo8"]
[Wed Sep 30 01:13:56.202268 2026] [security2:error] [pid 276620:tid 276856] [client 34.53.167.100:49430] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2tNPAdfEWqmGIkg2BygAAAnU"]
[Wed Sep 30 01:13:56.236816 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.237075 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.248158 2026] [security2:error] [pid 276620:tid 276839] [client 20.214.145.90:26449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-X1s2e6h3p7.php"] [unique_id "ary2tNPAdfEWqmGIkg2BzgAAAmQ"]
[Wed Sep 30 01:13:56.250342 2026] [security2:error] [pid 276620:tid 276849] [client 20.70.173.30:33388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/fling.php"] [unique_id "ary2tNPAdfEWqmGIkg2BzwAAAm4"]
[Wed Sep 30 01:13:56.259490 2026] [access_compat:error] [pid 276620:tid 276877] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:56.259757 2026] [access_compat:error] [pid 276620:tid 276877] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:56.264434 2026] [security2:error] [pid 276620:tid 276873] [client 20.211.90.37:28415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/tiny.php"] [unique_id "ary2tNPAdfEWqmGIkg2B0QAAAoY"]
[Wed Sep 30 01:13:56.267934 2026] [security2:error] [pid 276620:tid 276817] [client 20.194.96.176:55333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/felnggg.php"] [unique_id "ary2tNPAdfEWqmGIkg2B0gAAAk4"]
[Wed Sep 30 01:13:56.280896 2026] [security2:error] [pid 276620:tid 276773] [client 169.40.142.138:48246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "mail.pfw.gdg.mybluehost.me"] [uri "/"] [unique_id "ary2tNPAdfEWqmGIkg2B0wAAAiI"]
[Wed Sep 30 01:13:56.308515 2026] [security2:error] [pid 276620:tid 276798] [client 20.214.191.94:42388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/11.php"] [unique_id "ary2tNPAdfEWqmGIkg2B1AAAAjs"]
[Wed Sep 30 01:13:56.330627 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.331048 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.371085 2026] [security2:error] [pid 276059:tid 276304] [client 173.254.29.157:38804] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/montserrat.css"] [unique_id "ary2tHtqdHBwD77138fLlAAAAfw"]
[Wed Sep 30 01:13:56.396921 2026] [security2:error] [pid 276059:tid 276300] [client 20.213.164.196:54714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/nck.php"] [unique_id "ary2tHtqdHBwD77138fLlgAAAfg"]
[Wed Sep 30 01:13:56.427834 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.428271 2026] [access_compat:error] [pid 276620:tid 276816] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.430776 2026] [security2:error] [pid 276620:tid 276793] [client 172.232.180.137:59793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "ary2tNPAdfEWqmGIkg2B2AAAAjY"]
[Wed Sep 30 01:13:56.455253 2026] [security2:error] [pid 276059:tid 276198] [client 4.232.144.219:36001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/varb.php"] [unique_id "ary2tHtqdHBwD77138fLlwAAAZM"]
[Wed Sep 30 01:13:56.511098 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.511364 2026] [access_compat:error] [pid 276620:tid 276775] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.559306 2026] [security2:error] [pid 276620:tid 276881] [client 20.214.145.90:26340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/flamini.php"] [unique_id "ary2tNPAdfEWqmGIkg2B4QAAAo4"]
[Wed Sep 30 01:13:56.602818 2026] [security2:error] [pid 276059:tid 276211] [client 20.214.191.94:42399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/20.php"] [unique_id "ary2tHtqdHBwD77138fLmgAAAZ8"]
[Wed Sep 30 01:13:56.617671 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.618117 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.632837 2026] [security2:error] [pid 276620:tid 276886] [client 20.219.2.60:29901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2tNPAdfEWqmGIkg2B6gAAApM"]
[Wed Sep 30 01:13:56.648207 2026] [security2:error] [pid 276620:tid 276869] [client 20.211.90.37:27989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/lock.php"] [unique_id "ary2tNPAdfEWqmGIkg2B7AAAAoI"]
[Wed Sep 30 01:13:56.694004 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.694426 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.783081 2026] [security2:error] [pid 276620:tid 276804] [client 168.100.149.160:18702] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/a1f8a9994d82b3f8c05a80f7000e5904.1289.css.gz"] [unique_id "ary2tNPAdfEWqmGIkg2B-gACQUA"]
[Wed Sep 30 01:13:56.784184 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.784470 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.790030 2026] [security2:error] [pid 276620:tid 276802] [client 34.53.167.100:58795] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2tNPAdfEWqmGIkg2B-wAAAj8"]
[Wed Sep 30 01:13:56.806159 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:56.806434 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:56.875724 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.876011 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.887489 2026] [security2:error] [pid 276059:tid 276221] [client 20.214.191.94:42050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/f35.php"] [unique_id "ary2tHtqdHBwD77138fLnwAAAak"]
[Wed Sep 30 01:13:56.918516 2026] [security2:error] [pid 276620:tid 276831] [client 4.232.144.219:35980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/lm15.php"] [unique_id "ary2tNPAdfEWqmGIkg2CBgAAAlw"]
[Wed Sep 30 01:13:56.920762 2026] [security2:error] [pid 276620:tid 276801] [client 163.223.4.132:55097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.4.223.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2tNPAdfEWqmGIkg2CBQAAAj4"]
[Wed Sep 30 01:13:56.920904 2026] [security2:error] [pid 276620:tid 276801] [client 163.223.4.132:55097] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2tNPAdfEWqmGIkg2CBQAAAj4"]
[Wed Sep 30 01:13:56.966204 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:56.966488 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:56.991311 2026] [security2:error] [pid 276620:tid 276864] [client 20.214.145.90:26307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/myglu.php"] [unique_id "ary2tNPAdfEWqmGIkg2CCwAAAn0"]
[Wed Sep 30 01:13:57.006616 2026] [security2:error] [pid 276620:tid 276785] [client 45.138.12.32:48862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.myw.mly.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2tdPAdfEWqmGIkg2CDQAAAi4"]
[Wed Sep 30 01:13:57.035348 2026] [security2:error] [pid 276059:tid 276293] [client 52.167.144.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/shop/"] [unique_id "ary2tXtqdHBwD77138fLoQAAAfE"]
[Wed Sep 30 01:13:57.049577 2026] [security2:error] [pid 276620:tid 276774] [client 20.213.164.196:54709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/xtt.php"] [unique_id "ary2tdPAdfEWqmGIkg2CFAAAAiM"]
[Wed Sep 30 01:13:57.055027 2026] [security2:error] [pid 276620:tid 276779] [client 47.79.13.175:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2tdPAdfEWqmGIkg2CFQAAAig"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:13:57.055710 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.055970 2026] [access_compat:error] [pid 276620:tid 276879] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.151111 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.151381 2026] [access_compat:error] [pid 276620:tid 276759] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.179095 2026] [access_compat:error] [pid 276059:tid 276250] [client 47.79.13.37:48708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:57.179371 2026] [access_compat:error] [pid 276059:tid 276250] [client 47.79.13.37:48708] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:57.181902 2026] [security2:error] [pid 276059:tid 276194] [client 20.211.90.37:28375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/mail.php"] [unique_id "ary2tXtqdHBwD77138fLpQAAAY8"]
[Wed Sep 30 01:13:57.225898 2026] [security2:error] [pid 276620:tid 276646] [remote 57.141.14.66:43410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/wp-json/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "ary2tdPAdfEWqmGIkg2CHQACRBA"]
[Wed Sep 30 01:13:57.229615 2026] [security2:error] [pid 276620:tid 276886] [client 20.214.191.94:42379] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.royalcanvas.ca"] [uri "/1.php"] [unique_id "ary2tdPAdfEWqmGIkg2CHgAAApM"]
[Wed Sep 30 01:13:57.229719 2026] [security2:error] [pid 276620:tid 276886] [client 20.214.191.94:42379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/1.php"] [unique_id "ary2tdPAdfEWqmGIkg2CHgAAApM"]
[Wed Sep 30 01:13:57.239441 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.239702 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.246666 2026] [security2:error] [pid 276620:tid 276806] [client 20.194.30.107:23613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/baba.php"] [unique_id "ary2tdPAdfEWqmGIkg2CIAAAAkM"]
[Wed Sep 30 01:13:57.303450 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:57.303764 2026] [access_compat:error] [pid 276620:tid 276837] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:13:57.342663 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.343098 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.428604 2026] [security2:error] [pid 276620:tid 276767] [client 34.53.167.100:54053] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ary2tdPAdfEWqmGIkg2CKgAAAhw"]
[Wed Sep 30 01:13:57.428679 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.429100 2026] [access_compat:error] [pid 276059:tid 276268] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.455661 2026] [security2:error] [pid 276059:tid 276247] [client 20.214.145.90:26567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/alfa.php"] [unique_id "ary2tXtqdHBwD77138fLqwAAAcM"]
[Wed Sep 30 01:13:57.461713 2026] [security2:error] [pid 276620:tid 276772] [client 4.240.25.22:55933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2tdPAdfEWqmGIkg2CLAAAAiE"]
[Wed Sep 30 01:13:57.463184 2026] [access_compat:error] [pid 276620:tid 276842] [client 47.79.13.176:57792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:57.463473 2026] [access_compat:error] [pid 276620:tid 276842] [client 47.79.13.176:57792] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:57.468425 2026] [security2:error] [pid 276059:tid 276297] [client 4.240.25.22:38734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/about.php"] [unique_id "ary2tXtqdHBwD77138fLrAAAAfU"]
[Wed Sep 30 01:13:57.480140 2026] [security2:error] [pid 276059:tid 276201] [client 4.232.144.219:26898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/clss.php"] [unique_id "ary2tXtqdHBwD77138fLrQAAAZY"]
[Wed Sep 30 01:13:57.482847 2026] [security2:error] [pid 276620:tid 276872] [client 20.70.173.30:27819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/classwithtostring.php"] [unique_id "ary2tdPAdfEWqmGIkg2CLgAAAoU"]
[Wed Sep 30 01:13:57.488073 2026] [security2:error] [pid 276620:tid 276790] [client 20.213.164.196:54668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.164.213.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aynabeautystudio.com"] [uri "/go.php"] [unique_id "ary2tdPAdfEWqmGIkg2CMAAAAjM"]
[Wed Sep 30 01:13:57.514789 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.515073 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.520231 2026] [security2:error] [pid 276620:tid 276880] [client 20.211.90.37:27913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/system_log.php"] [unique_id "ary2tdPAdfEWqmGIkg2CMgAAAo0"]
[Wed Sep 30 01:13:57.537631 2026] [security2:error] [pid 276620:tid 276861] [client 20.214.191.94:42370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/c.php"] [unique_id "ary2tdPAdfEWqmGIkg2CMwAAAno"]
[Wed Sep 30 01:13:57.607644 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.608058 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.612332 2026] [security2:error] [pid 276620:tid 276659] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2tdPAdfEWqmGIkg2CNwACih0"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D18148
[Wed Sep 30 01:13:57.698653 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.699030 2026] [access_compat:error] [pid 276059:tid 276271] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.719846 2026] [security2:error] [pid 276620:tid 276832] [client 20.194.96.176:55331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/felnggg.update.php"] [unique_id "ary2tdPAdfEWqmGIkg2CPAAAAl0"]
[Wed Sep 30 01:13:57.754142 2026] [security2:error] [pid 276059:tid 276108] [remote 130.49.215.84:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.215.49.130.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hamaraquetta.com"] [uri "/wp-links-opml.php"] [unique_id "ary2tXtqdHBwD77138fLvAABpiw"]
[Wed Sep 30 01:13:57.754687 2026] [security2:error] [pid 276620:tid 276760] [client 122.177.240.90:25358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2tdPAdfEWqmGIkg2CPwAAAhU"]
[Wed Sep 30 01:13:57.754788 2026] [security2:error] [pid 276620:tid 276760] [client 122.177.240.90:25358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2tdPAdfEWqmGIkg2CPwAAAhU"]
[Wed Sep 30 01:13:57.760130 2026] [security2:error] [pid 276059:tid 276272] [client 20.214.145.90:26357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/index.php"] [unique_id "ary2tXtqdHBwD77138fLvQAAAdw"]
[Wed Sep 30 01:13:57.785599 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:57.785760 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.785875 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9kZXY=
[Wed Sep 30 01:13:57.786034 2026] [access_compat:error] [pid 276059:tid 276234] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.839884 2026] [security2:error] [pid 276620:tid 276825] [client 20.214.191.94:42051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/build.php"] [unique_id "ary2tdPAdfEWqmGIkg2CRgAAAlY"]
[Wed Sep 30 01:13:57.877186 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.877464 2026] [access_compat:error] [pid 276059:tid 276299] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:57.903063 2026] [security2:error] [pid 276620:tid 276814] [client 4.232.144.219:26930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/44.php"] [unique_id "ary2tdPAdfEWqmGIkg2CRwAAAks"]
[Wed Sep 30 01:13:57.904009 2026] [security2:error] [pid 276620:tid 276844] [client 20.211.90.37:27942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/file.php"] [unique_id "ary2tdPAdfEWqmGIkg2CSAAAAmk"]
[Wed Sep 30 01:13:57.969608 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:57.969898 2026] [access_compat:error] [pid 276620:tid 276779] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.044548 2026] [security2:error] [pid 276620:tid 276852] [client 34.53.167.100:55270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2ttPAdfEWqmGIkg2CUAAAAnE"]
[Wed Sep 30 01:13:58.059323 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.059594 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.122362 2026] [security2:error] [pid 276620:tid 276794] [client 20.214.145.90:26343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ary2ttPAdfEWqmGIkg2CVgAAAjc"]
[Wed Sep 30 01:13:58.142630 2026] [security2:error] [pid 276620:tid 276763] [client 20.214.191.94:42101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/bless.php"] [unique_id "ary2ttPAdfEWqmGIkg2CVwAAAhg"]
[Wed Sep 30 01:13:58.146179 2026] [security2:error] [pid 276059:tid 276311] [client 43.104.4.182:8067] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "ary2tntqdHBwD77138fLxgAAAgM"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:13:58.148979 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.149250 2026] [access_compat:error] [pid 276620:tid 276797] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.183325 2026] [security2:error] [pid 276620:tid 276777] [client 4.240.25.22:18696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/kj.php"] [unique_id "ary2ttPAdfEWqmGIkg2CXAAAAiY"]
[Wed Sep 30 01:13:58.241638 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.241929 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.279337 2026] [security2:error] [pid 276620:tid 276846] [client 4.232.144.219:26896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/a5e0a.php"] [unique_id "ary2ttPAdfEWqmGIkg2CXgAAAms"]
[Wed Sep 30 01:13:58.287899 2026] [access_compat:error] [pid 276620:tid 276812] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:58.288194 2026] [access_compat:error] [pid 276620:tid 276812] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:58.334503 2026] [security2:error] [pid 276620:tid 276772] [client 20.194.30.107:23173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/wp.php"] [unique_id "ary2ttPAdfEWqmGIkg2CZAAAAiE"]
[Wed Sep 30 01:13:58.334547 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.334842 2026] [access_compat:error] [pid 276620:tid 276865] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.350932 2026] [security2:error] [pid 276620:tid 276830] [client 20.219.2.60:30037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws57.php"] [unique_id "ary2ttPAdfEWqmGIkg2CZQAAAls"]
[Wed Sep 30 01:13:58.369845 2026] [security2:error] [pid 276620:tid 276842] [client 114.119.157.195:62987] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.smartagrico.com"] [uri "/robots.txt"] [unique_id "ary2ttPAdfEWqmGIkg2CZgAAAmc"], referer: http://www.smartagrico.com/robots.txt
[Wed Sep 30 01:13:58.422427 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.422702 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.443901 2026] [security2:error] [pid 276059:tid 276287] [client 20.214.191.94:42471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/admin/upload/css.php"] [unique_id "ary2tntqdHBwD77138fLygAAAes"]
[Wed Sep 30 01:13:58.456144 2026] [security2:error] [pid 276059:tid 276318] [client 20.211.90.37:27984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary2tntqdHBwD77138fLywAAAgo"]
[Wed Sep 30 01:13:58.473100 2026] [security2:error] [pid 276059:tid 276289] [client 20.28.180.172:9029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2tntqdHBwD77138fLzAAAAe0"]
[Wed Sep 30 01:13:58.514622 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.514906 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.600921 2026] [security2:error] [pid 276059:tid 276099] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/api/.env"] [unique_id "ary2tHtqdHBwD77138fL0AAB5SM"]
[Wed Sep 30 01:13:58.600936 2026] [security2:error] [pid 276059:tid 276121] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/application/.env"] [unique_id "ary2tHtqdHBwD77138fL0QAB5Tk"]
[Wed Sep 30 01:13:58.601139 2026] [security2:error] [pid 276059:tid 276137] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/app/.env"] [unique_id "ary2tHtqdHBwD77138fL0wAB5Uk"]
[Wed Sep 30 01:13:58.603629 2026] [security2:error] [pid 276059:tid 276099] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/back/.env"] [unique_id "ary2tXtqdHBwD77138fL2gAB5SM"]
[Wed Sep 30 01:13:58.603715 2026] [security2:error] [pid 276059:tid 276121] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/backend/.env"] [unique_id "ary2tXtqdHBwD77138fL2wAB5Tk"]
[Wed Sep 30 01:13:58.604265 2026] [security2:error] [pid 276059:tid 276119] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hapitochfoundation.org"] [uri "/api/phpinfo.php"] [unique_id "ary2tHtqdHBwD77138fL1AAB5Tc"]
[Wed Sep 30 01:13:58.606014 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.606269 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.645220 2026] [security2:error] [pid 276620:tid 276724] [remote 64.23.166.180:24704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.izk.wom.mybluehost.me"] [uri "/.env"] [unique_id "ary2ttPAdfEWqmGIkg2CdgACYV4"]
[Wed Sep 30 01:13:58.649629 2026] [security2:error] [pid 276059:tid 276204] [client 4.232.144.219:36028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/bo.php"] [unique_id "ary2tntqdHBwD77138fL3gAAAZk"]
[Wed Sep 30 01:13:58.658522 2026] [security2:error] [pid 276620:tid 276827] [client 34.53.167.100:51547] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ary2ttPAdfEWqmGIkg2CdwAAAlg"]
[Wed Sep 30 01:13:58.668352 2026] [security2:error] [pid 276620:tid 276819] [client 179.105.122.52:53867] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ttPAdfEWqmGIkg2CeAAAAlA"]
[Wed Sep 30 01:13:58.668841 2026] [security2:error] [pid 276620:tid 276819] [client 179.105.122.52:53867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ttPAdfEWqmGIkg2CeAAAAlA"]
[Wed Sep 30 01:13:58.679671 2026] [security2:error] [pid 276059:tid 276304] [client 213.136.69.135:63705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/fonts/class-wp-font-collection.php"] [unique_id "ary2tntqdHBwD77138fL3wAAAfw"], referer: binance.com
[Wed Sep 30 01:13:58.693906 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.694174 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.722037 2026] [security2:error] [pid 276059:tid 276168] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/backup/.env"] [unique_id "ary2tntqdHBwD77138fL4AABl2g"]
[Wed Sep 30 01:13:58.722924 2026] [security2:error] [pid 276059:tid 276130] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/cms/.env"] [unique_id "ary2tntqdHBwD77138fL4QABl0I"]
[Wed Sep 30 01:13:58.737702 2026] [security2:error] [pid 276059:tid 276183] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hapitochfoundation.org"] [uri "/config.php"] [unique_id "ary2tntqdHBwD77138fL6AAB73c"]
[Wed Sep 30 01:13:58.767933 2026] [security2:error] [pid 276059:tid 276239] [client 20.214.191.94:42395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/lock360.php"] [unique_id "ary2tntqdHBwD77138fL7AAAAbs"]
[Wed Sep 30 01:13:58.787308 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.787628 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.807858 2026] [security2:error] [pid 276620:tid 276834] [client 168.100.149.220:53280] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/693704a5d7ed0c5b976cbb655386c2c8.38c.css.gz"] [unique_id "ary2ttPAdfEWqmGIkg2ChAACX20"]
[Wed Sep 30 01:13:58.809654 2026] [access_compat:error] [pid 276620:tid 276844] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:58.809928 2026] [access_compat:error] [pid 276620:tid 276844] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:13:58.857048 2026] [security2:error] [pid 276059:tid 276123] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/core/.env"] [unique_id "ary2tntqdHBwD77138fL8QAB7zs"]
[Wed Sep 30 01:13:58.857296 2026] [security2:error] [pid 276059:tid 276170] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/config/.env"] [unique_id "ary2tntqdHBwD77138fL8gAB72o"]
[Wed Sep 30 01:13:58.857577 2026] [security2:error] [pid 276059:tid 276111] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/dev/.env"] [unique_id "ary2tntqdHBwD77138fL9QAB7y8"]
[Wed Sep 30 01:13:58.857606 2026] [security2:error] [pid 276059:tid 276096] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/database.sql"] [unique_id "ary2tntqdHBwD77138fL7wAB7yA"]
[Wed Sep 30 01:13:58.868014 2026] [security2:error] [pid 276620:tid 276762] [client 4.240.25.22:8906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2ttPAdfEWqmGIkg2CigAAAhc"]
[Wed Sep 30 01:13:58.877762 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.878023 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.879997 2026] [security2:error] [pid 276620:tid 276765] [client 20.211.90.37:28490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2ttPAdfEWqmGIkg2CjQAAAho"]
[Wed Sep 30 01:13:58.971577 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:58.972059 2026] [access_compat:error] [pid 276620:tid 276763] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:58.995146 2026] [security2:error] [pid 276059:tid 276181] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/frontend/.env"] [unique_id "ary2tntqdHBwD77138fMBgAB73U"]
[Wed Sep 30 01:13:58.996253 2026] [security2:error] [pid 276059:tid 276181] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hapitochfoundation.org"] [uri "/info.php"] [unique_id "ary2tntqdHBwD77138fMCAAB73U"]
[Wed Sep 30 01:13:58.998109 2026] [security2:error] [pid 276059:tid 276181] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/media/.env"] [unique_id "ary2tntqdHBwD77138fMCQAB73U"]
[Wed Sep 30 01:13:58.998111 2026] [security2:error] [pid 276059:tid 276109] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/laravel/.env"] [unique_id "ary2tntqdHBwD77138fMCwAB7y0"]
[Wed Sep 30 01:13:58.998112 2026] [security2:error] [pid 276059:tid 276083] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/new/.env"] [unique_id "ary2tntqdHBwD77138fMCgAB7xM"]
[Wed Sep 30 01:13:59.012559 2026] [security2:error] [pid 276059:tid 276148] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/old/.env"] [unique_id "ary2t3tqdHBwD77138fMDQAB71Q"]
[Wed Sep 30 01:13:59.037822 2026] [security2:error] [pid 276059:tid 276310] [client 4.232.144.219:39587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/56c53.php"] [unique_id "ary2t3tqdHBwD77138fMEAAAAgI"]
[Wed Sep 30 01:13:59.062757 2026] [access_compat:error] [pid 276059:tid 276255] [client 47.79.13.73:49232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:59.063035 2026] [access_compat:error] [pid 276059:tid 276255] [client 47.79.13.73:49232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:59.064064 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.064522 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.096713 2026] [security2:error] [pid 276059:tid 276081] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hapitochfoundation.org"] [uri "/phpinfo.php"] [unique_id "ary2t3tqdHBwD77138fMEgAB7xE"]
[Wed Sep 30 01:13:59.098744 2026] [security2:error] [pid 276620:tid 276812] [client 20.214.191.94:42378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/4.php"] [unique_id "ary2t9PAdfEWqmGIkg2CogAAAkk"]
[Wed Sep 30 01:13:59.109676 2026] [security2:error] [pid 276620:tid 276882] [client 20.70.173.30:19196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/key.php"] [unique_id "ary2t9PAdfEWqmGIkg2CowAAAo8"]
[Wed Sep 30 01:13:59.132104 2026] [security2:error] [pid 276059:tid 276165] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/production/.env"] [unique_id "ary2t3tqdHBwD77138fMGAAB72U"]
[Wed Sep 30 01:13:59.134264 2026] [security2:error] [pid 276059:tid 276113] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/public/.env"] [unique_id "ary2t3tqdHBwD77138fMGQAB7zE"]
[Wed Sep 30 01:13:59.134370 2026] [security2:error] [pid 276059:tid 276153] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/server/.env"] [unique_id "ary2t3tqdHBwD77138fMHQAB71k"]
[Wed Sep 30 01:13:59.148880 2026] [security2:error] [pid 276059:tid 276087] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/src/.env"] [unique_id "ary2t3tqdHBwD77138fMHwAB7xc"]
[Wed Sep 30 01:13:59.150901 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.151311 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.183973 2026] [autoindex:error] [pid 276059:tid 276278] [client 20.214.145.90:26585] AH01276: Cannot serve directory /home4/michell5/public_html/hannahjune.com/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:59.233988 2026] [security2:error] [pid 276059:tid 276166] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/staging/.env"] [unique_id "ary2t3tqdHBwD77138fMIgAB72Y"]
[Wed Sep 30 01:13:59.236657 2026] [security2:error] [pid 276620:tid 276855] [client 20.211.90.37:27990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/manager.php"] [unique_id "ary2t9PAdfEWqmGIkg2CrQAAAnQ"]
[Wed Sep 30 01:13:59.241816 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.242083 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.261458 2026] [security2:error] [pid 276059:tid 276213] [client 34.53.167.100:56982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2t3tqdHBwD77138fMIwAAAaE"]
[Wed Sep 30 01:13:59.268895 2026] [security2:error] [pid 276059:tid 276065] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/test/.env"] [unique_id "ary2t3tqdHBwD77138fMJAAB7wE"]
[Wed Sep 30 01:13:59.270441 2026] [security2:error] [pid 276059:tid 276078] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/v2/.env"] [unique_id "ary2t3tqdHBwD77138fMJQAB7w4"]
[Wed Sep 30 01:13:59.270653 2026] [security2:error] [pid 276059:tid 276105] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/v1/.env"] [unique_id "ary2t3tqdHBwD77138fMJgAB7yk"]
[Wed Sep 30 01:13:59.271227 2026] [security2:error] [pid 276059:tid 276073] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/web/.env"] [unique_id "ary2t3tqdHBwD77138fMKAAB7wk"]
[Wed Sep 30 01:13:59.272084 2026] [access_compat:error] [pid 276620:tid 276847] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:13:59.272370 2026] [access_compat:error] [pid 276620:tid 276847] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:13:59.284346 2026] [security2:error] [pid 276059:tid 276075] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hapitochfoundation.org"] [uri "/wp-config.php.bak"] [unique_id "ary2t3tqdHBwD77138fMKQAB7ws"]
[Wed Sep 30 01:13:59.331783 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.332050 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.356340 2026] [security2:error] [pid 276620:tid 276825] [client 49.37.102.248:50251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2t9PAdfEWqmGIkg2CswAAAlY"]
[Wed Sep 30 01:13:59.356479 2026] [security2:error] [pid 276620:tid 276825] [client 49.37.102.248:50251] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2t9PAdfEWqmGIkg2CswAAAlY"]
[Wed Sep 30 01:13:59.397950 2026] [security2:error] [pid 276059:tid 276201] [client 20.214.191.94:42374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/about.php"] [unique_id "ary2t3tqdHBwD77138fMLgAAAZY"]
[Wed Sep 30 01:13:59.412277 2026] [security2:error] [pid 276059:tid 276146] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/.gitconfig.bak"] [unique_id "ary2t3tqdHBwD77138fMMgAB71I"]
[Wed Sep 30 01:13:59.412301 2026] [security2:error] [pid 276059:tid 276114] [remote 35.240.100.200:39466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "hapitochfoundation.org"] [uri "/pg.sql"] [unique_id "ary2t3tqdHBwD77138fMMAAB7zI"]
[Wed Sep 30 01:13:59.426352 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.426803 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.500395 2026] [security2:error] [pid 276059:tid 276314] [client 223.181.60.167:24896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2t3tqdHBwD77138fMOQAAAgY"]
[Wed Sep 30 01:13:59.500570 2026] [security2:error] [pid 276059:tid 276314] [client 223.181.60.167:24896] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2t3tqdHBwD77138fMOQAAAgY"]
[Wed Sep 30 01:13:59.501616 2026] [autoindex:error] [pid 276059:tid 276312] [client 20.214.145.90:0] AH01276: Cannot serve directory /home4/michell5/public_html/hannahjune.com/wp-includes/blocks/audio/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:13:59.521111 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.521570 2026] [access_compat:error] [pid 276620:tid 276831] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.554761 2026] [security2:error] [pid 276059:tid 276272] [client 4.240.25.22:24275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "ary2t3tqdHBwD77138fMPgAAAdw"]
[Wed Sep 30 01:13:59.571222 2026] [security2:error] [pid 276620:tid 276863] [client 4.232.144.219:26900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/tx78.php"] [unique_id "ary2t9PAdfEWqmGIkg2CxQAAAnw"]
[Wed Sep 30 01:13:59.571978 2026] [security2:error] [pid 276620:tid 276800] [client 20.211.90.37:28003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/plugins/pwnd/as.php"] [unique_id "ary2t9PAdfEWqmGIkg2CxgAAAj0"]
[Wed Sep 30 01:13:59.600790 2026] [security2:error] [pid 276620:tid 276823] [client 20.70.173.30:33379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/felnggg.php"] [unique_id "ary2t9PAdfEWqmGIkg2CyAAAAlQ"]
[Wed Sep 30 01:13:59.606177 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.606472 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.642943 2026] [security2:error] [pid 276620:tid 276828] [client 20.214.145.90:26453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-admin/js/index.php"] [unique_id "ary2t9PAdfEWqmGIkg2CywAAAlk"]
[Wed Sep 30 01:13:59.690853 2026] [access_compat:error] [pid 276620:tid 276827] [client 47.79.13.1:55500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:13:59.691139 2026] [access_compat:error] [pid 276620:tid 276827] [client 47.79.13.1:55500] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:13:59.697156 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.697440 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.746974 2026] [security2:error] [pid 276620:tid 276797] [client 20.214.191.94:42108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/r.php"] [unique_id "ary2t9PAdfEWqmGIkg2C1AAAAjo"]
[Wed Sep 30 01:13:59.759197 2026] [access_compat:error] [pid 276620:tid 276881] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:59.759614 2026] [access_compat:error] [pid 276620:tid 276881] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:13:59.788419 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.788698 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.817039 2026] [security2:error] [pid 276620:tid 276869] [client 20.219.2.60:29889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/.qiodetme.php"] [unique_id "ary2t9PAdfEWqmGIkg2C3QAAAoI"]
[Wed Sep 30 01:13:59.852308 2026] [security2:error] [pid 276620:tid 276850] [client 20.194.96.176:59183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/ff.update.php"] [unique_id "ary2t9PAdfEWqmGIkg2C4AAAAm8"]
[Wed Sep 30 01:13:59.871240 2026] [security2:error] [pid 276059:tid 276235] [client 34.53.167.100:62986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2t3tqdHBwD77138fMRQAAAbc"]
[Wed Sep 30 01:13:59.879658 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.880021 2026] [access_compat:error] [pid 276620:tid 276840] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.950026 2026] [security2:error] [pid 276620:tid 276837] [client 20.28.180.172:8898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/gecho.php"] [unique_id "ary2t9PAdfEWqmGIkg2C4wAAAmI"]
[Wed Sep 30 01:13:59.962853 2026] [security2:error] [pid 276620:tid 276722] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2t9PAdfEWqmGIkg2C5QACQVw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=240046
[Wed Sep 30 01:13:59.962885 2026] [security2:error] [pid 276620:tid 276722] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2t9PAdfEWqmGIkg2C5QACQVw"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=240046
[Wed Sep 30 01:13:59.969466 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:13:59.969752 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:13:59.999745 2026] [security2:error] [pid 276059:tid 276287] [client 20.214.145.90:26443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/admin.php"] [unique_id "ary2t3tqdHBwD77138fMSgAAAes"]
[Wed Sep 30 01:14:00.024191 2026] [security2:error] [pid 276059:tid 276224] [client 4.232.144.219:26884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws80.php"] [unique_id "ary2uHtqdHBwD77138fMSwAAAaw"]
[Wed Sep 30 01:14:00.062175 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:00.062460 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:00.147208 2026] [security2:error] [pid 276620:tid 276868] [client 20.214.191.94:42077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/v4.php"] [unique_id "ary2uNPAdfEWqmGIkg2C7wAAAoE"]
[Wed Sep 30 01:14:00.154844 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:00.155123 2026] [access_compat:error] [pid 276620:tid 276817] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:00.171818 2026] [security2:error] [pid 276059:tid 276206] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2uHtqdHBwD77138fMUAAAAZs"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:00.176891 2026] [security2:error] [pid 276620:tid 276773] [client 4.240.25.22:38775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/dex.php"] [unique_id "ary2uNPAdfEWqmGIkg2C9QAAAiI"]
[Wed Sep 30 01:14:00.179338 2026] [security2:error] [pid 276620:tid 276842] [client 20.204.101.195:57458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.101.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ete.paw.mybluehost.me"] [uri "/index.php"] [unique_id "ary2uNPAdfEWqmGIkg2C9AAAAmc"]
[Wed Sep 30 01:14:00.239075 2026] [access_compat:error] [pid 276620:tid 276784] [client 47.79.13.178:40432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:00.239379 2026] [access_compat:error] [pid 276620:tid 276784] [client 47.79.13.178:40432] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:00.272741 2026] [access_compat:error] [pid 276620:tid 276798] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:00.273026 2026] [access_compat:error] [pid 276620:tid 276798] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:00.276009 2026] [security2:error] [pid 276059:tid 276253] [client 20.194.30.107:23680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/key.php"] [unique_id "ary2uHtqdHBwD77138fMUgAAAck"]
[Wed Sep 30 01:14:00.278353 2026] [security2:error] [pid 276059:tid 276300] [client 20.211.90.37:28353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-configs.php"] [unique_id "ary2uHtqdHBwD77138fMUwAAAfg"]
[Wed Sep 30 01:14:00.365389 2026] [security2:error] [pid 276620:tid 276832] [client 4.232.144.219:53314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/jga.php"] [unique_id "ary2uNPAdfEWqmGIkg2DAQAAAl0"]
[Wed Sep 30 01:14:00.397289 2026] [security2:error] [pid 276620:tid 276814] [client 20.214.145.90:26655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2uNPAdfEWqmGIkg2DBAAAAks"]
[Wed Sep 30 01:14:00.424617 2026] [security2:error] [pid 276620:tid 276826] [client 47.79.13.234:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2uNPAdfEWqmGIkg2DBgAAAlc"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:00.429757 2026] [security2:error] [pid 276620:tid 276886] [client 203.122.45.246:52213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2uNPAdfEWqmGIkg2DBwAAApM"]
[Wed Sep 30 01:14:00.429925 2026] [security2:error] [pid 276620:tid 276886] [client 203.122.45.246:52213] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2uNPAdfEWqmGIkg2DBwAAApM"]
[Wed Sep 30 01:14:00.497775 2026] [security2:error] [pid 276059:tid 276227] [client 20.214.191.94:42387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-22.php"] [unique_id "ary2uHtqdHBwD77138fMVwAAAa8"]
[Wed Sep 30 01:14:00.540619 2026] [security2:error] [pid 276620:tid 276822] [client 34.53.167.100:51305] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2uNPAdfEWqmGIkg2DDgAAAlM"]
[Wed Sep 30 01:14:00.617897 2026] [security2:error] [pid 276620:tid 276860] [client 148.72.211.211:52152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.211.72.148.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ydf.ysf.mybluehost.me"] [uri "/index.php"] [unique_id "ary2uNPAdfEWqmGIkg2DEgAAAnk"]
[Wed Sep 30 01:14:00.743805 2026] [security2:error] [pid 276059:tid 276278] [client 20.214.145.90:26619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-content/themes/index.php"] [unique_id "ary2uHtqdHBwD77138fMXQAAAeI"]
[Wed Sep 30 01:14:00.751830 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:00.752103 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:00.771325 2026] [security2:error] [pid 276620:tid 276840] [client 4.232.144.219:26926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/fs.php"] [unique_id "ary2uNPAdfEWqmGIkg2DGQAAAmU"]
[Wed Sep 30 01:14:00.795727 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:00.796059 2026] [access_compat:error] [pid 276620:tid 276795] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:00.797285 2026] [security2:error] [pid 276620:tid 276771] [client 168.100.149.95:53148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/dc16f04d1dc59788efb9d859af86c17a.d3fd.css.gz"] [unique_id "ary2uNPAdfEWqmGIkg2DHAACIG4"]
[Wed Sep 30 01:14:00.797818 2026] [security2:error] [pid 276620:tid 276872] [client 20.214.191.94:42100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/makeasmtp.php"] [unique_id "ary2uNPAdfEWqmGIkg2DHQAAAoU"]
[Wed Sep 30 01:14:00.842306 2026] [security2:error] [pid 276620:tid 276879] [client 201.32.215.149:7248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2uNPAdfEWqmGIkg2DHwAAAow"]
[Wed Sep 30 01:14:00.842465 2026] [security2:error] [pid 276620:tid 276879] [client 201.32.215.149:7248] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2uNPAdfEWqmGIkg2DHwAAAow"]
[Wed Sep 30 01:14:00.874713 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:00.874992 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:00.886073 2026] [security2:error] [pid 276620:tid 276695] [remote 57.141.14.22:29750] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/feed/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/wp-includes/wlwmanifest.xml"] [unique_id "ary2uNPAdfEWqmGIkg2DJAACdUE"]
[Wed Sep 30 01:14:00.962955 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:00.963219 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.037454 2026] [security2:error] [pid 276059:tid 276205] [client 20.70.173.30:27777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/aaa.php"] [unique_id "ary2uXtqdHBwD77138fMZAAAAZo"]
[Wed Sep 30 01:14:01.056385 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.056673 2026] [access_compat:error] [pid 276620:tid 276814] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.092137 2026] [security2:error] [pid 276059:tid 276145] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2uXtqdHBwD77138fMZgABs1E"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=146830&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:14:01.092168 2026] [security2:error] [pid 276059:tid 276145] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2uXtqdHBwD77138fMZgABs1E"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=146830&sid=4c449d020c7225e5088235184ed5c600
[Wed Sep 30 01:14:01.147929 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.148191 2026] [access_compat:error] [pid 276620:tid 276824] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.150643 2026] [security2:error] [pid 276620:tid 276819] [client 4.232.144.219:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/byypas.php"] [unique_id "ary2udPAdfEWqmGIkg2DMwAAAlA"]
[Wed Sep 30 01:14:01.159518 2026] [security2:error] [pid 276059:tid 276277] [client 20.214.191.94:42074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/system_log.php"] [unique_id "ary2uXtqdHBwD77138fMaQAAAeE"]
[Wed Sep 30 01:14:01.163391 2026] [security2:error] [pid 276059:tid 276215] [client 20.194.30.107:23584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/BDKR28WP.php"] [unique_id "ary2uXtqdHBwD77138fMagAAAaM"]
[Wed Sep 30 01:14:01.178769 2026] [security2:error] [pid 276620:tid 276813] [client 20.214.145.90:26591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/cgi-bin/index.php"] [unique_id "ary2udPAdfEWqmGIkg2DNQAAAko"]
[Wed Sep 30 01:14:01.209934 2026] [security2:error] [pid 276620:tid 276780] [client 20.219.2.60:30065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/sodas.php"] [unique_id "ary2udPAdfEWqmGIkg2DOQAAAik"]
[Wed Sep 30 01:14:01.210982 2026] [security2:error] [pid 276620:tid 276733] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2udPAdfEWqmGIkg2DOAACU2c"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D33585
[Wed Sep 30 01:14:01.211006 2026] [security2:error] [pid 276620:tid 276733] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2udPAdfEWqmGIkg2DOAACU2c"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D33585
[Wed Sep 30 01:14:01.239622 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.239899 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.245212 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:01.245468 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:01.331061 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.331349 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.341467 2026] [security2:error] [pid 276059:tid 276201] [client 34.53.167.100:61629] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "chatview.cambodiaskills.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2uXtqdHBwD77138fMbQAAAZY"]
[Wed Sep 30 01:14:01.346208 2026] [access_compat:error] [pid 276059:tid 276307] [client 47.79.13.1:55512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:01.346521 2026] [access_compat:error] [pid 276059:tid 276307] [client 47.79.13.1:55512] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:01.412043 2026] [security2:error] [pid 276620:tid 276845] [client 20.211.90.37:28412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary2udPAdfEWqmGIkg2DSQAAAmo"]
[Wed Sep 30 01:14:01.423494 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.423754 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.516712 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.517167 2026] [access_compat:error] [pid 276620:tid 276855] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.553665 2026] [security2:error] [pid 276620:tid 276847] [client 20.214.145.90:26329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-manager.php"] [unique_id "ary2udPAdfEWqmGIkg2DUwAAAmw"]
[Wed Sep 30 01:14:01.595764 2026] [security2:error] [pid 276620:tid 276815] [client 4.232.144.219:35977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/b.php"] [unique_id "ary2udPAdfEWqmGIkg2DVQAAAkw"]
[Wed Sep 30 01:14:01.603164 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.603465 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.609331 2026] [security2:error] [pid 276620:tid 276884] [client 20.194.96.176:7624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/jybkxer.php"] [unique_id "ary2udPAdfEWqmGIkg2DVwAAApE"]
[Wed Sep 30 01:14:01.611236 2026] [security2:error] [pid 276620:tid 276800] [client 20.214.191.94:42109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/NewFile.php"] [unique_id "ary2udPAdfEWqmGIkg2DWQAAAj0"]
[Wed Sep 30 01:14:01.631976 2026] [access_compat:error] [pid 276620:tid 276763] [client 47.82.11.53:37480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:01.632406 2026] [access_compat:error] [pid 276620:tid 276763] [client 47.82.11.53:37480] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:01.697600 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.697864 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.770611 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:01.770917 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:01.784068 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.784355 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.789095 2026] [security2:error] [pid 276620:tid 276790] [client 182.69.182.151:16144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2udPAdfEWqmGIkg2DYwAAAjM"]
[Wed Sep 30 01:14:01.789531 2026] [security2:error] [pid 276620:tid 276790] [client 182.69.182.151:16144] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2udPAdfEWqmGIkg2DYwAAAjM"]
[Wed Sep 30 01:14:01.849227 2026] [security2:error] [pid 276620:tid 276822] [client 20.70.173.30:62385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/tool.php"] [unique_id "ary2udPAdfEWqmGIkg2DaAAAAlM"]
[Wed Sep 30 01:14:01.860832 2026] [core:error] [pid 276620:tid 276781] [client 72.153.124.48:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:14:01.860857 2026] [core:error] [pid 276620:tid 276781] [client 72.153.124.48:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:14:01.874367 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.874641 2026] [access_compat:error] [pid 276059:tid 276286] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.923386 2026] [security2:error] [pid 276620:tid 276869] [client 4.232.144.219:39561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws49.php"] [unique_id "ary2udPAdfEWqmGIkg2DbwAAAoI"]
[Wed Sep 30 01:14:01.930846 2026] [security2:error] [pid 276059:tid 276275] [client 152.56.240.85:54713] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2uXtqdHBwD77138fMdgAAAd8"]
[Wed Sep 30 01:14:01.930977 2026] [security2:error] [pid 276059:tid 276275] [client 152.56.240.85:54713] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2uXtqdHBwD77138fMdgAAAd8"]
[Wed Sep 30 01:14:01.935990 2026] [security2:error] [pid 276620:tid 276867] [client 20.219.2.60:30366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/yw5bi63u.php"] [unique_id "ary2udPAdfEWqmGIkg2DcAAAAoA"]
[Wed Sep 30 01:14:01.966608 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:01.966889 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:01.977926 2026] [security2:error] [pid 276059:tid 276196] [client 20.214.191.94:42103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/t.php"] [unique_id "ary2uXtqdHBwD77138fMeQAAAZE"]
[Wed Sep 30 01:14:01.988557 2026] [security2:error] [pid 276059:tid 276234] [client 122.173.27.10:8031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2uXtqdHBwD77138fMfAAAAbY"]
[Wed Sep 30 01:14:01.989296 2026] [security2:error] [pid 276059:tid 276234] [client 122.173.27.10:8031] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2uXtqdHBwD77138fMfAAAAbY"]
[Wed Sep 30 01:14:02.009433 2026] [security2:error] [pid 276620:tid 276801] [client 74.7.230.57:52454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.qrs.war.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2utPAdfEWqmGIkg2DeQACPns"]
[Wed Sep 30 01:14:02.049466 2026] [security2:error] [pid 276620:tid 276880] [client 20.214.145.90:26434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2utPAdfEWqmGIkg2DfAAAAo0"]
[Wed Sep 30 01:14:02.062870 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.063245 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.109960 2026] [security2:error] [pid 276059:tid 276212] [client 20.211.90.37:28369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary2untqdHBwD77138fMfgAAAaA"]
[Wed Sep 30 01:14:02.142803 2026] [security2:error] [pid 276620:tid 276833] [client 163.223.4.132:55936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.4.223.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2utPAdfEWqmGIkg2DgQAAAl4"]
[Wed Sep 30 01:14:02.143004 2026] [security2:error] [pid 276620:tid 276833] [client 163.223.4.132:55936] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2utPAdfEWqmGIkg2DgQAAAl4"]
[Wed Sep 30 01:14:02.153256 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.153694 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.247225 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.247660 2026] [access_compat:error] [pid 276059:tid 276288] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.276508 2026] [security2:error] [pid 276620:tid 276842] [client 20.70.173.30:33378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/reop3.php"] [unique_id "ary2utPAdfEWqmGIkg2DhgAAAmc"]
[Wed Sep 30 01:14:02.292780 2026] [access_compat:error] [pid 276620:tid 276877] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:02.293063 2026] [access_compat:error] [pid 276620:tid 276877] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:02.330462 2026] [security2:error] [pid 276620:tid 276849] [client 20.214.191.94:42368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/ee.php"] [unique_id "ary2utPAdfEWqmGIkg2DjAAAAm4"]
[Wed Sep 30 01:14:02.332941 2026] [security2:error] [pid 276620:tid 276772] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary2utPAdfEWqmGIkg2DiwAAAiE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:02.333288 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.333554 2026] [access_compat:error] [pid 276059:tid 276300] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.368935 2026] [security2:error] [pid 276620:tid 276798] [client 20.214.145.90:26365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2utPAdfEWqmGIkg2DkQAAAjs"]
[Wed Sep 30 01:14:02.371361 2026] [security2:error] [pid 276620:tid 276803] [client 216.244.66.227:50924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nels.pikarthouse.com"] [uri "/main-rtl/photo-credits/"] [unique_id "ary2utPAdfEWqmGIkg2DkgAAAkA"]
[Wed Sep 30 01:14:02.371513 2026] [security2:error] [pid 276620:tid 276803] [client 216.244.66.227:50924] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "nels.pikarthouse.com"] [uri "/main-rtl/photo-credits/"] [unique_id "ary2utPAdfEWqmGIkg2DkgAAAkA"]
[Wed Sep 30 01:14:02.405747 2026] [security2:error] [pid 276620:tid 276778] [client 4.232.144.219:35983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-blog-header.php"] [unique_id "ary2utPAdfEWqmGIkg2DlAAAAic"]
[Wed Sep 30 01:14:02.429676 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.430143 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.483829 2026] [security2:error] [pid 276620:tid 276752] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2utPAdfEWqmGIkg2DmQACWHo"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a797f2d6b2ad21806f63ce276c6030b0
[Wed Sep 30 01:14:02.483860 2026] [security2:error] [pid 276620:tid 276752] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2utPAdfEWqmGIkg2DmQACWHo"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=a797f2d6b2ad21806f63ce276c6030b0
[Wed Sep 30 01:14:02.515995 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.516268 2026] [access_compat:error] [pid 276059:tid 276227] [client 216.73.216.46:54415] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.557028 2026] [security2:error] [pid 276620:tid 276802] [client 20.211.90.37:27996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary2utPAdfEWqmGIkg2DoQAAAj8"]
[Wed Sep 30 01:14:02.600540 2026] [security2:error] [pid 276059:tid 276246] [client 216.73.216.46:54415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2untqdHBwD77138fMiQAAAcI"]
[Wed Sep 30 01:14:02.608279 2026] [security2:error] [pid 276059:tid 276317] [client 223.235.102.107:1096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2untqdHBwD77138fMiwAAAgk"]
[Wed Sep 30 01:14:02.608506 2026] [security2:error] [pid 276059:tid 276317] [client 223.235.102.107:1096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2untqdHBwD77138fMiwAAAgk"]
[Wed Sep 30 01:14:02.610925 2026] [security2:error] [pid 276059:tid 276251] [client 49.43.163.212:59935] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2untqdHBwD77138fMigAAAcc"]
[Wed Sep 30 01:14:02.611059 2026] [security2:error] [pid 276059:tid 276251] [client 49.43.163.212:59935] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2untqdHBwD77138fMigAAAcc"]
[Wed Sep 30 01:14:02.644957 2026] [security2:error] [pid 276059:tid 276194] [client 20.70.173.30:27782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/key.php"] [unique_id "ary2untqdHBwD77138fMjQAAAY8"]
[Wed Sep 30 01:14:02.691086 2026] [security2:error] [pid 276620:tid 276862] [client 20.214.191.94:42088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/2.php"] [unique_id "ary2utPAdfEWqmGIkg2DpgAAAns"]
[Wed Sep 30 01:14:02.737476 2026] [security2:error] [pid 276620:tid 276762] [client 4.240.25.22:63655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/about.php"] [unique_id "ary2utPAdfEWqmGIkg2DqAAAAhc"]
[Wed Sep 30 01:14:02.754977 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.755411 2026] [access_compat:error] [pid 276620:tid 276828] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.767146 2026] [access_compat:error] [pid 276620:tid 276826] [client 47.79.13.65:59022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:02.767430 2026] [access_compat:error] [pid 276620:tid 276826] [client 47.79.13.65:59022] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:02.769153 2026] [access_compat:error] [pid 276620:tid 276782] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:02.769564 2026] [access_compat:error] [pid 276620:tid 276782] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:02.790269 2026] [security2:error] [pid 276620:tid 276880] [client 168.100.149.199:57822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/b5d67bb7a507a7707f7b3d5d245fdf96.13c70.css.gz"] [unique_id "ary2utPAdfEWqmGIkg2DrgACjTE"]
[Wed Sep 30 01:14:02.791091 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.791392 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.826956 2026] [security2:error] [pid 276059:tid 276269] [client 4.240.25.22:38732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/c.php"] [unique_id "ary2untqdHBwD77138fMkAAAAdk"]
[Wed Sep 30 01:14:02.836414 2026] [security2:error] [pid 276059:tid 276252] [client 20.204.101.195:50118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.101.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ete.paw.mybluehost.me"] [uri "/index.php"] [unique_id "ary2untqdHBwD77138fMkgAAAcg"]
[Wed Sep 30 01:14:02.864189 2026] [security2:error] [pid 276059:tid 276230] [client 20.28.180.172:9036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/xz7l6w5h.php"] [unique_id "ary2untqdHBwD77138fMkwAAAbI"]
[Wed Sep 30 01:14:02.886010 2026] [security2:error] [pid 276620:tid 276838] [client 4.232.144.219:36019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/bgymj.php"] [unique_id "ary2utPAdfEWqmGIkg2DswAAAmM"]
[Wed Sep 30 01:14:02.886777 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.887039 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:02.890776 2026] [security2:error] [pid 276620:tid 276839] [client 155.190.6.18:50236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2utPAdfEWqmGIkg2DtAAAAmQ"]
[Wed Sep 30 01:14:02.890882 2026] [security2:error] [pid 276620:tid 276839] [client 155.190.6.18:50236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2utPAdfEWqmGIkg2DtAAAAmQ"]
[Wed Sep 30 01:14:02.891588 2026] [security2:error] [pid 276059:tid 276247] [client 20.211.90.37:27905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/index/fucku.php"] [unique_id "ary2untqdHBwD77138fMmQAAAcM"]
[Wed Sep 30 01:14:02.969267 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.191.94:42377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/gmo.php"] [unique_id "ary2utPAdfEWqmGIkg2DtwAAAoo"]
[Wed Sep 30 01:14:02.976991 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:02.977308 2026] [access_compat:error] [pid 276620:tid 276884] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.029080 2026] [security2:error] [pid 276059:tid 276308] [client 127.0.0.1:26010] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "ary2untqdHBwD77138fMngAAAgA"]
[Wed Sep 30 01:14:03.029231 2026] [security2:error] [pid 276059:tid 276319] [client 74.7.244.39:50108] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.wcj.rru.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary2untqdHBwD77138fMnQACC1s"]
[Wed Sep 30 01:14:03.049772 2026] [security2:error] [pid 276620:tid 276710] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2u9PAdfEWqmGIkg2DwAACg1A"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?start=15&t=20904
[Wed Sep 30 01:14:03.049799 2026] [security2:error] [pid 276620:tid 276710] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2u9PAdfEWqmGIkg2DwAACg1A"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php?start=15&t=20904
[Wed Sep 30 01:14:03.071041 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.071475 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.134102 2026] [security2:error] [pid 276620:tid 276873] [client 20.194.96.176:21973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/edit-tags.php"] [unique_id "ary2u9PAdfEWqmGIkg2DzAAAAoY"]
[Wed Sep 30 01:14:03.161497 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.162167 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.189032 2026] [autoindex:error] [pid 276059:tid 276271] [client 20.214.145.90:26585] AH01276: Cannot serve directory /home4/michell5/public_html/hannahjune.com/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:14:03.250532 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.250817 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.253852 2026] [security2:error] [pid 276620:tid 276881] [client 4.232.144.219:26931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/gfd.php"] [unique_id "ary2u9PAdfEWqmGIkg2D1QAAAo4"]
[Wed Sep 30 01:14:03.261377 2026] [access_compat:error] [pid 276620:tid 276836] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:03.261783 2026] [access_compat:error] [pid 276620:tid 276836] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:03.261896 2026] [security2:error] [pid 276620:tid 276777] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary2u9PAdfEWqmGIkg2D1gAAAiY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:03.283642 2026] [security2:error] [pid 276620:tid 276760] [client 20.214.191.94:42105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/6.php"] [unique_id "ary2u9PAdfEWqmGIkg2D1wAAAhU"]
[Wed Sep 30 01:14:03.297977 2026] [security2:error] [pid 276620:tid 276869] [client 20.211.90.37:27936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/upload/wp-info.php"] [unique_id "ary2u9PAdfEWqmGIkg2D2AAAAoI"]
[Wed Sep 30 01:14:03.343187 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.343463 2026] [access_compat:error] [pid 276620:tid 276764] [client 216.73.216.46:65085] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.433003 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.433322 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.439820 2026] [security2:error] [pid 276059:tid 276274] [client 20.70.173.30:25957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/CAE-2.5.php"] [unique_id "ary2u3tqdHBwD77138fMqAAAAd4"]
[Wed Sep 30 01:14:03.501718 2026] [autoindex:error] [pid 276059:tid 276311] [client 20.214.145.90:26585] AH01276: Cannot serve directory /home4/michell5/public_html/hannahjune.com/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:14:03.502051 2026] [security2:error] [pid 276059:tid 276305] [client 20.194.30.107:23610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hy-properties.us"] [uri "/dehnl.php"] [unique_id "ary2u3tqdHBwD77138fMqwAAAf0"]
[Wed Sep 30 01:14:03.525666 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.525948 2026] [access_compat:error] [pid 276620:tid 276883] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.584357 2026] [security2:error] [pid 276059:tid 276295] [client 20.194.96.176:48285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/lzlhihzi.php"] [unique_id "ary2u3tqdHBwD77138fMrAAAAfM"]
[Wed Sep 30 01:14:03.609051 2026] [security2:error] [pid 276059:tid 276258] [client 20.214.191.94:42096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/12.php"] [unique_id "ary2u3tqdHBwD77138fMrQAAAc4"]
[Wed Sep 30 01:14:03.617252 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.617531 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.628147 2026] [security2:error] [pid 276620:tid 276868] [client 20.70.173.30:19143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/images.php"] [unique_id "ary2u9PAdfEWqmGIkg2D5QAAAoE"]
[Wed Sep 30 01:14:03.632656 2026] [security2:error] [pid 276620:tid 276871] [client 20.214.145.90:26635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary2u9PAdfEWqmGIkg2D5gAAAoQ"]
[Wed Sep 30 01:14:03.693226 2026] [security2:error] [pid 276620:tid 276857] [client 20.211.90.37:28413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/post.php"] [unique_id "ary2u9PAdfEWqmGIkg2D6QAAAnY"]
[Wed Sep 30 01:14:03.705850 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.706125 2026] [access_compat:error] [pid 276620:tid 276790] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.732100 2026] [security2:error] [pid 276059:tid 276275] [client 4.240.25.22:8390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/txets.php"] [unique_id "ary2u3tqdHBwD77138fMswAAAd8"]
[Wed Sep 30 01:14:03.748732 2026] [security2:error] [pid 276620:tid 276853] [client 4.232.144.219:26906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/callback.php"] [unique_id "ary2u9PAdfEWqmGIkg2D7gAAAnI"]
[Wed Sep 30 01:14:03.768018 2026] [security2:error] [pid 276059:tid 276282] [client 169.40.142.138:51228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "african-theatre.org"] [uri "/en"] [unique_id "ary2u3tqdHBwD77138fMtQAAAeY"]
[Wed Sep 30 01:14:03.802921 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.803918 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.842962 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:03.843230 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:03.845546 2026] [security2:error] [pid 276059:tid 276167] [remote 47.128.114.181:27840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "original.hamaraquetta.com"] [uri "/news/id/4090/akthar-mengal-speaks"] [unique_id "ary2u3tqdHBwD77138fMtgABq2c"]
[Wed Sep 30 01:14:03.889039 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.889345 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:03.932832 2026] [security2:error] [pid 276620:tid 276800] [client 20.214.191.94:42383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/0.php"] [unique_id "ary2u9PAdfEWqmGIkg2D-AAAAj0"]
[Wed Sep 30 01:14:03.943152 2026] [security2:error] [pid 276620:tid 276886] [client 20.214.145.90:26616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-admin/maint/index.php"] [unique_id "ary2u9PAdfEWqmGIkg2D-QAAApM"]
[Wed Sep 30 01:14:03.967792 2026] [security2:error] [pid 276059:tid 276135] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2u3tqdHBwD77138fMuAABm0c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301797&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:14:03.967824 2026] [security2:error] [pid 276059:tid 276135] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2u3tqdHBwD77138fMuAABm0c"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301797&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:14:03.979836 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:03.980118 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.070750 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.071171 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.098609 2026] [security2:error] [pid 276620:tid 276807] [client 20.211.90.37:28380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary2vNPAdfEWqmGIkg2EBQAAAkQ"]
[Wed Sep 30 01:14:04.166753 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.167192 2026] [access_compat:error] [pid 276620:tid 276850] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.173024 2026] [security2:error] [pid 276620:tid 276776] [client 172.232.180.137:63908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/zaxluyoz.php"] [unique_id "ary2vNPAdfEWqmGIkg2ECAAAAiU"], referer: www.google.com
[Wed Sep 30 01:14:04.223915 2026] [security2:error] [pid 276620:tid 276832] [client 49.43.128.226:61639] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2u9PAdfEWqmGIkg2D4AAAAl0"]
[Wed Sep 30 01:14:04.239427 2026] [security2:error] [pid 276620:tid 276834] [client 20.214.191.94:42058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ary2vNPAdfEWqmGIkg2ECgAAAl8"]
[Wed Sep 30 01:14:04.254229 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.254511 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.300229 2026] [security2:error] [pid 276620:tid 276872] [client 4.232.144.219:53315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/file.php"] [unique_id "ary2vNPAdfEWqmGIkg2EEQAAAoU"]
[Wed Sep 30 01:14:04.303776 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:04.304133 2026] [access_compat:error] [pid 276620:tid 276806] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:04.398834 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:14822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.399162 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:14822] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.437234 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.437514 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.451371 2026] [security2:error] [pid 276620:tid 276823] [client 20.211.90.37:28402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/adminfuns.php"] [unique_id "ary2vNPAdfEWqmGIkg2EHQAAAlQ"]
[Wed Sep 30 01:14:04.525575 2026] [security2:error] [pid 276059:tid 276200] [client 20.219.2.60:30063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws81.php"] [unique_id "ary2vHtqdHBwD77138fMvgAAAZU"]
[Wed Sep 30 01:14:04.531817 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.532224 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.559376 2026] [security2:error] [pid 276620:tid 276848] [client 20.214.191.94:42442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ary2vNPAdfEWqmGIkg2EIgAAAm0"]
[Wed Sep 30 01:14:04.619098 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.619375 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.678962 2026] [security2:error] [pid 276620:tid 276856] [client 20.70.173.30:41185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/amax.php"] [unique_id "ary2vNPAdfEWqmGIkg2EJgAAAnU"]
[Wed Sep 30 01:14:04.689739 2026] [security2:error] [pid 276620:tid 276816] [client 4.232.144.219:26881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/bolt.php"] [unique_id "ary2vNPAdfEWqmGIkg2EKAAAAk0"]
[Wed Sep 30 01:14:04.710558 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.710835 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.746432 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:04.746697 2026] [access_compat:error] [pid 276620:tid 276759] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:04.803580 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.803898 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.834525 2026] [security2:error] [pid 276620:tid 276779] [client 20.194.96.176:7877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/nauik.php"] [unique_id "ary2vNPAdfEWqmGIkg2EMQAAAig"]
[Wed Sep 30 01:14:04.857964 2026] [security2:error] [pid 276620:tid 276814] [client 20.214.191.94:42380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/02.php"] [unique_id "ary2vNPAdfEWqmGIkg2EMwAAAks"]
[Wed Sep 30 01:14:04.880680 2026] [security2:error] [pid 276620:tid 276778] [client 20.194.30.107:17300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/ohct.php"] [unique_id "ary2vNPAdfEWqmGIkg2ENAAAAic"]
[Wed Sep 30 01:14:04.900779 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.901184 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:04.903192 2026] [security2:error] [pid 276620:tid 276827] [client 20.211.90.37:27960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/about.php"] [unique_id "ary2vNPAdfEWqmGIkg2ENgAAAlg"]
[Wed Sep 30 01:14:04.909586 2026] [security2:error] [pid 276620:tid 276829] [client 168.100.149.62:36502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/uploads/2022/11/16-1-e1669360795548-768x499.jpg"] [unique_id "ary2vNPAdfEWqmGIkg2EKwACYzM"]
[Wed Sep 30 01:14:04.977251 2026] [security2:error] [pid 276620:tid 276851] [client 62.83.35.64:48414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nels.pikarthouse.com"] [uri "/wp-content/uploads/sites/34/2018/05/Sportwear-cover-300x225.jpg"] [unique_id "ary2vNPAdfEWqmGIkg2EOAACcDA"]
[Wed Sep 30 01:14:04.988274 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:04.988714 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.018467 2026] [security2:error] [pid 276620:tid 276770] [client 157.245.105.107:52210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "central-fuerth.de"] [uri "/.env"] [unique_id "ary2vdPAdfEWqmGIkg2EOgAAAh8"]
[Wed Sep 30 01:14:05.078935 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.079222 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.106215 2026] [security2:error] [pid 276620:tid 276864] [client 4.232.144.219:53342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-blogs.php"] [unique_id "ary2vdPAdfEWqmGIkg2EPQAAAn0"]
[Wed Sep 30 01:14:05.148337 2026] [security2:error] [pid 276620:tid 276765] [client 20.214.191.94:42389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/go.php"] [unique_id "ary2vdPAdfEWqmGIkg2EPgAAAho"]
[Wed Sep 30 01:14:05.170557 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.170831 2026] [access_compat:error] [pid 276620:tid 276842] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.261174 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.261631 2026] [access_compat:error] [pid 276620:tid 276858] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.320773 2026] [access_compat:error] [pid 276620:tid 276882] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:05.321054 2026] [access_compat:error] [pid 276620:tid 276882] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:05.352868 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.353143 2026] [access_compat:error] [pid 276620:tid 276869] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.357282 2026] [security2:error] [pid 276620:tid 276884] [client 20.211.90.37:28372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/BDKR28WP.php"] [unique_id "ary2vdPAdfEWqmGIkg2ETAAAApE"]
[Wed Sep 30 01:14:05.399094 2026] [security2:error] [pid 276620:tid 276796] [client 20.70.173.30:33345] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "hairofsheba.com"] [uri "/1.php"] [unique_id "ary2vdPAdfEWqmGIkg2ETwAAAjk"]
[Wed Sep 30 01:14:05.399220 2026] [security2:error] [pid 276620:tid 276796] [client 20.70.173.30:33345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/1.php"] [unique_id "ary2vdPAdfEWqmGIkg2ETwAAAjk"]
[Wed Sep 30 01:14:05.443626 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.443930 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.460243 2026] [security2:error] [pid 276620:tid 276821] [client 20.214.191.94:42075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/ee.php"] [unique_id "ary2vdPAdfEWqmGIkg2EVAAAAlI"]
[Wed Sep 30 01:14:05.518264 2026] [security2:error] [pid 276059:tid 276291] [client 185.231.155.169:63279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 169.155.231.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.clenbuterol4sale.com"] [uri "/wp-login.php"] [unique_id "ary2vXtqdHBwD77138fMyAAAAe8"], referer: https://www.clenbuterol4sale.com/wp-login.php?action=register
[Wed Sep 30 01:14:05.532930 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.533199 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.539602 2026] [security2:error] [pid 276620:tid 276793] [client 4.232.144.219:26922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/zlnckdxn.php"] [unique_id "ary2vdPAdfEWqmGIkg2EWQAAAjY"]
[Wed Sep 30 01:14:05.601083 2026] [security2:error] [pid 276059:tid 276267] [client 20.194.96.176:32459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/bfdghfgv.php"] [unique_id "ary2vXtqdHBwD77138fMygAAAdc"]
[Wed Sep 30 01:14:05.603051 2026] [security2:error] [pid 276620:tid 276850] [client 106.214.2.47:28665] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2vdPAdfEWqmGIkg2EXQAAAm8"]
[Wed Sep 30 01:14:05.607512 2026] [security2:error] [pid 276620:tid 276850] [client 106.214.2.47:28665] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2vdPAdfEWqmGIkg2EXQAAAm8"]
[Wed Sep 30 01:14:05.626462 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.626742 2026] [access_compat:error] [pid 276620:tid 276781] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.719287 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.719732 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:05.723302 2026] [security2:error] [pid 276059:tid 276229] [client 20.211.90.37:27968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/file5.php"] [unique_id "ary2vXtqdHBwD77138fMzQAAAbE"]
[Wed Sep 30 01:14:05.730674 2026] [security2:error] [pid 276059:tid 276255] [client 103.211.18.63:51548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2vXtqdHBwD77138fMzgAAAcs"]
[Wed Sep 30 01:14:05.730839 2026] [security2:error] [pid 276059:tid 276255] [client 103.211.18.63:51548] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2vXtqdHBwD77138fMzgAAAcs"]
[Wed Sep 30 01:14:05.731723 2026] [autoindex:error] [pid 276620:tid 276804] [client 20.214.145.90:0] AH01276: Cannot serve directory /home4/michell5/public_html/hannahjune.com/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:14:05.752523 2026] [security2:error] [pid 276059:tid 276247] [client 20.194.30.107:23220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/sb.php"] [unique_id "ary2vXtqdHBwD77138fMzwAAAcM"]
[Wed Sep 30 01:14:05.768104 2026] [access_compat:error] [pid 276620:tid 276800] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:05.768525 2026] [access_compat:error] [pid 276620:tid 276800] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:05.800421 2026] [security2:error] [pid 276620:tid 276814] [client 216.73.216.46:14822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2vdPAdfEWqmGIkg2EZwAAAks"]
[Wed Sep 30 01:14:05.802381 2026] [security2:error] [pid 276059:tid 276245] [client 20.214.191.94:42441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/an.php"] [unique_id "ary2vXtqdHBwD77138fM0QAAAcE"]
[Wed Sep 30 01:14:05.841379 2026] [security2:error] [pid 276620:tid 276799] [client 45.138.12.32:27360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mzx.auz.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2vdPAdfEWqmGIkg2EaQAAAjw"]
[Wed Sep 30 01:14:05.880273 2026] [security2:error] [pid 276620:tid 276820] [client 20.214.145.90:26446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/matcha.php"] [unique_id "ary2vdPAdfEWqmGIkg2EbAAAAlE"]
[Wed Sep 30 01:14:05.943130 2026] [security2:error] [pid 276059:tid 276268] [client 216.73.216.46:60452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2vXtqdHBwD77138fM0wAAAdg"]
[Wed Sep 30 01:14:05.988695 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:05.989006 2026] [access_compat:error] [pid 276620:tid 276861] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.001651 2026] [security2:error] [pid 276620:tid 276776] [client 4.232.144.219:26897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/fs6.php"] [unique_id "ary2vtPAdfEWqmGIkg2EcwAAAiU"]
[Wed Sep 30 01:14:06.020593 2026] [security2:error] [pid 276620:tid 276847] [client 68.167.156.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2vtPAdfEWqmGIkg2EdAAAAmw"]
[Wed Sep 30 01:14:06.081070 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.081371 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.122963 2026] [security2:error] [pid 276620:tid 276858] [client 20.211.90.37:28361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/b8.php"] [unique_id "ary2vtPAdfEWqmGIkg2EegAAAnc"]
[Wed Sep 30 01:14:06.149535 2026] [security2:error] [pid 276059:tid 276264] [client 20.214.191.94:42423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp.php"] [unique_id "ary2vntqdHBwD77138fM1gAAAdQ"]
[Wed Sep 30 01:14:06.165866 2026] [security2:error] [pid 276059:tid 276279] [client 20.214.145.90:26570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/aboutt.php"] [unique_id "ary2vntqdHBwD77138fM1wAAAeM"]
[Wed Sep 30 01:14:06.171100 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.171417 2026] [access_compat:error] [pid 276620:tid 276777] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.194210 2026] [security2:error] [pid 276059:tid 276213] [client 47.79.13.168:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2vntqdHBwD77138fM2AAAAaE"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:06.255073 2026] [security2:error] [pid 276059:tid 276217] [client 20.28.180.172:9070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/c3c427fa59index.php"] [unique_id "ary2vntqdHBwD77138fM2wAAAaU"]
[Wed Sep 30 01:14:06.262132 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:06.262435 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:06.264117 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.264391 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.355398 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.355478 2026] [security2:error] [pid 276059:tid 276131] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2vntqdHBwD77138fM3wAB50M"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300564&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:14:06.355501 2026] [security2:error] [pid 276059:tid 276131] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2vntqdHBwD77138fM3wAB50M"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300564&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:14:06.355690 2026] [access_compat:error] [pid 276620:tid 276796] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.366248 2026] [security2:error] [pid 276059:tid 276069] [remote 57.141.14.38:42824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-json/oembed/1.0/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/xmlrpc.php"] [unique_id "ary2vntqdHBwD77138fM3gAB2wU"]
[Wed Sep 30 01:14:06.392176 2026] [security2:error] [pid 276620:tid 276771] [client 4.232.144.219:53323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/xwzs.php"] [unique_id "ary2vtPAdfEWqmGIkg2EhgAAAiA"]
[Wed Sep 30 01:14:06.445591 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.445857 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.461862 2026] [security2:error] [pid 276620:tid 276859] [client 20.214.145.90:26315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/opsh.php"] [unique_id "ary2vtPAdfEWqmGIkg2EigAAAng"]
[Wed Sep 30 01:14:06.466721 2026] [security2:error] [pid 276620:tid 276787] [client 20.211.90.37:28407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/133.php"] [unique_id "ary2vtPAdfEWqmGIkg2EiwAAAjA"]
[Wed Sep 30 01:14:06.494915 2026] [security2:error] [pid 276620:tid 276863] [client 37.41.16.35:56775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2vtPAdfEWqmGIkg2EjAAAAnw"]
[Wed Sep 30 01:14:06.495056 2026] [security2:error] [pid 276620:tid 276863] [client 37.41.16.35:56775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2vtPAdfEWqmGIkg2EjAAAAnw"]
[Wed Sep 30 01:14:06.536987 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.537474 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.584182 2026] [security2:error] [pid 276620:tid 276824] [client 20.214.191.94:42081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ary2vtPAdfEWqmGIkg2EkAAAAlU"]
[Wed Sep 30 01:14:06.628563 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.628829 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.719878 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.720172 2026] [access_compat:error] [pid 276620:tid 276857] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.760707 2026] [security2:error] [pid 276059:tid 276316] [client 20.194.30.107:23602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/images.php"] [unique_id "ary2vntqdHBwD77138fM5QAAAgg"]
[Wed Sep 30 01:14:06.782878 2026] [access_compat:error] [pid 276620:tid 276762] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:06.783136 2026] [access_compat:error] [pid 276620:tid 276762] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:06.803098 2026] [security2:error] [pid 276059:tid 276198] [client 168.100.149.139:50786] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/945d7f32792d4eef3a558533307a0418.d3d5.css.gz"] [unique_id "ary2vntqdHBwD77138fM5gABkys"]
[Wed Sep 30 01:14:06.809750 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.810021 2026] [access_compat:error] [pid 276620:tid 276761] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.889831 2026] [security2:error] [pid 276620:tid 276817] [client 20.211.90.37:28517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/ano.php"] [unique_id "ary2vtPAdfEWqmGIkg2EmwAAAk4"]
[Wed Sep 30 01:14:06.894966 2026] [security2:error] [pid 276620:tid 276812] [client 20.214.191.94:42079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/admin.php"] [unique_id "ary2vtPAdfEWqmGIkg2EnQAAAkk"]
[Wed Sep 30 01:14:06.901737 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.902028 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:06.932797 2026] [security2:error] [pid 276620:tid 276835] [client 20.214.145.90:26628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/photo.php"] [unique_id "ary2vtPAdfEWqmGIkg2EnwAAAmA"]
[Wed Sep 30 01:14:06.991247 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:06.991645 2026] [access_compat:error] [pid 276620:tid 276799] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.031563 2026] [security2:error] [pid 276620:tid 276827] [client 158.94.201.132:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2v9PAdfEWqmGIkg2EowAAAlg"]
[Wed Sep 30 01:14:07.046115 2026] [security2:error] [pid 276620:tid 276819] [client 4.232.144.219:39568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-admin/network/users.php"] [unique_id "ary2v9PAdfEWqmGIkg2EpAAAAlA"]
[Wed Sep 30 01:14:07.059725 2026] [security2:error] [pid 276620:tid 276850] [client 103.241.204.139:53533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2v9PAdfEWqmGIkg2EpQAAAm8"]
[Wed Sep 30 01:14:07.060523 2026] [security2:error] [pid 276620:tid 276850] [client 103.241.204.139:53533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2v9PAdfEWqmGIkg2EpQAAAm8"]
[Wed Sep 30 01:14:07.071949 2026] [security2:error] [pid 276059:tid 276275] [client 20.70.173.30:33310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/js.php"] [unique_id "ary2v3tqdHBwD77138fM6gAAAd8"]
[Wed Sep 30 01:14:07.083968 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.084269 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.172494 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.172771 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.201414 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.191.94:42067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/admin.php"] [unique_id "ary2v9PAdfEWqmGIkg2EtwAAAl0"]
[Wed Sep 30 01:14:07.228421 2026] [security2:error] [pid 276620:tid 276785] [client 172.232.180.137:49158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-plain.php"] [unique_id "ary2v9PAdfEWqmGIkg2EuAAAAi4"], referer: www.google.com
[Wed Sep 30 01:14:07.265939 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.266408 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.274903 2026] [access_compat:error] [pid 276620:tid 276801] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:07.275361 2026] [access_compat:error] [pid 276620:tid 276801] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:07.284086 2026] [security2:error] [pid 276059:tid 276286] [client 20.211.90.37:27975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/sf.php"] [unique_id "ary2v3tqdHBwD77138fM7gAAAeo"]
[Wed Sep 30 01:14:07.288413 2026] [security2:error] [pid 276059:tid 276222] [client 20.214.145.90:26614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-fxxxx.php"] [unique_id "ary2v3tqdHBwD77138fM7wAAAao"]
[Wed Sep 30 01:14:07.356200 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.356482 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.398096 2026] [security2:error] [pid 276620:tid 276836] [client 4.232.144.219:36013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws66.php"] [unique_id "ary2v9PAdfEWqmGIkg2ExAAAAmE"]
[Wed Sep 30 01:14:07.416225 2026] [security2:error] [pid 276620:tid 276875] [client 89.41.42.39:16428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "405"] [hostname "clenbuterol4you.com"] [uri "/xmlrpc.php"] [unique_id "ary2v9PAdfEWqmGIkg2EsgAAAog"]
[Wed Sep 30 01:14:07.449170 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.449626 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.450724 2026] [security2:error] [pid 276620:tid 276826] [client 4.240.25.22:44150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/cycfruf.php"] [unique_id "ary2v9PAdfEWqmGIkg2EyQAAAlc"]
[Wed Sep 30 01:14:07.539855 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.540167 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.545105 2026] [security2:error] [pid 276059:tid 276281] [client 20.214.191.94:42054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2v3tqdHBwD77138fM8wAAAeU"]
[Wed Sep 30 01:14:07.553092 2026] [security2:error] [pid 276620:tid 276824] [client 20.214.145.90:26311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp-filemannger4h.php"] [unique_id "ary2v9PAdfEWqmGIkg2EywAAAlU"]
[Wed Sep 30 01:14:07.565646 2026] [security2:error] [pid 276059:tid 276202] [client 20.70.173.30:19195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/BDKR28WP.php"] [unique_id "ary2v3tqdHBwD77138fM9wAAAZc"]
[Wed Sep 30 01:14:07.631344 2026] [security2:error] [pid 276059:tid 276220] [client 20.219.2.60:29912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/mh.php"] [unique_id "ary2v3tqdHBwD77138fM-gAAAag"]
[Wed Sep 30 01:14:07.635753 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.636186 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:48042] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.714905 2026] [security2:error] [pid 276620:tid 276830] [client 216.73.216.46:48042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2v9PAdfEWqmGIkg2EzwAAAls"]
[Wed Sep 30 01:14:07.790485 2026] [security2:error] [pid 276620:tid 276817] [client 4.240.25.22:24280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/xiugai.php"] [unique_id "ary2v9PAdfEWqmGIkg2E1gAAAk4"]
[Wed Sep 30 01:14:07.793818 2026] [access_compat:error] [pid 276620:tid 276773] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:07.794106 2026] [access_compat:error] [pid 276620:tid 276773] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:07.814683 2026] [security2:error] [pid 276620:tid 276833] [client 20.214.145.90:26451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/ffl.php"] [unique_id "ary2v9PAdfEWqmGIkg2E2AAAAl4"]
[Wed Sep 30 01:14:07.817804 2026] [security2:error] [pid 276059:tid 276301] [client 20.211.90.37:27980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/xx.php"] [unique_id "ary2v3tqdHBwD77138fM_gAAAfk"]
[Wed Sep 30 01:14:07.819357 2026] [security2:error] [pid 276059:tid 276210] [client 20.194.30.107:17391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/kj.php"] [unique_id "ary2v3tqdHBwD77138fM_wAAAZ4"]
[Wed Sep 30 01:14:07.825787 2026] [security2:error] [pid 276620:tid 276800] [client 4.232.144.219:39576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ewe.php"] [unique_id "ary2v9PAdfEWqmGIkg2E2QAAAj0"]
[Wed Sep 30 01:14:07.865362 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.865651 2026] [access_compat:error] [pid 276620:tid 276852] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.912132 2026] [security2:error] [pid 276059:tid 276240] [client 20.214.191.94:42080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/index/function.php"] [unique_id "ary2v3tqdHBwD77138fNBAAAAbw"]
[Wed Sep 30 01:14:07.954487 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.954755 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:07.995677 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:07.995988 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.017711 2026] [security2:error] [pid 276059:tid 276219] [client 20.194.96.176:7639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wander.php"] [unique_id "ary2wHtqdHBwD77138fNCAAAAac"]
[Wed Sep 30 01:14:08.085831 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.086107 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:12359] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.164049 2026] [security2:error] [pid 276620:tid 276805] [client 20.211.90.37:28005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/file2.php"] [unique_id "ary2wNPAdfEWqmGIkg2E6gAAAkI"]
[Wed Sep 30 01:14:08.170737 2026] [security2:error] [pid 276620:tid 276780] [client 216.73.216.46:12359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2wNPAdfEWqmGIkg2E7AAAAik"]
[Wed Sep 30 01:14:08.180369 2026] [security2:error] [pid 276620:tid 276807] [client 20.214.145.90:26478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/wp5.php"] [unique_id "ary2wNPAdfEWqmGIkg2E7QAAAkQ"]
[Wed Sep 30 01:14:08.202716 2026] [security2:error] [pid 276620:tid 276831] [client 4.232.144.219:35999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/aboute.php"] [unique_id "ary2wNPAdfEWqmGIkg2E7wAAAlw"]
[Wed Sep 30 01:14:08.208720 2026] [security2:error] [pid 276059:tid 276241] [client 122.177.240.90:1181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2wHtqdHBwD77138fNEQAAAb0"]
[Wed Sep 30 01:14:08.208865 2026] [security2:error] [pid 276059:tid 276241] [client 122.177.240.90:1181] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2wHtqdHBwD77138fNEQAAAb0"]
[Wed Sep 30 01:14:08.237025 2026] [security2:error] [pid 276620:tid 276806] [client 20.214.191.94:42107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ary2wNPAdfEWqmGIkg2E8gAAAkM"]
[Wed Sep 30 01:14:08.252549 2026] [security2:error] [pid 276620:tid 276864] [client 4.240.25.22:38761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/adminan.php"] [unique_id "ary2wNPAdfEWqmGIkg2E9AAAAn0"]
[Wed Sep 30 01:14:08.270523 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.270762 2026] [access_compat:error] [pid 276059:tid 276273] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.287175 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:08.287458 2026] [access_compat:error] [pid 276620:tid 276809] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:08.361540 2026] [security2:error] [pid 276620:tid 276867] [client 20.194.30.107:23210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/ops.php"] [unique_id "ary2wNPAdfEWqmGIkg2E_AAAAoA"]
[Wed Sep 30 01:14:08.362340 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.362588 2026] [access_compat:error] [pid 276059:tid 276308] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.377886 2026] [security2:error] [pid 276620:tid 276648] [remote 74.7.241.5:57190] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2wNPAdfEWqmGIkg2E_gACIBI"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=dba0224c5d700d4b0c09c3e288682f72
[Wed Sep 30 01:14:08.377908 2026] [security2:error] [pid 276620:tid 276648] [remote 74.7.241.5:57190] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2wNPAdfEWqmGIkg2E_gACIBI"], referer: https://uxa.hoh.mybluehost.me/app.php/user/delete_cookies?sid=dba0224c5d700d4b0c09c3e288682f72
[Wed Sep 30 01:14:08.388772 2026] [security2:error] [pid 276620:tid 276871] [client 74.7.242.1:37242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary2wNPAdfEWqmGIkg2E_wAAAoQ"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:14:08.454198 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.454493 2026] [access_compat:error] [pid 276059:tid 276215] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.493247 2026] [security2:error] [pid 276620:tid 276882] [client 173.44.61.122:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2wNPAdfEWqmGIkg2FAgAAAo8"]
[Wed Sep 30 01:14:08.522471 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.145.90:26330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/koiy.php"] [unique_id "ary2wNPAdfEWqmGIkg2FBgAAAnw"]
[Wed Sep 30 01:14:08.551047 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.551529 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.569346 2026] [security2:error] [pid 276620:tid 276847] [client 20.211.90.37:27972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/m.php"] [unique_id "ary2wNPAdfEWqmGIkg2FBwAAAmw"]
[Wed Sep 30 01:14:08.629179 2026] [security2:error] [pid 276620:tid 276824] [client 20.214.191.94:42404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/license.php"] [unique_id "ary2wNPAdfEWqmGIkg2FCAAAAlU"]
[Wed Sep 30 01:14:08.631996 2026] [security2:error] [pid 276620:tid 276868] [client 4.232.144.219:26911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/x9.php"] [unique_id "ary2wNPAdfEWqmGIkg2FCQAAAoE"]
[Wed Sep 30 01:14:08.636779 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.637194 2026] [access_compat:error] [pid 276059:tid 276217] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.733278 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.733743 2026] [access_compat:error] [pid 276059:tid 276272] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.768648 2026] [security2:error] [pid 276620:tid 276870] [client 186.122.104.84:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/tablets/"] [unique_id "ary2wNPAdfEWqmGIkg2FFgAAAoM"]
[Wed Sep 30 01:14:08.788689 2026] [security2:error] [pid 276620:tid 276759] [client 168.100.149.248:55168] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/1c095c6cf0e7e334e4b8a8b67910e41b.d353.css.gz"] [unique_id "ary2wNPAdfEWqmGIkg2FGAACFCg"]
[Wed Sep 30 01:14:08.791274 2026] [security2:error] [pid 276620:tid 276886] [client 45.138.12.32:36572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nhg.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2wNPAdfEWqmGIkg2FGgAAApM"]
[Wed Sep 30 01:14:08.791402 2026] [access_compat:error] [pid 276620:tid 276852] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:08.791659 2026] [access_compat:error] [pid 276620:tid 276852] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:08.806965 2026] [security2:error] [pid 276620:tid 276784] [client 20.70.173.30:19198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/chosen.php"] [unique_id "ary2wNPAdfEWqmGIkg2FHAAAAi0"]
[Wed Sep 30 01:14:08.826160 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.826447 2026] [access_compat:error] [pid 276059:tid 276314] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.879049 2026] [security2:error] [pid 276620:tid 276860] [client 20.214.145.90:26439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/bnmtp.php"] [unique_id "ary2wNPAdfEWqmGIkg2FIQAAAnk"]
[Wed Sep 30 01:14:08.889680 2026] [security2:error] [pid 276059:tid 276271] [client 4.240.25.22:18806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/wp.php"] [unique_id "ary2wHtqdHBwD77138fNIwAAAds"]
[Wed Sep 30 01:14:08.919068 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:08.919331 2026] [access_compat:error] [pid 276059:tid 276232] [client 216.73.216.46:22892] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:08.937631 2026] [security2:error] [pid 276059:tid 276290] [client 20.214.191.94:42064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/radio.php"] [unique_id "ary2wHtqdHBwD77138fNJgAAAe4"]
[Wed Sep 30 01:14:08.996715 2026] [security2:error] [pid 276620:tid 276780] [client 4.232.144.219:26914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/an.php"] [unique_id "ary2wNPAdfEWqmGIkg2FJAAAAik"]
[Wed Sep 30 01:14:09.003149 2026] [security2:error] [pid 276059:tid 276322] [client 216.73.216.46:22892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2wXtqdHBwD77138fNKAAAAg4"]
[Wed Sep 30 01:14:09.082376 2026] [security2:error] [pid 276620:tid 276763] [client 20.211.90.37:28509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/33.php"] [unique_id "ary2wdPAdfEWqmGIkg2FKAAAAhg"]
[Wed Sep 30 01:14:09.123931 2026] [security2:error] [pid 276059:tid 276280] [client 4.240.25.22:46320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/dex.php"] [unique_id "ary2wXtqdHBwD77138fNKwAAAeQ"]
[Wed Sep 30 01:14:09.141805 2026] [security2:error] [pid 276620:tid 276857] [client 20.214.145.90:26636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/abbi.php"] [unique_id "ary2wdPAdfEWqmGIkg2FKgAAAnY"]
[Wed Sep 30 01:14:09.151733 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.151999 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.230535 2026] [security2:error] [pid 276620:tid 276881] [client 20.214.191.94:42466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/info.php"] [unique_id "ary2wdPAdfEWqmGIkg2FNAAAAo4"]
[Wed Sep 30 01:14:09.245027 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.245303 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.285762 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.286198 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.303598 2026] [security2:error] [pid 276620:tid 276869] [client 20.70.173.30:25194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/az.php"] [unique_id "ary2wdPAdfEWqmGIkg2FOgAAAoI"]
[Wed Sep 30 01:14:09.307084 2026] [access_compat:error] [pid 276620:tid 276878] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:09.307357 2026] [access_compat:error] [pid 276620:tid 276878] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:09.376839 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.377115 2026] [access_compat:error] [pid 276059:tid 276318] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.427392 2026] [security2:error] [pid 276620:tid 276765] [client 85.204.70.104:39750] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "ary2wdPAdfEWqmGIkg2FSAAAAho"]
[Wed Sep 30 01:14:09.449489 2026] [security2:error] [pid 276620:tid 276879] [client 20.28.180.172:8953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/xivoefjr.php"] [unique_id "ary2wdPAdfEWqmGIkg2FSgAAAow"]
[Wed Sep 30 01:14:09.453569 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.145.90:26433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.145.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hannahjune.michellemattar.com"] [uri "/asw.php"] [unique_id "ary2wdPAdfEWqmGIkg2FSwAAAnw"]
[Wed Sep 30 01:14:09.456266 2026] [security2:error] [pid 276059:tid 276281] [client 4.232.144.219:35981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/aboutc.php"] [unique_id "ary2wXtqdHBwD77138fNNwAAAeU"]
[Wed Sep 30 01:14:09.466738 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.467032 2026] [access_compat:error] [pid 276059:tid 276282] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.542621 2026] [security2:error] [pid 276059:tid 276253] [client 20.214.191.94:42056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/alfanew.php"] [unique_id "ary2wXtqdHBwD77138fNPAAAAck"]
[Wed Sep 30 01:14:09.557301 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.557681 2026] [access_compat:error] [pid 276059:tid 276242] [client 216.73.216.46:2232] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.650949 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.651369 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.679454 2026] [security2:error] [pid 276059:tid 276200] [client 20.211.90.37:27982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/ccc.php"] [unique_id "ary2wXtqdHBwD77138fNQQAAAZU"]
[Wed Sep 30 01:14:09.763161 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:09.763505 2026] [access_compat:error] [pid 276620:tid 276814] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:09.793379 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.793657 2026] [access_compat:error] [pid 276620:tid 276812] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.842693 2026] [security2:error] [pid 276059:tid 276097] [remote 74.7.243.221:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2wXtqdHBwD77138fNRAAB9CE"], referer: https://torquayfans.com/viewtopic.php?p=88468
[Wed Sep 30 01:14:09.842725 2026] [security2:error] [pid 276059:tid 276097] [remote 74.7.243.221:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2wXtqdHBwD77138fNRAAB9CE"], referer: https://torquayfans.com/viewtopic.php?p=88468
[Wed Sep 30 01:14:09.861754 2026] [security2:error] [pid 276620:tid 276837] [client 20.194.30.107:17364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/wp.php"] [unique_id "ary2wdPAdfEWqmGIkg2FXwAAAmI"]
[Wed Sep 30 01:14:09.866932 2026] [security2:error] [pid 276620:tid 276856] [client 20.214.191.94:42439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/inputs.php"] [unique_id "ary2wdPAdfEWqmGIkg2FYAAAAnU"]
[Wed Sep 30 01:14:09.883745 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:41529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.884004 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:41529] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:09.967558 2026] [security2:error] [pid 276620:tid 276807] [client 4.232.144.219:36017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/gdn.php"] [unique_id "ary2wdPAdfEWqmGIkg2FZgAAAkQ"]
[Wed Sep 30 01:14:09.973794 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:29599] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:09.974160 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:29599] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.016118 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.016552 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.033541 2026] [security2:error] [pid 276059:tid 276208] [client 49.37.102.248:50940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2wntqdHBwD77138fNRgAAAZ0"]
[Wed Sep 30 01:14:10.033665 2026] [security2:error] [pid 276059:tid 276208] [client 49.37.102.248:50940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2wntqdHBwD77138fNRgAAAZ0"]
[Wed Sep 30 01:14:10.044412 2026] [security2:error] [pid 276620:tid 276753] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2wtPAdfEWqmGIkg2FaAACXHs"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D122006
[Wed Sep 30 01:14:10.044436 2026] [security2:error] [pid 276620:tid 276753] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2wtPAdfEWqmGIkg2FaAACXHs"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D122006
[Wed Sep 30 01:14:10.082455 2026] [security2:error] [pid 276620:tid 276850] [client 20.211.90.37:28378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/file15.php"] [unique_id "ary2wtPAdfEWqmGIkg2FaQAAAm8"]
[Wed Sep 30 01:14:10.103874 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.104158 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.139344 2026] [security2:error] [pid 276620:tid 276784] [client 85.204.70.104:39766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "ary2wtPAdfEWqmGIkg2FawAAAi0"]
[Wed Sep 30 01:14:10.149526 2026] [security2:error] [pid 276059:tid 276219] [client 216.244.66.239:40606] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/file/9613-descargar-escaner-canon-pixma-e402.xml"] [unique_id "ary2wntqdHBwD77138fNSQAAAac"]
[Wed Sep 30 01:14:10.149644 2026] [security2:error] [pid 276059:tid 276219] [client 216.244.66.239:40606] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.allmattingsolutions.com.au"] [uri "/resources/Uploadvideo/file/9613-descargar-escaner-canon-pixma-e402.xml"] [unique_id "ary2wntqdHBwD77138fNSQAAAac"]
[Wed Sep 30 01:14:10.177197 2026] [security2:error] [pid 276059:tid 276216] [client 223.181.60.167:29392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2wntqdHBwD77138fNTAAAAaQ"]
[Wed Sep 30 01:14:10.178515 2026] [security2:error] [pid 276059:tid 276216] [client 223.181.60.167:29392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2wntqdHBwD77138fNTAAAAaQ"]
[Wed Sep 30 01:14:10.196587 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.196920 2026] [access_compat:error] [pid 276620:tid 276872] [client 216.73.216.46:12590] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.257191 2026] [autoindex:error] [pid 276620:tid 276671] [remote 93.152.209.11:27596] AH01276: Cannot serve directory /home4/tjotizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Sep 30 01:14:10.258891 2026] [security2:error] [pid 276620:tid 276873] [client 20.214.191.94:42438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/admin/function.php"] [unique_id "ary2wtPAdfEWqmGIkg2FdwAAAoY"]
[Wed Sep 30 01:14:10.279121 2026] [security2:error] [pid 276620:tid 276765] [client 216.73.216.46:12590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2wtPAdfEWqmGIkg2FegAAAho"]
[Wed Sep 30 01:14:10.345109 2026] [access_compat:error] [pid 276620:tid 276879] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:10.345551 2026] [access_compat:error] [pid 276620:tid 276879] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:10.377391 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.377792 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.378801 2026] [security2:error] [pid 276620:tid 276826] [client 4.232.144.219:36024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/first.php"] [unique_id "ary2wtPAdfEWqmGIkg2FgwAAAlc"]
[Wed Sep 30 01:14:10.416751 2026] [security2:error] [pid 276620:tid 276767] [client 172.232.180.137:56267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ary2wtPAdfEWqmGIkg2FhQAAAhw"]
[Wed Sep 30 01:14:10.447006 2026] [security2:error] [pid 276620:tid 276693] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2wtPAdfEWqmGIkg2FhgACNT8"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D15808
[Wed Sep 30 01:14:10.468495 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.468770 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.560225 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.560489 2026] [access_compat:error] [pid 276620:tid 276821] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.569295 2026] [security2:error] [pid 276620:tid 276793] [client 20.211.90.37:28029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/82.php"] [unique_id "ary2wtPAdfEWqmGIkg2FjQAAAjY"]
[Wed Sep 30 01:14:10.577735 2026] [security2:error] [pid 276620:tid 276860] [client 20.214.191.94:42099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/assets/index.php"] [unique_id "ary2wtPAdfEWqmGIkg2FjwAAAnk"]
[Wed Sep 30 01:14:10.656096 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.656527 2026] [access_compat:error] [pid 276620:tid 276820] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.743015 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:10.743293 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:35877] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:10.805345 2026] [security2:error] [pid 276620:tid 276796] [client 168.100.149.141:20468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/c1676a1d4698973f1795db1e145ecac8.205.css.gz"] [unique_id "ary2wtPAdfEWqmGIkg2FmwACOUo"]
[Wed Sep 30 01:14:10.826758 2026] [security2:error] [pid 276620:tid 276790] [client 216.73.216.46:35877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2wtPAdfEWqmGIkg2FngAAAjM"]
[Wed Sep 30 01:14:10.864924 2026] [security2:error] [pid 276620:tid 276849] [client 20.194.30.107:23184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/or.php"] [unique_id "ary2wtPAdfEWqmGIkg2FowAAAm4"]
[Wed Sep 30 01:14:10.865110 2026] [access_compat:error] [pid 276620:tid 276825] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:10.865439 2026] [access_compat:error] [pid 276620:tid 276825] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:10.876402 2026] [security2:error] [pid 276059:tid 276302] [client 213.136.69.135:51053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/fonts/class-wp-font-face-resolver.php"] [unique_id "ary2wntqdHBwD77138fNUwAAAfo"], referer: binance.com
[Wed Sep 30 01:14:10.897428 2026] [security2:error] [pid 276620:tid 276776] [client 203.122.45.246:52857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2wtPAdfEWqmGIkg2FpAAAAiU"]
[Wed Sep 30 01:14:10.897630 2026] [security2:error] [pid 276620:tid 276776] [client 203.122.45.246:52857] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2wtPAdfEWqmGIkg2FpAAAAiU"]
[Wed Sep 30 01:14:10.918159 2026] [security2:error] [pid 276620:tid 276785] [client 216.73.216.46:29599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2wtPAdfEWqmGIkg2FpQAAAi4"]
[Wed Sep 30 01:14:10.970327 2026] [security2:error] [pid 276620:tid 276881] [client 20.214.191.94:42052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-admin/images/index.php"] [unique_id "ary2wtPAdfEWqmGIkg2FpgAAAo4"]
[Wed Sep 30 01:14:10.981106 2026] [security2:error] [pid 276059:tid 276248] [client 20.219.2.60:30041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws88.php"] [unique_id "ary2wntqdHBwD77138fNVAAAAcQ"]
[Wed Sep 30 01:14:10.999749 2026] [security2:error] [pid 276620:tid 276784] [client 4.240.25.22:63631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/c.php"] [unique_id "ary2wtPAdfEWqmGIkg2FqAAAAi0"]
[Wed Sep 30 01:14:11.009159 2026] [security2:error] [pid 276620:tid 276865] [client 216.73.216.46:41529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w9PAdfEWqmGIkg2FqgAAAn4"]
[Wed Sep 30 01:14:11.021482 2026] [security2:error] [pid 276620:tid 276884] [client 172.232.180.137:62679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/xltwoyzu.php"] [unique_id "ary2w9PAdfEWqmGIkg2FrgAAApE"], referer: www.google.com
[Wed Sep 30 01:14:11.039296 2026] [security2:error] [pid 276620:tid 276832] [client 20.211.90.37:28011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/admin.php/nope.php"] [unique_id "ary2w9PAdfEWqmGIkg2FrwAAAl0"]
[Wed Sep 30 01:14:11.048284 2026] [security2:error] [pid 276620:tid 276866] [client 20.194.30.107:17396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/users.php"] [unique_id "ary2w9PAdfEWqmGIkg2FsAAAAn8"]
[Wed Sep 30 01:14:11.073218 2026] [security2:error] [pid 276620:tid 276822] [client 95.75.213.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2w9PAdfEWqmGIkg2FswAAAlM"]
[Wed Sep 30 01:14:11.079624 2026] [security2:error] [pid 276620:tid 276771] [client 4.232.144.219:36010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/redixsx.php"] [unique_id "ary2w9PAdfEWqmGIkg2FtAAAAiA"]
[Wed Sep 30 01:14:11.095413 2026] [security2:error] [pid 276620:tid 276797] [client 4.240.25.22:8422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cilus.php"] [unique_id "ary2w9PAdfEWqmGIkg2FtgAAAjo"]
[Wed Sep 30 01:14:11.100654 2026] [security2:error] [pid 276059:tid 276297] [client 216.73.216.46:2232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w3tqdHBwD77138fNVwAAAfU"]
[Wed Sep 30 01:14:11.140235 2026] [security2:error] [pid 276620:tid 276859] [client 52.167.144.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary2w9PAdfEWqmGIkg2FugAAAng"]
[Wed Sep 30 01:14:11.200226 2026] [security2:error] [pid 276620:tid 276868] [client 45.138.12.32:36676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nje.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2w9PAdfEWqmGIkg2FwAAAAoE"]
[Wed Sep 30 01:14:11.208188 2026] [security2:error] [pid 276620:tid 276792] [client 20.194.96.176:7475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wsd.php"] [unique_id "ary2w9PAdfEWqmGIkg2FwQAAAjU"]
[Wed Sep 30 01:14:11.229576 2026] [security2:error] [pid 276620:tid 276855] [client 182.69.182.151:8271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2w9PAdfEWqmGIkg2FxQAAAnQ"]
[Wed Sep 30 01:14:11.229703 2026] [security2:error] [pid 276620:tid 276855] [client 182.69.182.151:8271] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2w9PAdfEWqmGIkg2FxQAAAnQ"]
[Wed Sep 30 01:14:11.244716 2026] [security2:error] [pid 276620:tid 276813] [client 216.73.216.46:37147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w9PAdfEWqmGIkg2FxgAAAko"]
[Wed Sep 30 01:14:11.299631 2026] [security2:error] [pid 276620:tid 276769] [client 49.43.128.226:62129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary2wtPAdfEWqmGIkg2FkgAAAh4"]
[Wed Sep 30 01:14:11.311702 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.191.94:42392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/default.php"] [unique_id "ary2w9PAdfEWqmGIkg2FzgAAAoo"]
[Wed Sep 30 01:14:11.328995 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:11.329278 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:11.342497 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:37137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:11.342771 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:37137] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:11.355692 2026] [security2:error] [pid 276059:tid 276228] [client 20.70.173.30:33395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/echkm.php"] [unique_id "ary2w3tqdHBwD77138fNXAAAAbA"]
[Wed Sep 30 01:14:11.426443 2026] [security2:error] [pid 276059:tid 276213] [client 216.73.216.46:29894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w3tqdHBwD77138fNXQAAAaE"]
[Wed Sep 30 01:14:11.465257 2026] [security2:error] [pid 276059:tid 276279] [client 216.73.216.46:37137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w3tqdHBwD77138fNXgAAAeM"]
[Wed Sep 30 01:14:11.526514 2026] [security2:error] [pid 276059:tid 276307] [client 4.232.144.219:53327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/cpp2.php"] [unique_id "ary2w3tqdHBwD77138fNYQAAAf8"]
[Wed Sep 30 01:14:11.535683 2026] [security2:error] [pid 276620:tid 276809] [client 20.211.90.37:28537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/222.php"] [unique_id "ary2w9PAdfEWqmGIkg2F4wAAAkY"]
[Wed Sep 30 01:14:11.621220 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:11.621649 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:11.633385 2026] [security2:error] [pid 276620:tid 276828] [client 20.214.191.94:42085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/lv.php"] [unique_id "ary2w9PAdfEWqmGIkg2F7wAAAlk"]
[Wed Sep 30 01:14:11.640569 2026] [security2:error] [pid 276620:tid 276827] [client 85.204.70.104:39794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "ary2w9PAdfEWqmGIkg2F8AAAAlg"]
[Wed Sep 30 01:14:11.707690 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:60169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:11.707964 2026] [access_compat:error] [pid 276059:tid 276278] [client 216.73.216.46:60169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:11.748020 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:11.748284 2026] [access_compat:error] [pid 276620:tid 276778] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:11.796385 2026] [security2:error] [pid 276620:tid 276874] [client 4.240.25.22:12433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.allmattingsolutions.com.au"] [uri "/gecko.php"] [unique_id "ary2w9PAdfEWqmGIkg2F-QAAAoc"]
[Wed Sep 30 01:14:11.843410 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:11.843877 2026] [access_compat:error] [pid 276620:tid 276813] [client 216.73.216.46:14129] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:11.863584 2026] [security2:error] [pid 276620:tid 276767] [client 20.70.173.30:19162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/dehnl.php"] [unique_id "ary2w9PAdfEWqmGIkg2F_AAAAhw"]
[Wed Sep 30 01:14:11.882874 2026] [security2:error] [pid 276059:tid 276303] [client 20.211.90.37:28008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/sallu.php"] [unique_id "ary2w3tqdHBwD77138fNbQAAAfs"]
[Wed Sep 30 01:14:11.899069 2026] [access_compat:error] [pid 276620:tid 276777] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:11.899328 2026] [access_compat:error] [pid 276620:tid 276777] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:11.920797 2026] [security2:error] [pid 276620:tid 276816] [client 216.73.216.46:14129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2w9PAdfEWqmGIkg2F_wAAAk0"]
[Wed Sep 30 01:14:11.945770 2026] [security2:error] [pid 276620:tid 276821] [client 4.232.144.219:39580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/admlo.php"] [unique_id "ary2w9PAdfEWqmGIkg2GAAAAAlI"]
[Wed Sep 30 01:14:11.975505 2026] [security2:error] [pid 276059:tid 276287] [client 20.214.191.94:42053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2w3tqdHBwD77138fNbgAAAes"]
[Wed Sep 30 01:14:11.994086 2026] [security2:error] [pid 276620:tid 276836] [client 201.32.215.149:7715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2w9PAdfEWqmGIkg2GAQAAAmE"]
[Wed Sep 30 01:14:11.994216 2026] [security2:error] [pid 276620:tid 276836] [client 201.32.215.149:7715] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2w9PAdfEWqmGIkg2GAQAAAmE"]
[Wed Sep 30 01:14:12.011096 2026] [security2:error] [pid 276059:tid 276266] [client 216.73.216.46:60169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xHtqdHBwD77138fNbwAAAdY"]
[Wed Sep 30 01:14:12.022766 2026] [security2:error] [pid 276620:tid 276837] [client 20.194.30.107:10126] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.designthesign.com"] [uri "/1.php"] [unique_id "ary2xNPAdfEWqmGIkg2GAgAAAmI"]
[Wed Sep 30 01:14:12.022873 2026] [security2:error] [pid 276620:tid 276837] [client 20.194.30.107:10126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/1.php"] [unique_id "ary2xNPAdfEWqmGIkg2GAgAAAmI"]
[Wed Sep 30 01:14:12.100204 2026] [security2:error] [pid 276620:tid 276807] [client 20.70.173.30:19187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/log.php"] [unique_id "ary2xNPAdfEWqmGIkg2GBQAAAkQ"]
[Wed Sep 30 01:14:12.161367 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.161640 2026] [access_compat:error] [pid 276059:tid 276236] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.199581 2026] [security2:error] [pid 276620:tid 276882] [client 192.3.68.135:48282] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/wp-content/uploads/2023/02/LED-Lamps-300x300.jpg"] [unique_id "ary2xNPAdfEWqmGIkg2GDgAAAo8"]
[Wed Sep 30 01:14:12.255354 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.255852 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.266128 2026] [security2:error] [pid 276620:tid 276862] [client 45.3.42.230:49245] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "magisters-terrace.com"] [uri "/wp-login.php"] [unique_id "ary2xNPAdfEWqmGIkg2GCAAAAns"], referer: https://magisters-terrace.com/wp-login.php
[Wed Sep 30 01:14:12.288302 2026] [security2:error] [pid 276059:tid 276148] [remote 57.141.14.79:28452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/feed/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/comments/feed/xmlrpc.php"] [unique_id "ary2xHtqdHBwD77138fNdwABl1Q"]
[Wed Sep 30 01:14:12.292164 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.292441 2026] [access_compat:error] [pid 276059:tid 276220] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.315534 2026] [security2:error] [pid 276620:tid 276832] [client 20.214.191.94:42089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/marijuana.php"] [unique_id "ary2xNPAdfEWqmGIkg2GFgAAAl0"]
[Wed Sep 30 01:14:12.327012 2026] [access_compat:error] [pid 276620:tid 276823] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:14:12.327290 2026] [access_compat:error] [pid 276620:tid 276823] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:14:12.346865 2026] [security2:error] [pid 276620:tid 276880] [client 85.204.70.104:39810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/web/wp-includes/wlwmanifest.xml"] [unique_id "ary2xNPAdfEWqmGIkg2GGQAAAo0"]
[Wed Sep 30 01:14:12.383530 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.383826 2026] [access_compat:error] [pid 276059:tid 276212] [client 216.73.216.46:51734] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.388968 2026] [security2:error] [pid 276059:tid 276224] [client 4.232.144.219:53334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/admin-ajax.php"] [unique_id "ary2xHtqdHBwD77138fNewAAAaw"]
[Wed Sep 30 01:14:12.398292 2026] [security2:error] [pid 276620:tid 276828] [client 20.211.90.37:27991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/k.php"] [unique_id "ary2xNPAdfEWqmGIkg2GGwAAAlk"]
[Wed Sep 30 01:14:12.465034 2026] [security2:error] [pid 276620:tid 276800] [client 163.223.4.132:56010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.4.223.163.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2xNPAdfEWqmGIkg2GIgAAAj0"]
[Wed Sep 30 01:14:12.465175 2026] [security2:error] [pid 276620:tid 276800] [client 163.223.4.132:56010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "emerald-machine.com"] [uri "/xmlrpc.php"] [unique_id "ary2xNPAdfEWqmGIkg2GIgAAAj0"]
[Wed Sep 30 01:14:12.468012 2026] [security2:error] [pid 276059:tid 276200] [client 216.73.216.46:51734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xHtqdHBwD77138fNfgAAAZU"]
[Wed Sep 30 01:14:12.527634 2026] [security2:error] [pid 276620:tid 276884] [client 20.194.30.107:23586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wealthmentoringsystem.jfootsteps.com"] [uri "/0.php"] [unique_id "ary2xNPAdfEWqmGIkg2GJwAAApE"]
[Wed Sep 30 01:14:12.552274 2026] [security2:error] [pid 276059:tid 276199] [client 20.194.30.107:17406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.kgamc.com"] [uri "/cabs.php"] [unique_id "ary2xHtqdHBwD77138fNgwAAAZQ"]
[Wed Sep 30 01:14:12.569049 2026] [security2:error] [pid 276059:tid 276275] [client 152.56.240.85:55240] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2xHtqdHBwD77138fNhQAAAd8"]
[Wed Sep 30 01:14:12.569259 2026] [security2:error] [pid 276059:tid 276275] [client 152.56.240.85:55240] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2xHtqdHBwD77138fNhQAAAd8"]
[Wed Sep 30 01:14:12.569394 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.569850 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.586490 2026] [security2:error] [pid 276620:tid 276877] [client 122.173.27.10:28179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2xNPAdfEWqmGIkg2GKwAAAoo"]
[Wed Sep 30 01:14:12.586638 2026] [security2:error] [pid 276620:tid 276877] [client 122.173.27.10:28179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary2xNPAdfEWqmGIkg2GKwAAAoo"]
[Wed Sep 30 01:14:12.623725 2026] [security2:error] [pid 276059:tid 276227] [client 20.214.191.94:42048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ary2xHtqdHBwD77138fNhgAAAa8"]
[Wed Sep 30 01:14:12.658775 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.659055 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.696769 2026] [security2:error] [pid 276620:tid 276841] [client 89.32.203.247:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2xNPAdfEWqmGIkg2GMAAAAmY"]
[Wed Sep 30 01:14:12.750501 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.750768 2026] [access_compat:error] [pid 276620:tid 276772] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.757751 2026] [security2:error] [pid 276620:tid 276777] [client 20.211.90.37:28320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/24.php"] [unique_id "ary2xNPAdfEWqmGIkg2GNgAAAiY"]
[Wed Sep 30 01:14:12.789009 2026] [security2:error] [pid 276059:tid 276300] [client 4.240.25.22:8957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/cdc.php"] [unique_id "ary2xHtqdHBwD77138fNiAAAAfg"]
[Wed Sep 30 01:14:12.810594 2026] [security2:error] [pid 276620:tid 276767] [client 168.100.149.151:44962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/c5a836e6543f29a4b0cb067d502fd501.1af56.css.gz"] [unique_id "ary2xNPAdfEWqmGIkg2GOAACHGU"]
[Wed Sep 30 01:14:12.825949 2026] [access_compat:error] [pid 276620:tid 276807] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:12.826214 2026] [access_compat:error] [pid 276620:tid 276807] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:12.842125 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.842406 2026] [access_compat:error] [pid 276620:tid 276819] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.869386 2026] [security2:error] [pid 276059:tid 276239] [client 20.219.2.60:30368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws86.php"] [unique_id "ary2xHtqdHBwD77138fNiQAAAbs"]
[Wed Sep 30 01:14:12.872929 2026] [security2:error] [pid 276059:tid 276317] [client 4.240.25.22:33299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.odeonsite-stalbans.co.uk"] [uri "/av.php"] [unique_id "ary2xHtqdHBwD77138fNigAAAgk"]
[Wed Sep 30 01:14:12.935162 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:12.935446 2026] [access_compat:error] [pid 276620:tid 276885] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:12.949519 2026] [security2:error] [pid 276059:tid 276276] [client 20.70.173.30:33369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/ccc.php"] [unique_id "ary2xHtqdHBwD77138fNjQAAAeA"]
[Wed Sep 30 01:14:12.973513 2026] [security2:error] [pid 276620:tid 276763] [client 20.214.191.94:42401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-content/403.php"] [unique_id "ary2xNPAdfEWqmGIkg2GPQAAAhg"]
[Wed Sep 30 01:14:12.980199 2026] [security2:error] [pid 276620:tid 276667] [remote 74.7.227.56:36414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uxa.hoh.mybluehost.me"] [uri "/viewtopic.php"] [unique_id "ary2xNPAdfEWqmGIkg2GPgACUSU"], referer: https://www.uxa.hoh.mybluehost.me/viewforum.php?f=21&sid=143577b792572163889ac485111a652c&start=675
[Wed Sep 30 01:14:13.026431 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.026710 2026] [access_compat:error] [pid 276620:tid 276805] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.028139 2026] [security2:error] [pid 276620:tid 276867] [client 85.204.70.104:39814] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ary2xdPAdfEWqmGIkg2GQAAAAoA"]
[Wed Sep 30 01:14:13.035691 2026] [security2:error] [pid 276620:tid 276883] [client 20.194.96.176:53551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/Dss.php"] [unique_id "ary2xdPAdfEWqmGIkg2GQgAAApA"]
[Wed Sep 30 01:14:13.059444 2026] [security2:error] [pid 276620:tid 276825] [client 4.232.144.219:53313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/amthd.php"] [unique_id "ary2xdPAdfEWqmGIkg2GQwAAAlY"]
[Wed Sep 30 01:14:13.115869 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.116136 2026] [access_compat:error] [pid 276620:tid 276815] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.125966 2026] [security2:error] [pid 276620:tid 276882] [client 20.211.90.37:27962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/blacks.php"] [unique_id "ary2xdPAdfEWqmGIkg2GRgAAAo8"]
[Wed Sep 30 01:14:13.162627 2026] [security2:error] [pid 276059:tid 276066] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2xXtqdHBwD77138fNkAABsQI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301797&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:14:13.162654 2026] [security2:error] [pid 276059:tid 276066] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2xXtqdHBwD77138fNkAABsQI"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=301797&sid=345ce0de4ed00f005f123f9093dd352a
[Wed Sep 30 01:14:13.208865 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.209165 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.240673 2026] [security2:error] [pid 276620:tid 276792] [client 223.235.102.107:30377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2xdPAdfEWqmGIkg2GSwAAAjU"]
[Wed Sep 30 01:14:13.240794 2026] [security2:error] [pid 276620:tid 276792] [client 223.235.102.107:30377] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary2xdPAdfEWqmGIkg2GSwAAAjU"]
[Wed Sep 30 01:14:13.298379 2026] [security2:error] [pid 276620:tid 276839] [client 20.214.191.94:42092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/css/colors/coffee/index.php"] [unique_id "ary2xdPAdfEWqmGIkg2GTgAAAmQ"]
[Wed Sep 30 01:14:13.302752 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.303039 2026] [access_compat:error] [pid 276620:tid 276881] [client 216.73.216.46:22818] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.351916 2026] [access_compat:error] [pid 276620:tid 276766] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:13.352435 2026] [access_compat:error] [pid 276620:tid 276766] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:13.384030 2026] [security2:error] [pid 276620:tid 276850] [client 216.73.216.46:22818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xdPAdfEWqmGIkg2GUwAAAm8"]
[Wed Sep 30 01:14:13.439466 2026] [security2:error] [pid 276059:tid 276251] [client 155.190.6.18:35212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2xXtqdHBwD77138fNmQAAAcc"]
[Wed Sep 30 01:14:13.439615 2026] [security2:error] [pid 276059:tid 276251] [client 155.190.6.18:35212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2xXtqdHBwD77138fNmQAAAcc"]
[Wed Sep 30 01:14:13.477545 2026] [security2:error] [pid 276620:tid 276785] [client 20.194.30.107:4992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2xdPAdfEWqmGIkg2GVgAAAi4"]
[Wed Sep 30 01:14:13.491862 2026] [security2:error] [pid 276620:tid 276742] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2xdPAdfEWqmGIkg2GVQACjXA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301196
[Wed Sep 30 01:14:13.491893 2026] [security2:error] [pid 276620:tid 276742] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary2xdPAdfEWqmGIkg2GVQACjXA"], referer: https://forum.torquayfans.com/posting.php?mode=quote&p=301196
[Wed Sep 30 01:14:13.521864 2026] [security2:error] [pid 276620:tid 276858] [client 20.211.90.37:28503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/anom.php"] [unique_id "ary2xdPAdfEWqmGIkg2GWAAAAnc"]
[Wed Sep 30 01:14:13.534423 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:41013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.534695 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:41013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.624470 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.624880 2026] [access_compat:error] [pid 276059:tid 276205] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.648681 2026] [security2:error] [pid 276620:tid 276789] [client 4.232.144.219:39607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/8xyz.php"] [unique_id "ary2xdPAdfEWqmGIkg2GXwAAAjI"]
[Wed Sep 30 01:14:13.668212 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:41013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.668474 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:41013] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.682300 2026] [security2:error] [pid 276620:tid 276760] [client 172.232.180.137:49484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-plain.php"] [unique_id "ary2xdPAdfEWqmGIkg2GYgAAAhU"], referer: www.google.com
[Wed Sep 30 01:14:13.730922 2026] [security2:error] [pid 276620:tid 276854] [client 85.204.70.104:39824] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/website/wp-includes/wlwmanifest.xml"] [unique_id "ary2xdPAdfEWqmGIkg2GZwAAAnM"]
[Wed Sep 30 01:14:13.732101 2026] [security2:error] [pid 276620:tid 276826] [client 4.240.25.22:8433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/f35.php"] [unique_id "ary2xdPAdfEWqmGIkg2GaAAAAlc"]
[Wed Sep 30 01:14:13.759160 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.759489 2026] [access_compat:error] [pid 276059:tid 276277] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.771904 2026] [security2:error] [pid 276620:tid 276844] [client 20.214.191.94:42408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/css.php"] [unique_id "ary2xdPAdfEWqmGIkg2GbQAAAmk"]
[Wed Sep 30 01:14:13.786978 2026] [access_compat:error] [pid 276620:tid 276784] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:13.787244 2026] [access_compat:error] [pid 276620:tid 276784] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:13.902107 2026] [security2:error] [pid 276620:tid 276813] [client 216.73.216.46:44644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xdPAdfEWqmGIkg2GcgAAAko"]
[Wed Sep 30 01:14:13.933444 2026] [security2:error] [pid 276620:tid 276762] [client 66.249.74.196:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.coscharis-tech.com"] [uri "/robots.txt"] [unique_id "ary2xdPAdfEWqmGIkg2GeAAAAhc"]
[Wed Sep 30 01:14:13.943616 2026] [security2:error] [pid 276620:tid 276824] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2xdPAdfEWqmGIkg2GeQAAAlU"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:13.946045 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:13.946301 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:13.979878 2026] [security2:error] [pid 276620:tid 276708] [remote 57.141.14.49:20104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/wp-json/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/xmlrpc.php"] [unique_id "ary2xdPAdfEWqmGIkg2GdwACUk4"]
[Wed Sep 30 01:14:13.983078 2026] [security2:error] [pid 276620:tid 276793] [client 4.240.25.22:44361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/adminan.php"] [unique_id "ary2xdPAdfEWqmGIkg2GegAAAjY"]
[Wed Sep 30 01:14:13.992151 2026] [security2:error] [pid 276620:tid 276770] [client 20.211.90.37:27940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/groud3.php"] [unique_id "ary2xdPAdfEWqmGIkg2GewAAAh8"]
[Wed Sep 30 01:14:14.039982 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.040315 2026] [access_compat:error] [pid 276059:tid 276233] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.071452 2026] [security2:error] [pid 276620:tid 276878] [client 43.104.4.198:39783] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js"] [unique_id "ary2xtPAdfEWqmGIkg2GfQAAAos"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:14:14.130761 2026] [security2:error] [pid 276620:tid 276853] [client 20.214.191.94:42078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-admin/user/about.php"] [unique_id "ary2xtPAdfEWqmGIkg2GgQAAAnI"]
[Wed Sep 30 01:14:14.134242 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.134676 2026] [access_compat:error] [pid 276059:tid 276265] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.152280 2026] [security2:error] [pid 276620:tid 276776] [client 20.70.173.30:27810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnacle-med.pinnacletrainingsystems.com"] [uri "/cgi-bin/admin.php"] [unique_id "ary2xtPAdfEWqmGIkg2GhAAAAiU"]
[Wed Sep 30 01:14:14.214423 2026] [security2:error] [pid 276620:tid 276794] [client 20.28.180.172:9030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/a22.php"] [unique_id "ary2xtPAdfEWqmGIkg2GhQAAAjc"]
[Wed Sep 30 01:14:14.217543 2026] [security2:error] [pid 276620:tid 276868] [client 172.232.180.137:65256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hopethroughrestoration.org"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ary2xtPAdfEWqmGIkg2GhgAAAoE"]
[Wed Sep 30 01:14:14.222061 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.222328 2026] [access_compat:error] [pid 276059:tid 276307] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.239894 2026] [security2:error] [pid 276620:tid 276768] [client 20.194.96.176:7923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/media.php"] [unique_id "ary2xtPAdfEWqmGIkg2GiQAAAh0"]
[Wed Sep 30 01:14:14.260144 2026] [security2:error] [pid 276620:tid 276845] [client 4.240.25.22:8475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary2xtPAdfEWqmGIkg2GigAAAmo"]
[Wed Sep 30 01:14:14.289784 2026] [access_compat:error] [pid 276620:tid 276785] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:14.290075 2026] [access_compat:error] [pid 276620:tid 276785] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:14.311061 2026] [security2:error] [pid 276620:tid 276787] [client 216.73.216.46:41013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xtPAdfEWqmGIkg2GjQAAAjA"]
[Wed Sep 30 01:14:14.381021 2026] [security2:error] [pid 276059:tid 276116] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2xntqdHBwD77138fNpgAB2jQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300564&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:14:14.381047 2026] [security2:error] [pid 276059:tid 276116] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary2xntqdHBwD77138fNpgAB2jQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=300564&sid=d525e04cad5c2492949d98b90c59416c
[Wed Sep 30 01:14:14.404282 2026] [security2:error] [pid 276620:tid 276862] [client 20.211.90.37:28376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/gaxby.php"] [unique_id "ary2xtPAdfEWqmGIkg2GjwAAAns"]
[Wed Sep 30 01:14:14.420738 2026] [security2:error] [pid 276059:tid 276322] [client 148.72.211.211:34834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.211.72.148.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ydf.ysf.mybluehost.me"] [uri "/index.php"] [unique_id "ary2xntqdHBwD77138fNpwAAAg4"]
[Wed Sep 30 01:14:14.428630 2026] [security2:error] [pid 276620:tid 276801] [client 186.12.168.252:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary2xtPAdfEWqmGIkg2GkQAAAj4"]
[Wed Sep 30 01:14:14.435716 2026] [security2:error] [pid 276620:tid 276825] [client 85.204.70.104:52754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "ary2xtPAdfEWqmGIkg2GkwAAAlY"]
[Wed Sep 30 01:14:14.451090 2026] [security2:error] [pid 276059:tid 276321] [client 20.214.191.94:42065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/about.php"] [unique_id "ary2xntqdHBwD77138fNqQAAAg0"]
[Wed Sep 30 01:14:14.453232 2026] [security2:error] [pid 276059:tid 276271] [client 216.73.216.46:48473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xntqdHBwD77138fNqgAAAds"]
[Wed Sep 30 01:14:14.498425 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.498705 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:5185] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.581805 2026] [security2:error] [pid 276620:tid 276860] [client 49.43.163.212:60574] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2xtPAdfEWqmGIkg2GmgAAAnk"]
[Wed Sep 30 01:14:14.582010 2026] [security2:error] [pid 276620:tid 276860] [client 49.43.163.212:60574] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary2xtPAdfEWqmGIkg2GmgAAAnk"]
[Wed Sep 30 01:14:14.583369 2026] [security2:error] [pid 276059:tid 276214] [client 216.73.216.46:5185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xntqdHBwD77138fNrwAAAaI"]
[Wed Sep 30 01:14:14.656110 2026] [security2:error] [pid 276620:tid 276869] [client 20.219.2.60:29949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/vx.php"] [unique_id "ary2xtPAdfEWqmGIkg2GoAAAAoI"]
[Wed Sep 30 01:14:14.703381 2026] [security2:error] [pid 276059:tid 276250] [client 4.232.144.219:53358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/mini.php"] [unique_id "ary2xntqdHBwD77138fNtAAAAcY"]
[Wed Sep 30 01:14:14.722030 2026] [security2:error] [pid 276059:tid 276286] [client 4.196.65.241:39184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ary2xntqdHBwD77138fNtgAAAeo"]
[Wed Sep 30 01:14:14.726110 2026] [security2:error] [pid 276059:tid 276232] [client 216.73.216.46:38990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xntqdHBwD77138fNtwAAAbQ"]
[Wed Sep 30 01:14:14.745969 2026] [security2:error] [pid 276059:tid 276318] [client 4.240.25.22:8903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/reviall.php"] [unique_id "ary2xntqdHBwD77138fNuQAAAgo"]
[Wed Sep 30 01:14:14.787918 2026] [security2:error] [pid 276059:tid 276236] [client 168.100.149.198:16794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/48d9c1a97593647cff902e6713871392.747.css.gz"] [unique_id "ary2xntqdHBwD77138fNuwABuFk"]
[Wed Sep 30 01:14:14.818282 2026] [security2:error] [pid 276620:tid 276855] [client 45.138.12.32:49146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nhg.jhe.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2xtPAdfEWqmGIkg2GpwAAAnQ"]
[Wed Sep 30 01:14:14.818402 2026] [security2:error] [pid 276059:tid 276262] [client 20.70.173.30:33301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/wp-content/admin.php"] [unique_id "ary2xntqdHBwD77138fNvAAAAdI"]
[Wed Sep 30 01:14:14.819322 2026] [security2:error] [pid 276059:tid 276220] [client 20.214.191.94:42083] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1560"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.royalcanvas.ca"] [uri "/1.php"] [unique_id "ary2xntqdHBwD77138fNvQAAAag"]
[Wed Sep 30 01:14:14.819454 2026] [security2:error] [pid 276059:tid 276220] [client 20.214.191.94:42083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/1.php"] [unique_id "ary2xntqdHBwD77138fNvQAAAag"]
[Wed Sep 30 01:14:14.824122 2026] [access_compat:error] [pid 276620:tid 276817] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:14.824406 2026] [access_compat:error] [pid 276620:tid 276817] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:14.827229 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:59452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.827668 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:59452] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.839400 2026] [security2:error] [pid 276620:tid 276777] [client 20.211.90.37:27963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/dh9u7.php"] [unique_id "ary2xtPAdfEWqmGIkg2GqQAAAiY"]
[Wed Sep 30 01:14:14.913898 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:14.914167 2026] [access_compat:error] [pid 276620:tid 276833] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:14.947853 2026] [security2:error] [pid 276620:tid 276824] [client 216.73.216.46:59452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2xtPAdfEWqmGIkg2GrAAAAlU"]
[Wed Sep 30 01:14:15.044466 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.044731 2026] [access_compat:error] [pid 276620:tid 276802] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.127842 2026] [security2:error] [pid 276620:tid 276849] [client 85.204.70.104:52768] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "ary2x9PAdfEWqmGIkg2GtQAAAm4"]
[Wed Sep 30 01:14:15.134744 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.135025 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.182182 2026] [security2:error] [pid 276059:tid 276315] [client 20.214.191.94:42086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/marijuana.php"] [unique_id "ary2x3tqdHBwD77138fNwQAAAgc"]
[Wed Sep 30 01:14:15.184847 2026] [security2:error] [pid 276059:tid 276296] [client 20.70.173.30:25175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/133.php"] [unique_id "ary2x3tqdHBwD77138fNwwAAAfQ"]
[Wed Sep 30 01:14:15.228975 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.229243 2026] [access_compat:error] [pid 276620:tid 276776] [client 216.73.216.46:13871] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.310960 2026] [security2:error] [pid 276620:tid 276847] [client 4.232.144.219:36025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws68.php"] [unique_id "ary2x9PAdfEWqmGIkg2GuwAAAmw"]
[Wed Sep 30 01:14:15.312015 2026] [security2:error] [pid 276620:tid 276782] [client 216.73.216.46:13871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2x9PAdfEWqmGIkg2GvAAAAis"]
[Wed Sep 30 01:14:15.322180 2026] [access_compat:error] [pid 276620:tid 276829] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:15.322461 2026] [access_compat:error] [pid 276620:tid 276829] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:15.440178 2026] [security2:error] [pid 276620:tid 276850] [client 20.211.90.37:27977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/koiy.php"] [unique_id "ary2x9PAdfEWqmGIkg2GvgAAAm8"]
[Wed Sep 30 01:14:15.455839 2026] [security2:error] [pid 276620:tid 276845] [client 216.73.216.46:2601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2x9PAdfEWqmGIkg2GwAAAAmo"]
[Wed Sep 30 01:14:15.491171 2026] [security2:error] [pid 276620:tid 276787] [client 4.240.25.22:8936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/666.php"] [unique_id "ary2x9PAdfEWqmGIkg2GxAAAAjA"]
[Wed Sep 30 01:14:15.514373 2026] [security2:error] [pid 276620:tid 276815] [client 4.240.25.22:46327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/fling.php"] [unique_id "ary2x9PAdfEWqmGIkg2GxwAAAkw"]
[Wed Sep 30 01:14:15.552543 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:48632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.552821 2026] [access_compat:error] [pid 276620:tid 276801] [client 216.73.216.46:48632] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.573972 2026] [security2:error] [pid 276059:tid 276252] [client 20.214.191.94:42432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/about/function.php"] [unique_id "ary2x3tqdHBwD77138fNzgAAAcg"]
[Wed Sep 30 01:14:15.581374 2026] [security2:error] [pid 276620:tid 276870] [client 4.240.25.22:8929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/about.php"] [unique_id "ary2x9PAdfEWqmGIkg2GywAAAoM"]
[Wed Sep 30 01:14:15.644993 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.645247 2026] [access_compat:error] [pid 276059:tid 276194] [client 216.73.216.46:60754] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.648025 2026] [core:error] [pid 276059:tid 276255] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:14:15.648049 2026] [core:error] [pid 276059:tid 276255] [client 71.6.236.101:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Wed Sep 30 01:14:15.676488 2026] [security2:error] [pid 276620:tid 276826] [client 216.73.216.46:48632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2x9PAdfEWqmGIkg2GzgAAAlc"]
[Wed Sep 30 01:14:15.722288 2026] [security2:error] [pid 276059:tid 276302] [client 20.219.2.60:30043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/dass.php"] [unique_id "ary2x3tqdHBwD77138fN1QAAAfo"]
[Wed Sep 30 01:14:15.767050 2026] [security2:error] [pid 276059:tid 276231] [client 216.73.216.46:60754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2x3tqdHBwD77138fN1gAAAbM"]
[Wed Sep 30 01:14:15.794974 2026] [access_compat:error] [pid 276620:tid 276792] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:15.795294 2026] [access_compat:error] [pid 276620:tid 276792] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:15.838804 2026] [security2:error] [pid 276620:tid 276839] [client 85.204.70.104:52776] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "ary2x9PAdfEWqmGIkg2G0wAAAmQ"]
[Wed Sep 30 01:14:15.854078 2026] [security2:error] [pid 276620:tid 276864] [client 4.196.65.241:43784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "ary2x9PAdfEWqmGIkg2G1AAAAn0"]
[Wed Sep 30 01:14:15.854647 2026] [security2:error] [pid 276620:tid 276838] [client 20.211.90.37:28399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wordfence-waf.php"] [unique_id "ary2x9PAdfEWqmGIkg2G1QAAAmM"]
[Wed Sep 30 01:14:15.916234 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:10623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:15.916521 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:10623] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:15.942718 2026] [security2:error] [pid 276620:tid 276767] [client 20.214.191.94:42087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/simple.php"] [unique_id "ary2x9PAdfEWqmGIkg2G2QAAAhw"]
[Wed Sep 30 01:14:15.979215 2026] [security2:error] [pid 276620:tid 276762] [client 4.232.144.219:35984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/xxx.php"] [unique_id "ary2x9PAdfEWqmGIkg2G2wAAAhc"]
[Wed Sep 30 01:14:16.001748 2026] [security2:error] [pid 276059:tid 276226] [client 216.73.216.46:10406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yHtqdHBwD77138fN2gAAAa4"]
[Wed Sep 30 01:14:16.040572 2026] [security2:error] [pid 276620:tid 276772] [client 216.73.216.46:10623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2G3wAAAiE"]
[Wed Sep 30 01:14:16.052758 2026] [security2:error] [pid 276059:tid 276308] [client 4.240.25.22:18719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.davidtech.us"] [uri "/users.php"] [unique_id "ary2yHtqdHBwD77138fN3AAAAgA"]
[Wed Sep 30 01:14:16.142208 2026] [security2:error] [pid 276620:tid 276770] [client 20.70.173.30:19169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/BDKR28WP.php"] [unique_id "ary2yNPAdfEWqmGIkg2G4QAAAh8"]
[Wed Sep 30 01:14:16.166879 2026] [security2:error] [pid 276620:tid 276865] [client 106.214.2.47:22605] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2yNPAdfEWqmGIkg2G5AAAAn4"]
[Wed Sep 30 01:14:16.174341 2026] [security2:error] [pid 276620:tid 276865] [client 106.214.2.47:22605] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary2yNPAdfEWqmGIkg2G5AAAAn4"]
[Wed Sep 30 01:14:16.182888 2026] [security2:error] [pid 276059:tid 276277] [client 216.73.216.46:21449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yHtqdHBwD77138fN3QAAAeE"]
[Wed Sep 30 01:14:16.273780 2026] [security2:error] [pid 276620:tid 276853] [client 216.73.216.46:36800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2G6AAAAnI"]
[Wed Sep 30 01:14:16.300084 2026] [security2:error] [pid 276620:tid 276882] [client 47.79.13.37:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/software/"] [unique_id "ary2yNPAdfEWqmGIkg2G7QAAAo8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:16.318372 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:16.318627 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:16.364839 2026] [security2:error] [pid 276059:tid 276279] [client 20.214.191.94:42097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/goat1.php"] [unique_id "ary2yHtqdHBwD77138fN4QAAAeM"]
[Wed Sep 30 01:14:16.365928 2026] [security2:error] [pid 276620:tid 276881] [client 216.73.216.46:13729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2G9wAAAo4"]
[Wed Sep 30 01:14:16.399644 2026] [security2:error] [pid 276620:tid 276861] [client 20.211.90.37:28495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/em.php"] [unique_id "ary2yNPAdfEWqmGIkg2G-QAAAno"]
[Wed Sep 30 01:14:16.441795 2026] [security2:error] [pid 276620:tid 276870] [client 4.240.25.22:8497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/dex.php"] [unique_id "ary2yNPAdfEWqmGIkg2G_gAAAoM"]
[Wed Sep 30 01:14:16.456633 2026] [security2:error] [pid 276620:tid 276871] [client 216.73.216.46:22764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2G_wAAAoQ"]
[Wed Sep 30 01:14:16.494443 2026] [security2:error] [pid 276059:tid 276259] [client 8.162.11.86:57808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary2yHtqdHBwD77138fN4gAAAc8"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:14:16.510518 2026] [security2:error] [pid 276620:tid 276855] [client 103.211.18.63:52148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2yNPAdfEWqmGIkg2HAAAAAnQ"]
[Wed Sep 30 01:14:16.510674 2026] [security2:error] [pid 276620:tid 276855] [client 103.211.18.63:52148] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary2yNPAdfEWqmGIkg2HAAAAAnQ"]
[Wed Sep 30 01:14:16.548461 2026] [security2:error] [pid 276059:tid 276195] [client 216.73.216.46:29795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yHtqdHBwD77138fN4wAAAZA"]
[Wed Sep 30 01:14:16.579157 2026] [security2:error] [pid 276620:tid 276797] [client 102.129.153.69:51227] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "nmarl.com"] [uri "/.env"] [unique_id "ary2yNPAdfEWqmGIkg2HBgAAAjo"]
[Wed Sep 30 01:14:16.613202 2026] [security2:error] [pid 276620:tid 276839] [client 20.70.173.30:41122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/dex.php"] [unique_id "ary2yNPAdfEWqmGIkg2HCgAAAmQ"]
[Wed Sep 30 01:14:16.634574 2026] [security2:error] [pid 276620:tid 276872] [client 85.204.70.104:52786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml"] [unique_id "ary2yNPAdfEWqmGIkg2HDAAAAoU"]
[Wed Sep 30 01:14:16.641607 2026] [security2:error] [pid 276620:tid 276838] [client 216.73.216.46:5120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2HDgAAAmM"]
[Wed Sep 30 01:14:16.656191 2026] [security2:error] [pid 276620:tid 276813] [client 4.232.144.219:36005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/njxjtooj.php"] [unique_id "ary2yNPAdfEWqmGIkg2HEAAAAko"]
[Wed Sep 30 01:14:16.730698 2026] [security2:error] [pid 276059:tid 276299] [client 216.73.216.46:46325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yHtqdHBwD77138fN7AAAAfc"]
[Wed Sep 30 01:14:16.755059 2026] [security2:error] [pid 276059:tid 276284] [client 20.214.191.94:42049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/chosen.php"] [unique_id "ary2yHtqdHBwD77138fN7QAAAeg"]
[Wed Sep 30 01:14:16.784870 2026] [security2:error] [pid 276620:tid 276775] [client 157.245.105.107:49810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.105.245.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "central-fuerth.de"] [uri "/info.php"] [unique_id "ary2yNPAdfEWqmGIkg2HGAAAAiQ"]
[Wed Sep 30 01:14:16.793185 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:16.793579 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:16.809282 2026] [security2:error] [pid 276620:tid 276745] [remote 168.100.149.211:50526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/index.php"] [unique_id "ary2yNPAdfEWqmGIkg2HGwACRHM"]
[Wed Sep 30 01:14:16.809470 2026] [security2:error] [pid 276059:tid 276313] [client 20.211.90.37:28012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/hp.php"] [unique_id "ary2yHtqdHBwD77138fN7gAAAgU"]
[Wed Sep 30 01:14:16.820976 2026] [security2:error] [pid 276620:tid 276842] [client 216.73.216.46:4301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2HHAAAAmc"]
[Wed Sep 30 01:14:16.912654 2026] [security2:error] [pid 276620:tid 276868] [client 216.73.216.46:35031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yNPAdfEWqmGIkg2HJAAAAoE"]
[Wed Sep 30 01:14:16.916418 2026] [security2:error] [pid 276620:tid 276837] [client 4.240.25.22:12471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forsurefuntravel.com"] [uri "/memberfuns.php"] [unique_id "ary2yNPAdfEWqmGIkg2HJQAAAmI"]
[Wed Sep 30 01:14:16.964561 2026] [security2:error] [pid 276620:tid 276829] [client 20.194.96.176:7433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/images.php"] [unique_id "ary2yNPAdfEWqmGIkg2HJwAAAlo"]
[Wed Sep 30 01:14:16.991589 2026] [security2:error] [pid 276059:tid 276232] [client 20.70.173.30:19188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marlm.com"] [uri "/wp-the.php"] [unique_id "ary2yHtqdHBwD77138fN8AAAAbQ"]
[Wed Sep 30 01:14:17.009692 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:42237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:17.009989 2026] [access_compat:error] [pid 276620:tid 276773] [client 216.73.216.46:42237] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:17.051894 2026] [security2:error] [pid 276620:tid 276801] [client 37.41.16.35:57395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ydPAdfEWqmGIkg2HKwAAAj4"]
[Wed Sep 30 01:14:17.052064 2026] [security2:error] [pid 276620:tid 276801] [client 37.41.16.35:57395] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ydPAdfEWqmGIkg2HKwAAAj4"]
[Wed Sep 30 01:14:17.093548 2026] [security2:error] [pid 276620:tid 276850] [client 216.73.216.46:13782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ydPAdfEWqmGIkg2HLAAAAm8"]
[Wed Sep 30 01:14:17.110056 2026] [security2:error] [pid 276620:tid 276861] [client 20.214.191.94:42102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-cron.php"] [unique_id "ary2ydPAdfEWqmGIkg2HLQAAAno"]
[Wed Sep 30 01:14:17.133939 2026] [security2:error] [pid 276620:tid 276859] [client 216.73.216.46:42237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ydPAdfEWqmGIkg2HLgAAAng"]
[Wed Sep 30 01:14:17.260679 2026] [security2:error] [pid 276620:tid 276785] [client 8.162.11.86:57208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.11.162.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "avecs.us"] [uri "/wp-login.php"] [unique_id "ary2ydPAdfEWqmGIkg2HNAAAAi4"], referer: https://avecs.us/wp-login.php
[Wed Sep 30 01:14:17.273194 2026] [security2:error] [pid 276620:tid 276867] [client 182.75.216.230:49349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.216.75.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2ydPAdfEWqmGIkg2HNQAAAoA"]
[Wed Sep 30 01:14:17.273328 2026] [security2:error] [pid 276620:tid 276867] [client 182.75.216.230:49349] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "scottcoy.com"] [uri "/xmlrpc.php"] [unique_id "ary2ydPAdfEWqmGIkg2HNQAAAoA"]
[Wed Sep 30 01:14:17.305740 2026] [access_compat:error] [pid 276620:tid 276871] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:17.306039 2026] [access_compat:error] [pid 276620:tid 276871] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:17.306996 2026] [security2:error] [pid 276059:tid 276295] [client 216.73.216.46:7826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yXtqdHBwD77138fN9gAAAfM"]
[Wed Sep 30 01:14:17.325741 2026] [security2:error] [pid 276620:tid 276779] [client 85.204.70.104:52800] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml"] [unique_id "ary2ydPAdfEWqmGIkg2HNwAAAig"]
[Wed Sep 30 01:14:17.331035 2026] [security2:error] [pid 276059:tid 276236] [client 20.211.90.37:27907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.90.211.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.isoltrading.com"] [uri "/wpuse.php"] [unique_id "ary2yXtqdHBwD77138fN-AAAAbg"]
[Wed Sep 30 01:14:17.378921 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:17.379388 2026] [access_compat:error] [pid 276059:tid 276203] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:17.382401 2026] [security2:error] [pid 276059:tid 276234] [client 20.214.191.94:42394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/yanz.php"] [unique_id "ary2yXtqdHBwD77138fN-gAAAbY"]
[Wed Sep 30 01:14:17.457176 2026] [access_compat:error] [pid 276620:tid 276820] [client 47.79.13.168:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:17.457468 2026] [access_compat:error] [pid 276620:tid 276820] [client 47.79.13.168:44196] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:17.457743 2026] [security2:error] [pid 276620:tid 276788] [client 216.73.216.46:5402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ydPAdfEWqmGIkg2HPAAAAjE"]
[Wed Sep 30 01:14:17.505309 2026] [access_compat:error] [pid 276059:tid 276224] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:17.505575 2026] [access_compat:error] [pid 276059:tid 276224] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:17.509665 2026] [security2:error] [pid 276620:tid 276860] [client 4.232.144.219:53312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws85.php"] [unique_id "ary2ydPAdfEWqmGIkg2HPgAAAnk"]
[Wed Sep 30 01:14:17.594957 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:17.595239 2026] [access_compat:error] [pid 276059:tid 276204] [client 216.73.216.46:4746] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:17.605258 2026] [security2:error] [pid 276620:tid 276641] [remote 74.7.227.27:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 27.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary2ydPAdfEWqmGIkg2HQgAChQs"], referer: https://mail.torquayfans.com/ucp.php?mode=login&redirect=viewtopic.php%3Fp%3D20110
[Wed Sep 30 01:14:17.727318 2026] [security2:error] [pid 276059:tid 276221] [client 20.214.191.94:42084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/config.php"] [unique_id "ary2yXtqdHBwD77138fOAgAAAak"]
[Wed Sep 30 01:14:17.730794 2026] [security2:error] [pid 276059:tid 276246] [client 216.73.216.46:58646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yXtqdHBwD77138fOAwAAAcI"]
[Wed Sep 30 01:14:17.780286 2026] [security2:error] [pid 276059:tid 276202] [client 103.241.204.139:54088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2yXtqdHBwD77138fOBgAAAZc"]
[Wed Sep 30 01:14:17.780392 2026] [security2:error] [pid 276059:tid 276202] [client 103.241.204.139:54088] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary2yXtqdHBwD77138fOBgAAAZc"]
[Wed Sep 30 01:14:17.801684 2026] [security2:error] [pid 276059:tid 276274] [client 20.70.173.30:63447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/wp-the.php"] [unique_id "ary2yXtqdHBwD77138fOBwAAAd4"]
[Wed Sep 30 01:14:17.821041 2026] [security2:error] [pid 276059:tid 276300] [client 20.194.30.107:45551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/8.php"] [unique_id "ary2yXtqdHBwD77138fOCAAAAfg"]
[Wed Sep 30 01:14:17.827075 2026] [access_compat:error] [pid 276620:tid 276835] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC92YXI=
[Wed Sep 30 01:14:17.827346 2026] [access_compat:error] [pid 276620:tid 276835] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC92YXI=
[Wed Sep 30 01:14:17.828979 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:16234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:17.829236 2026] [access_compat:error] [pid 276620:tid 276822] [client 216.73.216.46:16234] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:17.914074 2026] [security2:error] [pid 276059:tid 276240] [client 216.73.216.46:54045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yXtqdHBwD77138fOCQAAAbw"]
[Wed Sep 30 01:14:17.914829 2026] [security2:error] [pid 276059:tid 276263] [client 4.232.144.219:26908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws61.php"] [unique_id "ary2yXtqdHBwD77138fOCgAAAdM"]
[Wed Sep 30 01:14:17.953560 2026] [security2:error] [pid 276059:tid 276305] [client 216.73.216.46:4746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yXtqdHBwD77138fOCwAAAf0"]
[Wed Sep 30 01:14:18.032611 2026] [security2:error] [pid 276059:tid 276281] [client 85.204.70.104:52806] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ary2yntqdHBwD77138fODgAAAeU"]
[Wed Sep 30 01:14:18.042980 2026] [security2:error] [pid 276620:tid 276760] [client 20.194.30.107:30445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ary2ytPAdfEWqmGIkg2HWQAAAhU"]
[Wed Sep 30 01:14:18.044057 2026] [security2:error] [pid 276620:tid 276762] [client 216.73.216.46:16234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ytPAdfEWqmGIkg2HWgAAAhc"]
[Wed Sep 30 01:14:18.098776 2026] [security2:error] [pid 276059:tid 276230] [client 4.240.25.22:63650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/chosen.php"] [unique_id "ary2yntqdHBwD77138fODwAAAbI"]
[Wed Sep 30 01:14:18.101931 2026] [security2:error] [pid 276620:tid 276812] [client 20.214.191.94:42059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/network.php"] [unique_id "ary2ytPAdfEWqmGIkg2HXQAAAkk"]
[Wed Sep 30 01:14:18.187343 2026] [security2:error] [pid 276059:tid 276251] [client 216.73.216.46:16882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2yntqdHBwD77138fOEQAAAcc"]
[Wed Sep 30 01:14:18.285900 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:17343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.286176 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:17343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.289355 2026] [security2:error] [pid 276059:tid 276241] [client 4.196.65.241:39200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/gecho.php"] [unique_id "ary2yntqdHBwD77138fOFwAAAb0"]
[Wed Sep 30 01:14:18.316450 2026] [access_compat:error] [pid 276620:tid 276846] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:18.316736 2026] [access_compat:error] [pid 276620:tid 276846] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:18.369922 2026] [security2:error] [pid 276620:tid 276867] [client 216.73.216.46:29473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ytPAdfEWqmGIkg2HbwAAAoA"]
[Wed Sep 30 01:14:18.372668 2026] [security2:error] [pid 276059:tid 276254] [client 4.232.144.219:26933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/iyy.php"] [unique_id "ary2yntqdHBwD77138fOGgAAAco"]
[Wed Sep 30 01:14:18.416714 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:17343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.417002 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:17343] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.424683 2026] [security2:error] [pid 276620:tid 276856] [client 20.214.191.94:42402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-2019.php"] [unique_id "ary2ytPAdfEWqmGIkg2HcQAAAnU"]
[Wed Sep 30 01:14:18.569485 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.569840 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.604189 2026] [security2:error] [pid 276620:tid 276795] [client 216.73.216.46:17343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ytPAdfEWqmGIkg2HeAAAAjg"]
[Wed Sep 30 01:14:18.703327 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.703605 2026] [access_compat:error] [pid 276620:tid 276864] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.735461 2026] [security2:error] [pid 276620:tid 276875] [client 85.204.70.104:52818] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "ary2ytPAdfEWqmGIkg2HggAAAog"]
[Wed Sep 30 01:14:18.747559 2026] [security2:error] [pid 276620:tid 276886] [client 122.177.240.90:28639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2ytPAdfEWqmGIkg2HgwAAApM"]
[Wed Sep 30 01:14:18.747668 2026] [security2:error] [pid 276620:tid 276886] [client 122.177.240.90:28639] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary2ytPAdfEWqmGIkg2HgwAAApM"]
[Wed Sep 30 01:14:18.753076 2026] [security2:error] [pid 276620:tid 276874] [client 43.104.4.198:39783] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js"] [unique_id "ary2ytPAdfEWqmGIkg2HhAAAAoc"], referer: https://coscharis-tech.com/product-category/ups/online-ups/?wlfilter=1&woolentor_product_cat=hp%2Cinverters
[Wed Sep 30 01:14:18.793581 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.793856 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.794060 2026] [security2:error] [pid 276620:tid 276877] [client 20.214.191.94:42403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/bypass.php"] [unique_id "ary2ytPAdfEWqmGIkg2HiAAAAoo"]
[Wed Sep 30 01:14:18.796406 2026] [security2:error] [pid 276620:tid 276824] [client 4.232.144.219:53348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/900.php"] [unique_id "ary2ytPAdfEWqmGIkg2HigAAAlU"]
[Wed Sep 30 01:14:18.801150 2026] [access_compat:error] [pid 276620:tid 276873] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:18.801425 2026] [access_compat:error] [pid 276620:tid 276873] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:18.814583 2026] [security2:error] [pid 276059:tid 276233] [client 168.100.149.31:29856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/19d85c0b39b6b8996fb0b7d9ecc35808.bd7f.css.gz"] [unique_id "ary2yntqdHBwD77138fOIAABtSg"]
[Wed Sep 30 01:14:18.836708 2026] [security2:error] [pid 276620:tid 276807] [client 20.70.173.30:38549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.derektaylorbrokerage.com"] [uri "/baba.php"] [unique_id "ary2ytPAdfEWqmGIkg2HiwAAAkQ"]
[Wed Sep 30 01:14:18.843467 2026] [security2:error] [pid 276620:tid 276842] [client 20.194.30.107:4934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/mac.php"] [unique_id "ary2ytPAdfEWqmGIkg2HjAAAAmc"]
[Wed Sep 30 01:14:18.889886 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:18.890138 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:37679] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:18.969957 2026] [security2:error] [pid 276620:tid 276878] [client 216.73.216.46:37679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ytPAdfEWqmGIkg2HkgAAAos"]
[Wed Sep 30 01:14:19.022871 2026] [security2:error] [pid 276620:tid 276813] [client 20.219.2.60:30390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/s.php"] [unique_id "ary2y9PAdfEWqmGIkg2HkwAAAko"]
[Wed Sep 30 01:14:19.118903 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:46970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:19.119182 2026] [access_compat:error] [pid 276620:tid 276794] [client 216.73.216.46:46970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:19.175272 2026] [security2:error] [pid 276059:tid 276280] [client 20.214.191.94:42066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ary2y3tqdHBwD77138fOKQAAAeQ"]
[Wed Sep 30 01:14:19.181135 2026] [security2:error] [pid 276620:tid 276833] [client 31.189.214.146:62364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 146.214.189.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2y9PAdfEWqmGIkg2HnQAAAl4"]
[Wed Sep 30 01:14:19.181730 2026] [security2:error] [pid 276620:tid 276833] [client 31.189.214.146:62364] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "britishclassicmotorcycles.com"] [uri "/xmlrpc.php"] [unique_id "ary2y9PAdfEWqmGIkg2HnQAAAl4"]
[Wed Sep 30 01:14:19.210440 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:7956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:19.210713 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:7956] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:19.248947 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:46970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:19.249400 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:46970] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:19.270267 2026] [security2:error] [pid 276059:tid 276222] [client 45.138.12.32:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.njx.mds.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2y3tqdHBwD77138fOLwAAAao"]
[Wed Sep 30 01:14:19.321060 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:19.321476 2026] [access_compat:error] [pid 276620:tid 276779] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:19.322987 2026] [security2:error] [pid 276620:tid 276855] [client 20.70.173.30:19193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/dehnl.php"] [unique_id "ary2y9PAdfEWqmGIkg2HrQAAAnQ"]
[Wed Sep 30 01:14:19.338012 2026] [security2:error] [pid 276059:tid 276236] [client 216.73.216.46:7956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2y3tqdHBwD77138fONgAAAbg"]
[Wed Sep 30 01:14:19.408131 2026] [security2:error] [pid 276059:tid 276234] [client 4.232.144.219:35995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/blsvgeyaza.php"] [unique_id "ary2y3tqdHBwD77138fOOAAAAbY"]
[Wed Sep 30 01:14:19.431062 2026] [security2:error] [pid 276620:tid 276811] [client 216.73.216.46:46970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2y9PAdfEWqmGIkg2HrgAAAkg"]
[Wed Sep 30 01:14:19.469312 2026] [security2:error] [pid 276059:tid 276319] [client 85.204.70.104:52826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "ary2y3tqdHBwD77138fOOQAAAgs"]
[Wed Sep 30 01:14:19.569276 2026] [security2:error] [pid 276620:tid 276883] [client 216.73.216.46:18847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2y9PAdfEWqmGIkg2HsQAAApA"]
[Wed Sep 30 01:14:19.595346 2026] [security2:error] [pid 276620:tid 276823] [client 47.79.13.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tenda/"] [unique_id "ary2y9PAdfEWqmGIkg2HsgAAAlQ"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:19.641486 2026] [security2:error] [pid 276059:tid 276101] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.docker/.env"] [unique_id "ary2y3tqdHBwD77138fOPgAB0iU"]
[Wed Sep 30 01:14:19.641524 2026] [security2:error] [pid 276059:tid 276094] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ary2y3tqdHBwD77138fOQAAB0h4"]
[Wed Sep 30 01:14:19.641687 2026] [security2:error] [pid 276059:tid 276158] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.aws/.env"] [unique_id "ary2y3tqdHBwD77138fOQwAB0l4"]
[Wed Sep 30 01:14:19.641896 2026] [security2:error] [pid 276059:tid 276152] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.aws/credentials.bak"] [unique_id "ary2y3tqdHBwD77138fORQAB0lg"]
[Wed Sep 30 01:14:19.642519 2026] [security2:error] [pid 276059:tid 276094] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env"] [unique_id "ary2y3tqdHBwD77138fOSgAB0h4"]
[Wed Sep 30 01:14:19.659862 2026] [security2:error] [pid 276059:tid 276296] [client 216.73.216.46:40480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2y3tqdHBwD77138fOUQAAAfQ"]
[Wed Sep 30 01:14:19.722563 2026] [security2:error] [pid 276620:tid 276879] [client 20.219.2.60:30379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/kj.php"] [unique_id "ary2y9PAdfEWqmGIkg2HuQAAAow"]
[Wed Sep 30 01:14:19.740988 2026] [security2:error] [pid 276620:tid 276780] [client 20.214.191.94:42057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ary2y9PAdfEWqmGIkg2HugAAAik"]
[Wed Sep 30 01:14:19.763963 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:44364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:19.764402 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:44364] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:19.781594 2026] [security2:error] [pid 276620:tid 276772] [client 4.232.144.219:35976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/gqhyti.php"] [unique_id "ary2y9PAdfEWqmGIkg2HvwAAAiE"]
[Wed Sep 30 01:14:19.782081 2026] [security2:error] [pid 276059:tid 276155] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env.backup"] [unique_id "ary2y3tqdHBwD77138fOXAABsVs"]
[Wed Sep 30 01:14:19.783537 2026] [security2:error] [pid 276059:tid 276138] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env.bak"] [unique_id "ary2y3tqdHBwD77138fOXQABsUo"]
[Wed Sep 30 01:14:19.818401 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:19.818851 2026] [access_compat:error] [pid 276620:tid 276760] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:19.844625 2026] [security2:error] [pid 276059:tid 276317] [client 216.73.216.46:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2y3tqdHBwD77138fOaAAAAgk"]
[Wed Sep 30 01:14:19.871596 2026] [security2:error] [pid 276059:tid 276161] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env.old"] [unique_id "ary2y3tqdHBwD77138fOagABsWE"]
[Wed Sep 30 01:14:19.875552 2026] [security2:error] [pid 276059:tid 276120] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env.php"] [unique_id "ary2y3tqdHBwD77138fObAABsTg"]
[Wed Sep 30 01:14:19.950505 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:19742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:19.950964 2026] [access_compat:error] [pid 276620:tid 276870] [client 216.73.216.46:19742] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.017108 2026] [security2:error] [pid 276059:tid 276159] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env.swp"] [unique_id "ary2zHtqdHBwD77138fOewAB0V8"]
[Wed Sep 30 01:14:20.028548 2026] [security2:error] [pid 276620:tid 276840] [client 216.73.216.46:12447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2H2QAAAmU"]
[Wed Sep 30 01:14:20.029584 2026] [security2:error] [pid 276059:tid 276108] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.env~"] [unique_id "ary2zHtqdHBwD77138fOfwAB0Sw"]
[Wed Sep 30 01:14:20.055279 2026] [security2:error] [pid 276059:tid 276233] [client 20.214.191.94:42098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/tiny.php"] [unique_id "ary2zHtqdHBwD77138fOigAAAbU"]
[Wed Sep 30 01:14:20.069406 2026] [security2:error] [pid 276620:tid 276781] [client 216.73.216.46:19742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2H5AAAAio"]
[Wed Sep 30 01:14:20.126941 2026] [security2:error] [pid 276620:tid 276851] [client 85.204.70.104:52834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ary2zNPAdfEWqmGIkg2H7QAAAnA"]
[Wed Sep 30 01:14:20.182259 2026] [security2:error] [pid 276059:tid 276197] [client 20.70.173.30:33332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/biufile.php"] [unique_id "ary2zHtqdHBwD77138fOlAAAAZI"]
[Wed Sep 30 01:14:20.213943 2026] [security2:error] [pid 276059:tid 276198] [client 4.232.144.219:26934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/autoxxi.php"] [unique_id "ary2zHtqdHBwD77138fOlgAAAZM"]
[Wed Sep 30 01:14:20.214839 2026] [security2:error] [pid 276059:tid 276118] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/api/.env"] [unique_id "ary2zHtqdHBwD77138fOlQAB0TY"]
[Wed Sep 30 01:14:20.215133 2026] [security2:error] [pid 276059:tid 276137] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/api/phpinfo.php"] [unique_id "ary2zHtqdHBwD77138fOlwAB0Uk"]
[Wed Sep 30 01:14:20.216132 2026] [security2:error] [pid 276059:tid 276102] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/application/.env"] [unique_id "ary2zHtqdHBwD77138fOmgAB0SY"]
[Wed Sep 30 01:14:20.216169 2026] [security2:error] [pid 276059:tid 276077] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/app/.env"] [unique_id "ary2zHtqdHBwD77138fOmAAB0Q0"]
[Wed Sep 30 01:14:20.222068 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:34561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:20.222462 2026] [access_compat:error] [pid 276620:tid 276798] [client 216.73.216.46:34561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.229371 2026] [security2:error] [pid 276620:tid 276820] [client 84.233.195.151:55093] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2H_AAAAlE"]
[Wed Sep 30 01:14:20.258344 2026] [security2:error] [pid 276620:tid 276813] [client 216.73.216.46:44364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2H_QAAAko"]
[Wed Sep 30 01:14:20.302392 2026] [security2:error] [pid 276059:tid 276090] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/back/.env"] [unique_id "ary2zHtqdHBwD77138fOpAAB5xo"]
[Wed Sep 30 01:14:20.315052 2026] [access_compat:error] [pid 276620:tid 276861] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:20.315331 2026] [access_compat:error] [pid 276620:tid 276861] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:20.324472 2026] [security2:error] [pid 276059:tid 276182] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/backend/.env"] [unique_id "ary2zHtqdHBwD77138fOpQABqnY"]
[Wed Sep 30 01:14:20.327281 2026] [security2:error] [pid 276059:tid 276097] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/backup/.env"] [unique_id "ary2zHtqdHBwD77138fOpgABoiE"]
[Wed Sep 30 01:14:20.334786 2026] [ssl:error] [pid 276620:tid 276777] [client 216.25.124.26:40236] AH02032: Hostname boozyblues.paulmercer.me (default host as no SNI was provided) and hostname webdisk.vettermysteryship.paulmercer.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Wed Sep 30 01:14:20.350435 2026] [security2:error] [pid 276059:tid 276110] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/cms/.env"] [unique_id "ary2zHtqdHBwD77138fOpwABqy4"]
[Wed Sep 30 01:14:20.353160 2026] [security2:error] [pid 276059:tid 276111] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/config.php"] [unique_id "ary2zHtqdHBwD77138fOrAAB7S8"]
[Wed Sep 30 01:14:20.357281 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:34561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:20.357733 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:34561] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.367966 2026] [security2:error] [pid 276620:tid 276799] [client 20.219.2.60:30365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws83.php"] [unique_id "ary2zNPAdfEWqmGIkg2IBwAAAjw"]
[Wed Sep 30 01:14:20.378440 2026] [security2:error] [pid 276059:tid 276076] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/config/.env"] [unique_id "ary2zHtqdHBwD77138fOrgAB7Qw"]
[Wed Sep 30 01:14:20.381283 2026] [security2:error] [pid 276620:tid 276812] [client 20.214.191.94:42061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/lock.php"] [unique_id "ary2zNPAdfEWqmGIkg2ICQAAAkk"]
[Wed Sep 30 01:14:20.381691 2026] [security2:error] [pid 276059:tid 276096] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/core/.env"] [unique_id "ary2zHtqdHBwD77138fOsQAB7SA"]
[Wed Sep 30 01:14:20.440723 2026] [security2:error] [pid 276620:tid 276837] [client 216.73.216.46:34561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2IDwAAAmI"]
[Wed Sep 30 01:14:20.463215 2026] [security2:error] [pid 276059:tid 276191] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/database.sql"] [unique_id "ary2zHtqdHBwD77138fOuAAB7X8"]
[Wed Sep 30 01:14:20.465964 2026] [security2:error] [pid 276059:tid 276148] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/dev/.env"] [unique_id "ary2zHtqdHBwD77138fOugAB7VQ"]
[Wed Sep 30 01:14:20.517982 2026] [security2:error] [pid 276059:tid 276116] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/frontend/.env"] [unique_id "ary2zHtqdHBwD77138fOwQAB7TQ"]
[Wed Sep 30 01:14:20.544358 2026] [security2:error] [pid 276059:tid 276153] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/info.php"] [unique_id "ary2zHtqdHBwD77138fOxQAB7Vk"]
[Wed Sep 30 01:14:20.548027 2026] [security2:error] [pid 276059:tid 276151] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/laravel/.env"] [unique_id "ary2zHtqdHBwD77138fOxgAB7Vc"]
[Wed Sep 30 01:14:20.570912 2026] [security2:error] [pid 276059:tid 276113] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/media/.env"] [unique_id "ary2zHtqdHBwD77138fOxwAB7TE"]
[Wed Sep 30 01:14:20.592284 2026] [security2:error] [pid 276620:tid 276805] [client 4.232.144.219:35973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/1144452145_error_log.php"] [unique_id "ary2zNPAdfEWqmGIkg2IFAAAAkI"]
[Wed Sep 30 01:14:20.593501 2026] [security2:error] [pid 276059:tid 276239] [client 216.73.216.46:5463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zHtqdHBwD77138fOywAAAbs"]
[Wed Sep 30 01:14:20.595725 2026] [security2:error] [pid 276059:tid 276087] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/new/.env"] [unique_id "ary2zHtqdHBwD77138fOzAAB7Rc"]
[Wed Sep 30 01:14:20.601683 2026] [security2:error] [pid 276059:tid 276142] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/old/.env"] [unique_id "ary2zHtqdHBwD77138fOzQAB7U4"]
[Wed Sep 30 01:14:20.622745 2026] [security2:error] [pid 276059:tid 276166] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.100.240.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/phpinfo.php"] [unique_id "ary2zHtqdHBwD77138fO0QAB7WY"]
[Wed Sep 30 01:14:20.656609 2026] [security2:error] [pid 276059:tid 276129] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/production/.env"] [unique_id "ary2zHtqdHBwD77138fO0gAB7UE"]
[Wed Sep 30 01:14:20.656623 2026] [security2:error] [pid 276059:tid 276078] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/public/.env"] [unique_id "ary2zHtqdHBwD77138fO0wAB7Q4"]
[Wed Sep 30 01:14:20.683805 2026] [security2:error] [pid 276059:tid 276105] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/server/.env"] [unique_id "ary2zHtqdHBwD77138fO1wAB7Sk"]
[Wed Sep 30 01:14:20.686538 2026] [security2:error] [pid 276059:tid 276075] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/src/.env"] [unique_id "ary2zHtqdHBwD77138fO2QAB7Qs"]
[Wed Sep 30 01:14:20.687599 2026] [security2:error] [pid 276059:tid 276106] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/staging/.env"] [unique_id "ary2zHtqdHBwD77138fO2gAB7So"]
[Wed Sep 30 01:14:20.704755 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:18720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:20.704929 2026] [security2:error] [pid 276059:tid 276143] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/test/.env"] [unique_id "ary2zHtqdHBwD77138fO2wAB7U8"]
[Wed Sep 30 01:14:20.705215 2026] [access_compat:error] [pid 276620:tid 276875] [client 216.73.216.46:18720] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.706615 2026] [security2:error] [pid 276059:tid 276266] [client 84.233.195.155:64424] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2zHtqdHBwD77138fO3AAAAdY"]
[Wed Sep 30 01:14:20.710526 2026] [security2:error] [pid 276059:tid 276146] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/v1/.env"] [unique_id "ary2zHtqdHBwD77138fO3QAB7VI"]
[Wed Sep 30 01:14:20.734082 2026] [security2:error] [pid 276059:tid 276089] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/v2/.env"] [unique_id "ary2zHtqdHBwD77138fO3wAB7Rk"]
[Wed Sep 30 01:14:20.734525 2026] [access_compat:error] [pid 276620:tid 276827] [client 47.79.201.67:10808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:14:20.734781 2026] [access_compat:error] [pid 276620:tid 276827] [client 47.79.201.67:10808] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:14:20.739746 2026] [security2:error] [pid 276059:tid 276184] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/web/.env"] [unique_id "ary2zHtqdHBwD77138fO4QAB7Xg"]
[Wed Sep 30 01:14:20.741790 2026] [security2:error] [pid 276059:tid 276172] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/wp-config.php.bak"] [unique_id "ary2zHtqdHBwD77138fO4wAB7Ww"]
[Wed Sep 30 01:14:20.791176 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:20.791477 2026] [access_compat:error] [pid 276059:tid 276317] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.792643 2026] [security2:error] [pid 276059:tid 276316] [client 49.37.102.248:51550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.102.37.49.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2zHtqdHBwD77138fO6AAAAgg"]
[Wed Sep 30 01:14:20.792929 2026] [security2:error] [pid 276059:tid 276316] [client 49.37.102.248:51550] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "sminzenering.mk"] [uri "/xmlrpc.php"] [unique_id "ary2zHtqdHBwD77138fO6AAAAgg"]
[Wed Sep 30 01:14:20.795844 2026] [security2:error] [pid 276059:tid 276178] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/pg.sql"] [unique_id "ary2zHtqdHBwD77138fO7AABnnI"]
[Wed Sep 30 01:14:20.795992 2026] [security2:error] [pid 276059:tid 276230] [client 20.214.191.94:42440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/mail.php"] [unique_id "ary2zHtqdHBwD77138fO7QAAAbI"]
[Wed Sep 30 01:14:20.813894 2026] [security2:error] [pid 276620:tid 276885] [client 168.100.149.27:50706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/d0aa251b157f82dcc21f296543d68a3d.1e2.css.gz"] [unique_id "ary2zNPAdfEWqmGIkg2IIQACki4"]
[Wed Sep 30 01:14:20.815513 2026] [access_compat:error] [pid 276620:tid 276854] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:20.815977 2026] [access_compat:error] [pid 276620:tid 276854] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMzEwL2N3ZC9iaW4=
[Wed Sep 30 01:14:20.822342 2026] [security2:error] [pid 276620:tid 276824] [client 216.73.216.46:18720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zNPAdfEWqmGIkg2IIgAAAlU"]
[Wed Sep 30 01:14:20.823936 2026] [security2:error] [pid 276059:tid 276174] [remote 35.240.100.200:47598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "app.scraptradehubnorthamerica.com"] [uri "/.gitconfig.bak"] [unique_id "ary2zHtqdHBwD77138fO8AABnm4"]
[Wed Sep 30 01:14:20.827591 2026] [security2:error] [pid 276059:tid 276220] [client 85.204.70.104:52838] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "ary2zHtqdHBwD77138fO8wAAAag"]
[Wed Sep 30 01:14:20.886170 2026] [security2:error] [pid 276620:tid 276820] [client 4.196.65.241:39212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/xz7l6w5h.php"] [unique_id "ary2zNPAdfEWqmGIkg2IJwAAAlE"]
[Wed Sep 30 01:14:20.918757 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:20.919060 2026] [access_compat:error] [pid 276059:tid 276281] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:20.991869 2026] [security2:error] [pid 276620:tid 276812] [client 4.232.144.219:35987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws48.php"] [unique_id "ary2zNPAdfEWqmGIkg2ILAAAAkk"]
[Wed Sep 30 01:14:21.008919 2026] [security2:error] [pid 276620:tid 276770] [client 20.70.173.30:25927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/simple.php"] [unique_id "ary2zdPAdfEWqmGIkg2ILQAAAh8"]
[Wed Sep 30 01:14:21.009963 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.010234 2026] [access_compat:error] [pid 276059:tid 276225] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.019603 2026] [security2:error] [pid 276059:tid 276208] [client 20.194.96.176:30654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/ops.php"] [unique_id "ary2zXtqdHBwD77138fO-AAAAZ0"]
[Wed Sep 30 01:14:21.053261 2026] [security2:error] [pid 276059:tid 276226] [client 20.70.173.30:2062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/mac.php"] [unique_id "ary2zXtqdHBwD77138fO_AAAAa4"]
[Wed Sep 30 01:14:21.068384 2026] [security2:error] [pid 276620:tid 276832] [client 43.104.4.223:4876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "ary2zdPAdfEWqmGIkg2ILwAAAl0"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=huawei%2Cservers%2Csolid-works-software
[Wed Sep 30 01:14:21.078831 2026] [security2:error] [pid 276059:tid 276273] [client 4.240.25.22:44380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/ty.php"] [unique_id "ary2zXtqdHBwD77138fO_gAAAd0"]
[Wed Sep 30 01:14:21.123871 2026] [security2:error] [pid 276059:tid 276312] [client 4.240.25.22:8386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/xkSudf.php"] [unique_id "ary2zXtqdHBwD77138fO_wAAAgQ"]
[Wed Sep 30 01:14:21.138248 2026] [security2:error] [pid 276059:tid 276229] [client 20.214.191.94:42390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/system_log.php"] [unique_id "ary2zXtqdHBwD77138fPAQAAAbE"]
[Wed Sep 30 01:14:21.158833 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:21841] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.159267 2026] [access_compat:error] [pid 276059:tid 276297] [client 216.73.216.46:21841] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.186462 2026] [security2:error] [pid 276059:tid 276252] [client 84.233.195.160:64261] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2zXtqdHBwD77138fPAwAAAcg"]
[Wed Sep 30 01:14:21.207402 2026] [security2:error] [pid 276620:tid 276816] [client 223.181.60.167:4702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.60.181.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2INAAAAk0"]
[Wed Sep 30 01:14:21.207497 2026] [security2:error] [pid 276620:tid 276816] [client 223.181.60.167:4702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ameritekwater.com"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2INAAAAk0"]
[Wed Sep 30 01:14:21.248779 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.249117 2026] [access_compat:error] [pid 276620:tid 276769] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.287613 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.287890 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:23613] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.322842 2026] [access_compat:error] [pid 276620:tid 276845] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:21.323340 2026] [access_compat:error] [pid 276620:tid 276845] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:21.344775 2026] [security2:error] [pid 276620:tid 276779] [client 43.104.4.223:4876] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js"] [unique_id "ary2zdPAdfEWqmGIkg2IOQAAAig"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=huawei%2Cservers%2Csolid-works-software
[Wed Sep 30 01:14:21.372457 2026] [security2:error] [pid 276059:tid 276198] [client 216.73.216.46:23613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zXtqdHBwD77138fPCwAAAZM"]
[Wed Sep 30 01:14:21.377849 2026] [security2:error] [pid 276620:tid 276795] [client 4.232.144.219:53347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-asyn-upload.php"] [unique_id "ary2zdPAdfEWqmGIkg2IPAAAAjg"]
[Wed Sep 30 01:14:21.427833 2026] [security2:error] [pid 276620:tid 276767] [client 203.122.45.246:53492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.45.122.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2IQgAAAhw"]
[Wed Sep 30 01:14:21.427994 2026] [security2:error] [pid 276620:tid 276767] [client 203.122.45.246:53492] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mngroup.com.au"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2IQgAAAhw"]
[Wed Sep 30 01:14:21.452643 2026] [security2:error] [pid 276620:tid 276855] [client 20.214.191.94:42425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/file.php"] [unique_id "ary2zdPAdfEWqmGIkg2IRAAAAnQ"]
[Wed Sep 30 01:14:21.465166 2026] [security2:error] [pid 276620:tid 276818] [client 47.79.13.176:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/rog/"] [unique_id "ary2zdPAdfEWqmGIkg2IRgAAAk8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:21.466635 2026] [access_compat:error] [pid 276620:tid 276809] [client 47.79.207.214:59214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://www.google.com/
[Wed Sep 30 01:14:21.466963 2026] [access_compat:error] [pid 276620:tid 276809] [client 47.79.207.214:59214] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://www.google.com/
[Wed Sep 30 01:14:21.468992 2026] [security2:error] [pid 276059:tid 276248] [client 85.204.70.104:52850] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "ary2zXtqdHBwD77138fPDgAAAcQ"]
[Wed Sep 30 01:14:21.477384 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.477700 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.502290 2026] [access_compat:error] [pid 276059:tid 276268] [client 47.79.13.168:40900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:21.502570 2026] [access_compat:error] [pid 276059:tid 276268] [client 47.79.13.168:40900] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:21.545830 2026] [security2:error] [pid 276059:tid 276321] [client 43.104.4.186:14763] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js"] [unique_id "ary2zXtqdHBwD77138fPEAAAAg0"], referer: https://coscharis-tech.com/product-category/printer-accessories/printing-paper/?wlfilter=1&woolentor_product_cat=huawei%2Cservers%2Csolid-works-software
[Wed Sep 30 01:14:21.568332 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.568599 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.666373 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.666647 2026] [access_compat:error] [pid 276620:tid 276841] [client 216.73.216.46:13627] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:21.706183 2026] [security2:error] [pid 276620:tid 276788] [client 84.233.195.149:50393] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2zdPAdfEWqmGIkg2IWQAAAjE"]
[Wed Sep 30 01:14:21.745646 2026] [security2:error] [pid 276620:tid 276759] [client 4.232.144.219:53354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/schallfuns.php"] [unique_id "ary2zdPAdfEWqmGIkg2IWwAAAhQ"]
[Wed Sep 30 01:14:21.745778 2026] [security2:error] [pid 276620:tid 276813] [client 20.214.191.94:42062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ary2zdPAdfEWqmGIkg2IXQAAAko"]
[Wed Sep 30 01:14:21.750526 2026] [security2:error] [pid 276620:tid 276820] [client 216.73.216.46:13627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zdPAdfEWqmGIkg2IXgAAAlE"]
[Wed Sep 30 01:14:21.781254 2026] [security2:error] [pid 276620:tid 276872] [client 182.69.182.151:9050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.182.69.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2IYQAAAoU"]
[Wed Sep 30 01:14:21.781555 2026] [security2:error] [pid 276620:tid 276872] [client 182.69.182.151:9050] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "casanoelectric.com"] [uri "/xmlrpc.php"] [unique_id "ary2zdPAdfEWqmGIkg2IYQAAAoU"]
[Wed Sep 30 01:14:21.791959 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:14:21.792419 2026] [access_compat:error] [pid 276620:tid 276789] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9ydW4=
[Wed Sep 30 01:14:21.841454 2026] [security2:error] [pid 276059:tid 276294] [client 216.73.216.46:21841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zXtqdHBwD77138fPEwAAAfI"]
[Wed Sep 30 01:14:21.849739 2026] [security2:error] [pid 276620:tid 276768] [client 20.219.2.60:29913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ws75.php"] [unique_id "ary2zdPAdfEWqmGIkg2IZQAAAh0"]
[Wed Sep 30 01:14:21.991501 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:21.991782 2026] [access_compat:error] [pid 276620:tid 276765] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:22.075476 2026] [security2:error] [pid 276620:tid 276825] [client 216.73.216.46:41792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IbQAAAlY"]
[Wed Sep 30 01:14:22.123772 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:22.124044 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:22.127158 2026] [security2:error] [pid 276620:tid 276842] [client 85.204.70.104:52858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.bbr.ouz.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "ary2ztPAdfEWqmGIkg2IcAAAAmc"]
[Wed Sep 30 01:14:22.180630 2026] [security2:error] [pid 276059:tid 276256] [client 20.214.191.94:42373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "ary2zntqdHBwD77138fPGQAAAcw"]
[Wed Sep 30 01:14:22.188522 2026] [security2:error] [pid 276620:tid 276855] [client 20.194.96.176:48525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/uploaxa1.php"] [unique_id "ary2ztPAdfEWqmGIkg2IdAAAAnQ"]
[Wed Sep 30 01:14:22.197288 2026] [security2:error] [pid 276059:tid 276204] [client 4.240.25.22:18815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.casanoelectric.com"] [uri "/bthil.php"] [unique_id "ary2zntqdHBwD77138fPGwAAAZk"]
[Wed Sep 30 01:14:22.211994 2026] [security2:error] [pid 276620:tid 276801] [client 84.233.195.158:52558] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IeQAAAj4"]
[Wed Sep 30 01:14:22.213278 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:22.213574 2026] [access_compat:error] [pid 276620:tid 276818] [client 216.73.216.46:65216] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:22.224994 2026] [security2:error] [pid 276620:tid 276871] [client 20.204.42.136:35719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.42.204.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "septembergala-org.yourkatana.com"] [uri "/d62.php"] [unique_id "ary2ztPAdfEWqmGIkg2IewAAAoQ"]
[Wed Sep 30 01:14:22.235149 2026] [security2:error] [pid 276059:tid 276101] [remote 57.141.14.103:60734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/feed/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/xmlrpc.php"] [unique_id "ary2zntqdHBwD77138fPGgAB7iU"]
[Wed Sep 30 01:14:22.265386 2026] [security2:error] [pid 276620:tid 276803] [client 4.232.144.219:53335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/CDX1.php"] [unique_id "ary2ztPAdfEWqmGIkg2IfwAAAkA"]
[Wed Sep 30 01:14:22.276573 2026] [security2:error] [pid 276620:tid 276875] [client 213.136.69.135:54641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.69.136.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yod.ninja"] [uri "/wp-includes/fonts/class-wp-font-face.php"] [unique_id "ary2ztPAdfEWqmGIkg2IgQAAAog"], referer: binance.com
[Wed Sep 30 01:14:22.296225 2026] [security2:error] [pid 276620:tid 276858] [client 216.73.216.46:65216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IgwAAAnc"]
[Wed Sep 30 01:14:22.297169 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:22.297496 2026] [access_compat:error] [pid 276620:tid 276885] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:22.333542 2026] [security2:error] [pid 276620:tid 276820] [client 4.196.65.241:59006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/c3c427fa59index.php"] [unique_id "ary2ztPAdfEWqmGIkg2IhgAAAlE"]
[Wed Sep 30 01:14:22.439563 2026] [security2:error] [pid 276059:tid 276303] [client 216.73.216.46:43195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zntqdHBwD77138fPIAAAAfs"]
[Wed Sep 30 01:14:22.450780 2026] [security2:error] [pid 276620:tid 276851] [client 20.70.173.30:33351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/yawa.php"] [unique_id "ary2ztPAdfEWqmGIkg2IiwAAAnA"]
[Wed Sep 30 01:14:22.496908 2026] [security2:error] [pid 276059:tid 276247] [client 20.214.191.94:42436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/manager.php"] [unique_id "ary2zntqdHBwD77138fPIgAAAcM"]
[Wed Sep 30 01:14:22.529939 2026] [security2:error] [pid 276059:tid 276242] [client 216.73.216.46:30051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2zntqdHBwD77138fPIwAAAb4"]
[Wed Sep 30 01:14:22.621031 2026] [security2:error] [pid 276620:tid 276766] [client 216.73.216.46:32002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IkAAAAhs"]
[Wed Sep 30 01:14:22.622960 2026] [security2:error] [pid 276059:tid 276275] [client 47.79.13.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2zntqdHBwD77138fPKAAAAd8"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:22.634256 2026] [security2:error] [pid 276620:tid 276799] [client 4.232.144.219:53353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/clasa99.php"] [unique_id "ary2ztPAdfEWqmGIkg2IkgAAAjw"]
[Wed Sep 30 01:14:22.686197 2026] [security2:error] [pid 276620:tid 276878] [client 84.233.195.154:59465] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "avions-biddingestimates.com"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2ImQAAAos"]
[Wed Sep 30 01:14:22.718544 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:2552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:22.718838 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:2552] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:22.764405 2026] [security2:error] [pid 276620:tid 276854] [client 179.105.122.52:54009] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ztPAdfEWqmGIkg2IoQAAAnM"]
[Wed Sep 30 01:14:22.764567 2026] [security2:error] [pid 276620:tid 276854] [client 179.105.122.52:54009] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary2ztPAdfEWqmGIkg2IoQAAAnM"]
[Wed Sep 30 01:14:22.770643 2026] [security2:error] [pid 276620:tid 276857] [client 20.214.191.94:42405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/plugins/pwnd/as.php"] [unique_id "ary2ztPAdfEWqmGIkg2IowAAAnY"]
[Wed Sep 30 01:14:22.793716 2026] [access_compat:error] [pid 276620:tid 276830] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:22.794148 2026] [access_compat:error] [pid 276620:tid 276830] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:22.809779 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:35738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:22.810320 2026] [access_compat:error] [pid 276620:tid 276845] [client 216.73.216.46:35738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:22.811046 2026] [security2:error] [pid 276059:tid 276237] [client 168.100.149.235:59682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/ab694a25f0452af04d5c85cd20e08443.316.css.gz"] [unique_id "ary2zntqdHBwD77138fPMwABuVs"]
[Wed Sep 30 01:14:22.842325 2026] [security2:error] [pid 276620:tid 276855] [client 216.73.216.46:2552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IpwAAAnQ"]
[Wed Sep 30 01:14:22.933576 2026] [security2:error] [pid 276620:tid 276818] [client 216.73.216.46:35738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2ztPAdfEWqmGIkg2IrAAAAk8"]
[Wed Sep 30 01:14:22.933576 2026] [security2:error] [pid 276059:tid 276205] [client 20.70.173.30:2085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/txets.php"] [unique_id "ary2zntqdHBwD77138fPNwAAAZo"]
[Wed Sep 30 01:14:23.036078 2026] [security2:error] [pid 276620:tid 276835] [client 4.232.144.219:35997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/myfilexxx.php"] [unique_id "ary2z9PAdfEWqmGIkg2IrQAAAmA"]
[Wed Sep 30 01:14:23.089661 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:60548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.090114 2026] [access_compat:error] [pid 276059:tid 276245] [client 216.73.216.46:60548] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.106769 2026] [security2:error] [pid 276059:tid 276265] [client 20.214.191.94:42464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-configs.php"] [unique_id "ary2z3tqdHBwD77138fPPAAAAdU"]
[Wed Sep 30 01:14:23.134920 2026] [security2:error] [pid 276059:tid 276255] [client 201.32.215.149:8215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.215.32.201.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPPQAAAcs"]
[Wed Sep 30 01:14:23.135071 2026] [security2:error] [pid 276059:tid 276255] [client 201.32.215.149:8215] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "tywallace.com"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPPQAAAcs"]
[Wed Sep 30 01:14:23.174801 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.175080 2026] [access_compat:error] [pid 276059:tid 276269] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.207458 2026] [security2:error] [pid 276059:tid 276271] [client 216.73.216.46:60548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2z3tqdHBwD77138fPQgAAAds"]
[Wed Sep 30 01:14:23.291082 2026] [security2:error] [pid 276620:tid 276841] [client 47.79.13.172:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary2z9PAdfEWqmGIkg2ItAAAAmY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:23.304163 2026] [security2:error] [pid 276059:tid 276221] [client 152.56.240.85:55759] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPQwAAAak"]
[Wed Sep 30 01:14:23.304298 2026] [security2:error] [pid 276059:tid 276221] [client 152.56.240.85:55759] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "semakulajeffrey.com"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPQwAAAak"]
[Wed Sep 30 01:14:23.304964 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.305227 2026] [access_compat:error] [pid 276059:tid 276201] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.314186 2026] [access_compat:error] [pid 276620:tid 276886] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:23.314623 2026] [access_compat:error] [pid 276620:tid 276886] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:23.401708 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.402156 2026] [access_compat:error] [pid 276059:tid 276294] [client 216.73.216.46:36628] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.403282 2026] [security2:error] [pid 276620:tid 276788] [client 4.240.25.22:55377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/sxxb.php"] [unique_id "ary2z9PAdfEWqmGIkg2IuQAAAjE"]
[Wed Sep 30 01:14:23.424931 2026] [security2:error] [pid 276620:tid 276884] [client 45.138.12.32:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nje.vvt.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary2z9PAdfEWqmGIkg2IugAAApE"]
[Wed Sep 30 01:14:23.428188 2026] [security2:error] [pid 276620:tid 276874] [client 4.232.144.219:53319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/karma_144a.php"] [unique_id "ary2z9PAdfEWqmGIkg2IuwAAAoc"]
[Wed Sep 30 01:14:23.440152 2026] [security2:error] [pid 276620:tid 276819] [client 20.214.191.94:42409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ary2z9PAdfEWqmGIkg2IvQAAAlA"]
[Wed Sep 30 01:14:23.465228 2026] [security2:error] [pid 276620:tid 276813] [client 20.194.30.107:9988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/cdc.php"] [unique_id "ary2z9PAdfEWqmGIkg2IwAAAAko"]
[Wed Sep 30 01:14:23.479747 2026] [security2:error] [pid 276059:tid 276287] [client 216.73.216.46:36628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2z3tqdHBwD77138fPTQAAAes"]
[Wed Sep 30 01:14:23.622270 2026] [security2:error] [pid 276620:tid 276866] [client 216.73.216.46:13420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2z9PAdfEWqmGIkg2IxwAAAn8"]
[Wed Sep 30 01:14:23.650920 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.2.60:30049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/ms-edit.php"] [unique_id "ary2z9PAdfEWqmGIkg2IygAAAkM"]
[Wed Sep 30 01:14:23.710988 2026] [security2:error] [pid 276620:tid 276800] [client 20.194.96.176:28640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/BDKR28WP.php"] [unique_id "ary2z9PAdfEWqmGIkg2I0AAAAj0"]
[Wed Sep 30 01:14:23.724204 2026] [security2:error] [pid 276620:tid 276846] [client 4.196.65.241:39216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/xivoefjr.php"] [unique_id "ary2z9PAdfEWqmGIkg2I0wAAAms"]
[Wed Sep 30 01:14:23.725120 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:7358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.725382 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:7358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.752860 2026] [security2:error] [pid 276620:tid 276769] [client 20.214.191.94:42416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "ary2z9PAdfEWqmGIkg2I1QAAAh4"]
[Wed Sep 30 01:14:23.782990 2026] [security2:error] [pid 276620:tid 276857] [client 20.70.173.30:19351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yod.ninja"] [uri "/cgi-bin/admin.php"] [unique_id "ary2z9PAdfEWqmGIkg2I1wAAAnY"]
[Wed Sep 30 01:14:23.804072 2026] [access_compat:error] [pid 276620:tid 276825] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:23.804477 2026] [access_compat:error] [pid 276620:tid 276825] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:23.808721 2026] [security2:error] [pid 276620:tid 276865] [client 216.73.216.46:9234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2z9PAdfEWqmGIkg2I3AAAAn4"]
[Wed Sep 30 01:14:23.856711 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:7358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:23.857011 2026] [access_compat:error] [pid 276620:tid 276863] [client 216.73.216.46:7358] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:23.889731 2026] [security2:error] [pid 276059:tid 276283] [client 155.190.6.18:35284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.6.190.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPUgAAAec"]
[Wed Sep 30 01:14:23.940071 2026] [security2:error] [pid 276620:tid 276801] [client 216.73.216.46:7358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary2z9PAdfEWqmGIkg2I4gAAAj4"]
[Wed Sep 30 01:14:24.049788 2026] [security2:error] [pid 276620:tid 276785] [client 93.152.84.100:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary20NPAdfEWqmGIkg2I5QAAAi4"]
[Wed Sep 30 01:14:24.080101 2026] [security2:error] [pid 276620:tid 276873] [client 20.214.191.94:42397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "ary20NPAdfEWqmGIkg2I5gAAAoY"]
[Wed Sep 30 01:14:24.091258 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.091761 2026] [access_compat:error] [pid 276059:tid 276290] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.111308 2026] [security2:error] [pid 276620:tid 276814] [client 4.232.144.219:53345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/3586%20b64.php"] [unique_id "ary20NPAdfEWqmGIkg2I6AAAAks"]
[Wed Sep 30 01:14:24.161590 2026] [security2:error] [pid 276059:tid 276283] [client 155.190.6.18:35284] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "montgomerycountygreenfest.org"] [uri "/xmlrpc.php"] [unique_id "ary2z3tqdHBwD77138fPUgAAAec"]
[Wed Sep 30 01:14:24.181085 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.181371 2026] [access_compat:error] [pid 276620:tid 276787] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.219038 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.219317 2026] [access_compat:error] [pid 276059:tid 276223] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.272953 2026] [security2:error] [pid 276620:tid 276828] [client 223.235.102.107:16965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.102.235.223.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary20NPAdfEWqmGIkg2I9AAAAlk"]
[Wed Sep 30 01:14:24.273056 2026] [security2:error] [pid 276620:tid 276828] [client 223.235.102.107:16965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray-tmp.com"] [uri "/xmlrpc.php"] [unique_id "ary20NPAdfEWqmGIkg2I9AAAAlk"]
[Wed Sep 30 01:14:24.311530 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.311840 2026] [access_compat:error] [pid 276059:tid 276239] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.324434 2026] [security2:error] [pid 276620:tid 276812] [client 122.173.27.10:32568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.27.173.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary20NPAdfEWqmGIkg2I-AAAAkk"]
[Wed Sep 30 01:14:24.325194 2026] [security2:error] [pid 276620:tid 276812] [client 122.173.27.10:32568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "co-opportunities.org"] [uri "/xmlrpc.php"] [unique_id "ary20NPAdfEWqmGIkg2I-AAAAkk"]
[Wed Sep 30 01:14:24.335860 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:24.336129 2026] [access_compat:error] [pid 276620:tid 276872] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:24.401238 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.401497 2026] [access_compat:error] [pid 276059:tid 276216] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.415907 2026] [security2:error] [pid 276620:tid 276870] [client 20.28.180.172:8935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/ho.php"] [unique_id "ary20NPAdfEWqmGIkg2I-wAAAoM"]
[Wed Sep 30 01:14:24.480863 2026] [security2:error] [pid 276620:tid 276866] [client 4.240.25.22:38757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/fling.php"] [unique_id "ary20NPAdfEWqmGIkg2I_gAAAn8"]
[Wed Sep 30 01:14:24.488171 2026] [access_compat:error] [pid 276059:tid 276204] [client 47.79.13.58:33698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:24.488635 2026] [access_compat:error] [pid 276059:tid 276204] [client 47.79.13.58:33698] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:24.491928 2026] [access_compat:error] [pid 276059:tid 276244] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.492234 2026] [access_compat:error] [pid 276059:tid 276244] [client 216.73.216.46:43140] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.493972 2026] [security2:error] [pid 276620:tid 276770] [client 4.232.144.219:39558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws.php"] [unique_id "ary20NPAdfEWqmGIkg2JAAAAAh8"]
[Wed Sep 30 01:14:24.509261 2026] [security2:error] [pid 276620:tid 276766] [client 20.70.173.30:38899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/az.php"] [unique_id "ary20NPAdfEWqmGIkg2JAQAAAhs"]
[Wed Sep 30 01:14:24.559203 2026] [security2:error] [pid 276620:tid 276768] [client 20.194.96.176:12302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/uploartg.php"] [unique_id "ary20NPAdfEWqmGIkg2JAgAAAh0"]
[Wed Sep 30 01:14:24.576039 2026] [security2:error] [pid 276059:tid 276242] [client 216.73.216.46:43140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary20HtqdHBwD77138fPXwAAAb4"]
[Wed Sep 30 01:14:24.588207 2026] [security2:error] [pid 276620:tid 276737] [remote 57.141.14.97:52666] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "levantsoleil.sergil.net"] [uri "/feed/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/comments/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/wp-json/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/wp-includes/wlwmanifest.xml"] [unique_id "ary20NPAdfEWqmGIkg2JAwACIms"]
[Wed Sep 30 01:14:24.647637 2026] [security2:error] [pid 276059:tid 276230] [client 20.214.191.94:42111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/index/fucku.php"] [unique_id "ary20HtqdHBwD77138fPYgAAAbI"]
[Wed Sep 30 01:14:24.673867 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.674126 2026] [access_compat:error] [pid 276620:tid 276832] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.713601 2026] [security2:error] [pid 276620:tid 276867] [client 47.79.13.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary20NPAdfEWqmGIkg2JDQAAAoA"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:24.734479 2026] [security2:error] [pid 276620:tid 276877] [client 152.232.176.124:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary20NPAdfEWqmGIkg2JDwAAAoo"]
[Wed Sep 30 01:14:24.764002 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.764265 2026] [access_compat:error] [pid 276620:tid 276780] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.797781 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:24.798262 2026] [access_compat:error] [pid 276620:tid 276883] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:24.809620 2026] [security2:error] [pid 276620:tid 276853] [client 168.100.149.46:37060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/82a9f221fa99bcf18fcf31b4474eab1b.52a8.css.gz"] [unique_id "ary20NPAdfEWqmGIkg2JGAACcg4"]
[Wed Sep 30 01:14:24.838538 2026] [security2:error] [pid 276059:tid 276274] [client 157.245.105.107:58504] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "central-fuerth.de"] [uri "/"] [unique_id "ary20HtqdHBwD77138fPZAAAAd4"]
[Wed Sep 30 01:14:24.856469 2026] [security2:error] [pid 276620:tid 276776] [client 4.232.144.219:26905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/bmi.php"] [unique_id "ary20NPAdfEWqmGIkg2JGQAAAiU"]
[Wed Sep 30 01:14:24.908292 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:24.908570 2026] [access_compat:error] [pid 276620:tid 276871] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:24.953791 2026] [security2:error] [pid 276620:tid 276879] [client 20.194.30.107:5037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/abcd.php"] [unique_id "ary20NPAdfEWqmGIkg2JHgAAAow"]
[Wed Sep 30 01:14:25.000835 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.001121 2026] [access_compat:error] [pid 276059:tid 276219] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.018603 2026] [security2:error] [pid 276620:tid 276836] [client 20.214.191.94:42090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/upload/wp-info.php"] [unique_id "ary20dPAdfEWqmGIkg2JIwAAAmE"]
[Wed Sep 30 01:14:25.047576 2026] [security2:error] [pid 276620:tid 276875] [client 155.212.109.129:0] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ary20dPAdfEWqmGIkg2JJAAAAog"]
[Wed Sep 30 01:14:25.050432 2026] [security2:error] [pid 276620:tid 276837] [client 155.212.109.129:57127] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ary20NPAdfEWqmGIkg2JIQAAAmI"]
[Wed Sep 30 01:14:25.063896 2026] [security2:error] [pid 276620:tid 276847] [client 20.194.30.107:42517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hairofsheba.com"] [uri "/b8.php"] [unique_id "ary20dPAdfEWqmGIkg2JJQAAAmw"]
[Wed Sep 30 01:14:25.091199 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.091471 2026] [access_compat:error] [pid 276620:tid 276788] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.181683 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.181988 2026] [access_compat:error] [pid 276059:tid 276208] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.212002 2026] [security2:error] [pid 276620:tid 276759] [client 4.232.144.219:26923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/bypltspd.php"] [unique_id "ary20dPAdfEWqmGIkg2JKgAAAhQ"]
[Wed Sep 30 01:14:25.270976 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.271316 2026] [access_compat:error] [pid 276620:tid 276789] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.369942 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.370221 2026] [access_compat:error] [pid 276620:tid 276811] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.370698 2026] [security2:error] [pid 276620:tid 276806] [client 20.219.2.60:30026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/abc.php"] [unique_id "ary20dPAdfEWqmGIkg2JNwAAAkM"]
[Wed Sep 30 01:14:25.400839 2026] [security2:error] [pid 276620:tid 276766] [client 20.214.191.94:57543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/post.php"] [unique_id "ary20dPAdfEWqmGIkg2JOQAAAhs"]
[Wed Sep 30 01:14:25.405156 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.405427 2026] [access_compat:error] [pid 276620:tid 276849] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.413740 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:25.414071 2026] [access_compat:error] [pid 276620:tid 276819] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:25.492601 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.492877 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.562552 2026] [security2:error] [pid 276620:tid 276775] [client 4.232.144.219:39597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/shell.php"] [unique_id "ary20dPAdfEWqmGIkg2JPQAAAiQ"]
[Wed Sep 30 01:14:25.585272 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.585548 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.597983 2026] [security2:error] [pid 276059:tid 276229] [client 45.138.12.32:55102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nso.mim.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary20XtqdHBwD77138fPbwAAAbE"]
[Wed Sep 30 01:14:25.644050 2026] [security2:error] [pid 276620:tid 276769] [client 20.70.173.30:2097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/cilus.php"] [unique_id "ary20dPAdfEWqmGIkg2JPwAAAh4"]
[Wed Sep 30 01:14:25.657817 2026] [security2:error] [pid 276059:tid 276252] [client 20.70.173.30:25401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/wp-filemannger.php"] [unique_id "ary20XtqdHBwD77138fPcQAAAcg"]
[Wed Sep 30 01:14:25.664506 2026] [access_compat:error] [pid 276059:tid 276284] [client 47.79.13.64:54960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:25.664774 2026] [access_compat:error] [pid 276059:tid 276284] [client 47.79.13.64:54960] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:25.674453 2026] [security2:error] [pid 276620:tid 276850] [client 20.214.191.94:42433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "ary20dPAdfEWqmGIkg2JQQAAAm8"]
[Wed Sep 30 01:14:25.676350 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.676621 2026] [access_compat:error] [pid 276620:tid 276868] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.748597 2026] [security2:error] [pid 276059:tid 276132] [remote 74.7.227.17:44546] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary20XtqdHBwD77138fPcgAB7EQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=280290&sid=7d00c38b1cc08f8c930dc424559c4ee8
[Wed Sep 30 01:14:25.748624 2026] [security2:error] [pid 276059:tid 276132] [remote 74.7.227.17:44546] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.uxa.hoh.mybluehost.me"] [uri "/memberlist.php"] [unique_id "ary20XtqdHBwD77138fPcgAB7EQ"], referer: https://mail.uxa.hoh.mybluehost.me/viewtopic.php?p=280290&sid=7d00c38b1cc08f8c930dc424559c4ee8
[Wed Sep 30 01:14:25.764522 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.764777 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.777533 2026] [security2:error] [pid 276620:tid 276860] [client 157.245.105.107:58514] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1617"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "central-fuerth.de"] [uri "/"] [unique_id "ary20dPAdfEWqmGIkg2JSAAAAnk"]
[Wed Sep 30 01:14:25.781048 2026] [security2:error] [pid 276620:tid 276877] [client 20.194.96.176:45520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/mac.php"] [unique_id "ary20dPAdfEWqmGIkg2JSQAAAoo"]
[Wed Sep 30 01:14:25.857535 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.857822 2026] [access_compat:error] [pid 276620:tid 276784] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:25.886676 2026] [security2:error] [pid 276059:tid 276194] [client 20.194.30.107:30403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/f35.php"] [unique_id "ary20XtqdHBwD77138fPdwAAAY8"]
[Wed Sep 30 01:14:25.906583 2026] [security2:error] [pid 276620:tid 276804] [client 4.232.144.219:39586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-links-opml.php"] [unique_id "ary20dPAdfEWqmGIkg2JTgAAAkE"]
[Wed Sep 30 01:14:25.910431 2026] [access_compat:error] [pid 276620:tid 276831] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:25.910679 2026] [access_compat:error] [pid 276620:tid 276831] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:25.948995 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:25.949381 2026] [access_compat:error] [pid 276620:tid 276786] [client 216.73.216.46:16219] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.026480 2026] [security2:error] [pid 276620:tid 276882] [client 4.196.65.241:58964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/a22.php"] [unique_id "ary20tPAdfEWqmGIkg2JVgAAAo8"]
[Wed Sep 30 01:14:26.041781 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.042224 2026] [access_compat:error] [pid 276059:tid 276228] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.055269 2026] [security2:error] [pid 276620:tid 276818] [client 20.214.191.94:42465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/adminfuns.php"] [unique_id "ary20tPAdfEWqmGIkg2JWAAAAk8"]
[Wed Sep 30 01:14:26.098785 2026] [security2:error] [pid 276620:tid 276836] [client 207.45.31.147:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary20tPAdfEWqmGIkg2JWwAAAmE"]
[Wed Sep 30 01:14:26.106312 2026] [security2:error] [pid 276059:tid 276273] [client 162.218.121.133:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary20ntqdHBwD77138fPfQAAAd0"]
[Wed Sep 30 01:14:26.124494 2026] [security2:error] [pid 276620:tid 276722] [remote 57.141.14.41:49960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d9%85%d8%b3%d8%a7%d8%b1-%d8%ac%d9%84%d8%ac%d8%a7%d9%85%d8%b4/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d8%a7%d9%86/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%b3%d8%b1%d8%ac%d9%8a%d9%84/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/xmlrpc.php"] [unique_id "ary20tPAdfEWqmGIkg2JWgACPlw"]
[Wed Sep 30 01:14:26.142164 2026] [security2:error] [pid 276620:tid 276636] [remote 74.7.243.250:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1563"] [id "900923"] [msg "contact form logging"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary20tPAdfEWqmGIkg2JXgACMAY"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D69152
[Wed Sep 30 01:14:26.142198 2026] [security2:error] [pid 276620:tid 276636] [remote 74.7.243.250:0] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1569"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "forum.torquayfans.com"] [uri "/memberlist.php"] [unique_id "ary20tPAdfEWqmGIkg2JXgACMAY"], referer: https://forum.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D69152
[Wed Sep 30 01:14:26.183113 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.183381 2026] [access_compat:error] [pid 276620:tid 276837] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.273821 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:38166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.274207 2026] [access_compat:error] [pid 276620:tid 276807] [client 216.73.216.46:38166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.325453 2026] [security2:error] [pid 276059:tid 276277] [client 4.232.144.219:26920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ary20ntqdHBwD77138fPgQAAAeE"]
[Wed Sep 30 01:14:26.365288 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.365721 2026] [access_compat:error] [pid 276059:tid 276258] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.379881 2026] [security2:error] [pid 276059:tid 276221] [client 20.214.191.94:42445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/about.php"] [unique_id "ary20ntqdHBwD77138fPhgAAAak"]
[Wed Sep 30 01:14:26.493550 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.493816 2026] [access_compat:error] [pid 276620:tid 276862] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.585180 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.585522 2026] [access_compat:error] [pid 276620:tid 276823] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.697245 2026] [security2:error] [pid 276059:tid 276218] [client 4.232.144.219:53333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws82.php"] [unique_id "ary20ntqdHBwD77138fPjgAAAaY"]
[Wed Sep 30 01:14:26.717374 2026] [security2:error] [pid 276059:tid 276232] [client 20.214.191.94:42415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/BDKR28WP.php"] [unique_id "ary20ntqdHBwD77138fPkAAAAbQ"]
[Wed Sep 30 01:14:26.718512 2026] [security2:error] [pid 276620:tid 276885] [client 105.112.178.79:38605] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1462"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.traderootsltd.com"] [uri "/__ss_probe_046309c188e8fd4053a48ce8c8f68fc3__"] [unique_id "ary20tPAdfEWqmGIkg2JcgAAApI"]
[Wed Sep 30 01:14:26.744840 2026] [security2:error] [pid 276620:tid 276851] [client 152.39.240.155:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary20tPAdfEWqmGIkg2JdAAAAnA"]
[Wed Sep 30 01:14:26.761873 2026] [security2:error] [pid 276059:tid 276287] [client 157.245.105.107:58522] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "central-fuerth.de"] [uri "/wp-json/batch/v1"] [unique_id "ary20ntqdHBwD77138fPkQAAAes"]
[Wed Sep 30 01:14:26.772658 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.773112 2026] [access_compat:error] [pid 276059:tid 276202] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.807973 2026] [security2:error] [pid 276620:tid 276856] [client 20.219.2.60:29704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/motu.php"] [unique_id "ary20tPAdfEWqmGIkg2JdgAAAnU"]
[Wed Sep 30 01:14:26.808225 2026] [access_compat:error] [pid 276620:tid 276775] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:26.808487 2026] [access_compat:error] [pid 276620:tid 276775] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:26.811540 2026] [security2:error] [pid 276620:tid 276765] [client 4.240.25.22:63672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary20tPAdfEWqmGIkg2JeAAAAho"]
[Wed Sep 30 01:14:26.825866 2026] [security2:error] [pid 276620:tid 276858] [client 168.100.149.115:53494] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/2d95e9b20cc32f7d93de2cf42d1d1914.d3c0.css.gz"] [unique_id "ary20tPAdfEWqmGIkg2JeQACdxo"]
[Wed Sep 30 01:14:26.848707 2026] [security2:error] [pid 276620:tid 276822] [client 106.214.2.47:19637] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary20tPAdfEWqmGIkg2JewAAAlM"]
[Wed Sep 30 01:14:26.849380 2026] [security2:error] [pid 276620:tid 276822] [client 106.214.2.47:19637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "yoozu.fr"] [uri "/xmlrpc.php"] [unique_id "ary20tPAdfEWqmGIkg2JewAAAlM"]
[Wed Sep 30 01:14:26.868177 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:26.868490 2026] [access_compat:error] [pid 276059:tid 276253] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:26.949815 2026] [security2:error] [pid 276620:tid 276835] [client 216.73.216.46:16219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary20tPAdfEWqmGIkg2JfwAAAmA"]
[Wed Sep 30 01:14:26.962866 2026] [access_compat:error] [pid 276059:tid 276318] [client 47.79.13.73:59756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:26.963219 2026] [access_compat:error] [pid 276059:tid 276318] [client 47.79.13.73:59756] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:27.036332 2026] [security2:error] [pid 276620:tid 276819] [client 20.214.191.94:57570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/file5.php"] [unique_id "ary209PAdfEWqmGIkg2JggAAAlA"]
[Wed Sep 30 01:14:27.048129 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.048443 2026] [access_compat:error] [pid 276620:tid 276804] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.088168 2026] [security2:error] [pid 276620:tid 276840] [client 4.232.144.219:26924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/new.php"] [unique_id "ary209PAdfEWqmGIkg2JhgAAAmU"]
[Wed Sep 30 01:14:27.139729 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.140020 2026] [access_compat:error] [pid 276620:tid 276882] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.180088 2026] [security2:error] [pid 276620:tid 276802] [client 161.118.214.16:58670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.lzq.kpg.mybluehost.me"] [uri "/"] [unique_id "ary209PAdfEWqmGIkg2JkQAAAj8"]
[Wed Sep 30 01:14:27.183928 2026] [security2:error] [pid 276059:tid 276201] [client 49.43.163.212:61208] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1484"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary203tqdHBwD77138fPmAAAAZY"]
[Wed Sep 30 01:14:27.184040 2026] [security2:error] [pid 276059:tid 276201] [client 49.43.163.212:61208] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "medredisolutions.com"] [uri "/xmlrpc.php"] [unique_id "ary203tqdHBwD77138fPmAAAAZY"]
[Wed Sep 30 01:14:27.189295 2026] [security2:error] [pid 276059:tid 276282] [client 103.211.18.63:52960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.211.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary203tqdHBwD77138fPmQAAAeY"]
[Wed Sep 30 01:14:27.189400 2026] [security2:error] [pid 276059:tid 276282] [client 103.211.18.63:52960] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "teapeak.net"] [uri "/xmlrpc.php"] [unique_id "ary203tqdHBwD77138fPmQAAAeY"]
[Wed Sep 30 01:14:27.283371 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.283652 2026] [access_compat:error] [pid 276620:tid 276809] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.285672 2026] [security2:error] [pid 276620:tid 276841] [client 47.79.13.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary209PAdfEWqmGIkg2JmwAAAmY"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:27.311722 2026] [security2:error] [pid 276620:tid 276814] [client 172.232.180.137:59523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/tamruwwg.php"] [unique_id "ary209PAdfEWqmGIkg2JnQAAAks"], referer: www.google.com
[Wed Sep 30 01:14:27.394722 2026] [security2:error] [pid 276620:tid 276828] [client 45.138.12.32:36986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nrc.xcc.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary209PAdfEWqmGIkg2JnwAAAlk"]
[Wed Sep 30 01:14:27.397608 2026] [security2:error] [pid 276620:tid 276795] [client 20.70.173.30:44731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gkmasterson.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ary209PAdfEWqmGIkg2JoAAAAjg"]
[Wed Sep 30 01:14:27.415142 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.415591 2026] [access_compat:error] [pid 276620:tid 276848] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.428705 2026] [security2:error] [pid 276059:tid 276249] [client 20.214.191.94:42417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/b8.php"] [unique_id "ary203tqdHBwD77138fPnAAAAcU"]
[Wed Sep 30 01:14:27.440813 2026] [access_compat:error] [pid 276059:tid 276247] [client 47.79.13.176:56828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:27.441267 2026] [access_compat:error] [pid 276059:tid 276247] [client 47.79.13.176:56828] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:27.457613 2026] [security2:error] [pid 276620:tid 276864] [client 20.194.96.176:22167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wmore1.php"] [unique_id "ary209PAdfEWqmGIkg2JpQAAAn0"]
[Wed Sep 30 01:14:27.494055 2026] [security2:error] [pid 276059:tid 276298] [client 4.232.144.219:26889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/press.php"] [unique_id "ary203tqdHBwD77138fPngAAAfY"]
[Wed Sep 30 01:14:27.503175 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.503434 2026] [access_compat:error] [pid 276620:tid 276782] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.539146 2026] [access_compat:error] [pid 276620:tid 276869] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:27.539589 2026] [access_compat:error] [pid 276620:tid 276869] [client 74.7.243.227:41694] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:27.557448 2026] [security2:error] [pid 276620:tid 276861] [client 20.219.2.60:29921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/inputs.php"] [unique_id "ary209PAdfEWqmGIkg2JrQAAAno"]
[Wed Sep 30 01:14:27.570016 2026] [security2:error] [pid 276620:tid 276886] [client 190.5.42.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary209PAdfEWqmGIkg2JrgAAApM"]
[Wed Sep 30 01:14:27.576516 2026] [security2:error] [pid 276620:tid 276845] [client 37.41.16.35:58011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.16.41.37.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary209PAdfEWqmGIkg2JrwAAAmo"]
[Wed Sep 30 01:14:27.576607 2026] [security2:error] [pid 276620:tid 276845] [client 37.41.16.35:58011] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colorbook.net"] [uri "/xmlrpc.php"] [unique_id "ary209PAdfEWqmGIkg2JrwAAAmo"]
[Wed Sep 30 01:14:27.593128 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.593396 2026] [access_compat:error] [pid 276059:tid 276241] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.686730 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.687034 2026] [access_compat:error] [pid 276059:tid 276226] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.703721 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.82.11.32:57768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: https://homs.co.ke/
[Wed Sep 30 01:14:27.704076 2026] [access_compat:error] [pid 276059:tid 276230] [client 47.82.11.32:57768] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: https://homs.co.ke/
[Wed Sep 30 01:14:27.716338 2026] [security2:error] [pid 276620:tid 276858] [client 20.194.30.107:22985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "finan.cloud"] [uri "/baru.php"] [unique_id "ary209PAdfEWqmGIkg2JtgAAAnc"]
[Wed Sep 30 01:14:27.776186 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:38166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.776467 2026] [access_compat:error] [pid 276620:tid 276860] [client 216.73.216.46:38166] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.778207 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.191.94:42491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/133.php"] [unique_id "ary209PAdfEWqmGIkg2JuAAAAnw"]
[Wed Sep 30 01:14:27.781927 2026] [security2:error] [pid 276620:tid 276844] [client 157.245.105.107:58532] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1601"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "central-fuerth.de"] [uri "/wp-json/batch/v1"] [unique_id "ary209PAdfEWqmGIkg2JuQAAAmk"]
[Wed Sep 30 01:14:27.821886 2026] [security2:error] [pid 276620:tid 276793] [client 85.74.107.62:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/networking/"] [unique_id "ary209PAdfEWqmGIkg2JvAAAAjY"]
[Wed Sep 30 01:14:27.830880 2026] [security2:error] [pid 276620:tid 276872] [client 4.232.144.219:53315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/file-mancvgertdxz.php"] [unique_id "ary209PAdfEWqmGIkg2JvgAAAoU"]
[Wed Sep 30 01:14:27.862611 2026] [security2:error] [pid 276620:tid 276777] [client 130.49.10.12:0] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "ary20dPAdfEWqmGIkg2JTAAAAiY"]
[Wed Sep 30 01:14:27.865059 2026] [security2:error] [pid 276059:tid 276297] [client 130.49.10.12:9475] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/robots.txt"] [unique_id "ary20XtqdHBwD77138fPdAAAAfU"]
[Wed Sep 30 01:14:27.867651 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:27.867939 2026] [access_compat:error] [pid 276620:tid 276830] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:27.914991 2026] [security2:error] [pid 276620:tid 276824] [client 20.194.30.107:17553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hubach.com"] [uri "/mh.php"] [unique_id "ary209PAdfEWqmGIkg2JxAAAAlU"]
[Wed Sep 30 01:14:27.941995 2026] [security2:error] [pid 276620:tid 276807] [client 20.28.180.172:8959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.180.28.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "onemontgomerygreen.whconsults.com"] [uri "/un.php"] [unique_id "ary209PAdfEWqmGIkg2JxQAAAkQ"]
[Wed Sep 30 01:14:27.976177 2026] [security2:error] [pid 276620:tid 276814] [client 20.70.173.30:24805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.theitguy.info"] [uri "/pfm.php"] [unique_id "ary209PAdfEWqmGIkg2JyQAAAks"]
[Wed Sep 30 01:14:27.989284 2026] [security2:error] [pid 276620:tid 276818] [client 189.183.180.129:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary209PAdfEWqmGIkg2JygAAAk8"]
[Wed Sep 30 01:14:27.990978 2026] [security2:error] [pid 276620:tid 276812] [client 47.79.13.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/cosmos/"] [unique_id "ary209PAdfEWqmGIkg2JywAAAkk"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:28.069217 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.069524 2026] [access_compat:error] [pid 276620:tid 276859] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.084238 2026] [security2:error] [pid 276059:tid 276205] [client 20.214.191.94:42485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/ano.php"] [unique_id "ary21HtqdHBwD77138fPsAAAAZo"]
[Wed Sep 30 01:14:28.129700 2026] [security2:error] [pid 276059:tid 276267] [client 74.7.175.171:54232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.kxx.ltz.mybluehost.me"] [uri "/robots.txt"] [unique_id "ary21HtqdHBwD77138fPsQAAAdc"]
[Wed Sep 30 01:14:28.160835 2026] [security2:error] [pid 276620:tid 276637] [remote 64.23.166.180:45762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.jawsq.com"] [uri "/.env"] [unique_id "ary21NPAdfEWqmGIkg2J1wACiwc"]
[Wed Sep 30 01:14:28.186056 2026] [security2:error] [pid 276059:tid 276194] [client 4.232.144.219:33665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "ary21HtqdHBwD77138fPswAAAY8"]
[Wed Sep 30 01:14:28.187561 2026] [security2:error] [pid 276059:tid 276320] [client 20.194.30.107:10175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/about.php"] [unique_id "ary21HtqdHBwD77138fPtAAAAgw"]
[Wed Sep 30 01:14:28.197222 2026] [security2:error] [pid 276620:tid 276766] [client 20.194.30.107:4592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mirandabrokerage.geyserjz.com"] [uri "/w.php"] [unique_id "ary21NPAdfEWqmGIkg2J2gAAAhs"]
[Wed Sep 30 01:14:28.231647 2026] [security2:error] [pid 276059:tid 276199] [client 74.7.175.171:54232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.kxx.ltz.mybluehost.me"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ary21HtqdHBwD77138fPsgAAAZQ"], referer: https://www.kxx.ltz.mybluehost.me/robots.txt
[Wed Sep 30 01:14:28.359957 2026] [security2:error] [pid 276620:tid 276668] [remote 64.23.166.180:45778] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.jayariken.ca"] [uri "/.env"] [unique_id "ary21NPAdfEWqmGIkg2J5gACdiY"]
[Wed Sep 30 01:14:28.395772 2026] [security2:error] [pid 276059:tid 276270] [client 74.7.242.1:59348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 1.242.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.harmonicaworkshop.com"] [uri "/roviwjh/capoei.php"] [unique_id "ary21HtqdHBwD77138fPugAAAdo"], referer: https://modernbuildingcertifiers.com
[Wed Sep 30 01:14:28.404568 2026] [security2:error] [pid 276059:tid 276277] [client 20.219.2.60:30076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/wp9.php"] [unique_id "ary21HtqdHBwD77138fPuwAAAeE"]
[Wed Sep 30 01:14:28.406450 2026] [security2:error] [pid 276620:tid 276759] [client 103.241.204.139:54637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.204.241.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary21NPAdfEWqmGIkg2J5wAAAhQ"]
[Wed Sep 30 01:14:28.406576 2026] [security2:error] [pid 276620:tid 276759] [client 103.241.204.139:54637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "beetreefolkschool.net"] [uri "/xmlrpc.php"] [unique_id "ary21NPAdfEWqmGIkg2J5wAAAhQ"]
[Wed Sep 30 01:14:28.426999 2026] [security2:error] [pid 276620:tid 276867] [client 4.240.25.22:38742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.rhodaalbert.com"] [uri "/chosen.php"] [unique_id "ary21NPAdfEWqmGIkg2J6QAAAoA"]
[Wed Sep 30 01:14:28.442394 2026] [security2:error] [pid 276620:tid 276844] [client 20.214.191.94:42419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/sf.php"] [unique_id "ary21NPAdfEWqmGIkg2J6wAAAmk"]
[Wed Sep 30 01:14:28.489710 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.489996 2026] [access_compat:error] [pid 276620:tid 276834] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.501313 2026] [security2:error] [pid 276620:tid 276821] [client 130.49.79.57:0] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/"] [unique_id "ary21NPAdfEWqmGIkg2J8gAAAlI"]
[Wed Sep 30 01:14:28.501950 2026] [security2:error] [pid 276059:tid 276099] [remote 57.141.14.99:23426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.14.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "levantsoleil.sergil.net"] [uri "/%d8%a7%d9%84%d9%83%d8%aa%d8%a7%d8%a8%d8%a9-%d9%81%d9%8a-%d8%b3%d9%8a%d8%b1%d8%ac%d9%8a%d9%84/%d8%af%d9%84%d9%8a%d9%84-%d9%85%d9%86%d9%87%d8%ac%d9%8a/%d8%a7%d9%88%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d8%b9%d8%a7%d9%84%d9%85-%d8%a7%d9%84%d9%82%d8%a7%d8%af%d9%85/feed/%d8%ac%d9%85%d8%a7%d9%84%d9%8a%d8%a7%d8%aa/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/%d9%85%d8%b4%d8%a7%d8%b1%d9%8a%d8%b9/%d8%a7%d9%84%d8%b4%d8%b1%d8%b9-%d8%a7%d9%84%d8%a3%d8%b9%d9%84%d9%89/feed/xmlrpc.php"] [unique_id "ary21HtqdHBwD77138fPvAABpSM"]
[Wed Sep 30 01:14:28.502862 2026] [security2:error] [pid 276059:tid 276322] [client 130.49.79.57:18511] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kentraneotitas.org"] [uri "/"] [unique_id "ary21HtqdHBwD77138fPvQAAAg4"]
[Wed Sep 30 01:14:28.559604 2026] [security2:error] [pid 276059:tid 276222] [client 4.232.144.219:33706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws57.php"] [unique_id "ary21HtqdHBwD77138fPwQAAAao"]
[Wed Sep 30 01:14:28.581391 2026] [security2:error] [pid 276620:tid 276826] [client 4.240.25.22:63623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hairdefinitions.co.uk"] [uri "/df.php"] [unique_id "ary21NPAdfEWqmGIkg2J-AAAAlc"]
[Wed Sep 30 01:14:28.581979 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.582424 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.585649 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvdHR5
[Wed Sep 30 01:14:28.585921 2026] [access_compat:error] [pid 276620:tid 276836] [client 216.73.216.46:25175] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?action=backdoor&p=L3Byb2MvdHR5
[Wed Sep 30 01:14:28.631609 2026] [access_compat:error] [pid 276620:tid 276823] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:28.631892 2026] [access_compat:error] [pid 276620:tid 276823] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:28.650011 2026] [security2:error] [pid 276620:tid 276838] [client 20.70.173.30:25960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hairofsheba.com"] [uri "/sym.php"] [unique_id "ary21NPAdfEWqmGIkg2J_gAAAmM"]
[Wed Sep 30 01:14:28.676175 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.676445 2026] [access_compat:error] [pid 276059:tid 276231] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.724726 2026] [security2:error] [pid 276620:tid 276828] [client 20.214.191.94:42434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/xx.php"] [unique_id "ary21NPAdfEWqmGIkg2KBgAAAlk"]
[Wed Sep 30 01:14:28.775538 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.775804 2026] [access_compat:error] [pid 276620:tid 276880] [client 216.73.216.46:19489] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.778553 2026] [security2:error] [pid 276620:tid 276831] [client 154.17.135.152:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary21NPAdfEWqmGIkg2KDgAAAlw"]
[Wed Sep 30 01:14:28.814922 2026] [security2:error] [pid 276620:tid 276767] [client 4.196.65.241:58969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/ho.php"] [unique_id "ary21NPAdfEWqmGIkg2KDwAAAhw"]
[Wed Sep 30 01:14:28.829866 2026] [security2:error] [pid 276620:tid 276861] [client 168.100.149.185:46424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/3b2258c9ffadfe7107b3f616e661b5d6.6e2d.css.gz"] [unique_id "ary21NPAdfEWqmGIkg2KEAACelA"]
[Wed Sep 30 01:14:28.867738 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.868046 2026] [access_compat:error] [pid 276059:tid 276310] [client 216.73.216.46:16761] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:28.882561 2026] [security2:error] [pid 276620:tid 276789] [client 4.232.144.219:35996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/.qiodetme.php"] [unique_id "ary21NPAdfEWqmGIkg2KFAAAAjI"]
[Wed Sep 30 01:14:28.918832 2026] [security2:error] [pid 276059:tid 276224] [client 20.194.96.176:8112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/wp-ainefgskk.php"] [unique_id "ary21HtqdHBwD77138fPyQAAAaw"]
[Wed Sep 30 01:14:28.952512 2026] [security2:error] [pid 276620:tid 276806] [client 216.73.216.46:38166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary21NPAdfEWqmGIkg2KFQAAAkM"]
[Wed Sep 30 01:14:28.994477 2026] [security2:error] [pid 276059:tid 276232] [client 45.138.12.32:36990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.12.138.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.nrf.tfd.mybluehost.me"] [uri "/wp-links-opml.php"] [unique_id "ary21HtqdHBwD77138fPygAAAbQ"]
[Wed Sep 30 01:14:28.998675 2026] [access_compat:error] [pid 276620:tid 276768] [client 220.181.108.84:1992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:28.998980 2026] [access_compat:error] [pid 276620:tid 276768] [client 220.181.108.84:1992] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.050515 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.050798 2026] [access_compat:error] [pid 276059:tid 276200] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.063230 2026] [security2:error] [pid 276059:tid 276315] [client 4.240.25.22:8399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kaxanbs.com.mx"] [uri "/red.php"] [unique_id "ary21XtqdHBwD77138fPzgAAAgc"]
[Wed Sep 30 01:14:29.070970 2026] [security2:error] [pid 276620:tid 276863] [client 20.214.191.94:42055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/file2.php"] [unique_id "ary21dPAdfEWqmGIkg2KHAAAAnw"]
[Wed Sep 30 01:14:29.127544 2026] [security2:error] [pid 276059:tid 276287] [client 4.240.25.22:57847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.25.240.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theitguy.info"] [uri "/classwithtostring.php"] [unique_id "ary21XtqdHBwD77138fPzwAAAes"]
[Wed Sep 30 01:14:29.181048 2026] [security2:error] [pid 276059:tid 276234] [client 138.118.149.139:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/ups/backup-ups"] [unique_id "ary21XtqdHBwD77138fP0gAAAbY"]
[Wed Sep 30 01:14:29.191968 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.192244 2026] [access_compat:error] [pid 276059:tid 276306] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.214228 2026] [security2:error] [pid 276620:tid 276821] [client 152.232.243.135:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary21dPAdfEWqmGIkg2KIQAAAlI"]
[Wed Sep 30 01:14:29.224431 2026] [security2:error] [pid 276620:tid 276848] [client 20.70.173.30:8854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.173.70.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.cecacel.com"] [uri "/133.php"] [unique_id "ary21dPAdfEWqmGIkg2KIwAAAm0"]
[Wed Sep 30 01:14:29.234358 2026] [security2:error] [pid 276620:tid 276832] [client 4.232.144.219:26917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/sodas.php"] [unique_id "ary21dPAdfEWqmGIkg2KJQAAAl0"]
[Wed Sep 30 01:14:29.238628 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.239059 2026] [access_compat:error] [pid 276620:tid 276866] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.245039 2026] [security2:error] [pid 276620:tid 276805] [client 122.177.240.90:18809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.240.177.122.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary21dPAdfEWqmGIkg2KJgAAAkI"]
[Wed Sep 30 01:14:29.245152 2026] [security2:error] [pid 276620:tid 276805] [client 122.177.240.90:18809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmccray.com"] [uri "/xmlrpc.php"] [unique_id "ary21dPAdfEWqmGIkg2KJgAAAkI"]
[Wed Sep 30 01:14:29.324365 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.324638 2026] [access_compat:error] [pid 276620:tid 276760] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.362429 2026] [security2:error] [pid 276620:tid 276833] [client 20.214.191.94:42487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/m.php"] [unique_id "ary21dPAdfEWqmGIkg2KKwAAAl4"]
[Wed Sep 30 01:14:29.407886 2026] [security2:error] [pid 276620:tid 276801] [client 216.73.216.46:19489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary21dPAdfEWqmGIkg2KLgAAAj4"]
[Wed Sep 30 01:14:29.505753 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.506069 2026] [access_compat:error] [pid 276059:tid 276263] [client 216.73.216.46:50169] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.508559 2026] [access_compat:error] [pid 276620:tid 276831] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:29.508804 2026] [access_compat:error] [pid 276620:tid 276831] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:29.559214 2026] [security2:error] [pid 276620:tid 276767] [client 4.232.144.219:53341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/yw5bi63u.php"] [unique_id "ary21dPAdfEWqmGIkg2KNAAAAhw"]
[Wed Sep 30 01:14:29.570738 2026] [security2:error] [pid 276620:tid 276870] [client 172.232.180.137:61843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.180.232.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pempaleh.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ary21dPAdfEWqmGIkg2KNQAAAoM"]
[Wed Sep 30 01:14:29.595846 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.596140 2026] [access_compat:error] [pid 276620:tid 276800] [client 216.73.216.46:12049] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.642321 2026] [security2:error] [pid 276620:tid 276856] [client 207.45.29.240:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/computers/"] [unique_id "ary21dPAdfEWqmGIkg2KPgAAAnU"]
[Wed Sep 30 01:14:29.679934 2026] [security2:error] [pid 276620:tid 276827] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "goarchitects.com"] [uri "/"] [unique_id "ary21dPAdfEWqmGIkg2KQwACWGQ"]
[Wed Sep 30 01:14:29.681497 2026] [security2:error] [pid 276620:tid 276809] [client 216.73.216.46:25175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/"] [unique_id "ary21dPAdfEWqmGIkg2KRAAAAkY"]
[Wed Sep 30 01:14:29.713064 2026] [security2:error] [pid 276620:tid 276784] [client 20.214.191.94:42476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/33.php"] [unique_id "ary21dPAdfEWqmGIkg2KSQAAAi0"]
[Wed Sep 30 01:14:29.744068 2026] [security2:error] [pid 276059:tid 276317] [client 216.73.216.46:16761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.homs.co.ke"] [uri "/adminer.php"] [unique_id "ary21XtqdHBwD77138fP2gAAAgk"], referer: http://www.homs.co.ke/?action=adminer&p=Ly92YXIvc29mdGFjdWxvdXM%3D
[Wed Sep 30 01:14:29.782026 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.782449 2026] [access_compat:error] [pid 276620:tid 276835] [client 216.73.216.46:36759] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.802988 2026] [security2:error] [pid 276059:tid 276212] [client 20.219.2.60:30382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.2.219.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alberga.net"] [uri "/public/vx.php"] [unique_id "ary21XtqdHBwD77138fP2wAAAaA"]
[Wed Sep 30 01:14:29.872220 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.872504 2026] [access_compat:error] [pid 276620:tid 276877] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:29.897027 2026] [security2:error] [pid 276059:tid 276251] [client 4.232.144.219:36008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws81.php"] [unique_id "ary21XtqdHBwD77138fP3gAAAcc"]
[Wed Sep 30 01:14:29.898457 2026] [security2:error] [pid 276059:tid 276304] [client 47.79.13.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-tag/tab/"] [unique_id "ary21XtqdHBwD77138fP3QAAAfw"], referer: https://coscharis-tech.com/
[Wed Sep 30 01:14:29.967009 2026] [security2:error] [pid 276620:tid 276771] [client 49.43.128.226:45952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "izubaplanners.com"] [uri "/xmlrpc.php"] [unique_id "ary21dPAdfEWqmGIkg2KKgAAAiA"]
[Wed Sep 30 01:14:29.967492 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:29.967919 2026] [access_compat:error] [pid 276059:tid 276240] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.023456 2026] [security2:error] [pid 276620:tid 276853] [client 84.233.195.160:49571] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1463"] [id "909116"] [msg "Golang default UA"] [hostname "www.avions-biddingestimates.com"] [uri "/"] [unique_id "ary21tPAdfEWqmGIkg2KUwAAAnI"]
[Wed Sep 30 01:14:30.053520 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.053784 2026] [access_compat:error] [pid 276059:tid 276292] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.069395 2026] [security2:error] [pid 276620:tid 276803] [client 130.49.10.68:0] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/index.php"] [unique_id "ary21dPAdfEWqmGIkg2KSAAAAkA"]
[Wed Sep 30 01:14:30.192270 2026] [security2:error] [pid 276059:tid 276219] [client 20.214.191.94:42393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/ccc.php"] [unique_id "ary21ntqdHBwD77138fP5gAAAac"]
[Wed Sep 30 01:14:30.196176 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:10949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.196512 2026] [access_compat:error] [pid 276620:tid 276873] [client 216.73.216.46:10949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.239631 2026] [security2:error] [pid 276620:tid 276781] [client 130.49.10.68:29701] ModSecurity: Warning. Matched phrase "Nutch" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kentraneotitas.org"] [uri "/"] [unique_id "ary21dPAdfEWqmGIkg2KQAAAAio"]
[Wed Sep 30 01:14:30.242259 2026] [security2:error] [pid 276620:tid 276801] [client 4.232.144.219:39591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/mh.php"] [unique_id "ary21tPAdfEWqmGIkg2KZAAAAj4"]
[Wed Sep 30 01:14:30.252321 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.252747 2026] [access_compat:error] [pid 276620:tid 276846] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.274486 2026] [security2:error] [pid 276620:tid 276852] [client 170.246.90.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "coscharis-tech.com"] [uri "/product-category/electronics/"] [unique_id "ary21tPAdfEWqmGIkg2KZQAAAnE"]
[Wed Sep 30 01:14:30.306985 2026] [security2:error] [pid 276620:tid 276860] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "goarchitects.com"] [uri "/about"] [unique_id "ary21tPAdfEWqmGIkg2KaQACeSA"]
[Wed Sep 30 01:14:30.310126 2026] [access_compat:error] [pid 276620:tid 276842] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:30.310380 2026] [access_compat:error] [pid 276620:tid 276842] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvOTYxMDE4L2N3ZC9iaW4=
[Wed Sep 30 01:14:30.339154 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.339418 2026] [access_compat:error] [pid 276620:tid 276839] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.361476 2026] [security2:error] [pid 276620:tid 276869] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "goarchitects.com"] [uri "/about-us"] [unique_id "ary21tPAdfEWqmGIkg2KawACgjo"]
[Wed Sep 30 01:14:30.380532 2026] [security2:error] [pid 276059:tid 276267] [client 20.194.30.107:10023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.30.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.designthesign.com"] [uri "/dex.php"] [unique_id "ary21ntqdHBwD77138fP6QAAAdc"]
[Wed Sep 30 01:14:30.382193 2026] [security2:error] [pid 276620:tid 276878] [client 82.102.18.126:56682] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1558"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.sbh.oau.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ary21tPAdfEWqmGIkg2KbAAAAos"]
[Wed Sep 30 01:14:30.429100 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.429385 2026] [access_compat:error] [pid 276620:tid 276825] [client 216.73.216.46:18807] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.467276 2026] [security2:error] [pid 276620:tid 276694] [remote 74.7.243.214:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.243.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.torquayfans.com"] [uri "/ucp.php"] [unique_id "ary21tPAdfEWqmGIkg2KcAACHEA"], referer: https://www.torquayfans.com/ucp.php?mode=login&redirect=posting.php%3Fmode%3Dquote%26p%3D14183
[Wed Sep 30 01:14:30.469805 2026] [security2:error] [pid 276620:tid 276876] [client 20.214.191.94:42376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/file15.php"] [unique_id "ary21tPAdfEWqmGIkg2KcQAAAok"]
[Wed Sep 30 01:14:30.520799 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.521093 2026] [access_compat:error] [pid 276059:tid 276252] [client 216.73.216.46:51076] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.566654 2026] [security2:error] [pid 276059:tid 276308] [client 4.232.144.219:26938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws88.php"] [unique_id "ary21ntqdHBwD77138fP7AAAAgA"]
[Wed Sep 30 01:14:30.711884 2026] [security2:error] [pid 276620:tid 276806] [client 82.102.18.126:56692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.sbh.oau.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "ary21tPAdfEWqmGIkg2KggAAAkM"]
[Wed Sep 30 01:14:30.783011 2026] [access_compat:error] [pid 276620:tid 276844] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:30.783290 2026] [access_compat:error] [pid 276620:tid 276844] [client 74.7.243.227:50210] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3, referer: http://www.homs.co.ke/?p=L3Byb2MvNjIwMjc3L2N3ZC9iaW4=
[Wed Sep 30 01:14:30.798916 2026] [security2:error] [pid 276620:tid 276866] [client 168.100.149.43:37706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mngroup.com.au"] [uri "/wp-content/cache/seraphinite-accelerator/s/m/d/css/7257b8812f6db54ef7e5e6778ecf75fe.ec50.css.gz"] [unique_id "ary21tPAdfEWqmGIkg2KhwACfzk"]
[Wed Sep 30 01:14:30.801480 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.801740 2026] [access_compat:error] [pid 276620:tid 276785] [client 216.73.216.46:60345] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.811722 2026] [security2:error] [pid 276620:tid 276788] [client 20.214.191.94:42446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.191.214.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.royalcanvas.ca"] [uri "/82.php"] [unique_id "ary21tPAdfEWqmGIkg2KigAAAjE"]
[Wed Sep 30 01:14:30.856771 2026] [security2:error] [pid 276620:tid 276884] [client 20.194.96.176:58679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whconsults.com"] [uri "/ab.php"] [unique_id "ary21tPAdfEWqmGIkg2KjgAAApE"]
[Wed Sep 30 01:14:30.881472 2026] [security2:error] [pid 276059:tid 276314] [client 20.194.96.176:59437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.96.194.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.hamaraquetta.com"] [uri "/bgbagbcw.php"] [unique_id "ary21ntqdHBwD77138fP7wAAAgY"]
[Wed Sep 30 01:14:30.887980 2026] [security2:error] [pid 276620:tid 276830] [client 4.232.144.219:53337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.144.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dobelandscapeservices.com"] [uri "/ws86.php"] [unique_id "ary21tPAdfEWqmGIkg2KkAAAAls"]
[Wed Sep 30 01:14:30.896195 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:10949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.896496 2026] [access_compat:error] [pid 276620:tid 276770] [client 216.73.216.46:10949] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3
[Wed Sep 30 01:14:30.907248 2026] [security2:error] [pid 276059:tid 276312] [client 4.196.65.241:58993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.65.196.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1583"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "centuryslateandcopper.com"] [uri "/un.php"] [unique_id "ary21ntqdHBwD77138fP8AAAAgQ"]
[Wed Sep 30 01:14:30.988242 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php4
[Wed Sep 30 01:14:30.988677 2026] [access_compat:error] [pid 276059:tid 276264] [client 216.73.216.46:40738] AH01797: client denied by server configuration: /home3/homscoke/public_html/index.php3

Upload File

New Folder

New File

Add WordPress Admin

cPanel Password Reset

Edit: error_log